last executing test programs:

2m43.051302741s ago: executing program 2 (id=13):
socket$nl_generic(0x10, 0x3, 0x10)
openat$ppp(0xffffffffffffff9c, 0x0, 0x359003, 0x0)
unshare(0x4000000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000580)={0x2, 0x4e20, @empty}, 0x10)
r1 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f00000005c0)={0x200000000000001}, 0x8)
connect$inet6(r1, &(0x7f0000000600)={0xa, 0x4e20, 0x401, @ipv4={'\x00', '\xff\xff', @remote}, 0x3}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000680), 0x171}}], 0x400000000000172, 0x4000000)

2m42.097460198s ago: executing program 2 (id=18):
syz_mount_image$hfs(&(0x7f0000000080), &(0x7f00000008c0)='./bus\x00', 0xa0c080, &(0x7f0000000380)=ANY=[@ANYBLOB="636f6465706167653d757466382c66696c655f756d61736b3d30303030303030303030303030303030303030303030332c696f636861727365743d63703737352c71756965742c008f7881d185c35a6a28ef06c5b85628f12a02248de249c2a338d049166371583781680d171f47"], 0x1, 0x2e9, &(0x7f0000000400)="$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")
r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
openat$cgroup_ro(r0, &(0x7f00000000c0)='rdma.current\x00', 0x275a, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x0, 0x0)
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000140)='./bus\x00', 0x1a40cc4, &(0x7f0000000a40)=ANY=[], 0xdf, 0x0, &(0x7f0000000000))
syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000800))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
mkdirat(r1, &(0x7f0000000280)='./bus/file0\x00', 0x0)

2m41.564180705s ago: executing program 2 (id=21):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040))
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0xff, 0x2, 0x80}]})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x60000000002, 0x1000000000, 0x0, 0x43, 0x2000001, 0x0, 0x2004cb, 0x0, 0x1000000, 0x68ff, 0x5, 0x9, 0x3], 0xeeee8000, 0x202})
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0x8080000, 0xeeee0000, 0x8, 0x8, 0xb, 0xe4, 0x40, 0x0, 0x0, 0x2e, 0x80}, {0x5000, 0x4000, 0x0, 0x0, 0x42, 0x5, 0x5, 0x6, 0x5, 0x3, 0x2, 0x87}, {0x6000, 0x1, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa4, 0x5, 0x5}, {0x1, 0xeeee0000, 0xd, 0x6, 0x0, 0x42, 0xb, 0xff, 0x2, 0x7, 0xe}, {0xeeee0000, 0xd000, 0xf, 0x3, 0x15, 0x7, 0xab, 0x8, 0x9, 0x5, 0xf7, 0x83}, {0x1000, 0x3909e40c33606d9c, 0x10, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x82, 0xf, 0x1, 0x27}, {0x3000, 0x3000, 0x4, 0x5, 0x7, 0x5, 0x7, 0x3, 0x8, 0x81, 0x0, 0x70}, {0x5000, 0x4000, 0xe, 0x5, 0xcd, 0x7, 0x4, 0x9, 0x2, 0xc, 0xb0, 0x9}, {0x0, 0x30}, {0x5000, 0x7}, 0x80000031, 0x0, 0xdddd0000, 0x2034, 0x0, 0x1500, 0x3000, [0x6800000000000000, 0x204, 0xfffffffffffffffd, 0x8]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

2m40.900436914s ago: executing program 2 (id=27):
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
unshare(0x2c020400)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r1, &(0x7f0000002380)={0x2020}, 0x2020)

2m40.74776382s ago: executing program 2 (id=28):
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x181)
r0 = syz_mount_image$fuse(0x0, &(0x7f0000000200)='./bus\x00', 0x3820c50, 0x0, 0xff, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000240)='./bus\x00', &(0x7f0000000280), 0x8, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mount(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f00000008c0)='binfmt_misc\x00', 0x1214040, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000a00)='\x00', 0x89901)
fchdir(r1)
close(r1)
chdir(&(0x7f0000000380)='./bus\x00')
renameat2(r0, 0x0, r0, 0x0, 0x4)

2m40.369294641s ago: executing program 2 (id=31):
open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00')
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$lock(r0, 0x410, &(0x7f0000000200)={0x1, 0x3, 0x1000000000000001, 0x9b})
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000002800)='./file0\x00')

2m39.962212835s ago: executing program 32 (id=31):
open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00')
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$lock(r0, 0x410, &(0x7f0000000200)={0x1, 0x3, 0x1000000000000001, 0x9b})
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
unlink(&(0x7f0000002800)='./file0\x00')

2m8.283523809s ago: executing program 5 (id=210):
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xa18fc7e086cec095, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1206"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffea6, 0x10, 0x0, 0x0, 0x116ed, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)}, 0x94)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r0)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$PROG_BIND_MAP(0x23, 0x0, 0x0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x10, 0x4, 0x8, 0x2}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r2, 0x0, 0x0}, 0x20)
ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180))

2m7.830697175s ago: executing program 5 (id=218):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000)
ioctl$USBDEVFS_SETCONFIGURATION(0xffffffffffffffff, 0x80045505, 0x0)
syz_mount_image$exfat(&(0x7f0000000180), &(0x7f0000000240)='./file2\x00', 0x10000, &(0x7f0000000280)=ANY=[], 0xfd, 0x1501, &(0x7f0000000fc0)="$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")
r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$IPCTNL_MSG_TIMEOUT_GET(r1, 0x0, 0x4000)
rt_sigsuspend(&(0x7f0000000480)={[0x3]}, 0x8)

2m7.522509799s ago: executing program 5 (id=219):
unshare(0x20400)
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000000140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x56)
socket$tipc(0x1e, 0x2, 0x0)
listen(r0, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
pipe(&(0x7f0000000340))
socket(0x10, 0x803, 0x0)
socket$rds(0x15, 0x5, 0x0)
pselect6(0x40, &(0x7f00000003c0)={0x0, 0x0, 0xd6be, 0x8000000000000000, 0x4, 0x79bc956d, 0x0, 0x10000000000002}, 0x0, &(0x7f0000000400)={0x3fb, 0xffffffffffffdffd, 0x0, 0x8, 0xfffffffffffffffc, 0x0, 0x192dbfb5, 0xfffffffffffffffc}, 0x0, 0x0)

2m6.584150341s ago: executing program 5 (id=224):
capset(0x0, 0x0)
truncate(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x400000f000)
mmap$IORING_OFF_SQ_RING(0x0, 0x9, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0)
r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x804818, &(0x7f00000000c0)=ANY=[@ANYRES64=r0, @ANYRES32, @ANYRESHEX, @ANYRES32, @ANYRES8, @ANYRESHEX, @ANYRES8, @ANYBLOB="91156f62712814b49a095a3b11802840d5afbf5494fe15a50de44c5080456ecf73e895d0e95d2b9738f5c2f9141a2fe0243540cf7faf3a065ee17c6403c7b9d550cea8f851f24b4b107003687cc27c2908639ee4bf5469ee594225359e162d37a29f9327604c178af4866c3b851cb7d9fab7ea0f080e015d093b7ef91ff01fb2367f7fcef2fb197d5af62a8c1f1e8171dce3393d96c5666b1082d0a453426b16a9d539b68863346f2abb04cf448db1a4713281b7ff0da0b72f32c349be1a627c64a6", @ANYRES8=r0, @ANYBLOB="b209eb6ac758b26226e3afb394a796baf3c6ce63c6342fceeedece41257e82ae0c182b8db1d9bcee3c8cc711a99a1b9fe2152fc88ae0355731c19f5b1a14c81100aa81ab73f3ed2ef2c4ffd4000435582841d1ecb4cab677ebe3c11acdfac890d218a41f668954cb9f57fa7f418649"], 0x2, 0x570, &(0x7f0000000240)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f00000007c0)='./file2\x00', 0x40040, 0x6ab858183a7ef6ba)
syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$FIBMAP(r1, 0x1, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000840), 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2m6.077856163s ago: executing program 5 (id=227):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$unix(0x1, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'syzkaller1\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtfilter={0x80, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4c, 0x2, [@TCA_MATCHALL_ACT={0x48, 0x2, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x6}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x80}}, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000740)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000780)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x11, 0x800}, @mpls={[], @ipv4=@esp={{0x5, 0x4, 0x1, 0x9, 0x22, 0x64, 0x2c00, 0x1, 0x32, 0x0, @multicast1, @loopback}}}}, 0x30)

2m5.649300014s ago: executing program 5 (id=229):
msgget$private(0x0, 0x19b)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0xe0c81)
eventfd2(0x5, 0x1)
io_submit(0x0, 0x1, &(0x7f0000000440)=[0x0])
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r4, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0)

2m5.231737523s ago: executing program 33 (id=229):
msgget$private(0x0, 0x19b)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200), 0xe0c81)
eventfd2(0x5, 0x1)
io_submit(0x0, 0x1, &(0x7f0000000440)=[0x0])
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r4=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000004400000008000300", @ANYRES32=r4, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140003"], 0x4c}}, 0x0)

1m18.543628077s ago: executing program 0 (id=528):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000180)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cc, 0x0, 0xa1b, 0x8, 0x5, 0x0, 0x3, 0x2, 0x0, 0x7fffffffffffffff], 0x10000, 0x202})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
r3 = getpid()
r4 = syz_pidfd_open(r3, 0x0)
pidfd_send_signal(r4, 0x0, &(0x7f0000000240)={0x0, 0x9, 0xffffd8ef}, 0x10000000000001)

1m16.640401438s ago: executing program 0 (id=537):
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000005140)='./file0\x00', 0x0, &(0x7f0000005180), 0x1, 0x50ed, &(0x7f00000051c0)="$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")
mount(0x0, &(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00)='ramfs\x00', 0x10, 0x0)
syz_mount_image$fuse(&(0x7f0000000a40), &(0x7f0000000a80)='./file0\x00', 0x400a8, &(0x7f0000000ac0)=ANY=[], 0x5, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000b00)='./file0\x00', 0x234a0c7, 0x0, 0x0, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000b40)='./file1\x00', 0x281c2, 0x10)
syz_mount_image$fuse(0x0, &(0x7f0000000b80)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000bc0)='./bus\x00', &(0x7f0000000c00), 0x8, &(0x7f0000000c40)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chdir(&(0x7f0000000c80)='./bus\x00')
unlinkat(0xffffffffffffff9c, &(0x7f0000000cc0)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x100)

1m15.137445299s ago: executing program 0 (id=545):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0)
fcntl$lock(r1, 0x26, &(0x7f0000000100)={0x0, 0x1, 0x80000000000036, 0xc1b2})
fcntl$lock(r0, 0x6, &(0x7f0000000140)={0x1, 0x1, 0x0, 0x8000000000000})
fcntl$lock(r0, 0x7, &(0x7f0000000180)={0x0, 0x2, 0x2, 0xdbd})
fcntl$lock(r0, 0x25, &(0x7f0000000000)={0x0, 0x1, 0x7, 0x67})
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuset.effective_mems\x00', 0x275a, 0x0)
fcntl$lock(r3, 0x7, &(0x7f0000000100)={0x0, 0x1, 0x80, 0xc1b0})
fcntl$lock(r2, 0x7, &(0x7f0000000040)={0x2, 0x1, 0x8})

1m13.255971235s ago: executing program 0 (id=552):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='mountinfo\x00')
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000340)={0x20000019})
mount(0x0, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)='debugfs\x00', 0x1214040, 0x0)
mount$bind(&(0x7f0000000540)='.\x00', 0x0, 0x0, 0x101091, 0x0)
chroot(&(0x7f00000005c0)='./file0/../file0\x00')
mount$bind(&(0x7f0000000600)='.\x00', &(0x7f0000000640)='./file0\x00', 0x0, 0x2a05004, 0x0)
pivot_root(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)='./file0/../file0\x00')

1m12.992917361s ago: executing program 0 (id=554):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000140)='./proc\x00', &(0x7f0000000180)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/sys/crypto/af_alg_restrict\x00', 0x1, 0x0)
write(r0, &(0x7f00000002c0)='0', 0x1)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000400)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000500)="000102030405060708090a0b0c0d0e0f", 0x10)
r2 = accept$alg(r1, 0x0, 0x0)
sendmsg$alg(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000005c0)="000102030405060708090a0b0c0d0e0f1011121314", 0xfffffdc0}], 0x1, &(0x7f0000000600)=[@op={0x18}, @assoc={0x18, 0x117, 0x4, 0x7}], 0x30, 0x20040040}, 0x4)
read$alg(r2, &(0x7f0000000640)=""/64, 0x40)

1m12.642663804s ago: executing program 0 (id=558):
r0 = msgget$private(0x0, 0x200)
msgrcv(r0, 0x0, 0x0, 0x1, 0x2000)
msgctl$IPC_INFO(r0, 0x3, &(0x7f00000001c0)=""/167)
r1 = msgget(0x1, 0x400)
msgrcv(r1, &(0x7f0000000180)={0x0, ""/16}, 0x18, 0x2, 0x2000)
syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0013b2d86aef76dd07262a8688b823c051e60c249ffc95a91b0cfc08ca70aa3df02b60c8057dfc5e3aa7e7d329b62164e08c20dbb0eaaaeec405f99454052bc8d1d09e85e2df6c198259114244f29a7ebcfcbfb11f36ade3442b27733ff8d581d84d2663e4e5abb8dd2f22ace2b4c34d3f52395fc1141924394a218a1131302930ede0e6ca14894a30f8a52392552ecf709d06b38508498ea6b535e9cee7aad45a2423a8bbed1e279888d6910f6f0b5a80ecf75d5ddf2f5fb3d317d5c0c5972020003565d4e877ee208c6e6161282b7796b895234139549e2e2b2fab46ec6e5f6f0138e73197ab9492858b1428a064af"], 0x1, 0x5c6, &(0x7f0000000280)="$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")
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000880)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f00000000c0), 0x4)
fdatasync(r2)
ftruncate(r2, 0xc2f)

1m12.11455391s ago: executing program 34 (id=558):
r0 = msgget$private(0x0, 0x200)
msgrcv(r0, 0x0, 0x0, 0x1, 0x2000)
msgctl$IPC_INFO(r0, 0x3, &(0x7f00000001c0)=""/167)
r1 = msgget(0x1, 0x400)
msgrcv(r1, &(0x7f0000000180)={0x0, ""/16}, 0x18, 0x2, 0x2000)
syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="0013b2d86aef76dd07262a8688b823c051e60c249ffc95a91b0cfc08ca70aa3df02b60c8057dfc5e3aa7e7d329b62164e08c20dbb0eaaaeec405f99454052bc8d1d09e85e2df6c198259114244f29a7ebcfcbfb11f36ade3442b27733ff8d581d84d2663e4e5abb8dd2f22ace2b4c34d3f52395fc1141924394a218a1131302930ede0e6ca14894a30f8a52392552ecf709d06b38508498ea6b535e9cee7aad45a2423a8bbed1e279888d6910f6f0b5a80ecf75d5ddf2f5fb3d317d5c0c5972020003565d4e877ee208c6e6161282b7796b895234139549e2e2b2fab46ec6e5f6f0138e73197ab9492858b1428a064af"], 0x1, 0x5c6, &(0x7f0000000280)="$eJzs3U1sHGf9B/DfM9511mleNmn+Sf8oiOVNQUFEthPaWK6KTMxWSIZIdVxBD6gm3oRV/RLZSZVEVemRE0i9IS5cKlUgUDnCqZQDF24cq56QChISMieORTOe9a4dQyw2G8fJ5yPF++wzv5l5Zg6Rvs+8bAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEV//xtToWNrrUQAAAACD9O3Zl0bH5X8AAAB4rF1x/R8AAAAAAAAA9rsUWdyNFGdeWk+Hiu8bajPt5Vu356abO682koo1h4r6/F9tbPz8ha8++9zFzud/X/9B+/+4PHtlqnFpZenGamttrbXQmFtuX11ZaO16C/2uv93Z4gQ0ll67tXDt2lpj/Nz5LYtv1z8+8NTJ+uTFiZmhTu3cdLM521NTqf7Pe7+HOzwAAACebMORxWcjxUc//HU6HBFZ9J+F7zN3MGgjUc/zd3EQc9PN4kAW2/PLN/OFqROE61sz8XAnIz+ELN6Xn0ccz8c6LNEDAACwe9XI4oVI8cpH6+lIRAx1cvCXixcD3n8D9YcwyB3k4zwdEY3YB5kdAAAA9tiByOLPkeKfv63H0Twzd/L/aMTzez04AAAA4IGoRBZLkeLMC+upXtwPEBFn56abjZmXG99cvrbSU5tSeUV9vz8f8DC5NwEAAIBHQC2yOFxc8V9Px/Z6MAAAAMBAjEQWFyJF9WevF++Vi+K99EcnJ4bHX+19w9yp+2wnrz0XG++m280z+dXOuwbzdbMHe0wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8eWopi+9Fip/+plZ8b0REJW+8/8knez02AAAA4AFJWaxGih//Yz2liLhd//jAUyfrkxcnZoaGYijyvtRbf3n2ylTj0srSjdXW2lproTG33L66stDa7e5qM+3lW7fnppsDOZj7Ghnw+Edql1Zu3FltX//BzR2XH6xNfX/t5ur81Z0Xx0g0IrLenrPFgOemm8WgF9vzy8WqKe12xAAAABBRTVm8Hyk+95f3urmznvJ2ZeNLN2i+83w3m9bStqXFvMGRYt5go310cqI6fqa3vWNkPVsE6jzgNmd7uivVe0vr5X4rfR81AAAAAAAAADxeUsri9Ujxh7efKa6rpzgY99yDXtYdiRQ/eeV0WZcNRz2ic5m+XvytXWsvtkbz2rcjxYnvdmqjqK2VtU93a8fy2lq+3Stba0fK2hPd2vG89sVI8eGLO9f+X7f2fF57J1K8+26jU3swrz1c1p7s1p67urK4MLATDAAAAI+Aasrig0jxy781UifLl3m5vM1+aLP2nTe69/u/tX1D/+Ge/37v/6/39L1VzkPUIsUXPnimmHso5ivqO89XTEWKP10+XdZtzBUMl8uPFX+78xUvR4rfr2ytPVDWHu/Wju36xAIAAMAjJM//pyPFj/74u0onG5f5v0zgO+f/T21/CH9A+f9YT1++z7U7d1+bX1xsrWpoaGhsNvr/vxAAAB53ef5/M1J8q/nh5vXuMv8f2vjWzf//erOb/ye3b2hA+f94T99k+b7BaiWidnPpRvVURG3tzt2vtJfmr7eut5bHR5+9MPbc+bELF6vDnYv73Vbf5woAAAD2qzz/z0aKX/39F5vP5+/m+v/B7RsaUP5/uqcv32f3ol/fhw4AAABPjDz/T0SK73zmvc336G3N/z2///dG9zn7L31+43NzdmBA+f9ET1+93O89cw8AAAAAAAAAAAAAAAAAAACwz1VTFmcixRf/WkmHy77dvP9vYfuGBvT8/8mevoV4OL//1/dJBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnkhZZNGOFJ8+tZ6+lne8GnGo9xMAAADY9/4dAAD//3E1G/Q=")
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000880)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f00000000c0), 0x4)
fdatasync(r2)
ftruncate(r2, 0xc2f)

42.915782539s ago: executing program 3 (id=696):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
r3 = socket(0x400000000010, 0x3, 0x0)
r4 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40c0}, 0x40408c0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newtclass={0x24, 0x29, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x1, 0xfff1}, {0xfff2, 0xfff1}}}, 0x24}}, 0x0)

42.183922509s ago: executing program 3 (id=698):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000100)={0x79, 0x0, 0x78b})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000180)=0x3)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0)
ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f00000001c0)={"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"})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000005c0)={[0x1, 0x3, 0x100000008, 0x0, 0x1, 0x5, 0xffffffffffffffff, 0x8, 0x37b7, 0xe9, 0x0, 0x6, 0x7, 0x2, 0x3ff, 0x45d], 0xeeef0000, 0x4fb40})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0)

41.244312299s ago: executing program 3 (id=701):
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="04000000040000000400000010"], 0x48)
r0 = socket$inet6(0xa, 0x3, 0xff)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000680)=@filter={'filter\x00', 0xe, 0x4, 0x438, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x368, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty}, 0x0, 0x1a0, 0x1c8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x2, 0x0, 'syz0\x00'}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x498)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), r1)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(0xffffffffffffffff)
r2 = socket$inet6(0xa, 0x1, 0x100)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000f00)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x11}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0xf}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0)

40.735429355s ago: executing program 3 (id=704):
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000240)='./file1\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x84)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x1c0)
chdir(&(0x7f0000000a80)='./file0\x00')
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x10, &(0x7f00000001c0)={[{@stripe={'stripe', 0x3d, 0x7}}, {@errors_continue}, {@errors_remount}]}, 0x9, 0x3d6, &(0x7f0000000440)="$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")
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r1, 0x40049366, 0x0)

40.143168413s ago: executing program 3 (id=707):
r0 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@code={0x1, 0x60, {"3ef30fc735fc9a00003e0f01c8c4417df1a9b398000066b824008ec8460f79f2c4e1717db49c26000000b9800000c00f3235000400000f307b9666baa00066b8000066ef66bad1040f01c2260f78da"}}], 0x60})
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
sendmsg$TIPC_CMD_SET_LINK_WINDOW(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0}, 0x4080)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_LAPIC(r0, 0x4400ae8f, &(0x7f00000001c0)={"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"})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_add_vcpu$x86(0x0, &(0x7f00000000c0)={0x0, 0x0})
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x5e0, 0x8, 0x0, 0x17c, 0x2, 0x800, 0xf9, 0x3f2, 0x1, 0x2, 0x6, 0x2000009, 0x8, 0x9, 0x80000000000, 0xbdc], 0x60000, 0xc1390})
ioctl$KVM_RUN(r3, 0xae80, 0x0)

38.930770722s ago: executing program 3 (id=709):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./bus\x00', 0x140)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./file1/file0\x00', 0x0)
mount$bind(&(0x7f00000005c0)='.\x00', &(0x7f0000000600)='./file1/file0\x00', 0x0, 0x1085408, 0x0)
mount$overlay(0x0, &(0x7f0000000640)='./bus\x00', &(0x7f0000000680), 0x40, &(0x7f00000006c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000700)='./bus\x00')
unlinkat(0xffffffffffffff9c, &(0x7f0000000840)='./file0/file0\x00', 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000880)='./file0\x00', 0x200)
openat(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', 0xc0243, 0x13)

37.488881269s ago: executing program 35 (id=709):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000740)='./bus\x00', 0x140)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./file1/file0\x00', 0x0)
mount$bind(&(0x7f00000005c0)='.\x00', &(0x7f0000000600)='./file1/file0\x00', 0x0, 0x1085408, 0x0)
mount$overlay(0x0, &(0x7f0000000640)='./bus\x00', &(0x7f0000000680), 0x40, &(0x7f00000006c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000700)='./bus\x00')
unlinkat(0xffffffffffffff9c, &(0x7f0000000840)='./file0/file0\x00', 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000880)='./file0\x00', 0x200)
openat(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', 0xc0243, 0x13)

7.684535317s ago: executing program 4 (id=867):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x101c42, 0x0)
write$binfmt_aout(r0, &(0x7f0000000340)=ANY=[], 0xfffffee2)
r1 = gettid()
timer_create(0x1, &(0x7f0000000380)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f00000003c0)=<r2=>0x0)
timer_settime(r2, 0x1, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
landlock_restrict_self(0xffffffffffffffff, 0xc)
r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, &(0x7f0000000040)=0x7)
read(r3, &(0x7f0000000740)=""/4116, 0x1014)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r3, 0xc1105517, &(0x7f0000001780)={{0xfffffffe, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x2, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0})

7.15480619s ago: executing program 8 (id=871):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/test\x00', 0x777)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0)
write(r0, &(0x7f0000000140)='10000', 0x5)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0)
write(r1, &(0x7f00000001c0)='1', 0x1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/test/cgroup.procs\x00', 0x802, 0x0)
write(r2, &(0x7f0000000240)='0', 0x1)
socket$netlink(0x10, 0x3, 0x0)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000380)={0xc})
unshare(0x80)

6.90529137s ago: executing program 8 (id=873):
prlimit64(0x0, 0xe, &(0x7f00000008c0)={0x8, 0x88}, 0x0)
ioctl$USBDEVFS_CLAIM_PORT(0xffffffffffffffff, 0x80045518, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000c80)={0x3c, 0x0, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@WGDEVICE_A_PEERS={0x4}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8010}, 0x4000000)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
r1 = syz_mount_image$btrfs(&(0x7f0000000ac0), &(0x7f0000000b00)='./file0\x00', 0x10, &(0x7f0000000b40)={[{@clear_cache}, {@user_subvol_rm}, {@nodiscard}, {@commit={'commit', 0x3d, 0xd1}}, {@autodefrag}, {@autodefrag}, {@max_inline={'max_inline', 0x3d, [0x78, 0x25]}}, {@space_cache}]}, 0x0, 0x559e, &(0x7f0000001800)="$eJzs3X9sVeX9B/BzWwoN+C39jhUYfxAgBoMkyJYtjqB4MQa24eKlgsKcCEQlBivYRDcYqUWSZcaghU4EF5GQaDJjscM/FMywy7CMZfzY5hZjs4JSaZZsAzVrHDG69N77XO49l9tembNOXy/SnvPcz3me+9yT88d9X/qcGwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAURUcSc9+d0f3i0ZE1X77/Hz+e+OjGn4zfvX/roVvu23T/gjMjbto5a1nf+mlN8zdsbDjS/PS+ObdGUSLdL5Htf9u136q/88bbvlsdBly+MLOtrS31lJmuJzON4QUP9vcr/FkRRVFVbIDK7PbV7E5FwQC53cbiAQf0Tuui6O7J8ya1dT01bklyYU/xS6df9VBPYKhkr6ue89dSMv27InZErp136SUKLtFM//gF96m8CADgY5mZSm9yb0ezb3Fz7eZ4PdZOxtotsXZ4h9CS37gYmXGHl5rnpHh9iOaZzESFESXnGatnz3+unYr3j7VjUeNjzLPw0GykqS41z7Wx+lDNEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCzZOzxo2tWtD2y575fdtQceff9OVc+8KWOw22LT4y8eunKHWum/HTWsr7105rmb9jYcKT56X1zbo2i2nS/RKZ74kTL5b9NjZ3fvXfcG427n6vpq8yOG7bD8g6OXg87s0ZH0cq8Sk8Y9q81UZQqLKSb0Y7iwl3pnW+HAgAAAJ8nX0n/rsi1M3GwqqCdSKfJRPpfkAmL77Quiu6ePG9SW9dT45YkF/Zc/HipEuMlLzherl17/ieRF4xD/I2Pd74eDm0sGmdg8RHjef7SMWPefmty/eSvT5v7xA3PjOru+r8nZ2xJ/bGu5oUrru+tf/a6ovxfO3D+D2dO/gcAAOA/If/HxxnYYPn/jqVTt7z+i2Grft3a8MTB+h1/bv3OMzsXneq54Ud9L09N3v7o1UX5f1LBUxbl/zDjkP8roovL/wAAAPBZ9t/O/8micQY2WP5vONM3+wcHX6vr+PucxXt+9dAVi8+e/tv8U7t3DV9zR8v6uoeuLMr/M8vL/8Pypx0e/F2Y8OrRUTSz/JMKAAAAFAj/737+o4WQ1zOfHMTz+rX/vKp5380ffPMbD97zpzff/s2xA7MnrdteN/PgyzfVf1j5ve3dRfk/WV7+r/p0Xi4AAABQhuePrpw773jPucfPvtB18vDu3pMznjyzrqnvdOslLatXbTr2WlH+T5WX/0cMzcsBAAAALuDeO59bsfnVl/oe2H/X2Ck9FVc1XpK4ZduOqU0TPuq8tPfy7VuL8v/y8vL/yOw2u/Ih06kz/BVC6+goqu7fWZspHIparskVAAAAgE9IyOlbP1ixbOzOsb3jj59+rObQG4dn/2Vt55yN13RXdW/uXNZ4WdH9AkJiL3X//3Cng7D+v+D+f0Xr//MKmbv+zXZjAAAAAL6Iitfzh9vjZ765oNT375e7/n9J3cQTiba33lv11XMHzo1ZsP/7129aV9/be8+El37/wz9M/6i6KP83l5f/K/O3n+T3/wEAAMBF+F/7/r+lReMMbLD7/zdV9DWsWrd3+uota7csTCw7UH3qwdV731+w5l9Tb36+qea6A0X5v6W8/B+2o/JfXkc4P5tGR9H4/p3s3QR/Hqa7OlZor8orZE58rMeNoUe20D4ir5C2Ntbja6OjaHL/TnOs8P+h0BIrnK3JFnbFCsdCIXs95Ap7YoWOcKVtq8lON154MRSyCyzawwqKUbklEbEe75Xq0V+4YI+u3JMDAAB8oYTwnM2yVYXNKB5l2xODHTBysAMqBjugcrADhsUOiB9Y6vFoeWEhPH575yMbNjVMSb7y8NzHfvbms40T9j1+WV3v5g9f2XbvxJ3TW6YW5f9d5eX/cCqGZzal1v9HYf1/9nsNc+v/l4dCbazQHgqp+B0DUuE5MmH34fActalsj7PjcwUAAAD4XAufC1QO8TwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/s3evcdJVd0JAj/d9INumqaNE9GMk3TUgGakaWwNw+AoaoxGRZpZddxkNBBoEGmE8FgFURtQZxziZ3ztrJnoCAoiu+qHGFeDwUhcxIw6iWLiA/Cxjq7r+h6VGM2E/XTfOkXVrS67EFDa+X7/6DpVv/O89eg69946FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/xjuPfjlk4YunP0PHzace8nqqqmL/kfH6Mv+cNW3vvjUPy5b9G9h/i9GnLll3kEXHjd/wbR/6Vi++ogzQmjtKleWFC977oqvPtS613HP3jFw48wbb63fUpWpNxMP/Tr/lGfuXBxbfbF/CHeXhVCRDgypSwKVmft1sb5960LYI2wLZEu01SYl0g2HB2pCWBK2BbJVra4JoS4ncMqG+++7vDNxTU0IXwkhVKfbeKY6aaMmHRhUlQRq04HpFUngt1sT2cBPypMA7LD4Zsi+6Fe15mdo6L5ckddf5U7r2KcrPbw+MdFQPN/rR+3iTuWoSj/QukNPW0F17BIFb4+13m294N1WsJ2v8LTlfpHKfEPZui1UHcontk0aP6d9dnykPDQ19SlW0y56np9+e/6E7Un3mtdh7EDDTnkdXvrYiun9lo2+9OrNvxqz4ayaA3a0m0/lbNLc9K5WHTKvuV7zPEajfJ70grdfwbekRl+6Qghbzz17xtfnTDz7iD63PLnu1QcfrNty9pwFvzhz4nmLLj55w7/Pf6lg/t/w0fP/+HKOt+V5uWOrH9Ync/P4SF1MvFmfzM0BAACg1+gNe01Xnv/6X73+/bWtMxed/u23Dj73w71afz3i/gFVB7yxrqn1/I2ff6Vg/t9Y2vH/eMi/Lne0a0MY1ZVYNCCEvbseTwIrY3e+OyCEL3elWvMDR6UCa0PYpytxULaqVIm+sURjKvByfSYwKhVYHwOtqcDyGLgiFbg4BlalAhNiYG0qcHQMhCn54/hqfWYcJQdqYmBcshFXxbMQ3qmPraW21aZsVQAAADtJZnZYmX8351yHHc0Qp5eranrKEM/ALpqhOlVDegabnVYVraGipxrKe6ohO+6Ojx5+Qc1lPdVccBpGWX6GG9f85X2LXjzsC2P3mvj5xUMvmPKz8eGst++uerx5yYtv7XvEzesK5v/NHz3/r+6mI2UFx/9DGNv1N+Yuz0Tas/FxrXkZAAAAgB1w0R//xR61Lw85oGHT+2X3zl/7xKMrfrl5j1NOf3/c8a//8PCaxnsL5v+jSjv/P+4T6ZOTOTwSd0NMHRBCc34gqXZkYSA56t0vEwAAAIDeIHs8PnssfErmNjlFOz2fLszfup3544H/Ud3m//09/7P2jq3/+mLZBd89d0TNgKX/9GrHhBNOPvqW47/1zj4VB/yyvGD+31ra+f+1+bdJJ9bHXlw9IIS+OYEHYy87A10aY+D5I/MDmfGvjxtgcawqc2JCtqrFscS4GGhOBZYUK/FotsTe+YHMk5VtfFF2HFMyJXICAAAA8ImLuwPicfl4/n/LGSNO++vvzfrbha88eN7qCy75q+Ed80eedP/THzbMvXJp2PTmEQXz/3Hbd/5/1zy44PT+9n4hDK0IoU/6hwGP1CYLA8ZAXVkmcW9tUlefdFULa0MY2TmwdFUvZNb/r0ivMfh4TVJVDOy93y1vD+pMLKsJYWhu4IlvLz2sMzEnFcg2flpNCF/qHG268bv6Jo1Xphu/tm8IX8wJZKua0DeEzsaq0lX9r+rMdQzSVa2qDmHPnEC2quHVIcwNAPRW8X/pxNwHZ82dN3V8e3vbzF2YiDvxa8KkKe1tTROmt0+sLtKniak+561jtKBwTKVe+mZTZo2ixSsnV5aSzv5QsDm3rcyO/IIzBzP345ehyq5xHlKZd7clPeQD9y9sIuR8lSo25PJdPOTa3Eq2PYkF9cf8VaFf6DtnVtvMpvPGz549c1jyt9TshyR/43GmZFsNS2+r2u76VsLLo+hyWSkfd1sNyq1k6OxpM4bOmjtvyJRp4ye3TW47p+XQP2sZMXz410YM7RxUc/K3h5EO6q7m1Ei3Li1xWDtxpF+oyKnkk/jQkJCQ6G2J/f7L5odH77n+nOt/9tqPz+/3zdPu3fvImT889KqpD1Xve/ji24ccWDD/n/HR8//4qRM/+DPrMxQ7/t8QD/Mnj287zD8uBpaUevy/odjR/OyJAY2pQEcMdDjMDwAAwGdD3B0Z92bGndKbb1m/buOSlrk/aHin5dY17Utvuum+U39y58ATvjQ47LXhuhM+VzD/7yjt9/87af3/7NL1JxRb5v+gWKK52Pr/6WX+s+v/dxRb/z+9zH92/f8ln8L6/3OygdQmecf6/wAAwGfBJ7f+f4/L+6cvEFCQocfl/dMXCCjI0OMy/qVeIGC71/9f8+Bff6Wq35g7/qTlN/WXvPZ39xzWeuS6zTP/5Etb10+877qxt6wpmP9fUdr838L9AAAAsPv4z5ddU3H02Xff0bJu6sZxbw5+98m3lgzq80HF0Q+3j3xh4Bu3nlcw/19S2vz/k1//LxQ7/7+xWKC12MKA1v8DAACglyq2/t89Q1sa/zCm/x+eHvab5Q/ePPqnj/z898v3+/mJPyvfZ8Gxz8+8bFLB/H9VafP/eNpFeV7u2JsP65M17UJ6Tbs367M/GQAAAIDeoTw0NVWWmDdvYdSjPn6bT2eWAv2odK7vvXLt2ZtfmH7c46ev+7uaEwbvOWHaBasa/2b4gXd+ftQley7ddGrB/H9tafP/vN9lXPrYiun9lo2+9MOrN/9qzIazag7YdvwfAAAA2HVK3S8BAAAAAAAAAAAAAAB8+s7tWHzhI8uOfe+bt//F/kcseXXwbXcd+Lsh/V664qoHJq1648zJXy/4/X8Y21Wu2O//43X/4u8L/igvd2y15/X/MvdPOfH2uV1LFj5SH8L+uYGpC6fuETLX5h+cG7jvjIMGdiYWpkusefbolzoT30kHjh/yuS2dicNTgXFxkcR90oF4VcUt/VOBuLzi4+lA3B6r0oGqTOCy/sk4ytLb6pW6ZFuVpbfVxroQBuQEstvq7rqkjbL0AK9JBbID/F46EAd4ciZQnu7V7f2SXsVAXSx6Q7+kVwAA7Lbit8DKMGlKe1tz/Aofb79QkX8b5S1ZtqCw2rISm9+UWZps8crJlaWk+6S/i2671nhlqO4cwrCCr6u5Wcq6Rrlzaulh0/1RkSH3tNpbeZFyadu76aqKj6gmGVHThOntEyt7HHhLz1kOqegxy7CCyU5ulvKuTVpCLSX0pYQRlbhtSuhyvF8empr6pHL9eQw2hDw9vSJK/b1+7jp/xV4FuXluO/TKt758zE+f++CfP/9E/2+cVnP7rO+/e+KvX7//wEOOuG5C05otBfP/htLm/9W549qSuRhAR7yy3sgBIYwrcUQAAADw2XfbRbfecfr09a9MWlvx5GOPTS0fc3rl1vl3zp93ycZ7Fx9/2cErdjR+2Fm//f5vBu//b89e9dJPR+7zwA03/58nD3v8z3//8I8eeqduZZ+x7xXM/xtLm//HPViZQ8HJ3o618fr/iwaE0HVp/YYksDIO97sDQvhyV6o1lkguqH9CLNGcBFbGHSYHxRLjWvOr6hsDq1KBl+szgbWpwPoYyOyluCVkduVcWR/CYV2psfklZsQSDanAmBhoTAWaYqA5FegfA6NSgdf6ZwKtqcDDMRCm5G+rH/fPbCsAAIDtkZlnVebfDel53qqKnjKU9ZShtqcM5T1lqO4pQ7FRxPt3xAyVqZNXynIyVaZrrUnVUpAhXgx/u/tVkCE8mp8zXbCg6Xj+QfZ8g7L8DFf+4NlT1w+e/tDqzcd8beBt/zhkz4Obp9e9t+CGp3475pzrnv/TQQXz/+bS5v+1+bdJ6+vj/H/b9f+SwIOxe1fHU8cbY+D5I/MDmR0D6+Nkd3G2qtZMicykfXEsMSoGGlOBGTEwKhUYNzYTWDIwP5CZaWcbX5RtfEqmRE4AAAAAPnFxB0HcTRPn/zce9YOr3x8wccuyeTPvH9vyxMmjv3H1XT+6d/9ld767YvCAce99p2D+P6q0+X9sr19uYxfH3rzYP4S7y7b1JhsYUpcE4n6Muvjz+H3rQtgjZwdHtkRbbVKiKtVweKAm+YV6Vbqq1TXJGgPx/ikb7r/v8s7ENTUhfCVn70u2jWeqkzZq0oFBVUmgNh2YXpEE4p6fbOAn5UkAdlh2r2B8QWVOdclq6L5ckdffZ+WaoOnhFewD7SZfd7+52lWq0w9k9qlmbd/TVlAdu0TB22Otd1tvfLc1eLflfpHKfEPZui1UHcontk0aP6d9dnwk95esBXbR85z7K9VS0jvhddjx8Xvbs+p0B5pTHx/N3Zfr/nVYFqu79LEV0/stG33p1Zt/NWbDWTUHlNyNIuIPhX+05X9XPpWzeXe16pB5zfW6z5NWnye98d9Ao6cthHDZ9cfsu+TdX+/33A3Pnbqu7Maxr/7lrHs2Lf+bysNHrXv/yaGjLy+Y/7eWNv+vSN12+V3cmLMGhHBgzsZ9JG7+YwYkn4M5geRTcs/CQHLI/V/ri35yAgAAwM6W3d2R3V8wJXObnBCenicX5m/dzvxxf8WobvOX2u9j121cedLQN6474G8vOPGNv7/28Kceuv6ysnXL//vYD1avuXzxe08UzP/HffT8v2+qm47/O/7PLuL4f7d2913RfdMPdOzQruiC6tglHP/v1u7+bnP8v1uO/zv+3x3H/3vg+H+3dvenreBb0gxfujonwdff+fPfTbzpg7mN+x180lPPHDrxun+6quXuu0555b+de9601761uWD+P6O0+b/1/7pftC+7/t+4Yuv/zSi2/l+H9f8AAIBdqshCc+l5XsHqfQUZ0qv3FWTocYHAHpcYtP7fdq//t3Dkv1904Q+fb7n2nTvHXb5m07Fnvvr0utXPzFpx3Lnnv9V6112tBfP/jtLm//Hl0C+39d6y/l/j2CJVXREDMywMCAAAwO6o2A4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPl2HnvbO+5d8/R/aBv1ixc1/f+v/+7/P1q594JvfuGn4L6f86RllazZcM+LMLfMOuvC4+Qum/UvH8tVHnBHClK5yZUnxsueu+OpDrXsd9+wdAzfOvPHW+i3VmXorM7d/nJc7tvphfQhLch6pi4k36zvvbAuccuLtcys6E4/Uh7B/bmDqwql7dCaW14cwODdw3xkHDexMLEyXWPPs0S91Jr6TDhw/5HNbOhOHZwJl6e5e1z/pblm6u5f3D2FATiDb3bP751eVbeO4TKA83caKuqSNGKiLRa+tS9qIgfZYYkrfEIZWhNAnXdU/VydV9UlXdU91UlWfdFUXVYcwMoRQka7quaqkqor0yB+tSqqKgb33u+XtQZ2JpVUhDM0NPPHtpYd1JmamAtnG/1NVCF/qfMmkG/9xZdJ4Zbrx/1oZwhdDCFXpEu9VJCWq0iVeqAhhz5zAto1YEcLcwGdD/PSZmPvgrLnzpo5vb2+buQsTVZm2asKkKe1tTROmt0+sTvWpmLKc9NYFH3/sm96eP6HzdvHKyZWlpCsy5Sq7unxIZd7dlt2997FftbmVbHs+CuqP+atCv9B3zqy2mU3njZ89e+aw5G+p2Q9J/vbJRJNtNay3bKtBuZUMnT1txtBZc+cNmTJt/OS2yW3ntBz6Zy0jhg//2oihnYNqTv7ujJEu/eRH+oWKnEo+ife/hIREb0uU5326Ne/un+MFX/S3dbQyVHd9QBdMK3KzlHWNcmcM+qiPOeKP8zWlxxENK5g4FGQ5pOcsLQWTiW1ZapIsXV/rCiaHuTWVd23SeL88NDX1KbYdGvLv5m7e13dg8z6d2XSlpgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+P/swIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCwAAAAAIMzfOoyeDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4FAAA//8fSxmR")
ioctl$BTRFS_IOC_SNAP_CREATE_V2(r1, 0x50009417, 0x0)

6.342305782s ago: executing program 4 (id=876):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4)
r1 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'dummy0\x00', <r2=>0x0})
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4)
bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10)
r3 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x24000800)
mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000001, 0x12, r0, 0x180000000)

5.888442237s ago: executing program 6 (id=879):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000680), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000009c0)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000a00)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'syzkaller1\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0xdc, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}, {0x300, 0x7}}, [@filter_kind_options=@f_u32={{0x8}, {0xb0, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x2}, @TCA_U32_SEL={0xa4, 0x5, {0x8, 0x6, 0x9, 0xc000, 0x4c16, 0x8, 0x7ff, 0x5, [{0x1000, 0x9, 0x4}, {0x3ff, 0x0, 0xfffffff7, 0x81}, {0xffff, 0x9, 0xe6f, 0x5}, {0x8001, 0xfb86, 0xfeffffff, 0x1ff}, {0x6, 0x9, 0x2, 0x9}, {0x400, 0x5, 0xe, 0x1}, {0x80000000, 0xfffffffc, 0x1, 0x7f}, {0x81, 0x1, 0x9, 0x4}, {0x6, 0x2, 0x8, 0x3}]}}]}}]}, 0xdc}, 0x1, 0x0, 0x0, 0x24004800}, 0x0)
write$tun(r0, &(0x7f0000000cc0)=ANY=[], 0x32)

5.694130062s ago: executing program 4 (id=881):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1e, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000e40)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0xd, 0xd0ea, 0x20000001, 0x3, 0x4}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x50}, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@delchain={0x24, 0x66, 0x221, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xd, 0xfff3}, {}, {0xb, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x8048}, 0x20004800)

5.556266139s ago: executing program 7 (id=882):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = dup(r1)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000340)="0f20c035000000200f22c0b9b1030000b8f0ffffffbaffffff7f0f3066baf80cb8bb0e708bef66bafc0cb044ee440f20c03507000000440f22c0410f185e4666b86a008ed8440f0748b80d180000000000000f23c00f21f835010002000f23f8c4217d29d9a20068000000000000", 0x6e}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_CAP_X86_USER_SPACE_MSR(r2, 0x4068aea3, &(0x7f00000002c0)={0xbc, 0x0, 0x2})
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

5.520331179s ago: executing program 6 (id=883):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)='\x00'/74, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400))
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)='\x00'/185, &(0x7f0000000140)='\x00'/92})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000001500)={@my=0x1})
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001"], 0x64}}, 0x40110)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10)

5.503261663s ago: executing program 8 (id=884):
r0 = socket(0x840000000002, 0x3, 0x100)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
close(0x3)
sendmsg$nl_xfrm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="fc0000001900010000000000fcdbdf2500000000000000000000000000000000fe8000000002000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000004000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050000000000000000000000000000000000000000022b0000000a000000fe8000000000000000000000000000aa0000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10)
setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000380)=0x4, 0x4)
connect$inet(r2, &(0x7f0000001040)={0x2, 0x0, @broadcast}, 0x10)
sendmmsg$inet(r2, &(0x7f0000001080)=[{{0x0, 0x6000, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x400000000000284, 0xf00)
sendmmsg$inet(r0, &(0x7f00000010c0), 0x4000095, 0x0)

5.459762536s ago: executing program 1 (id=885):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000680)={'syzkaller1\x00', 0x1})
r1 = socket$unix(0x1, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000700)={'syzkaller1\x00', 0x1})
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$unix(0x1, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'syzkaller1\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xfff3}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newtfilter={0x98, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0x7}, {0xfff2, 0xffff}, {0x300}}, [@filter_kind_options=@f_flow={{0x9}, {0x68, 0x2, [@TCA_FLOW_ACT={0x54, 0x9, 0x0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x777, 0x20000000, 0x6, 0xd24b}, 0x4, r4}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x5b7b}]}}]}, 0x98}}, 0x4044004)
write(r0, &(0x7f0000000b00)='\x00\x00\b\x00', 0x4)

5.290095998s ago: executing program 4 (id=886):
r0 = syz_mount_image$f2fs(&(0x7f00000005c0), &(0x7f0000000600)='./file0\x00', 0x408, &(0x7f0000000640)=ANY=[@ANYBLOB="6e6f646973636172642c6e6f636865636b706f696e745f6d657267652c616c6c6f635f6d6f64653d64656661756c742c6163746976655f6c6f67733d362c666c7573685f6d657267652c6661756c745f696e6a656374696f6e3d30303030303030303030303030303030303235362c646973636172642c6e6f61636c2c6673796e635f6d6f64653d706f7369782c616c6c6f635f6d6f64653d64656661756c742c6e6f657874656e745f63616368652c6163746976655f6c6f67733d322c6661756c745f747970653d30303030303030303030303031363737373231342c0002d1c71f8348abae1fff96ec907a723dca530cf5aea9622c1169c27c91b4d703f02da55a70e4108d30dd0a1b6e467d05c6c0237e3772dfb37da0e9705c62c7f6dc21ef782f52303a65f3196af86a3d58c8bfb0ef60c974b0e0b44af5ce33f407facb3838bd4bf9b7a99d612518ac3ddddf95b10ead9f78580da79051b5011a94bc44336ebf9378b479860af435366b6d4cdb9c5ffd949b52f82ac9c92de853"], 0x5, 0x5505, &(0x7f00000007c0)="$eJzs3E1rY9UbAPAn7XTe//Mv4sLdXBiEFiZh0nlBd6PO4At2KKMuXGmapCEzSW5p0rR25cKluPCbiIIrl34GF67diQvFnaDknlud+gJC08ZOfz+4ee45OXnuc8Iw8NxbEsCptZj9/GMlrsSFiJiPiMsRxXmlPAp3U3guIq5GxNwTR6Wc/33ibERcjIgrk+QpZ6V869Pr42u3f3jjp6++OXfm0mdffju7XQOz9nxE9DfT+U4/xbyT4qNyvjHuFrF/a1zG9Eb/cTnOU9xprxcZdhr76xpFvNlJ6/PN7eEkbvQazUnsdDeK+c1BuuBw3NnPU3zgUWOrGLfa60XsDvMidvZSXbt76f+2veEo5WmV+T4o0sdotB/TfHu3nfaz+biIzcGonE9581Z7dxLHZSwvF8281yrqWD/MN/3f9mZ3sL2bjdtbw24+yG7X6i/U6neq9a281R61b1Ub/dadW9lSpzdZVh21G/27nTzv9Nq1Zt5fzpY6zWa1Xs+W7rXXu41BVq/XbtZuVG8vl2fXs1cfvJP1WtnSJL7cHWyPur1htpFvZekTy9lK7eaLy9m1evbW6lq29vD+/dW1t9+79+6Dl1Zff6Vc9JeysqWVGysr1fqN6kp9+RTt/6Oy6CnuHw6lMusCAE4e/T8wC0fX/289jDj6/j/0/1Nxovrf097/H8H+4VD0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp9Z3C5+/VpwspvGlcv5/5dQz5bgSEXMR8evfmI+zB3LOl3kW/mH9wp9q+LoSRYbJNc6Vx8WIuFsev/z/qL8FAAAAeHp98eHVT1K3nl4WZ10QxyndtJm7/P6U8lUiYmHx+yllm5u8PDulZMW/7zOxO6VsxQ2s81NKlm65nZlWtn9l/kA4/0SopDB3rOUAAADH4mAncLxdCAAAAMfp41kXwGxUYv9R5v6z4OIv7/94IHjhwAgAAAA4gSqzLgAAAAA4ckX/7/f/AAAA4OmWfv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfmPnfm4TB6I4AD8bvLD/tGi1921lb1DGlrDHPUYUkCYoIAfSQhqgBnJLCRFEeBwCEYdIHttK9H2SMxnL/HiD4DAz0gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF26r9aL26vf121zdvt28owGAAAAuGRbrRf1P7PU/9rc/97c+tn0i4goI+LS3H0Un84yR01O9fL8zenz1asa7iLqhMN7TJrrS0T8aa7HH11/CgAAAPBxbZareZqtpz+zoQuiT2nRpvz2N1NeERHV7CFTWnnI+5UprP5+j+N/prR6AWuaKSwtuY1zpb1J/XM/rtpNT5oiNeXFlx2LzDZ2AACgR6Ozpt9ZCAAAAH36N3QBDKOI563M41bgJDXN9t7nsx4AAADwDhVDFwAAAAB0rp7/93T+3975fwAAADCMdP4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXdpW68VmuZq3zdnt28kzGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhif95RIATCIAz2ru9M5v6HlQZNTU2qQPj4G4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIv9eUmBEAiCKJgz/nfS9z+sJOgZRIiAhkcVtWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIud+3mNo4oDAP5mZmdrq+IaZQ8RUfCgF7vd1tbexIMSPPgnCCHd1titP9ocbCliLt4k515EjyKCEm/9H3JOIJd4y2EPETwrMzuTnfwA118zm+TzgTfvu8Mw7/tmIeQ77yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACURm9P4iQ7dMZxXJzb3Hu4lPVbh/rM47Xt+axlcVRn0ifDi9UPUbe5RAAAADg7krK+DyHspOsLWR938vo/La/Jav5vnx7HZT1/uO4v+7L2z9ovP+8+vz9QZzxOdtOby8PBpaOptP6/Wc62Z/7yilb+5PN3L0n+hcTvrT43SvPnGX29sfFOOw/P1ZEtAPBPXCz7Iih/H8r6fpOJAXBmtCqFd1n/J51mcwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACow2g1PFnGUQhhvjWJM1t7D5eO6x+vbc+X7dqjR2vhy8k9s1ukIYSby8PBpVpnM9vu3X9we3E4HNytP3gphNDU6G8V07/9wRQXh9DI8xH8R0FcfNmzks/JCBr8oQQAwKmUFi2r63fS9YXsXDQXwh/fHaz/X63EYcr6f/fDa5vVsar1f7+2Gc6+3sqdT3v37j94ffnO4q3BrcHHb1zuv9m/cv3q1eu9/F1JzxsTAAAA/p120ar1fzx3dP3/QiUOU9b/n33T/6I6VqL+P9Zk0a/pTAAAAM62Z1/+/bfomPNRux0+X1xZudsfH/c/Xx4fG0j1bztXtGr9n8w1nRUAAABQh9FqdGD9/0YlDlOu/z/1/Qs/Vu+ZhBDOF+v/F5c+Gd6obzozrY4/J256jgAAADTrfNGq6/9pvv8/3t/yEIcQXntlHBf/BnCq+j9596sfqmNV9/9fqW+KMynujp9H3ndDaHWbzggAAIDT7ImiZcX+r+n6wkc/XXi/bf8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQN3+DAAA//962D6S")
mkdirat(0xffffffffffffff9c, &(0x7f0000005d00)='./lower\x00', 0x19b)
mkdirat(0xffffffffffffff9c, &(0x7f0000005d40)='./upper\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000005d80)='./debug\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000005dc0)='./mnt\x00', 0x1ff)
syz_mount_image$exfat(0x0, &(0x7f0000005e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80f811, 0x0, 0x1, 0x0, &(0x7f0000005f00))
fchmodat(0xffffffffffffff9c, &(0x7f0000005f00)='.\x00', 0xffffffd3)
mkdir(&(0x7f00000060c0)='./bus\x00', 0x0)
mkdirat(r0, &(0x7f0000000000)='./mnt/file0\x00', 0x31)
mount$overlay(0x0, &(0x7f0000006000)='./mnt\x00', &(0x7f0000006040), 0x0, &(0x7f0000006080)={[{@lowerdir={'lowerdir', 0x3d, 'lower'}}, {@upperdir={'upperdir', 0x3d, 'upper'}}, {@workdir={'workdir', 0x3d, './mnt'}}]})

5.020152563s ago: executing program 1 (id=887):
mount$fuse(0x0, &(0x7f00000004c0)='./file0\x00', 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, 0x0, 0x2, 0x0)
r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000480), 0x2)
r1 = memfd_create(&(0x7f00000005c0)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2)
ftruncate(r1, 0x1000004)
fcntl$addseals(r1, 0x409, 0x7)
ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000600)={r1, 0x0, 0x0, 0x1000000})
ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000640)={r1, 0x0, 0x0, 0x1000000})
sched_setattr(0x0, &(0x7f0000000140)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='net/tcp\x00')

4.97266492s ago: executing program 7 (id=888):
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r0, 0x1000)
syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0xbb42)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r1 = io_uring_setup(0xfd2, &(0x7f0000000040)={0x0, 0x366, 0xc000, 0x800c, 0xa0002f5})
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x0, 0x80000002, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000004"], 0x50)
io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0)

4.431258592s ago: executing program 6 (id=889):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000100)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084)
r4 = socket(0x400000000010, 0x3, 0x0)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'syzkaller0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x2, 0xa}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x84}, 0x8000)
close(0x3)

4.072610947s ago: executing program 6 (id=890):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x109d02, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000280)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
munlockall()
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20)

3.433553223s ago: executing program 8 (id=891):
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb4a, 0x9, 0x2, 0x80000001, 0x3}, 0x0)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000003, 0x204031, 0xffffffffffffffff, 0x42799000)
socket$inet6(0xa, 0x3, 0x1)
r1 = fanotify_init(0x200, 0x0)
r2 = dup2(r1, r0)
readv(r2, &(0x7f00000001c0)=[{&(0x7f00000017c0)=""/54, 0x36}], 0x1)

3.103378571s ago: executing program 1 (id=892):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x100, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000980)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@arm64={0xb6, 0xdb, 0x2, '\x00', 0x6bd})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000400)={0x2, 0x0, @ioapic={0x1, 0xe, 0x10001, 0xfffffffe, 0x0, [{0x0, 0x4, 0x87, '\x00', 0x8}, {0x9, 0x8, 0x40, '\x00', 0xb}, {0xff, 0x7b, 0x9, '\x00', 0x67}, {0x0, 0x5, 0x1, '\x00', 0xf}, {0x7, 0x8, 0xc, '\x00', 0xfa}, {0x0, 0x5, 0x54, '\x00', 0xff}, {0x71, 0xd3, 0xf1, '\x00', 0x7b}, {0x3, 0x4, 0x1, '\x00', 0x8}, {0x7f, 0xff, 0xb, '\x00', 0xb}, {0xd7, 0xd, 0x0, '\x00', 0xf}, {0x0, 0x28, 0x80, '\x00', 0xdc}, {0xff, 0x1, 0xf0, '\x00', 0x1}, {0xfc, 0x3, 0x26}, {0xcf, 0x3, 0x1, '\x00', 0x6}, {0xf, 0xee, 0x9, '\x00', 0x3}, {0x3d, 0x2, 0x6, '\x00', 0x4}, {0x10, 0x6, 0x7, '\x00', 0x8}, {0x5, 0x6, 0x5, '\x00', 0x80}, {0x7, 0xe1, 0x7, '\x00', 0xc2}, {0x0, 0x80, 0xe, '\x00', 0x7f}, {0x1, 0xc, 0x80, '\x00', 0x7f}, {0x10, 0x6, 0x3, '\x00', 0x10}, {0x1, 0x23, 0xf3, '\x00', 0x4}, {0x7, 0x86}]}})

3.084717783s ago: executing program 7 (id=893):
pipe(&(0x7f00000002c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$binfmt_elf64(r1, &(0x7f0000000100)=ANY=[@ANYRESHEX=r0], 0xa6f)
pipe(&(0x7f00000001c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = fanotify_init(0x8, 0x40000)
fanotify_mark(r3, 0x401, 0x1000, r2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c"], 0x30}}, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r4 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000004"], 0x50)
io_uring_enter(r4, 0x2219, 0x7721, 0x33, 0x0, 0x0)

2.885701521s ago: executing program 4 (id=894):
socket(0xa, 0x5, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x8, 0x100008b}, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000300), 0x2, 0x143102)
writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000600)="94", 0xf000}, {0x0}], 0x2)
creat(0x0, 0x175)
mknod(&(0x7f0000000640)='./bus\x00', 0x8000, 0xd02)
socket$inet6_sctp(0xa, 0x1, 0x84)
acct(&(0x7f0000000840)='./bus\x00')

2.660627416s ago: executing program 7 (id=895):
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000009, 0x32, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0xb, 0x0, &(0x7f0000000140)='syzkaller\x00', 0xa, 0xffa, &(0x7f0000000a40)=""/4090, 0x0, 0xa8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200000}, 0x94)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x11, 0x40, 0x0, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0xff04, 0x0)
mknodat$md(0xffffffffffffff9c, &(0x7f0000000200)='./md0\x00', 0x6180, 0x0)
r0 = openat$md_node(0xffffffffffffff9c, &(0x7f0000000240)='./md0\x00', 0x2, 0x0)
ioctl$SET_ARRAY_INFO(r0, 0x40480923, &(0x7f0000000280)={0x0, 0x5a, 0x0, 0x0, 0x0, 0x800, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x10000})
ioctl$ADD_NEW_DISK(r0, 0x40140921, &(0x7f0000000300)={0xfffffffd, {0x1, 0x0}, 0x0, 0x14})
ioctl$ADD_NEW_DISK(r0, 0x40140921, 0x0)
open_tree(0xffffffffffffff9c, 0x0, 0xce8c07424292a66d)
pwrite64(r0, 0x0, 0x0, 0x1000)

1.998536187s ago: executing program 1 (id=896):
syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000140)='./file2\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x1, 0x5d9, &(0x7f0000000a40)="$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")
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r0, 0x0, 0x0)
bind$inet(r0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
readahead(r1, 0x7ff, 0x5)
sendmsg$inet(r0, 0x0, 0x40)
sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

1.822626218s ago: executing program 7 (id=897):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r1, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10)
sendmsg$inet(r1, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0)
sendmsg$rds(r1, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @private=0xa010102}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0xffc0}], 0x1}, 0x80d1)

1.774039293s ago: executing program 8 (id=898):
mkdir(0x0, 0x1ff)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, &(0x7f00000001c0)})
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r0 = add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x1d8, 0xfffffffffffffffd)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
r2 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, r1)
syz_emit_ethernet(0x4a, 0x0, 0x0)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r2, 0x0, &(0x7f0000000040)=@keyring)
keyctl$link(0x8, r0, r2)
bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0)
fchdir(0xffffffffffffffff)

1.244554356s ago: executing program 8 (id=899):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0)
iopl(0x3)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x2200810, &(0x7f0000000200)=ANY=[@ANYRES64=0x0, @ANYRES16, @ANYRESHEX, @ANYRESHEX, @ANYRESDEC, @ANYRES64], 0x5, 0x25d, &(0x7f00000006c0)="$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")
socket$inet_udp(0x2, 0x2, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000340)={0x84, &(0x7f0000000400)={0x40, 0xa, 0x4, "a0e763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, &(0x7f0000000140)={0x14, &(0x7f0000000080)={0x40, 0x5, 0x6, {0x6, 0x31, "b1ff4a40"}}, 0x0}, &(0x7f0000000640)={0xfffffffffffffdaa, &(0x7f00000001c0)={0x0, 0x18, 0x4, "083a09c2"}, 0x0, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x2b}, 0x0, 0x0, 0x0, 0x0, 0x0})

1.061542068s ago: executing program 1 (id=900):
openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0)
open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
rename(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpu.stat\x00', 0x275a, 0x0)
creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', r0, &(0x7f00000004c0)='./file1\x00', 0x5)

697.2842ms ago: executing program 6 (id=901):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001d80), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001e00)={'syzkaller0\x00', 0x2})
r1 = socket$netlink(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000001e40)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000001e80)={0x0, 0x0, &(0x7f0000001ec0)={&(0x7f0000001f00)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084)
sendmsg$nl_route_sched(r1, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001fc0)={&(0x7f0000002000)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xf}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x6, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x5, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x8, 0xa], 0x3, [0xb, 0x3, 0x1, 0x2002, 0x1, 0x4, 0x2, 0xd09, 0xff05, 0x2, 0xc, 0x3, 0x5, 0x2, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x400, 0x1, 0x9, 0x3ff, 0x2, 0xc, 0x42, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000002140)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0x3}, {0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x6, 0x2, 0x8, 0x2, 0x0, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xc, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x6, 0xd03, 0xff05, 0x2, 0x100b, 0x3, 0x5, 0x6, 0xd, 0x7], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x2a, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0)
dup3(r5, r0, 0x0)

117.800161ms ago: executing program 7 (id=902):
syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x800000, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYRES32, @ANYRESHEX, @ANYRESHEX=0x0, @ANYRES64, @ANYRESOCT, @ANYRESHEX, @ANYRES8, @ANYRESHEX=0x0], 0x1, 0x1e2, &(0x7f0000000100)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='.\x00', 0x0, 0x0)
syz_mount_image$iso9660(&(0x7f00000003c0), &(0x7f0000000400)='./file0\x00', 0x2000c12, &(0x7f0000000480)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0, @ANYRES32, @ANYRESHEX, @ANYRESDEC, @ANYRESDEC, @ANYBLOB="3716b43d3bc546b51baa10736241e45d9fd2d15ce580b82dde608061793aea9a493edc47da0d2501690e1addf8c859c3aa503814836868b53f3371824e0385b0ea509888ee35b7907ae2b847d8d1c57cb5f54385a28d5914017c6d3e6a0b981d5293681577e5d56ffe0342c720a23e11075474699bee7094507de04aaf47016f0451bd2c907ac505f141463ee369aaaadcb2edfe07d617e5a7bbb7"], 0x2, 0xa1a, &(0x7f00000006c0)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file2\x00', 0x80000, 0x40)
mmap(&(0x7f0000002000/0xd000)=nil, 0xd000, 0x2000000, 0x12, r1, 0x1000)
madvise(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x3)
open_by_handle_at(r0, &(0x7f0000000340)=@reiserfs_2={0x8, 0x2, {0x2}}, 0x0)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000002580)={0x0, 0x0, &(0x7f00000025c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="839c79b6230000001e008700320c0500000000000000009e"], 0x20}, 0x1, 0x0, 0x0, 0x20040}, 0x80)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r3, 0x107, 0x12, &(0x7f0000000380), 0x4)

49.082682ms ago: executing program 1 (id=903):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=ANY=[@ANYBLOB="34000000020301010000000000000000020000010900090000000007010000000800010001"], 0x34}}, 0x8004)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000020301010000000000000000020080010800010001"], 0x1c}, 0x1, 0x0, 0x0, 0x20000880}, 0x4000)
r2 = fsopen(&(0x7f0000000780)='proc\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x0, 0x0)
fchdir(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f00000007c0)='./net/netfilter/nfnetlink_queue\x00', 0x0, 0x0)
read(r4, &(0x7f0000000800)=""/1016, 0x3f8)
syz_fuse_handle_req(r4, &(0x7f0000000c00)="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", 0x2000, &(0x7f0000002c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

8.446956ms ago: executing program 6 (id=904):
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
madvise(0x0, 0x0, 0x12)
fsmount(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x29, 0x5, 0x0, 0x0)
setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f00000002c0)=0x7b, 0x4)
recvmmsg(r1, &(0x7f0000000580)=[{{0x0, 0x0, 0x0}, 0x1001}], 0x1, 0x10102, 0x0)

0s ago: executing program 4 (id=905):
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000020303000000000000000000022000000800010001"], 0x1c}}, 0x40000)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=ANY=[@ANYBLOB="2000000002038306000000000000000000000000090002000001002102"], 0x20}, 0x1, 0x0, 0x0, 0x40684b5}, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f00000007c0)=@filter={'filter\x00', 0xe, 0x4, 0x298, 0xffffffff, 0x0, 0xd0, 0x168, 0xffffffff, 0xffffffff, 0xd0, 0x168, 0x200, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x0, 0x7fffffff, 0x0, 0x1517f, 0xffffffff, 0xfe}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffc}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x1000)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000ac0), 0x40241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000b00)={'syzkaller1\x00', 0xc201})
r3 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000b40)={'syzkaller1\x00', @link_local})
write$tun(r2, &(0x7f0000000b80)={@val={0x8, 0x800}, @val={0x0, 0x3, 0x6, 0x3, 0x2b, 0x40}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x28, 0x2c, 0x63, 0x0, 0x40, 0x11, 0x0, @private=0xa010104, @broadcast}, {0x4e23, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x9, 0x5}}}}, 0x3a)

kernel console output (not intermixed with test programs):

100
[  190.446786][ T8086]  __kmalloc_cache_noprof+0x9e/0x600
[  190.446817][ T8086]  ? iopt_map_pages+0x143/0x1160
[  190.446841][ T8086]  ? iopt_map_pages+0x143/0x1160
[  190.446869][ T8086]  iopt_map_pages+0x143/0x1160
[  190.446914][ T8086]  ? xa_load+0x60/0x210
[  190.446945][ T8086]  ? __pfx_iopt_map_pages+0x10/0x10
[  190.446986][ T8086]  ? do_raw_spin_unlock+0xf5/0x200
[  190.447011][ T8086]  ? _raw_spin_unlock+0x28/0x50
[  190.447041][ T8086]  ? iommufd_get_object+0x38c/0x4b0
[  190.447065][ T8086]  ? __pfx_iommufd_get_object+0x10/0x10
[  190.447096][ T8086]  iommufd_ioas_copy+0x5c4/0x750
[  190.447126][ T8086]  ? __pfx_iommufd_ioas_copy+0x10/0x10
[  190.447149][ T8086]  ? __might_fault+0xaf/0x130
[  190.447183][ T8086]  iommufd_fops_ioctl+0x465/0x600
[  190.447211][ T8086]  ? __pfx_iommufd_fops_ioctl+0x10/0x10
[  190.447238][ T8086]  ? __fget_files+0x29/0x3f0
[  190.447265][ T8086]  ? __fget_files+0x29/0x3f0
[  190.447287][ T8086]  ? bpf_lsm_file_ioctl+0x9/0x20
[  190.447314][ T8086]  ? __pfx_iommufd_fops_ioctl+0x10/0x10
[  190.447336][ T8086]  __se_sys_ioctl+0xfc/0x170
[  190.447364][ T8086]  do_syscall_64+0x171/0x540
[  190.447391][ T8086]  ? trace_irq_disable+0x3b/0x140
[  190.447408][ T8086]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  190.447428][ T8086]  ? clear_bhb_loop+0x70/0xc0
[  190.447451][ T8086]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  190.447469][ T8086] RIP: 0033:0x00007f966f5a94d9
[  190.447494][ T8086] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  190.447510][ T8086] RSP: 002b:00007f967054f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  190.447534][ T8086] RAX: ffffffffffffffda RBX: 00007f966f825fa0 RCX: 00007f966f5a94d9
[  190.447548][ T8086] RDX: 0000200000000200 RSI: 0000000000003b83 RDI: 0000000000000003
[  190.447560][ T8086] RBP: 00007f966f63804e R08: 0000000000000000 R09: 0000000000000000
[  190.447572][ T8086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  190.447584][ T8086] R13: 00007f966f826038 R14: 00007f966f825fa0 R15: 00007ffeb8347528
[  190.447615][ T8086]  </TASK>
[  190.753098][ T7901] veth0_vlan: entered promiscuous mode
[  190.784779][ T8094] FAULT_INJECTION: forcing a failure.
[  190.784779][ T8094] name failslab, interval 1, probability 0, space 0, times 0
[  190.784812][ T8094] CPU: 0 UID: 0 PID: 8094 Comm: syz.1.611 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  190.784838][ T8094] Tainted: [L]=SOFTLOCKUP
[  190.784845][ T8094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  190.784856][ T8094] Call Trace:
[  190.784871][ T8094]  <TASK>
[  190.784879][ T8094]  dump_stack_lvl+0xe8/0x150
[  190.784915][ T8094]  should_fail_ex+0x3eb/0x540
[  190.784942][ T8094]  should_failslab+0xa8/0x100
[  190.784970][ T8094]  __kmalloc_cache_noprof+0x9e/0x600
[  190.785002][ T8094]  ? gserial_alloc_line_no_console+0x121/0x760
[  190.785031][ T8094]  ? gserial_alloc_line_no_console+0x121/0x760
[  190.785069][ T8094]  gserial_alloc_line_no_console+0x121/0x760
[  190.785107][ T8094]  gserial_alloc_line+0x18/0x90
[  190.785137][ T8094]  gser_alloc_inst+0x87/0xe0
[  190.785158][ T8094]  usb_get_function_instance+0xe3/0x2f0
[  190.785192][ T8094]  function_make+0x127/0x360
[  190.785212][ T8094]  ? __pfx___mutex_lock+0x10/0x10
[  190.785240][ T8094]  ? __pfx_function_make+0x10/0x10
[  190.785259][ T8094]  ? do_raw_spin_lock+0x12b/0x2f0
[  190.785291][ T8094]  ? do_raw_spin_unlock+0xf5/0x200
[  190.785318][ T8094]  configfs_mkdir+0x4f6/0x9e0
[  190.785344][ T8094]  ? __pfx_current_check_access_path+0x10/0x10
[  190.785374][ T8094]  ? __pfx_configfs_mkdir+0x10/0x10
[  190.785399][ T8094]  ? make_vfsuid+0x49/0xa0
[  190.785432][ T8094]  ? try_break_deleg+0x5e/0x1c0
[  190.785459][ T8094]  vfs_mkdir_no_perm+0x1a9/0x3b0
[  190.785492][ T8094]  vfs_mkdir+0x25f/0x2b0
[  190.785521][ T8094]  filename_mkdirat+0x284/0x550
[  190.785545][ T8094]  ? __might_fault+0xaf/0x130
[  190.785576][ T8094]  ? __pfx_filename_mkdirat+0x10/0x10
[  190.785605][ T8094]  ? do_getname+0x151/0x250
[  190.785637][ T8094]  __se_sys_mkdirat+0x35/0x150
[  190.785663][ T8094]  do_syscall_64+0x171/0x540
[  190.785687][ T8094]  ? trace_irq_disable+0x3b/0x140
[  190.785703][ T8094]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  190.785723][ T8094]  ? clear_bhb_loop+0x70/0xc0
[  190.785748][ T8094]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  190.785767][ T8094] RIP: 0033:0x00007f966f5a94d9
[  190.785787][ T8094] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  190.785804][ T8094] RSP: 002b:00007f967054f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[  190.785825][ T8094] RAX: ffffffffffffffda RBX: 00007f966f825fa0 RCX: 00007f966f5a94d9
[  190.785840][ T8094] RDX: 00000000000001ff RSI: 0000200000000140 RDI: ffffffffffffff9c
[  190.785853][ T8094] RBP: 00007f966f63804e R08: 0000000000000000 R09: 0000000000000000
[  190.785872][ T8094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  190.785883][ T8094] R13: 00007f966f826038 R14: 00007f966f825fa0 R15: 00007ffeb8347528
[  190.785917][ T8094]  </TASK>
[  190.787852][ T7901] veth1_vlan: entered promiscuous mode
[  190.911758][ T8090] sctp: [Deprecated]: syz.3.612 (pid 8090) Use of struct sctp_assoc_value in delayed_ack socket option.
[  190.911758][ T8090] Use struct sctp_sack_info instead
[  191.058648][ T7901] veth0_macvtap: entered promiscuous mode
[  191.099273][ T7901] veth1_macvtap: entered promiscuous mode
[  191.201171][ T7901] batman_adv: batadv0: Interface activated: batadv_slave_0
[  191.226368][ T8098] loop4: detected capacity change from 0 to 512
[  191.236767][ T7901] batman_adv: batadv0: Interface activated: batadv_slave_1
[  191.290908][ T8104] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  191.551551][ T1159] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  191.689582][ T7582] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  191.690025][ T7582] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  191.690427][ T7582] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  191.841918][ T7582] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  191.841938][ T7582] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  192.046234][ T1159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  192.046264][ T1159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  192.093022][ T8115] netlink: 'syz.3.621': attribute type 10 has an invalid length.
[  192.153298][ T8115] team0 (unregistering): Port device team_slave_0 removed
[  192.186191][ T8115] team0 (unregistering): Port device team_slave_1 removed
[  193.230661][ T8137] loop4: detected capacity change from 0 to 32768
[  193.567873][ T5773] usb 8-1: new full-speed USB device number 2 using dummy_hcd
[  193.794146][ T5773] usb 8-1: New USB device found: idVendor=06cb, idProduct=0006, bcdDevice=0.06
[  193.886921][ T5773] usb 8-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0
[  193.886964][ T5773] usb 8-1: config 0 interface 0 altsetting 1 endpoint 0x85 has an invalid bInterval 0, changing to 10
[  193.887068][ T5773] usb 8-1: config 0 interface 0 altsetting 1 endpoint 0x85 has invalid wMaxPacketSize 0
[  193.887127][ T5773] usb 8-1: config 0 interface 0 has no altsetting 0
[  194.000996][ T5773] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  194.001067][ T5773] usb 8-1: SerialNumber: syz
[  194.267491][ T1318] ieee802154 phy0 wpan0: encryption failed: -22
[  194.267562][ T1318] ieee802154 phy1 wpan1: encryption failed: -22
[  194.410806][ T5773] usb 8-1: config 0 descriptor??
[  194.647427][ T5773] input: USB Synaptics Device 06cb:0006 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/input/input6
[  194.651607][ T4987] synaptics_usb 8-1:0.0: synusb_open - usb_submit_urb failed, error: -90
[  194.680801][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  194.682415][ T4987] synaptics_usb 8-1:0.0: synusb_open - usb_submit_urb failed, error: -90
[  194.723221][ T4987] synaptics_usb 8-1:0.0: synusb_open - usb_submit_urb failed, error: -90
[  194.734452][ T4987] synaptics_usb 8-1:0.0: synusb_open - usb_submit_urb failed, error: -90
[  195.252528][ T8150] loop1: detected capacity change from 0 to 33280
[  195.273310][ T8150] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028
[  195.273327][ T8150] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  195.273340][ T8150] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  195.279890][ T8150] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (35405!=33349)
[  195.313125][ T8150] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec029, mo2=0002]
[  195.313240][ T8150] System zones: 1-12
[  195.313462][ T8150] EXT4-fs error (device loop1): ext4_init_orphan_info:583: comm syz.1.629: inode #0: comm syz.1.629: iget: illegal inode #
[  195.313488][ T8150] loop1: lost filesystem error report for type 5 error -117
[  195.324700][    C1] EXT4-fs (loop1): error count since last fsck: 1
[  195.324721][    C1] EXT4-fs (loop1): initial error at time 1794618699: ext4_init_orphan_info:583
[  195.324742][    C1] EXT4-fs (loop1): last error at time 1794618699: ext4_init_orphan_info:583
[  195.387541][ T5773] usb 8-1: USB disconnect, device number 2
[  195.391240][ T8150] EXT4-fs (loop1): Remounting filesystem read-only
[  195.391257][ T8150] EXT4-fs (loop1): get orphan inode failed
[  195.407771][ T8150] EXT4-fs (loop1): mount failed
[  196.312983][ T8168] netlink: 4 bytes leftover after parsing attributes in process `syz.4.637'.
[  196.360034][   T34] audit: type=1800 audit(1794618700.465:57): pid=8169 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.636" name=08 dev="sda1" ino=2051 res=0 errno=-22
[  196.681577][ T8172] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  196.694357][ T8172] FAULT_INJECTION: forcing a failure.
[  196.694357][ T8172] name fail_iommufd, interval 1, probability 0, space 0, times 1
[  196.694389][ T8172] CPU: 0 UID: 0 PID: 8172 Comm: syz.4.638 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  196.694416][ T8172] Tainted: [L]=SOFTLOCKUP
[  196.694422][ T8172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  196.694434][ T8172] Call Trace:
[  196.694441][ T8172]  <TASK>
[  196.694449][ T8172]  dump_stack_lvl+0xe8/0x150
[  196.694486][ T8172]  should_fail_ex+0x3eb/0x540
[  196.694512][ T8172]  iommufd_get_object+0x78/0x4b0
[  196.694534][ T8172]  ? lock_acquire+0x115/0x350
[  196.694561][ T8172]  ? __pfx_iommufd_get_object+0x10/0x10
[  196.694594][ T8172]  iommufd_device_change_pt+0x72/0xaf0
[  196.694620][ T8172]  ? __pfx_down_write+0x10/0x10
[  196.694648][ T8172]  ? __pfx_iommufd_device_do_attach+0x10/0x10
[  196.694673][ T8172]  ? iommufd_device_bind+0x537/0x6a0
[  196.694694][ T8172]  iommufd_device_attach+0x2d/0xc0
[  196.694716][ T8172]  iommufd_test+0x3a3f/0x6660
[  196.694755][ T8172]  ? __lock_acquire+0x747/0x2de0
[  196.694781][ T8172]  ? __pfx_iommufd_test+0x10/0x10
[  196.694821][ T8172]  ? tomoyo_path_number_perm+0x219/0x5f0
[  196.694849][ T8172]  ? tomoyo_path_number_perm+0x219/0x5f0
[  196.694877][ T8172]  ? lock_acquire+0x115/0x350
[  196.694918][ T8172]  ? __might_fault+0xaf/0x130
[  196.694949][ T8172]  iommufd_fops_ioctl+0x465/0x600
[  196.694976][ T8172]  ? __pfx_iommufd_fops_ioctl+0x10/0x10
[  196.695002][ T8172]  ? __fget_files+0x29/0x3f0
[  196.695030][ T8172]  ? __fget_files+0x29/0x3f0
[  196.695051][ T8172]  ? bpf_lsm_file_ioctl+0x9/0x20
[  196.695071][ T8172]  ? __pfx_iommufd_fops_ioctl+0x10/0x10
[  196.695091][ T8172]  __se_sys_ioctl+0xfc/0x170
[  196.695119][ T8172]  do_syscall_64+0x171/0x540
[  196.695144][ T8172]  ? trace_irq_disable+0x3b/0x140
[  196.695161][ T8172]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  196.695180][ T8172]  ? clear_bhb_loop+0x70/0xc0
[  196.695203][ T8172]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  196.695222][ T8172] RIP: 0033:0x00007fb9c03a94d9
[  196.695242][ T8172] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  196.695257][ T8172] RSP: 002b:00007fb9c1273028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  196.695277][ T8172] RAX: ffffffffffffffda RBX: 00007fb9c0625fa0 RCX: 00007fb9c03a94d9
[  196.695291][ T8172] RDX: 0000200000000080 RSI: 0000000000003ba0 RDI: 0000000000000005
[  196.695312][ T8172] RBP: 00007fb9c043804e R08: 0000000000000000 R09: 0000000000000000
[  196.695325][ T8172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  196.695337][ T8172] R13: 00007fb9c0626038 R14: 00007fb9c0625fa0 R15: 00007ffcdbb5b948
[  196.695370][ T8172]  </TASK>
[  197.055692][   T34] audit: type=1326 audit(1794618701.165:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8175 comm="syz.7.639" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadc1da94d9 code=0x7ffc0000
[  197.057247][   T34] audit: type=1326 audit(1794618701.165:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8175 comm="syz.7.639" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadc1da94d9 code=0x7ffc0000
[  197.058052][   T34] audit: type=1326 audit(1794618701.165:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8175 comm="syz.7.639" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fadc1da94d9 code=0x7ffc0000
[  197.058329][   T34] audit: type=1326 audit(1794618701.165:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8175 comm="syz.7.639" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadc1da94d9 code=0x7ffc0000
[  197.058982][   T34] audit: type=1326 audit(1794618701.165:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8175 comm="syz.7.639" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7fadc1da94d9 code=0x7ffc0000
[  197.059433][   T34] audit: type=1326 audit(1794618701.165:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8175 comm="syz.7.639" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadc1da94d9 code=0x7ffc0000
[  197.059807][   T34] audit: type=1326 audit(1794618701.165:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8175 comm="syz.7.639" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7fadc1da94d9 code=0x7ffc0000
[  197.060528][   T34] audit: type=1326 audit(1794618701.165:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8175 comm="syz.7.639" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadc1da94d9 code=0x7ffc0000
[  197.061611][   T34] audit: type=1326 audit(1794618701.165:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8175 comm="syz.7.639" exe="/root/ci-upstream-linux-next-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadc1da94d9 code=0x7ffc0000
[  197.426344][ T5723] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  197.459375][ T8179] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  197.480234][ T8182] FAULT_INJECTION: forcing a failure.
[  197.480234][ T8182] name failslab, interval 1, probability 0, space 0, times 0
[  197.480267][ T8182] CPU: 1 UID: 60928 PID: 8182 Comm: syz.6.641 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  197.480294][ T8182] Tainted: [L]=SOFTLOCKUP
[  197.480301][ T8182] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  197.480314][ T8182] Call Trace:
[  197.480321][ T8182]  <TASK>
[  197.480329][ T8182]  dump_stack_lvl+0xe8/0x150
[  197.480367][ T8182]  should_fail_ex+0x3eb/0x540
[  197.480393][ T8182]  should_failslab+0xa8/0x100
[  197.480418][ T8182]  ? __kernfs_iattrs+0xdd/0x380
[  197.480445][ T8182]  kmem_cache_alloc_noprof+0x9c/0x600
[  197.480473][ T8182]  ? idr_alloc_u32+0x1f1/0x330
[  197.480503][ T8182]  ? __kernfs_iattrs+0xdd/0x380
[  197.480535][ T8182]  __kernfs_iattrs+0xdd/0x380
[  197.480562][ T8182]  ? __pfx___kernfs_iattrs+0x10/0x10
[  197.480587][ T8182]  ? do_raw_spin_lock+0x12b/0x2f0
[  197.480620][ T8182]  __kernfs_setattr+0x48/0x300
[  197.480651][ T8182]  __kernfs_new_node+0x4fe/0x980
[  197.480689][ T8182]  ? __pfx___kernfs_new_node+0x10/0x10
[  197.480727][ T8182]  ? kernfs_root+0x1c/0x230
[  197.480756][ T8182]  ? kernfs_root+0x1c/0x230
[  197.480790][ T8182]  kernfs_new_node+0xea/0x140
[  197.480824][ T8182]  __kernfs_create_file+0x4b/0x2e0
[  197.480849][ T8182]  cgroup_addrm_files+0x8f4/0xd50
[  197.480891][ T8182]  ? __pfx_cgroup_addrm_files+0x10/0x10
[  197.480946][ T8182]  ? css_next_descendant_pre+0x17d/0x260
[  197.480971][ T8182]  css_populate_dir+0x19d/0x3d0
[  197.481004][ T8182]  cgroup_mkdir+0x11fd/0x14b0
[  197.481034][ T8182]  ? __pfx_cgroup_mkdir+0x10/0x10
[  197.481056][ T8182]  kernfs_iop_mkdir+0x27d/0x560
[  197.481085][ T8182]  vfs_mkdir_no_perm+0x1a9/0x3b0
[  197.481117][ T8182]  vfs_mkdir+0x25f/0x2b0
[  197.481145][ T8182]  filename_mkdirat+0x284/0x550
[  197.481169][ T8182]  ? __might_fault+0xaf/0x130
[  197.481199][ T8182]  ? __pfx_filename_mkdirat+0x10/0x10
[  197.481235][ T8182]  ? do_getname+0x151/0x250
[  197.481266][ T8182]  __se_sys_mkdirat+0x35/0x150
[  197.481295][ T8182]  do_syscall_64+0x171/0x540
[  197.481320][ T8182]  ? trace_irq_disable+0x3b/0x140
[  197.481337][ T8182]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  197.481357][ T8182]  ? clear_bhb_loop+0x70/0xc0
[  197.481381][ T8182]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  197.481400][ T8182] RIP: 0033:0x00007fa628fa94d9
[  197.481421][ T8182] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  197.481437][ T8182] RSP: 002b:00007fa629ea6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[  197.481458][ T8182] RAX: ffffffffffffffda RBX: 00007fa629225fa0 RCX: 00007fa628fa94d9
[  197.481473][ T8182] RDX: 00000000000001ff RSI: 0000200000000000 RDI: ffffffffffffff9c
[  197.481487][ T8182] RBP: 00007fa62903804e R08: 0000000000000000 R09: 0000000000000000
[  197.481499][ T8182] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  197.481510][ T8182] R13: 00007fa629226038 R14: 00007fa629225fa0 R15: 00007fffa27c6508
[  197.481545][ T8182]  </TASK>
[  197.491954][ T8182] cgroup: cgroup_addrm_files: failed to add tasks, err=-12
[  197.661181][ T5723] usb 8-1: Using ep0 maxpacket: 16
[  197.675496][ T5723] usb 8-1: New USB device found: idVendor=05d1, idProduct=2001, bcdDevice=6.00
[  197.717549][ T5723] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 8
[  197.777925][ T8186] ip_tables: iptables: counters copy to user failed while replacing table
[  197.795884][ T5723] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  197.795909][ T5723] usb 8-1: Product: syz
[  197.795922][ T5723] usb 8-1: Manufacturer: syz
[  197.795935][ T5723] usb 8-1: SerialNumber: syz
[  197.801928][ T8186] netlink: 12 bytes leftover after parsing attributes in process `syz.1.642'.
[  197.872556][ T5723] usb 8-1: config 0 descriptor??
[  197.882990][ T5723] ftdi_sio 8-1:0.0: FTDI USB Serial Device converter detected
[  197.884434][ T5723] usb 8-1: Detected FT232R
[  198.126466][ T8176] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  198.127188][ T8176] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  198.171286][ T8198] netlink: 24 bytes leftover after parsing attributes in process `syz.6.649'.
[  198.172640][ T5723] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[  198.191464][ T5723] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  198.198901][ T5723] ftdi_sio 8-1:0.0: GPIO initialisation failed: -71
[  198.202103][ T5723] usb 8-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  198.222768][ T5723] usb 8-1: USB disconnect, device number 3
[  198.235357][ T5723] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  198.236101][ T5723] ftdi_sio 8-1:0.0: device disconnected
[  198.302815][ T8198] netlink: 4 bytes leftover after parsing attributes in process `syz.6.649'.
[  198.621970][ T8204] FAULT_INJECTION: forcing a failure.
[  198.621970][ T8204] name failslab, interval 1, probability 0, space 0, times 0
[  198.622006][ T8204] CPU: 1 UID: 0 PID: 8204 Comm: syz.6.651 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  198.622023][ T8204] Tainted: [L]=SOFTLOCKUP
[  198.622027][ T8204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  198.622033][ T8204] Call Trace:
[  198.622039][ T8204]  <TASK>
[  198.622044][ T8204]  dump_stack_lvl+0xe8/0x150
[  198.622065][ T8204]  should_fail_ex+0x3eb/0x540
[  198.622080][ T8204]  should_failslab+0xa8/0x100
[  198.622094][ T8204]  __kmalloc_noprof+0xf9/0x710
[  198.622109][ T8204]  ? __mutex_unlock_slowpath+0x731/0x900
[  198.622124][ T8204]  ? sock_kmalloc+0xd6/0x160
[  198.622138][ T8204]  ? sock_kmalloc+0xd6/0x160
[  198.622151][ T8204]  sock_kmalloc+0xd6/0x160
[  198.622164][ T8204]  __tcp_md5_do_add+0x179/0x4a0
[  198.622184][ T8204]  tcp_md5_do_add+0xfa/0x390
[  198.622202][ T8204]  tcp_v6_parse_md5_keys+0x550/0x670
[  198.622218][ T8204]  ? __pfx_tcp_v6_parse_md5_keys+0x10/0x10
[  198.622244][ T8204]  ? do_tcp_setsockopt+0x8f1/0x1f80
[  198.622261][ T8204]  ? __local_bh_enable_ip+0xd6/0x140
[  198.622278][ T8204]  do_tcp_setsockopt+0x1250/0x1f80
[  198.622293][ T8204]  ? __asan_memcpy+0x40/0x70
[  198.622305][ T8204]  ? __pfx_do_tcp_setsockopt+0x10/0x10
[  198.622325][ T8204]  ? aa_sock_opt_perm+0xe1/0x1e0
[  198.622344][ T8204]  ? sock_common_setsockopt+0x36/0xc0
[  198.622357][ T8204]  ? tcp_setsockopt+0x3d/0xe0
[  198.622371][ T8204]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  198.622385][ T8204]  do_sock_setsockopt+0x17c/0x1b0
[  198.622403][ T8204]  __x64_sys_setsockopt+0x13d/0x1b0
[  198.622422][ T8204]  do_syscall_64+0x171/0x540
[  198.622435][ T8204]  ? trace_irq_disable+0x3b/0x140
[  198.622445][ T8204]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  198.622455][ T8204]  ? clear_bhb_loop+0x70/0xc0
[  198.622468][ T8204]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  198.622478][ T8204] RIP: 0033:0x00007fa628fa94d9
[  198.622489][ T8204] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  198.622498][ T8204] RSP: 002b:00007fa629ea6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  198.622510][ T8204] RAX: ffffffffffffffda RBX: 00007fa629225fa0 RCX: 00007fa628fa94d9
[  198.622517][ T8204] RDX: 000000000000000e RSI: 0000000000000006 RDI: 0000000000000004
[  198.622523][ T8204] RBP: 00007fa62903804e R08: 00000000000000d8 R09: 0000000000000000
[  198.622529][ T8204] R10: 0000200000000580 R11: 0000000000000246 R12: 0000000000000000
[  198.622535][ T8204] R13: 00007fa629226038 R14: 00007fa629225fa0 R15: 00007fffa27c6508
[  198.622553][ T8204]  </TASK>
[  199.024530][ T8185] loop3: detected capacity change from 0 to 40427
[  199.124294][ T8185] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  199.124322][ T8185] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  199.168589][ T8206] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  199.168606][ T8206] overlayfs: failed to set xattr on upper
[  199.168611][ T8206] overlayfs: ...falling back to redirect_dir=nofollow.
[  199.168616][ T8206] overlayfs: ...falling back to index=off.
[  199.168620][ T8206] overlayfs: ...falling back to uuid=null.
[  199.224471][ T8185] F2FS-fs (loop3): invalid crc value
[  199.742672][ T8185] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  200.118020][ T8185] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  200.119072][ T8185] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  201.774585][ T7583] bridge_slave_1: left allmulticast mode
[  201.774612][ T7583] bridge_slave_1: left promiscuous mode
[  201.783195][ T7583] bridge0: port 2(bridge_slave_1) entered disabled state
[  201.792935][ T7583] bridge_slave_0: left allmulticast mode
[  201.792956][ T7583] bridge_slave_0: left promiscuous mode
[  201.793155][ T7583] bridge0: port 1(bridge_slave_0) entered disabled state
[  202.320001][ T8241] FAULT_INJECTION: forcing a failure.
[  202.320001][ T8241] name failslab, interval 1, probability 0, space 0, times 0
[  202.320036][ T8241] CPU: 0 UID: 0 PID: 8241 Comm: syz.1.663 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  202.320064][ T8241] Tainted: [L]=SOFTLOCKUP
[  202.320072][ T8241] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  202.320083][ T8241] Call Trace:
[  202.320090][ T8241]  <TASK>
[  202.320099][ T8241]  dump_stack_lvl+0xe8/0x150
[  202.320139][ T8241]  should_fail_ex+0x3eb/0x540
[  202.320166][ T8241]  should_failslab+0xa8/0x100
[  202.320193][ T8241]  __kmalloc_cache_noprof+0x9e/0x600
[  202.320224][ T8241]  ? __kmalloc_cache_noprof+0x148/0x600
[  202.320253][ T8241]  ? comedi_8254_io_alloc+0xb0/0x290
[  202.320281][ T8241]  ? comedi_8254_io_alloc+0xb0/0x290
[  202.320319][ T8241]  comedi_8254_io_alloc+0xb0/0x290
[  202.320347][ T8241]  ? __pfx_i8254_io8_cb+0x10/0x10
[  202.320381][ T8241]  das16m1_attach+0x2d6/0xb10
[  202.320412][ T8241]  ? __raw_spin_lock_init+0x45/0x100
[  202.320437][ T8241]  comedi_device_attach+0x52d/0x720
[  202.320470][ T8241]  comedi_unlocked_ioctl+0x8ef/0x1af0
[  202.320509][ T8241]  ? kasan_quarantine_put+0xbb/0x1f0
[  202.320528][ T8241]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[  202.320566][ T8241]  ? do_vfs_ioctl+0x11d5/0x15a0
[  202.320594][ T8241]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  202.320633][ T8241]  ? do_futex+0x3e7/0x4e0
[  202.320677][ T8241]  ? __fget_files+0x29/0x3f0
[  202.320705][ T8241]  ? __fget_files+0x29/0x3f0
[  202.320727][ T8241]  ? bpf_lsm_file_ioctl+0x9/0x20
[  202.320748][ T8241]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[  202.320774][ T8241]  __se_sys_ioctl+0xfc/0x170
[  202.320799][ T8241]  do_syscall_64+0x171/0x540
[  202.320824][ T8241]  ? trace_irq_disable+0x3b/0x140
[  202.320841][ T8241]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  202.320859][ T8241]  ? clear_bhb_loop+0x70/0xc0
[  202.320883][ T8241]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  202.320902][ T8241] RIP: 0033:0x00007f966f5a94d9
[  202.320921][ T8241] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  202.320939][ T8241] RSP: 002b:00007f967054f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  202.320960][ T8241] RAX: ffffffffffffffda RBX: 00007f966f825fa0 RCX: 00007f966f5a94d9
[  202.320975][ T8241] RDX: 0000200000000800 RSI: 0000000040946400 RDI: 0000000000000004
[  202.320988][ T8241] RBP: 00007f966f63804e R08: 0000000000000000 R09: 0000000000000000
[  202.321000][ T8241] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  202.321012][ T8241] R13: 00007f966f826038 R14: 00007f966f825fa0 R15: 00007ffeb8347528
[  202.321047][ T8241]  </TASK>
[  202.349523][ T7583] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  202.464456][ T8244] netlink: 28 bytes leftover after parsing attributes in process `syz.6.664'.
[  202.488333][ T7583] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  202.497996][ T7583] bond0 (unregistering): Released all slaves
[  202.852962][ T8249] netlink: 20 bytes leftover after parsing attributes in process `syz.3.667'.
[  202.941722][   T34] kauditd_printk_skb: 46 callbacks suppressed
[  202.941740][   T34] audit: type=1804 audit(1794618707.045:113): pid=8252 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.668" name="/newroot/151/file0" dev="tmpfs" ino=863 res=1 errno=0
[  202.942642][ T8252] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -32012, delta: 1
[  202.942673][ T8252] ref_ctr increment failed for inode: 0x35f offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88801dbc3100
[  202.944129][ T8251] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -32012, delta: -1
[  202.944158][ T8251] ref_ctr decrement failed for inode: 0x35f offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff88801dbc3100
[  202.944189][ T8251] uprobe: syz.4.668:8251 failed to unregister, leaking uprobe
[  203.442068][ T8266] loop1: detected capacity change from 0 to 128
[  203.444260][ T8266] FAT-fs (loop1): data area starts beyond volume (33 > 0)
[  203.444280][ T8266] FAT-fs (loop1): Can't find a valid FAT filesystem
[  203.501555][ T8266] netlink: 36 bytes leftover after parsing attributes in process `syz.1.672'.
[  203.502377][ T8266] netlink: 68 bytes leftover after parsing attributes in process `syz.1.672'.
[  203.630228][ T8269] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2142054965 (4284109930 ns) > initial count (2850433972 ns). Using initial count to start timer.
[  203.635800][   T34] audit: type=1800 audit(1794618707.745:114): pid=8254 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.665" name="/" dev="fuse" ino=1 res=0 errno=-107
[  203.682423][ T7583] hsr_slave_0: left promiscuous mode
[  203.683464][ T7583] hsr_slave_1: left promiscuous mode
[  203.692053][ T7583] batman_adv: batadv0: Removing interface: batadv_slave_0
[  203.706122][ T7583] batman_adv: batadv0: Removing interface: batadv_slave_1
[  203.744961][ T6843] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  203.894778][ T6843] usb 4-1: Using ep0 maxpacket: 16
[  203.895486][ T6843] usb 4-1: New USB device found: idVendor=2040, idProduct=b138, bcdDevice=1.42
[  203.896023][ T6843] usb 4-1: config 0 has no interfaces?
[  203.897840][ T6843] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  203.897863][ T6843] usb 4-1: Manufacturer: syz
[  203.988572][ T6843] usb 4-1: config 0 descriptor??
[  204.082400][ T8278] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  204.528574][ T7583] team0 (unregistering): Port device team_slave_1 removed
[  204.584534][ T7583] team0 (unregistering): Port device team_slave_0 removed
[  204.589962][ T6810] usb 4-1: USB disconnect, device number 4
[  205.553147][ T8296] netlink: 64 bytes leftover after parsing attributes in process `syz.3.683'.
[  205.577557][ T8296] syzkaller1: entered promiscuous mode
[  205.577579][ T8296] syzkaller1: entered allmulticast mode
[  206.122030][ T8310] loop6: detected capacity change from 0 to 33280
[  206.162804][ T8310] EXT4-fs (loop6): failed to initialize system zone (-117)
[  206.162901][ T8310] EXT4-fs (loop6): mount failed
[  207.018541][ T8310] loop6: detected capacity change from 0 to 2048
[  207.021164][ T8310] udf: Unknown parameter 'ÿÿÿÿÿÿ'
[  207.538562][ T8324] loop6: detected capacity change from 0 to 256
[  207.574763][ T6841] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  207.580971][ T8324] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  207.725590][ T6841] usb 2-1: New USB device found: idVendor=0763, idProduct=2031, bcdDevice=0.40
[  207.726846][ T6841] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7
[  207.730996][ T6841] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  207.731021][ T6841] usb 2-1: Product: syz
[  207.731034][ T6841] usb 2-1: Manufacturer: syz
[  207.731047][ T6841] usb 2-1: SerialNumber: syz
[  208.560851][ T8335] lo: entered promiscuous mode
[  208.697060][ T8335] tunl0: entered promiscuous mode
[  208.698861][ T8335] gre0: entered promiscuous mode
[  208.717278][ T8335] gretap0: entered promiscuous mode
[  208.720884][ T8335] erspan0: entered promiscuous mode
[  208.723897][ T8335] ip_vti0: entered promiscuous mode
[  208.745391][ T8335] ip6_vti0: entered promiscuous mode
[  208.747875][ T8335] sit0: entered promiscuous mode
[  208.766780][ T8335] ip6tnl0: entered promiscuous mode
[  208.769268][ T8335] ip6gre0: entered promiscuous mode
[  208.772951][ T8335] syz_tun: entered promiscuous mode
[  208.795727][ T8335] ip6gretap0: entered promiscuous mode
[  208.799152][ T8335] bridge0: port 2(bridge_slave_1) entered disabled state
[  208.799843][ T8335] bridge0: port 1(bridge_slave_0) entered disabled state
[  208.801157][ T8335] bridge0: entered promiscuous mode
[  208.804449][ T8335] vcan0: entered promiscuous mode
[  208.841591][ T8335] bond0: entered promiscuous mode
[  208.841613][ T8335] bond_slave_0: entered promiscuous mode
[  208.841834][ T8335] bond_slave_1: entered promiscuous mode
[  208.862563][ T8335] team0: entered promiscuous mode
[  208.862583][ T8335] team_slave_0: entered promiscuous mode
[  208.862800][ T8335] team_slave_1: entered promiscuous mode
[  208.883893][ T8335] dummy0: entered promiscuous mode
[  208.892244][ T8335] nlmon0: entered promiscuous mode
[  208.893601][ T8335] batadv0: entered promiscuous mode
[  208.896943][ T8335] veth0: entered promiscuous mode
[  208.899367][ T8335] veth1: entered promiscuous mode
[  208.902752][ T8335] wg0: entered promiscuous mode
[  208.912182][ T8335] wg2: entered promiscuous mode
[  208.918255][ T8335] veth0_to_bridge: entered promiscuous mode
[  208.953358][ T8335] veth1_to_bridge: entered promiscuous mode
[  209.038155][ T8335] veth0_to_bond: entered promiscuous mode
[  209.054455][ T8335] veth1_to_bond: entered promiscuous mode
[  209.071863][ T8335] veth0_to_team: entered promiscuous mode
[  209.120539][ T8335] veth1_to_team: entered promiscuous mode
[  209.162484][ T8335] veth0_to_batadv: entered promiscuous mode
[  209.179881][ T8335] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  209.179935][ T8335] batadv_slave_0: entered promiscuous mode
[  209.199547][ T8335] veth1_to_batadv: entered promiscuous mode
[  209.246884][ T8335] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  209.246944][ T8335] batadv_slave_1: entered promiscuous mode
[  209.267354][ T8335] xfrm0: entered promiscuous mode
[  209.279895][ T8335] veth0_to_hsr: entered promiscuous mode
[  209.348985][ T8335] veth1_to_hsr: entered promiscuous mode
[  209.452417][ T8335] hsr0: entered promiscuous mode
[  209.483383][ T8335] veth1_virt_wifi: entered promiscuous mode
[  209.498127][ T8341] loop6: detected capacity change from 0 to 40427
[  209.510580][ T8335] veth0_virt_wifi: entered promiscuous mode
[  209.518190][ T8341] F2FS-fs (loop6): build fault injection rate: 174
[  209.518211][ T8341] F2FS-fs (loop6): build fault injection type: 0x3bfe8c
[  209.522686][ T8341] F2FS-fs (loop6): invalid crc value
[  209.563788][ T8335] virt_wifi0: entered promiscuous mode
[  209.620645][ T8335] vlan0: entered promiscuous mode
[  209.643271][ T8335] vlan1: entered promiscuous mode
[  209.695702][ T8335] macvlan0: entered promiscuous mode
[  209.713957][ T8335] macvlan1: entered promiscuous mode
[  209.724874][ T8335] ipvtap0: entered promiscuous mode
[  209.731643][ T8335] ipvlan0: entered promiscuous mode
[  209.741902][ T8335] ipvlan1: entered promiscuous mode
[  209.781773][ T8335] macvtap0: entered promiscuous mode
[  209.788955][ T8335] macsec0: entered promiscuous mode
[  209.798470][ T8335] geneve0: entered promiscuous mode
[  209.809691][ T8335] geneve1: entered promiscuous mode
[  209.829337][ T8335] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[  209.834432][ T8335] netdevsim netdevsim4 netdevsim1: entered promiscuous mode
[  209.838250][ T8335] netdevsim netdevsim4 netdevsim2: entered promiscuous mode
[  209.854615][ T8335] netdevsim netdevsim4 netdevsim3: entered promiscuous mode
[  209.866586][ T8347] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  209.882187][ T8335] mac80211_hwsim hwsim7 wlan0: entered promiscuous mode
[  209.907305][ T8347] ip6_tables: ip6tables: counters copy to user failed while replacing table
[  209.910517][ T8335] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode
[  209.916861][ T8335] bridge1: entered promiscuous mode
[  209.952635][ T8341] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  209.973525][ T8341] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  209.989235][ T8335] : entered promiscuous mode
[  210.006503][ T7593] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  210.006561][ T7593] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  210.008285][ T1026] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  210.008313][ T1026] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  210.009117][ T1026] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  210.009143][ T1026] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  210.010162][ T7574] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  210.010188][ T7574] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  210.369442][ T8356] loop3: detected capacity change from 0 to 33280
[  210.371213][ T8341] F2FS-fs (loop6): inject inconsistent footer in f2fs_sanity_check_node_footer of __get_node_cache+0x4ef/0x8f0
[  210.412055][ T8341] F2FS-fs (loop6): inconsistent node block, node_type:1, nid:30, node_footer[nid:30,ino:30,ofs:0,cpver:0,blkaddr:0]
[  210.514462][ T8356] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  210.545475][ T6841] usb 2-1: Can't get UAC3 power state for id 10
[  210.554287][ T6841] usb 2-1: BAAD HEADPHONE p_chmask mismatch
[  210.691601][ T6661] syz-executor: attempt to access beyond end of device
[  210.691601][ T6661] loop6: rw=2049, sector=45096, nr_sectors = 48 limit=40427
[  210.712282][ T6661] CPU: 1 UID: 0 PID: 6661 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  210.712326][ T6661] Tainted: [L]=SOFTLOCKUP
[  210.712333][ T6661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  210.712342][ T6661] Call Trace:
[  210.712350][ T6661]  <TASK>
[  210.712357][ T6661]  dump_stack_lvl+0xe8/0x150
[  210.712390][ T6661]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  210.712422][ T6661]  f2fs_write_end_bio+0xf7d/0x1310
[  210.712461][ T6661]  __submit_merged_bio+0x258/0x6a0
[  210.712485][ T6661]  ? rcu_is_watching+0x16/0xb0
[  210.712510][ T6661]  f2fs_submit_merged_write_cond+0x1ef/0x590
[  210.712538][ T6661]  ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10
[  210.712589][ T6661]  __f2fs_write_data_pages+0x2abe/0x6dd0
[  210.712616][ T6661]  ? __lock_acquire+0x747/0x2de0
[  210.712674][ T6661]  ? __lock_acquire+0x747/0x2de0
[  210.712703][ T6661]  ? __lock_acquire+0x747/0x2de0
[  210.712727][ T6661]  ? __pfx___f2fs_write_data_pages+0x10/0x10
[  210.712761][ T6661]  ? __pfx_hlock_conflict+0x10/0x10
[  210.712812][ T6661]  ? rcu_is_watching+0x16/0xb0
[  210.712833][ T6661]  ? rcu_is_watching+0x16/0xb0
[  210.712849][ T6661]  ? __kasan_check_byte+0x12/0x40
[  210.712895][ T6661]  ? is_bpf_text_address+0x292/0x2b0
[  210.712917][ T6661]  ? is_bpf_text_address+0x26/0x2b0
[  210.712942][ T6661]  ? kernel_text_address+0xa5/0xe0
[  210.712967][ T6661]  ? __kernel_text_address+0xd/0x30
[  210.712989][ T6661]  ? unwind_get_return_address+0x4d/0x90
[  210.713013][ T6661]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  210.713036][ T6661]  ? arch_stack_walk+0xfb/0x150
[  210.713073][ T6661]  ? stack_trace_save+0xa9/0x100
[  210.713097][ T6661]  ? __pfx_stack_trace_save+0x10/0x10
[  210.713125][ T6661]  ? check_path+0x21/0x40
[  210.713142][ T6661]  ? check_noncircular+0xdb/0x150
[  210.713163][ T6661]  ? add_lock_to_list+0xc7/0x100
[  210.713183][ T6661]  ? lockdep_unlock+0x5c/0xd0
[  210.713204][ T6661]  ? __lock_acquire+0x1511/0x2de0
[  210.713258][ T6661]  ? do_raw_spin_lock+0x12b/0x2f0
[  210.713294][ T6661]  ? do_raw_spin_unlock+0xf5/0x200
[  210.713316][ T6661]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  210.713336][ T6661]  do_writepages+0x338/0x560
[  210.713365][ T6661]  ? preempt_schedule_common+0x7f/0xd0
[  210.713390][ T6661]  ? preempt_schedule_thunk+0x16/0x40
[  210.713423][ T6661]  filemap_fdatawrite+0x1e9/0x2f0
[  210.713457][ T6661]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  210.713530][ T6661]  ? do_raw_spin_unlock+0xf5/0x200
[  210.713557][ T6661]  f2fs_sync_dirty_inodes+0x471/0x970
[  210.713594][ T6661]  f2fs_write_checkpoint+0x867/0x24d0
[  210.713653][ T6661]  kill_f2fs_super+0x2df/0x700
[  210.713687][ T6661]  ? rcu_do_enqueue+0x60d/0x870
[  210.713711][ T6661]  ? lockdep_hardirqs_on+0x7b/0x110
[  210.713735][ T6661]  ? __pfx_kill_f2fs_super+0x10/0x10
[  210.713777][ T6661]  ? __pfx_call_rcu+0x10/0x10
[  210.713802][ T6661]  ? shrinker_free+0x2a7/0x3b0
[  210.713830][ T6661]  deactivate_locked_super+0xbe/0x110
[  210.713851][ T6661]  cleanup_mnt+0x204/0x2a0
[  210.713877][ T6661]  task_work_run+0x1d9/0x260
[  210.713909][ T6661]  ? __pfx_task_work_run+0x10/0x10
[  210.713942][ T6661]  exit_to_user_mode_loop+0x204/0x770
[  210.713968][ T6661]  ? rcu_is_watching+0x16/0xb0
[  210.713992][ T6661]  do_syscall_64+0x336/0x540
[  210.714016][ T6661]  ? trace_irq_disable+0x3b/0x140
[  210.714032][ T6661]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  210.714051][ T6661]  ? clear_bhb_loop+0x70/0xc0
[  210.714075][ T6661]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  210.714094][ T6661] RIP: 0033:0x00007fa628faa747
[  210.714114][ T6661] Code: a2 c7 05 ac 2f 25 00 00 00 00 00 eb 96 e8 b1 13 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  210.714131][ T6661] RSP: 002b:00007fffa27c5778 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  210.714151][ T6661] RAX: 0000000000000000 RBX: 00007fa629037433 RCX: 00007fa628faa747
[  210.714164][ T6661] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffa27c5830
[  210.714176][ T6661] RBP: 00007fffa27c5830 R08: 00007fffa27c6830 R09: 00000000ffffffff
[  210.714189][ T6661] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffa27c68c0
[  210.714201][ T6661] R13: 00007fa629037433 R14: 00000000000335dd R15: 00007fffa27c6900
[  210.714230][ T6661]  </TASK>
[  210.738601][ T6661] F2FS-fs (loop6): Stopped filesystem due to reason: 3
[  210.738710][ T6661] CPU: 1 UID: 0 PID: 6661 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  210.738736][ T6661] Tainted: [L]=SOFTLOCKUP
[  210.738743][ T6661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  210.738753][ T6661] Call Trace:
[  210.738760][ T6661]  <TASK>
[  210.738768][ T6661]  dump_stack_lvl+0xe8/0x150
[  210.738800][ T6661]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  210.738830][ T6661]  f2fs_write_end_bio+0xf7d/0x1310
[  210.738867][ T6661]  __submit_merged_bio+0x258/0x6a0
[  210.738897][ T6661]  ? rcu_is_watching+0x16/0xb0
[  210.738922][ T6661]  f2fs_submit_merged_write_cond+0x1ef/0x590
[  210.738949][ T6661]  ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10
[  210.739001][ T6661]  __f2fs_write_data_pages+0x2abe/0x6dd0
[  210.739027][ T6661]  ? __lock_acquire+0x747/0x2de0
[  210.739082][ T6661]  ? __lock_acquire+0x747/0x2de0
[  210.739109][ T6661]  ? __lock_acquire+0x747/0x2de0
[  210.739132][ T6661]  ? __pfx___f2fs_write_data_pages+0x10/0x10
[  210.739165][ T6661]  ? __pfx_hlock_conflict+0x10/0x10
[  210.739213][ T6661]  ? rcu_is_watching+0x16/0xb0
[  210.739234][ T6661]  ? rcu_is_watching+0x16/0xb0
[  210.739249][ T6661]  ? __kasan_check_byte+0x12/0x40
[  210.739286][ T6661]  ? is_bpf_text_address+0x292/0x2b0
[  210.739307][ T6661]  ? is_bpf_text_address+0x26/0x2b0
[  210.739332][ T6661]  ? kernel_text_address+0xa5/0xe0
[  210.739356][ T6661]  ? __kernel_text_address+0xd/0x30
[  210.739379][ T6661]  ? unwind_get_return_address+0x4d/0x90
[  210.739402][ T6661]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  210.739426][ T6661]  ? arch_stack_walk+0xfb/0x150
[  210.739463][ T6661]  ? stack_trace_save+0xa9/0x100
[  210.739486][ T6661]  ? __pfx_stack_trace_save+0x10/0x10
[  210.739513][ T6661]  ? check_path+0x21/0x40
[  210.739528][ T6661]  ? check_noncircular+0xdb/0x150
[  210.739549][ T6661]  ? add_lock_to_list+0xc7/0x100
[  210.739569][ T6661]  ? lockdep_unlock+0x5c/0xd0
[  210.739589][ T6661]  ? __lock_acquire+0x1511/0x2de0
[  210.739641][ T6661]  ? do_raw_spin_lock+0x12b/0x2f0
[  210.739672][ T6661]  ? do_raw_spin_unlock+0xf5/0x200
[  210.739693][ T6661]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  210.739712][ T6661]  do_writepages+0x338/0x560
[  210.739740][ T6661]  ? preempt_schedule_common+0x7f/0xd0
[  210.739764][ T6661]  ? preempt_schedule_thunk+0x16/0x40
[  210.739794][ T6661]  filemap_fdatawrite+0x1e9/0x2f0
[  210.739822][ T6661]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  210.739898][ T6661]  ? do_raw_spin_unlock+0xf5/0x200
[  210.739923][ T6661]  f2fs_sync_dirty_inodes+0x471/0x970
[  210.739957][ T6661]  f2fs_write_checkpoint+0x867/0x24d0
[  210.740013][ T6661]  kill_f2fs_super+0x2df/0x700
[  210.740045][ T6661]  ? rcu_do_enqueue+0x60d/0x870
[  210.740068][ T6661]  ? lockdep_hardirqs_on+0x7b/0x110
[  210.740092][ T6661]  ? __pfx_kill_f2fs_super+0x10/0x10
[  210.740136][ T6661]  ? __pfx_call_rcu+0x10/0x10
[  210.740160][ T6661]  ? shrinker_free+0x2a7/0x3b0
[  210.740188][ T6661]  deactivate_locked_super+0xbe/0x110
[  210.740208][ T6661]  cleanup_mnt+0x204/0x2a0
[  210.740235][ T6661]  task_work_run+0x1d9/0x260
[  210.740261][ T6661]  ? __pfx_task_work_run+0x10/0x10
[  210.740294][ T6661]  exit_to_user_mode_loop+0x204/0x770
[  210.740319][ T6661]  ? rcu_is_watching+0x16/0xb0
[  210.740341][ T6661]  do_syscall_64+0x336/0x540
[  210.740364][ T6661]  ? trace_irq_disable+0x3b/0x140
[  210.740380][ T6661]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  210.740398][ T6661]  ? clear_bhb_loop+0x70/0xc0
[  210.740420][ T6661]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  210.740438][ T6661] RIP: 0033:0x00007fa628faa747
[  210.740457][ T6661] Code: a2 c7 05 ac 2f 25 00 00 00 00 00 eb 96 e8 b1 13 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  210.740473][ T6661] RSP: 002b:00007fffa27c5778 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  210.740492][ T6661] RAX: 0000000000000000 RBX: 00007fa629037433 RCX: 00007fa628faa747
[  210.740504][ T6661] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffa27c5830
[  210.740515][ T6661] RBP: 00007fffa27c5830 R08: 00007fffa27c6830 R09: 00000000ffffffff
[  210.740527][ T6661] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffa27c68c0
[  210.740539][ T6661] R13: 00007fa629037433 R14: 00000000000335dd R15: 00007fffa27c6900
[  210.740571][ T6661]  </TASK>
[  210.759785][ T6661] F2FS-fs (loop6): Stopped filesystem due to reason: 3
[  210.759866][ T6661] CPU: 1 UID: 0 PID: 6661 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  210.759901][ T6661] Tainted: [L]=SOFTLOCKUP
[  210.759908][ T6661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  210.759918][ T6661] Call Trace:
[  210.759925][ T6661]  <TASK>
[  210.759932][ T6661]  dump_stack_lvl+0xe8/0x150
[  210.759967][ T6661]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  210.759999][ T6661]  f2fs_write_end_bio+0xf7d/0x1310
[  210.760038][ T6661]  __submit_merged_bio+0x258/0x6a0
[  210.760062][ T6661]  ? rcu_is_watching+0x16/0xb0
[  210.760087][ T6661]  f2fs_submit_merged_write_cond+0x1ef/0x590
[  210.760115][ T6661]  ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10
[  210.760168][ T6661]  __f2fs_write_data_pages+0x2abe/0x6dd0
[  210.760195][ T6661]  ? __lock_acquire+0x747/0x2de0
[  210.760255][ T6661]  ? __lock_acquire+0x747/0x2de0
[  210.760283][ T6661]  ? __lock_acquire+0x747/0x2de0
[  210.760307][ T6661]  ? __pfx___f2fs_write_data_pages+0x10/0x10
[  210.760342][ T6661]  ? __pfx_hlock_conflict+0x10/0x10
[  210.760395][ T6661]  ? rcu_is_watching+0x16/0xb0
[  210.760417][ T6661]  ? rcu_is_watching+0x16/0xb0
[  210.760432][ T6661]  ? __kasan_check_byte+0x12/0x40
[  210.760472][ T6661]  ? is_bpf_text_address+0x292/0x2b0
[  210.760493][ T6661]  ? is_bpf_text_address+0x26/0x2b0
[  210.760519][ T6661]  ? kernel_text_address+0xa5/0xe0
[  210.760543][ T6661]  ? __kernel_text_address+0xd/0x30
[  210.760566][ T6661]  ? unwind_get_return_address+0x4d/0x90
[  210.760590][ T6661]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  210.760615][ T6661]  ? arch_stack_walk+0xfb/0x150
[  210.760654][ T6661]  ? stack_trace_save+0xa9/0x100
[  210.760678][ T6661]  ? __pfx_stack_trace_save+0x10/0x10
[  210.760707][ T6661]  ? check_path+0x21/0x40
[  210.760722][ T6661]  ? check_noncircular+0xdb/0x150
[  210.760743][ T6661]  ? add_lock_to_list+0xc7/0x100
[  210.760763][ T6661]  ? lockdep_unlock+0x5c/0xd0
[  210.760783][ T6661]  ? __lock_acquire+0x1511/0x2de0
[  210.760840][ T6661]  ? do_raw_spin_lock+0x12b/0x2f0
[  210.760873][ T6661]  ? do_raw_spin_unlock+0xf5/0x200
[  210.760900][ T6661]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  210.760920][ T6661]  do_writepages+0x338/0x560
[  210.760948][ T6661]  ? preempt_schedule_common+0x7f/0xd0
[  210.760973][ T6661]  ? preempt_schedule_thunk+0x16/0x40
[  210.761006][ T6661]  filemap_fdatawrite+0x1e9/0x2f0
[  210.761034][ T6661]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  210.761113][ T6661]  ? do_raw_spin_unlock+0xf5/0x200
[  210.761138][ T6661]  f2fs_sync_dirty_inodes+0x471/0x970
[  210.761175][ T6661]  f2fs_write_checkpoint+0x867/0x24d0
[  210.761237][ T6661]  kill_f2fs_super+0x2df/0x700
[  210.761270][ T6661]  ? rcu_do_enqueue+0x60d/0x870
[  210.761294][ T6661]  ? lockdep_hardirqs_on+0x7b/0x110
[  210.761318][ T6661]  ? __pfx_kill_f2fs_super+0x10/0x10
[  210.761364][ T6661]  ? __pfx_call_rcu+0x10/0x10
[  210.761389][ T6661]  ? shrinker_free+0x2a7/0x3b0
[  210.761418][ T6661]  deactivate_locked_super+0xbe/0x110
[  210.761440][ T6661]  cleanup_mnt+0x204/0x2a0
[  210.761468][ T6661]  task_work_run+0x1d9/0x260
[  210.761494][ T6661]  ? __pfx_task_work_run+0x10/0x10
[  210.761529][ T6661]  exit_to_user_mode_loop+0x204/0x770
[  210.761554][ T6661]  ? rcu_is_watching+0x16/0xb0
[  210.761578][ T6661]  do_syscall_64+0x336/0x540
[  210.761601][ T6661]  ? trace_irq_disable+0x3b/0x140
[  210.761617][ T6661]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  210.761635][ T6661]  ? clear_bhb_loop+0x70/0xc0
[  210.761659][ T6661]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  210.761677][ T6661] RIP: 0033:0x00007fa628faa747
[  210.761697][ T6661] Code: a2 c7 05 ac 2f 25 00 00 00 00 00 eb 96 e8 b1 13 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  210.761713][ T6661] RSP: 002b:00007fffa27c5778 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  210.761731][ T6661] RAX: 0000000000000000 RBX: 00007fa629037433 RCX: 00007fa628faa747
[  210.761743][ T6661] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffa27c5830
[  210.761754][ T6661] RBP: 00007fffa27c5830 R08: 00007fffa27c6830 R09: 00000000ffffffff
[  210.761767][ T6661] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffa27c68c0
[  210.761778][ T6661] R13: 00007fa629037433 R14: 00000000000335dd R15: 00007fffa27c6900
[  210.761813][ T6661]  </TASK>
[  210.784359][ T6661] F2FS-fs (loop6): Stopped filesystem due to reason: 3
[  210.784447][ T6661] CPU: 1 UID: 0 PID: 6661 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  210.784473][ T6661] Tainted: [L]=SOFTLOCKUP
[  210.784479][ T6661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  210.784489][ T6661] Call Trace:
[  210.784497][ T6661]  <TASK>
[  210.784504][ T6661]  dump_stack_lvl+0xe8/0x150
[  210.784538][ T6661]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  210.784568][ T6661]  f2fs_write_end_bio+0xf7d/0x1310
[  210.784605][ T6661]  __submit_merged_bio+0x258/0x6a0
[  210.784628][ T6661]  ? rcu_is_watching+0x16/0xb0
[  210.784652][ T6661]  f2fs_submit_merged_write_cond+0x1ef/0x590
[  210.784683][ T6661]  ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10
[  210.784732][ T6661]  __f2fs_write_data_pages+0x2abe/0x6dd0
[  210.784757][ T6661]  ? __lock_acquire+0x747/0x2de0
[  210.784813][ T6661]  ? __lock_acquire+0x747/0x2de0
[  210.784840][ T6661]  ? __lock_acquire+0x747/0x2de0
[  210.784863][ T6661]  ? __pfx___f2fs_write_data_pages+0x10/0x10
[  210.784904][ T6661]  ? __pfx_hlock_conflict+0x10/0x10
[  210.784952][ T6661]  ? rcu_is_watching+0x16/0xb0
[  210.784973][ T6661]  ? rcu_is_watching+0x16/0xb0
[  210.784988][ T6661]  ? __kasan_check_byte+0x12/0x40
[  210.785025][ T6661]  ? is_bpf_text_address+0x292/0x2b0
[  210.785047][ T6661]  ? is_bpf_text_address+0x26/0x2b0
[  210.785070][ T6661]  ? kernel_text_address+0xa5/0xe0
[  210.785095][ T6661]  ? __kernel_text_address+0xd/0x30
[  210.785117][ T6661]  ? unwind_get_return_address+0x4d/0x90
[  210.785140][ T6661]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  210.785165][ T6661]  ? arch_stack_walk+0xfb/0x150
[  210.785202][ T6661]  ? stack_trace_save+0xa9/0x100
[  210.785225][ T6661]  ? __pfx_stack_trace_save+0x10/0x10
[  210.785253][ T6661]  ? check_path+0x21/0x40
[  210.785267][ T6661]  ? check_noncircular+0xdb/0x150
[  210.785288][ T6661]  ? add_lock_to_list+0xc7/0x100
[  210.785308][ T6661]  ? lockdep_unlock+0x5c/0xd0
[  210.785327][ T6661]  ? __lock_acquire+0x1511/0x2de0
[  210.785379][ T6661]  ? do_raw_spin_lock+0x12b/0x2f0
[  210.785411][ T6661]  ? do_raw_spin_unlock+0xf5/0x200
[  210.785432][ T6661]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  210.785451][ T6661]  do_writepages+0x338/0x560
[  210.785479][ T6661]  ? preempt_schedule_common+0x7f/0xd0
[  210.785503][ T6661]  ? preempt_schedule_thunk+0x16/0x40
[  210.785533][ T6661]  filemap_fdatawrite+0x1e9/0x2f0
[  210.785561][ T6661]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  210.785632][ T6661]  ? do_raw_spin_unlock+0xf5/0x200
[  210.785657][ T6661]  f2fs_sync_dirty_inodes+0x471/0x970
[  210.785691][ T6661]  f2fs_write_checkpoint+0x867/0x24d0
[  210.785748][ T6661]  kill_f2fs_super+0x2df/0x700
[  210.785779][ T6661]  ? rcu_do_enqueue+0x60d/0x870
[  210.785803][ T6661]  ? lockdep_hardirqs_on+0x7b/0x110
[  210.785827][ T6661]  ? __pfx_kill_f2fs_super+0x10/0x10
[  210.785871][ T6661]  ? __pfx_call_rcu+0x10/0x10
[  210.785906][ T6661]  ? shrinker_free+0x2a7/0x3b0
[  210.785933][ T6661]  deactivate_locked_super+0xbe/0x110
[  210.785955][ T6661]  cleanup_mnt+0x204/0x2a0
[  210.785981][ T6661]  task_work_run+0x1d9/0x260
[  210.786007][ T6661]  ? __pfx_task_work_run+0x10/0x10
[  210.786041][ T6661]  exit_to_user_mode_loop+0x204/0x770
[  210.786066][ T6661]  ? rcu_is_watching+0x16/0xb0
[  210.786088][ T6661]  do_syscall_64+0x336/0x540
[  210.786111][ T6661]  ? trace_irq_disable+0x3b/0x140
[  210.786128][ T6661]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  210.786146][ T6661]  ? clear_bhb_loop+0x70/0xc0
[  210.786168][ T6661]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  210.786186][ T6661] RIP: 0033:0x00007fa628faa747
[  210.786205][ T6661] Code: a2 c7 05 ac 2f 25 00 00 00 00 00 eb 96 e8 b1 13 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  210.786221][ T6661] RSP: 002b:00007fffa27c5778 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  210.786239][ T6661] RAX: 0000000000000000 RBX: 00007fa629037433 RCX: 00007fa628faa747
[  210.786252][ T6661] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffa27c5830
[  210.786263][ T6661] RBP: 00007fffa27c5830 R08: 00007fffa27c6830 R09: 00000000ffffffff
[  210.786275][ T6661] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffa27c68c0
[  210.786287][ T6661] R13: 00007fa629037433 R14: 00000000000335dd R15: 00007fffa27c6900
[  210.786318][ T6661]  </TASK>
[  210.808737][ T6661] F2FS-fs (loop6): Stopped filesystem due to reason: 3
[  210.808915][ T6661] CPU: 1 UID: 0 PID: 6661 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  210.808941][ T6661] Tainted: [L]=SOFTLOCKUP
[  210.808947][ T6661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  210.808958][ T6661] Call Trace:
[  210.808965][ T6661]  <TASK>
[  210.808972][ T6661]  dump_stack_lvl+0xe8/0x150
[  210.809005][ T6661]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  210.809036][ T6661]  f2fs_write_end_bio+0xf7d/0x1310
[  210.809073][ T6661]  __submit_merged_bio+0x258/0x6a0
[  210.809095][ T6661]  ? rcu_is_watching+0x16/0xb0
[  210.809120][ T6661]  f2fs_submit_merged_write_cond+0x1ef/0x590
[  210.809147][ T6661]  ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10
[  210.809196][ T6661]  __f2fs_write_data_pages+0x2abe/0x6dd0
[  210.809222][ T6661]  ? __lock_acquire+0x747/0x2de0
[  210.809278][ T6661]  ? __lock_acquire+0x747/0x2de0
[  210.809305][ T6661]  ? __lock_acquire+0x747/0x2de0
[  210.809328][ T6661]  ? __pfx___f2fs_write_data_pages+0x10/0x10
[  210.809362][ T6661]  ? __pfx_hlock_conflict+0x10/0x10
[  210.809410][ T6661]  ? rcu_is_watching+0x16/0xb0
[  210.809430][ T6661]  ? rcu_is_watching+0x16/0xb0
[  210.809446][ T6661]  ? __kasan_check_byte+0x12/0x40
[  210.809483][ T6661]  ? is_bpf_text_address+0x292/0x2b0
[  210.809504][ T6661]  ? is_bpf_text_address+0x26/0x2b0
[  210.809528][ T6661]  ? kernel_text_address+0xa5/0xe0
[  210.809553][ T6661]  ? __kernel_text_address+0xd/0x30
[  210.809578][ T6661]  ? unwind_get_return_address+0x4d/0x90
[  210.809602][ T6661]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  210.809627][ T6661]  ? arch_stack_walk+0xfb/0x150
[  210.809663][ T6661]  ? stack_trace_save+0xa9/0x100
[  210.809686][ T6661]  ? __pfx_stack_trace_save+0x10/0x10
[  210.809714][ T6661]  ? check_path+0x21/0x40
[  210.809729][ T6661]  ? check_noncircular+0xdb/0x150
[  210.809750][ T6661]  ? add_lock_to_list+0xc7/0x100
[  210.809770][ T6661]  ? lockdep_unlock+0x5c/0xd0
[  210.809789][ T6661]  ? __lock_acquire+0x1511/0x2de0
[  210.809841][ T6661]  ? do_raw_spin_lock+0x12b/0x2f0
[  210.809873][ T6661]  ? do_raw_spin_unlock+0xf5/0x200
[  210.809899][ T6661]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  210.809919][ T6661]  do_writepages+0x338/0x560
[  210.809946][ T6661]  ? preempt_schedule_common+0x7f/0xd0
[  210.809970][ T6661]  ? preempt_schedule_thunk+0x16/0x40
[  210.810001][ T6661]  filemap_fdatawrite+0x1e9/0x2f0
[  210.810028][ T6661]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  210.810099][ T6661]  ? do_raw_spin_unlock+0xf5/0x200
[  210.810124][ T6661]  f2fs_sync_dirty_inodes+0x471/0x970
[  210.810159][ T6661]  f2fs_write_checkpoint+0x867/0x24d0
[  210.810214][ T6661]  kill_f2fs_super+0x2df/0x700
[  210.810245][ T6661]  ? rcu_do_enqueue+0x60d/0x870
[  210.810268][ T6661]  ? lockdep_hardirqs_on+0x7b/0x110
[  210.810292][ T6661]  ? __pfx_kill_f2fs_super+0x10/0x10
[  210.810336][ T6661]  ? __pfx_call_rcu+0x10/0x10
[  210.810360][ T6661]  ? shrinker_free+0x2a7/0x3b0
[  210.810387][ T6661]  deactivate_locked_super+0xbe/0x110
[  210.810408][ T6661]  cleanup_mnt+0x204/0x2a0
[  210.810433][ T6661]  task_work_run+0x1d9/0x260
[  210.810460][ T6661]  ? __pfx_task_work_run+0x10/0x10
[  210.810491][ T6661]  exit_to_user_mode_loop+0x204/0x770
[  210.810515][ T6661]  ? rcu_is_watching+0x16/0xb0
[  210.810536][ T6661]  do_syscall_64+0x336/0x540
[  210.810559][ T6661]  ? trace_irq_disable+0x3b/0x140
[  210.810574][ T6661]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  210.810592][ T6661]  ? clear_bhb_loop+0x70/0xc0
[  210.810615][ T6661]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  210.810633][ T6661] RIP: 0033:0x00007fa628faa747
[  210.810653][ T6661] Code: a2 c7 05 ac 2f 25 00 00 00 00 00 eb 96 e8 b1 13 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  210.810668][ T6661] RSP: 002b:00007fffa27c5778 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  210.810686][ T6661] RAX: 0000000000000000 RBX: 00007fa629037433 RCX: 00007fa628faa747
[  210.810698][ T6661] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffa27c5830
[  210.810710][ T6661] RBP: 00007fffa27c5830 R08: 00007fffa27c6830 R09: 00000000ffffffff
[  210.810722][ T6661] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffa27c68c0
[  210.810734][ T6661] R13: 00007fa629037433 R14: 00000000000335dd R15: 00007fffa27c6900
[  210.810765][ T6661]  </TASK>
[  210.830051][ T6661] F2FS-fs (loop6): Stopped filesystem due to reason: 3
[  210.830132][ T6661] CPU: 1 UID: 0 PID: 6661 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  210.830157][ T6661] Tainted: [L]=SOFTLOCKUP
[  210.830163][ T6661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  210.830174][ T6661] Call Trace:
[  210.830181][ T6661]  <TASK>
[  210.830188][ T6661]  dump_stack_lvl+0xe8/0x150
[  210.830221][ T6661]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  210.830252][ T6661]  f2fs_write_end_bio+0xf7d/0x1310
[  210.830289][ T6661]  __submit_merged_bio+0x258/0x6a0
[  210.830312][ T6661]  ? rcu_is_watching+0x16/0xb0
[  210.830337][ T6661]  f2fs_submit_merged_write_cond+0x1ef/0x590
[  210.830364][ T6661]  ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10
[  210.830412][ T6661]  __f2fs_write_data_pages+0x2abe/0x6dd0
[  210.830438][ T6661]  ? __lock_acquire+0x747/0x2de0
[  210.830494][ T6661]  ? __lock_acquire+0x747/0x2de0
[  210.830521][ T6661]  ? __lock_acquire+0x747/0x2de0
[  210.830544][ T6661]  ? __pfx___f2fs_write_data_pages+0x10/0x10
[  210.830578][ T6661]  ? __pfx_hlock_conflict+0x10/0x10
[  210.830628][ T6661]  ? rcu_is_watching+0x16/0xb0
[  210.830649][ T6661]  ? rcu_is_watching+0x16/0xb0
[  210.830664][ T6661]  ? __kasan_check_byte+0x12/0x40
[  210.830701][ T6661]  ? is_bpf_text_address+0x292/0x2b0
[  210.830721][ T6661]  ? is_bpf_text_address+0x26/0x2b0
[  210.830746][ T6661]  ? kernel_text_address+0xa5/0xe0
[  210.830770][ T6661]  ? __kernel_text_address+0xd/0x30
[  210.830792][ T6661]  ? unwind_get_return_address+0x4d/0x90
[  210.830816][ T6661]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  210.830841][ T6661]  ? arch_stack_walk+0xfb/0x150
[  210.830883][ T6661]  ? stack_trace_save+0xa9/0x100
[  210.830906][ T6661]  ? __pfx_stack_trace_save+0x10/0x10
[  210.830934][ T6661]  ? check_path+0x21/0x40
[  210.830949][ T6661]  ? check_noncircular+0xdb/0x150
[  210.830969][ T6661]  ? add_lock_to_list+0xc7/0x100
[  210.830989][ T6661]  ? lockdep_unlock+0x5c/0xd0
[  210.831007][ T6661]  ? __lock_acquire+0x1511/0x2de0
[  210.831060][ T6661]  ? do_raw_spin_lock+0x12b/0x2f0
[  210.831092][ T6661]  ? do_raw_spin_unlock+0xf5/0x200
[  210.831112][ T6661]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  210.831132][ T6661]  do_writepages+0x338/0x560
[  210.831159][ T6661]  ? preempt_schedule_common+0x7f/0xd0
[  210.831183][ T6661]  ? preempt_schedule_thunk+0x16/0x40
[  210.831213][ T6661]  filemap_fdatawrite+0x1e9/0x2f0
[  210.831241][ T6661]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  210.831311][ T6661]  ? do_raw_spin_unlock+0xf5/0x200
[  210.831336][ T6661]  f2fs_sync_dirty_inodes+0x471/0x970
[  210.831370][ T6661]  f2fs_write_checkpoint+0x867/0x24d0
[  210.831426][ T6661]  kill_f2fs_super+0x2df/0x700
[  210.831458][ T6661]  ? rcu_do_enqueue+0x60d/0x870
[  210.831481][ T6661]  ? lockdep_hardirqs_on+0x7b/0x110
[  210.831504][ T6661]  ? __pfx_kill_f2fs_super+0x10/0x10
[  210.831548][ T6661]  ? __pfx_call_rcu+0x10/0x10
[  210.831572][ T6661]  ? shrinker_free+0x2a7/0x3b0
[  210.831599][ T6661]  deactivate_locked_super+0xbe/0x110
[  210.831619][ T6661]  cleanup_mnt+0x204/0x2a0
[  210.831646][ T6661]  task_work_run+0x1d9/0x260
[  210.831672][ T6661]  ? __pfx_task_work_run+0x10/0x10
[  210.831703][ T6661]  exit_to_user_mode_loop+0x204/0x770
[  210.831727][ T6661]  ? rcu_is_watching+0x16/0xb0
[  210.831749][ T6661]  do_syscall_64+0x336/0x540
[  210.831771][ T6661]  ? trace_irq_disable+0x3b/0x140
[  210.831787][ T6661]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  210.831806][ T6661]  ? clear_bhb_loop+0x70/0xc0
[  210.831829][ T6661]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  210.831846][ T6661] RIP: 0033:0x00007fa628faa747
[  210.831864][ T6661] Code: a2 c7 05 ac 2f 25 00 00 00 00 00 eb 96 e8 b1 13 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  210.831885][ T6661] RSP: 002b:00007fffa27c5778 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  210.831904][ T6661] RAX: 0000000000000000 RBX: 00007fa629037433 RCX: 00007fa628faa747
[  210.831917][ T6661] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffa27c5830
[  210.831928][ T6661] RBP: 00007fffa27c5830 R08: 00007fffa27c6830 R09: 00000000ffffffff
[  210.831940][ T6661] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffa27c68c0
[  210.831951][ T6661] R13: 00007fa629037433 R14: 00000000000335dd R15: 00007fffa27c6900
[  210.831983][ T6661]  </TASK>
[  210.850840][ T5638] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  210.851501][ T6661] F2FS-fs (loop6): Stopped filesystem due to reason: 3
[  212.217001][ T6841] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22
[  212.356648][ T6841] usb 2-1: USB disconnect, device number 3
[  212.746586][ T7582] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  212.765050][ T8374] netlink: 'syz.1.710': attribute type 2 has an invalid length.
[  212.765072][ T8374] netlink: 'syz.1.710': attribute type 2 has an invalid length.
[  213.222541][ T7582] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  213.402746][ T7582] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  213.757712][ T7582] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  214.387271][ T5639] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  214.403063][ T5639] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  214.419288][ T5639] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  214.421629][ T5639] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  214.423197][ T5639] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  214.742030][ T7582] bridge_slave_1: left allmulticast mode
[  214.742057][ T7582] bridge_slave_1: left promiscuous mode
[  214.742305][ T7582] bridge0: port 2(bridge_slave_1) entered disabled state
[  214.752870][ T7582] bridge_slave_0: left allmulticast mode
[  214.752896][ T7582] bridge_slave_0: left promiscuous mode
[  214.779715][ T7582] bridge0: port 1(bridge_slave_0) entered disabled state
[  215.261803][ T8386] loop7: detected capacity change from 0 to 40427
[  215.281022][ T7582] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  215.300954][ T8386] F2FS-fs (loop7): Invalid SB checksum offset: 0
[  215.300978][ T8386] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock
[  215.309600][ T8386] F2FS-fs (loop7): invalid crc value
[  215.334428][ T7582] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  215.345032][ T7582] bond0 (unregistering): Released all slaves
[  215.389592][ T7582] bond1 (unregistering): Released all slaves
[  215.603946][ T8416] mmap: syz.4.722 (8416) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  215.825036][ T8386] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  215.888109][ T8386] F2FS-fs (loop7): Try to recover 2th superblock, ret: 0
[  215.888134][ T8386] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  216.197735][ T8429] bridge_slave_0: left allmulticast mode
[  216.197761][ T8429] bridge_slave_0: left promiscuous mode
[  216.198089][ T8429] bridge0: port 1(bridge_slave_0) entered disabled state
[  216.380262][ T8394] rxe_eth0 speed is unknown, defaulting to 1000
[  216.545481][ T8409] f2fs_ckpt-7:7: attempt to access beyond end of device
[  216.545481][ T8409] loop7: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  216.571687][   T56] Bluetooth: hci1: command tx timeout
[  216.584061][ T8409] CPU: 1 UID: 0 PID: 8409 Comm: f2fs_ckpt-7:7 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  216.584091][ T8409] Tainted: [L]=SOFTLOCKUP
[  216.584097][ T8409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  216.584108][ T8409] Call Trace:
[  216.584115][ T8409]  <TASK>
[  216.584123][ T8409]  dump_stack_lvl+0xe8/0x150
[  216.584158][ T8409]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  216.584190][ T8409]  f2fs_write_end_bio+0x2c0/0x1310
[  216.584216][ T8409]  ? blkg_put+0x18d/0x240
[  216.584247][ T8409]  ? bio_endio+0x984/0xac0
[  216.584264][ T8409]  ? f2fs_write_end_io+0x258/0x300
[  216.584286][ T8409]  __submit_merged_bio+0x258/0x6a0
[  216.584310][ T8409]  ? rcu_is_watching+0x16/0xb0
[  216.584335][ T8409]  f2fs_submit_merged_write+0x2cc/0x610
[  216.584367][ T8409]  ? __pfx_f2fs_submit_merged_write+0x10/0x10
[  216.584404][ T8409]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[  216.584428][ T8409]  ? f2fs_cache_gang_lookup_tag+0x1a5/0x1c0
[  216.584463][ T8409]  f2fs_writeback_node_caches+0xf8c/0x1160
[  216.584512][ T8409]  ? __pfx_f2fs_writeback_node_caches+0x10/0x10
[  216.584569][ T8409]  ? f2fs_write_checkpoint+0xe25/0x24d0
[  216.584593][ T8409]  ? up_write+0x19d/0x4a0
[  216.584618][ T8409]  f2fs_write_checkpoint+0xe5b/0x24d0
[  216.584678][ T8409]  __checkpoint_and_complete_reqs+0x135/0x480
[  216.584699][ T8409]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  216.584727][ T8409]  ? __pfx___checkpoint_and_complete_reqs+0x10/0x10
[  216.584746][ T8409]  ? do_raw_spin_lock+0x12b/0x2f0
[  216.584787][ T8409]  ? schedule+0x90/0x2b0
[  216.584831][ T8409]  issue_checkpoint_thread+0xd5/0x270
[  216.584856][ T8409]  ? __pfx_issue_checkpoint_thread+0x10/0x10
[  216.584877][ T8409]  ? __pfx_autoremove_wake_function+0x10/0x10
[  216.584899][ T8409]  ? __kthread_parkme+0x71/0x1f0
[  216.584921][ T8409]  ? __kthread_parkme+0x199/0x1f0
[  216.584947][ T8409]  kthread+0x38b/0x480
[  216.584970][ T8409]  ? __pfx_issue_checkpoint_thread+0x10/0x10
[  216.584988][ T8409]  ? __pfx_kthread+0x10/0x10
[  216.585012][ T8409]  ret_from_fork+0x514/0xb70
[  216.585032][ T8409]  ? save_fpregs_to_fpstate+0x176/0x200
[  216.585060][ T8409]  ? __pfx_ret_from_fork+0x10/0x10
[  216.585082][ T8409]  ? __switch_to+0xc78/0x1410
[  216.585104][ T8409]  ? __pfx_kthread+0x10/0x10
[  216.585128][ T8409]  ret_from_fork_asm+0x1a/0x30
[  216.585168][ T8409]  </TASK>
[  216.682367][ T8409] F2FS-fs (loop7): Stopped filesystem due to reason: 3
[  217.302998][ T7582] hsr_slave_0: left promiscuous mode
[  217.303439][ T7582] hsr_slave_1: left promiscuous mode
[  217.304032][ T7582] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  217.304044][ T7582] batman_adv: batadv0: Removing interface: batadv_slave_0
[  217.310505][ T7582] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  217.310525][ T7582] batman_adv: batadv0: Removing interface: batadv_slave_1
[  217.361317][ T7582] veth1_macvtap: left promiscuous mode
[  217.361399][ T7582] veth0_macvtap: left promiscuous mode
[  217.361633][ T7582] veth1_vlan: left promiscuous mode
[  217.363282][ T7582] veth0_vlan: left promiscuous mode
[  218.071094][ T8455] FAULT_INJECTION: forcing a failure.
[  218.071094][ T8455] name failslab, interval 1, probability 0, space 0, times 0
[  218.071127][ T8455] CPU: 1 UID: 0 PID: 8455 Comm: syz.7.730 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  218.071155][ T8455] Tainted: [L]=SOFTLOCKUP
[  218.071162][ T8455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  218.071173][ T8455] Call Trace:
[  218.071179][ T8455]  <TASK>
[  218.071188][ T8455]  dump_stack_lvl+0xe8/0x150
[  218.071225][ T8455]  should_fail_ex+0x3eb/0x540
[  218.071253][ T8455]  should_failslab+0xa8/0x100
[  218.071279][ T8455]  __kmalloc_node_track_caller_noprof+0xf6/0x720
[  218.071314][ T8455]  ? __kernfs_new_node+0xa9/0x980
[  218.071342][ T8455]  ? __kernfs_new_node+0xa9/0x980
[  218.071380][ T8455]  kstrdup+0x42/0x100
[  218.071409][ T8455]  __kernfs_new_node+0xa9/0x980
[  218.071449][ T8455]  ? __pfx___kernfs_new_node+0x10/0x10
[  218.071477][ T8455]  ? kernfs_root+0x1c/0x230
[  218.071511][ T8455]  ? kernfs_root+0x1c/0x230
[  218.071537][ T8455]  ? kernfs_root+0x1c/0x230
[  218.071570][ T8455]  kernfs_create_dir_ns+0xfe/0x230
[  218.071595][ T8455]  cgroup_mkdir+0x3ee/0x14b0
[  218.071630][ T8455]  ? _raw_spin_unlock+0x28/0x50
[  218.071652][ T8455]  ? new_inode+0x14a/0x170
[  218.071671][ T8455]  ? __pfx_cgroup_mkdir+0x10/0x10
[  218.071692][ T8455]  kernfs_iop_mkdir+0x27d/0x560
[  218.071719][ T8455]  vfs_mkdir_no_perm+0x1a9/0x3b0
[  218.071749][ T8455]  vfs_mkdir+0x25f/0x2b0
[  218.071777][ T8455]  filename_mkdirat+0x284/0x550
[  218.071801][ T8455]  ? __might_fault+0xaf/0x130
[  218.071832][ T8455]  ? __pfx_filename_mkdirat+0x10/0x10
[  218.071861][ T8455]  ? do_getname+0x151/0x250
[  218.071893][ T8455]  __se_sys_mkdirat+0x35/0x150
[  218.071922][ T8455]  do_syscall_64+0x171/0x540
[  218.071947][ T8455]  ? trace_irq_disable+0x3b/0x140
[  218.071966][ T8455]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  218.071986][ T8455]  ? clear_bhb_loop+0x70/0xc0
[  218.072009][ T8455]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  218.072029][ T8455] RIP: 0033:0x00007fadc1da94d9
[  218.072048][ T8455] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  218.072065][ T8455] RSP: 002b:00007fadc2c8f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[  218.072086][ T8455] RAX: ffffffffffffffda RBX: 00007fadc2026090 RCX: 00007fadc1da94d9
[  218.072100][ T8455] RDX: 00000000000001ff RSI: 0000200000001840 RDI: ffffffffffffff9c
[  218.072113][ T8455] RBP: 00007fadc1e3804e R08: 0000000000000000 R09: 0000000000000000
[  218.072124][ T8455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  218.072134][ T8455] R13: 00007fadc2026128 R14: 00007fadc2026090 R15: 00007ffd35a61c28
[  218.072164][ T8455]  </TASK>
[  218.548859][ T2957] nvmet: connect request for invalid subsystem nqn.2014-08.org.nvm!
[  218.571583][ T8452] nvme nvme0: Connect Invalid Data Parameter, subsysnqn "nqn.2014-08.org.nvm"
[  218.647011][   T56] Bluetooth: hci1: command tx timeout
[  218.859404][ T8394] lo speed is unknown, defaulting to 1000
[  220.725261][   T56] Bluetooth: hci1: command tx timeout
[  220.997880][ T8495] kernel profiling enabled (shift: 1)
[  222.807349][   T56] Bluetooth: hci1: command tx timeout
[  222.870673][ T8501] loop7: detected capacity change from 0 to 33280
[  222.893018][ T8501] EXT4-fs (loop7): bad geometry: first data block 0 is beyond end of filesystem (0)
[  223.631516][   T34] audit: type=1107 audit(1794618727.735:115): pid=8507 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  223.633351][ T8508] netlink: 'syz.7.748': attribute type 10 has an invalid length.
[  223.633371][ T8508] netlink: 55 bytes leftover after parsing attributes in process `syz.7.748'.
[  224.466904][ T8514] loop1: detected capacity change from 0 to 32768
[  224.518824][ T8514]  loop1: p1 p3 < >
[  224.562549][ T8518] netlink: 24 bytes leftover after parsing attributes in process `syz.6.751'.
[  224.583851][ T5002]  loop1: p1 p3 < >
[  224.898742][ T8525] netlink: 8 bytes leftover after parsing attributes in process `syz.6.751'.
[  225.040587][ T7582] IPVS: stop unused estimator thread 0...
[  225.082819][ T8532] loop1: detected capacity change from 0 to 36864
[  225.112057][ T8532] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3835797286 (7671594572 ns) > initial count (4918772610 ns). Using initial count to start timer.
[  225.143099][ T8537] vhci_hcd vhci_hcd.0: pdev(7) rhport(2) sockfd(13)
[  225.143125][ T8537] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  225.162294][ T8530] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(6)
[  225.162319][ T8530] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  225.162389][ T8530] vhci_hcd vhci_hcd.0: Device attached
[  225.179576][ T8534] vhci_hcd vhci_hcd.0: pdev(7) rhport(1) sockfd(10)
[  225.179602][ T8534] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  225.179648][ T8534] vhci_hcd vhci_hcd.0: Device attached
[  225.220752][ T8537] vhci_hcd vhci_hcd.0: Device attached
[  225.227318][ T8536] vhci_hcd: connection closed
[  225.230342][   T56] Bluetooth: hci3: status 0xff
[  225.236801][ T8538] vhci_hcd: connection closed
[  225.243906][ T8533] vhci_hcd: connection closed
[  225.264432][ T2957] vhci_hcd vhci_hcd.7: stop threads
[  225.270241][ T2957] vhci_hcd vhci_hcd.7: release socket
[  225.270280][ T2957] vhci_hcd vhci_hcd.7: disconnect device
[  225.282100][ T2957] vhci_hcd vhci_hcd.7: stop threads
[  225.282117][ T2957] vhci_hcd vhci_hcd.7: release socket
[  225.282136][ T2957] vhci_hcd vhci_hcd.7: disconnect device
[  225.282476][ T2957] vhci_hcd vhci_hcd.7: stop threads
[  225.282490][ T2957] vhci_hcd vhci_hcd.7: release socket
[  225.282505][ T2957] vhci_hcd vhci_hcd.7: disconnect device
[  225.726117][ T8553] Set syz1 is full, maxelem 5 reached
[  225.974527][ T8394] bridge0: port 1(bridge_slave_0) entered blocking state
[  225.978722][ T8394] bridge0: port 1(bridge_slave_0) entered disabled state
[  225.978868][ T8394] bridge_slave_0: entered allmulticast mode
[  225.988772][ T8394] bridge_slave_0: entered promiscuous mode
[  225.999370][ T8394] bridge0: port 2(bridge_slave_1) entered blocking state
[  226.002738][ T8394] bridge0: port 2(bridge_slave_1) entered disabled state
[  226.002874][ T8394] bridge_slave_1: entered allmulticast mode
[  226.009104][ T8394] bridge_slave_1: entered promiscuous mode
[  226.148575][ T8572] ip_tables: iptables: counters copy to user failed while replacing table
[  226.236055][ T8394] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  226.351599][ T8394] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  226.513206][ T8394] team0: Port device team_slave_0 added
[  226.524053][ T8394] team0: Port device team_slave_1 added
[  226.661884][ T8394] batman_adv: batadv0: Adding interface: batadv_slave_0
[  226.661901][ T8394] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  226.661927][ T8394] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  226.674327][ T8394] batman_adv: batadv0: Adding interface: batadv_slave_1
[  226.674343][ T8394] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  226.674368][ T8394] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  226.950018][ T8394] hsr_slave_0: entered promiscuous mode
[  226.950978][ T8394] hsr_slave_1: entered promiscuous mode
[  227.123838][ T8590] TC_ACT_REPEAT abuse ?
[  227.336598][ T8595] tipc: Failed to remove unknown binding: 66,0,0/0:1085095864/1085095865
[  227.338559][ T8595] tipc: Failed to remove unknown binding: 66,0,0/0:1085095864/1085095865
[  227.495898][   T34] audit: type=1800 audit(1794618731.595:116): pid=8597 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.773" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=-22
[  228.073365][ T8608] loop4: detected capacity change from 0 to 33280
[  228.074280][ T8608] EXT4-fs: Ignoring removed i_version option
[  228.079454][ T8608] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  228.105857][ T8608] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 4294967295: comm syz.4.778: invalid block
[  228.105890][ T8608] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  228.110040][ T8608] EXT4-fs (loop4): Remounting filesystem read-only
[  228.114710][    C1] EXT4-fs (loop4): error count since last fsck: 1
[  228.114744][    C1] EXT4-fs (loop4): initial error at time 1794618732: ext4_get_branch:178: inode 11: block 4294967295
[  228.114777][    C1] EXT4-fs (loop4): last error at time 1794618732: ext4_get_branch:178: inode 11: block 4294967295
[  228.117800][ T8608] EXT4-fs (loop4): 2 truncates cleaned up
[  228.199853][ T8608] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  228.291402][ T8394] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  228.318709][ T8394] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  228.321986][ T8394] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  228.337407][ T8394] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  228.339553][ T8394] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  228.368952][ T8394] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  228.433782][ T8394] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  228.452913][ T8394] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  228.454837][ T8608] rxe_eth0 speed is unknown, defaulting to 1000
[  228.535689][ T6843] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  228.646947][ T8394] 8021q: adding VLAN 0 to HW filter on device bond0
[  228.684870][ T6843] usb 7-1: Using ep0 maxpacket: 16
[  228.685921][ T6843] usb 7-1: New USB device found: idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  228.687200][ T6843] usb 7-1: config 0 has an invalid interface number: 34 but max is 0
[  228.687224][ T6843] usb 7-1: config 0 has no interface number 0
[  228.687263][ T6843] usb 7-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  228.687287][ T6843] usb 7-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  228.697724][ T8394] 8021q: adding VLAN 0 to HW filter on device team0
[  228.698318][ T6843] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  228.698338][ T6843] usb 7-1: Product: syz
[  228.698352][ T6843] usb 7-1: Manufacturer: syz
[  228.698364][ T6843] usb 7-1: SerialNumber: syz
[  228.717959][ T7592] bridge0: port 1(bridge_slave_0) entered blocking state
[  228.718057][ T7592] bridge0: port 1(bridge_slave_0) entered forwarding state
[  228.754025][ T7592] bridge0: port 2(bridge_slave_1) entered blocking state
[  228.754112][ T7592] bridge0: port 2(bridge_slave_1) entered forwarding state
[  228.810944][ T6843] usb 7-1: config 0 descriptor??
[  228.821364][ T8614] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  228.821498][ T8614] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  228.843225][ T8624] netlink: 12 bytes leftover after parsing attributes in process `syz.1.781'.
[  228.978027][ T8624] bond1: entered promiscuous mode
[  228.993735][ T8624] 8021q: adding VLAN 0 to HW filter on device bond1
[  229.034639][ T8614] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  229.044182][ T8614] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  229.072135][ T8629] veth3: entered promiscuous mode
[  229.087189][ T8629] bond1: (slave veth3): Enslaving as an active interface with an up link
[  229.254608][ T6843] asix 7-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random
[  229.362772][ T8608] lo speed is unknown, defaulting to 1000
[  229.961923][ T8645] Bluetooth: MGMT ver 1.23
[  230.021020][ T8648] netlink: 24 bytes leftover after parsing attributes in process `syz.1.787'.
[  230.190290][ T8648] netlink: 4 bytes leftover after parsing attributes in process `syz.1.787'.
[  230.412588][ T8394] 8021q: adding VLAN 0 to HW filter on device batadv0
[  230.515113][ T6843] asix 7-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  230.515145][ T6843] asix 7-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9
[  230.515399][ T6843] asix 7-1:0.34: probe with driver asix failed with error -71
[  230.589693][ T6843] usb 7-1: USB disconnect, device number 3
[  230.855449][ T8664] nvme_fabrics: missing parameter 'transport=%s'
[  230.855466][ T8664] nvme_fabrics: missing parameter 'nqn=%s'
[  231.002603][ T8670] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  231.200081][ T5642] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  231.415880][ T8681] loop1: detected capacity change from 0 to 2048
[  231.447528][ T8394] veth0_vlan: entered promiscuous mode
[  231.451832][ T8681] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  231.488877][ T8394] veth1_vlan: entered promiscuous mode
[  231.556342][ T8394] veth0_macvtap: entered promiscuous mode
[  231.560740][ T8394] veth1_macvtap: entered promiscuous mode
[  231.565876][ T8681] UDF-fs: error (device loop1): udf_read_inode: (ino 1345) failed !bh
[  231.574573][ T8681] UDF-fs: error (device loop1): udf_read_inode: (ino 1345) failed !bh
[  231.655282][ T8394] batman_adv: batadv0: Interface activated: batadv_slave_0
[  231.677753][ T8394] batman_adv: batadv0: Interface activated: batadv_slave_1
[  231.775860][ T7582] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  231.776001][ T7582] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  231.776033][ T7582] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  231.776064][ T7582] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  231.937215][ T7570] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  231.937244][ T7570] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  232.013270][ T7582] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  232.013290][ T7582] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  232.084746][ T8696] TC_ACT_REPEAT abuse ?
[  232.864983][ T6823] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  233.015508][ T6823] usb 2-1: New USB device found: idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  233.016781][ T6823] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  233.016827][ T6823] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  233.016851][ T6823] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  233.016889][ T6823] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  233.109930][ T6823] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  233.122518][ T6823] usb 2-1: invalid MIDI out EP 0
[  233.845069][   T56] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  235.830950][ T6823] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22
[  235.848338][ T8734] xt_hashlimit: size too large, truncated to 1048576
[  235.850937][ T6823] usb 2-1: USB disconnect, device number 4
[  235.916111][ T8740] netlink: 45349 bytes leftover after parsing attributes in process `syz.7.811'.
[  235.917723][ T8740] 0ªX¹¦Dö»: renamed from gretap0 (while UP)
[  235.921956][ T8740] 0ªX¹¦Dö»: entered allmulticast mode
[  236.162820][ T8747] FAULT_INJECTION: forcing a failure.
[  236.162820][ T8747] name failslab, interval 1, probability 0, space 0, times 0
[  236.162856][ T8747] CPU: 0 UID: 0 PID: 8747 Comm: syz.1.815 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  236.162883][ T8747] Tainted: [L]=SOFTLOCKUP
[  236.162890][ T8747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  236.162902][ T8747] Call Trace:
[  236.162910][ T8747]  <TASK>
[  236.162918][ T8747]  dump_stack_lvl+0xe8/0x150
[  236.162955][ T8747]  should_fail_ex+0x3eb/0x540
[  236.163090][ T8747]  should_failslab+0xa8/0x100
[  236.163118][ T8747]  __kvmalloc_node_noprof+0x171/0x820
[  236.163141][ T8747]  ? __kvmalloc_node_noprof+0x340/0x820
[  236.163161][ T8747]  ? bpf_compute_loops+0xf6/0x2e00
[  236.163188][ T8747]  ? bpf_compute_loops+0xf6/0x2e00
[  236.163226][ T8747]  bpf_compute_loops+0xf6/0x2e00
[  236.163276][ T8747]  bpf_check+0x2c58/0x34f0
[  236.163319][ T8747]  ? ktime_get_with_offset+0x93/0x2d0
[  236.163351][ T8747]  ? __pfx_bpf_check+0x10/0x10
[  236.163380][ T8747]  ? bpf_obj_name_cpy+0x194/0x1e0
[  236.163411][ T8747]  bpf_prog_load+0x14da/0x1c60
[  236.163446][ T8747]  ? __pfx_bpf_prog_load+0x10/0x10
[  236.163484][ T8747]  ? __might_fault+0xaf/0x130
[  236.163516][ T8747]  __sys_bpf+0xdeb/0xe70
[  236.163546][ T8747]  ? __pfx___sys_bpf+0x10/0x10
[  236.163571][ T8747]  ? do_futex+0x3e7/0x4e0
[  236.163622][ T8747]  ? rcu_is_watching+0x16/0xb0
[  236.163648][ T8747]  __x64_sys_bpf+0xba/0xd0
[  236.163671][ T8747]  do_syscall_64+0x171/0x540
[  236.163847][ T8747]  ? trace_irq_disable+0x3b/0x140
[  236.163865][ T8747]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  236.163884][ T8747]  ? clear_bhb_loop+0x70/0xc0
[  236.163906][ T8747]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  236.163924][ T8747] RIP: 0033:0x00007f966f5a94d9
[  236.163944][ T8747] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  236.163959][ T8747] RSP: 002b:00007f967054f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  236.163977][ T8747] RAX: ffffffffffffffda RBX: 00007f966f825fa0 RCX: 00007f966f5a94d9
[  236.163989][ T8747] RDX: 0000000000000094 RSI: 00002000000005c0 RDI: 0000000000000005
[  236.163999][ T8747] RBP: 00007f966f63804e R08: 0000000000000000 R09: 0000000000000000
[  236.164009][ T8747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  236.164020][ T8747] R13: 00007f966f826038 R14: 00007f966f825fa0 R15: 00007ffeb8347528
[  236.164049][ T8747]  </TASK>
[  236.736433][ T8758] loop1: detected capacity change from 0 to 64
[  236.783541][ T8744] loop4: detected capacity change from 0 to 32768
[  236.924503][ T8764] FAULT_INJECTION: forcing a failure.
[  236.924503][ T8764] name fail_futex, interval 1, probability 0, space 0, times 1
[  236.924541][ T8764] CPU: 0 UID: 0 PID: 8764 Comm: syz.6.822 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  236.924568][ T8764] Tainted: [L]=SOFTLOCKUP
[  236.924576][ T8764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  236.924587][ T8764] Call Trace:
[  236.924595][ T8764]  <TASK>
[  236.924603][ T8764]  dump_stack_lvl+0xe8/0x150
[  236.924639][ T8764]  should_fail_ex+0x3eb/0x540
[  236.924667][ T8764]  get_futex_key+0x1ab/0x1410
[  236.924685][ T8764]  ? __pfx_futex_wake_mark+0x10/0x10
[  236.924717][ T8764]  ? __pfx_get_futex_key+0x10/0x10
[  236.924744][ T8764]  futex_wake+0x119/0x5f0
[  236.924773][ T8764]  ? __pfx_futex_wake+0x10/0x10
[  236.924805][ T8764]  ? fput+0xa0/0xd0
[  236.924913][ T8764]  ? __sys_sendmmsg+0x4ab/0x4e0
[  236.924984][ T8764]  do_futex+0x458/0x4e0
[  236.925012][ T8764]  ? __pfx_do_futex+0x10/0x10
[  236.925043][ T8764]  __se_sys_futex+0x3a8/0x450
[  236.925072][ T8764]  ? __pfx___se_sys_futex+0x10/0x10
[  236.925094][ T8764]  ? rcu_is_watching+0x16/0xb0
[  236.925119][ T8764]  ? __x64_sys_futex+0x21/0xf0
[  236.925144][ T8764]  do_syscall_64+0x171/0x540
[  236.925169][ T8764]  ? trace_irq_disable+0x3b/0x140
[  236.925187][ T8764]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  236.925206][ T8764]  ? clear_bhb_loop+0x70/0xc0
[  236.925229][ T8764]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  236.925248][ T8764] RIP: 0033:0x00007fa628fa94d9
[  236.925267][ T8764] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  236.925284][ T8764] RSP: 002b:00007fa629ea60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  236.925304][ T8764] RAX: ffffffffffffffda RBX: 00007fa629225fa8 RCX: 00007fa628fa94d9
[  236.925317][ T8764] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fa629225fac
[  236.925329][ T8764] RBP: 00007fa629225fa0 R08: 3fffffffffffffff R09: 0000000000000000
[  236.925342][ T8764] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[  236.925353][ T8764] R13: 00007fa629226038 R14: 00007fffa27c6420 R15: 00007fffa27c6508
[  236.925391][ T8764]  </TASK>
[  237.428324][ T8782] netlink: 'syz.7.829': attribute type 4 has an invalid length.
[  237.439975][ T8780] FAULT_INJECTION: forcing a failure.
[  237.439975][ T8780] name failslab, interval 1, probability 0, space 0, times 0
[  237.440007][ T8780] CPU: 0 UID: 60928 PID: 8780 Comm: syz.6.828 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  237.440034][ T8780] Tainted: [L]=SOFTLOCKUP
[  237.440041][ T8780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  237.440053][ T8780] Call Trace:
[  237.440061][ T8780]  <TASK>
[  237.440069][ T8780]  dump_stack_lvl+0xe8/0x150
[  237.440107][ T8780]  should_fail_ex+0x3eb/0x540
[  237.440134][ T8780]  should_failslab+0xa8/0x100
[  237.440171][ T8780]  __kmalloc_cache_noprof+0x9e/0x600
[  237.440201][ T8780]  ? __kmalloc_cache_noprof+0x148/0x600
[  237.440229][ T8780]  ? assoc_array_insert+0x417/0x2f60
[  237.440350][ T8780]  ? assoc_array_insert+0x417/0x2f60
[  237.440380][ T8780]  assoc_array_insert+0x417/0x2f60
[  237.440414][ T8780]  ? __pfx___mutex_lock+0x10/0x10
[  237.440536][ T8780]  __key_link_begin+0xd6/0x1f0
[  237.440587][ T8780]  key_link+0xdd/0x360
[  237.440613][ T8780]  look_up_user_keyrings+0x4d4/0x670
[  237.440646][ T8780]  ? __pfx_look_up_user_keyrings+0x10/0x10
[  237.440675][ T8780]  ? __pfx___key_instantiate_and_link+0x10/0x10
[  237.440738][ T8780]  call_sbin_request_key+0x21b/0xbf0
[  237.440765][ T8780]  ? request_key_auth_free_preparse+0x9/0x10
[  237.440804][ T8780]  ? __pfx_call_sbin_request_key+0x10/0x10
[  237.440829][ T8780]  ? do_raw_spin_unlock+0xf5/0x200
[  237.440892][ T8780]  ? __pfx_request_key_auth_new+0x10/0x10
[  237.440937][ T8780]  request_key_and_link+0xf31/0x15c0
[  237.440975][ T8780]  ? __pfx_request_key_and_link+0x10/0x10
[  237.441014][ T8780]  ? __pfx_key_default_cmp+0x10/0x10
[  237.441045][ T8780]  ? __pfx_keyring_search_iterator+0x10/0x10
[  237.441087][ T8780]  ? down_read+0x2b9/0x320
[  237.441114][ T8780]  ? _copy_from_user+0x94/0xb0
[  237.441173][ T8780]  __se_sys_request_key+0x29a/0x350
[  237.441201][ T8780]  ? __pfx___se_sys_request_key+0x10/0x10
[  237.441241][ T8780]  do_syscall_64+0x171/0x540
[  237.441267][ T8780]  ? trace_irq_disable+0x3b/0x140
[  237.441285][ T8780]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  237.441305][ T8780]  ? clear_bhb_loop+0x70/0xc0
[  237.441330][ T8780]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  237.441349][ T8780] RIP: 0033:0x00007fa628fa94d9
[  237.441369][ T8780] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  237.441386][ T8780] RSP: 002b:00007fa629ea6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9
[  237.441407][ T8780] RAX: ffffffffffffffda RBX: 00007fa629225fa0 RCX: 00007fa628fa94d9
[  237.441421][ T8780] RDX: 0000200000000240 RSI: 0000200000000200 RDI: 00002000000001c0
[  237.441433][ T8780] RBP: 00007fa62903804e R08: 0000000000000000 R09: 0000000000000000
[  237.441445][ T8780] R10: fffffffffffffffe R11: 0000000000000246 R12: 0000000000000000
[  237.441458][ T8780] R13: 00007fa629226038 R14: 00007fa629225fa0 R15: 00007fffa27c6508
[  237.441493][ T8780]  </TASK>
[  237.502084][ T8783] netlink: 'syz.7.829': attribute type 4 has an invalid length.
[  238.136814][ T8799] overlayfs: upper fs does not support file handles, falling back to index=off.
[  238.449998][ T8805] nvmet_tcp: address family 255 not supported
[  238.944833][ T6844] usb 9-1: new full-speed USB device number 2 using dummy_hcd
[  239.130617][ T6844] usb 9-1: New USB device found: idVendor=1964, idProduct=0001, bcdDevice=d4.15
[  239.373613][ T6844] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  239.373643][ T6844] usb 9-1: Product: syz
[  239.373669][ T6844] usb 9-1: Manufacturer: syz
[  239.373681][ T6844] usb 9-1: SerialNumber: syz
[  239.865479][ T6844] usb 9-1: config 0 descriptor??
[  240.294459][ T6844] RobotFuzz Open Source InterFace, OSIF 9-1:0.0: version d4.15 found at bus 009 address 002
[  241.127102][ T8836] loop1: detected capacity change from 0 to 32768
[  241.352784][ T8847] Bluetooth: ISO socket layer initialized
[  241.471812][ T8836] ocfs2: Slot 0 on device (7,1) was already allocated to this node!
[  241.539480][ T8836] JBD2: Ignoring recovery information on journal
[  241.661417][ T8836] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  241.789027][ T8854] 9pnet: p9_errstr2errno: server reported unknown error 0x00000
[  241.814993][ T6824] usb 9-1: USB disconnect, device number 2
[  242.020350][ T8867] (syz.1.848,8867,1):ocfs2_check_set_options:1252 ERROR: Invalid heartbeat mount options
[  242.433299][ T5652] ocfs2: Unmounting device (7,1) on (node local)
[  242.584765][ T6809] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  242.744780][ T6809] usb 8-1: Using ep0 maxpacket: 32
[  242.745731][ T6809] usb 8-1: New USB device found: idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  242.747133][ T6809] usb 8-1: config 0 has an invalid interface number: 184 but max is 0
[  242.747157][ T6809] usb 8-1: config 0 has no interface number 0
[  242.747196][ T6809] usb 8-1: config 0 interface 184 has no altsetting 0
[  242.750663][ T6809] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  242.750686][ T6809] usb 8-1: Product: syz
[  242.750701][ T6809] usb 8-1: Manufacturer: syz
[  242.750714][ T6809] usb 8-1: SerialNumber: syz
[  242.817313][ T6809] usb 8-1: config 0 descriptor??
[  243.082635][ T8887] tipc: Failed to remove unknown binding: 66,0,0/0:4039274362/4039274363
[  243.083227][ T8887] tipc: Failed to remove unknown binding: 66,0,0/0:4039274362/4039274363
[  243.457213][ T6809] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[  243.457245][ T6809] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  244.301202][ T8912] input: syz0 as /devices/virtual/input/input8
[  244.682393][ T6809] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  244.682423][ T6809] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[  244.682442][ T6809] smsc75xx 8-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  244.682722][ T6809] smsc75xx 8-1:0.184: probe with driver smsc75xx failed with error -71
[  244.687862][ T8910] loop8: detected capacity change from 0 to 32768
[  244.753727][ T6809] usb 8-1: USB disconnect, device number 4
[  244.755168][ T8910] BTRFS warning: v1 space cache is deprecated, falling back to no space cache
[  244.774368][ T8910] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.873 (8910)
[  244.819706][ T8910] BTRFS info (device loop8): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  244.819843][ T8910] BTRFS info (device loop8): using sha256 checksum algorithm
[  244.942354][ T8910] BTRFS info (device loop8): rebuilding free space tree
[  245.003252][ T8935] netlink: 14 bytes leftover after parsing attributes in process `syz.4.876'.
[  245.074095][ T8910] BTRFS info (device loop8): disabling free space tree
[  245.074184][ T8910] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  245.074206][ T8910] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  245.133926][ T8910] BTRFS info (device loop8): enabling ssd optimizations
[  245.133976][ T8910] BTRFS info (device loop8): force clearing of disk cache
[  245.133993][ T8910] BTRFS info (device loop8): enabling auto defrag
[  245.134055][ T8910] BTRFS info (device loop8): max_inline set to 0
[  245.382808][ T8394] BTRFS info (device loop8): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  245.613021][ T8952] tc mirred: Loop (syzkaller1:ingress --> syzkaller1:ingress)
[  245.613110][ T8952] 0: reclassify loop, rule prio 0, protocol 03
[  246.115008][ T6843] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  246.219969][ T6843] hid-generic 0000:0000:0000.0001: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  247.110067][ T8956] loop4: detected capacity change from 0 to 40427
[  247.143890][ T8956] F2FS-fs (loop4): build fault injection rate: 174
[  247.143924][ T8956] F2FS-fs (loop4): build fault injection type: 0x3bfe8c
[  247.182518][ T8956] F2FS-fs (loop4): invalid crc value
[  247.526388][ T8956] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  247.569759][ T8956] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  247.868333][ T8956] F2FS-fs (loop4): inject inconsistent footer in f2fs_sanity_check_node_footer of __get_node_cache+0x4ef/0x8f0
[  247.868454][ T8956] F2FS-fs (loop4): inconsistent node block, node_type:1, nid:30, node_footer[nid:30,ino:30,ofs:0,cpver:0,blkaddr:0]
[  248.020249][ T5642] syz-executor: attempt to access beyond end of device
[  248.020249][ T5642] loop4: rw=2049, sector=45096, nr_sectors = 48 limit=40427
[  248.054017][ T5642] CPU: 0 UID: 0 PID: 5642 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  248.054048][ T5642] Tainted: [L]=SOFTLOCKUP
[  248.054055][ T5642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  248.054064][ T5642] Call Trace:
[  248.054072][ T5642]  <TASK>
[  248.054079][ T5642]  dump_stack_lvl+0xe8/0x150
[  248.054113][ T5642]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  248.054214][ T5642]  f2fs_write_end_bio+0xf7d/0x1310
[  248.054250][ T5642]  __submit_merged_bio+0x258/0x6a0
[  248.054309][ T5642]  ? rcu_is_watching+0x16/0xb0
[  248.054334][ T5642]  f2fs_submit_merged_write_cond+0x1ef/0x590
[  248.054361][ T5642]  ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10
[  248.054407][ T5642]  __f2fs_write_data_pages+0x2abe/0x6dd0
[  248.054432][ T5642]  ? __lock_acquire+0x747/0x2de0
[  248.054477][ T5642]  ? lock_acquire+0x115/0x350
[  248.054503][ T5642]  ? __pfx___f2fs_write_data_pages+0x10/0x10
[  248.054563][ T5642]  ? rcu_is_watching+0x16/0xb0
[  248.054580][ T5642]  ? rcu_is_watching+0x16/0xb0
[  248.054593][ T5642]  ? __kasan_check_byte+0x12/0x40
[  248.054623][ T5642]  ? is_bpf_text_address+0x292/0x2b0
[  248.054641][ T5642]  ? is_bpf_text_address+0x26/0x2b0
[  248.054664][ T5642]  ? kernel_text_address+0xa5/0xe0
[  248.054686][ T5642]  ? __kernel_text_address+0xd/0x30
[  248.054708][ T5642]  ? unwind_get_return_address+0x4d/0x90
[  248.054731][ T5642]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  248.054752][ T5642]  ? arch_stack_walk+0xfb/0x150
[  248.054781][ T5642]  ? stack_trace_save+0xa9/0x100
[  248.054801][ T5642]  ? __pfx_stack_trace_save+0x10/0x10
[  248.054823][ T5642]  ? check_path+0x21/0x40
[  248.054840][ T5642]  ? add_lock_to_list+0xc7/0x100
[  248.054856][ T5642]  ? lockdep_unlock+0x5c/0xd0
[  248.054872][ T5642]  ? __lock_acquire+0x1511/0x2de0
[  248.054913][ T5642]  ? do_raw_spin_lock+0x12b/0x2f0
[  248.054938][ T5642]  ? do_raw_spin_unlock+0xf5/0x200
[  248.054955][ T5642]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  248.054971][ T5642]  do_writepages+0x338/0x560
[  248.054999][ T5642]  ? do_raw_spin_unlock+0xf5/0x200
[  248.055018][ T5642]  filemap_fdatawrite+0x1e9/0x2f0
[  248.055041][ T5642]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  248.055097][ T5642]  ? do_raw_spin_unlock+0xf5/0x200
[  248.055117][ T5642]  f2fs_sync_dirty_inodes+0x471/0x970
[  248.055145][ T5642]  f2fs_write_checkpoint+0x867/0x24d0
[  248.055189][ T5642]  kill_f2fs_super+0x2df/0x700
[  248.055247][ T5642]  ? rcu_do_enqueue+0x60d/0x870
[  248.055266][ T5642]  ? lockdep_hardirqs_on+0x7b/0x110
[  248.055286][ T5642]  ? __pfx_kill_f2fs_super+0x10/0x10
[  248.055321][ T5642]  ? __pfx_call_rcu+0x10/0x10
[  248.055341][ T5642]  ? shrinker_free+0x2a7/0x3b0
[  248.055363][ T5642]  deactivate_locked_super+0xbe/0x110
[  248.055380][ T5642]  cleanup_mnt+0x204/0x2a0
[  248.055450][ T5642]  task_work_run+0x1d9/0x260
[  248.055471][ T5642]  ? __pfx_task_work_run+0x10/0x10
[  248.055498][ T5642]  exit_to_user_mode_loop+0x204/0x770
[  248.055519][ T5642]  ? rcu_is_watching+0x16/0xb0
[  248.055537][ T5642]  do_syscall_64+0x336/0x540
[  248.055562][ T5642]  ? trace_irq_disable+0x3b/0x140
[  248.055576][ T5642]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  248.055591][ T5642]  ? clear_bhb_loop+0x70/0xc0
[  248.055609][ T5642]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  248.055624][ T5642] RIP: 0033:0x00007fb9c03aa747
[  248.055640][ T5642] Code: a2 c7 05 ac 2f 25 00 00 00 00 00 eb 96 e8 b1 13 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  248.055653][ T5642] RSP: 002b:00007ffcdbb5abb8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  248.055670][ T5642] RAX: 0000000000000000 RBX: 00007fb9c0437433 RCX: 00007fb9c03aa747
[  248.055680][ T5642] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcdbb5ac70
[  248.055690][ T5642] RBP: 00007ffcdbb5ac70 R08: 00007ffcdbb5bc70 R09: 00000000ffffffff
[  248.055699][ T5642] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcdbb5bd00
[  248.055709][ T5642] R13: 00007fb9c0437433 R14: 000000000003c878 R15: 00007ffcdbb5bd40
[  248.055733][ T5642]  </TASK>
[  248.137837][ T5642] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  248.137983][ T5642] CPU: 1 UID: 0 PID: 5642 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  248.138010][ T5642] Tainted: [L]=SOFTLOCKUP
[  248.138018][ T5642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  248.138028][ T5642] Call Trace:
[  248.138036][ T5642]  <TASK>
[  248.138043][ T5642]  dump_stack_lvl+0xe8/0x150
[  248.138076][ T5642]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  248.138108][ T5642]  f2fs_write_end_bio+0xf7d/0x1310
[  248.138148][ T5642]  __submit_merged_bio+0x258/0x6a0
[  248.138171][ T5642]  ? rcu_is_watching+0x16/0xb0
[  248.138196][ T5642]  f2fs_submit_merged_write_cond+0x1ef/0x590
[  248.138225][ T5642]  ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10
[  248.138277][ T5642]  __f2fs_write_data_pages+0x2abe/0x6dd0
[  248.138304][ T5642]  ? __lock_acquire+0x747/0x2de0
[  248.138359][ T5642]  ? lock_acquire+0x115/0x350
[  248.138393][ T5642]  ? __pfx___f2fs_write_data_pages+0x10/0x10
[  248.138465][ T5642]  ? rcu_is_watching+0x16/0xb0
[  248.138487][ T5642]  ? rcu_is_watching+0x16/0xb0
[  248.138502][ T5642]  ? __kasan_check_byte+0x12/0x40
[  248.138543][ T5642]  ? is_bpf_text_address+0x292/0x2b0
[  248.138564][ T5642]  ? is_bpf_text_address+0x26/0x2b0
[  248.138607][ T5642]  ? kernel_text_address+0xa5/0xe0
[  248.138633][ T5642]  ? __kernel_text_address+0xd/0x30
[  248.138655][ T5642]  ? unwind_get_return_address+0x4d/0x90
[  248.138679][ T5642]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  248.138706][ T5642]  ? arch_stack_walk+0xfb/0x150
[  248.138746][ T5642]  ? stack_trace_save+0xa9/0x100
[  248.138773][ T5642]  ? __pfx_stack_trace_save+0x10/0x10
[  248.138802][ T5642]  ? check_path+0x21/0x40
[  248.138825][ T5642]  ? add_lock_to_list+0xc7/0x100
[  248.138845][ T5642]  ? lockdep_unlock+0x5c/0xd0
[  248.138865][ T5642]  ? __lock_acquire+0x1511/0x2de0
[  248.138921][ T5642]  ? do_raw_spin_lock+0x12b/0x2f0
[  248.138955][ T5642]  ? do_raw_spin_unlock+0xf5/0x200
[  248.138975][ T5642]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  248.138996][ T5642]  do_writepages+0x338/0x560
[  248.139033][ T5642]  ? do_raw_spin_unlock+0xf5/0x200
[  248.139059][ T5642]  filemap_fdatawrite+0x1e9/0x2f0
[  248.139086][ T5642]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  248.139163][ T5642]  ? do_raw_spin_unlock+0xf5/0x200
[  248.139189][ T5642]  f2fs_sync_dirty_inodes+0x471/0x970
[  248.139226][ T5642]  f2fs_write_checkpoint+0x867/0x24d0
[  248.139285][ T5642]  kill_f2fs_super+0x2df/0x700
[  248.139318][ T5642]  ? rcu_do_enqueue+0x60d/0x870
[  248.139342][ T5642]  ? lockdep_hardirqs_on+0x7b/0x110
[  248.139367][ T5642]  ? __pfx_kill_f2fs_super+0x10/0x10
[  248.139412][ T5642]  ? __pfx_call_rcu+0x10/0x10
[  248.139438][ T5642]  ? shrinker_free+0x2a7/0x3b0
[  248.139465][ T5642]  deactivate_locked_super+0xbe/0x110
[  248.139488][ T5642]  cleanup_mnt+0x204/0x2a0
[  248.139515][ T5642]  task_work_run+0x1d9/0x260
[  248.139542][ T5642]  ? __pfx_task_work_run+0x10/0x10
[  248.139576][ T5642]  exit_to_user_mode_loop+0x204/0x770
[  248.139608][ T5642]  ? rcu_is_watching+0x16/0xb0
[  248.139631][ T5642]  do_syscall_64+0x336/0x540
[  248.139654][ T5642]  ? trace_irq_disable+0x3b/0x140
[  248.139670][ T5642]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  248.139688][ T5642]  ? clear_bhb_loop+0x70/0xc0
[  248.139711][ T5642]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  248.139729][ T5642] RIP: 0033:0x00007fb9c03aa747
[  248.139749][ T5642] Code: a2 c7 05 ac 2f 25 00 00 00 00 00 eb 96 e8 b1 13 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  248.139764][ T5642] RSP: 002b:00007ffcdbb5abb8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  248.139783][ T5642] RAX: 0000000000000000 RBX: 00007fb9c0437433 RCX: 00007fb9c03aa747
[  248.139795][ T5642] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcdbb5ac70
[  248.139806][ T5642] RBP: 00007ffcdbb5ac70 R08: 00007ffcdbb5bc70 R09: 00000000ffffffff
[  248.139819][ T5642] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcdbb5bd00
[  248.139830][ T5642] R13: 00007fb9c0437433 R14: 000000000003c878 R15: 00007ffcdbb5bd40
[  248.139864][ T5642]  </TASK>
[  248.162303][ T5642] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  248.162405][ T5642] CPU: 1 UID: 0 PID: 5642 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  248.162431][ T5642] Tainted: [L]=SOFTLOCKUP
[  248.162437][ T5642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  248.162447][ T5642] Call Trace:
[  248.162454][ T5642]  <TASK>
[  248.162462][ T5642]  dump_stack_lvl+0xe8/0x150
[  248.162494][ T5642]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  248.162524][ T5642]  f2fs_write_end_bio+0xf7d/0x1310
[  248.162562][ T5642]  __submit_merged_bio+0x258/0x6a0
[  248.162591][ T5642]  ? rcu_is_watching+0x16/0xb0
[  248.162614][ T5642]  f2fs_submit_merged_write_cond+0x1ef/0x590
[  248.162641][ T5642]  ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10
[  248.162689][ T5642]  __f2fs_write_data_pages+0x2abe/0x6dd0
[  248.162714][ T5642]  ? __lock_acquire+0x747/0x2de0
[  248.162765][ T5642]  ? lock_acquire+0x115/0x350
[  248.162797][ T5642]  ? __pfx___f2fs_write_data_pages+0x10/0x10
[  248.162863][ T5642]  ? rcu_is_watching+0x16/0xb0
[  248.162884][ T5642]  ? rcu_is_watching+0x16/0xb0
[  248.162899][ T5642]  ? __kasan_check_byte+0x12/0x40
[  248.162936][ T5642]  ? is_bpf_text_address+0x292/0x2b0
[  248.162957][ T5642]  ? is_bpf_text_address+0x26/0x2b0
[  248.162980][ T5642]  ? kernel_text_address+0xa5/0xe0
[  248.163004][ T5642]  ? __kernel_text_address+0xd/0x30
[  248.163025][ T5642]  ? unwind_get_return_address+0x4d/0x90
[  248.163049][ T5642]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  248.163074][ T5642]  ? arch_stack_walk+0xfb/0x150
[  248.163109][ T5642]  ? stack_trace_save+0xa9/0x100
[  248.163134][ T5642]  ? __pfx_stack_trace_save+0x10/0x10
[  248.163162][ T5642]  ? check_path+0x21/0x40
[  248.163184][ T5642]  ? add_lock_to_list+0xc7/0x100
[  248.163203][ T5642]  ? lockdep_unlock+0x5c/0xd0
[  248.163221][ T5642]  ? __lock_acquire+0x1511/0x2de0
[  248.163273][ T5642]  ? do_raw_spin_lock+0x12b/0x2f0
[  248.163304][ T5642]  ? do_raw_spin_unlock+0xf5/0x200
[  248.163324][ T5642]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  248.163343][ T5642]  do_writepages+0x338/0x560
[  248.163377][ T5642]  ? do_raw_spin_unlock+0xf5/0x200
[  248.163401][ T5642]  filemap_fdatawrite+0x1e9/0x2f0
[  248.163428][ T5642]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  248.163495][ T5642]  ? do_raw_spin_unlock+0xf5/0x200
[  248.163519][ T5642]  f2fs_sync_dirty_inodes+0x471/0x970
[  248.163551][ T5642]  f2fs_write_checkpoint+0x867/0x24d0
[  248.163606][ T5642]  kill_f2fs_super+0x2df/0x700
[  248.163636][ T5642]  ? rcu_do_enqueue+0x60d/0x870
[  248.163658][ T5642]  ? lockdep_hardirqs_on+0x7b/0x110
[  248.163682][ T5642]  ? __pfx_kill_f2fs_super+0x10/0x10
[  248.163725][ T5642]  ? __pfx_call_rcu+0x10/0x10
[  248.163749][ T5642]  ? shrinker_free+0x2a7/0x3b0
[  248.163776][ T5642]  deactivate_locked_super+0xbe/0x110
[  248.163797][ T5642]  cleanup_mnt+0x204/0x2a0
[  248.163824][ T5642]  task_work_run+0x1d9/0x260
[  248.163850][ T5642]  ? __pfx_task_work_run+0x10/0x10
[  248.163883][ T5642]  exit_to_user_mode_loop+0x204/0x770
[  248.163908][ T5642]  ? rcu_is_watching+0x16/0xb0
[  248.163931][ T5642]  do_syscall_64+0x336/0x540
[  248.163953][ T5642]  ? trace_irq_disable+0x3b/0x140
[  248.163969][ T5642]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  248.163987][ T5642]  ? clear_bhb_loop+0x70/0xc0
[  248.164009][ T5642]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  248.164027][ T5642] RIP: 0033:0x00007fb9c03aa747
[  248.164046][ T5642] Code: a2 c7 05 ac 2f 25 00 00 00 00 00 eb 96 e8 b1 13 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  248.164060][ T5642] RSP: 002b:00007ffcdbb5abb8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  248.164078][ T5642] RAX: 0000000000000000 RBX: 00007fb9c0437433 RCX: 00007fb9c03aa747
[  248.164091][ T5642] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcdbb5ac70
[  248.164102][ T5642] RBP: 00007ffcdbb5ac70 R08: 00007ffcdbb5bc70 R09: 00000000ffffffff
[  248.164115][ T5642] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcdbb5bd00
[  248.164126][ T5642] R13: 00007fb9c0437433 R14: 000000000003c878 R15: 00007ffcdbb5bd40
[  248.164157][ T5642]  </TASK>
[  248.183121][ T5642] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  248.183167][ T5642] CPU: 1 UID: 0 PID: 5642 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  248.183190][ T5642] Tainted: [L]=SOFTLOCKUP
[  248.183196][ T5642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  248.183207][ T5642] Call Trace:
[  248.183215][ T5642]  <TASK>
[  248.183222][ T5642]  dump_stack_lvl+0xe8/0x150
[  248.183254][ T5642]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  248.183285][ T5642]  f2fs_write_end_bio+0xf7d/0x1310
[  248.183321][ T5642]  __submit_merged_bio+0x258/0x6a0
[  248.183344][ T5642]  ? rcu_is_watching+0x16/0xb0
[  248.183368][ T5642]  f2fs_submit_merged_write_cond+0x1ef/0x590
[  248.183395][ T5642]  ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10
[  248.183442][ T5642]  __f2fs_write_data_pages+0x2abe/0x6dd0
[  248.183469][ T5642]  ? __lock_acquire+0x747/0x2de0
[  248.183520][ T5642]  ? lock_acquire+0x115/0x350
[  248.183553][ T5642]  ? __pfx___f2fs_write_data_pages+0x10/0x10
[  248.183624][ T5642]  ? rcu_is_watching+0x16/0xb0
[  248.183645][ T5642]  ? rcu_is_watching+0x16/0xb0
[  248.183661][ T5642]  ? __kasan_check_byte+0x12/0x40
[  248.183698][ T5642]  ? is_bpf_text_address+0x292/0x2b0
[  248.183720][ T5642]  ? is_bpf_text_address+0x26/0x2b0
[  248.183743][ T5642]  ? kernel_text_address+0xa5/0xe0
[  248.183768][ T5642]  ? __kernel_text_address+0xd/0x30
[  248.183790][ T5642]  ? unwind_get_return_address+0x4d/0x90
[  248.183815][ T5642]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  248.183839][ T5642]  ? arch_stack_walk+0xfb/0x150
[  248.183876][ T5642]  ? stack_trace_save+0xa9/0x100
[  248.183899][ T5642]  ? __pfx_stack_trace_save+0x10/0x10
[  248.183927][ T5642]  ? check_path+0x21/0x40
[  248.183948][ T5642]  ? add_lock_to_list+0xc7/0x100
[  248.183968][ T5642]  ? lockdep_unlock+0x5c/0xd0
[  248.183987][ T5642]  ? __lock_acquire+0x1511/0x2de0
[  248.184038][ T5642]  ? do_raw_spin_lock+0x12b/0x2f0
[  248.184072][ T5642]  ? do_raw_spin_unlock+0xf5/0x200
[  248.184093][ T5642]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  248.184112][ T5642]  do_writepages+0x338/0x560
[  248.184146][ T5642]  ? do_raw_spin_unlock+0xf5/0x200
[  248.184171][ T5642]  filemap_fdatawrite+0x1e9/0x2f0
[  248.184198][ T5642]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  248.184268][ T5642]  ? do_raw_spin_unlock+0xf5/0x200
[  248.184293][ T5642]  f2fs_sync_dirty_inodes+0x471/0x970
[  248.184328][ T5642]  f2fs_write_checkpoint+0x867/0x24d0
[  248.184383][ T5642]  kill_f2fs_super+0x2df/0x700
[  248.184415][ T5642]  ? rcu_do_enqueue+0x60d/0x870
[  248.184437][ T5642]  ? lockdep_hardirqs_on+0x7b/0x110
[  248.184461][ T5642]  ? __pfx_kill_f2fs_super+0x10/0x10
[  248.184505][ T5642]  ? __pfx_call_rcu+0x10/0x10
[  248.184530][ T5642]  ? shrinker_free+0x2a7/0x3b0
[  248.184556][ T5642]  deactivate_locked_super+0xbe/0x110
[  248.184582][ T5642]  cleanup_mnt+0x204/0x2a0
[  248.184611][ T5642]  task_work_run+0x1d9/0x260
[  248.184638][ T5642]  ? __pfx_task_work_run+0x10/0x10
[  248.184672][ T5642]  exit_to_user_mode_loop+0x204/0x770
[  248.184697][ T5642]  ? rcu_is_watching+0x16/0xb0
[  248.184720][ T5642]  do_syscall_64+0x336/0x540
[  248.184742][ T5642]  ? trace_irq_disable+0x3b/0x140
[  248.184759][ T5642]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  248.184777][ T5642]  ? clear_bhb_loop+0x70/0xc0
[  248.184799][ T5642]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  248.184817][ T5642] RIP: 0033:0x00007fb9c03aa747
[  248.184836][ T5642] Code: a2 c7 05 ac 2f 25 00 00 00 00 00 eb 96 e8 b1 13 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  248.184851][ T5642] RSP: 002b:00007ffcdbb5abb8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  248.184870][ T5642] RAX: 0000000000000000 RBX: 00007fb9c0437433 RCX: 00007fb9c03aa747
[  248.184882][ T5642] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcdbb5ac70
[  248.184893][ T5642] RBP: 00007ffcdbb5ac70 R08: 00007ffcdbb5bc70 R09: 00000000ffffffff
[  248.184905][ T5642] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcdbb5bd00
[  248.184917][ T5642] R13: 00007fb9c0437433 R14: 000000000003c878 R15: 00007ffcdbb5bd40
[  248.184947][ T5642]  </TASK>
[  248.203896][ T5642] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  248.203978][ T5642] CPU: 1 UID: 0 PID: 5642 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  248.204003][ T5642] Tainted: [L]=SOFTLOCKUP
[  248.204009][ T5642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  248.204020][ T5642] Call Trace:
[  248.204027][ T5642]  <TASK>
[  248.204034][ T5642]  dump_stack_lvl+0xe8/0x150
[  248.204067][ T5642]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  248.204096][ T5642]  f2fs_write_end_bio+0xf7d/0x1310
[  248.204134][ T5642]  __submit_merged_bio+0x258/0x6a0
[  248.204157][ T5642]  ? rcu_is_watching+0x16/0xb0
[  248.204180][ T5642]  f2fs_submit_merged_write_cond+0x1ef/0x590
[  248.204208][ T5642]  ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10
[  248.204256][ T5642]  __f2fs_write_data_pages+0x2abe/0x6dd0
[  248.204280][ T5642]  ? __lock_acquire+0x747/0x2de0
[  248.204332][ T5642]  ? lock_acquire+0x115/0x350
[  248.204364][ T5642]  ? __pfx___f2fs_write_data_pages+0x10/0x10
[  248.204430][ T5642]  ? rcu_is_watching+0x16/0xb0
[  248.204450][ T5642]  ? rcu_is_watching+0x16/0xb0
[  248.204465][ T5642]  ? __kasan_check_byte+0x12/0x40
[  248.204502][ T5642]  ? is_bpf_text_address+0x292/0x2b0
[  248.204523][ T5642]  ? is_bpf_text_address+0x26/0x2b0
[  248.204548][ T5642]  ? kernel_text_address+0xa5/0xe0
[  248.204572][ T5642]  ? __kernel_text_address+0xd/0x30
[  248.204600][ T5642]  ? unwind_get_return_address+0x4d/0x90
[  248.204624][ T5642]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  248.204648][ T5642]  ? arch_stack_walk+0xfb/0x150
[  248.204686][ T5642]  ? stack_trace_save+0xa9/0x100
[  248.204709][ T5642]  ? __pfx_stack_trace_save+0x10/0x10
[  248.204737][ T5642]  ? check_path+0x21/0x40
[  248.204758][ T5642]  ? add_lock_to_list+0xc7/0x100
[  248.204777][ T5642]  ? lockdep_unlock+0x5c/0xd0
[  248.204797][ T5642]  ? __lock_acquire+0x1511/0x2de0
[  248.204848][ T5642]  ? do_raw_spin_lock+0x12b/0x2f0
[  248.204880][ T5642]  ? do_raw_spin_unlock+0xf5/0x200
[  248.204900][ T5642]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  248.204919][ T5642]  do_writepages+0x338/0x560
[  248.204954][ T5642]  ? do_raw_spin_unlock+0xf5/0x200
[  248.204978][ T5642]  filemap_fdatawrite+0x1e9/0x2f0
[  248.205005][ T5642]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  248.205074][ T5642]  ? do_raw_spin_unlock+0xf5/0x200
[  248.205098][ T5642]  f2fs_sync_dirty_inodes+0x471/0x970
[  248.205132][ T5642]  f2fs_write_checkpoint+0x867/0x24d0
[  248.205187][ T5642]  kill_f2fs_super+0x2df/0x700
[  248.205218][ T5642]  ? rcu_do_enqueue+0x60d/0x870
[  248.205241][ T5642]  ? lockdep_hardirqs_on+0x7b/0x110
[  248.205265][ T5642]  ? __pfx_kill_f2fs_super+0x10/0x10
[  248.205309][ T5642]  ? __pfx_call_rcu+0x10/0x10
[  248.205333][ T5642]  ? shrinker_free+0x2a7/0x3b0
[  248.205359][ T5642]  deactivate_locked_super+0xbe/0x110
[  248.205381][ T5642]  cleanup_mnt+0x204/0x2a0
[  248.205406][ T5642]  task_work_run+0x1d9/0x260
[  248.205432][ T5642]  ? __pfx_task_work_run+0x10/0x10
[  248.205465][ T5642]  exit_to_user_mode_loop+0x204/0x770
[  248.205490][ T5642]  ? rcu_is_watching+0x16/0xb0
[  248.205513][ T5642]  do_syscall_64+0x336/0x540
[  248.205536][ T5642]  ? trace_irq_disable+0x3b/0x140
[  248.205552][ T5642]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  248.205570][ T5642]  ? clear_bhb_loop+0x70/0xc0
[  248.205600][ T5642]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  248.205617][ T5642] RIP: 0033:0x00007fb9c03aa747
[  248.205636][ T5642] Code: a2 c7 05 ac 2f 25 00 00 00 00 00 eb 96 e8 b1 13 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  248.205652][ T5642] RSP: 002b:00007ffcdbb5abb8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  248.205671][ T5642] RAX: 0000000000000000 RBX: 00007fb9c0437433 RCX: 00007fb9c03aa747
[  248.205683][ T5642] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcdbb5ac70
[  248.205694][ T5642] RBP: 00007ffcdbb5ac70 R08: 00007ffcdbb5bc70 R09: 00000000ffffffff
[  248.205707][ T5642] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcdbb5bd00
[  248.205718][ T5642] R13: 00007fb9c0437433 R14: 000000000003c878 R15: 00007ffcdbb5bd40
[  248.205749][ T5642]  </TASK>
[  248.225194][ T5642] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  248.225273][ T5642] CPU: 1 UID: 0 PID: 5642 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  248.225297][ T5642] Tainted: [L]=SOFTLOCKUP
[  248.225303][ T5642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  248.225313][ T5642] Call Trace:
[  248.225320][ T5642]  <TASK>
[  248.225327][ T5642]  dump_stack_lvl+0xe8/0x150
[  248.225361][ T5642]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  248.225391][ T5642]  f2fs_write_end_bio+0xf7d/0x1310
[  248.225428][ T5642]  __submit_merged_bio+0x258/0x6a0
[  248.225451][ T5642]  ? rcu_is_watching+0x16/0xb0
[  248.225476][ T5642]  f2fs_submit_merged_write_cond+0x1ef/0x590
[  248.225503][ T5642]  ? __pfx_f2fs_submit_merged_write_cond+0x10/0x10
[  248.225551][ T5642]  __f2fs_write_data_pages+0x2abe/0x6dd0
[  248.225585][ T5642]  ? __lock_acquire+0x747/0x2de0
[  248.225636][ T5642]  ? lock_acquire+0x115/0x350
[  248.225669][ T5642]  ? __pfx___f2fs_write_data_pages+0x10/0x10
[  248.225734][ T5642]  ? rcu_is_watching+0x16/0xb0
[  248.225755][ T5642]  ? rcu_is_watching+0x16/0xb0
[  248.225770][ T5642]  ? __kasan_check_byte+0x12/0x40
[  248.225807][ T5642]  ? is_bpf_text_address+0x292/0x2b0
[  248.225828][ T5642]  ? is_bpf_text_address+0x26/0x2b0
[  248.225852][ T5642]  ? kernel_text_address+0xa5/0xe0
[  248.225877][ T5642]  ? __kernel_text_address+0xd/0x30
[  248.225899][ T5642]  ? unwind_get_return_address+0x4d/0x90
[  248.225922][ T5642]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  248.225947][ T5642]  ? arch_stack_walk+0xfb/0x150
[  248.225983][ T5642]  ? stack_trace_save+0xa9/0x100
[  248.226007][ T5642]  ? __pfx_stack_trace_save+0x10/0x10
[  248.226034][ T5642]  ? check_path+0x21/0x40
[  248.226056][ T5642]  ? add_lock_to_list+0xc7/0x100
[  248.226075][ T5642]  ? lockdep_unlock+0x5c/0xd0
[  248.226093][ T5642]  ? __lock_acquire+0x1511/0x2de0
[  248.226144][ T5642]  ? do_raw_spin_lock+0x12b/0x2f0
[  248.226175][ T5642]  ? do_raw_spin_unlock+0xf5/0x200
[  248.226199][ T5642]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  248.226218][ T5642]  do_writepages+0x338/0x560
[  248.226251][ T5642]  ? do_raw_spin_unlock+0xf5/0x200
[  248.226275][ T5642]  filemap_fdatawrite+0x1e9/0x2f0
[  248.226302][ T5642]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  248.226372][ T5642]  ? do_raw_spin_unlock+0xf5/0x200
[  248.226397][ T5642]  f2fs_sync_dirty_inodes+0x471/0x970
[  248.226430][ T5642]  f2fs_write_checkpoint+0x867/0x24d0
[  248.226486][ T5642]  kill_f2fs_super+0x2df/0x700
[  248.226517][ T5642]  ? rcu_do_enqueue+0x60d/0x870
[  248.226540][ T5642]  ? lockdep_hardirqs_on+0x7b/0x110
[  248.226564][ T5642]  ? __pfx_kill_f2fs_super+0x10/0x10
[  248.226613][ T5642]  ? __pfx_call_rcu+0x10/0x10
[  248.226637][ T5642]  ? shrinker_free+0x2a7/0x3b0
[  248.226663][ T5642]  deactivate_locked_super+0xbe/0x110
[  248.226682][ T5642]  cleanup_mnt+0x204/0x2a0
[  248.226708][ T5642]  task_work_run+0x1d9/0x260
[  248.226732][ T5642]  ? __pfx_task_work_run+0x10/0x10
[  248.226764][ T5642]  exit_to_user_mode_loop+0x204/0x770
[  248.226790][ T5642]  ? rcu_is_watching+0x16/0xb0
[  248.226813][ T5642]  do_syscall_64+0x336/0x540
[  248.226836][ T5642]  ? trace_irq_disable+0x3b/0x140
[  248.226852][ T5642]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  248.226870][ T5642]  ? clear_bhb_loop+0x70/0xc0
[  248.226891][ T5642]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  248.226908][ T5642] RIP: 0033:0x00007fb9c03aa747
[  248.226925][ T5642] Code: a2 c7 05 ac 2f 25 00 00 00 00 00 eb 96 e8 b1 13 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  248.226940][ T5642] RSP: 002b:00007ffcdbb5abb8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  248.226957][ T5642] RAX: 0000000000000000 RBX: 00007fb9c0437433 RCX: 00007fb9c03aa747
[  248.226969][ T5642] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcdbb5ac70
[  248.226979][ T5642] RBP: 00007ffcdbb5ac70 R08: 00007ffcdbb5bc70 R09: 00000000ffffffff
[  248.226992][ T5642] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcdbb5bd00
[  248.227004][ T5642] R13: 00007fb9c0437433 R14: 000000000003c878 R15: 00007ffcdbb5bd40
[  248.227032][ T5642]  </TASK>
[  248.250898][ T5642] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  248.321291][ T8981] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=3343437945 (53495007120 ns) > initial count (52285443328 ns). Using initial count to start timer.
[  248.867957][ T8986] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  248.867978][ T8986] block device autoloading is deprecated and will be removed.
[  249.253790][ T8989] loop1: detected capacity change from 0 to 1024
[  250.266052][ T6844] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  250.584843][ T6844] usb 9-1: Using ep0 maxpacket: 32
[  250.608895][ T6844] usb 9-1: New USB device found: idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  250.700529][ T6844] usb 9-1: config 0 has an invalid interface number: 184 but max is 0
[  250.700559][ T6844] usb 9-1: config 0 has no interface number 0
[  250.700600][ T6844] usb 9-1: config 0 interface 184 has no altsetting 0
[  250.743345][ T6844] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  250.743371][ T6844] usb 9-1: Product: syz
[  250.743384][ T6844] usb 9-1: Manufacturer: syz
[  250.743397][ T6844] usb 9-1: SerialNumber: syz
[  250.754434][ T6844] usb 9-1: config 0 descriptor??
[  250.877873][ T9002] Process accounting resumed
[  250.938266][ T9008] loop7: detected capacity change from 0 to 8
[  250.959856][ T9009] netlink: 12 bytes leftover after parsing attributes in process `syz.1.903'.
[  251.035539][ T9008] SQUASHFS error: Unable to read inode 0xe3
[  251.036700][ T9008] SQUASHFS error: Unable to read inode 0x87
[  251.036803][ T9008] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000009: 0000 [#1] SMP KASAN PTI
[  251.051820][ T9013] ip_tables: iptables: counters copy to user failed while replacing table
[  251.068945][ T9008] KASAN: null-ptr-deref in range [0x0000000000000048-0x000000000000004f]
[  251.077368][ T9008] CPU: 0 UID: 0 PID: 9008 Comm: syz.7.902 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  251.088138][ T9008] Tainted: [L]=SOFTLOCKUP
[  251.092461][ T9008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/06/2026
[  251.102520][ T9008] RIP: 0010:__d_obtain_alias+0x50/0x880
[  251.108164][ T9008] Code: e8 25 e6 64 ff eb 53 e8 1e e6 64 ff 49 c7 c5 8c ff ff ff eb 45 49 bf 00 00 00 00 00 fc ff df 49 8d 7d 28 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 14 da e4 ff 4d 8b 75 28 4c 89 ef e8 a8 a8
[  251.127783][ T9008] RSP: 0018:ffffc90004a8f9d0 EFLAGS: 00010206
[  251.133865][ T9008] RAX: 0000000000000009 RBX: 0000000000000002 RCX: 0000000000080000
[  251.141853][ T9008] RDX: ffffc9001d015000 RSI: 00000000000003ca RDI: 0000000000000048
[  251.149843][ T9008] RBP: 0000000000000001 R08: ffffffff91bec8bf R09: 1ffffffff237d917
[  251.157819][ T9008] R10: dffffc0000000000 R11: fffffbfff237d918 R12: ffff88807a3c4000
[  251.165785][ T9008] R13: 0000000000000020 R14: 1ffff92000951f4c R15: dffffc0000000000
[  251.173746][ T9008] FS:  00007fadc2cb06c0(0000) GS:ffff8881233cd000(0000) knlGS:0000000000000000
[  251.182664][ T9008] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  251.189237][ T9008] CR2: 000000110c326fab CR3: 000000007074e000 CR4: 00000000003526f0
[  251.197199][ T9008] Call Trace:
[  251.200466][ T9008]  <TASK>
[  251.203392][ T9008]  squashfs_export_iget+0x1d8/0x370
[  251.208658][ T9008]  ? __pfx_squashfs_export_iget+0x10/0x10
[  251.214376][ T9008]  ? kasan_save_track+0x51/0x90
[  251.219223][ T9008]  ? kasan_save_track+0x3f/0x90
[  251.224063][ T9008]  ? __kasan_kmalloc+0x93/0xb0
[  251.228853][ T9008]  exportfs_decode_fh_raw+0x1c8/0x770
[  251.234305][ T9008]  ? __pfx_vfs_dentry_acceptable+0x10/0x10
[  251.240163][ T9008]  ? __pfx_exportfs_decode_fh_raw+0x10/0x10
[  251.246069][ T9008]  do_handle_to_path+0xa4/0x1a0
[  251.250917][ T9008]  do_handle_open+0x6dd/0xb10
[  251.255592][ T9008]  ? __pfx_do_handle_open+0x10/0x10
[  251.260797][ T9008]  ? rcu_is_watching+0x16/0xb0
[  251.265552][ T9008]  do_syscall_64+0x171/0x540
[  251.270133][ T9008]  ? trace_irq_disable+0x3b/0x140
[  251.275144][ T9008]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  251.281202][ T9008]  ? clear_bhb_loop+0x70/0xc0
[  251.285866][ T9008]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  251.291750][ T9008] RIP: 0033:0x00007fadc1da94d9
[  251.296513][ T9008] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  251.316114][ T9008] RSP: 002b:00007fadc2cb0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000130
[  251.324524][ T9008] RAX: ffffffffffffffda RBX: 00007fadc2025fa0 RCX: 00007fadc1da94d9
[  251.332484][ T9008] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000004
[  251.340445][ T9008] RBP: 00007fadc1e3804e R08: 0000000000000000 R09: 0000000000000000
[  251.348408][ T9008] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  251.356365][ T9008] R13: 00007fadc2026038 R14: 00007fadc2025fa0 R15: 00007ffd35a61c28
[  251.364330][ T9008]  </TASK>
[  251.367332][ T9008] Modules linked in:
[  251.371940][ T9008] ---[ end trace 0000000000000000 ]---
[  251.397654][ T8999] loop8: detected capacity change from 0 to 128
[  251.424336][ T9008] RIP: 0010:__d_obtain_alias+0x50/0x880
[  251.424373][ T9008] Code: e8 25 e6 64 ff eb 53 e8 1e e6 64 ff 49 c7 c5 8c ff ff ff eb 45 49 bf 00 00 00 00 00 fc ff df 49 8d 7d 28 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 14 da e4 ff 4d 8b 75 28 4c 89 ef e8 a8 a8
[  251.424392][ T9008] RSP: 0018:ffffc90004a8f9d0 EFLAGS: 00010206
[  251.424410][ T9008] RAX: 0000000000000009 RBX: 0000000000000002 RCX: 0000000000080000
[  251.424423][ T9008] RDX: ffffc9001d015000 RSI: 00000000000003ca RDI: 0000000000000048
[  251.424436][ T9008] RBP: 0000000000000001 R08: ffffffff91bec8bf R09: 1ffffffff237d917
[  251.424450][ T9008] R10: dffffc0000000000 R11: fffffbfff237d918 R12: ffff88807a3c4000
[  251.424465][ T9008] R13: 0000000000000020 R14: 1ffff92000951f4c R15: dffffc0000000000
[  251.424479][ T9008] FS:  00007fadc2cb06c0(0000) GS:ffff8881233cd000(0000) knlGS:0000000000000000
[  251.424495][ T9008] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  251.424509][ T9008] CR2: 0000200000013000 CR3: 000000007074e000 CR4: 00000000003526f0
[  251.424527][ T9008] Kernel panic - not syncing: Fatal exception
[  251.525252][ T9008] Kernel Offset: disabled
[  251.529573][ T9008] Rebooting in 86400 seconds..