last executing test programs:

11m28.158910266s ago: executing program 32 (id=38):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000200))
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x1000000)
r1 = dup2(r0, r0)
ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000400)={0x0, 0x0, 0x0, &(0x7f0000000300)=""/107, 0x0, 0x4000})
write$vhost_msg_v2(r1, &(0x7f0000000240)={0x2, 0x0, {&(0x7f0000000140)=""/128, 0x80, 0x0, 0x1, 0x2}}, 0x48)
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000040)=0x1)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r2, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/65, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000003900))
ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000400)=""/185, &(0x7f0000000140)=""/79, 0x9000})
ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000380)=0x1)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f0000000040)={@my=0x1})
ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, &(0x7f0000000100))
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r3, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10)
ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1)
r4 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'sit0\x00', <r5=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x40}, 0x7, r5})
setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000180)={@remote, r5}, 0x14)
r6 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x40000, 0x0)
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r6, 0x7040, 0x0)
r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00')
pwritev(r7, &(0x7f0000000240)=[{&(0x7f0000000000)='0', 0x1}, {&(0x7f0000000080)="073c463470a7628265f4", 0xa}, {0x0}, {0x0}, {0x0}], 0x5, 0x0, 0x0)
read$FUSE(r7, &(0x7f000000e240)={0x2020}, 0x2020)

10m44.969245014s ago: executing program 33 (id=120):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, 0x0, 0x0)
keyctl$read(0xb, 0x0, 0x0, 0x0)
r2 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="01000000030000000080000001"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r3, &(0x7f00000005c0), 0x0}, 0x20)
r4 = dup(r2)
write$UHID_INPUT(r4, &(0x7f0000001040)={0xa, {"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", 0x1025}}, 0x1006)
mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000540)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r5}, 0x10)
r6 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r6, 0xc4c85512, &(0x7f0000000280)={{0x8, 0x61b831ff7a872184, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x9, 0x4, 0x0, 0x4, 0x2b, 0x100000001, 0x4, 0x0, 0x0, 0xffffffffbfffffff, 0x0, 0x0, 0x0, 0x3, 0x15fb, 0x3, 0x401, 0x0, 0xee, 0x0, 0x0, 0xfffffffffffffffe, 0x44, 0x0, 0x7f, 0x100200000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0xc, 0x9, 0x1000, 0x0, 0x3, 0x20, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7, 0x10000, 0x7785, 0xfffffffffffff56c, 0x4, 0x4, 0x8, 0x6, 0x2, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x8, 0x0, 0xfffffffffffffffe, 0x0, 0x7fffffff, 0x2, 0xfffffffffffffffe, 0x0, 0x0, 0x4, 0x80000000000000, 0x800000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x2000, 0x0, 0x10000000000000, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x2, 0x1, 0x0, 0x100, 0x1, 0xfffffffffffffffd, 0x0, 0x0, 0x200000000, 0x2, 0x10, 0x0, 0x3, 0x2, 0x0, 0x0, 0x40000000c0c0, 0x80040, 0x1, 0xfffffffffffffffe, 0x0, 0x4, 0x0, 0x3, 0x0, 0xffffffffffeffffc, 0x0, 0x1, 0x80000001, 0x0, 0x0, 0x9, 0xb, 0x0, 0x0, 0x0, 0x80000000, 0x20000000, 0x4, 0x80]})
lsm_get_self_attr(0x64, 0x0, &(0x7f0000000100), 0x1)

10m10.216585932s ago: executing program 34 (id=226):
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x6, @loopback, 0x0, 0x4, 'wrr\x00'}, 0x2c)
sendmmsg$sock(r0, &(0x7f0000000840)=[{{&(0x7f0000000640)=@tipc=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x80, 0x0, 0x0, &(0x7f0000000a80)=[@mark={{0x14, 0x1, 0x24, 0x4}}], 0x18}}], 0x1, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000bc0)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x9c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x70, 0x3, 0x0, 0x1, [{0x6c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x60, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x10}]}}}, {0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x8000}]}}}, {0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x120}}, 0x0)
open(&(0x7f0000000040)='./file0\x00', 0x101, 0x7)
sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000002f40)=ANY=[@ANYBLOB="40000000210a010800000000000000000a0000010900020073797a31000000000900010073797a31000000001400038010"], 0x40}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000)

9m3.808645754s ago: executing program 7 (id=343):
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x56e, 0x19b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0xfd, {0x9, 0x21, 0x0, 0x1, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x2, 0x0, 0x9}}}}}]}}]}}, 0x0)
syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000280)={[{@nobarrier}, {@gid}, {@creator={'creator', 0x3d, "cf44eee4"}}, {@creator={'creator', 0x3d, "64eb8ba9"}}, {@nodecompose}, {@umask}, {@uid}, {@nodecompose}]}, 0x3, 0x6a4, &(0x7f0000001b40)="$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")
openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x20)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r1, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
socket$packet(0x11, 0x3, 0x300)
socket$nl_generic(0x10, 0x3, 0x10)
sched_setaffinity(0x0, 0xfffffc43, &(0x7f00000000c0)=0x40000800045)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r4, 0x1, 0x70bd2c, 0xfffffffe, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0x241}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000)

9m1.204640868s ago: executing program 7 (id=349):
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
sched_setaffinity(0x0, 0xfffffffffffffe02, &(0x7f00000002c0)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000000)='./file0\x00', 0x2000898, &(0x7f0000000300)={[], [{@fowner_lt}, {@euid_gt}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@fsuuid={'fsuuid', 0x3d, {[0x31, 0x63, 0x66, 0x31, 0x62, 0x64, 0x64, 0x65], 0x2d, [0x61, 0x32, 0x0, 0x63], 0x2d, [0x0, 0x62, 0x33, 0x62], 0x2d, [0x38, 0x31, 0x32, 0x36], 0x2d, [0x36, 0x65, 0x36, 0x37, 0x35, 0x34, 0x39, 0x32]}}}]}, 0x1, 0x55d3, &(0x7f0000010180)="$eJzs3X9snHUdB/DnruvWFdeWMOuArGwDJFtEOjdNCCR2bNNpYTnohE3I+gNH0DmpY8NVCCtinIERijWMwQoLbn9MEYqucyiJBewqul8IJtNFBbPFNWOkOBExYZje3XO7e25tj4kU4fVa2uf53uf5fu97T54/7n3r97kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgiD447E7pt12b+34bdfW3nfO1WeuebBr8bHzb91SuemhbWP2tj/3tSOVK1sOL5l/0/2JxkfW9XV1BEEs2S+W7l9/ybwrrqurv6wkHLDh8iAIbgiCiorBnjLV9cVUY3TOg0EQVOT+NAZBUBwZoCi9nZveiecMkNldnj/gkK6Z2N0yZdzchq0rOjc8u/TSzfkvnQElIz2BkZK+rg4cv5Zqkr/jkSMy7axLL5Zziab6Ry+4d+VFAABvS3Uiucm8HU2/xc20W6P1SLsm0m6LtMN3CG3ZjZORGnf0YPOcFK2P0DxrLk9uxgw6z0g9ff4z7US0f6QdiRpvY565hzakxi0ZbJ7NkfpIzRMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgveS862bU7dn98Mtfbfnt7x5+/VuvfvLwyoZb+rvqLli76PH27d/725HKlS2Hl8y/6f5E4yPr+ro6gqAi2S+W6h57pjIen9Ffu/Wxe3qq6z+yYHVRetxwOyrr4GBfuHNheRA0ZVUOhMP2lQVBIreQbAbr8wtfTu58LiwAAADwfnJ68nc8007FweKcdiyZJmPJf6FUWLxmYnfLlHFzG7au6Nzw7NJLN5/8eIlBxqs54XiZdsXxn1hWMA7jb3S84/Xw0OV54wwtOmI0z596tG9qU+31JVfsOm/B9Fl1my8OfjLtUPuyhfeNf3Hc4r1t1Xn5v2Lo/B+eOfkfAACA/4b8Hx1naMPl/6bq8okHpny36LFrK48dmvfAzzt6n38y/lBxf9fTL40ee9svV+Xl/0k5T5mX/8MZh/k/Hpxc/gcAAID3sv91/q/JG2dow+X/X+zb9IV/r/jG5EPT/7X9had/f+GWyWXzXiudfv2bT8x/pX5n65/y8n91Yfl/VPa0wwd3hhNeWh4E1YWfVAAAACBH+P/uxz9aCPN66pODaF6/5K7SJ3e+se7G+BnN/zhtUd/Mqi/tWvX19Rtj/es71m5fNmd5Xv6vKSz/F787LxcAAAAowG+23XJ31VcWb9m8++Ds7XcmNo2+aM6ru3/acWXvy0cTRc/f3JuX/xOF5f8xI/NyAAAAgBN4auyE5w4+evCGWbvWjN+zsnX241P3rlrwwD9n/f2yl/58bOP5ZXn5v6Gw/F+a3qZXPqQ67Qj/CqG9PAhKBnaaU4XeoO3TmQIAAADwDglzemPj2p4d60bNfO3MQz9cvXzZr/Zc/O27NlTdvP/XlbeffXRfz415+b956Pv/h3c6CNf/59z/L2/9f1Yhdde/i9wYAAAAgA+Yt9464Xr+8Pb4qW8uGOz79wtd///x0/ePaW86t2JSfGvVzCc+3HvlmqrXF7Zf8Kltt77x0VjZXz+Tl/9bC8v/Rdnbd/L7/wAAAOAk/L99/9+ivHGGNtz9/3vHPnPW6s/f84Oab5Y+dfabdzd9p+3AtHM2TT3tY0Xnds2e8Yfv5+X/tsLyf7g9JfvldYfn5/byIJgwsJO+m+CWcLpLI4XO4qxC6sRHetSFPdKFzjFZhaTmSI9PlAfB5IGd1kjh1LDQFin0l6ULGyOFPWEhfT1kCo9GCt3hlXZvWXq60cLPwkJ6gUVnuILilMySiEiPo4P1GCicsMf+zJMDAAB8oIThOZ1li3ObQTTKdsaGO6B0uAPiwx1QNNwBoyIHRA8c7PGgIbcQPv7jOV1LXrn6wdqeq+qPnDFr9+I7Wj/UvbBnxxd/1H3WX656YcFn8/L/xsLyf3gqRqc2g63/D8L1/+nvNcys/28ICxWRQmdYSETvGJAInyMVdu8Mn6Mike7RPyFTAAAAgPe18HOBohGeBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAf9u49TqrqThD46aYfdNM0HTFgjAmoEdFdmqYJCSKOROKuRhebSFbHDKERGu3QBhRwhZgVX+Mq0cWoMTGywY+jJg6r+CDqxAfREZOMSnzPis9BJ7LqEDRqHCfLfrpvnaLqVhddCCjtfL9/dJ2q33neenSde2+dCwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/z5cvPSuhjcG/p9v/ep761773uem/nbqIZt3+8sNde8MOfPJzQcNrrvxzUELFr7eNun0q1qmr7hyw6plIbR0lStLipc9MKi8fPQfjrr95ksfbJo2eMpZVZl6M/HQr/NPeebOebHVV/qHcEdZCBXpwIi6JFCZuV8X69urLoRPhS2BbIm22qREuuHwYE0Iy8OWQLaqu2pCqMsJTHn8/vsu7kxcXhPCfiGE6nQbz1cnbdSkA8OqkkBtOjCnIgm8tzmRDdxZngRgW1R192B8M2Rf9Ctb8jM0dF9Zkddf5Yft3C4mPbw+MdFQPN+bX9nJncpR8Fy2bNfT1u1Lgx2u4O2x2rutF7zbCrbzUk9b7hepzDeUzVtC1aF8Ztus6Qs65sdHykNjY59iNe2k53ndpjNnbEu617wOYwcadsjr8N7aSfUXvzXx4FUn/unU/eavnbq93Xw2Z5Pmpne26pB5zfWa5zGa8PF9nmzensI71q7+tBV8SxrqS1cI4dh/+3TZ03Ne3HPj+68cP/GW5y+4YtrCK6dMfGbQL8f+w1W73THtkoL5f8PW5//x5Rxvy/Nyx1Y/qE/m5vGRupjYWJ/MzQEAAKDX6A17Tb88+pUXT37gjsUvrDim4rvjfn3CHvUVi77fcezuq8Z/9qLL2h/drWD+n9lt8ti/JN0udvw/HvKvyx3t6hAmdCXOHRDCHl2PJ4Gfx+6cOCCEvbtSLfmBr6QCq0P4TFfigGxVqRJ9Y4mhqcDv6zOBCanAmhhoSQWui4GlqcB5MbAyFZgRA6tTgcNiILTnj+PA+sw4Sg7UxEBrshFXxrMQ3q6PraW21bpsVQAAADtIZjZbmX8351yH7c0Qp5cra3rKEM/ALpqhOlVDegabnVYVraGipxrKe6ohO+7FWx9+Qc1l6ZoXpTIUnIZRlp/hgyHfKR8wcZ8f3X7diOubX5j43XfGHvvFP7/xzuoD/vF/3nnm/KsPLJj/N239+H91N0MsKzj+H8Lkrr8xd3km0pGNt7bkZQAAAAC2w+WPLHvi2gOP+Je7X7r7ts9ddW356iu+/v9e3njuPqOOGV7W92+/vbJg/j+htPP/4z6RPjmZw8NxN8TsASE05QeSag8uDCRHvftlAgAAANAbZI/HZ4+Ft2duk1O00/Ppwvwt25g/Hvif0G3+Szb99TNfuOqJ4xcO23fDpf/j9PfLPj32sd2OXjvy0Tc/P+zvG/oWnv/fUtr6f7X5t0kn1sReXDYghL45gYdiLzsDXYbGwEuH5gcy418TN8CSWFXmxIRsVUtiidYYaEoFlhcr8btsiT3yA5knK9v4udlxtGdK5AQAAADgIxd3B8Tj8vH8/zsnH/i5Awa9OOaFz9+18NUJy447ufaH+964+2sDOiaN+dKEQ776dMH8v3Xbzv/vmgcXnN7f0S+EkRUh9En/MODh2mRhwBioK8sk7qlN6uqTrurs2hDGdw4sXdXLmfX/K9JrDD5ek1QVA3vs87NNwzoT19aEMDI38PQ3rxnTmZifCmQb/0ZNCEM6R5tufFXfpPHKdONX9g3h8zmBbFUn9g2hs7GqdFX3V2euY5Cu6ubqEAbmBLJVfak6hIUBgF4q/iudmfvgvIWLZk/v6Gg7bScm4j78mjCrvaOtccacjpnVRfo0M9XnvGWMzi4cU6lXvnkus0TR1CG3DC8lnf2dYFNuW5n9+AUnDmbux+9ClV3jbK7Muzs6PeTh+xY2EXK+SRUbcvlOHnJtbiVbnsSC+mP+qtAv9F0wr+20xjOmz59/2qjkb6nZm5O/8TBTsq1GpbdVbXd9K+HlUXS1rJQPu632z61k5PxT5o6ct3DRiPZTpp/UdlLbd5rHjmpuHvPlsWOaR3aOqin528NQ9++u6tRQN19T4rh24FD3rMip5KP41JCQkOhtielLy86ZMO0393xrrzWnnHHCXn+318wRJ/zVJb+de3zjIZN/fc1fri2Y/8/d+vw/furET/7M+gzFjv83xMP8yeNbDvO3xsDyUo//NxQ7mp89MWBoKrA4BhY7zA8AAMAnQ9wdGfdmxr3SV9f94x2Hz5xxyHu/Om7KFX8zdtzJZ6zfr+GCK45e+p/Wv730p39M1k7Mnf8vLu33/zto/f/s0vVfK7bM/wGxRFOx9f/Ty/xn1/9fXGz9//Qy/9n1/5d/DOv/L8gGUpvkbev/AwAAnwQf3fr/PS7vn75AQEGGHpf3T18goCBDwTL+6QylXiCgoGBP6//P6fiL2kGXzBl36Ii5P37ovn2WDrz5c89N/M2+yw4acdeqG98ddVPB8f+lpc3/LdwPAAAAu44HftX32xe8M+yeJx967/Cyi3638fpj/6rtwEP+MLD5pMlH1nz/+n8tmP8vL23+/9Gv/xeKnf8/tFigpdjCgNb/AwAAoJcqtv7fDQNfGrp6/ojrHvnFGze+2PrLmeNf/Q9Lf/DF6cOabliz7rcNM9YXzP9Xljb/j6ddlOfljr35oD5Z0y6k17TbWJ/9yQAAAAD0DuWhsbGyxLx5K6N+pXisJ+syS4FuLZ3rqbsH3beg/IHLy6o3/uDCaYc0nnX06XMOP3/992uf+Ent1Mbq0wrm/6tLm//n/S7j3tpJ9Re/NfHgD1ad+KdT95u/duqW4/8AAADAzlPqfgkAAAAAAAAAAAAAAODj92TrsoPeH3Xk6zP3HvVv3zj6+R8s+ew3H/rpVX8+/ReH3b13++ZhUwp+/x8md5Ur9vv/eN2/+PuC3fNyx1Z7Xv8vc3/KUTct7Fqy8OH6EPbNDcw+Z/anQuba/PvnBu6besDgzsQ56RJ3v3DYq52JaenAESN2e7czMT4VaI2LJH4mHYhXVXy3fyoQl1d8Ih2I22NlOlCVCVzYPxlHWXpbbahLtlVZels9WxfCgJxAdlvdUZe0UZYe4OWpQHaAp6YDcYCTMoHydK9u6pf0KgbqYtGf9kt6BQDALit+C6wMs9o72priV/h4u2dF/m2Ut2TZ2YXVlrps2XOZpcmmDrlleCnpPunvoluuNV4ZqjuHMKrg62pulrKuUe6YWnrYdLsXGfLWVnsLOc9IT7Z101UVH1FNMqLGGXM6Zlb2OPDRPWdprugxy6iCyU5ulvKuTVpCLSX0pYQRlbhtSuhyvF8eGhv7pHKNi8GGkKenV0Spv9fPXeev2KsgN8/f1Fx1UZ/Bfd771/HnP3D/gMqOkye3nb/nI/80cNTMH//w/tYrf18w/28obf5fnTuudzMXA1gcr6x38IAQWkscEQAAAHzy/e+zVtx6/Jw1G2atrnjmscdmlx9zfOXmM28/c9H5z96z5IgL/+MN2xtfWfbkpuNf33TGX7/+ky9e/eAZLx4244zbJ607ZH1b9XXf/YsVJw8pmP8PLW3+H/dgZQ4FJ3s7Vsfr/587IISuS+s3JIGfx+GeOCCEvbtSLbFEckH9r8USTUng53GHyQGxRGtLflV9Y2BlKvD7+kxgdSqwJgYyeyl+FjK7ci6tD2FMV2pyfom5sURDKnBMDAxNBRpjoCkV6B8DE1KBN/pnAi2pwD/EQGjP31a39c9sKwAAgG2RmWdV5t8N6XneyoqeMpT1lKG2pwzlPWWo7ilDsVHE+7fGDJWpk1fKcjJVpmutSdVSkCFeDH+b+1WQIfwuP2e6YEHT8fyD7PkGZfkZxv3w1taDvjbvx5su+NGjh3/pvMOXXvbWRUf2G3zZM/+3/ax+/TfVFsz/m0qb/9fm3yatr4nz/y3X/0sCD8XuXRZPHR8aAy8dmh/I7BhYEye7S7JVtWRKZCbtS2KJCTEwNBWYGwMTUoHWyZnA8sH5gcxMO9v4udnG2zMlcgIAAADwkYs7COJumjj/XzUuvL3X4e8173nZwLnjHn3o7K9Or9m9uuafxq9dNv6i6gf271sw/59Q2vw/ttcvt7HzYm9e6R/CHWVbepMNjKhLAnE/Rl38efxedSF8KmcHR7ZEW21SoirVcHiwJvmFelW6qrtqkjUG4v0pj99/38WdictrQtgvZ+9Lto3nq5M2atKBYVVJoDYdmFORBOKen2zgzvIkANstu1cwvqAyp7pkNXRfrsjr75NyTdD08Ar2gXaTr7vfXO0s1Zl9hlmZfapZ2/a0Ve+gbrF1BW+P1d5tveLdltLg3Zb7RSrzDWXzllB1KJ/ZNmv6go758ZHcX7IW2EnPc+6vVEtJ74DX4eIP39ueVac70JT6+Gjqvlz3r8OyWN29tZPqL35r4sGrTvzTqfvNXzu15G4UEX8ofPBNcw98Nmfz7mzVIfOa63WfJy0+T3rjv4GhnrYQwopzZz3x+D+/91zF+ub/9qWxK25+45EVPzno3lkjPrPhwi9sfPOdIwrm/y2lzf8rUrdd3o8bc96AEIbnbNyH4+afOCD5HMwJJJ+SAwsDySH39fVFPzkBAABgR8vu7sjuL2jP3CYnhKfnyYX5W7Yxf9xfMaHb/KX2e+CYv//eoZe/9o2vr9/zkoeXPbnuv7zx8lenHXrvpqdWrnqt+ehPP1Uw/2/d+vy/b6qbjv87/s9O4vh/t3b1XdF90w8s3q5d0QXVsVM4/t+tXf3d5vh/txz/d/y/O47/98Dx/27t6k9bwbekub50hRBaB1x7yy9rpw/vd+mZ35qx9hdPvd007vm6s4687X8dtiRcefZ9f87M/9/fvHlzMv+fW9r83/p/3S/al13/r7XY+n9zi63/t9j6fwAAwE5VZKG59DyvYPW+ggzp1fsKMvS4QGCPSwxa/2+b1/+rPWHRCS/Xv7n3lRNv+a+3TT/vuROOf2a/Ps8dd8tx14+8YviLX9hQcPx/cWnz//hy6Jfbem9Z/2/o5CJVLY2BuRYGBAAAYFdUbAcBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH6+V9y/57OYl+x50/TOfvv6wPy5fM2ufXx+4efSYExuHLxlYdtnf/vObgxYsfL1t0ulXtUxfceWGVctCaO8qV5YUL3tgUHn56D8cdfvNlz7YNG3wlLOqM/VWZm4/m5c7tvpBfQjLcx6pi4mN9Z13tgSmHHXTworOxMP1IeybG5h9zuxPdSauqw9h/9zAfVMPGNyZOCdd4u4XDnu1MzEtHThixG7vdibGZwJl6e5e3T/pblm6uxf3D2FATiDb3W/3z68q28Z/zgTK023cUJe0EQN1seiP6pI2YqAjlmjvG8LIihD6pKv6TXVSVZ90VX9XnVTVJ13Vf68OYXwIoSJd1QtVSVUV6ZGvrUqqioE99vnZpmGdieVVIYzMDTz9zWvGdCZOTQWyjX+9KoQhnS+ZdOO3ViaNV6Ybv7wyhM+HEKrSJf5YkZSoSpd4uSKEgTmBbOMnV4SwMPCJED98ZuY+OG/hotnTOzraTtuJiapMWzVhVntHW+OMOR0zq1N9KqYsJ7357A8/9uc2nTmj83bqkFuGl5KuyJSr7Opyc2Xe3dG7eu9jv2pzK9nyfBTUH/NXhX6h74J5bac1njF9/vzTRiV/S83enPztk4km22pUb9lW++dWMnL+KXNHzlu4aET7KdNPajup7TvNY0c1N4/58tgxzSM7R9WU/N0RQ73mox/qnhU5lXwUHwASEhK9LVGe9+nWtKt/kBd80d/S0cpQ3fUBXTCtyM1S1jXKHTHor3zIEX+Y7yk9jmhUwcShIEtzz1lGF0wmtmSpSbJ0fa8rmBzm1lTetUnj/fLQ2Nin2HZoyL+bu3nf3I7Nuy6z6UpNAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8f3bgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhR04FgAAAAAQ5m8dRs8GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHApAAD//6Cg2QM=")
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
creat(&(0x7f0000000580)='./file1\x00', 0x0)
fanotify_init(0xf00, 0x1)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
rmdir(&(0x7f0000000140)='./bus\x00')
openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x143042, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800f5170000000000139500000000eb7b0efd3bc45ee9f05563c5b85a00000000"], &(0x7f00000001c0)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000180)='contention_end\x00', r2}, 0x18)
mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0])
mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040))
chdir(&(0x7f0000000080)='./file0\x00')
setpgid(r1, r1)
setpgid(0x0, r1)
mount(0x0, &(0x7f0000000240)='./file1\x00', 0x0, 0x0, 0x0)
openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40100, 0x0)
open(&(0x7f0000000000)='.\x00', 0x0, 0x244)
sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)={0x74, 0x0, 0x100, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}]}, 0x74}, 0x1, 0x0, 0x0, 0x4040}, 0x8000)
syz_init_net_socket$ax25(0x3, 0x3, 0x1)

8m49.419749059s ago: executing program 7 (id=363):
mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x1, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000380)=ANY=[])
llistxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0xfffffeec)
syz_fuse_handle_req(r0, &(0x7f00000021c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b16413b6139c84d300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbd2d00900", 0x2000, &(0x7f00000041c0)={&(0x7f0000000140)={0x50, 0x0, 0x1000000000, {0x7, 0x2b, 0x0, 0x20, 0x0, 0xfffc, 0x8, 0x0, 0x0, 0x0, 0x10, 0x100}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r0, &(0x7f0000006300)="c1b0ad27d26172a2282808a63b3666a169a53df2d890fb5a415426c6ff9bb87f8efb6ea14cfe80e636e7de7e2b18b78f80a1e4c84f02ecfed07902492c1d761451483d0b9c75d1bce9e4a0d1f8a9bb1a22b951653bbce82561c6ac0fc2eaeb3fcd942b78b746455913dbea328ce1088f52d7cb35aefac657784f2cdd576c15bb8db65205430d6a1cd094d749955b73eacfddece7cb849c1554eebb88d05d597b840ebac50de06d2efcc88cb3bbdaf6388332964078936c035bd3e3f56e545ba683f4523df2d6034d5086890db8e3922638a6196fe0a1a026ef632f8c6c6ac3e66228e9c15abaa010f956968240f31f97ef8da03d671ad3d48e135c880c8e096e0f39cdaf38d0203a20362c985b38cefac182d22fb4b709c8c1b5dea4eb5e6dde7af7793b120ba2eadcb892c53de7ce0ab712ef33721121fcf841fa1d35f7a2e9ff1b054adf64e6e2261e015c9a0dd0b8d8fd363ae1bd8ffc28d41b681ece5c4568cf6adf2815b618e8308dbd1c2e664c178a4504e0a362291ac5dfa1115709d42fe8bfc92f109d60c12d43fc204a8f3458b199adab770d51eacae9eeaa4cd1569f05dde2f71e2819dc64c2c62441e4cf281acc54f88741ed1329343e0dbfb356ab7fd3732a93b2a15fac46ef120745cd49b7e65421595fd81fabaee29a28bab508c95fa74d8884c4edd6bdea3c71e8d230c8e666aeaadf6f4c67846ad43a3f458123508c77df0b13c25b3414220600e35dd2d44bbd78d7902f767dfcfb6001674106a6a952f3a47e78758893cae3bfff8d053842642c3f9eb512e12ef09313b2a823e1c31dd45b236824b057992101016204d48e1d3f7f42503b20f549371f92688624089b5460b724307b569f8570c5eba6c243702370f76c0ef78d59d5aef447852c9102618a9811f8440abac9e78a7613b00ecc1b0f6dd9c477701a975fe07c95bc35237d33f7368b9be2986566f310f16a189fe0438ae0887384b10f80b2635493839b3de154c8fe5bc020164e062d77b4826df0eb2af18c8a9e5b28c3d2849bbd29628c76306cf7f4433e0d128a93f5b12a2bea9ed9b3a85e8e4896ec6ce0ea8ef4471cd9db37d91b3f45cb72c2781864c820e4e267e6a650a3687eac83d7b010c621c1c52717b98335df8e87390e5a76874bf31993e1a801f4fe8dc9222877c693fc043d38f54b9422210f2a023f496149def0a9e936c4adbce6a290113b2fb40c5e3e79a0797cd37c2e1731e0143bb5d8bfa51c226d02d567b50c63ebbc64e1d44e120e4cb0fed4347528df660736b99ea3235e83da0c167a015cb3e7a57c5e9072b2fd358cdb20127deb4f37deb2d09ef2b2795ccb52f3bab0f5abcfc37bd0932e55f92cba6e468fb3175b983ca8597327fe67fc1aa89f6d1829ea7eeeec41e3920a51ac583489abe8eb5c1c841d4969a06fde61fa56e59f8f0f64b19071d8a84853047a3d766e82cf2c651586ac3f877c8909ed056b1828fff9211e414b8b8f5cd38542132d9562abae4bf63bbd0532208199e4d2c59b1e5d9a438f026d01c40fd0b8076a9e933e65e65ff9ea0fde753edc738aa079b6695c6055ac2690d6d928e9046c446bd9d0c3e685eee30f7a718436cfa917f678cfdc2f7f72e7bbe508cc64239597f5969f4a750cf1f0f5a646018eb1c35f912cc4c888da888ae8fad773fe47c6a78a63af9b035e15eb790a7ccff2f44d70acd069499d7db8bd02bb6bf252699d8d46a8923f21ba967585be41b79e4d653ab2fba065610ca31e683a5cd5b29678f45eb2593700b361919efb0dffa1782b70d0a4a34247cbd9b240536ce6d46615ec96387e05f60375a2fb8977898cdee503b1fa20924fdec96a1930dac55dddd2eb612c383e4eff4e95f6cdf88047fe76ce9dcbf18a6f81d091f8e767be97b105dbc709d92c6f25d785b4972cafaea96bafc82cdbd4525340e37903259117b8ab63bbb9fb34cf23cdc48b59f7bd0b50ea12950e424e706a5d9ef4d69b334a5de6629b2b585d64688dcd5d4230fbe6f8043e99e9942d13973568b789a34a3ec7a70ff4b34ed4f28a1ad2eb31d8c81ce77d8b554749522c149944a08669ba48926dca4429fe817a7d91f373db7a100f74d6a062ad5e9ea20c77fb575a0c54c5eafd640ee770c844c813d9d807dd80333571840bd8b4b6eae859ddef2f6dbffcd7040691e2228f927faa8c82de451e60303267df50e973b0c6c7f0738eb8cc82b899534a41ae37ede81b72c38d57d82c59f87a8acf456229cced3bd6da6003d1f456ab5849b4dce78b05eddb6188d69cf8ac5bc16799e99021b5485d5ce080b328e7e11e4bfc083a68d9ec22007fae9b04bd167ce4b8f455ed6419501ab6ca434d6418a8f8baf09a66a51ba426f61ccc2f30acfeb988f3a1f36bface215200b3ed62a3d2d74f7b8c0c8244472cc77fbec96721c55d10ae299fb1aba8c45ac1cc882ce964250b30d81bf8a8be110b9f8af1aa644313052e00ed644dd87ca7df34a50ccc3602f7d3ab93fd6ca19d5b9a06894a8f91d3aff8a3cd52fcd3af7adcc7f9ddfce8bb74b714ffd4d2e76cfe60b44a47b1d7fb2bbf0c4a3dac47edd09888fdbe781071900a2e473b4daeb545561ae8f34b4eeaa60f44900684ac1f620a6fa54e562de40645158a5d8c36e3d9027bfc65274ffc8bfca8c03d464047485c3db1e54294406d90ed05c3b0d2d4e66d5e992b99dc3ede4be703d2f31dfdc5dc8c6ef01f43b42306f4a4825be7499afdc8ba1c02e3998329726af89e030be58ecdd20bf8b5d7e5f81878791f92fbd000aa1f9c2bd0aeaba2cecdeffb476dbedf37692d23dac191dfd2f7633d04a0826512b79bc1f8a6737b9b36baec7f5a4555fc7054458f9c7169968ebac29009778dd739e3a5b6cb2f0a6ae0fcb4f545e89a61ad993e42dfa7a283bd9f3d2eac7797c345843244320da0ccad437458512747f321158cdad67ca63d9e3eb187c2fee00d5f9e20266e103317a54293a7ba090b40174d0232bfb2ebd8576adf8c8a9f963fe12a592fe19af02d6f684dbba4a2d6d98003f60a728b1e7b524cbf248666a88d6f19c4937db31e56b4f5373f8aa16926f7ec75da8a76cc340376958175d6f23585e97bee88164cd2e2df5835474c6cf21f65754b98766ab47857d3008be18186792ecc604fc17519cec1d67c727c84299201ba77ccb7e60aa7b912fcc61b5ae4f580a90892b6e7cc3610b357ba6ac5b377cf43bab2970ee240525e127676115d018889e3e2092b7a39ddb57c0546bb17ec2443e1bdc5a763c9ce5f9b528ed14134694802886d4420f02ee9574f62e6bcc456028663f0b1399d86599fe0047d93a2eb162d2fa13385192bd4221e41bcc61511e43103550f958ba6dfd5e1b855b82a543e8e0766678f1cdd1214a399aeef014150baba0556212132dbf135319868b9ff93adf51eefa64be829362388e2659101a3ec85e0bb5119423b60819aba5c3b8823b5e37f469783db165ff4cd2cd7306f163c0e4ac8695747b571d7941e2bf1be981a48e71f336bbcc20ccddfae7bdc7f94ab62dfda1d552bdef955189eeadc9bd710c2a3a8c9d414c45d2b99ab8b4e92f8fcf2b83380d079b3dd3ddb0978dadf5569f70444e48f26d32ae410a88bd7201a84b4e3b44a1764ad6428a8148907e86bb0a09cfc1191eda8202d3160c8a4716de885ee80fbbbb2278fcbcbfd1c76b1d55ccbb9ed228de215f5104a9a0b4d647b1fa4bc786c68bee29f5229ab9cc3ca0729199eb7bd2ec9e9be7d833b13586882ea069e2aac144f22442244655c33759aa1e101f87836ad0cb16ddc6e36a66a8755acd52b4e446c0e974756a087a725a95ef59121d39f1c75fa136d7212c71a14ad5579be27c1dd0af8f9e4fb9b407e2bbbdee423486c4d5127fcf5107177b1e21e81f1758f4c304f40c0eb35627113be1e4dcb06d209ca06696f214ca260721c4ce7b4d82db24f024c74786c8d6ba7c73f495eab53e545c44b53a78f82d0aedfe04b798bbe125c8622eb5a2a764cae9c8d01380d464bd2dc7a1b0eb2bc431ae432ccfa81f2913af53bd714fe97d958c928534aa2f7caff6cd926daad3e6ed4c44bd3dd3e1a3fe0e12e8423a79c93d7475e29d036b2491e3ae7e50e4098c107abc4eec102808c8d643c4d4ec5707ca06a0b584bbf1bdbfda771a708002ab235fbfe91923b95fe8f4decb6ea6f1022bd98b6f7df5b457a198f2dd8031db5998c56acb30526ac7a7ef157b269259d6606a91b13bc09db05d4f1ae91a8d4fddd9038e5c03506447a483f8759945ec9700b5ed83c7097c177756773c8a250c76415ff43ff091d2015452b8803297e882a832700cb2d4c5c09c9aff61aa04f9cfc81e3d68911c7029a9ab79bdf72d2814068c828c86aadf77bd56953019ad507f5e059ff6ddb5562722acb3193baf88f571a2aa6d575c35506569720d4829f4d29d155bbe186cb72707eddaab43052871ec43dbc5018c1ce41120bc53f2cae7ebcae5bfb42dd1a4d17f782638ffa9747802cb74c61ebd2936d35ae926dae166ae2ea88effad9467bcd028d733da52576db8892c7b77fb5c97814845e3651f5bd759edd3c72704cc3035cb9e15684a0e17fa0b5704a6ac35576643d6fdbee7c7d05e9f0b0ba3e691e2a281913f2f705077277311ae7b8ae3cf287faac63c8cb0534f8610aae68bfdc2e860dafca682af8ec0d73f5d521dcbd3c8b403ef5763c46a23f307c798a550d3a14c1a9db153c8f1b273cc2bbad5a3450ebc2b391f0e44a3223864a193df9fa27ca15293e36fd461bb4ffa6ca73ae5f2d79933b53e05c59017367125aaea376a509a20c9840100af4f1119f1a8cdab0b835c9315144b22335fda48835dbd7d32ac735f71f69a3fb2c593b5c344f23661ff3729e7142b6da61645f8446e2de64cd637186a66c45efc3ab13db3a9cd0117a3adbb44deae4944a9fd466a4f69af5a959430981deed8994bdfd060da92395e23e449eef961d61e82a65a4314ceb4fe3daa08bbda05ef91d70f549fb7959441cd19ac01cf221b83d6e75c3ad224eadcc3f74b097d2d9edc2ccae58ea09ad3af5bdb3e6b3e81ec38542b927fbfcce573b2ee2f2a71b14a24c4b5a443983665be22bc25251af121920540dfcf8c1f2d57d8f721b48efb9555690fbc3bab0fe71708f3edecc8ffd615b1af7feb0e893c3a458019764d16887dc2973333fa70aac3f5400bcace8dd0c8cd8c79bb1e28e744b6fd1a9a424c5f38cfe256df3e3d252a8941a3691f57098dc8658a93889b29690eb2406586ad10df48c0a34f90a37e5ba6583450946b96fc01867f462050f419058e490e5a0720258885b247f65c4db08b41f8236305daa37f0b83fe327f73a8d65a1d49986de9d8ea076c69003df5984926d0e39d30a41e4a660ef2242f42747a944d7664169fd41d0352d4362ebc6c2519dab028d904e8ca00921c936cdb197ae9f096a53c99d643ab30492be5144bb799dbde12499198c3cfb1483a2a29083fb3fb54957b68590526ef4b5a7fde45c773cd5e414f4ee4db79ba92c7a8c2cf77d3e0847f788ea6fcf10cd208ca5d04ee496f70ea0170bc60da6edbd95b444c100fddbd2e878f934c89b82480b16df600d236299886ff71612493eaaedddfa1dbebe596c8e3b8b4cdc2d231ce7e8df0f242677e6b5c3d2815b9e65e29c80ddee5c711c861950ae60d1b882803cb6c776598936d498c3a800fd1091005638efa23dab3eecd92c8a03734dec8f078e172d000313164f613f02ee24bda86e67adbcf618137a7ec3cdecf7829a8bf2546f62235d92c14ad5b39c1536d923dd579520055b1f89ef17240b89a616caeccbaff0db4d8fa087b5b2c7cadfe4507e0d351f5b045a5e401db68a8186f78edce6be621dbc5ba76b0ff3f406161b170354ca24d128d3a8bd02b7bafc1085b3dab482eaab63f1f165bb0d2d28f70bc9eee4e1fe31d73d12224363562152df7123f1977083534f8ae502984d41c593433be1936ed3296c5153dec58811d603efa95e4d895b9c8ae96af097a644dbdd0bb0aa8d3711bb8b494f3da0fcf48ede0ced49c031ee191e056426dd86276d69640fb1013747022d5b998b4fa7256a0474d2a9e183bd733d335d7208105b1c8676419d1f0252065c7de75c55cb0d221dc8e0532112403c215933ee84e654ebe4a09b34e4c747b34232344c2d3bf83ab53ee7b85f4a3f88914fe79a4f15c4c98a3ec126591591b0e6167e2544523e9070e830d792c78c693d2e6981015dea70a83982042d67a7f5229d106851c32933597e03ca171bc27c2a61380b8e58c41dd9bb808b4b308ab5ce45ba022048e02d89ca1a329f5a9cefb861ab3cd0a05236d58113b47592b0389ca6416b92ebbb367a3a41203d0baba90e8046412b7c23bb027e7cd656cbc864e38272545f66b712fb6ab080f972cd09c92c615a04ada2e24c74c1320ac02fc9ec077e5d5ba621aab5747bee120f5aaa9cb6ca91a162f06415f152cdc79f4117e0cc6fe9bfe53e7e396d5f21ad4328caec1141baddb16a7305ba49bd427e835dc23baae24e559ed66c215662ab3d517d87daf6dc4d2b4c8a3a0c77d65a9df67e756b7b719dc262b15891ccd9545919a5c63577be273276fc39df50dd9388e09fe3bcf1366df9df85fc9b8ef26651c439b76d73c40566fa035736d598ea1d77e1051a785d1717fedae7c687307b277e195555fa6ccaea28c57e07d84f51fb5ef64df87f62c651264ac4b268d116924f0ce008b6355f9901d74d7e8f0b440f337e51cb83fefc278da96edc32fec1012eb955493d8081885ec3dbe94e927f2b490b1bec6fc4b125008153706559a38e147e54d20917ab9d6bb5edf0550f5de539c7fbef949019b339f454be50a056223ccb014bbc078f04c01c8aea18ec58befeb4143c4fe2b6d23f487ff30309ef3098a2632761876876c2073b7cd3589af3407ed921654683739551fe0cb65959181033b2d2de8482f9dfe9279a2febdba75f7523ae92cd89345494c41a3371f0d4c501f817aa751dc2e4c42597cf72baad04076cebbaa100fea0b0423eee35e32aa60831edb4c772dbe08918a9ede0450dd76430d47b3ebe097b99adaedf6b17dd649c25b77a81c0b1c1cf8447b69638be8872a9f17007f988cc5a555048a727078b5de08ad71156c0446764ef687e2f4bb6fcfe104c5dc862b5e78df61beeec1b1a026dc7283f65035cd5026624daec53c7b025953d9c0266d3e6f02f11931a088e47484230c00c3d6f3b72d095a66b1f87204e739f1b6d4716bb863b6b125e26c7c8e07596538f59b48cbd41250eca1efa85a9e185bc2d8a20787cb66be568f59ddc34a3b207a874d7aa4351da7df89a2ff1ff22bb9d69c177195686bcdc2f04724c8764696f7ef4a75a4e0dd875f07431883da3f9f9cbbc9950e57cfa7bb00b2b8ce162c807cc4d88dabdb91549d2d9a91b74ad5e518ad58c391be582423a5fb29e9aa792a2703505b578fd8c73f4f77c485916ede77a9f36be6a12391de7fdf73fdf1db6766ef38c23902be933c49ee8917858e8ee29559a2c2dec20e4a5ad650c52f97d1648f12733ef65466ce94b1268fbec2aef918c4d20886a373b6d3b5fa8b9dcca9c35033e2165803b55a34d87e012cb402ce79ae6de18a4cf57a89ad8dc698bf321a4cb0af1a4d5cdea3da832e3b44f3a47798fda07fc229ac89dde9d4f57b2f8305999400e69d2c5c8caa1bc98ccc833ccbae1682c6993f131a03466303cbc294ba22add02036f73149b2db98688d6462041be3d274d5217c7a6891694af9e2a626f8ec4d4ccb8d4946ef18904ad47a84c7a619e87e773126f61e30d5ced5232e14b6abfb4d44ad05ee999d4d54d2c751cd7c5c9cacfac6f7d47b9f97560038b0baa5e635b553a84f3cbeb04632a9abeb6740ea4ce627f60cd5e6aa71a7e2c205bc90adeb3d61bcd66f17d1296e0cd383b1fc38ad4e2cfd05d4a4ee7371f756eeaa0525bd1673f0070f9f5ae099a29e4c325015d9372ae27635d2eab686be9dd96ec2c014acd8123fea35f97d7ecb5e9bc8359b397e8c0c3b90658aa9fabdc8f9f4bd565dd6e20fc871b658fc3e5944efa972d80303d7a66dfd159e904dbfd894009291ddafdfe3a5c502755b5a3dbd89792b8e5633d6f81d23b63f599fc1f29d679f64afa697260e1e6a10ec075355b58ed9007408a379d3c890bcdbea8604e51c0520be1d8c1f10b0a91d40d7ea9ef9ca2c283153b902700635ce65c3ab69cf3107e2017d8a72160f1794136185afd57c743af49d84fb535fef777e6c6f2a18a04fce9618778c832a608861bc7dd7eab315644f998595d07c5a41bac3e7270a871257802d26f42c454c797414e0d5de88ad611c5e3a05ce76df1348e26509f52b7b125eebe5ce1ec0245bf23c153d807ec87592f37ed65c8ac086be9d169cc31adab8da3fc2e2dad0519c0a68cd6cb202c99f5ee48a65c6ac27b0d489faf3083fed64ee5b078d0092d5939fcd01b2a71dbf007367fcc56e2f62904be4097fd7c639caa8a390a59be7a6e46aae93667a26654fe461c043bfec083f065726e66b5f12d9e7013500068de45a49a87dc2d0933287e7575c9f3914071c110c9a8f492c67fc48784aea5c22d1ce26f3281d6deb14da66d69ef6ec8e9080ef0d543bc6ce58b177c01ade4232688fb252d6f3e1ceba283d1d59ae82a15b464746df9bec915f00a184469b846a19a7968d9b38e476e3aef47ae41ed8a7d4d3cf744da190747ee3266ff689428d372545f28e40713615b7f886e1f294056a95f3e50e1afa211ca3a2f4a04535646bf9f4cb709a5ecf437807072cc8b77fbed51e01bfac16c73876a5d2d4916555f7084a772847356855c69c193d8db2d37d8c1a5e6adb2169ddd3bd5b7a2cbf9418d00f174295381d51733924bfdc46017250df28679d6b378cc316c67198b57634f46d5f9c169fde3715ddbeb792fd2c1c74a7f97101d373351037c73af2643b8952665eca13f874aace302f60681e12523b6de8f5c5750d4fb480fe0cad1546af7c88426319baafceccca2b49fe96d2ff446a4867cc0ff6ef7845c93c6a6f2bbeac1e31d5d95618c990646a86b691ba387f6b31f75a69fc68e52c7efd0a1de03be8455514231e04bf7370ab6b49d931f4b581b52ca6e0b104bbd07013651d048dcc5271bce8de0f855c4d289a70b19fa616cddbe27b217116d3a52dfb590df3f932e9fee79e34b42844d4efe8a31844694ffaaf811d72b07ab4a281d75c4dd73f7fc82f9beb49e9ef70c72c31c6b7802ad77d25b405a002d63ba30c078aac97ad8cb9ac85299024c6dba7912c3844ed27097e6852a4567d332560e54bb835d2bfbc31a9bc181f8273b878349c9921c6cbd5466fdea1da224f5361c0c50c5fb4f6ccd9f15f6febea4d24265131cc991d85a5d3bf28ce78dd79a5ddff2b507c8b3d38ece81b386f428ed6cf9258657e7647dfa8a8b12ef5ce051208bf44e2d973885f72835f55458ed6cfcbcb75d998be711af59990eae176c637439b79ad8c41b1b71858a90e65aae941d92a2e9616784ad513321da97a2d1036d083c41eeacb374ca45904d6f205101b5e894cd3f0e2d7b8a737a07802a3a74eb4db792b204f69bf3278fff2538878634b84746b51a87d3364c64a860c568d82757761773b137a1f92fdb012c4f38add32dfd4cf0a6b6ccb8e7958abf0d8ab7cbe7c32919e3bf5618096af980cac33df3eae62fe9bb36eda0aac74dd81fd562113e2515c3d4aa6daec990506bf3b958888119d0b1dc215d5e5418eba9778bd53faa7e9f732ce01f3056fd5b89cafe357648592287c990fd5326df9eebb9452b69e0a94cca107d8ae2e72bca993a08c3531791762f52baef6486848d462854357cdd8788b20383b095d58a35b9ab04380629d8a10707b862bff7024b90555233f0b05848dc1c5145906e90b63b243bd7491673a55d9234a928e9bb37ed35afa3c9a4b936ac42ccb1d1dcb5abe7cc21717fa1025525d24f4eb745f1fe0b3584448e35ef9916fef74cfa511bf189591b2cabb0ff81306d13a37eb8578d183ebc7200b3e28d2c2f39e56ba76078d60192d806c972f4ad6077be01111b412587760e65105faa0d5cb2326f99687ceb7617e2d4d45b918dc581223f0909eb519856748849fac49a2bb4edf727a7b2edf6e4454f526d02ed459d7805b68142c25dfc5544ca04dc7fb3c45418eee7609712f5cdaeb3aa3c6936cdd1f1e0d1486dbe2f3ee05f6856727ebe888e797d834beafb969a90f950198b5ee0ec876172c290466118f8dee069bbdb463040ab8840b842bf2d1637b03040994ccf1b8180131c755c623e65a03c96172bd15ddf0f90dba2ac60800252c193547b0b6beb63c3542f95aa373bda1941edc0d441d6d758bac9a1d7301f51009aab487f1b2cb3935a5c8935e8f2ee2ee3e2dee90f06c6ae693f715b9480219c59abc458e6aee1a210767d26bd5c24f8a4fc6be59011417aac0eaac7ad5715c5942fe87fd341c842544f3e394bebce42c5667a511a0a363a89462aa18595ea6b51f86dd48db166c078adaf2d127b87e6ac9cb6826fb0010d869bf03f2afaee97b6a064fedf3cc0806d75060cd4c86d1014a47b9b81303d3c2716b8c0fa30193393dc1ddda76426fad6c03a41192f6c7cfaaa8e37e9e3eb3cc0c6bdaa721b66a9fab82e6c0fdf964286e4aca0d66201c0adca7c33fae61bba1be0c874f3b495f3f7857cb156ea2538e4101f89e708b4554444e95096a0a40fc78c35be82d843e2d2a3adb8d78d662cabedba523079fb6d52df3bb710d268d7cf32a6a0a88d4f80628c0ac8a447f3fc5e0d091514ca2c64680b7da00d9196adc481f61e281381f748f3b3b0d78f1c77fef19ce0b7466e14bde12a3a9bc5cb225d81fbef39cc1b3c5668e533a8a82375f6fb46dd8413c119a4366314350587685250b3799f0629e75e6a9ec79db0d589849401019fd5074a4ae910fd665c2736974f4ada686655329136e385a46c82d6929b9e01babecb45e780d444855a521ddf1c0f8dae1c1db21a72af45b82ca64939150a87af4e9b1a6d4ed11d547076a93853935f4a12cb388d7fbc5c054353d9ea5ac028dc4a2613b28014f52eda3610347babb083372240b4253071b20862355629a52e9d6342febd19d4ed645fcd1e6f6a1ad089e0a93c079eaf573890e5844d2c94e40549cae5988d5e68a7b4d7ce9f0a6d8917678cc0b9e416e88c7155eadd5a2b2d5a032dc2e409c7f587aee7d641a0c9cdff084708c0066045674e59267ee7b6e3e127fbfe1f3451f4396f568cb46856da5ea6af1bc5698e49c216a897dfd07771d5c4ffcee4ca502fd8df2b81972e5cae58b59b9c7a3368e43f2f9e7c86d68995c536a91b990c87fe90dba70b1cbd3d2396a4291c3d555561f5ec1acbca8f4922083603c94fd0f41ef5b9392ce42a5535829de651bad14cb05914f0e31e3e606728b823dfdc091a3d8d427f7aefa21bbb59f67dbaf0d05ebb5a55d50dd06fbcc5dfefb41cea425c19559d4423fb13d3174a040c3cb7ec86e4cdfaa253031c0af1328ba1570684d2aa3d534a016416a18800", 0x2000, &(0x7f0000001480)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x18, 0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

8m43.469994414s ago: executing program 7 (id=366):
unshare(0x6020480)
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000200), 0x101300, 0x0)
fdatasync(r0)

8m30.816629517s ago: executing program 35 (id=361):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r0)
sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000004c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000ffdbdf25090000006400038008000100010000000800030004000000140002007665744e315f6d616376746170000000060004000200000008000500e0000000140002006970766c616e31"], 0x78}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000800)
r2 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000000)='sys_enter\x00', r3}, 0x18)
r4 = io_uring_setup(0xee3, &(0x7f00000002c0)={0x0, 0xe, 0x2, 0xffffffff, 0xfffffffe})
r5 = dup3(r2, r4, 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r8 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_UNLINK(r8, 0x40044160, 0x3)
setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000080)=0x654a, 0x4)
bind$inet(r6, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
process_mrelease(r5, 0x0)
sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x0)
ioctl$SG_SET_RESERVED_SIZE(r5, 0x4004550c, 0x0)
syz_usb_connect(0x5, 0x1a2, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0)

8m30.765431404s ago: executing program 7 (id=373):
r0 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r2 = syz_io_uring_setup(0x497, &(0x7f0000000000)={0x0, 0xf62c, 0x800, 0x3, 0x379}, &(0x7f00000001c0)=<r3=>0x0, &(0x7f0000000280)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r5 = getpgrp(0x0)
sched_setaffinity(r5, 0x32, &(0x7f0000000040)=0x5)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0)
r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r2, 0x3516, 0x0, 0x20, 0x0, 0x0)

8m18.581223785s ago: executing program 7 (id=379):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r0)
sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000004c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000ffdbdf25090000006400038008000100010000000800030004000000140002007665744e315f6d616376746170000000060004000200000008000500e0000000140002006970766c616e31"], 0x78}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000800)
r2 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000680)=ANY=[], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000000)='sys_enter\x00', r3}, 0x18)
r4 = io_uring_setup(0xee3, &(0x7f00000002c0)={0x0, 0xe, 0x2, 0xffffffff, 0xfffffffe})
r5 = dup3(r2, r4, 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r8 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_UNLINK(r8, 0x40044160, 0x3)
setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000080)=0x654a, 0x4)
bind$inet(r6, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
process_mrelease(r5, 0x0)
sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x0)
ioctl$SG_SET_RESERVED_SIZE(r5, 0x4004550c, 0x0)
syz_usb_connect(0x5, 0x1a2, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0)

8m10.029672222s ago: executing program 36 (id=377):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x94)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r3=>0x0})
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r1, r3, 0x25, 0x0, @val=@iter={0x0}}, 0x20)
syz_emit_ethernet(0x36, &(0x7f00000004c0)=ANY=[], 0x0)
r4 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009c323f08a5040330b244010203010902120001000200000904"], 0x0)
syz_usb_control_io$printer(r4, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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")
r5 = syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000480)='./file0\x00', 0x2000000, &(0x7f0000000880)=ANY=[@ANYRESHEX, @ANYRES8, @ANYRESOCT, @ANYRES64=0x0, @ANYRESHEX], 0x8, 0x2f8, &(0x7f0000000ac0)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r6 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r5, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r9, 0x0, 0x7}, 0x18)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000380)={'syz0\x00', {0xff, 0x6, 0x7fff, 0x8d5}, 0x2, [0x10000, 0xeba, 0x48a, 0x9, 0xc, 0x1, 0x6, 0x87ff, 0x54, 0x7fffdfff, 0x2, 0xc, 0x8, 0x1, 0x9, 0xfffffff7, 0x3, 0x40000, 0x842, 0x26, 0x4, 0x1, 0x3ff, 0xfffffff4, 0xf9e, 0xda6, 0x3, 0xa7, 0x4, 0x2, 0x9, 0x76c9, 0x200, 0x1, 0xffffffff, 0x1, 0x7, 0x80009, 0x1000f, 0xb, 0x9, 0x7ffffffc, 0x9, 0xb50, 0x0, 0x800, 0x3, 0x0, 0x3, 0xfffffffe, 0xfffffffa, 0x8, 0x24, 0x7fff, 0x8, 0x1, 0x200, 0x0, 0x0, 0x7f, 0x964e, 0x2d5, 0x149, 0x1], [0x266ac, 0xfffffff9, 0x4, 0x3, 0x8e, 0x7, 0x80000001, 0x9, 0x4, 0x485, 0x0, 0x7, 0x6, 0x8001, 0x6, 0x8, 0x2, 0x8, 0x6, 0x7fe, 0x7ff, 0x1, 0x9, 0xc00, 0x89, 0x7ff, 0x1, 0xfffffffe, 0xa, 0x9, 0x9, 0x0, 0x10000, 0x8, 0x1, 0x7, 0xfffffffc, 0x4, 0x4c, 0x9, 0x8, 0x5, 0xe66, 0x8, 0x2, 0x81, 0x4b, 0x7d, 0x6, 0xb, 0x4, 0x9, 0x1, 0x8d1, 0x100008fd, 0x1, 0xe0, 0x8e, 0x6, 0x4, 0x401, 0xade, 0x7f], [0x80008396, 0x4000000b, 0x10000, 0x9, 0x8000, 0x1, 0x9, 0xe, 0x8, 0xff, 0x7f, 0x400, 0x1000, 0x9, 0x6e, 0x5, 0x7, 0x5, 0x6, 0x5, 0x4, 0xcb, 0x2, 0x3, 0x5, 0x2, 0x8001, 0xc, 0x1, 0xb0f, 0x1e, 0xfffffffd, 0x800, 0x80008, 0x9, 0x3, 0x200, 0xfc, 0x4, 0xe, 0x464b, 0x6, 0x2e7, 0x7ff, 0x0, 0x6, 0x7f, 0x2, 0x7fffffff, 0xffffffff, 0x4, 0xffff, 0xd5d, 0xa0c787d, 0xffffff4e, 0x9, 0x4, 0x3c, 0x3, 0x0, 0x1fc1, 0x9, 0x1, 0x6], [0x10000010, 0x3, 0x9, 0x2, 0xa62, 0xfe, 0x20000ff, 0x6, 0x80000000, 0x3, 0xe, 0x2, 0x1ff, 0x7, 0x5, 0x0, 0xfffffffd, 0x7ff, 0xdaa, 0x4, 0x3, 0x103, 0x50, 0xcd, 0x6, 0x4000400, 0xffffffff, 0xfffffffb, 0x40, 0x80000000, 0x4, 0x7, 0xfff, 0x4, 0x3, 0x0, 0x9, 0x1, 0x1, 0x7, 0x8ac1, 0x3, 0x1, 0x80000002, 0x80040002, 0xff, 0x6, 0x3, 0xfffff801, 0xffefffff, 0x37d, 0xfffffff8, 0xd, 0x5, 0xd, 0x8, 0x6eaf, 0x9, 0x8, 0x5e00, 0x2, 0x3, 0x5, 0x400]}, 0x45c)
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, 0xffffffffffffffff, 0x0)
r10 = socket$inet6(0xa, 0x2, 0x0)
sched_setscheduler(r6, 0x0, &(0x7f0000000800)=0xfff)
setsockopt$inet6_udp_int(r10, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4)
r11 = socket(0x1e, 0x1, 0x0)
connect$tipc(r11, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x4}}}, 0x10)

8m3.203422935s ago: executing program 37 (id=379):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100), r0)
sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000004c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002abd7000ffdbdf25090000006400038008000100010000000800030004000000140002007665744e315f6d616376746170000000060004000200000008000500e0000000140002006970766c616e31"], 0x78}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000800)
r2 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1ff, 0x2)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000680)=ANY=[], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000000)='sys_enter\x00', r3}, 0x18)
r4 = io_uring_setup(0xee3, &(0x7f00000002c0)={0x0, 0xe, 0x2, 0xffffffff, 0xfffffffe})
r5 = dup3(r2, r4, 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x10)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r7, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r8 = syz_open_dev$sndpcmp(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_UNLINK(r8, 0x40044160, 0x3)
setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000080)=0x654a, 0x4)
bind$inet(r6, &(0x7f0000000200)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10)
connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
process_mrelease(r5, 0x0)
sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x0)
ioctl$SG_SET_RESERVED_SIZE(r5, 0x4004550c, 0x0)
syz_usb_connect(0x5, 0x1a2, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x0)

4m19.598986073s ago: executing program 1 (id=612):
socket$netlink(0x10, 0x3, 0x0)
socket$pppl2tp(0x18, 0x1, 0x1)
r0 = syz_io_uring_setup(0x497, 0x0, &(0x7f00000001c0)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r3 = getpgrp(0x0)
sched_setaffinity(r3, 0x32, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r5 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r5, 0x1, 0x0)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r0, 0x3516, 0x0, 0x20, 0x0, 0x0)

4m17.905432996s ago: executing program 1 (id=613):
r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe)
add_key(0x0, &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100)="459a1d2e4068ff5163fe1bd586f63915d16251c86caf72935fef82de5486462232abde1f112773fd00d529aaf925e353265cc290931c0333359bd0e8e46b8e9265516f1f57052412259693", 0x4b, r3)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r4 = getpid()
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x100000}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

4m11.648737019s ago: executing program 1 (id=621):
syz_init_net_socket$ax25(0x3, 0x2, 0x1)
capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40})
r0 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f00000001c0)=0x4, 0x4)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x4, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xc440, 0x1})
r1 = syz_io_uring_setup(0x81f, &(0x7f0000000480)={0x0, 0x4c9b, 0x10, 0x0, 0x38f}, &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000540)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x30, 0x0, 0x0, 0x4}]}, 0x10)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1})
io_uring_enter(r1, 0x47bc, 0x0, 0x21, 0x0, 0x0)
r4 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0xebed, 0x400, 0x0, 0x378}, &(0x7f0000000040)=<r5=>0x0, &(0x7f0000000080)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r4, 0x47ba, 0x3e82, 0x60, 0x0, 0xa7ff)

4m8.025684418s ago: executing program 1 (id=627):
r0 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = syz_io_uring_setup(0x497, &(0x7f0000000000)={0x0, 0xf62c, 0x800, 0x3, 0x379}, &(0x7f00000001c0)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r4 = getpgrp(0x0)
sched_setaffinity(r4, 0x32, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r5 = getpid()
sched_setscheduler(r5, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r1, 0x3516, 0x0, 0x20, 0x0, 0x0)

4m5.977666968s ago: executing program 1 (id=628):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_open_dev$tty1(0xc, 0x4, 0x1)
r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100), 0x28041, 0x0)
write$dsp(r5, &(0x7f00000001c0)="5cba91a4", 0xffffffd9)
ioctl$SNDCTL_DSP_SETTRIGGER(r5, 0x40045010, &(0x7f0000000040)=0x9)
ioctl$SNDCTL_DSP_SETTRIGGER(r5, 0x40045010, &(0x7f0000000000)=0xfffffffa)

4m2.336870199s ago: executing program 1 (id=633):
unshare(0x62000000)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={<r1=>0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x4e24, 0x40, @private1, 0x1}]}, &(0x7f0000000100)=0x10)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={r1, @in6={{0xa, 0x4e24, 0x800, @private1, 0x9}}, 0xfff, 0xfe00, 0x2, 0x3, 0x54, 0x6, 0xf9}, &(0x7f0000000000)=0x9c)
syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000001200)='./file0\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="41080000000029c0184ecbbf75f62c01ce6407e71fc9d50f484d8c9597aaed77affcc19041e9c993ba37d74c7ad7d3e44cea3e78906b6dafe01d4100d06a8cd5d9b315742b5bcf8c6b2d27492eaacc8854c2b9860f3530c3e14d03526e819b68ed9799dede87ca1b0a667a8592dafd467b86285fd2869f7e6957777972b7b2c344e39fa7305a51ed701df8677c5f5218d0a7a7887db0d2b2a0ce1a9575023482452ac53abd5c96f46458359807c712d045685437bdded96bd4677feb54fc3a6a8afadbacd525242a8ee9a8eab7ad3655c8621cf87835aea5e0f5401aeacabcf8406195c30d1ac92e23df3ddb"], 0x1, 0x11a3, &(0x7f0000001280)="$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")
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000000)={<r3=>0x0, 0x4}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000100)={r3, 0x5, 0x7fffffff, 0x1}, &(0x7f0000000140)=0x10)
setsockopt(r2, 0x84, 0x82, &(0x7f00000001c0)="020900000080efff", 0x8)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fstatfs(0xffffffffffffffff, 0x0)
r5 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000000700)="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", 0x118)
r6 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)
connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4e23, 0x8020000c, @private0={0xfc, 0x0, '\x00', 0x1}, 0xffffffff}, 0x1c)
syz_usb_connect(0x3, 0x24, &(0x7f0000000580)=ANY=[@ANYBLOB="1212000061f77382f22879f0551c789c6bbeda0bffffd110e80400a19db00102f1"], 0x0)
ptrace(0x10, r4)
ptrace$setregset(0x4205, r4, 0x202, &(0x7f0000001640)={0x0})
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
writev(r2, &(0x7f0000000ac0)=[{&(0x7f00000002c0)="7d5c56d4079fd103836d1ca0c120ccf16f115f7a36501e2163cc9d174d52842c4db764743e5b2aac894805ef01b4b1b510fff9113dee845353bfbc13f4997a07a8a324821dac9dc6de1322d1824d7ce618bd3e9335e6ee54ab9990184854f483b2d5e577cc028dc3c6325a44d7f8e45476530657ffb5549b610ff7915ef9505298eba28a455d6311997ca690e29c8909f0378ae98cb99061469355a63bb3a3e1c93a01a352da87645d1d62c78be2e48ffcff622772447240b579e06433a7fef7fd6af78329b7147560fabfb5f40c276794", 0xef}, {&(0x7f00000003c0)}, {&(0x7f0000000400)="f64ae2eb33c8435881e45a6ae598b4141c7563664b103e9dee5ae3a581405395", 0x20}, {&(0x7f0000002440)="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", 0x1000}, {&(0x7f0000000980)="d8d38a7a91ffd586abe97e003d86117e040f912624cb5e0bdedefea0fdffb4ab270543dfc7d3bd80b4cc7ee302367deac68e2c3912174db76400", 0x3a}, {&(0x7f00000009c0)="5241bf0c6b124e38cb5339241f2ae7063304b0354db2f8d94cb8ed976af7215a472af5fc4f0538ee2f4c33089171eb782700f6087c3c856d3e394b66cc4f5cb0b251b9d696e5c29ba9e1e63b2e8007270af48f65666625510ff5cef4a2799533a1e8f1946416d30e2479810e056223832be2e3858b4f3df1fb8ddabc50af9b2314671989524af4bb0594", 0x8a}, {&(0x7f0000000a80)="f81fed8c47809ae697bf095fc61c4a74db1a3a9a927247f10931f4aae5fa1db855649e4e8e1d", 0x26}], 0x7)
connect$inet6(r7, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x107}, 0x1c)

3m51.812642214s ago: executing program 2 (id=651):
r0 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r2 = syz_io_uring_setup(0x497, &(0x7f0000000000)={0x0, 0xf62c, 0x800, 0x3, 0x379}, &(0x7f00000001c0)=<r3=>0x0, &(0x7f0000000280)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r5 = getpgrp(0x0)
sched_setaffinity(r5, 0x32, &(0x7f0000000040)=0x5)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0)
r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r2, 0x3516, 0x0, 0x20, 0x0, 0x0)

3m46.289638837s ago: executing program 38 (id=633):
unshare(0x62000000)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={<r1=>0x0, 0x1c, &(0x7f0000000240)=[@in6={0xa, 0x4e24, 0x40, @private1, 0x1}]}, &(0x7f0000000100)=0x10)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000140)={r1, @in6={{0xa, 0x4e24, 0x800, @private1, 0x9}}, 0xfff, 0xfe00, 0x2, 0x3, 0x54, 0x6, 0xf9}, &(0x7f0000000000)=0x9c)
syz_mount_image$msdos(&(0x7f00000000c0), &(0x7f0000001200)='./file0\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="41080000000029c0184ecbbf75f62c01ce6407e71fc9d50f484d8c9597aaed77affcc19041e9c993ba37d74c7ad7d3e44cea3e78906b6dafe01d4100d06a8cd5d9b315742b5bcf8c6b2d27492eaacc8854c2b9860f3530c3e14d03526e819b68ed9799dede87ca1b0a667a8592dafd467b86285fd2869f7e6957777972b7b2c344e39fa7305a51ed701df8677c5f5218d0a7a7887db0d2b2a0ce1a9575023482452ac53abd5c96f46458359807c712d045685437bdded96bd4677feb54fc3a6a8afadbacd525242a8ee9a8eab7ad3655c8621cf87835aea5e0f5401aeacabcf8406195c30d1ac92e23df3ddb"], 0x1, 0x11a3, &(0x7f0000001280)="$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")
r2 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000000)={<r3=>0x0, 0x4}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000100)={r3, 0x5, 0x7fffffff, 0x1}, &(0x7f0000000140)=0x10)
setsockopt(r2, 0x84, 0x82, &(0x7f00000001c0)="020900000080efff", 0x8)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fstatfs(0xffffffffffffffff, 0x0)
r5 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000000700)="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", 0x118)
r6 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)
connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4e23, 0x8020000c, @private0={0xfc, 0x0, '\x00', 0x1}, 0xffffffff}, 0x1c)
syz_usb_connect(0x3, 0x24, &(0x7f0000000580)=ANY=[@ANYBLOB="1212000061f77382f22879f0551c789c6bbeda0bffffd110e80400a19db00102f1"], 0x0)
ptrace(0x10, r4)
ptrace$setregset(0x4205, r4, 0x202, &(0x7f0000001640)={0x0})
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
writev(r2, &(0x7f0000000ac0)=[{&(0x7f00000002c0)="7d5c56d4079fd103836d1ca0c120ccf16f115f7a36501e2163cc9d174d52842c4db764743e5b2aac894805ef01b4b1b510fff9113dee845353bfbc13f4997a07a8a324821dac9dc6de1322d1824d7ce618bd3e9335e6ee54ab9990184854f483b2d5e577cc028dc3c6325a44d7f8e45476530657ffb5549b610ff7915ef9505298eba28a455d6311997ca690e29c8909f0378ae98cb99061469355a63bb3a3e1c93a01a352da87645d1d62c78be2e48ffcff622772447240b579e06433a7fef7fd6af78329b7147560fabfb5f40c276794", 0xef}, {&(0x7f00000003c0)}, {&(0x7f0000000400)="f64ae2eb33c8435881e45a6ae598b4141c7563664b103e9dee5ae3a581405395", 0x20}, {&(0x7f0000002440)="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", 0x1000}, {&(0x7f0000000980)="d8d38a7a91ffd586abe97e003d86117e040f912624cb5e0bdedefea0fdffb4ab270543dfc7d3bd80b4cc7ee302367deac68e2c3912174db76400", 0x3a}, {&(0x7f00000009c0)="5241bf0c6b124e38cb5339241f2ae7063304b0354db2f8d94cb8ed976af7215a472af5fc4f0538ee2f4c33089171eb782700f6087c3c856d3e394b66cc4f5cb0b251b9d696e5c29ba9e1e63b2e8007270af48f65666625510ff5cef4a2799533a1e8f1946416d30e2479810e056223832be2e3858b4f3df1fb8ddabc50af9b2314671989524af4bb0594", 0x8a}, {&(0x7f0000000a80)="f81fed8c47809ae697bf095fc61c4a74db1a3a9a927247f10931f4aae5fa1db855649e4e8e1d", 0x26}], 0x7)
connect$inet6(r7, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x107}, 0x1c)

3m45.659184454s ago: executing program 2 (id=660):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x50)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0)
r4 = accept4(r3, 0x0, 0x0, 0x0)
sendmmsg$alg(r4, &(0x7f0000003340)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="81fc968c8e602f12c08090cca64b50fd3da579fea7cfb7a60842e5ed5f28eb92ce85ff67ae4586173191ea11764930ce6cffa1941eb83e19fd7edaacf94dc7424ea3f5b2c3090b2512c5731decbe5706505f71967d78c85e5dfe539b94b505fd017feaa8cb7ff33abfe523165e9245f5", 0x70}, {&(0x7f0000000280)="d1eb57ef3c3b938aec92d6b0f96439092ce50229ef3c76f4a29925611af18ab9f6fb64dbda37de73d2f86599da41f74348d8abd1415cb7c0cc686346f39fad1650a45bb0e2351e84f0e5bd3539e67a87ee7661516e9ba9d5dd3c02a643420de7940c73cf1db26f55947a508b25", 0x6d}, {&(0x7f0000000580)}], 0x3, 0x0, 0x0, 0x4040010}], 0x1, 0x0)
recvmmsg$unix(r4, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/10, 0xa}, {&(0x7f0000000100)=""/118, 0x76}], 0x2}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000001e40)=""/4096, 0x1000}], 0x1}}], 0x2, 0x100, 0x0)

3m43.916897887s ago: executing program 2 (id=661):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',default_permissions'], 0x0, 0x0, 0x0)
capset(&(0x7f0000000500)={0x20071026}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7})
fchownat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0xee01, 0x1000)
syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = socket(0x10, 0x803, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0)
fcntl$lock(r2, 0x410, &(0x7f0000000080)={0x0, 0x1, 0x6, 0x1fd})
io_uring_setup(0x6301, &(0x7f0000000000)={0x0, 0x5545, 0x10, 0x1, 0x389, 0x0, r2})
r3 = socket$unix(0x1, 0x1, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r5 = socket(0x400000000010, 0x3, 0x0)
r6 = socket$unix(0x1, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r7=>0x0})
sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=@newtfilter={0x54, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {}, {0x9}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x7, 0x1, 0x0, 0x0, {{0x3, 0x8, 0x2}}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x48c0}, 0x20001880)
r8 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x60040)
r9 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000004fc0), 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r9, 0x400454a4, &(0x7f0000005000))
ioctl$EVIOCSMASK(r8, 0x40104593, &(0x7f0000000180)={0x0, 0x0, 0x0})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', <r10=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xb, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xca, 0x9}}]}}]}, 0x48}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000840)=@newtfilter={0x5c, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0x3, 0xd}, {}, {0x4, 0xe}}, [@filter_kind_options=@f_u32={{0x8}, {0x30, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x7f}, @TCA_U32_SEL={0x24, 0x5, {0x6, 0x7, 0x1, 0x3d3f, 0x0, 0xffb, 0x3, 0x58f, [{0xebd, 0x1, 0x206, 0x7}]}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x24040084)

3m43.098815445s ago: executing program 2 (id=665):
syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0xfc, 0xc4b, &(0x7f0000002800)="$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")
r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x174)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r1)
sendmsg$TIPC_CMD_ENABLE_BEARER(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d000000000001000000000000000141000000030017"], 0x38}}, 0x0)
r3 = syz_mount_image$cramfs(&(0x7f0000000080), &(0x7f0000000180)='./file3\x00', 0x0, &(0x7f0000000100)=ANY=[], 0x1, 0x152, &(0x7f0000000800)="$eJzszr9rGmEcx/H3c/d4V61WBwu2Qyl0qFgK1xO7dVCotIM9aMgeiCcRziAKQTJptkCGZHcIZBUDIWOGxExJdPH/MKuj4bxLQCH/wfNa7vh8fz2/f02ypEBnSQDNlttuu9XP/51KeePi8uqdXzCBN8uWRrPlN1eDgesi7PhfCbNeEN8mNMAzgw7MWRGyQOktiG6Y9iCmQSkdXiaYz36B0XvJY3SxsAH5kkENz83DfNHD+CihlIRa3XMtItKf/5oIF9W9fS387fQjwQGTFZ3+t+Hg/t/4DnKf3CO7/OEsntHZdA2IAcmwbziYTsYaTsWZ5G37Z976YVmFqfMw/lvoHiP/xPc4l8t9QgYT33OGARhwIKBvwkD49dmN8N83Op07jaSZjgK7qcMTyUpFhHdT6FLI7a2M/pwgWCPXA0VRFEVRFEVRFEV5xVMAAAD//1IiShI=")
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x10600, 0x0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000200)={{0x1, 0x1, 0x18, <r4=>r3}, './bus\x00'})
ioctl$sock_ipv6_tunnel_SIOCADDPRL(r4, 0x89f5, &(0x7f00000003c0)={'sit0\x00', &(0x7f0000000480)={@empty, 0x1}})
socket$pppoe(0x18, 0x1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0)
mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0)
r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000540), r1)
arch_prctl$ARCH_SHSTK_DISABLE(0x5002, 0x2)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f00000006c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000580)={0xb4, r5, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xb7c}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7a}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0xb, 0x16}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x27, 0x4}}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x401}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x989}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xfffffffd}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0xa}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x2b}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x6}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e21}, @IPVS_DEST_ATTR_TUN_TYPE={0x5}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7ff}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4048814}, 0x44)
r6 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r6, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]})
r7 = open(&(0x7f0000000140)='.\x00', 0x0, 0x0)
fsync(r7)

3m42.077108894s ago: executing program 2 (id=667):
r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000fcffffff000000008000000018010000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000020000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008200000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe)
add_key(0x0, &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100)="459a1d2e4068ff5163fe1bd586f63915d16251c86caf72935fef82de5486462232abde1f112773fd00d529aaf925e353265cc290931c0333359bd0e8e46b8e9265516f1f57052412259693", 0x4b, r3)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r4 = getpid()
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x100000}, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18060000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000003000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

3m39.812817463s ago: executing program 2 (id=670):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000014000000000000000000000000a78000000060a0b040000000000000000020000004c000480240001800b000100736f636b657400001400028008000240000000030800014000000002240001800a0001007175657565000000140002800800044000000010060003401b0300000900010073797a30000000000900020073797a32"], 0xa0}}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)

3m39.28965769s ago: executing program 39 (id=670):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000014000000000000000000000000a78000000060a0b040000000000000000020000004c000480240001800b000100736f636b657400001400028008000240000000030800014000000002240001800a0001007175657565000000140002800800044000000010060003401b0300000900010073797a30000000000900020073797a32"], 0xa0}}, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3)

3m13.485199398s ago: executing program 4 (id=715):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000001200), 0xa0000)
read(r0, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001ac0)=ANY=[@ANYBLOB="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", @ANYRES8, @ANYRES64=r0], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x22, 0x0, &(0x7f0000000680)="b9ff03316844268cb89e14f00800", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = socket$pptp(0x18, 0x1, 0x2)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sysvipc/sem\x00', 0x0, 0x0)
read$FUSE(r3, &(0x7f0000000240)={0x2020}, 0x2034)
read$FUSE(r3, &(0x7f000001f480)={0x2020}, 0x2020)
setsockopt$inet6_int(r3, 0x29, 0x35, &(0x7f0000000140)=0x3, 0x4)
bind$pptp(r2, &(0x7f0000000100)={0x18, 0x2, {0x7fc, @loopback}}, 0x1e)
r4 = socket$pptp(0x18, 0x1, 0x2)
bind$pptp(r4, &(0x7f0000000000)={0x18, 0x2, {0x0, @local}}, 0x1e)
connect$pptp(r2, &(0x7f0000000080)={0x18, 0x2, {0x0, @loopback}}, 0x1e)
syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYRES32=r1], 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r5=>0xffffffffffffffff})
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKINFO_GET(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="810000000000000000001a00000018000180140002"], 0x2c}, 0x1, 0x0, 0x0, 0x4000800}, 0x0)
r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r6)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000003040)={'batadv0\x00', <r10=>0x0})
sendmsg$BATADV_CMD_TP_METER(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000003100)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002bbd7000fbdbdf25020000000a000900aaaaaaaaaa44000008000300", @ANYRES32=r10, @ANYBLOB='\b\x00\v'], 0x30}, 0x1, 0x0, 0x0, 0x20000050}, 0x20040084)

3m13.086459374s ago: executing program 4 (id=718):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x50)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-sse2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0)
r4 = accept4(r3, 0x0, 0x0, 0x0)
sendmmsg$alg(r4, &(0x7f0000003340)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="81fc968c8e602f12c08090cca64b50fd3da579fea7cfb7a60842e5ed5f28eb92ce85ff67ae4586173191ea11764930ce6cffa1941eb83e19fd7edaacf94dc7424ea3f5b2c3090b2512c5731decbe5706505f71967d78c85e5dfe539b94b505fd017feaa8cb7ff33abfe523165e9245f5", 0x70}, {&(0x7f0000000280)="d1eb57ef3c3b938aec92d6b0f96439092ce50229ef3c76f4a29925611af18ab9f6fb64dbda37de73d2f86599da41f74348d8abd1415cb7c0cc686346f39fad1650a45bb0e2351e84f0e5bd3539e67a87ee7661516e9ba9d5dd3c02a643420de7940c73cf1db26f55947a508b25f78dee121adf8805143e7fae13e8b6c5f129f3774d7bcbd71fb4089652786bc4cc963f17020109b33f367a30a97bf4e0409884479415", 0xa3}, {&(0x7f0000000580)}], 0x3, 0x0, 0x0, 0x4040010}], 0x1, 0x0)
recvmmsg$unix(r4, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/10, 0xa}, {&(0x7f0000000100)=""/118, 0x76}], 0x2}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000001e40)=""/4096, 0x1000}], 0x1}}], 0x2, 0x100, 0x0)

3m11.939027274s ago: executing program 4 (id=721):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000680)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f00000005c0)={0x90, r1, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_COALESCE_TX_USECS_LOW={0x8}, @ETHTOOL_A_COALESCE_PKT_RATE_LOW={0x8, 0xd, 0x7ff}, @ETHTOOL_A_COALESCE_TX_USECS_HIGH={0x8, 0x15, 0x6e0}, @ETHTOOL_A_COALESCE_TX_USECS_LOW={0x8, 0x10, 0x10001}, @ETHTOOL_A_COALESCE_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}, @ETHTOOL_A_COALESCE_RX_USECS={0x8, 0x2, 0x100}, @ETHTOOL_A_COALESCE_RX_USECS_LOW={0x8, 0xe, 0x5ad8}, @ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x8, 0x12, 0x6}, @ETHTOOL_A_COALESCE_TX_USECS_LOW={0x8}, @ETHTOOL_A_COALESCE_PKT_RATE_HIGH={0x8}]}, 0x90}, 0x1, 0x0, 0x0, 0x8763b8d47e41ca99}, 0x20040040)
r2 = syz_usb_connect(0x0, 0x24, &(0x7f0000000300)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0)
syz_usb_control_io(r2, 0x0, &(0x7f00000000c0)={0x84, &(0x7f0000000040)=ANY=[@ANYBLOB="00000100000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r2, &(0x7f00000001c0)={0x14, &(0x7f0000000000)={0x20, 0x30, 0x7, {0x7, 0x3, "368382759a"}}, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000440)={0x1c, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x60}})
r3 = syz_open_dev$usbmon(&(0x7f0000000000), 0x80000001, 0xe2603)
io_setup(0x8, &(0x7f0000004200)=<r4=>0x0)
io_submit(r4, 0x2000000000000108, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0xfffc, r3, 0x0}])
r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$SIOCRSACCEPT(r5, 0x89e3)
syz_usb_control_io$uac1(r2, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000500)=ANY=[@ANYRES16=r5, @ANYRESDEC, @ANYBLOB="68037ea380fecff49164fa3bca3befe746ed3767a443bdba1cc57914eb2d7b1839e31276bf45cb4e432128608b37362ec586da4e96d3876cd5256a1f5d194776fa79dfdd64a14c5b7427b9d0c8ff4617206246fd4065fa3d6e9135e261", @ANYRES8=r5, @ANYRESOCT, @ANYRES64=r5, @ANYRES8=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r0, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000700)={0x44, 0x0, 0x2, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7c}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1000}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x7}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x880}, 0x81)

3m9.677283021s ago: executing program 4 (id=722):
syz_mount_image$minix(&(0x7f0000000540), &(0x7f00000002c0)='./file1\x00', 0x8040, &(0x7f0000000c00)=ANY=[@ANYRES16=0x0], 0xfd, 0x1de, &(0x7f0000000580)="$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")
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="180100002c00010000000000fcdbdf250501f2800c0018000b815dc61bd8ac0f00000000001400010000000000000000000000ffff7f00000150bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a4a01c6fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f00ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35815c8a66c08004500ac14fdab3c6d2cd68204a7cc39c224a8959654ce486de1ca75f88a66689a383d716c776a19f6e1587532550289de721c"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0)
rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000040)='./file1\x00')
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x3000000, &(0x7f0000000200)=ANY=[@ANYRES32=0x0], 0xd, 0x6f5, &(0x7f0000001f80)="$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")
r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x100)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000028c0)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_DEL_KEY(r4, &(0x7f0000002a00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="88000000", @ANYRES16=r2, @ANYBLOB="01002dbd7000ffdbdf250c00000008000300", @ANYRES32=r5, @ANYBLOB="110007000000002000000000000000000000000008006e8004000100040028"], 0x88}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000)
getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8)
unlinkat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000)
syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000c00)={0x28, 0x40, 0x107, 0x70bd2b, 0x25dfdbfe, {0x3, 0x7c}, [@nested={0x4, 0x1c2}, @nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x10, 0x0, 0x1, [@nested={0x4, 0x141}]}]}, @typed={0x4, 0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4c090}, 0xc000)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r7 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x100, 0x1, 0x10}, 0x18)
openat(r7, &(0x7f0000000100)='./file2\x00', 0x321100, 0x1ff)

3m7.988516753s ago: executing program 4 (id=726):
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x1)
r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000002a00)=""/41, 0x29)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
r2 = getuid()
setreuid(0x0, r2)
ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000240)={0x6, 0xe, {r1}, {r2}, 0x5e46})
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='.\x00', 0x0, 0x80)
fstat(r4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, <r5=>0x0})
fchown(r4, 0x0, r5)
futex(&(0x7f000000cffc), 0x80000000000b, 0x2, 0x0, &(0x7f0000048000)=0x2800100, 0x2)
fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0xfffffe97)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x408, 0x103)
socket$inet6_udplite(0xa, 0x2, 0x88)
r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
ptrace$getregs(0xc, r3, 0x67efd705, &(0x7f0000000140)=""/125)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000540)='mnt\x00', 0x80, 0x0)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r7, 0xc0506617, &(0x7f0000000580)={@desc={0x1, 0x0, @auto="09c764ebf770ba28"}, 0x40, 0x0, '\x00', @b})
read$msr(r7, &(0x7f0000048040)=""/102372, 0x18fe4)
r8 = openat$mice(0xffffffffffffff9c, &(0x7f0000001400), 0x101)
write$FUSE_NOTIFY_INVAL_ENTRY(r8, &(0x7f0000000100)=ANY=[@ANYBLOB="22000000030000000000000000000000050700000000000001000000000000002b00"], 0x22)

3m7.406439809s ago: executing program 4 (id=728):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4242, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x38011, r0, 0x0)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000080)={0x0, 0x1})
socket$nl_xfrm(0x10, 0x3, 0x6)
openat$tun(0xffffffffffffff9c, 0x0, 0x305381, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000890)
r2 = syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x5883, 0x0, 0x0, 0xfffffdfc}, 0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}})
io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r1, 0xc01064c2, &(0x7f0000000100)={0x0, 0x0, r1})
ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r1, 0xc01864cb, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1})
r3 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./bus\x00', 0x0, &(0x7f0000000140), 0x0, 0x55c2, &(0x7f000000ac40)="$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")
ioctl$BTRFS_IOC_QGROUP_CREATE(r3, 0xc4089434, &(0x7f0000000080)={0x1, 0x1})
syz_open_dev$usbfs(&(0x7f0000000040), 0x8, 0x103c80)

3m6.899530502s ago: executing program 40 (id=728):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0xa4242, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x38011, r0, 0x0)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000080)={0x0, 0x1})
socket$nl_xfrm(0x10, 0x3, 0x6)
openat$tun(0xffffffffffffff9c, 0x0, 0x305381, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, 0x0, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000890)
r2 = syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x5883, 0x0, 0x0, 0xfffffdfc}, 0x0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x3}})
io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_CREATE(r1, 0xc00864bf, &(0x7f00000000c0)={0x0, 0x1})
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r1, 0xc01064c2, &(0x7f0000000100)={0x0, 0x0, r1})
ioctl$DRM_IOCTL_SYNCOBJ_QUERY(r1, 0xc01864cb, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1})
r3 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./bus\x00', 0x0, &(0x7f0000000140), 0x0, 0x55c2, &(0x7f000000ac40)="$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")
ioctl$BTRFS_IOC_QGROUP_CREATE(r3, 0xc4089434, &(0x7f0000000080)={0x1, 0x1})
syz_open_dev$usbfs(&(0x7f0000000040), 0x8, 0x103c80)

44.15219646s ago: executing program 5 (id=1070):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000480)=ANY=[], 0x8)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x1fff, 0x0, @mcast2, 0x5}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='erspan0\x00', 0xfffffffffffffcf0)
write(r0, &(0x7f0000000140)="84650000", 0x4)

41.261503489s ago: executing program 5 (id=1075):
r0 = syz_open_dev$sndctrl(&(0x7f0000000500), 0x1, 0x0)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000100)='net/ip6_mr_cache\x00')
r3 = syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000005c0)={[{@barrier_val={'barrier', 0x3d, 0x101}}, {@errors_remount}]}, 0x3, 0x445, &(0x7f0000000b00)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mknodat(r3, &(0x7f0000000140)='./file0\x00', 0xad0, 0x4)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chdir(&(0x7f0000000240)='./file0\x00')
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='pids.current\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0)
ioctl$FIBMAP(r1, 0x1, &(0x7f0000000040)=0x2)
r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x804000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r2}})
ioctl$TIOCVHANGUP(r1, 0x5437, 0x2)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000d80)={{0x1, 0x4, 0xfffffbdb, 0x4, 'syz0\x00', 0xfffff801}, 0x0, [0x7f, 0x10d, 0x7bd68282, 0x10001, 0x8c08, 0x6, 0x10000, 0x2, 0xf0f3, 0xfffffffffffffbff, 0x87, 0x4, 0x100, 0xfffffffffffffffc, 0x100, 0x68, 0x3ff, 0x400000004, 0x6, 0x8000000000000000, 0x1, 0x8, 0x109, 0x1ff, 0x1, 0xbbd, 0x0, 0x8, 0x40000006, 0x5, 0x2002, 0xfff, 0x3, 0x9, 0x7, 0x8000000000000000, 0x5, 0x0, 0x2, 0x201, 0x3, 0x6, 0xdb4, 0x5, 0x19, 0x4000000000009, 0xe, 0x8f46, 0xa, 0x6, 0x6, 0x3b7, 0x5, 0x100000000000000, 0x8, 0x4e, 0x4007fe, 0x1, 0x0, 0x5, 0x7, 0x34c, 0x6, 0x7, 0x4, 0x9, 0xb79, 0x8, 0xfff, 0x80, 0x9, 0x83, 0x5, 0xf8, 0x0, 0x9, 0x5, 0x5, 0x80, 0xfffffffffffffffd, 0xd, 0x6, 0xb, 0x2, 0xf, 0x8000000000000008, 0x2, 0x4, 0x8527, 0x80000001, 0xf33, 0x10000, 0xe72, 0x3ff, 0x7, 0xc08a, 0x410, 0x80000001, 0x40, 0x0, 0x100000000, 0x8c3, 0x1040, 0x2, 0x9, 0xc5, 0x5, 0x6, 0x4, 0x33, 0x2f6f, 0x6, 0x7, 0x9, 0x7fffffff, 0x8, 0xa, 0x8, 0xde, 0x6, 0x800000000, 0x4, 0x2, 0x1f58, 0x4, 0xa, 0xfffffffffffffff7, 0x1000]})

39.554919685s ago: executing program 5 (id=1082):
r0 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r2 = syz_io_uring_setup(0x497, &(0x7f0000000000)={0x0, 0xf62c, 0x800, 0x3, 0x379}, &(0x7f00000001c0)=<r3=>0x0, &(0x7f0000000280)=<r4=>0x0)
r5 = getpgrp(0x0)
sched_setaffinity(r5, 0x32, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0)
r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r2, 0x3516, 0x0, 0x20, 0x0, 0x0)

35.451795492s ago: executing program 5 (id=1088):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000080000000800000000000000", @ANYRES32, @ANYBLOB], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000280), &(0x7f00000002c0)=r1}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
pipe2(&(0x7f0000000040), 0x80000)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0)
fcntl$lock(r2, 0x26, &(0x7f0000000000)={0x0, 0x0, 0xe3800000000000, 0x20000000058e})
fcntl$lock(r2, 0x6, &(0x7f0000000040)={0x0, 0x2, 0x2, 0xffffffffffffffff})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, 0x0)
fcntl$lock(r2, 0x24, &(0x7f0000000080)={0x2, 0x2, 0x7, 0x4000000008})

30.66964027s ago: executing program 5 (id=1098):
r0 = openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0xf0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50)
r5 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000000)={@loopback={0xfec0ffffffffffff}, 0x800, 0x0, 0x3, 0x1, 0x6, 0xbe}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

29.293161185s ago: executing program 5 (id=1100):
r0 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r2 = syz_io_uring_setup(0x497, &(0x7f0000000000)={0x0, 0xf62c, 0x800, 0x3, 0x379}, &(0x7f00000001c0)=<r3=>0x0, &(0x7f0000000280)=<r4=>0x0)
r5 = getpgrp(0x0)
sched_setaffinity(r5, 0x32, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0)
r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r2, 0x3516, 0x0, 0x20, 0x0, 0x0)

27.749925687s ago: executing program 3 (id=1106):
ioctl$TIOCMIWAIT(0xffffffffffffffff, 0x545c, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000200)={'geneve1\x00', <r5=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000010c0)=@newlink={0x11c, 0x10, 0x1, 0x0, 0x200000, {0x0, 0x0, 0x0, r5}, [@IFLA_AF_SPEC={0xfc, 0x1a, 0x0, 0x1, [@AF_INET={0x40, 0x2, 0x0, 0x1, {0x3c, 0x1, 0x0, 0x1, [{0x8, 0x21}, {0x8, 0x18}, {0x8, 0x3}, {0x8, 0x9}, {0x8, 0xc}, {0x8, 0x12}, {0x8, 0x1f}]}}, @AF_INET6={0x60, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private1}, @IFLA_INET6_TOKEN={0x14, 0x7, @dev}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x1}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_ADDR_GEN_MODE={0x5}, @IFLA_INET6_TOKEN={0x14, 0x7, @private2}, @IFLA_INET6_ADDR_GEN_MODE={0x5}]}, @AF_BRIDGE={0x4}, @AF_MPLS={0x4}, @AF_INET6={0x20, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x1}, @IFLA_INET6_TOKEN={0x14, 0x7, @mcast1}]}, @AF_INET={0x28, 0x2, 0x0, 0x1, {0x24, 0x1, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x0, 0x0, 0x0, 0xfffffffe}, {0x8}]}}, @AF_MPLS={0x4}, @AF_BRIDGE={0x4}]}]}, 0x11c}}, 0x0)

25.525811695s ago: executing program 3 (id=1112):
r0 = openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0xf0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50)
r5 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000000)={@loopback={0xfec0ffffffffffff}, 0x800, 0x0, 0x3, 0x1, 0x6, 0xbe}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

22.84053035s ago: executing program 3 (id=1115):
socket$nl_netfilter(0x10, 0x3, 0xc)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
r0 = userfaultfd(0x1)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200), 0xa2442, 0x0)
write$dsp(r1, &(0x7f00000004c0)='\x00', 0x1)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
preadv(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x80, 0xa7)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="6e6f646973636172642c6261636b67726f756e645f67633d73796e632c6261636b67726f756e645f67633d6f6e2c6e6f757365725f78617474722c6e6f71756f74612c64697361626c655f726f6c6c5f666f72776172642c67635f6d657267652c6e6f757365725f78617474722c636865636b706f696e743d64697361626c652c757365725f78617474722c6673796e635f6d6f64653d7374726963742c646973636172645f756e69743d73656374696f6e2c636865636b706f696e743d64697361626c652c6e6f696e6c696e655f64656e7472792c00ec6da92d1c80a6c720380e3c2c55bf27596d2776ce408c4bb19b149757508e1c7e919c6c2047023baa412d14fa75c8cac6e5f103e13ea52708af0a7c5da8af4ecb6612"], 0x2, 0x5505, &(0x7f0000002480)="$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")
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0)
ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000000, 0x1000000})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0)
ioctl$SNDCTL_DSP_SYNC(r1, 0x5001, 0x0)
ioctl$SNDCTL_DSP_GETOPTR(r1, 0x800c5012, &(0x7f0000000000))
sendmsg$key(0xffffffffffffffff, &(0x7f00005f5000)={0x1000000, 0x0, 0x0}, 0x0)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2})

22.662201657s ago: executing program 6 (id=1117):
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0xb, 0x100008b}, 0x0)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10)
ioctl$UFFDIO_POISON(0xffffffffffffffff, 0xc020aa08, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
r2 = fanotify_init(0x200, 0x0)
timer_create(0x0, 0x0, &(0x7f00000002c0))
timer_create(0x1, 0x0, &(0x7f0000000000)=<r3=>0x0)
timer_settime(r3, 0x1, &(0x7f0000000880)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0)
timer_settime(0x0, 0x1, &(0x7f0000000240)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
timer_delete(0x0)
socket(0xa, 0x3, 0x87)
fanotify_mark(r2, 0x1, 0x4800003e, r1, 0x0)
r4 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000000340)=<r5=>0x0, &(0x7f0000000000)=<r6=>0x0)
syz_emit_ethernet(0x32, &(0x7f0000001480)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000000000008004500002400000000002f9078ac141400e0000001000065580401907800d8621b002c17a9e42647184593bf88592c9b8c95a8b0366e4d33fae99794b8d6f59ff5adbdd1821389755fe1cf700c4b9bc8df181c0ccc33aa2dbf7ba90e77087224dbf407f124cb1777c5f5d939cd2f11eaf8332a285dbc9985c180548e3fdc40dac676d20998378f7c833ff0bf206346ed5825e2bbec8ce24c93cefb78fb"], 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=@newtaction={0xe98, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0xe84, 0x1, [@m_gact={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x1, 0x4, 0x790434c2, 0x8}, 0x2, 0xa8}, [{0x7, 0x1, 0xfffffff9, 0x9, 0x67fb, 0x7}, {0x100, 0x80000000, 0x2, 0x3027, 0x7fff, 0x8}, {0x80000000, 0x36b, 0xd, 0x517, 0x1, 0x800}, {0x8, 0xfffffff4, 0x6140e1a4, 0x9, 0x95b9, 0x6}, {0x9, 0x4, 0x6, 0xfff, 0x4, 0x10001}, {0x401, 0x6, 0xfdd, 0xc0, 0x4, 0xb}, {0x26000000, 0x31400000, 0x5, 0x401, 0x8000, 0x3}, {0x9, 0x5, 0x1, 0x6, 0xae8, 0x8}, {0x10, 0x1, 0x4, 0x4, 0x2, 0x5}, {0x21, 0x101, 0x7, 0xffffffff, 0x4, 0x6}, {0x9, 0x5, 0x4, 0x0, 0x7, 0x9}, {0x5, 0x3, 0x1, 0x3, 0x4, 0x401}, {0xfffffff9, 0x6, 0xfffffffa, 0x7, 0x7, 0x3d}, {0x0, 0x7, 0x0, 0xff, 0x6, 0x5}, {0x5, 0xfffffffb, 0x1, 0xfffffe01, 0x8, 0x1}, {0x7fff, 0x200, 0x1, 0xae0a, 0x4, 0x7ff}, {0x3, 0x9, 0x8, 0x1, 0x2, 0x4}, {0x8, 0x0, 0x275, 0x7ff, 0xb, 0xffffff23}, {0x66, 0x0, 0x7, 0x400000, 0x1, 0x3}, {0x1, 0x8, 0x8, 0x3ff, 0x3f5, 0x8}, {0x7ff, 0x1, 0xffff, 0x6, 0x0, 0xfffffdbe}, {0x8001, 0x1ff, 0x0, 0x7, 0xe00, 0xf406}, {0x3, 0x18, 0x6, 0x2, 0x1, 0x1}, {0xae, 0x80000001, 0x51, 0x5, 0x9, 0x82c}, {0x6e, 0x9, 0x4, 0x2, 0x2, 0x81}, {0x9, 0x7fffffff, 0x5, 0x8, 0x80000001, 0x362}, {0x7, 0x1, 0x7, 0xf, 0x7ff, 0x6}, {0xe655, 0x1, 0x2da, 0x6, 0xfffffff8, 0xd389}, {0x0, 0x9, 0xd5e, 0xaa7c, 0x10001, 0x37}, {0x5, 0x0, 0x37, 0x8, 0x5, 0x4}, {0x3, 0x0, 0x3ff, 0x100, 0x4, 0x200}, {0x0, 0xcb8, 0xffff8000, 0x3, 0x2}, {0x6, 0x0, 0xfff, 0x4, 0x400, 0x7}, {0x28000, 0xf, 0x9, 0x3, 0xdd, 0xffffff86}, {0x5, 0x5, 0x80000000, 0x4, 0x70a, 0x8}, {0x1ff, 0x2e390d2b, 0x4, 0x4, 0x2, 0x6}, {0x4, 0x0, 0x8, 0x80000001, 0x3d5, 0x9}, {0x6, 0x40, 0x6, 0x1c000000, 0xffffffff, 0x1000}, {0x0, 0x0, 0xb1, 0x1, 0x6, 0x10001}, {0xd, 0x4f, 0x900, 0x3, 0x400, 0x9}, {0x1, 0x3, 0x7, 0xa, 0xff, 0x6}, {0x7dd, 0xc4, 0x62182213, 0x8, 0x3, 0x8f4c}, {0x36b, 0xb6, 0xfffffffd, 0x5f60be42, 0x8, 0x9}, {0x2, 0x3, 0x7, 0x3, 0x5, 0x3}, {0x6, 0x7182, 0x55b, 0xf0b, 0x4, 0x6}, {0x9, 0xc3c, 0xffffffb2, 0xf, 0x1000, 0x2f}, {0xc7, 0x962b, 0x1, 0x8, 0x1, 0x3ff}, {0xfffffffe, 0x800, 0x1, 0x6, 0x0, 0xa7a}, {0x6, 0x8, 0xe, 0x6, 0x8000, 0x7}, {0x0, 0x6, 0x40, 0x6, 0x0, 0x3}, {0xf, 0x0, 0x6, 0xc2, 0x6}, {0x700, 0x6, 0x6, 0xaa06, 0x2, 0x2}, {0x6, 0x0, 0xfffffffe, 0x101, 0x9, 0x4}, {0xffffff4d, 0x5, 0x2, 0x3, 0xbba8, 0x2}, {0x7, 0x70, 0x4, 0x9}, {0x7, 0x8000, 0x9, 0x1000, 0x3, 0x7f}, {0x2, 0x8, 0x9, 0x1000, 0x5, 0xffff}, {0x9, 0x1, 0x5a, 0x8, 0x3, 0x1}, {0x5, 0x836, 0x7f, 0x8, 0x8b59, 0x5}, {0x1ff, 0x7, 0x400, 0x9, 0x8, 0xb5}, {0x5, 0x2, 0x7, 0x6, 0x8, 0x1}, {0x400, 0x5, 0x7, 0x0, 0x7, 0x8}, {0x3, 0xd, 0x1, 0x4, 0x5}, {0x0, 0xb23, 0x101, 0x7, 0x0, 0x4}, {0x9, 0x9146, 0x0, 0x5, 0x80000001, 0x7}, {0x6925, 0x1c0b92e, 0x2, 0x39, 0x9d6, 0x5}, {0xf, 0xf, 0x1, 0x5c665eda, 0x9, 0x2}, {0x0, 0x9, 0x401, 0x0, 0x7ba, 0x9}, {0xffffffb6, 0x4, 0x6, 0x8, 0x20, 0xc}, {0x8, 0xf, 0x8, 0x1, 0x48, 0x3}, {0x9, 0x0, 0x9c4, 0x400, 0x9, 0xc0000000}, {0x6, 0xc, 0x1, 0x6, 0x3, 0x7}, {0x8, 0x8153, 0x8000, 0x6, 0x9, 0x7}, {0x1ff, 0x80000001, 0x4, 0x6, 0xc, 0x7}, {0x7ff, 0x9, 0x3, 0xe3f6, 0x3b5, 0x4}, {0x3, 0x7, 0xd376, 0x3, 0x2d3, 0x1}, {0x2, 0xffff, 0x10000, 0x6, 0x0, 0x1}, {0x80000000, 0x6, 0x8, 0x7, 0x8, 0x7}, {0xc390, 0xfead, 0x8001, 0x1ff, 0x7, 0x3}, {0x1, 0x7fff, 0x210e, 0xf, 0x1, 0x7}, {0x2, 0xfffffc01, 0xffffff92, 0x2d447236, 0x1, 0x5}, {0x4, 0x6, 0xff, 0x7, 0x5, 0x9}, {0xfffffffe, 0x6, 0x57, 0x3, 0x8000, 0x800}, {0x8, 0xf, 0x7, 0x3, 0x8000, 0x400}, {0x2, 0x7, 0xb9ab, 0x81, 0x2, 0x2}, {0x100, 0x7, 0x0, 0x6, 0x8001, 0x1}, {0x7ff, 0xfffffffc, 0x0, 0x5, 0x7f, 0xee3}, {0x7000000, 0x4, 0xfffffff7, 0x3, 0x9, 0x5}, {0x8, 0x5, 0x7, 0xfffffffe, 0x5, 0x74e}, {0x9, 0x5, 0xfc000000, 0x5, 0xfffffff8, 0x4}, {0x8, 0x7, 0xe, 0x8000, 0xffff0000, 0x2}, {0x401b, 0x9, 0x96, 0xf2a, 0x400, 0x8}, {0x2, 0xb, 0x6, 0xea1, 0xf, 0x90d2}, {0x800, 0x8, 0xc04, 0xffffffff, 0x3, 0x7}, {0x4, 0x8, 0x3ff, 0x7fffffff, 0x3ef, 0x3}, {0xa, 0x7, 0x1, 0x3, 0xffffffff, 0xa}, {0xf, 0x6, 0x1, 0xeb4, 0x0, 0xbb}, {0x8000, 0x10, 0x9dc, 0x9, 0x2f, 0x9}, {0x9, 0xa572, 0x6, 0x7, 0x5}, {0x8, 0x5, 0x2, 0x9, 0x9f, 0x7}, {0xa2fd, 0x80000001, 0x4, 0x0, 0x4, 0xffff}, {0x8, 0x80, 0x2, 0xa, 0x5, 0x3ff}, {0x8d0, 0x6, 0x2, 0x80000000, 0x8001, 0xffffffff}, {0x0, 0x4, 0x0, 0xfffffffe, 0x8, 0x2}, {0x9, 0x101, 0x0, 0x1, 0x100, 0x2}, {0x7, 0x5cbd, 0x10000, 0x4, 0x7, 0x92ff}, {0x5, 0x6, 0x4, 0x9, 0x5, 0x9}, {0x9, 0xfffff98b, 0x8, 0x9, 0x2, 0x3}, {0x3, 0xff, 0x9, 0x6, 0x6, 0x10001}, {0x4, 0xffff, 0x8000, 0x3, 0x81, 0x20000}, {0x1, 0x1, 0x6, 0x7, 0x1, 0x4000}, {0x7ff, 0x3ff, 0xe40a, 0x7, 0x3, 0x10001}, {0xb, 0xd, 0x9, 0x30, 0x7, 0x7}, {0xa, 0x7f, 0x5, 0x9, 0xc, 0x9}, {0x1, 0x1, 0x6, 0x7b19, 0x80000, 0x4}, {0x1, 0x9, 0x0, 0x7f, 0x7, 0xf69a}, {0x0, 0x9, 0x8, 0x7, 0x4b, 0x3}, {0x51, 0x3, 0x2ed, 0xff, 0xfffffffd, 0x401}, {0x6, 0x1, 0x0, 0xdac7, 0x3, 0xd}, {0x6, 0x6, 0x0, 0xfffffff7, 0x8, 0x3}, {0x806e, 0x9e, 0x80, 0xffffffff, 0xfffff000, 0xfffffff8}, {0x4, 0x7ff, 0x8, 0x9, 0x0, 0x73deaf7e}, {0x29, 0x6, 0x4, 0xf, 0xffffc754}, {0x4, 0x1, 0x10001, 0x3, 0x9e5, 0x538}, {0xa, 0x1, 0xffffffff, 0x8, 0x100, 0x4}, {0x4, 0x0, 0x8000, 0x1, 0x4, 0xfffff7cb}, {0x400, 0x200, 0x100000, 0x1c, 0x800, 0x1c00}, {0x3, 0x81, 0xe, 0x6, 0x4, 0x7}], [{0x3, 0x1}, {0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3}, {0x2}, {0x5}, {}, {0x3}, {0x5, 0x1}, {0x3}, {0x1}, {0x4}, {0x4}, {0x2}, {0x2}, {0x4, 0x1}, {0x3}, {0x0, 0x1}, {0x5, 0x1}, {0x4}, {0x4}, {0x7}, {0x0, 0x1}, {0x4}, {0x3}, {0x6, 0x1}, {0x5}, {0x4}, {0x3}, {0x4}, {0x5}, {0x2, 0x1}, {0x2}, {0x4, 0x1}, {0x5}, {0x2, 0x1}, {0x5}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x2}, {0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x3}, {0x4}, {0x3}, {0x1}, {0x0, 0x1}, {0x1}, {0x1}, {0x5}, {0x0, 0x1}, {0x1, 0x1}, {0x2, 0x6c25a6da58bcaee9}, {0x226d596e0d911f29}, {0x2}, {0x1}, {0x1}, {0x4}, {0x4}, {0x3}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x2}, {0x2}, {0x2, 0x1}, {0x0, 0x1}, {0x4}, {0x2}, {0x0, 0x1}, {0x1}, {0x6}, {0x2, 0x1}, {0x5}, {0x0, 0x1}, {0x0, 0x1}, {}, {0x3, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x2}, {0x4, 0x1}, {}, {0x4, 0x1}, {0x1}, {0x2, 0x1}, {0x2}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x3}, {0x3}, {0x3}, {0x2}, {0x0, 0x1}, {0xd, 0x1}, {0x0, 0x1}, {0x3}, {0x3}, {}, {0x6, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x4}, {0x5}, {0x3}, {0x2}]}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xe98}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
syz_io_uring_submit(r5, r6, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x80})
io_uring_enter(r4, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf)

20.827638028s ago: executing program 6 (id=1122):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
setreuid(0xee01, 0x0)
ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001280)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)

20.501162566s ago: executing program 0 (id=1124):
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) (async, rerun: 32)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000740)='cgroup2\x00', 0x0, 0x0) (async, rerun: 32)
mkdir(&(0x7f0000000040)='./file1\x00', 0x0) (async, rerun: 64)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (rerun: 64)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) (async)
ioctl$VFAT_IOCTL_READDIR_SHORT(0xffffffffffffffff, 0x82307202, &(0x7f0000000380)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) (async, rerun: 64)
chdir(&(0x7f0000000140)='./bus\x00') (rerun: 64)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getsockname$unix(r0, &(0x7f0000000180), &(0x7f0000000200)=0x6e) (async)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async)
r1 = open(&(0x7f0000000000)='./file2\x00', 0x0, 0x0)
getdents(r1, &(0x7f0000001fc0)=""/184, 0x20002078)
lstat(&(0x7f0000000240)='./bus\x00', &(0x7f00000005c0)) (async)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)

19.671743718s ago: executing program 6 (id=1125):
syz_mount_image$btrfs(&(0x7f0000000080), &(0x7f0000000000)='./file1\x00', 0x1c005, &(0x7f00000002c0)={[{@fatal_errors_bug}, {@datasum}, {@autodefrag}, {@nossd}, {@acl}, {@rescan_uuid_tree}, {@noacl}, {@clear_cache}, {@rescue={'rescue', 0x3d, 'usebackuproot'}}, {@discard_async}, {@nodatacow}]}, 0x9, 0x559d, &(0x7f0000004040)="$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")
mount(&(0x7f0000000100)=@loop={'/dev/loop', 0x0}, &(0x7f0000000180)='./file1\x00', &(0x7f0000000280)='btrfs\x00', 0x814008, 0x0)

19.582023643s ago: executing program 9 (id=1126):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000080000000800000000000000", @ANYRES32, @ANYBLOB], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000280), &(0x7f00000002c0)=r1}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
pipe2(&(0x7f0000000040), 0x80000)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0)
fcntl$lock(r2, 0x26, &(0x7f0000000000)={0x0, 0x0, 0xe3800000000000, 0x20000000058e})
fcntl$lock(r2, 0x6, &(0x7f0000000040)={0x0, 0x2, 0x2, 0xffffffffffffffff})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, 0x0)
fcntl$lock(r2, 0x24, &(0x7f0000000080)={0x2, 0x2, 0x7, 0x4000000008})

19.228716688s ago: executing program 0 (id=1127):
r0 = openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0xf0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50)
r5 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000000)={@loopback={0xfec0ffffffffffff}, 0x800, 0x0, 0x3, 0x1, 0x6, 0xbe}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

18.438517027s ago: executing program 9 (id=1128):
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x40, 0x56e, 0x19b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0xfd, {0x9, 0x21, 0x0, 0x1, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x2, 0x0, 0x9}}}}}]}}]}}, 0x0)
syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000280)={[{@nobarrier}, {@gid}, {@creator={'creator', 0x3d, "cf44eee4"}}, {@creator={'creator', 0x3d, "64eb8ba9"}}, {@nodecompose}, {@umask}, {@uid}, {@nodecompose}]}, 0x3, 0x6a4, &(0x7f0000001b40)="$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")
openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x20)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r1, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
socket$packet(0x11, 0x3, 0x300)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r3, 0x1, 0x70bd2c, 0xfffffffe, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty=0x241}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}, 0x1, 0xff07}, 0x2000000)

16.38172012s ago: executing program 0 (id=1129):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r1}, &(0x7f0000000280), &(0x7f0000000240)=r0}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

15.738316551s ago: executing program 6 (id=1132):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000100000000000000fe001811000008f6ff47b42d0378288912c26fb6e3b280a49d70", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x8, @remote, 0xb}, 0x1c)
syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[], 0x0)
prlimit64(0x0, 0x8, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$inet_mptcp(0x2, 0x1, 0x106)
socket$kcm(0x2, 0xa, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
futex(&(0x7f00000040c0), 0x6, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15)
futex(&(0x7f00000040c0), 0x87, 0x3, 0x0, 0x0, 0x2)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, 0x0)
syz_io_uring_setup(0x10e, &(0x7f00000000c0)={0x0, 0xbab4, 0x80, 0xffffffff}, &(0x7f00000003c0), &(0x7f0000000040))
openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x100, 0x44)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket(0x2b, 0x80801, 0x1)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x10000, @loopback, 0x1}, 0x1c)
socket(0x40000000015, 0x5, 0x0)

15.205278402s ago: executing program 8 (id=1133):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x33b, 0x20004000)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SET_IO_FLUSHER(0x43, 0x1)
prctl$PR_SET_IO_FLUSHER(0x43, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
socket$inet6_icmp(0xa, 0x2, 0x3a)
socket$nl_sock_diag(0x10, 0x3, 0x4)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x8000, &(0x7f0000000080)={[{@errors_remount}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@init_itable_val={'init_itable', 0x3d, 0x7ab4}}, {@jqfmt_vfsv0}]}, 0x80, 0x63c, &(0x7f0000001bc0)="$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")

15.148252849s ago: executing program 9 (id=1134):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x18)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10)
bpf$ITER_CREATE(0x21, &(0x7f0000006200)={r2}, 0x8)
syz_read_part_table(0x105b, &(0x7f0000000000)="$eJzsz0uNAlEQBdDbv8nrxXgYAWOBBA8EJWiAFStksMUACpDEIx2agAJgcc7mfXKrKhU+q83v4nHf34+f+dknuZyTLJPUWutuk/z1JSlJ16ROobJtxjwLSjK0STP/rMZumNpd+/xPs045DC/p9fFdawIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAN7sFAAD///tiDW8=")
ioctl$USBDEVFS_DISCARDURB(0xffffffffffffffff, 0x550b, 0x0)

14.745950882s ago: executing program 6 (id=1135):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000300)=@framed={{0x18, 0x2}, [@exit]}, &(0x7f0000000000)='GPL\x00', 0x8, 0x98, &(0x7f00000001c0)=""/152, 0x0, 0xa}, 0x94)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x2000}, 0x94)

9.379739852s ago: executing program 41 (id=1100):
r0 = socket$netlink(0x10, 0x3, 0x0)
bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r2 = syz_io_uring_setup(0x497, &(0x7f0000000000)={0x0, 0xf62c, 0x800, 0x3, 0x379}, &(0x7f00000001c0)=<r3=>0x0, &(0x7f0000000280)=<r4=>0x0)
r5 = getpgrp(0x0)
sched_setaffinity(r5, 0x32, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r6 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r6, 0x1, 0x0)
r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r2, 0x3516, 0x0, 0x20, 0x0, 0x0)

9.343479362s ago: executing program 8 (id=1137):
r0 = add_key$keyring(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffff8)
r1 = add_key$keyring(&(0x7f00000001c0), &(0x7f0000000200)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff9)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
r2 = socket$caif_seqpacket(0x25, 0x5, 0x2)
recvmmsg(r2, &(0x7f0000005840), 0x0, 0x2000, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f0000000140), 0x2, 0x141182)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xc, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000001f40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0xefd, 0x8000, 0x0, 0x0, 0x0})
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x8041}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x240, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x100000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xd, 0x80000005}, 0x0, 0x0)
keyctl$KEYCTL_MOVE(0x1e, 0x0, r0, r1, 0x1)
r6 = syz_mount_image$xfs(&(0x7f0000000500), &(0x7f0000000000)='./file1\x00', 0x2218a5d, &(0x7f0000000040), 0x0, 0x969e, &(0x7f0000000540)="$eJzs+gm8pnPh+P/fZxj7MIZKSk1FtMiaJaqZwQxCskQ7IilLSYU2KilttNCm7Fu2soSytZLsLZQQKmukxTbM/3HMGcZ48dG3z//nU6/X6/E4577v676u67zv9/NazmE2n7zxpMFgrsH0xg9m7eyrpkwde8UGtx2+1YJHLXfSXfs9csXFJ4w8Thx5nDQYDEaNvD00fdm4wcmnjBrM/uDyh5t37nmGxgwGy4+8HNnPYOXpD2MunbHetFmadaBDD3/bZ/rXgy0w/COGnxyy316HDgaDsTNtPzQYDO3xqA8qbfOJUyY/bPWQ27DV6JHnM3/NMf1rzAWDwZjTBnx8zLzu0JPwkYZ/5h4vPGv0Bk/Cz/6Pa/OJU9aZxX/4XJxtZNnKw+f4rOegsVmP81uW2GLVkSl88HgbDIYvcY84V/4j2nzi5PUGj32dHxy+2nn7TJt+3ZxzMP1GMfdgMJhn5Po635PtUv9eEyet8OA9e8brEfYZx/IedFwc++YTHhi+SQ8Gg4UGg3Frz7gXVFVV1X9GEyetsAbc/+d6vPv/iScuelr3/6qqqv/c1pk4aYXhe/0s9//5Hu/+v/Oi5390+n/7n7Dy9K0eeHI/RFVVVf1LTV4H7/9jH+/+v/IaF6/X/b+qquo/t43Wf/D+P98s9/+FH+/+/4YTVltsZL0ZvzfcP9Muh2b6/wn3zbR8tpmW3zvT8tEz7Wfm9eeYafndMy2fc/g9WH/8YDBuxr8XnPrw4nHjh98bWX7PTMsnPPzvdBZfc6blE2daPnmm5ZNGxjq8fMpMy6fMtP7ajzPVVVVV/2faaIXJawxm+nf2I4sXmfE+3f/PPf3qpZ+s8VZVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVdV/Zg/cdsZZg8FgaDAYjBoMpg5Gns/8OJg2bdq04dcnnnPJJU/aQP9vNHT2VVOmjr1ig9sO32rBo5Y76a79Hp6l/9j+8z9B/TsN+891zPjBYMdNn+yh1JNQ57+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/mLe+C2M84aOQZGDQZTByPP95jxePq+r3/jyKqrbnbSHfs/vOXiE7YbeXb2VVOmbvckjP1JaGj4s469YoPbDt9qwaOWO+mu/f4Lzp7//E9Q/04P+m83NBiMnN9jh8/lDSZutMlSg8Fg/ztO2mylwUPvrTL83mrjZhvM9uCmSz34fa3Fecd7rD39ccLwt4Uf2seJD+5/nWkHzzY0yyBm6uVnX3f42ze/a8VZH5d87M8xasaTQ6859c5p06ZNe8TCkeZ6jI1n7H/GZ5n1PB8Z+1LDY19mlx3etcx7dtt96e122HLbbbbdZsflVlhlxZWWX26lVV+6zNu2236bZad/f4w5G//g9zWeyJzNN+uc3TZx5jmb9bM91pyNf/w5e3CPU3cf2mTGnM3+L87ZGo8/Z+O3G/lBi08YPdjiwakZGgwWX3P0YNfhF8vNORgsvtbIuosMr7v6uFGDwb4Pf9DhZ3M+dAwO7TG8zuaTN5708Mge/QkfdZ1+xIqLTxh5nDjyOGn6EMcPHj4Uxw1OPmXU8Fw8YprnnXueoTGDwfIjL0f2M1h15N2DZqw3bZZmHejQw9/2mf71YAsM72T4yTuWPePK4XNxlu3//9H/0/X/UV6rDD00UUMjXyPrTPeaOGWdh3/Wg9MwPHezjSxbedhk1jn73+xR4x0/+2Ds44x38jqTVhhePMv8z9gEj6/blzjvA9OPrQkrT9/qgf9nFBrvfI8z3nUm4njne7zxHvPBi06Zvqv/tfHOcq1b78HvE57ItW7w+Ne62WgH21y42KzXulc99hAfcR7PmKM5Z1npsa51ux6w/B7D+5/w+Ne69YbHPvoR17pRg8Hia8y41g1f+CaPHuw7/GL54RdTRg+OGn6xwoMv5h6cM/ziJW/dafuthxesPWNOlh3e74RxQw+6n7fyzUtO++K0aWuOjGXCuEeOdeT4GD/z/XziuOmTOWPbGfsdXnXGfm982vT3Jo/sd+K/sN8Z29J471hg+ntTRvY7aZb9jn6c/c7Y9lHnw1JDD124HuN6M3mW683I3zgzftwjvuaY/jXmgsFgzGnkO8u6/+M1k87fuR5nvBMnrbDG8PhmOX8fOhzp/L1oyhXD94oxg8FgocFg3Nozxv4vNvRY45398cc7CcY7++ON97Kjd1j/f2G8g5nG+4jjbPONph8ra48cZ1P+heN3xrazXsdGP/ju9Mv+2k/kOjb+UdexPWcbNctkz9Rj/c62Naw//fkiD/+ee9XxR86Y+9Gz7Pd/+p1tps8yBNexsbP8PT9q7WsHQzTnexyz+sVDX3r8OR89eOTfFjPmfMa2jzfnU57InD/z8ef8if6evNTzpr8/epbxzzznG37mGZ+eMedzzLLf/2nOpzz+vePRcz5hMJrmfNl7p8/b411PH2vOZ2w7Y86HP+Jq42YfrDV8zxqZ88lPZM4X+d85zueB9ac/3+ahRWceftJrZ8z5rHP8P8355H91zsc/dJwv/uB7zx01mGOOwa5b7rLLzstN/z7j5fLTv/O16O6rps/z491LH8toxraPd16s+USMxj4ho6H/yWjR2R/L6OFT67Cddn7q/+u1aM1/1WjA16Irjpw+b4/3e9FjzfmMbek+uPBM28/6d+hG6z/4e/d8s9wHZ2yC98EzT19v7xm7HNns/lmGOeO+et9My2ebafm9My0fPdN+Zl5/jpmW3z3T8uGPMMdM689gHT/8N+/I8qkPrz5u+Jen8SPL75lp+YSHt118zZmWT5xp+eSZlk96+NBYfMpMy6fMtP7ag3+xGf9NertZL/L1ROu//7rL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8hf3wG1nnDVyDIwaDKYOpj8fGnkc7DG04a2vHH4cDAajVz5u2oZP9nif5IbOvmrK1LFXbHDb4VsteNRyJ92133/B2fOf/wnq3+lB/+2GBoOR83vsdoPBYIOJG22y1GAw2HDacSuPGjz03iLD760+btRgsO/QI3Yw50PrDO0xvM7mkzeeNBjMNbLG+Ef90EedR49YcfEJI48TRx4nTb8+jR88fLyOG5x8yqjB7A8uf7h5555naMxgsPzIy5H9DFae/jDm0hnrTZulWQc69PC3faZ/PdgCwz9i+Mmu20551vBczbL9/5lmXKu3G/U/rtr57y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/uIeuO2Ms0aOgVGDwdTB9OdDe4w8DoZOOPkFI4fI6N0uP+LgJ3u8T3JDZ181ZerYKza47fCtFjxquZPu2u+/4Oz5z/8E9e/0oP92Q4PByPk9drvBYLDBxI02WWowGBx8xOW7jRo89N4iw++tPm7UYLDv0CN2MOdD6wztMbzO5pM3njQYzDWyxvhH/dBHnUePWHHxCSOPE0ceJ02/Po0fPHy8jhucfMqowewPLn+4eeeeZ2jMYLD8yMuR/QxWnv4w5tIZ602bpVkHOvTwt32mfz3YAsM/YvjJXvNddcLwXM2y/f+ZZlyrtxv1P67a+e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7iHrjtjLNGjoFRg8HUwfTno0Yeh/a44foPbzL8OPx6wbX3vurJHu+T3NDZV02ZOvaKDW47fKsFj1rupLv2+y84e/7zP0H9Ow37z3XM+MFgx02f7KHUk1Dnv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+Yt74LYzzhp5OurhpaP26LjAhs6+asrUsVdscNvhWy141HIn3bXfkz2gf7fH8N8zf8zi/9H8MYv/x/LHLP4fzx+z+O+VP2bx/0T+mMV/7/wxi/8n88cs/p/KH7P475M/ZvH/dP6Yxf8z+WMW/8/mj1n8P5c/ZvH/fP6YxX/f/DGL/375Yxb/L+SPWfy/mD9m8f9S/pjF/8v5Yxb//fPHLP4H5I9Z/L+SP2bx/2r+mMX/a/ljFv+v549Z/L+RP2bxPzB/zOL/zfwxi/+38scs/gflj1n8D84fs/gfkj9m8T80f8zif1j+mMX/8Pwxi/8R+WMW/yPzxyz+R+WPWfyPzh+z+B+TP2bx/3b+mMX/2Pwxi/9x+WMW/+Pzxyz+J+SPWfxPzB+z+H8nf8zi/938MYv/SfljFv+T88cs/qfkj1n8T80fs/h/L3/M4n9a/pjF//T8MYv/GfljFv/v549Z/H+QP2bxPzN/zOJ/Vv6Yxf/s/DGL/zn5Yxb/c/PHLP4/zB+z+P8of8zi/+P8MYv/T/LHLP4/zR+z+P8sf8zif17+mMX//Pwxi//P88cs/hfkj1n8f5E/ZvG/MH/M4n9R/pjF/+L8MYv/JfljFv9L88cs/pflj1n8L88fs/j/Mn/M4v+r/DGL/6/zxyz+v8kfs/hfkT9m8b8yf8zi/9v8MYv/7/LHLP5X5Y9Z/H+fP2bxvzp/zOJ/Tf6Yxf/a/DGL/x/yxyz+1+WPWfyvzx+z+N+QP2bx/2P+mMX/T/ljFv8/549Z/G/MH7P437TumPwhi//Nnf+Yxf+W/DGL/635Yxb/2/LHLP5/yR+z+N+eP2bxvyN/zOL/1/wxi/+d+WMW/7/lj1n8/54/ZvH/R/6Yxf+f+WMW/7vyxyz+d+ePWfzvyR+z+N+bP2bxvy9/zOI/NX/M4n9//pjF/4H8MYv/tPwxif9sg/wxi/9Q/pjFf1T+mMV/tvwxi//s+WMW/9H5Yxb/OfLHLP5z5o9Z/OfKH7P4z50/ZvGfJ3/M4j9v/pjFf778MYv/mPwxi//8+WMW/wXyxyz+Y23+6455QqtZ/Be0+T/BLP7j8scs/gvlj1n8F84fs/g/JX/M4v/U/DGL/9Pyxyz+i+SPWfyfnj9m8V80f8zi/4z8MYv/M/PHLP6L5Y9Z/J+VP2bxf3b+mMV/fP6Yxf85+WMW/+fmj1n8n5c/ZvFfPH/M4r9E/pjF//n5Yxb/JfPHLP5L5Y9Z/F+QP2bxf2H+mMX/RfljFv8X549Z/JfOH7P4vyR/zOK/TP6YxX/Z/DGL/3L5Yxb/5fPHLP4r5I9Z/FfMH7P4vzR/zOK/Uv6YxX/l/DGL/yr5Yxb/VfPHLP4vyx+z+K+WP2bxXz1/zOL/8vwxi/8r8scs/q/MH7P4T8gfs/hPzB+z+E/KH7P4r5E/ZvFfM3/M4r9W/pjFf3L+mMV/Sv6YxX/t/DGL/zr5Yxb/dfPHLP6vyh+z+K+XP2bxXz9/zOK/Qf6Yxf/V+WMW/w3zxyz+r8kfs/hvlD9m8d84f8ziv0n+mMV/0/wxi/9r88cs/pvlj1n8N88fs/i/Ln/M4v/6/DGL/xvyxyz+b8wfs/i/KX/M4v/m/DGL/1vyxyz+W+SPWfy3zB+z+G+VP2bxf2v+mMV/6/wxi/82+WMW/7flj1n8t80fs/i/PX/M4r9d/pjF/x35Yxb/d+aPWfy3zx+z+O+QP2bx3zF/zOK/U/6Yxf9d+WMW/3fnj1n8d84fs/i/J3/M4r9L/pjF/735Yxb/9+WPWfzfnz9m8d81f8ziv1v+mMV/9/wxi/8H8scs/h/MH7P4fyh/zOL/4fwxi/9H8scs/nvkj1n898wfs/h/NH/M4v+x/DGL/8fzxyz+e+WPWfw/kT9m8d87f8zi/8n8MYv/p/LHLP775I9Z/D+dP2bx/0z+mMX/s/ljFv/P5Y9Z/D+fP2bx3zd/zOK/X/6Yxf8L+WMW/y/mj1n8v5Q/ZvH/cv6YxX///DGL/wH5Yxb/r+SPWfy/mj9m8f9a/pjF/+v5Yxb/b+SPWfwPzB+z+H8zf8zi/638MYv/QfljFv+D88cs/ofkj1n8D80fs/gflj9m8T88f8zif0T+mMX/yPwxi/9R+WMW/6Pzxyz+x+SPWfy/nT9m8T82f8zif1z+mMX/+Pwxi/8J+WMW/xPzxyz+38kfs/h/N3/M4n9S/pjF/+T8MYv/KfljFv9T88cs/t/LH7P4n5Y/ZvE/PX/M4n9G/pjF//v5Yxb/H+SPWfzPzB+z+J+VP2bxPzt/zOJ/Tv6Yxf/c/DGL/w/zxyz+P8ofs/j/OH/M4v+T/DGL/0/zxyz+P8sfs/iflz9m8T8/f8zi//P8MYv/BfljFv9f5I9Z/C/MH7P4X5Q/ZvG/OH/M4n9J/pjF/9L8MYv/ZfljFv/L88cs/r/MH7P4/yp/zOL/6/wxi/9v8scs/lfkj1n8r8wfs/j/Nn/M4v+7/DGL/1X5Yxb/3+ePWfyvzh+z+F+TP2bxvzZ/zOL/h/wxi/91+WMW/+vzxyz+N+SPWfz/mD9m8f9T/pjF/8/5Yxb/G/PHLP435Y9Z/G/OH7P435I/ZvG/NX/M4n9b/pjF/y/5Yxb/2/PHLP535I9Z/P+aP2bxvzN/zOL/t/wxi//f88cs/v/IH7P4/zN/zOJ/V/6Yxf/u/DGL/z35Yxb/e/PHLP735Y9Z/Kfmj1n8788fs/g/kD9m8Z+WPybxn32QP2bxH8ofs/iPyh+z+M+WP2bxnz1/zOI/On/M4j9H/pjFf878MYv/XPljFv+588cs/vPkj1n8580fs/jPlz9m8R+TP2bxnz9/zOK/QP6YxX9s/pjFf8H8MYv/uPwxi/9C+WMW/4Xzxyz+T8kfs/g/NX/M4v+0/DGL/yL5Yxb/p+ePWfwXzR+z+D8jf8zi/8z8MYv/YvljFv9n5Y9Z/J+dP2bxH58/ZvF/Tv6Yxf+5+WMW/+flj1n8F88fs/gvkT9m8X9+/pjFf8n8MYv/UvljFv8X5I9Z/F+YP2bxf1H+mMX/xfljFv+l88cs/i/JH7P4L5M/ZvFfNn/M4r9c/pjFf/n8MYv/CvljFv8V88cs/i/NH7P4r5Q/ZvFfOX/M4r9K/pjFf9X8MYv/y/LHLP6r5Y9Z/FfPH7P4vzx/zOL/ivwxi/8r88cs/hPyxyz+E/PHLP6T8scs/mvkj1n810T/Iz77/93A/m9m8V+r8x+z+E/OH7P4T8kfs/ivnT9m8V8nf8ziv27+mMX/VfljFv/18scs/uvnj1n8N8gfs/i/On/M4r9h/pjF/zX5Yxb/jfLHLP4b549Z/DfJH7P4b5o/ZvF/bf6YxX+z/DGL/+b5Yxb/1+WPWfxfnz9m8X9D/pjF/435Yxb/N+WPWfzfnD9m8X9L/pjFf4v8MYv/lvljFv+t8scs/m/NH7P4b50/ZvHfJn/M4v+2/DGL/7b5Yxb/t+ePWfy3yx+z+L8jf8zi/878MYv/9vljFv8d8scs/jvmj1n8d8ofs/i/K3/M4v/u/DGL/875Yxb/9+SPWfx3yR+z+L83f8zi/778MYv/+/PHLP675o9Z/HfLH7P4754/ZvH/QP6Yxf+D+WMW/w/lj1n8P5w/ZvH/SP6YxX+P/DGL/575Yxb/j+aPWfw/lj9m8f94/pjFf6/8MYv/J/LHLP57549Z/D+ZP2bx/1T+mMV/n/wxi/+n88cs/p/JH7P4fzZ/zOL/ufwxi//n88cs/vvmj1n898sfs/h/IX/M4v/F/DGL/5fyxyz+X84fs/jvnz9m8T8gf8zi/5X8MYv/V/PHLP5fyx+z+H89f8zi/438MYv/gfljFv9v5o9Z/L+VP2bxPyh/zOJ/cP6Yxf+Q/DGL/6H5Yxb/w/LHLP6H549Z/I/IH7P4H5k/ZvE/Kn/M4n90/pjF/5j8MYv/t/PHLP7H5o9Z/I/LH7P4H58/ZvE/IX/M4n9i/pjF/zv5Yxb/7+aPWfxPyh+z+J+cP2bxPyV/zOJ/av6Yxf97+WMW/9Pyxyz+p+ePWfzPyB+z+H8/f8zi/4P8MYv/mfljFv+z8scs/mfnj1n8z8kfs/ifmz9m8f9h/pjF/0f5Yxb/H+ePWfx/kj9m8f9p/pjF/2f5Yxb/8/LHLP7n549Z/H+eP2bxvyB/zOL/i/wxi/+F+WMW/4vyxyz+F+ePWfwvyR+z+F+aP2bxvyx/zOJ/ef6Yxf+X+WMW/1/lj1n8f50/ZvH/Tf6Yxf+K/DGL/5X5Yxb/3+aPWfx/lz9m8b8qf8zi//v8MYv/1fljFv9r8scs/tfmj1n8/5A/ZvG/Ln/M4n99/pjF/4b8MYv/H/PHLP5/yh+z+P85f8zif2P+mMX/pvwxi//N+WMW/1vyxyz+t+aPWfxvyx+z+P8lf8zif3v+mMX/jvwxi/9f88cs/nfmj1n8/5Y/ZvH/e/6Yxf8f+WMW/3/mj1n878ofs/jfnT9m8b8nf8zif2/+mMX/vvwxi//U/DGL//35Yxb/B/LHLP7T8sck/qMH+WMW/6H8MYv/qPwxi/9s+WMW/9nzxyz+o/PHLP5z5I9Z/OfMH7P4z5U/ZvGfO3/M4j9P/pjFf978MYv/fPljFv8x+WMW//nzxyz+C+SPWfzH5o9Z/BfMH7P4j8sfs/gvlD9m8V84f8zi/5T8MYv/U/PHLP5Pyx+z+C+SP2bxf3r+mMV/0fwxi/8z8scs/s/MH7P4L5Y/ZvF/Vv6Yxf/Z+WMW//H5Yxb/5+SPWfyfmz9m8X9e/pjFf/H8MYv/EvljFv/n549Z/JfMH7P4L5U/ZvF/Qf6Yxf+F+WMW/xflj1n8X5w/ZvFfOn/M4v+S/DGL/zL5Yxb/ZfPHLP7L5Y9Z/JfPH7P4r5A/ZvFfMX/M4v/S/DGL/0r5Yxb/lfPHLP6r5I9Z/FfNH7P4vyx/zOK/Wv6YxX/1/DGL/8vzxyz+r8gfs/i/Mn/M4j8hf8ziPzF/zOI/KX/M4r9G/pjFf838MYv/WvljFv/J+WMW/yn5Yxb/tfPHLP7r5I9Z/NfNH7P4vyp/zOK/Xv6YxX/9/DGL/wb5Yxb/V+ePWfw3zB+z+L8mf8ziv1H+mMV/4/wxi/8m+WMW/03zxyz+r80fs/hvlj9m8d88f8zi/7r8MYv/6/PHLP5vyB+z+L8xf8zi/6b8MYv/m/PHLP5vyR+z+G+RP2bx3zJ/zOK/Vf6Yxf+t+WMW/63zxyz+2+SPWfzflj9m8d82f8zi//b8MYv/dvljFv935I9Z/N+ZP2bx3z5/zOK/Q/6YxX/H/DGL/075z04LLf7vyh+z+L87f8ziv3P+mMX/PfljFv9d8scs/u/NH7P4vy9/zOL//vwxi/+u+WMW/93yxyz+u+ePWfw/kD9m8f9g/pjF/0P5Yxb/D+ePWfw/kj9m8d8jf8ziv2f+mMX/o/ljFv+P5Y9Z/D+eP2bx3yt/zOL/ifwxi//e+WMW/0/mj1n8P5U/ZvHfJ3/M4v/p/DGL/2fyxyz+n80fs/h/Ln/M4v/5/DGL/775Yxb//fLHLP5fyB+z+H8xf8zi/6X8MYv/l/PHLP77549Z/A/IH7P4fyV/zOL/1fwxi//X8scs/l/PH7P4fyN/zOJ/YP6Yxf+b+WMW/2/lj1n8D8ofs/gfnD9m8T8kf8zif2j+mMX/sPwxi//h+WMW/yPyxyz+R+aPWfyPyh+z+B+dP2bxPyZ/zOL/7fwxi/+x+WMW/+Pyxyz+x+ePWfxPyB+z+J+YP2bx/07+mMX/u/ljFv+T8scs/ifnj1n8T8kfs/ifmj9m8f9e/pjF/7T8MYv/6fljFv8z8scs/t/PH7P4/yB/zOJ/Zv6Yxf+s/DGL/9n5Yxb/c/LHLP7n5o9Z/H+YP2bx/1H+mMX/x/ljFv+f5I9Z/H+aP2bx/1n+mMX/vPwxi//5+WMW/5/nj1n8L8gfs/j/In/M4n9h/pjF/6L8MYv/xfljFv9L8scs/pfmj1n8L8sfs/hfnj9m8f9l/pjF/1f5Yxb/X+ePWfx/kz9m8b8if8zif2X+mMX/t/ljFv/f5Y9Z/K/KH7P4/z5/zOJ/df6Yxf+a/DGL/7X5Yxb/P+SPWfyvyx+z+F+fP2bxvyF/zOL/x/wxi/+f8scs/n/OH7P435g/ZvG/KX/M4n9z/pjF/5b8MYv/rfljFv/b8scs/n/JH7P4354/ZvG/I3/M4v/X/DGL/535Yxb/v+WPWfz/nj9m8f9H/pjF/5/5Yxb/u/LHLP53549Z/O/JH7P435s/ZvG/L3/M4j81f8zif3/+mMX/gfwxi/+0/DGJ/xyD/DGL/1D+mMV/VP6YxX+2/DGL/+z5Yxb/0fljFv858scs/nPmj1n858ofs/jPnT9m8Z8nf8ziP2/+mMV/vvwxi/+Y/DGL//z5Yxb/BfLHLP5j88cs/gvmj1n8x+WPWfwXyh+z+C+cP2bxf0r+mMX/qfljFv+n5Y9Z/BfJH7P4Pz1/zOK/aP6Yxf8Z+WMW/2fmj1n8F8sfs/g/K3/M4v/s/DGL//j8MYv/c/LHLP7PzR+z+D8vf8ziv3j+mMV/ifwxi//z88cs/kvmj1n8l8ofs/i/IH/M4v/C/DGL/4vyxyz+L84fs/gvnT9m8X9J/pjFf5n8MYv/svljFv/l8scs/svnj1n8V8gfs/ivmD9m8X9p/pjFf6X8MYv/yvljFv9V8scs/qvmj1n8X5Y/ZvFfLX/M4r96/pjF/+X5Yxb/V+SPWfxfmT9m8Z+QP2bxn5g/ZvGflD9m8V8jf8ziv2b+mMV/rfwxi//k/DGL/5T8MYv/2vljFv918scs/uvmj1n8X5U/ZvFfL3/M4r9+/pjFf4P8MYv/q/PHLP4b5o9Z/F+TP2bx3yh/zOK/cf6YxX+T/DGL/6b5Yxb/1+aPWfw3yx+z+G+eP2bxf13+mMX/9fljFv835I9Z/N+YP2bxf1P+mMX/zfljFv+35I9Z/LfIH7P4b5k/ZvHfKn/M4v/W/DGL/9b5Yxb/bfLHLP5vyx+z+G+bP2bxf3v+mMV/u/wxi/878scs/u/MH7P4b58/ZvHfIX/M4r9j/pjFf6f8MYv/u/LHLP7vzh+z+O+cP2bxf0/+mMV/l/wxi/9788cs/u/LH7P4vz9/zOK/a/6YxX+3/DGL/+75Yxb/D+SPWfw/mD9m8f9Q/pjF/8P5Yxb/j+SPWfz3yB+z+O+ZP2bx/2j+mMX/Y/ljFv+P549Z/PfKH7P4fyJ/zOK/d/6Yxf+T+WMW/0/lj1n898kfs/h/On/M4v+Z/DGL/2fzxyz+n8sfs/h/Pn/M4r9v/pjFf7/8MYv/F/LHLP5fzB+z+H8pf8zi/+X8MYv//vljFv8D8scs/l/JH7P4fzV/zOL/tfwxi//X88cs/t/IH7P4H5g/ZvH/Zv6Yxf9b+WMW/4Pyxyz+B+ePWfwPyR+z+B+aP2bxPyx/zOJ/eP6Yxf+I/DGL/5H5Yxb/o/LHLP5H549Z/I/JH7P4fzt/zOJ/bP6Yxf+4/DGL//H5Yxb/E/LHLP4n5o9Z/L+TP2bx/27+mMX/pPwxi//J+WMW/1Pyxyz+p+aPWfy/lz9m8T8tf8zif3r+mMX/jPwxi//388cs/j/IH7P4n5k/ZvE/K3/M4n92/pjF/5z8MYv/ufljFv8f5o9Z/H+UP2bx/3H+mMX/J/ljFv+f5o9Z/H+WP2bxPy9/zOJ/fv6Yxf/n+WMW/wvyxyz+v8gfs/hfmD9m8b8of8zif3H+mMX/kvwxi/+l+WMW/8vyxyz+l+ePWfx/mT9m8f9V/pjF/9f5Yxb/3+SPWfyvyB+z+F+ZP2bx/23+mMX/d/ljFv+r8scs/r/PH7P4X50/ZvG/Jn/M4n9t/pjF/w/5Yxb/6/LHLP7X549Z/G/IH7P4/zF/zOL/p/wxi/+f88cs/jfmj1n8b8ofs/jfnD9m8b8lf8zif2v+mMX/tvwxi/9f8scs/rfnj1n878gfs/j/NX/M4n9n/pjF/2/5Yxb/v+ePWfz/kT82s//8g8Hgv9X/n/ljlvP/rvwxi//d+WMW/3vyxyz+9+aPWfzvyx+z+E/NH7P4358/ZvF/IH/M4j8tf0ziP+cgf8ziP5Q/ZvEflT9m8Z8tf8ziP3v+mMV/dP6YxX+O/DGL/5z5Yxb/ufLHLP5z549Z/OfJH7P4z5s/ZvGfL3/M4j8mf8ziP3/+mMV/gfwxi//Y/DGL/4L5Yxb/cfljFv+F8scs/gvnj1n8n5I/ZvF/av6Yxf9p+WMW/0Xyxyz+T88fs/gvmj9m8X9G/pjF/5n5Yxb/xfLHLP7Pyh+z+D87f8ziPz5/zOL/nPwxi/9z88cs/s/LH7P4L54/ZvFfIn/M4v/8/DGL/5L5Yxb/pfLHLP4vyB+z+L8wf8zi/6L8MYv/i/PHLP5L549Z/F+SP2bxXyZ/zOK/bP6YxX+5/DGL//L5Yxb/FfLHLP4r5o9Z/F+aP2bxXyl/zOK/cv6YxX+V/DGL/6r5Yxb/l+WPWfxXyx+z+K+eP2bxf3n+mMX/FfljFv9X5o9Z/Cfkj1n8J+aPWfwn5Y9Z/NfIH7P4r5k/ZvFfK3/M4j85f8ziPyV/zOK/dv6YxX+d/DGL/7r5Yxb/V+WPWfzXyx+z+K+fP2bx3yB/zOL/6vwxi/+G+WMW/9fkj1n8N8ofs/hvnD9m8d8kf8ziv2n+mMX/tfljFv/N8scs/pvnj1n8X5c/ZvF/ff6Yxf8N+WMW/zfmj1n835Q/ZvF/c/6Yxf8t+WMW/y3yxyz+W+aPWfy3yh+z+L81f8ziv3X+mMV/m/wxi//b8scs/tvmj1n8354/ZvHfLn/M4v+O/DGL/zvzxyz+2+ePWfx3yB+z+O+YP2bx3yl/zOL/rvwxi/+788cs/jvnj1n835M/ZvHfJX/M4v/e/DGL//vyxyz+788fs/jvmj9m8d8tf8ziv3v+mMX/A/ljFv8P5o9Z/D+UP2bx/3D+mMX/I/ljFv898scs/nvmj1n8P5o/ZvH/WP6Yxf/j+WMW/73yxyz+n8gfs/jvnT9m8f9k/pjF/1P5Yxb/ffLHLP6fzh+z+H8mf8zi/9n8MYv/5/LHLP6fzx+z+O+bP2bx3y9/zOL/hfwxi/8X88cs/l/KH7P4fzl/zOK/f/6Yxf+A/DGL/1fyxyz+X80fs/h/LX/M4v/1/DGL/zfyxyz+B+aPWfy/mT9m8f9W/pjF/6D8MYv/wfljFv9D8scs/ofmj1n8D8sfs/gfnj9m8T8if8zif2T+mMX/qPwxi//R+WMW/2Pyxyz+384fs/gfmz9m8T8uf8zif3z+mMX/hPwxi/+J+WMW/+/kj1n8v5s/ZvE/KX/M4n9y/pjF/5T8MYv/qfljFv/v5Y9Z/E/LH7P4n54/ZvE/I3/M4v/9/DGL/w/yxyz+Z+aPWfzPyh+z+J+dP2bxPyd/zOJ/bv6Yxf+H+WMW/x/lj1n8f5w/ZvH/Sf6Yxf+n+WMW/5/lj1n8z8sfs/ifnz9m8f95/pjF/4L8MYv/L/LHLP4X5o9Z/C/KH7P4X5w/ZvG/JH/M4n9p/pjF/7L8MYv/5fljFv9f5o9Z/H+VP2bx/3X+mMX/N/ljFv8r8scs/lfmj1n8f5s/ZvH/Xf6Yxf+q/DGL/+/zxyz+V+ePWfyvyR+z+F+bP2bx/0P+mMX/uvwxi//1+WMW/xvyxyz+f8wfs/j/KX/M4v/n/DGL/435Yxb/m/LHLP43549Z/G/JH7P435o/ZvG/LX/M4v+X/DGL/+35Yxb/O/LHLP5/zR+z+N+ZP2bx/1v+mMX/7/ljFv9/5I9Z/P+ZP2bxvyt/zOJ/d/6Yxf+e/DGL/735Yxb/+/LHLP5T88cs/vfnj1n8H8gfs/hPyx+T+M81yB+z+A/lj1n8R+WPWfxnyx+z+M+eP2bxH50/ZvGfI3/M4j9n/pjFf678MYv/3PljFv958scs/vPmj1n858sfs/iPyR+z+M+fP2bxXyB/zOI/Nn/M4r9g/pjFf1z+mMV/ofwxi//C+WMW/6fkj1n8n5o/ZvF/Wv6YxX+R/DGL/9Pzxyz+i+aPWfyfkT9m8X9m/pjFf7H8MYv/s/LHLP7Pzh+z+I/PH7P4Pyd/zOL/3Pwxi//z8scs/ovnj1n8l8gfs/g/P3/M4r9k/pjFf6n8MYv/C/LHLP4vzB+z+L8of8zi/+L8MYv/0vljFv+X5I9Z/JfJH7P4L5s/ZvFfLn/M4r98/pjFf4X8MYv/ivljFv+X5o9Z/FfKH7P4r5w/ZvFfJX/M4r9q/pjF/2X5Yxb/1fLHLP6r549Z/F+eP2bxf0X+mMX/lfljFv8J+WMW/4n5Yxb/SfljFv818scs/mvmj1n818ofs/hPzh+z+E/JH7P4r50/ZvFfJ3/M4r9u/pjF/1X5Yxb/9fLHLP7r549Z/DfIH7P4vzp/zOK/Yf6Yxf81+WMW/43yxyz+G+ePWfw3yR+z+G+aP2bxf23+mMV/s/wxi//m+WMW/9flj1n8X58/ZvF/Q/6Yxf+N+WMW/zflj1n835w/ZvF/S/6YxX+L/DGL/5b5Yxb/rfLHLP5vzR+z+G+dP2bx3yZ/zOL/tvwxi/+2+WMW/7fnj1n8t8sfs/i/I3/M4v/O/DGL//b5Yxb/HfLHLP475o9Z/HcS+l/7BNax+L9L6P9Esvi/O3/M4r9z/pjF/z35Yxb/XfLHLP7vzR+z+L8vf8zi//78MYv/rvljFv/d8scs/rvnj1n8P5A/ZvH/YP6Yxf9D+WMW/w/nj1n8P5I/ZvHfI3/M4r9n/pjF/6P5Yxb/j+WPWfw/nj9m8d8rf8zi/4n8MYv/3vljFv9P5o9Z/D+VP2bx3yd/zOL/6fwxi/9n8scs/p/NH7P4fy5/zOL/+fwxi/+++WMW//3yxyz+X8gfs/h/MX/M4v+l/DGL/5fzxyz+++ePWfwPyB+z+H8lf8zi/9X8MYv/1/LHLP5fzx+z+H8jf8zif2D+mMX/m/ljFv9v5Y9Z/A/KH7P4H5w/ZvE/JH/M4n9o/pjF/7D8MYv/4Tr/OZ7QWhb/I3T+TyyL/5H5Yxb/o/LHLP5H549Z/I/JH7P4fzt/zOJ/bP6Yxf+4/DGL//H5Yxb/E/LHLP4n5v+opk2b9pHhR4P/d/LHLOf/d/PHLP4n5Y9Z/E/OH7P4n5I/ZvE/NX/M4v+9/DGL/2n5Yxb/0/PHLP5n5I9Z/L+fP2bx/0H+mMX/zPwxi/9Z+WMW/7Pzxyz+5+SPWfzPzR+z+P8wf8zi/6P8MYv/j/PHLP4/yR+z+P80f8zi/7P8MYv/efljFv/z88cs/j/PH7P4X5A/ZvH/Rf6Yxf/C/DGL/0X5Yxb/i/PHLP6X5I9Z/C/NH7P4X5Y/ZvG/PH/M4v/L/DGL/6/yxyz+v84fs/j/Jn/M4n9F/pjF/8r8MYv/b/PHLP6/yx+z+F+VP2bx/33+mMX/6vwxi/81+WMW/2vzxyz+f8gfs/hflz9m8b8+f8zif0P+mMX/j/ljFv8/5Y9Z/P+cP2bxvzF/zOJ/U/6Yxf/m/DGL/y35Yxb/W/PHLP635Y9Z/P+SP2bxvz1/zOJ/R/6Yxf+v+WMW/zvzxyz+f8sfs/j/PX/M4v+P/DGL/z/zxyz+d+WPWfzvzh+z+N+TP2bxvzd/zOJ/X/6YxX9q/pjF//78MYv/A/ljFv9p+WMS/7kH+WMW/6H8MYv/qPwxi/9s+WMW/9nzxyz+o/PHLP5z5I9Z/OfMH7P4z5U/NpP/7P/N/nPnj1nO/3nyxyz+8+aPWfznyx+z+I/JH7P4z58/ZvFfIH/M4j82f8ziv2D+mMV/XP6YxX+h/DGL/8L5Yxb/p+SPWfyfmj9m8X9a/pjFf5H8MYv/0/PHLP6L5o9Z/J+RP2bxf2b+mMV/sfwxi/+z8scs/s/OH7P4j88fs/g/J3/M4v/c/DGL//Pyxyz+i+ePWfyXyB+z+D8/f8ziv2T+mMV/qfwxi/8L8scs/i/MH7P4vyh/zOL/4vwxi//S+WMW/5fkj1n8l8kfs/gvmz9m8V8uf8ziv3z+mMV/hfwxi/+K+WMW/5fmj1n8V8ofs/ivnD9m8V8lf8ziv2r+mMX/ZfljFv/V8scs/qvnj1n8X54/ZvF/Rf6Yxf+V+WMW/wn5Yxb/ifljFv9J+WMW/zXyxyz+a+aPWfzXyh+z+E/OH7P4T8kfs/ivnT9m8V8nf8ziv27+mMX/VfljFv/18scs/uvnj1n8N8gfs/i/On/M4r9h/pjF/zX5Yxb/jfLHLP4b549Z/DfJH7P4b5o/ZvF/bf6YxX+z/DGL/+b5Yxb/1+WPWfxfnz9m8X9D/pjF/435Yxb/N+WPWfzfnD9m8X9L/pjFf4v8MYv/lvljFv+t8scs/m/NH7P4b50/ZvHfJn/M4v+2/DGL/7b5Yxb/t+ePWfy3yx+z+L8jf8zi/878MYv/9vljFv8d8scs/jvmj1n8d8ofs/i/K3/M4v/u/DGL/875Yxb/9+SPWfx3yR+z+L83f8zi/778MYv/+/PHLP675o9Z/HfLH7P4754/ZvH/QP6Yxf+D+WMW/w/lj1n8P5w/ZvH/SP6YxX+P/DGL/575Yxb/j+aPWfw/lj9m8f94/pjFf6/8MYv/J/LHLP57549Z/D+ZP2bx/1T+mMV/n/wxi/+n88cs/p/JH7P4fzZ/zOL/ufwxi//n88cs/vvmj1n898sfs/h/IX/M4v/F/DGL/5fyxyz+X84fs/jvnz9m8T8gf8zi/5X8MYv/V/PHLP5fyx+z+H89f8zi/438MYv/gfljFv9v5o9Z/L+VP2bxPyh/zOJ/cP6Yxf+Q/DGL/6H5Yxb/w/LHLP6H549Z/I/IH7P4H5k/ZvE/Kn/M4n90/pjF/5j8MYv/t/PHLP7H5o9Z/I/LH7P4H58/ZvE/IX/M4n9i/pjF/zv5Yxb/7+aPWfxPyh+z+J+cP2bxPyV/zOJ/av6Yxf97+WMW/9Pyxyz+p+ePWfzPyB+z+H8/f8zi/4P8MYv/mfljFv+z8scs/mfnj1n8z8kfs/ifmz9m8f9h/pjF/0f5Yxb/H+ePWfx/kj9m8f9p/pjF/2f5Yxb/8/LHLP7n549Z/H+eP2bxvyB/zOL/i/wxi/+F+WMW/4vyxyz+F+ePWfwvyR+z+F+aP2bxvyx/zOJ/ef6Yxf+X+WMW/1/lj1n8f50/ZvH/Tf6Yxf+K/DGL/5X5Yxb/3+aPWfx/lz9m8b8qf8zi//v8MYv/1fljFv9r8scs/tfmj1n8/5A/ZvG/Ln/M4n99/pjF/4b8MYv/H/PHLP5/yh+z+P85f8zif2P+mMX/pvwxi//N+WMW/1vyxyz+t+aPWfxvyx+z+P8lf+y/23+z2Ueezn17/th/t/9DzX1H/pjF/6/5Yxb/O/PHLP5/yx+z+P89f8zi/4/8MYv/P/PHLP535Y9Z/O/OH7P435M/ZvG/N3/M4n9f/pjFf2r+mMX//vwxi/8D+WMW/2n5YxL/eQb5Yxb/ofwxi/+o/DGL/2z5Yxb/2fPHLP6j88cs/nPkj1n858wfs/jPlT9m8Z87f8ziP0/+mMV/3vwxi/98+WMW/zH5Yxb/+fPHLP4L5I9Z/Mfmj1n8F8wfs/iPyx+z+C+UP2bxXzh/zOL/lPwxi/9T88cs/k/LH7P4L5I/ZvF/ev6YxX/R/DGL/zPyxyz+z8wfs/gvlj9m8X9W/pjF/9n5Yxb/8fljFv/n5I9Z/J+bP2bxf17+mMV/8fwxi/8S+WMW/+fnj1n8l8wfs/gvlT9m8X9B/pjF/4X5Yxb/F+WPWfxfnD9m8V86f8zi/5L8MYv/MvljFv9l88cs/svlj1n8l88fs/ivkD9m8V8xf8zi/9L8MYv/SvljFv+V88cs/qvkj1n8V80fs/i/LH/M4r9a/pjFf/X8MYv/y/PHLP6vyB+z+L8yf8ziPyF/zOI/MX/M4j8pf8ziv0b+mMV/zfwxi/9a+WMW/8n5Yxb/KfljFv+188cs/uvkj1n8180fs/i/Kn/M4r9e/pjFf/38MYv/BvljFv9X549Z/DfMH7P4vyZ/zOK/Uf6YxX/j/DGL/yb5Yxb/TfPHLP6vzR+z+G+WP2bx3zx/zOL/uvwxi//r88cs/m/IH7P4vzF/zOL/pvwxi/+b88cs/m/JH7P4b5E/ZvHfMn/M4r9V/pjF/635Yxb/rfPHLP7b5I9Z/N+WP2bx3zZ/zOL/9vwxi/92+WMW/3c82v8V/5+O6/9oFv93dv5jFv/t88cs/jvkj1n8d8wfs/jvlD9m8X9X/pjF/935Yxb/nfPHLP7vyR+z+O+SP2bxf2/+mMX/ffljFv/3549Z/HfNH7P475Y/ZvHfPX/M4v+B/DGL/wfzxyz+H8ofs/h/OH/M4v+R/DGL/x75Yxb/PfPH/nv9pw3N7P/R/LH/Xv9Hnv8fyx+z+H88f8ziv1f+mMX/E/ljFv+988cs/p/MH7P4fyp/zOK/T/6Yxf/T+WMW/8/kj1n8P5s/ZvH/XP6Yxf/z+WMW/33zxyz+++WPWfy/kD9m8f9i/pjF/0v5Yxb/L+ePWfz3zx+z+B+QP2bx/0r+mMX/q/ljFv+v5Y9Z/L+eP2bx/0b+mMX/wPwxi/8388cs/t/KH7P4H5Q/ZvE/OH/M4n9I/pjF/9D8MYv/YfljFv/D88cs/kfkj1n8j8wfs/gflT9m8T86f8zif0z+mMX/2/ljFv9j88cs/sflj1n8j88fs/ifkD9m8T8xf8zi/538MYv/d/PHLP4n5Y9Z/E/OH7P4n5I/ZvE/NX/M4v+9/DGL/2n5Yxb/0/PHLP5n5I9Z/L+fP2bx/0H+mMX/zPwxi/9Z+WMW/7Pzxyz+5+SPWfzPzR+z+P8wf8zi/6P8MYv/j/PHLP4/yR+z+P80f8zi/7P8MYv/efljFv/z88cs/j/PH7P4X5A/ZvH/Rf6Yxf/C/DGL/0X5Yxb/i/PHLP6X5I9Z/C/NH7P4X5Y/ZvG/PH/M4v/L/DGL/6/yxyz+v84fs/j/Jn/M4n9F/pjF/8r8MYv/b/PHLP6/yx+z+F+VP2bx/33+mMX/6vwxi/81+WMW/2vzxyz+f8gfs/hflz9m8b8+f8zif0P+mMX/j/ljFv8/5Y9Z/P+cP2bxvzF/zOJ/U/6Yxf/m/DGL/y35Yxb/W/PHLP635Y9Z/P+SP2bxvz1/zOJ/R/6Yxf+v+WMW/zvzxyz+f8sfs/j/PX/M4v+P/DGL/z/zxyz+d+WPWfzvzh+z+N+TP2bxvzd/zOJ/X/6YxX9q/pjF//78MYv/A/ljFv9p+WMS/3kH+WMW/6H8MYv/qPwxi/9s+WMW/9nzxyz+o/PHLP5z5I9Z/OfMH7P4z5U/ZvGfO3/M4j9P/pjFf978MYv/fPljFv8x+WMW//nzxyz+C+SPWfzH5o9Z/BfMH7P4j8sfs/gvlD9m8V84f8zi/5T8MYv/U/PHLP5Pyx+z+C+SP2bxf3r+mMV/0fwxi/8z8scs/s/MH7P4L5Y/ZvF/Vv6Yxf/Z+WMW//H5Yxb/5+SPWfyfmz9m8X9e/pjFf/H8MYv/EvljFv/n549Z/JfMH7P4L5U/ZvF/Qf6Yxf+F+WMW/xflj1n8X5w/ZvFfOn/M4v+S/DGL/zL5Yxb/ZfPHLP7L5Y9Z/JfPH7P4r5A/ZvFfMX/M4v/S/DGL/0r5Yxb/lfPHLP6r5I9Z/FfNH7P4vyx/zOK/Wv6YxX/1/DGL/8vzxyz+r8gfs/i/Mn/M4j8hf8ziPzF/zOI/KX/M4r9G/pjFf838MYv/WvljFv/J+WMW/yn5Yxb/tfPHLP7r5I9Z/NfNH7P4vyp/zOK/Xv6YxX/9/DGL/wb5Yxb/V+ePWfw3zB+z+L8mf8ziv1H+mMV/4/wxi/8m+WMW/03zxyz+r80fs/hvlj9m8d88f8zi/7r8MYv/6/PHLP5vyB+z+L8xf8zi/6b8MYv/m/PHLP5vyR+z+G+RP2bx3zJ/zOK/Vf6Yxf+t+WMW/63zxyz+2+SPWfzflj9m8d82f8zi//b8MYv/dvljFv935I9Z/N+ZP2bx3z5/zOK/Q/6YxX/H/DGL/075Yxb/d+WPWfzfnT9m8d85f8zi/578MYv/LvljFv/35o9Z/N+XP2bxf3/+mMV/1/wxi/9u+WMW/93zxyz+H8gfs/h/MH/M4v+h/DGL/4fzxyz+H8kfs/jvkT9m8d8zf8zi/9H8MYv/x/LHLP4fzx+z+O+VP2bx/0T+mMV/7/wxi/8n88cs/p/KH7P475M/ZvH/dP6Yxf8z+WMW/8/mj1n8P5c/ZvH/fP6YxX/f/DGL/375Yxb/L+SPWfy/mD9m8f9S/pjF/8v5Yxb//fPHLP4H5I9Z/L+SP2bx/2r+mMX/a/ljFv+v549Z/L+RP2bxPzB/zOL/zfwxi/+38scs/gflj1n8D84fs/gfkj9m8T80f8zif1j+mMX/8Pwxi/8R+WMW/yPzxyz+R+WPWfyPzh+z+B+TP2bx/3b+mMX/2Pwxi/9x+WMW/+Pzxyz+J+SPWfxPzB+z+H8nf8zi/938MYv/SfljFv+T88cs/qfkj1n8T80fs/h/L3/M4n9a/pjF//T8MYv/GfljFv/v549Z/H+QP2bxPzN/zOJ/Vv6Yxf/s/DGL/zn5Yxb/c/PHLP4/zB+z+P8of8zi/+P8MYv/T/LHLP4/zR+z+P8sf8zif17+mMX//Pwxi//P88cs/hfkj1n8f5E/ZvG/MH/M4n9R/pjF/+L8MYv/JfljFv9L88cs/pflj1n8L88fs/j/Mn/M4v+r/DGL/6/zxyz+v8kfs/hfkT9m8b8yf8zi/9v8MYv/7/LHLP5X5Y9Z/H+fP2bxvzp/zOJ/Tf6Yxf/a/DGL/x/yxyz+1+WPWfyvzx+z+N+QP2bx/2P+mMX/T/ljFv8/549Z/G/MH7P435Q/ZvG/OX/M4n9L/pjF/9b8MYv/bfljFv+/5I9Z/G/PH7P435E/ZvH/a/6Yxf/O/DGL/9/yxyz+f88fs/j/I3/M4v/P/DGL/135Yxb/u/PHLP735I9Z/O/NH7P435c/ZvGfmj9m8b8/f8zi/0D+mMV/Wv6YxH++Qf6YxX8of8ziPyp/zOI/W/6YxX/2/DGL/+j8MYv/HPljFv8588cs/nPlj1n8584fs/jPkz9m8Z83f8ziP1/+mMV/TP6YxX/+/DGL/wL5Yxb/sfljFv8F88cs/uPyxyz+C+WPWfwXzh+z+D8lf8zi/9T8MYv/0/LHLP6L5I9Z/J+eP2bxXzR/zOL/jPwxi/8z88cs/ovlj1n8n5U/ZvF/dv6YxX98/pjF/zn5Yxb/5+aPWfyflz9m8V88f8ziv0T+mMX/+fljFv8l88cs/kvlj1n8X5A/ZvF/Yf6Yxf9F+WMW/xfnj1n8l84fs/i/JH/M4r9M/pjFf9n8MYv/cvljFv/l88cs/ivkj1n8V8wfs/i/NH/M4r9S/pjFf+X8MYv/KvljFv9V88cs/i/LH7P4r5Y/ZvFfPX/M4v/y/DGL/yvyxyz+r8wfs/hPyB+z+E/MH7P4T8ofs/ivkT9m8V8zf8ziv1b+mMV/cv6YxX9K/pjFf+38MYv/OvljFv9188cs/q/KH7P4r5c/ZvFfP3/M4r9B/pjF/9X5Yxb/DfPHLP6vyR+z+G+UP2bx3zh/zOK/Sf6YxX/T/DGL/2vzxyz+m+WPWfw3zx+z+L8uf8zi//r8MYv/G/LHLP5vlPvP/hjLLf5vkvs/Vhb/N+ePWfzfkj9m8d8if8ziv2X+mMV/q/wxi/9b88cs/lvnj1n8t8kfs/i/LX/M4r9t/pjF/+35Yxb/7fLHLP7vyB+z+L8zf8ziv33+mMV/h/wxi/+O+WMW/53yxyz+78ofs/i/O3/M4r9z/pjF/z35Yxb/XfLHLP7vzR+z+L8vf8zi//78MYv/rvljFv/d8scs/rvnj1n8P5A/ZvH/YP6Yxf9D+WMW/w/nj1n8P5I/ZvHfI3/M4r9n/pjF/6P5Yxb/j+WPWfw/nj9m8d8rf8zi/4n8MYv/3vljFv9P5o9Z/D+VP2bx3yd/zOL/6fwxi/9n8scs/p/NH7P4fy5/zOL/+fwxi/+++WMW//3yxyz+X8gfs/h/MX/M4v+l/DGL/5fzxyz+++ePWfwPyB+z+H8lf8zi/9X8MYv/1/LHLP5fzx8b9h8MBnv8t/t/I3/Mcv4fmD9m8f9m/pjF/1v5Yxb/g/LHLP4H549Z/A/JH7P4H5o/ZvE/LH/M4n94/pjF/4j8MYv/kfljFv+j8scs/kfnj1n8j8kfs/h/O3/M4n9s/pjF/7j8MYv/8fljFv8T8scs/ifmj1n8v5M/ZvH/bv6Yxf+k/DGL/8n5Yxb/U/LHLP6n5o9Z/L+XP2bxPy1/zOJ/ev6Yxf+M/DGL//fzxyz+P8gfs/ifmT9m8T8rf8zif3b+mMX/nPwxi/+5+WMW/x/mj1n8f5Q/ZvH/cf6Yxf8n+WMW/5/mj1n8f5Y/ZvE/L3/M4n9+/pjF/+f5Yxb/C/LHLP6/yB+z+F+YP2bxvyh/zOJ/cf6Yxf+S/DGL/6X5Yxb/y/LHLP6X549Z/H+ZP2bx/1X+mMX/1/ljFv/f5I9Z/K/IH7P4X5k/ZvH/bf6Yxf93+WMW/6vyxyz+v88fs/hfnT9m8b8mf8zif23+mMX/D/ljFv/r8scs/tfnj1n8b8gfs/j/MX/M4v+n/DGL/5/zxyz+N+aPWfxvyh+z+N+cP2bxvyV/zOJ/a/6Yxf+2/DGL/1/yxyz+t+ePWfzvyB+z+P81f8zif2f+mMX/b/ljFv+/549Z/P+RP2bx/2f+mMX/rvwxi//d+WMW/3vyxyz+9+aPWfzvyx+z+E/NH7P4358/ZvF/IH/M4j8tf0ziP2aQP2bxH8ofs/iPyh+z+M+WP2bxnz1/zOI/On/M4j9H/pjFf878MYv/XPljFv+588cs/vPkj1n8580fs/jPlz9m8R+TP2bxnz9/zOK/QP6YxX9s/pjFf8H8MYv/uPwxi/9C+WMW/4Xzxyz+T8kfs/g/NX/M4v+0/DGL/yL5Yxb/p+ePWfwXzR+z+D8jf8zi/8z8MYv/YvljFv9n5Y9Z/J+dP2bxH58/ZvF/Tv6Yxf+5+WMW/+flT+05kPgvnj9mOf+XyB+z+D8/f8ziv2T+mMV/qfwxi/8L8scs/i/MH7P4vyh/zOL/4vwxi//S+WMW/5fkj1n8l8kfs/gvmz9m8V8uf8ziv3z+mMV/hfwxi/+K+WMW/5fmj1n8V8ofs/ivnD9m8V8lf8ziv2r+mMX/ZfljFv/V8scs/qvnj1n8X54/ZvF/Rf6Yxf+V+WMW/wn5Yxb/ifljFv9J+WMW/zXyxyz+a+aPWfzXyh+z+E/OH7P4T8kfs/ivnT9m8V8nf8ziv27+mMX/VfljFv/18scs/uvnj1n8N8gfs/i/On/M4r9h/pjF/zX5Yxb/jfLHLP4b549Z/DfJH7P4b5o/ZvF/bf6YxX+z/DGL/+b5Yxb/1+WPWfxfnz9m8X9D/pjF/435Yxb/N+WPWfzfnD9m8X9L/pjFf4v8MYv/lvljFv+t8scs/m/NH7P4b50/ZvHfJn/M4v+2/DGL/7b5Yxb/t+ePWfy3yx+z+L8jf8zi/878MYv/9vljFv8d8scs/jvmj1n8d8ofs/i/K3/M4v/u/DGL/875Yxb/9+SPWfx3yR+z+L83f8zi/778MYv/+/PHLP675o9Z/HfLH7P4754/ZvH/QP6Yxf+D+WMW/w/lj1n8P5w/ZvH/SP6YxX+P/DGL/575Yxb/j+aPWfw/lj9m8f94/pjFf6/8MYv/J/LHLP57549Z/D+ZP2bx/1T+mMV/n/wxi/+n88cs/p/JH7P4fzZ/zOL/ufwxi//n88cs/vvmj1n898sfs/h/IX/M4v/F/DGL/5fyxyz+X84fs/jvnz9m8T8gf8zi/xW5/xyPsdzi/1W5/2Nl8f9a/pjF/+v5Yxb/b+SPWfwPzB+z+H8zf8zi/638MYv/QfljFv+D88cs/ofkj1n8D80fs/gflj9m8T88f8zif0T+mMX/yPwxi/9R+WMW/6Pzxyz+x+SPWfy/nT9m8T82f8zif1z+mMX/+Pwxi/8J+WMW/xPzxyz+38kfs/h/N3/M4n9S/pjF/+T8MYv/KfljFv9T88cs/t/LH7P4n5Y/ZvE/PX/M4n9G/pjF//v5Yxb/H+SPWfzPzH96B940bvuZXlr8z8ofs/ifnT9m8T8nf8zif27+mMX/h/ljFv8f5Y9Z/H+cP2bx/0n+mMX/p/ljFv+f5Y9Z/M/LH7P4n58/ZvH/ef6Yxf+C/DGL/y/yxyz+F+aPWfwvyh+z+F+cP2bxvyR/zOJ/af6Yxf+y/DGL/+X5Yxb/X+aPWfx/lT9m8f91/pjF/zf5Yxb/K/LHLP5X5o9Z/H+bP2bx/13+mMX/qvwxi//v88cs/lfnj1n8r8kfs/hfmz9m8f9D/pjF/7r8MYv/9fljFv8b8scs/n/MH7P4/yl/zOL/5/wxi/+N+WMW/5vyxyz+N+ePWfxvyR+z+N+aP2bxvy1/zOL/l/wxi//t+WMW/zvyxyz+f80fs/jfmT9m8f9b/pjF/+/5Yxb/f+SPWfz/mT9m8b8rf8zif3f+mMX/nvwxi/+9+WMW//vyxyz+U/PHLP73549Z/B/IH7P4T8sfk/jPP8gfs/gP5Y9Z/Eflj1n8Z8sfs/jPnj9m8R+dP2bxnyN/zOI/Z/6YxX+u/DGL/9z5Yxb/efLHLP7z5o9Z/OfLH7P4j8kfs/jPnz9m8V8gf8ziPzZ/zOK/YP6YxX9c/pjFf6H8MYv/wvljFv+n5I9Z/J+aP2bxf1r+mMV/kfwxi//T88cs/ovmj1n8n5E/ZvF/Zv6YxX+x/DGL/7Pyxyz+z84fs/iPzx+z+D8nf8zi/9z8MYv/8/LHLP6L549Z/JfIH7P4Pz9/zOK/ZP6YxX+p/DGL/wvyxyz+L8wfs/i/KH/M4v/i/DGL/9L5Yxb/l+SPWfyXyR+z+C+bP2bxXy5/zOK/fP6YxX+F/DGL/4r5Yxb/l+aPWfxXyh+z+K+c/yOaMTcW/1Xyxyz+q+aPWfxflj9m8V8tf8ziv3r+mMX/5fljFv9X5I9Z/F+ZP2bxn5A/ZvGfmD9m8Z+UP2bxXyN/zOK/Zv6YxX+t/DGL/+T8MYv/lPwxi//a+WMW/3Xyxyz+6+aPWfxflT9m8V8vf8ziv37+mMV/g/wxi/+r88cs/hvmj1n8X5M/ZvHfKH/M4r9x/pjFf5P8MYv/pvljFv/X5o9Z/DfLH7P4b54/ZvF/Xf6Yxf/1+WMW/zfkj1n835g/ZvF/U/6Yxf/N+WMW/7fkj1n8t8gfs/hvmT9m8d8qf8zi/9b8MYv/1vljFv9t8scs/m/LH7P4b5s/ZvF/e/6YxX+7/DGL/zvyxyz+78wfs/hvnz9m8d8hf8ziv2P+mMV/p/wxi/+78scs/u/OH7P475w/ZvF/T/6YxX+X/DGL/3vzxyz+78sfs/i/P3/M4r9r/pjFf7f8MYv/7vljFv8P5I9Z/D+YP2bx/1D+mMX/w/ljFv+P5I9Z/PfIH7P475k/ZvH/aP6Yxf9j+WMW/4/nj1n898ofs/h/In/M4r93/pjF/5P5Yxb/T+WPWfz3yR+z+H86f8zi/5n8MYv/Z/PHLP6fyx+z+H8+f8ziv2/+mMV/v/wxi/8X8scs/l/MH7P4fyl/zOL/5fwxi//++WMW/wPyxyz+X8kfs/h/NX/M4v+1/DGL/9fzxyz+38gfs/gfmD9m8f9m/pjF/1v5Yxb/g/LHLP4H549Z/A/JH7P4H5o/ZvE/LH/M4n94/pjF/4j8MYv/kfljFv+j8scs/kfnj1n8j8kfs/h/O3/M4n9s/pjF/7j8MYv/8fljFv8T8scs/ifmj1n8v5M/ZvH/bv6Yxf+k/DGL/8n5Yxb/U/LHLP6n5o9Z/L+XP2bxPy1/zOJ/ev6Yxf+M/DGL//fzxyz+P8gfs/ifmT9m8T8rf8zif3b+mMX/nPwxi/+5+WMW/x/mj1n8f5Q/ZvH/cf6Yxf8n+WMW/5/mj1n8f5Y/ZvE/L3/M4n9+/pjF/+f5Yxb/C/LHLP6/yB+z+F+YP2bxvyh/zOJ/cf6Yxf+S/DGL/6X5Yxb/y/LHLP6X549Z/H+ZP2bx/1X+mMX/1/ljFv/f5I9Z/K/IH7P4X5k/ZvH/bf6Yxf93+WMW/6vyxyz+v88fs/hfnT9m8b8mf8zif23+mMX/D/ljFv/r8scs/tfnj1n8b8gfs/j/MX/M4v+n/DGL/5/zxyz+N+aPWfxvyh+z+N+cP2bxvyV/zOJ/a/6Yxf+2/DGL/1/yxyz+t+ePWfzvyB+z+P81f8zif2f+mMX/b/ljFv+/549Z/P+RP2bx/2f+mMX/rvwxi//d+WMW/3vyxyz+9+aPWfzvyx+z+E/NH7P4358/ZvF/IH/M4j8tf0ziv8Agf8ziP5Q/ZvEflT9m8Z8tf8ziP3v+mMV/dP6YxX+O/DGL/5z5Yxb/ufLHLP5z549Z/OfJH7P4z5s/ZvGfL3/M4j8mf8ziP3/+mMV/gfwxi//Y/DGL/4L5Yxb/cfljFv+F8scs/gvnj1n8n5I/ZvF/av6Yxf9p+WMW/0Xyxyz+T88fs/gvmj9m8X9G/pjF/5n5Yxb/xfLHLP7Pyh+z+D87f8ziPz5/zOL/nPwxi/9z88cs/s/LH7P4L54/ZvFfIn/M4v/8/DGL/5L5Yxb/pfLHLP4vyB+z+L8wf8zi/6L8MYv/i/PHLP5L549Z/F+SP2bxXyZ/zOK/bP6YxX+5/DGL//L5Yxb/FfLHLP4r5o9Z/F+aP2bxXyl/zOK/cv6YxX+V/DGL/6r5Yxb/l+WPWfxXyx+z+K+eP2bxf3n+mMX/FfljFv9X5o9Z/Cfkj1n8J+aPWfwn5Y9Z/NfIH7P4r5k/ZvFfK3/M4j85f8ziPyV/zOK/dv6YxX+d/DGL/7r5Yxb/V+WPWfzXyx+z+K+fP2bx3yB/zOL/6vwxi/+G+WMW/9fkj1n8N8ofs/hvnD9m8d8kf8ziv2n+mMX/tfljFv/N8scs/pvnj1n8X5c/ZvF/ff6Yxf8N+WMW/zfmj1n835Q/ZvF/c/6Yxf8t+WMW/y3yxyz+W+aPWfy3yh+z+L81f8ziv3X+mMV/m/wxi//b8scs/tvmj1n8354/ZvHfLn/M4v+O/DGL/zvzxyz+2+ePWfx3yB+z+O+YP2bx3yl/zOL/rvwxi/+788cs/jvnj1n835M/ZvHfJX/M4v/e/DGL//vyxyz+788fs/jvmj9m8d8tf8ziv3v+mMX/A/n//9inhz5ADAOIo7v1ttt2aze2bdu2bTtZxLZt27Zt27adXHKcT7Dz3mnu/99ELf2H6h+19B+mf9TSf7j+UUv/EfpHLf131D9q6b+T/lFL/531j1r676J/1NJ/V/2jlv676R+19N9d/6il/x76Ry3999Q/aum/l/5RS/+99Y9a+u+jfzR4QEf/ffWPWv6/n/5RS//99Y9a+h+gf9TS/0D9o5b+B+kftfQ/WP+opf8h+kct/Q/VP2rpf5j+UUv/w/WPWvofoX/U0v9I/aOW/kfpH7X0P1r/qKX/MfpHLf2P1T9q6X+c/lFL/+P1j1r6n6B/1NL/RP2jlv4n6R+19D9Z/6il/yn6Ry39T9U/aul/mv5RS//T9Y9a+p+hf9TS/0z9o5b+Z+kftfQ/W/+opf85+kct/c/VP2rpf57+UUv/8/WPWvpfoH/U0v9C/aOW/hfpH7X0v1j/qKX/JfpHLf0v1T9q6X+Z/lFL/8v1j1r6X6F/1NL/Sv2jlv5X6R+19L9a/6il/zX6Ry39r9U/aul/nf5RS//r9Y9a+t+gf9TS/0b9o5b+N+kftfS/Wf+opf8t+kct/W/VP2rpf5v+UUv/2/WPWvrfoX/U0v9O/aOW/nfpH7X0v1v/qKX/PfpHLf3v1T9q6X+f/lFL//v1j1r6P6B/1NL/Qf2jlv4P6R+19H9Y/6il/yP6Ry39H9U/aun/mP5RS//H9Y9a+j+hf9TS/0n9o5b+T+kftfR/Wv+opf8z+kct/Z/VP2rp/5z+UUv/5/WPWvq/oH/U0v9F/aOW/i/pH7X0f1n/qKX/K/pHLf1f1T9q6f+a/lFL/9f1j1r6v6F/1NL/Tf2jlv5v6R+19H9b/6il/zv6Ry3939U/aun/nv5RS//39Y9a+n+gf9TS/0P9o5b+H+kftfT/WP+opf8n+kct/T/VP2rp/5n+UUv/z/WPWvp/oX/U0v9L/aOW/l/pH7X0/1r/qKX/N/pHLf2/1T9q6f+d/lFL/+/1j1r6/6B/VNJ/yAD9o5b+A/WPWvr/TP+opf/P9Y9a+v9C/6il/y/1j1r6/0r/qKX/r/WPWvr/Rv+opf8g/aOW/r/VP2rp/zv9o5b+g/WPWvr/Xv+opf8f9I9a+v9R/6il/xD9o5b+f9I/aun/Z/2jlv5/0T9q6f9X/aOW/n/TP2rp/3f9o5b+/9A/aun/T/2jlv7/0j9q6f9v/aOW/v/RP2rp/1/9o5b+/9M/aun/f/2jlv6j6B+19B9V/6il/2j6Ry39R9c/auk/hv5RS/8x9Y9a+o+lf9TSf2z9o5b+4+gftfQfV/+opf94+kct/cfXP2rpP4H+UUv/CfWPWvpPpH/U0n9i/aOW/pPoH7X0n1T/qKX/ZPpHLf0n1z9q6T+F/lFL/yn1j1r6T6V/1NJ/av2jlv7T6B+19J9W/6il/3T6Ry39p9c/auk/g/5RS/8Z9Y9a+s+kf9TSf2b9o5b+s+gftfSfVf+opf9s+kct/WfXP2rpP4f+UUv/OfWPWvrPpX/U0n9u/aOW/vPoH7X0n1f/qKX/fPpHLf3n1z9q6b+A/lFL/wX1j1r6L6R/1NJ/Yf2jlv6L6B+19F9U/6il/2L6Ry39F9c/aum/hP5RS/8l9Y9a+i+lf9TSf2n9o5b+y+gftfRfVv+opf9y+kct/ZfXP2rpv4L+UUv/FfWPWvqvpH/U0n9l/aOW/qvoH7X0X1X/qKX/avpHLf1X1z9q6b+G/lFL/zX1j1r6r6V/1NJ/bf2jlv7r6B+19F9X/6il/3r6Ry3919c/aum/gf7RwEE/jZG8/4b6Ry3/30j/qKX/xvpHLf030T9q6b+p/lFL/830j1r6b65/1NJ/C/2jlv5b6h+19N9K/6il/9b6Ry39t9E/aum/rf5RS//t9I9a+m+vf9TSfwf9o5b+Q/WPWvoP0z9q6T9c/6il/wj9o5GuPwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwI/s231sXWUBx/HTbh0wMRlxwWVossmDQiLMdi8ZfxA2GdvqoBvvY4BjW7ux0W6z67Ar4F7+mEQIL5JMskSJsmUoYSY0EgPBCiIadFETDb4AohBF40QIuiUu1tz2trTXrvE+5XkW5fP5o/eec/c725p8d84CAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+dzU2zT88rmbYqXFDDz58qKXvddaR5Tft/33PBQOv5Y+XjHDJ2qEHvb29vbOenbm9fHhSURSln21H+fjkynHp+jsavtTZfxTm9by46NikXzYd3r/6tIfru4/cV9d3tq64ce361pZP1BZFuKiu6Cwd1NcURVhYV9xbOmgoHSyqKx4uHczsOzil+G7p4Lw1m1qbSycWR3/P4P9FY9OOYtywYothfxoM7X9Hw3fuGHgd5ZIDVxtflPu/vOuHb1Z8NuA4/Q9cP8yv7L/q3yBwXNX1//y8gddRLvkf9/+JT654eaTPjt//wPXDJ/UP6Yzw/D+s0crn/orn/2kjXHJwf2VN17FS/5fc+sz08qnx/83z/zvXDxdV9l877Pm/9By/YOD5/6SiCBeP8dsB7ymNTTsPj3b/H73/8VMrNjVD+z+9fdO+Uv+PLfrB4+VTdVX2v2CU+3/t4opfK1Cdxqav9lbc/6vov/jYCJcc7P+tx3/7UKn/R/94/xlDPqum/4sr+5/R0bZ5xpZtXeeub1u1rmVdy8b6mXNnzWmon3P+7Bl9jwT9X8f4XYH3hrHd/4uJFZuaomgZ3F/dvf+pUv+zH3hgVvnUyVX2v3DU+/80938Y0UdqiwkTis5VHR3t9f1fBw4b+r/2/7AR+q/i7/9nnl3+YXXl15qimDK4v/OMu5aV+n/74DO7yqcmVNn/olH7nzf48wIRxnj/b67YDOv/wMEX+57/l9xz4PTyqWr//r941P5fcf+HsWhsqvgfft5lpf53FpdGdhoa/fc/SCdH/4++fX1P3Dp8Sv+QTo7+//CFI+fErcMS/UM6Ofofv+H+5+LW4RL9Qzo5+l86ee6yuHW4VP+QTo7+17xyzl/j1qFJ/5BOjv7P/squzrh1WKp/SCdH/w+2z9oatw7L9A/p5Oj/56c++GrcOlymf0gnR/9Hj959Q9w6XK5/SCdH/927z/pR3DpcoX9IJ0f/l62dH+LW4Ur9Qzo5+p865c+Pxa3DVfqHdHL0P+cv/zw1bh2u1j+kk6P/27+4bG/cOlyjf0gnR//jrnv5hbh1WK5/SCdH/4vP2jo/bh2u1T+kk6P/5p8198atwwr9Qzo5+p/xzZ+sj1uH6/QP6eTo/9DSR3bHrcP1+od0cvS/u76YFLcON+gf0snR/ze+f9rBuHX4tP4hnRz9/+7JJ+bGrcNK/UM6Ofp/9kO3fStuHW7UP6STo/97Vr9wZtw6rNI/pJOj/4f2PPfluHVYrX9IJ0f/r7/e9r64dVijf0gnR/8TTz7ltbh1aNY/pJOj//m3fK09bh1a9A/p5Oi/bVf3j+PWYa3+IZ0c/X/02JQVceuwTv+QTo7+l8/e88G4dbhJ/5BOjv4/sOSCnXHrsF7/kE6O/i/s+fiFceuwQf+QTo7+O57+/Nfj1uFm/UM6OfrfM/3VhXHr0Kp/SCdH/y+tXPzTuHVo0z+kk6P/Nx+5dmPcOmzUP6STo/8nfvHW0bh12KR/SCdH/+8/f8Hf49Zhs/4hnRz9L1z0xpq4dfiM/iGdHP1v6P7XS3Hr0K5/SGdY/7Xv/vVL/U8/dNWSuHXYon9IJ8f9/3vn1u+LW4cO/UM6Ofq/44q9DXHrsFX/kE6O/vcduPOuuHW4Rf+QTo7+3/jVtKlx6/BZ/UM6Ofq/b9LBa+LWoVP/kE6O/n+9se7puHXYpn9IJ0f//9g7eXvcOnTpH9LJ0f9Tr/X8KW4dbtU/pJOj/5XjfzMhbh1u0z+kk6P/yV2b741bh9v1D+nk6H/u3avOi1uHz+kf0snR/5a/Pf/tuHXYrn9IZ8u2rptXtba2tHvjjTfeDL450X8yAam9E/2J/pUAAAAAAAAAAAAAAADHk+OfE53o3yMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBvduBAAAAAAADI/7URqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrADxwIAAAAAwvytg+jdAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOArAAD//2q34iw=")
mount(&(0x7f0000000240)=@sg0, &(0x7f0000000280)='./file1\x00', &(0x7f00000002c0)='affs\x00', 0x8000, &(0x7f0000000300)='syz')
sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40)
sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffc5, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[], 0x14}}, 0x20008884)
ioctl$FS_IOC_GETFSMAP(r6, 0xc0205865, &(0x7f00000000c0)=ANY=[])

9.280856516s ago: executing program 6 (id=1138):
add_key$keyring(&(0x7f0000000140), &(0x7f0000000200)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff9)
r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0)
open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$ptmx(0xffffff9c, 0x0, 0x0, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r5, &(0x7f0000000400)={0x18, 0x0, {0x2, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, 'lo\x00'}}, 0x1e)
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$PPPIOCATTCHAN(r6, 0x40047438, &(0x7f0000000000)=0x1)
ioctl$PPPIOCBRIDGECHAN(r6, 0x40047435, &(0x7f0000000540)=0x3e)
setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000080), 0x4a)
sendmmsg$inet(r3, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0)
close(r4)
r7 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$inet6_tcp_int(r7, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4)
recvmmsg(r7, &(0x7f00000002c0), 0x220, 0x100, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r0, 0x0)
writev(r0, &(0x7f0000000100)=[{&(0x7f0000000180)="a1818f", 0x3}], 0x1)
r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x72, '\x00', 0x0, @fallback=0x2c, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000000380)=ANY=[@ANYRES64=r4], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r9, 0x0, 0xd, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5b", 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
write$char_usb(r0, &(0x7f00000001c0)="64e9", 0x2)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000240)={r8, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', 0x0}}, 0x40)
sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB="340000000214020025bd7000fedbdf2508004400", @ANYRES32=r0, @ANYBLOB="0903000073797a300000000008000100010000000800010000000000"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x48005)

9.280464803s ago: executing program 9 (id=1139):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000000)={[{@nobarrier}]}, 0xff, 0x485, &(0x7f0000001040)="$eJzs3M9rHFUcAPDvTJL+bhNrrba2Gq1i8UfSpFV78KCi4EFB0EM9xiSttdtGmgi2BI0i9SgF7+JR8C/w5kXUgwheFTxKoWgQmnqKzK9mu9mkSZpkbfbzgc2+t/Nm3/vOzNt9My+zAbSt3uxPErEjIn6LiO4ie3OB3uJpZnpy+Pr05HASs7Nv/JXk5a5NTw5XRav1tpeZw2lE+mkSzyfz6x2/cPHMUK02er7M90+cfa9//MLFp06fHTo1emr03ODx48eODjz7zODTqxJnFte1/R+OHdj3yluXXxs+cfntH7/JmrX3YLG8Po5but4koCZ6s63292yucdmjy2j7nWBnXTrpbGFDWJaOiMh2V1fe/7ujI+Z2Xne8/ElLGwesqey7afPCi6dmgQ0siVa3AGiN6os+O/+tHus09PhfuPpCxKYyPTM9OTxzI/7OSMvXu9aw/t6IODH175fZI5Z7HQIAYAXysc2TzcZ/aezNn4u5jl3lHEpPRNwVEbsj4u6I2BMR90TkZe+NiPuKlWe7l1h/b0N+/vgnvdK0zaskG/89Vzf2m6mLv3zq6ShzO/P4u5KTp2ujR8ptcji6Nmf5gUXq+O6lXz9faFn9+C97ZPVXY8GyAVc6Gy7QjQxNDK3WRrj6ccT+zmbxJzdmArIjYF9E7F/eW++qEqcf//rAQoVuHf8iVmGeafariMeK/T8VDfFXksXnJ/u3RG30SH91VMz30y+XXl+o/tuKfxVk+3/bzcd/Q4nuf5JivrYrarXR8+PLr+PS758teE6z0uN/U/JmPmf98zvFax8MTUycH4jYlLya56tzuvz1wbl1q3xVPov/8KHm/X93uU4W//0RkR3EByPigYh4sGz7QxHxcEQcWiT+H1585N1F4k8iiZbu/5Gmn383jv+epH6+fgWJjjPff7vQjPnS9v+xmMo/awv5598tLLWBt7n5AAAA4I6QRsSOSNK+It27I9K0r6/4H/49sS2tjY1PPHFy7P1zI8U9Aj3RlVZXurrrrocOJFPlOxb5wfJacbX8aHnd+IuOrXm+b3isNtLi2KHdbb+5/0fV/zN/drS6dcCac78WtK/G/p+2qB3A+lvK979zAdiYmvT/ra1oB7D+nP9D+2rW/z9qyBv/w8Y0v///0eQn64CNyPgf2pf+D+1L/4e2dDv39a88Ud0ssPL32bLkO/zbJVH94sVa1rU15l6JtOUht1Ei6zHrW+ncb6gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADcyf4LAAD///ss5ts=")
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file0\x00', 0x1000801, &(0x7f00000001c0)=ANY=[@ANYRES16=0x0], 0x0, 0x1ca, &(0x7f00000004c0)="$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")
chdir(0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={0x0, r1}, 0x18)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r3)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r4=>0xffffffffffffffff})
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r5}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20)
recvmsg$unix(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0)

9.209958132s ago: executing program 3 (id=1140):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000080000000800000000000000", @ANYRES32, @ANYBLOB], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000280), &(0x7f00000002c0)=r1}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
pipe2(&(0x7f0000000040), 0x80000)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.state\x00', 0x275a, 0x0)
fcntl$lock(r2, 0x26, &(0x7f0000000000)={0x0, 0x0, 0xe3800000000000, 0x20000000058e})
fcntl$lock(r2, 0x6, &(0x7f0000000040)={0x0, 0x2, 0x2, 0xffffffffffffffff})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, 0x0)
fcntl$lock(r2, 0x24, &(0x7f0000000080)={0x2, 0x2, 0x7, 0x4000000008})

6.276357637s ago: executing program 9 (id=1141):
r0 = openat$tcp_congestion(0xffffffffffffff9c, 0x0, 0x1, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0xf0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000000)={@loopback={0xfec0ffffffffffff}, 0x800, 0x0, 0x3, 0x1, 0x6, 0xbe}, 0x20)
r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

5.587476261s ago: executing program 0 (id=1142):
r0 = socket(0x10, 0x3, 0x0)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
prlimit64(r1, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xe8)
getdents(r4, 0xfffffffffffffffd, 0xbb)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000140)=0x6)
r5 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0)
fcntl$setstatus(r5, 0x4, 0x0)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
gettid()
syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0)
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000380)={{0x1, 0x1, 0x18, r0}, './file0/file0\x00'})
syz_init_net_socket$llc(0x1a, 0x801, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x100)
add_key(&(0x7f0000000000)='rxrpc\x00', 0x0, &(0x7f0000000080)="cf9ee6ac83d467f4e2e65c30dcdf31923f075efb8a37aa5217bee0825756e9942a247ae28049605c82407c75db82bd91bcd39cea5b5a71c19c81544145cb78cdc47657bf970820c73e85010275687590cd1a18fdcb1e50dd45ce9a5f341b1f8ab51b13a446ff6d5c963f2aa24d9cd120e6e28730341d3d8e9b", 0x79, 0xfffffffffffffffd)
mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000180)='sysfs\x00', 0x1214040, 0x0)
write(r0, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000001d00000000000000080009000d000000", 0x24)
r7 = socket(0x1e, 0x4, 0x0)
sendmmsg$unix(r7, &(0x7f0000004400), 0x400000000000203, 0x0)

5.029081291s ago: executing program 8 (id=1143):
r0 = socket$nl_route(0x10, 0x3, 0x0)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800006, 0x7000001, 0x6e073, 0xffffffffffffffff, 0x0)
syz_clone3(&(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, {0x3b}, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[0x0], 0x1}, 0x58)
madvise(&(0x7f0000bc0000/0x400000)=nil, 0x600000, 0x9)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000002100010000000000000000000a000001000000000000000008000600000000001400030069"], 0x38}}, 0x0)
r1 = socket(0x21, 0x3, 0x1)
getsockopt(r1, 0x200000000114, 0x271b, 0x0, 0x0)

3.274667031s ago: executing program 9 (id=1144):
r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000022546940fa0ae803d0990102030109023600010000000009047500038cbb2a0009050a001000010000090588"], 0x0)
r1 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0)
fsetxattr$security_ima(r1, &(0x7f0000000040), &(0x7f0000000080)=ANY=[@ANYBLOB="060395"], 0xa, 0x0)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000200)=<r2=>0x0)
getpgrp(r2)
execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
r3 = syz_open_dev$usbmon(&(0x7f0000000040), 0xfff, 0x0)
ioctl$FITRIM(r3, 0xc0185879, &(0x7f00000001c0)={0x8, 0xd3b, 0x2})
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_buf(r4, 0x29, 0x6, &(0x7f0000000180)="1000000000000000010000000c000000", 0x10)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000080)={0x44, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

2.145077051s ago: executing program 8 (id=1145):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{0x0}], 0x1, 0x0, 0x0, 0x1f000801}, 0x4008080) (async)
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x8000d0, &(0x7f0000000040), 0x1, 0x586, &(0x7f0000000600)="$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") (async)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0x0) (async)
r1 = socket$kcm(0x10, 0x2, 0x0)
setitimer(0x1, &(0x7f00000008c0)={{0x0, 0x2710}, {0x77359400}}, &(0x7f0000000900)) (async)
sendmmsg$inet(r1, &(0x7f0000000880)=[{{&(0x7f0000000000)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000000a80)=[{&(0x7f0000000080)="44ca2a594fe6dd5c36f009075c72ef04bf3d0e2fff9814aa09e11e8b3b9eee442481d8e4e133d9ab38647c9a2096c8f3508bb9ec21e97264f45daea78e7121cbb1e18e", 0x43}, {&(0x7f0000000940)="0095166882b75a68d66bafecd20a000000ff", 0x12}, {&(0x7f0000000180)="e6dbfe2d61b94a32bc0264b97f08588503e6fde24541ef70f3adf2c54c4bc1210844ff2953e6d2a5df15be990499249a10e6d586797b76ed5cd9eba2002c98e89296c42ddab2d574e6a2e31ddec418e11dcc54ba2d35255c1f705567bb2dbbcdaa5539", 0x63}, {&(0x7f0000000200)="d05472b3cc1608f1f132f20a8e3d9a69117b7d0ab97631b9d4d1bf22985eb7b463c22e11126c86d990c3024e055316c4e6d60d9fc3ace5776deeb6ba4414fc8bfadf34ee05e4eb2afa473ad4023131a7b59e400efa96fc71e387139b6a8bf9494c7fe1a340f1c84eb9b0e2cf01376be43f4494ba658bf66147", 0x79}, {&(0x7f0000000300)="67069fca3a208e7e83fdb33c19fba02490f61f6a62a4a82210d22ab7af32df56b5d09355bef6bd551e042a349ca2f1a52dbb50df0d3b6bb9771708f73e4a48cf856f8cad07dc7659b7afd85e99057538c33e6e0679754733df80c04d4e436a6bbd8f19290d124f472bf24f26b5492cfeb40935545943522cc5ec7e954f79205dc3b2d97eddcb5569e63441fc29e6d6570217993422aa4c64e9e87db42cacb39c88fd54aa2326937808de38194cf47a2ac258ca7ccf73e101971f93ab6807907884638e043bb5b6faecb5686b3a73d24dfbe2de6a08c187edfea9145d70bf653df20bf908d9", 0xe5}, {&(0x7f0000000400)="04e10996de058d203c4d5192dcebc25147b16e5d23594d5f65b57206944cbd24e9fd7ff17445f078df187bdc42a7795c907bf2ecd54b68af3e9c450f9ed2888962a3786efb7a5d39a69baddf8cafffc5b291f42ef3dab120a5c6cffbe8ee5af7f416064d1cbf222db0b94837e56b5910794d78ccaf24be615aadb1d3fbd724efc151a28bfe2fd246c4c5de9ad4e05ddbb5d4e70d8a9b242a2c16c37f861546b6e545f4d61a535f1e3f09f3c9efd178472f327f021e312ad68056fd6cda02c00afeed82a24f3d9388230178ca987f007e1b080bd101df8b3e579d", 0xda}, {&(0x7f0000000500)="b516c41f75e3ac8d86d3e533b198b4605b250b61a8e32338e5c80cef375cafbf7b745403069b069063c9f37b8c740a8457d60451369bdd689d27267ef301b4550afdd5bdcd8bfe2125a852b37c7959dca1ec81d1cf74ece02aff348ddca476bb76957f407ba6ec330f206ae07043faaddee182205f155bf50e15c7c4a0e4f95f6d5340b67bdfaedfd6aab35810bc0f3f7ca9c082eb784e789fa58a335083835874eadd0e2c8a91c84f484f5779171377a3fa34c1ec0852bdde868716481b9c9092357cdfdf0884b07b4151e67df5d0bbf2cfbeceed3c32206322e58ecbb7fba5652a30f707911807936aed14ef5d77e1", 0xf0}, {&(0x7f0000000600)="8bbe3ad0e6b9a850183c2b86dce7c72c716b2fc01b2edd40488df164e443e2dcb19d0a3325ade397970c307680b6c40c3fa2a50c0a0f3ccb24886b7f590be05d3c80bac7b343ff51f0d037973117d0dee38a4fe7d2e2c8e97f4970d128370c94f45179f306b29e2cb64280b50e929bd836393aaf60b378fb176c47ad374263932855d917ab994d1275da781dc6f8b9e56429f5f360832e51141533c0e522bf", 0x9f}, {&(0x7f0000000980)="d902072cc49433239f839dcca092bd01dcec93691884a3af2cc62ad2d07b5800185fdc30ffc423235a5c1051dc85d008019c9084154d3eb1d93afc4a3bd2e4f9800717864016b5329367939cb6a25c09dd29359d913f874cdcc86a49d8c8b55dd89589a96b5aee57877b867229f5fbd0d8ad58a922faad7f99d668b8b9a29d868f09c4ac98e45f7fef60b7df5e065816ae777fa49d69ad79edcea4691badc9150a24b45d7030de0fc576e528b123a0262667827be0956ae6d940587129f6b5e8f2bfd777ebcee0702aadc6dc352b0d9733868e20b4ac9ce14e708f8fb511a7f55d2a", 0xe2}, {&(0x7f0000000700)="89b5e6002c5dd8395a03cc1a172d23c428a84c9057e80dd40dfc5f619ce618b578debf16e9c4d5d43a58f24390d39fd6039c66ff76a47d6fd4403cc6f5c49ac6c3584f0611f8f12e4939ffb9006c16f6d600663ac37c005979b95c3f590a560b0c78792af9c721a574258685cc22a08bd52047f9fef33fbfa5c43e34e5bd2222f446821916de4bbe230a0447cc2253699bcf173295ece7ee5c51c65d", 0x9c}, {&(0x7f0000000140)="11ba6e4d5d2f4dace676b2e1f5d340", 0xf}], 0xb}}], 0x1, 0x4840)
sendmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000280)="2e00000010008188e6b62aa73772cc9f1ba1f848110000005e140602000000000e000a001000000002900000121f", 0x2e}], 0x1}, 0x4002)

2.090793464s ago: executing program 3 (id=1146):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x4800, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r2, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)

2.076883277s ago: executing program 0 (id=1147):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000100000000000000fe001811000008f6ff47b42d0378288912c26fb6e3b280a49d70", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x8, @remote, 0xb}, 0x1c)
syz_emit_ethernet(0xfef3, &(0x7f0000000200)=ANY=[], 0x0)
prlimit64(0x0, 0x8, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$inet_mptcp(0x2, 0x1, 0x106)
socket$kcm(0x2, 0xa, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
futex(&(0x7f00000040c0), 0x6, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15)
futex(&(0x7f00000040c0), 0x87, 0x3, 0x0, 0x0, 0x2)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f0000000280)={0x0})
syz_io_uring_setup(0x10e, &(0x7f00000000c0)={0x0, 0xbab4, 0x80, 0xffffffff}, &(0x7f00000003c0), &(0x7f0000000040))
openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x100, 0x44)
socket$nl_generic(0x10, 0x3, 0x10)
r3 = socket(0x2b, 0x80801, 0x1)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x10000, @loopback, 0x1}, 0x1c)
socket(0x40000000015, 0x5, 0x0)

1.337802289s ago: executing program 8 (id=1148):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0xfffe, 0x4, @mcast2={0xff, 0x3}}, 0x1c)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10)
sendto$inet6(r0, &(0x7f0000000000)="836bb66f", 0x5ac, 0x0, 0x0, 0xfffffffffffffec8)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c)
sendto$inet6(r5, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c)

1.237894007s ago: executing program 0 (id=1149):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x33b, 0x20004000)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SET_IO_FLUSHER(0x43, 0x1)
prctl$PR_SET_IO_FLUSHER(0x43, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
socket$inet6_icmp(0xa, 0x2, 0x3a)
socket$nl_sock_diag(0x10, 0x3, 0x4)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x8000, &(0x7f0000000080)={[{@errors_remount}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@init_itable_val={'init_itable', 0x3d, 0x7ab4}}, {@jqfmt_vfsv0}]}, 0x80, 0x63c, &(0x7f0000001bc0)="$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")

1.192332304s ago: executing program 3 (id=1150):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x18)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10)
bpf$ITER_CREATE(0x21, &(0x7f0000006200)={r2}, 0x8)
syz_read_part_table(0x105b, &(0x7f0000000000)="$eJzsz0uNAlEQBdDbv8nrxXgYAWOBBA8EJWiAFStksMUACpDEIx2agAJgcc7mfXKrKhU+q83v4nHf34+f+dknuZyTLJPUWutuk/z1JSlJ16ROobJtxjwLSjK0STP/rMZumNpd+/xPs045DC/p9fFdawIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAN7sFAAD///tiDW8=")
ioctl$USBDEVFS_DISCARDURB(0xffffffffffffffff, 0x550b, 0x0)

0s ago: executing program 8 (id=1151):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
r3 = memfd_create(&(0x7f0000000100)='\vem\xda\x99R@m\xfc\xfe\x9b#*\xff', 0x0)
write(r3, &(0x7f0000000040)="0600", 0x2)
write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000180)=ANY=[], 0xe)
sendfile(r3, r3, &(0x7f0000001000), 0xffff)
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f000001a000)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f000002eff0)={0x135, &(0x7f0000000000)=[{0x0, 0x0, 0x0, 0xff7f}]}, 0x10)

kernel console output (not intermixed with test programs):

 port 2(bridge_slave_1) entered disabled state
[  611.947845][ T9399] loop4: detected capacity change from 0 to 512
[  611.987602][   T72] bridge_slave_0: left allmulticast mode
[  611.987623][   T72] bridge_slave_0: left promiscuous mode
[  611.987779][   T72] bridge0: port 1(bridge_slave_0) entered disabled state
[  612.003571][ T9399] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  612.021366][ T9399] EXT4-fs error (device loop4): ext4_readdir:224: inode #12: comm syz.4.709: path /22/file0/file0: directory fails checksum at offset 0
[  612.025445][ T9399] EXT4-fs error (device loop4): __ext4_find_entry:1626: inode #12: comm syz.4.709: checksumming directory block 0
[  612.046183][ T9399] EXT4-fs error (device loop4): __ext4_find_entry:1626: inode #12: comm syz.4.709: checksumming directory block 0
[  612.061933][ T9399] EXT4-fs error (device loop4): __ext4_find_entry:1626: inode #12: comm syz.4.709: checksumming directory block 0
[  612.985058][ T8559] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  613.039227][ T9409] netlink: 24 bytes leftover after parsing attributes in process `syz.3.713'.
[  613.173796][ T9414] netlink: 24 bytes leftover after parsing attributes in process `syz.4.711'.
[  613.245177][ T9410] loop5: detected capacity change from 0 to 4096
[  613.365161][ T9417] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  613.489870][   T72] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  613.508888][   T72] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  613.532903][   T72] bond0 (unregistering): Released all slaves
[  613.584598][ T9204] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  613.651954][ T9204] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  613.894686][ T9204] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  614.484366][ T6036] usb 5-1: USB disconnect, device number 6
[  615.500045][   T72] hsr_slave_0: left promiscuous mode
[  615.516105][   T72] hsr_slave_1: left promiscuous mode
[  615.530764][   T72] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  615.546196][   T72] batman_adv: batadv0: Removing interface: batadv_slave_0
[  615.557782][   T72] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  615.574132][   T72] batman_adv: batadv0: Removing interface: batadv_slave_1
[  615.606170][   T72] veth1_macvtap: left promiscuous mode
[  615.620370][   T72] veth0_macvtap: left promiscuous mode
[  615.626080][   T72] veth1_vlan: left promiscuous mode
[  615.660368][ T5954] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  615.740392][ T6036] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  615.820865][ T5954] usb 4-1: Using ep0 maxpacket: 16
[  615.830959][ T5954] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  615.850342][ T5954] usb 4-1: config 0 has no interface number 0
[  615.869111][ T5954] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  615.888189][ T5954] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  615.907089][ T5954] usb 4-1: Product: syz
[  615.914810][ T6036] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  615.928508][ T5954] usb 4-1: Manufacturer: syz
[  615.937455][ T6036] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  615.946005][ T5954] usb 4-1: SerialNumber: syz
[  615.954827][ T5954] usb 4-1: config 0 descriptor??
[  615.971817][ T6036] usb 5-1: config 0 descriptor??
[  615.989013][ T6036] cp210x 5-1:0.0: cp210x converter detected
[  615.997870][ T5954] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  616.351710][   T72] team0 (unregistering): Port device vlan0 removed
[  616.410563][ T6036] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32
[  616.691105][ T6036] cp210x 5-1:0.0: failed to get vendor val 0x370c size 15: -121
[  616.716423][ T6036] cp210x 5-1:0.0: GPIO initialisation failed: -121
[  616.740180][ T6036] usb 5-1: cp210x converter now attached to ttyUSB0
[  616.900546][ T5954] gspca_spca1528: reg_w err -110
[  616.921894][ T5954] spca1528 4-1:0.1: probe with driver spca1528 failed with error -110
[  616.935555][   T30] usb 5-1: USB disconnect, device number 7
[  616.991776][   T30] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  617.000079][   T30] cp210x 5-1:0.0: device disconnected
[  617.069081][   T72] team0 (unregistering): Port device team_slave_1 removed
[  617.111620][   T72] team0 (unregistering): Port device team_slave_0 removed
[  617.160797][ T9443] loop3: detected capacity change from 0 to 32768
[  617.689099][ T9453] loop4: detected capacity change from 0 to 64
[  617.715967][ T9453] MINIX-fs: mounting file system with errors, running fsck is recommended
[  617.775304][ T9453] netlink: 248 bytes leftover after parsing attributes in process `syz.4.722'.
[  618.529769][ T9459] loop5: detected capacity change from 0 to 4096
[  618.580753][ T9456] netlink: 76 bytes leftover after parsing attributes in process `syz.4.722'.
[  618.662536][ T9204] 8021q: adding VLAN 0 to HW filter on device bond0
[  618.710328][ T5954] usb 4-1: USB disconnect, device number 5
[  618.737485][ T9204] 8021q: adding VLAN 0 to HW filter on device team0
[  618.862885][   T37] bridge0: port 1(bridge_slave_0) entered blocking state
[  618.870051][   T37] bridge0: port 1(bridge_slave_0) entered forwarding state
[  618.955717][   T37] bridge0: port 2(bridge_slave_1) entered blocking state
[  618.962968][   T37] bridge0: port 2(bridge_slave_1) entered forwarding state
[  619.272622][ T8559] VFS: Lookup of '`' in minix loop4 would have caused loop
[  619.334928][ T9036] 8021q: adding VLAN 0 to HW filter on device batadv0
[  619.345143][ T9465] loop5: detected capacity change from 0 to 4096
[  619.355360][ T9465] ntfs3: Unknown parameter 'showmet'
[  619.362445][ T8559] VFS: Lookup of '`' in minix loop4 would have caused loop
[  619.497541][   T72] IPVS: stop unused estimator thread 0...
[  619.514273][ T9238] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  619.644395][ T9471] loop5: detected capacity change from 0 to 1024
[  619.654903][ T9471] EXT4-fs: Ignoring removed oldalloc option
[  619.661227][ T9471] EXT4-fs: Ignoring removed orlov option
[  619.668216][ T9471] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  619.678320][ T9238] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  619.709076][ T9471] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  619.726052][ T9238] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  619.747021][   T31] audit: type=1800 audit(1767388338.273:25): pid=9471 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.727" name="file1" dev="loop5" ino=15 res=0 errno=0
[  619.760398][ T7827] usb 4-1: new full-speed USB device number 6 using dummy_hcd
[  619.823055][ T9238] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  619.880704][ T9471] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4215: comm syz.5.727: Allocating blocks 449-513 which overlap fs metadata
[  619.988505][ T9471] EXT4-fs (loop5): pa ffff88806c088910: logic 256, phys. 385, len 8
[  619.997499][ T9471] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:5466: group 0, free 0, pa_free 4
[  620.027670][ T8084] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  620.070031][ T9468] Bluetooth: MGMT ver 1.23
[  620.075369][ T9468] Bluetooth: hci0: invalid length 0, exp 2 for type 18
[  620.156984][ T7827] usb 4-1: unable to get BOS descriptor or descriptor too short
[  620.172075][ T7827] usb 4-1: no configurations
[  620.176713][ T7827] usb 4-1: can't read configurations, error -22
[  620.253920][ T8084] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  620.414112][ T8084] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  620.532637][ T8084] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  620.584601][ T5848] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  620.593679][ T9204] 8021q: adding VLAN 0 to HW filter on device batadv0
[  620.594768][ T5848] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  620.615157][ T5848] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  620.624207][ T5848] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  620.632046][ T5848] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  620.714812][ T9036] veth0_vlan: entered promiscuous mode
[  620.918104][ T5832] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  620.998225][ T9036] veth1_vlan: entered promiscuous mode
[  621.103829][ T9238] 8021q: adding VLAN 0 to HW filter on device bond0
[  621.131995][ T9238] 8021q: adding VLAN 0 to HW filter on device team0
[  621.183180][ T9238] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  621.195794][ T9238] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  621.317212][ T6710] bridge0: port 1(bridge_slave_0) entered blocking state
[  621.324459][ T6710] bridge0: port 1(bridge_slave_0) entered forwarding state
[  621.335565][ T6710] bridge0: port 2(bridge_slave_1) entered blocking state
[  621.342735][ T6710] bridge0: port 2(bridge_slave_1) entered forwarding state
[  622.336394][ T8084] bridge_slave_1: left allmulticast mode
[  622.350462][ T8084] bridge_slave_1: left promiscuous mode
[  622.358549][ T8084] bridge0: port 2(bridge_slave_1) entered disabled state
[  622.369158][ T8084] bridge_slave_0: left allmulticast mode
[  622.375197][ T8084] bridge_slave_0: left promiscuous mode
[  622.381059][ T8084] bridge0: port 1(bridge_slave_0) entered disabled state
[  622.742959][ T5848] Bluetooth: hci2: command tx timeout
[  622.781064][ T8084] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  622.816844][ T8084] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  624.457627][ T8084] bond0 (unregistering): Released all slaves
[  624.670065][ T5143] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  624.678812][ T5143] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  624.687919][ T5143] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  624.696821][ T5143] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  624.704652][ T5143] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  624.747728][ T9519] loop5: detected capacity change from 0 to 4096
[  624.769569][ T9519] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512).
[  624.812853][ T5848] Bluetooth: hci2: command tx timeout
[  624.843701][ T9519] ntfs3(loop5): ino=19, mi_enum_attr
[  624.849050][ T9519] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  624.870182][ T9519] ntfs3(loop5): Failed to initialize $Extend/$Reparse.
[  624.933578][ T9204] veth0_vlan: entered promiscuous mode
[  624.994116][ T9518] netlink: 'syz.5.734': attribute type 1 has an invalid length.
[  625.033111][ T9518] netlink: 244 bytes leftover after parsing attributes in process `syz.5.734'.
[  625.047652][ T9518] NCSI netlink: No device for ifindex 0
[  625.193041][ T9204] veth1_vlan: entered promiscuous mode
[  625.225758][ T8084] hsr_slave_0: left promiscuous mode
[  625.239905][ T8084] hsr_slave_1: left promiscuous mode
[  625.247849][ T8084] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  625.255604][ T8084] batman_adv: batadv0: Removing interface: batadv_slave_0
[  625.265048][ T8084] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  625.275078][ T8084] batman_adv: batadv0: Removing interface: batadv_slave_1
[  625.302969][ T8084] veth1_macvtap: left promiscuous mode
[  625.308635][ T8084] veth0_macvtap: left promiscuous mode
[  625.314798][ T8084] veth1_vlan: left promiscuous mode
[  625.322012][ T8084] veth0_vlan: left promiscuous mode
[  625.414417][ T9525] loop3: detected capacity change from 0 to 32768
[  625.561775][ T9529] loop5: detected capacity change from 0 to 64
[  625.687837][ T9529] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  626.089008][ T9535] loop5: detected capacity change from 0 to 512
[  626.119752][ T9535] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  626.168028][ T9535] EXT4-fs error (device loop5): ext4_orphan_get:1417: comm syz.5.740: bad orphan inode 131083
[  626.193711][ T9535] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  626.309232][ T9531] loop3: detected capacity change from 0 to 32768
[  626.383032][ T5832] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  626.408586][ T9531] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  626.542875][ T9531] XFS (loop3): Torn write (CRC failure) detected at log block 0x40. Truncating head block from 0x50.
[  626.584176][ T9531] XFS (loop3): Starting recovery (logdev: internal)
[  626.608140][ T9548] loop5: detected capacity change from 0 to 256
[  626.622738][ T9531] XFS (loop3): Ending recovery (logdev: internal)
[  626.644507][ T9548] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011e5d, chksum : 0x63a11b78, utbl_chksum : 0xe619d30d)
[  626.787159][ T8084] team0 (unregistering): Port device team_slave_1 removed
[  626.810620][ T5848] Bluetooth: hci4: command tx timeout
[  626.845411][ T8651] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  626.855714][ T8084] team0 (unregistering): Port device team_slave_0 removed
[  626.890559][ T5848] Bluetooth: hci2: command tx timeout
[  628.113864][ T9491] chnl_net:caif_netlink_parms(): no params data found
[  628.152418][ T9238] 8021q: adding VLAN 0 to HW filter on device batadv0
[  628.554416][ T9491] bridge0: port 1(bridge_slave_0) entered blocking state
[  628.569364][ T9491] bridge0: port 1(bridge_slave_0) entered disabled state
[  628.577679][ T9491] bridge_slave_0: entered allmulticast mode
[  628.585723][ T9491] bridge_slave_0: entered promiscuous mode
[  628.624691][ T9204] veth0_macvtap: entered promiscuous mode
[  628.639129][ T9491] bridge0: port 2(bridge_slave_1) entered blocking state
[  628.651031][ T9491] bridge0: port 2(bridge_slave_1) entered disabled state
[  628.659967][ T9491] bridge_slave_1: entered allmulticast mode
[  628.672339][ T9491] bridge_slave_1: entered promiscuous mode
[  628.729552][ T9204] veth1_macvtap: entered promiscuous mode
[  628.739491][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  628.745848][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  628.848722][ T9491] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  628.904761][ T5848] Bluetooth: hci4: command tx timeout
[  628.964493][ T9491] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  628.974804][ T5848] Bluetooth: hci2: command tx timeout
[  629.352383][ T9491] team0: Port device team_slave_0 added
[  629.498898][ T9491] team0: Port device team_slave_1 added
[  629.716003][ T9204] batman_adv: batadv0: Interface activated: batadv_slave_0
[  629.734093][ T9491] batman_adv: batadv0: Adding interface: batadv_slave_0
[  629.751343][ T9491] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  629.790974][ T9491] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  629.813978][ T9520] chnl_net:caif_netlink_parms(): no params data found
[  629.857975][ T9491] batman_adv: batadv0: Adding interface: batadv_slave_1
[  629.870533][ T9491] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  629.897015][ T5992] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  629.911135][ T9491] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  630.060557][ T5992] usb 4-1: Using ep0 maxpacket: 16
[  630.080987][ T5992] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  630.100165][ T9204] batman_adv: batadv0: Interface activated: batadv_slave_1
[  630.109167][ T5992] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  630.120575][ T5992] usb 4-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00
[  630.139911][ T5992] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  630.152927][ T5992] usb 4-1: config 0 descriptor??
[  630.344055][ T6130] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  630.491309][ T6130] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  630.541606][ T9520] bridge0: port 1(bridge_slave_0) entered blocking state
[  630.550864][ T9520] bridge0: port 1(bridge_slave_0) entered disabled state
[  630.570796][ T9520] bridge_slave_0: entered allmulticast mode
[  630.582942][ T9576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  630.597018][ T9520] bridge_slave_0: entered promiscuous mode
[  630.605896][ T9576] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  630.619098][ T9520] bridge0: port 2(bridge_slave_1) entered blocking state
[  630.627522][ T9520] bridge0: port 2(bridge_slave_1) entered disabled state
[  630.652971][ T5992] appleir 0003:05AC:8241.0005: unknown main item tag 0x0
[  630.660060][ T5992] appleir 0003:05AC:8241.0005: unknown main item tag 0x0
[  630.670278][ T9520] bridge_slave_1: entered allmulticast mode
[  630.682453][ T9520] bridge_slave_1: entered promiscuous mode
[  630.690765][ T5992] appleir 0003:05AC:8241.0005: unknown main item tag 0x0
[  630.712714][ T9491] hsr_slave_0: entered promiscuous mode
[  630.720507][ T5992] appleir 0003:05AC:8241.0005: unknown main item tag 0x0
[  630.729443][ T9491] hsr_slave_1: entered promiscuous mode
[  630.735755][ T5992] appleir 0003:05AC:8241.0005: unknown main item tag 0x0
[  630.743772][ T9491] debugfs: 'hsr0' already exists in 'hsr'
[  630.749506][ T9491] Cannot create hsr debugfs directory
[  630.769183][ T5992] appleir 0003:05AC:8241.0005: hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.3-1/input0
[  630.799265][ T6130] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  630.824694][ T6130] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  630.858813][ T9238] veth0_vlan: entered promiscuous mode
[  630.910935][ T9576] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  630.970761][ T5848] Bluetooth: hci4: command tx timeout
[  631.012784][ T9576] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  631.217045][ T9520] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  631.267677][ T9238] veth1_vlan: entered promiscuous mode
[  631.312423][ T9520] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  631.334629][ T7827] usb 4-1: USB disconnect, device number 8
[  631.573559][ T8084] bridge_slave_1: left allmulticast mode
[  631.579325][ T8084] bridge_slave_1: left promiscuous mode
[  631.586466][ T8084] bridge0: port 2(bridge_slave_1) entered disabled state
[  631.623707][ T8084] bridge_slave_0: left allmulticast mode
[  631.629456][ T8084] bridge_slave_0: left promiscuous mode
[  631.641096][ T8084] bridge0: port 1(bridge_slave_0) entered disabled state
[  632.566216][ T8084] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  632.593704][ T8084] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  632.660118][ T8084] bond0 (unregistering): Released all slaves
[  632.745876][ T9520] team0: Port device team_slave_0 added
[  632.833634][ T9520] team0: Port device team_slave_1 added
[  633.050562][ T5848] Bluetooth: hci4: command tx timeout
[  633.061067][ T5954] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  633.223560][ T8084] hsr_slave_0: left promiscuous mode
[  633.243203][ T8084] hsr_slave_1: left promiscuous mode
[  633.260751][ T8084] batman_adv: batadv0: Removing interface: batadv_slave_0
[  633.268892][ T8084] batman_adv: batadv0: Removing interface: batadv_slave_1
[  633.297150][ T8084] veth1_vlan: left promiscuous mode
[  633.308928][ T8084] veth0_vlan: left promiscuous mode
[  633.451247][ T5954] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  633.698277][ T8084] team0 (unregistering): Port device team_slave_1 removed
[  633.739058][ T8084] team0 (unregistering): Port device team_slave_0 removed
[  634.160599][ T9520] batman_adv: batadv0: Adding interface: batadv_slave_0
[  634.167716][ T9520] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  634.200508][ T9520] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  634.252710][ T9520] batman_adv: batadv0: Adding interface: batadv_slave_1
[  634.270748][ T9520] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  634.298035][ T9520] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  634.513269][   T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  634.540097][   T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  634.550257][ T9238] veth0_macvtap: entered promiscuous mode
[  634.563664][ T9238] veth1_macvtap: entered promiscuous mode
[  635.368394][ T9238] batman_adv: batadv0: Interface activated: batadv_slave_0
[  635.393796][   T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  635.402429][   T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  635.405770][ T9598] loop3: detected capacity change from 0 to 4096
[  635.417335][ T9598] ntfs3: Unknown parameter '00000000000000000000003ÿ00000000000000000000003'
[  635.488598][ T9520] hsr_slave_0: entered promiscuous mode
[  635.497292][ T9520] hsr_slave_1: entered promiscuous mode
[  635.603228][ T9238] batman_adv: batadv0: Interface activated: batadv_slave_1
[  635.876933][ T9603] loop3: detected capacity change from 0 to 1024
[  635.944702][ T5848] Bluetooth: hci0: command 0x0406 tx timeout
[  635.996207][ T8022] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  636.614229][ T8022] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  636.724293][ T8022] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  636.779538][ T8022] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  637.055324][ T9612] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  638.141813][ T8022] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  638.149663][ T8022] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  638.337463][ T9491] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  638.366960][ T9491] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  638.391570][ T9491] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  638.412743][ T8022] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  638.427897][ T8022] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  638.439369][ T9491] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  638.596682][ T9625] loop3: detected capacity change from 0 to 32768
[  638.621448][ T9625] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.759 (9625)
[  638.687809][ T9625] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  638.722197][ T9625] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm
[  638.874248][ T9625] BTRFS info (device loop3): rebuilding free space tree
[  638.909475][ T9625] BTRFS info (device loop3): allowing degraded mounts
[  638.917746][ T9520] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  638.925956][ T9625] BTRFS info (device loop3): enabling ssd optimizations
[  638.946397][ T9625] BTRFS info (device loop3): enabling free space tree
[  638.984016][ T9520] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  639.002765][ T9625] BTRFS info (device loop3): force clearing of disk cache
[  639.035142][ T9625] BTRFS info (device loop3): use zstd compression, level 3
[  639.043071][ T9520] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  639.074540][ T9625] BTRFS info (device loop3): max_inline set to 0
[  639.113575][ T9491] 8021q: adding VLAN 0 to HW filter on device bond0
[  639.136734][ T9520] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  639.319819][ T9660] netlink: 4 bytes leftover after parsing attributes in process `syz.5.762'.
[  639.343947][ T9660] netlink: 4 bytes leftover after parsing attributes in process `syz.5.762'.
[  640.038914][ T9491] 8021q: adding VLAN 0 to HW filter on device team0
[  640.082476][ T6113] bridge0: port 1(bridge_slave_0) entered blocking state
[  640.089803][ T6113] bridge0: port 1(bridge_slave_0) entered forwarding state
[  640.126279][ T6113] bridge0: port 2(bridge_slave_1) entered blocking state
[  640.133519][ T6113] bridge0: port 2(bridge_slave_1) entered forwarding state
[  640.241072][ T9520] 8021q: adding VLAN 0 to HW filter on device bond0
[  640.306691][ T8651] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  640.317894][  T928] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  640.331944][ T9520] 8021q: adding VLAN 0 to HW filter on device team0
[  640.419512][   T50] bridge0: port 1(bridge_slave_0) entered blocking state
[  640.426721][   T50] bridge0: port 1(bridge_slave_0) entered forwarding state
[  641.294004][ T9639] loop8: detected capacity change from 0 to 32768
[  641.321528][ T9639] btrfs: Unknown parameter 'obj_role'
[  641.397439][  T928] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  641.408770][  T928] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  641.421788][  T928] usb 1-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00
[  641.430913][  T928] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  641.456864][  T928] usb 1-1: config 0 descriptor??
[  641.675306][   T50] bridge0: port 2(bridge_slave_1) entered blocking state
[  641.682526][   T50] bridge0: port 2(bridge_slave_1) entered forwarding state
[  642.362301][ T9491] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  642.567458][  T928] steelseries 0003:1038:12B6.0006: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.0-1/input0
[  642.832592][ T9669] loop0: detected capacity change from 0 to 8192
[  643.745159][ T9669]  loop0: [POWERTEC]
[  644.005077][ T9692] bond1: entered allmulticast mode
[  644.043213][ T6015] usb 1-1: reset high-speed USB device number 4 using dummy_hcd
[  644.062747][ T9692] 8021q: adding VLAN 0 to HW filter on device bond1
[  644.280879][ T5954] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  644.490564][ T5954] usb 4-1: Using ep0 maxpacket: 16
[  644.526653][ T5954] usb 4-1: config 1 interface 0 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 1023
[  644.587028][ T5954] usb 4-1: config 1 interface 0 has no altsetting 0
[  644.631735][ T5954] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  644.675117][ T5954] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  644.710776][ T5954] usb 4-1: Product: syz
[  644.726071][ T5954] usb 4-1: Manufacturer: syz
[  644.763474][ T9520] 8021q: adding VLAN 0 to HW filter on device batadv0
[  644.770505][ T5954] usb 4-1: SerialNumber: syz
[  644.797684][ T9699] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  644.840196][ T9491] 8021q: adding VLAN 0 to HW filter on device batadv0
[  645.011274][  T928] usb 1-1: USB disconnect, device number 4
[  645.243333][ T9699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  645.270905][ T9699] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  646.677128][ T9491] veth0_vlan: entered promiscuous mode
[  646.713275][ T9520] veth0_vlan: entered promiscuous mode
[  646.755055][ T9491] veth1_vlan: entered promiscuous mode
[  646.803925][ T9520] veth1_vlan: entered promiscuous mode
[  646.898837][ T9727] loop8: detected capacity change from 0 to 512
[  646.955653][ T9520] veth0_macvtap: entered promiscuous mode
[  646.983555][ T9491] veth0_macvtap: entered promiscuous mode
[  647.001142][ T9713] kAFS: unparsable volume name
[  647.010176][ T9520] veth1_macvtap: entered promiscuous mode
[  647.011149][ T9727] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  647.041961][ T9491] veth1_macvtap: entered promiscuous mode
[  647.090103][ T9520] batman_adv: batadv0: Interface activated: batadv_slave_0
[  647.114613][ T9727] EXT4-fs (loop8): 1 truncate cleaned up
[  647.152134][ T9727] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  647.177317][ T9520] batman_adv: batadv0: Interface activated: batadv_slave_1
[  647.199481][ T6113] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  647.262101][ T6113] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  647.317254][ T6113] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  647.512121][ T5954] usblp 4-1:1.0: usblp0: USB Bidirectional printer dev 9 if 0 alt 1 proto 2 vid 0x0525 pid 0xA4A8
[  647.549540][ T6113] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  647.592526][ T9491] batman_adv: batadv0: Interface activated: batadv_slave_0
[  647.632904][ T5954] usb 4-1: USB disconnect, device number 9
[  647.673081][ T5954] usblp0: removed
[  647.962695][ T9491] batman_adv: batadv0: Interface activated: batadv_slave_1
[  648.128040][ T9238] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  648.161434][ T6124] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  648.238232][ T6124] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  648.280353][ T6124] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  648.334036][ T6124] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  650.023717][ T7957] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  650.060468][ T7957] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  650.211031][ T1136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  650.241854][ T1136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  650.391350][  T996] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  650.421124][  T996] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  650.606372][ T6413] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  650.645120][ T6413] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  651.012876][ T9745] loop9: detected capacity change from 0 to 40427
[  651.013823][ T9747] loop6: detected capacity change from 0 to 128
[  651.052120][ T9745] F2FS-fs (loop9): invalid crc value
[  651.165855][ T9745] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  651.176072][ T9747] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem
[  651.176995][ T9745] F2FS-fs (loop9): Start checkpoint disabled!
[  651.201903][ T9745] F2FS-fs (loop9): f2fs_disable_checkpoint() finish, err:0
[  651.212086][ T9745] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e6
[  651.295473][ T9747] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  651.383199][ T9747] ext2 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  652.271671][ T9741] loop3: detected capacity change from 0 to 40427
[  652.281406][ T9741] F2FS-fs (loop3): build fault injection rate: 174
[  652.354376][ T9741] F2FS-fs (loop3): build fault injection type: 0x3bfe8c
[  652.382339][ T9741] F2FS-fs (loop3): invalid crc value
[  652.657642][ T9491] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  652.686058][ T7957] kworker/u8:29: attempt to access beyond end of device
[  652.686058][ T7957] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  652.734652][ T7957] CPU: 1 UID: 0 PID: 7957 Comm: kworker/u8:29 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  652.734694][ T7957] Tainted: [L]=SOFTLOCKUP
[  652.734704][ T7957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  652.734720][ T7957] Workqueue: writeback wb_workfn (flush-7:9)
[  652.734773][ T7957] Call Trace:
[  652.734783][ T7957]  <TASK>
[  652.734794][ T7957]  dump_stack_lvl+0xe8/0x150
[  652.734832][ T7957]  f2fs_handle_critical_error+0x37c/0x540
[  652.734874][ T7957]  f2fs_write_end_io+0x886/0xb60
[  652.734934][ T7957]  __submit_merged_bio+0x256/0x660
[  652.734971][ T7957]  __submit_merged_write_cond+0x269/0x530
[  652.735010][ T7957]  f2fs_write_data_pages+0x2756/0x3290
[  652.735090][ T7957]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  652.735143][ T7957]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  652.735228][ T7957]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  652.735256][ T7957]  ? __lock_acquire+0x6b6/0x2cf0
[  652.735304][ T7957]  ? srso_alias_return_thunk+0x5/0xfbef5
[  652.735333][ T7957]  ? __lock_acquire+0x6b6/0x2cf0
[  652.735378][ T7957]  ? srso_alias_return_thunk+0x5/0xfbef5
[  652.735411][ T7957]  ? srso_alias_return_thunk+0x5/0xfbef5
[  652.735445][ T7957]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  652.735480][ T7957]  do_writepages+0x32e/0x550
[  652.735536][ T7957]  ? srso_alias_return_thunk+0x5/0xfbef5
[  652.735565][ T7957]  ? reacquire_held_locks+0x104/0x190
[  652.735596][ T7957]  ? writeback_sb_inodes+0x3bd/0x1870
[  652.735635][ T7957]  __writeback_single_inode+0x133/0x1240
[  652.735669][ T7957]  ? do_raw_spin_unlock+0x122/0x240
[  652.735712][ T7957]  writeback_sb_inodes+0x93a/0x1870
[  652.735755][ T7957]  ? srso_alias_return_thunk+0x5/0xfbef5
[  652.735797][ T7957]  ? do_raw_spin_unlock+0x122/0x240
[  652.735841][ T7957]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  652.735868][ T7957]  ? do_raw_spin_lock+0x121/0x290
[  652.735961][ T7957]  ? srso_alias_return_thunk+0x5/0xfbef5
[  652.735989][ T7957]  ? rcu_is_watching+0x15/0xb0
[  652.736022][ T7957]  ? srso_alias_return_thunk+0x5/0xfbef5
[  652.736062][ T7957]  wb_writeback+0x42b/0xaa0
[  652.736105][ T7957]  ? queue_io+0x221/0x450
[  652.736139][ T7957]  ? __pfx_wb_writeback+0x10/0x10
[  652.736164][ T7957]  ? do_raw_spin_lock+0x121/0x290
[  652.736224][ T7957]  wb_workfn+0x3f9/0xed0
[  652.736287][ T7957]  ? __pfx_wb_workfn+0x10/0x10
[  652.736324][ T7957]  ? srso_alias_return_thunk+0x5/0xfbef5
[  652.736358][ T7957]  ? srso_alias_return_thunk+0x5/0xfbef5
[  652.736386][ T7957]  ? do_raw_spin_lock+0x121/0x290
[  652.736419][ T7957]  ? lock_acquire+0x107/0x340
[  652.736446][ T7957]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  652.736484][ T7957]  ? srso_alias_return_thunk+0x5/0xfbef5
[  652.736516][ T7957]  ? srso_alias_return_thunk+0x5/0xfbef5
[  652.736555][ T7957]  ? srso_alias_return_thunk+0x5/0xfbef5
[  652.736590][ T7957]  ? process_scheduled_works+0x9ef/0x1770
[  652.736616][ T7957]  ? process_scheduled_works+0x9ef/0x1770
[  652.736644][ T7957]  process_scheduled_works+0xad1/0x1770
[  652.736712][ T7957]  ? __pfx_process_scheduled_works+0x10/0x10
[  652.736735][ T7957]  ? do_raw_spin_lock+0x121/0x290
[  652.736780][ T7957]  ? srso_alias_return_thunk+0x5/0xfbef5
[  652.736820][ T7957]  worker_thread+0x8a0/0xda0
[  652.736854][ T7957]  ? srso_alias_return_thunk+0x5/0xfbef5
[  652.736894][ T7957]  ? srso_alias_return_thunk+0x5/0xfbef5
[  652.736925][ T7957]  ? __kthread_parkme+0x7b/0x200
[  652.736970][ T7957]  kthread+0x711/0x8a0
[  652.737010][ T7957]  ? __pfx_worker_thread+0x10/0x10
[  652.737038][ T7957]  ? __pfx_kthread+0x10/0x10
[  652.737068][ T7957]  ? srso_alias_return_thunk+0x5/0xfbef5
[  652.737105][ T7957]  ? _raw_spin_unlock_irq+0x23/0x50
[  652.737145][ T7957]  ? __pfx_kthread+0x10/0x10
[  652.737182][ T7957]  ret_from_fork+0x510/0xa50
[  652.737213][ T7957]  ? __pfx_ret_from_fork+0x10/0x10
[  652.737234][ T7957]  ? srso_alias_return_thunk+0x5/0xfbef5
[  652.737263][ T7957]  ? __switch_to+0xc9e/0x1480
[  652.737307][ T7957]  ? __pfx_kthread+0x10/0x10
[  652.737344][ T7957]  ret_from_fork_asm+0x1a/0x30
[  652.737406][ T7957]  </TASK>
[  652.737418][ T7957] F2FS-fs (loop9): Stopped filesystem due to reason: 3
[  652.811731][ T9741] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  654.460482][ T9768] netlink: 'syz.6.781': attribute type 1 has an invalid length.
[  654.492346][ T9768] netlink: 1 bytes leftover after parsing attributes in process `syz.6.781'.
[  654.978466][ T9771] netlink: 4 bytes leftover after parsing attributes in process `syz.5.783'.
[  654.999917][ T9771] netlink: 12 bytes leftover after parsing attributes in process `syz.5.783'.
[  655.121397][ T9778] netlink: 12 bytes leftover after parsing attributes in process `syz.5.783'.
[  655.368338][ T9782] loop6: detected capacity change from 0 to 512
[  655.437510][ T9782] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem
[  655.500887][ T9782] EXT4-fs (loop6): invalid journal inode
[  655.553267][ T9782] EXT4-fs (loop6): can't get journal size
[  656.670018][ T9782] EXT4-fs (loop6): 1 truncate cleaned up
[  656.807877][ T9782] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  657.387535][ T9802] loop8: detected capacity change from 0 to 2048
[  657.745085][ T9802]  loop8: p1 < > p4
[  657.751873][ T9802] loop8: p4 size 8388608 extends beyond EOD, truncated
[  658.773077][ T9491] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  659.083009][ T8380] udevd[8380]: inotify_add_watch(7, /dev/loop8p4, 10) failed: No such file or directory
[  659.108905][ T8769] udevd[8769]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory
[  659.236199][ T8769] udevd[8769]: inotify_add_watch(7, /dev/loop8p1, 10) failed: No such file or directory
[  659.250936][ T8380] udevd[8380]: inotify_add_watch(7, /dev/loop8p4, 10) failed: No such file or directory
[  659.282059][ T9816] loop3: detected capacity change from 0 to 64
[  659.920682][ T5143] Bluetooth: hci0: adv larger than maximum supported
[  661.384274][ T9825] FAULT_INJECTION: forcing a failure.
[  661.384274][ T9825] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  661.404156][ T9825] CPU: 0 UID: 0 PID: 9825 Comm: syz.8.797 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  661.404199][ T9825] Tainted: [L]=SOFTLOCKUP
[  661.404206][ T9825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  661.404217][ T9825] Call Trace:
[  661.404225][ T9825]  <TASK>
[  661.404233][ T9825]  dump_stack_lvl+0xe8/0x150
[  661.404262][ T9825]  should_fail_ex+0x414/0x560
[  661.404299][ T9825]  _copy_from_iter+0x1cd/0x1630
[  661.404319][ T9825]  ? srso_alias_return_thunk+0x5/0xfbef5
[  661.404342][ T9825]  ? srso_alias_return_thunk+0x5/0xfbef5
[  661.404365][ T9825]  ? srso_alias_return_thunk+0x5/0xfbef5
[  661.404391][ T9825]  ? __pfx__copy_from_iter+0x10/0x10
[  661.404411][ T9825]  ? srso_alias_return_thunk+0x5/0xfbef5
[  661.404431][ T9825]  ? __build_skb_around+0x22d/0x3c0
[  661.404453][ T9825]  ? __alloc_skb+0x198/0x3a0
[  661.404472][ T9825]  ? srso_alias_return_thunk+0x5/0xfbef5
[  661.404492][ T9825]  ? skb_put+0x11b/0x210
[  661.404515][ T9825]  netlink_sendmsg+0x6b2/0xb30
[  661.404548][ T9825]  ? __pfx_netlink_sendmsg+0x10/0x10
[  661.404575][ T9825]  ? srso_alias_return_thunk+0x5/0xfbef5
[  661.404596][ T9825]  ? aa_sock_msg_perm+0xf1/0x1b0
[  661.404621][ T9825]  ? srso_alias_return_thunk+0x5/0xfbef5
[  661.404642][ T9825]  ? srso_alias_return_thunk+0x5/0xfbef5
[  661.404662][ T9825]  ? __pfx_netlink_sendmsg+0x10/0x10
[  661.404688][ T9825]  __sock_sendmsg+0x21c/0x270
[  661.404717][ T9825]  sock_write_iter+0x279/0x360
[  661.404741][ T9825]  ? srso_alias_return_thunk+0x5/0xfbef5
[  661.404765][ T9825]  ? __pfx_sock_write_iter+0x10/0x10
[  661.404799][ T9825]  ? srso_alias_return_thunk+0x5/0xfbef5
[  661.404819][ T9825]  ? srso_alias_return_thunk+0x5/0xfbef5
[  661.404839][ T9825]  ? security_file_permission+0x75/0x290
[  661.404867][ T9825]  vfs_write+0x5c9/0xb30
[  661.404889][ T9825]  ? __pfx_sock_write_iter+0x10/0x10
[  661.404915][ T9825]  ? __pfx_vfs_write+0x10/0x10
[  661.404942][ T9825]  ? __fget_files+0x2a/0x420
[  661.404970][ T9825]  ? srso_alias_return_thunk+0x5/0xfbef5
[  661.404994][ T9825]  ksys_write+0x145/0x250
[  661.405011][ T9825]  ? srso_alias_return_thunk+0x5/0xfbef5
[  661.405035][ T9825]  ? __pfx_ksys_write+0x10/0x10
[  661.405063][ T9825]  do_syscall_64+0xec/0xf80
[  661.405082][ T9825]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  661.405100][ T9825]  ? trace_irq_disable+0x37/0x100
[  661.405130][ T9825]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  661.405148][ T9825] RIP: 0033:0x7faeb958f749
[  661.405165][ T9825] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  661.405181][ T9825] RSP: 002b:00007faeba4b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  661.405200][ T9825] RAX: ffffffffffffffda RBX: 00007faeb97e5fa0 RCX: 00007faeb958f749
[  661.405214][ T9825] RDX: 0000000000000024 RSI: 00002000000000c0 RDI: 0000000000000003
[  661.405226][ T9825] RBP: 00007faeba4b1090 R08: 0000000000000000 R09: 0000000000000000
[  661.405238][ T9825] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  661.405249][ T9825] R13: 00007faeb97e6038 R14: 00007faeb97e5fa0 R15: 00007ffd28d46b78
[  661.405279][ T9825]  </TASK>
[  662.840433][ T6034] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  662.912031][ T9840] loop3: detected capacity change from 0 to 4096
[  662.923911][ T9840] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512).
[  663.050891][ T6034] usb 10-1: Using ep0 maxpacket: 32
[  663.063545][ T6034] usb 10-1: config 0 has an invalid interface number: 67 but max is 0
[  663.089353][ T6034] usb 10-1: config 0 has no interface number 0
[  663.116270][ T6034] usb 10-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  663.134456][ T9837] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  663.143601][ T6034] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  663.182893][ T6034] usb 10-1: Product: syz
[  663.198928][ T6034] usb 10-1: Manufacturer: syz
[  663.215123][ T6034] usb 10-1: SerialNumber: syz
[  663.242868][ T6034] usb 10-1: config 0 descriptor??
[  663.266382][ T6034] smsc95xx v2.0.0
[  664.655483][ T9836] netlink: 24 bytes leftover after parsing attributes in process `syz.9.801'.
[  664.724249][ T9865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  664.778057][ T9865] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  664.889930][ T9870] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  665.046166][ T9870] block device autoloading is deprecated and will be removed.
[  665.729574][ T6034] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000034: -71
[  665.851339][ T6034] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_DATA
[  665.880876][ T6034] smsc95xx 10-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[  665.905535][ T6034] smsc95xx 10-1:0.67: probe with driver smsc95xx failed with error -71
[  665.936014][ T6034] usb 10-1: USB disconnect, device number 2
[  666.130830][ T9882] loop8: detected capacity change from 0 to 1024
[  666.324132][ T9882] hfsplus: bad catalog entry type
[  666.703608][ T9889] netlink: 28 bytes leftover after parsing attributes in process `syz.3.818'.
[  666.720272][ T9889] netlink: 28 bytes leftover after parsing attributes in process `syz.3.818'.
[  666.909138][   T72] hfsplus: b-tree write err: -5, ino 4
[  667.279598][ T9890] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  667.314928][ T9890] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  667.430632][ T9890] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  667.460521][ T9890] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  667.544265][ T9890] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  667.575722][ T9890] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  667.611292][ T9890] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  667.685567][ T9890] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  667.761074][ T9890] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  667.800930][ T9890] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  667.849306][ T9890] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  667.890116][ T9890] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  667.910633][ T9890] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  667.964330][ T9890] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  667.987491][ T9890] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  668.001398][ T9890] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  668.126299][ T9890] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  668.318526][ T9905] loop9: detected capacity change from 0 to 32768
[  668.388605][ T9905] Mount JFS Failure: -5
[  668.910290][ T5143] Bluetooth: hci3: command 0x0406 tx timeout
[  669.196493][ T9933] loop8: detected capacity change from 0 to 4096
[  669.261416][ T9933] ntfs3: Unknown parameter '	'
[  669.450330][ T5143] Bluetooth: hci0: command 0x0406 tx timeout
[  669.546447][ T9938] loop9: detected capacity change from 0 to 4096
[  669.607189][ T9938] ntfs3(loop9): Different NTFS sector size (2048) and media sector size (512).
[  669.633283][ T5143] Bluetooth: hci5: command 0x0c1a tx timeout
[  669.713309][ T9938] ntfs3(loop9): Mark volume as dirty due to NTFS errors
[  669.770689][ T5143] Bluetooth: hci1: command 0x0c1a tx timeout
[  669.819105][ T9938] ntfs3(loop9): Failed to load $Bitmap (-22).
[  669.856699][ T9941] loop3: detected capacity change from 0 to 8192
[  669.931697][ T5143] Bluetooth: hci2: command 0x0c1a tx timeout
[  670.011769][ T5143] Bluetooth: hci4: command 0x0c1a tx timeout
[  670.117112][ T9944] loop8: detected capacity change from 0 to 2048
[  670.563164][ T9944] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  670.675614][ T9943] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  670.804021][ T9944] EXT4-fs (loop8): Delayed block allocation failed for inode 19 at logical offset 0 with max blocks 2 with error 28
[  670.870658][ T9944] EXT4-fs (loop8): This should not happen!! Data will be lost
[  670.870658][ T9944] 
[  670.970331][ T9944] EXT4-fs (loop8): Total free blocks count 0
[  670.973683][ T5143] Bluetooth: hci3: command 0x0406 tx timeout
[  671.023064][ T9944] EXT4-fs (loop8): Free/Dirty block details
[  671.029061][ T9944] EXT4-fs (loop8): free_blocks=2415919104
[  671.120881][ T9944] EXT4-fs (loop8): dirty_blocks=16
[  671.141145][ T9944] EXT4-fs (loop8): Block reservation details
[  671.177099][ T9944] EXT4-fs (loop8): i_reserved_data_blocks=1
[  671.352938][ T9952] netlink: 'syz.5.835': attribute type 4 has an invalid length.
[  671.400011][ T9238] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  671.450625][ T9954] netlink: 'syz.0.837': attribute type 1 has an invalid length.
[  671.530385][ T5143] Bluetooth: hci0: command 0x0406 tx timeout
[  671.690520][ T5143] Bluetooth: hci5: command 0x0c1a tx timeout
[  671.850760][ T5143] Bluetooth: hci1: command 0x0c1a tx timeout
[  672.010691][ T5143] Bluetooth: hci2: command 0x0c1a tx timeout
[  672.090647][ T5143] Bluetooth: hci4: command 0x0c1a tx timeout
[  673.640352][ T5143] Bluetooth: hci0: command 0x0406 tx timeout
[  674.317377][ T5143] Bluetooth: hci5: command 0x0c1a tx timeout
[  674.324742][ T5143] Bluetooth: hci1: command 0x0c1a tx timeout
[  674.334677][ T5143] Bluetooth: hci2: command 0x0c1a tx timeout
[  674.340953][ T5143] Bluetooth: hci4: command 0x0c1a tx timeout
[  675.161641][ T7827] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  675.330500][ T7827] usb 1-1: Using ep0 maxpacket: 8
[  675.356087][ T9994] loop6: detected capacity change from 0 to 1024
[  675.363576][ T9994] EXT4-fs: Ignoring removed mblk_io_submit option
[  675.384380][ T7827] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  675.423250][ T9994] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  675.436447][ T7827] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  675.446841][ T7827] usb 1-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b
[  675.458744][ T7827] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  675.469964][ T7827] usb 1-1: config 0 descriptor??
[  675.478592][ T7827] hso 1-1:0.0: Can't find BULK IN endpoint
[  676.360797][T10000] input: syz0 as /devices/virtual/input/input14
[  676.587459][ T9491] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  676.676316][T10005] loop3: detected capacity change from 0 to 2048
[  676.730120][T10005] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  676.837778][T10005] ext4 filesystem being mounted at /60/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  676.963015][T10010] PKCS7: Unknown OID: [4] (bad)
[  677.015699][T10010] PKCS7: Only support pkcs7_signedData type
[  677.073538][ T8651] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  677.123864][T10014] loop6: detected capacity change from 0 to 64
[  677.158387][T10014] hfs: unable to change iocharset
[  677.816729][ T7753] usb 1-1: USB disconnect, device number 5
[  678.084717][T10023] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method
[  678.336613][T10026] ªªªªªª: renamed from vlan0 (while UP)
[  678.429391][T10028] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check.
[  678.552416][T10031] loop8: detected capacity change from 0 to 8
[  678.673556][T10031] squashfs image failed sanity check
[  678.772166][T10031] loop8: detected capacity change from 0 to 128
[  678.821601][T10031] omfs: Bad value for 'umask'
[  679.199277][T10020] loop3: detected capacity change from 0 to 32768
[  679.217836][T10018] loop9: detected capacity change from 0 to 32768
[  679.299196][   T31] audit: type=1326 audit(1767388397.823:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10041 comm="syz.5.864" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd52618f749 code=0x0
[  679.315219][T10020] btrfs: Deprecated parameter 'usebackuproot'
[  679.701090][T10020] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  679.730505][T10018] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.854 (10018)
[  679.826926][T10018] BTRFS info (device loop9): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  679.868440][T10020] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.855 (10020)
[  679.894762][T10018] BTRFS info (device loop9): using blake2b (blake2b-256-lib) checksum algorithm
[  679.987548][T10020] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  680.041082][T10020] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm
[  680.521715][T10018] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR
[  680.543971][T10020] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR
[  680.981723][T10020] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR
[  681.127653][T10018] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR
[  681.200966][T10020] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR
[  681.267863][T10018] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR
[  681.302422][T10018] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR
[  681.465835][T10074] loop6: detected capacity change from 0 to 512
[  681.472594][T10018] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR
[  681.500587][T10020] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR
[  682.224684][T10020] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR
[  682.291265][T10074] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -13
[  682.315006][T10074] EXT4-fs error (device loop6): ext4_orphan_get:1391: inode #13: comm syz.6.866: iget: bad i_size value: 12154757448730
[  682.328254][T10020] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR
[  682.349768][T10020] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR
[  682.373414][T10074] EXT4-fs error (device loop6): ext4_orphan_get:1396: comm syz.6.866: couldn't read orphan inode 13 (err -117)
[  682.452410][T10020] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR
[  682.456841][T10020] BTRFS error (device loop3): open_ctree failed: -12
[  682.477856][T10018] BTRFS error (device loop9): open_ctree failed: -12
[  682.558265][T10074] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  685.810570][T10083] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  687.597525][ T9491] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  687.946047][T10109] sctp: [Deprecated]: syz.8.873 (pid 10109) Use of int in max_burst socket option deprecated.
[  687.946047][T10109] Use struct sctp_assoc_value instead
[  688.262429][T10120] loop0: detected capacity change from 0 to 64
[  690.186712][ T7719] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  690.186983][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  690.210476][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  692.333713][ T7719] usb 7-1: device descriptor read/all, error -71
[  692.776120][T10145] netlink: 207952 bytes leftover after parsing attributes in process `syz.5.883'.
[  692.800319][T10143] random: crng reseeded on system resumption
[  692.842480][ T9037] Bluetooth: hci3: unexpected event for opcode 0x2031
[  693.169588][T10148] netlink: 24 bytes leftover after parsing attributes in process `syz.3.885'.
[  693.466358][T10153] loop6: detected capacity change from 0 to 128
[  693.563812][T10153] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  693.611538][T10156] loop3: detected capacity change from 0 to 4096
[  693.859491][T10160] overlayfs: failed to resolve './cgroup': -2
[  693.981103][T10153] hpfs: filesystem error: improperly stopped
[  694.457975][T10153] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  694.540453][T10153] hpfs: You really don't want any checks? You are crazy...
[  694.548915][T10153] hpfs: hpfs_map_sector(): read error
[  694.620832][T10153] hpfs: code page support is disabled
[  694.652293][T10153] hpfs: filesystem error: map_dirent: not a directory
[  694.659080][T10153] 
[  694.726048][T10153] hpfs: hpfs_map_4sectors(): unaligned read
[  694.798759][T10153] hpfs: filesystem error: unable to find root dir
[  695.289581][T10153] loop6: detected capacity change from 0 to 16
[  695.426158][T10153] erofs (device loop6): mounted with root inode @ nid 36.
[  695.517755][T10153] erofs (device loop6): bogus lookback distance 1388 @ lcn 42 of nid 36
[  695.550535][ T6036] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  695.663679][T10153] erofs (device loop6): read error -117 @ 43 of nid 36
[  695.770506][ T6036] usb 1-1: Using ep0 maxpacket: 8
[  695.953118][ T6036] usb 1-1: too many endpoints for config 0 interface 0 altsetting 33: 193, using maximum allowed: 30
[  695.994830][ T6036] usb 1-1: config 0 interface 0 altsetting 33 has 1 endpoint descriptor, different from the interface descriptor's value: 193
[  696.037267][ T6036] usb 1-1: config 0 interface 0 has no altsetting 0
[  696.049317][ T6036] usb 1-1: New USB device found, idVendor=056a, idProduct=010e, bcdDevice= 0.00
[  696.061905][ T6036] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  696.072152][ T6003] usb 9-1: new high-speed USB device number 8 using dummy_hcd
[  696.093071][ T6036] usb 1-1: config 0 descriptor??
[  696.285255][ T6003] usb 9-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  696.301789][ T6003] usb 9-1: config 1 has an invalid interface number: 204 but max is 2
[  696.313787][ T6003] usb 9-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  696.326221][ T6003] usb 9-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  696.337558][ T6003] usb 9-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  696.357667][ T6003] usb 9-1: config 1 has no interface number 1
[  696.366480][ T6003] usb 9-1: too many endpoints for config 1 interface 204 altsetting 7: 37, using maximum allowed: 30
[  696.380935][ T6003] usb 9-1: config 1 interface 204 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37
[  696.394997][ T6003] usb 9-1: config 1 interface 204 has no altsetting 0
[  696.405254][ T6003] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  696.415176][ T6003] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  696.438434][ T6003] usb 9-1: Product: syz
[  696.464584][ T6003] usb 9-1: Manufacturer: syz
[  696.479260][ T6003] usb 9-1: SerialNumber: syz
[  696.532129][ T6036] wacom 0003:056A:010E.0007: unbalanced collection at end of report description
[  696.563224][ T6036] wacom 0003:056A:010E.0007: parse failed
[  696.581946][ T6036] wacom 0003:056A:010E.0007: probe with driver wacom failed with error -22
[  696.742990][ T1214] usb 1-1: USB disconnect, device number 6
[  696.770706][ T6003] usb 9-1: 0:2 : does not exist
[  696.804585][ T6003] usb 9-1: unknown interface protocol 0x3, assuming v1
[  696.839262][ T6003] usb 9-1: cannot find UAC_HEADER
[  697.067856][ T6003] snd-usb-audio 9-1:1.204: probe with driver snd-usb-audio failed with error -22
[  697.894145][ T6003] usb 9-1: USB disconnect, device number 8
[  697.933405][T10183] loop3: detected capacity change from 0 to 512
[  697.991264][T10183] EXT4-fs: Ignoring removed i_version option
[  698.045118][ T8769] udevd[8769]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  698.069072][T10183] EXT4-fs: Mount option(s) incompatible with ext3
[  698.343025][ T7753] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  698.374299][ T6003] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[  698.487425][T10189] loop0: detected capacity change from 0 to 4096
[  700.144880][T10189] nilfs2: Unknown parameter 'bƒ·@er'
[  700.171499][ T7753] usb 7-1: Using ep0 maxpacket: 32
[  700.179070][ T6003] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  700.211478][ T6003] usb 10-1: New USB device found, idVendor=056e, idProduct=00fe, bcdDevice= 0.00
[  700.225367][ T7753] usb 7-1: config 0 has an invalid interface number: 51 but max is 0
[  700.242919][ T7753] usb 7-1: config 0 has no interface number 0
[  700.267150][ T6003] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  700.307421][ T7753] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  700.327572][ T6003] usb 10-1: config 0 descriptor??
[  700.365513][ T7753] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  700.418775][ T7753] usb 7-1: Product: syz
[  700.436904][ T7753] usb 7-1: Manufacturer: syz
[  700.450603][ T7753] usb 7-1: SerialNumber: syz
[  700.482239][ T7753] usb 7-1: config 0 descriptor??
[  700.510144][ T7753] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  700.621281][ T6003] elecom 0003:056E:00FE.0008: hidraw0: USB HID v0.00 Device [HID 056e:00fe] on usb-dummy_hcd.9-1/input0
[  700.757464][ T7753] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  700.801800][ T6003] usb 10-1: USB disconnect, device number 3
[  700.857904][ T7753] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  700.886109][T10201] fido_id[10201]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/10-1/report_descriptor': No such file or directory
[  701.140353][ T7719] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  701.166912][T10185] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  701.177219][T10185] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  701.189128][    C0] usb 7-1: qt2_read_bulk_callback - non-zero urb status: -71
[  701.189627][T10197] usb 7-1: USB disconnect, device number 10
[  701.246102][T10197] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  701.292813][T10197] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  701.320614][ T7719] usb 1-1: Using ep0 maxpacket: 8
[  701.332801][ T7719] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  701.351237][T10197] quatech2 7-1:0.51: device disconnected
[  701.370818][ T7719] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  701.402845][ T7719] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  701.440374][ T7719] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  701.482118][ T7719] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  701.510995][ T7719] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  701.629811][T10208] loop3: detected capacity change from 0 to 512
[  701.706885][T10208] EXT4-fs (loop3): can't mount with journal_async_commit, fs mounted w/o journal
[  702.047241][ T7719] usb 1-1: GET_CAPABILITIES returned 0
[  702.156685][ T7719] usbtmc 1-1:16.0: can't read capabilities
[  702.579421][ T7719] usb 1-1: USB disconnect, device number 7
[  702.783327][T10214] loop6: detected capacity change from 0 to 4096
[  702.885307][T10219] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  702.918455][T10214] tipc: Started in network mode
[  702.930338][T10214] tipc: Node identity 00000000000000000000000000002e01, cluster identity 4711
[  702.950390][T10214] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  703.090447][ T7719] usb 4-1: new full-speed USB device number 10 using dummy_hcd
[  703.294765][ T7719] usb 4-1: unable to get BOS descriptor or descriptor too short
[  703.306856][ T7719] usb 4-1: no configurations
[  703.346480][ T7719] usb 4-1: can't read configurations, error -22
[  703.364402][T10223] netlink: 'syz.0.909': attribute type 3 has an invalid length.
[  703.626857][T10210] loop9: detected capacity change from 0 to 32768
[  703.646058][T10210] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.905 (10210)
[  703.695048][T10210] BTRFS info (device loop9): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  703.706428][T10210] BTRFS info (device loop9): using crc32c (crc32c-lib) checksum algorithm
[  703.746604][T10210] BTRFS error (device loop9): cannot disable free-space-tree
[  703.759719][T10210] BTRFS warning (device loop9): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  703.774510][T10210] BTRFS error (device loop9): open_ctree failed: -22
[  703.794044][T10137] usb 7-1: new full-speed USB device number 11 using dummy_hcd
[  705.262139][T10137] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 15
[  705.280427][T10137] usb 7-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  705.303073][T10137] usb 7-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8
[  705.334856][T10137] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  705.353612][T10137] usb 7-1: Product: syz
[  705.357872][T10137] usb 7-1: Manufacturer: syz
[  705.425649][T10137] usb 7-1: SerialNumber: syz
[  705.433959][T10137] usb 7-1: config 0 descriptor??
[  705.485075][T10137] powermate 7-1:0.0: probe with driver powermate failed with error -22
[  705.832077][T10137] usb 7-1: USB disconnect, device number 11
[  707.061297][ T6003] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[  707.260343][ T6003] usb 10-1: Using ep0 maxpacket: 8
[  707.273004][ T6003] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  708.880423][ T6003] usb 10-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  708.889512][ T6003] usb 10-1: config 1 has no interface number 1
[  709.010312][ T6003] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  709.093045][ T6003] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  709.128815][ T6003] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  709.169516][ T6003] usb 10-1: Product: syz
[  709.174179][ T6003] usb 10-1: Manufacturer: syz
[  709.178865][ T6003] usb 10-1: SerialNumber: syz
[  709.439702][T10246] loop9: detected capacity change from 0 to 512
[  709.494617][T10246] EXT4-fs (loop9): mounting ext2 file system using the ext4 subsystem
[  709.594833][T10246] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.917: bg 0: block 255: padding at end of block bitmap is not set
[  709.716439][T10246] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6689: Corrupt filesystem
[  709.785835][T10246] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.917: invalid indirect mapped block 1 (level 1)
[  709.859720][T10246] EXT4-fs (loop9): 1 truncate cleaned up
[  709.915742][T10246] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  710.013770][ T6003] usb 10-1: 2:1 : no or invalid class specific endpoint descriptor
[  710.044688][ T6003] usb 10-1: 2:1 : format type 0 is detected, processed as PCM
[  710.069066][ T6003] usb 10-1: 2:1 : sample bitwidth 243 in over sample bytes 3
[  710.071977][T10267] bridge1: trying to set multicast query interval above maximum, setting to 8640000 (86400000ms)
[  710.076944][T10273] loop8: detected capacity change from 0 to 128
[  710.095350][ T6003] usb 10-1: 2:1 : invalid UAC_FORMAT_TYPE desc
[  710.106889][T10274] loop6: detected capacity change from 0 to 128
[  710.343631][ T6003] usb 10-1: USB disconnect, device number 4
[  710.357337][T10276] NILFS (nullb0): couldn't find nilfs on the device
[  710.457786][ T8769] udevd[8769]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  710.596932][T10280] netlink: 'syz.5.928': attribute type 1 has an invalid length.
[  710.760483][ T6036] usb 4-1: new full-speed USB device number 12 using dummy_hcd
[  710.800494][T10286] netlink: 28 bytes leftover after parsing attributes in process `syz.8.930'.
[  710.827976][ T9520] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  712.706192][ T6036] usb 4-1: unable to get BOS descriptor or descriptor too short
[  712.746213][ T6036] usb 4-1: no configurations
[  712.769712][ T6036] usb 4-1: can't read configurations, error -22
[  713.086762][T10293] loop9: detected capacity change from 0 to 32768
[  713.116488][T10293] 
[  713.116488][T10293]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  713.116488][T10293] 
[  713.139280][T10291] 
[  713.139280][T10291]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  713.139280][T10291] 
[  713.153281][T10293] ERROR: (device loop9): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 0
[  713.153281][T10293] 
[  713.178073][T10295] loop0: detected capacity change from 0 to 512
[  713.192256][T10295] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[  713.200675][T10293] JFS: Invalid stbl[1] = -128 for inode 2, block = 0
[  713.212698][T10295] EXT4-fs (loop0): invalid journal inode
[  713.222779][T10295] EXT4-fs (loop0): can't get journal size
[  713.257309][T10293] jfs_lookup: dtSearch returned -5
[  713.264824][T10293] jfs_lookup: dtSearch returned -5
[  713.273110][T10295] EXT4-fs (loop0): 1 truncate cleaned up
[  713.283160][T10295] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  713.582641][ T9204] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  713.739510][ T6113] 
[  713.739510][ T6113]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  713.739510][ T6113] 
[  713.783357][ T6113] 
[  713.783357][ T6113]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  713.783357][ T6113] 
[  713.833870][  T112] 
[  713.833870][  T112]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  713.833870][  T112] 
[  713.855951][ T9520] 
[  713.855951][ T9520]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  713.855951][ T9520] 
[  713.900533][ T9520] 
[  713.900533][ T9520]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  713.900533][ T9520] 
[  713.978087][T10311] netlink: 'syz.0.938': attribute type 23 has an invalid length.
[  714.116033][T10313] FAULT_INJECTION: forcing a failure.
[  714.116033][T10313] name failslab, interval 1, probability 0, space 0, times 0
[  714.170784][ T6036] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[  714.182406][T10313] CPU: 1 UID: 0 PID: 10313 Comm: syz.3.939 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  714.182447][T10313] Tainted: [L]=SOFTLOCKUP
[  714.182457][T10313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  714.182472][T10313] Call Trace:
[  714.182482][T10313]  <TASK>
[  714.182492][T10313]  dump_stack_lvl+0xe8/0x150
[  714.182532][T10313]  should_fail_ex+0x414/0x560
[  714.182577][T10313]  should_failslab+0xa8/0x100
[  714.182611][T10313]  kmem_cache_alloc_noprof+0x88/0x710
[  714.182651][T10313]  ? mas_alloc_nodes+0x291/0x350
[  714.182700][T10313]  mas_alloc_nodes+0x291/0x350
[  714.182743][T10313]  mas_preallocate+0x2e0/0x670
[  714.182773][T10313]  ? __pfx_mas_preallocate+0x10/0x10
[  714.182793][T10313]  ? srso_alias_return_thunk+0x5/0xfbef5
[  714.182836][T10313]  ? __mas_set_range+0x12f/0x3c0
[  714.182875][T10313]  __split_vma+0x2fa/0xa00
[  714.182920][T10313]  ? __pfx___split_vma+0x10/0x10
[  714.182966][T10313]  ? srso_alias_return_thunk+0x5/0xfbef5
[  714.182993][T10313]  ? mas_find+0xb0e/0xd30
[  714.183024][T10313]  vms_gather_munmap_vmas+0x4c6/0x12f0
[  714.183077][T10313]  ? __pfx_vms_gather_munmap_vmas+0x10/0x10
[  714.183107][T10313]  ? srso_alias_return_thunk+0x5/0xfbef5
[  714.183135][T10313]  ? __lock_acquire+0x6b6/0x2cf0
[  714.183169][T10313]  ? srso_alias_return_thunk+0x5/0xfbef5
[  714.183195][T10313]  ? __lock_acquire+0x6b6/0x2cf0
[  714.183230][T10313]  do_vmi_align_munmap+0x268/0x440
[  714.183283][T10313]  ? __pfx_do_vmi_align_munmap+0x10/0x10
[  714.183346][T10313]  ? srso_alias_return_thunk+0x5/0xfbef5
[  714.183383][T10313]  do_vmi_munmap+0x253/0x2e0
[  714.183422][T10313]  do_munmap+0xcf/0x120
[  714.183463][T10313]  ? __pfx_do_munmap+0x10/0x10
[  714.183522][T10313]  mremap_to+0x2c8/0x790
[  714.183563][T10313]  ? __pfx_mremap_to+0x10/0x10
[  714.183599][T10313]  ? srso_alias_return_thunk+0x5/0xfbef5
[  714.183626][T10313]  ? check_prep_vma+0x724/0xb00
[  714.183670][T10313]  __se_sys_mremap+0xac6/0xfb0
[  714.183700][T10313]  ? srso_alias_return_thunk+0x5/0xfbef5
[  714.183756][T10313]  ? __pfx___se_sys_mremap+0x10/0x10
[  714.183798][T10313]  ? srso_alias_return_thunk+0x5/0xfbef5
[  714.183825][T10313]  ? ksys_write+0x22a/0x250
[  714.183848][T10313]  ? srso_alias_return_thunk+0x5/0xfbef5
[  714.183879][T10313]  ? __pfx_ksys_write+0x10/0x10
[  714.183910][T10313]  ? srso_alias_return_thunk+0x5/0xfbef5
[  714.183937][T10313]  ? __x64_sys_mremap+0x20/0xc0
[  714.183970][T10313]  do_syscall_64+0xec/0xf80
[  714.183996][T10313]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  714.184019][T10313]  ? trace_irq_disable+0x37/0x100
[  714.184059][T10313]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  714.184083][T10313] RIP: 0033:0x7f051d38f749
[  714.184104][T10313] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  714.184125][T10313] RSP: 002b:00007f051e2af038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019
[  714.184151][T10313] RAX: ffffffffffffffda RBX: 00007f051d5e5fa0 RCX: 00007f051d38f749
[  714.184169][T10313] RDX: 0000000000003000 RSI: 0000000000003000 RDI: 0000200000001000
[  714.184186][T10313] RBP: 00007f051e2af090 R08: 0000200000869000 R09: 0000000000000000
[  714.184223][T10313] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001
[  714.184238][T10313] R13: 00007f051d5e6038 R14: 00007f051d5e5fa0 R15: 00007ffd5efca588
[  714.184278][T10313]  </TASK>
[  714.548617][ T6036] usb 7-1: config 0 interface 0 altsetting 65 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  714.560120][ T6036] usb 7-1: config 0 interface 0 altsetting 65 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  714.752981][ T6036] usb 7-1: config 0 interface 0 has no altsetting 0
[  714.759655][ T6036] usb 7-1: New USB device found, idVendor=056e, idProduct=00fb, bcdDevice= 0.00
[  714.898425][ T6036] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  714.946947][ T6036] usb 7-1: config 0 descriptor??
[  715.192131][T10329] loop3: detected capacity change from 0 to 16
[  715.214806][T10329] erofs: Unknown parameter ''
[  715.426189][ T6036] elecom 0003:056E:00FB.0009: unknown main item tag 0x0
[  715.444055][ T6036] elecom 0003:056E:00FB.0009: unknown main item tag 0x0
[  715.464518][ T6036] elecom 0003:056E:00FB.0009: unknown main item tag 0x0
[  715.493008][ T6036] elecom 0003:056E:00FB.0009: unknown main item tag 0x0
[  715.522735][ T6036] elecom 0003:056E:00FB.0009: unknown main item tag 0x0
[  715.554121][ T6036] elecom 0003:056E:00FB.0009: hidraw0: USB HID v0.06 Device [HID 056e:00fb] on usb-dummy_hcd.6-1/input0
[  715.651456][ T6036] usb 7-1: USB disconnect, device number 12
[  715.660346][ T6003] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  715.743831][T10337] fido_id[10337]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory
[  715.830709][ T5941] usb 10-1: new full-speed USB device number 5 using dummy_hcd
[  715.912639][ T6003] usb 1-1: Using ep0 maxpacket: 8
[  715.983442][ T6003] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  716.004158][ T6003] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  716.034933][ T6003] usb 1-1: config 1 has no interface number 1
[  716.046606][ T5941] usb 10-1: unable to get BOS descriptor or descriptor too short
[  716.050371][ T6003] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  716.073112][ T5941] usb 10-1: no configurations
[  716.082045][T10339] loop3: detected capacity change from 0 to 512
[  716.082897][ T5941] usb 10-1: can't read configurations, error -22
[  716.092900][ T6003] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  716.108944][ T6003] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  716.134878][T10339] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  716.150302][ T6003] usb 1-1: Product: syz
[  716.154848][ T6003] usb 1-1: Manufacturer: syz
[  716.166002][T10339] EXT4-fs (loop3): invalid journal inode
[  716.176224][ T6003] usb 1-1: SerialNumber: syz
[  716.186860][T10339] EXT4-fs (loop3): can't get journal size
[  716.234430][T10339] EXT4-fs (loop3): 1 truncate cleaned up
[  716.252930][T10339] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  716.343722][T10334] loop8: detected capacity change from 0 to 32768
[  716.357366][T10334] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.944 (10334)
[  716.374400][T10334] BTRFS info (device loop8): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  716.399283][T10332] loop0: detected capacity change from 0 to 512
[  716.420811][T10334] BTRFS info (device loop8): using crc32c (crc32c-lib) checksum algorithm
[  716.439754][T10332] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem
[  716.461029][T10334] BTRFS warning (device loop8): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  716.464972][T10343] netlink: 'syz.6.947': attribute type 21 has an invalid length.
[  716.478085][T10315] netlink: 'syz.5.940': attribute type 3 has an invalid length.
[  716.509173][T10343] netlink: 132 bytes leftover after parsing attributes in process `syz.6.947'.
[  716.515684][T10332] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.943: bg 0: block 255: padding at end of block bitmap is not set
[  716.589528][T10315] bond0: (slave caif0): Error: Device type is different from other slaves
[  716.617553][T10332] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6689: Corrupt filesystem
[  716.632610][T10332] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.943: invalid indirect mapped block 1 (level 1)
[  716.648207][T10332] EXT4-fs (loop0): 1 truncate cleaned up
[  716.670101][ T8651] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  716.687511][T10332] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  716.763427][T10334] BTRFS info (device loop8): rebuilding free space tree
[  716.850146][ T6003] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor
[  716.865342][T10334] BTRFS info (device loop8): disabling free space tree
[  716.900417][ T6003] usb 1-1: 2:1 : format type 0 is detected, processed as PCM
[  716.918284][ T6003] usb 1-1: 2:1 : sample bitwidth 243 in over sample bytes 3
[  716.918733][T10334] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  716.947632][ T6003] usb 1-1: 2:1 : invalid UAC_FORMAT_TYPE desc
[  717.009026][T10334] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  717.111235][T10334] BTRFS info (device loop8): enabling ssd optimizations
[  717.160507][T10334] BTRFS info (device loop8): turning on async discard
[  717.167337][T10334] BTRFS info (device loop8): enabling disk space caching
[  717.212002][ T6003] usb 1-1: USB disconnect, device number 8
[  717.242382][T10367] netlink: 4 bytes leftover after parsing attributes in process `syz.3.948'.
[  717.367090][T10334] BTRFS info (device loop8): force clearing of disk cache
[  717.710471][ T8380] udevd[8380]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  717.856556][T10334] BTRFS info (device loop8): enabling auto defrag
[  717.874688][T10367] netlink: 'syz.3.948': attribute type 10 has an invalid length.
[  717.898973][T10334] BTRFS info (device loop8): max_inline set to 0
[  718.156786][   T31] audit: type=1804 audit(1767388436.683:27): pid=10334 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.8.944" name="/newroot/35/file0/file1" dev="loop8" ino=260 res=1 errno=0
[  718.164047][T10367] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  718.211540][T10381] loop9: detected capacity change from 0 to 1024
[  718.212654][ T9204] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  718.497806][T10385] netlink: 'syz.9.952': attribute type 3 has an invalid length.
[  718.701359][ T6180] hfsplus: b-tree write err: -5, ino 4
[  719.170092][ T9238] BTRFS info (device loop8): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  719.367324][T10343] loop6: detected capacity change from 0 to 32768
[  719.454691][T10343] (syz.6.947,10343,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  719.561522][T10343] (syz.6.947,10343,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  719.671786][T10343] JBD2: Ignoring recovery information on journal
[  719.685832][T10395] mmap: syz.3.957 (10395): VmData 25841664 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data.
[  719.901402][T10343] JBD2: journal reset failed
[  719.940960][T10343] (syz.6.947,10343,0):ocfs2_journal_load:1160 ERROR: Failed to load journal!
[  719.970418][T10343] (syz.6.947,10343,0):ocfs2_check_volume:2376 ERROR: ocfs2 journal load failed! -4
[  720.375897][T10405] loop9: detected capacity change from 0 to 256
[  720.559481][T10407] loop0: detected capacity change from 0 to 512
[  720.601633][T10407] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[  720.662374][T10407] EXT4-fs (loop0): invalid journal inode
[  720.701959][T10407] EXT4-fs (loop0): can't get journal size
[  720.804073][T10407] EXT4-fs (loop0): 1 truncate cleaned up
[  720.839745][T10407] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  720.890568][    C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  720.906256][ T5915] usb 4-1: new full-speed USB device number 14 using dummy_hcd
[  721.830982][ T5915] usb 4-1: unable to get BOS descriptor or descriptor too short
[  721.852158][ T5915] usb 4-1: no configurations
[  721.857094][ T5915] usb 4-1: can't read configurations, error -22
[  721.962528][ T9204] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  722.024325][T10400] loop8: detected capacity change from 0 to 32768
[  722.070864][T10400] BTRFS: device fsid e0cb6322-611b-4325-acdf-015f79de3787 devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.956 (10400)
[  722.166691][T10400] BTRFS info (device loop8): first mount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[  722.186517][T10400] BTRFS info (device loop8): using sha256 (sha256-lib) checksum algorithm
[  722.255406][T10433] netlink: 'syz.5.966': attribute type 23 has an invalid length.
[  722.341394][T10445] loop6: detected capacity change from 0 to 128
[  722.357821][T10400] BTRFS info (device loop8): turning off barriers
[  722.366234][T10445] vfat: Unknown parameter 'shortn./file7'
[  722.390677][T10400] BTRFS info (device loop8): enabling free space tree
[  722.430366][ T1214] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  723.563637][ T9238] BTRFS info (device loop8): last unmount of filesystem e0cb6322-611b-4325-acdf-015f79de3787
[  723.613935][ T1214] usb 1-1: Using ep0 maxpacket: 8
[  723.644112][ T1214] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  723.684124][ T1214] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  723.713969][ T1214] usb 1-1: config 1 has no interface number 1
[  723.724122][ T1214] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  723.786104][ T1214] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  723.828266][ T1214] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  723.880008][ T1214] usb 1-1: Product: syz
[  723.883430][   T31] audit: type=1800 audit(1767388442.403:28): pid=10461 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.974" name="bus" dev="overlay" ino=485 res=0 errno=0
[  723.928673][T10461] Invalid ELF header magic: != ELF
[  723.940674][ T1214] usb 1-1: Manufacturer: syz
[  723.945435][ T1214] usb 1-1: SerialNumber: syz
[  724.198326][T10461] overlayfs: failed lookup in lower (newroot/84, name='file0', err=-40): overlapping layers
[  724.211009][T10461] overlayfs: failed lookup in lower (newroot/84, name='file0', err=-40): overlapping layers
[  724.259982][T10468] loop9: detected capacity change from 0 to 1024
[  724.262763][T10426] loop0: detected capacity change from 0 to 512
[  724.320984][T10426] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem
[  724.341760][T10468] EXT4-fs: Ignoring removed nomblk_io_submit option
[  724.518786][T10426] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.965: bg 0: block 255: padding at end of block bitmap is not set
[  724.534282][   T30] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  724.559898][T10468] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c855c01c, mo2=0003]
[  724.560011][T10426] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6689: Corrupt filesystem
[  724.631798][T10477] fuse: Bad value for 'fd'
[  724.715668][T10426] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.965: invalid indirect mapped block 1 (level 1)
[  724.745336][T10468] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  724.790769][   T30] usb 4-1: Using ep0 maxpacket: 32
[  724.799132][   T30] usb 4-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40
[  724.803904][T10426] EXT4-fs (loop0): 1 truncate cleaned up
[  724.837872][   T30] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  724.853288][T10426] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  725.229272][   T30] usb 4-1: config 0 descriptor??
[  725.716893][T10481] loop6: detected capacity change from 0 to 2048
[  725.879918][T10481] UDF-fs: error (device loop6): udf_process_sequence: Primary Volume Descriptor not found!
[  725.896625][T10481] UDF-fs: warning (device loop6): udf_fill_super: No partition found (2)
[  726.729145][ T9204] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  726.900003][   T30] dvb-usb: found a 'Elgato EyeTV DTT' in cold state, will try to load a firmware
[  726.914869][ T1214] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor
[  726.974484][ T1214] usb 1-1: 2:1 : format type 0 is detected, processed as PCM
[  727.421836][ T1214] usb 1-1: 2:1 : sample bitwidth 243 in over sample bytes 3
[  727.607211][ T1214] usb 1-1: 2:1 : invalid UAC_FORMAT_TYPE desc
[  727.616493][   T30] dvb-usb: downloading firmware from file 'dvb-usb-dib0700-1.20.fw'
[  727.715872][   T30] dib0700: firmware download failed at 7 with -22
[  727.828872][   T30] usb 4-1: USB disconnect, device number 16
[  727.837625][ T1214] usb 1-1: USB disconnect, device number 9
[  729.582409][T10503] netlink: 4 bytes leftover after parsing attributes in process `syz.5.983'.
[  729.599923][T10502] loop8: detected capacity change from 0 to 47
[  729.606834][T10502] minix: Unknown parameter '/dev/cpu/#/msr'
[  729.727539][ T9520] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  731.780295][ T5915] usb 10-1: new full-speed USB device number 7 using dummy_hcd
[  733.516573][ T5915] usb 10-1: unable to get BOS descriptor or descriptor too short
[  733.528027][ T5915] usb 10-1: no configurations
[  733.533723][ T5915] usb 10-1: can't read configurations, error -22
[  733.775075][T10537] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  733.875229][T10537] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check.
[  734.634896][T10542] loop0: detected capacity change from 0 to 64
[  735.977309][T10556] loop9: detected capacity change from 0 to 32768
[  736.013642][T10556] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.1001 (10556)
[  736.032885][T10553] loop0: detected capacity change from 0 to 4096
[  736.239327][T10556] BTRFS info (device loop9): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  736.249699][T10556] BTRFS info (device loop9): using crc32c (crc32c-lib) checksum algorithm
[  736.519148][T10568] loop6: detected capacity change from 0 to 1024
[  736.936897][T10556] BTRFS info (device loop9): enabling ssd optimizations
[  736.944548][T10556] BTRFS info (device loop9): turning on async discard
[  736.951659][T10556] BTRFS info (device loop9): enabling free space tree
[  737.639492][ T9520] BTRFS info (device loop9): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  739.041517][T10604] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1012'.
[  739.050828][ T6036] usb 4-1: new full-speed USB device number 17 using dummy_hcd
[  739.143782][T10604] netlink: 324 bytes leftover after parsing attributes in process `syz.8.1012'.
[  739.209884][T10606] loop9: detected capacity change from 0 to 16
[  739.271972][T10606] erofs (device loop9): mounted with root inode @ nid 36.
[  739.309096][T10606] erofs (device loop9): readahead error at folio 2 @ nid 89
[  739.344384][ T9037] erofs (device loop9): failed to decompress (lz4) -117 @ pa 4096 size 4096 => 8192
[  739.374029][T10606] erofs (device loop9): failed to decompress (lz4) -117 @ pa 4096 size 4096 => 8192
[  739.383561][T10606] erofs (device loop9): read error -117 @ 1 of nid 89
[  739.464005][   T31] audit: type=1800 audit(1767388457.923:29): pid=10606 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.1011" name="file3" dev="loop9" ino=89 res=0 errno=0
[  739.829212][ T6036] usb 4-1: unable to get BOS descriptor or descriptor too short
[  739.911255][ T6036] usb 4-1: no configurations
[  739.932750][ T6036] usb 4-1: can't read configurations, error -22
[  740.217241][T10613] loop8: detected capacity change from 0 to 1024
[  740.426981][T10613] hfsplus: xattr searching failed
[  740.811331][T10613] hfsplus: xattr searching failed
[  740.985598][T10613] hfsplus: xattr searching failed
[  741.257871][ T8071] hfsplus: b-tree write err: -5, ino 4
[  742.257891][ T8071] bridge0: port 1(bridge_slave_0) entered disabled state
[  742.310773][T10624] loop6: detected capacity change from 0 to 32768
[  742.341722][T10624] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.1017 (10624)
[  742.357457][T10624] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  742.367701][T10624] BTRFS info (device loop6): using sha256 (sha256-lib) checksum algorithm
[  742.376229][T10624] BTRFS warning (device loop6): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  742.425006][T10622] loop9: detected capacity change from 0 to 4096
[  742.944140][T10624] BTRFS info (device loop6): rebuilding free space tree
[  742.987218][T10624] BTRFS info (device loop6): disabling free space tree
[  742.994183][T10624] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  743.003856][T10624] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  743.018354][T10624] BTRFS info (device loop6): enabling ssd optimizations
[  743.025494][T10624] BTRFS info (device loop6): enabling disk space caching
[  743.032623][T10624] BTRFS info (device loop6): force clearing of disk cache
[  743.040386][T10624] BTRFS info (device loop6): enabling auto defrag
[  743.046795][T10624] BTRFS info (device loop6): max_inline set to 0
[  743.061095][ T6004] usb 9-1: new high-speed USB device number 9 using dummy_hcd
[  744.130409][ T6004] usb 9-1: device descriptor read/64, error -71
[  744.138267][ T6113] BTRFS info (device loop6): qgroup scan completed (inconsistency flag cleared)
[  744.204782][ T9491] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  744.380447][ T6004] usb 9-1: new high-speed USB device number 10 using dummy_hcd
[  744.571356][ T6004] usb 9-1: device descriptor read/64, error -71
[  744.702640][ T6004] usb usb9-port1: attempt power cycle
[  745.219911][ T6004] usb 9-1: new high-speed USB device number 11 using dummy_hcd
[  745.380986][ T6004] usb 9-1: device descriptor read/8, error -71
[  746.114638][T10664] FAULT_INJECTION: forcing a failure.
[  746.114638][T10664] name failslab, interval 1, probability 0, space 0, times 0
[  746.127376][T10664] CPU: 0 UID: 0 PID: 10664 Comm: syz.9.1026 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  746.127411][T10664] Tainted: [L]=SOFTLOCKUP
[  746.127418][T10664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  746.127429][T10664] Call Trace:
[  746.127436][T10664]  <TASK>
[  746.127444][T10664]  dump_stack_lvl+0xe8/0x150
[  746.127473][T10664]  should_fail_ex+0x414/0x560
[  746.127507][T10664]  should_failslab+0xa8/0x100
[  746.127532][T10664]  kmem_cache_alloc_lru_noprof+0x8d/0x6e0
[  746.127563][T10664]  ? __d_alloc+0x37/0x6f0
[  746.127593][T10664]  __d_alloc+0x37/0x6f0
[  746.127619][T10664]  ? srso_alias_return_thunk+0x5/0xfbef5
[  746.127644][T10664]  d_alloc_pseudo+0x21/0xc0
[  746.127671][T10664]  alloc_file_pseudo+0xcc/0x210
[  746.127699][T10664]  ? __pfx_alloc_file_pseudo+0x10/0x10
[  746.127722][T10664]  ? evm_inode_alloc_security+0x40/0xb0
[  746.127740][T10664]  ? security_inode_alloc+0xd5/0x330
[  746.127766][T10664]  ? srso_alias_return_thunk+0x5/0xfbef5
[  746.127794][T10664]  sock_alloc_file+0xb8/0x2e0
[  746.127824][T10664]  do_accept+0x34b/0x680
[  746.127847][T10664]  ? __pfx_do_accept+0x10/0x10
[  746.127883][T10664]  __sys_accept4+0x127/0x210
[  746.127904][T10664]  ? __pfx___sys_accept4+0x10/0x10
[  746.127931][T10664]  __x64_sys_accept4+0x9a/0xb0
[  746.127951][T10664]  do_syscall_64+0xec/0xf80
[  746.127970][T10664]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  746.127993][T10664]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  746.128011][T10664] RIP: 0033:0x7f04d858f749
[  746.128026][T10664] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  746.128041][T10664] RSP: 002b:00007f04d9381038 EFLAGS: 00000246 ORIG_RAX: 0000000000000120
[  746.128060][T10664] RAX: ffffffffffffffda RBX: 00007f04d87e6180 RCX: 00007f04d858f749
[  746.128074][T10664] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[  746.128085][T10664] RBP: 00007f04d9381090 R08: 0000000000000000 R09: 0000000000000000
[  746.128096][T10664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  746.128107][T10664] R13: 00007f04d87e6218 R14: 00007f04d87e6180 R15: 00007ffd848d4528
[  746.128136][T10664]  </TASK>
[  747.330292][ T6004] usb 9-1: new high-speed USB device number 12 using dummy_hcd
[  747.473482][ T6004] usb 9-1: device descriptor read/8, error -71
[  747.517469][T10668] binder: 10658:10668 ioctl c00c620f 200000000340 returned -22
[  747.661296][T10670] overlayfs: failed to clone lowerpath
[  747.720927][ T6004] usb usb9-port1: unable to enumerate USB device
[  747.826523][T10676] loop8: detected capacity change from 0 to 8
[  747.893235][ T6034] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[  748.101198][T10676] SQUASHFS error: lzo decompression failed, data probably corrupt
[  749.101213][T10676] SQUASHFS error: Failed to read block 0x144: -5
[  749.120751][ T5941] usb 4-1: new full-speed USB device number 19 using dummy_hcd
[  749.428753][T10676] SQUASHFS error: Unable to read metadata cache entry [142]
[  749.461388][T10676] SQUASHFS error: Unable to read inode 0x11f
[  749.621118][ T6034] usb 7-1: device not accepting address 13, error -71
[  749.691404][T10672] Bluetooth: hci0: invalid length 0, exp 2 for type 0
[  749.743872][ T5941] usb 4-1: unable to get BOS descriptor or descriptor too short
[  750.046265][ T5941] usb 4-1: no configurations
[  750.060819][ T5941] usb 4-1: can't read configurations, error -22
[  751.507789][T10137] usb 9-1: new high-speed USB device number 13 using dummy_hcd
[  751.627897][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[  751.634370][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[  751.844970][T10693] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1037'.
[  751.990718][T10695] netlink: 'syz.0.1038': attribute type 29 has an invalid length.
[  752.168190][   T31] audit: type=1107 audit(1767388470.683:30): pid=10698 uid=0 auid=0 ses=1 subj=unconfined msg=''
[  752.305262][T10705] loop0: detected capacity change from 0 to 256
[  752.323363][T10707] tipc: Started in network mode
[  752.328221][T10707] tipc: Node identity , cluster identity 4711
[  752.337204][T10705] vfat: Unknown parameter 'xœìÝOk$E'
[  752.354239][T10705] nfs4: Unknown parameter '

'
[  752.459233][T10712] random: crng reseeded on system resumption
[  752.480979][T10667] usb 7-1: new high-speed USB device number 15 using dummy_hcd
[  752.630368][T10667] usb 7-1: Using ep0 maxpacket: 8
[  752.639314][T10667] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  752.656724][T10667] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  752.828901][T10667] usb 7-1: config 1 has no interface number 1
[  752.835600][T10667] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  752.876252][T10667] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  752.890316][T10667] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  753.646200][T10667] usb 7-1: Product: syz
[  753.654048][T10667] usb 7-1: Manufacturer: syz
[  753.658786][T10667] usb 7-1: SerialNumber: syz
[  753.915229][T10702] loop6: detected capacity change from 0 to 512
[  753.950313][T10702] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem
[  754.191711][T10727] loop8: detected capacity change from 0 to 32768
[  754.206174][T10727] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.1048 (10727)
[  754.227224][T10727] BTRFS info (device loop8): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  754.237823][T10727] BTRFS info (device loop8): using sha256 (sha256-lib) checksum algorithm
[  754.246617][T10727] BTRFS warning (device loop8): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  754.344598][T10702] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.1041: bg 0: block 255: padding at end of block bitmap is not set
[  754.388290][T10702] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6689: Corrupt filesystem
[  754.497764][T10744] loop9: detected capacity change from 0 to 512
[  755.366909][T10702] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.1041: invalid indirect mapped block 1 (level 1)
[  755.368475][T10744] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  755.495673][T10702] EXT4-fs (loop6): 1 truncate cleaned up
[  755.906261][T10702] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  756.197303][T10744] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[  756.216640][T10744] EXT4-fs warning (device loop9): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  756.219601][T10727] BTRFS info (device loop8): rebuilding free space tree
[  756.261017][T10744] EXT4-fs (loop9): 1 truncate cleaned up
[  756.268664][T10744] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  756.331401][T10727] BTRFS info (device loop8): disabling free space tree
[  756.338327][T10727] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  756.349171][T10727] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  756.367366][T10727] BTRFS info (device loop8): enabling ssd optimizations
[  756.374621][T10727] BTRFS info (device loop8): enabling disk space caching
[  756.381659][T10727] BTRFS info (device loop8): force clearing of disk cache
[  756.388765][T10727] BTRFS info (device loop8): enabling auto defrag
[  756.395190][T10727] BTRFS info (device loop8): max_inline set to 0
[  756.553726][T10667] usb 7-1: 2:1 : no or invalid class specific endpoint descriptor
[  757.566797][ T6037] BTRFS info (device loop8): qgroup scan completed (inconsistency flag cleared)
[  757.591864][T10667] usb 7-1: 2:1 : format type 0 is detected, processed as PCM
[  757.599572][T10667] usb 7-1: 2:1 : sample bitwidth 243 in over sample bytes 3
[  757.637024][T10667] usb 7-1: 2:1 : invalid UAC_FORMAT_TYPE desc
[  757.775145][ T9238] BTRFS info (device loop8): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  759.081136][ T9520] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  759.085602][T10667] usb 7-1: USB disconnect, device number 15
[  759.146917][ T9491] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  759.160662][T10197] usb 1-1: new full-speed USB device number 10 using dummy_hcd
[  759.341659][T10763] Bluetooth: hci0: invalid length 0, exp 2 for type 0
[  759.356837][T10197] usb 1-1: unable to get BOS descriptor or descriptor too short
[  759.435378][T10778] loop6: detected capacity change from 0 to 256
[  759.457302][T10197] usb 1-1: no configurations
[  759.475347][T10197] usb 1-1: can't read configurations, error -22
[  759.746119][T10784] loop9: detected capacity change from 0 to 1024
[  759.805014][T10784] ext3: Unknown parameter 'appraise_type'
[  760.559155][ T7830] usb 10-1: new high-speed USB device number 9 using dummy_hcd
[  761.200279][ T7830] usb 10-1: Using ep0 maxpacket: 8
[  761.223094][ T7830] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  761.275104][ T7830] usb 10-1: New USB device found, idVendor=0458, idProduct=4018, bcdDevice= 0.00
[  761.296152][ T7830] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  761.321502][ T7830] usb 10-1: config 0 descriptor??
[  761.482013][  T928] usb 7-1: new high-speed USB device number 16 using dummy_hcd
[  761.529616][T10781] loop3: detected capacity change from 0 to 32768
[  761.638722][T10781] ERROR: (device loop3): dtReadFirst: btstack overrun
[  761.638722][T10781] 
[  761.655589][T10781] ERROR: (device loop3): remounting filesystem as read-only
[  761.671696][T10781] btstack dump:
[  761.680574][  T928] usb 7-1: Using ep0 maxpacket: 8
[  761.680863][T10781] bn = 0, index = 0
[  761.695304][T10781] bn = 0, index = 0
[  761.699313][  T928] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  761.701191][T10781] bn = 0, index = 0
[  761.740550][  T928] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  761.749309][T10781] bn = 0, index = 0
[  761.760131][  T928] usb 7-1: config 1 has no interface number 1
[  761.766364][T10781] bn = 0, index = 0
[  761.770868][  T928] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  761.814523][  T928] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  761.836820][ T7830] kye 0003:0458:4018.000A: unbalanced collection at end of report description
[  761.845920][  T928] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  762.111108][ T7830] kye 0003:0458:4018.000A: parse failed
[  762.131838][  T928] usb 7-1: Product: syz
[  762.136081][  T928] usb 7-1: Manufacturer: syz
[  762.136572][ T7830] kye 0003:0458:4018.000A: probe with driver kye failed with error -22
[  762.142168][T10781] bn = 0, index = 0
[  762.170338][  T928] usb 7-1: SerialNumber: syz
[  762.350083][T10809] loop8: detected capacity change from 0 to 32768
[  762.401567][T10781] bn = 0, index = 0
[  762.405434][T10781] bn = 0, index = 0
[  762.451571][T10809] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.1066 (10809)
[  762.485715][ T7830] usb 10-1: USB disconnect, device number 9
[  762.725062][T10801] loop6: detected capacity change from 0 to 512
[  762.772709][T10801] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem
[  762.934007][T10801] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.1065: bg 0: block 255: padding at end of block bitmap is not set
[  763.008821][T10809] BTRFS info (device loop8): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  763.051675][T10801] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6689: Corrupt filesystem
[  763.135564][T10801] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.1065: invalid indirect mapped block 1 (level 1)
[  763.149263][T10809] BTRFS info (device loop8): using crc32c (crc32c-lib) checksum algorithm
[  763.169962][T10809] BTRFS error (device loop8): ignoredatacsums must be used with ro mount option
[  763.179165][T10809] BTRFS error (device loop8): cannot disable free-space-tree
[  763.186982][T10809] BTRFS error (device loop8): open_ctree failed: -22
[  763.301161][T10821] loop0: detected capacity change from 0 to 512
[  763.308088][T10801] EXT4-fs (loop6): 1 truncate cleaned up
[  763.364595][T10801] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  765.445290][  T928] usb 7-1: 2:1 : no or invalid class specific endpoint descriptor
[  765.583893][  T928] usb 7-1: 2:1 : format type 0 is detected, processed as PCM
[  765.613420][ T9491] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  765.647051][  T928] usb 7-1: 2:1 : sample bitwidth 243 in over sample bytes 3
[  765.657289][  T928] usb 7-1: 2:1 : invalid UAC_FORMAT_TYPE desc
[  765.702021][  T928] usb 7-1: USB disconnect, device number 16
[  765.813050][ T8769] udevd[8769]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  766.239927][T10848] binder: 10839:10848 ioctl c0306201 2000000003c0 returned -14
[  766.396438][T10847] loop9: detected capacity change from 0 to 1024
[  767.719142][   T37] hfsplus: b-tree write err: -5, ino 4
[  768.221031][T10866] smc: net device ip6gretap0 applied user defined pnetid SYZ2
[  768.230011][T10866] smc: net device ip6gretap0 erased user defined pnetid SYZ2
[  769.550472][T10874] binfmt_misc: register: failed to install interpreter file ./bus/file0
[  771.977461][T10888] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1089'.
[  772.047642][T10890] loop0: detected capacity change from 0 to 512
[  772.092754][T10890] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[  772.132430][T10890] EXT4-fs (loop0): invalid journal inode
[  772.138173][T10890] EXT4-fs (loop0): can't get journal size
[  772.237648][T10890] EXT4-fs (loop0): 1 truncate cleaned up
[  772.290571][T10896] loop6: detected capacity change from 0 to 128
[  772.304225][T10890] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  772.338518][T10896] hpfs: Unknown parameter 'Tas'
[  772.381498][T10894] overlayfs: failed lookup in lower (newroot/56, name='file1', err=-40): overlapping layers
[  772.886891][T10900] loop3: detected capacity change from 0 to 1024
[  773.089241][T10900] hfsplus: xattr searching failed
[  773.389455][T10894] loop8: detected capacity change from 0 to 4096
[  773.424740][ T9204] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  774.753101][T10910] FAULT_INJECTION: forcing a failure.
[  774.753101][T10910] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  774.816116][T10910] CPU: 1 UID: 0 PID: 10910 Comm: syz.3.1094 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  774.816154][T10910] Tainted: [L]=SOFTLOCKUP
[  774.816164][T10910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  774.816179][T10910] Call Trace:
[  774.816188][T10910]  <TASK>
[  774.816198][T10910]  dump_stack_lvl+0xe8/0x150
[  774.816235][T10910]  should_fail_ex+0x414/0x560
[  774.816280][T10910]  _copy_from_iter+0x3b0/0x1630
[  774.816321][T10910]  ? __pfx__copy_from_iter+0x10/0x10
[  774.816354][T10910]  ? __pfx__copy_from_iter+0x10/0x10
[  774.816383][T10910]  ? srso_alias_return_thunk+0x5/0xfbef5
[  774.816412][T10910]  ? page_copy_sane+0x16a/0x280
[  774.816441][T10910]  copy_page_from_iter+0xdd/0x170
[  774.816474][T10910]  skb_copy_datagram_from_iter+0x306/0x720
[  774.816524][T10910]  packet_sendmsg+0x3797/0x5080
[  774.816570][T10910]  ? aa_label_snxprint+0xa70/0xa70
[  774.816599][T10910]  ? srso_alias_return_thunk+0x5/0xfbef5
[  774.816627][T10910]  ? __lock_acquire+0x6b6/0x2cf0
[  774.816665][T10910]  ? srso_alias_return_thunk+0x5/0xfbef5
[  774.816706][T10910]  ? srso_alias_return_thunk+0x5/0xfbef5
[  774.816739][T10910]  ? srso_alias_return_thunk+0x5/0xfbef5
[  774.816770][T10910]  ? aa_sk_perm+0x15f/0x920
[  774.816800][T10910]  ? __pfx_packet_sendmsg+0x10/0x10
[  774.816832][T10910]  ? aa_sk_perm+0x7ee/0x920
[  774.816864][T10910]  ? __lock_acquire+0x6b6/0x2cf0
[  774.816888][T10910]  ? __entry_text_end+0xfdfb5/0x1020b9
[  774.816916][T10910]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x300
[  774.816956][T10910]  ? srso_alias_return_thunk+0x5/0xfbef5
[  774.816983][T10910]  ? aa_sock_msg_perm+0xf1/0x1b0
[  774.817017][T10910]  ? srso_alias_return_thunk+0x5/0xfbef5
[  774.817044][T10910]  ? srso_alias_return_thunk+0x5/0xfbef5
[  774.817072][T10910]  ? __pfx_packet_sendmsg+0x10/0x10
[  774.817107][T10910]  __sock_sendmsg+0x21c/0x270
[  774.817147][T10910]  ____sys_sendmsg+0x505/0x820
[  774.817183][T10910]  ? __pfx_____sys_sendmsg+0x10/0x10
[  774.817223][T10910]  ? srso_alias_return_thunk+0x5/0xfbef5
[  774.817250][T10910]  ? import_iovec+0x74/0xa0
[  774.817285][T10910]  ___sys_sendmsg+0x21f/0x2a0
[  774.817317][T10910]  ? __pfx____sys_sendmsg+0x10/0x10
[  774.817387][T10910]  ? __fget_files+0x2a/0x420
[  774.817418][T10910]  ? srso_alias_return_thunk+0x5/0xfbef5
[  774.817445][T10910]  ? __fget_files+0x3a0/0x420
[  774.817488][T10910]  __x64_sys_sendmsg+0x19b/0x260
[  774.817521][T10910]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  774.817562][T10910]  ? __pfx_ksys_write+0x10/0x10
[  774.817604][T10910]  do_syscall_64+0xec/0xf80
[  774.817630][T10910]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  774.817653][T10910]  ? trace_irq_disable+0x37/0x100
[  774.817692][T10910]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  774.817716][T10910] RIP: 0033:0x7f051d38f749
[  774.817737][T10910] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  774.817758][T10910] RSP: 002b:00007f051e2af038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  774.817784][T10910] RAX: ffffffffffffffda RBX: 00007f051d5e5fa0 RCX: 00007f051d38f749
[  774.817802][T10910] RDX: 0000000000000000 RSI: 0000200000002ac0 RDI: 0000000000000003
[  774.817818][T10910] RBP: 00007f051e2af090 R08: 0000000000000000 R09: 0000000000000000
[  774.817834][T10910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  774.817849][T10910] R13: 00007f051d5e6038 R14: 00007f051d5e5fa0 R15: 00007ffd5efca588
[  774.817887][T10910]  </TASK>
[  775.166236][   T12] ntfs3(loop8): ino=5, mi_enum_attr
[  775.510289][ T5954] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  775.692217][ T5954] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  776.561077][ T5954] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 2
[  776.626214][ T5954] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  776.675466][ T5954] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  776.725078][ T5954] usb 1-1: Product: syz
[  776.748173][ T5954] usb 1-1: Manufacturer: syz
[  776.758007][ T5954] usb 1-1: SerialNumber: syz
[  776.786695][T10927] loop3: detected capacity change from 0 to 512
[  777.973697][T10927] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  778.005761][T10927] EXT4-fs (loop3): invalid journal inode
[  778.012192][T10927] EXT4-fs (loop3): can't get journal size
[  778.020381][ T7830] usb 10-1: new high-speed USB device number 10 using dummy_hcd
[  778.097699][T10927] EXT4-fs (loop3): 1 truncate cleaned up
[  778.152253][   T30] usb 1-1: USB disconnect, device number 12
[  778.202552][ T7830] usb 10-1: Using ep0 maxpacket: 8
[  778.265859][ T7830] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  778.276471][T10927] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  778.293228][ T7830] usb 10-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  778.316187][ T7830] usb 10-1: config 1 has no interface number 1
[  778.325066][ T7830] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  778.343955][ T7830] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  778.360284][ T7830] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  778.388417][ T7830] usb 10-1: Product: syz
[  778.396641][ T7830] usb 10-1: Manufacturer: syz
[  778.406253][ T7830] usb 10-1: SerialNumber: syz
[  779.048632][T10921] loop9: detected capacity change from 0 to 512
[  779.213715][T10921] EXT4-fs (loop9): mounting ext2 file system using the ext4 subsystem
[  779.293660][T10921] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.1086: bg 0: block 255: padding at end of block bitmap is not set
[  779.418539][T10921] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6689: Corrupt filesystem
[  779.503673][T10921] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.1086: invalid indirect mapped block 1 (level 1)
[  779.564803][ T8651] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  779.568824][T10921] EXT4-fs (loop9): 1 truncate cleaned up
[  779.662056][T10921] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  779.871232][ T7830] usb 10-1: 2:1 : no or invalid class specific endpoint descriptor
[  780.862468][ T7830] usb 10-1: 2:1 : format type 0 is detected, processed as PCM
[  780.885383][T10955] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1108'.
[  780.898973][ T7830] usb 10-1: 2:1 : sample bitwidth 243 in over sample bytes 3
[  781.491869][T10962] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1109'.
[  781.549728][ T7830] usb 10-1: 2:1 : invalid UAC_FORMAT_TYPE desc
[  781.922691][ T9520] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  781.927886][ T7830] usb 10-1: USB disconnect, device number 10
[  784.349167][ T8769] udevd[8769]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  785.649168][T10985] loop0: detected capacity change from 0 to 1024
[  785.952120][T10985] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  785.961711][T10985] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  786.010907][T10985] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  786.019319][T10985] EXT4-fs (loop0): orphan cleanup on readonly fs
[  786.026656][T10985] EXT4-fs error (device loop0): ext4_free_blocks:6728: comm syz.0.1116: Freeing blocks not in datazone - block = 0, count = 4096
[  786.045146][T10985] EXT4-fs (loop0): Remounting filesystem read-only
[  786.052003][T10985] EXT4-fs (loop0): 1 orphan inode deleted
[  786.059575][T10985] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  786.202370][ T5193] udevd[5193]: worker [8769] terminated by signal 33 (Unknown signal 33)
[  786.211022][ T5193] udevd[5193]: worker [8769] failed while handling '/devices/virtual/block/loop0'
[  786.324792][ T9204] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  786.623071][T10996] netlink: 'syz.0.1120': attribute type 1 has an invalid length.
[  786.635786][T10996] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1120'.
[  787.717899][T11002] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  787.740245][ T5954] usb 9-1: new high-speed USB device number 14 using dummy_hcd
[  788.014683][ T5954] usb 9-1: Using ep0 maxpacket: 8
[  788.032236][ T5954] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  788.814818][ T5954] usb 9-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  788.860256][ T5954] usb 9-1: config 1 has no interface number 1
[  788.872304][ T5954] usb 9-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  788.925755][ T5954] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  788.955957][ T5954] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  788.980449][ T5954] usb 9-1: Product: syz
[  788.990681][ T5954] usb 9-1: Manufacturer: syz
[  789.000708][ T5954] usb 9-1: SerialNumber: syz
[  790.920634][ T6034] usb 10-1: new high-speed USB device number 11 using dummy_hcd
[  791.005603][ T5954] usb 9-1: 2:1 : no or invalid class specific endpoint descriptor
[  791.030227][ T5954] usb 9-1: 2:1 : format type 0 is detected, processed as PCM
[  791.037641][ T5954] usb 9-1: 2:1 : sample bitwidth 243 in over sample bytes 3
[  791.080241][ T5954] usb 9-1: 2:1 : invalid UAC_FORMAT_TYPE desc
[  791.149265][T11013] loop9: detected capacity change from 0 to 1024
[  791.227789][ T5954] usb 9-1: USB disconnect, device number 14
[  791.294870][ T8380] udevd[8380]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  791.323276][T11020] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1130'.
[  791.344031][ T6034] usb 10-1: unable to get BOS descriptor or descriptor too short
[  791.370851][ T6034] usb 10-1: unable to read config index 0 descriptor/start: -71
[  791.400316][ T6034] usb 10-1: can't read configurations, error -71
[  791.626963][T11022] netlink: 388 bytes leftover after parsing attributes in process `syz.8.1131'.
[  792.353903][T11028] loop3: detected capacity change from 0 to 40427
[  792.407943][T11028] F2FS-fs (loop3): invalid crc value
[  792.438386][ T6060] hfsplus: b-tree write err: -5, ino 4
[  792.485505][T11028] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  792.499230][T11028] F2FS-fs (loop3): Start checkpoint disabled!
[  792.519372][T11028] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0
[  792.538600][T11028] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  793.441767][T11038] loop8: detected capacity change from 0 to 1024
[  793.468228][T11038] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  793.491654][T11038] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  793.511173][ T5193] udevd[5193]: worker [8380] terminated by signal 33 (Unknown signal 33)
[  797.598372][T11038] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR
[  797.600997][T11038] EXT4-fs: failed to create workqueue
[  797.616677][T11038] EXT4-fs (loop8): mount failed
[  797.762884][ T5193] udevd[5193]: worker [8380] failed while handling '/devices/virtual/block/loop3'
[  798.107191][T10880] kworker/u8:22: attempt to access beyond end of device
[  798.107191][T10880] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  798.358014][T10880] CPU: 1 UID: 0 PID: 10880 Comm: kworker/u8:22 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  798.358055][T10880] Tainted: [L]=SOFTLOCKUP
[  798.358065][T10880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  798.358081][T10880] Workqueue: writeback wb_workfn (flush-7:3)
[  798.358129][T10880] Call Trace:
[  798.358139][T10880]  <TASK>
[  798.358150][T10880]  dump_stack_lvl+0xe8/0x150
[  798.358185][T10880]  f2fs_handle_critical_error+0x37c/0x540
[  798.358222][T10880]  f2fs_write_end_io+0x886/0xb60
[  798.358276][T10880]  __submit_merged_bio+0x256/0x660
[  798.358310][T10880]  __submit_merged_write_cond+0x269/0x530
[  798.358351][T10880]  f2fs_write_data_pages+0x2756/0x3290
[  798.358421][T10880]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  798.358450][T10880]  ? srso_alias_return_thunk+0x5/0xfbef5
[  798.358494][T10880]  ? srso_alias_return_thunk+0x5/0xfbef5
[  798.358522][T10880]  ? lock_acquire+0x107/0x340
[  798.358577][T10880]  ? trace_sched_exit_tp+0x36/0xf0
[  798.358614][T10880]  ? srso_alias_return_thunk+0x5/0xfbef5
[  798.358642][T10880]  ? __schedule+0x14b1/0x4fd0
[  798.358716][T10880]  ? srso_alias_return_thunk+0x5/0xfbef5
[  798.358747][T10880]  ? srso_alias_return_thunk+0x5/0xfbef5
[  798.358775][T10880]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  798.358808][T10880]  do_writepages+0x32e/0x550
[  798.358849][T10880]  ? srso_alias_return_thunk+0x5/0xfbef5
[  798.358878][T10880]  ? reacquire_held_locks+0x104/0x190
[  798.358907][T10880]  ? writeback_sb_inodes+0x3bd/0x1870
[  798.358943][T10880]  __writeback_single_inode+0x133/0x1240
[  798.358975][T10880]  ? do_raw_spin_unlock+0x122/0x240
[  798.359015][T10880]  writeback_sb_inodes+0x93a/0x1870
[  798.359064][T10880]  ? srso_alias_return_thunk+0x5/0xfbef5
[  798.359102][T10880]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  798.359128][T10880]  ? do_raw_spin_lock+0x121/0x290
[  798.359207][T10880]  ? srso_alias_return_thunk+0x5/0xfbef5
[  798.359236][T10880]  ? rcu_is_watching+0x15/0xb0
[  798.359267][T10880]  ? srso_alias_return_thunk+0x5/0xfbef5
[  798.359305][T10880]  wb_writeback+0x42b/0xaa0
[  798.359348][T10880]  ? queue_io+0x221/0x450
[  798.359380][T10880]  ? __pfx_wb_writeback+0x10/0x10
[  798.359405][T10880]  ? do_raw_spin_lock+0x121/0x290
[  798.359459][T10880]  wb_workfn+0x3f9/0xed0
[  798.359515][T10880]  ? __pfx_wb_workfn+0x10/0x10
[  798.359551][T10880]  ? srso_alias_return_thunk+0x5/0xfbef5
[  798.359584][T10880]  ? __pfx___schedule+0x10/0x10
[  798.359619][T10880]  ? irqentry_exit+0x5dd/0x660
[  798.359647][T10880]  ? srso_alias_return_thunk+0x5/0xfbef5
[  798.359675][T10880]  ? irqentry_exit+0x5dd/0x660
[  798.359698][T10880]  ? rcu_is_watching+0x15/0xb0
[  798.359732][T10880]  ? srso_alias_return_thunk+0x5/0xfbef5
[  798.359764][T10880]  ? srso_alias_return_thunk+0x5/0xfbef5
[  798.359798][T10880]  ? srso_alias_return_thunk+0x5/0xfbef5
[  798.359826][T10880]  ? preempt_schedule_thunk+0x16/0x30
[  798.359852][T10880]  ? process_scheduled_works+0x9ef/0x1770
[  798.359876][T10880]  ? process_scheduled_works+0x9ef/0x1770
[  798.359905][T10880]  process_scheduled_works+0xad1/0x1770
[  798.359964][T10880]  ? __pfx_process_scheduled_works+0x10/0x10
[  798.359988][T10880]  ? do_raw_spin_lock+0x121/0x290
[  798.360030][T10880]  ? srso_alias_return_thunk+0x5/0xfbef5
[  798.360068][T10880]  worker_thread+0x8a0/0xda0
[  798.360099][T10880]  ? srso_alias_return_thunk+0x5/0xfbef5
[  798.360136][T10880]  ? srso_alias_return_thunk+0x5/0xfbef5
[  798.360169][T10880]  ? __kthread_parkme+0x7b/0x200
[  798.360210][T10880]  kthread+0x711/0x8a0
[  798.360247][T10880]  ? __pfx_worker_thread+0x10/0x10
[  798.360274][T10880]  ? __pfx_kthread+0x10/0x10
[  798.360302][T10880]  ? srso_alias_return_thunk+0x5/0xfbef5
[  798.360337][T10880]  ? _raw_spin_unlock_irq+0x23/0x50
[  798.360380][T10880]  ? __pfx_kthread+0x10/0x10
[  798.360413][T10880]  ret_from_fork+0x510/0xa50
[  798.360442][T10880]  ? __pfx_ret_from_fork+0x10/0x10
[  798.360464][T10880]  ? srso_alias_return_thunk+0x5/0xfbef5
[  798.360492][T10880]  ? __switch_to+0xc9e/0x1480
[  798.360532][T10880]  ? __pfx_kthread+0x10/0x10
[  798.360566][T10880]  ret_from_fork_asm+0x1a/0x30
[  798.360620][T10880]  </TASK>
[  799.192911][T11050] loop9: detected capacity change from 0 to 512
[  799.328738][T10880] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  799.590416][ T5143] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  799.617196][T11050] EXT4-fs error (device loop9): ext4_orphan_get:1391: inode #15: comm syz.9.1139: inode has both inline data and extents flags
[  799.736879][T11050] EXT4-fs error (device loop9): ext4_orphan_get:1396: comm syz.9.1139: couldn't read orphan inode 15 (err -117)
[  799.780738][ T5143] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  799.799849][ T5143] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  799.835085][ T5143] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  799.871730][ T5143] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  800.194891][T11050] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  800.581514][T11048] loop8: detected capacity change from 0 to 32768
[  801.594485][T11048] workqueue: Failed to create a rescuer kthread for wq "xfs-conv/loop8": -EINTR
[  801.601676][ T9520] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  802.044406][ T5143] Bluetooth: hci6: command tx timeout
[  804.096444][ T5143] Bluetooth: hci6: command tx timeout
[  804.368693][T11049] chnl_net:caif_netlink_parms(): no params data found
[  805.282983][T11087] netlink: 'syz.8.1145': attribute type 10 has an invalid length.
[  805.359702][T11086] loop8: detected capacity change from 0 to 512
[  805.652616][T11090] bond0: (slave wlan1): Releasing backup interface
[  805.843923][T11087] team0: Port device dummy0 added
[  806.200282][ T5143] Bluetooth: hci6: command tx timeout
[  808.282716][ T5143] Bluetooth: hci6: command tx timeout
[  808.342927][T11107] loop0: detected capacity change from 0 to 1024
[  808.352024][T11107] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  808.361058][T11107] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  808.490862][T11107] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  808.499497][T11107] EXT4-fs (loop0): orphan cleanup on readonly fs
[  808.506581][T11107] EXT4-fs error (device loop0): ext4_free_blocks:6728: comm syz.0.1149: Freeing blocks not in datazone - block = 0, count = 4096
[  808.528783][T11107] EXT4-fs (loop0): Remounting filesystem read-only
[  808.535670][T11107] EXT4-fs (loop0): 1 orphan inode deleted
[  808.543819][T11107] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  913.910133][    C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[  913.917101][    C1] rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P9520/1:b..l
[  913.925910][    C1] rcu: 	(detected by 1, t=10503 jiffies, g=52869, q=222 ncpus=2)
[  913.933614][    C1] task:syz-executor    state:R  running task     stack:21376 pid:9520  tgid:9520  ppid:9505   task_flags:0x400140 flags:0x00080000
[  913.948081][    C1] Call Trace:
[  913.951346][    C1]  <TASK>
[  913.954262][    C1]  __schedule+0x149b/0x4fd0
[  913.958766][    C1]  ? __lock_acquire+0x6b6/0x2cf0
[  913.963706][    C1]  ? __pfx___schedule+0x10/0x10
[  913.968584][    C1]  ? __lock_acquire+0x6b6/0x2cf0
[  913.973518][    C1]  preempt_schedule_irq+0x4d/0xa0
[  913.978529][    C1]  irqentry_exit+0x5d8/0x660
[  913.983102][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  913.988726][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  913.994692][    C1] RIP: 0010:debug_lockdep_rcu_enabled+0x2a/0x40
[  914.000920][    C1] Code: f3 0f 1e fa 31 c0 83 3d 07 8d 28 04 00 74 1e 83 3d 1a bc 28 04 00 74 15 65 48 8b 0c 25 08 10 80 92 31 c0 83 b9 2c 0b 00 00 00 <0f> 94 c0 e9 69 aa b6 f5 cc cc cc cc cc cc cc cc cc cc cc cc cc cc
[  914.020510][    C1] RSP: 0018:ffffc90004b5f230 EFLAGS: 00000246
[  914.026563][    C1] RAX: 0000000000000000 RBX: ffffffff8b59116c RCX: ffff88801db95b80
[  914.034521][    C1] RDX: 00000000d719cf99 RSI: ffffffff8d975f94 RDI: ffffffff8bc083e0
[  914.042486][    C1] RBP: dffffc0000000000 R08: ffffffff8173fd65 R09: ffffffff8df41aa0
[  914.050466][    C1] R10: dffffc0000000000 R11: ffffffff81acf3d0 R12: 1ffff9200096be61
[  914.058427][    C1] R13: ffffc90004b5f340 R14: ffffc90004b5f308 R15: ffffffff8173fd65
[  914.066384][    C1]  ? unwind_next_frame+0xa5/0x23d0
[  914.071493][    C1]  ? do_syscall_64+0xec/0xf80
[  914.076173][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  914.082345][    C1]  ? unwind_next_frame+0xa5/0x23d0
[  914.087453][    C1]  unwind_next_frame+0xcb/0x23d0
[  914.092385][    C1]  ? unwind_next_frame+0xa5/0x23d0
[  914.097487][    C1]  ? __x64_sys_unlink+0x47/0x50
[  914.102334][    C1]  ? do_syscall_64+0xec/0xf80
[  914.106999][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  914.113149][    C1]  arch_stack_walk+0x11c/0x150
[  914.117906][    C1]  ? do_syscall_64+0xec/0xf80
[  914.122574][    C1]  stack_trace_save+0x9c/0xe0
[  914.127247][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[  914.132614][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  914.138233][    C1]  ? stack_depot_save_flags+0x33/0x810
[  914.143696][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  914.149317][    C1]  save_stack+0xf5/0x1f0
[  914.153551][    C1]  ? __pfx_save_stack+0x10/0x10
[  914.158383][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  914.164000][    C1]  ? free_unref_folios+0xdb3/0x14f0
[  914.169181][    C1]  ? folios_put_refs+0x584/0x670
[  914.174106][    C1]  ? shmem_undo_range+0x49e/0x1490
[  914.179204][    C1]  ? shmem_evict_inode+0x26e/0xa70
[  914.184295][    C1]  ? evict+0x5f4/0xae0
[  914.188356][    C1]  ? do_unlinkat+0x340/0x560
[  914.192928][    C1]  ? __x64_sys_unlink+0x47/0x50
[  914.197759][    C1]  ? do_syscall_64+0xec/0xf80
[  914.202428][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  914.208054][    C1]  ? page_ext_put+0x97/0xc0
[  914.212551][    C1]  __reset_page_owner+0x71/0x1f0
[  914.217478][    C1]  free_unref_folios+0xdb3/0x14f0
[  914.222500][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  914.228126][    C1]  folios_put_refs+0x584/0x670
[  914.232874][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  914.238508][    C1]  ? __pfx_folios_put_refs+0x10/0x10
[  914.243786][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  914.249406][    C1]  ? folio_batch_remove_exceptionals+0x18c/0x1f0
[  914.255729][    C1]  shmem_undo_range+0x49e/0x1490
[  914.260675][    C1]  ? __pfx_shmem_undo_range+0x10/0x10
[  914.266053][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  914.271715][    C1]  ? arch_stack_walk+0xfc/0x150
[  914.276595][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  914.282214][    C1]  ? __lock_acquire+0x6b6/0x2cf0
[  914.287151][    C1]  shmem_evict_inode+0x26e/0xa70
[  914.292086][    C1]  ? inode_wait_for_writeback+0x14d/0x370
[  914.297802][    C1]  ? __pfx_shmem_evict_inode+0x10/0x10
[  914.303253][    C1]  ? __pfx_inode_wait_for_writeback+0x10/0x10
[  914.309314][    C1]  ? do_raw_spin_lock+0x121/0x290
[  914.314330][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  914.319977][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  914.325599][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  914.331217][    C1]  ? do_raw_spin_unlock+0x122/0x240
[  914.336408][    C1]  ? __pfx_shmem_evict_inode+0x10/0x10
[  914.341855][    C1]  evict+0x5f4/0xae0
[  914.345745][    C1]  ? __pfx_evict+0x10/0x10
[  914.350152][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  914.355792][    C1]  ? _raw_spin_unlock+0x28/0x50
[  914.360642][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  914.366262][    C1]  ? iput+0xcc6/0x1030
[  914.370333][    C1]  do_unlinkat+0x340/0x560
[  914.374743][    C1]  ? __pfx_do_unlinkat+0x10/0x10
[  914.379671][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  914.385288][    C1]  ? getname_flags+0x1e5/0x540
[  914.390050][    C1]  __x64_sys_unlink+0x47/0x50
[  914.394717][    C1]  do_syscall_64+0xec/0xf80
[  914.399208][    C1]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  914.405256][    C1]  ? trace_irq_disable+0x37/0x100
[  914.410291][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  914.416168][    C1] RIP: 0033:0x7f04d858ecf7
[  914.420564][    C1] RSP: 002b:00007ffd848d37b8 EFLAGS: 00000206 ORIG_RAX: 0000000000000057
[  914.428999][    C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f04d858ecf7
[  914.436972][    C1] RDX: 00007ffd848d37e0 RSI: 00007ffd848d3870 RDI: 00007ffd848d3870
[  914.444929][    C1] RBP: 00007ffd848d3870 R08: 0000000000000000 R09: 0000000000000000
[  914.452896][    C1] R10: 0000000000000100 R11: 0000000000000206 R12: 00007ffd848d4900
[  914.460862][    C1] R13: 00007f04d8613d7d R14: 00000000000c3e17 R15: 00007ffd848d4940
[  914.468840][    C1]  </TASK>
[  914.471840][    C1] rcu: rcu_preempt kthread starved for 10554 jiffies! g52869 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0
[  914.483039][    C1] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[  914.493019][    C1] rcu: RCU grace-period kthread stack dump:
[  914.498884][    C1] task:rcu_preempt     state:R  running task     stack:27648 pid:16    tgid:16    ppid:2      task_flags:0x208040 flags:0x00080000
[  914.512410][    C1] Call Trace:
[  914.515675][    C1]  <TASK>
[  914.518588][    C1]  __schedule+0x149b/0x4fd0
[  914.523114][    C1]  ? __pfx___schedule+0x10/0x10
[  914.527968][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  914.533588][    C1]  ? schedule+0x91/0x360
[  914.537816][    C1]  schedule+0x165/0x360
[  914.541955][    C1]  schedule_timeout+0x12b/0x270
[  914.546797][    C1]  ? __pfx_schedule_timeout+0x10/0x10
[  914.552164][    C1]  ? __pfx_process_timeout+0x10/0x10
[  914.557449][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  914.563067][    C1]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  914.568864][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  914.574481][    C1]  ? prepare_to_swait_event+0x341/0x380
[  914.580116][    C1]  rcu_gp_fqs_loop+0x301/0x1540
[  914.584989][    C1]  ? __pfx_rcu_watching_snap_recheck+0x10/0x10
[  914.591133][    C1]  ? __pfx_rcu_gp_fqs_loop+0x10/0x10
[  914.596399][    C1]  ? _raw_spin_unlock_irq+0x2e/0x50
[  914.601603][    C1]  ? _raw_spin_unlock_irqrestore+0x30/0x80
[  914.607428][    C1]  rcu_gp_kthread+0x99/0x390
[  914.612010][    C1]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  914.617196][    C1]  ? __kthread_parkme+0x7b/0x200
[  914.622122][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  914.627742][    C1]  ? __kthread_parkme+0x1a1/0x200
[  914.632849][    C1]  kthread+0x711/0x8a0
[  914.636914][    C1]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  914.642094][    C1]  ? __pfx_kthread+0x10/0x10
[  914.646669][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  914.652293][    C1]  ? _raw_spin_unlock_irq+0x23/0x50
[  914.657492][    C1]  ? __pfx_kthread+0x10/0x10
[  914.662091][    C1]  ret_from_fork+0x510/0xa50
[  914.666666][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  914.671755][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  914.677371][    C1]  ? __switch_to+0xc9e/0x1480
[  914.682044][    C1]  ? __pfx_kthread+0x10/0x10
[  914.686629][    C1]  ret_from_fork_asm+0x1a/0x30
[  914.691407][    C1]  </TASK>
[  914.694408][    C1] rcu: Stack dump where RCU GP kthread last ran:
[  914.700707][    C1] Sending NMI from CPU 1 to CPUs 0:
[  914.705900][    C0] NMI backtrace for cpu 0
[  914.705921][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  914.705955][    C0] Tainted: [L]=SOFTLOCKUP
[  914.705964][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  914.705980][    C0] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  914.706009][    C0] Code: 3e b4 b6 f5 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 73 c1 0e 00 f3 0f 1e fa fb f4 <e9> 13 b4 b6 f5 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  914.706031][    C0] RSP: 0018:ffffffff8dc07dc0 EFLAGS: 000002c2
[  914.706054][    C0] RAX: 0000000000e9c577 RBX: ffffffff819713ee RCX: 0000000080000001
[  914.706073][    C0] RDX: 0000000000000001 RSI: ffffffff8d79207b RDI: ffffffff8bc083e0
[  914.706092][    C0] RBP: ffffffff8dc07eb0 R08: ffff8880b86336db R09: 1ffff110170c66db
[  914.706112][    C0] R10: dffffc0000000000 R11: ffffed10170c66dc R12: ffffffff8f822270
[  914.706133][    C0] R13: 1ffffffff1b92a68 R14: 0000000000000000 R15: 0000000000000000
[  914.706153][    C0] FS:  0000000000000000(0000) GS:ffff888125e1f000(0000) knlGS:0000000000000000
[  914.706175][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  914.706193][    C0] CR2: 00007faeba46ef98 CR3: 00000000762ff000 CR4: 0000000000350ef0
[  914.706213][    C0] Call Trace:
[  914.706222][    C0]  <TASK>
[  914.706232][    C0]  default_idle+0x13/0x20
[  914.706262][    C0]  default_idle_call+0x73/0xb0
[  914.706294][    C0]  do_idle+0x1be/0x4d0
[  914.706321][    C0]  ? srso_alias_return_thunk+0x5/0xfbef5
[  914.706352][    C0]  ? lockdep_hardirqs_on+0x7b/0x110
[  914.706383][    C0]  ? __pfx_do_idle+0x10/0x10
[  914.706421][    C0]  cpu_startup_entry+0x44/0x60
[  914.706452][    C0]  rest_init+0x2de/0x300
[  914.706487][    C0]  start_kernel+0x381/0x3d0
[  914.706513][    C0]  x86_64_start_reservations+0x24/0x30
[  914.706548][    C0]  x86_64_start_kernel+0x143/0x1c0
[  914.706583][    C0]  common_startup_64+0x13e/0x147
[  914.706628][    C0]  </TASK>