last executing test programs:

35m5.137974351s ago: executing program 32 (id=29):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = socket$unix(0x1, 0x5, 0x0)
r2 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r3=>0x0})
connect$can_bcm(r2, &(0x7f00000000c0)={0x1d, r3}, 0x10)
sendmsg$can_bcm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r1, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

35m4.274298853s ago: executing program 33 (id=25):
syz_mount_image$exfat(&(0x7f0000000100), &(0x7f00000003c0)='./file0\x00', 0x800000, &(0x7f0000000600)=ANY=[], 0x2, 0x14fe, &(0x7f0000002180)="$eJzs3Au0ztXWMPA511p/NklPkvuaa/55kssiSXJJSCRJkiS5JSRJkoTEJrckJCH3JPeQ3GIn9/st9yQ5kiQJCUnWN3Q6n/e8nfftnO+c7/V9Z8/fGGvsNff/mfNZa889nv9ljL2/7Ti4av1qlesyM/xT8M9fUgEgBQD6AcA1ABABQKlspbIBDoNMGlP/uTcR/1oPTbvSKxBXkvQ/fZP+p2/S//RN+p++Sf/TN+l/+ib9T9+k/0KkZ1un575WRvod/3PP/0Ge//8/R87//0YOFxvz5fpi13f6B1Kk/+mb9D99k/6nb9L/9E36n75J///NRQCV/pvD0v/0TfovRHp2pZ8/y7iy40r//gkhhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGESB/OhcsMAPxlfqXXJYQQQgghhBBCiH+dkPFKr0AIIYQQQgghhBD/9yEo0GAgggyQEVIgE2SGqyALXA1Z4RpIwLWQDa6D7HA95ICckAtyQx7IC/nAAoEDhhjyQwFIwg1QEG6EQlAYikBR8FAMisNNUAJuhpJwC5SCW6E03AZloCyUg/JwO1SAO6AiVILKcCdUgbugKlSDu6E63AM14F6oCfdBLbgfasMDUAcehLrwENSDh6E+PAIN4FFoCI2gMTSBpv9H+S9CV3gJukF3SIUe0BNehl7QG/pAX+gHr0B/eBUGwGswEAbBYHgdhsAbMBTehGEwHEbAWzASRsFoGANjYRyMh7dhArwDE+FdmASTYQpMhWkwHWbAezATZsFseB/mwAcwF+bBfFgAC+FDWASLIQ0+giXwMSyFZbAcVsBKWAWrYQ2shXWwHjbARtgEm2ELbIVPYBtshx2wE3bBbtgDn8Je+Az2weewH774B/PP/qf8TggIqFChQYMZMAOmYApmxsyYBbNgVsyKCUxgNsyG2TE75sAcmAtzYR7Mg/kwHxISMjLmx/yYxCQWxIJYCAthESyCHj0Wx+JYAm/GklgSS2EpLI2lsQyWxbJYHstjBayAFbEiVsbKWAWrYFWsinfj3XgP1sAaWBNrYi2shbWxNtbBOlgX62I9rIf1sT42wAbYEBtiY2yMTbEpNsNm2BybY0tsia2wFbbG1tgG22BbbIvtsB22x/bYATtgR+yInbAzdsYX8UV8CV/C7lhF9cCe2BN7YS/sg32xL76C/fFVfBVfw4E4CAfj6/g6voFD8QwOw+E4AkdgBTUKR+MYZDUOx+N4nIATcCJOxEk4GSfjVJyG03EGzsCZOAtn4fs4Bz/AD3AezsMFuBAX4iJcjGmYhkvwLC7FZbgcV+BKXIUrcQ2uxTW4HjfgetyEm3ALbsFP8BPcjttxJ+7E3bgbP8VP8TP8DAfiftyPB/AAHsSDeAgP4WE8jEfwCB7Fo3gMj+FxPI4n8CSewpN4Gk/jGTyL5/AcnsfzeAGfz/N1vd2F1w0EdYlRRmVQGVSKSlGZVWaVRWVRWVVWlVAJlU1lU9lVdpVD5VC5VC6VR+VR+VQ+RYoUq1jlV/lVUiVVQVVQFVKFVBFVRHnlVXFVXJVQJVRJVVKVUreq0uo2VUaVVS18eVVeVVAtfUVVSVVWlVUVdZeqqqqpaqq6qq5qqBqqpqqpaqlaqrZ6QNVRPbAPPqQudaa+GoQN1GBsqBqpxqqJegMfU83UUGyuWqiW6gk1HIdha9XMt1FPq7ZqNLZTz6ox+JzqoMZhR/WC6qQ6qy7qRdVVNffdMvz2EaimYi/VW/VRfdVMvEtd6lhV9ZoaqAapwep1tQDfUEPVm2qYGq5GqLfUSDVKjVZj1Fg1To1Xb6sJ6h01Ub2rJqnJaoqaqqap6WqGek/NVLPUbPW+mqM+UHPVPDVfLVAL1YdqkVqs0tRHaon6WC1Vy9RytUKtVKvUarVGrVXr1Hq1QW1Um9RmtUVtVZ+obWq72qF2ql1qt9qjPlV71Wdqn/pc7VdfqAPqT+qg+lIdUl+pw+prdUR9o46qb9Ux9Z06rr5XJ9RJdUr9oE6rH9UZdVadUz+p8+pndUH9oi6qoECjVlproyOdQWfUKTqTzqyv0ln01TqrvkYn9LU6m75OZ9fX6xw6p86lc+s8Oq/Op60m7TTrWOfXBXRS36AL6ht1IV1YF9FFtdfFdHF9ky6hb9Yl9S26lL5Vl9a36TK6rC6ny+vbdQV9h66oK+nK+k5dRd+lq+pq+m5dXd+ja+h7dU19n66l79e19QO6jn5Q19UP6Xr6YV1fP6Ib6Ed1Q91IN9ZNdFP9mG6mH9fNdQvdUj+hW+kndWv9lG6jn9Zt9TO6nX5Wt9fP6Q76ed1Rv6A76c66i/5FX9RBd9PddaruoXvql3Uv3Vv30X11P/2K7q9f1QP0a3qgHqQH69f1EP2GHqrf1MP0cD1Cv6VH6lF6tB6jx+pxerx+W0/Q7+iJ+l09SU/WU/RUPU1P131+qzT778h/52/kD/j13bforfoTvU1v1zv0Tr1L79Z79B69V+/V+/Q+vV/v1wf0AX1QH9SH9CF9WB/WR/QRfVQf1cf0MX1cH9cn9En9k/5Bn9Y/6jP6rD6rf9Ln9Xl94befARg0ymhjTGQymIwmxWQymc1VJou52mQ115iEudZkM9eZ7OZ6k8PkNLlMbpPH5DX5jDVknGETm/ymgEmaG0xBc6MpZAqbIqao8aaYKW5u+qfz/2h9TU1T08w0M81Nc9PStDStTCvT2rQ2bUwb09a0Ne1MO9PetDcdTAfT0XQ0nUwn08V0MV1NV9PNdDOpJtX0NC+bXqa36WP6mn7mFdPf9DcDzAAz0Aw0g81gM8QMMUPNUDPMDDMjzAgz0ow0o81oM9aMNePNeDPBTDATzUQzyUwyU8wUM81MMzPMDDPTzDSzzWwzx8wxc81cM9/MNwvNQrPILDJpJs0sMUvMUrPMLDMrzAqzyqwya8was86sMxvMBrPJbDJLzVaz1Wwz28wOs8PsMrvMHrPH7DV7zT6zz+w3+80Bc8AcNAfNIXPIHDaHzRFzxBw1R80xc8wcN8fNCXPCnDKnzGlz2pwxZ8w5c86cN+fNBXPBXDQXL132RSpSkYlMlCHKEKVEKVHmKHOUJcoSZY2yRokoEWWLskXZo+ujHFHOKFeUO8oT5Y1SwUYUuYijOMofFYiS0Q1RwejGqFBUOCoSFY18VCwqHt0UlYhujkpGt0Sloluj0tFtUZmobFQuKh/dHlWI7ogqRpWiytGdUZXorqhqVC26O6oe3RPViO6Nakb3RbWi+6Pa0QNRnejBqG70UFQvejiqHz0SNYgejRpGjaLGUZOo6b+0fghncj7uu9nuNtX2sD3ty7aX7W372L62n33F9rev2gH2NTvQDrKD7et2iH3DDrVv2mF2uB1h37Ij7Sg72o6xY+04O96+bSfYd+xE+66dZCfbKXaqnWan2xn2PTvTzrKz7ft2jv3AzrXz7Hy7wC60H9pFdrFNsx/ZJfZju9Qus8vtCrvSrrKr7Rq71q6z6+0Gu9FuspvtFrvVfmK32e12h91pd9nddo/91O61n9l99nO7335hD9g/2YP2S3vIfmUP26/tEfuNPWq/tcfsd/a4/d6esCftKfuDPW1/tGfsWXvO/mTP25/tBfuLvWjDpYv7S6d3MmQoA2WgFEqhzJSZslAWykpZKUEJykbZKDtlpxyUg3JRLspDeSgf5aNLmJjyU35KUpIKUkEqRIWoCBUhT56KU3EqQSWoJJWkUlSKSlNpKkNlqByVo9vpdrqD7qBKVInupDvpLrqLqlE1qk7VqQbVoJpUk2pRLapNtakO1aG6VJfqUT2qT/WpATWghtSQGlNjakpNqRk1o+bUnFpSS2pFrag1taY21IbaUltqR+2oPbWnDtSBOlJH6kSdqAt1oa7UlbpRN0qlVOpJPakX9aI+1If6UT/qT/1pAA2ggTSQBtNgGkJDaCgNpWE0nEbQWzSSRtFoGkNjaRyNp/E0gSbQRJpIk2gSTaEpNI2m0QyaQTNpJs2m2TSH5tBcmkvzaT4tpIW0iBZRGqXRElpCS2kpLafltJJW0mpaTWtpLa2n9bSRNtJm2kxbaStto220g3bQLtpFe2gP7aW9tI/20X7aTwfoAB2kg3SIDtFhOkxH6AgdpaN0jI7RcTpOJ+gEnaJTdJpO0xk6Q+foHJ2nn+kC/UIXKVCKU5DZXeWyuKtdVneNS3GZ3KU4AoBLcS6X2+VxeV0+Z10Ol/OvYnLOFXKFXRFX1HlXzBV3N/0uLuPKunKuvLvdVXB3uIq/i6u7e1wNd6+r6e5z1dzdfxXXcve72u4RV8c96uq6Rq6ea+Lqu0dcA/eoa+gaucauiWvlnnSt3VOujXvatXXP/C5e5Ba7tW6dW+82uL3uM3fO/eSOum/defez6+a6u37uFdffveoGuNfcQDfod/EI95Yb6Ua50W6MG+vG/S6e4qa6aW66m+HeczPdrN/FC92Hbo5Lc3PdPDffLfg1vrSmNPeRW+I+dkvdMrfcrXAr3Sq32q3532td4Ta5zW6L2+M+ddvcdrfD7XS73O5f40v72Oc+d/vdF+6I+8YddF+6Q+6YO+y+/jW+tL9j7jt33H3vTriT7pT7wZ12P7oz7uyv+7+09x/cL+6iCw4YWbFmwxFn4Iycwpk4M1/FWfhqzsrXcIKv5Wx8HWfn6zkH5+RcnJvzcF7Ox5aJHTPHnJ8LcJJv4IJ8IxfiwlyEi7LnYlycb+ISfDOX5Fu4FN/Kpfk2LsNluRyX59u5At/BFbkSV+Y7uUoIXJWr8d1cne/hGnwv1+T7uBbfz7X5Aa7DD3Jdfojr8cNcnx/hBvwoN+RG3JibcFN+jJvx49ycW3BLfoJb8ZPcmp/iNvw0t+VnuB0/y+35Oe7Az3NHfoE7cWfuwi9yV36Ju3F3TuUe3JNf5l7cm/twX+7Hr3B/fpUH8Gs8kAfxYH6dh/AbPJTf5GE8nEfwWzySR/FoHsNjeRyP57d5Ar/DE/ldnsSTeQpP5Wk8nWfwezyTZ/Fsfp/n8Ac8l+fxfF7AC/lDXsSLOY0/4iX8MS/lZbycV/BKXsWreQ2v5XW8njfwRt7Em3kLb+VPeBtv5x28k3fxbt7Dn/Je/oz38ee8n7/gA/wnPshf8iH+ig/z13yEv+Gj/C0f4+/4OH/PJ/gkn+If+DT/yGf4LJ/jn/g8/8wX+Be+yIEhxljFOjZxFGeIM8YpcaY4c3xVnCW+Os4aXxMn4mvjbPF1cfb4+jhHnDPOFeeO88R543yxjSl2McdxnD8uECfjG+KC8Y1xobhwXCQuGvu4WFw8vikuEd8cl4xviUvFt8al49viMnHZ+JH7yse3xxXiO+KKcaW4cnxnXCW+K64aV4vvjqvH98Q14nvjmvF9ccn4/rh2/EBcJ34wrhs/FNeLH47rx4/EDeJH44Zxo7hx3CRuGj8WN4sfj5vHLeKW8RNxq/jJuHX8VNwmfjpuGz/zh8dT4x5xz/jl+OU4hHv1/OSC5MLkh8lFycXJtORHySXJj5NLk8uSy5MrkiuTq5Krk2uSa5PrkuuTG5Ibk5uSm5NbkiFUywgevfLaGx/5DD6jT/GZfGZ/lc/ir/ZZ/TU+4a/12fx1Pru/3ufwOX0un9vn8Xl9Pm89eefZxz6/L+CT/gZf0N/oC/nCvogv6r0v5ov7Jr6pb+qb+cd9c9/Ct/RP+Cf8k/5J/5R/yj/t2/pnfDv/rG/vn/Md/PP+ef+C7+Q7+y7+Rd/Vv+S7+e4+1af6nr6n7+V7+T6+j+/n+/n+vr8f4Af4gX6gH+wH+yF+iB/qh/phfpgf4Uf4kX6kH+1H+7F+rB/vx/sJfoKf6Cf6SX6Sn+Kn+Gl+mp/hZ/iZfqaf7Wf7OYXm+Ll+rp/v5/uFfqFf5Bf5NJ/ml/glfqlf6pf75X6lX+lX+9V+rV/r1/v1fqPf6Df7zX6r3+q3+W1+h9/hd/ldfo/f4/f6vX6f3+f3+/3+gD/gD/qD/pD/yh/2X/sj/ht/1H/rj/nv/HH/vT/hT/pT/gd/2v/oz/iz/pz/yZ/3P/sL/hd/0Qc/PvF2YkLincTExLuJSYnJiSmJqYlpiemJGYn3EjMTsxKzE+8n5iQ+SMxNzEvMTyxILEx8mFiUWJxIS3yUWJL4OLE0sSyxPLEisTKxKhFC3m1xyB8KhGS4IRQMN4ZCoXAoEooGH4qF4uGmUCLcHEqGW0KpcGsoHW4LZULZUC48GhqGRqFxaBKahsdCs/B4aB5ahJbhidAqPBlah6dCm/B0aBueCe3Cs6F9eC50CM+HjuGF0Cl0Dl3Ci6FreCl0C91DaugReoaXQ6/QO/QJfUO/8EroH14NA8JrYWAYFAaH18OQ8EYYGt4Mw8LwMCK8FUaGUWF0GBPGhnFhfHg7TAjvhInh3TApTA5TwtQwLUwPM8J7YWaYFWaH98Oc8EGYG+aF+WFBWBg+DIvC4pAWPgpLwsdhaVgWlocVYWVYFVaHNWFtWBfWhw1hY9gUNoctYWv4JGwL28OOsDPsCrvDnvBp2Bs+C/vC52F/+CIcCH8KB8OX4VD4KhwOX4cj4ZtwNHwbjoXvwvHwfTgRToZT4YdwOvwYzoSz4Vz4KZwPP4cL4ZdwUf5mTQghhBDi76L/4HiPv/G9DACgfpv3BICrt+c+/J9rbszx53lvladVAgCe7t7xob+MKlVSU1N/e+1SDVGBeQCQ+Ov6f4mXQUt4EtpACyjxN9fXW3U+z39QP3krQOb/kJMCl+PL9W/+L+o/9sSIRaXjc9n+m/rzAAoVuJyTCS7Hl+uX/C/q52z2B+vP9OV4gOb/IScLXI4v1y8Oj8Mz0OavXimEEEIIIYQQQvxZb1Wu/R/dP1+6P89jLudkhMvxH92fCyGEEEIIIYQQ4sp7rnOXpx5r06ZF+79vgr89F/jHsmQiE5n8fza50p9MQgghhBBCiH+1yxf9V3olQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCFE+vU/8e/ErvQehRBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCiCvtfwUAAP//luw5aQ==")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
write$binfmt_script(r0, &(0x7f0000000240), 0x3af4701e)

35m3.832051664s ago: executing program 34 (id=30):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x248241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000d00)=@mangle={'mangle\x00', 0x64, 0x6, 0x568, 0x310, 0x1d0, 0x440, 0x310, 0x0, 0x530, 0x530, 0x530, 0x530, 0x530, 0x6, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'vcan0\x00', 'veth1_virt_wifi\x00'}, 0x0, 0xa8, 0xe8, 0x0, {0x7a00000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x9}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'syzkaller1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@private0}}}, {{@ipv6={@rand_addr=' \x01\x00', @mcast2, [], [0xffffff00], 'veth1_to_batadv\x00', 'vlan1\x00'}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@empty}}}, {{@ipv6={@private0, @mcast2, [], [], 'veth1_to_team\x00', 'veth0_macvtap\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@remote}}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x2f}, @mcast2, [0xff, 0x0, 0x7f, 0xff], [0xffffffff, 0xff, 0xffffffff, 0xff], 'veth1_to_batadv\x00', 'rose0\x00', {}, {0xff}, 0x29, 0x4c, 0x2, 0x65}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4=@local}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5c8)
syz_open_dev$sndmidi(0x0, 0x2, 0x141102)
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r4, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r4, 0x0, <r5=>0xffffffffffffffff, 0x1})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000400)={0x48, 0x7, r5, 0x0, 0x10000, 0x0, 0x3, 0x2a7345, 0x20d37, 0xfffffffffffffff0})

35m3.606070919s ago: executing program 35 (id=31):
socket$packet(0x11, 0x2, 0x300)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0xa, 0x683e3057}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000700)='net/fib_triestat\x00')
read$FUSE(r2, 0x0, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0)
bind$inet(r0, 0x0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETTABLE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x14, 0x1, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x400c895}, 0x20000000)

32m31.682620183s ago: executing program 36 (id=506):
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3569], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4)
syz_mount_image$f2fs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x1, 0x5505, &(0x7f0000002480)="$eJzs3E1rY9UbAPAn7XTe//Mv4sLdXBiEFiZh0nlBd6PO4At2KKMuXGmapCEzSW5p0rR25cKluPCbiIIrl34GF67diQvFnaDknlud+gJC08ZOfz+4ee45OXnuc8Iw8NxbEsCptZj9/GMlrsSFiJiPiMsRxXmlPAp3U3guIq5GxNwTR6Wc/33ibERcjIgrk+QpZ6V869Pr42u3f3jjp6++OXfm0mdffju7XQOz9nxE9DfT+U4/xbyT4qNyvjHuFrF/a1zG9Eb/cTnOU9xprxcZdhr76xpFvNlJ6/PN7eEkbvQazUnsdDeK+c1BuuBw3NnPU3zgUWOrGLfa60XsDvMidvZSXbt76f+2veEo5WmV+T4o0sdotB/TfHu3nfaz+biIzcGonE9581Z7dxLHZSwvF8281yrqWD/MN/3f9mZ3sL2bjdtbw24+yG7X6i/U6neq9a281R61b1Ub/dadW9lSpzdZVh21G/27nTzv9Nq1Zt5fzpY6zWa1Xs+W7rXXu41BVq/XbtZuVG8vl2fXs1cfvJP1WtnSJL7cHWyPur1htpFvZekTy9lK7eaLy9m1evbW6lq29vD+/dW1t9+79+6Dl1Zff6Vc9JeysqWVGysr1fqN6kp9+RTt/6Oy6CnuHw6lMusCAE4e/T8wC0fX/289jDj6/j/0/1Nxovrf097/H8H+4VD0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp9Z3C5+/VpwspvGlcv5/5dQz5bgSEXMR8evfmI+zB3LOl3kW/mH9wp9q+LoSRYbJNc6Vx8WIuFsev/z/qL8FAAAAeHp98eHVT1K3nl4WZ10QxyndtJm7/P6U8lUiYmHx+yllm5u8PDulZMW/7zOxO6VsxQ2s81NKlm65nZlWtn9l/kA4/0SopDB3rOUAAADH4mAncLxdCAAAAMfp41kXwGxUYv9R5v6z4OIv7/94IHjhwAgAAAA4gSqzLgAAAAA4ckX/7/f/AAAA4OmWfv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfmPnfm4TB6I4AD8bvLD/tGi1921lb1DGlrDHPUYUkCYoIAfSQhqgBnJLCRFEeBwCEYdIHttK9H2SMxnL/HiD4DAz0gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF26r9aL26vf121zdvt28owGAAAAuGRbrRf1P7PU/9rc/97c+tn0i4goI+LS3H0Un84yR01O9fL8zenz1asa7iLqhMN7TJrrS0T8aa7HH11/CgAAAPBxbZareZqtpz+zoQuiT2nRpvz2N1NeERHV7CFTWnnI+5UprP5+j+N/prR6AWuaKSwtuY1zpb1J/XM/rtpNT5oiNeXFlx2LzDZ2AACgR6Ozpt9ZCAAAAH36N3QBDKOI563M41bgJDXN9t7nsx4AAADwDhVDFwAAAAB0rp7/93T+3975fwAAADCMdP4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXdpW68VmuZq3zdnt28kzGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhif95RIATCIAz2ru9M5v6HlQZNTU2qQPj4G4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIv9eUmBEAiCKJgz/nfS9z+sJOgZRIiAhkcVtWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIud+3mNo4oDAP5mZmdrq+IaZQ8RUfCgF7vd1tbexIMSPPgnCCHd1titP9ocbCliLt4k515EjyKCEm/9H3JOIJd4y2EPETwrMzuTnfwA118zm+TzgTfvu8Mw7/tmIeQ77yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACURm9P4iQ7dMZxXJzb3Hu4lPVbh/rM47Xt+axlcVRn0ifDi9UPUbe5RAAAADg7krK+DyHspOsLWR938vo/La/Jav5vnx7HZT1/uO4v+7L2z9ovP+8+vz9QZzxOdtOby8PBpaOptP6/Wc62Z/7yilb+5PN3L0n+hcTvrT43SvPnGX29sfFOOw/P1ZEtAPBPXCz7Iih/H8r6fpOJAXBmtCqFd1n/J51mcwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACow2g1PFnGUQhhvjWJM1t7D5eO6x+vbc+X7dqjR2vhy8k9s1ukIYSby8PBpVpnM9vu3X9we3E4HNytP3gphNDU6G8V07/9wRQXh9DI8xH8R0FcfNmzks/JCBr8oQQAwKmUFi2r63fS9YXsXDQXwh/fHaz/X63EYcr6f/fDa5vVsar1f7+2Gc6+3sqdT3v37j94ffnO4q3BrcHHb1zuv9m/cv3q1eu9/F1JzxsTAAAA/p120ar1fzx3dP3/QiUOU9b/n33T/6I6VqL+P9Zk0a/pTAAAAM62Z1/+/bfomPNRux0+X1xZudsfH/c/Xx4fG0j1bztXtGr9n8w1nRUAAABQh9FqdGD9/0YlDlOu/z/1/Qs/Vu+ZhBDOF+v/F5c+Gd6obzozrY4/J256jgAAADTrfNGq6/9pvv8/3t/yEIcQXntlHBf/BnCq+j9596sfqmNV9/9fqW+KMynujp9H3ndDaHWbzggAAIDT7ImiZcX+r+n6wkc/XXi/bf8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQN3+DAAA//962D6S")
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c)
sendto$inet6(r2, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c)
sendto$inet6(r2, &(0x7f0000000100)='D', 0xffffffffffffff4b, 0xe5be6ed551e5509d, 0x0, 0x0)

31m30.563078729s ago: executing program 37 (id=631):
syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
listxattr(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000028000000bca30000000000003403000040feffff720af1ff0000000071a4f0ff000000001f030000000000002e0a0200000000002604fdffffff000e61144400000000001d430000000000007a0a00fe0000001f61141c0000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566de74e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48b936e6f9e0fcda88fe4413537528fd79153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b602396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54dd84323afc4c10eff462c8843187f1dd48ef0900000000000000ff0f4000000000f00700003c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c1011e32f808890205f0e6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963442aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e637d4219ef7ec61261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addbc4b3093c91b8068c5adfcb0d7fd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf699b3746979f99f6a1527f004f37e84fb478199dc1020f4beb98b8074bf7df8b5e783637daf121f175a81cffff4ac55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a4a274000000000000000000000000000000000000000000000009dd14b38f2f5426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd030000006d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10b0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07e18b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e8c0a0d213c3ffad44d2a376def42e41e9fc3167a257e040fa7cf32c221aaac6cfdeb33c27500001a0000000000000000000017350000c11ae694b0c69c2c03f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d10522a7a945b93fb705b95b6aae27a8fab1e6984c8bdc12360627137ab6737b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481ffe46a4ce86be0b1f8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0b74903580ac98708007c80d6c7d0de4614195e40d797c0348dd70f36a220e8b3710fb5358c27e90793bcb9ee6319342c4b239ca8cbc6fc83d32e6eb62ad92e43991f2447be9c2a1ae1119eafb901a43d57e885116d19aa152bfb89f8d0b2516f80120a1cddff771657f3d0288ec3899f1e3ba0151c4037148fb479de703fc52b6573349c28d1b107d859b4961324c17756dde99de1924a1d2b7095d34a55060f47f4407d89acf9f285b20c2e6b3d0491d0d3591b0d94713332b6b79c8297117b0d14eff64e0aca8a4b4aa773d8fba1217e9519952419bb9dd998d0ec870ff00b6d556018602738fbc6cec89d6dd13cf55b96f6fe9a137d2d6a56ad78e52c23ed080000000000002bc261a781fd14126c146a0aac4221839a4b9bbf61e4bba695a41e2109eba8e40c370267cc51ffadbd15cafc97a4d3edfdcb9b5729307c6bdaf7b69325fb05fa8a9869de0600ee477d71bf3e36d1d9019edfa27aae24b632f251df210c86a18fae731ecb8b0d48357378caf2b6789509b1bacfd4fa812dc341875cfa5e798bbf59770000000000000000c8a594ea3c3347962d9113b1fecdfad5a8da641053f02e49456f5d21674521e67a5b18ea451eccf69dd6af928d2d68da9304a296c22fdcea26498d26229110b1aade386b113045033a6188d56e675564d8cb8d5b40114b0f5bf15dd64c9ece60b8588ee8777d0ea8f4713b258427c7d90f9e93348e17723ba9ab8ae790f74cc41ae5795835f3cec40dff485d2802c08611454d9ea784a205bcc07ec26f906f3cf45bb37014ab6f22af6213618e242b283ea9d3f0677ee598072ec06f7170009d92bb7ed9d12c378dfd3e74ec056ee83eef666423d934fc5908c9ff98715218a5964f1e00000000426ac9588e27aefe307f49662990ee823568bbc2f89596ced7c6c52d76b8096f1848410843b93fd404f535be474f456778b5ef85abb8fc2336abd5ea64a6efea8a5aca0015499b88ae780a7bae4df603bd3c72808cf300440b1b638a6640f7de8d0d82f359ca2f779cd48cd8d3603f4f69e47f386988c9b7b5d6dd3d48a1fdca780049d7c87bea42161a4c0d7cf0125b43dc9d8845f3c05a08acda647e7143d0e0aee2949a45e2848890522c2288072467d2afe269f589fb7e034b92d3ca245b16b71998711bfe206c9690b6d0eebb06a29349229eb45ff15c63aa2c82c56d7420738cd1b04eb16e87cb524315d7361ea3635d3799bb7fcc56aa5e1dbe031a7a12554dee6754b72f43a6fddf427f32ec3df274a88097725679769beebf1aa6eb09d5154e4900000000000d0f7160a05911d969879953d3d4702b2676c07bb0fd14020a66718378825d5ed789711b77d40dc31e0b8fc651b45559da463f0000000000000000000000000052d42124e9c26aba885015e69d42ecd710342ac597ebea576ae15fdf611356f622e831741ab15549e0d7a2bd0324e2b3b48a10551607492c19eaf58485feb4cab19c303b30ba2ddea0d792d77724c9fa4ed58b93668fc20484f141ee2b6a0029e88fdc853189b4dafd36ff23b11967090e508f45e3f10857038a52ef275cf9e3e4b5d30b12d138dfa70930c603b5e3f4b7be67be3dba3cbd8d4d143195af0697d779445d67dcfbd922d12a8b49f93eac7a72faacf80346b3b6"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)

31m2.252312892s ago: executing program 38 (id=699):
r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x7)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x18)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4004010)
ioctl$sock_ax25_SIOCDELRT(r0, 0x890c, &(0x7f0000000540)={@default, @default, 0x1, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]})

30m9.537288248s ago: executing program 39 (id=757):
syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2008050, &(0x7f0000002480)=ANY=[], 0x1, 0x6d7, &(0x7f0000000780)="$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")
symlink(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)
epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3f, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1)
gettid()
syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000000c0)='./file1\x00', 0xa00004, &(0x7f0000000780)=ANY=[@ANYBLOB='gid=ignore,iocharset=cp1255,utf8,uid=', @ANYRESDEC=0x0, @ANYBLOB=',novrs,iocharset=koi8-u,mode=00000000000000000000010,dmode=00000000000000000000004,novrs,gid=', @ANYRESDEC=0x0, @ANYBLOB=',lastblock=00000000000000000007,gid=forget,uid=', @ANYRESDEC=0x0, @ANYBLOB="2c7569643d666f726765742c706172020000006f6e3d30303030303030303030303030303030303030332c756d61736b3d303030303030383030303030303036322c0000000000000000"], 0x1, 0xc67, &(0x7f0000001dc0)="$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")
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x0, 0xfc, 0x0, &(0x7f00000000c0))
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0)
open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x7001)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
timer_create(0x2, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804051, 0x0, 0x1, 0x0, &(0x7f0000000080))
rmdir(&(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10e, &(0x7f00000001c0)={[{@init_itable_val={'init_itable', 0x3d, 0x957}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2a}}, {@stripe={'stripe', 0x3d, 0x8}}, {@orlov}, {@dioread_nolock}]}, 0x4, 0x46b, &(0x7f00000009c0)="$eJzs289vFFUcAPDvTFt+IxXxBz/UKhobf2yhgHLwotHEgyYmXvBY20KQhRpaEyFE0Rg8GhITj8ajiX+BJ70Y9WTiVe+GhBguoqcxsztDd9fttsC2A93PJ9nueztv9r3vvHm7b+Z1AxhYY/mfJGJbRPweETua2fYCY82n69cuTP9z7cJ0Eln21l9Jo9zf1y5Ml0XL/bYWmfE0Iv00ib1d6p0/d/7UVL0+e7bITyycfm9i/tz5506enjoxe2L2zOTRo4cPHXzh+ckjfYnz3rytez6c27f7tbcvvzF97PI7P3+blPF3xNEnY702Ppllfa6uWttb0snwCnYYWsXGsGJ5N+TdNdIY/ztiKBY7b0e8+kmljQNWVVZYYvPFDFjHkqi6BUA1yi/6/Pq3fKzd7KN6V19qXgDlcV8vHs0tw5EWZUY6rm/7aSwijl3896v8EatzHwIAoM33+fzn2W7zvzQeaCl3T2xsrA2NFmspOyPivojYFRH3RzTKPhgRD3WrpMeCQOciyf/nP+mVW49uefn878Vibat9/lfO/mJ0qMhtb8R/JI2ozx5oHJOI8RjZePxkffZgjzp+eOW3z5fa1jr/yx95/eVcsGjHleGN7fvMTC1M3U7Mra5+HLFnuFv8yY2VgCQidkfEnlus4+TT3+xbatvy8fewknWmZWRfRzzV7P+L0RF/Kem9PjmxKT8fJvKz4EDXOn759dKbS9V/W/H3Qd7/W7qe/zfiH01a12vnb+bdm6P70h+fLXlNU7ul83/xhQ3F8wdTCwtnD0ZsSF5vNrr19cnFfct8WT6Pf3x/9/G/MxaPxN6IyE/ihyPikYh4tIjusYh4PCL29zgKP738xLu9jlD3+Df1eMf+yeOf6ej/0fYiHf2/mNgQna90Twyd+vG79ndcSfylvP8PN1LjxSuNz78ve8e1knbd7NkMAAAAd6s0IrZFktZupNO0Vmv+D/+u2JLW5+YXnjk+9/6ZmeZvBEZjJC3vdDXvB48k5f3P0Zb8ZEf+UHHf+IuhzY18bXquPlN18DDgtraO//KWb6359KffaMD614d1NOAuZfzD4DL+YXAZ/zC4uoz/zVW0A1h73b7/P6qgHcDa6xj/lv1ggLj+h8E1HFlSdRuAarR+//sggIExvzmW/5H8ekhkWZbdAc1YP4lI74hm9CeRrPIo2FZ1gDefqPqTCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoD/+CwAA//9lEuuH")
chdir(&(0x7f0000000140)='./file0\x00')
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x28)
r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
getdents64(r1, 0x0, 0x0)
syz_open_dev$usbfs(&(0x7f0000000000), 0xf186, 0x40)

8m54.809900501s ago: executing program 40 (id=3323):
madvise(&(0x7f0000492000/0x2000)=nil, 0x2000, 0x12)
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000300)='./file1\x00', 0x1018c80, &(0x7f0000000600)={[{@gid}, {@keep_last_dots}, {@errors_remount}, {@errors_remount}, {@time_offset={'time_offset', 0x3d, 0x8}}, {@sys_tz}, {@namecase}, {}, {@iocharset={'iocharset', 0x3d, 'maccroatian'}}, {@namecase}], [{@euid_lt}]}, 0x3, 0x151d, &(0x7f00000036c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x103041, 0x1ae)
userfaultfd(0x80001)
r1 = socket(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)=<r2=>0x0)
sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0x800000000002)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0)
mremap(&(0x7f000028a000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000862000/0x2000)=nil)
r4 = getpgid(0x0)
getrlimit(0x0, 0x0)
syz_pidfd_open(r4, 0x0)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, 0x0, 0x0)
io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(0xffffffffffffffff, 0x13, 0x0, 0x2)
pipe2$9p(&(0x7f0000000240), 0x0)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r5 = openat$vnet(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$int_in(r5, 0x40000000af01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000300))

7m0.395130449s ago: executing program 41 (id=3621):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000085000000230000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10)
msgsnd(0x0, 0x0, 0x0, 0x0)

6m15.295968943s ago: executing program 7 (id=3750):
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0))
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0)
write$cgroup_int(r0, 0x0, 0x0)

6m13.931876828s ago: executing program 7 (id=3754):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xb, &(0x7f00000009c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x9}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r1 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0)
read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x10)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='gadgetfs\x00', 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r2 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x18)
getdents64(r2, &(0x7f0000000300)=""/154, 0x9a)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kfree\x00', r0}, 0x2e)
r3 = socket$inet6(0xa, 0x1, 0x0)
r4 = dup(r3)
bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e20, 0x8000, @dev={0xfe, 0x80, '\x00', 0x33}, 0x7ff}, 0x1c)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x0, 0x0, @local, @local, 0x7, 0x7, 0x202, 0x8}})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000600)={'syztnl1\x00', 0x0})

6m9.053581814s ago: executing program 7 (id=3759):
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x81c0, 0x0)
r0 = landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
r1 = syz_usb_connect$uac1(0x2, 0xa6, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000106b1d01010000000003010902940003010040000904000000010100000a2401000000020102132406000006000000281ab0ab2c90619b34000000000000000000000924030000000000000924050000f8211cfd0924030500000004000724050401"], 0x0)
syz_usb_control_io$uac1(r1, &(0x7f00000000c0)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x16}}}, &(0x7f0000000400)={0x44, &(0x7f0000000100)={0x40, 0x0, 0xb3, "30c5b87c8b931891729665553f9be53c7e2d1c05ae8425bf2a10301a8effd9cae535c5cb9e4db513d82e410ae2655a23fc233c9cbf4d991b6656b0b87ae88ae6e525ee2d7a9948d6020a07689ee3e222c6dc2f7976bbe34158c0961834400174760cb7ed52ee8a63adbd46e838e8e7f7ed638a93d398c4039bb9223722674561d3e9c0e8475e5200731ff30b16e537e46eed208a4f23b3c02fbfb54171a8d963a67c474a5fb397265ca14795584d9a3d6f07e0"}, 0x0, 0x0, &(0x7f0000000240)={0x20, 0x81, 0x1, '\b'}, &(0x7f0000000280)={0x20, 0x82, 0x1, "92"}, 0x0, 0x0, 0x0})
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000480)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cf84ded40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c86e00f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec231fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895012f1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c3405000000000000003871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d37261774cc5a3bf6b466cb72812da518ff602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d50a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a31b16ac5fb73fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953f88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a5fe1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9d66ebbc8bab4ea81232fbef665f6212f875b2a00000000000000aceb111b66a500ca52fd8f848088c67ee65dfdcc4c580e9bc18c1699dca07d019bf1bf9dd3da480d6c155d7e60674ce88ab5ae07a9d16e22792d99986b531ab4e592ab5925da779e700cf20309a2137877690dc5c07956fc82d7b3bb46d3138041af18508938c9be4e5d0a98073463a5cff6c146d020743da474cb81677a6f389f0e00c33b70b7f8bab95435c27167f365a29fb09cbf35bf192f6a65616fa2ad9a6c7ca3a3ecd96aaecd993e8badb40e7eb8a22b0015e70c885cd519e28448168c6d914265998bff74ea1b0e651a6cae9419096248a0e41573827ad60fafce6e6540734c1f23f75337d836c31497e8112969a039d65aa297e2b046b5f4d11116a89f9f65693d4dc3e70fbfe0b2044fdb3f87e887d1daae8e38a0c19f668f776e19a02bb2449ee4384f6536879c85d7e41bc0276ee2b125d41ff358323311703ec01d64a573bdeb75bdcc87d01de38365ab9222713d2d1640a742d62fefb5403b2ed9969c32a0841e8c36b0107bb888eb14ac62e6d4bdfaeb9ee7436b97bf3825a19d6c8997ce285edf1d277ed703f560460417bfe702af833e83c5b987befb6d1fcf765ab7ea537d9dafb622a1ba8686cb9b1c63b84470364942e90d1cf856cead864f5e38c83b9ed86cc5725a20299ce512b165"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10)
r4 = userfaultfd(0x1)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000040))
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
read(r4, &(0x7f00000002c0)=""/196, 0x20)
close(r4)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x27, &(0x7f0000b4bffc), 0x4)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [], {0x14}}, 0x28}}, 0x84)
landlock_restrict_self(r0, 0x2)
sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="2800000014001901000000000000000010"], 0x28}, 0x1, 0x2c}, 0x0)
truncate(&(0x7f0000000000)='./file0\x00', 0x1)

6m5.888688734s ago: executing program 4 (id=3766):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000340)=ANY=[@ANYRES64=r0, @ANYRES8=r0], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0)
socket(0x10, 0x3, 0x0)
socket$nl_crypto(0x10, 0x3, 0x15)
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000940), 0x900, 0x0)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000980), 0x8880, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r3, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffecf}, 0x1}, {{0x0, 0x0, 0x0}, 0x8101}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000a00)=""/240, 0xf0}, {&(0x7f0000000180)=""/84, 0x54}, {&(0x7f0000001600)=""/4113, 0x1011}, {&(0x7f0000000040)=""/6, 0x6}, {&(0x7f00000006c0)=""/219, 0xdb}, {&(0x7f00000008c0)=""/47, 0x2f}, {&(0x7f00000003c0)=""/213, 0xd5}, {&(0x7f0000000c00)=""/193, 0xc1}], 0x39}, 0x7fffffff}], 0x40000000000036d, 0x2002, 0x0)

6m5.225906731s ago: executing program 7 (id=3768):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000080000085000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6002, &(0x7f0000000000)=0x3, 0xf, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000080)='./file0\x00', 0x4000, &(0x7f00000026c0)={[{@part={'part', 0x3d, 0x10ffff}}, {@umask={'umask', 0x3d, 0x3}}, {@codepage={'codepage', 0x3d, 'euc-jp'}}, {@iocharset={'iocharset', 0x3d, 'cp775'}}]}, 0x4, 0x343, &(0x7f0000000280)="$eJzs3U9r1EwcB/DvJLvb7LOlT562D4Xn9FAteCptPSgetEjx4hvwIMXabqE0VtAKWhCrZxFvguDRm2fRt6AX8Q0oHgqKJ70UD0ZmMvm3zmTT7bZp7fcD7mY38+c3yUwy01IDIjqyzs99eH5yS/4TdQAugDOAA8ADagD+xZh3a229a0FusiUQ5RS/pVlca5uyetA5NF9+qmEw+x3tjTAMw4/23Z/Oqrdv+xcQVUJkR3CGAwzAUSNR7ff2PbK9sSnbddRkzrDYxjZuY6jKcIiIqHr6/u/ou8Sgnr87DjCh5+GH/f6fm99sVxfHgZDc/53ocyjk8flb7ZLrvZX1oL0ULeHk2XfiVaKpLGOfCF009KZ6dwC3lZlyZWoxU7E4zeWVoD25qQp4gHNaJtmoel1C3BCZFLZodUTjhrVpgaK2F2upNtRlG2Ys8Y8U1WhcAL/+gifm6ubflohJvBHvxLzw8RRLyfyvFgp5cNTx8TuGShT/lL1E1Uo/SpVrZRr+P6qS/+Iz8OpF2sqm7bh6cGUsJrIU0Tl/9+M4HzfsuTCM/I8VotZN21unco0ANaE7V5prJkn0w5hrtLOu5nI9aE8uXg9snb6/jCs68UhcEuP4ipeYy8z/HZl6AvaRmRvlQqXUPaOwPTWV0nIec9QAvlZ+ZNZLp/zTXTCe6A6f8x8f4ipOY+jmnY3VhSBo36h+Ix4qPWb/v8/xRB1Rd0f5jXzPpIEnN2Qn7FulP8MwNO6qoWQ5cpD2HEY0oE49S5u8sbog9DVvdw2UV86OXbP2xABmAehv4itCL7XfS3INpAWWyv5dnm31jblDxlHtwwCJq8rtcjFQaqQ0e6j04t3VhaDnqxEdIulJx9jlqoOhKsh5l4jWf5n1ypS66sgXv2D9E3YrPFPitGUFNKxe/0pWcEqXNVfLvoJrxRtd1lzHTgDHG/kaHcQ13u8s1tdx4iD+VnLnv8oQc3iPK/z5PxERERERERERERERERERERERERHRYbPTv0bo5c8J8jVuHcH/eIOIiIiIiIiIiIiIiIiIiIiIiIiIiIiIaHfS5/8mz3dpmJ7/W/SkJsWNnhDj9eP5v26J5/+KzXINJCKrXwEAAP//HJ9f3A==")
r3 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.log\x00', 0x1812c1, 0x0)
fchown(r3, 0xee01, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000780)='devpts\x00', 0x0, 0x0)
mount$binder(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x28, &(0x7f0000000240)={[{}]})
set_mempolicy_home_node(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0)
openat$vimc0(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)

6m3.819981561s ago: executing program 7 (id=3772):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xb, &(0x7f00000009c0)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x9}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r1 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0)
read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x10)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='gadgetfs\x00', 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000001340)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r2 = openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x18)
getdents64(r2, &(0x7f0000000300)=""/154, 0x9a)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kfree\x00', r0}, 0x2e)
r3 = socket$inet6(0xa, 0x1, 0x0)
r4 = dup(r3)
bind$inet6(r4, &(0x7f0000000140)={0xa, 0x4e20, 0x8000, @dev={0xfe, 0x80, '\x00', 0x33}, 0x7ff}, 0x1c)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000004c0)={'ip6tnl0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x0, 0x0, @local, @local, 0x7, 0x7, 0x202, 0x8}})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000600)={'syztnl1\x00', 0x0})

6m0.975874742s ago: executing program 7 (id=3779):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000340)=ANY=[@ANYRES64=r0, @ANYRES8=r0], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
socket(0x10, 0x3, 0x0)
syz_open_dev$sndctrl(&(0x7f0000000300), 0x1, 0x0)
socket$nl_crypto(0x10, 0x3, 0x15)
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000940), 0x900, 0x0)
syz_open_pts(0xffffffffffffffff, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)

5m59.435442468s ago: executing program 42 (id=3779):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000340)=ANY=[@ANYRES64=r0, @ANYRES8=r0], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
socket(0x10, 0x3, 0x0)
syz_open_dev$sndctrl(&(0x7f0000000300), 0x1, 0x0)
socket$nl_crypto(0x10, 0x3, 0x15)
openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000940), 0x900, 0x0)
syz_open_pts(0xffffffffffffffff, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)

5m55.491509724s ago: executing program 4 (id=3795):
r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x0, 0x0)
r1 = fcntl$getown(0xffffffffffffffff, 0x9)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_int(r2, 0x0, 0x31, &(0x7f0000000d00)=0x1, 0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r3 = syz_open_dev$MSR(0x0, 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)

5m54.553881822s ago: executing program 4 (id=3801):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x8000000003c)
connect$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x100000, @empty, 0x9}, 0x1c)
sendmsg(r2, &(0x7f00000000c0)={0x0, 0x9521, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xffd8}], 0x1, 0x0, 0x0, 0x2c}, 0x44004)
setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4)
sendto$inet6(r1, &(0x7f0000000040)='\x00', 0x1, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x396, @empty}, 0x1c)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r4 = dup3(r3, r0, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
setsockopt$SO_TIMESTAMP(r4, 0x1, 0x23, &(0x7f0000000140)=0x4, 0x4)
r5 = syz_open_dev$ttys(0xc, 0x2, 0x1)
socket$inet6(0xa, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
syz_mount_image$xfs(&(0x7f000000b840), &(0x7f0000000240)='./file0\x00', 0x1024000, &(0x7f0000000a00)={[{@sysvgroups}, {@noquota}, {@logbufs={'logbufs', 0x3d, 0x3}}]}, 0x1, 0xb8e6, &(0x7f0000017140)="$eJzs3Xts3WX9wPGnXdutkMH4hY7LT2RMBgxkW7dBKQTXdqyjXCqXgR0wobICk47LKLhxLSEkoGIA44WYRYl4jRLFQSQKDiPKxWGMAeIfRALGgMmif4EaQ82355zSHkqzPuV5mrHXK1nP+X5PP08v7/N8T1jITk/nuR0h1IWSwVDtpbe2PvHFdZ1P/vxL929/+K4XHimdbZtVfritfNtevu0Iw4sNn64tnar7+rZHa4uD2tHr7tXYWLNPCJdWrdNSurmpufJ5Q1XKp+dVHq8dOaz5fOnPiL2LD79vW9cbQpgzar4mhLDkPT/oHqqnfXVn+XcSRnWbUX645t3Hhm/rSn9WPBfCiu3hfZ8f06r4Pud0zv74wdP9jewOetpXd1X1byt3rinvx7bqPbgnqn6ev/7QojvLv8Lh59s0JpySnvbOM8IE+/i4/160YKh03awPITSEEGaGEGZNdw8+GO0dy4rX7NrKcTl7Zf/PGe95ceTS1/8dQphbvIyXrhel1wJg99LesWzlOPu/YaL933rHtjftf9j9dbV3LCv2etX+nzXR/t/QuvbF0r5vaylNvTO9PwQAAAAAMK7rttx4ZW9/f98md9xxx52RO9N9ZQJSe3fTT/d3AgAAAAAAAAAAAOyqHP878XT/jAAAAAAAAAAAAADwYdHV3b5zRs2YUzNGHxyyo2/4dvnbPVd8756h9ZXb8sOnj7PkmPf5HxoaGmrduaLyXuwzq94ve1b1cLH+YN3bz5QP26rff7B++Gx9uOSyDf19S4ovtbI+bC4Omot1O+vDvcXB0uJgdX34fnGwbPigMWwvDhZdenX/+uLEqZG/sQ+Xru7BMGNMsTDm2TC6/2D9/O2V2wmWrKxWF8r999//vE1Vj1WM3//d9dvf733J+WBMrv+izZXbCZZ8z/4/6I01vxzvsffvP7J+h/5pjXP9H9Oo+rpfdf2fN86SI/NzX3rmiqL/Y0/etaZ8qm5Xrv+j1l9Z3X948ZHrf7HUKZXrf/HasmpKv4w9UFf37Tsn2v8T96+rvK7XjpodWe2Mk15oLfrvs3Dbn8qn6ifZ/5SJ9n/NvPdcT5ikru4Hh6r2/yT6hyPGWXKkyddePu25ov9PnlnTNOqxyfRfVd1/8cDGaxZft+XGYzds7L287/K+q1qWLD/h+OaW5c2Lh68IpY9T+53sSaa2/4ff/3/0TE0IC0bmFxz/zgVF/7nf7uwpn5o1yf6dE+7/S8Z+r4wyvzY0NITNvQMDm5pLHyuHS0sfS582Tv9JvP5/7KjypzWWb2tCOHBkvuWApgOL/k0zVn2kfKphkv1XT9h/cOTrEmmK+3991cyY/oPPP/izov/8H55f+TuFyb7+nzpR/9pv2f9T1dVd9Rc+H7Ci/1/rFp4YOd7lv//SytH/V/svODdy/DT908rR/4b/P2wgcvx0/dOK61/71K5+ZtG/cfnJt0/6S5ScoX9aOfb/9pNavxs5fqb+aeXo/41jjvtD5Hi3/mnl6H/O4c1vRI5/Uv+0cvT/2/9tuTBy/Cz908rRf/Eht9wcOX62/mnl6D8w+9qmyPFz9E8rR/8naq9fGjl+rv5p5ej/62M3/C5yfI3+aeXov/f8ja9Gjp+nf1o5+p+1tPfuyPHz9U8rR/8HTu57OHL8U/qnlaP/xQc/elnkeI/+aeXo/9Wmn7ZHjq/VP60c/XfUP3FU5PgF+qeVo3/dXo/vGzl+of5p5eh/04Lv/Cdy/CL908rR/5GjH3wlcnyd/mnl6P/miT/eFjn+af3TytF/3nE/+HLk+MX6p5Wj/zWH/fHlyPFL9E8rR//HF734z8jxXv3TytH/tU/8+YHI8c/on1aO/sc0v/Jk5Pil+qeVo/+ajz413r8TtCvW659Wov4NlTtF/637Pd0fuU6f/mnl2P+/rXm2PnL8Mv3TytF/3312zI8cv1z/tHL0f3bhIX+PHL9C/7Ry9A9HHLQjcnyD/mnl6H/h8U0PRY5/Vv+0cvS/v3W/OyLHr9Q/rRz9d86dfUPkeL/+aeXof/hBjWdHjm/UP60c/W9rrD8hcvwq/dPK0f+xhppDI8ev1j+tHP1rl3T9KHL8Gv3TytH/+RVnfiFy/Fr900raf+9S/3sXt78WucIm/dPKsf/Xzlv1dOT4dfqnlaP/Efuujf0X2Qf0TytH/3+EdQdEjl+vf1o5+m+bc/atkeM36J9Wjv63HHre2sjxz7301taZQf9kcvT/xQl33hc5vtn+TytH/00ttz8WOb5F/7Ry9F945D1/iRy/Uf+0cvR/9ai7/xU5fpP+aeXo/82ZX5kdOX6z/mnl6H/+rPuOjhy/Rf+0cvSffeDWlZHjt+qfVo7+vznggfWR47fpDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwP/YgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwg4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRV24EAAAAAAAMj/tRGqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsHcn4JrOhf/Hz2x2krIWyV6yy5LCoEFpsSbZd1lDWQtRIVtSSLJHlGQpCWm3ZKkslZQilX3fl/81Zo4Yn/FTl39qPq/Xdc082z33uZ/v+/4+53Hu89wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHjlrT1q9eUGBoaPvbX3ix6//uFjLzpovVEXn3/I4Zecuf9VZ4+5d9lJxj687DPjGHh2ZcuOfmzomEWGH3XuKUNH3xj6/PVONumkQ6YaGLJJ3qo91v8/NnvWwStDn7s55MAxf54z+bNffeqNzhoYGJj6/1hfrbVHrjhq9OCN+fNct2FjHx57/3PXh4/5s9QGAwNLrTsw3v3j1ffUmqNWfbW34X/B2iNXXHmc/gNjOz/bfdz53Wrc/XzYfusOeVXDvULWHjlqldGtxzePd93lkGf3gYGB4ccPDAw/YWBg+IkDA8NPerV78MoYudwiy41+zR+8Pab63oNvCNLr+5DH33fu6O8ZI8Z8nxh+8uD3AuB/y8jlFlk+zP+JBh9P8//WJ29Zy/yH/30rj1xukYHnvc8fc+/eg/99H+f/0jNfeNOrt8UAAADAv+rpuy64eOyxvqEDA7MMjHO891ljfy4w5KxLrrnmVdvQ/w7hONmLf2fif8zozpOcPuvAwHZrvtqbwqtggjiOzb9N/276d9O/m/7d9O+mfzf9u+nfTf9u+nfTv5v+3fQvNp7j/1MPXu457LwVxi4657VHbL3GuP9+9H2T/Me3+lUzoR7/H9hqyJiWo5tvNTAw8P6Rq60xz8DAwBpbH3HtbAPPPbbE6MeWmmbY2BMEzPPs3+8ez4oHP03+7MkaJntuHWc9u/6Vnzlh2JBxNuJ5Nn3m4FO3XPuRRce9nGv8z+O580tc/p4bjhz8LMvQcRYa3746uP7B5zJu57HbPs/obV9g5213WGCn3Xafb6ttN9pisy02227xBRddYrGFFl90oQU232qbzRYc8/f4xmzMqSuWfzljNtG4Y3bXyOeP2bjPbXxjNutLj9mza9zy0uunGxyz4f/imC3/0mM261aD27rsiIENnx2b0V9yhREDu46+sdDEo3ehscvOMHrZd04zdGDgsH8+0dHXJn5uHxyy91avwHlLxl6OHHu5XDxvyXnjO2/JwCbjrGfJMRc7XzS43Lifsx5798s+b8nSo/ade/RcHOff///wb33/f1GvJYY8N1CDJw0Zu8yYXv88z8TgsC37vPNMLJ7OJfNKetH2zjr0uf06be/Yz8UNGWf8X+pzcQPz3LrhGWOe17KLj/lXT//bUfJrxyr/HL3gBa8dAy/92jHsn1f/ee9mV8487mvHe8e/iS+YF4NjNPE4C43vtePSR4bvPXr9g9s8nteOVbYa+0Hjf752jP6yyw++doze9lEjBg4bfWPh0TdWHDFw2ugbizx7Y9KBS0bfmH+T7bfZdPQdK714v51nyAt+4THst6PG2W9fxvlxlrl8YGCZS9LzGv9wZmm/negltjd/nnvgJT/PPfcBT64+MDAw3Zjv0qOf5Jht/3ek7R3+0tsbzj8x8FLnnxhYcokzln+Ft/e5efbsvjb2dFErjeffvGCeTf2iebbPsOfNjJf7vmbTsPyY6zM8t7ZzTrhi78ExGjHOeid58duBF3y9weeS+g++53u+occPDHmpsVnx5YzNVC89Ni/3/cs8s495fNKXGJsZpp1+8cGxmejFYxMNrn/F8YzN898PP9+QvQcmfeHYDH/2PfAcY8dm1MsZmylemf1msrD8mOtzPnfXOk8vNufg2ISxiN//B9c/6l8dmw2f22/mePax2YYOTDTRwK4b7bzzjguN+Xvw5sJj/n7pObjCyxnLSV6ZsZxp7KvO0BcPznN3LXnVUqu8xByMBte/wr86lrMODB38b+6t4ux+Rfj5Tzf9u+nfTf9u+nfTv5v+3fQvNp7j/7MO/lxw3ivnuWbsD2NGXHbGWpu+2tv7Kpugj/+P7fuC4/+brnXGZUMHnnvsJY/Pjlnmv/L47OJjLvZYaHC5cY8Pjr37ZR+fvfDQ89f9Dx2f/bcMztWX8XNDr//d9O+mfzf9u+nfTf9u+nfTv5v+3fTvpn83/bvp303/YuM5/r/g4O8BPH3nzjePPRA6YuORM/7bn7OaQEzQx//H9n3B8f9LZhy58dCB5x57yeP/Y5bpOP6/44237fvffPx/cK46/s//Qf9u+nfTv5v+3fTvpn83/bvp303/bvp307+b/t30Lzae4//LDv4ewDZPX3fP4O8DXH3Mctu/2tv7KptQj//7///38vrfTf9u+nfTv5v+3fTvpn83/bvp303/bvp307+b/t30Lzb2+P/AOP/bww/aL6Jw/P9/23j6r6p/1NJ/Nf2jlv6r6x+19F9D/6il/5r6Ry3919I/aun/If2jlv5r6x+19P+w/lFL/3X0j1r6f0T/qKX/uvpHLf3X0z9q6b++/lFL/w30j1r6b6h/1NJ/I/2jlv4b6x+19N9E/6il/6b6Ry39N9M/emH/CWCExtN/c/2jlvm/hf5RS/8t9Y9a+m+lf9TS/6P6Ry39t9Y/aum/jf5RS/9t9Y9a+m+nf9TSf3v9o5b+O+gftfT/mP5RS/8d9Y9a+u+kf9TSf2f9o5b+H9c/aun/Cf2jlv676B+19N9V/6il/276Ry39d9c/aum/h/5RS/899Y9a+n9S/6il/6f0j1r676V/1NJ/b/2jlv776B+19P+0/lFL/331j1r676d/1NL/M/pHLf0/q3/U0v9z+kct/ffXP5oA+w+k/gfoH02A/eP8P1D/qKX/5/WPWvofpH/U0v9g/aOW/ofoH7X0P1T/qKX/YS/qP+l/dLP+W7X0/4L5H7X0P1z/qKX/F/WPWvofoX/U0v9L+kct/b+sf9TS/0j9o5b+R+kftfQ/Wv+opf9X9I9a+h+jf9TS/6v6Ry39j9U/aun/Nf2jlv7H6R+19D9e/6il/wn6Ry39T9Q/aul/kv5RS/+T9Y9a+p+if9TS/+v6Ry39T9U/aul/mv5RS/9v6B+19D9d/6il/xn6Ry39v6l/1NL/W/pHLf3P1D9q6f9t/aOW/mfpH7X0/47+UUv/s/WPWvqfo3/U0v9c/aOW/ufpH7X0/67+UUv/7+kftfQ/X/+opf/39Y9a+l+gf9TS/wf6Ry39L9Q/aul/kf5RS/+L9Y9a+v9Q/6il/yX6Ry39f6R/1NL/x/pHLf1/on/U0v+n+kct/X+mf9TS/+f6Ry39f6F/1NL/Uv2jlv6X6R+19L9c/6il/xX6Ry39f6l/1NL/Sv2jlv5X6R+19L9a/6il/zX6Ry39f6V/1NL/1/pHLf1/o3/U0v9a/aOW/tfpH7X0v17/qKX/DfpHLf1/q3/U0v93+kct/X+vf9TS/0b9o5b+f9A/aul/k/5RS/8/6h+19P+T/lFL/5v1j1r6/1n/qKX/X/SPWvrfon/U0v9W/aOW/n/VP2rpf5v+UUv/v+kftfT/u/5RS/9/6B+19L9d/6il/x36Ry3979Q/aul/l/5RS/+79Y9a+t+jf9TS/179o5b+9+kftfS/X/+opf8D+kct/R/UP2rp/5D+UUv/h/WPWvo/on/U0v9R/aOW/o/pH7X0f1z/qKX/E/pHLf2f1D9q6f+U/lFL/6f1j1r6P6N/VNJ/yID+UUv/IfpHLf2H6h+19B+mf9TSf7j+UUv/EfpHLf0n0j9q6T+x/lFL/0n0j1r6Tzqe/iP+U9v1X6ql/2Tmf9TSf3L9o5b+U+gftfSfUv+opf9U+kct/V+jf9TSf2r9o5b+r9U/auk/jf5RS//X6R+19H+9/lFL/2n1j1r6T6d/1NJ/ev2jlv4z6B+19J9R/6il/0z6Ry3936B/1NL/jfpHLf1n1j9q6T+L/lFL/zfpH7X0n1X/qKX/m/WPWvrPpn/U0n92/aOW/nPoH7X0n1P/qKX/XPpHLf3n1j9q6T+P/lFL/7foH7X0f6v+UUv/efWPWvq/Tf+opf98+kct/efXP2rpv4D+UUv/BfWPWvovpH/U0n9h/aOW/ovoH7X0X1T/qKX/2/WPWvovpn/U0n9x/aOW/kvoH7X0X1L/qKX/O/SPWvovpX/U0v+d+kct/d+lf9TSf2n9o5b+y+gftfRfVv+opf9I/aOW/svpH7X0X17/qKX/CvpHLf3frX/U0n+U/lFL/xX1j1r6r6R/1NJ/Zf2jlv7v0T9q6f9e/aOW/qvoH7X0f5/+UUv/9+sftfT/gP5RS/8P6h+19F9V/6il/2r6Ry39V9c/aum/hv5RS/819Y9a+q+lf9TS/0P6Ry3919Y/aun/Yf2jlv7r6B+19P+I/lFL/3X1j1r6r6d/1NJ/ff2jlv4b6B+19N9Q/6il/0b6Ry39N9Y/aum/if5RS/9N9Y9a+m+mf9TSf3P9o5b+W+gftfTfUv+opf9W+kct/T+qf9TSf2v9o5b+2+gftfTfVv+opf92+kct/bfXP2rpv4P+UUv/j+kftfTfUf+opf9O+kct/XfWP2rp/3H9o5b+n9A/aum/i/5RS/9d9Y9a+u+mf9TSf3f9o5b+e+gftfTfU/+opf8n9Y9a+n9K/6il/176Ry3999Y/aum/j/5RS/9P6x+19N9X/6il/341/Z8ZY6+Xt3RL/8/U9P/XtPT/rP5RS//P6R+19N9f/6il/wH6Ry39D9Q/aun/ef2jlv4H6R+19D9Y/6il/yH6Ry39D9U/aul/mP5RS/8v6B+19D9c/6il/xf1j1r6H6F/1NL/S/pHLf2/rH/U0v9I/aMJt//Q59875Cj9owm3/wvn/9H6Ry39v6J/1NL/GP2jlv5f1T9q6X+s/lFL/6/pH7X0P07/qKX/8fpHLf1P0D9q6X+i/lFL/5P0j1r6n6x/1NL/FP2jlv5f1z9q6X+q/lFL/9P0j1r6f0P/qKX/6fpHLf3P0D9q6f9N/aOW/t/SP2rpf6b+UUv/b+sftfQ/S/+opf939I9a+p+tf9TS/xz9o5b+5+oftfQ/T/+opf939Y9a+n9P/6il//n6Ry39v69/1NL/Av2jlv4/0D9q6X+h/lFL/4v0j1r6X6x/1NL/h/pHLf0v0T9q6f8j/aOW/j/WP2rp/xP9o5b+P9U/aun/M/2jlv4/1z9q6f8L/aOW/pfqH7X0v0z/qKX/5fpHLf2v0D9q6f9L/aOW/lfqH7X0v0r/qKX/1fpHLf2v0T9q6f8r/aOW/r/WP2rp/xv9o5b+1+oftfS/Tv+opf/1+kct/W/QP2rp/1v9o5b+v9M/aun/e/2jlv436h+19P+D/lFL/5v0j1r6/1H/qKX/n/SPWvrfrH/U0v/P+kct/f+if9TS/xb9o5b+t+oftfT/q/5RS//b9I9a+v9N/6il/9/1j1r6/0P/qKX/7fpHLf3v0D9q6X+n/lFL/7v0j1r6361/1NL/Hv2jlv736h+19L9P/6il//36Ry39H9A/aun/oP5RS/+H9I9a+j+sf9TS/xH9o5b+j+oftfR/TP+opf/j+kct/Z/QP2rp/6T+UUv/p/SPWvo/rX/U0v8Z/aOS/s9e1f/FWvoP0T+aEPs/M2zM1ef3H6p/NCH2T/N/mP5RS//h+kct/UfoH7X0n0j/qKX/xPpHLf0n0T9q6T+p/lFL/8n0j1r6T65/1NJ/Cv2jlv5T6h+19J9K/6il/2v0j1r6T61/1NL/tfpHLf2n0T9q6f86/aOW/q/XP2rpP63+UUv/6fSPWvpPr3/U0n8G/aOW/jPqH7X0n0n/qKX/G/SPWvq/Uf+opf/M+kct/WfRP2rp/yb9o5b+s+oftfR/s/5RS//Z9I9a+s+uf9TSfw79o5b+c+oftfSfS/+opf/c+kct/efRP2rp/xb9o5b+b9U/auk/r/5RS/+36R+19J9P/6il//z6Ry39F9A/aum/oP5RS/+F9I9a+i+sf9TSfxH9o5b+i+oftfR/u/5RS//F9I9a+i+uf9TSfwn9o5b+S7b3H5rvbun/jvb+49HSfyn9o5b+79Q/aun/Lv2jlv5L6x+19F9G/6il/7L6Ry39R+oftfRfTv+opf/y+kct/VfQP2rp/279o5b+o/SPWvqvqH/U0n8l/aOW/ivrH7X0f4/+UUv/9+oftfRfRf+opf/79I9a+r9f/6il/wf0j1r6f1D/qKX/qvpHLf1X0z9q6b+6/lFL/zX0j1r6r6l/1NJ/Lf2jlv4f0j9q6b+2/lFL/w/rH7X0X0f/5zt6yrFXWvp/RP+opf+6+kct/dfTP2rpv77+UUv/DfSPWvpvqH/U0n8j/aOW/hvrH7X030T/qKX/pvpHLf030z9q6b+5/lFL/y30j1r6b6l/1NJ/K/2jlv4f1T9q6b+1/lFL/230j1r6b6t/1NJ/O/2jlv7b6x+19N9B/6il/8f0j1r676h/1NJ/J/2jlv476x+19P+4/lFL/0/oH7X030X/qKX/rvpHLf130z9q6b+7/lFL/z30j1r676l/1NL/k/pHLf0/pX/U0n8v/aOW/nvrH7X030f/qKX/p/WPWvrvq3/U0n8//aOW/p/RP2rp/1n9o5b+n9M/aum/v/5RS/8D9I9a+h+of9TS//P6Ry39D9I/aul/sP5RS/9D9I9a+h+qf9TS/zD9o5b+X9A/aul/uP5RS/8v6h+19D9C/6il/5f0j1r6f1n/qKX/kfpHLf2P0j9q6X+0/lFL/6/oH7X0P0b/qKX/V/WPWvofq3/U0v9r+kct/Y/TP2rpf7z+UUv/E/SPWvqfqH/U0v8k/aOW/ifrH7X0P0X/qKX/1/WPWvqfqn/U0v80/aOW/t/QP2rpf7r+UUv/M/SPWvp/U/+opf+39I9a+p+pf9TS/9v6Ry39z9I/aun/Hf2jlv5n6x+19D9H/6il/7n6Ry39z9M/aun/Xf2jlv7f0z9q6X++/lFL/+/rH7X0v0D/qKX/D/SPWvpfqH/U0v8i/aOW/hfrH7X0/6H+UUv/S/SPWvr/SP+opf+P9Y9a+v9E/6il/0/1j1r6/0z/qKX/z/WPWvr/Qv+opf+l+kct/S/TP2rpf7n+UUv/K/SPWvr/Uv+opf+V+kct/a/SP2rpf7X+UUv/a/SPWvr/Sv+opf+v9Y9a+v9G/6il/7X6Ry39r9M/aul/vf5RS/8b9I9a+v9W/6il/+/0j1r6/17/qKX/jfpHLf3/oH/U0v8m/aOW/n/UP2rp/yf9o5b+N+sftfT/s/5RS/+/6B+19L9F/6il/636Ry39/6p/1NL/Nv2jlv5/0z9q6f93/aOW/v/QP2rpf7v+UUv/O/SPWvrfqX/U0v8u/aOW/nfrH7X0v0f/qKX/vfpHLf3v0z9q6X+//lFL/wf0j1r6P6h/1NL/If2jlv4P6x+19H9E/6il/6P6Ry39H9M/aun/uP5RS/8n9I9a+j+pf9TS/yn9o5b+T+sftfR/Rv+opP+wAf2jlv5D9I9a+g/VP2rpP0z/qKX/cP2jlv4j9I9a+k+kf9TSf2L9o5b+k+gftfSfVP+opf9k+kct/SfXP2rpP4X+UUv/KfWPWvpPpX/U0v81+kct/afWP2rp/1r9o5b+0+gftfR/nf5RS//X6x+19J9W/6il/3T6Ry39p9c/auk/g/5RS/8Z9Y9a+s+kf9TS/w36Ry3936h/1NJ/Zv2jlv6z6B+19H+T/lFL/1n1j1r6v1n/qKX/bPpHLf1n1z9q6T+H/lFL/zn1j1r6z6V/1NJ/bv2jlv7z6B+19H+L/lFL/7fqH7X0n1f/qKX/2/SPWvrPp3/U0n9+/aOW/gvoH7X0X1D/ZK+W/guN6T/xq7VZ/61a+i9s/kct/RfRP2rpv6j+UUv/t+sftfRfTP+opf/i+kct/ZfQP2rpv6T+UUv/d+gftfRfSv+opf879Y9a+r9L/6il/9L6Ry39l9E/aum/rP5RS/+R+kct/ZfTP2rpv7z+UUv/FfSPWvq/W/+opf8o/aOW/ivqH7X0X0n/qKX/yvpHLf3fo3/U0v+9+kct/VfRP2rp/z79o5b+79c/aun/Af2jlv4f1D9q6b+q/lFL/9X0j1r6r65/1NJ/Df2jlv5r6h+19F9L/6il/4f0j1r6r61/1NL/w/pHLf3X0T9q6f8R/aOW/uvqH7X0X0//qKX/+vpHLf030D9q6b+h/lFL/430j1r6b6x/1NJ/E/2jlv6b6h+19N9M/6il/+b6Ry39t9A/aum/pf5RS/+t9I9a+n9U/6il/9b6Ry39t9E/aum/rf5RS//t9I9a+m+vf9TSfwf9o5b+H9M/aum/o/5RS/+d9I9a+u+sf9TS/+P6Ry39P6F/1NJ/F/2jlv676h+19N9N/6il/+76Ry3999A/aum/p/5RS/9P6h+19P+U/lFL/730j1r6761/1NJ/H/2jlv6f1j9q6b+v/lFL//30j1r6f0b/qKX/Z/WPWvp/Tv+opf/++kct/Q/QP2rpf6D+UUv/z+sftfQ/SP+opf/B+kct/Q/RP2rpf6j+UUv/w/SPWvp/Qf+opf/h+kct/b+of9TS/wj9o5b+X9I/aun/Zf2jlv5H6h+19D9K/6il/9H6Ry39v6J/1NL/GP2jlv5f1T9q6X+s/lFL/6/pH7X0P07/qKX/8fpHLf1P0D9q6X+i/lFL/5P0j1r6n6x/1NL/FP2jlv5f1z9q6X+q/lFL/9P0j1r6f0P/qKX/6fpHLf3P0D9q6f9N/aOW/t/SP2rpf6b+UUv/b+sftfQ/S/+opf939I9a+p+tf9TS/xz9o5b+5+r/AnNNOeaypf95+kct/b+rf9TS/3v6Ry39z9c/aun/ff2jlv4X6B+19P+B/lFL/wv1j1r6X6R/1NL/Yv2jlv4/1D9q6X+J/lFL/x/pH7X0/7H+UUv/n+gftfT/qf5RS/+f6R+19P+5/lFL/1/oH7X0v1T/qKX/ZfpHLf0v1/9FJirqf4X+UUv/X+oftfS/Uv+opf9V+kct/a/WP2rpf43+UUv/X+kftfT/tf5RS//f6B+19L9W/6il/3X6Ry39r9c/aul/g/5RS//f6h+19P+d/lFL/9/rH7X0v1H/qKX/H/SPWvrfpH/U0v+P+kct/f+kf9TS/2b9o5b+f9Y/aun/F/2jlv636B+19L9V/6il/1/1j1r636Z/1NL/b/pHLf3/rn/U0v8f+kct/W/XP2rpf4f+UUv/O/WPWvrfpX/U0v9u/aOW/vfoH7X0v1f/qKX/ffpHLf3v1z9q6f+A/lFL/wf1j1r6P6R/1NL/Yf2jlv6P6B+19H9U/6il/2P6Ry39H9c/aun/hP5RS/8n9Y9a+j+lf9TS/2n9o5b+z+gflfQfPqB/1NJ/iP5RS/+h+kct/YfpH7X0H65/1NJ/hP5RS/+J9I9a+k+sf9TSfxL9o5b+k+oftfSfTP+opf/k+kct/afQP2rpP6X+UUv/qfSPWvq/Rv+opf/U+kct/V+rf9TSfxr9o5b+r9M/aun/ev2jlv7T6h+19J9O/6il//T6Ry39Z9A/auk/o/5RS/+Z9I9a+r9B/6il/xv1j1r6z6x/1NJ/Fv2jlv5v0j9q6T+r/lFL/zfrH7X0n03/qKX/7PpHLf3n0D9q6T+n/lFL/7n0j1r6z61/1NJ/Hv2jlv5v0T9q6f9W/aOW/vPqH7X0f5v+UUv/+fSPWvrPr3/U0n8B/aOW/gvqH7X0X0j/qKX/wvpHLf0X0T9q6b+o/lFL/7frH7X0X0z/qKX/4vpHLf2X0D9q6b+k/lFL/3foH7X0X0r/qKX/O/WPnt9/4ld7Y14J4+n/Lv2jlvm/tP5RS/9l9I9a+i+rf9TSf6T+UUv/5fSPWvovr3/U0n8F/aOW/u/WP2rpP0r/qKX/ivpHLf1X0j9q6b+y/lFL//foH7X0f6/+UUv/VfSPWvq/T/+opf/79Y9a+n9A/6il/wf1j1r6r6p/1NJ/Nf2jlv6r6x+19F9D/6il/5r6Ry3919I/aun/If2jlv5r6x+19P+w/lFL/3X0j1r6f0T/qKX/uvpHLf3X0z9q6b++/lFL/w30j1r6b6h/1NJ/I/2jlv4b6x+19N9E/6il/6b6Ry39N9M/aum/uf5RS/8t9I9a+m+pf9TSfyv9o5b+H9U/aum/tf5RS/9t9I9a+m+rf9TSfzv9o5b+2+sftfTfQf+opf/H9I9a+u+of9TSfyf9o5b+O+sftfT/uP5RS/9P6B+19N9F/6il/676Ry39d6vvf85i6d6W/rvX989a+u+hf9TSf0/9o5b+n9Q/aun/Kf2jlv576R+19N9b/6il/z76Ry39P61/1NJ/X/2jlv776R+19P+M/lFL/8/qH7X0/5z+UUv//fWPWvofoH/U0v9A/aOW/p/XP2rpf5D+UUv/g/WPWvofon/U0v9Q/aOW/ofpH7X0/4L+UUv/w/WPWvp/Uf+opf8R+kct/b+kf9TS/8v6Ry39j9Q/aul/lP5RS/+j9Y9a+n9F/6il/zH6Ry39v6p/1NL/WP2jlv5f0z9q6X+c/lFL/+P1j1r6n6B/1NL/RP2jlv4n6R+19D9Z/6il/yn6Ry39v65/1NL/VP2jlv6n6R+19P+G/lFL/9P1j1r6n6F/1NL/m/pHLf2/pX/U0v9M/aOW/t/WP2rpf5b+UUv/7+gftfQ/W/+opf85+kct/c/VP2rpf57+UUv/7+oftfT/nv5RS//z9Y9a+n9f/6il/wX6Ry39f6B/1NL/Qv2jlv4X6R+19L9Y/6il/w/1j1r6X6J/1NL/R/pHLf1/rH/U0v8n+kct/X+qf9TS/2f6Ry39f65/1NL/F/pHLf0v1T9q6X+Z/lFL/8v1j1r6X6F/1NL/l/pHLf2v1D9q6X+V/lFL/6v1j1r6X6N/1NL/V/pHLf1/rX/U0v83+kct/a/VP2rpf53+UUv/6/WPWvrfoH/U0v+3+kct/X+nf9TS//f6Ry39b9Q/aun/B/2jlv436R+19P+j/lFL/z/pH7X0v1n/qKX/n/WPWvr/Rf+opf8t+kct/W/VP2rp/1f9o5b+t+kftfT/m/5RS/+/6x+19P+H/lFL/9v1j1r636F/1NL/Tv2jlv536R+19L9b/6il/z36Ry3979U/aul/n/5RS//79Y9a+j+gf9TS/0H9o5b+D+kftfR/WP+opf8j+kct/R/VP2rp/5j+UUv/x/WPWvo/oX/U0v9J/aOW/k/pH7X0f1r/qKX/M/pHJf1HDOgftfQfon/U0n+o/lFL/2H6Ry39h+sftfQfoX/U0n8i/aOW/hPrH7X0n0T/qKX/pPpHLf0n0z9q6T+5/lFL/yn0j1r6T6l/1NJ/Kv2jlv6v0T9q6T+1/lFL/9fqH7X0n0b/qKX/6/SPWvq/Xv+opf+0+kct/afTP2rpP73+UUv/GfSPWvrPqH/U0n8m/aOW/m/QP2rp/0b9o5b+M+sftfSfRf+opf+b9I9a+s+qf9TS/836Ry39Z9M/auk/u/5RS/859I9a+s+pf9TSfy79o5b+c+sftfSfR/+opf9b9I9a+r9V/6il/7z6Ry3936Z/1NJ/Pv2jlv7z6x+19F9A/6il/4L6Ry39F9I/aum/sP5RS/9F9I9a+i+qf9TS/+36Ry39F9M/aum/uP5RS/8l9I9a+i+pf9TS/x36Ry39l9I/aun/Tv2jlv7v0j9q6b+0/lFL/2X0j1r6L6t/1NJ/pP5RS//l9I9a+i+vf9TSfwX9o5b+79Y/auk/Sv+opf+K+kct/VfSP2rpv7L+UUv/9+gftfR/r/5RS/9V9I9a+r9P/6il//v1j1r6f0D/qKX/B/WPWvqvqn/U0n81/aOW/qvrH7X0X0P/qKX/mvpHLf3X0j9q6f8h/aOW/mvrH7X0/7D+UUv/dfSPWvp/RP+opf+6+kct/dfTP2rpv77+UUv/DfSPWvpvqH/U0n8j/aOW/hvrH7X030T/qKX/pvpHLf030z9q6b+5/lFL/y30j1r6b6l/1NJ/K/2jlv4f1T9q6b+1/lFL/230j1r6b6t/1NJ/O/2jlv7b6x+19N9B/6il/8f0j1r676h/1NJ/J/2jlv476x+19P+4/lFL/0/oH7X030X/qKX/rvpHLf130z9q6b+7/lFL/z30j1r676l/1NL/k/pHLf0/pX/U0n8v/aOW/nvrH7X030f/qKX/p/WPWvrvq3/U0n8//aOW/p/RP2rp/1n9o5b+n9M/aum/v/5RS/8D9I9a+h+of9TS//P6Ry39D9I/aul/sP5RS/9D9I9a+h+qf9TS/zD9o5b+X9A/aul/uP5RS/8v6h+19D9C/6il/5f0j1r6f1n/qKX/kfpHLf2P0j9q6X+0/lFL/6/oH7X0P0b/qKX/V/WPWvofq3/U0v9r+kct/Y/TP2rpf7z+UUv/E/SPWvqfqH/U0v8k/aOW/ifrH7X0P0X/qKX/1/WPWvqfqn/U0v80/aOW/t/QP2rpf7r+UUv/M/SPWvp/U/+opf+39I9a+p+pf9TS/9v6Ry39z9I/aun/Hf2jlv5n6x+19D9H/6il/7n6Ry39z9M/aun/Xf2jlv7f0z9q6X++/lFL/+/rH7X0v0D/qKX/D/SPWvpfqH/U0v8i/aOW/hfrH7X0/6H+UUv/S/SPWvr/SP+opf+P9Y9a+v9E/6il/0/1j1r6/0z/qKX/z/WPWvr/Qv+opf+l+kct/S/TP2rpf7n+UUv/K/SPWvr/Uv+opf+V+kct/a/SP2rpf7X+UUv/a/SPWvr/Sv+opf+v9Y9a+v9G/+gF/V/tjXkljKf/tfpHLfP/Ov2jlv7X6x+19L9B/6il/2/1j1r6/07/qKX/7/WPWvrfqH/U0v8P+kct/W/SP2rp/0f9o5b+f9I/aul/s/5RS/8/6x+19P+L/lFL/1v0j1r636p/1NL/r/pHLf1v0z9q6f83/aOW/n/XP2rp/w/9o5b+t+sftfS/Q/+opf+d+kct/e/SP2rpf7f+UUv/e/SPWvrfq3/U0v8+/aOW/vfrH7X0f0D/qKX/g/pHLf0f0j9q6f+w/lFL/0f0j1r6P6p/1NL/Mf2jlv6P6x+19H9C/6il/5P6Ry39n9I/aun/tP5RS/9n9I9K+k80oH/U0n+I/lFL/6H6Ry39h+kftfQfrn/U0n+E/lFL/4n0j1r6T6x/1NJ/Ev2jlv6T6h+19J9M/6il/+T6Ry39p9A/auk/pf5RS/+p9I9a+r9G/6il/9T6Ry39X6t/1NJ/Gv2jlv6v0z9q6f96/aOW/tPqH7X0n07/qKX/9PpHLf1n0D9q6T+j/lFL/5n0j1r6v0H/qKX/G/WPWvrPrH/U0n8W/aOW/m/SP2rpP6v+UUv/N+sftfSfTf+opf/s+kct/efQP2rpP6f+UUv/ufSPWvrPrX/U0n8e/aOW/m/RP2rp/1b9o5b+8+oftfR/m/5RS//59I9a+s+vf/Rs/4EhE3z/BfSPWub/gvpHLf0X0j9q6b+w/lFL/0X0j1r6L6p/1NL/7fpHLf0X0z9q6b+4/lFL/yX0j1r6L6l/1NL/HfpHLf2X0j9q6f9O/aOW/u/SP2rpv7T+UUv/ZfSPWvovq3/U0n+k/lFL/+X0j1r6L69/1NJ/Bf2jlv7v1j9q6T9K/6il/4r6Ry39V9I/aum/sv5RS//36B+19H+v/lFL/1X0j1r6v0//qKX/+/WPWvp/QP+opf8H9Y9a+q+qf9TSfzX9o5b+q+sftfRfQ/+opf+a+kct/dfSP2rp/yH9o5b+a+sftfT/sP5RS/919I9a+n9E/6il/7r6Ry3919M/aum/vv5RS/8N9I9a+m+of9TSfyP9o5b+G+sftfTfRP+opf+m+kct/TfTP2rpv7n+UUv/LfSPWvpvqX/U0n8r/aOW/h/VP2rpv7X+UUv/bfSPWvpvq3/U0n87/aOW/tvrH7X030H/qKX/x/SPWvrvqH/U0n8n/aOW/jvrH7X0/7j+UUv/T+gftfTfRf+opf+u+kct/XfTP2rpv7v+UUv/PfSPWvrvqX/U0v+T+kct/T+lf9TSfy/9o5b+e+sftfTfR/+opf+n9Y9a+u+rf9TSfz/9o5b+n9E/aun/Wf2jlv6f0z9q6b+//lFL/wP0j1r6H6h/1NL/8/pHLf0P0j9q6X+w/lFL/0P0j1r6H6p/1NL/MP2jlv5f0D9q6X+4/lFL/y/qH7X0P0L/qKX/l/SPWvp/Wf+opf+R+kct/Y/SP2rpf7T+UUv/r+gftfQ/Rv+opf9X9Y9a+h+rfzRB9j9uzNXn9/+a/tEE2X/s1ef3P07/qKX/8fpHLf1P0D9q6X+i/lFL/5P0j1r6n6x/1NL/FP2jlv5f1z9q6X+q/lFL/9P0j1r6f0P/qKX/6fpHLf3P0D9q6f9N/aOW/t/SP2rpf6b+wcRjLyf8/t/WP2qZ/2fpH7X0/47+UUv/s/WPWvqfo3/U0v9c/aOW/ufpH7X0/67+UUv/7+kftfQ/X/+opf/39Y9a+l+gf9TS/wf6Ry39L9Q/aul/kf5RS/+L9Y9a+v9Q/6il/yX6Ry39f6R/1NL/x/pHLf1/on/U0v+n+kct/X+mf9TS/+f6Ry39f6F/1NL/Uv2jlv6X6R+19L9c/6il/xX6Ry39f6l/1NL/Sv2jlv5X6R+19L9a/6il/zX6Ry39f6V/1NL/1/pHLf1/o3/U0v9a/aOW/tfpH7X0v17/qKX/DfpHLf1/q3/U0v93+kct/X+vf9TS/0b9o5b+f9A/aul/k/5RS/8/6h+19P+T/lFL/5v1j1r6/1n/qKX/X/SPWvrfon/U0v9W/aOW/n/VP2rpf5v+UUv/v+kftfT/u/5RS/9/6B+19L9d/6il/x36Ry3979Q/aul/l/5RS/+79Y9a+t+jf9TS/179o5b+9+kftfS/X/+opf8D+kct/R/UP2rp/5D+UUv/h/WPWvo/on/U0v9R/aOW/o/pH7X0f1z/qKX/E/pHLf2f1D9q6f+U/lFL/6f1j1r6P6N/VNJ/4gH9o5b+Q/SPWvoP1T9q6T9M/6il/3D9o5b+I/SPWvpPpH/U0n9i/aOW/pPoH7X0n1T/qKX/ZPpHLf0n1z9q6T+F/lFL/yn1j1r6T6V/1NL/NfpHLf2n1j9q6f9a/aOW/tPoH7X0f53+UUv/1+sftfSfVv+opf90+kct/afXP2rpP4P+UUv/GfWPWvrPpH/U0v8N+kct/d+of9TSf2b9o5b+s+gftfR/k/5RS/9Z9Y9a+r9Z/6il/2z6Ry39Z9c/auk/h/5RS/859Y9a+s+lf9TSf279o5b+8+gftfR/i/5RS/+36h+19J9X/6il/9v0j1r6z6d/1NJ/fv2jlv4L6B+19F9Q/6il/0L6Ry39F9Y/aum/iP5RS/9F9Y9a+r9d/6il/2L6Ry39F9c/aum/hP5RS/8l9Y9a+r9D/2hC7v+83hMvpX80Ifd//vx/p/5RS/936R+19F9a/6il/zL6Ry39l9U/auk/Uv+opf9y+kct/ZfXP2rpv4L+UUv/d+sftfQfpX/U0n9F/aOW/ivpH7X0X1n/qKX/e/SPWvq/V/+opf8q+kct/d+nf9TS//36Ry39P6B/1NL/g/pHLf1X1T9q6b+a/lFL/9X1j1r6r6F/1NJ/Tf2jlv5r6R+19P+Q/lFL/7X1j1r6f1j/qKX/OvpHLf0/on/U0n9d/aOW/uvpH7X0X1//qKX/BvpHLf031D9q6b+R/lFL/431j1r6b6J/1NJ/U/2jlv6b6R+19N9c/6il/xb6Ry39t9Q/aum/lf5RS/+P6h+19N9a/6il/zb6Ry39t9U/aum/nf5RS//t9Y9a+u+gf9TS/2P6Ry39d9Q/aum/k/5RS/+d9Y9a+n9c/6il/yf0j1r676J/1NJ/V/2jlv67vbD/M2P9xzfvv01L/93N/6il/x76Ry3999Q/aun/Sf2jlv6f0j9q6b+X/lFL/731j1r676N/1NL/0/pHLf331T9q6b+f/lFL/8/oH7X0/6z+UUv/z+kftfTfX/+opf8B+kct/Q/UP2rp/3n9o5b+B+kftfQ/WP+opf8h+kct/Q/VP2rpf5j+UUv/L+gftfQ/XP+opf8X9Y9a+h+hf9TS/0v6Ry39v6x/1NL/SP2jlv5H6R+19D9a/6il/1f0j1r6H6N/1NL/q/pHLf2P1T9q6f81/aOW/sfpH7X0P17/qKX/CfpHLf1P1D9q6X+S/lFL/5P1j1r6n6J/1NL/6/pHLf1P1T9q6X+a/lFL/2/oH7X0P13/qKX/GfpHLf2/qX/U0v9b+kct/c/UP2rp/239o5b+Z+kftfT/jv5RS/+z9Y9a+p+jf9TS/1z9o5b+5+kftfT/rv5RS//v6R+19D9f/6il//f1j1r6X6B/1NL/B/pHLf0v1D9q6X+R/lFL/4v1j1r6/1D/qKX/JfpHLf1/pH/U0v/H+kct/X+if9TS/6f6Ry39f6Z/1NL/5/pHLf1/oX/U0v9S/aOW/pfpH7X0v1z/qKX/FfpHLf1/qX/U0v9K/aOW/lfpH7X0v1r/qKX/NfpHLf1/pX/U0v/X+kct/X+jf9TS/1r9o5b+1+kftfS/Xv+opf8N+kct/X+rf9TS/3f6Ry39f69/1NL/Rv2jlv5/0D9q6X+T/lFL/z/qH7X0/5P+UUv/m/WPWvr/Wf+opf9f9I9a+t+if9TS/1b9o5b+f9U/aul/m/5RS/+/6R+19P+7/lFL/3/oH7X0v13/qKX/HfpHLf3v1D9q6X+X/lFL/7v1j1r636N/1NL/Xv2jlv736R+19L9f/6il/wP6Ry39H9Q/aun/kP5RS/+H9Y9a+j+if9TS/1H9o5b+j+kftfR/XP+opf8T+kct/Z/UP2rp/5T+UUv/p/WPWvo/o39U0n+SAf2jlv5D9I9a+g/VP2rpP0z/qKX/cP2jlv4j9I9a+k+kf9TSf2L9o5b+k+gftfSfVP+opf9k+kct/SfXP2rpP4X+UUv/KfWPWvpPpX/U0v81+kct/afWP2rp/1r9o5b+0+gftfR/nf5RS//X6x+19J9W/6il/3T6Ry39p9c/auk/g/5RS/8Z9Y9a+s+kf9TS/w36Ry3936h/1NJ/Zv2jlv6z6B+19H+T/lFL/1n1j1r6v1n/qKX/bPpHLf1n1z9q6T+H/lFL/zn1j1r6z6V/1NJ/bv2jlv7z6B+19H+L/lFL/7fqH7X0n1f/qKX/2/SPWvrPp3/U0n9+/aOW/gvoH7X0X1D/qKX/QvpHLf0X1j9q6b+I/lFL/0X1j1r6v13/qKX/YvpHLf0X1z9q6b+E/lFL/yX1j1r6v0P/qKX/UvpHLf3fqX/U0v9d+kct/ZfWP2rpv4z+UUv/ZfWPWvqP1D9q6b+c/lFL/+X1j1r6r6B/1NL/3fpHLf1H6R+19F9R/6il/0r6Ry39V9Y/aun/Hv2jlv7v1T9q6b+K/lFL//fpH7X0f7/+UUv/D+gftfT/oP5RS/9V9Y9a+q+mf9TSf3X9o5b+a+gftfRfU/+opf9a+kct/T+kf9TSf239o5b+H9Y/aum/jv5RS/+P6B+19F9X/6il/3r6Ry3919c/aum/gf5RS/8N9Y9a+m+kf9TSf2P9o5b+m+gftfTfVP+opf9m+kct/TfXP2rpv4X+UUv/LfWPWvpvpX/U0v+j+kct/bfWP2rpv43+UUv/bfWPWvpvp3/U0n97/aOW/jvoH7X0/5j+UUv/HfWPWvrvpH/U0n9n/aOW/h/XP2rp/wn9o5b+u+gftfTfVf+opf9u+kct/XfXP2rpv4f+UUv/PfWPWvp/Uv+opf+n9I9a+u+lf9TSf2/9o5b+++gftfT/tP5RS/999Y9a+u+nf9TS/zP6Ry39P6t/1NL/c/pHLf331z9q6X+A/lFL/wP1j1r6f17/qKX/QfpHLf0P1j9q6X+I/lFL/0P1j1r6H6Z/1NL/C/pHLf0P1z9q6f9F/aOW/kfoH7X0/5L+UUv/L+sftfQ/Uv+opf9R+kct/Y/WP2rp/xX9o5b+x+gftfT/qv5RS/9j9Y9a+n9N/6il/3H6Ry39j9c/aul/gv5RS/8T9Y9a+p+kf9TS/2T9o5b+p+gftfT/uv5RS/9T9Y9a+p+mf9TS/xv6Ry39T9c/aul/hv5RS/9v6v8iS47o6f8t/aOW/mfqH7X0/7b+UUv/s/SPWvp/R/+opf/Z+kct/c/RP2rpf67+UUv/8/SPWvp/V/+opf/39I9a+p+vf9TS//v6Ry39L9A/aun/A/2jlv4X6h+19L9I/6il/8X6Ry39f6h/1NL/Ev2jlv4/0j9q6f9j/aOW/j/RP2rp/1P9o5b+P9M/aun/c/2jlv6/0D9q6X+p/lFL/8v0j1r6X65/1NL/Cv2jlv6/1D9q6X+l/lFL/6v0j1r6X61/1NL/Gv2jlv6/0j9q6f9r/aOW/r/RP2rpf63+UUv/6/SPWvpfr3/U0v8G/aOW/r/VP2rp/zv9o5b+v9c/aul/o/5RS/8/6B+19L9J/6il/x/1j1r6/0n/qKX/zfpHLf3/rH/U0v8v+kct/W/RP2rpf6v+UUv/v+oftfS/Tf+opf/f9I9a+v9d/6il/z/0j1r6365/1NL/Dv2jlv536h+19L+rqP/N+778ZVv6313U/1/R0v8e/aOW/vfqH7X0v0//qKX//fpHLf0f0D9q6f+g/lFL/4f0j1r6P6x/1NL/Ef2jlv6P6h+19H9M/6il/+P6Ry39n9A/aun/pP5RS/+n9I9a+j+tf9TS/xn9o5L+kw7oH7X0H6J/1NJ/qP5RS/9h+kct/YfrH7X0H6F/1NJ/Iv2jlv4T6x+19J9E/6il/6T6Ry39J9M/auk/uf5RS/8p9I9a+k+pf9TSfyr9o5b+r9E/auk/tf5RS//X6h+19J9G/6il/+v0j1r6v17/qKX/tPpHLf2n0z9q6T+9/lFL/xn0j1r6z6h/1NJ/Jv2jlv5v0D9q6f9G/aOW/jPrH7X0n0X/qKX/m/SPWvrPqn/U0v/N+kct/WfTP2rpP7v+UUv/OfSPWvrPqX/U0n8u/aOW/nPrH7X0n0f/qKX/W/SPWvq/Vf+opf+8+kct/d+mf9TSfz79o5b+8+sftfRfQP9ogusPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPD/2IEDAQAAAAAg/9dGqKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsIOHAgAAAAAAPm/NkJVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVUVduBAAAAAAADI/7URqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrADByQAAAAAgv6/bkegAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3BQAA///VlCwg")
syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000002c0)='./file0/file0\x00', 0x0, &(0x7f0000000680)=ANY=[], 0x2, 0xc24, &(0x7f0000000d00)="$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")
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r6, &(0x7f0000000040), 0x208e24b)
fadvise64(r6, 0x103, 0x4000000000000008, 0x4)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000000)=0x15)
r7 = io_uring_setup(0x66fc, &(0x7f0000000080)={0x0, 0xf9d3, 0x408, 0x2, 0x33f})
r8 = syz_io_uring_setup(0x239, &(0x7f0000000200)={0x0, 0x5e5, 0x10100, 0x0, 0x0, 0x0, r7}, &(0x7f0000000100)=<r9=>0x0, &(0x7f00000001c0)=<r10=>0x0)
syz_io_uring_submit(r9, r10, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
syz_emit_ethernet(0x2a, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaa0000000000003a1a5cbdaca3259269524d2508004500003c000000000033907800000002"], 0x0)
io_uring_enter(r8, 0x2def, 0x0, 0x20, 0x0, 0x0)

5m52.865565263s ago: executing program 4 (id=3804):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000080000085000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6002, &(0x7f0000000000)=0x3, 0xf, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000080)='./file0\x00', 0x4000, &(0x7f00000026c0)={[{@part={'part', 0x3d, 0x10ffff}}, {@umask={'umask', 0x3d, 0x3}}, {@codepage={'codepage', 0x3d, 'euc-jp'}}, {@iocharset={'iocharset', 0x3d, 'cp775'}}]}, 0x4, 0x343, &(0x7f0000000280)="$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")
r3 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.log\x00', 0x1812c1, 0x0)
fchown(r3, 0xee01, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000780)='devpts\x00', 0x0, 0x0)
mount$binder(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x28, &(0x7f0000000240)={[{}]})
openat$vimc0(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)

5m50.938041071s ago: executing program 4 (id=3806):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r1=>0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2)
sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="0100020000020100", @ANYRES32=r1, @ANYBLOB], 0x1c}}, 0x0)
read$nci(r0, &(0x7f0000000200)=""/100, 0x64)
write$nci(r0, &(0x7f0000000280)=@NCI_OP_CORE_RESET_RSP, 0x6)
read$nci(r0, &(0x7f00000002c0)=""/100, 0x64)
write$nci(r0, &(0x7f0000000340)=@NCI_OP_CORE_INIT_RSP, 0x14)
read$nci(r0, &(0x7f0000000380)=""/100, 0x64)
write$nci(r0, &(0x7f0000000400)=@NCI_OP_RF_DISCOVER_MAP_RSP, 0x4)
sendmsg$NFC_CMD_START_POLL(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000780)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002301000034020000060000001f000100abc15bd4a50b543904a6ce0d73ff325033d1a6f74d82d6548b7c90570f9529047550fbc9e3580fe0ff91d2304d8ee184bf714ce45101efaf5691e9edde00"/94, @ANYRES32=r1, @ANYBLOB="08000300ffffffff"], 0x24}}, 0x0)
read$nci(r0, &(0x7f0000000500)=""/100, 0x64)
write$nci(r0, &(0x7f0000000800)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x0, 0x2, 0x2, 0x0, {0x1, 0x5f, "b26bf8a60c9b04ac967e3a43477fa3f1b3be65606e92adaea675662f4577c12287633308c2bfc2eb13a41705191fac06ea1290f60cc7d07c45646d210fbf1efa67883c62840aa930dc972257d7888876b9aaa503000000e750060000007658"}}, 0x64)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000002000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='kmem_cache_free\x00', r5}, 0x18)
r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0xb}, 0x1c)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_emit_ethernet(0x66, &(0x7f00000004c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbbbbbbbbbbbbb86dd60003a0400303afffe8000000000000000000000000000bbff020000000000000000000000000001"], 0x0)
read$nci(r0, &(0x7f00000005c0)=""/100, 0x64)
write$nci(r0, &(0x7f0000000640)=@NCI_OP_CORE_SET_CONFIG_RSP, 0x5)
read$nci(r0, &(0x7f0000000680)=""/100, 0x64)
write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_DISCOVER_RSP, 0x4)
write$nci(r0, &(0x7f0000000740)=@NCI_OP_RF_DISCOVER_NTF={0x1, 0x0, 0x3, 0x3, 0x0, @b={0x0, 0x1, 0x1, 0x1, {0x1, "aa"}}}, 0xa)
socket$inet6_tcp(0xa, 0x1, 0x0)

5m48.846677617s ago: executing program 4 (id=3815):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000001080)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000000)=0x40000005, 0x4)
recvmmsg(r0, &(0x7f0000003c80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=""/29, 0x1d}, 0x5}], 0x1, 0x40010122, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f00000001c0)=0x7f, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x4000, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

5m48.384428093s ago: executing program 43 (id=3815):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000001080)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000000)=0x40000005, 0x4)
recvmmsg(r0, &(0x7f0000003c80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)=""/29, 0x1d}, 0x5}], 0x1, 0x40010122, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x8, &(0x7f00000001c0)=0x7f, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x4000, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)

5m30.315562312s ago: executing program 6 (id=3859):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000884}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
ioctl$DRM_IOCTL_SET_UNIQUE(0xffffffffffffffff, 0x40106410, &(0x7f0000000180)={0x0, 0x0})
io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r2, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x384, 0x1000, 0x0, 0xd968d5b908ac0cdc, 0x40000000, {}, {0x3}, {0xf4ef, 0x1000}, {0x0, 0x0, 0xffe}, 0x0, 0x100, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0xa})

5m29.480541896s ago: executing program 6 (id=3861):
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2)
r1 = syz_clone(0xa0122580, 0x0, 0x0, 0x0, 0x0, 0x0)
getsockopt(0xffffffffffffffff, 0x28, 0x2000006, 0x0, &(0x7f0000000000))
r2 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00')
fchdir(r2)
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xaf}, [@ldst={0x6, 0x2}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x21)
ioctl$SNDCTL_SEQ_PANIC(r2, 0x5111)
syz_usb_disconnect(0xffffffffffffffff)
r3 = syz_open_procfs(r1, &(0x7f0000000040)='cgroup\x00')
pread64(r3, &(0x7f0000000140)=""/15, 0xf, 0x4)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000280)={0x2, @pix={0x0, 0x80000001, 0x4f424752, 0x2, 0x0, 0x1a18e3f7, 0x8, 0x81, 0x1, 0x0, 0x1, 0x61d03986f8975691}})

5m27.750807834s ago: executing program 6 (id=3863):
prlimit64(0x0, 0x0, &(0x7f0000000140)={0x4, 0xffffffffffffffff}, 0x0)
rseq(&(0x7f0000000400), 0x20, 0x0, 0x0)
futex(&(0x7f000000cffc)=0x100000000000004, 0x0, 0x4, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc), 0x1, 0x0, 0x0, 0x0, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x5, 0xc7, 0x10, 0x6}, {0x101, 0x6, 0x3, 0x80000001}]})
r0 = socket$inet(0x2, 0x5, 0x0)
close(0x3)
syz_open_dev$video(&(0x7f0000000040), 0x1, 0x0)
r1 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0xa83b, 0x10000}, &(0x7f0000000340)=<r2=>0x0, &(0x7f00000000c0)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x4, r0, 0x0, 0x0, 0x0, 0x80000, 0x1})
io_uring_enter(r1, 0x78cb, 0x0, 0x9, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan0\x00'})
read$FUSE(0xffffffffffffffff, &(0x7f0000000440)={0x2020, 0x0, <r5=>0x0}, 0x2020)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000380)={0x50, 0xfffffffffffffff5, r5, {0x7, 0x2b, 0x9, 0x9004, 0x8, 0x6467, 0x8, 0x1, 0x0, 0x0, 0x0, 0x5}}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x13, 0x3, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x6f}}, &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
syz_mount_image$squashfs(&(0x7f0000001ac0), &(0x7f0000000180)='./file0\x00', 0x800, &(0x7f0000001000)=ANY=[], 0x1, 0x1cc, &(0x7f00000001c0)="$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")
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000002480), 0x5c, &(0x7f0000000200)={[{@default_permissions}]})

5m27.264154008s ago: executing program 6 (id=3865):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000080000085000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r0 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', <r1=>0x0})
bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48)
mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6002, &(0x7f0000000000)=0x3, 0xf, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000080)='./file0\x00', 0x4000, &(0x7f00000026c0)={[{@part={'part', 0x3d, 0x10ffff}}, {@umask={'umask', 0x3d, 0x3}}, {@codepage={'codepage', 0x3d, 'euc-jp'}}, {@iocharset={'iocharset', 0x3d, 'cp775'}}]}, 0x4, 0x343, &(0x7f0000000280)="$eJzs3U9r1EwcB/DvJLvb7LOlT562D4Xn9FAteCptPSgetEjx4hvwIMXabqE0VtAKWhCrZxFvguDRm2fRt6AX8Q0oHgqKJ70UD0ZmMvm3zmTT7bZp7fcD7mY38+c3yUwy01IDIjqyzs99eH5yS/4TdQAugDOAA8ADagD+xZh3a229a0FusiUQ5RS/pVlca5uyetA5NF9+qmEw+x3tjTAMw4/23Z/Oqrdv+xcQVUJkR3CGAwzAUSNR7ff2PbK9sSnbddRkzrDYxjZuY6jKcIiIqHr6/u/ou8Sgnr87DjCh5+GH/f6fm99sVxfHgZDc/53ocyjk8flb7ZLrvZX1oL0ULeHk2XfiVaKpLGOfCF009KZ6dwC3lZlyZWoxU7E4zeWVoD25qQp4gHNaJtmoel1C3BCZFLZodUTjhrVpgaK2F2upNtRlG2Ys8Y8U1WhcAL/+gifm6ubflohJvBHvxLzw8RRLyfyvFgp5cNTx8TuGShT/lL1E1Uo/SpVrZRr+P6qS/+Iz8OpF2sqm7bh6cGUsJrIU0Tl/9+M4HzfsuTCM/I8VotZN21unco0ANaE7V5prJkn0w5hrtLOu5nI9aE8uXg9snb6/jCs68UhcEuP4ipeYy8z/HZl6AvaRmRvlQqXUPaOwPTWV0nIec9QAvlZ+ZNZLp/zTXTCe6A6f8x8f4ipOY+jmnY3VhSBo36h+Ix4qPWb/v8/xRB1Rd0f5jXzPpIEnN2Qn7FulP8MwNO6qoWQ5cpD2HEY0oE49S5u8sbog9DVvdw2UV86OXbP2xABmAehv4itCL7XfS3INpAWWyv5dnm31jblDxlHtwwCJq8rtcjFQaqQ0e6j04t3VhaDnqxEdIulJx9jlqoOhKsh5l4jWf5n1ypS66sgXv2D9E3YrPFPitGUFNKxe/0pWcEqXNVfLvoJrxRtd1lzHTgDHG/kaHcQ13u8s1tdx4iD+VnLnv8oQc3iPK/z5PxERERERERERERERERERERERERHRYbPTv0bo5c8J8jVuHcH/eIOIiIiIiIiIiIiIiIiIiIiIiIiIiIiIaHfS5/8mz3dpmJ7/W/SkJsWNnhDj9eP5v26J5/+KzXINJCKrXwEAAP//HJ9f3A==")
r3 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000080)='.log\x00', 0x1812c1, 0x0)
fchown(r3, 0xee01, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000780)='devpts\x00', 0x0, 0x0)
mount$binder(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x28, &(0x7f0000000240)={[{}]})
openat$vimc0(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)

5m25.49243886s ago: executing program 6 (id=3867):
r0 = epoll_create1(0x80000)
io_setup(0x2, &(0x7f0000002400)=<r1=>0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000180)=0x5)
io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f00000010c0)={0x0, 0x0, 0x0, 0x5, 0x2, r0, 0x0, 0x0, 0x0, 0x0, 0x2}])
syz_io_uring_submit(0x0, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x7c, r3, 0x705, 0x70bd2b, 0x25dfdbff, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x68, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x4}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x6}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x5}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}, @ETHTOOL_A_STRINGSET_ID={0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x3}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}, @ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x1}]}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x0)
io_uring_enter(0xffffffffffffffff, 0x7a98, 0x0, 0x0, 0x0, 0x0)
r4 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r4, &(0x7f00000005c0)={0x4})
syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x30008c0, &(0x7f0000000600)=ANY=[@ANYBLOB="706172743d307830303030303030342c6469725f756d61736b3d30303030303030303030303030303030303030313434312c636f6465706167653d6370313235352c696f636861727365743d69736f383835392d362c6469725f756d61736b3d30303030303030303030303030303030303030303031302c00d12e8a065920156d8974eef6b587220dcbd497e880ddf8c68beb90cce0feae43df4ff925b5bb3000ffe30b40bc22c81b72a17c026f0f5484f84f7e5736331e4ac77238cde55799a6f9db3dcf523b37b38a5b5df2972eaf7f17ceea5e1e769bc2294d0000000000000000"], 0x11, 0x2bd, &(0x7f0000000200)="$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")

5m22.607517874s ago: executing program 6 (id=3877):
r0 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast2}, 0x10)
r1 = socket$kcm(0x2, 0x2, 0x73)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x5, <r2=>0x0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x19, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000008500000051000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x6d, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xed, @void, @value}, 0x94)
bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10)
r3 = socket$kcm(0x2, 0x2, 0x73)
syz_mount_image$udf(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'], 0x1, 0x489, &(0x7f0000000580)="$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")
r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
getdents64(r4, 0xfffffffffffffffe, 0x29)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
r5 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_open_dev$usbfs(0x0, 0x74, 0x101301)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40004)
ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000040)={0x8, 0x9, 0x6})
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0})
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r5, 0xc4c85513, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0xfffffffffffffffb, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffe, 0x0, 0x4, 0x7, 0x0, 0x0, 0x0, 0x80003, 0x0, 0x0, 0x4, 0x200, 0x20000, 0x40000000000, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x6, 0x3, 0x0, 0x100000001]})
bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x10)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x14, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b0000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r8, 0x0, 0xe, 0x0, &(0x7f0000000900)="928e04b416cac951c35f7f4586e6", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2a, 0x25, 0xc6, 0x40, 0x7b0, 0x7, 0x17c6, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xaa, 0x0, 0x2, 0x74, 0xce, 0x91, 0x0, [], [{{0x9, 0x5, 0x3, 0x1, 0x200, 0x1f, 0x3, 0x8}}, {{0x9, 0x5, 0x5, 0x1, 0x10, 0x8, 0x0, 0x7}}]}}]}}]}}, 0x0)

5m21.794202004s ago: executing program 44 (id=3877):
r0 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @multicast2}, 0x10)
r1 = socket$kcm(0x2, 0x2, 0x73)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x5, <r2=>0x0}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x19, 0xc, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000008500000051000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x6d, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xed, @void, @value}, 0x94)
bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x10)
r3 = socket$kcm(0x2, 0x2, 0x73)
syz_mount_image$udf(&(0x7f00000004c0), &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00'], 0x1, 0x489, &(0x7f0000000580)="$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")
r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
getdents64(r4, 0xfffffffffffffffe, 0x29)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
r5 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_open_dev$usbfs(0x0, 0x74, 0x101301)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x40004)
ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000040)={0x8, 0x9, 0x6})
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0})
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r5, 0xc4c85513, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0xfffffffffffffffb, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xfffffffffffffffe, 0x0, 0x4, 0x7, 0x0, 0x0, 0x0, 0x80003, 0x0, 0x0, 0x4, 0x200, 0x20000, 0x40000000000, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x6, 0x3, 0x0, 0x100000001]})
bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x10)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x14, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b0000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r8, 0x0, 0xe, 0x0, &(0x7f0000000900)="928e04b416cac951c35f7f4586e6", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2a, 0x25, 0xc6, 0x40, 0x7b0, 0x7, 0x17c6, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xaa, 0x0, 0x2, 0x74, 0xce, 0x91, 0x0, [], [{{0x9, 0x5, 0x3, 0x1, 0x200, 0x1f, 0x3, 0x8}}, {{0x9, 0x5, 0x5, 0x1, 0x10, 0x8, 0x0, 0x7}}]}}]}}]}}, 0x0)

2m43.338829209s ago: executing program 5 (id=4330):
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000280)='./file2\x00', 0x3200c00, &(0x7f0000000340)=ANY=[], 0x2, 0xab4, &(0x7f0000000400)="$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")
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000009c0), 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r6, 0x0, 0x0, 0x0, <r7=>0x0})
ioctl$IOMMU_HWPT_ALLOC$NONE(r5, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r7, r6, <r8=>0x0, 0x0, 0x0, 0xcf, &(0x7f0000000ec0)="8762dcd14817e800364a3498090ec65cc77745fd467baadd3dc2ce86ea93b7fe2efe79b3a54497c7b3eba3f329fabf8c376e4f65d156048bea48668bc4e2a766588e08de140110aeae2643d85ff544b261b7bcc58bd77fbc82685a60586c783cbcb19d76fa9df7dbb3728fd71c022b04f0172e8c4d7acd84201393490c970356ebbf881ef3d8b3c6c70ba40c2e03f8519a7a25cab9d5ba95b10a69239f53d3b7c7b8b97cb871c37d547dc9127c7fcee25d5b8cbe144dc807dc12c13409e55b35b6a7e50be64bb560f6b25f11aaf09c"})
ioctl$IOMMU_HWPT_ALLOC$TEST(r5, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r7, r8, <r9=>0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)})
ioctl$IOMMU_HWPT_INVALIDATE$TEST(r5, 0x3b8d, 0x0)
ioctl$IOMMU_DESTROY$hwpt(r5, 0x3b80, &(0x7f0000000300)={0x8, r9})
ioctl$IOMMU_DESTROY$hwpt(r5, 0x3b80, 0x0)
ioctl$IOMMU_GET_HW_INFO(r5, 0x3b8a, 0x0)
ioctl$IOMMU_DESTROY$ioas(r5, 0x3b80, &(0x7f0000000440)={0x8, r6})
close(r5)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000340)=ANY=[@ANYBLOB="b40000001dcf5d7163c8445663c228eadf", @ANYRES16=r1, @ANYBLOB="010026bd7000ffdbdf2518000000c2ff01006e657464657673696d0000000f0002006e657464657673696d300000080003000300000008000b0004000000060016000b0000000500120001000000060011008000000008000b0006000000000001007063690000000200303030303a30303a31302e3000000000080003000100000008000b000400000006001600050000000500120001000000060011000900000008000b0008000000"], 0xb4}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
truncate(&(0x7f0000000080)='./file2\x00', 0x4)

2m41.598365282s ago: executing program 5 (id=4335):
socket$inet6_tcp(0xa, 0x1, 0x0)
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1)
getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000000), &(0x7f0000000040)=0xc)
r1 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000080)={{0x3, @bcast}, [@bcast, @rose, @rose, @null, @netrom, @rose]}, &(0x7f0000000100)=0x48, 0x80000)
ioctl$FS_IOC_SETVERSION(r1, 0x40087602, &(0x7f0000000140)=0x3)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r2, &(0x7f0000000180)={0xa, 0x4e24, 0x5, @local, 0x4}, 0x1c)
ioctl$FIGETBSZ(r2, 0x2, &(0x7f00000001c0))
r3 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_USER_TTY(r3, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x88, 0x464, 0x20, 0x70bd25, 0x25dfdbfc, "9e1f91dfa302d6440709e894ff20e71acd776d65c8a9b8119683c7d6c28981eb79b9f706685bde778fdbdba20081bfc8da9295b02fccebdcf88c55daf4b1c01039f388c9c0069484a40cb8251797b4df7bfc73ff53ec9d92b8ba392b981555cb0b6c766dca9044ac577523ed3919c887b2abf5e331", ["", "", "", "", "", "", "", ""]}, 0x88}, 0x1, 0x0, 0x0, 0x4000}, 0x40000080)

2m41.16595275s ago: executing program 5 (id=4337):
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000280)='./file2\x00', 0x3200c00, &(0x7f0000000340)=ANY=[], 0x2, 0xab4, &(0x7f0000000400)="$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")
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000009c0), 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f00000002c0), 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r5 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r5, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r6=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r5, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r6, 0x0, 0x0, 0x0, <r7=>0x0})
ioctl$IOMMU_HWPT_ALLOC$NONE(r5, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r7, r6, <r8=>0x0, 0x0, 0x0, 0xcf, &(0x7f0000000ec0)="8762dcd14817e800364a3498090ec65cc77745fd467baadd3dc2ce86ea93b7fe2efe79b3a54497c7b3eba3f329fabf8c376e4f65d156048bea48668bc4e2a766588e08de140110aeae2643d85ff544b261b7bcc58bd77fbc82685a60586c783cbcb19d76fa9df7dbb3728fd71c022b04f0172e8c4d7acd84201393490c970356ebbf881ef3d8b3c6c70ba40c2e03f8519a7a25cab9d5ba95b10a69239f53d3b7c7b8b97cb871c37d547dc9127c7fcee25d5b8cbe144dc807dc12c13409e55b35b6a7e50be64bb560f6b25f11aaf09c"})
ioctl$IOMMU_HWPT_ALLOC$TEST(r5, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r7, r8, <r9=>0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)})
ioctl$IOMMU_HWPT_INVALIDATE$TEST(r5, 0x3b8d, 0x0)
ioctl$IOMMU_DESTROY$hwpt(r5, 0x3b80, &(0x7f0000000300)={0x8, r9})
ioctl$IOMMU_DESTROY$hwpt(r5, 0x3b80, 0x0)
ioctl$IOMMU_GET_HW_INFO(r5, 0x3b8a, 0x0)
ioctl$IOMMU_DESTROY$stdev(r5, 0x3b80, 0x0)
close(r5)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xc, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000340)=ANY=[@ANYBLOB="b40000001dcf5d7163c8445663c228eadf", @ANYRES16=r1, @ANYBLOB="010026bd7000ffdbdf2518000000c2ff01006e657464657673696d0000000f0002006e657464657673696d300000080003000300000008000b0004000000060016000b0000000500120001000000060011008000000008000b0006000000000001007063690000000200303030303a30303a31302e3000000000080003000100000008000b000400000006001600050000000500120001000000060011000900000008000b0008000000"], 0xb4}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
truncate(&(0x7f0000000080)='./file2\x00', 0x4)

2m39.647089384s ago: executing program 5 (id=4341):
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x9, 0xc3072, 0xffffffffffffffff, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6)
bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x8002, 0x1, @empty, 0x6}, 0x1c)

2m38.305499938s ago: executing program 5 (id=4348):
prlimit64(0x0, 0x0, &(0x7f0000000140)={0x4, 0xffffffffffffffff}, 0x0)
rseq(&(0x7f0000000400), 0x20, 0x0, 0x0)
futex(&(0x7f000000cffc), 0x1, 0x0, 0x0, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x5, 0xc7, 0x10, 0x6}, {0x101, 0x6, 0x3, 0x80000001}]})
syz_open_dev$video(&(0x7f0000000040), 0x1, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'})
read$FUSE(0xffffffffffffffff, &(0x7f0000000440)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000380)={0x50, 0xfffffffffffffff5, r1, {0x7, 0x2b, 0x9, 0x9004, 0x8, 0x6467, 0x8, 0x1, 0x0, 0x0, 0x0, 0x5}}, 0x50)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000002480), 0x5c, &(0x7f0000000200)={[{@default_permissions}]})

2m37.995642822s ago: executing program 5 (id=4351):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0)
close(r4)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e97a6a9ecae000000ee00000000000000000000000000fc020000000000000000000000000000030006000000000002000000e00000010000000000000000010018"], 0x88}}, 0x0)
r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0)
writev(r6, 0x0, 0x0)
r7 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r7, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0xf, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x1, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@empty, @in6=@private2}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f68737200000000140001"], 0xfc}}, 0x0)
r9 = fsopen(&(0x7f0000000280)='smb3\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0)
r10 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0)
futex_waitv(&(0x7f0000001940)=[{0x8, 0x0, 0xc1}], 0x1, 0x0, 0x0, 0x1)
syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000040)=ANY=[], 0x0)
ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r10, 0x80083314, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a14000000020a010400000000000000000300000214401d001100010000000000000000000000000a"], 0x3c}}, 0x0)

2m22.684960959s ago: executing program 45 (id=4351):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0)
close(r4)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0)
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e97a6a9ecae000000ee00000000000000000000000000fc020000000000000000000000000000030006000000000002000000e00000010000000000000000010018"], 0x88}}, 0x0)
r6 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0)
writev(r6, 0x0, 0x0)
r7 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r7, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0xf, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x1, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@empty, @in6=@private2}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000002c00038008000140000000000800024000000000180003801400010076657468305f746f5f687372000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f68737200000000140001"], 0xfc}}, 0x0)
r9 = fsopen(&(0x7f0000000280)='smb3\x00', 0x1)
fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0)
r10 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0)
futex_waitv(&(0x7f0000001940)=[{0x8, 0x0, 0xc1}], 0x1, 0x0, 0x0, 0x1)
syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000040)=ANY=[], 0x0)
ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r10, 0x80083314, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f80)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a14000000020a010400000000000000000300000214401d001100010000000000000000000000000a"], 0x3c}}, 0x0)

17.735652696s ago: executing program 3 (id=4717):
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="54386cf0b80f3358d45c1fb82793070716e2f4369fdb1e974c114e30d6f95464ec373e736ce14dcae526d9ad4e75e03ab1304d45e2611a25fb0036e2f00cd8d2b81062583b040ff96666ae74a66dab41d5ad2a0ba70c80d06ab2a56a664928e52ee1ecb09138c27174347283fb38a1b44146ca7587823ed5bccd1ba7e2e4a18f4e0828ff7fdeabfd32911f99d37cfd1c0d3f876fc876316784595e80f710ae901715b60b2e5806bce673f3549a44cadb15bf11937b3af48ec53f3f25bc7bec2bc6a3b4f9afd683aa88a6c39c49774d4b7f7d517772f2756270e99c03ac636abc78c785248042b57c2292797f7b1b"], 0x1, 0x123d, &(0x7f0000001900)="$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")
ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x40047211, &(0x7f0000000080))

15.267731482s ago: executing program 0 (id=4720):
prlimit64(0x0, 0xe, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4001}, 0x8894)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f0000000200)={[{@nossd_spread}, {@nodatacow}, {@enospc_debug}, {@usebackuproot}, {@nodatasum}, {@autodefrag}, {@user_subvol_rm}, {@max_inline={'max_inline', 0x3d, [0x37, 0x35, 0x67, 0x39, 0x65, 0x78]}}]}, 0x1, 0x511f, &(0x7f0000005140)="$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")

14.984210684s ago: executing program 8 (id=4722):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}}, 0x4000)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0)
recvmmsg(r0, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001b40)=""/153, 0x99}, {&(0x7f0000005c40)=""/4100, 0x1004}], 0x2}, 0x6}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000004c40)=""/4096, 0x1000}, {&(0x7f0000001580)=""/241, 0xf1}, {&(0x7f0000000240)=""/105, 0x69}, {&(0x7f00000002c0)=""/145, 0x91}, {&(0x7f0000003c40)=""/4092, 0xffc}, {&(0x7f00000018c0)=""/147, 0x93}], 0x6}, 0x7ffffffe}, {{0x0, 0x0, 0x0}, 0x5}], 0x5, 0x40008142, 0x0)

14.907665233s ago: executing program 3 (id=4723):
r0 = socket$inet6(0xa, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10)
openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
syz_emit_ethernet(0x6a, &(0x7f0000000000)=ANY=[@ANYBLOB="aad39fc51176712d11a4d0863a9d323daaaaaaaaaa0180c200000008004500005c00100000001190780000000000000000fffd4e200048907803000000000000006d4dfdeb8cf7bbfe143803bec2ce783e04cd32308cdd8ddec71cb8adfce542a4bc5a026c208fd0c457"], 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000000000000000000b0000000002000000000000120000000000005f00"], 0x0, 0x34, 0x0, 0xa, 0x0, 0x0, @void, @value}, 0x28)
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r6 = syz_open_procfs(0x0, 0x0)
r7 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r6, &(0x7f0000000040))
epoll_ctl$EPOLL_CTL_MOD(r7, 0x3, r6, &(0x7f0000000c40))
setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000200)={@dev={0xfe, 0x80, '\x00', 0xfc}}, 0x14)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r8, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20)
close(r5)

13.836500352s ago: executing program 8 (id=4724):
write(0xffffffffffffffff, &(0x7f0000000500)='T\x00\x00\x00\x00\x00', 0x6)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
timer_create(0x4, &(0x7f0000000fc0)={0x0, 0x33, 0x2}, &(0x7f0000001000))
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x82)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendmmsg$inet6(r1, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x8}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000540)="4b8872af3871", 0x6}], 0x1}}], 0x1, 0x881)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000340)={0x0, 0x3}, 0x8)
openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0)
socket$kcm(0x2, 0xa, 0x2)
io_uring_setup(0x3eae, &(0x7f0000000080)={0x0, 0x6d37, 0x100, 0x10, 0x4000000})
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
write$binfmt_register(0xffffffffffffffff, &(0x7f00000002c0)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x20000ffff, 0x3a, '/&', 0x3a, '\\&.\\#{\xb2\x82\xd0\xa5EB\x81F\xa9\xadcS\a\xcfU\'u\x88f\x9f\x06\xc3aa\xae\xcc;.\xa7\'D\xde\x04\xf3\xf0U\xc0g5\x1e}=\x1b~\x14\xfb;\x89E:\x03fB\x8a|U\xfaa\v\xf6\x85K\xb3\x05+\xed\xe8\\\xc9r~\x1a\x03s\xd0J{L\xa6\x98,>\xff!m\xdf\x10\\\xd2 O\xf3\x13\xea\x02Q\xa2k\xc7\xcb_!\xcf\x89\x87!3\xe7\xaa\x0e\x9c\xe3ze?\xd8\xb7h3mpA:^\r\x1e\x19V\x03?~\xcb\xe5\xc5 \xfd?\x10\x8b-\xdfifM\xb2WnIrS\x16\x8d\x10gO\xd2\xa4B[\xde\xc36\xfc>\xdf\x02$\r\xc9\x181\xb9\\tp\xf0\xbdX\xcc\x15\\r=\xcaK\xe1&m/S\x14M\x9b\xea\'C\xceN\xe6\xa4i\xf5-xQ\x82\x9f\x14X\x8d\xe7$\x11\x18\x1b\x9fCs%\xc4\x88\x9b\xe1\xb3\xd9V\xbb\x83M\xe2\x13q(5\xf7|\xb7\x16\x10I;%L<\xb1WH\x88\xee\x14\xb9\xde\xe2\x82\xfd\x9b|Rr\xb7`\x80>\xff\xc4w', 0x3a, './file1'}, 0x139)

13.794967854s ago: executing program 2 (id=4725):
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_pressure(r0, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0)
write$cgroup_pressure(r1, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xff}, 0x2f)
r2 = openat$cgroup_pressure(r0, &(0x7f00000000c0)='io.pressure\x00', 0x2, 0x0)
ppoll(&(0x7f0000000180)=[{r1}], 0x1, 0x0, 0x0, 0x0)
write$cgroup_pressure(r2, &(0x7f0000000340)={'some', 0x20, 0x4, 0x20, 0xffffa}, 0x2f)
close(r1)
close(r2)

13.650765699s ago: executing program 3 (id=4726):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00')
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/216, 0xd8}, {&(0x7f0000000180)=""/51, 0x33}, {&(0x7f0000000200)=""/129, 0x81}], 0x3, 0x6, 0xfffeeffa)

11.795940978s ago: executing program 3 (id=4729):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@newlink={0x5c, 0x10, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4040b}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_GROUP={0x8, 0x1b, 0x3d9a8248}, @IFLA_VFINFO_LIST={0x20, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x2}}]}, {0x4}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x24000110}, 0x940)

11.786802893s ago: executing program 8 (id=4730):
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='mpol=bind:0-0'])
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file4\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="6e6f696e6c696e655f78617474722c6163746976655f6c6f67733d342c646973636172642c6661756c745f696e6a656374696f6e3d30303030303030303030303030303034313136302c6661756c745f747970653d30303030303030303030303030303030303737302c6d6f64653d6c66732c696e6c696e655f646174612c66617374626f6f742c6673796e635f6d6f64653d7374726963742c646973636172645f756e69743d73656374696f6e2c00cb"], 0x21, 0x5548, &(0x7f00000058c0)="$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")
r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)={0x10, 0x2e, 0x1, 0x0, 0x25dfdbfc}, 0x10}], 0x1, 0x0, 0x0, 0x1}, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
fallocate(r3, 0x0, 0x800003d, 0x7ff)
write$binfmt_script(r3, &(0x7f00000000c0), 0xb)
lseek(r3, 0x0, 0x3)
r4 = socket$nl_route(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000fc0)={'wlan1\x00'})
sendmsg$NL80211_CMD_DEL_KEY(r5, &(0x7f00000010c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x818}, 0x4000)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000002280), 0x8080, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x141842, 0x0)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_user\x00', 0x275a, 0x0)
fanotify_mark(0xffffffffffffffff, 0x1, 0x4800003e, 0xffffffffffffffff, 0x0)
write$binfmt_script(r7, &(0x7f00000000c0), 0x4)
copy_file_range(r7, &(0x7f00000001c0), r6, 0x0, 0xfffffff7a003e45c, 0x10000000000000)

11.774292475s ago: executing program 2 (id=4731):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x28, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d)
setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x1e, 0x0, 0x0)
socket$netlink(0x10, 0x3, 0x10)
syz_io_uring_setup(0x4acf, 0x0, 0x0, 0x0)
r5 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x100}, &(0x7f0000000340)=<r6=>0x0, &(0x7f0000000280))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
io_uring_enter(r5, 0x47f9, 0x0, 0x0, 0x0, 0x0)

11.648281898s ago: executing program 3 (id=4732):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
mount(0x0, 0x0, 0x0, 0x200000, 0x0)
openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x4a2402, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$SOCK_DIAG_BY_FAMILY(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x41}}, 0x10)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendfile(r2, r1, 0x0, 0x20000023893)

11.647487275s ago: executing program 9 (id=4733):
r0 = socket(0x200000100000011, 0x3, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000240)={'batadv0\x00', <r2=>0x0})
bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r2, 0x1, 0x7, 0x6, @multicast}, 0x14)
sendmsg$netlink(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="34000000020000feffff7f0000000000d96e6c8d5e85080045f0"], 0x34}], 0x1, 0x0, 0x0, 0x20000080}, 0x4000)

11.599714464s ago: executing program 0 (id=4734):
epoll_create1(0x0)
r0 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f0000000040)={0x53, 0xffffffffffffffff, 0xf2, 0x0, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000300)="5538b9edff00000008ffffff01a26ccc143bc638b65f69d33b5ab57cf52671dc2d7b21178e751ed07500d83b77ea4beb9c4d4c362f69d05192fac58367ffe9779c6752fbdfc72b65c241364dee74e143fd791b70a2bbdbf4d0eb9b5ea7d2a2487b11a25a69d07e232a840bb5bacb14fd42890807191c52c541e28eba71ee2994d17e53d06732a861fbe148757981fdb1a412d834198e1aa1f5241010e87578fb4069800e64d8d46304771ab67e0325aa78c0b404aaa733e2eb7ec56870b6932912eb693d2a48fce52a88fa8f1250bda6fb2825d72773800f3ea37fbf9fd2038bd92db025776dbd835b638d3a3972f76886a4", 0x0, 0x0, 0x0, 0x0, 0x0})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x1, 0x200, &(0x7f0000000340))
lsm_get_self_attr(0x64, &(0x7f0000000000), &(0x7f0000001280)=0xdb, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
sched_setattr(r1, 0x0, 0x0)
setsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000140), 0x8)

11.468470901s ago: executing program 1 (id=4735):
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="54386cf0b80f3358d45c1fb82793070716e2f4369fdb1e974c114e30d6f95464ec373e736ce14dcae526d9ad4e75e03ab1304d45e2611a25fb0036e2f00cd8d2b81062583b040ff96666ae74a66dab41d5ad2a0ba70c80d06ab2a56a664928e52ee1ecb09138c27174347283fb38a1b44146ca7587823ed5bccd1ba7e2e4a18f4e0828ff7fdeabfd32911f99d37cfd1c0d3f876fc876316784595e80f710ae901715b60b2e5806bce673f3549a44cadb15bf11937b3af48ec53f3f25bc7bec2bc6a3b4f9afd683aa88a6c39c49774d4b7f7d517772f2756270e99c03ac636abc78c785248042b57c2292797f7b1b"], 0x1, 0x123d, &(0x7f0000001900)="$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")
ioctl$FAT_IOCTL_GET_ATTRIBUTES(0xffffffffffffffff, 0x40047211, &(0x7f0000000080))

9.91496406s ago: executing program 2 (id=4736):
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
r2 = shmget$private(0x0, 0x3000, 0x80, &(0x7f0000ffd000/0x3000)=nil)
shmctl$IPC_RMID(r2, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
close(r3)
openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socket$packet(0x11, 0x3, 0x300)
socket$packet(0x11, 0x3, 0x300)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r4, &(0x7f0000003000)=[{{&(0x7f00000002c0)={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40}, 0x1c, &(0x7f0000000a00)=[{&(0x7f0000000640)=':', 0x1}], 0x1}}, {{&(0x7f0000000d40)={0xa, 0x0, 0x0, @private1={0xfc, 0x1, '\x00', 0xff}}, 0x1c, &(0x7f0000000f40)=[{&(0x7f00000077c0)="d7", 0x1}], 0x1}}], 0x2, 0x24000045)
shutdown(r4, 0x1)
openat$vimc1(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/schedstat\x00', 0x0, 0x0)
r6 = socket$kcm(0x10, 0x2, 0x0)
r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r7, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
sendmsg$kcm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001100)="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", 0x157}], 0x1}, 0x0)
read$FUSE(r5, &(0x7f0000006140)={0x2020, 0x0, 0x0, 0x0, <r8=>0x0}, 0x2020)
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0xc00, &(0x7f0000000e40)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=r8, @ANYBLOB=',gid=', @ANYRESHEX=r8, @ANYBLOB="2c00e2007b5adea194e2da04fe6f290a3702dce9d043a59ba73415dfb1fc4d0009cbbc76f8d5d6"], 0x1, 0x1536, &(0x7f00000034c0)="$eJzs3AuYTlUXOPC19t5nDIm3SS7D3nsd3uSyTZLkkiSXJKkkSW4JSZN8kpAYQpKGJCSXIYkhJJeJSeN+v18SkqRJkpDckv1/JvzVV9+/79I/3/PN+j3Peez17rP3Wedd72Wfg/ebLkNqNa5dvSERwX8Ez/+RBACxADAAAPICQAAA5ePKx2X155SY9J8dhP25Hki93Bmwy4nrn71x/bM3rn/2xvXP3rj+2RvXP3vj+mdvXH/GsrONUwtdxVv23fj+f3bG3///QzLLjPlidZlrugLE/LNDuP7ZG9f/f1bwz+zE9c8u1O8+yvXPrmIvdwLsvwC//7ODHP+wh+ufvXH9GcvOLvf958u9QeS/7Dk4nPN8Yf6q82eMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxv4Cp/wlCgAuti93XowxxhhjjDHGGPvz+ByXOwPGGGOMMcYYY4z9/4cgQIKCAGIgB8RCTsgFAgCuhDyQFyJwFcTB1ZAProH8UAAKQiGIh8JQBDQYsEAQQlEoBlG4ForDdVACSkIpKA0OykACXA9l4QYoBzdCebgJKsDNUBEqQWWoArdAVbgVqsFtUB1uhxpQE2pBbbgD6sCdUBfugnpwN9SHe+BeuA8awP3QEB6ARvAgNIaHoAk8DE2hGTSHFtDy3xr/HPSA56En9IIk6A194AXoC/2gP7wIA+AlGAgvwyB4BZJhMAyBV2EovAbD4HUYDiNgJLwBo+BNGA1jYCyMgxQYDxPgLZgIb8MkeAcmwxRIhakwDd6F6TADZsJ7MAveh9kwB+bCPEiDD2A+LIB0+BAWwkeQAYtgMSyBpbAMlsMKWAmrYDWsgbWwDtbDBtgIm2AzbIGtsA22w8ewAz6BnbALdsOnsAc++xfHn/y78V0REFCgQIUKYzAGYzEWc2EuzI25MQ/mwQhGMA7jMB/mw/yYHwtiQYzHeCyCRdCgQULColgUoxjF4lgcS2AJLIWl0KHDBEzAsngDlsNyWB7LYwWsgBWxElbCKlgFq2JVrIbVsDpWxxpYA2thLbwD78DeWBfrYj2sh/Wx/sXbU9gQG2IjbISNsTE2wSbYFJtic2yOLbEltsJW2BpbY1tsi+2wHbbH9piIidgBO2BH7IidsBN2xs7YBbtgV+yG3TKfywH4PD6PvbCG6I19sA/2xeQc/fFFfBFfwoH4Mr6Mr2AyDsYh+Cq+iq/hMDyBw3EEjsSRWFW8iaNxDJIYhymYghNwAk7EiZiV6Ds4BVNxKk7DaTgdZ+AMfA9n4fv4Ps7BOTgP0zAN5+MCTMd0XIgnMQMX4WJcgktxGS7FFbgSV+BqXIOrcR2uww24ATfhJtyCW3AbbsOPUQHgJ7gLd2Ey7sE9uBf34j7ch/txP2ZiJh7AA3gQD+IhPISH8TAewaN4DI/icTyOJ/AknsJTeAbP4Fl8Jv6rRh+XXJUMIosSSsSIGBErYkUukUvkFrlFHpFHRERExIk4kU/kE/lFflFQFBTxIl4UEUWEEUaQCGMAQERFVBQXxUUJUUKUEqWEE04kiARRVpQV5UQ5UV7cJCqIm0VFUUm0cVVEFVFVtHXVxG2iuqguaoiaopaoLWqLOqKOqCvqinqinqgv6ot7xX2igeiN/fEBkVWZxmIwNhFDsKloJuSFT7BWYhi2Fm1EW/GYGIHDsb1o5RLFk6KDGI0dxd/EGHxadBbjsIt4VnQV3UR38ZzoIVq7nqKXmIS9RR8xBfuKfqK/eFFMx5riPZyVs5Z4RSSLwWKIeFXMw9fEMPG6GC5GiJHiDTFKvClGizFirBgnUsR4MUG8JSaKt8Uk8Y6YLKaIVDFVTBPviulihpgp3hOzxPtitpgj5op5Ik18IOaLBSJdfCgWio9EhlgkFoslYqlYJpaLFWKlWCVWizVirVgn1osNYqPYJDaLWNgqtont4mOxQ3widopdYrf4VOwRn4m94nOxT3wh9osvRab4ShwQX4uD4htxSHwrDovvxBFxVBwT34vj4gdxQpwUp8RpcUb8KM6Kn8Q54QVIlEJKqWQgY2QOGStzylzyCplbBhee3atknLxa5pPXyPyygCwoC8l4WVgWkVoaaSXJUBaVxWRUXiuLy+tkCVlSlpKlpZNlZIK8XpaVN8hy8kZZXt4kK8ibZUVZSVaWVeQtsqq8VULk/DFqyJqylqwt75BJcKesK++S9eTdsr68R94r75MN5P2yoXxANpIPysbyIdlEPiybymayuWwhW8pHZCv5qGwt28i28jHZTj4u28snZKJ8UnaQ/sJL5GnZWT4ju8hnZVfZTXaXP8lz0suespeE3iD7yBdkX9lP9o8FAPmSHChfloPkKzJZDpZD5KtyqHxNDpOvy+FyhBwp35Cj5JtytBwjx8pxMkWOlxPkW3KifFtOku/IyXKKTJVTZX854OeZZkr5h+Pf+p3xg34++ga5UW6Sm+UWuVVuk9vlx3KH3CF3yp1yt9wt98g9cq/cK/fJfXK/3C8zZaY8IA/Ig/KgPCQPycPysDwij8rT8nt5XP4gT8iT8qQ8Lc/IM/LshecAFCqhpFIqUDEqh4pVOVUudYXKra5UeVReFVFXqTh1tcqnrlH5VQFVUBVS8aqwKqK0MsoqUqEqqoqpqLoWL7xgVClVWjlVRiWo6/+V8aq4uk6VUCV/Nf5ifkn/IL+WqqVqpVqp1qq1aqvaqnaqnWqv2qtElag6qA6qo+qoOqlOqrPqrLqoLqqr6qq6q+6qh+qheqqeKkklqT7qBdVX9VP91YtqgHpJDVQD1SA1SCWrZDVEDVFD1VA1TA1Tw9VwNVKNVKPUKDVajVZj1ViVolLUBDVBTVQT1SQ1SU1Wk1WqSlXT1DQ1XU1XM9VMNUvNUrPVbDVXzVVpKk3NV/NVukpXC9VClaEWqUVqiVqilqllaoVaoVapVWqNWqPWqXUqQ21UG9VmtVltVVvVdrVd7VA71E6xU+1Wu9UetUftVXvVPrVP7Vf7VabKVAfUAXVQHVSH1CF1WB1WR9QRdUwdU8fVcXVCnVCn1Cl1Rp1RZ9VZdU6dy1r2BSIQgQpUEBPEBLFBbJAryBXkDnIHeYI8QSSIBHFBXJAvuCbIHxQICgaFgvigcFAk0IEJbCAuFD0aXBsUD64LSgQlg1JB6cAFZYKE4PqgbHBDUC64MSgf3BRUCG4OKgaVgspBleCWoGpwa1AtuC2oHtwe1AhqBrWC2sEdQZ3gzqBucFdQL7g7qB/cE9wb3Bc0CO4PGgYPBI2CB4PGwUNBk+DhoGnQLGgetAha/qnze3+iwKOup+6lk3Rv3Ue/oPvqfrq/flEP0C/pgfplPUi/opP1YD1Ev6qH6tf0MP26Hq5H6JH6DT1Kv6lH6zF6rB6nU/R4PUG/pSfqt/Uk/Y6erKfoVD1VT9Pv6ul6hp6p39Oz9Pt6tp6j5+p5Ok1/oOfrBTpdf6gX6o90hl6kF+sleqleppfrFXqlXqVX6zV6rV6n1+sNeqPepDfrLXqr3qa364/1Dv2J3ql36d36U71Hf6b36s/1Pv2F3q+/1Jn6K31Af60P6m/0If2tPqy/00f0UX1Mf6+P6x/0CX1Sn9Kn9Rn9oz6rf9LntM9a3Gd9vRtllIkxMSbWxJpcJpfJbXKbPCaPiZiIiTNxJp/JZ/Kb/KagKWjiTbwpYoqYLGTIFDVFTdRETXFT3JQwJUwpU8o440yCSTBlTVlTzpQz5U15U8FUMBVNRVPZVDa3mFvMreZWc5u5zdxubjc1TU1T29Q2dUwdU9fUNfVMPVPf1Df3mntNA9PANDQNTSPTyDQ2jU0T08Q0NU1Nc9PctDQtTSvTyrQ2rU1b09a0M+1Me9PeJJpE08F0MB1NR9PJdDKdTWfTxXQxXU1X0910Nz1MD9PT9DRJJsn0MX1MX9PX9Df9zQAzwAw0A80gM8gkm2QzxAwxQ81QM8wMM8PNCDMya6Fq3jSjzRgz1owzKSbFTDATzEQz0Uwyk8xkM9mkmlQzzUwz0810M9PMNLPMLDPbzDZzzVyTZtLMfDPfpJt0s9AsNBkmwyw2i81Ss9QsN8vNSrPSrDarzVpYa9ab9Waj2Wg2m81mq9lqtpvtZofZYXaanWa32W32mD1mr9lr9pl9Zr/ZbzJNpjlgDpiD5qA5ZA6Zw+awOWKOmGPmmDlujpsT5oQ5ZU6ZM6bAhe9Lb2JtTpvLXmFz2yttHpvX/n1c0Bay8bawLWK1zW8L/Co21toStqQtZUtbZ8vYBHv9b+KKtpKtbKvYW2xVe6ut9pu4jr3T1rV32Xr2blvb3vGruL69x2atThogAthmtpFtYRvbh2wT+7BtapvZ5raFbWcft+3tEzbRPmk72Kd+E8+3C+xKu8qutmvsTrvLnrKn7UH7jT1jf7Q9bS87wL5kB9qX7SD7ik22g38Tj7Rv2FH2TTvajrFj7bjfxJPtFJtqp9pp9l073c74TZxmP7CzbLqdbefYuXbez3FWTun2Q7vQfmQzbACL7RK71C6zy+2Ki7n6vHadXW832B32E7vZbrFb7Ta7/eJC2O6yu+2ndo/9zB6wX9t99gu73x6ymfarn+Os8ztkv7WH7Xf2iD1qj9nv7XH7g7o4Ouvcv7c/2XPWWyAkIEmKAoqhHBRLOSkXXUG56UrKQ3kpQldRHF1N+egayk8FqCAVongqTEVIkyFLRCEVpWIUpWvpYnqlqDQ5KkMJdD2VpRuoHN1I5ekmqkA3U0WqRJWpCt1CVelWqka3UXW6nWpQTapFtekOqkN3Ul26i+rR3VSf7qF76T5qQPdTQ3qAGtGD1Jgeoib0MDWlZtScWlBLeoRa0aPUmtpQW3qM2tHj1J6eoER6kjrQU9SR/kad6GnqTM9QF3qWulI36k7PUQ96nnpSL0qi3tSHXqC+1I/604s0gF6igfQyDaJXKJkG0xB6lYbSazSMXqfhNIJG0hs0it6k0TSGxtI4SqHxNIHeoon0Nk2id2gyTaFUmkrT6F2aTjNoJr1Hs+h9mk1zaC7NozT6gObTAkqnD2khfUQZtIgW0xJaSstoOa2glbSKVtMaWkvraD1toI20iTbTFtpK22g7fUw76BPaSbtoN31Ke+gzQvqc9tEXtJ++pEz6ig7Q13SQvqFD9K3vRd/RETpKx+h7Ok4/0Ak6SafoNJ2hH+ks/UTnyBOEGIpQhioMwpgwRxgb5gxzhVeEucMrwzxh3jASXhXGhVeH+cJrwvxhgbBgWCiMDwuHRUIdmtCGFIZh0bBYGA2vDYuH14UlwpJhqbB06MIyYUJ4fVg2vCEsF94Ylg9vCiuEN4cVw0rhQ3dXCW8Jq4a3htXC28Lq4e1hjbBmWCusHd4R1gnvDOuGd4X1wrvDcuE94b3hfWGD8P6wYfhA2Ch8MGwcPhQ2CR8Om4bNwuZhi7Bl+EjYKnw0bB22CduGj4XtwsfD9uETYWL4ZNghfOrn/nsW/OP+pLB32Cd8IXwh9P4uOTc6L5oW/SA6P7ogmh79MLow+lE0I7oouji6JLo0uiy6PLoiujK6Kro6uia6Nrouuj66Iep97Rzg0AknnXKBi3E5XKzL6XK5K1xud6XL4/K6iLvKxbmrXT53jcvvCriCrpCLd4VdEaedcdaRC11RV8xF3bWuuLvOlXAlXSlX2jlXxiW4Fq6la+lauUdda9fGtXWPucfc4+5x94R7wj3pOrinXEf3N9fJPe06u2fcM+5Z19V1c93dc66HG5/n/HsyyfVxfVxf19f1d/3dADfADXQD3SA3yCW7ZDfEDXFD3VA3zA1zw91wN9KNdKPcKDfajXZj3ViX4lLcBDfBTXQT3SQ3yU12k12qS3XT3DQ33U13VWecP8psN9vNdXNdmktz813WmjHdLXQLXYbLcIvdYrfULXXL3XK30q10q91qt9atdevderfRbXSb3Wa31W112912t8PtcDt93vOTuj1ur9vr9rl9br/70mW6r9wB97U76L5xh9y37rD7zh1xR90x97077n5wJ9xJd8qddmfcj+6s+8mdc96lRMZHJkTeikyMvB2ZFHknMjkyJZIamRqZFnk3Mj0yIzIz8l5kVuT9yOzInMjcyLxIWuSDyPzIgkh65MPIwshHkYzIosjiyJLI0siyiPeFN4e+qC/mo/5aX9xf50v4kr6UL+2dL+MT/PW+rL/Bl/M3+vL+Jl/B3+wr+kq+sn/YN/XNfHPfwrf0j/hW/lHf2rfxbf1jvp1/3Lf3T/hE/6Tv4J/yHf3ffCf/tO/sn/Fd/LO+q+/mu/vnfA//vO/pe/kk39v38S/4vr6f7+9f9AP8S36gf9kP8q/4ZD/YD/Gv+qH+NT/Mv+6H+xF+ZMwbftTFS2QY51P8eD/Bv+Un+rf9JP+On+yn+FQ/1U/z7/rpfoaf6d/zs/z7fraf4+f6eT7Nf+Dn+wU+3X/oF/qPfIZfdPGmsl/uV/iVfpVf7df4tX6dX+83+I1+k9/st/itfpvf7j/2O/wnfqff5Xf7T/0e/5nf6z/3+/wXfr//0mf6r/wB/7U/6L/xh/y3/rD/zh/xR/0x/70/7n/wJ/xJf8qf9mf8j/6s/8mf4/+zxhhjjDH2Txl/qSl+3XP+dn7v3xkjfrFzHwC4ckuhzF/2Z60o1+Y/3+4n4ttFAODJXl0euLjVqJGUlHRh3wwJQbE5ABf/JihLDFyKF0FbeBwSoQ2U/d38+4luZ+gP5o/eBJDrF2Ni4VJ8af7PATDpd+Z/5LGR8yuEp+L+H/PPAShR7NKYnHApXgRtf76/0gbK/YP8C7T6g/xzfpEC0PoXY3LDpfhS/gnwKDwFib/akzHGGGOMMcYYO6+fqNzp4vXnxX/x+XvX5/Hq0pgccCn+o+tzxhhjjDHGGGOMXX5Pd+v+xCOJiW06/euNan+8j/r3Zv650QT+3cS48W81vAf4v4UDgP9wQoCshvwrz2LTX3Ks5Atvnb/vWnraB/DfUco/o3GZP5gYY4wxxhhjf7pLi/5fP64uV0KMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxlg29Isf/cp54aF/6Tfe4J/4lb7Le4aMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcbY5fd/AgAA//9rr/aH")
syz_mount_image$udf(&(0x7f0000000140), &(0x7f00000000c0)='./file1\x00', 0x800, &(0x7f0000001040)=ANY=[@ANYBLOB='uid=', @ANYRESDEC=0x0, @ANYBLOB="2c756e64656c6574652c6e6f7672732c6164696e6963622c766f6c756d653d30303030303030303030303030303030303030322c7569643d666f726765742c6769643d666f726765742c6e6f7374726963742c6e6f7672732c0085f95733019d784ca386da1fd41ffabd4b47acca2b8d488be702157dd8711c31732d"], 0xff, 0xc2d, &(0x7f00000001c0)="$eJzs3U9sHNd9B/DfGy3FldxWTOwoThoXm7ZIZcVy9S+mYhXuqqbZBpBlIhRzC8AVSakLUyRBUo1spAXTSw89BCiKHnIi0BoFUjQwmiLokWldILn4UOTUE9HCRlD0wBYBcgoYzOxbcUmRNi2KEmV9Pjb13Z19b+a9eesZWdCbFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAxB+8cun0mfSwWwEAPEhXRr96+qz7PwA8Vq76/38AAAAAAAAAAAAAADjoUhTxZKSYu7KWxqv3HfXL7b5bt8eGhrevdiRVNQ9V5cuf+pmz585/6YXBC9283J75gPr322fjtdGrlxovz96cm59aWJiabIzNtCdmJ6d2vYe91t/qZHUCGjdfvzV5/fpC4+zz5zZ9fHvg/f4njg9cHHz21DPdsmNDw8OjG0XqveVr99yQjp1meByOIk5Fiue+99PUiogi9n4u6g927Lc6UnXiZNWJsaHhqiPT7dbMYvnhSPdEFBGNnkrN7jnafiyi1vdA+7CzZsRS2fyywSfL7o3OteZb16anGiOt+cX2Ynt2ZiR1Wlv2pxFFXEgRyxGx2n/37vqiiFqk+M6xtXQtIg51z8MXq4nBO7ej2Mc+7kLZzkZfxHLxCIzZAdYfRbwaKX72zomYyNeZ6lrzhYhXy/xBxFtlvhSRyi/G+Yj3tvke8WiqRRF/WY7/xbU0WV0PuteVy19rfGXm+mxP2e515SPeH+66Ujyk+8ORLflgHPBrUz2KaFVX/LV077/ZAQAAAAAAAAAAAAAAAOB+OxJFfCZSvPIff1LNK45qXvqxi4N/OPCrvXPGn/6Q/ZRln4+IpWJ3c3IP54mBI2kkpYc8l/hxVo8i/jTP//vWw24MAAAAAAAAAAAAAAAAAADAY62In0SKF989kZajd03x9syNxtXWtenOqrDdtX+7a6avr6+vN1InmznHcy7lXM65knM1ZxS5fs5mzvGcSzmXc67kXM0Zh3L9nM2c4zmXci7nXMm5mjNquX7OZs7xnEs5l3Ou5FzNGQdk7V4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgI+TIor4RaT49jfWUqSIaEaMRydX+h926wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAUn8q4vuRovFHzTvbahGRqn87TpS/nI/m4TI/Gc3BMl+K5qWcrSprzW89hPazN32piB9Hiv7623cGPI9/X+fdna9BvPXNjXefrXXyUPfDgff7nzh+7OLg8G88vdPrtF0DTl5uz9y63RgbGh4e7dlcy0f/ZM+2gXzc4v50nYhYeOPN11vT01Pz9/6i/Arsofoj9CLVHpeeelG9iNqBaMbD6TuPgfL+/16k+N13/7N7w+/c/+vxK513d+7w8fM/27j/v7h1R7u8/9e21sv3//Kevt39/8mebS/m34301SLqizfn+o5H1BfeePNU+2brxtSNqZnzp09/eXDwy+dO9x2OqF9vT0/1vLovpwsAAAAAAAAAAAAAAADgwUlF/H6kaP14LTUi4nY1X2vg4uCzp545FIeq+Vab5m2/Nnr1UuPl2Ztz81MLC1OTjbGZ9sTs5NRuD1evpnuNDQ3vS2c+1JF9bv+R+suzc2/Mt2/88eK2nx+tX7q2sDjfmtj+4zgSRUSzd8vJqsFjQ8NVo6fbrZmq6si2k+k/ur5UxH9FionzjfT5vC3P/986w3/T/P+lrTvap/n/n+jZVh4zpSJ+Hil+56+ejs9X7Twad52zXO7vIsXJC5/L5eJwWa7bhs5zBTozA8uy/xcp/ukXm8t250M+uVH2zK5P7COiHP9jkeL7f/Hd+M28bfPzH7Yf/6Nbd7RP4/9Uz7ajm55XsOeuk8f/VKR46cm347fytg96/kf32RsncuE7z+fYp/H/VM+2gXzc374/XQcAAAAAAAAAAHik9aUi/j5S/HC4ll7I23bz9/8mt+5on/7+16d7tk3en/WKPvTFnk8qAAAAABwQfamIn0SKG4tv35lDvXn+d8/8z9/bmP85lLZ8Wv05369Vzw24n3/+12sgH3d8790GAAAAAAAAAAAAAAAAAACAAyWlIl7I66mPV/P5J3dcT30lUrzyP8/lcul4Wa67DvxA9Wv9yuzMqUvT07MTrcXWtempxuhca2KqrPtUpFj728/lukW1vnp3vfnOGu8ba7HPR4rhf+iW7azF3l2b/KmNsmfKsp+IFP/9j5vLdtex/tRG2bNl2b+JFF//l+3LHt8oe64s+91I8aOvN7plj5Zlu89H/fRG2ecnZot9GBUAAAAAAAAAAAAAAAAAAAAeN32piD+PFP97c/nOXP68/n9fz9vKW9/sWe9/i9vVOv8D1fr/O72+l/X/q+cKLO10VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+HhKUcSbkWLuylpa6S/fd9Qvt2du3R4bGt6+2pFU1TxUlS9/6mfOnjv/pRcGL3Tzg+vfb5+J10avXmq8PHtzbn5qYWFqsjE2056YnZza9R72Wn+rk9UJaNx8/dbk9esLjbPPn9v08e2B9/ufOD5wcfDZU890y44NDQ+P9pSp9d3z0e+Sdth+OIr460jx3Pd+mn7YH1HE3s/Fh3x39tuRqhMnq06MDQ1XHZlut2YWyw9HuieiiGj0VGp2z9EDGIs9aUYslc0vG3yy7N7oXGu+dW16qjHSml9sL7ZnZ0ZSp7VlfxpRxIUUsRwRq/13764ving9Unzn2Fr61/6IQ93z8MUro189fXbndhT72MddKNvZ6ItYLh6BMTvA+qOIf44UP3vnRPxbf0QtOj/xhYhXy/xBxFvRGe9UfjHOR7y3zfeIR1Mtivj/cvwvrqV3+svrQfe6cvlrja/MXJ/tKdu9rjzy94cH6YBfm+pRxI+qK/5a+nf/XQMAAAAAAAAAAAAAAAAcIEX8eqR48d0TqZoffGdOcXvmRuNq69p0Z1pfd+5fd870+vr6eiN1splzPOdSzuWcKzlXc0aR6+dslllfXx/P75dyLudcybmaMw7l+jmbOcdzLuVczrmSczVn1HL9nM2c4zmXci7nXMm5mjMOyNw9AAAAAAAAAAAAAAAAAADg46Wo/knx7W+spfX+zvrS49HJFeuBfuz9MgAA//8hX/ir")
creat(&(0x7f0000000300)='./bus\x00', 0x0)
open(&(0x7f0000000180)='./bus\x00', 0x4067e, 0x0)

9.743626743s ago: executing program 3 (id=4737):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x1000, 0x3, 0x28b}, &(0x7f0000000340)=<r3=>0x0, &(0x7f0000000280)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x8, 0x15, r0, 0x0, 0x0, 0x0, 0x40000062, 0x0, {0x1}})
io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0)

8.605555865s ago: executing program 0 (id=4738):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x446, &(0x7f00000001c0)={[{@stripe={'stripe', 0x3d, 0x2}}, {@journal_dev={'journal_dev', 0x3d, 0x1045}}, {@oldalloc}, {@noquota}, {@data_err_ignore}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@delalloc}, {@errors_continue}, {@orlov}, {@user_xattr}, {@quota}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x553, &(0x7f0000001080)="$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")
munmap(&(0x7f0000003000/0x1000)=nil, 0x1000)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0xb, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
eventfd(0xffffffff)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108)
r3 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r3, 0x84, 0x7f, &(0x7f0000000100)='Ai\x00\x00', 0x4)
getdents64(r2, &(0x7f00000000c0)=""/55, 0x37)
getdents64(r2, &(0x7f0000000f80)=""/4096, 0x1000)

7.423990292s ago: executing program 8 (id=4739):
r0 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x100, 0x0, 0x0, 0x4, 0x2, 0x1}})
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}})
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000040)={'veth0_to_team\x00', 0x800})

7.417091547s ago: executing program 9 (id=4740):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x4006, &(0x7f0000003f80)={[{@nomblk_io_submit}, {@nouid32}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}, {@lazytime}, {@block_validity}, {@quota}]}, 0x1, 0x447, &(0x7f00000008c0)="$eJzs28tvG0UYAPBv105KX8RU5dEHUFEQFY+kSUvpgQsIJA4gIcGhHEOSVqVug5og0SqCgFA5okrcEUek/gWc4IKAExJX4IwqVSiXFk5Ga+82jmunSRrHIf79pG1ndsee+Tw79uxONoC+dSj7J4nYFRG/R8RQI7u0wKHGf7cW5ib+WZibSKJWe/vvpF7u5sLcRFG0eN3OIlOOSD9P4kCbemcuXT43Xq1OXczzI7PnPxiZuXT5+bPnx89MnZm6MHby5PFjoy+eGHthXeLM4rq5/+Ppg/tef/fqmxOnrr7387WkiL8ljntXjqa3buupWm39qtsEdjelk3IPG8KqlPKzdaA+/oeiFIudNxSvfdbTxgFdVavVag91PjxfA7awJHrdAqA3ih/67Pq32DZo6rEp3Hi5cQGUxX0r3xpHypHmZQZarm/X06GIODX/79fZFq33IbZ3qVIAoK99n81/nms3/0uj+b7Q/fkaSiUiHoiIPRFxIiL2RsSDEfWyD0fEI6usv3WR5M75Z3p9TYGtUDb/eylf21o6/ytmf1Ep5bnd9fgHktNnq1NH88/kSAxsy/Kjy9Txw6u/fdnpWPP8L9uy+ou5YN6O6+VtS18zOT47fi8xN7vxacT+crv4k9srAUlE7IuI/Wus4+wz3x7sdKxD/IMreuN1WGeqfRPxdKP/56Ml/kKy/PrkyH1RnTo6UpwVd/rl1ytvdar/7v3fXVn/72h7/hfx/1lJmtdrZ1Zfx5U/vuh4TbnW838weWfJvo/GZ2cvjkYMJm/U85Xm/WMt5cYWy2fxHzncfvzvicVP4kBEZCfxoxHxWEQ83vTd9UREHF4m/p9eefL9tcffXVn8k8v2f7T0/2JiMFr3tE+Uzv343ZJKK6uJP+v/4/XUkXzPSr7/VtKutZ3NAAAA8P+TRsSuSNLh2+k0HR5u/A3/3tiRVqdnZp89Pf3hhcnGMwKVGEiLO11DTfdDR/PL+iI/1pI/lt83/qq0vZ4fnpiuTvY6eOhzOzuM/8xfpV63Dug6z2tB/zL+oX8Z/9C/jH/oX23Gv0fPoE+0+/3/pAftADZey/hfdtnPxAC2Ftf/0L+Mf+hfxj/0pZntcfeH5LuWuJa3YkMqTSOiZ5FuvUSkm6IZEl1K9PiLCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYJ38FwAA//8Kt+KP")
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8)
recvmmsg(0xffffffffffffffff, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000003e00)=[{&(0x7f0000000280)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_ADD_RESERVED(0xffffffffffffffff, 0x3ba0, &(0x7f00000003c0)={0x48, 0xc, r1, 0x0, 0x0, 0x200000000})
r2 = fsopen(&(0x7f0000000140)='fuseblk\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, &(0x7f0000000000)={0x28, 0x6, r1, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000})
r3 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r3, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000440)=@known='trusted.overlay.upper\x00', 0x0, 0x4000)

6.112069413s ago: executing program 1 (id=4741):
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00')
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/216, 0xd8}, {&(0x7f0000000180)=""/51, 0x33}, {&(0x7f0000000200)=""/129, 0x81}], 0x3, 0x6, 0xfffeeffa)

5.473606789s ago: executing program 2 (id=4742):
r0 = socket$inet(0x2b, 0x801, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x48f, &(0x7f0000000000)={0x11, @private=0xa010100, 0x4e24, 0x3, 'sh\x00', 0x1c, 0x2, 0x4a}, 0x2c)

5.192838229s ago: executing program 1 (id=4743):
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_pressure(r0, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0)
write$cgroup_pressure(r1, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xff}, 0x2f)
r2 = openat$cgroup_pressure(r0, &(0x7f00000000c0)='io.pressure\x00', 0x2, 0x0)
ppoll(&(0x7f0000000180)=[{r1}], 0x1, 0x0, 0x0, 0x0)
write$cgroup_pressure(r2, &(0x7f0000000340)={'some', 0x20, 0x4, 0x20, 0xffffa}, 0x2f)
close(r1)
close(r2)

3.286730797s ago: executing program 9 (id=4744):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, 0x0, 0x940)

3.204055135s ago: executing program 1 (id=4745):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="8b332dbd70000000000005"], 0x14}}, 0x0)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000340), r0)

3.081751978s ago: executing program 2 (id=4746):
mlockall(0x7)

2.931503742s ago: executing program 0 (id=4747):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000008c0)=ANY=[@ANYBLOB="54000000000801010000ffffe00000000a000000050003002f0000000600024000000000240004800800024000000000080001400000fcff07000140800000010800014080000001090001"], 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x28040000)

2.791905551s ago: executing program 1 (id=4748):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="000000000300"/27], 0x50)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socket(0x27, 0x3, 0x80000000)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000300)={0x6, r0})
syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'})
clock_adjtime(0x1, &(0x7f0000000000)={0x3fd, 0x6, 0x24, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0xffffffffffffff7f, 0x1003, 0x3, 0x0, 0x0, 0xd, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x83})
r4 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x0, 0xc0, [0x0, 0x200000000180, 0x2000000001b0, 0x2000000001e0], 0x0, 0x0, &(0x7f0000000180)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}]}, 0x138)

1.951999838s ago: executing program 9 (id=4749):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendmmsg$inet6(r0, &(0x7f0000003000)=[{{&(0x7f00000002c0)={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40}, 0x1c, &(0x7f0000000a00)=[{&(0x7f0000000640)=':', 0x1}], 0x1}}, {{&(0x7f0000000d40)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000f40)=[{0x0}], 0x1}}], 0x2, 0x24000045)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000000c0)={0x1, 0x820d, 0xf, 0xfffffff7}, &(0x7f0000000240)=0x10)

1.887901232s ago: executing program 2 (id=4750):
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="54386cf0b80f3358d45c1fb82793070716e2f4369fdb1e974c114e30d6f95464ec373e736ce14dcae526d9ad4e75e03ab1304d45e2611a25fb0036e2f00cd8d2b81062583b040ff96666ae74a66dab41d5ad2a0ba70c80d06ab2a56a664928e52ee1ecb09138c27174347283fb38a1b44146ca7587823ed5bccd1ba7e2e4a18f4e0828ff7fdeabfd32911f99d37cfd1c0d3f876fc876316784595e80f710ae901715b60b2e5806bce673f3549a44cadb15bf11937b3af48ec53f3f25bc7bec2bc6a3b4f9afd683aa88a6c39c49774d4b7f7d517772f2756270e99c03ac636abc78c785248042b57c2292797f7b1b"], 0x1, 0x123d, &(0x7f0000001900)="$eJzs3E1rXFUYAOB3kon5qPlQ61cXeqgbV5emC1eCBklBMgupjdAK4tROcMh1JuQOgYjaunIr+C/EpTtB/ANu/Asuu3HZhXDFeyfJJE0/lDJj8Hk2982575tzDgcGzuWee/fNbz/b3iqyrfYgphqNmNqJSPdSpJiKA69s1NfrNzbWWq31qyldWbu2+kZKaenVnz/84oeLvwzOffDj0k+z8evKR3f/uBwRd/7O/7RbpG6Rev1Baqeb/f6gfTPvTEe32M5Sei/vtItO6vaKzu7o/bSV93d29lO7d2txYWe3UxSp3dtP2539NOin5nBIvZRlWVpcCB5o5r6Wj082bn5/ryzLiLKciaeiLMtyPhbiXDwdi7FULeIz8Ww8F+fj+XghXoyX4uUqa4yzAAAAAAAAAAAAAAAAAAAAgP+Bh53/X44V5/8BAAAAAAAAAAAAAAAAAABgDN6/fmNjrdVav5rSXET+zd7m3mZ9re+vbUU38ujEpViOP6M6/V+r4yvvttYvpcpKfJ3fHtbf3tucPl6/Wn1OYFjfrO4d1K/W9el4/WwsjNZfi4jzp/d/+ZT6me8iXn9tpD6L5fjtk+hHHreqvo/qv1pN6Z079ZjisP8LVd6RRjRG/2yOZ30AAADgSciGe+c0E3Gwf357ZP+eHSac3N/X9f/g+cCJ/X0zLthDT1yx//l2O887u8eDuftaHhU0IuKxkx8UNIaPWE7NibmIf/2fxxpMPU7ybBxNZ3q4Gg+vOvju5uQneNaC+f/GMM5UMLGfJMboaNGPt/9+8TCcH/+oAAAAAAAAAAAAeJQn9s5gNE57/7cZ9Ztls6N9vhVfZpObMQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwF/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAATgoAAP//hwC2QA==")
r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
fstat(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, <r2=>0x0})
setreuid(0x0, r2)
ioctl$FAT_IOCTL_GET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000080))

1.775169858s ago: executing program 0 (id=4751):
openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000002a82, 0x0)
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000009e40), 0x109000, 0x0)
ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f0000009e80)=0xc43d)

1.667009328s ago: executing program 1 (id=4752):
syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000280)='./file0\x00', 0x1, &(0x7f00000002c0)={[{@nodiscard}, {@order_relaxed}, {@errors_continue}, {@nodiscard}, {@discard}, {@nodiscard}]}, 0x1, 0xa07, &(0x7f0000000b00)="$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")

1.427781258s ago: executing program 9 (id=4753):
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r0)
unshare(0x22020600)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0x9, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0xb, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
socket$inet_mptcp(0x2, 0x1, 0x106)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0xf00, 0x0, 0x4080000}, 0x6008004)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = syz_open_dev$dri(&(0x7f0000000a40), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETGAMMA(r3, 0xc02064a4, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0})
r4 = userfaultfd(0x801)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298})
r5 = socket$l2tp(0x2, 0x2, 0x73)
bind$inet(r0, 0x0, 0xfffffffffffffdd2)
connect$inet(r5, 0x0, 0x0)
getpeername$l2tp(r5, 0x0, &(0x7f0000000380))
r6 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet_sctp(r6, &(0x7f0000001a40)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000300)="8d", 0x1}], 0x1}], 0x1, 0x0)
r7 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r8=>0x0}, &(0x7f0000000040)=0x8)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r6, 0x84, 0x72, &(0x7f0000000080)={r8, 0x81, 0x20}, 0xc)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000040), 0x1000)
open(&(0x7f0000000240)='./file0\x00', 0x208000, 0x12c)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)

1.338351888s ago: executing program 0 (id=4754):
syz_open_dev$loop(0x0, 0x47ffffa, 0x122c42)
sched_setscheduler(0x0, 0x2, 0x0)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
ptrace$pokeuser(0x6, r0, 0x358, 0xffff8880b873a740)

1.326047589s ago: executing program 8 (id=4755):
socket$inet(0x2, 0x3, 0x2)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/raw\x00')
preadv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/216, 0xd8}, {&(0x7f0000000180)=""/51, 0x33}, {&(0x7f0000000200)=""/129, 0x81}], 0x3, 0x6, 0xfffeeffa)

241.388231ms ago: executing program 9 (id=4756):
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x862b01)
r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')
fcntl$setstatus(r1, 0x4, 0x2400)
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000240)={0x57, 0xffff, 0x0, {0x7, 0x1}, {0x50, 0x2}, @period={0x59, 0x7, 0xc1f, 0x6773, 0x8000, {0x9, 0x9, 0x1, 0x1}, 0x0, 0x0}})
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="b485000000000026e4c59b065493b8fb00"], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socket$inet6_sctp(0xa, 0x1, 0x84)
syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x810, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1500, &(0x7f0000001900)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000440)='syzkaller\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000480)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r6, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7fe, 0xf83, 0x8}, 0x1c)
socketpair$tipc(0x1e, 0x5, 0x0, 0x0)
r7 = socket$packet(0x11, 0x2, 0x300)
sendto$packet(r7, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000300)='consume_skb\x00', r3, 0x0, 0x8000000}, 0x18)
sched_setscheduler(0xffffffffffffffff, 0x5, 0x0)
request_key(0x0, 0x0, &(0x7f00000003c0)='q\xa9', 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)

0s ago: executing program 8 (id=4757):
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_pressure(r0, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0)
write$cgroup_pressure(r1, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xff}, 0x2f)
r2 = openat$cgroup_pressure(r0, &(0x7f00000000c0)='io.pressure\x00', 0x2, 0x0)
ppoll(&(0x7f0000000180)=[{r1}], 0x1, 0x0, 0x0, 0x0)
write$cgroup_pressure(r2, &(0x7f0000000340)={'some', 0x20, 0x4, 0x20, 0xffffa}, 0x2f)
close(r1)
close(r2)

kernel console output (not intermixed with test programs):

ialNumber=0
[ 2037.880017][ T1221] usb 6-1: config 0 descriptor??
[ 2038.207603][ T1221] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware
[ 2038.265906][ T1221] usb 6-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2
[ 2038.323090][ T1221] usb 6-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw
[ 2038.416774][T23410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2038.427517][T23410] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2038.464152][T15437] usb 10-1: new full-speed USB device number 5 using dummy_hcd
[ 2038.475188][T23410] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma?
[ 2039.545900][T15437] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2039.789106][T15437] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 2039.822874][T15437] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00
[ 2040.705093][T15437] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 2041.259145][T15437] usb 10-1: SerialNumber: syz
[ 2041.297897][T23431] overlayfs: overlapping lowerdir path
[ 2041.336776][T15437] usb 10-1: can't set config #1, error -71
[ 2041.417342][T15437] usb 10-1: USB disconnect, device number 5
[ 2042.102215][T23447] loop9: detected capacity change from 0 to 512
[ 2042.117381][T23447] EXT4-fs: Ignoring removed bh option
[ 2042.138221][T23447] EXT4-fs: Ignoring removed mblk_io_submit option
[ 2042.171921][T23447] EXT4-fs: Mount option(s) incompatible with ext2
[ 2042.907290][T23451] loop5: detected capacity change from 0 to 2048
[ 2042.968196][T23451] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 2043.223812][T15494] usb 9-1: new full-speed USB device number 23 using dummy_hcd
[ 2044.344760][T20282] Bluetooth: hci1: command 0x0406 tx timeout
[ 2044.690844][T15494] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2044.723677][T15494] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 2044.771580][T23442] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 2044.774873][T15494] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00
[ 2044.826985][T15494] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 2044.859148][T15494] usb 9-1: SerialNumber: syz
[ 2044.882043][T15494] usb 9-1: 0:2 : does not exist
[ 2044.899053][T23477] openvswitch: netlink: VXLAN extension message has 9 unknown bytes.
[ 2045.148759][T23477] loop9: detected capacity change from 0 to 1024
[ 2045.180586][T23477] hfsplus: Unknown parameter '└
'
[ 2045.380440][T23481] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4230'.
[ 2046.774650][T23477] netlink: 104 bytes leftover after parsing attributes in process `syz.9.4229'.
[ 2046.864617][T15494] usb 9-1: USB disconnect, device number 23
[ 2048.452959][T23508] overlayfs: overlapping lowerdir path
[ 2048.743430][T15494] usb 10-1: new high-speed USB device number 6 using dummy_hcd
[ 2048.995379][T15494] usb 10-1: config 0 interface 0 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2049.020358][T15494] usb 10-1: config 0 interface 0 altsetting 255 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2049.038332][T15494] usb 10-1: config 0 interface 0 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[ 2049.106712][T15494] usb 10-1: config 0 interface 0 has no altsetting 0
[ 2049.123465][T15494] usb 10-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00
[ 2049.161017][T15494] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2049.218922][T15494] usb 10-1: config 0 descriptor??
[ 2049.479281][T23520] loop0: detected capacity change from 0 to 764
[ 2049.521737][T23520] rock: directory entry would overflow storage
[ 2049.564065][T23520] rock: sig=0x4654, size=5, remaining=4
[ 2049.688717][T23514] loop9: detected capacity change from 0 to 512
[ 2049.742166][T23511] loop5: detected capacity change from 0 to 32768
[ 2049.778211][T23514] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 2049.813186][T23511] ocfs2: Slot 0 on device (7,5) was already allocated to this node!
[ 2049.855235][T23514] ext4 filesystem being mounted at /40/bus supports timestamps until 2038-01-19 (0x7fffffff)
[ 2049.917158][T23511] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[ 2049.980434][T15494] hid-alps 0003:044E:120C.0010: unknown main item tag 0x0
[ 2050.050995][T15494] hid-alps 0003:044E:120C.0010: hidraw0: USB HID v0.00 Device [HID 044e:120c] on usb-dummy_hcd.9-1/input0
[ 2050.084181][T23528] (syz.5.4236,23528,0):ocfs2_read_blocks:239 ERROR: status = -12
[ 2050.147747][T23528] (syz.5.4236,23528,0):ocfs2_xattr_block_find:2831 ERROR: status = -12
[ 2050.234331][T15437] usb 10-1: USB disconnect, device number 6
[ 2050.337737][T23529] fido_id[23529]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/10-1/report_descriptor': No such file or directory
[ 2050.587461][T16080] ocfs2: Unmounting device (7,5) on (node local)
[ 2051.510756][T21859] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2051.806854][T23560] loop9: detected capacity change from 0 to 2048
[ 2051.821502][T23560] NILFS (loop9): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 2052.074718][T23558] overlayfs: overlapping lowerdir path
[ 2052.184209][T23564] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 2052.358311][T23557] loop5: detected capacity change from 0 to 2048
[ 2052.477117][T23557] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 2052.739787][T23573] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 2054.671867][T23574] program syz.3.4249 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 2054.715214][T23574] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[ 2054.729566][T23582] loop0: detected capacity change from 0 to 512
[ 2054.784856][T23582] ext2: Bad value for 'max_batch_time'
[ 2055.363530][T23582] loop0: detected capacity change from 0 to 2048
[ 2055.372360][T23589] loop9: detected capacity change from 0 to 2048
[ 2055.428887][T23582] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 2055.447633][T23589] NILFS (loop9): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 2055.528987][T23593] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 2055.535281][T20805] udevd[20805]: incorrect nilfs2 checksum on /dev/loop0
[ 2055.685900][T23594] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 2055.933643][T23596] program syz.0.4251 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 2055.946844][T23596] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[ 2056.044164][T23600] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 2056.575993][T23600] NILFS (loop9): error -2 truncating bmap (ino=16)
[ 2058.719588][T23622] loop8: detected capacity change from 0 to 512
[ 2058.769134][T23622] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[ 2058.859472][T23622] EXT4-fs (loop8): 1 truncate cleaned up
[ 2058.905698][T23622] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 2059.051562][T23612] loop9: detected capacity change from 0 to 32768
[ 2059.329476][T23612] ocfs2: Slot 0 on device (7,9) was already allocated to this node!
[ 2060.107242][T23612] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode.
[ 2060.440123][T22195] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2060.722525][T21859] ocfs2: Unmounting device (7,9) on (node local)
[ 2062.885323][T23650] loop0: detected capacity change from 0 to 16
[ 2062.921203][T23650] erofs: DAX unsupported by block device. Turning off DAX.
[ 2062.962366][T23650] erofs (device loop0): mounted with root inode @ nid 36.
[ 2063.116465][T23655] loop8: detected capacity change from 0 to 2048
[ 2063.145839][T23655] EXT4-fs (loop8): cluster size (1024) smaller than block size (2048)
[ 2063.222006][T23658] loop5: detected capacity change from 0 to 512
[ 2063.394694][T23658] EXT4-fs (loop5): orphan cleanup on readonly fs
[ 2063.402347][T23658] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -13
[ 2063.439220][T23658] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[ 2063.513040][T23658] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #13: comm syz.5.4274: attempt to clear invalid blocks 33619980 len 1
[ 2063.861234][T23658] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.4274: invalid indirect mapped block 1819239214 (level 0)
[ 2063.942299][T23658] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.4274: invalid indirect mapped block 1819239214 (level 1)
[ 2064.133617][T15494] usb 9-1: new full-speed USB device number 24 using dummy_hcd
[ 2064.233669][T23658] EXT4-fs (loop5): 1 truncate cleaned up
[ 2064.251584][T23673] loop9: detected capacity change from 0 to 512
[ 2064.262707][T23658] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[ 2064.305044][T23673] ext2: Bad value for 'max_batch_time'
[ 2064.424025][T15494] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2064.464153][T15494] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 2064.499545][T23673] loop9: detected capacity change from 0 to 2048
[ 2064.514687][T15494] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00
[ 2064.527775][T23658] EXT4-fs error (device loop5): ext4_lookup:1784: inode #2: comm syz.5.4274: 'file1' linked to parent dir
[ 2064.537191][T15494] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 2064.577558][T23673] NILFS (loop9): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 2064.606753][T15494] usb 9-1: SerialNumber: syz
[ 2064.667632][T20805] udevd[20805]: incorrect nilfs2 checksum on /dev/loop9
[ 2064.683452][T23677] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 2064.683684][T15494] usb 9-1: 0:2 : does not exist
[ 2064.788136][T23678] program syz.9.4279 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 2064.817215][T23678] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[ 2064.915323][T16080] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2065.204130][T23650] syz.0.4271: attempt to access beyond end of device
[ 2065.204130][T23650] loop0: rw=0, sector=131157, nr_sectors = 1 limit=16
[ 2065.396348][T23650] erofs (device loop0): read error -5 @ 0 of nid 36
[ 2065.878238][T23691] netlink: 48 bytes leftover after parsing attributes in process `syz.5.4282'.
[ 2066.152431][T15435] usb 9-1: USB disconnect, device number 24
[ 2067.373624][T15494] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[ 2068.013671][T15494] usb 4-1: Using ep0 maxpacket: 32
[ 2068.033840][T15494] usb 4-1: config 0 has an invalid interface number: 35 but max is 0
[ 2068.053006][T15494] usb 4-1: config 0 has no interface number 0
[ 2068.084178][T15494] usb 4-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f
[ 2068.116493][T15494] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2068.140335][T15494] usb 4-1: Product: syz
[ 2068.156001][T15494] usb 4-1: Manufacturer: syz
[ 2068.283466][T15494] usb 4-1: SerialNumber: syz
[ 2068.304419][T15494] usb 4-1: config 0 descriptor??
[ 2068.546529][T23706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2068.564280][T23706] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2068.825453][T15494] radio-si470x 4-1:0.35: DeviceID=0x9242 ChipID=0x0000
[ 2068.840709][T15494] radio-si470x 4-1:0.35: This driver is known to work with firmware version 12, but the device has firmware version 0.
[ 2069.097610][T15494] radio-si470x 4-1:0.35: software version 146, hardware version 66
[ 2069.108758][T15494] radio-si470x 4-1:0.35: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org
[ 2069.511471][    C1] radio-si470x 4-1:0.35: non-zero urb status (-71)
[ 2069.519769][    C1] radio-si470x 4-1:0.35: non-zero urb status (-71)
[ 2069.527944][    C1] radio-si470x 4-1:0.35: non-zero urb status (-71)
[ 2069.536027][    C1] radio-si470x 4-1:0.35: non-zero urb status (-71)
[ 2069.544106][    C1] radio-si470x 4-1:0.35: non-zero urb status (-71)
[ 2069.552141][    C1] radio-si470x 4-1:0.35: non-zero urb status (-71)
[ 2069.560169][    C1] radio-si470x 4-1:0.35: non-zero urb status (-71)
[ 2069.568243][    C1] radio-si470x 4-1:0.35: non-zero urb status (-71)
[ 2069.576274][    C1] radio-si470x 4-1:0.35: non-zero urb status (-71)
[ 2069.584358][    C1] radio-si470x 4-1:0.35: non-zero urb status (-71)
[ 2069.592370][    C1] radio-si470x 4-1:0.35: non-zero urb status (-71)
[ 2069.600438][    C1] radio-si470x 4-1:0.35: non-zero urb status (-71)
[ 2069.608485][    C1] radio-si470x 4-1:0.35: non-zero urb status (-71)
[ 2069.616679][    C1] radio-si470x 4-1:0.35: non-zero urb status (-71)
[ 2069.624872][    C1] radio-si470x 4-1:0.35: non-zero urb status (-71)
[ 2069.632843][    C1] radio-si470x 4-1:0.35: non-zero urb status (-71)
[ 2069.640834][    C1] radio-si470x 4-1:0.35: non-zero urb status (-71)
[ 2069.648849][    C1] radio-si470x 4-1:0.35: non-zero urb status (-71)
[ 2069.656951][    C1] radio-si470x 4-1:0.35: non-zero urb status (-71)
[ 2069.664987][    C1] radio-si470x 4-1:0.35: non-zero urb status (-71)
[ 2069.672986][    C1] radio-si470x 4-1:0.35: non-zero urb status (-71)
[ 2069.681187][    C1] radio-si470x 4-1:0.35: non-zero urb status (-71)
[ 2069.689193][    C1] radio-si470x 4-1:0.35: non-zero urb status (-71)
[ 2069.697173][    C1] radio-si470x 4-1:0.35: non-zero urb status (-71)
[ 2069.705256][    C1] radio-si470x 4-1:0.35: non-zero urb status (-71)
[ 2069.713791][    C1] radio-si470x 4-1:0.35: non-zero urb status (-71)
[ 2069.721845][    C1] radio-si470x 4-1:0.35: non-zero urb status (-71)
[ 2069.729884][    C1] radio-si470x 4-1:0.35: non-zero urb status (-71)
[ 2069.737859][    C1] radio-si470x 4-1:0.35: non-zero urb status (-71)
[ 2069.745849][    C1] radio-si470x 4-1:0.35: non-zero urb status (-71)
[ 2069.753876][    C1] radio-si470x 4-1:0.35: non-zero urb status (-71)
[ 2069.761812][T15494] radio-si470x 4-1:0.35: si470x_set_report: usb_control_msg returned -71
[ 2069.761875][    C1] radio-si470x 4-1:0.35: non-zero urb status (-71)
[ 2069.780047][    C1] radio-si470x 4-1:0.35: non-zero urb status (-71)
[ 2069.788121][    C1] radio-si470x 4-1:0.35: non-zero urb status (-71)
[ 2069.796136][    C1] radio-si470x 4-1:0.35: non-zero urb status (-71)
[ 2069.804225][    C1] radio-si470x 4-1:0.35: non-zero urb status (-71)
[ 2069.812203][    C1] radio-si470x 4-1:0.35: non-zero urb status (-71)
[ 2069.820736][    C1] radio-si470x 4-1:0.35: non-zero urb status (-71)
[ 2069.828733][    C1] radio-si470x 4-1:0.35: non-zero urb status (-71)
[ 2069.836743][    C1] radio-si470x 4-1:0.35: non-zero urb status (-71)
[ 2069.844729][    C1] radio-si470x 4-1:0.35: non-zero urb status (-71)
[ 2069.852693][    C1] radio-si470x 4-1:0.35: non-zero urb status (-71)
[ 2069.860685][    C1] radio-si470x 4-1:0.35: non-zero urb status (-71)
[ 2069.868683][    C1] radio-si470x 4-1:0.35: non-zero urb status (-71)
[ 2069.876655][    C1] radio-si470x 4-1:0.35: non-zero urb status (-71)
[ 2069.884630][    C1] radio-si470x 4-1:0.35: non-zero urb status (-71)
[ 2069.892599][    C1] radio-si470x 4-1:0.35: non-zero urb status (-71)
[ 2069.900624][    C1] radio-si470x 4-1:0.35: non-zero urb status (-71)
[ 2069.908626][    C1] radio-si470x 4-1:0.35: non-zero urb status (-71)
[ 2069.916614][    C1] radio-si470x 4-1:0.35: non-zero urb status (-71)
[ 2069.924995][    C1] radio-si470x 4-1:0.35: non-zero urb status (-71)
[ 2069.932981][    C1] radio-si470x 4-1:0.35: non-zero urb status (-71)
[ 2069.940969][    C1] radio-si470x 4-1:0.35: non-zero urb status (-71)
[ 2069.949000][    C1] radio-si470x 4-1:0.35: non-zero urb status (-71)
[ 2069.957017][    C1] radio-si470x 4-1:0.35: non-zero urb status (-71)
[ 2069.965086][    C1] radio-si470x 4-1:0.35: non-zero urb status (-71)
[ 2069.973103][    C1] radio-si470x 4-1:0.35: non-zero urb status (-71)
[ 2069.988579][T15494] radio-si470x 4-1:0.35: probe with driver radio-si470x failed with error -22
[ 2070.050289][T15494] radio-raremono 4-1:0.35: this is not Thanko's Raremono.
[ 2070.086373][T15494] usb 4-1: USB disconnect, device number 34
[ 2070.438070][T23741] loop9: detected capacity change from 0 to 32768
[ 2070.494426][T23741] ocfs2: Slot 0 on device (7,9) was already allocated to this node!
[ 2070.547188][T23741] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode.
[ 2070.671378][   T30] audit: type=1326 audit(1748967105.046:1335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23738 comm="syz.9.4299" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f55f518e969 code=0x0
[ 2070.697707][    C0] vkms_vblank_simulate: vblank timer overrun
[ 2071.023604][T21859] ocfs2: Unmounting device (7,9) on (node local)
[ 2071.539135][T23758] loop9: detected capacity change from 0 to 2048
[ 2071.602266][T23758] NILFS (loop9): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 2071.647403][T23768] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 2072.244243][ T5912] usb 9-1: new full-speed USB device number 25 using dummy_hcd
[ 2072.855374][T23772] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 2072.899741][T23772] NILFS (loop9): error -2 truncating bmap (ino=16)
[ 2072.915747][ T5912] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2072.935006][ T5912] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 2072.948620][ T5912] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00
[ 2072.966055][ T5912] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 2072.978631][ T5912] usb 9-1: SerialNumber: syz
[ 2073.017852][ T5912] usb 9-1: 0:2 : does not exist
[ 2073.277194][ T5912] usb 9-1: USB disconnect, device number 25
[ 2073.406999][T20250] udevd[20250]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 2073.864652][T23794] netlink: 56 bytes leftover after parsing attributes in process `syz.8.4318'.
[ 2073.896478][T23794] tmpfs: Bad value for 'nr_inodes'
[ 2074.008800][T23786] loop9: detected capacity change from 0 to 32768
[ 2074.081719][T23786] XFS (loop9): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 2074.249636][   T30] audit: type=1326 audit(1748967108.626:1336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23803 comm="syz.3.4320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f0798e969 code=0x7ffc0000
[ 2074.277104][   T30] audit: type=1326 audit(1748967108.626:1337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23803 comm="syz.3.4320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9f0798e969 code=0x7ffc0000
[ 2074.304760][   T30] audit: type=1326 audit(1748967108.626:1338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23803 comm="syz.3.4320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f0798e969 code=0x7ffc0000
[ 2074.332878][   T30] audit: type=1326 audit(1748967108.636:1339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23803 comm="syz.3.4320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f9f0798e969 code=0x7ffc0000
[ 2074.393598][   T30] audit: type=1326 audit(1748967108.636:1340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23803 comm="syz.3.4320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f0798e969 code=0x7ffc0000
[ 2074.422376][   T30] audit: type=1326 audit(1748967108.636:1341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23803 comm="syz.3.4320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f9f0798e969 code=0x7ffc0000
[ 2074.452417][   T30] audit: type=1326 audit(1748967108.636:1342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23803 comm="syz.3.4320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f0798e969 code=0x7ffc0000
[ 2074.508758][T23786] XFS (loop9): Ending clean mount
[ 2074.538383][T23786] XFS (loop9): Quotacheck needed: Please wait.
[ 2074.649328][   T30] audit: type=1326 audit(1748967108.676:1343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23803 comm="syz.3.4320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7f9f0798e969 code=0x7ffc0000
[ 2074.813969][T23786] XFS (loop9): Quotacheck: Done.
[ 2074.823890][   T30] audit: type=1326 audit(1748967108.676:1344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23803 comm="syz.3.4320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f0798e969 code=0x7ffc0000
[ 2074.904968][T23786] XFS (loop9): User initiated shutdown received.
[ 2075.079587][T23786] XFS (loop9): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:476).  Shutting down filesystem.
[ 2075.495485][T23786] XFS (loop9): Please unmount the filesystem and rectify the problem(s)
[ 2075.685260][T21859] XFS (loop9): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 2075.727119][   T30] kauditd_printk_skb: 11 callbacks suppressed
[ 2075.727141][   T30] audit: type=1326 audit(1748967110.106:1356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23787 comm="syz.1.4316" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f405718e969 code=0x0
[ 2076.035576][   T30] audit: type=1326 audit(1748967110.116:1357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23803 comm="syz.3.4320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f9f0798e9f7 code=0x7ffc0000
[ 2076.103929][   T30] audit: type=1326 audit(1748967110.226:1358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23803 comm="syz.3.4320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9f0798d2d0 code=0x7ffc0000
[ 2076.851088][   T30] audit: type=1326 audit(1748967110.226:1359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23803 comm="syz.3.4320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f9f0798d5ca code=0x7ffc0000
[ 2077.182588][T23828] FAULT_INJECTION: forcing a failure.
[ 2077.182588][T23828] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 2077.200429][   T30] audit: type=1326 audit(1748967111.556:1360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23803 comm="syz.3.4320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f0798e969 code=0x7ffc0000
[ 2077.235465][T23828] CPU: 0 UID: 0 PID: 23828 Comm: syz.8.4327 Not tainted 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(full) 
[ 2077.235500][T23828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 2077.235517][T23828] Call Trace:
[ 2077.235527][T23828]  <TASK>
[ 2077.235538][T23828]  dump_stack_lvl+0x189/0x250
[ 2077.235594][T23828]  ? __pfx____ratelimit+0x10/0x10
[ 2077.235633][T23828]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 2077.235672][T23828]  ? __pfx__printk+0x10/0x10
[ 2077.235703][T23828]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2077.235744][T23828]  should_fail_ex+0x414/0x560
[ 2077.235791][T23828]  prepare_alloc_pages+0x213/0x610
[ 2077.235834][T23828]  __alloc_frozen_pages_noprof+0x123/0x370
[ 2077.235873][T23828]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[ 2077.235918][T23828]  ? policy_nodemask+0x27c/0x720
[ 2077.235943][T23828]  ? __lock_acquire+0xab9/0xd20
[ 2077.235986][T23828]  alloc_pages_mpol+0x232/0x4a0
[ 2077.236022][T23828]  vma_alloc_folio_noprof+0xe4/0x200
[ 2077.236050][T23828]  ? page_table_check_set+0x18d/0x730
[ 2077.236081][T23828]  ? __pfx_vma_alloc_folio_noprof+0x10/0x10
[ 2077.236118][T23828]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2077.236152][T23828]  folio_prealloc+0x30/0x180
[ 2077.236183][T23828]  __handle_mm_fault+0x2c88/0x5620
[ 2077.236206][T23828]  ? __lock_acquire+0xab9/0xd20
[ 2077.236263][T23828]  ? __pfx___handle_mm_fault+0x10/0x10
[ 2077.236289][T23828]  ? lock_vma_under_rcu+0xf8/0x710
[ 2077.236331][T23828]  ? lock_vma_under_rcu+0xf8/0x710
[ 2077.236359][T23828]  ? __pfx_lock_vma_under_rcu+0x10/0x10
[ 2077.236398][T23828]  handle_mm_fault+0x40a/0x8e0
[ 2077.236436][T23828]  do_user_addr_fault+0xa81/0x1390
[ 2077.236479][T23828]  ? rcu_is_watching+0x15/0xb0
[ 2077.236503][T23828]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2077.236531][T23828]  ? trace_page_fault_user+0x84/0x1e0
[ 2077.236576][T23828]  exc_page_fault+0x76/0xf0
[ 2077.236616][T23828]  asm_exc_page_fault+0x26/0x30
[ 2077.236640][T23828] RIP: 0033:0x7f9524650d70
[ 2077.236661][T23828] Code: 39 4f 08 72 4c 8d 4d ff 85 ed 74 33 66 0f 1f 44 00 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 47 0f b6 0c 08 45 84 c9 74 08 <45> 88 0c 00 49 8b 47 10 48 83 c0 01 49 89 47 10 83 e9 01 73 d3 41
[ 2077.236681][T23828] RSP: 002b:00007f95256114a0 EFLAGS: 00010202
[ 2077.236702][T23828] RAX: 0000000000005000 RBX: 00007f9525611540 RCX: 000000000000000f
[ 2077.236720][T23828] RDX: 00000000000001ff RSI: 0000000000000800 RDI: 00007f95256115e0
[ 2077.236736][T23828] RBP: 0000000000000011 R08: 00007f951a000000 R09: 0000000000000046
[ 2077.236753][T23828] R10: 000020000001f402 R11: 000000000001f327 R12: 0000000000000601
[ 2077.236770][T23828] R13: 00007f952482bfc0 R14: 0000000000000015 R15: 00007f95256115e0
[ 2077.236809][T23828]  </TASK>
[ 2077.236825][T23828] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF
[ 2077.326840][   T30] audit: type=1326 audit(1748967111.566:1361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23803 comm="syz.3.4320" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f0798e969 code=0x7ffc0000
[ 2077.729953][T23828] loop8: detected capacity change from 0 to 4096
[ 2077.748850][T23828] ntfs3(loop8): Different NTFS sector size (2048) and media sector size (512).
[ 2077.766084][T23835] loop5: detected capacity change from 0 to 2048
[ 2077.781906][T23835] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 2077.923530][T23848] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 2077.944008][T20805] udevd[20805]: incorrect nilfs2 checksum on /dev/loop5
[ 2078.429892][T23851] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 2078.547994][T23851] NILFS (loop5): error -2 truncating bmap (ino=16)
[ 2079.830497][T23869] loop5: detected capacity change from 0 to 2048
[ 2079.897292][T23869] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 2079.995953][T23871] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 2080.375857][T23878] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 2081.216276][T23881] overlayfs: overlapping lowerdir path
[ 2082.559572][T23899] openvswitch: netlink: VXLAN extension message has 9 unknown bytes.
[ 2082.573400][T23900] openvswitch: netlink: VXLAN extension message has 9 unknown bytes.
[ 2082.676985][T23899] loop8: detected capacity change from 0 to 1024
[ 2082.692615][T23899] hfsplus: Unknown parameter '└
'
[ 2083.034475][T23899] netlink: 104 bytes leftover after parsing attributes in process `syz.8.4346'.
[ 2083.054201][T23900] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4345'.
[ 2083.408872][T23916] random: crng reseeded on system resumption
[ 2083.558695][T23917] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 2084.997475][T23923] overlayfs: overlapping lowerdir path
[ 2085.760147][T23933] overlayfs: overlapping lowerdir path
[ 2085.922983][T23943] loop0: detected capacity change from 0 to 256
[ 2085.942414][T23943] exfat: Unknown parameter 'gЖЧ║!√·Xof│Эid'
[ 2087.613877][T23969] overlayfs: failed to clone lowerpath
[ 2087.875054][T23972] FAULT_INJECTION: forcing a failure.
[ 2087.875054][T23972] name failslab, interval 1, probability 0, space 0, times 0
[ 2087.930267][T23972] CPU: 0 UID: 0 PID: 23972 Comm: syz.9.4371 Not tainted 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(full) 
[ 2087.930302][T23972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 2087.930318][T23972] Call Trace:
[ 2087.930329][T23972]  <TASK>
[ 2087.930340][T23972]  dump_stack_lvl+0x189/0x250
[ 2087.930384][T23972]  ? __pfx____ratelimit+0x10/0x10
[ 2087.930423][T23972]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 2087.930461][T23972]  ? __pfx__printk+0x10/0x10
[ 2087.930491][T23972]  ? __pfx___might_resched+0x10/0x10
[ 2087.930515][T23972]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2087.930552][T23972]  should_fail_ex+0x414/0x560
[ 2087.930606][T23972]  should_failslab+0xa8/0x100
[ 2087.930639][T23972]  __kmalloc_cache_noprof+0x70/0x3d0
[ 2087.930665][T23972]  ? alloc_pipe_info+0xe9/0x4d0
[ 2087.930698][T23972]  alloc_pipe_info+0xe9/0x4d0
[ 2087.930728][T23972]  splice_direct_to_actor+0xa5d/0xcc0
[ 2087.930759][T23972]  ? aa_file_perm+0x11f/0xed0
[ 2087.930785][T23972]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2087.930813][T23972]  ? aa_file_perm+0x3e7/0xed0
[ 2087.930852][T23972]  ? __lock_acquire+0xab9/0xd20
[ 2087.930888][T23972]  ? __pfx_direct_splice_actor+0x10/0x10
[ 2087.930916][T23972]  ? __pfx_splice_direct_to_actor+0x10/0x10
[ 2087.930945][T23972]  ? __pfx_aa_file_perm+0x10/0x10
[ 2087.930981][T23972]  do_splice_direct+0x181/0x270
[ 2087.931007][T23972]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2087.931041][T23972]  ? __pfx_do_splice_direct+0x10/0x10
[ 2087.931066][T23972]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2087.931097][T23972]  ? __pfx_direct_file_splice_eof+0x10/0x10
[ 2087.931132][T23972]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2087.931159][T23972]  ? security_file_permission+0x75/0x290
[ 2087.931196][T23972]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2087.931225][T23972]  ? rw_verify_area+0x258/0x650
[ 2087.931254][T23972]  do_sendfile+0x4da/0x7e0
[ 2087.931291][T23972]  ? __pfx_vfs_write+0x10/0x10
[ 2087.931324][T23972]  ? __pfx_do_sendfile+0x10/0x10
[ 2087.931357][T23972]  ? __fget_files+0x3a0/0x420
[ 2087.931401][T23972]  __se_sys_sendfile64+0x13e/0x190
[ 2087.931437][T23972]  ? __pfx___se_sys_sendfile64+0x10/0x10
[ 2087.931466][T23972]  ? rcu_is_watching+0x15/0xb0
[ 2087.931497][T23972]  ? do_syscall_64+0xbe/0x3b0
[ 2087.931519][T23972]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2087.931553][T23972]  do_syscall_64+0xfa/0x3b0
[ 2087.931579][T23972]  ? lockdep_hardirqs_on+0x9c/0x150
[ 2087.931616][T23972]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2087.931639][T23972]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2087.931668][T23972]  ? exc_page_fault+0x9f/0xf0
[ 2087.931706][T23972]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2087.931730][T23972] RIP: 0033:0x7f55f518e969
[ 2087.931751][T23972] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 2087.931771][T23972] RSP: 002b:00007f55f2ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[ 2087.931796][T23972] RAX: ffffffffffffffda RBX: 00007f55f53b5fa0 RCX: 00007f55f518e969
[ 2087.931814][T23972] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003
[ 2087.931829][T23972] RBP: 00007f55f2ff6090 R08: 0000000000000000 R09: 0000000000000000
[ 2087.931845][T23972] R10: 000000007ffff004 R11: 0000000000000246 R12: 0000000000000001
[ 2087.931861][T23972] R13: 0000000000000000 R14: 00007f55f53b5fa0 R15: 00007ffe40df4228
[ 2087.931898][T23972]  </TASK>
[ 2088.527028][T23983] loop0: detected capacity change from 0 to 1024
[ 2088.708380][T23984] netlink: 16 bytes leftover after parsing attributes in process `syz.8.4368'.
[ 2089.163535][T15437] usb 10-1: new high-speed USB device number 7 using dummy_hcd
[ 2089.326119][T15437] usb 10-1: config 0 interface 0 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2089.344040][T15437] usb 10-1: config 0 interface 0 altsetting 255 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2089.371390][T23992] loop0: detected capacity change from 0 to 64
[ 2089.384146][T15437] usb 10-1: config 0 interface 0 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[ 2089.432071][T15437] usb 10-1: config 0 interface 0 has no altsetting 0
[ 2089.454312][T15437] usb 10-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00
[ 2089.495455][T15437] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2089.525122][T15437] usb 10-1: config 0 descriptor??
[ 2089.810626][T23997] loop0: detected capacity change from 0 to 512
[ 2089.839340][T23997] ext2: Bad value for 'max_batch_time'
[ 2089.973697][T23986] loop9: detected capacity change from 0 to 512
[ 2090.027864][T23997] loop0: detected capacity change from 0 to 2048
[ 2090.095728][T24004] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[ 2090.110322][T24004] overlayfs: "xino" feature enabled using 2 upper inode bits.
[ 2090.120024][T23997] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 2090.171558][T23986] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 2090.224607][T23986] ext4 filesystem being mounted at /60/bus supports timestamps until 2038-01-19 (0x7fffffff)
[ 2090.240813][T24005] overlayfs: failed to clone lowerpath
[ 2090.310050][T24007] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 2090.491789][T15437] hid-alps 0003:044E:120C.0011: unknown main item tag 0x0
[ 2090.533656][T24010] program syz.0.4382 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 2090.550764][T15437] hid-alps 0003:044E:120C.0011: hidraw0: USB HID v0.00 Device [HID 044e:120c] on usb-dummy_hcd.9-1/input0
[ 2090.555145][T24010] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[ 2090.618324][T15437] usb 10-1: USB disconnect, device number 7
[ 2090.852206][T24013] fido_id[24013]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory
[ 2091.219853][T21859] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2091.633979][T24009] loop8: detected capacity change from 0 to 32768
[ 2091.790036][T24009] bcachefs (loop8): Using encoding defined by superblock: utf8-12.1.0
[ 2091.940591][T24009] bcachefs (loop8): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,erasure_code,degraded=yes,no_splitbrain_check,fsck,norecovery,nojournal_transaction_names,nocow
[ 2091.940591][T24009]   allowing incompatible features above 0.0: (unknown version)
[ 2091.940591][T24009]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[ 2092.033764][T24009] bcachefs (loop8): recovering from clean shutdown, journal seq 10
[ 2092.070243][T24009] bcachefs (loop8): Version upgrade required:
[ 2092.070243][T24009] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[ 2092.070243][T24009] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive
[ 2092.070243][T24009]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance
[ 2092.182233][T24020] openvswitch: netlink: VXLAN extension message has 9 unknown bytes.
[ 2092.236707][T24020] loop9: detected capacity change from 0 to 1024
[ 2092.294947][T24009] bcachefs (loop8): error reading btree root btree=alloc level=0: btree_node_read_error, fixing
[ 2092.310964][T24020] hfsplus: Unknown parameter '└
'
[ 2092.406928][T24009] bcachefs (loop8): check_topology... done
[ 2092.449592][T24009] bcachefs (loop8): accounting_read... done
[ 2092.479699][T24009] bcachefs (loop8): alloc_read... done
[ 2092.529480][T24009] bcachefs (loop8): snapshots_read... done
[ 2092.581625][T24009] bcachefs (loop8): Fixed errors, running fsck a second time to verify fs is clean
[ 2092.598696][T24020] netlink: 104 bytes leftover after parsing attributes in process `syz.9.4390'.
[ 2092.641829][T24009] bcachefs (loop8): done starting filesystem
[ 2093.137080][T24034] FAULT_INJECTION: forcing a failure.
[ 2093.137080][T24034] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2093.154805][T24034] CPU: 1 UID: 0 PID: 24034 Comm: syz.3.4393 Not tainted 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(full) 
[ 2093.154848][T24034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 2093.154864][T24034] Call Trace:
[ 2093.154875][T24034]  <TASK>
[ 2093.154886][T24034]  dump_stack_lvl+0x189/0x250
[ 2093.154932][T24034]  ? __pfx____ratelimit+0x10/0x10
[ 2093.154971][T24034]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 2093.155011][T24034]  ? __pfx__printk+0x10/0x10
[ 2093.155039][T24034]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2093.155085][T24034]  should_fail_ex+0x414/0x560
[ 2093.155132][T24034]  _copy_from_user+0x2d/0xb0
[ 2093.155167][T24034]  __sys_bpf+0x1ed/0x860
[ 2093.155211][T24034]  ? __pfx___sys_bpf+0x10/0x10
[ 2093.155260][T24034]  ? ksys_write+0x22a/0x250
[ 2093.155286][T24034]  ? __pfx_ksys_write+0x10/0x10
[ 2093.155306][T24034]  ? rcu_is_watching+0x15/0xb0
[ 2093.155336][T24034]  __x64_sys_bpf+0x7c/0x90
[ 2093.155367][T24034]  do_syscall_64+0xfa/0x3b0
[ 2093.155390][T24034]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2093.155410][T24034]  ? asm_sysvec_reschedule_ipi+0x1a/0x20
[ 2093.155438][T24034]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2093.155460][T24034] RIP: 0033:0x7f9f0798e969
[ 2093.155479][T24034] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 2093.155498][T24034] RSP: 002b:00007f9f08744038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[ 2093.155521][T24034] RAX: ffffffffffffffda RBX: 00007f9f07bb6160 RCX: 00007f9f0798e969
[ 2093.155538][T24034] RDX: 0000000000000048 RSI: 00002000000000c0 RDI: 0000000000000000
[ 2093.155552][T24034] RBP: 00007f9f08744090 R08: 0000000000000000 R09: 0000000000000000
[ 2093.155566][T24034] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2093.155580][T24034] R13: 0000000000000000 R14: 00007f9f07bb6160 R15: 00007ffccbd68848
[ 2093.155614][T24034]  </TASK>
[ 2093.841871][T22195] bcachefs (loop8): shutting down
[ 2093.867170][T24037] loop9: detected capacity change from 0 to 64
[ 2093.986828][T22195] bcachefs (loop8): shutdown complete
[ 2094.592969][T15494] usb 4-1: new full-speed USB device number 35 using dummy_hcd
[ 2094.783878][T15494] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2094.859647][T24048] overlayfs: overlapping lowerdir path
[ 2094.901807][T15494] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 2094.956671][T15494] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00
[ 2094.991394][T24051] loop9: detected capacity change from 0 to 1024
[ 2095.007211][T15494] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 2095.033424][T15494] usb 4-1: SerialNumber: syz
[ 2095.055100][T15494] usb 4-1: 0:2 : does not exist
[ 2096.264273][T24051] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 2096.304012][T15437] usb 4-1: USB disconnect, device number 35
[ 2096.583596][T21859] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2097.557292][T24075] loop9: detected capacity change from 0 to 2048
[ 2097.599439][T24075] EXT4-fs: Ignoring removed bh option
[ 2097.726393][T24075] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 2098.138127][   T30] audit: type=1800 audit(1748967132.506:1362): pid=24075 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.4405" name="file1" dev="loop9" ino=15 res=0 errno=0
[ 2098.183569][T24075] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[ 2098.202197][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[ 2098.210062][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[ 2098.220691][T24075] EXT4-fs (loop9): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[ 2098.235531][T24075] EXT4-fs (loop9): This should not happen!! Data will be lost
[ 2098.235531][T24075] 
[ 2098.247209][T24075] EXT4-fs (loop9): Total free blocks count 0
[ 2098.254509][T24075] EXT4-fs (loop9): Free/Dirty block details
[ 2098.261590][T24075] EXT4-fs (loop9): free_blocks=2415919104
[ 2098.269305][T24075] EXT4-fs (loop9): dirty_blocks=16
[ 2098.683575][T24075] EXT4-fs (loop9): Block reservation details
[ 2098.690941][T24075] EXT4-fs (loop9): i_reserved_data_blocks=1
[ 2099.292170][T24093] loop8: detected capacity change from 0 to 8
[ 2099.381483][T24093] SQUASHFS error: zlib decompression failed, data probably corrupt
[ 2099.442998][T24093] SQUASHFS error: Failed to read block 0x9b: -5
[ 2099.479277][T24093] SQUASHFS error: Unable to read metadata cache entry [99]
[ 2099.519183][T24093] SQUASHFS error: Unable to read inode 0x127
[ 2099.642218][T24095] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4413'.
[ 2099.864470][T20282] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 2099.882332][T20282] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 2099.895924][T20282] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 2099.929198][T20282] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 2099.942386][T20282] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 2099.953222][T21859] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2100.063738][T24102] openvswitch: netlink: VXLAN extension message has 9 unknown bytes.
[ 2100.970328][T24110] overlayfs: overlapping lowerdir path
[ 2101.144169][T24102] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4415'.
[ 2101.214673][T24117] FAULT_INJECTION: forcing a failure.
[ 2101.214673][T24117] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2101.304778][T24117] CPU: 0 UID: 0 PID: 24117 Comm: syz.8.4419 Not tainted 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(full) 
[ 2101.304816][T24117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 2101.304831][T24117] Call Trace:
[ 2101.304842][T24117]  <TASK>
[ 2101.304852][T24117]  dump_stack_lvl+0x189/0x250
[ 2101.304901][T24117]  ? __pfx____ratelimit+0x10/0x10
[ 2101.304939][T24117]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 2101.304980][T24117]  ? __pfx__printk+0x10/0x10
[ 2101.305007][T24117]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2101.305052][T24117]  should_fail_ex+0x414/0x560
[ 2101.305103][T24117]  _copy_from_user+0x2d/0xb0
[ 2101.305138][T24117]  ___sys_sendmsg+0x158/0x2a0
[ 2101.305175][T24117]  ? __pfx____sys_sendmsg+0x10/0x10
[ 2101.305219][T24117]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2101.305283][T24117]  ? __fget_files+0x2a/0x420
[ 2101.305314][T24117]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2101.305341][T24117]  ? __fget_files+0x3a0/0x420
[ 2101.305386][T24117]  __x64_sys_sendmsg+0x19b/0x260
[ 2101.305421][T24117]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 2101.305467][T24117]  ? __pfx_ksys_write+0x10/0x10
[ 2101.305490][T24117]  ? rcu_is_watching+0x15/0xb0
[ 2101.305521][T24117]  ? do_syscall_64+0xbe/0x3b0
[ 2101.305548][T24117]  do_syscall_64+0xfa/0x3b0
[ 2101.305571][T24117]  ? lockdep_hardirqs_on+0x9c/0x150
[ 2101.305608][T24117]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2101.305637][T24117]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2101.305664][T24117]  ? exc_page_fault+0x9f/0xf0
[ 2101.305705][T24117]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2101.305731][T24117] RIP: 0033:0x7f952478e969
[ 2101.305752][T24117] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 2101.305774][T24117] RSP: 002b:00007f9525612038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2101.305803][T24117] RAX: ffffffffffffffda RBX: 00007f95249b5fa0 RCX: 00007f952478e969
[ 2101.305822][T24117] RDX: 0000000000000000 RSI: 0000200000001200 RDI: 0000000000000003
[ 2101.305839][T24117] RBP: 00007f9525612090 R08: 0000000000000000 R09: 0000000000000000
[ 2101.305855][T24117] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2101.305873][T24117] R13: 0000000000000000 R14: 00007f95249b5fa0 R15: 00007fff604bf5a8
[ 2101.305911][T24117]  </TASK>
[ 2102.052549][T23237] Bluetooth: hci6: command tx timeout
[ 2102.214926][T24127] loop8: detected capacity change from 0 to 1024
[ 2102.280579][T24099] chnl_net:caif_netlink_parms(): no params data found
[ 2102.353467][ T5847] usb 4-1: new high-speed USB device number 36 using dummy_hcd
[ 2102.526876][ T5847] usb 4-1: Using ep0 maxpacket: 16
[ 2102.546913][ T5847] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2102.607282][T24136] loop8: detected capacity change from 0 to 8
[ 2102.625120][ T5847] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2102.656244][ T5847] usb 4-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00
[ 2102.660788][T24136] SQUASHFS error: zlib decompression failed, data probably corrupt
[ 2102.683533][ T5847] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2102.721345][T24136] SQUASHFS error: Failed to read block 0x9b: -5
[ 2102.773230][T24136] SQUASHFS error: Unable to read metadata cache entry [99]
[ 2102.784531][ T5847] usb 4-1: config 0 descriptor??
[ 2102.820486][T24136] SQUASHFS error: Unable to read inode 0x127
[ 2102.863866][T24139] netlink: 48 bytes leftover after parsing attributes in process `syz.9.4426'.
[ 2103.074141][ T5847] usbhid 4-1:0.0: can't add hid device: -71
[ 2103.106671][ T5847] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[ 2103.136165][T24099] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2103.159278][ T5847] usb 4-1: USB disconnect, device number 36
[ 2103.213313][T24099] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2103.215990][T24143] netlink: 48 bytes leftover after parsing attributes in process `syz.8.4427'.
[ 2103.222820][T24099] bridge_slave_0: entered allmulticast mode
[ 2103.404855][ T1221] dvb-usb: did not find the firmware file 'dvb-usb-az6027-03.fw' (status -110). You can use <kernel_dir>/scripts/get_dvb_firmware to get the firmware
[ 2103.404935][ T1221] dvb_usb_az6027 6-1:0.0: probe with driver dvb_usb_az6027 failed with error -110
[ 2103.410047][ T1221] usb 6-1: USB disconnect, device number 28
[ 2103.412421][T24099] bridge_slave_0: entered promiscuous mode
[ 2103.424704][T24099] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2103.424821][T24099] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2103.425014][T24099] bridge_slave_1: entered allmulticast mode
[ 2103.427092][T24099] bridge_slave_1: entered promiscuous mode
[ 2103.795498][T24147] loop9: detected capacity change from 0 to 1764
[ 2104.115350][T23237] Bluetooth: hci6: command tx timeout
[ 2105.136638][T24099] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2105.469760][T24159] loop0: detected capacity change from 0 to 1764
[ 2106.199090][T23237] Bluetooth: hci6: command tx timeout
[ 2106.574766][T24099] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2106.834128][T24170] overlayfs: overlapping lowerdir path
[ 2107.235504][T20950] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2107.485283][T24099] team0: Port device team_slave_0 added
[ 2107.919290][T24185] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4439'.
[ 2107.955066][T24099] team0: Port device team_slave_1 added
[ 2108.044584][T20950] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2108.261034][T24192] loop0: detected capacity change from 0 to 1764
[ 2108.272661][T23237] Bluetooth: hci6: command tx timeout
[ 2110.244753][T20950] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2110.454232][T24209] loop8: detected capacity change from 0 to 128
[ 2110.703848][T24209] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256
[ 2111.536839][T24209] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=512, location=512
[ 2111.613438][T24209] UDF-fs: warning (device loop8): udf_load_vrs: No anchor found
[ 2111.643097][T24209] UDF-fs: Scanning with blocksize 512 failed
[ 2111.745284][T20950] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2112.064245][T24209] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256
[ 2112.180247][T24220] loop9: detected capacity change from 0 to 32768
[ 2112.224276][T24099] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2112.232660][T24099] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2112.265404][T24099] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2112.283617][T24209] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=512, location=512
[ 2112.297950][T24209] UDF-fs: warning (device loop8): udf_load_vrs: No anchor found
[ 2112.312598][T24209] UDF-fs: Scanning with blocksize 1024 failed
[ 2112.321644][T24209] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256
[ 2112.335575][T24209] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=512, location=512
[ 2112.352240][T24220] XFS (loop9): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 2112.418007][T24099] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2112.426682][T24099] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2112.475961][T24209] UDF-fs: warning (device loop8): udf_load_vrs: No anchor found
[ 2112.491946][T24220] XFS (loop9): invalid iclog size (4096 bytes), using lsunit (32768 bytes)
[ 2112.507383][T24220] XFS (loop9): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[ 2112.543567][T24209] UDF-fs: Scanning with blocksize 2048 failed
[ 2112.546946][T24220] XFS (loop9): Starting recovery (logdev: internal)
[ 2112.570143][T24220] XFS (loop9): Metadata CRC error detected at xfs_agf_read_verify+0x12f/0x1f0, xfs_agf block 0x1 
[ 2112.574785][T24209] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256
[ 2112.583020][T24220] XFS (loop9): Unmount and run xfs_repair
[ 2112.601517][T24220] XFS (loop9): First 128 bytes of corrupted metadata buffer:
[ 2112.610446][T24220] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 10 00  XAGF............
[ 2112.622181][T24220] 00000010: 00 00 00 01 00 00 00 02 00 00 00 00 00 00 00 01  ................
[ 2112.632921][T24220] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04  ................
[ 2112.643740][T24220] 00000030: 00 00 00 04 00 00 0b a2 00 00 0b a0 00 00 00 00  ................
[ 2112.648258][T24099] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2112.654419][T24220] 00000040: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb  ...^T.Lr......N.
[ 2112.654445][T24220] 00000050: 00 00 00 00 00 00 00 01 00 00 00 05 00 00 00 01  ................
[ 2112.654466][T24220] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[ 2112.654486][T24220] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[ 2112.655758][T24220] XFS (loop9): log mount/recovery failed: error -74
[ 2112.763463][T24220] XFS (loop9): log mount failed
[ 2112.773832][T24237] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4452'.
[ 2112.808510][T24209] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=512, location=512
[ 2112.821125][T24209] UDF-fs: warning (device loop8): udf_load_vrs: No anchor found
[ 2112.837600][T24209] UDF-fs: Scanning with blocksize 4096 failed
[ 2112.862609][T24209] UDF-fs: warning (device loop8): udf_fill_super: No partition found (1)
[ 2113.131730][T24242] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4454'.
[ 2113.299457][T24247] loop0: detected capacity change from 0 to 164
[ 2113.345856][T24099] hsr_slave_0: entered promiscuous mode
[ 2113.404152][T24099] hsr_slave_1: entered promiscuous mode
[ 2113.623657][T24252] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4460'.
[ 2113.727897][T24247] Unable to read rock-ridge attributes
[ 2113.878020][T24247] Unable to read rock-ridge attributes
[ 2114.711884][T24262] loop8: detected capacity change from 0 to 128
[ 2114.778175][T24262] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256
[ 2114.873674][ T5912] usb 4-1: new full-speed USB device number 37 using dummy_hcd
[ 2114.894692][T24262] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 2115.077025][ T5912] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2115.134992][ T5912] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 2115.144933][T24276] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[ 2115.190459][T24275] loop9: detected capacity change from 0 to 2048
[ 2115.204453][ T5912] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00
[ 2115.230336][ T5912] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 2115.248019][T20950] bridge_slave_1: left allmulticast mode
[ 2115.270528][ T5912] usb 4-1: SerialNumber: syz
[ 2115.288834][T20950] bridge_slave_1: left promiscuous mode
[ 2115.306329][T20950] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2115.330228][T24275] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 2115.355543][ T5912] usb 4-1: 0:2 : does not exist
[ 2115.402936][T20950] bridge_slave_0: left allmulticast mode
[ 2115.428847][T20950] bridge_slave_0: left promiscuous mode
[ 2115.446814][T20950] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2115.823608][T15435] usb 9-1: new high-speed USB device number 26 using dummy_hcd
[ 2115.853239][ T1221] usb 4-1: USB disconnect, device number 37
[ 2115.964831][T24264] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[ 2116.055836][T15435] usb 9-1: config 0 has an invalid interface number: 170 but max is 0
[ 2116.090016][T15435] usb 9-1: config 0 has no interface number 0
[ 2116.113653][T15435] usb 9-1: config 0 interface 170 altsetting 0 endpoint 0x3 has an invalid bInterval 31, changing to 7
[ 2116.169732][T15435] usb 9-1: New USB device found, idVendor=07b0, idProduct=0007, bcdDevice=17.c6
[ 2116.205187][T15435] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2116.234500][T15435] usb 9-1: config 0 descriptor??
[ 2116.281869][T15435] HFC-S_USB 9-1:0.170: probe with driver HFC-S_USB failed with error -5
[ 2116.628719][T24294] loop9: detected capacity change from 0 to 1024
[ 2116.688562][T24294] hfsplus: unable to find HFS+ superblock
[ 2116.913577][T15435] usb 4-1: new high-speed USB device number 38 using dummy_hcd
[ 2117.002122][ T5912] usb 10-1: new high-speed USB device number 8 using dummy_hcd
[ 2117.129364][T15435] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2117.171155][T15435] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2117.183575][ T5912] usb 10-1: Using ep0 maxpacket: 32
[ 2117.203455][T15435] usb 4-1: config 0 interface 0 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[ 2117.215258][ T5912] usb 10-1: config 0 has an invalid interface number: 247 but max is 0
[ 2117.245637][ T5912] usb 10-1: config 0 has no interface number 0
[ 2117.268720][T15435] usb 4-1: config 0 interface 0 has no altsetting 0
[ 2117.277542][ T5912] usb 10-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice= 1.9b
[ 2117.289519][T15435] usb 4-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00
[ 2117.299327][ T5912] usb 10-1: New USB device strings: Mfr=128, Product=0, SerialNumber=0
[ 2117.339841][ T5912] usb 10-1: Manufacturer: syz
[ 2117.375588][T15435] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2117.421599][ T5912] usb 10-1: config 0 descriptor??
[ 2117.464513][T15435] usb 4-1: config 0 descriptor??
[ 2117.532428][   T30] audit: type=1326 audit(1748967151.906:1363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24279 comm="syz.1.4466" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f405718e969 code=0x0
[ 2118.552723][T15435] hid-alps 0003:044E:120C.0012: unknown main item tag 0x0
[ 2118.580527][T15435] hid-alps 0003:044E:120C.0012: hidraw0: USB HID v0.00 Device [HID 044e:120c] on usb-dummy_hcd.3-1/input0
[ 2118.662217][T20950] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2118.688024][T20950] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2118.701456][T20950] bond0 (unregistering): Released all slaves
[ 2118.802976][ T5912] usb 4-1: USB disconnect, device number 38
[ 2118.941274][T24301] fido_id[24301]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[ 2119.103024][T15494] usb 9-1: USB disconnect, device number 26
[ 2119.286937][T24308] netlink: 48 bytes leftover after parsing attributes in process `syz.8.4471'.
[ 2119.644559][T15437] usb 10-1: USB disconnect, device number 8
[ 2120.724102][T24320] FAULT_INJECTION: forcing a failure.
[ 2120.724102][T24320] name failslab, interval 1, probability 0, space 0, times 0
[ 2120.787604][T24320] CPU: 0 UID: 0 PID: 24320 Comm: syz.9.4475 Not tainted 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(full) 
[ 2120.787642][T24320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 2120.787658][T24320] Call Trace:
[ 2120.787669][T24320]  <TASK>
[ 2120.787681][T24320]  dump_stack_lvl+0x189/0x250
[ 2120.787726][T24320]  ? __pfx____ratelimit+0x10/0x10
[ 2120.787766][T24320]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 2120.787806][T24320]  ? __pfx__printk+0x10/0x10
[ 2120.787839][T24320]  ? __pfx___might_resched+0x10/0x10
[ 2120.787869][T24320]  should_fail_ex+0x414/0x560
[ 2120.787929][T24320]  should_failslab+0xa8/0x100
[ 2120.787961][T24320]  kmem_cache_alloc_noprof+0x73/0x3c0
[ 2120.787987][T24320]  ? getname_flags+0xb8/0x540
[ 2120.788025][T24320]  getname_flags+0xb8/0x540
[ 2120.788062][T24320]  user_path_at+0x24/0x60
[ 2120.788101][T24320]  __se_sys_mount+0x2d3/0x410
[ 2120.788140][T24320]  ? __pfx___se_sys_mount+0x10/0x10
[ 2120.788168][T24320]  ? rcu_is_watching+0x15/0xb0
[ 2120.788200][T24320]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2120.788230][T24320]  ? __x64_sys_mount+0x20/0xc0
[ 2120.788263][T24320]  do_syscall_64+0xfa/0x3b0
[ 2120.788286][T24320]  ? lockdep_hardirqs_on+0x9c/0x150
[ 2120.788323][T24320]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2120.788347][T24320]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2120.788375][T24320]  ? exc_page_fault+0x9f/0xf0
[ 2120.788415][T24320]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2120.788440][T24320] RIP: 0033:0x7f55f518e969
[ 2120.788461][T24320] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 2120.788483][T24320] RSP: 002b:00007f55f2ff6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[ 2120.788509][T24320] RAX: ffffffffffffffda RBX: 00007f55f53b5fa0 RCX: 00007f55f518e969
[ 2120.788528][T24320] RDX: 0000200000000340 RSI: 00002000000000c0 RDI: 0000000000000000
[ 2120.788546][T24320] RBP: 00007f55f2ff6090 R08: 0000200000000200 R09: 0000000000000000
[ 2120.788564][T24320] R10: 000000000000005c R11: 0000000000000246 R12: 0000000000000001
[ 2120.788579][T24320] R13: 0000000000000000 R14: 00007f55f53b5fa0 R15: 00007ffe40df4228
[ 2120.788617][T24320]  </TASK>
[ 2121.224565][T20950] hsr_slave_0: left promiscuous mode
[ 2121.278777][T20950] hsr_slave_1: left promiscuous mode
[ 2121.294400][T20950] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2121.303527][T20950] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2121.330206][T20950] veth1_macvtap: left promiscuous mode
[ 2121.335018][T24333] loop0: detected capacity change from 0 to 512
[ 2121.337317][T20950] veth0_macvtap: left promiscuous mode
[ 2121.354774][T20950] veth1_vlan: left promiscuous mode
[ 2121.361318][T20950] veth0_vlan: left promiscuous mode
[ 2121.475893][T24333] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 2121.533524][T24333] ext4 filesystem being mounted at /89/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 2121.574590][T24333] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.4477: corrupted xattr block 33: e_value out of bounds
[ 2122.312966][T24346] loop8: detected capacity change from 0 to 32768
[ 2122.383084][T24346] ocfs2: Slot 0 on device (7,8) was already allocated to this node!
[ 2122.465860][T24346] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode.
[ 2122.489088][T20950] team0 (unregistering): Port device team_slave_1 removed
[ 2122.503480][   T30] audit: type=1326 audit(1748967156.886:1364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24339 comm="syz.8.4481" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f952478e969 code=0x0
[ 2122.604571][T20950] team0 (unregistering): Port device team_slave_0 removed
[ 2123.607173][T22195] ocfs2: Unmounting device (7,8) on (node local)
[ 2124.129502][T24357] loop9: detected capacity change from 0 to 2048
[ 2124.271321][T24357] NILFS (loop9): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 2124.283081][T24357] NILFS (loop9): mounting unchecked fs
[ 2124.614641][T24357] NILFS (loop9): recovery complete
[ 2124.623740][T24358] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 2124.965566][T21948] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2125.777620][T24099] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 2125.865030][T24099] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 2126.565792][T24099] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 2127.061865][T24387] loop8: detected capacity change from 0 to 16
[ 2127.134786][T24382] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2127.143756][T24387] erofs (device loop8): mounted with root inode @ nid 36.
[ 2127.351049][T24382] batadv_slave_0: entered promiscuous mode
[ 2127.387744][ T1221] usb 10-1: new high-speed USB device number 9 using dummy_hcd
[ 2127.493703][T24382] batadv_slave_0: entered allmulticast mode
[ 2127.578131][T24099] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 2127.664693][ T1221] usb 10-1: Using ep0 maxpacket: 8
[ 2127.686545][ T1221] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2127.728511][ T1221] usb 10-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[ 2127.764557][ T1221] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2127.821474][   T30] audit: type=1326 audit(1748967162.196:1365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24392 comm="syz.3.4496" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9f0798e969 code=0x0
[ 2127.854753][ T1221] usb 10-1: config 0 descriptor??
[ 2127.890062][ T1221] gspca_main: vc032x-2.14.0 probing 046d:0892
[ 2127.913925][T24099] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2127.939311][T24400] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4498'.
[ 2127.952990][T24401] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4498'.
[ 2127.958605][T24099] 8021q: adding VLAN 0 to HW filter on device team0
[ 2127.989796][T20950] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2127.998496][T20950] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2128.018468][ T6085] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2128.027111][ T6085] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2128.180739][T24099] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 2128.534739][T24386] netlink: 'syz.9.4492': attribute type 9 has an invalid length.
[ 2128.545347][T24386] netlink: 'syz.9.4492': attribute type 6 has an invalid length.
[ 2128.910244][T24412] vlan3: entered allmulticast mode
[ 2129.014468][T24412] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[ 2129.221261][ T1221] gspca_vc032x: reg_r err -71
[ 2129.243785][ T1221] vc032x 10-1:0.0: probe with driver vc032x failed with error -71
[ 2129.288301][ T1221] usb 10-1: USB disconnect, device number 9
[ 2129.893194][T24099] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2131.269836][T24431] program syz.3.4506 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 2131.283393][T24431] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[ 2131.677560][T24432] loop9: detected capacity change from 0 to 512
[ 2131.686955][T24099] veth0_vlan: entered promiscuous mode
[ 2131.709143][T24099] veth1_vlan: entered promiscuous mode
[ 2131.786432][T24432] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 2131.824341][T24099] veth0_macvtap: entered promiscuous mode
[ 2131.839988][T24099] veth1_macvtap: entered promiscuous mode
[ 2131.884243][T24099] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2131.912710][T24432] ext4 filesystem being mounted at /84/bus supports timestamps until 2038-01-19 (0x7fffffff)
[ 2131.915893][T24099] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2131.999717][T24099] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2132.031495][T24099] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2132.043012][T24099] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2132.113540][T24099] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2132.142643][T21859] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2132.278428][T24443] loop0: detected capacity change from 0 to 128
[ 2132.293539][ T1221] usb 9-1: new full-speed USB device number 27 using dummy_hcd
[ 2132.363211][T24443] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[ 2132.376215][T23079] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2132.406661][T24445] loop9: detected capacity change from 0 to 128
[ 2132.439618][T23079] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2132.467194][T24445] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256
[ 2132.491120][ T1221] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2132.512824][T24443] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 2132.541049][ T1221] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 2132.598870][T24445] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 2132.614491][ T1221] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00
[ 2132.637824][T24448] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[ 2132.662371][ T1221] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 2132.676645][ T1221] usb 9-1: SerialNumber: syz
[ 2132.697594][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2132.723943][ T1221] usb 9-1: 0:2 : does not exist
[ 2132.748056][T24449] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[ 2132.774817][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2133.133934][T15435] usb 10-1: new high-speed USB device number 10 using dummy_hcd
[ 2133.143840][    C0] raw-gadget.2 gadget.9: ignoring, device is not running
[ 2133.293821][T15435] usb 10-1: device descriptor read/64, error -32
[ 2133.973870][T15435] usb 10-1: new high-speed USB device number 11 using dummy_hcd
[ 2134.169180][T15435] usb 10-1: config 0 has an invalid interface number: 170 but max is 0
[ 2134.223723][T15435] usb 10-1: config 0 has no interface number 0
[ 2134.250958][T15435] usb 10-1: config 0 interface 170 altsetting 0 endpoint 0x3 has an invalid bInterval 31, changing to 7
[ 2134.400038][T15435] usb 10-1: New USB device found, idVendor=07b0, idProduct=0007, bcdDevice=17.c6
[ 2134.471357][T15435] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2134.543613][T15435] usb 10-1: config 0 descriptor??
[ 2134.590900][T15435] HFC-S_USB 10-1:0.170: probe with driver HFC-S_USB failed with error -5
[ 2135.589161][T24459] loop2: detected capacity change from 0 to 32768
[ 2135.637360][T24459] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.4410 (24459)
[ 2136.219260][T15435] usb 10-1: USB disconnect, device number 11
[ 2136.320420][T24459] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 2136.368803][T24459] BTRFS info (device loop2): using sha256 (sha256-x86_64) checksum algorithm
[ 2136.427655][T24459] BTRFS info (device loop2): using free-space-tree
[ 2136.560556][T24459] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR
[ 2136.571067][T24459] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR
[ 2136.635108][T24459] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR
[ 2136.842746][T24459] BTRFS error (device loop2): open_ctree failed: -12
[ 2137.021745][T20282] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 2137.066169][T20282] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 2137.094640][T20282] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 2137.155968][T20282] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 2137.166205][T20282] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 2138.929727][T16566] usb 9-1: USB disconnect, device number 27
[ 2139.698464][ T6116] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2139.713512][T20282] Bluetooth: hci3: command tx timeout
[ 2140.792434][T24513] cgroup: Need name or subsystem set
[ 2140.804633][   T30] audit: type=1800 audit(1748967175.166:1366): pid=24510 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.4525" name="/" dev="9p" ino=2 res=0 errno=0
[ 2140.991401][ T6116] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2141.163572][T15494] usb 10-1: new full-speed USB device number 12 using dummy_hcd
[ 2141.337958][T24522] loop2: detected capacity change from 0 to 64
[ 2141.349532][ T6116] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2141.375325][T15494] usb 10-1: config 0 has an invalid interface number: 8 but max is 0
[ 2141.388346][T15494] usb 10-1: config 0 has no interface number 0
[ 2141.397466][T15494] usb 10-1: config 0 interface 8 altsetting 0 endpoint 0x6 has invalid maxpacket 56166, setting to 64
[ 2141.414071][T15494] usb 10-1: config 0 interface 8 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[ 2141.438485][T15494] usb 10-1: config 0 interface 8 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0
[ 2141.450434][T15494] usb 10-1: config 0 interface 8 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64
[ 2141.484129][T15494] usb 10-1: New USB device found, idVendor=1199, idProduct=9057, bcdDevice=55.77
[ 2141.497200][T15494] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2141.506862][ T6116] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2141.519477][T15494] usb 10-1: Product: syz
[ 2141.524681][T15494] usb 10-1: Manufacturer: syz
[ 2141.530298][T15494] usb 10-1: SerialNumber: syz
[ 2141.539987][T15494] usb 10-1: config 0 descriptor??
[ 2141.774452][T24517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2141.791266][T20282] Bluetooth: hci3: command tx timeout
[ 2141.807956][ T6116] bridge_slave_1: left allmulticast mode
[ 2141.824542][T24517] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2141.828022][ T6116] bridge_slave_1: left promiscuous mode
[ 2141.853877][ T6116] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2141.869169][T24517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2141.881559][ T6116] bridge_slave_0: left allmulticast mode
[ 2141.885571][T24517] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2141.890424][ T6116] bridge_slave_0: left promiscuous mode
[ 2141.908217][ T6116] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2141.945086][T15494] usb 10-1: USB disconnect, device number 12
[ 2142.524194][ T6116] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2142.542797][ T6116] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2142.568285][ T6116] bond0 (unregistering): Released all slaves
[ 2142.596541][T24483] chnl_net:caif_netlink_parms(): no params data found
[ 2142.688505][ T6116] tipc: Left network mode
[ 2142.769823][T24483] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2142.778517][T24483] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2142.787659][T24483] bridge_slave_0: entered allmulticast mode
[ 2142.796825][T24483] bridge_slave_0: entered promiscuous mode
[ 2142.809913][T24483] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2142.822884][T24483] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2142.837688][T24483] bridge_slave_1: entered allmulticast mode
[ 2142.852378][T24483] bridge_slave_1: entered promiscuous mode
[ 2142.915034][T24483] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2142.932359][T24483] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2142.989643][ T6116] hsr_slave_0: left promiscuous mode
[ 2142.997624][ T6116] hsr_slave_1: left promiscuous mode
[ 2143.004799][ T6116] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2143.014654][ T6116] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2143.038437][ T6116] veth1_macvtap: left promiscuous mode
[ 2143.045180][ T6116] veth0_macvtap: left promiscuous mode
[ 2143.051873][ T6116] veth1_vlan: left promiscuous mode
[ 2143.058858][ T6116] veth0_vlan: left promiscuous mode
[ 2143.220313][ T6116] pimreg (unregistering): left allmulticast mode
[ 2143.835036][T24542] loop9: detected capacity change from 0 to 16
[ 2143.982158][T20282] Bluetooth: hci3: command tx timeout
[ 2144.171064][ T5912] usb 9-1: new full-speed USB device number 28 using dummy_hcd
[ 2144.182297][T24542] erofs (device loop9): mounted with root inode @ nid 36.
[ 2144.672058][ T5912] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2144.686351][ T5912] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 2144.797338][ T5912] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00
[ 2144.866110][T24544] loop0: detected capacity change from 0 to 16
[ 2144.948583][ T5912] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 2144.967466][T24544] erofs (device loop0): mounted with root inode @ nid 36.
[ 2145.073977][ T5912] usb 9-1: SerialNumber: syz
[ 2145.357005][ T5912] usb 9-1: 0:2 : does not exist
[ 2145.763689][T15437] usb 10-1: new high-speed USB device number 13 using dummy_hcd
[ 2145.802511][ T1221] usb 9-1: USB disconnect, device number 28
[ 2145.917576][T15437] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2145.932155][T15437] usb 10-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[ 2145.948319][T15437] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2145.959867][T15437] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2145.970198][T15437] usb 10-1: Product: syz
[ 2145.975646][T15437] usb 10-1: Manufacturer: syz
[ 2145.981580][T15437] usb 10-1: SerialNumber: syz
[ 2146.006717][T15437] cdc_mbim 10-1:1.0: skipping garbage
[ 2146.024617][T20282] Bluetooth: hci3: command tx timeout
[ 2146.201708][T24548] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22
[ 2146.672082][ T6116] team0 (unregistering): Port device team_slave_1 removed
[ 2146.831982][T15458] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[ 2146.834567][T24548] netlink: zone id is out of range
[ 2146.964165][T24548] netlink: zone id is out of range
[ 2146.970529][T24548] netlink: zone id is out of range
[ 2147.030026][T24555] loop8: detected capacity change from 0 to 256
[ 2147.039212][T24548] netlink: zone id is out of range
[ 2147.045916][T24548] netlink: zone id is out of range
[ 2147.052071][T24548] netlink: zone id is out of range
[ 2147.095784][T24548] netlink: zone id is out of range
[ 2147.108058][T24548] netlink: zone id is out of range
[ 2147.114564][T24548] netlink: zone id is out of range
[ 2147.120744][T24548] netlink: zone id is out of range
[ 2147.138575][T24555] netlink: 'syz.8.4538': attribute type 1 has an invalid length.
[ 2147.148250][T24555] netlink: 236 bytes leftover after parsing attributes in process `syz.8.4538'.
[ 2147.164244][T15458] usb 3-1: Using ep0 maxpacket: 16
[ 2147.184497][T15458] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2147.251331][T15458] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2147.258935][T24548] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22
[ 2147.274282][T15437] cdc_mbim 10-1:1.0: setting tx_max = 184
[ 2147.283112][ T6116] team0 (unregistering): Port device team_slave_0 removed
[ 2147.284823][T15458] usb 3-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00
[ 2147.306788][T15437] cdc_mbim 10-1:1.0: cdc-wdm0: USB WDM device
[ 2147.317819][T15458] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2147.340658][T15437] wwan wwan0: port wwan0mbim0 attached
[ 2147.388652][T15458] usb 3-1: config 0 descriptor??
[ 2147.663098][T15458] usbhid 3-1:0.0: can't add hid device: -71
[ 2147.720672][T15458] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[ 2147.773844][T15458] usb 3-1: USB disconnect, device number 15
[ 2147.789805][ T5912] usb 9-1: new high-speed USB device number 29 using dummy_hcd
[ 2147.973656][ T5912] usb 9-1: Using ep0 maxpacket: 32
[ 2148.014097][ T5912] usb 9-1: config 0 has an invalid interface number: 184 but max is 0
[ 2148.063441][ T5912] usb 9-1: config 0 has no interface number 0
[ 2148.101460][ T5912] usb 9-1: config 0 interface 184 has no altsetting 0
[ 2148.166771][ T5912] usb 9-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[ 2148.228480][ T5912] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2148.281813][ T5912] usb 9-1: Product: syz
[ 2148.315814][ T5912] usb 9-1: Manufacturer: syz
[ 2148.370056][T24560] loop9: detected capacity change from 0 to 512
[ 2148.377881][ T5912] usb 9-1: SerialNumber: syz
[ 2148.404572][ T5912] usb 9-1: config 0 descriptor??
[ 2148.432476][T24560] ext2: Bad value for 'max_batch_time'
[ 2148.474293][ T5912] smsc75xx v1.0.0
[ 2148.655647][T24560] loop9: detected capacity change from 0 to 2048
[ 2148.694713][T24560] NILFS (loop9): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 2148.834443][T24563] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 2149.038347][T24564] program syz.9.4540 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 2149.053770][T24564] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[ 2149.153655][ T5912] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[ 2149.368008][ T5912] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[ 2149.871467][ T5912] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -32
[ 2149.940822][ T5912] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -32
[ 2149.946562][T24569] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[ 2149.993984][ T5912] smsc75xx 9-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32
[ 2150.007009][T24569] Bluetooth: hci5: Error when powering off device on rfkill (-4)
[ 2150.041159][ T5912] smsc75xx 9-1:0.184: probe with driver smsc75xx failed with error -32
[ 2150.077586][T24570] loop2: detected capacity change from 0 to 1024
[ 2150.193508][T24570] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[ 2150.265305][T24570] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[ 2150.355998][T24569] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[ 2150.363148][T24569] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[ 2150.458536][T24570] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869)
[ 2150.495347][T24569] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[ 2150.625080][T24570] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[ 2150.643560][T24569] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[ 2150.746385][T24572] loop9: detected capacity change from 0 to 512
[ 2150.789732][T24570] EXT4-fs error (device loop2): ext4_get_journal_inode:5796: inode #17: comm syz.2.4543: iget: bad i_size value: 4398046511204
[ 2150.889576][T24569] Bluetooth: hci6: Opcode 0x0c1a failed: -4
[ 2150.922704][T24572] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[ 2150.973542][T24570] EXT4-fs (loop2): Remounting filesystem read-only
[ 2151.054303][T24569] Bluetooth: hci6: Error when powering off device on rfkill (-4)
[ 2151.070537][T24570] EXT4-fs (loop2): no journal found
[ 2151.092435][T24572] EXT4-fs (loop9): 1 truncate cleaned up
[ 2151.177202][T24572] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 2151.568172][T24569] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[ 2151.585557][T24569] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[ 2151.727243][ T5912] usb 9-1: USB disconnect, device number 29
[ 2151.769769][T24571] EXT4-fs error (device loop9): mb_free_blocks:1948: group 0, inode 15: block 33:freeing already freed block (bit 32); block bitmap corrupt.
[ 2152.474874][T21859] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2155.107589][T15437] cdc_mbim 10-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.9-1, CDC MBIM, 0e:80:65:42:0a:96
[ 2155.206006][T24483] team0: Port device team_slave_0 added
[ 2155.210109][T15437] usb 10-1: USB disconnect, device number 13
[ 2155.262466][T24483] team0: Port device team_slave_1 added
[ 2155.270964][T15437] cdc_mbim 10-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.9-1, CDC MBIM
[ 2155.310097][T24605] netlink: 100 bytes leftover after parsing attributes in process `syz.3.4553'.
[ 2155.427626][T24610] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4555'.
[ 2155.446121][T24608] loop0: detected capacity change from 0 to 512
[ 2155.472142][T24608] ext2: Bad value for 'max_batch_time'
[ 2155.585859][T15437] wwan wwan0: port wwan0mbim0 disconnected
[ 2155.688647][T24608] loop0: detected capacity change from 0 to 2048
[ 2155.771961][T24483] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2155.771983][T24483] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2155.772041][T24483] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2155.775670][T24483] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2155.775684][T24483] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 2155.775731][T24483] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2155.815045][T24608] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 2155.891403][T24613] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 2156.007225][T24614] program syz.0.4554 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 2156.009610][T24614] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[ 2156.609314][T24483] hsr_slave_0: entered promiscuous mode
[ 2156.616224][T24483] hsr_slave_1: entered promiscuous mode
[ 2156.739319][T24483] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 2156.751353][T24483] Cannot create hsr debugfs directory
[ 2156.768267][ T6116] IPVS: stop unused estimator thread 0...
[ 2156.825132][T15437] usb 10-1: new full-speed USB device number 14 using dummy_hcd
[ 2156.985854][T15437] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2157.066897][T24603] loop8: detected capacity change from 0 to 32768
[ 2157.128371][T24603] XFS (loop8): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 2157.215061][T15437] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 2157.303192][T24603] XFS (loop8): invalid iclog size (4096 bytes), using lsunit (32768 bytes)
[ 2157.372679][T24630] loop2: detected capacity change from 0 to 128
[ 2157.460332][T24603] XFS (loop8): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[ 2157.503424][T15437] usb 10-1: string descriptor 0 read error: -71
[ 2157.520394][T15437] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00
[ 2157.595568][T15437] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 2157.729897][T15437] usb 10-1: can't set config #1, error -71
[ 2157.785082][T24603] XFS (loop8): Starting recovery (logdev: internal)
[ 2157.846636][T15437] usb 10-1: USB disconnect, device number 14
[ 2158.289814][T24603] XFS (loop8): Metadata CRC error detected at xfs_agf_read_verify+0x12f/0x1f0, xfs_agf block 0x1 
[ 2158.330915][T24603] XFS (loop8): Unmount and run xfs_repair
[ 2158.889421][T24603] XFS (loop8): First 128 bytes of corrupted metadata buffer:
[ 2159.011298][T24603] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 10 00  XAGF............
[ 2159.056142][T24603] 00000010: 00 00 00 01 00 00 00 02 00 00 00 00 00 00 00 01  ................
[ 2159.104890][T24603] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04  ................
[ 2159.125447][T24603] 00000030: 00 00 00 04 00 00 0b a2 00 00 0b a0 00 00 00 00  ................
[ 2159.243651][T24603] 00000040: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb  ...^T.Lr......N.
[ 2159.334573][T24603] 00000050: 00 00 00 00 00 00 00 01 00 00 00 05 00 00 00 01  ................
[ 2159.842121][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[ 2159.850302][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[ 2159.863528][T24603] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[ 2159.890687][T24603] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[ 2159.925937][T24603] XFS (loop8): log mount/recovery failed: error -74
[ 2160.561541][T24603] XFS (loop8): log mount failed
[ 2160.976184][T24664] net_ratelimit: 394 callbacks suppressed
[ 2160.976207][T24664] openvswitch: netlink: VXLAN extension message has 9 unknown bytes.
[ 2161.391994][T24668] loop9: detected capacity change from 0 to 64
[ 2161.406353][T24668] hfs: Unknown parameter '                18446744073709551615                '
[ 2161.415786][T24664] loop2: detected capacity change from 0 to 1024
[ 2161.484860][T24664] hfsplus: Unknown parameter '└
'
[ 2161.775508][T24668] 9pnet_fd: Insufficient options for proto=fd
[ 2162.015374][T24483] netdevsim netdevsim1 netdevsim0: renamed from eth0
[ 2162.048339][T24664] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4568'.
[ 2162.071854][T24483] netdevsim netdevsim1 netdevsim1: renamed from eth1
[ 2162.128992][T24483] netdevsim netdevsim1 netdevsim2: renamed from eth2
[ 2162.156530][T24483] netdevsim netdevsim1 netdevsim3: renamed from eth3
[ 2162.383650][T15494] usb 10-1: new full-speed USB device number 15 using dummy_hcd
[ 2162.463932][ T5912] usb 9-1: new high-speed USB device number 30 using dummy_hcd
[ 2162.469567][T24483] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2162.658302][T15494] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2162.843547][T24483] 8021q: adding VLAN 0 to HW filter on device team0
[ 2163.664542][ T6116] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2163.673165][ T6116] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2163.732934][ T5912] usb 9-1: Using ep0 maxpacket: 16
[ 2163.843003][T15494] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 2164.042946][ T5912] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2164.066262][ T1328] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2164.075108][ T1328] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2164.127657][T15494] usb 10-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00
[ 2164.153115][ T5912] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2164.245847][T15494] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 2164.269242][ T5912] usb 9-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00
[ 2164.281208][T15494] usb 10-1: SerialNumber: syz
[ 2164.307548][ T5912] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2164.418882][T15494] usb 10-1: 0:2 : does not exist
[ 2164.472520][ T5912] usb 9-1: config 0 descriptor??
[ 2164.562916][T24689] openvswitch: netlink: VXLAN extension message has 9 unknown bytes.
[ 2164.646183][T24689] loop0: detected capacity change from 0 to 1024
[ 2164.735430][T24689] hfsplus: Unknown parameter '└
'
[ 2165.462975][ T5912] usbhid 9-1:0.0: can't add hid device: -71
[ 2165.471890][ T5912] usbhid 9-1:0.0: probe with driver usbhid failed with error -71
[ 2165.514758][T15494] usb 10-1: USB disconnect, device number 15
[ 2165.556238][ T5912] usb 9-1: USB disconnect, device number 30
[ 2165.740059][T24697] overlayfs: missing 'lowerdir'
[ 2166.473313][T24703] loop9: detected capacity change from 0 to 16
[ 2166.524401][T24703] erofs: DAX unsupported by block device. Turning off DAX.
[ 2166.531924][T24483] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2166.569362][T24703] erofs (device loop9): mounted with root inode @ nid 36.
[ 2167.206392][T24714] syz.9.4578: attempt to access beyond end of device
[ 2167.206392][T24714] loop9: rw=0, sector=131157, nr_sectors = 1 limit=16
[ 2167.222802][T24714] erofs (device loop9): read error -5 @ 0 of nid 36
[ 2167.769010][T24483] veth0_vlan: entered promiscuous mode
[ 2167.953671][T24706] loop2: detected capacity change from 0 to 64
[ 2168.388409][T24718] loop8: detected capacity change from 0 to 1764
[ 2168.654188][T24483] veth1_vlan: entered promiscuous mode
[ 2168.998631][T24726] loop9: detected capacity change from 0 to 128
[ 2169.028514][T24726] efs: Unknown parameter 'eаx_пе_┌#*Яйбfs'
[ 2169.089921][T24483] veth0_macvtap: entered promiscuous mode
[ 2169.396795][T24483] veth1_macvtap: entered promiscuous mode
[ 2169.489378][T24483] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2169.566635][T24732] loop0: detected capacity change from 0 to 64
[ 2169.598522][T24483] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2169.866180][T24483] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2170.086857][T24483] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2170.117325][T24483] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2170.454078][T24741] hfs: hfs: Invalid key length: 94
[ 2170.596067][T24483] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2171.153939][ T6110] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2171.204290][ T6110] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2171.609021][T15494] usb 9-1: new full-speed USB device number 31 using dummy_hcd
[ 2171.870198][T20535] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2171.912280][T20535] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2171.922851][T24758] openvswitch: netlink: VXLAN extension message has 9 unknown bytes.
[ 2171.973080][T24758] loop9: detected capacity change from 0 to 1024
[ 2171.986544][T24758] hfsplus: Unknown parameter '└
'
[ 2172.032154][T15494] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2172.113840][T15494] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 2172.136681][T15494] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00
[ 2172.214368][T15494] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 2172.244880][T15494] usb 9-1: SerialNumber: syz
[ 2172.286947][T15494] usb 9-1: 0:2 : does not exist
[ 2174.398951][T24779] loop1: detected capacity change from 0 to 2048
[ 2174.629849][T24779] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 2175.655252][T24789] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 2175.702148][T20805] udevd[20805]: incorrect nilfs2 checksum on /dev/loop1
[ 2176.153788][T24794] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 2176.263609][T24794] NILFS (loop1): error -2 truncating bmap (ino=16)
[ 2176.393256][T24791] loop0: detected capacity change from 0 to 64
[ 2176.754360][T24795] FAULT_INJECTION: forcing a failure.
[ 2176.754360][T24795] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2177.358243][T24795] CPU: 1 UID: 0 PID: 24795 Comm: syz.3.4598 Not tainted 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(full) 
[ 2177.358281][T24795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 2177.358297][T24795] Call Trace:
[ 2177.358307][T24795]  <TASK>
[ 2177.358318][T24795]  dump_stack_lvl+0x189/0x250
[ 2177.358362][T24795]  ? __pfx____ratelimit+0x10/0x10
[ 2177.358402][T24795]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 2177.358441][T24795]  ? __pfx__printk+0x10/0x10
[ 2177.358469][T24795]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2177.358514][T24795]  should_fail_ex+0x414/0x560
[ 2177.358560][T24795]  _copy_from_user+0x2d/0xb0
[ 2177.358595][T24795]  kstrtouint_from_user+0xc4/0x170
[ 2177.358626][T24795]  ? __pfx_kstrtouint_from_user+0x10/0x10
[ 2177.358658][T24795]  ? lock_is_held_type+0x137/0x190
[ 2177.358711][T24795]  proc_fail_nth_write+0x88/0x240
[ 2177.358755][T24795]  ? __pfx_proc_fail_nth_write+0x10/0x10
[ 2177.358793][T24795]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2177.358825][T24795]  ? __pfx_proc_fail_nth_write+0x10/0x10
[ 2177.358861][T24795]  vfs_write+0x27e/0xa90
[ 2177.358899][T24795]  ? __pfx_vfs_write+0x10/0x10
[ 2177.358926][T24795]  ? __fget_files+0x2a/0x420
[ 2177.358961][T24795]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2177.358989][T24795]  ? __fget_files+0x3a0/0x420
[ 2177.359017][T24795]  ? __fget_files+0x2a/0x420
[ 2177.359051][T24795]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2177.359085][T24795]  ksys_write+0x145/0x250
[ 2177.359108][T24795]  ? __pfx_filldir64+0x10/0x10
[ 2177.359135][T24795]  ? __pfx_ksys_write+0x10/0x10
[ 2177.359157][T24795]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2177.359194][T24795]  ? do_syscall_64+0xbe/0x3b0
[ 2177.359223][T24795]  do_syscall_64+0xfa/0x3b0
[ 2177.359244][T24795]  ? lockdep_hardirqs_on+0x9c/0x150
[ 2177.359280][T24795]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2177.359304][T24795]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2177.359331][T24795]  ? exc_page_fault+0x9f/0xf0
[ 2177.359370][T24795]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2177.359394][T24795] RIP: 0033:0x7f9f0798d41f
[ 2177.359416][T24795] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[ 2177.359437][T24795] RSP: 002b:00007f9f08765030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[ 2177.359462][T24795] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f9f0798d41f
[ 2177.359479][T24795] RDX: 0000000000000001 RSI: 00007f9f087650a0 RDI: 0000000000000004
[ 2177.359496][T24795] RBP: 00007f9f08765090 R08: 0000000000000000 R09: 0000000000000000
[ 2177.359512][T24795] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001
[ 2177.359527][T24795] R13: 0000000000000001 R14: 00007f9f07bb6080 R15: 00007ffccbd68848
[ 2177.359565][T24795]  </TASK>
[ 2178.329613][T15494] usb 9-1: USB disconnect, device number 31
[ 2178.413248][T24802] hfs: hfs: Invalid key length: 94
[ 2181.201255][T24835] loop9: detected capacity change from 0 to 2048
[ 2181.216090][T24835] NILFS (loop9): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 2181.273733][T24841] syzkaller1: entered promiscuous mode
[ 2181.420581][T24841] syzkaller1: entered allmulticast mode
[ 2181.467763][T24843] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 2181.573027][T24846] loop0: detected capacity change from 0 to 128
[ 2181.710123][T24846] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 2181.814041][T24846] ext4 filesystem being mounted at /107/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 2182.249829][T21948] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 2184.299557][T24882] ubi31: attaching mtd0
[ 2184.757565][T24882] ubi31: scanning is finished
[ 2184.826526][T24879] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4626'.
[ 2185.011252][T24882] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4
[ 2185.898728][T24892] loop0: detected capacity change from 0 to 512
[ 2186.026994][T24892] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[ 2186.154991][T24892] EXT4-fs error (device loop0): ext4_iget_extra_inode:5035: inode #15: comm syz.0.4629: corrupted in-inode xattr: e_value size too large
[ 2186.323470][T24892] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.4629: couldn't read orphan inode 15 (err -117)
[ 2187.404729][T24892] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 2188.325211][T24908] loop8: detected capacity change from 0 to 32768
[ 2188.357050][T24908] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.4634 (24908)
[ 2188.502428][T24908] BTRFS info (device loop8): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 2188.514828][T24908] BTRFS info (device loop8): using crc32c (crc32c-x86_64) checksum algorithm
[ 2188.525451][T24908] BTRFS info (device loop8): disk space caching is enabled
[ 2188.534161][T24908] BTRFS warning (device loop8): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[ 2188.593319][T21948] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2189.320548][T24908] BTRFS info (device loop8): rebuilding free space tree
[ 2189.402855][T24908] BTRFS info (device loop8): disabling free space tree
[ 2189.411343][T24908] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[ 2189.424527][T24908] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[ 2189.706048][T24932] loop2: detected capacity change from 0 to 2048
[ 2190.121959][T15494] libceph: connect (1)[c::]:6789 error -101
[ 2190.149597][T15494] libceph: mon0 (1)[c::]:6789 connect error
[ 2190.171004][T22195] BTRFS info (device loop8): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 2190.373522][T24933] ceph: No mds server is up or the cluster is laggy
[ 2190.471899][T24942] netlink: 14220 bytes leftover after parsing attributes in process `syz.9.4639'.
[ 2191.176436][T24944] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 2191.264143][   T30] audit: type=1800 audit(1748967225.606:1367): pid=24932 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4638" name="file1" dev="loop2" ino=15 res=0 errno=0
[ 2191.792540][T24953] Bluetooth: MGMT ver 1.23
[ 2194.149155][T24962] loop1: detected capacity change from 0 to 8192
[ 2194.243051][T24968] loop9: detected capacity change from 0 to 1024
[ 2194.336919][T24971] loop0: detected capacity change from 0 to 2048
[ 2195.565499][T24962] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[ 2196.133770][T24982] netlink: 'syz.2.4653': attribute type 10 has an invalid length.
[ 2196.173251][T24982] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2196.194546][T24982] team0: Port device bond0 added
[ 2197.190301][T24985] loop8: detected capacity change from 0 to 32768
[ 2197.216920][T24985] (syz.8.4654,24985,1):ocfs2_verify_volume:2303 ERROR: found superblock with bad version: found 0.234, should be 0.90
[ 2197.231837][T24985] (syz.8.4654,24985,1):ocfs2_verify_volume:2331 ERROR: status = -22
[ 2197.241499][T24985] (syz.8.4654,24985,1):ocfs2_fill_super:989 ERROR: superblock probe failed!
[ 2197.251947][T24985] (syz.8.4654,24985,1):ocfs2_fill_super:1177 ERROR: status = -22
[ 2197.827536][T24971] NILFS error (device loop0): nilfs_lookup: deleted inode referenced: 12
[ 2200.022129][T24995] loop2: detected capacity change from 0 to 256
[ 2200.079421][T24995] vfat: Unknown parameter 's	3:+Do?zd;ї*dhortname'
[ 2201.017091][T25005] tipc: Started in network mode
[ 2201.023674][T25005] tipc: Node identity 2e687d49710a, cluster identity 4711
[ 2201.034355][T25005] tipc: Enabled bearer <eth:xfrm0>, priority 10
[ 2201.599554][T25010] netlink: 'syz.3.4662': attribute type 1 has an invalid length.
[ 2202.262152][T15437] tipc: Node number set to 1600290121
[ 2204.679178][T25038] loop9: detected capacity change from 0 to 256
[ 2204.748214][T25044] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4668'.
[ 2205.257558][T25044] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4668'.
[ 2205.902236][T25047] loop8: detected capacity change from 0 to 32768
[ 2205.943734][T25047] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.4671 (25047)
[ 2206.052596][T25047] BTRFS info (device loop8): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 2206.065147][T25047] BTRFS info (device loop8): using sha256 (sha256-x86_64) checksum algorithm
[ 2206.075810][T25047] BTRFS info (device loop8): using free-space-tree
[ 2206.609425][T22195] BTRFS info (device loop8): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 2207.142636][T25069] loop1: detected capacity change from 0 to 2048
[ 2207.261843][T25069] nilfs2: Unknown parameter 'devlink'
[ 2208.564486][ T1221] IPVS: starting estimator thread 0...
[ 2209.403611][T25086] IPVS: using max 25 ests per chain, 60000 per kthread
[ 2209.510005][T25093] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 2211.075136][T25099] loop0: detected capacity change from 0 to 8192
[ 2211.163621][T25099] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[ 2212.264881][   T30] audit: type=1107 audit(1748967246.486:1368): pid=25105 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[ 2212.940352][T25109] ubi31: attaching mtd0
[ 2213.393951][T25109] ubi31: scanning is finished
[ 2214.102509][T25132] netlink: 40 bytes leftover after parsing attributes in process `syz.1.4691'.
[ 2214.993508][T25109] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4
[ 2215.177325][T25140] loop1: detected capacity change from 0 to 128
[ 2215.253718][T25140] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[ 2218.430786][T25161] loop2: detected capacity change from 0 to 256
[ 2219.399119][T25167] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4700'.
[ 2220.103679][T25171] loop2: detected capacity change from 0 to 32768
[ 2220.511449][T25171] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.4703 (25171)
[ 2220.559964][T25174] loop0: detected capacity change from 0 to 2048
[ 2220.570539][T25171] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 2220.582895][T25171] BTRFS info (device loop2): using sha256 (sha256-x86_64) checksum algorithm
[ 2220.611540][T25176] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 2220.937275][T25171] BTRFS info (device loop2): rebuilding free space tree
[ 2220.947666][T25193] binder: 25192:25193 ioctl c0306201 2000000003c0 returned -14
[ 2220.996827][T25171] BTRFS info (device loop2): disabling free space tree
[ 2221.005466][T25171] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[ 2221.017266][T25171] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[ 2221.068652][ T1297] ieee802154 phy0 wpan0: encryption failed: -22
[ 2221.076506][ T1297] ieee802154 phy1 wpan1: encryption failed: -22
[ 2221.456267][T25196] loop1: detected capacity change from 0 to 256
[ 2221.921116][   T30] audit: type=1800 audit(1748967256.296:1369): pid=25199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.4703" name="file1" dev="loop2" ino=260 res=0 errno=0
[ 2221.978854][T25202] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4706'.
[ 2222.254273][T24099] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 2222.277574][T25203] exFAT-fs (loop1): start_clu is invalid cluster(0x400)
[ 2222.529317][T25206] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4709'.
[ 2222.683068][T25196] VFS: Lookup of 'bus' in exfat loop1 would have caused loop
[ 2222.831168][   T30] audit: type=1326 audit(1748967257.206:1370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25217 comm="syz.3.4713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f0798e969 code=0x7ffc0000
[ 2222.973859][   T30] audit: type=1326 audit(1748967257.206:1371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25217 comm="syz.3.4713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f0798e969 code=0x7ffc0000
[ 2223.133172][   T30] audit: type=1326 audit(1748967257.246:1372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25217 comm="syz.3.4713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=256 compat=0 ip=0x7f9f0798e969 code=0x7ffc0000
[ 2223.346831][   T30] audit: type=1326 audit(1748967257.246:1373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25217 comm="syz.3.4713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f0798e969 code=0x7ffc0000
[ 2223.445001][   T30] audit: type=1326 audit(1748967257.246:1374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25217 comm="syz.3.4713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f0798e969 code=0x7ffc0000
[ 2226.217874][T25243] loop1: detected capacity change from 0 to 128
[ 2226.263235][T25243] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 2226.850224][T25243] ext4 filesystem being mounted at /20/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[ 2228.807888][T24483] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 2229.057163][T25268] netlink: 'syz.1.4728': attribute type 1 has an invalid length.
[ 2229.691533][T25277] loop8: detected capacity change from 0 to 40427
[ 2230.429593][T25277] F2FS-fs (loop8): Insane cp_payload (553648128 >= 504)
[ 2230.438130][T25277] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock
[ 2231.053978][T25277] F2FS-fs (loop8): build fault injection rate: 17008
[ 2231.062058][T25277] F2FS-fs (loop8): build fault injection type: 0x1f8
[ 2231.075148][T25277] F2FS-fs (loop8): invalid crc value
[ 2231.316737][T25277] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0
[ 2231.325455][T25277] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5
[ 2232.252909][T25306] netlink: 'syz.2.4736': attribute type 4 has an invalid length.
[ 2232.367623][T25307] loop2: detected capacity change from 0 to 256
[ 2232.376576][T25307] exfat: Bad value for 'gid'
[ 2232.382146][T25307] exfat: Bad value for 'gid'
[ 2233.411705][T25303] loop2: detected capacity change from 0 to 2048
[ 2233.425978][T22195] syz-executor: attempt to access beyond end of device
[ 2233.425978][T22195] loop8: rw=2049, sector=45096, nr_sectors = 24 limit=40427
[ 2233.426798][T25303] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 2233.597630][T22195] CPU: 1 UID: 0 PID: 22195 Comm: syz-executor Not tainted 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(full) 
[ 2233.597667][T22195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 2233.597683][T22195] Call Trace:
[ 2233.597693][T22195]  <TASK>
[ 2233.597705][T22195]  dump_stack_lvl+0x189/0x250
[ 2233.597753][T22195]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 2233.597790][T22195]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[ 2233.597833][T22195]  ? __pfx_queue_work_on+0x10/0x10
[ 2233.597858][T22195]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2233.597887][T22195]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[ 2233.597922][T22195]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 2233.597959][T22195]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2233.597986][T22195]  ? f2fs_hw_is_readonly+0x39b/0x470
[ 2233.598026][T22195]  f2fs_handle_critical_error+0x37c/0x540
[ 2233.598068][T22195]  f2fs_write_end_io+0x495/0x810
[ 2233.598103][T22195]  ? blkg_put+0x22/0x240
[ 2233.598158][T22195]  __submit_merged_bio+0x27a/0x6a0
[ 2233.598198][T22195]  __submit_merged_write_cond+0x255/0x530
[ 2233.598240][T22195]  f2fs_write_data_pages+0x261d/0x3000
[ 2233.598275][T22195]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2233.598345][T22195]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[ 2233.598435][T22195]  ? __mod_zone_page_state+0xd7/0x140
[ 2233.598462][T22195]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2233.598490][T22195]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2233.598518][T22195]  ? __bfs+0x154/0x2a0
[ 2233.598577][T22195]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2233.598605][T22195]  ? __lock_acquire+0xab9/0xd20
[ 2233.598650][T22195]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2233.598677][T22195]  ? do_raw_spin_lock+0x121/0x290
[ 2233.598713][T22195]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2233.598746][T22195]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2233.598773][T22195]  ? do_raw_spin_unlock+0x122/0x240
[ 2233.598803][T22195]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[ 2233.598847][T22195]  do_writepages+0x32e/0x550
[ 2233.598878][T22195]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2233.598911][T22195]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2233.598939][T22195]  ? do_raw_spin_unlock+0x122/0x240
[ 2233.598974][T22195]  filemap_fdatawrite+0x191/0x230
[ 2233.599001][T22195]  ? __pfx_filemap_fdatawrite+0x10/0x10
[ 2233.599080][T22195]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2233.599114][T22195]  ? do_raw_spin_unlock+0x122/0x240
[ 2233.599150][T22195]  f2fs_sync_dirty_inodes+0x31f/0x830
[ 2233.599209][T22195]  f2fs_write_checkpoint+0x94a/0x1de0
[ 2233.599278][T22195]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[ 2233.599375][T22195]  ? kill_f2fs_super+0x298/0x6c0
[ 2233.599420][T22195]  kill_f2fs_super+0x2c3/0x6c0
[ 2233.599467][T22195]  ? __pfx_kill_f2fs_super+0x10/0x10
[ 2233.599503][T22195]  ? radix_tree_delete_item+0x2b6/0x400
[ 2233.599548][T22195]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2233.599575][T22195]  ? shrinker_free+0x2ce/0x3e0
[ 2233.599613][T22195]  deactivate_locked_super+0xbc/0x130
[ 2233.599653][T22195]  cleanup_mnt+0x425/0x4c0
[ 2233.599689][T22195]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2233.599717][T22195]  ? lockdep_hardirqs_on+0x9c/0x150
[ 2233.599758][T22195]  task_work_run+0x1d4/0x260
[ 2233.599794][T22195]  ? __pfx_task_work_run+0x10/0x10
[ 2233.599823][T22195]  ? __x64_sys_umount+0x122/0x160
[ 2233.599861][T22195]  ? exit_to_user_mode_loop+0x40/0x110
[ 2233.599903][T22195]  exit_to_user_mode_loop+0xec/0x110
[ 2233.599941][T22195]  do_syscall_64+0x2bd/0x3b0
[ 2233.599963][T22195]  ? lockdep_hardirqs_on+0x9c/0x150
[ 2233.599999][T22195]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2233.600023][T22195]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2233.600050][T22195]  ? exc_page_fault+0x9f/0xf0
[ 2233.600090][T22195]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2233.600114][T22195] RIP: 0033:0x7f952478fc97
[ 2233.600135][T22195] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[ 2233.600157][T22195] RSP: 002b:00007fff604be838 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 2233.600182][T22195] RAX: 0000000000000000 RBX: 00007f952481089d RCX: 00007f952478fc97
[ 2233.600200][T22195] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff604be8f0
[ 2233.600216][T22195] RBP: 00007fff604be8f0 R08: 0000000000000000 R09: 0000000000000000
[ 2233.600233][T22195] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff604bf980
[ 2233.600250][T22195] R13: 00007f952481089d R14: 0000000000220fc3 R15: 00007fff604bf9c0
[ 2233.600290][T22195]  </TASK>
[ 2233.600300][T22195] F2FS-fs (loop8): Stopped filesystem due to reason: 3
[ 2233.762451][T25312] loop9: detected capacity change from 0 to 512
[ 2233.799151][T25312] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 2233.854832][T25287] loop1: detected capacity change from 0 to 8192
[ 2233.916349][T22195] CPU: 0 UID: 0 PID: 22195 Comm: syz-executor Not tainted 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(full) 
[ 2233.916381][T22195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 2233.916397][T22195] Call Trace:
[ 2233.916408][T22195]  <TASK>
[ 2233.916418][T22195]  dump_stack_lvl+0x189/0x250
[ 2233.916467][T22195]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 2233.916502][T22195]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[ 2233.916539][T22195]  ? __pfx_queue_work_on+0x10/0x10
[ 2233.916565][T22195]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2233.916592][T22195]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[ 2233.916627][T22195]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 2233.916663][T22195]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2233.916690][T22195]  ? f2fs_hw_is_readonly+0x39b/0x470
[ 2233.916730][T22195]  f2fs_handle_critical_error+0x37c/0x540
[ 2233.916771][T22195]  f2fs_write_end_io+0x495/0x810
[ 2233.916806][T22195]  ? blkg_put+0x22/0x240
[ 2233.916859][T22195]  __submit_merged_bio+0x27a/0x6a0
[ 2233.916900][T22195]  __submit_merged_write_cond+0x255/0x530
[ 2233.916942][T22195]  f2fs_write_data_pages+0x261d/0x3000
[ 2233.916977][T22195]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2233.917047][T22195]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[ 2233.917142][T22195]  ? __mod_zone_page_state+0xd7/0x140
[ 2233.917171][T22195]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2233.917198][T22195]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2233.917225][T22195]  ? __bfs+0x154/0x2a0
[ 2233.917285][T22195]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2233.917312][T22195]  ? __lock_acquire+0xab9/0xd20
[ 2233.917356][T22195]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2233.917383][T22195]  ? do_raw_spin_lock+0x121/0x290
[ 2233.917419][T22195]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2233.917452][T22195]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2233.917479][T22195]  ? do_raw_spin_unlock+0x122/0x240
[ 2233.917509][T22195]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[ 2233.917547][T22195]  do_writepages+0x32e/0x550
[ 2233.917578][T22195]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2233.917611][T22195]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2233.917638][T22195]  ? do_raw_spin_unlock+0x122/0x240
[ 2233.917674][T22195]  filemap_fdatawrite+0x191/0x230
[ 2233.917701][T22195]  ? __pfx_filemap_fdatawrite+0x10/0x10
[ 2233.917778][T22195]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2233.917812][T22195]  ? do_raw_spin_unlock+0x122/0x240
[ 2233.917847][T22195]  f2fs_sync_dirty_inodes+0x31f/0x830
[ 2233.917905][T22195]  f2fs_write_checkpoint+0x94a/0x1de0
[ 2233.917973][T22195]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[ 2233.918070][T22195]  ? kill_f2fs_super+0x298/0x6c0
[ 2233.918121][T22195]  kill_f2fs_super+0x2c3/0x6c0
[ 2233.918167][T22195]  ? __pfx_kill_f2fs_super+0x10/0x10
[ 2233.918202][T22195]  ? radix_tree_delete_item+0x2b6/0x400
[ 2233.918247][T22195]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2233.918274][T22195]  ? shrinker_free+0x2ce/0x3e0
[ 2233.918311][T22195]  deactivate_locked_super+0xbc/0x130
[ 2233.918352][T22195]  cleanup_mnt+0x425/0x4c0
[ 2233.918387][T22195]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2233.918414][T22195]  ? lockdep_hardirqs_on+0x9c/0x150
[ 2233.918455][T22195]  task_work_run+0x1d4/0x260
[ 2233.918491][T22195]  ? __pfx_task_work_run+0x10/0x10
[ 2233.918520][T22195]  ? __x64_sys_umount+0x122/0x160
[ 2233.918553][T22195]  ? exit_to_user_mode_loop+0x40/0x110
[ 2233.918594][T22195]  exit_to_user_mode_loop+0xec/0x110
[ 2233.918630][T22195]  do_syscall_64+0x2bd/0x3b0
[ 2233.918652][T22195]  ? lockdep_hardirqs_on+0x9c/0x150
[ 2233.918689][T22195]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2233.918711][T22195]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2233.918738][T22195]  ? exc_page_fault+0x9f/0xf0
[ 2233.918778][T22195]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2233.918802][T22195] RIP: 0033:0x7f952478fc97
[ 2233.918824][T22195] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[ 2233.918843][T22195] RSP: 002b:00007fff604be838 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 2233.918869][T22195] RAX: 0000000000000000 RBX: 00007f952481089d RCX: 00007f952478fc97
[ 2233.918886][T22195] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff604be8f0
[ 2233.918901][T22195] RBP: 00007fff604be8f0 R08: 0000000000000000 R09: 0000000000000000
[ 2233.918918][T22195] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff604bf980
[ 2233.918935][T22195] R13: 00007f952481089d R14: 0000000000220fc3 R15: 00007fff604bf9c0
[ 2233.918974][T22195]  </TASK>
[ 2233.918985][T22195] F2FS-fs (loop8): Stopped filesystem due to reason: 3
[ 2233.948316][T25310] loop0: detected capacity change from 0 to 1024
[ 2234.156831][T25312] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[ 2234.735154][T25310] EXT4-fs: Ignoring removed oldalloc option
[ 2234.742362][T25310] EXT4-fs: Ignoring removed orlov option
[ 2234.751941][T22195] CPU: 0 UID: 0 PID: 22195 Comm: syz-executor Not tainted 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(full) 
[ 2234.751974][T22195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 2234.751989][T22195] Call Trace:
[ 2234.751999][T22195]  <TASK>
[ 2234.752010][T22195]  dump_stack_lvl+0x189/0x250
[ 2234.752058][T22195]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 2234.752095][T22195]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[ 2234.752132][T22195]  ? __pfx_queue_work_on+0x10/0x10
[ 2234.752157][T22195]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2234.752186][T22195]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[ 2234.752221][T22195]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 2234.752257][T22195]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2234.752285][T22195]  ? f2fs_hw_is_readonly+0x39b/0x470
[ 2234.752324][T22195]  f2fs_handle_critical_error+0x37c/0x540
[ 2234.752366][T22195]  f2fs_write_end_io+0x495/0x810
[ 2234.752401][T22195]  ? blkg_put+0x22/0x240
[ 2234.752456][T22195]  __submit_merged_bio+0x27a/0x6a0
[ 2234.752496][T22195]  __submit_merged_write_cond+0x255/0x530
[ 2234.752536][T22195]  f2fs_write_data_pages+0x261d/0x3000
[ 2234.752573][T22195]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2234.752642][T22195]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[ 2234.752729][T22195]  ? __mod_zone_page_state+0xd7/0x140
[ 2234.752756][T22195]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2234.752783][T22195]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2234.752810][T22195]  ? __bfs+0x154/0x2a0
[ 2234.752875][T22195]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2234.752902][T22195]  ? __lock_acquire+0xab9/0xd20
[ 2234.752946][T22195]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2234.752973][T22195]  ? do_raw_spin_lock+0x121/0x290
[ 2234.753009][T22195]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2234.753042][T22195]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2234.753069][T22195]  ? do_raw_spin_unlock+0x122/0x240
[ 2234.753102][T22195]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[ 2234.753140][T22195]  do_writepages+0x32e/0x550
[ 2234.753171][T22195]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2234.753204][T22195]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2234.753231][T22195]  ? do_raw_spin_unlock+0x122/0x240
[ 2234.753266][T22195]  filemap_fdatawrite+0x191/0x230
[ 2234.753293][T22195]  ? __pfx_filemap_fdatawrite+0x10/0x10
[ 2234.753372][T22195]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2234.753406][T22195]  ? do_raw_spin_unlock+0x122/0x240
[ 2234.753442][T22195]  f2fs_sync_dirty_inodes+0x31f/0x830
[ 2234.753498][T22195]  f2fs_write_checkpoint+0x94a/0x1de0
[ 2234.753566][T22195]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[ 2234.753661][T22195]  ? kill_f2fs_super+0x298/0x6c0
[ 2234.753707][T22195]  kill_f2fs_super+0x2c3/0x6c0
[ 2234.753753][T22195]  ? __pfx_kill_f2fs_super+0x10/0x10
[ 2234.753790][T22195]  ? radix_tree_delete_item+0x2b6/0x400
[ 2234.753835][T22195]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2234.753869][T22195]  ? shrinker_free+0x2ce/0x3e0
[ 2234.753906][T22195]  deactivate_locked_super+0xbc/0x130
[ 2234.753947][T22195]  cleanup_mnt+0x425/0x4c0
[ 2234.753983][T22195]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2234.754010][T22195]  ? lockdep_hardirqs_on+0x9c/0x150
[ 2234.754051][T22195]  task_work_run+0x1d4/0x260
[ 2234.754082][T22195]  ? __pfx_task_work_run+0x10/0x10
[ 2234.754108][T22195]  ? __x64_sys_umount+0x122/0x160
[ 2234.754140][T22195]  ? exit_to_user_mode_loop+0x40/0x110
[ 2234.754182][T22195]  exit_to_user_mode_loop+0xec/0x110
[ 2234.754218][T22195]  do_syscall_64+0x2bd/0x3b0
[ 2234.754239][T22195]  ? lockdep_hardirqs_on+0x9c/0x150
[ 2234.754275][T22195]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2234.754299][T22195]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2234.754326][T22195]  ? exc_page_fault+0x9f/0xf0
[ 2234.754365][T22195]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2234.754389][T22195] RIP: 0033:0x7f952478fc97
[ 2234.754411][T22195] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[ 2234.754432][T22195] RSP: 002b:00007fff604be838 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 2234.754457][T22195] RAX: 0000000000000000 RBX: 00007f952481089d RCX: 00007f952478fc97
[ 2234.754474][T22195] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff604be8f0
[ 2234.754491][T22195] RBP: 00007fff604be8f0 R08: 0000000000000000 R09: 0000000000000000
[ 2234.754507][T22195] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff604bf980
[ 2234.754524][T22195] R13: 00007f952481089d R14: 0000000000220fc3 R15: 00007fff604bf9c0
[ 2234.754564][T22195]  </TASK>
[ 2235.449144][T25310] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled
[ 2235.568002][T22195] F2FS-fs (loop8): Stopped filesystem due to reason: 3
[ 2235.651351][T25310] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 2235.767489][T25312] EXT4-fs (loop9): 1 truncate cleaned up
[ 2235.780872][T25312] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 2237.733541][T21859] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2237.886232][T21948] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 2238.387679][T25336] netlink: 'syz.0.4747': attribute type 1 has an invalid length.
[ 2239.448318][T25352] loop1: detected capacity change from 0 to 2048
[ 2239.523686][T25352] NILFS (loop1): invalid segment: Inconsistency found
[ 2239.927218][T25352] NILFS (loop1): trying rollback from an earlier position
[ 2240.531771][T25346] loop2: detected capacity change from 0 to 8192
[ 2240.592633][T25352] NILFS (loop1): recovery complete
[ 2240.688621][T25346] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[ 2240.860086][T25363] 
[ 2240.862907][T25363] =====================================================
[ 2240.871200][T25363] WARNING: SOFTIRQ-safe -> SOFTIRQ-unsafe lock order detected
[ 2240.880124][T25363] 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 Not tainted
[ 2240.888202][T25363] -----------------------------------------------------
[ 2240.896483][T25363] syz.9.4756/25363 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire:
[ 2240.905726][T25363] ffff888061530948 (&new->fa_lock){....}-{3:3}, at: kill_fasync+0x199/0x4d0
[ 2240.916369][T25363] 
[ 2240.916369][T25363] and this task is already holding:
[ 2240.925179][T25363] ffff888026b6c028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0xb9/0xbd0
[ 2240.936876][T25363] which would create a new lock dependency:
[ 2240.943928][T25363]  (&client->buffer_lock){....}-{3:3} -> (&new->fa_lock){....}-{3:3}
[ 2240.953660][T25363] 
[ 2240.953660][T25363] but this new dependency connects a SOFTIRQ-irq-safe lock:
[ 2240.964973][T25363]  (&dev->event_lock#2){..-.}-{3:3}
[ 2240.965019][T25363] 
[ 2240.965019][T25363] ... which became SOFTIRQ-irq-safe at:
[ 2240.980444][T25363]   lock_acquire+0x120/0x360
[ 2240.985945][T25363]   _raw_spin_lock_irqsave+0xa7/0xf0
[ 2240.992274][T25363]   input_event+0x7a/0xc0
[ 2240.997447][T25363]   xpad360_process_packet+0x1fe/0xb30
[ 2241.003994][T25363]   xpad_irq_in+0x1638/0x26e0
[ 2241.009689][T25363]   __usb_hcd_giveback_urb+0x41a/0x690
[ 2241.016251][T25363]   dummy_timer+0x862/0x4550
[ 2241.021764][T25363]   __hrtimer_run_queues+0x52c/0xc60
[ 2241.028102][T25363]   hrtimer_run_softirq+0x187/0x2b0
[ 2241.034359][T25363]   handle_softirqs+0x286/0x870
[ 2241.040169][T25363]   __irq_exit_rcu+0xca/0x1f0
[ 2241.045769][T25363]   irq_exit_rcu+0x9/0x30
[ 2241.050957][T25363]   sysvec_apic_timer_interrupt+0xa6/0xc0
[ 2241.057821][T25363]   asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 2241.065097][T25363]   __rcu_read_lock+0x32/0x60
[ 2241.070699][T25363]   unwind_next_frame+0x9e/0x2390
[ 2241.076720][T25363]   arch_stack_walk+0x11c/0x150
[ 2241.082516][T25363]   stack_trace_save+0x9c/0xe0
[ 2241.088232][T25363]   save_stack+0xf5/0x1f0
[ 2241.093411][T25363]   __reset_page_owner+0x71/0x1f0
[ 2241.099424][T25363]   free_unref_folios+0xc66/0x14d0
[ 2241.105546][T25363]   folios_put_refs+0x559/0x640
[ 2241.111381][T25363]   shmem_undo_range+0x49e/0x14b0
[ 2241.117420][T25363]   shmem_evict_inode+0x272/0xa70
[ 2241.123442][T25363]   evict+0x504/0x9c0
[ 2241.128222][T25363]   __dentry_kill+0x209/0x660
[ 2241.133837][T25363]   dput+0x19f/0x2b0
[ 2241.138524][T25363]   __fput+0x68e/0xa70
[ 2241.143408][T25363]   task_work_run+0x1d4/0x260
[ 2241.149016][T25363]   do_exit+0x6ad/0x22e0
[ 2241.154096][T25363]   do_group_exit+0x21c/0x2d0
[ 2241.159693][T25363]   get_signal+0x1286/0x1340
[ 2241.165198][T25363]   arch_do_signal_or_restart+0x9a/0x750
[ 2241.171966][T25363]   exit_to_user_mode_loop+0x75/0x110
[ 2241.178428][T25363]   do_syscall_64+0x2bd/0x3b0
[ 2241.184039][T25363]   entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2241.191206][T25363] 
[ 2241.191206][T25363] to a SOFTIRQ-irq-unsafe lock:
[ 2241.199613][T25363]  (tasklist_lock){.+.+}-{3:3}
[ 2241.199652][T25363] 
[ 2241.199652][T25363] ... which became SOFTIRQ-irq-unsafe at:
[ 2241.214775][T25363] ...
[ 2241.214789][T25363]   lock_acquire+0x120/0x360
[ 2241.223361][T25363]   _raw_read_lock+0x36/0x50
[ 2241.228877][T25363]   __do_wait+0xde/0x740
[ 2241.233967][T25363]   do_wait+0x1f8/0x520
[ 2241.238950][T25363]   kernel_wait+0xab/0x170
[ 2241.244242][T25363]   call_usermodehelper_exec_work+0xbe/0x230
[ 2241.251409][T25363]   process_scheduled_works+0xae1/0x17b0
[ 2241.258157][T25363]   worker_thread+0x8a0/0xda0
[ 2241.263747][T25363]   kthread+0x711/0x8a0
[ 2241.268716][T25363]   ret_from_fork+0x3fc/0x770
[ 2241.274318][T25363]   ret_from_fork_asm+0x1a/0x30
[ 2241.280123][T25363] 
[ 2241.280123][T25363] other info that might help us debug this:
[ 2241.280123][T25363] 
[ 2241.292385][T25363] Chain exists of:
[ 2241.292385][T25363]   &dev->event_lock#2 --> &client->buffer_lock --> tasklist_lock
[ 2241.292385][T25363] 
[ 2241.308685][T25363]  Possible interrupt unsafe locking scenario:
[ 2241.308685][T25363] 
[ 2241.318658][T25363]        CPU0                    CPU1
[ 2241.325084][T25363]        ----                    ----
[ 2241.331506][T25363]   lock(tasklist_lock);
[ 2241.336592][T25363]                                local_irq_disable();
[ 2241.344689][T25363]                                lock(&dev->event_lock#2);
[ 2241.353323][T25363]                                lock(&client->buffer_lock);
[ 2241.362168][T25363]   <Interrupt>
[ 2241.366300][T25363]     lock(&dev->event_lock#2);
[ 2241.372127][T25363] 
[ 2241.372127][T25363]  *** DEADLOCK ***
[ 2241.372127][T25363] 
[ 2241.381884][T25363] 7 locks held by syz.9.4756/25363:
[ 2241.388107][T25363]  #0: ffff88802989d118 (&evdev->mutex){+.+.}-{4:4}, at: evdev_write+0x1a1/0x480
[ 2241.399100][T25363]  #1: ffff888029899230 (&dev->event_lock#2){..-.}-{3:3}, at: input_inject_event+0xab/0x320
[ 2241.411235][T25363]  #2: ffffffff8e13f140 (rcu_read_lock){....}-{1:3}, at: input_inject_event+0xbc/0x320
[ 2241.422858][T25363]  #3: ffffffff8e13f140 (rcu_read_lock){....}-{1:3}, at: input_pass_values+0x8d/0x890
[ 2241.434366][T25363]  #4: ffffffff8e13f140 (rcu_read_lock){....}-{1:3}, at: evdev_events+0x79/0x340
[ 2241.445354][T25363]  #5: ffff888026b6c028 (&client->buffer_lock){....}-{3:3}, at: evdev_pass_values+0xb9/0xbd0
[ 2241.457797][T25363]  #6: ffffffff8e13f140 (rcu_read_lock){....}-{1:3}, at: kill_fasync+0x53/0x4d0
[ 2241.468679][T25363] 
[ 2241.468679][T25363] the dependencies between SOFTIRQ-irq-safe lock and the holding lock:
[ 2241.481147][T25363]  -> (&dev->event_lock#2){..-.}-{3:3} {
[ 2241.487935][T25363]     IN-SOFTIRQ-W at:
[ 2241.492803][T25363]                       lock_acquire+0x120/0x360
[ 2241.500400][T25363]                       _raw_spin_lock_irqsave+0xa7/0xf0
[ 2241.508827][T25363]                       input_event+0x7a/0xc0
[ 2241.516199][T25363]                       xpad360_process_packet+0x1fe/0xb30
[ 2241.524817][T25363]                       xpad_irq_in+0x1638/0x26e0
[ 2241.532496][T25363]                       __usb_hcd_giveback_urb+0x41a/0x690
[ 2241.541130][T25363]                       dummy_timer+0x862/0x4550
[ 2241.548713][T25363]                       __hrtimer_run_queues+0x52c/0xc60
[ 2241.557141][T25363]                       hrtimer_run_softirq+0x187/0x2b0
[ 2241.565454][T25363]                       handle_softirqs+0x286/0x870
[ 2241.573379][T25363]                       __irq_exit_rcu+0xca/0x1f0
[ 2241.581087][T25363]                       irq_exit_rcu+0x9/0x30
[ 2241.588368][T25363]                       sysvec_apic_timer_interrupt+0xa6/0xc0
[ 2241.597438][T25363]                       asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 2241.606788][T25363]                       __rcu_read_lock+0x32/0x60
[ 2241.614474][T25363]                       unwind_next_frame+0x9e/0x2390
[ 2241.622578][T25363]                       arch_stack_walk+0x11c/0x150
[ 2241.630462][T25363]                       stack_trace_save+0x9c/0xe0
[ 2241.638248][T25363]                       save_stack+0xf5/0x1f0
[ 2241.645624][T25363]                       __reset_page_owner+0x71/0x1f0
[ 2241.653736][T25363]                       free_unref_folios+0xc66/0x14d0
[ 2241.661938][T25363]                       folios_put_refs+0x559/0x640
[ 2241.669836][T25363]                       shmem_undo_range+0x49e/0x14b0
[ 2241.677951][T25363]                       shmem_evict_inode+0x272/0xa70
[ 2241.686061][T25363]                       evict+0x504/0x9c0
[ 2241.692927][T25363]                       __dentry_kill+0x209/0x660
[ 2241.700614][T25363]                       dput+0x19f/0x2b0
[ 2241.707386][T25363]                       __fput+0x68e/0xa70
[ 2241.714351][T25363]                       task_work_run+0x1d4/0x260
[ 2241.722034][T25363]                       do_exit+0x6ad/0x22e0
[ 2241.729192][T25363]                       do_group_exit+0x21c/0x2d0
[ 2241.736876][T25363]                       get_signal+0x1286/0x1340
[ 2241.744458][T25363]                       arch_do_signal_or_restart+0x9a/0x750
[ 2241.753300][T25363]                       exit_to_user_mode_loop+0x75/0x110
[ 2241.761843][T25363]                       do_syscall_64+0x2bd/0x3b0
[ 2241.769528][T25363]                       entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2241.778771][T25363]     INITIAL USE at:
[ 2241.783529][T25363]                      lock_acquire+0x120/0x360
[ 2241.791006][T25363]                      _raw_spin_lock_irqsave+0xa7/0xf0
[ 2241.799320][T25363]                      input_inject_event+0xab/0x320
[ 2241.807314][T25363]                      kbd_led_trigger_activate+0xbc/0x100
[ 2241.815936][T25363]                      led_trigger_set+0x52d/0x950
[ 2241.823734][T25363]                      led_trigger_set_default+0x215/0x250
[ 2241.832367][T25363]                      led_classdev_register_ext+0x73d/0x930
[ 2241.841205][T25363]                      input_leds_connect+0x517/0x790
[ 2241.849310][T25363]                      input_register_device+0xcee/0x10b0
[ 2241.857833][T25363]                      atkbd_connect+0x70e/0x9c0
[ 2241.865424][T25363]                      serio_driver_probe+0x82/0xa0
[ 2241.873343][T25363]                      really_probe+0x26d/0x9a0
[ 2241.880834][T25363]                      __driver_probe_device+0x18c/0x2f0
[ 2241.889258][T25363]                      driver_probe_device+0x4f/0x430
[ 2241.897369][T25363]                      __driver_attach+0x452/0x700
[ 2241.905167][T25363]                      bus_for_each_dev+0x233/0x2b0
[ 2241.913056][T25363]                      serio_handle_event+0x1a2/0x860
[ 2241.921165][T25363]                      process_scheduled_works+0xae1/0x17b0
[ 2241.929923][T25363]                      worker_thread+0x8a0/0xda0
[ 2241.937500][T25363]                      kthread+0x711/0x8a0
[ 2241.944491][T25363]                      ret_from_fork+0x3fc/0x770
[ 2241.952084][T25363]                      ret_from_fork_asm+0x1a/0x30
[ 2241.959890][T25363]   }
[ 2241.962971][T25363]   ... key      at: [<ffffffff99df7260>] input_allocate_device.__key.5+0x0/0x20
[ 2241.973902][T25363] -> (&client->buffer_lock){....}-{3:3} {
[ 2241.980786][T25363]    INITIAL USE at:
[ 2241.985473][T25363]                    lock_acquire+0x120/0x360
[ 2241.992750][T25363]                    _raw_spin_lock_irq+0xa2/0xf0
[ 2242.000444][T25363]                    evdev_read+0x370/0xca0
[ 2242.007508][T25363]                    vfs_read+0x200/0x980
[ 2242.014359][T25363]                    ksys_read+0x145/0x250
[ 2242.021317][T25363]                    do_syscall_64+0xfa/0x3b0
[ 2242.028583][T25363]                    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2242.037521][T25363]  }
[ 2242.040499][T25363]  ... key      at: [<ffffffff99df7500>] evdev_open.__key.25+0x0/0x20
[ 2242.050275][T25363]  ... acquired at:
[ 2242.054819][T25363]    lock_acquire+0x120/0x360
[ 2242.060428][T25363]    _raw_spin_lock+0x2e/0x40
[ 2242.066037][T25363]    evdev_pass_values+0xb9/0xbd0
[ 2242.072067][T25363]    evdev_events+0x1aa/0x340
[ 2242.077678][T25363]    input_pass_values+0x1c2/0x890
[ 2242.083800][T25363]    input_event_dispose+0x330/0x6b0
[ 2242.090122][T25363]    input_inject_event+0x1fe/0x320
[ 2242.096341][T25363]    evdev_write+0x2fc/0x480
[ 2242.101837][T25363]    vfs_write+0x27e/0xa90
[ 2242.107120][T25363]    ksys_write+0x145/0x250
[ 2242.112536][T25363]    do_syscall_64+0xfa/0x3b0
[ 2242.118129][T25363]    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2242.125393][T25363] 
[ 2242.128191][T25363] 
[ 2242.128191][T25363] the dependencies between the lock to be acquired
[ 2242.128204][T25363]  and SOFTIRQ-irq-unsafe lock:
[ 2242.144378][T25363]   -> (tasklist_lock){.+.+}-{3:3} {
[ 2242.150729][T25363]      HARDIRQ-ON-R at:
[ 2242.155696][T25363]                         lock_acquire+0x120/0x360
[ 2242.163497][T25363]                         _raw_read_lock+0x36/0x50
[ 2242.171301][T25363]                         __do_wait+0xde/0x740
[ 2242.178725][T25363]                         do_wait+0x1f8/0x520
[ 2242.185995][T25363]                         kernel_wait+0xab/0x170
[ 2242.193577][T25363]                         call_usermodehelper_exec_work+0xbe/0x230
[ 2242.203061][T25363]                         process_scheduled_works+0xae1/0x17b0
[ 2242.212129][T25363]                         worker_thread+0x8a0/0xda0
[ 2242.220019][T25363]                         kthread+0x711/0x8a0
[ 2242.227286][T25363]                         ret_from_fork+0x3fc/0x770
[ 2242.235185][T25363]                         ret_from_fork_asm+0x1a/0x30
[ 2242.243284][T25363]      SOFTIRQ-ON-R at:
[ 2242.248256][T25363]                         lock_acquire+0x120/0x360
[ 2242.256049][T25363]                         _raw_read_lock+0x36/0x50
[ 2242.263845][T25363]                         __do_wait+0xde/0x740
[ 2242.271239][T25363]                         do_wait+0x1f8/0x520
[ 2242.278506][T25363]                         kernel_wait+0xab/0x170
[ 2242.286085][T25363]                         call_usermodehelper_exec_work+0xbe/0x230
[ 2242.295549][T25363]                         process_scheduled_works+0xae1/0x17b0
[ 2242.304590][T25363]                         worker_thread+0x8a0/0xda0
[ 2242.312471][T25363]                         kthread+0x711/0x8a0
[ 2242.319735][T25363]                         ret_from_fork+0x3fc/0x770
[ 2242.327629][T25363]                         ret_from_fork_asm+0x1a/0x30
[ 2242.335722][T25363]      INITIAL USE at:
[ 2242.340580][T25363]                        lock_acquire+0x120/0x360
[ 2242.348290][T25363]                        _raw_write_lock_irq+0xa2/0xf0
[ 2242.356498][T25363]                        copy_process+0x224f/0x3c00
[ 2242.364386][T25363]                        kernel_clone+0x21e/0x870
[ 2242.372063][T25363]                        user_mode_thread+0xdd/0x140
[ 2242.380058][T25363]                        rest_init+0x23/0x300
[ 2242.387329][T25363]                        start_kernel+0x47d/0x500
[ 2242.395012][T25363]                        x86_64_start_reservations+0x24/0x30
[ 2242.403836][T25363]                        x86_64_start_kernel+0x143/0x1c0
[ 2242.412245][T25363]                        common_startup_64+0x13e/0x147
[ 2242.420451][T25363]      INITIAL READ USE at:
[ 2242.425839][T25363]                             lock_acquire+0x120/0x360
[ 2242.434053][T25363]                             _raw_read_lock+0x36/0x50
[ 2242.442265][T25363]                             __do_wait+0xde/0x740
[ 2242.450156][T25363]                             do_wait+0x1f8/0x520
[ 2242.457844][T25363]                             kernel_wait+0xab/0x170
[ 2242.465859][T25363]                             call_usermodehelper_exec_work+0xbe/0x230
[ 2242.475773][T25363]                             process_scheduled_works+0xae1/0x17b0
[ 2242.485281][T25363]                             worker_thread+0x8a0/0xda0
[ 2242.493594][T25363]                             kthread+0x711/0x8a0
[ 2242.501285][T25363]                             ret_from_fork+0x3fc/0x770
[ 2242.509636][T25363]                             ret_from_fork_asm+0x1a/0x30
[ 2242.518159][T25363]    }
[ 2242.521366][T25363]    ... key      at: [<ffffffff8de0c058>] tasklist_lock+0x18/0x40
[ 2242.530839][T25363]    ... acquired at:
[ 2242.535591][T25363]    lock_acquire+0x120/0x360
[ 2242.541197][T25363]    _raw_read_lock+0x36/0x50
[ 2242.546800][T25363]    send_sigio+0x101/0x370
[ 2242.552198][T25363]    kill_fasync+0x24d/0x4d0
[ 2242.557698][T25363]    lease_break_callback+0x26/0x30
[ 2242.563926][T25363]    __break_lease+0x6a5/0x1620
[ 2242.569755][T25363]    vfs_truncate+0x428/0x520
[ 2242.575358][T25363]    do_sys_truncate+0xdb/0x190
[ 2242.581165][T25363]    __x64_sys_truncate+0x5b/0x70
[ 2242.587182][T25363]    do_syscall_64+0xfa/0x3b0
[ 2242.592776][T25363]    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2242.600051][T25363] 
[ 2242.602825][T25363]  -> (&f_owner->lock){....}-{3:3} {
[ 2242.609208][T25363]     INITIAL USE at:
[ 2242.613970][T25363]                      lock_acquire+0x120/0x360
[ 2242.621458][T25363]                      _raw_write_lock_irq+0xa2/0xf0
[ 2242.629471][T25363]                      __f_setown+0x67/0x370
[ 2242.636641][T25363]                      generic_setlease+0xd60/0x1240
[ 2242.644645][T25363]                      fcntl_setlease+0x3a2/0x4c0
[ 2242.652336][T25363]                      do_fcntl+0x6a9/0x1910
[ 2242.659509][T25363]                      __se_sys_fcntl+0xc8/0x150
[ 2242.667103][T25363]                      do_syscall_64+0xfa/0x3b0
[ 2242.674582][T25363]                      entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2242.683840][T25363]     INITIAL READ USE at:
[ 2242.689172][T25363]                           lock_acquire+0x120/0x360
[ 2242.697180][T25363]                           _raw_read_lock_irq+0xaa/0xf0
[ 2242.705607][T25363]                           f_getown+0x54/0x2a0
[ 2242.713097][T25363]                           sock_ioctl+0x536/0x790
[ 2242.720918][T25363]                           __se_sys_ioctl+0xfc/0x170
[ 2242.729039][T25363]                           do_syscall_64+0xfa/0x3b0
[ 2242.737038][T25363]                           entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2242.746703][T25363]   }
[ 2242.749781][T25363]   ... key      at: [<ffffffff99ae8400>] file_f_owner_allocate.__key+0x0/0x20
[ 2242.760512][T25363]   ... acquired at:
[ 2242.765168][T25363]    lock_acquire+0x120/0x360
[ 2242.770787][T25363]    _raw_read_lock_irqsave+0xaf/0x100
[ 2242.777362][T25363]    send_sigio+0x38/0x370
[ 2242.782662][T25363]    kill_fasync+0x24d/0x4d0
[ 2242.788182][T25363]    lease_break_callback+0x26/0x30
[ 2242.794419][T25363]    __break_lease+0x6a5/0x1620
[ 2242.800237][T25363]    vfs_truncate+0x428/0x520
[ 2242.805847][T25363]    do_sys_truncate+0xdb/0x190
[ 2242.811654][T25363]    __x64_sys_truncate+0x5b/0x70
[ 2242.817677][T25363]    do_syscall_64+0xfa/0x3b0
[ 2242.823280][T25363]    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2242.830545][T25363] 
[ 2242.833312][T25363] -> (&new->fa_lock){....}-{3:3} {
[ 2242.839467][T25363]    INITIAL USE at:
[ 2242.844121][T25363]                    lock_acquire+0x120/0x360
[ 2242.851395][T25363]                    _raw_write_lock_irq+0xa2/0xf0
[ 2242.859188][T25363]                    fasync_remove_entry+0xf1/0x1c0
[ 2242.867095][T25363]                    sock_fasync+0x85/0xf0
[ 2242.874065][T25363]                    __fput+0x8a2/0xa70
[ 2242.880714][T25363]                    task_work_run+0x1d4/0x260
[ 2242.888092][T25363]                    exit_to_user_mode_loop+0xec/0x110
[ 2242.896305][T25363]                    do_syscall_64+0x2bd/0x3b0
[ 2242.903674][T25363]                    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2242.912605][T25363]    INITIAL READ USE at:
[ 2242.917784][T25363]                         lock_acquire+0x120/0x360
[ 2242.925684][T25363]                         _raw_read_lock_irqsave+0xaf/0x100
[ 2242.934417][T25363]                         kill_fasync+0x199/0x4d0
[ 2242.942109][T25363]                         sock_wake_async+0x137/0x160
[ 2242.950215][T25363]                         sk_wake_async+0x184/0x280
[ 2242.958127][T25363]                         mptcp_destroy_common+0x152/0x320
[ 2242.966757][T25363]                         mptcp_disconnect+0x23d/0x680
[ 2242.974977][T25363]                         inet_shutdown+0x1c4/0x390
[ 2242.982875][T25363]                         __x64_sys_shutdown+0x13f/0x1a0
[ 2242.991296][T25363]                         do_syscall_64+0xfa/0x3b0
[ 2242.999087][T25363]                         entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2243.008549][T25363]  }
[ 2243.011527][T25363]  ... key      at: [<ffffffff99ae8420>] fasync_insert_entry.__key+0x0/0x20
[ 2243.021946][T25363]  ... acquired at:
[ 2243.026488][T25363]    lock_acquire+0x120/0x360
[ 2243.032092][T25363]    _raw_read_lock_irqsave+0xaf/0x100
[ 2243.038634][T25363]    kill_fasync+0x199/0x4d0
[ 2243.044141][T25363]    evdev_pass_values+0x627/0xbd0
[ 2243.050263][T25363]    evdev_events+0x1e6/0x340
[ 2243.055863][T25363]    input_pass_values+0x288/0x890
[ 2243.061980][T25363]    input_event_dispose+0x330/0x6b0
[ 2243.068301][T25363]    input_inject_event+0x1fe/0x320
[ 2243.074544][T25363]    evdev_write+0x2fc/0x480
[ 2243.080043][T25363]    vfs_write+0x27e/0xa90
[ 2243.085327][T25363]    ksys_write+0x145/0x250
[ 2243.090709][T25363]    do_syscall_64+0xfa/0x3b0
[ 2243.096300][T25363]    entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2243.103583][T25363] 
[ 2243.106366][T25363] 
[ 2243.106366][T25363] stack backtrace:
[ 2243.113414][T25363] CPU: 1 UID: 0 PID: 25363 Comm: syz.9.4756 Not tainted 6.15.0-syzkaller-11173-g546b1c9e93c2 #0 PREEMPT(full) 
[ 2243.113443][T25363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025
[ 2243.113457][T25363] Call Trace:
[ 2243.113467][T25363]  <TASK>
[ 2243.113478][T25363]  dump_stack_lvl+0x189/0x250
[ 2243.113518][T25363]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 2243.113553][T25363]  ? __pfx__printk+0x10/0x10
[ 2243.113578][T25363]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2243.113609][T25363]  validate_chain+0x1f05/0x2140
[ 2243.113645][T25363]  __lock_acquire+0xab9/0xd20
[ 2243.113681][T25363]  ? kill_fasync+0x199/0x4d0
[ 2243.113713][T25363]  lock_acquire+0x120/0x360
[ 2243.113744][T25363]  ? kill_fasync+0x199/0x4d0
[ 2243.113785][T25363]  _raw_read_lock_irqsave+0xaf/0x100
[ 2243.113818][T25363]  ? kill_fasync+0x199/0x4d0
[ 2243.113857][T25363]  ? __pfx__raw_read_lock_irqsave+0x10/0x10
[ 2243.113888][T25363]  ? do_raw_spin_lock+0x121/0x290
[ 2243.113919][T25363]  kill_fasync+0x199/0x4d0
[ 2243.113951][T25363]  ? kill_fasync+0x53/0x4d0
[ 2243.113985][T25363]  evdev_pass_values+0x627/0xbd0
[ 2243.114017][T25363]  ? evdev_pass_values+0x5b1/0xbd0
[ 2243.114050][T25363]  evdev_events+0x1e6/0x340
[ 2243.114076][T25363]  ? evdev_events+0x79/0x340
[ 2243.114103][T25363]  ? input_pass_values+0x8d/0x890
[ 2243.114129][T25363]  input_pass_values+0x288/0x890
[ 2243.114155][T25363]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2243.114184][T25363]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2243.114210][T25363]  ? input_handle_event+0x70c/0xf30
[ 2243.114232][T25363]  input_event_dispose+0x330/0x6b0
[ 2243.114255][T25363]  input_inject_event+0x1fe/0x320
[ 2243.114276][T25363]  ? input_inject_event+0xbc/0x320
[ 2243.114299][T25363]  evdev_write+0x2fc/0x480
[ 2243.114326][T25363]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2243.114352][T25363]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2243.114381][T25363]  ? __pfx_evdev_write+0x10/0x10
[ 2243.114409][T25363]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2243.114435][T25363]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2243.114460][T25363]  ? security_file_permission+0x75/0x290
[ 2243.114492][T25363]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2243.114518][T25363]  ? rw_verify_area+0x258/0x650
[ 2243.114537][T25363]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2243.114563][T25363]  ? __pfx_evdev_write+0x10/0x10
[ 2243.114591][T25363]  vfs_write+0x27e/0xa90
[ 2243.114617][T25363]  ? __pfx_vfs_write+0x10/0x10
[ 2243.114637][T25363]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2243.114664][T25363]  ? __fget_files+0x2a/0x420
[ 2243.114693][T25363]  ? __fget_files+0x2a/0x420
[ 2243.114718][T25363]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2243.114743][T25363]  ? __fget_files+0x3a0/0x420
[ 2243.114768][T25363]  ? __fget_files+0x2a/0x420
[ 2243.114796][T25363]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2243.114825][T25363]  ksys_write+0x145/0x250
[ 2243.114856][T25363]  ? __pfx_ksys_write+0x10/0x10
[ 2243.114876][T25363]  ? rcu_is_watching+0x15/0xb0
[ 2243.114900][T25363]  ? do_syscall_64+0xbe/0x3b0
[ 2243.114923][T25363]  do_syscall_64+0xfa/0x3b0
[ 2243.114942][T25363]  ? lockdep_hardirqs_on+0x9c/0x150
[ 2243.114976][T25363]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2243.114997][T25363]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 2243.115022][T25363]  ? exc_page_fault+0x9f/0xf0
[ 2243.115056][T25363]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2243.115078][T25363] RIP: 0033:0x7f55f518e969
[ 2243.115098][T25363] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 2243.115117][T25363] RSP: 002b:00007f55f2ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 2243.115140][T25363] RAX: ffffffffffffffda RBX: 00007f55f53b5fa0 RCX: 00007f55f518e969
[ 2243.115157][T25363] RDX: 0000000000002250 RSI: 0000200000000040 RDI: 0000000000000003
[ 2243.115171][T25363] RBP: 00007f55f5210ab1 R08: 0000000000000000 R09: 0000000000000000
[ 2243.115186][T25363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 2243.115200][T25363] R13: 0000000000000000 R14: 00007f55f53b5fa0 R15: 00007ffe40df4228
[ 2243.115225][T25363]  </TASK>
[ 2243.768230][T25363] loop9: detected capacity change from 0 to 256
[ 2243.848016][T25363] exFAT-fs (loop9): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x89cb6648, utbl_chksum : 0xe619d30d)