last executing test programs:

8.740345767s ago: executing program 2 (id=2828):
r0 = socket(0xa, 0x5, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000000)=0xd, 0x4)
sendto$l2tp6(r0, &(0x7f0000000100)="887a61", 0x3, 0x40004, &(0x7f00000001c0)={0xa, 0x0, 0x900, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x1, 0x4}, 0x20)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000022"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x100, 0x0)
ioctl$FS_IOC_GETFSMAP(r2, 0xc0105872, &(0x7f0000000000)=ANY=[@ANYRESOCT=r2])
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000a40)={<r3=>0x0, @in6={{0xa, 0x4e20, 0x7f, @private2={0xfc, 0x2, '\x00', 0x1}}}, [0x234c2256, 0x43e, 0x8, 0x3, 0xd, 0x10c32437, 0x5, 0x9518, 0x9, 0x0, 0xddb, 0x4, 0x6, 0x40]}, &(0x7f0000000b40)=0x100)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000bc0)={r3, 0x3c, &(0x7f0000000b80)=[@in6={0xa, 0x4e21, 0x7, @remote, 0x8}, @in={0x2, 0x4e23, @loopback}, @in={0x2, 0x4e23, @remote}]}, &(0x7f0000000c00)=0x10)
r4 = openat$sysfs(0xffffff9c, &(0x7f0000000240)='/sys/power/image_size', 0x40042, 0x252)
pwritev(r4, &(0x7f0000000000)=[{&(0x7f0000000080)="3926264831bc74a5bbe8fdbffd30e3bf17beea38b29952df9d5f0e4f1d97c306a53e4200e31c6d9b04000000000000003546e734c852cf4d130712bcc1aaa9b210138c06e296b0f3947e7eb14bff0f0000dc00"/110, 0x1}, {0x0, 0x15}, {&(0x7f0000000300)="dc18a9018c56003bb9b0190e7d58bef2412a30b75cfe227d0514ecd355d424cc42171d4894aeba52105c8535042a57266d461c04c2cf6684672940f53025fa9226c9c233881f51d40844e9ba03a6c04433578330817c806d4af03f3497936d1a5ca38d520c78c9cccf097dae39683e7299d8873463eb5fb5f46ceb314b52d3f35ecc11640f1198cfaa926e3613f2b6a60b52474ddacae725245ffb9e2541"}, {&(0x7f0000000100)="8aa6839573e93798afb1d70dafda1d782e9d12dcbe4961260000000000000ac3088cc27c0a5c3c37f41b90adebf752f89dddca807e2435d66d5eb0ae4a8792d8af468e000000000000"}], 0x2, 0xffffff01, 0x2)
syz_usb_control_io$uac1(r1, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect(0x2, 0x37b, &(0x7f0000000140)={{0x12, 0x1, 0x310, 0xe9, 0x83, 0x8e, 0x8, 0xe41, 0x4141, 0xbfd0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x369, 0x2, 0x81, 0xa, 0x50, 0xfe, [{{0x9, 0x4, 0x46, 0x1, 0xc, 0x88, 0x43, 0x1d, 0x7, [@generic={0x86, 0x11, "1ac9646615036048d936594b9ac022d43c52a0139414fba6e9fccf590d01eef623d6318767f00c03dce1d8181d03324806df8948b3ca7ebb6c494a20ca717682a9178ea30ee55f595f8948203d947e90e36489b43b762047183dd2d5b8e461db7e1af057b8b1d40979c616828d9e92298d52acec29e84e39dcbdd4f63188e32734d53e60"}, @cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x5}, {0xd, 0x24, 0xf, 0x1, 0x1, 0x3, 0x91e9, 0xf8}, [@mdlm={0x15}]}], [{{0x9, 0x5, 0xf, 0x10, 0x200, 0x5, 0x7f, 0x8, [@generic={0x6a, 0x7, "1b2050edbff5b2de1875d4ae129bfc986dc4ab27d18d4264099a31fea941d0c957d28eab9e5837b274f1d400c2aa5f20cbaab5007513ccb1dba568ab9d20fd695ca63f011f005832e53c4c624957166e01272ffc11214de89552b31b0371b2c7a9ea54971f667b2d"}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0x40}]}}, {{0x9, 0x5, 0xf, 0x0, 0x200, 0x3, 0x2, 0x4f}}, {{0x9, 0x5, 0x5, 0x2, 0x3ff, 0x40, 0x36, 0x72, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0xb68}, @uac_iso={0x7, 0x25, 0x1, 0x2, 0x7, 0x9}]}}, {{0x9, 0x5, 0x9, 0x3, 0x400, 0x2, 0x0, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x2, 0x53}, @generic={0x85, 0xf, "690306fa68ba23e7036f53304270820ddce9ae51642dcca330a1f31083de7e1b0a2ad2ae8d4df4e0104e43981b9da070065668e6950afd98a358d0cad8d4567e64083049dde0875cc39f99de27bbb8548fb31e8574f07b2465dae9e8a3525ac50f9be14a844f30e6182c51e4fe7c292dff67c4228c0711020701cbd35d708ef289d519"}]}}, {{0x9, 0x5, 0x0, 0x10, 0x8, 0x40, 0xb7, 0x60}}, {{0x9, 0x5, 0x7, 0x0, 0x3ff, 0xe2, 0xff, 0x4}}, {{0x9, 0x5, 0xe, 0x0, 0x400, 0xd, 0x3, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x81, 0x5, 0x7}, @uac_iso={0x7, 0x25, 0x1, 0x182, 0x2, 0x1000}]}}, {{0x9, 0x5, 0x2, 0x2, 0x20, 0x2, 0x6, 0x7}}, {{0x9, 0x5, 0xb, 0x8, 0x20, 0x0, 0x4, 0x9, [@generic={0x68, 0x9, "d0e188ef479f2fef1fcef10daeb4fe77a8774a429237fb489e8ebf627256ad4f7a2b5251ffebe5b54dd928e8f6a9b78d28c885371938136107d3ac6622967e137003055687f5104438c03d7efb6b69434d4cf26fe9066da2df8b5785a3ddf37adfc4897ac7dd"}, @uac_iso={0x7, 0x25, 0x1, 0x1, 0x16, 0x5}]}}, {{0x9, 0x5, 0xd, 0x10, 0x3ff, 0x7, 0xc4, 0xff, [@generic={0x57, 0x8, "c7892c8a27a16c3b858b3c17908b984ed5acdc457402adcc7d906dd544feb33aad7a9567385b9d84fb6088c3d43f71bce5a00e98f17f52378768c5a170ccda2ce131eb99588897ca3134e56170bad4f3370346b816"}, @uac_iso={0x7, 0x25, 0x1, 0x100, 0x8, 0x7ff}]}}, {{0x9, 0x5, 0xf, 0xc, 0x400, 0x7f, 0xe, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x83, 0x4, 0xfff8}]}}, {{0x9, 0x5, 0x80, 0x4, 0x200, 0x0, 0x6, 0x4}}]}}, {{0x9, 0x4, 0xe1, 0x1, 0x0, 0xf7, 0x8c, 0x8, 0x8e, [@hid_hid={0x9, 0x21, 0x9, 0x4, 0x1, {0x22, 0xa7e}}, @uac_control={{0xa, 0x24, 0x1, 0x8000, 0x7}, [@mixer_unit={0x6, 0x24, 0x4, 0x5, 0x3, "06"}, @feature_unit={0xf, 0x24, 0x6, 0x3, 0x2, 0x4, [0x8, 0xa, 0x5, 0x6], 0x40}, @processing_unit={0x7, 0x24, 0x7, 0x3, 0x1, 0x2}, @processing_unit={0x7, 0x24, 0x7, 0x2, 0x6, 0x9}, @extension_unit={0x8, 0x24, 0x8, 0x1, 0x0, 0x32, 'h'}, @mixer_unit={0x6, 0x24, 0x4, 0x1, 0x0, "9a"}]}]}}]}}]}}, &(0x7f00000009c0)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0x34, 0x3, 0x4f, 0xff, 0x7}, 0xfb, &(0x7f0000000540)={0x5, 0xf, 0xfb, 0x4, [@ss_container_id={0x14, 0x10, 0x4, 0x3, "017af81f34b3a99cc28d7a48120d0f2b"}, @ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x0, 0x5, 0x6}, @generic={0xd5, 0x10, 0x4, "4139351657ae91d0530bc268e582ecfa5f3291c1a6f0dfb225dc2f6118016c23310921efd289ea62bd6686842959dcfd81e1c083518767840cdae6fb5d0b8163df28d2490cae5c3c440ea5b0ae03232c748b894850db396e86170ce41ef1d354eacf6d6fb90876ef398db907e5aaa86a88960f36261acbce05239960887720b0acb54aaa0ddaa043328beacdf15c77e3acb9f3caf1d35451c12187d4405994e47b5413dfb0d621eb4388fd6264769ba8ae042f232a18a5d847ffb0dd1f53fadab388adb89265a73819cecc48002fcfb741eb"}]}, 0x4, [{0xeb, &(0x7f00000008c0)=@string={0xeb, 0x3, "b5c6f0f4c0bc98372fbb523c1ad7ff4ab58493db04280c882deecec23b9d301054eabd5308b9ebae1317c8685e7ef77a18a578723406ce886e8d66540da36b91b58870742bc075c3111e5791e3c357713b84be2cae4f03703c867331ec4b55162aebf52730d729a70f763bc7667643d3b68712908e8c85dda9e44cf12edbcb7e7617199b89b33038ce161d15624effa42f8d84e06793aaff8afbaabb3b169c9a03041ffb3a018dad6527320f0e44f750bfd67f09cf42af3cf24d3f4b22ae8ce65eb5afc64fb2957de2b8f33d78c70c96b2caf904a5e777e7c17d38d757ecd5012bb4066fb0327a3557"}}, {0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x809}}, {0x42, &(0x7f0000000680)=@string={0x42, 0x3, "7e7dc727bc98f3178bfb6b52f1fc27cf374c115876257cf31e15a70a0f444e3312078da29b3bf34ac923b84c088a40cf921eed5f5dfd42c429cea73f9cb0848c"}}, {0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x400a}}]})
syz_usb_control_io$uac1(r1, 0x0, 0x0)
syz_usb_connect(0x1, 0x5f, &(0x7f0000000840)={{0x12, 0x1, 0x310, 0x76, 0x87, 0x63, 0x20, 0xb3c, 0xc005, 0xc29d, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4d, 0x1, 0x7f, 0x9, 0x0, 0xe8, [{{0x9, 0x4, 0x6, 0x6, 0x2, 0x58, 0x72, 0xef, 0x1e, [@uac_as={[@format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x9, 0x3, 0x7, 0x7f, "b589d7e3ae5178f3"}, @as_header={0x7, 0x24, 0x1, 0x8, 0x9, 0x5}]}], [{{0x9, 0x5, 0x7, 0x10, 0x3ff, 0x0, 0xff, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x1, 0x7, 0x6}, @uac_iso={0x7, 0x25, 0x1, 0x83, 0x7, 0x800}]}}, {{0x9, 0x5, 0xc, 0x10, 0x20, 0x0, 0x0, 0x6, [@generic={0x4, 0x1, "8849"}]}}]}}]}}]}}, 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000640)=ANY=[@ANYBLOB="201104060000000101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

5.187442963s ago: executing program 2 (id=2838):
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x15, &(0x7f0000000080)={[{@nodiscard}, {@nocheckpoint_merge}, {@alloc_mode_def}, {@nolazytime}, {@discard_unit_block}, {@fault_injection={'fault_injection', 0x3d, 0x20}}, {@discard}, {@noacl}, {@fsync_mode_posix}, {@alloc_mode_def}, {@noextent_cache}, {@checkpoint_diasble}, {@fault_type={'fault_type', 0x3d, 0xfffffe}}]}, 0x1, 0x5505, &(0x7f0000000340)="$eJzs3E1rY9UbAPAn7XTe//Mv4sLdXBiEFiZh0nlBd6PO4At2KKMuXGmapCEzSW5p0rR25cKluPCbiIIrl34GF67diQvFnaDknlud+gJC08ZOfz+4ee45OXnuc8Iw8NxbEsCptZj9/GMlrsSFiJiPiMsRxXmlPAp3U3guIq5GxNwTR6Wc/33ibERcjIgrk+QpZ6V869Pr42u3f3jjp6++OXfm0mdffju7XQOz9nxE9DfT+U4/xbyT4qNyvjHuFrF/a1zG9Eb/cTnOU9xprxcZdhr76xpFvNlJ6/PN7eEkbvQazUnsdDeK+c1BuuBw3NnPU3zgUWOrGLfa60XsDvMidvZSXbt76f+2veEo5WmV+T4o0sdotB/TfHu3nfaz+biIzcGonE9581Z7dxLHZSwvF8281yrqWD/MN/3f9mZ3sL2bjdtbw24+yG7X6i/U6neq9a281R61b1Ub/dadW9lSpzdZVh21G/27nTzv9Nq1Zt5fzpY6zWa1Xs+W7rXXu41BVq/XbtZuVG8vl2fXs1cfvJP1WtnSJL7cHWyPur1htpFvZekTy9lK7eaLy9m1evbW6lq29vD+/dW1t9+79+6Dl1Zff6Vc9JeysqWVGysr1fqN6kp9+RTt/6Oy6CnuHw6lMusCAE4e/T8wC0fX/289jDj6/j/0/1Nxovrf097/H8H+4VD0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp9Z3C5+/VpwspvGlcv5/5dQz5bgSEXMR8evfmI+zB3LOl3kW/mH9wp9q+LoSRYbJNc6Vx8WIuFsev/z/qL8FAAAAeHp98eHVT1K3nl4WZ10QxyndtJm7/P6U8lUiYmHx+yllm5u8PDulZMW/7zOxO6VsxQ2s81NKlm65nZlWtn9l/kA4/0SopDB3rOUAAADH4mAncLxdCAAAAMfp41kXwGxUYv9R5v6z4OIv7/94IHjhwAgAAAA4gSqzLgAAAAA4ckX/7/f/AAAA4OmWfv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfmPnfm4TB6I4AD8bvLD/tGi1921lb1DGlrDHPUYUkCYoIAfSQhqgBnJLCRFEeBwCEYdIHttK9H2SMxnL/HiD4DAz0gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF26r9aL26vf121zdvt28owGAAAAuGRbrRf1P7PU/9rc/97c+tn0i4goI+LS3H0Un84yR01O9fL8zenz1asa7iLqhMN7TJrrS0T8aa7HH11/CgAAAPBxbZareZqtpz+zoQuiT2nRpvz2N1NeERHV7CFTWnnI+5UprP5+j+N/prR6AWuaKSwtuY1zpb1J/XM/rtpNT5oiNeXFlx2LzDZ2AACgR6Ozpt9ZCAAAAH36N3QBDKOI563M41bgJDXN9t7nsx4AAADwDhVDFwAAAAB0rp7/93T+3975fwAAADCMdP4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXdpW68VmuZq3zdnt28kzGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhif95RIATCIAz2ru9M5v6HlQZNTU2qQPj4G4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIv9eUmBEAiCKJgz/nfS9z+sJOgZRIiAhkcVtWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIud+3mNo4oDAP5mZmdrq+IaZQ8RUfCgF7vd1tbexIMSPPgnCCHd1titP9ocbCliLt4k515EjyKCEm/9H3JOIJd4y2EPETwrMzuTnfwA118zm+TzgTfvu8Mw7/tmIeQ77yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACURm9P4iQ7dMZxXJzb3Hu4lPVbh/rM47Xt+axlcVRn0ifDi9UPUbe5RAAAADg7krK+DyHspOsLWR938vo/La/Jav5vnx7HZT1/uO4v+7L2z9ovP+8+vz9QZzxOdtOby8PBpaOptP6/Wc62Z/7yilb+5PN3L0n+hcTvrT43SvPnGX29sfFOOw/P1ZEtAPBPXCz7Iih/H8r6fpOJAXBmtCqFd1n/J51mcwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACow2g1PFnGUQhhvjWJM1t7D5eO6x+vbc+X7dqjR2vhy8k9s1ukIYSby8PBpVpnM9vu3X9we3E4HNytP3gphNDU6G8V07/9wRQXh9DI8xH8R0FcfNmzks/JCBr8oQQAwKmUFi2r63fS9YXsXDQXwh/fHaz/X63EYcr6f/fDa5vVsar1f7+2Gc6+3sqdT3v37j94ffnO4q3BrcHHb1zuv9m/cv3q1eu9/F1JzxsTAAAA/p120ar1fzx3dP3/QiUOU9b/n33T/6I6VqL+P9Zk0a/pTAAAAM62Z1/+/bfomPNRux0+X1xZudsfH/c/Xx4fG0j1bztXtGr9n8w1nRUAAABQh9FqdGD9/0YlDlOu/z/1/Qs/Vu+ZhBDOF+v/F5c+Gd6obzozrY4/J256jgAAADTrfNGq6/9pvv8/3t/yEIcQXntlHBf/BnCq+j9596sfqmNV9/9fqW+KMynujp9H3ndDaHWbzggAAIDT7ImiZcX+r+n6wkc/XXi/bf8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQN3+DAAA//962D6S") (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000005880), r0) (async, rerun: 32)
r2 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001b00)=@newqdisc={0xa0, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x70, 0x2, {{0x0, 0x0, 0x57b2}, [@TCA_NETEM_JITTER64={0xc, 0xb, 0x4}, @TCA_NETEM_LOSS={0x28, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x5, 0x3, 0x1, 0xedff, 0x4}}, @NETEM_LOSS_GE={0x14, 0x2, {0x3, 0x5, 0x5, 0x9}}, @NETEM_LOSS_GI={0x18, 0x1, {0x1, 0x9da, 0x1, 0x141, 0xffff}}]}]}}}]}, 0xa0}}, 0x0)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000005980)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000005940)={&(0x7f000000ac40)={0x8c, r1, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x5e, 0x2, 0x4}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xbf9}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x0, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010100}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40801}, 0x20000810) (async, rerun: 32)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) (async, rerun: 32)
open(&(0x7f0000000080)='./bus\x00', 0x109042, 0x100)
mount$overlay(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000000)={[{@redirect_dir_nofollow}], [], 0x5c}) (async)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) (async)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)={0x60, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}, @IPSET_ATTR_HASHSIZE={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) (async)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000700000028000180060001000a00000014000400fc01000000000000000000000000000008000700", @ANYRES32=0x0, @ANYBLOB="03d9f7bce7c4a45d9362"], 0x3c}}, 0x80)
pipe(&(0x7f0000000080)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff}) (async)
r9 = socket$inet_udp(0x2, 0x2, 0x0)
close(r9) (async, rerun: 32)
socket$netlink(0x10, 0x3, 0xc) (async, rerun: 32)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000078000000030a01030000000000000000050000000900010073797a300000000008000540000000001c0008800c00024000000000000000000c00014000000000000000000900030073797a3200000000280004800800024000000000140003007465616d5f736c6176655f3000000000080001"], 0xd4}}, 0x8818) (async)
write$binfmt_misc(r8, &(0x7f0000000000), 0xfffffecc) (async)
splice(r7, 0x0, r9, 0x0, 0x4ffe6, 0x0) (async)
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000000040)={[{@compress_algo={'compress', 0x3d, 'zstd'}}]}, 0x1, 0x559a, &(0x7f0000005680)="$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") (async)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000f00), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_SET(r10, &(0x7f000000b100)={0x0, 0x0, &(0x7f000000b0c0)={&(0x7f000000af00)={0x58, r11, 0x1, 0x70bd28, 0x25dfdbff, {}, [{@nsim={{0xe}, {0x16, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5}}]}, 0x58}, 0x1, 0x0, 0x0, 0x64000840}, 0x2000c044)
r12 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r12, 0x40086602, &(0x7f0000000000)=0x4) (async)
creat(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x160) (async, rerun: 64)
open(&(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x101002, 0x80) (rerun: 64)

5.186515215s ago: executing program 3 (id=2839):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f00000005c0)='kmem_cache_free\x00'}, 0x10)
r0 = socket(0x1e, 0x5, 0x0)
setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000, 0x0, 0x0, 0x9, 0x0, 0x0, 0x9}, 0x1c)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000, 0x0, 0x2}, 0x1c)
sendmsg$tipc(r1, &(0x7f0000000640)={&(0x7f0000000300)=@nameseq={0x1e, 0x1, 0x2, {0x43, 0x0, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0) (async)
sendmsg$tipc(r1, &(0x7f0000000640)={&(0x7f0000000300)=@nameseq={0x1e, 0x1, 0x2, {0x43, 0x0, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
close(0xffffffffffffffff) (async)
close(0xffffffffffffffff)
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) (async)
recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r4=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x4000008) (async)
sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x4000008)
recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async)
recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)) (async)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000300)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) (async)
recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xe, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x2}, 0x50)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x36, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) (async)
recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x36, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r7, 0x58, &(0x7f0000000180)={0x0, <r10=>0x0}}, 0x10)
bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000340)={r10, 0x3ff, 0x8}, 0xc)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x600) (async)
sendmsg$inet(0xffffffffffffffff, 0x0, 0x600)
syz_mount_image$btrfs(&(0x7f0000000280), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000000000)={[{@compress_algo={'compress', 0x3d, 'lzo'}}]}, 0x1, 0x55b1, &(0x7f0000005680)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x141042, 0x10) (async)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x141042, 0x10)

5.116762784s ago: executing program 1 (id=2840):
r0 = epoll_create1(0x0)
epoll_pwait(r0, &(0x7f0000000080), 0x0, 0x1fc, 0x0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0)
r2 = socket$nl_crypto(0x10, 0x3, 0x15)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_CTHELPER_DEL(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c0000000209010500000000000000000a000002080006400003ee00fc00000000000000eab900000400ff01000000000000000000000000004f0f4ec284e0c2a517000000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x10)
sendmsg$netlink(r2, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000080)={0x20, 0x10, 0x509, 0x0, 0x0, "", [@generic="0ee22b92069b2a2dfaa46c88ed"]}, 0x20}], 0x1}, 0x20004000)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
connect$inet6(r4, &(0x7f00000003c0)={0xa, 0x4e24, 0x2, @loopback, 0x5}, 0x1c)
sendmmsg$inet6(r4, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback={0xfec0ffff00000000}}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000180)='i', 0x1}], 0x1}}], 0x1, 0x0)
sendmmsg$inet6(r4, &(0x7f0000004a80)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000080)="05", 0x1}], 0x1}}], 0x1, 0x0)
mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0)
pipe(&(0x7f0000000000)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
write$RDMA_USER_CM_CMD_BIND_IP(r6, &(0x7f0000000500)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x6, @dev={0xfe, 0x80, '\x00', 0x24}, 0x2}}}, 0x30)
pipe(&(0x7f0000000080)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
write$binfmt_misc(r8, &(0x7f0000000980), 0xfdef)
splice(r5, 0x0, r8, 0x0, 0x80, 0x4)
read(r5, &(0x7f0000000800)=""/217, 0xd9)
read$FUSE(r7, &(0x7f0000000980)={0x2020}, 0x2020)
write$UHID_SET_REPORT_REPLY(r6, &(0x7f00000005c0)=ANY=[], 0x45)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000100)={0x20000014})
r9 = socket$inet6_icmp(0xa, 0x2, 0x3a)
pipe2(&(0x7f0000000000)={<r10=>0xffffffffffffffff, <r11=>0xffffffffffffffff}, 0x4880)
splice(r10, 0x0, r11, 0x0, 0x7, 0xa)
r12 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x2]}, 0x8, 0x800)
close_range(r9, r12, 0x0)
r13 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r13, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYRES32=r12], 0x7c}, 0x1, 0x0, 0x0, 0x24000080}, 0x0)
sendmsg$NFT_BATCH(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000100001000000000000e200000100000a64000000060a010400000000000000000200000038000480340001800c0001007061796cc7f164002400028008000440000000000800034000000057080002400000000208000140000000090900010073797a30000000000900020073797a3200000000140000001100100000000000000000000300000a"], 0x8c}}, 0x4)

4.985299677s ago: executing program 2 (id=2842):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f0000000040)='wg1\x00', 0x4)
bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10)
unshare(0x2a020400)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
fsync(r2)
recvmmsg(r1, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)=""/9, 0x9}], 0x1, 0x0, 0x1a}, 0x40b7}], 0x1, 0x40002021, 0x0)
r3 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r3, &(0x7f0000000240)={&(0x7f00000003c0)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000300)='/', 0x1}], 0x1, 0x0, 0x0, 0x1000a8d0}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r0, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

4.932534452s ago: executing program 3 (id=2843):
syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=[@dontfrag={{0x14, 0x29, 0x3e, 0x7f}}, @hoplimit={{0x14}}, @hopopts={{0x110, 0x29, 0x36, {0x5e, 0x1e, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0xe7}, @generic={0x8, 0xe3, "5b23ee96da0c829e73eacc40ed3b962336155ffdc14aa07d00000000a7ef42203f152ece05d20ef9699897b829f1d5dc3a79886af23370fb206674a55c7757c0ca22b5fec4679c1bd59147bfb9f5608240068e018ab18924ff5903506cad2b94132fa0ae46b26bdf7f5b0ebb4a38afb6eadf15b36ee4a8508648510bc83a7ff6548c896564ae35e0ca51cd7b66408221388e694fd1d520c837486bc3e6dc0e33496b4d2ba0f2c2bd5fbb8afb1cc91d6df9ba2c1a34ffc767f6b0d34c7500ec0ebcb7152782fbdd981d5e82daf56b97a61601aae936b214914d3207088b98a130c20000"}, @generic={0x1, 0x2, "2bdb"}]}}}, @rthdrdstopts={{0x18, 0x29, 0x37, {0x73}}}], 0x158}}], 0x1, 0x810)
futex(0x0, 0x204, 0x2, &(0x7f00000002c0)={0x77359400}, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000780)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, {0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000680)="6f46c908341889a11ea3992276d5ab9e10824f9fcfb7f6d042618c6866e3801459b03d38ea918910602c461a2efae322fa6119ac242a51d6da28c74d466e336b26c77454129b8f099137cbe49f4f0d25a1887a2a71ab45b6bed147c61d2108915369d90861af6441ec422495a54e03b9b8a72989a44ab1eb127d8b935e45b14c721e41b0ae5a78be", 0x88}], 0x1, 0x0, 0x0, 0x84}], 0x2, 0x4040000)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

4.791161284s ago: executing program 2 (id=2844):
syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000001c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000430109029200030172e5000904000000010100000a24010000000201020c0d240700000500006e626805000c240000e9fffff5ffffffff092403f3ff0000050245", @ANYRES8, @ANYBLOB, @ANYRES16, @ANYRES16], 0x0)
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x180000c, &(0x7f00000005c0)=ANY=[@ANYBLOB='nls=ascii,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c706172743d3078303030303030303030303030303062622c6e6f626172726965722c6e6f626172ab5b7f286095eddc61746f723d7fcfb5b72c706172743d3078303030303030303030303030303130312c6769643d", @ANYRESHEX=0x0, @ANYBLOB="2c756d61736b3d30303030303030303030303030303030303030303030302c6465636f6d706f73652c666f7263652c6e6f6465636f6d706f73652c626172726965722c6e6f6465636f6d706f73652c747970653db029e1c02c7569643d", @ANYRES16, @ANYBLOB="2c747970653dd2100d1b2c7529643dd4f81c66210bbcbf82440a104ab956f2ba5e36e41ccb1b040fa8b829b0b87078de654c66ac22aebaa2c653ef127e38e0aa2229f9cf6a85035eb86c32a59f1f3acdb98c", @ANYRESDEC=0x0, @ANYBLOB="060000bd00", @ANYRESHEX, @ANYRES8=0x0], 0x1, 0x6eb, &(0x7f0000000dc0)="$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")
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)=@o_path={&(0x7f0000000040)='./file0\x00', r0, 0x4000, r0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, 0x0, 0x0)
landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, 0x0, 0x0)
mkdirat(0xffffffffffffffff, 0x0, 0xcc)
open(0x0, 0x8100, 0x31)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r4, 0x0, 0x20004800)
r5 = fsopen(&(0x7f0000000180)='anon_inodefs\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x181001, 0x0)
ioctl$COMEDI_INSN(r6, 0x8028640c, &(0x7f0000000080)={0xc000003, 0xf, &(0x7f0000000580)=[0x9c7c, 0x4, 0x10211, 0xbfff, 0x7, 0x1f0, 0x1f, 0x8, 0xbb, 0x0, 0x70, 0x2, 0xa, 0x1, 0xfffffff8], 0x1, 0x4})
sendto$inet6(0xffffffffffffffff, &(0x7f0000000240)="8a", 0x1, 0x51, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xa, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x105042, 0xa)
syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x82002)
syz_io_uring_setup(0x239, &(0x7f0000001080)={0x0, 0x0, 0x10100}, &(0x7f0000000000), &(0x7f00000001c0))

4.743726912s ago: executing program 3 (id=2845):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket(0x10, 0x803, 0x0)
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000000)='./file2\x00', 0x800018, &(0x7f00000000c0)={[{@autodefrag}, {@clear_cache}, {@barrier}, {@max_inline={'max_inline', 0x3d, [0x6d]}}, {@clear_cache}, {@discard}, {@noenospc_debug}, {@space_cache_v2}, {@thread_pool={'thread_pool', 0x3d, 0x1}}]}, 0x1, 0x55a3, &(0x7f000000ac40)="$eJzs3X9snHUdB/DnruvaFdeWMOuArGwDJFtEOjdNCCR2bNNpYTnphE3I+gNH0DmtY8NVCCtinIERijWMwQoLbn9MEYqucyiJBewqul8IJtNFBbPFNWOkOBExYTG9u+d299zaHhMpwuu1tM/zvc/z/d73njx/3PvW73MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABEHwx+N3TL/t3roJ26+ru++8a85e+2D3kuMX3rq1avND20v2dTz31aNVq1qPLF1w0/2JpkfW93d3BkEs2S+W7t9w2fwrr69vuKI0HLDxc6ltZeVQT5nq+mKqMTbnwcF+uT9NQRAURwYoSm/npXfiOQNkdlfkDzisayf1tE4dP69x28qujc8uu3xL/ktnUOloT2C0pK+rgyeupdrk73jkiEw769KL5Vyiqf7RC+4deREAwFtSk0huMm9H029xM+22aD3Sro202yPt8B1Ce3bjVKTGHTvUPCdH66M0z9pUVCgZcp6Revr8Z9qJaP9IOxI13sI8cw9NR5rSoebZEqmP1jwBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3k0uuH5m/d49D7/8ldbf/u7h17/16sePrGq8ZaC7/qJ1ix/v2PG9vx2tWtV6ZOmCm+5PND2yvr+7Mwgqk/1iqe6xZ6ri8ZkDddseu6e3puFDC9cUpccNt2OyDg72hzsXVwRBc1blYDhsf3kQJHILyWawIb/wpeTOZ8ICAAAA7yVnJn/HM+1UHCzOaceSaTKW/BdKhcVrJ/W0Th0/r3Hbyq6Nzy67fMupj5cYYrzak46XaVee+IllBeMw/kbHO1EPD12RN87woiNG8/zpx/qnNdfdUHrl7gsWzphdv+XS4CfTD3csX3TfhBfHL9nXXpOX/yuHz//hmZP/AQAA+G/I/9FxhjdS/m+uqZh0cOp3ix67rur44fkP/Lyz7/kn4w8VD3Q//dLYcbf9cnVe/p+c85R5+T+ccZj/48Gp5X8AAAB4N/tf5//avHGGN1L+/8X+zZ//98pvTDk84187Xnj69xdvnVI+/7WyGTe8+cSCVxp2tf0pL//XFJb/x2RPO3xwVzjhZRVBUFP4SQUAAAByhP/vfuKjhTCvpz45iOb1y+4qe3LXG+tvjJ/V8o8zFvfPqv7i7tVf37ApNrChc92O5XNX5OX/2sLyf/E783IBAACAAvxm+y13V395ydYtew7N2XFnYvPYS+a+uuennVf1vXwsUfT8zX15+T9RWP4vGZ2XAwAAAJzEU+MmPnfo0UNfm7177YS9q9rmPD5t3+qFD/xz9t+veOnPxzddWJ6X/xsLy/9l6W165UOq087wrxA6KoKgdHCnJVXoC9o/mSkAAAAAb5Mwpzc1revduX7MrNfOPvzDNSuW/2rvpd++a2P1zQd+XXX7ucf2996Yl/9bhr//f3ing3D9f879//LW/2cVUnf9u8SNAQAAAHg/yl/PH94eP/XNBUN9/36h6/8/euaBko7m8ysnx7dVz3rig31Xra1+fVHHRZ/YfusbH46V//VTefm/rbD8X5S9fTu//w8AAABOwf/b9/8tzhtneCPd/79v3DPnrPnsPT+o/WbZU+e+eXfzd9oPTj9v87QzPlJ0fvecmX/4fl7+by8s/4fb07JfXk94fm6vCIKJgzvpuwluDae7LFLoKs4qpE58pEd92CNd6CrJKiS1RHp8rCIIpgzutEUKp4eF9khhoDxd2BQp7A0L6eshU3g0UugJr7R7y9PTjRZ+FhbSCyy6whUUp2WWRER6HBuqx2DhpD0OZJ4cAADgfSUMz+ksW5zbDKJRtis20gFlIx0QH+mAopEOGBM5IHrgUI8HjbmF8PEfz+1e+so1D9b1Xt1w9KzZe5bc0faBnkW9O7/wo55z/nL1Cws/nZf/NxWW/8NTMTa1GWr9fxCu/09/r2Fm/X9jWKiMFLrCQiJ6x4BE+BypsHtn+ByViXSPgYmZAgAAALynhZ8LFI3yPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/sHfvcVJVd4LATzf9oJum6YgBY4ygRkR3aZomGEQcUXRXo4tNJKtjhtAIjXZoAwq4YsyKr3GV6GLUmBjZwY+jJg6r+CDqRIXoiElGJfE5Kz4HnciqS9BR45gs++m+dYqqW112IaC0+/3+0XWqfud569F17r11LgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/P/hsiX3Nrw58H9965ffW/f697409TdTD9m8y19uqHt3yDlPbT5ocN0tbw1asPCNtklnXtsyffk1G1YuDaGlq1xZUrzsoUHl5aP/cMxdt13xcNO0wVPOrcrUm4mHfp1/yjN3Loytvto/hLvLQqhIB0bUJYHKzP26WN8edSF8LmwJZEu01SYl0g2Hh2tCWBa2BLJV3VsTQl1OYMoTD666rDNxVU0I+4YQqtNtvFCdtFGTDgyrSgK16cCciiTw/uZENnBPeRKAbRbfDNkX/YqW/AwN3Zcr8vqr3G4d+3Slh9cnJhqK53vrsB3cqRxV6QdatulpK6iOHaLg7bHau60XvNsKtvMST1vuF6nMN5TNW0LVoXxm26zpCzrmx0fKQ2Njn2I17aDned2mc2ZsTbrXvA5jBxq2y+vwgdpJ9Ze9PfHglSf/8fR956+duq3dfC5nk+amd7TqkHnN9ZrnMZrg86QXvP0KviUN9aUrhHD8nz5f9sycl3bf+MGrJ068/YWLr5628JopE58d9Iux/3jtLndPu7xg/t/w0fP/+HKOt+V5uWOrH9Ync/P4SF1MbKxP5uYAAADQa/SGvaZfHf3qS6c+dPeiF5cfV/Hdcb86abf6irO/33H8rivHf/HSK9sf36Vg/j+0tOP/8ZB/Xe5oV4cwoStxwYAQdut6PAn8LHbn5AEh7NWVaskPHJYKrA7hC12J/bNVpUr0jSWGpgK/r88EJqQCa2KgJRW4MQaWpAIXxsCKVGBGDKxOBQ6PgdCeP44D6jPjKDlQEwOtyUZcEc9CeKc+tpbaVuuyVQEAAGwnmdlhZf7dnHMdtjVDnF6uqOkpQzwDu2iG6lQN6RlsdlpVtIaKnmoo76mG7LgXffTwC2ou66nmgtMwyvIzfDjkO+UDJu79o7tuHHFT84sTv/vu2OO/8uc33129/z/993vOmX/dAQXz/6aPnv9Xd9ORsoLj/yFM7vobc5dnIh3ZeGtLXgYAAABgG1z12NInbzjgqP9z38v33fmla28oX3311//vKxsv2HvUccPL+v7dt1cUzP8nlHb+f9wn0icnc3g07oaYPSCEpvxAUu3BhYHkqHe/TAAAAAB6g+zx+Oyx8PbMbXKKdno+XZi/ZSvzxwP/E7rNf/mmv372y9c+eeLCYftsuOK/nflB2efH/m6XY9eOfPytPYf9Q0PfwvP/W0o7/782/zbpxJrYiysHhNA3J/BI7GVnoMvQGHj50PxAZvxr4gZYHKvKnJiQrWpxLNEaA02pwLJiJX6bLbFbfiDzZGUbvyA7jvZMiZwAAAAAfOLi7oB4XD6e/3/P5AO+tP+gl8a8uOe9C1+bsPSEU2t/uM8tu74+oGPSmAMnHHLEMwXz/9atO/+/ax5ccHp/R78QRlaE0Cf9w4BHa5OFAWOgriyTuL82qatPuqrzakMY3zmwdFWvZNb/r0ivMfhETVJVDOy29083DetM3FATwsjcwDPfvH5MZ2J+KpBt/Bs1IQzpHG268ZV9k8Yr041f0zeEPXMC2apO7htCZ2NV6aoerM5cxyBd1W3VIQzMCWSrOrA6hIUBgF4q/iudmfvgvIVnz57e0dF2xg5MxH34NWFWe0db44w5HTOri/RpZqrPecsYnVc4plKvfPN8ZomiqUNuH15KOvs7wabctjL78QtOHMzcj9+FKrvG2VyZd3d0esjD9ylsIuR8kyo25PIdPOTa3Eq2PIkF9cf8VaFf6LtgXtsZjWdNnz//jFHJ31KzNyd/42GmZFuNSm+r2u76VsLLo+hqWSkfd1vtl1vJyPmnzR05b+HZI9pPm35K2ylt32keO6q5ecxXx45pHtk5qqbkbw9D3a+7qlND3Xx9iePajkPdvSKnkk/iU0NCQqK3JaYvKTt/wrRf3/+tPdacdtZJe/z9HjNHnPRXl/9m7omNh0z+1fV/ubZg/j/3o+f/8VMnfvJn1mcodvy/IR7mTx7fcpi/NQaWlXr8v6HY0fzsiQFDU4FFMbDIYX4AAAA+G+LuyLg3M+6Vvq7un+4+cuaMQ97/5QlTrv7bseNOPWv9vg0XX33skv+w/p0lq454u2D+v6i03/9vp/X/s0vXf63YMv/7xxJNxdb/Ty/zn13/f1Gx9f/Ty/xn1/9f9ims/78gG0htknes/w8AAHwWfHLr//e4vH/6AgEFGXpc3j99gYCCDD0u41/qBQK2ev3/OR1/UTvo8jnjDh0x98ePrNp7ycDbvvT8xF/vs/SgEfeuvOW9UbcWzP+XlDb/t3A/AAAA7Dwe+mXfb1/87rD7n3rk/SPLLv3txpuO/6u2Aw75w8DmUyYfXfP9m/6tYP6/rLT5/ye//l8odv7/0GKBlmILA1r/DwAAgF6q2Pp/Nw98eejq+SNufOznb97yUusvZo5/7d8t+cFXpg9runnNut80zFhfMP9fUdr8P552UZ6XO/bmw/pkTbuQXtNuY332JwMAAADQO5SHxsbKEvPmrYx62Mdvc11mKdCPSud6+r5BqxaUP3RVWfXGH1wy7ZDGc489c86RF63/fu2TP6md2lh9RsH8f3Vp8/+832U8UDup/rK3Jx784cqT/3j6vvPXTt1y/B8AAADYcUrdLwEAAAAAAAAAAAAAAHz6nmpdetAHo45+Y+Zeo/70jWNf+MHiL37zkb+59s9n/vzw+/Zq3zxsSsHv/8PkrnLFfv8fr/sXf1+wa17u2GrP6/9l7k855taFXUsWPlofwj65gdnnz/5cyFybf7/cwKqp+w/uTJyfLnHfi4e/1pmYlg4cNWKX9zoT41OB1rhI4hfSgXhVxff6pwJxecUn04G4PVakA1WZwCX9k3GUpbfVhrpkW5Wlt9VzdSEMyAlkt9XddUkbZekBXpUKZAd4ejoQBzgpEyhP9+rWfkmvYqAuFv2bfkmvAADYacVvgZVhVntHW1P8Ch9vd6/Iv43yliw7r7DashKbfz6zNNnUIbcPLyXdJ/1ddMu1xitDdecQRhV8Xc3NUtY1yu1TSw+bbtciQ+5ptbfyIuXStnbTVRUfUU0yosYZczpmVvY48NE9Z2mu6DHLqILJTm6W8q5NWkItJfSlhBGVuG1K6HK8Xx4aG/ukco2LwYaQp6dXRKm/189d56/YqyA3z9/WXHtpn8F93v+38Rc99OCAyo5TJ7ddtPtj/zxw1Mwf//DB1mt+XzD/byht/l+dO673MhcDWBSvrHfwgBBaSxwRAAAAfPb9z3OX33HinDUbZq2uePZ3v5tdftyJlZvPueucsy967v7FR13y72/e1viKsqc2nfjGprP++o2ffOW6h8966fAZZ901ad0h69uqb/zuXyw/dUjB/H9oafP/uAcrcyg42duxOl7//4IBIXRdWr8hCfwsDvfkASHs1ZVqiSWSC+p/LZZoSgI/iztM9o8lWlvyq+obAytSgd/XZwKrU4E1MZDZS/HTkNmVc0V9CGO6UpPzS8yNJRpSgeNiYGgq0BgDTalA/xiYkAq82T8TaEkF/jEGQnv+trqzf2ZbAQAAbI3MPKsy/25Iz/NWVPSUoaynDLU9ZSjvKUN1TxmKjSLevyNmqEydvFKWk6kyXWtNqpaCDPFi+Fvdr4IM4bf5OdMFC5qO5x9kzzcoy88w7od3tB70tXk/3nTxjx4/8sALj1xy5duXHt1v8JXP/u/2c/v131RbMP9vKm3+X5t/m7S+Js7/t1z/Lwk8Ert3ZTx1fGgMvHxofiCzY2BNnOwuzlbVkimRmbQvjiUmxMDQVGBuDExIBVonZwLLBucHMjPtbOMXZBtvz5TICQAAAMAnLu4giLtp4vx/5bjwzh5Hvt+8+5UD5457/JHzjphes2t1zT+PX7t0/KXVD+3Xt2D+P6G0+X9sr19uYxfG3rzaP4S7y7b0JhsYUZcE4n6Muvjz+D3qQvhczg6ObIm22qREVarh8HBN8gv1qnRV99YkawzE+1OeeHDVZZ2Jq2pC2Ddn70u2jReqkzZq0oFhVUmgNh2YU5EE4p6fbOCe8iQA2yy7VzC+oDKnumQ1dF+uyOvvs3JN0PTwCvaBdpOvu99c7SjV6Qcy+1Sztu5pK6iOHaLg7bHau603vtsavNtyv0hlvqFs3hKqDuUz22ZNX9AxPz6S+0vWAjvoec79lWop6e3wOlz08Xvbs+p0B5pSHx9N3Zfr/nVYFqt7oHZS/WVvTzx45cl/PH3f+WunltyNIuIPhQ++de4Bz+Vs3h2tOmRec73u86TF50lv/Dcw1NMWQlh+wawnn/iX95+vWN/8Xw4cu/y2Nx9b/pODHpg14gsbLvnyxrfePapg/t9S2vy/InXb5YO4MecNCGF4zsZ9NG7+iQOSz8GcQPIpObAwkBxyX19f9JMTAAAAtrfs7o7s/oL2zG1yQnh6nlyYv2Ur88f9FRO6zV9qvweO+YfvHXrV69/4+vrdL3906VPr/tObrxwx7dAHNj29YuXrzcd+/umC+X/rR8//+6a66fi/4//sII7/d2tn3xXdN/3Aom3aFV1QHTuE4//d2tnfbY7/d8vxf8f/u+P4fw8c/+/Wzv60FXxLmutLVwihdcANt/+idvrwflec860Za3/+9DtN416oO/foO//H4YvDNeet+nPB/H9uafN/6/91v2hfdv2/1mLr/80ttv7fIuv/AQAAO1SRhebS87yC1fsKMqRX7yvI0OMCgT0uMWj9v61e/6/2pLNPeqX+rb2umXj7f75z+oXPn3Tis/v2ef6E20+4aeTVw1/68oaC+f+i0ub/8eXQL7f13rL+39DJRapaEgNzLQwIAADAzqjYDgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+XSseXPzFzYv3OeimZz9/0+H/umzNrL1/dcDm0WNObhy+eGDZlX/3L28NWrDwjbZJZ17bMn35NRtWLg2hvatcWVK87KFB5eWj/3DMXbdd8XDTtMFTzq3O1FuZuf1iXu7Y6of1ISzLeaQuJjbWd97ZEphyzK0LKzoTj9aHsE9uYPb5sz/XmbixPoT9cgOrpu4/uDNxfrrEfS8e/lpnYlo6cNSIXd7rTIzPBMrS3b2uf9LdsnR3L+sfwoCcQLa73+6fX1W2jf+YCZSn27i5LmkjBupi0R/VJW3EQEcs0d43hJEVIfRJV/Xr6qSqPumq/r46qapPuqr/Wh3C+BBCRbqqF6uSqirSI19blVQVA7vt/dNNwzoTy6pCGJkbeOab14/pTJyeCmQb/3pVCEM6XzLpxu+oTBqvTDd+VWUIe4YQqtIl/rUiKVGVLvFKRQgDcwLZxk+tCGFh4DMhfvjMzH1w3sKzZ0/v6Gg7YwcmqjJt1YRZ7R1tjTPmdMysTvWpmLKc9ObzPv7Yn990zozO26lDbh9eSroiU66yq8vNlXl3R+/svY/9qs2tZMvzUVB/zF8V+oW+C+a1ndF41vT5888YlfwtNXtz8rdPJppsq1G9ZVvtl1vJyPmnzR05b+HZI9pPm35K2ylt32keO6q5ecxXx45pHtk5qqbk7/YY6vWf/FB3r8ip5JP4AJCQkOhtifK8T7emnf2DvOCL/paOVobqrg/ogmlFbpayrlFuj0Ef9jFH/HG+p/Q4olEFE4eCLM09ZxldMJnYkqUmydL1va5gcphbU3nXJo33y0NjY59i26Eh/27u5n1rGzbvusymKzUNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/D924EAAAAAAAMj/tRGqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsAMHAgAAAABA/q+NUFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYUdOBYAAAAAEOZvHUbPBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwKUAAAD//5twzl8=")
r3 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
ftruncate(r3, 0x2007ffc)
read$FUSE(r3, &(0x7f0000000280)={0x2020}, 0x2020)
sendfile(r3, r3, 0x0, 0x820000009)
sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x9965}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_REMOTE={0x14, 0x3, @loopback}]}}}]}, 0x4c}}, 0x0)
sendto$packet(r0, &(0x7f0000000240)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc9", 0x26, 0x0, &(0x7f0000000540)={0xc9, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14)

4.251199368s ago: executing program 0 (id=2846):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000100)=ANY=[@ANYBLOB="180500000000000000000000000000001800000020696c2500000000000320207b0af8ff00000000bd510000000000000701000000feffffb702000008000000b703000000000000850000001900000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x20, &(0x7f0000003e40)=""/222}, 0x94)

4.116080866s ago: executing program 0 (id=2847):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000003040)={'batadv0\x00', <r5=>0x0})
sendmsg$BATADV_CMD_TP_METER(r3, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000003080)={0x28, r4, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000050}, 0x40084)
sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000440)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x24100902}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x6c, r1, 0x10, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_QOS_MAP={0x32, 0xc7, {[{0x40, 0x4}, {0x95, 0x2}, {0x4, 0x1}, {0x4, 0x5}, {0x3, 0x1}, {0x4, 0x2}, {0xa, 0x1}, {0x4, 0x1}, {0xfa, 0x6}, {0x0, 0x5}, {0x9, 0x1}, {0x9}, {0x10, 0x3}, {0x9}, {0x4}, {0xfc, 0x3}, {0x1}, {0x1, 0x3}, {0x7, 0x1}], "c42fe8ef58bd04b7"}}, @NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0x4}, {0x4, 0x3}, {0x6, 0x5}, {0x8}, {0x0, 0x6}, {0x3, 0x7}, {0xdc, 0x2}, {0x0, 0x7}], "ebce3832f9a9a039"}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000001}, 0x4)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x5}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x20900, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
r8 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000040)={'gretap0\x00', &(0x7f0000000200)=@ethtool_sset_info={0x30, 0x4, 0x5}})
r9 = socket$l2tp6(0xa, 0x2, 0x73)
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r12=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)={0x34, r11, 0x1, 0x0, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_MESH_SETUP={0xc, 0x70, [@NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0xa}]}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000600)={'ip_vti0\x00', <r13=>0x0})
read$FUSE(0xffffffffffffffff, &(0x7f0000000e80)={0x2020, 0x0, 0x0, <r14=>0x0}, 0x2020)
setsockopt$inet6_IPV6_IPSEC_POLICY(r9, 0x29, 0x22, &(0x7f0000000640)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@private2, 0x4e21, 0x9, 0x4e22, 0x6, 0x1ee09a718d204948, 0x40, 0x0, 0x11, r13, r14}, {0x8001, 0x7, 0x4, 0xa, 0x7, 0x2c, 0xfffffffffffffffd, 0xbc}, {0x4, 0x80, 0x83, 0x9}, 0x6, 0x6e6bba, 0x2, 0x0, 0x0, 0x2}, {{@in6=@empty, 0x4d4, 0x32}, 0x2, @in=@broadcast, 0x34ff, 0x3, 0x0, 0x4, 0x748492b1, 0x2, 0x6}}, 0xe8)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r7, 0x0, 0x5}, 0x18)
r15 = socket(0x2, 0x80805, 0x0)
ioctl$sock_inet_SIOCRTMSG(r15, 0x890d, 0x0)
sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x50, r1, 0x300, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x20008040}, 0x1)
r16 = socket$nl_generic(0x10, 0x3, 0x10)
r17 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff)
sendmsg$TIPC_NL_NET_GET(r16, &(0x7f00000060c0)={0x0, 0x55, &(0x7f0000006080)={&(0x7f0000005cc0)={0x14, r17, 0x647270ab066efff7, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x800)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x68, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @crypto_settings=[@NL80211_ATTR_SOCKET_OWNER={0x4}], @NL80211_ATTR_AUTH_TYPE={0x8}]}, 0x68}}, 0x0)

4.070406214s ago: executing program 1 (id=2848):
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0x1000000000000}, 0x18)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
flistxattr(r2, 0x0, 0x0)
r6 = socket$isdn_base(0x22, 0x3, 0x0)
ioctl$IMGETCOUNT(r6, 0x80044943, &(0x7f00000028c0))
connect$unix(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r7 = socket(0x1e, 0x1, 0x0)
shutdown(r7, 0x2)
sched_getparam(r0, &(0x7f0000000240))
syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f00000001c0)='./file2\x00', 0xf27ead0cc7c07c7, &(0x7f0000000000)=ANY=[@ANYBLOB="004489f9cf4dafa9d7232219844b341f4e0e1650101c142e4d00f6b4a6f21c3db6d24a49342a77081cefd7bb6440eb7a5098bbafe3fda6ecfc57e66ac359bba5a05a14c665991ef894e3c2309b2f5fbe4a3bd6becaeb76f99bafd188a186bfbc86c13d6cbdd539bcb6dc0b058fb6a9e341db3cf9af085bf3ace49d691d068372708cbe808bf92c8224b57df7758549b2da4411f8be8f5261a17dfbd34d", @ANYRESDEC=0x0, @ANYRESHEX, @ANYRES16=0x0], 0x0, 0x17f, &(0x7f0000001500)="$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")

3.980763303s ago: executing program 0 (id=2849):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8)
setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000040)=0x8, 0x4)
recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x4, 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)

3.967581432s ago: executing program 4 (id=2850):
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {<r0=>0xee00, 0xffffffffffffffff}}, './file0\x00'})
syz_mount_image$ext4(&(0x7f0000002100)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x808080, &(0x7f0000000140)={[], [{@measure}, {@smackfsroot={'smackfsroot', 0x3d, 'ext2\x00'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}, {@fowner_eq={'fowner', 0x3d, r0}}, {@subj_role={'subj_role', 0x3d, 'measure'}}, {@permit_directio}]}, 0x0, 0x541, &(0x7f0000002140)="$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")

3.225646151s ago: executing program 0 (id=2851):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="08020000f9ffffff0000000000000000850000bd72ea219e56d3028100360000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_emit_ethernet(0x4a, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaa"], 0x0)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2800006, 0xc3072, 0xffffffffffffffff, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000007880)=[{{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000040)="af0ac95ab194f93f", 0x8}], 0x1}}], 0x1, 0x4000000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800008080b63428e900"/20, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055"], 0x0, 0x47, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)
r1 = syz_open_dev$loop(&(0x7f0000000100), 0x6, 0x8201)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_all\x00', 0x275a, 0x0)
write$binfmt_misc(r2, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x7, 0x0, &(0x7f0000000040)="f7edad00"/14, 0x0, 0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)

3.225333578s ago: executing program 4 (id=2852):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
r1 = socket(0xa, 0x3, 0x87)
r2 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r2, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @empty}, 0x10)
syz_emit_ethernet(0x2e, &(0x7f0000000000)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x20, 0xfd, 0x2, 0x0, @empty, @multicast1=0xe0000300, {[@ra={0x94, 0x4}]}}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xff58}}}}}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x84, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYRESOCT=r2, @ANYRESHEX=r1])

2.773048108s ago: executing program 1 (id=2853):
bpf$LINK_GET_NEXT_ID(0x1f, 0x0, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000ac0)=ANY=[], 0x128}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r3 = accept4(r2, 0x0, 0x0, 0x80800)
r4 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000002c0)={0x10000018})
syz_genetlink_get_family_id$team(&(0x7f0000000100), r3)
sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)=ANY=[@ANYBLOB="0c0100001a0007000000000000000000fe80000000000000000000000000001be0000002000000000000000000000000ffff0000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc00000000000069c3ca644c7a000000000000000000000300000000000083000000000000000200000000000000000000007ffffffe0000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000700000000000000fdffffffffffffff0000040000000000e80a000000000000000000000a000200700000000000000014000e00ac1e000100000000000000000000000008001f0003000000"], 0x10c}}, 0x0)

2.659587113s ago: executing program 3 (id=2854):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
sigaltstack(&(0x7f0000001040)={0x0, 0x80000000}, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000040000701feffffff00000000017c0000040042801400018008000200", @ANYRES32=0x0, @ANYBLOB="08001400", @ANYRES32=0x0, @ANYBLOB="040002"], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0x4004011)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan3\x00'})

2.447997455s ago: executing program 1 (id=2855):
syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=[@dontfrag={{0x14, 0x29, 0x3e, 0x7f}}, @hoplimit={{0x14}}, @hopopts={{0x110, 0x29, 0x36, {0x5e, 0x1e, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0xe7}, @generic={0x8, 0xe3, "5b23ee96da0c829e73eacc40ed3b962336155ffdc14aa07d00000000a7ef42203f152ece05d20ef9699897b829f1d5dc3a79886af23370fb206674a55c7757c0ca22b5fec4679c1bd59147bfb9f5608240068e018ab18924ff5903506cad2b94132fa0ae46b26bdf7f5b0ebb4a38afb6eadf15b36ee4a8508648510bc83a7ff6548c896564ae35e0ca51cd7b66408221388e694fd1d520c837486bc3e6dc0e33496b4d2ba0f2c2bd5fbb8afb1cc91d6df9ba2c1a34ffc767f6b0d34c7500ec0ebcb7152782fbdd981d5e82daf56b97a61601aae936b214914d3207088b98a130c20000"}, @generic={0x1, 0x2, "2bdb"}]}}}, @rthdrdstopts={{0x18, 0x29, 0x37, {0x73}}}], 0x158}}], 0x1, 0x810)
futex(0x0, 0x204, 0x2, &(0x7f00000002c0)={0x77359400}, 0x0, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000780)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, {0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000680)="6f46c908341889a11ea3992276d5ab9e10824f9fcfb7f6d042618c6866e3801459b03d38ea918910602c461a2efae322fa6119ac242a51d6da28c74d466e336b26c77454129b8f099137cbe49f4f0d25a1887a2a71ab45b6bed147c61d2108915369d90861af6441ec422495a54e03b9b8a72989a44ab1eb127d8b935e45b14c721e41b0ae5a78be", 0x88}], 0x1, 0x0, 0x0, 0x84}], 0x2, 0x4040000)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

2.445588264s ago: executing program 0 (id=2856):
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000300)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0)
socket$nl_rdma(0x10, 0x3, 0x14)
mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000004280)={0x2020, 0x0, <r1=>0x0}, 0x2020)
syz_fuse_handle_req(r0, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r0, &(0x7f00000000c0)={0x50, 0x0, r1, {0x7, 0x2b, 0xfffffffd, 0x30004004, 0x0, 0xfffe, 0x6, 0xfffffffe, 0x0, 0x0, 0x100, 0x80}}, 0x50)
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x4a443, 0x1)
openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0)
umount2(&(0x7f00000002c0)='./file0\x00', 0x9)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x80000, 0x190)
socket$vsock_stream(0x28, 0x1, 0x0)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)

2.44523782s ago: executing program 4 (id=2857):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180))
ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'})
r2 = socket$netlink(0x10, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
r5 = socket$netlink(0x10, 0x3, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084)
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x0)
r10 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r11=>0x0})
sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x3fff, 0xfffffdfc, {0x0, 0x0, 0x0, r11, {0x4}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000000c0)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r4, {0x4}, {0xffff, 0xffff}, {0xe, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080)

2.127757759s ago: executing program 4 (id=2858):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0b000000080000000c00000003000000"], 0x19)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r0, &(0x7f0000000140), &(0x7f0000000000)=""/48}, 0x20)
openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0)
syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
bpf$MAP_CREATE(0x0, 0x0, 0xfffffffffffffddf)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f0000000700), 0xff, 0x49b, &(0x7f0000000740)="$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")
r1 = creat(&(0x7f0000000280)='./bus\x00', 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
rename(&(0x7f0000000240)='./bus\x00', &(0x7f00000002c0)='./file0\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000340)=@file={0x0, './file1/file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10)
pwritev2(r1, &(0x7f00000015c0)=[{&(0x7f0000000080)="ec", 0x1}], 0x1, 0xfffff, 0x0, 0x0)
r6 = open(&(0x7f0000000200)='./bus\x00', 0x44000, 0x0)
dup3(r6, r1, 0x0)
finit_module(r6, 0x0, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0, 0x0)
getdents64(r7, &(0x7f0000000140)=""/46, 0x2e)
getdents(r7, 0x0, 0x0)
bind$bt_hci(r7, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2040d0, &(0x7f00000000c0)={[{@i_version}, {@quota}]}, 0xf3, 0x490, &(0x7f0000000dc0)="$eJzs3E1sG8UeAPD/Ok76Xr+S19f3oKVAoCAqPpI2LdADB0BC4lAkJDiUo0nSqtRtUBMkWkU0oKpckGgl7giJCxJnDpw4IeCExIUD3FGlCvVC4WS09tqsHbt1EqdO6t9Pcj2zO8nMf3dnd3anmwAG1nj6TxKxPSJ+iYjRiCi0Fhivfd28sTj9543F6SQqldd+T9Ifiz9uLE7XiybZ97Zapph+FS4l8XybeufPXzhdKpdnz2X5yYUzb0/On7/w1KkzpZOzJ2fPTh09euTwoWefmXq6J3H+J23r3vfm9u15+Y2rr0wfv/rm918muUbn4+iN4VjKbZNWj/a2sr7bkUsnxaZVM6PNRQt3pkV0Y0tEtaMOR8RIjMbQpZ2NdaPx0gd9bRywriqVSmWq8+qlCnAXS6LfLQD6o36hT+9/6587NPTYEK6/ULsBSuO+mX1qa4qNG9XhlvvbXlqMiONLf32afmJdnkMAADT7Jh3/PNlu/FeI/+fK7czmhsayuZRdEfHfiNgdEf+LqJa9JyLuXWH94y355eOfwrVVBdaldPz3XDa31Tz+a0xTjA1luR3V+IeTE6fKswezbXIghrek+UNtf3sS1Umg+OnjTvWP58Z/6Setvz4WzNpxrbil+WdmSgulNQeeuf5+xN5iu/izCbxsDmtPROxdZR2nHv9iX/OSoUbq9vHfQnGVDcqpfBbxWG3/L0VL/HXJrecnJ/8V5dmDk/WjYrkffrz8aqf61xR/D6T7f2vb478R/1iSn6+dX/YrRm5Xx+VfP+x4T7Pa438keb2p8ndLCwvnDkWMJMeWL8894E7z9aMvLZ/Gf2B/+/6/K/7ZEvdFRHoQ3x8RD0TEg1nbH4qIhyNif76BLTOc3734yFurj399pfEfW9H+X3li6PS3X3eqv7v9f6SaOpAt6eb8120D17LtAAAAYLMoRMT2SAoTjXShMDFR+z/8u2NroTw3v/DEibl3zs7U3hEYi+FC/UnXaJaP7PnnWO756FR11jziYpY/nD03/mTo39X8xPRceabfwcOA29ah/6d+G+p364B114N5NGCT0v9hcK2+/ztzwGZ3m17sDzbAXcxVHAZXu/5/sQ/tAO48138YXI3+f6WLwrnXvVpf3gQ2H9d/GFz6PwyktbzXvyES8XnErcskG6WpK0p8lF9SP0FvhIaVTtQOmyhsjA3VlIhIonOZQuSWlNqViSsbIYoOiWLXf9XifOViqVz++au1VNrnExMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAECP/B0AAP//7mLcmg==")

2.059729949s ago: executing program 1 (id=2859):
r0 = memfd_secret(0x0)
ioctl$PPPIOCGIDLE32(r0, 0x8008743f, &(0x7f0000000200))
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5)
close(0x4)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00')
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$SO_TIMESTAMP(r2, 0x1, 0x41, &(0x7f0000000040)=0x7f, 0x4)
connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c)
recvmmsg(r2, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000023c0)=""/4096, 0x1000}], 0x1, &(0x7f0000000000)=""/55, 0x37}, 0xe81}], 0x1, 0x40014102, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1, 0x3032, 0xffffffffffffffff, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r3 = socket$nl_route(0x10, 0x3, 0x0)
socket(0x1, 0x3fac6c125394a56, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="8d2206001100ff002800128009000100766c616e00000000180002800c0002001f0000001f000000060001000100000008000500", @ANYRES32=r4], 0x58}, 0x1, 0x0, 0x0, 0x20000645}, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0)
r6 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
mount$bind(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x1000, 0x0)
move_mount(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', r6, &(0x7f0000000240)='./file0/file0\x00', 0x72)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r7}, 0x10)
r8 = syz_pidfd_open(0x0, 0x0)
fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f00000001c0)='mmap_lock_acquire_returned\x00', 0x0, r8)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r0}, &(0x7f00000002c0), &(0x7f0000000300)=r1}, 0x20)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000e3a000/0x2000)=nil, 0x2000, 0x17)

1.947962926s ago: executing program 3 (id=2860):
r0 = socket(0x1d, 0x2, 0x6)
r1 = epoll_create(0x2)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000001840)={0x90000001})
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', <r2=>0x0})
bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r2, 0x1, {0x0, 0x0, 0x1}, 0xfd}, 0x18)
sendmsg$NFT_BATCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWSET={0x38, 0x9, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x5}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x5}]}, @NFT_MSG_DELOBJ={0xc0, 0x14, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFTA_OBJ_USERDATA={0x35, 0x8, "9e497425b353ee4e859fb3b437cc39335459aa531935c530139eb7ca36b8a572b5f11a638d3ff817ee64fe2c3b75f00c69"}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_USERDATA={0x22, 0x8, "40778e3e8c57aa675d706d11b280c8f3381aabcfb334b9d71a677eece4bf"}, @NFTA_OBJ_USERDATA={0x36, 0x8, "d416c15e32cb550d2a9d755a53f8526098efc6176cc9baeda23b831e20c62b79ec433b619f587f747be55be1fbdac223629c"}]}, @NFT_MSG_DELOBJ={0xb0, 0x14, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}, [@NFTA_OBJ_USERDATA={0x72, 0x8, "e1a156d713fa4dc6df4a9e8b3b6e0293700773c1d093bc85d6b659000eb868420dbc9d1f694fe1b85de255433a041dd98e73fc6f0bb039550bc455ee1dd2fb50d338ae535a898f6d08427d01500347d8a8c03a2a6514f0616fcd045398368dbdbe5b803f1cff1cc78950e1ca6ae0"}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x8}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x3, 0x0, 0x0, {0x7}, @NFT_OBJECT_CT_TIMEOUT=@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}}, @NFT_MSG_NEWSETELEM={0x20, 0xc, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xc, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELOBJ={0x44, 0x14, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELSETELEM={0x1de8, 0xe, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x1dd4, 0x3, 0x0, 0x1, [{0xac, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x95, 0x6, 0x1, 0x0, "e7dcbbcf0f59046ad3d2b85fd38f6427b1b88c5896d3b2e719ba012accde496e7cdd584a01702dce75149f348478b01e2cebaa4d9ad1b712e48259d47aea22e8ac76723eb76b0fa4ef1c7f42009f20a7aa2e6cfba5117547960d34d604df151548663743fd22b46d77374002fe1b7b2df159b338ccd21cf86ea2199545642d885b81a8986d4913d6b364793b9807c868c2"}, @NFTA_SET_ELEM_USERDATA={0xd, 0x6, 0x1, 0x0, "32c8d1b86f556af878"}]}, {0x78, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0x50, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x15, 0x1, "e174b99c0b8741d23fefbf4d7c282b2dd7"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @masq={{0x9}, @void}}, @NFTA_SET_ELEM_FLAGS={0x8}]}, {0x8c0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x554, 0xb, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x15}]}}}, {0x54, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0xf}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_TPROXY_REG_ADDR={0x8}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x3}]}}}, {0xc, 0x1, 0x0, 0x1, @ct={{0x7}, @void}}, {0x3ec, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x3dc, 0x2, 0x0, 0x1, [@NFTA_RANGE_SREG={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_RANGE_OP={0x8}, @NFTA_RANGE_FROM_DATA={0x1b0, 0x3, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VALUE={0xa5, 0x1, "d1cde5707d3255d53a0626a330b5be0a9540e8e5782fcc72cc402868d95c6ff6a2879b4809a498f1bb8e5c08f32121f37944b0fba6147639e6a7f7d9db1660e971cc68effa4dca736f041239926822dc726590ad2dd269306ae3bce7de2ea7dd7f2f668e50c3db33ff9247d72a77684fc1fb758352ca4cc471ed3c6c61923e2105f95e1723c86177b2ba86338bb3c28ba1b17b4a15a63942b13822ecac72209aba"}, @NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x11, 0x1, "225651639f61b9f5b952c41055"}, @NFTA_DATA_VALUE={0xa1, 0x1, "e855bb37396a6dfaa1f4e02178e5a26b5e863b1c1568a23525b4ab9abc3c4a7cd4c09fed542a9878be67124a9d068dd67dd37370b607692284d0d8efade1f2247406f8cb5dfb8e38c75bf6f1b2011ca1a1932d9549c56b49e5f8d0b70f88882fd6f12e38ac1a052037edf5941dd1437c85c48f2832da8cff7535e6b213b9c880f5d6b1d4f20245fa984d4cfc0f1b91a28ffca68778cb43b643189b6cf1"}]}, @NFTA_RANGE_FROM_DATA={0x1e8, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0xed, 0x1, "f8a8122167cc9d6c28e83b745779b1468fb72c75021b46ca55a94d0f172b1e30adb28cd83a11cd172e2847721710948a2f04fb947578722913b9c003e7e83f5e2c3447adc29eec1e5c3e91db42dc1bf355a9b75a08754c9dc09f8b12286aa2c44ca0c155d2cbc45b118204bcc75ec3e8b7fcdfce2380e925c2ce36de5ce96707acfc1112fb10b35d80b0d293d41f2b968d3c894d43d86488dfd791676d68c87751f9205d4c3a99ca1ba24a68ac1409bdc54bb6285fe09af528c148aa1df66439df1133a91002f22a606282bfd7ed1c5d73c672a67d82ac67c0def0e522405d1b5fe2df2c95c11e3e8b"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0x81, 0x1, "f4576509fbe3f90b4198384a32c026cd5ab0f4a6790f7417498c74144ee889104c8ec425fc542311ee96e5f118f66cf34b23220bcc8b5193fb3f63b27358d354e44182e7f1dbea063991b74cf02c8947b4afac3e71adc145a2f6d00385104409a1f52b36aaed2186e51bb60a91647dd0d2a1fef61b5bb07dd0a1e07f8a"}]}, @NFTA_RANGE_TO_DATA={0x28, 0x4, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}]}, @NFTA_RANGE_OP={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, {0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}, {0x1c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_SOCKET_DREG={0x8, 0x2, 0x1, 0x0, 0x13}]}}}, {0x54, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x44, 0x2, 0x0, 0x1, [@NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x16}, @NFTA_TPROXY_FAMILY={0x8}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0xa}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_TPROXY_REG_ADDR={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_TPROXY_FAMILY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0x4}]}}}, {0x1c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REJECT_ICMP_CODE={0x5, 0x2, 0x7b}]}}}, {0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}, {0x48, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_CT_DIRECTION={0x5, 0x3, 0x1}]}}}]}, @NFTA_SET_ELEM_KEY_END={0x304, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6d, 0x1, "6a46e99e213f3a66d58de6ee6caec9013e71fe7f1c2a49d68742980932db09efabbd57731a9a3f0d25b195c398b091aa0b7da65f0772b8bcbce6f9be3f4aea37029e525bc06271f522dc81a3b2cdf771ea2e65a950623bda0c89b8cda743ce5ff0727190f6d8f5f85a"}, @NFTA_DATA_VALUE={0xc1, 0x1, "45b485721aa7686ad4e7de13fe6a14a08eb04a3e9351caec7fb37132c2d01fe3980acf35f22916df89a2622ef2f31220bdb4b619e1952d5262a350979424be9b8a2b45ec12dac915a0c3aaa360cc8f07d5e1920f995725f78c218418fed0afa4dd1e745c75dec8197e12553b9053233191aea97c398a003954fdf67bae630c8a5ae51a8659c152ff95e194e92572b35c2bbd7f7f6eced0b34025c5213977692bdea8dbf3aae4c3350a695b9d2bf70da4f437e95e20060146ffe118a715"}, @NFTA_DATA_VALUE={0xf5, 0x1, "ea3c208cb0ac9041d8b0f8a585d1f0835867d6db842d0d2832633700437357fb5c1c5c91a89c1a62f6461dba42ebaf5732c0bd296c9e9d735c107b82ba7c09deda9e440b5fd78790410a78786d0e6126fc6472ddc1fb1e8b86b85c01de75dfe70862989f5e3b7e85acb47155a6d26642fd89c0a7b04c76cd3fc111c6cebb5ac0279eac8482e56631548bda8abf5bea9dd8b262a9a92efbf6fbcaeff31704f4aea930e56eb9c6f04fbc39028451c6a5fbc329d51b6e153b2bf8faee5acf3947d50e18e3f3af12590396b5dab13894d449406b9b3724e484d4e28cf3565ccb64ce21a70598fec8762d60e1272ba8a27337ee"}, @NFTA_DATA_VALUE={0x75, 0x1, "cec496511d4d6370c2750d24842387687d11deca03eef46fc822195db1dfce7babeaad3d9c2a4c68120c323dca8bb4e28a5a9ccd7de9e1959635c2f2e9789608c92cf8848eb9c207daa1084700c275d1787d4cbb38d92d96a41ee8c4f6a022703722ec15f61fcc15d3deb92058d7803a69"}, @NFTA_DATA_VALUE={0x59, 0x1, "fd84752001ee4b7d1e9fa0ba4f23c87dd8964a5f7ef3ba9c9eb184385fb233b620f9c2489ed9d8f2994060fcd9025208ac9a41bda7991096897a3931ab55bf9b29e456a17c9710335443d2ba44efbcdb4ccb384a60"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_EXPR={0x5c, 0x7, 0x0, 0x1, @tunnel={{0xb}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_TUNNEL_KEY={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_TUNNEL_DREG={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_TUNNEL_MODE={0x8, 0x3, 0x1, 0x0, 0x2}]}}}]}, {0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}]}, {0x174, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @queue={{0xa}, @void}}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_SET_ELEM_EXPR={0x10, 0x7, 0x0, 0x1, @payload={{0xc}, @void}}, @NFTA_SET_ELEM_KEY={0x144, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xcd, 0x1, "adbdfe6eaa35925eb58f2c113b64e5919ad8e18b6aa756893a0202e9fcf150ca17206b00423e8dd1fa2b589acf2e1be26a12ad6e5d00feb77b895b3cdb321fc8f28a59ae10925d2133c842921f0244c5a4aae9a52186ed459cf37c84c02e480f5d7c7e61cf71f713d4f53e19f1758ba379aba07b88e74750c18ad875d67babdecbab858a5aa4ccbaab1b8350a14c555ed3c252622d194464278942a7d52ceb93efb11534e15cfc89dfbeba2d59d4812ae31dfb795f90f62d63ef1fd71ed923bbfa6cc8897f673ce0ca"}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x49, 0x1, "250de70f5561b4bf892076c0a9419a3eef54421edc4ef625b7bce72f215da0787f1f5a696f02099a2ba7e004416b55509e07c3190590de162992a49344485ed13ac477ba75"}]}]}, {0x1268, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0xe4, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xd, 0x1, "075007f76031798431"}, @NFTA_DATA_VALUE={0x7a, 0x1, "44a8dd83eede93e451eb5ba6a9e943816a7f6364456439c8ea03c5dbe653fa777acae6c0e1b4de140227170d973dddf3ca6724e3d9a77a7ddaf0f3ea02477f0ee611355904dc31df193ff59f01bcffe8b27fa9a2a67d9651eaf490305fd3a3b12478a1439425c60356836c46144afe647173a20a02bb"}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}, @NFTA_SET_ELEM_KEY={0x1180, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x95, 0x1, "4c7d5a4684e411569b825c89c977afa0ebd3ba24a767fc1a3c46d0cee01e733ec7ddcf50ecc845e1072ce2f71ca1d3224366310d0b0eacd1379048057a7c926b7d463e23b22eaf04bfb3b2edc33d3b73bde194dc022c7724538c4b9e1d3f2f9084ace393d1f933d51dc1f6f438fa6a5861842e3b73ef14ed4dab7e432d304eb062351fa01f33108088af0b2d6178c3d805"}, @NFTA_DATA_VALUE={0x8d, 0x1, "80da1a24108544ab31430fcbc927615a07eeba60bb5778c7db8d7fb353ae40ea731e73f823b0d5e8b308a932a708ded0296c52bd3e49b1904e48ced613e2029f3b8e81075b79174b1e8a201da4db31f08c567409acb3a90f5618f1f02844297def7f6185fab3058a3e4cb2d92d491422567a58622792e5136bd8c3b587edab82426261ca35cc003ef3"}, @NFTA_DATA_VALUE={0x1001, 0x1, "6413297d44798b558ac55a64cb3101c67add791668130fe13b145c16a432680acc3658346a3fde22b6685b0b33f29d47963eaf99e11ca72515478290db69b8c5148821040a77d7a75b0e9be0f4b7d2a00af65f1277ef9f622105db14f7c7f425fb1e1d2438b2aab52d873068698465e0eb47a06e62dac22d8eea1f63883d09162c0419a1b6a37ed5f533436a6af680cef111e4289d8c11daf2f026f6b843a6b90770e7fa0d7fb25790dbe784325fa3e7185ceb27f40627a1ad5699dd0f7a8c465ba2247d68b384bc69b3904dcdebc9901542a2b5d5093535ea754ef5bccd9157abe4f6f447361597d0ffbd92aaf7f5ac7cc149d28b617e4f5f78dac23bef1f7e09bfd9e14d9e639fe8039cea53975b3a57017712c6755b271c1a2f4e33d3d2dd7e92a4140072a70dc08e03c8b0375aa9d4bfa2ec80e79a24a69a79b1a7b54f26100dee4f85b4d7cccd7c439ccc213a87a632fb5fcce847289323547de72199c9bdabca8155dd20ac6d30b2ad4c880ff99f78b088a17ff1cd675b3635281d3752a42982142c446e9e30bb6144b71588a8346b33aa25628712a6ee6718882cec7406ec7b3d8a22ba4d4ee104144363c1eae637be975d439e5376c3ec680ce26bd0499120c32d22ac6041673d306a9055a66b6c2768289af7938733dbf1a8d5d983f1d1991a7db197b5e83e238ee030ec0450ce95cbddfb3ebeca78089c62d4634869ba0bfb62d9a94d25725adc62777ea0856438f12c6c2883bd8cdfcedadfeecf4303b521211d8d4c18445e58cc235234627946a99f3fbf59e7eed817ea06b1b30cfc5288ffecc05dd92d882533e918b0f146daee8e784aabf506c256e19b0b9e9acfb040d8573dd1eeee881fafe9e713a736c1339565bf5cc1ca4757dfb493dc30f8ac1ac880a1a836c3676928c664cd9154c36330d36a84e5b24b3dad70da9c30556f3e21fd0ae22142ce5ccf5accf66b65fef32c2984dc5329f6fcdb3889bd09045bf74a08f8cbdaa72c56ed72c35617eaff839eef503a4a60cbc66d74a681aa840edd0ca76fecc7cb9d45e828a3cb95d6f936a78f8b89a50f34dcd287e9f37537c9a34a9053ce99b1fc3bfb06bb7ba454e2ff018a7b56a3bf4f6a57eebed943a9e2a1a4b12892374ddaadb9a4700411e5b98a2b575278c2663a1b265d7bfe19596e8ee0b4d78f59a580830edfb22d7455cedde97e3c1fd6b4f0c41452682270ca27288df21833af92f015ee3cd563a012e277b5337f59eb1d3cbbf281c665a64b4ac2a53c7380ebc492f78e3a5e689cd3e42d0262a44742af740e1f78ed75db80a44818079f3701294f185ee8f781cf2cb43c2669269d0675bfb67d692489a136e754d04dd6f20d06d74284eb322835ba8dfd763cd5602710dd557324c4687f99fe2cc70d8e80f6aca483dbf51cdbecde2e334094ba16db2ee42671d49da9b71013845962ddda6baa2378409371d02a34cf27e6e9e3ca92861a091d66d6050dc4180f22aeebbcbee0efbafaac9529466b120b3b9c44b0c5123f8382932761d5ab00363cc20c3ab7e5f51a4b1262cbccae254b891f72a1086141e35772281be77f5031b693cb62923090533b92f3ed87a8bb5494b676d5c08e61caf5dc0b1967553304944380979e4a7608df45b629dfecf5ea0265965a6ec3dc7cfd3fee6b64ee5be319c3c07e75cad5a8f83829debbb56e33c163b2953dc38030b36a8692517f6d8d93643a148b8e956e9f647dcbc063697dba90aa97bc545db7f718c86220e2d5557d17e40b238e7a061bd7f155bc42fd2eff3292733241ea52f3b6914d305c1c50314a77db58aa8ab3813eca090fb60340aedd3f310462a7ffb0c9517ad5862b1a2fdfb4bd72bfdc077be0bdeeef0d47b6ff72e8351d89a65c2ea12e3fae54481fb2ab890b7b635827ac265ebc37cfe2a8c6c84bb24aebc2c7a13505d803965170dbdcee0c53059d3de913eecc70ca7f52bc32ea6e21e29be741f96c379669496005bd48ae229b3b1b6e65e11dff21df5e5ce6bc42fed8669c665a43cf824d7bd59edaf4efffef47eb5caf6d62c032cb446155e39733658fe9fb605a99a9e3defc25d99662282ed96e6c88ce26a434f723c113be2632c84a88f066ca24170a260fba2d10965c4e4bebf2568064350510d7b8225f27bb989d9a7e084ccdd5608b15359f6a949d8159493aeb37607ae49843b958e77d511760071da5c86c3ff70ad48d84cf4c37dba52ceae2f187346283a257053fdbce4f144f2b40483c88ed390fc38df3dfe2c20c81514a7c1a1edd8889b36cc1653a5f89c9fc49d015cd4b533b0ba3a2b75c6d63025b1306300cd2bd3859bfa680926d0fbaa3c018fb9088d9a100a7eea84f109c9594d623b2a2a97485fd4a6d0dc0621ebeae96c6b6c800581b2068217328f4f3b1afc926107ea89904f4117cfd5141d39e5d84cb55e1116482d82cb775c7c3b8ca7cef4de141653772b29cae56f089f9ce4b78a2367cd8388b6741aa5c71a8d129cda68fa9110cf5297450887f5a39cb492be0c1e45290e8299b79a1d4f2904196d2a7e7078344944c78e834a8581db20db3c17d88e0e7722ca8f46c730be686ff6c9a7188d0a975c464381c8ca194929c44b245126a0ab800b93b11636a495530261d96047f851b384155012520cd150037e398ac773b2db9d32a48190fc5130a08c753dfcbd18b01194ad4a619046c14ccad8ddbb638edec170d7d19406f748b9a61ae0808d83ed913e9dd0c32f56cca37c216d106eac827308756e970198acae40d53fe85aaa91ee36c1a6b5feabb94e7b4a129a6cf1874e1e21ecf02ee7ebcb24c513b1f606320b4c29bd85763abfac4e826e44a8ac53c2ffa4ad1f22ca467332c95a1575b3694712383a934d7443784107612f78ce293036940886ea12428f8994282171ed54a7e7e10d43a817a3cf62c4090ea6140b9250f4a5dd6318c1e9682e822bdd70b333f661b9e3b566e766636be8893f7b82ff274ce79dbed8084f3c4177a177ae270231963ccfc07e3d43973ea6b650a9b51d8ace99ea77a164feb6f431291107ee711bba7993170cd30b0d03393d7d6a51986e9970c82be3057f7bd34c23e39da44f257e94b6855bea0cbe39e36f541e8026706c8c0ce3e77bd15b3dd34ae8e747b94f1ec9049fae38614b4222149d9e6b4c1862377d8c2ed17a7ede5adfc640771348863b13d11a9227dcb47e2c4f90264c8a36aeae8f4f93fd1e79ac88dbf0fc3879d080b3410ea52fefae35ea2af7757fd9296ab9d2888f401ab21f4ba9090d6a57f6692c9414082adc3ee24937ca1ad7736f3d797f24cf62b440d81f522d4f356d4663be6cf00d89738b864faf5637274eac38c470c803c1df5dfcf9588202d807af329b2a636ac65b5a9690b00a37de9c4ed555d3d9db57b207b6eb0f957143a0d5441bc5a87c91168f824fa033d27dc7e2fb380b77039cb2259043c4c9b0a51a27539a1155b740a3cd09eccf63a948003ba5495be86e5bd61e71dbb117a2a58682ce98de33fafa1ad605570dc4848a5dc0bfc565d04eb4d6894eef2d4dbffff962d3d7b45d7b9c435c99be6ea511f7fb1a1a420b29c44832bd350bb02d3154ea5b09de055bf3001e8b9a1b355e7404add867924bedbce5f52f969094bcd5bc418fdf59659bc70a8a2d5c7c4d20572b9c34f698147fef2cefeff0e85f79c5670130e4b3b43ed10de5229580cbb5f04eea0a658678a3733052cda10c0318ad495f893f8638b44054d9408d75b771c2396c00262cad7cf2e45a737c088e14b22fbfa9827d7d77a94e2bcb166d0f1b37c23856a2a7348781d4cf98ab5fc05377d8ef71d6a09ee2ed66f8aaaecfbf57b8d7f201c5026219a4e3821b7e819ae675dade3d0b75c7892bf58a8cd4d28576352d64207d463a3332a1fe5c0f265efc45a034d763c6c238eb5bc81fb6cc598ed61e897a2affbac9dce77f9f807d5c02e437669fd0af9de5268272161c892a3053a1c16657edc5813d4e4df1d683027d17b31366dd0730744f08382734242efff8fe1e88fd6b88370645d8e50d22bcc4439fa1d748c7a2a697bbd16e1c307875b64fadbfef73f3482bef8791bb6181c7ee6a1f6abda6952dd362ee88b7cbf388988672ca33020ec8045b06e88c367ec4ec1a3fd53cba40b5a7cf234cbca3c298ec258efd1301a23cda6d9f03ea788a4e409518ac150fa73211056045e85ab5f77ab6751846477892b4ccb4f5940751b22fc077349cef75cceff03e28bc2e8bc2c51219a392df4fa2e0ee0d3167e477f6b9e5f2a83c42eeb6d44931709baf6a316a0d93300f7f4dc5d59d7158537b860a23f045ed043c45620a70a4798c5fd0f54af4631bd92c97fc310c90f3f1dda0ccd5da348fff2621b08b48244348d44796f76583d33c42d77f29258177165171eeeff260f250b1c903c359a262936bc7cebc3ea9cc1943f176eeda791679cc6db9da90aaa78de4cfe6484a7b11ace0c005cc9c3286fd09944203d88275294c88d934da06522398add5c28e886354d966d5e0784f366d413a3fd297bf24251c2d980fed6673a0d730733acf802494a63e8a8d2aaf8e228db31a7263d31151eb636340da3fb49e7f0bb8f78e0d427b5b7913fb9bc09d614a6c68b14a63ba213a333df274bb9c210056e8e11ca9239e66ffafc8f24ca55f70ca709b93e1ecd05c02d20a498f69d0ae522b2cde38201812d34ed225f20aef7655ea559c8c12fb174656c029217e8190a5b3f1cb8975c67743d5fa39fab1c6396964527994336997c09d373c4cf799fe8bb2dae13538437fd057fd796c9be21b7b95eb32f932dfef7ebc0612de7a6ba73917f960e0859f93fcb15b9c07029543760d34863c4194af6dd7c8e0031f8e2d7de35a4c0fc6a9483c71d7536303cdbbcfa42b9b739586119daa65924f980e1fe7d1fbb3f5cb54ad81d3e7adad45f7a41f6c62c2513b96267e2ce49c956d34b7bb968d50fc8add4563fbe9b39472c6ad3700140e669978fa20552e3b60fd57a1f00437e487206df3d32f638161deadc33d31568010939c28b54044e1ae51a4f6a2eb75fbe9ca3796538d988f61c5a1594116f7e1d3dc2769d5030f495a9eea654345da93b5384186ea0b68e9ccc44dd13396a1fefcf15a3e6e0dbbfcd236f4b4f03dad83fa2fe2d3d92a9ada7c5c66d7c451504c4998b3c97a0448335670d8378d86169fbc7582b0e4b9a0692ea796f3a36a149a54d2633060c29b802c0628b6f3f14568d97515ec36654d5cb33f5265aca708dbc326282b272c644845b3b586bf930dce0e07015de059e91f5e58dbff86d6ac64ca7f87c2575c7492452b3ac79a57b6ddd3fe2c662c4ab927238266c909cf6f0fd615c7562ea8d5f015c81b6472f99e9c61cb62dfc010dd6d61ce4e91e1d29be718ac3c8b9bd31cc9f512a5de4677f0d6a4a539caa3327ae46fc0ef6811154f490d3bb59af99457c843f044bd023894f5244f37907dd09edfe6bbe946de04804e5de67274c4dc802485fdc4a4ca24a35b129b5849ee370ff89221b7cf258bc19f60ca8be5a5d3742a344cfac902f13f986c51ab97184c2a4a3e45e73e21d31292a2b79cd907a4d2d1d7b0484cb79535ae002b49a7166b0c9631f24f821b467ad99c431cd6797da19a445d2dee1877983e040695f87324a5d0d437cf312c9ad60700edf67019e67cb789ca00151780379cfa6a038483a2f88b94da6ea0c4ceedf31f78ad8a4de53abc36a1bfe4ac540b7ed67f5e03d805fc38f3d373db189e950231f7dd007a25a32d056fde2673dd9691b"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x2068}, 0x1, 0x0, 0x0, 0x80}, 0x48000)

874.652381ms ago: executing program 4 (id=2861):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000010203f530ff2b642cf53a161684566e7b83036686fc19a26f5d00199d6e18f2800500019f03f6e6837380fa1d223a272a6390ab896a765fd2d4b81a1f40c48fa6811a86d10a0000002a58e91bccb28d3df0af9d5d8cb0e20d661d90a92ab8d957283a9777174df7dfe20a4a6ae3b41808906b704203419be9c14ff47e1cd1ee5334ad9c25096e000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x800}, 0xefa6fc892f68621a)

874.192515ms ago: executing program 2 (id=2862):
r0 = socket(0x1d, 0x2, 0x6)
r1 = epoll_create(0x2)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000001840)={0x90000001})
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', <r2=>0x0})
bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r2, 0x1, {0x0, 0x0, 0x1}, 0xfd}, 0x18)
sendmsg$NFT_BATCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x500, 0x0, 0x80}, 0x48000)

818.505075ms ago: executing program 3 (id=2863):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0)
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f00000004c0)='./file1\x00', 0x804c10, &(0x7f0000000180)=ANY=[], 0xfe, 0x669, &(0x7f0000000640)="$eJzs3c1vHGcdB/DvrDd2Ni3BTZM2oEq1GgkQFolf5IK5EBBCPlSoKgfOVuI0VjZpsV3kVog6vF576B9QDr4gTkjcIxUOXODWG/KxEhKXXjCnRTs7a6/XL10njb1pP59o9nmeeWae+T2/2Zl9saIN8IW1MJn6gxRZmHxlvd3e2pxtbm3O3u3Wk4wl2UjqSWpJiv+2Wq0Pk+tJsTNM0Vfu8/7y/GsffbL1cadVr5Zy+9pR+/WpttvoW73RXTeRZKQqH8Ge8W488njFTuTXk1ypSjh1Z5K09vjZ35/e6enROGjvsycSI/B4FZ3XzX3Gk3PVhd5+H9B95a2dbHSDGxtwu/53EAAAAPCkGeQz8Je3s5314vwJhAMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACfCxu7v/9fVEutW59I0f39/9FqXar6cHnxeJs/eFxxAAAAAAAAAMAJenE721nP+W67VZR/83+pbFwsH5/KW1nNUlZyNetZzFrWspLpJOM9A42uL66trUwPsOfMgXvOfEqgY1XZ+GzmDQAAAAAAAACfM7/Kwu7f/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYBgUyUinSHG/Z/V4avUkZ5OMtldsJP/s1p9kD047AAAAADgBY8l21nO+224VuZjkufI7gLN5K/eyluWspZml3Cy/F+h86q9tbc42tzZn77aX/eN+/z/HCqMcMZ3vHg4+8uVyi0ZuZblcczU38kaauZlauWfb5Sqe7qh9cd1vx1R8rzJgZDersj3z96pyn3ePNdnDHPPLlPEyI2d2MjJVxdbOxjPdM3PwGTrm2ek/0nRqO8Fe7DvS6N7JPFTOz1Vlez6/Oyznp6I/EzM9z77njs558vW//OmnU1V9eKY0mJGqbJWPjf2ZmO3JxPODZOJ2896d27dWJ5+0TOwzVWbi0k57IT/KTzKZibyalSzn51nMWpYykR+WtcXq5Bc9l/whmbq+p/Xqp0UyWj1DOyfreDG9VO57Psv5cd7IzSzl5fLfTKbz7cxlLvM9Z/jS0We4vOprh1z1rS8dGPyVb1SVRpLfV+VwaOf1mZ689t5zx8u+3jW7WbowQJaOeW+sf7WqtI/x66ocDv2ZmO7JxLNHZ+IP5W1ltXnvzsrtxTcHO9yF96pK+zr6bTIxPDeS9vPlQvtkla29z45237MH9k2XfRd3+mr7+i7t9HWu1I1Dr9TR6j3c/pFmyr7nD+ybLfsu9/Qd9H4LgKF37pvnRhv/bvyj8UHjN43bjVfO/mDsO2MvjObMX898tz418rXaC8Wf80F+ufv5HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeHirb79zZ7HZXFrpq7RarXcP6RqwUq+O8JC7P0IlE/96qn3kA7q6P2d2gvF85enk5OY+rJX/tVqtak1xyDZ//NvQJKpVGYrUnVLl9O5JwMm4tnb3zWurb7/zreW7i68vvb50b35ubn5qfu7l2Wu3lptLU53H044SeBx2X/RPOxIAAAAAAAAAAABgUCfx3wlOe44AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAk21hMvUHKTI9dXWq3d7anG22l259d8t6klqS4hdJ8WFyPZ0l4z3DFYcd5/3l+dc++mTr492x6t3ta0ftN5iNaslEkpFOef+zGu9GVR6pOGoKxc4M2wm70k0cnLb/BwAA//+o5gZ+")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000009500000b000000002e3924"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x14b0}}, 0x0)
r7 = msgget$private(0x0, 0x3ac)
r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, 0x0, 0x0)
msgctl$IPC_STAT(r7, 0x2, 0x0)
syz_extract_tcp_res(0x0, 0x6, 0x6)
socket$nl_netfilter(0x10, 0x3, 0xc)
r9 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC(r9, 0x29, 0xcc, 0x0, 0x0)
setsockopt$MRT6_ADD_MFC(r9, 0x29, 0xcc, &(0x7f0000000280)={{0xa, 0x0, 0x0, @private1}, {0xa, 0x0, 0x0, @mcast2, 0x3}, 0x0, {[0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x10]}}, 0x5c)
setsockopt$MRT6_ADD_MFC(r9, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2}, {0xa, 0x0, 0x0, @empty}}, 0x5c)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000100)=0x82)

770.491888ms ago: executing program 0 (id=2864):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_emit_ethernet(0x86, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaa"], 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x0, 'ip_vti0\x00', {0x1}, 0x3})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010026bd6000000000002d9300000c000180080001"], 0x20}, 0x1, 0x0, 0x0, 0xd4}, 0x24008000)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r1, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002001100000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x8090)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
r5 = syz_open_dev$media(&(0x7f00000002c0), 0x4, 0x1)
ioctl$MEDIA_IOC_ENUM_LINKS(r5, 0xc0287c02, &(0x7f0000000300)={0x80000000, 0x0, &(0x7f0000000480)=[{{}, {<r6=>0x80000000}}]})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x2c, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x2c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000440)={'wlan0\x00', <r10=>0x0})
sendmsg$NL80211_CMD_GET_MPATH(r1, &(0x7f00000005c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x40, r8, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x5, 0x2}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x40}}, 0x4880)
ioctl$MEDIA_IOC_ENUM_LINKS(r5, 0xc0287c02, &(0x7f0000000280)={r6, 0x0, &(0x7f0000000200)=[{{<r11=>0x80000000, <r12=>0x0}, {0x80000000, <r13=>0x0}}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000400)={{0x80000000, r12, 0x3}, {r11, r13}})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00'})
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000140)={[{@dax_inode}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@nombcache}, {@orlov}, {@stripe={'stripe', 0x3d, 0x7582d2b8}}, {@nobh}, {@stripe={'stripe', 0x3d, 0x10}}]}, 0x64, 0x515, &(0x7f0000000740)="$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")
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0xc28a4, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000))
lsetxattr$security_capability(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, 0x23, 0x1)
sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[], 0xb0}, 0x1, 0x0, 0x0, 0x800}, 0xc)

708.547737ms ago: executing program 1 (id=2865):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1)
r2 = dup(r1) (async, rerun: 32)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32)
listen(r3, 0x0) (async)
r4 = syz_io_uring_setup(0x892, &(0x7f0000000140)={0x0, 0xaee2, 0x800, 0xffffffff, 0xbfe00000}, &(0x7f0000000000)=<r5=>0x0, &(0x7f0000000280)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async)
syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r4, 0x47f6, 0x0, 0x2, 0x0, 0x300) (async)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4040081) (async)
r7 = fanotify_init(0x40, 0x101000)
fanotify_mark(r7, 0x1, 0x8001021, r2, 0x0)
read$FUSE(r2, &(0x7f0000000c80)={0x2020}, 0x2020) (async, rerun: 64)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) (rerun: 64)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c40)={0x38, r8, 0xc4fc9e906872338b, 0x20, 0x0, {{0x15}, {@void, @void}}, [@NL80211_ATTR_TID_CONFIG={0x24, 0x11d, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x1c, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x18, 0x3, 0x0, 0x0, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xff, 0x2004, 0x7, 0x45b, 0x4, 0x8, 0x8, 0x4]}}]}]}]}]}]}, 0x38}}, 0x0)

700.792672ms ago: executing program 2 (id=2866):
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file2\x00', 0x10, &(0x7f00000002c0)={[{@nodiscard}, {@nocheckpoint_merge}, {@fault_type={'fault_type', 0x3d, 0x7fff}}, {@background_gc_off}, {@noflush_merge}, {@fault_injection={'fault_injection', 0x3d, 0x4ee}}, {@acl}, {@noacl}, {@compress_cache}, {@alloc_mode_def}, {@noinline_xattr}, {@grpjquota}, {@checkpoint_diasble}]}, 0x4, 0x5510, &(0x7f00000020c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x103a42, 0x0)
ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000c40)='memory.current\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x4008032, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0)
write$P9_RREADLINK(r2, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab)
syz_clone(0x2c9a4080, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0)
r3 = socket$rds(0x15, 0x5, 0x0)
setsockopt$RDS_RECVERR(r3, 0x114, 0x5, &(0x7f00000003c0), 0x4)
r4 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x1)
ioctl$I2C_RDWR(r4, 0x707, &(0x7f0000000080)={&(0x7f00000000c0)=[{0x7fff, 0x5850, 0x1, &(0x7f0000000780)="e0"}], 0x1})
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_int(r5, 0x29, 0x1a, &(0x7f0000000280)=0x1, 0x4)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x85, &(0x7f0000000400)={0x0, @in6={{0xa, 0x4e22, 0xc, @ipv4={'\x00', '\xff\xff', @loopback}, 0x80000000}}, 0x1, 0x100}, 0x90)

0s ago: executing program 4 (id=2867):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc0042, 0xc7)
close(r2)
epoll_create1(0x0)
mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480), 0x84, &(0x7f0000000600)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r2}})
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r5 = socket(0x2, 0x80805, 0x0)
syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x22000c0, &(0x7f00000000c0)={[{@codepage={'codepage', 0x3d, 'cp437'}}, {@iocharset={'iocharset', 0x3d, 'default'}}]}, 0x4, 0x32d, &(0x7f0000000540)="$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")
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000040)={0x0, 0x0, "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", "0615e456c196e819a321fdb3690bfab19538829a732a01781564ef7738cb5b82a704b3952f81c68bb4ceeaad63206f88201638e87c4981cbf9332cbc9c4d69e392bd33237ece7ad91e44edac0da8dacad81adf2e08c21ad6b44ce1f90bd618c255ca40cdb411485fb48a51d329c816b3488c7d032ef69c502c6e1236bd381efd410165988847c1dcb98a18ca2b853910e52044fa3b3026cb88de269537c8f26ffc3b15cbf279832bfc90bd95939043182e88050dfd2a4784a5d1453610fb1f1c2bac36c3ecd3e6fb756ef8880debeef3636afd981d8af4ab119928448f90351aec113335eacf52a18c87738d9679d31ce0108dc556e597655ba11bacc032a16fbefc64776f363610a15b37bcd36e6a7cba931151b9c9ba5779d550e9ab21603a43a25f3b4895d8dc4f3ce0e7d5e964e888169ea79a0848e9338b3d34d62e963fbf98834f4455419907f0ffdb76373af77a34edee5789f56e7f01bdab9614a0d460f791a06e6cf5243bf2b3a1624a80ec7e1116f1c81f5ef4b895be74bf67eea9193428b58a8b62b7976d3d2e59796c46ec918c83cd49c3f43dbd2967586966c19ace7b0bef5f94eb333b362649f1bfa114f8b1f126e97ec672cff77e2130823fa7a1df6760c6a8917815e9f0a409ed32b133df7dc9afceffcd472b35145c83c9167764d25ce214133c6170adeb6653b30b226a3b6ff1363ac862a540c7fab584cd051ce7ee951e0f121d43cff75afbdec6bc6f6e8f7db58c8086751320d22ee8582e915cabc536e3767e9a9230c9ae8b92398f0ca2a7141fa4588af7afde10e5ec2a6fe85ba5712e126629d4e3998fc4721cb638f2ef8356049e3448466e2c400d5e8baf843fa399907cb526b791c5350ce29204cb6fe50b892a69ec6dbecc28f032a745738faa12c2a34222942fef0ec0511da5fe0b565ceac429da7cc25cfe0320b40a514723e2392a6a361032343edb79fd83cd0a354837153542fd61b3156b54c566036e493250c3a3214738e3cacc24a50d5dfd17d5008b4ca629c3062f3417cb67c48b8b888ae51256bb4e6c68e95a71a00383ad9df263f6a775ded64fef20ed5cb5f31c33cb86f839d00a12e40cd31219113619c4e0585454cb1776278bfd7f5c4275792afb790e83ff0fc6925355c7aee7a070477d9ec2292366e39b9dc66f7adcf449a1a718e5217183faf0f679efc5cef20bcdcf2d12ea0684084ec0d693256e280025b23b5a08b7b1ebe7d41fb045793f971d6ee066604818cb09d86c1eda99a44c35476a113fd5d1a7543f8fd9424ebb78dd9e00d719502a6eafa743a061fa3fa55e4deaa0a011b6b9d633f10e0c9446b5a2e3f6d6014ab00695366c1a6bf0c32f703aebb7988c7d4d322681458e85626302c70f37628835e1fcfff4da3099c0b4af433eb9a51f9609f2c0c09a98b18880c846b34d6ac0210f073765666100976ee1d928893f983580ea47a012144633b98e02c3041969534ab985eb3a73e0bac892dac949f85db949285a6a7a490b1075467226af23df82d8dd09b7282490fbb3ada9ed4cae8f761aefbe0701de6b132f12044c58ac1c2607c8f51361de5bed021dea13fd0a440263cf0b304522a324b581ab274e7bdae5994316657b5c0ab0220d9b08739729f7a35d436878c182aec4f08dd161c11ee5b7937fae7835e8bfe98a44c8d4bbb2e0eee0cb5d7c93517e96a9fc8132e60f3ef7c735bea1934b37df451f981c8d9210e61278c871e6dad6ceb89aa4d7245658a63e65cec7b81d307426a60a31cc917844a14e1d9ad83bef1c9f736d1836687c950d1275caece0d46ab9f3b0e95d9cf560eb8134e8346b35e0a6f60e6a87a14c4aeb3e0d06158390660a52a6e44b524c1e16de2bf99870f78fc81d267072bc63e97d3f26d23fd59799ff2c847d6a724cebc2377a582ba73d99a610a095c28d66c60910ac64b7d18847fa98fd8528b72e0a149b082c731575b2e2763e67c821ba29eecd8b8c87981c4fb1fbbaaa4e8aa077ec98de1362fc7af7a0ac5e3297fd0d924124b2e255b5cc4f6b0873f3d34418d5ae0d6f734628f38cb9b856b2db3fbb2fafb75e83eabc51a348e55789e997fa25cbe6e5031bd2e3544e2686f964a65d1abf7f96a20a8b270b1522ace4adf6fdade5cd3f101574960d13267e2382f70027ebe5ef7f9418e14e6a8a130d2aec2253c8fe21825e3295774db0c9b1340ea28a96589ba0d9f79aa61b92aea6f704ef7f716d849b8c77e6922e198a086d8133491d0bb85b925825a6d307d7cc8f09c655aa3edabf84c75560dfb279ee3e8b825323279edc58c3161e72cf9ae02ef80d500da922c0abeb8b164abd9c17ef7c02e89000d67b0c2ddd078cacbf37c4826be3845948d598980d63c1d7aade89d0637d80a4c102a35eb027a08ef90cc20d17fc514926914e68e5de54b861200ffa4ce1cbc16e4ecf342a1176cdb561f7dea38b3ae0fd81260f72d34e6f33d364cf313d3b3161410dcbf5f0f0579a1d235b49bb5d27f85825b94f1899e7846d0292ad912d934574f9d55d2152dbfb39d662e6e0f2496182d012af8b4bebbdfa1d68e3e988869fb5cd9612db97e6cc574444f4b5025ec9827bafc55341bf6ad3fd4fab2ee43f343cb9bcec0c38384b5699e5c6d5973ba591978275c51a40200d340b9ed3681f08c69f58320f538f9cd78a34eb6ed55710d2478ea4bd15813921817b42f88f1bb038433b519668f0a2e8693b9a19c7bcf96eec04bda625b31c32f4286be922ab2c87aa30310c8f46551450d5bc26b5fbfdedaae0f756384023bb9a28d3200cfeaedd63d6afe076513e8ad73d04607cd4ede16344e60d87b5357e82b1089258c56d851a435e23ce0919825e04471dd61a44c43e87c2959d4e89311a30ee8be010094d0ef109bb210dda58b21b685b9e9c078c9ded6117d9a88dd7799291969851cd4c3f22b5f870a275a692188dafcf6e89ba87b0eb61011de031fda25fb3349901d40da2bbdb76eda417c9fafd90fb23504ab150ca0033b65ccd4e990cb2ba86ba3aaa79d0df4f2e4e4afa565e66d28aa167f835d080bf1d41d0e52dbf81c671f8eacae234bf4fc328302671fab46613b73daf2ace80aff2f80f6a9d84b82480178cc612aa90adfc80ab3bba7d1527fc6ab04f009011bf093494a0d329df4e53d855b1c0ff6a25d22052b3a778e1ca2fbe59c9eeedf99e13682d06da269560524ffa0f404b73b946edf900ee958ceba09a051e27a620fb78e7a352c182c8c2981ce822eeaf6323965b4b3f322d40d406a158b6f3cf5d74822de952fefc341d0dead6c1c8fed8e48e0a85b51c1dcc7796d3f45bb1f50467a475da76c356c9e031b096867da1dbb89c3a038d475dbcdb2df1278d5dba55c2fb5ba6a9778c2a244198491f0f711cdb2ef0332f347afffb1b098b4c59041ccb0c286bb2dd40e7ec713f6ffe0b1067678c748615dae3c1e090f3739a9035767fb9972580d19fdef49a5071f99c3706b8fa4991f430721cf3ca11af0e3bd7c4d0cd0ab5b7d98ee66730c20a098110e4a15ce0bfc88c41fe375f261fe3557e14eb5ff4a2cdf6a008fd7b6702951b8456e940fbd269a0f3ed515ac03cfecce67027d579e1226bd7b7381827453550343566508d38790ee838c3bf85c6c91a45e7a44752f57313533a3e82e4042e65d346afb20c0527575f79080aef4e1aa8d5868d190c8d37bdae7592e41bed37b9d4c30d8126d3debde02de325f5ef1e48133e2a41cd55347bd23dcce57a00189619db629c530dc112d22ac72bce353681264bc5690569c5c1cb1350c96748ad025175be40b3ba84408d0f56762cc720e96c128447be7128748e185be2640115556bac6423d060207e629b0144e501c1c49c6abd15c7982b01e22da2ad04bb28df1a27f31e18040c16406071d798bb40d901d001e22cc5ed870d08702f49f0021814cdd814901a13c7ab061bb4b8172c639b3449e24f656fee58186e69e6874ea95d946da781b49ca080ffb4a3c87746c661f43e9be52d0ba2ee368b9c143687c8846abac599069decf41e69fddcadf31c5f715917df12df4eedbfcc5805fe8e661b8fcd7b130d7bcc4a9a152de93a15dddacf3cf52479956185a3c5000d18ddceac36d5858c0d8761bca7446e3d30f3e8f48d5e8f86a60cbe46f038b1028ffd35590bdacfeebb86e28d42a923bdc3f9a307b919341a2a7dda096d41070db245c2c424aebe4a4bb9863169454d09f25fd0aa2da7bfc97ad7aca886dd998e041133e07899ad48f7cda600de48ac3951152dfbe6331b8acae24cfd2dd2b14696c75040685c756942a0d049ee9863a2e480388f93876f3910ecb3a59fa16c25b2b3636a542f92744495e10a4ce37f19f5c2256e2d61775d388e2a86b52f76add2f956aa02501f5badb94da12595b2bbf88b05dc70caae6766fd3df4f299d0ff71c8787249b255ea49b3d33b3f1a8c9403cb75d64264465c3578538382b23d721f8a49134020ca2d9e887d9949624ac6d63322b6507e277a0020db9bfa2928736b96c72fa3406a95adfe6b374ffa27001d37d3bbe725e75c257834572026c511f57dce67153a4008f9e75e07ed9237f62cfb5800ee667c137fc78bc4fd4ebf4d228979ab0ccafbcd8b8daad76fb2abcfc585377ea6e19f170db898b950a7b0f4e75466a2ba26e7d60e0a6f5c54a3fe78677f3362c5b01ae791b62ee8a5d0fd65b739ece4f3b758d05a8e4e4ea7e4866ee67750ce2769f72a9f45780eadfae73b42d4dd4c614c797c694ece8af88cc732edabfa26ace57de54835c7551154dfa3be11a0d3b5845ac97b2da84410a652e72cd563acbb2b02bb59370cebaaa80014e3ad280944eae6fbf8d5f85237257bb5b8e5ec3e52dc06f8394176b325a577804e9eb78d7015172d17ed15f905f705d56687f53988bb207c74fbeb2b03a700258e835362886239f4d8f1c2cf6d4d10ff26d2579ea40a5fb99e5b6d01cdeda050d3faa78ed674f2899be08332086c8bf0410a7d06099c50a2d949d49a0f21b43bcdfbdf435875cf5a9def46db63746574ee8a5b1fbcef411154e914dd9e5bb1b1bd2944581083fb66a017e7972df3daefc487e4198cb281d3a80637d52b41738b7f1a57c867d5b2ee5d72465657593339506fd0c3807cd6445eb54cfb5ca9d35ef93eec6383224ebf85197eb6ed75f6c324f6a0345a25be6bb52ed347e57ccb059b903fb7db4e9f46513a4158ce29c1f5d6081b556bbc471e89225cad81aed34dae0f90ee8e7237b3b286e29b49d7a1700c537b28571f7d7e2a55e10792d6f7779ddefa3febdea5693048372a45903c04f1035a96c6cfbe6f6c2b754581aac02f8a70e698be6e37fd411cf4b76317b47683f6b0f80dfdeef3a9767c7e5c30dff786093a21477431fea04580239537"})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, 0x0, &(0x7f0000000040))
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1)
r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r8 = dup(r7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r8, 0x2000)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1)
ioctl$KVM_PRE_FAULT_MEMORY(r6, 0xc040aed5, &(0x7f00000000c0)={0xf000, 0x118000})

kernel console output (not intermixed with test programs):

g syz syz (Serial Number syz)
[  444.269204][T12932] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2364'.
[  444.443405][   T37] etas_es58x 2-1:0.2: could not retrieve the product info string
[  445.267515][   T37] usb 2-1: USB disconnect, device number 19
[  445.269776][   T37] etas_es58x 2-1:0.2: Disconnecting syz syz
[  446.006782][T12924] NILFS (loop4): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  446.019479][T12924] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=4)
[  446.039722][T12924] Remounting filesystem read-only
[  446.050783][ T5834] NILFS (loop4): disposed unprocessed dirty file(s) when stopping log writer
[  446.179957][   T37] usb 2-1: new full-speed USB device number 20 using dummy_hcd
[  446.212085][T12953] loop0: detected capacity change from 0 to 32768
[  446.240132][T12953] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  446.269055][T12957] loop4: detected capacity change from 0 to 4096
[  446.300448][T12953] XFS (loop0): Ending clean mount
[  446.316767][T12953] XFS (loop0): Quotacheck needed: Please wait.
[  446.358234][   T37] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  446.412084][   T37] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2
[  446.434716][   T37] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  446.455678][T12953] XFS (loop0): Quotacheck: Done.
[  446.469284][   T37] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  446.489548][   T37] usb 2-1: config 0 descriptor??
[  446.511040][   T37] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  446.517733][   T37] dvb-usb: bulk message failed: -22 (3/0)
[  446.538067][ T5824] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  446.550331][   T37] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  446.561285][   T37] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  446.589133][   T37] usb 2-1: media controller created
[  446.607808][   T37] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  446.634068][   T37] dvb-usb: bulk message failed: -22 (6/0)
[  446.646995][   T37] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  446.654981][T12979] FAULT_INJECTION: forcing a failure.
[  446.654981][T12979] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  446.682107][   T37] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input12
[  446.703588][T12979] CPU: 1 UID: 0 PID: 12979 Comm: syz.3.2375 Not tainted syzkaller #0 PREEMPT(full) 
[  446.703617][T12979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  446.703627][T12979] Call Trace:
[  446.703635][T12979]  <TASK>
[  446.703643][T12979]  dump_stack_lvl+0x189/0x250
[  446.703670][T12979]  ? __pfx____ratelimit+0x10/0x10
[  446.703693][T12979]  ? __pfx_dump_stack_lvl+0x10/0x10
[  446.703713][T12979]  ? __pfx__printk+0x10/0x10
[  446.703753][T12979]  should_fail_ex+0x414/0x560
[  446.703786][T12979]  strncpy_from_user+0x36/0x2c0
[  446.703810][T12979]  getname_flags+0xf3/0x540
[  446.703838][T12979]  __x64_sys_rename+0x6a/0x90
[  446.703861][T12979]  do_syscall_64+0xfa/0xf80
[  446.703885][T12979]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  446.703903][T12979]  ? clear_bhb_loop+0x60/0xb0
[  446.703925][T12979]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  446.703941][T12979] RIP: 0033:0x7f750338f749
[  446.703959][T12979] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  446.703974][T12979] RSP: 002b:00007f75015d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000052
[  446.703995][T12979] RAX: ffffffffffffffda RBX: 00007f75035e6180 RCX: 00007f750338f749
[  446.704008][T12979] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000200000000100
[  446.704019][T12979] RBP: 00007f75015d5090 R08: 0000000000000000 R09: 0000000000000000
[  446.704029][T12979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  446.704040][T12979] R13: 00007f75035e6218 R14: 00007f75035e6180 R15: 00007ffd7c7d8ea8
[  446.704073][T12979]  </TASK>
[  446.992845][   T37] dvb-usb: schedule remote query interval to 150 msecs.
[  447.001259][   T37] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  447.052542][T12980] dvb-usb: bulk message failed: -22 (2/0)
[  447.152660][   T37] dvb-usb: bulk message failed: -22 (1/0)
[  447.162204][   T37] dvb-usb: error while querying for an remote control event.
[  447.236744][T12986] netlink: 'syz.0.2378': attribute type 1 has an invalid length.
[  447.245181][T12986] netlink: 544 bytes leftover after parsing attributes in process `syz.0.2378'.
[  447.254310][T12986] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2378'.
[  447.329601][   T37] dvb-usb: bulk message failed: -22 (1/0)
[  447.351019][   T37] dvb-usb: error while querying for an remote control event.
[  447.530051][   T37] dvb-usb: bulk message failed: -22 (1/0)
[  447.538178][   T37] dvb-usb: error while querying for an remote control event.
[  447.632434][T13000] syzkaller0: entered promiscuous mode
[  447.638348][T13000] syzkaller0: entered allmulticast mode
[  447.720049][ T6566] dvb-usb: bulk message failed: -22 (1/0)
[  447.733950][ T6566] dvb-usb: error while querying for an remote control event.
[  447.910495][ T6566] dvb-usb: bulk message failed: -22 (1/0)
[  447.917859][ T6566] dvb-usb: error while querying for an remote control event.
[  448.013848][T13013] netlink: 'syz.3.2390': attribute type 1 has an invalid length.
[  448.021842][T13013] netlink: 544 bytes leftover after parsing attributes in process `syz.3.2390'.
[  448.031886][T13013] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2390'.
[  448.100119][ T6566] dvb-usb: bulk message failed: -22 (1/0)
[  448.107267][ T6566] dvb-usb: error while querying for an remote control event.
[  448.281915][ T6566] dvb-usb: bulk message failed: -22 (1/0)
[  448.287939][ T6566] dvb-usb: error while querying for an remote control event.
[  448.414959][T13024] FAULT_INJECTION: forcing a failure.
[  448.414959][T13024] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  448.428322][T13024] CPU: 0 UID: 0 PID: 13024 Comm: syz.4.2393 Not tainted syzkaller #0 PREEMPT(full) 
[  448.428341][T13024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  448.428348][T13024] Call Trace:
[  448.428355][T13024]  <TASK>
[  448.428361][T13024]  dump_stack_lvl+0x189/0x250
[  448.428381][T13024]  ? __pfx____ratelimit+0x10/0x10
[  448.428397][T13024]  ? __pfx_dump_stack_lvl+0x10/0x10
[  448.428411][T13024]  ? __pfx__printk+0x10/0x10
[  448.428435][T13024]  should_fail_ex+0x414/0x560
[  448.428451][T13024]  _copy_from_user+0x2d/0xb0
[  448.428467][T13024]  sctp_setsockopt+0x1c4/0x12c0
[  448.428481][T13024]  ? sock_common_setsockopt+0x36/0xc0
[  448.428494][T13024]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  448.428507][T13024]  do_sock_setsockopt+0x17c/0x1b0
[  448.428526][T13024]  __x64_sys_setsockopt+0x13f/0x1b0
[  448.428544][T13024]  do_syscall_64+0xfa/0xf80
[  448.428560][T13024]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  448.428571][T13024]  ? clear_bhb_loop+0x60/0xb0
[  448.428585][T13024]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  448.428596][T13024] RIP: 0033:0x7fd8b8f8f749
[  448.428618][T13024] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  448.428628][T13024] RSP: 002b:00007fd8b9e6c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  448.428642][T13024] RAX: ffffffffffffffda RBX: 00007fd8b91e6090 RCX: 00007fd8b8f8f749
[  448.428650][T13024] RDX: 0000000000000077 RSI: 0000000000000084 RDI: 0000000000000003
[  448.428657][T13024] RBP: 00007fd8b9e6c090 R08: 8397de475a1b5b02 R09: 0000000000000000
[  448.428664][T13024] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001
[  448.428671][T13024] R13: 00007fd8b91e6128 R14: 00007fd8b91e6090 R15: 00007ffdebc09a98
[  448.428690][T13024]  </TASK>
[  448.429837][   T37] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  448.622409][ T6566] dvb-usb: bulk message failed: -22 (1/0)
[  448.628283][ T6566] dvb-usb: error while querying for an remote control event.
[  448.659284][   T10] usb 2-1: USB disconnect, device number 20
[  448.685442][   T10] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  448.780159][   T37] usb 4-1: Using ep0 maxpacket: 8
[  448.787445][   T37] usb 4-1: config 0 has an invalid interface number: 55 but max is 0
[  448.796109][   T37] usb 4-1: config 0 has no interface number 0
[  448.803101][   T37] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  448.814854][   T37] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  448.832174][   T37] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  448.843774][   T37] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  448.859918][   T37] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  448.869142][   T37] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  448.896409][   T37] usb 4-1: config 0 descriptor??
[  448.929845][   T37] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  449.174255][   T10] usb 4-1: USB disconnect, device number 19
[  449.184352][T13039] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2398'.
[  449.192949][   T10] ldusb 4-1:0.55: LD USB Device #0 now disconnected
[  449.318711][T13041] netlink: 'syz.0.2401': attribute type 1 has an invalid length.
[  449.330559][T13041] netlink: 544 bytes leftover after parsing attributes in process `syz.0.2401'.
[  449.340867][T13041] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2401'.
[  449.452995][T13044] netlink: 'syz.2.2402': attribute type 10 has an invalid length.
[  449.462998][T13044] bond0: (slave wlan1): Opening slave failed
[  449.979755][   T10] usb 1-1: new high-speed USB device number 29 using dummy_hcd
[  450.139991][   T10] usb 1-1: Using ep0 maxpacket: 16
[  450.151253][T13063] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2409'.
[  450.153347][   T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  450.189117][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  450.219837][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  450.234951][   T10] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  450.266182][   T10] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  450.291761][   T10] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  450.329683][   T10] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  450.337826][   T10] usb 1-1: Manufacturer: syz
[  450.364445][   T10] usb 1-1: config 0 descriptor??
[  450.392430][T13073] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2412'.
[  450.787603][T13054] loop0: detected capacity change from 0 to 512
[  450.820399][   T10] rc_core: IR keymap rc-hauppauge not found
[  450.826797][   T10] Registered IR keymap rc-empty
[  450.832313][   T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  450.903303][   T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  450.932672][   T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  450.947184][   T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input13
[  450.959845][T13054] EXT4-fs (loop0): Test dummy encryption mode enabled
[  451.058042][   T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  451.077227][T13054] EXT4-fs error (device loop0): ext4_iget_extra_inode:5073: inode #12: comm syz.0.2404: corrupted in-inode xattr: invalid ea_ino
[  451.120937][T13054] EXT4-fs (loop0): Remounting filesystem read-only
[  451.129818][   T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  451.134176][T13054] EXT4-fs (loop0): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  451.154461][   T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  451.199779][   T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  451.230211][   T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  451.249970][   T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  451.269727][   T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  451.289694][   T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  451.309725][   T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  451.339983][   T10] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  451.362544][   T10] mceusb 1-1:0.0: Registered   with mce emulator interface version 1
[  451.392197][   T10] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  451.434412][   T10] usb 1-1: USB disconnect, device number 29
[  452.078077][   T37] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  452.781282][   T37] usb 2-1: config 0 has no interfaces?
[  452.786838][   T37] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  452.799717][   T37] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  452.863734][T13105] loop4: detected capacity change from 0 to 128
[  452.910878][   T37] usb 2-1: config 0 descriptor??
[  452.922635][ T5824] EXT4-fs (loop0): unmounting filesystem 00000005-0000-0000-0000-000000000000.
[  452.950887][T13105] ubifs: Unknown parameter ':î'
[  452.954493][T13107] fuse: Bad value for 'user_id'
[  452.961326][T13107] fuse: Bad value for 'user_id'
[  453.117314][T13109] loop4: detected capacity change from 0 to 128
[  453.136468][T13110] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2424'.
[  454.142277][   T37] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  454.301032][   T37] usb 5-1: device descriptor read/64, error -71
[  454.493463][T13132] lo speed is unknown, defaulting to 1000
[  454.549694][   T37] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  454.590100][ T5912] usb 2-1: USB disconnect, device number 21
[  454.699783][   T37] usb 5-1: device descriptor read/64, error -71
[  454.819935][   T37] usb usb5-port1: attempt power cycle
[  455.169659][   T37] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[  455.192493][   T37] usb 5-1: device descriptor read/8, error -71
[  455.440798][   T37] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[  455.492002][   T37] usb 5-1: device descriptor read/8, error -71
[  455.511657][T13148] fuse: Bad value for 'user_id'
[  455.560310][T13148] fuse: Bad value for 'user_id'
[  455.641750][   T37] usb usb5-port1: unable to enumerate USB device
[  457.269087][T13169] loop3: detected capacity change from 0 to 128
[  457.289989][T13170] program syz.0.2443 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  457.306452][T13170] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0
[  457.470746][T13169] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  457.579806][T13169] ext4 filesystem being mounted at /455/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  457.749815][T13174] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2445'.
[  457.956017][T13177] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  458.158705][T13186] FAULT_INJECTION: forcing a failure.
[  458.158705][T13186] name failslab, interval 1, probability 0, space 0, times 0
[  458.289714][T13186] CPU: 1 UID: 0 PID: 13186 Comm: syz.0.2448 Not tainted syzkaller #0 PREEMPT(full) 
[  458.289744][T13186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  458.289755][T13186] Call Trace:
[  458.289753][  T890] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[  458.289765][T13186]  <TASK>
[  458.289774][T13186]  dump_stack_lvl+0x189/0x250
[  458.289804][T13186]  ? __pfx____ratelimit+0x10/0x10
[  458.289825][T13186]  ? __pfx_dump_stack_lvl+0x10/0x10
[  458.289844][T13186]  ? __pfx__printk+0x10/0x10
[  458.289875][T13186]  ? __pfx___might_resched+0x10/0x10
[  458.289893][T13186]  ? fs_reclaim_acquire+0x7d/0x100
[  458.289919][T13186]  should_fail_ex+0x414/0x560
[  458.289953][T13186]  should_failslab+0xa8/0x100
[  458.289978][T13186]  __kmalloc_noprof+0xdf/0x800
[  458.289997][T13186]  ? ovl_alloc_entry+0x22/0x80
[  458.290023][T13186]  ovl_alloc_entry+0x22/0x80
[  458.290043][T13186]  ovl_lookup+0x1450/0x1be0
[  458.290099][T13186]  ? __pfx_ovl_lookup+0x10/0x10
[  458.290121][T13186]  ? __pfx_d_alloc_parallel+0x10/0x10
[  458.290143][T13186]  ? __raw_spin_lock_init+0x45/0x100
[  458.290168][T13186]  ? __init_waitqueue_head+0xa9/0x150
[  458.290196][T13186]  __lookup_slow+0x297/0x3d0
[  458.290223][T13186]  ? __pfx___lookup_slow+0x10/0x10
[  458.290260][T13186]  ? down_read+0x274/0x2e0
[  458.290288][T13186]  lookup_slow+0x53/0x70
[  458.290312][T13186]  path_lookupat+0x3f5/0x8c0
[  458.290352][T13186]  filename_lookup+0x212/0x570
[  458.290390][T13186]  ? __pfx_filename_lookup+0x10/0x10
[  458.290437][T13186]  ? strncpy_from_user+0x150/0x2c0
[  458.290459][T13186]  ? getname_flags+0x1e5/0x540
[  458.290484][T13186]  user_path_at+0x3a/0x60
[  458.290510][T13186]  do_utimes+0x131/0x2a0
[  458.290530][T13186]  ? __pfx_do_utimes+0x10/0x10
[  458.290552][T13186]  ? __fget_files+0x3a0/0x420
[  458.290583][T13186]  __x64_sys_utime+0x13e/0x200
[  458.290609][T13186]  ? ksys_write+0x22a/0x250
[  458.290637][T13186]  ? __pfx___x64_sys_utime+0x10/0x10
[  458.290663][T13186]  ? do_syscall_64+0xbe/0xf80
[  458.290689][T13186]  do_syscall_64+0xfa/0xf80
[  458.290712][T13186]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  458.290730][T13186]  ? clear_bhb_loop+0x60/0xb0
[  458.290751][T13186]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  458.290768][T13186] RIP: 0033:0x7f4c6e58f749
[  458.290786][T13186] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  458.290799][T13186] RSP: 002b:00007f4c6f360038 EFLAGS: 00000246 ORIG_RAX: 0000000000000084
[  458.290819][T13186] RAX: ffffffffffffffda RBX: 00007f4c6e7e5fa0 RCX: 00007f4c6e58f749
[  458.290831][T13186] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000080
[  458.290841][T13186] RBP: 00007f4c6f360090 R08: 0000000000000000 R09: 0000000000000000
[  458.290851][T13186] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  458.290861][T13186] R13: 00007f4c6e7e6038 R14: 00007f4c6e7e5fa0 R15: 00007ffceeee95d8
[  458.290891][T13186]  </TASK>
[  458.817308][ T5836] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  458.958329][T13192] fuse: Bad value for 'fd'
[  458.975265][  T890] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  458.985748][  T890] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  459.009610][  T890] usb 5-1: Product: syz
[  459.013838][  T890] usb 5-1: Manufacturer: syz
[  459.018465][  T890] usb 5-1: SerialNumber: syz
[  459.040795][  T890] usb 5-1: config 0 descriptor??
[  459.265524][  T890] usb 5-1: USB disconnect, device number 27
[  459.368226][T13204] loop3: detected capacity change from 0 to 512
[  459.377073][T13204] EXT4-fs (loop3): Test dummy encryption mode enabled
[  459.384990][T13204] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  459.411698][T13204] EXT4-fs (loop3): 1 truncate cleaned up
[  459.423497][T13204] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  459.439626][   T30] kauditd_printk_skb: 10 callbacks suppressed
[  459.439646][   T30] audit: type=1800 audit(1766323481.005:419): pid=13204 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2455" name="file1" dev="loop3" ino=15 res=0 errno=0
[  459.532907][T13213] fuse: Unknown parameter 'group_i00000000000000000000'
[  459.568855][   T51] nci: nci_rx_work: unknown MT 0x4
[  459.690872][   T37] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  460.148388][T13218] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2457'.
[  460.200777][T13220] Cannot find del_set index 0 as target
[  460.373926][   T37] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  460.442337][   T37] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  460.455283][   T37] usb 4-1: Product: syz
[  460.464438][   T37] usb 4-1: Manufacturer: syz
[  460.474623][   T37] usb 4-1: SerialNumber: syz
[  461.073707][   T37] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  461.187227][   T37] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to sync IRQ enable register: -EPIPE
[  461.201663][   T37] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO
[  461.214637][   T37] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  461.227335][   T37] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  461.242297][T13180] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  461.254846][   T37] lan78xx 4-1:1.0: probe with driver lan78xx failed with error -71
[  461.279129][   T37] usb 4-1: USB disconnect, device number 20
[  461.697628][ T5836] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  461.954463][T13255] fuse: Bad value for 'fd'
[  462.201237][T13261] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2468'.
[  462.371619][T13267] loop1: detected capacity change from 0 to 16
[  462.400059][T13267] erofs (device loop1): negative i_size @ nid 36
[  462.639643][  T890] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[  462.809624][  T890] usb 5-1: Using ep0 maxpacket: 32
[  462.816696][  T890] usb 5-1: too many configurations: 17, using maximum allowed: 8
[  462.829105][  T890] usb 5-1: config 0 has an invalid interface number: 2 but max is 0
[  462.839773][  T890] usb 5-1: config 0 has no interface number 0
[  462.973504][  T890] usb 5-1: config 0 has an invalid interface number: 2 but max is 0
[  462.982943][  T890] usb 5-1: config 0 has no interface number 0
[  462.991245][  T890] usb 5-1: config 0 has an invalid interface number: 2 but max is 0
[  463.000761][  T890] usb 5-1: config 0 has no interface number 0
[  463.008140][  T890] usb 5-1: config 0 has an invalid interface number: 2 but max is 0
[  463.017563][  T890] usb 5-1: config 0 has no interface number 0
[  463.019963][ T5912] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  463.160425][T13281] overlay: ./file0 is not a directory
[  463.327009][ T5912] usb 2-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02
[  463.420966][ T5912] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  463.502396][ T5912] usb 2-1: Product: syz
[  463.542583][ T5912] usb 2-1: Manufacturer: syz
[  463.605647][ T5912] usb 2-1: SerialNumber: syz
[  463.709324][ T5912] usb 2-1: config 0 descriptor??
[  463.750062][ T5912] gspca_main: sunplus-2.14.0 probing 04fc:504a
[  463.923824][  T890] usb 5-1: config 0 has an invalid interface number: 2 but max is 0
[  463.932183][  T890] usb 5-1: config 0 has no interface number 0
[  463.939442][  T890] usb 5-1: config 0 has an invalid interface number: 2 but max is 0
[  463.947778][  T890] usb 5-1: config 0 has no interface number 0
[  463.955316][  T890] usb 5-1: config 0 has an invalid interface number: 2 but max is 0
[  463.963636][  T890] usb 5-1: config 0 has no interface number 0
[  463.971300][  T890] usb 5-1: config 0 has an invalid interface number: 2 but max is 0
[  463.979707][  T890] usb 5-1: config 0 has no interface number 0
[  463.989691][  T890] usb 5-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2
[  463.999117][  T890] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  464.007366][  T890] usb 5-1: Product: syz
[  464.011656][  T890] usb 5-1: Manufacturer: syz
[  464.016346][  T890] usb 5-1: SerialNumber: syz
[  464.024269][  T890] usb 5-1: config 0 descriptor??
[  464.032490][  T890] etas_es58x 5-1:0.2: Starting syz syz (Serial Number syz)
[  464.087125][T13288] FAULT_INJECTION: forcing a failure.
[  464.087125][T13288] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  464.104618][T13288] CPU: 1 UID: 0 PID: 13288 Comm: syz.3.2477 Not tainted syzkaller #0 PREEMPT(full) 
[  464.104647][T13288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  464.104659][T13288] Call Trace:
[  464.104668][T13288]  <TASK>
[  464.104676][T13288]  dump_stack_lvl+0x189/0x250
[  464.104706][T13288]  ? __pfx____ratelimit+0x10/0x10
[  464.104735][T13288]  ? __pfx_dump_stack_lvl+0x10/0x10
[  464.104771][T13288]  ? __pfx__printk+0x10/0x10
[  464.104813][T13288]  should_fail_ex+0x414/0x560
[  464.104840][T13288]  _copy_to_user+0x31/0xb0
[  464.104867][T13288]  simple_read_from_buffer+0xe1/0x170
[  464.104899][T13288]  proc_fail_nth_read+0x1b3/0x220
[  464.104936][T13288]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  464.104961][T13288]  ? rw_verify_area+0x2a6/0x4d0
[  464.104980][T13288]  ? __fget_files+0x2a/0x420
[  464.105002][T13288]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  464.105024][T13288]  vfs_read+0x200/0xa30
[  464.105042][T13288]  ? fdget_pos+0x247/0x320
[  464.105070][T13288]  ? __pfx___mutex_lock+0x10/0x10
[  464.105096][T13288]  ? __pfx_vfs_read+0x10/0x10
[  464.105116][T13288]  ? __fget_files+0x2a/0x420
[  464.105149][T13288]  ? __fget_files+0x3a0/0x420
[  464.105165][T13288]  ? __fget_files+0x2a/0x420
[  464.105186][T13288]  ksys_read+0x145/0x250
[  464.105203][T13288]  ? __pfx_ksys_read+0x10/0x10
[  464.105227][T13288]  ? do_syscall_64+0xbe/0xf80
[  464.105256][T13288]  do_syscall_64+0xfa/0xf80
[  464.105280][T13288]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  464.105298][T13288]  ? clear_bhb_loop+0x60/0xb0
[  464.105321][T13288]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  464.105339][T13288] RIP: 0033:0x7f750338e15c
[  464.105358][T13288] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  464.105372][T13288] RSP: 002b:00007f7504146030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  464.105393][T13288] RAX: ffffffffffffffda RBX: 00007f75035e5fa0 RCX: 00007f750338e15c
[  464.105406][T13288] RDX: 000000000000000f RSI: 00007f75041460a0 RDI: 0000000000000004
[  464.105417][T13288] RBP: 00007f7504146090 R08: 0000000000000000 R09: 0000000000000000
[  464.105428][T13288] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  464.105438][T13288] R13: 00007f75035e6038 R14: 00007f75035e5fa0 R15: 00007ffd7c7d8ea8
[  464.105465][T13288]  </TASK>
[  464.346872][T13299] fuse: Unknown parameter 'group_i00000000000000000000'
[  464.621711][T13304] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2481'.
[  464.631155][  T890] etas_es58x 5-1:0.2: could not retrieve the product info string
[  464.704688][  T890] usb 5-1: USB disconnect, device number 28
[  464.724351][  T890] etas_es58x 5-1:0.2: Disconnecting syz syz
[  464.948324][ T5912] gspca_sunplus: reg_r err -32
[  465.121584][T13314] loop0: detected capacity change from 0 to 16
[  465.128501][T13314] erofs: Unknown parameter 'ÿ00000000000000000002506'
[  465.139182][T13314] overlayfs: overlapping lowerdir path
[  465.941402][T13327] syzkaller1: entered promiscuous mode
[  465.946940][T13327] syzkaller1: entered allmulticast mode
[  466.178698][T13337] FAULT_INJECTION: forcing a failure.
[  466.178698][T13337] name failslab, interval 1, probability 0, space 0, times 0
[  466.223934][T13337] CPU: 1 UID: 0 PID: 13337 Comm: syz.0.2489 Not tainted syzkaller #0 PREEMPT(full) 
[  466.223962][T13337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  466.223973][T13337] Call Trace:
[  466.223980][T13337]  <TASK>
[  466.223987][T13337]  dump_stack_lvl+0x189/0x250
[  466.224018][T13337]  ? __pfx____ratelimit+0x10/0x10
[  466.224045][T13337]  ? __pfx_dump_stack_lvl+0x10/0x10
[  466.224068][T13337]  ? __pfx__printk+0x10/0x10
[  466.224100][T13337]  ? __pfx___might_resched+0x10/0x10
[  466.224122][T13337]  ? fs_reclaim_acquire+0x7d/0x100
[  466.224147][T13337]  should_fail_ex+0x414/0x560
[  466.224172][T13337]  should_failslab+0xa8/0x100
[  466.224196][T13337]  kmem_cache_alloc_node_noprof+0x8c/0x720
[  466.224217][T13337]  ? __alloc_skb+0x255/0x430
[  466.224240][T13337]  ? napi_skb_cache_get+0x4a5/0x780
[  466.224262][T13337]  ? napi_skb_cache_get+0x151/0x780
[  466.224290][T13337]  __alloc_skb+0x255/0x430
[  466.224317][T13337]  ? __pfx___alloc_skb+0x10/0x10
[  466.224347][T13337]  ? bpf_lsm_socket_getpeersec_dgram+0x9/0x20
[  466.224370][T13337]  netlink_sendmsg+0x5c6/0xb30
[  466.224388][T13337]  ? aa_sk_perm+0x15f/0x920
[  466.224421][T13337]  ? __pfx_netlink_sendmsg+0x10/0x10
[  466.224450][T13337]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x300
[  466.224488][T13337]  ? __pfx_netlink_sendmsg+0x10/0x10
[  466.224515][T13337]  sock_sendmsg_nosec+0x18f/0x1d0
[  466.224541][T13337]  ____sys_sendmsg+0x577/0x880
[  466.224577][T13337]  ? __pfx_____sys_sendmsg+0x10/0x10
[  466.224615][T13337]  ? import_iovec+0x74/0xa0
[  466.224644][T13337]  ___sys_sendmsg+0x21f/0x2a0
[  466.224673][T13337]  ? __pfx____sys_sendmsg+0x10/0x10
[  466.224708][T13337]  ? rcu_read_lock_any_held+0xb3/0x120
[  466.224764][T13337]  ? __fget_files+0x2a/0x420
[  466.224788][T13337]  ? __fget_files+0x3a0/0x420
[  466.224826][T13337]  __x64_sys_sendmsg+0x19b/0x260
[  466.224856][T13337]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  466.224903][T13337]  ? __pfx_ksys_write+0x10/0x10
[  466.224929][T13337]  ? do_syscall_64+0xbe/0xf80
[  466.224959][T13337]  do_syscall_64+0xfa/0xf80
[  466.224985][T13337]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  466.225005][T13337]  ? clear_bhb_loop+0x60/0xb0
[  466.225029][T13337]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  466.225047][T13337] RIP: 0033:0x7f4c6e58f749
[  466.225067][T13337] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  466.225083][T13337] RSP: 002b:00007f4c6f33f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  466.225104][T13337] RAX: ffffffffffffffda RBX: 00007f4c6e7e6090 RCX: 00007f4c6e58f749
[  466.225118][T13337] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: 0000000000000003
[  466.225129][T13337] RBP: 00007f4c6f33f090 R08: 0000000000000000 R09: 0000000000000000
[  466.225142][T13337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  466.225153][T13337] R13: 00007f4c6e7e6128 R14: 00007f4c6e7e6090 R15: 00007ffceeee95d8
[  466.225189][T13337]  </TASK>
[  466.638977][T13342] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2492'.
[  466.759423][T13349] loop0: detected capacity change from 0 to 64
[  466.799134][T13351] fuse: Unknown parameter 'group_id00000000000000000000'
[  467.061260][T13358] loop0: detected capacity change from 0 to 128
[  467.130511][T13358] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  467.143833][T13358] hpfs: filesystem error: improperly stopped
[  467.151514][T13358] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  467.160188][T13358] hpfs: You really don't want any checks? You are crazy...
[  467.167950][T13358] hpfs: hpfs_map_sector(): read error
[  467.198240][T13358] hpfs: code page support is disabled
[  467.258021][T13358] hpfs: filesystem error: map_dirent: not a directory
[  467.279430][T13358] 
[  467.283248][T13358] hpfs: hpfs_map_4sectors(): unaligned read
[  467.293860][T13358] hpfs: filesystem error: unable to find root dir
[  468.301442][T13372] loop1: detected capacity change from 0 to 8192
[  468.380181][T13372]  loop1: p1 < > p2 < p5 p6 > p3 p4
[  468.396607][T13372] loop1: partition table partially beyond EOD, truncated
[  468.421796][T13372] loop1: p1 start 67108864 is beyond EOD, truncated
[  468.447612][T13372] loop1: p3 start 100859904 is beyond EOD, truncated
[  468.466392][T13372] loop1: p4 size 393216 extends beyond EOD, truncated
[  468.489791][T13372] loop1: p5 start 100859904 is beyond EOD, truncated
[  468.508899][T13372] loop1: p6 size 393216 extends beyond EOD, truncated
[  469.392702][T13385] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2506'.
[  469.471682][T13387] netlink: 212368 bytes leftover after parsing attributes in process `syz.3.2507'.
[  469.920160][ T5912] sunplus 2-1:0.0: probe with driver sunplus failed with error -32
[  469.947081][ T5912] usb 2-1: USB disconnect, device number 22
[  469.954753][T13396] FAULT_INJECTION: forcing a failure.
[  469.954753][T13396] name failslab, interval 1, probability 0, space 0, times 0
[  470.142513][T13396] CPU: 0 UID: 0 PID: 13396 Comm: syz.0.2510 Not tainted syzkaller #0 PREEMPT(full) 
[  470.142542][T13396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  470.142554][T13396] Call Trace:
[  470.142562][T13396]  <TASK>
[  470.142573][T13396]  dump_stack_lvl+0x189/0x250
[  470.142604][T13396]  ? __pfx____ratelimit+0x10/0x10
[  470.142631][T13396]  ? __pfx_dump_stack_lvl+0x10/0x10
[  470.142655][T13396]  ? __pfx__printk+0x10/0x10
[  470.142691][T13396]  ? __pfx___might_resched+0x10/0x10
[  470.142713][T13396]  ? fs_reclaim_acquire+0x7d/0x100
[  470.142743][T13396]  should_fail_ex+0x414/0x560
[  470.142772][T13396]  should_failslab+0xa8/0x100
[  470.142800][T13396]  kmem_cache_alloc_lru_noprof+0x8d/0x6e0
[  470.142822][T13396]  ? __d_alloc+0x37/0x6f0
[  470.142856][T13396]  __d_alloc+0x37/0x6f0
[  470.142892][T13396]  d_alloc+0x4b/0x190
[  470.142917][T13396]  ? lookup_one_qstr_excl+0xc8/0x360
[  470.142948][T13396]  lookup_one_qstr_excl+0xdc/0x360
[  470.142982][T13396]  __start_renaming+0x186/0x410
[  470.143014][T13396]  do_renameat2+0x362/0x950
[  470.143055][T13396]  ? __pfx_do_renameat2+0x10/0x10
[  470.143111][T13396]  ? getname_flags+0x1e5/0x540
[  470.143141][T13396]  __x64_sys_rename+0x82/0x90
[  470.143168][T13396]  do_syscall_64+0xfa/0xf80
[  470.143196][T13396]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  470.143214][T13396]  ? clear_bhb_loop+0x60/0xb0
[  470.143239][T13396]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  470.143258][T13396] RIP: 0033:0x7f4c6e58f749
[  470.143276][T13396] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  470.143291][T13396] RSP: 002b:00007f4c6c7f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000052
[  470.143313][T13396] RAX: ffffffffffffffda RBX: 00007f4c6e7e6180 RCX: 00007f4c6e58f749
[  470.143326][T13396] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000200000000100
[  470.143338][T13396] RBP: 00007f4c6c7f6090 R08: 0000000000000000 R09: 0000000000000000
[  470.143349][T13396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  470.143360][T13396] R13: 00007f4c6e7e6218 R14: 00007f4c6e7e6180 R15: 00007ffceeee95d8
[  470.143396][T13396]  </TASK>
[  470.544508][T13401] loop4: detected capacity change from 0 to 512
[  471.308281][T13401] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  471.342881][T13401] ext4 filesystem being mounted at /469/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  471.453931][T13410] fuse: Bad value for 'fd'
[  471.614671][ T5834] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  471.710142][T13419] fuse: Unknown parameter 'group_id00000000000000000000'
[  471.892121][T13420] delete_channel: no stack
[  472.732430][T13418] loop1: detected capacity change from 0 to 32768
[  472.761700][T13418] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2513 (13418)
[  472.793003][T13418] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  472.819647][T13418] BTRFS info (device loop1): using blake2b checksum algorithm
[  473.131640][T13425] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  473.184020][T13418] BTRFS info (device loop1): enabling ssd optimizations
[  473.205679][T13425] CIFS mount error: No usable UNC path provided in device string!
[  473.205679][T13425] 
[  473.226158][T13418] BTRFS info (device loop1): turning on async discard
[  473.245390][T13418] BTRFS info (device loop1): enabling free space tree
[  473.251643][T13445] lo speed is unknown, defaulting to 1000
[  473.276998][T13425] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  473.288366][T13418] BTRFS info (device loop1): use zstd compression, level 3
[  473.373449][T13418] fuse: Bad value for 'user_id'
[  473.378543][T13418] fuse: Bad value for 'user_id'
[  473.605260][ T5830] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  474.238330][T13461] loop0: detected capacity change from 0 to 512
[  474.265090][T13461] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  474.480464][T13461] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2857: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  474.567539][T13461] EXT4-fs (loop0): 1 truncate cleaned up
[  474.624805][T13461] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  475.453533][   T30] audit: type=1800 audit(1766323496.385:420): pid=13461 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2524" name="file1" dev="loop0" ino=15 res=0 errno=0
[  475.703392][T13482] fuse: Bad value for 'fd'
[  475.733274][T13484] fuse: Unknown parameter 'group_id00000000000000000000'
[  476.044507][T13487] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2530'.
[  476.215447][T13492] loop3: detected capacity change from 0 to 256
[  476.268014][T13492] FAT-fs (loop3): Directory bread(block 64) failed
[  476.286620][T13492] FAT-fs (loop3): Directory bread(block 65) failed
[  476.305559][T13492] FAT-fs (loop3): Directory bread(block 66) failed
[  476.330794][T13492] FAT-fs (loop3): Directory bread(block 67) failed
[  476.374252][T13492] FAT-fs (loop3): Directory bread(block 68) failed
[  476.391144][T13492] FAT-fs (loop3): Directory bread(block 69) failed
[  476.409882][T13492] FAT-fs (loop3): Directory bread(block 70) failed
[  476.428377][T13492] FAT-fs (loop3): Directory bread(block 71) failed
[  476.455095][T13492] FAT-fs (loop3): Directory bread(block 72) failed
[  476.472777][T13492] FAT-fs (loop3): Directory bread(block 73) failed
[  476.675145][ T5824] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  477.278252][T13500] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.2535'.
[  477.454358][T13505] loop3: detected capacity change from 0 to 4096
[  477.461528][T13505] ntfs3: Unknown parameter ''
[  477.514913][T13505] loop3: detected capacity change from 0 to 16
[  478.088775][T13524] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2542'.
[  478.182582][T13515] loop3: detected capacity change from 0 to 32768
[  478.228457][T13515] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  478.343573][T13515] XFS (loop3): Ending clean mount
[  478.371083][T13515] XFS (loop3): Quotacheck needed: Please wait.
[  478.458314][T13515] XFS (loop3): Quotacheck: Done.
[  479.587036][   T37] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[  479.650915][T13541] devpts: Unknown parameter './file0'
[  479.761651][   T37] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  479.770811][   T37] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  479.809546][   T37] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  479.818679][   T37] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  479.831173][T13537] loop0: detected capacity change from 0 to 32768
[  479.839453][   T37] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  479.851353][T13537] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.2544 (13537)
[  479.865957][   T37] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  479.875657][   T37] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  479.883845][   T37] usb 5-1: Product: syz
[  479.888219][   T37] usb 5-1: Manufacturer: syz
[  479.939434][T13537] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  479.973182][   T37] cdc_wdm 5-1:1.0: skipping garbage
[  479.978488][   T37] cdc_wdm 5-1:1.0: skipping garbage
[  479.989666][T13537] BTRFS info (device loop0): using sha256 checksum algorithm
[  480.005214][   T37] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[  480.040587][   T37] cdc_wdm 5-1:1.0: Unknown control protocol
[  480.084091][T13557] syzkaller1: entered promiscuous mode
[  480.090068][T13557] syzkaller1: entered allmulticast mode
[  480.217851][T13537] BTRFS info (device loop0): rebuilding free space tree
[  480.220677][T13545] loop4: detected capacity change from 0 to 256
[  480.268707][T13537] BTRFS info (device loop0): disabling free space tree
[  480.270592][T13545] exfat: Deprecated parameter 'namecase'
[  480.276449][T13537] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  480.292459][T13537] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  480.315523][T13537] BTRFS info (device loop0): enabling ssd optimizations
[  480.322836][T13537] BTRFS info (device loop0): turning on sync discard
[  480.334562][T13537] BTRFS info (device loop0): force clearing of disk cache
[  480.383064][T13545] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d)
[  480.383841][T13567] loop1: detected capacity change from 0 to 64
[  480.402212][T13545] exFAT-fs (loop4): failed to test first cluster bit of root dir(5)
[  480.570523][T13545] lo speed is unknown, defaulting to 1000
[  480.605750][ T5836] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  481.190743][T13582] syzkaller1: entered promiscuous mode
[  481.199675][T13582] syzkaller1: entered allmulticast mode
[  481.243393][T13582] FAULT_INJECTION: forcing a failure.
[  481.243393][T13582] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  481.300318][T13582] CPU: 1 UID: 0 PID: 13582 Comm: syz.3.2549 Not tainted syzkaller #0 PREEMPT(full) 
[  481.300349][T13582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  481.300360][T13582] Call Trace:
[  481.300368][T13582]  <TASK>
[  481.300377][T13582]  dump_stack_lvl+0x189/0x250
[  481.300409][T13582]  ? __pfx____ratelimit+0x10/0x10
[  481.300435][T13582]  ? __pfx_dump_stack_lvl+0x10/0x10
[  481.300459][T13582]  ? __pfx__printk+0x10/0x10
[  481.300488][T13582]  ? __might_fault+0xb0/0x130
[  481.300521][T13582]  should_fail_ex+0x414/0x560
[  481.300550][T13582]  _copy_from_iter+0x1cd/0x1630
[  481.300588][T13582]  ? __pfx__copy_from_iter+0x10/0x10
[  481.300609][T13582]  ? is_bpf_text_address+0x26/0x2b0
[  481.300635][T13582]  ? is_bpf_text_address+0x292/0x2b0
[  481.300653][T13582]  ? is_bpf_text_address+0x26/0x2b0
[  481.300680][T13582]  tun_get_user+0x219/0x3dc0
[  481.300718][T13582]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  481.300744][T13582]  ? lockdep_hardirqs_on+0x98/0x140
[  481.300781][T13582]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  481.300806][T13582]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  481.300828][T13582]  ? aa_file_perm+0x44c/0x1530
[  481.300857][T13582]  ? __pfx_tun_get_user+0x10/0x10
[  481.300890][T13582]  ? save_netdev_trace_buffer+0x4a0/0x5a0
[  481.300910][T13582]  ? kstrtoull+0x12f/0x1d0
[  481.300940][T13582]  ? ref_tracker_alloc+0x318/0x460
[  481.300960][T13582]  ? tun_get+0x157/0x2f0
[  481.300981][T13582]  ? tun_chr_write_iter+0x60/0x210
[  481.301003][T13582]  ? ksys_write+0x145/0x250
[  481.301023][T13582]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  481.301052][T13582]  ? tun_get+0x1c/0x2f0
[  481.301082][T13582]  ? tun_get+0x1c/0x2f0
[  481.301105][T13582]  ? tun_get+0x1c/0x2f0
[  481.301135][T13582]  tun_chr_write_iter+0x113/0x210
[  481.301163][T13582]  vfs_write+0x5c9/0xb30
[  481.301189][T13582]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  481.301215][T13582]  ? __pfx_vfs_write+0x10/0x10
[  481.301249][T13582]  ? __fget_files+0x2a/0x420
[  481.301286][T13582]  ksys_write+0x145/0x250
[  481.301316][T13582]  ? __pfx_ksys_write+0x10/0x10
[  481.301341][T13582]  ? do_syscall_64+0xbe/0xf80
[  481.301372][T13582]  do_syscall_64+0xfa/0xf80
[  481.301399][T13582]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  481.301419][T13582]  ? clear_bhb_loop+0x60/0xb0
[  481.301443][T13582]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  481.301463][T13582] RIP: 0033:0x7f750338f749
[  481.301483][T13582] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  481.301498][T13582] RSP: 002b:00007f7504146038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  481.301520][T13582] RAX: ffffffffffffffda RBX: 00007f75035e5fa0 RCX: 00007f750338f749
[  481.301534][T13582] RDX: 0000000000000046 RSI: 0000200000001040 RDI: 0000000000000003
[  481.301545][T13582] RBP: 00007f7504146090 R08: 0000000000000000 R09: 0000000000000000
[  481.301557][T13582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  481.301568][T13582] R13: 00007f75035e6038 R14: 00007f75035e5fa0 R15: 00007ffd7c7d8ea8
[  481.301602][T13582]  </TASK>
[  481.718606][T13584] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2553'.
[  481.763242][T13545] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  481.774753][ T5824] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  481.808541][T13545] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  482.029474][   T10] usb 5-1: USB disconnect, device number 29
[  483.671805][T13602] loop4: detected capacity change from 0 to 32768
[  484.434771][T12489] read_mapping_page failed!
[  484.469626][T12489] ERROR: (device loop4): txCommit: 
[  484.469626][T12489] 
[  484.576737][T12489] jfs_write_inode: jfs_commit_inode failed!
[  485.210183][   T10] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  485.251720][T13623] netlink: 'syz.3.2564': attribute type 38 has an invalid length.
[  485.399611][   T10] usb 2-1: Using ep0 maxpacket: 8
[  485.506063][   T10] usb 2-1: config 0 has an invalid interface number: 55 but max is 0
[  485.539866][   T10] usb 2-1: config 0 has no interface number 0
[  485.550458][T13627] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2566'.
[  485.557754][   T10] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  485.589592][   T10] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  485.659639][   T10] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  485.708639][   T10] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  485.759185][T13629] loop3: detected capacity change from 0 to 4096
[  485.765784][   T10] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  485.799864][T13629] EXT4-fs: mb_optimize_scan should be set to 0 or 1.
[  485.819938][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  485.837703][   T10] usb 2-1: config 0 descriptor??
[  485.866837][   T10] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  486.065169][T13621] loop4: detected capacity change from 0 to 32768
[  486.078414][   T10] usb 2-1: USB disconnect, device number 24
[  486.088843][   T10] ldusb 2-1:0.55: LD USB Device #0 now disconnected
[  486.104183][T13621] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  486.149701][   T37] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  486.179470][T13621] XFS (loop4): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  486.201204][T13621] XFS (loop4): Starting recovery (logdev: internal)
[  486.227065][T13621] XFS (loop4): Ending recovery (logdev: internal)
[  486.235530][T13621] XFS (loop4): AG 0: Corrupt finobt pointer at level 1 index 0.
[  486.244274][T13621] XFS (loop4): Failed to initialize disk quotas, err -117.
[  486.309605][   T37] usb 4-1: Using ep0 maxpacket: 32
[  486.321651][   T37] usb 4-1: config 1 interface 0 altsetting 4 bulk endpoint 0x1 has invalid maxpacket 8
[  486.331572][   T37] usb 4-1: config 1 interface 0 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  486.344732][   T37] usb 4-1: config 1 interface 0 has no altsetting 0
[  486.355774][   T37] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  486.365528][   T37] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  486.373768][   T37] usb 4-1: Product: Й
[  486.378031][   T37] usb 4-1: Manufacturer: �蹆袹徳�좕짺⟿혱㮹ᖦ꯽䄫㰾旻踤�哨�料䢤澪ꗎ⩪㷂䮱ស�唹⑯�ꮅ뫼⌒䞸꣈ᵵⶓࣃ榊蟉즑䪿선�꾸փ췔ꥯ還쌡탖⠋䅨涘苨�쪷����쇉㋧㉃梸ʨ�쓯ᘋ䴌톿ꫤ�硗驧갈��ᶊ�㸆ꊪ㡮瞺똊闃퀟塇ᦟ멉켷㊃绅졷괎⠬�羧ꆶꗬ�
[  486.411162][   T37] usb 4-1: SerialNumber: �欦繨�쇘⒵耮�
[  486.422718][T13629] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  486.430319][T13629] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  486.699072][T13621] XFS (loop4): AG 0: Corrupt finobt pointer at level 1 index 0.
[  486.738654][ T5834] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  486.748116][ T5834] XFS (loop4): Uncorrected metadata errors detected; please run xfs_repair.
[  486.895001][   T37] usb 4-1: USB disconnect, device number 21
[  487.605165][T13655] loop0: detected capacity change from 0 to 40427
[  487.617382][T13655] F2FS-fs (loop0): invalid crc value
[  487.714703][T13655] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  487.715773][T13655] F2FS-fs (loop0): Start checkpoint disabled!
[  487.766443][T13655] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0
[  487.774509][T13655] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  487.865951][   T30] audit: type=1800 audit(1766323509.435:421): pid=13652 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2573" name="file1" dev="loop0" ino=10 res=0 errno=0
[  487.895211][T13652] syz.0.2573: attempt to access beyond end of device
[  487.895211][T13652] loop0: rw=2049, sector=45096, nr_sectors = 128 limit=40427
[  487.913693][T13652] syz.0.2573: attempt to access beyond end of device
[  487.913693][T13652] loop0: rw=2049, sector=45224, nr_sectors = 128 limit=40427
[  487.930826][T13652] syz.0.2573: attempt to access beyond end of device
[  487.930826][T13652] loop0: rw=2049, sector=45352, nr_sectors = 128 limit=40427
[  487.947069][T13652] syz.0.2573: attempt to access beyond end of device
[  487.947069][T13652] loop0: rw=2049, sector=45480, nr_sectors = 128 limit=40427
[  487.967905][T13655] syz.0.2573: attempt to access beyond end of device
[  487.967905][T13655] loop0: rw=2049, sector=45608, nr_sectors = 128 limit=40427
[  487.983233][T13652] syz.0.2573: attempt to access beyond end of device
[  487.983233][T13652] loop0: rw=2049, sector=45736, nr_sectors = 96 limit=40427
[  487.999997][T13652] syz.0.2573: attempt to access beyond end of device
[  487.999997][T13652] loop0: rw=2049, sector=77824, nr_sectors = 160 limit=40427
[  488.019904][T13652] syz.0.2573: attempt to access beyond end of device
[  488.019904][T13652] loop0: rw=2049, sector=45832, nr_sectors = 128 limit=40427
[  488.037945][T13655] syz.0.2573: attempt to access beyond end of device
[  488.037945][T13655] loop0: rw=2049, sector=45960, nr_sectors = 128 limit=40427
[  488.054067][T13652] syz.0.2573: attempt to access beyond end of device
[  488.054067][T13652] loop0: rw=2049, sector=46088, nr_sectors = 128 limit=40427
[  488.460874][   T30] audit: type=1800 audit(1766323509.515:422): pid=13655 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2573" name="file1" dev="loop0" ino=10 res=0 errno=0
[  488.626669][T13662] syzkaller0: entered promiscuous mode
[  488.633454][T13662] syzkaller0: entered allmulticast mode
[  488.667011][T12489] CPU: 0 UID: 0 PID: 12489 Comm: kworker/u8:10 Not tainted syzkaller #0 PREEMPT(full) 
[  488.667042][T12489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  488.667058][T12489] Workqueue: writeback wb_workfn (flush-7:0)
[  488.667090][T12489] Call Trace:
[  488.667099][T12489]  <TASK>
[  488.667108][T12489]  dump_stack_lvl+0x189/0x250
[  488.667141][T12489]  ? __pfx_dump_stack_lvl+0x10/0x10
[  488.667164][T12489]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  488.667190][T12489]  ? __pfx_queue_work_on+0x10/0x10
[  488.667217][T12489]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  488.667240][T12489]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  488.667268][T12489]  ? f2fs_hw_is_readonly+0x39b/0x470
[  488.667301][T12489]  f2fs_handle_critical_error+0x37c/0x540
[  488.667336][T12489]  f2fs_write_end_io+0x886/0xb60
[  488.667391][T12489]  __submit_merged_bio+0x256/0x660
[  488.667428][T12489]  f2fs_submit_page_write+0x2076/0x21a0
[  488.667502][T12489]  do_write_page+0x40f/0xac0
[  488.667525][T12489]  ? f2fs_encrypt_one_page+0xaf/0x940
[  488.667557][T12489]  f2fs_outplace_write_data+0x11a/0x220
[  488.667585][T12489]  f2fs_do_write_data_page+0x113e/0x1650
[  488.667633][T12489]  ? __pfx_f2fs_do_write_data_page+0x10/0x10
[  488.667675][T12489]  ? __lock_acquire+0x6b6/0x2cf0
[  488.667709][T12489]  f2fs_write_single_data_page+0xb15/0x1740
[  488.667761][T12489]  ? __pfx_f2fs_write_single_data_page+0x10/0x10
[  488.667815][T12489]  ? folio_clear_dirty_for_io+0x573/0x710
[  488.667846][T12489]  ? folio_clear_dirty_for_io+0x1d4/0x710
[  488.667880][T12489]  f2fs_write_data_pages+0x1a2b/0x3290
[  488.667968][T12489]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  488.668103][T12489]  ? __lock_acquire+0x6b6/0x2cf0
[  488.668134][T12489]  ? __lock_acquire+0x6b6/0x2cf0
[  488.668171][T12489]  ? f2fs_write_meta_pages+0x357/0x450
[  488.668200][T12489]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  488.668230][T12489]  do_writepages+0x32e/0x550
[  488.668268][T12489]  ? reacquire_held_locks+0x121/0x1c0
[  488.668291][T12489]  ? writeback_sb_inodes+0x3bd/0x1870
[  488.668328][T12489]  __writeback_single_inode+0x133/0x1240
[  488.668356][T12489]  ? do_raw_spin_unlock+0x122/0x240
[  488.668391][T12489]  writeback_sb_inodes+0x93a/0x1870
[  488.668457][T12489]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  488.668547][T12489]  ? rcu_is_watching+0x15/0xb0
[  488.668590][T12489]  wb_writeback+0x42b/0xaa0
[  488.668628][T12489]  ? queue_io+0x281/0x450
[  488.668660][T12489]  ? __pfx_wb_writeback+0x10/0x10
[  488.668698][T12489]  ? _raw_spin_unlock_irq+0x23/0x50
[  488.668731][T12489]  wb_workfn+0x3f9/0xed0
[  488.668776][T12489]  ? __pfx_wb_workfn+0x10/0x10
[  488.668828][T12489]  ? process_one_work+0x868/0x15a0
[  488.668858][T12489]  ? _raw_spin_unlock_irq+0x23/0x50
[  488.668889][T12489]  ? process_one_work+0x868/0x15a0
[  488.668908][T12489]  process_one_work+0x93a/0x15a0
[  488.668972][T12489]  ? __pfx_process_one_work+0x10/0x10
[  488.669010][T12489]  ? assign_work+0x3c7/0x5b0
[  488.669039][T12489]  worker_thread+0x9b0/0xee0
[  488.669102][T12489]  kthread+0x711/0x8a0
[  488.669135][T12489]  ? __pfx_worker_thread+0x10/0x10
[  488.669157][T12489]  ? __pfx_kthread+0x10/0x10
[  488.669186][T12489]  ? _raw_spin_unlock_irq+0x23/0x50
[  488.669218][T12489]  ? lockdep_hardirqs_on+0x98/0x140
[  488.669242][T12489]  ? __pfx_kthread+0x10/0x10
[  488.669272][T12489]  ret_from_fork+0x599/0xb30
[  488.669298][T12489]  ? __pfx_ret_from_fork+0x10/0x10
[  488.669337][T12489]  ? __switch_to_asm+0x39/0x70
[  488.669362][T12489]  ? __switch_to_asm+0x33/0x70
[  488.669386][T12489]  ? __pfx_kthread+0x10/0x10
[  488.669415][T12489]  ret_from_fork_asm+0x1a/0x30
[  488.669469][T12489]  </TASK>
[  489.025870][T12489] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  489.599698][T13670] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2578'.
[  489.633354][T13672] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  489.673454][T13672] program syz.4.2579 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  489.795071][T13674] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3884551189 (124305638048 ns) > initial count (121102246752 ns). Using initial count to start timer.
[  489.860277][T13678] loop1: detected capacity change from 0 to 4096
[  489.910457][T13685] netlink: 68 bytes leftover after parsing attributes in process `syz.4.2581'.
[  490.154273][T13697] fuse: Unknown parameter 'grou00000000000000000000'
[  490.157800][T13698] netlink: 'syz.4.2581': attribute type 21 has an invalid length.
[  490.174184][T13698] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2581'.
[  492.326170][T13715] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2593'.
[  492.619870][T13703] loop3: detected capacity change from 0 to 32768
[  492.685100][T13703] (syz.3.2589,13703,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  492.737606][T13703] (syz.3.2589,13703,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  492.823017][T13703] JBD2: Ignoring recovery information on journal
[  493.033369][T13723] loop0: detected capacity change from 0 to 4096
[  493.045971][T13703] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  493.324589][T13741] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2589'.
[  493.416833][T13741] bridge_slave_0: left allmulticast mode
[  493.423500][T13741] bridge_slave_0: left promiscuous mode
[  493.430150][T13741] bridge0: port 1(bridge_slave_0) entered disabled state
[  493.611269][T13749] fuse: Unknown parameter 'group_i00000000000000000000'
[  493.827277][ T5836] ocfs2: Unmounting device (7,3) on (node local)
[  493.970359][  T890] usb 5-1: new high-speed USB device number 30 using dummy_hcd
[  494.133295][  T890] usb 5-1: config 220 has an invalid interface number: 76 but max is 2
[  494.149423][  T890] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  494.179199][  T890] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  494.221486][  T890] usb 5-1: config 220 has no interface number 2
[  494.240807][  T890] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  494.272507][  T890] usb 5-1: config 220 interface 0 has no altsetting 0
[  494.296480][  T890] usb 5-1: config 220 interface 76 has no altsetting 0
[  494.322745][  T890] usb 5-1: config 220 interface 1 has no altsetting 0
[  494.347935][  T890] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  494.388570][  T890] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  494.406123][  T890] usb 5-1: Product: syz
[  494.414816][  T890] usb 5-1: Manufacturer: syz
[  494.426170][  T890] usb 5-1: SerialNumber: syz
[  494.730490][T13760] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2604'.
[  495.200538][T13776] loop0: detected capacity change from 0 to 128
[  495.232645][T13776] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; going on - but anything won't be destroyed because it's read-only
[  495.784543][T13776] hpfs: hpfs_map_sector(): read error
[  495.841821][   T37] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  496.009592][   T37] usb 4-1: Using ep0 maxpacket: 8
[  496.034473][   T37] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7
[  496.074039][   T37] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[  496.083759][   T37] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[  496.092280][   T37] usb 4-1: Product: syz
[  496.096590][   T37] usb 4-1: Manufacturer: syz
[  496.107856][   T37] usb 4-1: SerialNumber: syz
[  496.401627][   T37] usb 4-1: Handspring Visor / Palm OS: No valid connect info available
[  496.506210][  T890] uvcvideo 5-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[  496.538966][   T37] usb 4-1: Handspring Visor / Palm OS: port 76, is for unknown use
[  496.550699][  T890] uvcvideo 5-1:220.0: No valid video chain found.
[  496.557393][   T37] usb 4-1: Handspring Visor / Palm OS: port 111, is for HotSync use
[  496.569572][   T37] usb 4-1: Handspring Visor / Palm OS: Number of ports: 2
[  496.577415][  T890] usb 5-1: selecting invalid altsetting 0
[  496.586544][  T890] usb 5-1: selecting invalid altsetting 0
[  496.619934][T13789] fuse: Unknown parameter 'group_i00000000000000000000'
[  496.621540][  T890] usbtest 5-1:220.1: probe with driver usbtest failed with error -22
[  496.631604][T13788] autofs: Bad value for 'uid'
[  496.645022][T13788] autofs: Bad value for 'uid'
[  496.651997][  T890] usb 5-1: USB disconnect, device number 30
[  496.717280][   T37] visor 4-1:1.0: Handspring Visor / Palm OS converter detected
[  496.734940][   T37] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB0
[  496.749384][   T37] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB1
[  496.921925][   T37] usb 4-1: USB disconnect, device number 22
[  496.933596][   T37] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0
[  496.948846][   T37] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1
[  496.959157][   T37] visor 4-1:1.0: device disconnected
[  497.504087][T13808] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2619'.
[  497.611041][T13815] netlink: 'syz.1.2619': attribute type 21 has an invalid length.
[  497.619200][T13815] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2619'.
[  497.998254][T13812] loop0: detected capacity change from 0 to 32768
[  498.009188][T13812] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.2621 (13812)
[  498.029677][T13812] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  498.044621][T13812] BTRFS info (device loop0): using crc32c checksum algorithm
[  498.141431][T13812] BTRFS info (device loop0): checking UUID tree
[  498.150475][T13812] BTRFS info (device loop0): setting nodatasum
[  498.160546][T13812] BTRFS info (device loop0): setting nodatacow
[  498.172610][T13812] BTRFS info (device loop0): enabling ssd optimizations
[  498.187569][T13812] BTRFS info (device loop0): using spread ssd allocation scheme
[  498.199932][T13812] BTRFS info (device loop0): turning on async discard
[  498.219718][T13812] BTRFS info (device loop0): enabling free space tree
[  498.236866][T13812] BTRFS info (device loop0): enabling auto defrag
[  498.272404][T13812] BTRFS info (device loop0): max_inline set to 0
[  498.353111][T13837] loop3: detected capacity change from 0 to 256
[  498.360580][T13837] exfat: Deprecated parameter 'utf8'
[  498.369292][T13837] exfat: Deprecated parameter 'namecase'
[  498.381955][T13837] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012153, chksum : 0xc3dffc2e, utbl_chksum : 0xe619d30d)
[  498.395822][T13837] exFAT-fs (loop3): failed to test first cluster bit of root dir(5)
[  498.608256][   T30] audit: type=1800 audit(1766323520.175:423): pid=13843 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2621" name="bus" dev="loop0" ino=264 res=0 errno=0
[  498.709633][  T890] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  498.820627][ T5824] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  498.830417][ T5839] Bluetooth: hci5: command 0x1003 tx timeout
[  498.832852][ T5147] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  498.886316][  T890] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  498.903439][  T890] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  498.912732][  T890] usb 2-1: Product: syz
[  498.917028][  T890] usb 2-1: Manufacturer: syz
[  498.921880][  T890] usb 2-1: SerialNumber: syz
[  498.934317][  T890] usb 2-1: config 0 descriptor??
[  499.169265][T13846] FAULT_INJECTION: forcing a failure.
[  499.169265][T13846] name failslab, interval 1, probability 0, space 0, times 0
[  499.182222][T13846] CPU: 0 UID: 0 PID: 13846 Comm: syz.4.2628 Not tainted syzkaller #0 PREEMPT(full) 
[  499.182242][T13846] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  499.182249][T13846] Call Trace:
[  499.182256][T13846]  <TASK>
[  499.182262][T13846]  dump_stack_lvl+0x189/0x250
[  499.182282][T13846]  ? __pfx____ratelimit+0x10/0x10
[  499.182298][T13846]  ? __pfx_dump_stack_lvl+0x10/0x10
[  499.182318][T13846]  ? __pfx__printk+0x10/0x10
[  499.182343][T13846]  ? __pfx___might_resched+0x10/0x10
[  499.182355][T13846]  ? fs_reclaim_acquire+0x7d/0x100
[  499.182371][T13846]  should_fail_ex+0x414/0x560
[  499.182388][T13846]  should_failslab+0xa8/0x100
[  499.182403][T13846]  kmem_cache_alloc_lru_noprof+0x8d/0x6e0
[  499.182415][T13846]  ? __d_alloc+0x37/0x6f0
[  499.182434][T13846]  __d_alloc+0x37/0x6f0
[  499.182450][T13846]  ? __pfx___dquot_initialize+0x10/0x10
[  499.182464][T13846]  d_alloc_pseudo+0x21/0xc0
[  499.182482][T13846]  alloc_file_pseudo+0xcc/0x210
[  499.182499][T13846]  ? __pfx_alloc_file_pseudo+0x10/0x10
[  499.182522][T13846]  __shmem_file_setup+0x284/0x300
[  499.182541][T13846]  __se_sys_memfd_create+0x3bc/0xa00
[  499.182558][T13846]  ? ksys_write+0x22a/0x250
[  499.182571][T13846]  ? __pfx___se_sys_memfd_create+0x10/0x10
[  499.182589][T13846]  ? do_syscall_64+0xbe/0xf80
[  499.182606][T13846]  do_syscall_64+0xfa/0xf80
[  499.182622][T13846]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  499.182633][T13846]  ? clear_bhb_loop+0x60/0xb0
[  499.182647][T13846]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  499.182665][T13846] RIP: 0033:0x7fd8b8f8f749
[  499.182677][T13846] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  499.182687][T13846] RSP: 002b:00007fd8b9e8ce18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f
[  499.182700][T13846] RAX: ffffffffffffffda RBX: 0000000000000474 RCX: 00007fd8b8f8f749
[  499.182708][T13846] RDX: 00007fd8b9e8cef0 RSI: 0000000000000000 RDI: 00007fd8b9014960
[  499.182716][T13846] RBP: 0000200000000500 R08: 00007fd8b9e8cbb7 R09: 00007fd8b9e8ce40
[  499.182722][T13846] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000080
[  499.182729][T13846] R13: 00007fd8b9e8cef0 R14: 00007fd8b9e8ceb0 R15: 00002000000000c0
[  499.182748][T13846]  </TASK>
[  499.453643][  T890] usb 2-1: Firmware: major: 0, minor: 87, hardware type: UNKNOWN (231)
[  499.611436][T13849] lo speed is unknown, defaulting to 1000
[  499.661675][T13854] fuse: Unknown parameter 'group_i00000000000000000000'
[  499.758977][T13856] veth0_to_bridge: entered promiscuous mode
[  499.801757][T13855] veth0_to_bridge: left promiscuous mode
[  499.948922][  T890] usb 2-1: failed to fetch extended address, random address set
[  499.955728][T13860] loop0: detected capacity change from 0 to 256
[  499.959609][  T890] usb 2-1: atusb_probe: initialization failed, error = -524
[  499.964515][T13860] exfat: Deprecated parameter 'namecase'
[  499.980107][  T890] atusb 2-1:0.0: probe with driver atusb failed with error -524
[  499.993965][T13860] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d)
[  500.008178][  T890] usb 2-1: USB disconnect, device number 25
[  500.280136][T13849] loop4: detected capacity change from 0 to 32768
[  500.304221][T13849] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  500.368179][T13849] XFS (loop4): Ending clean mount
[  500.385248][T13849] XFS (loop4): Quotacheck needed: Please wait.
[  500.438646][T13849] XFS (loop4): Quotacheck: Done.
[  500.588061][   T30] audit: type=1804 audit(1766323522.155:424): pid=13849 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2630" name="/newroot/485/file1/file1" dev="loop4" ino=9286 res=1 errno=0
[  500.635610][T13880] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2635'.
[  500.672736][T13882] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2634'.
[  500.793729][T13888] netlink: 'syz.1.2635': attribute type 21 has an invalid length.
[  500.816448][T13888] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2635'.
[  500.978441][ T5834] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  501.700240][ T1298] ieee802154 phy0 wpan0: encryption failed: -22
[  501.707590][ T1298] ieee802154 phy1 wpan1: encryption failed: -22
[  502.755269][T13917] syzkaller0: Caught tx_queue_len zero misconfig
[  502.771285][T13892] loop3: detected capacity change from 0 to 32768
[  502.792423][T13892] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2639 (13892)
[  502.803477][T13920] fuse: Unknown parameter 'group_id00000000000000000000'
[  502.831540][T13892] BTRFS info (device loop3 state S): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  502.860315][T13892] BTRFS info (device loop3 state S): using crc32c checksum algorithm
[  502.862188][T13922] FAULT_INJECTION: forcing a failure.
[  502.862188][T13922] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  502.880973][T13892] BTRFS error (device loop3 state S): cannot disable free-space-tree
[  502.885563][T13922] CPU: 0 UID: 0 PID: 13922 Comm: syz.1.2647 Not tainted syzkaller #0 PREEMPT(full) 
[  502.885588][T13922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  502.885598][T13922] Call Trace:
[  502.885605][T13922]  <TASK>
[  502.885612][T13922]  dump_stack_lvl+0x189/0x250
[  502.885639][T13922]  ? __pfx____ratelimit+0x10/0x10
[  502.885671][T13922]  ? __pfx_dump_stack_lvl+0x10/0x10
[  502.885691][T13922]  ? __pfx__printk+0x10/0x10
[  502.885715][T13922]  ? __might_fault+0xb0/0x130
[  502.885743][T13922]  should_fail_ex+0x414/0x560
[  502.885768][T13922]  _copy_from_user+0x2d/0xb0
[  502.885791][T13922]  ___sys_sendmsg+0x158/0x2a0
[  502.885817][T13922]  ? __pfx____sys_sendmsg+0x10/0x10
[  502.885846][T13922]  ? rcu_read_lock_any_held+0xb3/0x120
[  502.885895][T13922]  ? __fget_files+0x2a/0x420
[  502.885916][T13922]  ? __fget_files+0x3a0/0x420
[  502.885948][T13922]  __x64_sys_sendmsg+0x19b/0x260
[  502.885973][T13922]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  502.886006][T13922]  ? __pfx_ksys_write+0x10/0x10
[  502.886029][T13922]  ? do_syscall_64+0xbe/0xf80
[  502.886054][T13922]  do_syscall_64+0xfa/0xf80
[  502.886076][T13922]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  502.886093][T13922]  ? clear_bhb_loop+0x60/0xb0
[  502.886113][T13922]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  502.886129][T13922] RIP: 0033:0x7f8ed598f749
[  502.886146][T13922] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  502.886160][T13922] RSP: 002b:00007f8ed682d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  502.886179][T13922] RAX: ffffffffffffffda RBX: 00007f8ed5be5fa0 RCX: 00007f8ed598f749
[  502.886191][T13922] RDX: 0000000004000080 RSI: 00002000000002c0 RDI: 0000000000000006
[  502.886202][T13922] RBP: 00007f8ed682d090 R08: 0000000000000000 R09: 0000000000000000
[  502.886212][T13922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  502.886222][T13922] R13: 00007f8ed5be6038 R14: 00007f8ed5be5fa0 R15: 00007ffc18b9ecd8
[  502.886251][T13922]  </TASK>
[  503.095946][T13892] BTRFS warning (device loop3 state S): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  503.111508][T13892] BTRFS error (device loop3 state S): open_ctree failed: -22
[  503.368625][T13930] loop3: detected capacity change from 0 to 764
[  505.479655][ T6513] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  506.191447][T13950] loop0: detected capacity change from 0 to 131072
[  506.201570][T13950] F2FS-fs (loop0): invalid crc value
[  506.273196][T13950] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  506.283774][T13950] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  506.299650][ T6513] usb 4-1: Using ep0 maxpacket: 32
[  506.312124][ T6513] usb 4-1: too many configurations: 17, using maximum allowed: 8
[  506.330541][ T6513] usb 4-1: config 0 has an invalid interface number: 2 but max is 0
[  506.338666][ T6513] usb 4-1: config 0 has no interface number 0
[  506.351710][ T6513] usb 4-1: config 0 has an invalid interface number: 2 but max is 0
[  506.361825][ T6513] usb 4-1: config 0 has no interface number 0
[  506.369644][ T6513] usb 4-1: config 0 has an invalid interface number: 2 but max is 0
[  506.380345][ T6513] usb 4-1: config 0 has no interface number 0
[  506.390628][ T6513] usb 4-1: config 0 has an invalid interface number: 2 but max is 0
[  506.398691][ T6513] usb 4-1: config 0 has no interface number 0
[  506.424083][ T6513] usb 4-1: config 0 has an invalid interface number: 2 but max is 0
[  506.433023][ T6513] usb 4-1: config 0 has no interface number 0
[  506.450709][ T6513] usb 4-1: config 0 has an invalid interface number: 2 but max is 0
[  506.462280][ T6513] usb 4-1: config 0 has no interface number 0
[  506.473715][ T6513] usb 4-1: config 0 has an invalid interface number: 2 but max is 0
[  506.506587][ T6513] usb 4-1: config 0 has no interface number 0
[  506.519858][ T6513] usb 4-1: config 0 has an invalid interface number: 2 but max is 0
[  506.559740][ T6513] usb 4-1: config 0 has no interface number 0
[  506.572840][ T6513] usb 4-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2
[  506.608262][ T6513] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  506.646317][ T6513] usb 4-1: Product: syz
[  506.655124][ T6513] usb 4-1: Manufacturer: syz
[  506.689634][ T6513] usb 4-1: SerialNumber: syz
[  506.741647][ T6513] usb 4-1: config 0 descriptor??
[  506.759190][ T6513] etas_es58x 4-1:0.2: Starting syz syz (Serial Number syz)
[  506.907837][T13962] fuse: Unknown parameter 'use00000000000000000000'
[  507.121049][ T6513] etas_es58x 4-1:0.2: could not retrieve the product info string
[  507.192628][ T6513] usb 4-1: USB disconnect, device number 23
[  507.215476][ T6513] etas_es58x 4-1:0.2: Disconnecting syz syz
[  507.938871][T13975] fuse: Unknown parameter 'group_id00000000000000000000'
[  507.985058][T13977] syzkaller0: entered promiscuous mode
[  507.992317][T13977] syzkaller0: entered allmulticast mode
[  508.009305][T13977] syzkaller0: Caught tx_queue_len zero misconfig
[  508.043407][T13977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  508.052137][T13977] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  508.406727][  T890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  508.415671][  T890] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  508.540428][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  508.549104][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  508.620102][T13998] fuse: Unknown parameter 'use00000000000000000000'
[  508.990395][    T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  509.351806][T14011] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2677'.
[  509.569841][T14020] loop4: detected capacity change from 0 to 64
[  509.593500][T14021] netlink: 348 bytes leftover after parsing attributes in process `syz.0.2678'.
[  509.609094][T14021] netlink: 348 bytes leftover after parsing attributes in process `syz.0.2678'.
[  509.679608][   T37] usb 2-1: new full-speed USB device number 26 using dummy_hcd
[  509.806008][T14026] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in;
[  509.806008][T14026]    program syz.4.2682 not setting count and/or reply_len properly
[  509.834435][   T37] usb 2-1: New USB device found, idVendor=13d8, idProduct=0011, bcdDevice=d0.62
[  509.844048][   T37] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  509.859786][   T37] usb 2-1: Product: syz
[  509.864117][   T37] usb 2-1: Manufacturer: syz
[  509.868741][   T37] usb 2-1: SerialNumber: syz
[  509.890625][   T37] usb 2-1: config 0 descriptor??
[  509.921605][   T37] comedi comedi5: This driver needs USB 2.0 to operate. Aborting...
[  509.939745][   T37] usbduxfast 2-1:0.0: driver 'usbduxfast' failed to auto-configure device.
[  510.077896][T14030] fuse: Unknown parameter 'group_id00000000000000000000'
[  510.105485][   T37] usb 2-1: USB disconnect, device number 26
[  510.141874][T14032] loop4: detected capacity change from 0 to 1024
[  510.494960][T14040] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2686'.
[  511.161815][T14039] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2688'.
[  511.515095][T14053] netlink: 'syz.0.2693': attribute type 1 has an invalid length.
[  511.523339][T14053] netlink: 1828 bytes leftover after parsing attributes in process `syz.0.2693'.
[  511.533517][T14053] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2693'.
[  511.585590][T14043] lo speed is unknown, defaulting to 1000
[  511.870235][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  511.878957][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  511.979590][    T9] usb 5-1: new high-speed USB device number 31 using dummy_hcd
[  512.160508][    T9] usb 5-1: Using ep0 maxpacket: 16
[  512.169455][    T9] usb 5-1: unable to get BOS descriptor or descriptor too short
[  512.180492][    T9] usb 5-1: config 8 interface 0 has no altsetting 0
[  512.196850][    T9] usb 5-1: New USB device found, idVendor=5fc9, idProduct=0063, bcdDevice= f.ca
[  512.209620][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  512.218199][    T9] usb 5-1: Product: syz
[  512.233959][    T9] usb 5-1: Manufacturer: syz
[  512.240756][    T9] usb 5-1: SerialNumber: syz
[  512.493585][    T9] usb 5-1: USB disconnect, device number 31
[  512.522268][T14075] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2700'.
[  512.590830][T14077] fuse: Bad value for 'user_id'
[  512.620176][T14077] fuse: Bad value for 'user_id'
[  513.111762][T14087] netlink: 'syz.4.2705': attribute type 1 has an invalid length.
[  513.129654][T14087] netlink: 1828 bytes leftover after parsing attributes in process `syz.4.2705'.
[  513.138933][T14087] netlink: 5 bytes leftover after parsing attributes in process `syz.4.2705'.
[  513.157457][T14089] loop0: detected capacity change from 0 to 1024
[  513.181326][T14089] EXT4-fs: Ignoring removed nomblk_io_submit option
[  513.225615][T14089] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  513.313139][   T37] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  513.519566][   T37] usb 2-1: Using ep0 maxpacket: 8
[  513.552270][   T37] usb 2-1: config 0 has an invalid interface number: 55 but max is 0
[  513.611694][   T37] usb 2-1: config 0 has no interface number 0
[  513.667110][   T37] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  513.779018][   T37] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  513.910406][   T37] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  513.996695][   T37] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  514.110180][   T37] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  514.134428][ T5824] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  514.149721][   T37] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  514.174841][   T37] usb 2-1: config 0 descriptor??
[  514.243917][   T37] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  514.344418][T14106] loop4: detected capacity change from 0 to 1024
[  514.368657][T14106] EXT4-fs: Ignoring removed nomblk_io_submit option
[  514.403381][    T9] usb 2-1: USB disconnect, device number 27
[  514.435280][T14085] loop1: detected capacity change from 0 to 256
[  514.446858][    T9] ldusb 2-1:0.55: LD USB Device #0 now disconnected
[  514.454830][T14106] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  514.532426][T14085] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  514.534148][T14111] __nla_validate_parse: 1 callbacks suppressed
[  514.534164][T14111] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2712'.
[  514.562015][T14085] exFAT-fs (loop1): Medium has reported failures. Some data may be lost.
[  514.611462][T14085] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d)
[  514.701665][T14085] exFAT-fs (loop1): failed to load alloc-bitmap
[  514.734225][T14085] exFAT-fs (loop1): failed to recognize exfat type
[  515.646943][ T5834] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  515.847267][T14126] fuse: Bad value for 'user_id'
[  515.859680][T14126] fuse: Bad value for 'user_id'
[  516.211870][T14148] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2724'.
[  516.362377][T14152] loop0: detected capacity change from 0 to 512
[  516.403361][T14152] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  516.424426][T14152] ext4 filesystem being mounted at /557/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  516.558381][ T5824] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  516.770100][T14163] loop0: detected capacity change from 0 to 8192
[  517.009618][ T6513] usb 2-1: new full-speed USB device number 28 using dummy_hcd
[  517.100994][T14154] exFAT-fs (loop4): unable to read boot sector
[  517.129691][T14154] exFAT-fs (loop4): failed to read boot sector
[  517.136154][T14154] exFAT-fs (loop4): failed to recognize exfat type
[  517.172061][ T6513] usb 2-1: too many endpoints for config 1 interface 0 altsetting 7: 255, using maximum allowed: 30
[  517.230645][ T6513] usb 2-1: config 1 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  517.249546][ T6513] usb 2-1: config 1 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0
[  517.279635][ T6513] usb 2-1: config 1 interface 0 altsetting 7 has 3 endpoint descriptors, different from the interface descriptor's value: 255
[  517.295776][T14174] loop3: detected capacity change from 0 to 128
[  517.302460][T14168] orangefs: client-core tried to read wrong size
[  517.302475][ T6513] usb 2-1: config 1 interface 0 has no altsetting 0
[  517.335924][ T6513] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  517.345403][ T6513] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  517.361250][ T6513] usb 2-1: SerialNumber: syz
[  517.372540][ T6513] usb 2-1: rejected 1 configuration due to insufficient available bus power
[  517.385844][ T6513] usb 2-1: no configuration chosen from 1 choice
[  518.277242][T14194] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2737'.
[  518.373739][ T5839] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  518.391609][ T5839] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  518.400884][ T5839] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  518.421557][ T5839] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  518.429587][ T5839] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  518.507627][T14200] fuse: Bad value for 'user_id'
[  518.522413][T14200] fuse: Bad value for 'user_id'
[  518.842910][T14196] loop4: detected capacity change from 0 to 32768
[  518.874630][T14196] ERROR: (device loop4): dbAlloc: the hint is outside the map
[  518.874630][T14196] 
[  518.939767][T14196] ERROR: (device loop4): remounting filesystem as read-only
[  518.947241][T14196] ialloc: diAlloc returned -5!
[  518.970166][T14201] read_mapping_page failed!
[  518.974725][T14201] diRead: read_metapage failed
[  518.990111][T14201] jfs_lookup: iget failed on inum 32
[  518.996977][T14196] read_mapping_page failed!
[  519.003092][T14196] diRead: read_metapage failed
[  519.008002][T14196] jfs_lookup: iget failed on inum 32
[  519.025597][T14196] read_mapping_page failed!
[  519.034572][T14196] diRead: read_metapage failed
[  519.049779][T14196] jfs_lookup: iget failed on inum 32
[  519.552958][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  519.561387][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  519.769921][ T6513] usb 5-1: new full-speed USB device number 32 using dummy_hcd
[  519.814423][    T9] usb 2-1: USB disconnect, device number 28
[  519.960074][ T6513] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 10
[  519.982175][ T6513] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[  520.004289][ T6513] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  520.016185][ T6513] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  520.057603][ T6513] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  520.077176][ T6513] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  520.085367][ T6513] usb 5-1: Product: syz
[  520.090516][ T6513] usb 5-1: Manufacturer: syz
[  520.108559][ T6513] usb 5-1: SerialNumber: syz
[  520.125991][ T6513] usb 5-1: config 0 descriptor??
[  520.133390][T14206] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  520.267293][ T6513] usb 5-1: ucan: probing device on interface #0
[  520.284011][ T6513] usb 5-1: ucan: invalid endpoint configuration
[  520.298312][ T6513] usb 5-1: ucan: probe failed; try to update the device firmware
[  520.520904][ T5147] Bluetooth: hci5: command tx timeout
[  520.610808][T14216] futex_wake_op: syz.0.2743 tries to shift op by -1; fix this program
[  520.628190][T14215] loop0: detected capacity change from 0 to 1024
[  520.994780][    T9] usb 1-1: new high-speed USB device number 30 using dummy_hcd
[  521.178538][    T9] usb 1-1: config 220 has an invalid interface number: 76 but max is 2
[  521.186963][    T9] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  521.196501][    T9] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  521.207137][    T9] usb 1-1: config 220 has no interface number 2
[  521.222961][    T9] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  521.236446][    T9] usb 1-1: config 220 interface 0 has no altsetting 0
[  521.243402][    T9] usb 1-1: config 220 interface 76 has no altsetting 0
[  521.259748][    T9] usb 1-1: config 220 interface 1 has no altsetting 0
[  521.321264][    T9] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  521.330522][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  521.347863][    T9] usb 1-1: Product: syz
[  521.352197][    T9] usb 1-1: Manufacturer: syz
[  521.356826][    T9] usb 1-1: SerialNumber: syz
[  521.650044][T14221] sctp: [Deprecated]: syz.0.2744 (pid 14221) Use of int in maxseg socket option.
[  521.650044][T14221] Use struct sctp_assoc_value instead
[  521.775022][T14220] loop0: detected capacity change from 0 to 4096
[  522.518662][T14197] lo speed is unknown, defaulting to 1000
[  522.543376][ T6513] usb 5-1: USB disconnect, device number 32
[  522.589791][ T5147] Bluetooth: hci5: command tx timeout
[  522.778477][T14228] ip6tnl1: entered promiscuous mode
[  522.790309][T14230] FAULT_INJECTION: forcing a failure.
[  522.790309][T14230] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  522.857186][  T726] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  522.882060][T14230] CPU: 0 UID: 0 PID: 14230 Comm: syz.4.2746 Not tainted syzkaller #0 PREEMPT(full) 
[  522.882089][T14230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  522.882100][T14230] Call Trace:
[  522.882108][T14230]  <TASK>
[  522.882122][T14230]  dump_stack_lvl+0x189/0x250
[  522.882151][T14230]  ? __pfx____ratelimit+0x10/0x10
[  522.882166][T14230]  ? __pfx_dump_stack_lvl+0x10/0x10
[  522.882180][T14230]  ? __pfx__printk+0x10/0x10
[  522.882197][T14230]  ? __might_fault+0xb0/0x130
[  522.882216][T14230]  should_fail_ex+0x414/0x560
[  522.882232][T14230]  _copy_from_iter+0x1cd/0x1630
[  522.882246][T14230]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  522.882265][T14230]  ? __pfx__copy_from_iter+0x10/0x10
[  522.882281][T14230]  ? dev_get_by_index+0x22/0x2f0
[  522.882293][T14230]  ? dev_get_by_index+0x22/0x2f0
[  522.882309][T14230]  packet_sendmsg+0x307f/0x50a0
[  522.882324][T14230]  ? aa_label_sk_perm+0x4c4/0x610
[  522.882344][T14230]  ? __pfx_aa_label_sk_perm+0x10/0x10
[  522.882371][T14230]  ? __pfx___might_resched+0x10/0x10
[  522.882390][T14230]  ? __pfx_packet_sendmsg+0x10/0x10
[  522.882404][T14230]  ? aa_sk_perm+0x7ee/0x920
[  522.882422][T14230]  ? __pfx_aa_sk_perm+0x10/0x10
[  522.882434][T14230]  ? tomoyo_socket_sendmsg_permission+0x1e1/0x300
[  522.882459][T14230]  ? __pfx_packet_sendmsg+0x10/0x10
[  522.882469][T14230]  sock_sendmsg_nosec+0x18f/0x1d0
[  522.882483][T14230]  __sys_sendto+0x3ce/0x540
[  522.882500][T14230]  ? __pfx___sys_sendto+0x10/0x10
[  522.882512][T14230]  ? __mutex_unlock_slowpath+0x1a1/0x730
[  522.882536][T14230]  ? __fget_files+0x3a0/0x420
[  522.882558][T14230]  ? ksys_write+0x22a/0x250
[  522.882572][T14230]  ? __pfx_ksys_write+0x10/0x10
[  522.882586][T14230]  __x64_sys_sendto+0xde/0x100
[  522.882603][T14230]  do_syscall_64+0xfa/0xf80
[  522.882619][T14230]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  522.882630][T14230]  ? clear_bhb_loop+0x60/0xb0
[  522.882644][T14230]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  522.882655][T14230] RIP: 0033:0x7fd8b8f8f749
[  522.882667][T14230] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  522.882677][T14230] RSP: 002b:00007fd8b9e6c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  522.882690][T14230] RAX: ffffffffffffffda RBX: 00007fd8b91e6090 RCX: 00007fd8b8f8f749
[  522.882707][T14230] RDX: 0000000000000026 RSI: 0000200000000240 RDI: 0000000000000003
[  522.882714][T14230] RBP: 00007fd8b9e6c090 R08: 0000200000000540 R09: 0000000000000014
[  522.882721][T14230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  522.882728][T14230] R13: 00007fd8b91e6128 R14: 00007fd8b91e6090 R15: 00007ffdebc09a98
[  522.882747][T14230]  </TASK>
[  523.268694][  T726] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  523.413073][  T726] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  523.442395][T14239] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2748'.
[  523.608611][  T726] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  523.717117][T14244] fuse: Bad value for 'fd'
[  523.843729][    T9] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07)
[  523.865594][    T9] uvcvideo 1-1:220.0: No valid video chain found.
[  523.884653][    T9] usb 1-1: selecting invalid altsetting 0
[  523.971834][    T9] usb 1-1: selecting invalid altsetting 0
[  523.995737][    T9] usbtest 1-1:220.1: probe with driver usbtest failed with error -22
[  524.036269][    T9] usb 1-1: USB disconnect, device number 30
[  524.067926][T14197] chnl_net:caif_netlink_parms(): no params data found
[  524.111191][  T726] bridge_slave_0: left allmulticast mode
[  524.249799][  T726] bridge_slave_0: left promiscuous mode
[  524.258261][  T726] bridge0: port 1(bridge_slave_0) entered disabled state
[  524.520725][T14255] FAULT_INJECTION: forcing a failure.
[  524.520725][T14255] name failslab, interval 1, probability 0, space 0, times 0
[  524.533765][T14255] CPU: 0 UID: 0 PID: 14255 Comm: syz.3.2753 Not tainted syzkaller #0 PREEMPT(full) 
[  524.533792][T14255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  524.533808][T14255] Call Trace:
[  524.533814][T14255]  <TASK>
[  524.533820][T14255]  dump_stack_lvl+0x189/0x250
[  524.533840][T14255]  ? __pfx____ratelimit+0x10/0x10
[  524.533855][T14255]  ? __pfx_dump_stack_lvl+0x10/0x10
[  524.533868][T14255]  ? __pfx__printk+0x10/0x10
[  524.533886][T14255]  ? __pfx___might_resched+0x10/0x10
[  524.533899][T14255]  ? fs_reclaim_acquire+0x7d/0x100
[  524.533915][T14255]  should_fail_ex+0x414/0x560
[  524.533932][T14255]  should_failslab+0xa8/0x100
[  524.533947][T14255]  kmem_cache_alloc_noprof+0x88/0x710
[  524.533960][T14255]  ? alloc_empty_file+0x55/0x1d0
[  524.533974][T14255]  ? preempt_schedule_thunk+0x16/0x30
[  524.533988][T14255]  alloc_empty_file+0x55/0x1d0
[  524.534004][T14255]  alloc_file_pseudo+0x13d/0x210
[  524.534021][T14255]  ? __pfx_alloc_file_pseudo+0x10/0x10
[  524.534044][T14255]  __shmem_file_setup+0x284/0x300
[  524.534063][T14255]  __se_sys_memfd_create+0x3bc/0xa00
[  524.534080][T14255]  ? ksys_write+0x22a/0x250
[  524.534093][T14255]  ? __pfx___se_sys_memfd_create+0x10/0x10
[  524.534111][T14255]  ? do_syscall_64+0xbe/0xf80
[  524.534128][T14255]  do_syscall_64+0xfa/0xf80
[  524.534144][T14255]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  524.534155][T14255]  ? clear_bhb_loop+0x60/0xb0
[  524.534169][T14255]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  524.534180][T14255] RIP: 0033:0x7f750338f749
[  524.534192][T14255] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  524.534201][T14255] RSP: 002b:00007f75015f5e18 EFLAGS: 00000202 ORIG_RAX: 000000000000013f
[  524.534214][T14255] RAX: ffffffffffffffda RBX: 0000000000000474 RCX: 00007f750338f749
[  524.534222][T14255] RDX: 00007f75015f5ef0 RSI: 0000000000000000 RDI: 00007f7503414960
[  524.534229][T14255] RBP: 0000200000000500 R08: 00007f75015f5bb7 R09: 00007f75015f5e40
[  524.534236][T14255] R10: 000000000000000a R11: 0000000000000202 R12: 0000200000000080
[  524.534243][T14255] R13: 00007f75015f5ef0 R14: 00007f75015f5eb0 R15: 00002000000000c0
[  524.534261][T14255]  </TASK>
[  524.758841][ T5147] Bluetooth: hci5: command tx timeout
[  525.384305][T14265] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2759'.
[  525.513544][T14271] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20000
[  525.692582][T14275] loop1: detected capacity change from 0 to 1024
[  525.692906][T14267] loop0: detected capacity change from 0 to 4096
[  525.717005][T14277] 9p: Bad value for 'rfdno'
[  526.343722][  T726] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  526.378000][  T726] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  526.395865][  T726] bond0 (unregistering): Released all slaves
[  526.483246][T14285] syzkaller0: Caught tx_queue_len zero misconfig
[  526.512867][T14294] fuse: Bad value for 'fd'
[  526.829951][ T5147] Bluetooth: hci5: command tx timeout
[  527.066409][T14300] FAULT_INJECTION: forcing a failure.
[  527.066409][T14300] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  527.080665][T14300] CPU: 1 UID: 0 PID: 14300 Comm: syz.0.2766 Not tainted syzkaller #0 PREEMPT(full) 
[  527.080691][T14300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  527.080712][T14300] Call Trace:
[  527.080720][T14300]  <TASK>
[  527.080727][T14300]  dump_stack_lvl+0x189/0x250
[  527.080754][T14300]  ? __pfx____ratelimit+0x10/0x10
[  527.080776][T14300]  ? __pfx_dump_stack_lvl+0x10/0x10
[  527.080796][T14300]  ? __pfx__printk+0x10/0x10
[  527.080834][T14300]  should_fail_ex+0x414/0x560
[  527.080858][T14300]  _copy_to_user+0x31/0xb0
[  527.080884][T14300]  simple_read_from_buffer+0xe1/0x170
[  527.080911][T14300]  proc_fail_nth_read+0x1b3/0x220
[  527.080933][T14300]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  527.080957][T14300]  ? rw_verify_area+0x2a6/0x4d0
[  527.080974][T14300]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  527.080995][T14300]  vfs_read+0x200/0xa30
[  527.081012][T14300]  ? fdget_pos+0x247/0x320
[  527.081040][T14300]  ? __pfx___mutex_lock+0x10/0x10
[  527.081066][T14300]  ? __pfx_vfs_read+0x10/0x10
[  527.081085][T14300]  ? __fget_files+0x2a/0x420
[  527.081112][T14300]  ? __fget_files+0x3a0/0x420
[  527.081131][T14300]  ? __fget_files+0x2a/0x420
[  527.081164][T14300]  ksys_read+0x145/0x250
[  527.081185][T14300]  ? __pfx_ksys_read+0x10/0x10
[  527.081206][T14300]  ? do_syscall_64+0xbe/0xf80
[  527.081231][T14300]  do_syscall_64+0xfa/0xf80
[  527.081253][T14300]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  527.081270][T14300]  ? clear_bhb_loop+0x60/0xb0
[  527.081291][T14300]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  527.081307][T14300] RIP: 0033:0x7f4c6e58e15c
[  527.081323][T14300] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  527.081337][T14300] RSP: 002b:00007f4c6f360030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  527.081356][T14300] RAX: ffffffffffffffda RBX: 00007f4c6e7e5fa0 RCX: 00007f4c6e58e15c
[  527.081368][T14300] RDX: 000000000000000f RSI: 00007f4c6f3600a0 RDI: 0000000000000003
[  527.081379][T14300] RBP: 00007f4c6f360090 R08: 0000000000000000 R09: 0000000000000000
[  527.081389][T14300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  527.081399][T14300] R13: 00007f4c6e7e6038 R14: 00007f4c6e7e5fa0 R15: 00007ffceeee95d8
[  527.081432][T14300]  </TASK>
[  527.516424][T14310] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2769'.
[  527.572186][T14197] bridge0: port 1(bridge_slave_0) entered blocking state
[  527.587868][T14197] bridge0: port 1(bridge_slave_0) entered disabled state
[  527.602175][T14197] bridge_slave_0: entered allmulticast mode
[  527.614120][T14197] bridge_slave_0: entered promiscuous mode
[  527.680779][    T9] usb 1-1: new high-speed USB device number 31 using dummy_hcd
[  527.696355][  T726] hsr_slave_0: left promiscuous mode
[  527.714707][  T726] hsr_slave_1: left promiscuous mode
[  527.725541][  T726] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  527.743469][  T726] batman_adv: batadv0: Removing interface: batadv_slave_0
[  527.764003][  T726] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  527.777286][  T726] batman_adv: batadv0: Removing interface: batadv_slave_1
[  527.838937][  T726] veth1_macvtap: left promiscuous mode
[  527.847440][T14318] syz.4.2772 (14318): drop_caches: 0
[  527.861392][  T726] veth0_macvtap: left promiscuous mode
[  527.867898][    T9] usb 1-1: config 0 has no interfaces?
[  527.876371][    T9] usb 1-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice=30.00
[  527.896199][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  527.896442][  T726] veth1_vlan: left promiscuous mode
[  527.911277][    T9] usb 1-1: Product: syz
[  527.915665][    T9] usb 1-1: Manufacturer: syz
[  527.929669][    T9] usb 1-1: SerialNumber: syz
[  527.937832][    T9] usb 1-1: config 0 descriptor??
[  527.939854][  T726] veth0_vlan: left promiscuous mode
[  528.163325][   T30] audit: type=1326 audit(1766323549.735:425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14303 comm="syz.0.2767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c6e58f749 code=0x7ffc0000
[  528.198775][ T6513] usb 1-1: USB disconnect, device number 31
[  528.234648][   T30] audit: type=1326 audit(1766323549.755:426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14303 comm="syz.0.2767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=224 compat=0 ip=0x7f4c6e58f749 code=0x7ffc0000
[  528.502384][   T30] audit: type=1326 audit(1766323549.755:427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14303 comm="syz.0.2767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c6e58f749 code=0x7ffc0000
[  528.526049][   T30] audit: type=1326 audit(1766323549.755:428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14303 comm="syz.0.2767" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c6e58f749 code=0x7ffc0000
[  528.994307][T14335] fuse: Bad value for 'fd'
[  529.062009][  T726] team0 (unregistering): Port device team_slave_1 removed
[  529.114191][  T726] team0 (unregistering): Port device team_slave_0 removed
[  529.632669][T14197] bridge0: port 2(bridge_slave_1) entered blocking state
[  529.640462][T14197] bridge0: port 2(bridge_slave_1) entered disabled state
[  529.647792][T14197] bridge_slave_1: entered allmulticast mode
[  529.655444][T14197] bridge_slave_1: entered promiscuous mode
[  529.722993][T14324] vlan2: entered promiscuous mode
[  529.728406][T14324] geneve1: entered promiscuous mode
[  529.735506][T14324] vlan2: entered allmulticast mode
[  529.741107][T14324] geneve1: entered allmulticast mode
[  529.747018][T14325] syzkaller1: entered promiscuous mode
[  529.753630][T14325] syzkaller1: entered allmulticast mode
[  529.888184][T14197] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  529.934352][T14197] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  530.059912][T14197] team0: Port device team_slave_0 added
[  530.070677][T14349] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2781'.
[  530.073192][T14197] team0: Port device team_slave_1 added
[  530.091808][ T6513] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  530.156682][T14197] batman_adv: batadv0: Adding interface: batadv_slave_0
[  530.171621][T14197] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  530.212110][T14197] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  530.227293][T14350] loop4: detected capacity change from 0 to 4096
[  530.231943][T14197] batman_adv: batadv0: Adding interface: batadv_slave_1
[  530.245617][T14197] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  530.274218][T14197] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  530.300343][ T6513] usb 4-1: Using ep0 maxpacket: 8
[  530.308296][ T6513] usb 4-1: unable to get BOS descriptor or descriptor too short
[  530.324896][ T6513] usb 4-1: config 0 has an invalid interface number: 104 but max is 0
[  530.333957][ T6513] usb 4-1: config 0 has no interface number 0
[  530.340482][ T6513] usb 4-1: config 0 interface 104 altsetting 129 endpoint 0x8 has invalid maxpacket 512, setting to 64
[  530.343565][T14355] loop4: detected capacity change from 0 to 256
[  530.352997][ T6513] usb 4-1: config 0 interface 104 has no altsetting 0
[  530.368795][ T6513] usb 4-1: New USB device found, idVendor=2c7c, idProduct=0195, bcdDevice=2f.46
[  530.378759][ T6513] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  530.396915][ T6513] usb 4-1: Product: syz
[  530.407044][ T6513] usb 4-1: Manufacturer: syz
[  530.411391][T14197] hsr_slave_0: entered promiscuous mode
[  530.417170][ T6513] usb 4-1: SerialNumber: syz
[  530.433300][ T6513] usb 4-1: config 0 descriptor??
[  530.440460][T14197] hsr_slave_1: entered promiscuous mode
[  530.564760][T14361] FAULT_INJECTION: forcing a failure.
[  530.564760][T14361] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  530.579010][T14361] CPU: 0 UID: 0 PID: 14361 Comm: syz.4.2785 Not tainted syzkaller #0 PREEMPT(full) 
[  530.579037][T14361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  530.579047][T14361] Call Trace:
[  530.579055][T14361]  <TASK>
[  530.579062][T14361]  dump_stack_lvl+0x189/0x250
[  530.579091][T14361]  ? __pfx____ratelimit+0x10/0x10
[  530.579116][T14361]  ? __pfx_dump_stack_lvl+0x10/0x10
[  530.579140][T14361]  ? __pfx__printk+0x10/0x10
[  530.579169][T14361]  ? __might_fault+0xb0/0x130
[  530.579200][T14361]  should_fail_ex+0x414/0x560
[  530.579227][T14361]  _copy_from_user+0x2d/0xb0
[  530.579254][T14361]  ___sys_sendmsg+0x158/0x2a0
[  530.579286][T14361]  ? __pfx____sys_sendmsg+0x10/0x10
[  530.579321][T14361]  ? rcu_read_lock_any_held+0xb3/0x120
[  530.579377][T14361]  ? __fget_files+0x2a/0x420
[  530.579402][T14361]  ? __fget_files+0x3a0/0x420
[  530.579438][T14361]  __x64_sys_sendmsg+0x19b/0x260
[  530.579474][T14361]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  530.579510][T14361]  ? __pfx_ksys_write+0x10/0x10
[  530.579535][T14361]  ? do_syscall_64+0xbe/0xf80
[  530.579566][T14361]  do_syscall_64+0xfa/0xf80
[  530.579593][T14361]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  530.579613][T14361]  ? clear_bhb_loop+0x60/0xb0
[  530.579635][T14361]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  530.579654][T14361] RIP: 0033:0x7fd8b8f8f749
[  530.579682][T14361] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  530.579698][T14361] RSP: 002b:00007fd8b9e8d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  530.579719][T14361] RAX: ffffffffffffffda RBX: 00007fd8b91e5fa0 RCX: 00007fd8b8f8f749
[  530.579733][T14361] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000006
[  530.579744][T14361] RBP: 00007fd8b9e8d090 R08: 0000000000000000 R09: 0000000000000000
[  530.579756][T14361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  530.579766][T14361] R13: 00007fd8b91e6038 R14: 00007fd8b91e5fa0 R15: 00007ffdebc09a98
[  530.579799][T14361]  </TASK>
[  530.720415][T14342] loop3: detected capacity change from 0 to 4096
[  530.881810][ T6513] option 4-1:0.104: GSM modem (1-port) converter detected
[  530.896758][T14365] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2786'.
[  530.916845][ T6513] usb 4-1: USB disconnect, device number 24
[  530.927422][ T6513] option 4-1:0.104: device disconnected
[  531.098463][T14368] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2787'.
[  531.140874][T14372] fuse: Bad value for 'fd'
[  531.305305][T14375] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2790'.
[  531.369277][T14377] syzkaller1: entered promiscuous mode
[  531.375186][T14377] syzkaller1: entered allmulticast mode
[  531.510967][T14197] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  531.533230][T14383] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2792'.
[  531.552360][T14197] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  531.569403][T14197] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  531.582274][T14197] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  531.649663][  T890] usb 5-1: new full-speed USB device number 33 using dummy_hcd
[  531.987517][T14395] fuse: Unknown parameter 'use00000000000000000000'
[  532.253487][  T890] usb 5-1: config 0 has an invalid interface number: 113 but max is 0
[  532.262295][  T890] usb 5-1: config 0 has no interface number 0
[  532.268771][  T890] usb 5-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4
[  532.282536][T14197] 8021q: adding VLAN 0 to HW filter on device bond0
[  532.298369][  T890] usb 5-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid maxpacket 43115, setting to 64
[  532.323593][  T890] usb 5-1: config 0 interface 113 has no altsetting 0
[  532.347382][  T890] usb 5-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8
[  532.361165][T14197] 8021q: adding VLAN 0 to HW filter on device team0
[  532.375686][  T890] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  532.403405][T12489] bridge0: port 1(bridge_slave_0) entered blocking state
[  532.410850][T12489] bridge0: port 1(bridge_slave_0) entered forwarding state
[  532.420737][  T890] usb 5-1: Product: syz
[  532.425438][  T890] usb 5-1: Manufacturer: syz
[  532.440079][  T890] usb 5-1: SerialNumber: syz
[  532.448278][  T890] usb 5-1: config 0 descriptor??
[  532.460384][T14379] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  532.556056][    C0] usb 5-1: NFC: Urb failure (status -71)
[  532.565328][    C0] usb 5-1: NFC: Urb failure (status -71)
[  532.568577][  T726] bridge0: port 2(bridge_slave_1) entered blocking state
[  532.578656][  T726] bridge0: port 2(bridge_slave_1) entered forwarding state
[  532.597050][  T890] usb 5-1: NFC: Unable to get FW version
[  532.619038][  T890] pn533_usb 5-1:0.113: probe with driver pn533_usb failed with error -71
[  532.979803][T14197] 8021q: adding VLAN 0 to HW filter on device batadv0
[  533.137515][T14197] veth0_vlan: entered promiscuous mode
[  533.175876][T14197] veth1_vlan: entered promiscuous mode
[  533.229305][T14197] veth0_macvtap: entered promiscuous mode
[  533.247205][T14197] veth1_macvtap: entered promiscuous mode
[  533.285743][T14197] batman_adv: batadv0: Interface activated: batadv_slave_0
[  533.304787][T14197] batman_adv: batadv0: Interface activated: batadv_slave_1
[  533.324276][  T726] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  533.343611][  T726] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  533.352766][  T726] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  533.366633][  T726] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  533.379644][  T890] usb 1-1: new high-speed USB device number 32 using dummy_hcd
[  533.487033][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  533.496945][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  533.534056][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  533.540947][  T890] usb 1-1: Using ep0 maxpacket: 32
[  533.545334][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  533.557114][  T890] usb 1-1: unable to get BOS descriptor or descriptor too short
[  533.570556][  T890] usb 1-1: config 56 has an invalid interface number: 216 but max is 0
[  533.579220][  T890] usb 1-1: config 56 has no interface number 0
[  533.588405][  T890] usb 1-1: config 56 interface 216 has no altsetting 0
[  533.598428][  T890] usb 1-1: New USB device found, idVendor=12d1, idProduct=554b, bcdDevice=5a.0b
[  533.613911][  T890] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  533.646079][  T890] usb 1-1: Product: syz
[  533.669728][  T890] usb 1-1: Manufacturer: syz
[  533.679592][  T890] usb 1-1: SerialNumber: syz
[  533.839618][T14421] serio: Serial port ttyS3
[  534.456870][T14428] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2802'.
[  534.678265][  T890] hub 1-1:56.216: bad descriptor, ignoring hub
[  534.698273][  T890] hub 1-1:56.216: probe with driver hub failed with error -5
[  534.721109][  T890] option 1-1:56.216: GSM modem (1-port) converter detected
[  534.787686][  T890] usb 1-1: USB disconnect, device number 32
[  534.803752][  T890] option 1-1:56.216: device disconnected
[  534.833910][T14435] syzkaller1: entered promiscuous mode
[  534.840883][T14435] syzkaller1: entered allmulticast mode
[  534.873531][T14433] fuse: Bad value for 'fd'
[  535.150745][T14440] loop3: detected capacity change from 0 to 4096
[  535.529744][ T5912] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[  535.710104][ T5912] usb 1-1: Using ep0 maxpacket: 32
[  535.717855][ T5912] usb 1-1: config index 0 descriptor too short (expected 156, got 27)
[  535.729555][ T5912] usb 1-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  535.741361][ T5912] usb 1-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  535.755487][ T5912] usb 1-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  535.769247][ T5912] usb 1-1: config 0 interface 0 has no altsetting 0
[  535.780704][ T5912] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  535.790669][ T5912] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  535.800495][ T5912] usb 1-1: Product: syz
[  535.804787][ T5912] usb 1-1: Manufacturer: syz
[  535.810207][ T5912] usb 1-1: SerialNumber: syz
[  535.818338][ T5912] usb 1-1: config 0 descriptor??
[  535.826942][T14451] loop3: detected capacity change from 0 to 128
[  535.829299][ T5912] ldusb 1-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  535.844718][ T5912] ldusb 1-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  535.845424][T14451] ext4: Unknown parameter 'fowner'
[  536.036293][T14442] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2807'.
[  536.054703][ T5912] usb 1-1: USB disconnect, device number 33
[  536.064007][ T5912] ldusb 1-1:0.0: LD USB Device #0 now disconnected
[  536.613823][ T5912] usb 5-1: USB disconnect, device number 33
[  536.649443][T14457] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  537.209751][T14480] loop2: detected capacity change from 0 to 16
[  537.227927][T14480] erofs (device loop2): mounted with root inode @ nid 36.
[  537.683141][T14486] fuse: Bad value for 'fd'
[  537.747279][T14472] loop1: detected capacity change from 0 to 32768
[  537.756599][T14472] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2816 (14472)
[  537.772842][T14472] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  537.783208][T14472] BTRFS info (device loop1): using blake2b checksum algorithm
[  537.847246][T14472] BTRFS info (device loop1): enabling ssd optimizations
[  537.855053][T14472] BTRFS info (device loop1): turning on async discard
[  537.861977][T14472] BTRFS info (device loop1): enabling free space tree
[  537.868876][T14472] BTRFS info (device loop1): use zstd compression, level 3
[  537.953333][ T5830] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  537.979754][ T6513] usb 5-1: new full-speed USB device number 34 using dummy_hcd
[  538.161997][ T6513] usb 5-1: Invalid ep0 maxpacket: 9
[  538.319651][ T6513] usb 5-1: new full-speed USB device number 35 using dummy_hcd
[  538.367378][T14506] binder: BINDER_SET_CONTEXT_MGR already set
[  538.376683][T14506] binder: 14505:14506 ioctl 4018620d 200000000000 returned -16
[  538.413833][T14504] loop2: detected capacity change from 0 to 32768
[  538.469564][ T6513] usb 5-1: Invalid ep0 maxpacket: 9
[  538.476336][ T6513] usb usb5-port1: attempt power cycle
[  538.509242][T14508] loop1: detected capacity change from 0 to 1024
[  538.531402][T14510] loop0: detected capacity change from 0 to 64
[  538.712545][T14516] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2826'.
[  538.819710][ T6513] usb 5-1: new full-speed USB device number 36 using dummy_hcd
[  538.839671][   T37] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[  538.848193][ T6513] usb 5-1: Invalid ep0 maxpacket: 9
[  538.899694][T14419] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  538.979693][   T37] usb 2-1: device descriptor read/64, error -71
[  538.986117][ T6513] usb 5-1: new full-speed USB device number 37 using dummy_hcd
[  539.010331][ T6513] usb 5-1: Invalid ep0 maxpacket: 9
[  539.016179][ T6513] usb usb5-port1: unable to enumerate USB device
[  539.052075][T14419] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  539.061507][T14419] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  539.072261][T14419] usb 3-1: config 0 descriptor??
[  539.079311][T14419] cp210x 3-1:0.0: cp210x converter detected
[  539.229801][   T37] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[  539.284628][T14419] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -121
[  539.292457][T14419] cp210x 3-1:0.0: querying part number failed
[  539.301022][T14419] usb 3-1: cp210x converter now attached to ttyUSB0
[  539.359648][   T37] usb 2-1: device descriptor read/64, error -71
[  539.470280][   T37] usb usb2-port1: attempt power cycle
[  539.494594][T14518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  539.503568][T14518] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  539.660644][ T6513] usb 1-1: new high-speed USB device number 34 using dummy_hcd
[  539.809645][ T6513] usb 1-1: Using ep0 maxpacket: 16
[  539.817134][ T6513] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  539.826239][   T37] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[  539.833996][ T6513] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  539.843410][ T6513] usb 1-1: config 1 has no interface number 1
[  539.849939][ T6513] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  539.864187][ T6513] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 255, changing to 7
[  539.865351][T14527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  539.878846][ T6513] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  539.887172][T14419] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  539.893928][   T37] usb 2-1: device descriptor read/8, error -71
[  539.902566][T14527] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  539.917075][ T6513] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  539.925212][ T6513] usb 1-1: Product: syz
[  539.929386][ T6513] usb 1-1: Manufacturer: syz
[  539.934180][ T6513] usb 1-1: SerialNumber: syz
[  540.049647][T14419] usb 4-1: Using ep0 maxpacket: 32
[  540.056853][T14419] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 9
[  540.071669][T14419] usb 4-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c
[  540.081130][T14419] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  540.089214][T14419] usb 4-1: Product: syz
[  540.094001][T14419] usb 4-1: Manufacturer: syz
[  540.098797][T14419] usb 4-1: SerialNumber: syz
[  540.106099][T14419] usb 4-1: config 0 descriptor??
[  540.112160][T14526] raw-gadget.5 gadget.3: fail, usb_ep_enable returned -22
[  540.124036][T14419] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input15
[  540.163583][ T6513] usb 1-1: 2:1: invalid format type 0x1001 is detected, processed as PCM
[  540.174260][ T6513] usb 1-1: 2:1: All rates were zero
[  540.181335][   T37] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[  540.235138][   T37] usb 2-1: device descriptor read/8, error -71
[  540.241873][ T6513] usb 1-1: USB disconnect, device number 34
[  540.363624][   T37] usb usb2-port1: unable to enumerate USB device
[  540.374377][   T37] usb 4-1: USB disconnect, device number 25
[  540.374441][    C0] usbtouchscreen 4-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19
[  540.630239][T14533] loop3: detected capacity change from 0 to 16
[  540.639418][T14533] erofs (device loop3): mounted with root inode @ nid 36.
[  542.183008][ T5912] usb 3-1: USB disconnect, device number 15
[  542.201078][ T5912] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  542.209656][ T5912] cp210x 3-1:0.0: device disconnected
[  542.357030][T14549] fuse: Invalid rootmode
[  542.403534][T14557] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2840'.
[  542.890704][T14573] loop3: detected capacity change from 0 to 32768
[  542.898981][T14573] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2845 (14573)
[  542.915783][T14573] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  542.926323][T14573] BTRFS info (device loop3): using sha256 checksum algorithm
[  542.949830][T14419] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  542.973542][T14573] BTRFS info (device loop3): rebuilding free space tree
[  542.991619][T14573] BTRFS info (device loop3): enabling ssd optimizations
[  542.998952][T14573] BTRFS info (device loop3): turning on sync discard
[  543.006315][T14573] BTRFS info (device loop3): enabling free space tree
[  543.013262][T14573] BTRFS info (device loop3): force clearing of disk cache
[  543.020995][T14573] BTRFS info (device loop3): enabling auto defrag
[  543.027550][T14573] BTRFS info (device loop3): max_inline set to 0
[  543.039994][   T30] audit: type=1800 audit(1766323564.615:429): pid=14573 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2845" name="file1" dev="loop3" ino=260 res=0 errno=0
[  543.124208][T14419] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  543.135505][T14419] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  543.147000][T14419] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  543.156718][T14419] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67
[  543.175908][T14419] usb 3-1: SerialNumber: syz
[  543.434395][T14571] loop2: detected capacity change from 0 to 1024
[  543.464930][T14571] hfsplus: Unknown parameter 'nobar«[(`•íÜator'
[  543.568577][T14598] loop4: detected capacity change from 0 to 512
[  543.577816][T14598] ext2: Unknown parameter 'measure'
[  543.903538][T14601] loop1: detected capacity change from 0 to 8
[  544.179734][T14605] comedi: No check for data length of config insn id 40060 is implemented
[  544.188380][T14605] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c
[  544.199756][T14605] comedi: Assuming n=15 is correct
[  544.767313][T14608] syz_tun: entered allmulticast mode
[  544.799173][T14607] syz_tun: left allmulticast mode
[  544.825694][T14609] loop6: detected capacity change from 0 to 7
[  544.838410][T14609] Dev loop6: unable to read RDB block 7
[  544.844466][T14609]  loop6: AHDI p1 p2 p3
[  544.848902][T14609] loop6: partition table partially beyond EOD, truncated
[  544.850287][T14611] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2853'.
[  544.856366][T14609] loop6: p3 start 335544320 is beyond EOD, truncated
[  544.949362][ T5836] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  545.083477][T14616] fuse: Invalid rootmode
[  545.388794][T14622] loop4: detected capacity change from 0 to 512
[  545.422906][T14622] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #15: comm syz.4.2858: inode has both inline data and extents flags
[  545.445437][T14622] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.2858: couldn't read orphan inode 15 (err -117)
[  545.461302][T14622] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  545.654298][T14633] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2859'.
[  545.665622][T14633] 8021q: VLANs not supported on sit0
[  546.523636][   T30] audit: type=1804 audit(1766323567.435:430): pid=14635 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2858" name="/newroot/535/file0/file0" dev="loop4" ino=18 res=1 errno=0
[  546.540894][T14419] usb 3-1: 0:2 : does not exist
[  546.578863][T14419] usb 3-1: unit 5 not found!
[  546.596217][ T5834] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  546.715053][T14419] usb 3-1: USB disconnect, device number 16
[  546.786354][T14641] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2861'.
[  546.830692][T14644] loop0: detected capacity change from 0 to 512
[  546.837991][T14644] EXT4-fs: Ignoring removed orlov option
[  546.869594][T14644] EXT4-fs: Ignoring removed nobh option
[  546.893655][T14643] loop3: detected capacity change from 0 to 1024
[  546.910381][T14644] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  546.950722][T14644] EXT4-fs (loop0): orphan cleanup on readonly fs
[  547.224073][T14644] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.2864: bg 0: block 248: padding at end of block bitmap is not set
[  547.394615][T14649] netlink: 4280 bytes leftover after parsing attributes in process `syz.3.2863'.
[  547.404057][T14649] netlink: 4280 bytes leftover after parsing attributes in process `syz.3.2863'.
[  547.594964][T14644] Quota error (device loop0): write_blk: dquota write failed
[  547.751996][T14644] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota
[  547.764805][T14644] EXT4-fs error (device loop0): ext4_acquire_dquot:6986: comm syz.0.2864: Failed to acquire dquot type 1
[  548.000012][T14644] EXT4-fs (loop0): 1 truncate cleaned up
[  548.019658][T14644] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  548.153626][ T7457] ==================================================================
[  548.161745][ T7457] BUG: KASAN: use-after-free in __mutex_lock+0x801/0x1350
[  548.168987][ T7457] Read of size 8 at addr ffff88805d5800a8 by task khidpd_10cf0f5b/7457
[  548.177340][ T7457] 
[  548.179696][ T7457] CPU: 1 UID: 0 PID: 7457 Comm: khidpd_10cf0f5b Not tainted syzkaller #0 PREEMPT(full) 
[  548.179721][ T7457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  548.179733][ T7457] Call Trace:
[  548.179741][ T7457]  <TASK>
[  548.179750][ T7457]  dump_stack_lvl+0x189/0x250
[  548.179777][ T7457]  ? __kasan_check_byte+0x12/0x40
[  548.179803][ T7457]  ? __pfx_dump_stack_lvl+0x10/0x10
[  548.179825][ T7457]  ? lock_release+0x4b/0x3b0
[  548.179849][ T7457]  ? __virt_addr_valid+0x4a5/0x5c0
[  548.179877][ T7457]  print_report+0xca/0x240
[  548.179897][ T7457]  ? __mutex_lock+0x801/0x1350
[  548.179923][ T7457]  kasan_report+0x118/0x150
[  548.179947][ T7457]  ? __mutex_lock+0x801/0x1350
[  548.179976][ T7457]  __mutex_lock+0x801/0x1350
[  548.180002][ T7457]  ? __mutex_lock+0x5bb/0x1350
[  548.180030][ T7457]  ? l2cap_unregister_user+0x6a/0x1b0
[  548.180057][ T7457]  ? __pfx___mutex_lock+0x10/0x10
[  548.180087][ T7457]  ? __pfx___timer_delete_sync+0x10/0x10
[  548.180111][ T7457]  l2cap_unregister_user+0x6a/0x1b0
[  548.180137][ T7457]  hidp_session_thread+0x3a1/0x420
[  548.180168][ T7457]  ? __pfx_hidp_session_thread+0x10/0x10
[  548.180194][ T7457]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  548.180217][ T7457]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  548.180248][ T7457]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  548.180276][ T7457]  ? __kthread_parkme+0x7b/0x200
[  548.180298][ T7457]  ? __kthread_parkme+0x1a1/0x200
[  548.180322][ T7457]  kthread+0x711/0x8a0
[  548.180347][ T7457]  ? __pfx_hidp_session_thread+0x10/0x10
[  548.180373][ T7457]  ? __pfx_kthread+0x10/0x10
[  548.180392][ T7457]  ? _raw_spin_unlock_irq+0x23/0x50
[  548.180409][ T7457]  ? lockdep_hardirqs_on+0x98/0x140
[  548.180431][ T7457]  ? __pfx_kthread+0x10/0x10
[  548.180456][ T7457]  ret_from_fork+0x599/0xb30
[  548.180476][ T7457]  ? __pfx_ret_from_fork+0x10/0x10
[  548.180500][ T7457]  ? __switch_to_asm+0x39/0x70
[  548.180524][ T7457]  ? __switch_to_asm+0x33/0x70
[  548.180547][ T7457]  ? __pfx_kthread+0x10/0x10
[  548.180572][ T7457]  ret_from_fork_asm+0x1a/0x30
[  548.180604][ T7457]  </TASK>
[  548.180611][ T7457] 
[  548.212923][T14644] ext4: Unknown parameter 'ËÅ…jeqÐ?'
[  548.216650][ T7457] The buggy address belongs to the physical page:
[  548.395551][ T7457] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5d580
[  548.404427][ T7457] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[  548.411556][ T7457] raw: 00fff00000000000 ffffea0001e7bd08 ffff8880b8740f00 0000000000000000
[  548.420290][ T7457] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000
[  548.428910][ T7457] page dumped because: kasan: bad access detected
[  548.435500][ T7457] page_owner tracks the page as freed
[  548.440961][ T7457] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x40dc0(GFP_KERNEL|__GFP_ZERO|__GFP_COMP), pid 5830, tgid 5830 (syz-executor), ts 84108468804, free_ts 548117042127
[  548.459148][ T7457]  post_alloc_hook+0x234/0x290
[  548.464101][ T7457]  get_page_from_freelist+0x2365/0x2440
[  548.469664][ T7457]  __alloc_frozen_pages_noprof+0x181/0x370
[  548.475474][ T7457]  alloc_pages_mpol+0x232/0x4a0
[  548.480677][ T7457]  ___kmalloc_large_node+0x4e/0x150
[  548.485972][ T7457]  __kmalloc_large_node_noprof+0x18/0x90
[  548.491607][ T7457]  __kmalloc_noprof+0x4c9/0x800
[  548.496637][ T7457]  hci_alloc_dev_priv+0x28/0x2060
[  548.501750][ T7457]  vhci_create_device+0x120/0x650
[  548.506883][ T7457]  vhci_write+0x3ce/0x4a0
[  548.511217][ T7457]  vfs_write+0x5c9/0xb30
[  548.515588][ T7457]  ksys_write+0x145/0x250
[  548.519921][ T7457]  do_syscall_64+0xfa/0xf80
[  548.524515][ T7457]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  548.530528][ T7457] page last free pid 11910 tgid 11910 stack trace:
[  548.537044][ T7457]  __free_frozen_pages+0xbc8/0xd30
[  548.542177][ T7457]  bt_host_release+0x82/0x90
[  548.546774][ T7457]  device_release+0x9e/0x1d0
[  548.551461][ T7457]  kobject_put+0x228/0x570
[  548.555891][ T7457]  vhci_release+0x15a/0x1a0
[  548.560401][ T7457]  __fput+0x44c/0xa70
[  548.564397][ T7457]  task_work_run+0x1d4/0x260
[  548.568991][ T7457]  do_exit+0x8bd/0x25b0
[  548.573237][ T7457]  do_group_exit+0x21c/0x2d0
[  548.577837][ T7457]  get_signal+0x1285/0x1340
[  548.582475][ T7457]  arch_do_signal_or_restart+0x9a/0x7a0
[  548.588025][ T7457]  exit_to_user_mode_loop+0x87/0x4f0
[  548.593309][ T7457]  do_syscall_64+0x2d0/0xf80
[  548.597904][ T7457]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  548.603920][ T7457] 
[  548.606247][ T7457] Memory state around the buggy address:
[  548.612062][ T7457]  ffff88805d57ff80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  548.620306][ T7457]  ffff88805d580000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  548.628451][ T7457] >ffff88805d580080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  548.636517][ T7457]                                   ^
[  548.641924][ T7457]  ffff88805d580100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  548.650165][ T7457]  ffff88805d580180: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  548.658244][ T7457] ==================================================================
[  548.667883][ T7457] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  548.675137][ T7457] CPU: 1 UID: 0 PID: 7457 Comm: khidpd_10cf0f5b Not tainted syzkaller #0 PREEMPT(full) 
[  548.685110][ T7457] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  548.695209][ T7457] Call Trace:
[  548.698610][ T7457]  <TASK>
[  548.701575][ T7457]  dump_stack_lvl+0x99/0x250
[  548.706201][ T7457]  ? __asan_memcpy+0x40/0x70
[  548.710821][ T7457]  ? __pfx_dump_stack_lvl+0x10/0x10
[  548.716788][ T7457]  ? __pfx__printk+0x10/0x10
[  548.721419][ T7457]  vpanic+0x237/0x6d0
[  548.725549][ T7457]  ? __pfx_vpanic+0x10/0x10
[  548.730085][ T7457]  panic+0xb9/0xc0
[  548.733847][ T7457]  ? __pfx_panic+0x10/0x10
[  548.738314][ T7457]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  548.744337][ T7457]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  548.750277][ T7457]  ? __mutex_lock+0x801/0x1350
[  548.755085][ T7457]  check_panic_on_warn+0x89/0xb0
[  548.760070][ T7457]  ? __mutex_lock+0x801/0x1350
[  548.764864][ T7457]  end_report+0x6f/0x140
[  548.769143][ T7457]  kasan_report+0x129/0x150
[  548.773765][ T7457]  ? __mutex_lock+0x801/0x1350
[  548.778563][ T7457]  __mutex_lock+0x801/0x1350
[  548.783271][ T7457]  ? __mutex_lock+0x5bb/0x1350
[  548.788075][ T7457]  ? l2cap_unregister_user+0x6a/0x1b0
[  548.793499][ T7457]  ? __pfx___mutex_lock+0x10/0x10
[  548.798562][ T7457]  ? __pfx___timer_delete_sync+0x10/0x10
[  548.804487][ T7457]  l2cap_unregister_user+0x6a/0x1b0
[  548.809722][ T7457]  hidp_session_thread+0x3a1/0x420
[  548.814879][ T7457]  ? __pfx_hidp_session_thread+0x10/0x10
[  548.820553][ T7457]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  548.826563][ T7457]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  548.832932][ T7457]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  548.839296][ T7457]  ? __kthread_parkme+0x7b/0x200
[  548.844282][ T7457]  ? __kthread_parkme+0x1a1/0x200
[  548.849395][ T7457]  kthread+0x711/0x8a0
[  548.853507][ T7457]  ? __pfx_hidp_session_thread+0x10/0x10
[  548.859166][ T7457]  ? __pfx_kthread+0x10/0x10
[  548.863851][ T7457]  ? _raw_spin_unlock_irq+0x23/0x50
[  548.869055][ T7457]  ? lockdep_hardirqs_on+0x98/0x140
[  548.874280][ T7457]  ? __pfx_kthread+0x10/0x10
[  548.878972][ T7457]  ret_from_fork+0x599/0xb30
[  548.883660][ T7457]  ? __pfx_ret_from_fork+0x10/0x10
[  548.888780][ T7457]  ? __switch_to_asm+0x39/0x70
[  548.893549][ T7457]  ? __switch_to_asm+0x33/0x70
[  548.898320][ T7457]  ? __pfx_kthread+0x10/0x10
[  548.902916][ T7457]  ret_from_fork_asm+0x1a/0x30
[  548.907888][ T7457]  </TASK>
[  548.911723][ T7457] Kernel Offset: disabled
[  548.916050][ T7457] Rebooting in 86400 seconds..