last executing test programs:

8.983600353s ago: executing program 2 (id=698):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff)
connect$caif(0xffffffffffffffff, &(0x7f0000000080)=@rfm={0x25, 0x0, "423e650059ef6c664b6dff801d261cd8"}, 0x18)
r3 = mq_open(0x0, 0x40, 0x0, 0x0)
mq_notify(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, @thr={0x0, 0x0}})
mq_notify(r3, &(0x7f0000000000))

8.04717858s ago: executing program 2 (id=699):
ioctl$TCSETS(0xffffffffffffffff, 0x5402, 0x0)
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TCSBRKP(r0, 0x5425, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$audio(0xffffffffffffff9c, 0x0, 0x88602, 0x0)
ioctl$SNDCTL_DSP_GETODELAY(0xffffffffffffffff, 0x80045017, 0x0)
ioctl$SNDRV_PCM_IOCTL_REWIND(0xffffffffffffffff, 0xc0884113, 0x0)
getpid()
ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x3, 0x9, 0x1}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000040), &(0x7f00000005c0)}, 0x20)
syz_emit_ethernet(0x32, &(0x7f00000003c0)=ANY=[@ANYBLOB="0180c2000003000000000000080045000024000000000015"], 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kfree\x00', r3}, 0x10)
syz_usb_connect(0x0, 0x10e, &(0x7f0000000380)=ANY=[@ANYBLOB="120100006a249f08ec1888323a3f010203010902fc0001870000000904e600030e01000006240600011005240008000d240f01000000000000a0010606241a0000000c241b000000000000ff01000424020c9024", @ANYRES16=r2], 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r4)
sendmsg$NFC_CMD_GET_TARGET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r5, 0x1}, 0x14}}, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x0, 0x0, 0x0, 0x0, 0x810}, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000300b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7f1ff000000000085000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000dc0)={&(0x7f0000000300)='neigh_update\x00', r7}, 0x10)
r8 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_inet_SIOCSARP(r8, 0x8955, &(0x7f0000000040)={{0x2, 0x0, @multicast2}, {}, 0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 'ip6gre0\x00'})
syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r4)

7.280856823s ago: executing program 0 (id=702):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1, 0x8, 0x2, 0x4}, 0x48)
close(r0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200000019", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2}, 0xc)

7.211432279s ago: executing program 0 (id=703):
socket$nl_route(0x10, 0x3, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000d000000028000001294", 0x2e}], 0x1}, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000850000001300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
syz_open_procfs$namespace(0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x8, &(0x7f0000000040)={@initdev}, &(0x7f0000000080)=0x14)
creat(0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r3}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0xffffffffffffff5b, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x3a)

7.179421751s ago: executing program 4 (id=704):
mknod(&(0x7f0000000080)='./bus\x00', 0x0, 0x0)
mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0)
open$dir(&(0x7f0000000180)='./file0\x00', 0x7e, 0x0)
r0 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@get={0xe0, 0x13, 0x0, 0x0, 0x0, {{'streebog512-generic\x00'}, '\x00', '\x00', 0x0, 0x2000}}, 0xe0}}, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, 0x0, 0x0)
sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x24000010}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x7, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
write$vhost_msg(0xffffffffffffffff, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
socket$kcm(0x10, 0x0, 0x4)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01080000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x74}}, 0x0)
sendmsg$nl_crypto(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xf0}}, 0x0)
inotify_init1(0x0)
open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0)
open(&(0x7f00000002c0)='./bus\x00', 0x60102, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)

6.491609838s ago: executing program 0 (id=706):
syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c20000000806000108000604"], 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x0)
r1 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000100)='dctcp\x00', 0x6)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, 0x0, &(0x7f0000000780))
syz_80211_inject_frame(0x0, 0x0, 0x262)
unshare(0x10000000)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
socket$inet6(0x10, 0x2, 0x0)
connect$inet(r1, &(0x7f0000000000)={0x240, 0x4e22, @local}, 0x10)

6.117135189s ago: executing program 4 (id=707):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
add_key(0x0, 0x0, 0x0, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x47fa, 0x0, 0x0, 0x0, 0x0)
pivot_root(0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
sendmmsg$inet(r0, &(0x7f00000009c0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000a40)="0036d551863e1902129da79f5986e05288f50e5398660c1a29b0f45c0cc36902e0251c8d34197b357b32b161f9ad72d55a0eab976aae24ed805271b43f0ce2fea5e764494873e0d82a172b3bb54f59b458fd35039c7d81e9ab07f2fb4dad61bd500a119b54c74a12e4569e47b69a95f92c6380af2bd003fa56f06a23bbd1", 0x7e}, {&(0x7f0000000f00)="316f825a3d29f96a2093a917017b4cd300000000bee70035ed313e19d6dd1fb41a20baf7f73430670040cdd4b16742e94b62f4eb1c5d9daab7f3028100ae8180db94b9de7456ae62b0e6fe7766a0842912179154a96fa88e161d4a9f77a486e10d1d50e44155790748b7226fa4bb5d77e85729336ba6369a4c33ac53b45d46a92db9fda99af4429dc23db6a1706328df4e75eb173a81bd4af8b89d1870c9b2382a759d67b1cd03b076bf90286b63eb7aaea4cbb1280955e9a59cd8e5e8ac68c27da3d542aece1ba7920e8f39b270458224e74afa52db1ac07f7cce47d5e8ce5b2806ff7171c64a689a0ba35e934506a46a10b9a579dc43630831e2c5400853b58e020c9cb6cd44d4957b00ed35a858d44b25d5b8dad1be420467333d9ce17dddc425dad69c4c9395a5c170170a4fa63091786e2a563e3d5982a73c15edf854046e1a33b2728e74c856a58ba74c80f4f4166ac51d720f507c2c205ef5a04370c77928dfde47e15d533060084d4fc271eab837367369218b1bfc59752696396f49c2f58268", 0x184}, {&(0x7f0000000700)="f5e022a4d2ed0cf5f8b2e9857cb9af98da7aa60f7a1582aadeaef336f9139f6768452f868624c7e6ce0948f33f1a63e0fcf0f2df283b3ca3f1f4de26a8b575ccb465985e48f65b9a7fcc93c0a5be8b16774f7c7ca9848a182d6ee7c0f2b9c0e7030ed93ee34214c25cb51279b18c8e5bfbc52152be37f5e2b783e2149be25180430ac63ee1bbe01fbb6125e65839ae5b02d542a97d1bfb1ca420b5405baaaf5ec6ad96af2814dbbea5a064f2ab6fc0904c07f02cbfadfb96866d962e6e21d3a0a0276a36e01b6edafd6c8461de7afec966f9c023ffe15c3c1caec8ff3e", 0xdd}, {&(0x7f0000000440)="fff5c0293353dbff0f83", 0xa}], 0x4}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)="077317e9cc23d57c78c114", 0xb}, {&(0x7f0000000680)="a48ddda58f0c3202e4331de15e27c2f6b69ccda5c86d79ec8171a6447231bbf9a1a0", 0x22}, {&(0x7f0000000b80)="a4b7ff2cf6ed0e4aa03d066059d0eb78a2a95f5a35e6e8976126acad55f830963ee8f12a3fce355acb6b6aae79cecc7dc5c06d7e473af2f6184aaa3dac84a6f74153be22e1f6463a0315ef22ce95638dc04077392687", 0x56}, {&(0x7f0000000c40)="53f7eccc18cedbb3bc85845612c7e785dada1a574ecbc851d59d2d7782e8c746a527aced9001deb392063445a2d7b56bbc2077986f2a4c19e729f60bd577be2559c45c7053c5da9acfb9c7e731b2503ca85866107b22f0c9f1522b1625b8c2441bc2240d6bddd44df4d89979c366eed81bfa0ddf6a8ef9670d74c66d1a0c3cfabd5ab707f18dd344b3", 0x89}], 0x4}}], 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendmsg$inet(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000000)="14fafa37bf25f04bda99eefbf2930f3151214ef6fdee25bdb2d1873ce347c7b623dd3140cfb20100a1bf9f1dc2375e3c49a4e7ffab4ed7181100", 0x3a}, {&(0x7f0000000240)="16a6fca1943502d7ac24a672321690c0215b73b201e67576ef51abd7cb2bcd21ebc41893e255eea9bba2639084f4dec0", 0x30}, {&(0x7f0000000580)="c3e361cabaa484b0c035139c64932a377f926342f6b052b6a3b273c187a5e0c26fe049092a54eb9b6be2ac2df69e6a36fad43d88851aa162b6aa0d4734e36aad318ea99586ca9f6429200684", 0x4c}], 0x3}, 0x0)
sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27)

6.024900176s ago: executing program 4 (id=708):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000001500), r0)
socket$inet6(0xa, 0x3, 0x7)
socket$inet6_udp(0xa, 0x2, 0x0)
prlimit64(0x0, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x9, 0x2a8, &(0x7f0000000500)="$eJzs3F9IU38Yx/HHPz/1Z+hGRFBQPeVNRRzcrgMdoRENjHJhCcExz2rstI2dsZqEWxB400U3/buuIEIQoosgELvoKpTwrovuvPMiu0oiOjGnudnUMnWS79fF9rDn+zl8z58dtu9g08fvXouGHSNspqS6oUqq2yUns1XilWpZkJMj10fe7zt34eLpQDDYcVa1M9Dt86tq84HR3pvDh8ZSO86/bH5dL+PeS9Mz/qnx3eN7pr93X404GnE0Fk+pqX3xeMrssy3tv+9EDdUztmU6lkZijpUs6YfteCKRUTPW39SYSFqOo2Yso1Ero6m4ppIZNa+YkZgahqFNjYKVDacfBZbvhp7Puq7MpN65bn1OXNfNv9iwidNDhc2df9ctOv93Kj0lbKKim3qDiD2UDqVDhedCPxCWiNhiSat45JvkrxH38Yg7d6nkH2/4R4KTR9++UVWvDNrZ+Xw2HaopzfvEI95CpqBQd54Kdvi0oDT/nzQW5/3ikV3l8/6y+To53FKUN8Qjk5clLrZMjB78MtU19GAhP+hTPdEVXJL/X/oXD9OzzxU6PwAAAAAAAAAArIWhP5VdvzfyA24PqGrTkn4hX+73gaXr861l1+drZW9tZfcdAAAAAIDtwskMRE3btpJ/WeS/yq/Hdv694smt3x+8v3PlMS1tNRPtH3KJrbBff1B87dkS0ygtZH71abXBNev8TlksPq3Ldqrm57f8mJO9H1+sup26X47PcsY2/q4EAAAAYCMsfuhvk2z4VTrbc+xepecEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMB2s4a/HJt4WK6l+WLn03KtSu8jAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADASn4EAAD//xAR0Ao=")
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
setrlimit(0xf, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0))
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(0xffffffffffffffff, &(0x7f0000000e80)=@file={0x0, './file0/file1\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
clock_nanosleep(0xfffffffa, 0xca9a3b, &(0x7f0000000080)={0x77359400}, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r8, 0x4048aecb, &(0x7f0000000600)={0x5, 0x0, [{0x2}, {}, {}, {}, {}]})
r9 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10)

5.965185071s ago: executing program 0 (id=709):
get_robust_list(0x0, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff)
connect$caif(0xffffffffffffffff, &(0x7f0000000080)=@rfm={0x25, 0x0, "423e650059ef6c664b6dff801d261cd8"}, 0x18)
r3 = mq_open(0x0, 0x40, 0x0, 0x0)
mq_notify(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, @thr={0x0, 0x0}})
mq_notify(r3, &(0x7f0000000000))

5.515545958s ago: executing program 1 (id=710):
get_robust_list(0x0, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = mq_open(&(0x7f0000000680)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x03\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a1\xf0\xe4\xe3R\x95\xee\xe4\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xaa.\xb6{\xb5\x85#\x88\xdc\xf0\xfd\x04\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1\x856\xe7`83\xb7n#\xe0\xc1_\xec\xba\xdezthU\xe3\a\x8b\xc5\x86woo\xbcnq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8u\xedt\xc1-\x16\x86\x85\xb4\x96\x02\x1bI<\x1e\xbd\x1c\xd0\x19\x96h\xc3\x14\xfb\xf7\x10\xee\x91\x9e\x01G\xbfF\n\x04So\xe5Z\xe1\xdf\"\x9ay QR\x9d\xd2Se\xcb\x9e]\x98~\x8aY\r\x0e\xae[\xbcD\x16v\x11C\x06\x94\x8e#?\x12\xac4\xb7\x00\x00\x00\x00\x00\x00\x1c_\x8a\x9d\xa1L\xed??2P\x8b\xdf~a', 0x40, 0x0, 0x0)
mq_notify(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, @thr={0x0, 0x0}})
mq_notify(r3, 0x0)

5.092445673s ago: executing program 2 (id=711):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
add_key(0x0, 0x0, 0x0, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x47fa, 0x0, 0x0, 0x0, 0x0)
pivot_root(0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
sendmmsg$inet(r0, &(0x7f00000009c0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000a40)="0036d551863e1902129da79f5986e05288f50e5398660c1a29b0f45c0cc36902e0251c8d34197b357b32b161f9ad72d55a0eab976aae24ed805271b43f0ce2fea5e764494873e0d82a172b3bb54f59b458fd35039c7d81e9ab07f2fb4dad61bd500a119b54c74a12e4569e47b69a95f92c6380af2bd003fa56f06a23bbd1c76d", 0x80}, {&(0x7f0000000f00)="316f825a3d29f96a2093a917017b4cd300000000bee70035ed313e19d6dd1fb41a20baf7f73430670040cdd4b16742e94b62f4eb1c5d9daab7f3028100ae8180db94b9de7456ae62b0e6fe7766a0842912179154a96fa88e161d4a9f77a486e10d1d50e44155790748b7226fa4bb5d77e85729336ba6369a4c33ac53b45d46a92db9fda99af4429dc23db6a1706328df4e75eb173a81bd4af8b89d1870c9b2382a759d67b1cd03b076bf90286b63eb7aaea4cbb1280955e9a59cd8e5e8ac68c27da3d542aece1ba7920e8f39b270458224e74afa52db1ac07f7cce47d5e8ce5b2806ff7171c64a689a0ba35e934506a46a10b9a579dc43630831e2c5400853b58e020c9cb6cd44d4957b00ed35a858d44b25d5b8dad1be420467333d9ce17dddc425dad69c4c9395a5c170170a4fa63091786e2a563e3d5982a73c15edf854046e1a33b2728e74c856a58ba74c80f4f4166ac51d720f507c2c205ef5a04370c77928dfde47e15d533060084d", 0x16c}, {&(0x7f0000000700)="f5e022a4d2ed0cf5f8b2e9857cb9af98da7aa60f7a1582aadeaef336f9139f6768452f868624c7e6ce0948f33f1a63e0fcf0f2df283b3ca3f1f4de26a8b575ccb465985e48f65b9a7fcc93c0a5be8b16774f7c7ca9848a182d6ee7c0f2b9c0e7030ed93ee34214c25cb51279b18c8e5bfbc52152be37f5e2b783e2149be25180430ac63ee1bbe01fbb6125e65839ae5b02d542a97d1bfb1ca420b5405baaaf5ec6ad96af2814dbbea5a064f2ab6fc0904c07f02cbfadfb96866d962e6e21d3a0a0276a36e01b6edafd6c8461de7afec966f9c023ffe15c3c1caec8ff3e", 0xdd}, {&(0x7f0000000440)="fff5c0293353dbff0f83", 0xa}], 0x4}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)="077317e9cc23d57c78c114", 0xb}, {&(0x7f0000000680)="a48ddda58f0c3202e4331de15e27c2f6b69ccda5c86d79ec8171a6447231bbf9a1a0", 0x22}, {&(0x7f0000000b80)="a4b7ff2cf6ed0e4aa03d066059d0eb78a2a95f5a35e6e8976126acad55f830963ee8f12a3fce355acb6b6aae79cecc7dc5c06d7e473af2f6184aaa3dac84a6f74153be22e1f6463a0315ef22ce95638dc04077392687", 0x56}, {&(0x7f0000000c40)="53f7eccc18cedbb3bc85845612c7e785dada1a574ecbc851d59d2d7782e8c746a527aced9001deb392063445a2d7b56bbc2077986f2a4c19e729f60bd577be2559c45c7053c5da9acfb9c7e731b2503ca85866107b22f0c9f1522b1625b8c2441bc2240d6bddd44df4d89979c366eed81bfa0ddf6a8ef9670d74c66d1a0c3cfabd5ab707f18dd344b3", 0x89}], 0x4}}], 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendmsg$inet(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000000)="14fafa37bf25f04bda99eefbf2930f3151214ef6fdee25bdb2d1873ce347c7b623dd3140cfb20100a1bf9f1dc2375e3c49a4e7ffab4ed7181100", 0x3a}, {&(0x7f0000000240)="16a6fca1943502d7ac24a672321690c0215b73b201e67576ef51abd7cb2bcd21ebc41893e255eea9bba2639084f4dec0", 0x30}, {&(0x7f0000000580)="c3e361cabaa484b0c035139c64932a377f926342f6b052b6a3b273c187a5e0c26fe049092a54eb9b6be2ac2df69e6a36fad43d88851aa162b6aa0d4734e36aad318ea99586ca9f6429200684", 0x4c}], 0x3}, 0x0)
sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27)

5.092127183s ago: executing program 4 (id=712):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000500), 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000013c0)={0x2c, &(0x7f0000001100), 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x58, r1, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_MAX_FRAME_RETRIES={0x5}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x3f}]}, 0x58}, 0x1, 0x0, 0x0, 0x24048000}, 0x20000080)
syz_usb_control_io(r0, 0x0, &(0x7f0000000dc0)={0x84, &(0x7f0000000940), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000bc0)={0x40, 0xf, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000280)={0x14, &(0x7f0000000180)={0xc0, 0x3c, 0x8b, {0x8b, 0x24, "fff2e18c5cef99d7e9b80b32b64c13f48dfa2c8b1fb2793e9b315c8ac76582125c1b7e388aaa50260425e73baaef14aa499d7ff3b797ce3f19e09ded013569d74678b4b35141d6a5082090760705121a4007ed2c1187dbc13dbb5d546e72521093880d45308d9fda31f4f6367268e17f2e65c6013e1426b0fa4143d36f36e74736ecc66b6ef2efb6ae"}}, &(0x7f0000000240)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000540)={0x44, &(0x7f00000002c0)={0x20, 0x10, 0x28, "247c04ba58cba68e4c7a35b8970446b1e1defa109c5ffee106e75033642e6b8c3f28c1c70f69d01d"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x3c}, &(0x7f0000000380)={0x20, 0x80, 0x1c, {0x10, 0x6, 0x829d, 0x7ff, 0xc, 0x1, 0x7, 0x7, 0x4, 0x6, 0x9, 0x8001}}, &(0x7f00000003c0)={0x20, 0x85, 0x4, 0x7}, &(0x7f0000000400)={0x20, 0x83, 0x2, 0x1}, &(0x7f0000000440)={0x20, 0x87, 0x2, 0x69}, &(0x7f0000000480)={0x20, 0x89, 0x2, 0x1}})
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)

4.850808632s ago: executing program 3 (id=713):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1, 0x8, 0x2, 0x4}, 0x48)
close(r0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200000019", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2}, 0xc)

4.75938289s ago: executing program 3 (id=714):
openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001fc0)=@newtaction={0xd44, 0x30, 0x12f, 0x0, 0x0, {0x0, 0x0, 0x1be}, [{0xd30, 0x1, [@m_police={0xd2c, 0x1, 0x0, 0x0, {{0xb}, {0xd00, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfff}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}, @TCA_POLICE_PEAKRATE64={0xc}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0x6, 0x6, 0x1, 0x3fe, 0xcf, 0xfffffff7, 0x1ba7af3c, 0x7, 0x97, 0x1, 0x4, 0x4, 0x1, 0x400, 0x0, 0x6, 0x400, 0xfffffffa, 0x2, 0x1, 0x9, 0x2, 0x1, 0x0, 0x0, 0x5, 0x9, 0xb, 0x0, 0x6, 0x10001, 0x7, 0x5, 0x3ff, 0x8, 0x5, 0x8001, 0x5, 0x756, 0x2, 0x8, 0xa4c, 0x1, 0x8000, 0x0, 0x7, 0xfffffbaf, 0x8001, 0x691, 0x3, 0x0, 0xf3, 0x7, 0x7f, 0x80000000, 0x9, 0xa, 0x1, 0x80, 0x6, 0x2, 0x1, 0x8001, 0x54dcef59, 0x9730, 0x8, 0x2, 0xb469, 0x10, 0x4, 0x1, 0x7, 0x1, 0x1, 0x9, 0x4210fe8d, 0x3, 0x3, 0x5b6, 0x5, 0xfffffffa, 0xa000, 0x3, 0x4, 0xf0c, 0x1ff, 0x4, 0x9, 0x0, 0x8000, 0x7ff, 0xf, 0xd, 0x9, 0x4, 0x1ff, 0x5, 0x7, 0x6, 0xc, 0x9, 0x2, 0x4, 0x5, 0x50, 0x5, 0x3, 0x7, 0x200, 0x2, 0x1e9c, 0x7, 0x4, 0x401, 0x1, 0x0, 0x3, 0x0, 0x2, 0x7, 0x8, 0x30, 0xffff0001, 0x6, 0x26f0, 0x1, 0x0, 0xd, 0x4, 0x5, 0x3, 0x4, 0x1a, 0x7fffffff, 0x5, 0x1, 0x9, 0x3, 0x0, 0x800, 0x0, 0x0, 0x8, 0x8, 0x10000, 0x0, 0x7, 0x74, 0x8, 0x9, 0x9, 0x18000000, 0xfffffff7, 0x3ff, 0x8, 0x800, 0xe, 0xb, 0x3, 0x4, 0xcbde, 0xd71, 0x81, 0x5, 0xe6e, 0x3, 0x3941, 0x61e1, 0x3ff, 0x286, 0x6, 0x80000, 0x1, 0xfffffffa, 0x3, 0x5, 0x9, 0x400000, 0x2, 0x43, 0x8, 0x3, 0x2, 0x7, 0x5, 0x2, 0xeefa, 0x4, 0x6, 0x1, 0x5, 0x0, 0x8, 0xd, 0xaeef, 0xc, 0x10000, 0xffff, 0x2a, 0xe, 0x1, 0x952e, 0x7, 0xf02, 0x22, 0x0, 0x2, 0x7, 0x3, 0x1, 0xd, 0x6, 0x2, 0x2, 0x4, 0x2, 0x0, 0x1, 0x3b, 0x7, 0x97d, 0x12, 0x6, 0x3ff, 0x31, 0x400, 0x4, 0x40000000, 0xfffff801, 0x80, 0x10, 0x2, 0x8, 0x7, 0x10001, 0x3, 0x10001, 0x8001, 0x3, 0x5, 0x7, 0x3, 0x29, 0x9, 0x6, 0xffff7fff, 0x478bd48b, 0x7, 0x8, 0x7, 0x4, 0x8516, 0xfffffff8, 0x6, 0x393d]}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x5, 0x23d2, 0xff, 0x1000, {0x5, 0x2, 0x3, 0x7, 0x3, 0x5}, {0x1, 0x1, 0xe5, 0x7, 0x4984, 0xf5}, 0x18, 0x7, 0x5}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3f, 0x3, 0x12, 0x1f, 0x2, {0x0, 0x0, 0x2, 0x322, 0x800, 0x10001}, {0x4, 0x2, 0x0, 0x9}, 0x4, 0x5af7, 0x6b79}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x100}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x81}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x200, 0xa4, 0xb172, 0x7, 0x2, 0x0, 0x9, 0x90, 0x400, 0x9, 0x200, 0x8, 0x1000, 0xffffff81, 0xffffff01, 0x3, 0x8, 0x314c, 0x6, 0x8, 0x6, 0x2, 0x6, 0x1, 0x101, 0x401, 0xb49f, 0x9, 0x0, 0x1, 0x4, 0x7, 0x3, 0x200, 0x3, 0x4, 0x1000, 0x2, 0x80000000, 0x0, 0x7, 0x3, 0x80, 0x600000, 0x1ff, 0x2818, 0xd7, 0x9, 0x1, 0xf0f8, 0x2, 0x2, 0x1, 0x7fff, 0x1, 0x9, 0x7, 0x7, 0x1, 0x401, 0x80, 0x7fffffff, 0x8, 0x3, 0x7fff, 0x7, 0xfffffe00, 0x20, 0x5, 0x3, 0x1000, 0x1, 0x10001, 0xffffffb5, 0xb9c5, 0x5, 0x5, 0x0, 0x1ff, 0x3, 0x40, 0x81, 0x40, 0x2, 0x1, 0x1, 0x4, 0xffff, 0x3, 0x0, 0x8, 0x8000, 0x8, 0x7f, 0x41, 0x101, 0x6, 0x5, 0x85, 0x6a8b7fc8, 0x3, 0x7, 0x8, 0x7f, 0x1, 0x2, 0x1fd4c367, 0x7, 0xe2, 0x4, 0x7, 0x3ff, 0x1, 0xfffff001, 0x7fff, 0x3f, 0x3, 0x1, 0xfff, 0x0, 0x4, 0x0, 0x400, 0x2, 0x5bc5434c, 0x1, 0xfffffff8, 0x0, 0x200, 0x9, 0x400, 0x8, 0x1, 0x8, 0x0, 0x10001, 0x5, 0x7, 0x5, 0x1, 0x6814ae0, 0x3, 0x101, 0x7, 0x2, 0xb745, 0x6, 0x6bd5, 0x800, 0x9, 0x2, 0x1, 0x7, 0x1ff, 0xb5, 0x4, 0xffffff80, 0x0, 0xfff, 0x0, 0x20, 0x98000000, 0x1, 0x8000004, 0x7, 0xa8000000, 0x4, 0x0, 0x0, 0x87, 0x6, 0x1000, 0x9, 0x6, 0x3f, 0x1, 0x3, 0x7, 0x5efd, 0x5, 0x8, 0x2, 0x800, 0x9, 0xa79a, 0x100, 0x5, 0x7c6e, 0x8, 0x7ffd, 0x6, 0x5, 0x9, 0x9, 0x5, 0x1, 0x3, 0x80000, 0x56f, 0x80, 0x337d, 0x9, 0x9, 0x9, 0x0, 0x1ff, 0x200, 0x7, 0x5, 0x6, 0xa5, 0x1, 0x1, 0x2, 0x80000001, 0x5, 0x10000, 0xbd4, 0x120, 0x9, 0x32ad, 0x7dec, 0xffffffff, 0x1, 0x2, 0x7, 0x1f, 0x80, 0x5, 0x7ff, 0x5, 0x10001, 0x3, 0x48f, 0x2, 0xb54b, 0x3, 0x0, 0x3f00, 0x7ff, 0x2, 0xedb, 0x7, 0x8, 0x1, 0x5, 0x3, 0x7ff, 0xff, 0x0, 0x9, 0x8, 0x10000, 0x14, 0xffff8001]}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x7, 0x7ff, 0x1, 0x1, 0x40, 0x1, 0x0, 0x7, 0xfffffff8, 0x40, 0x3, 0xe998, 0x3f, 0x9, 0x6, 0xa39e, 0x4, 0xc1e1, 0xe2be, 0x3, 0xbd23, 0x51c88a98, 0x8001, 0x9, 0xffff, 0x45f, 0xffff, 0xffff0000, 0x2, 0x80000001, 0x423, 0x6, 0x4, 0x9, 0x200, 0x3, 0x480000, 0x2, 0x4, 0x2, 0x8, 0x1, 0x3f, 0x1, 0x5, 0x32, 0xa0, 0x1, 0x101, 0x2, 0x7b85, 0x8001, 0x5, 0x2, 0x0, 0x2, 0xfffffffc, 0xfffffffe, 0x1, 0xfffff5f3, 0x7, 0x101, 0x6, 0x1000, 0x2, 0x8, 0x1ffc00, 0x1, 0x10001, 0x0, 0x5, 0xfffffff7, 0x6, 0xfffffff8, 0x7, 0xfffffff7, 0x3, 0x8, 0x10000, 0x6, 0x0, 0x5, 0x4, 0x1ff, 0x1000, 0xec39, 0x1ff, 0x7f, 0x0, 0x100, 0x8, 0x0, 0x1f, 0x4, 0x0, 0x2, 0x2, 0x0, 0x0, 0x5d, 0x5, 0x0, 0x18d6, 0x116, 0x80000000, 0xfff, 0xfc5, 0x6, 0x0, 0x84a8, 0x4, 0x0, 0x7, 0x6, 0x0, 0x0, 0x6, 0x7, 0x7, 0x80, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffc, 0x0, 0x0, 0x8, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2522, 0x800, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8000, 0x0, 0x3ff, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x401, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x0, 0x0, 0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x0, 0x8}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x0, 0x1}}}}]}]}, 0xd44}, 0x1, 0x0, 0x0, 0x4048080}, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0)
ioctl$SNDCTL_SEQ_THRESHOLD(0xffffffffffffffff, 0xc004510e, 0xfffffffffffffffe)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0xa8000, 0x0)
process_vm_readv(0x0, &(0x7f00000001c0)=[{0x0}], 0x1, &(0x7f0000000440)=[{&(0x7f0000000340)=""/231, 0xe7}], 0x1, 0x0)
ioctl$FBIOBLANK(r5, 0x4611, 0x0)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000880)=ANY=[@ANYBLOB="b2a3e5ad7b263bfff903aa38b452243859a3", @ANYRES16=0x0, @ANYBLOB="20002cbd7000fedbdf25150000000c00018008000100", @ANYRES32=0x0, @ANYBLOB="7400018008000100", @ANYRES32=0x0, @ANYBLOB="1400020067656e657665310000000000000000000800030007000000140002006272696467655f736c6176655f30000014000200697036746e6c30000000000000000000080003000000000014000200697036677265746170300000000000000800030002000000"], 0x94}, 0x1, 0x0, 0x0, 0x2202c880}, 0x81)
r7 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r7, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24)
sendmmsg(r7, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYRESHEX=r4], 0x18}}], 0x1, 0x4)
recvfrom$phonet(r7, 0x0, 0x0, 0x68cee585ffff0000, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b708000000000000fe7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001823007c0be68f89f49c6978d874dfa37082b01c5615a199e2dc66573ceeaa2f73b0de99ad7a4c9793de695e70ba89d61eba6ca3d77c75c8ab3f6f6723c07d02af1e53a712a4c4f3ac6206c3b7a227e303841c3e3717bd5da2d4a5429d21f33bc0058cc70a66f4580d9dc49f00560c53812426463348acdbac8d391e7d90f16eaaf98f9beb18", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000690000009500000000000000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0)

4.137035591s ago: executing program 2 (id=715):
syz_mount_image$xfs(&(0x7f0000000140), &(0x7f0000000040)='./file1\x00', 0x884, &(0x7f0000000440)={[{@logbsize={'logbsize', 0x3d, [0x36, 0x34, 0x4b]}}, {@nodiscard}, {@allocsize={'allocsize', 0x3d, [0x39, 0x34, 0x6d]}}]}, 0x1, 0x98d1, &(0x7f0000000a00)="$eJzs3QeYJHWhaPHZZckZEwZkyZjIGZWkIIKABElKkCxRQAkGQAQBUXIQFAFFkgiSRBREcs4555xz5n3L7uq6Hrj63n0XL+ec75vt7urqmur/r6pmmhq6V1p0uYUHBiYZGN7Iy793+IsfP3arFxfe+fhrj3phsSOXOHbE5LGGXwwZOuJyqhGXUw8MDAwasZxBw6cNHnLyKYMHxhkYGDzqcicYd/xBEwwMrD3i5oIjLucefjHhVSPne2O0eEWHrcag3YZ/Df+mAwMD4w678tTAzCuOupwR6zXLPz1RaSsttNiif7f6m9uw8Rsy4vqoX2MN/5rwkoGBCS8e4O1j0Dv7jN78/pPse97Kq7zD6/G/opUWWmzx0fyH7YtjjJg297B9fPR90Njo2/nQuW8beQwahAfO/yWttNCiSw689XF+YLXXD9nijTePm4PHGxgYPP7AwOAJBgYGTzgwMHiigYHBE7/TLvX/1ju68VVVVdU70kILz77wsNd7o/0+MM7I32vp98JVX1v6toGBgTGHzzN4rpGvBauqqqqqqqrqP7OFFp59EXj9P8nbvf4/6fSXZ+z1f1VVVVVVVdX/nhZfaOHZh72OH+31/+Rv9/p/+/ue32jE3/7PPfxRr7+zT6Kqqqqqqqqq3rZlv/Tm6//xR3v9P/TtXv8/OP+u94+Yb+R/N3htlEUOGuXvCV4ZZfoYo8z/8ijTh4wyfdT5xxoYGDxkxPRX/z558HjD7vvn+QdPMmy9R0x/aZTps/z9/28eMu0o02cdZfr0o0yfbcS6Dps+wyjT5xxl/hn/lbGtqqqqqqqqqqqqqqqqqqr6n+r1x04/8+/v+f7RgVHev/1v7+M+4u8CBp1w1pVXvmMr+p/RoH/+e4jt3+l1+n9tmPM4xwwdGNhkhXd6Veod6J3+vIZ6Z8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/MW9xfn/v73//xRHrj3y/5mf+/A9ppxo1MduMMr1cf5H1/od6916/n9gg0EDAyN8JxnmutRCyy4/48DAwERT7nH4HAN/u2+eYffNP9kYI94gYfjbIEw3hBe8/YhPRd9+xKwjlnHCm8tf/I3Dxhg02kqM0qSnHnHE+iu9MMfol9O/9fMYPPLK+y7aepGR72UxeLSZ3mo7Hbn8kc9ldOcR6z7jsHWfecuNN5t5i222/dQGG6+53jrrrbPJvHPPPc+cc88172wzr7vBRuvMMvzftxqzoW/+O82/MmaTjz5mjy006piN/tzeasyGvv2YvbnEsfdZfcORYzb6qv1XYzbN24/Z0A1GfKMhQ8ccWOPNsRk0MDBk2jEHth52Y9axBwaGTDdi3smHzfvpyQYPDOz59yc67NrYf9sGB20/bJ6VFl1u4b9/7P4/f/z+W3ye/VjDL4aMGJIhU424nHr4t5lk4O+b4uAhJ58yeNhz/4dhnmDc8QdNMDCw9oibC464nHfEvZePnO8tPmd9tBV9821Wdhv+9TePcYddOW6ZiW8YdTlvQfDf0f/Vz/9/8ppn0N8GatCIrxHzDPdaaLHF//693hyGBUe+J8ywny3DTP4fPsb+v+yf1nfoOG++ye1bre/bvC/u8OcP29f0j5wz9L/rfXH52LHkm/8O/VeOHQNvf+wY4+9X/z51ncumGP3YscRbr+I/7Bcjx2js0WZ6q2PHjAcutN2bx6a3P3YsucGIDxr6+7Fj8MDAkGlGHjuGHUimH3Ngz2E3Zht2Y4YxB44admP2N2+MO3DWsBszrbXpRmsPevNte0Ysd5Zhy11wskFvPvkrZ17o2DH2feONaUesyyyjHVhHbB9DR/35uNBkw4dt5GNpuXduOfy+6Ucsd9Z/Y7kjH0vLnWfz4ffNMGK5s4223DHeZrkjHztyfxg265v7w4yD/uEPP2H/XXS0/XfQyMP6KA8Z+TXW8K8JLxn52VCwv/xbxx3afyd5m/V9m8+1wu1t2LQdl7rs9P+uz7Wi9R3n7df3rT6H+y3Xd8Nxt176v2F9B42yvv+wnW023/BtZcYR29mc/8b2O/Kxox/Hxnzz3uEMM/4rx7EF/+k4tsMYg0db+VF6q9+B1ob5h1+f/G9Lm/foMSYeOfZjjrbc/+p3oBnf/jg2yQajPW7RQwcG0Zg/+OgR64/9X4z5mAP/+Lv6yDEf+di3G/MZ/nnMB/3TmM/z9mP+r/7eOeM0w+8f423GfPAuWyw1cszH+jfHfIZ/d8wXHBiDxnzPg4aP29sdT99qzEc+9h/HfMjA5wcGBqYdMebT/yvb+Sz/Pdv5eDD/8Ov3/W3SRVOcsfsox5hB/86YT//vjvnQv23n075539SDB8Yaa2DrNbfccvNZh/878uZsw//lY9GT9w4f57f7WfpWRiMf+3b7xbT/itHQ/x6jDw355/lHvugYeXuFs46b9P/2WDTtv2c0aNEBPhaddsHwcXu734veasxHPpZ+Dg4d5fGjv657m/ejxOc0bNoBB+5368hFjnhY70f5r/cPm+3I/8a3wegH+Xq31n//d5e/u/zd5e8uf3Fvcf7/b+///+Akyz0y4kXymHvNt95a7/T6vsO9q8//j/D9h/P/a603317DXgqOuO9tz88On+c/8vzs3MMvJrxq5Hyjnx/kFX3r87Mz7DPTsgP/M+dn/68aua/+C6/jO/67y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v8xb3F+f+Rf6M89ODX7t1+xInQMfffb63X3un1fYd7V5//H+H7D+f/X1trv/0HD/ztvrc9/z98Hsf5/6UP3veUgf/g8/8j99XO/9d/Uf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3lL+4tzv8vOPLvAOZafd3dRv49wCazLrDTO72+73Dv1vP/ff6/t47/7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3Ejzv8PjPaxjsu0XWBw/v9/d2/h/+X8MYv/svljFv/l8scs/svnj1n8V8gfs/h/JX/M4r9i/pjFf6X8MYv/yvljFv9V8scs/qvmj1n8v5o/ZvH/Wv6YxX+1/DGL/+r5Yxb/NfLHLP5r5o9Z/L+eP2bxXyt/zOK/dv6YxX+d/DGL/7r5Yxb/9fLHLP7r549Z/DfIH7P4fyN/zOK/Yf6YxX+j/DGL/8b5Yxb/TfLHLP6b5o9Z/DfLH7P4fzN/zOK/ef6YxX+L/DGL/5b5Yxb/b+WPWfy/nT9m8d8qf8ziv3X+mMV/m/yxd63/G2/8w+Rt88fetf6j7f/f+Rf9h/5/Wq3/1Cz+323/xyz+38sfs/h/P3/M4r9d/pjFf/v8MYv/DvljFv8f5I9Z/HfMH7P4/zB/zOK/U/6YxX/n/DGL/4/yxyz+u+SPWfx3zR+z+O+WP2bx/3H+mMV/9/wxi/9P8scs/j/NH7P475E/ZvHfM3/M4r9X/pjFf+/8MYv/PvljFv9988cs/vvlj1n8988fs/gfkD9m8T8wf8zi/7P8MYv/QfljFv+D88cs/j/PH7P4/yJ/zOJ/SP6Yxf+X+WMW/0Pzxyz+h+WPWfwPzx+z+P8qf8zi/+v8MYv/EfljFv/f5I9Z/I/MH7P4H5U/ZvE/On/M4n9M/pjF/9j8MYv/b/PHLP7H5Y9Z/H+XP2bxPz5/zOJ/Qv6Yxf/3+WMW/xPzxyz+J+WPWfxPzh+z+J+SP2bxPzV/zOL/h/wxi/9p+WMW/z/mj1n8T88fs/j/KX/M4v/n/DGL/xn5Yxb/M/PHLP5/yR+z+J+VP2bx/2v+mMX/7Pwxi/85+WMW/3Pzxyz+5+WPWfzPzx+z+F+QP2bxvzB/zOJ/Uf6Yxf/i/DGL/yX5Yxb/S/PHLP6X5Y9Z/C/PH7P4X5E/ZvG/Mn/M4n9V/pjF/+r8MYv/NfljFv9r88cs/tflj1n8r88fs/jfkD9m8b8xf8zif1P+mMX/5vwxi/8t+WMW/1vzxyz+t+WPWfxvzx+z+N+RP2bxvzN/zOJ/V/6Yxf/u/DGL/z35Yxb/e/PHLP735Y9Z/O/PH7P4P5A/ZvF/MH/M4v9Q/pjF/+H8MYv/I/ljFv9H88cs/o/lj1n8H88fs/g/kT9m8X8yf8zi/1T+mMX/6fwxi/8z+WMW/2fzxyz+z+WPWfyfzx+z+L+QP2bxfzF/zOL/Uv6Yxf/l/DGL/yv5Yxb/V/PHLP6v5Y9Z/F/PH7P4v5E/JvEfNJA/ZvEflD9m8R+cP2bxHyN/zOI/JH/M4j9m/pjFf6z8MYv/2PljFv9x8scs/uPmj1n8x8sfs/iPnz9m8Z8gf8ziP2H+mMV/ovwxi//E+WMW/0nyxyz+k+aPWfwnyx+z+L8nf8zi/978MYv/+/LHLP7vzx+z+H8gf8ziP3n+mMX/g/ljFv8P5Y9Z/D+cP2bx/0j+mMV/ivwxi/9H88cs/lPmj1n8h+aPWfynyh+z+E+dP2bxnyZ/zOI/bf6YxX+6/DGL//T5Yxb/GfLHLP4z5o9Z/D+WP2bx/3j+mMX/E/ljFv9P5o9Z/D+VP2bxnyl/zOI/c/6YxX+W/DGL/6z5Yxb/2fLHLP6z549Z/OfIH7P4z5k/ZvGfK3/M4j93/pjFf578MYv/vPljFv/58scs/vPnj1n8P50/ZvH/TP6Yxf+z+WMW/wXyxyz+C+aPWfwXyh+z+C+cP2bxXyR/zOL/ufwxi//n88cs/ovmj1n8F8sfs/h/IX/M4r94/pjF/4v5Yxb/JfLHLP5L5o9Z/L+UP2bxXyp/zOK/dP6YxX+Z/DGL/5fzxyz+y+aPWfyXyx+z+C+fP2bxXyF/zOL/lfwxi/+K+WMW/5Xyxyz+K+ePWfxXyR+z+K+aP2bx/2r+mMX/a/ljFv/V8sfe9H9ju+E33sX+q+ePWfb/NfLHLP5r5o9Z/L+eP2bxXyt/zOK/dv6YxX+d/DGL/7r5Yxb/9fLHLP7r549Z/DfIH7P4fyN/zOK/Yf6YxX+j/DGL/8b5Yxb/TfLHLP6b5o9Z/DfLH7P4fzN/zOK/ef6YxX+L/DGL/5b5Yxb/b+WPWfy/nT9m8d8qf8ziv3X+mMV/m/wxi/+2+WMW/+/kj1n8v5s/ZvH/Xv6Yxf/7+WMW/+3yxyz+2+ePWfx3yB+z+P8gf8ziv2P+mMX/h/ljFv+d8scs/jvnj1n8f5Q/ZvHfJX/M4r9r/pjFf7f8MYv/j/PHLP67549Z/H+SP2bx/2n+mMV/j/wxi/+e+WMW/73yxyz+e+ePWfz3yR+z+O+bP2bx3y9/zOK/f/6Yxf+A/DGL/4H5Yxb/n+WPWfwPyh+z+B+cP2bx/3n+mMX/F/ljFv9D8scs/r/MH7P4H5o/ZvE/LH/M4n94/pjF/1f5Yxb/X+ePWfyPyB+z+P8mf8zif2T+mMX/qPwxi//R+WMW/2Pyxyz+x+aPWfx/mz9m8T8uf8zi/7v8MYv/8fljFv8T8scs/r/PH7P4n5g/ZvE/KX/M4n9y/pjF/5T8MYv/qfljFv8/5I9Z/E/LH7P4/zF/zOJ/ev6Yxf9P+WMW/z/nj1n8z8gfs/ifmT9m8f9L/pjF/6z8MYv/X/PHLP5n549Z/M/JH7P4n5s/ZvE/L3/M4n9+/pjF/4L8MYv/hfljFv+L8scs/hfnj1n8L8kfs/hfmj9m8b8sf8zif3n+mMX/ivwxi/+V+WMW/6vyxyz+V+ePWfyvyR+z+F+bP2bxvy5/7F3sv/NYf5866Pr8sXex/z/s/zfkj1n8b8wfs/jflD9m8b85f8zif0v+mMX/1vwxi/9t+WMW/9vzxyz+d+SPWfzvzB+z+N+VP2bxvzt/zOJ/T/6Yxf/e/DGL/335Yxb/+/PHLP4P5I9Z/B/MH7P4P5Q/ZvF/OH/M4v9I/pjF/9H8MYv/Y/ljFv/H88cs/k/kj1n8n8wfs/g/lT9m8X86f8zi/0z+mMX/2fwxi/9z+WMW/+fzxyz+L+SPWfxfzB+z+L+UP2bxfzl/zOL/Sv6Yxf/V/DGL/2v5Yxb/1/PHLP5v5I9J/N+8mv8/Z/EflD9m8R+cP2bxHyN/zOI/JH/M4j9m/pjFf6z8MYv/2PljFv9x8scs/uPmj1n8x8sfs/iPnz9m8Z8gf8ziP2H+mMV/ovwxi//E+WMW/0nyxyz+k+aPWfwnyx+z+L8nf8zi/978MYv/+/LHLP7vzx+z+H8gf8ziP3n+mMX/g/ljFv8P5Y9Z/D+cP2bx/0j+mMV/ivwxi/9H88cs/lPmj1n8h+aPWfynyh+z+E+dP2bxnyZ/zOI/bf6YxX+6/DGL//T5Yxb/GfLHLP4z5o9Z/D+WP2bx/3j+mMX/E/ljFv9P5o9Z/D+VP2bxnyl/zOI/c/6YxX+W/DGL/6z5Yxb/2fLHLP6z549Z/OfIH7P4z5k/ZvGfK3/M4j93/pjFf578MYv/vPljFv/58scs/vPnj1n8P50/ZvH/TP6Yxf+z+WMW/wXyxyz+C+aPWfwXyh+z+C+cP2bxXyR/zOL/ufwxi//n88cs/ovmj1n8F8sfs/h/IX/M4r94/pjF/4v5Yxb/JfLHLP5L5o9Z/L+UP2bxXyp/zOK/dP6YxX+Z/DGL/5fzxyz+y+aPWfyXyx+z+C+fP2bxXyF/zOL/lfwxi/+K+WMW/5Xyxyz+K+ePWfxXyR+z+K+aP2bx/2r+mMX/a/ljFv/V8scs/qvnj1n818gfs/ivmT9m8f96/pjFf638MYv/2vljFv918scs/uvmj1n818sfs/ivnz9m8d8gf8zi/438MYv/hvljFv+N8scs/hvnj1n8N8kfs/hvmj9m8d8sf8zi/838MYv/5vljFv8t8scs/lvmj1n8v5U/ZvH/dv6YxX+r/DGL/9b5Yxb/bfLHLP7b5o9Z/L+TP2bx/27+mMX/e/ljFv/v549Z/LfLH7P4b58/ZvHfIX/M4v+D/DGL/475Yxb/H+aPWfx3yh+z+O+cP2bx/1H+mMV/l/wxi/+u+WMW/93yxyz+P84fs/jvnj9m8f9J/pjF/6f5Yxb/PfLHLP575o9Z/PfKH7P4750/ZvHfJ3/M4r9v/pjFf7/8MYv//vljFv8D8scs/gfmj1n8f5Y/ZvE/KH/M4n9w/pjF/+f5Yxb/X+SPWfwPyR+z+P8yf8zif2j+mMX/sPwxi//h+WMW/1/lj1n8f50/ZvE/In/M4v+b/DGL/5H5Yxb/o/LHLP5Ha/zH+Lfmtvgfo/H/97L4H5s/ZvH/bf6Yxf+4/DGL/+/yxyz+x+ePWfxPyB+z+P8+f8zif2L+mMX/pPwxi//J+WMW/1Pyxyz+p+aPWfz/kD9m8T8tf8zi/8f8MYv/6fljFv8/5Y9Z/P+cP2bxPyN/zOJ/Zv6Yxf8v+WMW/7Pyxyz+f80fs/ifnT9m8T8nf8zif27+mMX/vPwxi//5+WMW/wvyxyz+F+aPWfwvyh+z+F+cP2bxvyR/zOJ/af6Yxf+y/DGL/+X5Yxb/K/LHLP5X5o9Z/K/KH7P4X50/ZvG/Jn/M4n9t/pjF/7r8MYv/9fljFv8b8scs/jfmj1n8b8ofs/jfnD9m8b8lf8zif2v+mMX/tvwxi//t+WMW/zvyxyz+d+aPWfzvyh+z+N+dP2bxvyd/zOJ/b/6Yxf++/DGL//35Yxb/B/LHLP4P5o9Z/B/KH7P4P5w/ZvF/JH/M4v9o/pjF/7H8MYv/4/ljFv8n8scs/k/mj1n8n8ofs/g/nT9m8X8mf8zi/2z+mMX/ufwxi//z+WMW/xfyxyz+L+aPWfxfyh+z+L+cP2bxfyV/zOL/av6Yxf+1/DGL/+v5Yxb/N/LHJP5jDOSPWfwH5Y9Z/Afnj1n8x8gfs/gPyR+z+I+ZP2bxHyt/zOI/dv6YxX+c/DGL/7j5Yxb/8fLHLP7j549Z/CfIH7P4T5g/ZvGfKH/M4j9x/pjFf5L8MYv/pPljFv/J8scs/u/JH7P4vzd/zOL/vvwxi//788cs/h/IH7P4T54/ZvH/YP6Yxf9D+WMW/w/nj1n8P5I/ZvGfIn/M4v/R/DGL/5T5Yxb/ofljFv+p8scs/lPnj1n8p8kfs/hPmz9m8Z8uf8ziP33+mMV/hvwxi/+M+WMW/4/lj1n8P54/ZvH/RP6Yxf+T+WMW/0/lj1n8Z8ofs/jPnD9m8Z8lf8ziP2v+mMV/tvwxi//s+WMW/znyxyz+c+aPWfznyh+z+M+dP2bxnyd/zOI/b/6YxX++/DGL//z5Yxb/T+ePWfw/kz9m8f9s/pjFf4H8MYv/gvljFv+F8scs/gvnj1n8F5H53/Yvzmfx/5zM/1/N4v/5/DGL/6L5Yxb/xfLHLP5fyB+z+C+eP2bx/2L+mMV/ifwxi/+S+WMW/y/lj1n8l8ofs/gvnT9m8V8mf8zi/+X8MYv/svljFv/l8scs/svnj1n8V8gfs/h/JX/M4r9i/pjFf6X8MYv/yvljFv9V8scs/qvmj1n8v5o/ZvH/Wv6YxX+1/DGL/+r5Yxb/NfLHLP5r5o9Z/L+eP2bxXyt/zOK/dv6YxX+d/DGL/7r5Yxb/9fLHLP7r549Z/DfIH7P4fyN/zOK/Yf6YxX+j/DGL/8b5Yxb/TfLHLP6b5o9Z/DfLH7P4fzN/zOK/ef6YxX+L/DGL/5b5Yxb/b+WPWfy/nT9m8d8qf8ziv3X+mMV/m/wxi/+2+WMW/+/kj1n8v5s/ZvH/Xv6Yxf/7+WMW/+3yxyz+2+ePWfx3yB+z+P8gf8ziv2P+mMX/h/ljFv+d8scs/jvnj1n8f5Q/ZvHfJX/M4r9r/pjFf7f8MYv/j/PHLP67549Z/H+SP2bx/2n+mMV/j/wxi/+e+WMW/73yxyz+e+ePWfz3yR+z+O+bP2bx3y9/zOK/f/6Yxf+A/DGL/4H5Yxb/n+WPWfwPyh+z+B+cP2bx/3n+mMX/F/ljFv9D8scs/r/MH7P4H5o/ZvE/LH/M4n94/pjF/1f5Yxb/X+ePWfyPyB+z+P8mf8zif2T+mMX/qPwxi//R+WMW/2Pyxyz+x+aPWfx/mz9m8T8uf8zi/7v8MYv/8fljFv8T8scs/r/PH7P4n5g/ZvE/KX/M4n9y/pjF/5T8MYv/qfljFv8/5I9Z/E/LH7P4/zF/zOJ/ev6Yxf9P+WMW/z/nj1n8z8gfs/ifmT9m8f9L/pjF/6z8MYv/X/PHLP5n549Z/M/JH7P4n5s/ZvE/L3/M4n9+/pjF/4L8MYv/hfljFv+L8scs/hfnj1n8L8kfs/hfmj9m8b8sf8zif3n+mMX/ivwxi/+V+WMW/6vyxyz+V+ePWfyvyR+z+F+bP2bxvy5/zOJ/ff6Yxf+G/DGL/435Yxb/m/LHLP43549Z/G/JH7P435o/ZvG/LX/M4n97/pjF/478MYv/nfljFv+78scs/nfnj1n878kfs/jfmz9m8b8vf8zif3/+mMX/gfwxi/+D+WMW/4fyxyz+D+ePWfwfyR+z+D+aP2bxfyx/zOL/eP6Yxf+J/DGL/5P5Yxb/p/LHLP5P549Z/J/JH7P4P5s/ZvF/Ln/M4v98/pjF/4X8MYv/i/ljFv+X8scs/i/nj1n8X8kfs/i/mj9m8X8tf8zi/3r+mMX/jfwxif+Qgfwxi/+g/DGL/+D8MYv/GPljFv8h+WMW/zHzxyz+Y+WPWfzHzh+z+I+TP2bxHzd/zOI/Xv6YxX/8/DGL/wT5Yxb/CfPHLP4T5Y9Z/CfOH7P4T5I/ZvGfNH/M4j9Z/pjF/z35Yxb/9+aPWfzflz9m8X9//pjF/wP5Yxb/yfPHLP4fzB+z+H8of8zi/+H8MYv/R/LHLP5T5I9Z/D+aP2bxnzJ/zOI/NH/M4j9V/pjFf+r8MYv/NPljFv9p88cs/tPlj1n8p88fs/jPkD9m8Z8xf8zi/7H8MYv/x/PHLP6fyB+z+H8yf8zi/6n8MYv/TPljFv+Z88cs/rPkj1n8Z80fs/jPlj9m8Z89f8ziP0f+mMV/zvwxi/9c+WMW/7nzxyz+8+SPWfznzR+z+M+XP2bxnz9/zOL/6fwxi/9n9P6X4lSL/2f1/pzFf4H8MYv/gvljFv+F8scs/gvnj1n8F8kfs/h/Ln/M4v/5/DGL/6L5Yxb/xfLHLP5fyB+z+C+eP2bx/2L+mMV/ifwxi/+S+WMW/y/lj1n8l8ofs/gvnT9m8V8mf8zi/+X8MYv/svljFv/l8scs/svnj1n8V8gfs/h/JX/M4r9i/pjFf6X8MYv/yvljFv9V8scs/qvmj1n8v5o/ZvH/Wv6YxX+1/DGL/+r5Yxb/NfLHLP5r5o9Z/L+eP2bxXyt/zOK/dv6YxX+d/DGL/7r5Yxb/9fLHLP7r549Z/DfIH7P4fyN/zOK/Yf6YxX+j/DGL/8b5Yxb/TfLHLP6b5o9Z/DfLH7P4f1Pj/+89S4v/5hr/fy+L/xb5Yxb/LfPHLP7fyh+z+H87f8ziv1X+mMV/6/wxi/82+WMW/23zxyz+38kfs/h/N3/M4v+9/DGL//fzxyz+2+WPWfy3zx+z+O+QP2bx/0H+mMV/x/wxi/8P88cs/jvlj1n8d84fs/j/KH/M4r9L/pjFf9f8MYv/bvljFv8f549Z/HfPH7P4/yR/zOL/0/wxi/8e+WMW/z3zxyz+e+WPWfz3zh+z+O+TP2bx3zd/zOK/X/6YxX///DGL/wH5Yxb/A/PHLP4/yx+z+B+UP2bxPzh/zOL/8/wxi/8v8scs/ofkj1n8f5k/ZvE/NH/M4n9Y/pjF//D8MYv/r/LHLP6/zh+z+B+RP2bx/03+mMX/yPwxi/9R+WMW/6P/K/8x/z+v139oFv9j2v8xi/+x+WMW/9++hf/Y/1Pr9R+axf+49n/M4v+7/DGL//H5Yxb/E/LHLP6/zx+z+J+YP2bxPyl/zOJ/cv6Yxf+U/DGL/6n5Yxb/P+SPWfxPyx+z+P8xf8zif3r+mMX/T/ljFv8/549Z/M/IH7P4n5k/ZvH/S/6Yxf+s/DGL/1/zxyz+Z+ePWfzPyR+z+J+bP2bxPy9/zOJ/fv6Yxf+C/DGL/4X5Yxb/i/LHLP4X549Z/C/JH7P4X5o/ZvG/LH/M4n95/pjF/4r8MYv/lfljFv+r8scs/lfnj1n8r8kfs/hfmz9m8b8uf8zif33+mMX/hvwxi/+N+WMW/5vyxyz+N+ePWfxvyR+z+N+aP2bxvy1/zOJ/e/6Yxf+O/DGL/535Yxb/u/LHLP53549Z/O/JH7P435s/ZvG/L3/M4n9//pjF/4H8MYv/g/ljFv+H8scs/g/nj1n8H8kfs/g/mj9m8X8sf8zi/3j+mMX/ifwxi/+T+WMW/6fyxyz+T+ePWfyfyR+z+D+bP2bxfy5/zOL/fP6Yxf+F/DGL/4v5Yxb/l/LHLP4v549Z/F/JH7P4v5o/ZvF/LX/M4v96/pjF/438MYn/mAP5Yxb/QfljFv/B+WMW/zHyxyz+Q/LHLP5j5o9Z/MfKH7P4j50/ZvEfJ3/M4j9u/pjFf7z8MYv/+PljFv8J8scs/hPmj1n8J8ofs/hPnD9m8Z8kf8ziP2n+mMV/svwxi/978scs/u/NH7P4vy9/zOL//vwxi/8H8scs/pPnj1n8P5g/ZvH/UP6Yxf/D+WMW/4/kj1n8p8gfs/h/NH/M4j9l/pjFf2j+mMV/qvwxi//U+WMW/2nyxyz+0+aPWfynyx+z+E+fP2bxnyF/zOI/Y/6Yxf9j+WMW/4/nj1n8P5E/ZvH/ZP6Yxf9T+WMW/5nyxyz+M+ePWfxnyR+z+M+aP2bxny1/zOI/e/6YxX+O/DGL/5z5Yxb/ufLHLP5z549Z/OfJH7P4z5s/ZvGfL3/M4j9//pjF/9P5Yxb/z+SPWfw/mz9m8V8gf8ziv2D+mMV/ofwxi//C+WMW/0Xyxyz+n8sfs/h/Pn/M4r9o/pjFf7H8MYv/F/LHLP6L549Z/L+YP2bxXyJ/zOK/ZP6Yxf9L+WMW/6Xyxyz+S+ePWfyXyR+z+H85f8ziv2z+mMV/ufwxi//y+WMW/xXyxyz+X8kfs/ivmD9m8V8pf8ziv3L+mMV/lfwxi/+q+WMW/6/mj1n8v5Y/ZvFfLX/M4r96/pjFf438MYv/mvljFv+v549Z/NfKH7P4r50/ZvFfJ3/M4r9u/pjFf738MYv/+vljFv8N8scs/t/IH7P4b5g/ZvHfKH/M4r9x/pjFf5P8MYv/pvljFv/N8scs/t/MH7P4b54/ZvHfIn/M4r9l/pjF/1v5Yxb/b+ePWfy3yh+z+G+dP2bx3yZ/zOK/bf6Yxf87+WMW/+/mj1n8v5c/ZvH/fv6YxX+7/DGL//b5Yxb/HfLHLP4/yB+z+O+YP2bx/2H+mMV/p/wxi//O+WMW/x/lj1n8d8kfs/jvmj9m8d8tf8zi/+P8MYv/7vljFv+f5I9Z/H+aP2bx3yN/zOK/Z/6YxX+v/DGL/975Yxb/ffLHLP775o9Z/PfLH7P4758/ZvE/IH/M4n9g/pjF/2f5Yxb/g/LHLP4H549Z/H+eP2bx/0X+mMX/kPwxi/8v88cs/ofmj1n8D8sfs/gfnj9m8f9V/pjF/9f5Yxb/I/LHLP6/yR+z+B+ZP2bxPyp/zOJ/dP6Yxf+Y/DGL/7H5Yxb/3+aPWfyPyx+z+P8uf8zif3z+mMX/hPwxi//v88cs/ifmj1n8T8ofs/ifnD9m8T8lf8zif2r+mMX/D/ljFv/T8scs/n/MH7P4n54/ZvH/U/6Yxf/P+WMW/zPyxyz+Z+aPWfz/kj9m8T8rf8zi/9f8MYv/2fljFv9z8scs/ufmj1n8z8sfs/ifnz9m8b8gf8zif2H+mMX/ovwxi//F+WMW/0vyxyz+l+aPWfwvyx+z+F+eP2bxvyJ/zOJ/Zf6Yxf+q/DGL/9X5Yxb/a/LHLP7X5o9Z/K/LH7P4X58/ZvG/IX/M4n9j/pjF/6b8MYv/zfljFv9b8scs/rfmj1n8b8sfs/jfnj9m8b8jf8zif2f+mMX/rvwxi//d+WMW/3vyxyz+9+aPWfzvyx+z+N+fP2bxfyB/zOL/YP6Yxf+h/DGL/8P5Yxb/R/LHLP6P5o9Z/B/LH7P4P54/ZvF/In/M4v9k/pjF/6n8MYv/0/ljFv9n8scs/s/mj1n8n8sfs/g/nz9m8X8hf8zi/2L+mMX/pfwxi//L+WMW/1fyxyz+r+aPWfxfyx+z+L+eP2bxfyN/TOI/1kD+mMV/UP6YxX9w/pjFf4z8MYv/kPwxi/+Y+WMW/7Hyxyz+Y+ePWfzHyR+z+I+bP2bxHy9/zOI/fv6YxX+C/DGL/4T5Yxb/ifLHLP4T549Z/CfJH7P4T5o/ZvGfLH/M4v+e/DGL/3vzxyz+78sfs/i/P3/M4v+B/DGL/+T5Yxb/D+aPWfw/lD9m8f9w/pjF/yP5Yxb/KfLHLP4fzR+z+E+ZP2bxH5o/ZvGfKn/M4j91/pjFf5r8MYv/tPljFv/p8scs/tPnj1n8Z8gfs/jPmD9m8f9Y/pjF/+P5Yxb/T+SPWfw/mT9m8f9U/pjFf6b8MYv/zPljFv9Z8scs/rPmj1n8Z8sfs/jPnj9m8Z8jf8ziP2f+mMV/rvwxi//c+WMW/3nyxyz+8+aPWfznyx+z+M+fP2bx/3T+mMX/M/ljFv/P5o9Z/BfIH7P4L5g/ZvFfKH/M4r9w/pjFf5H8MYv/5/LHLP6fzx+z+C+aP2bxXyx/zOL/hfwxi//i+WMW/y/mj1n8l8gfs/gvmT9m8f9S/pjFf6n8MYv/0vljFv9l8scs/l/OH7P4L5s/ZvFfLn/M4r98/pjFf4X8MYv/V/LHLP4r5o9Z/FfKH7P4r5w/ZvFfJX/M4r9q/pjF/6v5Yxb/r+WPWfxXyx+z+K+eP2bxXyN/zOK/Zv6Yxf/r+WMW/7Xyxyz+a+ePWfzXyR+z+K+bP2bxXy9/zOK/fv6YxX+D/DGL/zfyxyz+G+aPWfw3yh+z+G+cP2bx3yR/zOK/af6YxX+z/DGL/zfzxyz+m+ePWfy3yB+z+G+ZP2bx/1b+mMX/2/ljFv+t8scs/lvnj1n8t8kfs/hvmz9m8f9O/pjF/7v5Yxb/7+WPWfy/nz9m8d8uf8ziv33+mMV/h/wxi/8P8scs/jvmj1n8f5g/ZvHfKX/M4r9z/pjF/0f5Yxb/XfLHLP675o9Z/HfLH7P4/zh/zOK/e/6Yxf8n+WMW/5/mj1n898gfs/jvmT9m8d8rf8ziv3f+mMV/n/wxi/+++WMW//3yxyz+++ePWfwPyB+z+B+YP2bx/1n+mMX/oPwxi//B+WMW/5/nj1n8f5E/ZvE/JH/M4v/L/DGL/6H5Yxb/w/LHLP6H549Z/H+VP2bx/3X+mMX/iPwxi/9v8scs/kfmj1n8j8ofs/gfnT9m8T8mf8zif2z+mMX/t/ljFv/j8scs/r/LH7P4H58/ZvE/IX/M4v/7/DGL/4n5Yxb/k/LHLP4n549Z/E/JH7P4n5o/ZvH/Q/6Yxf+0/DGL/x/zxyz+p+ePWfz/lD9m8f9z/pjF/4z8MYv/mfljFv+/5I9Z/M/KH7P4/zV/zOJ/dv6Yxf+c/DGL/7n5Yxb/8/LHLP7n549Z/C/IH7P4X5g/ZvG/KH/M4n9x/pjF/5L8MYv/pfljFv/L8scs/pfnj1n8r8gfs/hfafYf8tZ3WfyvMvu/TRb/q/PHLP7X5I9Z/K/NH7P4X5c/ZvG/Pn/M4n9D/pjF/8b8MYv/TfljFv+b88cs/rfkj1n8b80fs/jflj9m8b89f8zif0f+mMX/zvwxi/9d+WMW/7vzxyz+9+SPWfzvzR+z+N+XP2bxvz9/zOL/QP6Yxf/B/DGL/0P5Yxb/h/PHLP6P5I9Z/B/NH7P4P5Y/ZvF/PH/M4v9E/pjF/8n8MYv/U/ljFv+n88cs/s/kj1n8n80fs/g/lz9m8X8+f8zi/0L+mMX/xfwxi/9L+WMW/5fzxyz+r+SPWfxfzR+z+L+WP2bxfz1/zOL/Rv6YxH/sgfwxi/+g/DGL/+D8MYv/GPljFv8h+WMW/zHzxyz+Y+WPWfzHzh+z+I+TP2bxHzd/zOI/Xv6YxX/8/DGL/wT5Yxb/CfPHLP4T5Y9Z/CfOH7P4T5I/ZvGfNH/M4j9Z/pjF/z35Yxb/9+aPWfzflz9m8X9//pjF/wP5Yxb/yfPHLP4fzB+z+H8of8zi/+H8MYv/R/LHLP5T5I9Z/D+aP2bxnzJ/zOI/NH/M4j9V/pjFf+r8MYv/NPljFv9p88cs/tPlj1n8p88fs/jPkD9m8Z8xf8zi/7H8MYv/x/PHLP6fyB+z+H8yf8zi/6n8MYv/TPljFv+Z88cs/rPkj1n8Z80fs/jPlj9m8Z89f8ziP0f+mMV/zvwxi/9c+WMW/7nzxyz+8+SPWfznzR+z+M+XP2bxnz9/zOL/6fwxi/9n8scs/p/NH7P4L5A/ZvFfMH/M4r9Q/pjFf+H8MYv/IvljFv/P5Y9Z/D+fP2bxXzR/zOK/WP6Yxf8L+WMW/8Xzxyz+X8wfs/gvkT9m8V8yf8zi/6X8MYv/UvljFv+l88cs/svkj1n8v5w/ZvFfNn/M4r9c/pjFf/n8MYv/CvljFv+v5I9Z/FfMH7P4r5Q/ZvFfOX/M4r9K/pjFf9X8MYv/V/PHLP5fyx+z+K+WP2bxXz1/zOK/Rv6YxX/N/DGL/9fzxyz+a+WPWfzXzh+z+K+TP2bxXzd/zOK/Xv6YxX/9/DGL/wb5Yxb/b+SPWfw3zB+z+G+UP2bx3zh/zOK/Sf6YxX/T/DGL/2b5Yxb/b+aPWfw3zx+z+G+RP2bx3zJ/zOL/rfwxi/+388cs/lvlj1n8t84fs/hvkz9m8d82f8zi/538MYv/d/PHLP7fyx+z+H8/f8ziv13+mMV/+/wxi/8O+WMW/x/kj1n8d8wfs/j/MH/M4r9T/pjFf+f8sXel/6RjvXl1VP8f5Y+9K/1HXB3Vf5f8MYv/rvljFv/d8scs/j/OH7P4754/ZvH/Sf6Yxf+n+WMW/z3yxyz+e+aPWfz3yh+z+O+dP2bx3yd/zOK/b/6YxX+//DGL//75Yxb/A/LHLP4H5o9Z/H+WP2bxPyh/zOJ/cP6Yxf/n+WMW/1/kj1n8D8kfs/j/Mn/M4n9o/pjF/7D8MYv/4fljFv9f5Y9Z/H+dP2bxPyJ/zOL/m/wxi/+R+WMW/6Pyxyz+R+ePWfyPyR+z+B+bP2bx/23+mMX/uPwxi//v8scs/sfnj1n8T8gfs/j/Pn/M4n9i/pjF/6T8MYv/yfljFv9T8scs/qfmj1n8/5A/ZvE/LX/M4v/H/DGL/+n5Yxb/P+WPWfz/nD9m8T8jf8zif2b+mMX/L/ljFv+z8scs/n/NH7P4n50/ZvE/J3/M4n9u/pjF/7z8MYv/+fljFv8L8scs/hfmj1n8L8ofs/hfnD9m8b8kf8zif2n+mMX/svwxi//l+WMW/yvyxyz+V+aPWfyvyh+z+F+dP2bxvyZ/zOJ/bf6Yxf+6/DGL//X5Yxb/G/LHLP435o9Z/G/KH7P435w/ZvG/JX/M4n9r/pjF/7b8MYv/7fljFv878scs/nfmj1n878ofs/jfnT9m8b8nf8zif2/+mMX/vvwxi//9+WMW/wfyxyz+D+aPWfwfyh+z+D+cP2bxfyR/zOL/aP4jGucfbln8H8sfs/g/nj9m8X8if8zi/2T+mMX/qfwxi//T+WMW/2fyxyz+z+aPWfyfyx+z+D+fP2bxfyF/zOL/Yv6Yxf+l/DGL/8v5Yxb/V/LHLP6v5o9Z/F/LH7P4v54/ZvF/I39M4v/mH73l/89Z/Aflj1n8B+ePWfzHyB+z+A/JH7P4j5k/ZvEfK3/M4j92/pjFf5z8MYv/uPljFv/x8scs/uPnj1n8J8gfs/hPmD9m8Z8of8ziP3H+mMV/kvwxi/+k+WMW/8nyxyz+78kfs/i/N3/M4v++/DGL//vzxyz+H8gfs/hPnj9m8f9g/pjF/0P5Yxb/D+ePWfw/kj9m8Z8if8zi/9H8MYv/lPljFv+h+WMW/6nyxyz+U+ePWfynyR+z+E+bP2bxny5/zOI/ff6YxX+G/DGL/4z5Yxb/j+WPWfw/nj9m8f9E/pjF/5P5Yxb/T+WPWfxnyh+z+M+cP2bxnyV/zOI/a/6YxX+2/DGL/+z5Yxb/OfLHLP5z5o9Z/OfKH7P4z50/ZvGfJ3/M4j9v/pjFf778MYv//PljFv9P549Z/D+TP2bx/2z+mMV/gfwxi/+C+WMW/4Xyxyz+C+ePWfwXyR+z+H8uf8zi//n8MYv/ovljFv/F8scs/l/IH7P4L54/ZvH/Yv6YxX+J/DGL/5L5Yxb/L+WPWfyXyh+z+C+dP2bxXyZ/zOL/5fwxi/+y+WMW/+Xyxyz+y+ePWfxXyB+z+H8lf8ziv2L+mMV/pfwxi//K+WMW/1Xyxyz+q+aPWfy/mj9m8f9a/pjFf7X8MYv/6vljFv818scs/mvmj1n8v54/ZvFfK3/M4r92/pjFf538MYv/uvljFv/18scs/uvnj1n8N8gfs/h/I3/M4r9h/pjFf6P8MYv/xvljFv9N8scs/pvmj1n8N8sfs/h/M3/M4r95/pjFf4v8MYv/lvljFv9v5Y9Z/L+dP2bx3yp/zOK/df6YxX+b/DGL/7b5Yxb/7+SPWfy/mz9m8f9e/pjF//v5Yxb/7fLHLP7b549Z/HfIH7P4/yB/zOK/Y/6Yxf+H+WMW/53yxyz+O+ePWfx/lD9m8d8lf8ziv2v+mMV/t/wxi/+P88cs/rvnj1n8f5I/ZvH/af6YxX+P/DGL/575Yxb/vfLHLP57549Z/PfJH7P475s/ZvHfL3/M4r9//pjF/4D8MYv/gfljFv+f5Y9Z/A/KH7P4H5w/ZvH/ef6Yxf8X+WMW/0Pyxyz+v8wfs/gfmj9m8T8sf8zif3j+mMX/V/ljFv9f549Z/I/IH7P4/yZ/zOJ/ZP6Yxf+o/DGL/9H5Yxb/Y/LHLP7H5o9Z/H+bP2bxPy5/zOL/u/wxi//x+WMW/xPyxyz+v88fs/ifmD9m8T8pf8zif3L+mMX/lPwxi/+p+WMW/z/kj1n8T8sfs/j/MX/M4n96/pjF/0/5Yxb/P+ePWfzPyB+z+J+ZP2bx/0v+mMX/rPwxi/9f88cs/mfnj1n8z8kfs/ifmz9m8T8vf8zif37+mMX/gvwxi/+F+WMW/4vyxyz+F+ePWfwvyR+z+F+aP2bxvyx/zOJ/ef6Yxf+K/DGL/5X5Yxb/q/LHLP5X549Z/K/JH7P4X5s/ZvG/Ln/M4n99/pjF/4b8MYv/jfljFv+b8scs/jfnj1n8b8kfs/jfmj9m8b8tf8zif3v+mMX/jvwxi/+d+WMW/7vyxyz+d+ePWfzvyR+z+N+bP2bxvy9/zOJ/f/6Yxf+B/DGL/4P5Yxb/h/LHLP4P549Z/B/JH7P4P5o/ZvF/LH/M4v94/pjF/4n8MYv/k/+K/wtvvPH/cc3+I7P4P9X+j1n8n84fs/g/kz9m8X82f8zi/1z+mMX/+fwxi/8L+WMW/xfzxyz+L+WPWfxfzh+z+L+SP2bxfzV/zOL/Wv6Yxf/1/DGL/xv5YxL/cQfyxyz+g/LHLP6D88cs/mPkj1n8h+SPWfzHzB+z+I+VP2bxHzt/zOI/Tv6YxX/c/DGL/3j5Yxb/8fPHLP4T5I9Z/CfMH7P4T5Q/ZvGfOH/M4j9J/pjFf9L8MYv/ZPljFv/35I9Z/N+bP2bxf1/+mMX//fljFv8P5I9Z/CfPH7P4fzB/zOL/ofwxi/+H88cs/h/JH7P4T5E/ZvH/aP6YxX/K/DGL/9D8MYv/VPljFv+p88cs/tPkj1n8p80fs/hPlz9m8Z8+f8ziP0P+mMV/xvwxi//H8scs/h/PH7P4fyJ/zOL/yfwxi/+n8scs/jPlj1n8Z84fs/jPkj9m8Z81f8ziP1v+mMV/9vwxi/8c+WMW/znzxyz+c+WPWfznzh+z+M+TP2bxnzd/zOI/X/6YxX/+/DGL/6fzxyz+n8kfs/h/Nn/M4r9A/pjFf8H8MYv/QvljFv+F88cs/ovkj1n8P5c/ZvH/fP6YxX/R/DGL/2L5Yxb/L+SPWfwXzx+z+H8xf8ziv0T+mMV/yfwxi/+X8scs/kvlj1n8l84fs/gvkz9m8f9y/pjFf9n8MYv/cvljFv/l88ferf5jj+a/Qv7Yu9V/YDT/r+SPWfxXzB+z+K+UP2bxXzl/zOK/Sv6YxX/V/DGL/1fzxyz+X8sfs/ivlj9m8V89f8ziv0b+mMV/zfwxi//X88cs/mvlj1n8184fs/ivkz9m8V83f8ziv17+mMV//fwxi/8G+WMW/2/kj1n8N8wfs/hvlD9m8d84f8ziv0n+mMV/0/wxi/9m+WMW/2/mj1n8N88fs/hvkT9m8d8yf8zi/638MYv/t/PHLP5b5Y9Z/LfOH7P4b5M/ZvHfNn/M4v+d/DGL/3fzxyz+38sfs/h/P3/M4r9d/pjFf/v8MYv/DvljFv8f5I9Z/HfMH7P4/zB/zOK/U/6YxX/n/DGL/4/yxyz+u+SPWfx3zR+z+O+WP2bx/3H+mMV/9/wxi/9P8scs/j/NH7P475E/ZvHfM3/M4r9X/pjFf+/8MYv/PvljFv9988cs/vvlj1n8988fs/gfkD9m8T8wf8zi/7P8MYv/QfljFv+D88cs/j/PH7P4/yJ/zOJ/SP6Yxf+X+WMW/0Pzxyz+h+WPWfwPzx+z+P8qf8zi/+v8MYv/EfljFv/f5I9Z/I/MH7P4H5U/ZvE/On/M4n9M/pjF/9j8MYv/b/PHLP7H5Y9Z/H+XP2bxPz5/zOJ/Qv6Yxf/3+WMW/xPzxyz+J+WPWfxPzh+z+J+SP2bxPzV/zOL/h/wxi/9p+WMW/z/mj1n8T88fs/j/KX/M4v/n/DGL/xn5Yxb/M/PHLP5/yR+z+J+VP2bx/2v+mMX/7Pwxi/85+WMW/3Pzxyz+5+WPWfzPzx+z+F+QP2bxvzB/zOJ/Uf6Yxf/i/DGL/yX5Yxb/S/PHLP6X5Y9Z/C/PH7P4X5E/ZvG/Mn/M4n9V/pjF/+r8MYv/NfljFv9r88cs/tflj1n8r88fs/jfkD9m8b8xf8zif1P+mMX/5vwxi/8t+WMW/1vzxyz+t+WPWfxvzx+z+N+RP2bxvzN/zOJ/V/6Yxf/u/DGL/z35Yxb/e/PHLP735Y9Z/O/PH7P4P5A/ZvF/MH/M4v9Q/pjF/+H8MYv/I/ljFv9H88cs/o/lj1n8H88fs/g/kT9m8X8yf8zi/1T+mMX/6fwxi/8z+WMW/2fzxyz+z+WPWfyfzx+z+L+QP2bxfzF/zOL/Uv6Yxf/l/DGL/yv5Yxb/V/PHLP6v5Y9Z/F/PH7P4v5E/JvEfbyB/zOI/KH/M4j84f8ziP0b+mMV/SP6YxX/M/DGL/1j5Yxb/sfPHLP7j5I9Z/MfNH7P4j5c/ZvEfP3/M4j9B/pjFf8L8MYv/RPljFv+J88cs/pPkj1n8J80fs/hPlj9m8X9P/pjF/735Yxb/9+WPWfzfnz9m8f9A/pjFf/L8MYv/B/PHLP4fyh+z+H84f8zi/5H8MYv/FPljFv+P5o9Z/KfMH7P4D80fs/hPlT9m8Z86f8ziP03+mMV/2vwxi/90+eMAWPynzx+z+M+QP2bxnzF/zOL/sfwxi//H88cs/p/IH7P4fzJ/zOL/qfwxi/9M+WMW/5nzxyz+s+SPWfxnzR+z+M+WP2bxnz1/zOI/R/6YxX/O/DGL/1z5Y3/3f+Vd7T93/phl/58nf8ziP2/+mMV/vvwxi//8+WMW/0/nj1n8P5M/ZvH/bP6YxX+B/DGL/4L5Yxb/hfLHLP4L549Z/BfJH7P4fy5/zOL/+fwxi/+i+WMW/8XyH9EO/3DL4v+F/DGL/+L5Yxb/L+aPWfyXyB+z+C+ZP2bx/1L+mMV/qfwxi//S+WMW/2Xyxyz+X84fs/gvmz9m8V8uf8ziv3z+mMV/hfwxi/9X8scs/ivmj1n8V8ofs/ivnD9m8V8lf8ziv2r+mMX/q/ljFv+v5Y9Z/FfLH7P4r54/ZvFfI3/M4r9m/pjF/+v5Yxb/tfLHLP5r549Z/NfJH7P4r5s/ZvFfL3/M4r9+/pjFf4P8MYv/N/LHLP4b5o9Z/DfKH7P4b5w/ZvHfJH/M4r9p/pjFf7P8MYv/N/PHLP6b549Z/LfIH7P4b5k/ZvH/Vv6Yxf/b+WMW/63yxyz+W+ePWfy3yR+z+G+bP2bx/07+mMX/u/ljFv/v5Y9Z/L+fP2bx3y5/zOK/ff6YxX+H/DGL/w/yxyz+O+aPWfx/mD9m8d8pf8ziv3P+mMX/R/ljFv9d8scs/rvmj1n8d8sfs/j/OH/M4r97/pjF/yf5Yxb/n+aPWfz3yB+z+O+ZP2bx3yt/zOK/d/6YxX+f/DGL/775Yxb//fLHLP77549Z/A/IH7P4H5g/ZvH/Wf6Yxf+g/DGL/8H5Yxb/n+ePWfx/kT9m8T8kf8zi/8v8MYv/ofljFv/D8scs/ofnj1n8f5U/ZvH/df6Yxf+I/DGL/2/yxyz+R+aPWfyPyh+z+B+dP2bxPyZ/zOJ/bP6Yxf+3+WMW/+Pyxyz+v8sfs/gfnz9m8T8hf8zi//v8MYv/ifljFv+T8scs/ifnj1n8T8kfs/ifmj9m8f9D/pjF/7T8MYv/H/PHLP6n549Z/P+UP2bx/3P+mMX/jPwxi/+Z+WMW/7/kj1n8z8ofs/j/NX/M4n92/pjF/5z8MYv/ufljFv/z8scs/ufnj1n8L8gfs/hfmD9m8b8of8zif3H+mMX/kvwxi/+l+WMW/8vyxyz+l+ePWfyvyB+z+F+ZP2bxvyp/zOJ/df6Yxf+a/DGL/7X5Yxb/6/LHLP7X549Z/G/IH7P435g/ZvG/KX/M4n9z/pjF/5b8MYv/rfljFv/b8scs/rfnj1n878gfs/jfmT9m8b8rf8zif3f+mMX/nvwxi/+9+WMW//vyxyz+9+ePWfwfyB+z+D+YP2bxfyh/zOL/cP6Yxf+R/DGL/6P5Yxb/x/LHLP6P549Z/J/IH7P4P5k/ZvF/Kn/M4v90/pjF/5n8MYv/s/ljFv/n8scs/s/nj1n8X8gfs/i/mD9m8X8pf8zi/3L+mMX/lfwxi/+r+WMW/9fyxyz+r+ePWfzfyB+T+I8/kD9m8R+UP2bxH5w/ZvEfI3/M4j8kf8ziP2b+mMV/rPwxi//Y+WMW/3Hyxyz+4+aPWfzHyx+z+I+fP2bxnyB/zOI/Yf6YxX+i/DGL/8T5Yxb/SfLHLP6T5o9Z/CfLH7P4vyd/zOL/3vwxi//78scs/u/PH7P4fyB/zOI/ef6Yxf+D+WMW/w/lj1n8P5w/ZvH/SP6YxX+K/DGL/0fzxyz+U+aPWfyH5o9Z/KfKH7P4T50/ZvGfJn/M4j9t/pjFf7r8MYv/9PljFv8Z8scs/jPmj1n8P5Y/ZvH/eP6Yxf8T+WMW/0/mj1n8P5U/ZvGfKX/M4j9z/pjFf5b8MYv/rPljFv/Z8scs/rPnj1n858gfs/jPmT9m8Z8rf8ziP3f+mMV/nvwxi/+8+WMW//nyxyz+8+ePWfw/nT9m8f9M/pjF/7P5Yxb/BfLHLP4L5o9Z/BfKH7P4L5w/ZvFfJH/M4v+5/DGL/+fzxyz+i+aPWfwXyx+z+H8hf8ziv3j+mMX/i/ljFv8l8scs/kvmj1n8v5Q/ZvFfKn/M4r90/pjFf5n8MYv/l/PHLP7L5o9Z/JfLH7P4L58/ZvFfIX/M4v+V/DGL/4r5Yxb/lfLHLP4r549Z/FfJH7P4r5o/ZvH/av7DGjr6BIv/1/LHLP6r5Y9Z/FfPH7P4r5E/ZvFfM3/M4v/1/DGL/1r5Yxb/tfPHLP7r5I9Z/NfNH7P4r5c/ZvFfP3/M4r9B/pjF/xv5Yxb/DfPHLP4b5Y9Z/DfOH7P4b5I/ZvHfNH/M4r9Z/pjF/5v5Yxb/zfPHLP5b5I9Z/LfMH7P4fyt/zOL/7fwxi/9W+WMW/63zxyz+2+SPWfy3zR+z+H8nf8zi/938MYv/9/LHLP7fzx+z+G+XP2bx3z5/zOK/Q/6Yxf8H+WMW/x3zxyz+P8wfs/jvlD9m8d85f8zi/6P8MYv/LvljFv9d88cs/rvlj1n8f5w/ZvHfPX/M4v+T/DGL/0/zxyz+e+SPWfz3zB+z+O+VP2bx3zt/zOK/T/6YxX/f/DGL/375Yxb//fPHLP4H5I9Z/A/MH7P4/yx/zOJ/UP6Yxf/g/DGL/8/zxyz+v8gfs/gfkj9m8f9l/pjF/9D8MYv/YfljFv/D88cs/r/KH7P4/zp/zOJ/RP6Yxf83+WMW/yPzxyz+R+WPWfyPzh+z+B+TP2bxPzZ/zOL/2/wxi/9x+WMW/9/lj1n8j88fs/ifkD9m8f99/pjF/8T8MYv/SfljFv+T88cs/qfkj1n8T80fs/j/IX/M4n9a/pjF/4/5Yxb/0/PHLP5/yh+z+P85f8zif0b+mMX/zPwxi/9f8scs/mflj1n8/5o/ZvE/O3/M4n9O/pjF/9z8MYv/efljFv/z88cs/hfkj1n8L8wfs/hflD9m8b84f8zif0n+mMX/0vwxi/9l+WMW/8vzxyz+V+SPWfyvzB+z+F+VP2bxvzp/zOJ/Tf6Yxf/a/DGL/3X5Yxb/6/PHLP435I9Z/G/MH7P435Q/ZvG/OX/M4n9L/pjF/9b8MYv/bfljFv/b88cs/nfkj1n878wfs/jflT9m8b87f8zif0/+mMX/3vwxi/99+WMW//vzxyz+D+SPWfwfzB+z+D+UP2bxfzh/zOL/SP6Yxf/R/DGL/2P5Yxb/x/PHLP5P5I9Z/J/MH7P4P5U/ZvF/On/M4v9M/pjF/9n8MYv/c/ljFv/n88cs/i/kj1n8X8wfs/i/lD9m8X85f8zi/0r+mMX/1fwxi/9r+WMW/9fzxyz+b+SPSfwnGMgfs/gPyh+z+A/OH7P4j5E/ZvEfkj9m8R8zf8ziP1b+mMV/7Pwxi/84+WMW/3Hzxyz+4+WPWfzHzx+z+E+QP2bxnzB/zOI/Uf6YxX/i/DGL/yT5Yxb/SfPHLP6T5Y9Z/N+TP2bxf2/+mMX/ffljFv/3549Z/D+QP2bxnzx/zOL/wfwxi/+H8scs/h/OH7P4fyR/zOI/Rf6Yxf+j+WMW/ynzxyz+Q/PHLP5T5Y9Z/KfOH7P4T5M/ZvGfNn/M4j9d/pjFf/r8MYv/DPljFv8Z88cs/h/LH7P4fzx/zOL/ifyHtffoEyz+n8wfs/h/Kn/M4j9T/pjFf+b8MYv/LPljFv9Z88cs/rPlj1n8Z88fs/jPkT9m8Z8zf8ziP1f+mMV/7vwxi/88+WMW/3nzxyz+8+WPWfznzx+z+H86f8zi/5n8MYv/Z/PHLP4L5I9Z/BfMH7P4L5Q/ZvFfOH/M4r9I/pjF/3P5Yxb/z+ePWfwXzR+z+C+WP2bx/0L+mMV/8fwxi/8X88cs/kvkj1n8l8wfs/h/KX/M4r9U/pjFf+n8MYv/MvljFv8v549Z/JfNH7P4L5c/ZvFfPn/M4r9C/pjF/yv5Yxb/FfPHLP4r5Y9Z/FfOH7P4r5I/ZvFfNX/M4v/V/DGL/9fyxyz+q+WPWfxXzx+z+K+RP2bxXzN/zOL/9fwxi/9a+WMW/7Xzxyz+6+SPWfzXzR8bzX/Qu9V/vfwxy/6/fv6YxX+D/DGL/zfyxyz+G+aPWfw3yh+z+G+cP2bx3yR/zOK/af6YxX+z/DGL/zfzxyz+m+ePWfy3yB+z+G+ZP2bx/1b+mMX/2/ljFv+t8scs/lvnj1n8t8kfs/hvmz9m8f9O/pjF/7v5Yxb/7+WPWfy/nz9m8d8uf8ziv33+mMV/h/wxi/8P8scs/jvmj1n8f5g/ZvHfKX/M4r9z/pjF/0f5Yxb/XfLHLP675o9Z/HfLH7P4/zh/zOK/e/6Yxf8n+WMW/5/mj1n898gfs/jvmT9m8d8rf8ziv3f+mMV/n/wxi/+++WMW//3yxyz+++ePWfwPyB+z+B+YP2bx/1n+mMX/oPwxi//B+WMW/5/nj1n8f5E/ZvE/JH/M4v/L/DGL/6H5Yxb/w/LHLP6H549Z/H+VP2bx/3X+mMX/iPwxi/9v8scs/kfmj1n8j8ofs/gfnT9m8T8mf8zif2z+mMX/t/ljFv/j8scs/r/LH7P4H58/ZvE/IX/M4v/7/DGL/4n5Yxb/k/LHLP4n549Z/E/JH7P4n5o/ZvH/Q/6Yxf+0/DGL/x/zxyz+p+ePWfz/lD9m8f9z/pjF/4z8MYv/mfljFv+/5I9Z/M/KH7P4/zV/zOJ/dv6Yxf+c/DGL/7n5Yxb/8/LHLP7n549Z/C/IH7P4X5g/ZvG/KH/M4n9x/pjF/5L8MYv/pfljFv/L8scs/pfnj1n8r8gfs/hfmT9m8b8qf8zif3X+mMX/mvwxi/+1+WMW/+vyxyz+1+ePWfxvyB+z+N+YP2bxvyl/zOJ/c/6Yxf+W/DGL/635Yxb/2/LHLP63549Z/O/IH7P435k/ZvG/K3/M4n93/pjF/578MYv/vfljFv/78scs/vfnj1n8H8gfs/g/mD9m8X8of8zi/3D+mMX/kfwxi/+j+WMW/8fyxyz+j+ePWfyfyB+z+D+ZP2bxfyp/zOL/dP6Yxf+Z/DGL/7P5Yxb/5/LHLP7P549Z/F/IH7P4v5g/ZvF/KX/M4v9y/pjF/5X8MYv/q/ljFv/X8scs/q/nj1n838gfk/hPOJA/ZvEflD9m8R+cP2bxHyN/zOI/JH/M4j9m/pjFf6z8MYv/2PljFv9x8scs/uPmj1n8x8sfs/iPnz9m8Z8gf8ziP2H+mMV/ovwxi//E+WMW/0nyxyz+k+aPWfwnyx+z+L8nf8zi/978MYv/+/LHLP7vzx+z+H8gf8ziP3n+mMX/g/ljFv8P5Y9Z/D+cP2bx/0j+mMV/ivwxi/9H88cs/lPmj1n8h+aPWfynyh+z+E+dP2bxnyZ/zOI/bf6YxX+6/DGL//T5Yxb/GfLHLP4z5o9Z/D+WP2bx/3j+mMX/E/ljFv9P5o9Z/D+VP2bxnyl/zOI/c/6YxX+W/DGL/6z5Yxb/2fLHLP6z549Z/OfIH7P4z5k/ZvGfK3/M4j93/pjFf578MYv/vPljFv/58scs/vPnj1n8P50/ZvH/TP6Yxf+z+WMW/wXyxyz+C+aPWfwXyh+z+C+cP2bxXyR/zOL/ufwxi//n88cs/ovmj1n8F8sfs/h/IX/M4r94/pjF/4v5Yxb/JfLHLP5L5o9Z/L+UP2bxXyp/zOK/dP6YxX+Z/DGL/5fzxyz+y+aPWfyXyx+z+C+fP2bxXyF/zOL/lfwxi/+K+WMW/5Xyxyz+K+ePWfxXyR+z+K+aP2bx/2r+mMX/a/ljFv/V8scs/qvnj1n818gfs/ivmT9m8f96/pjFf638MYv/2vljFv918scs/uvmj1n818sfs/ivnz9m8d8gf8zi/438MYv/hvljFv+N8scs/hvnj1n8N8kfs/hvmj9m8d8sf8zi/838MYv/5vljFv8t8scs/lvmj1n8v5U/ZvH/dv6YxX+r/DGL/9b5Yxb/bfLHLP7b5o9Z/L+TP2bx/27+mMX/e/ljFv/v549Z/LfLH7P4b58/ZvHfIX/M4v+D/DGL/475Yxb/H+aPWfx3yh+z+O+cP2bx/1H+mMV/l/wxi/+u+WMW/93yxyz+P84fs/jvnj9m8f9J/pjF/6f5Yxb/PfLHLP575o9Z/PfKH7P4750/ZvHfJ3/M4r9v/pjFf7/8MYv//vljFv8D8scs/gfmj1n8f5Y/ZvE/KH/M4n9w/pjF/+f5Yxb/X+SPWfwPyR+z+P8yf8zif2j+2LvRf9DAwPYDo/kflj/2bvSn/f/w/DGL/6/yxyz+v84fs/gfkT9m8f9N/pjF/8j8MYv/UfljFv+j88cs/sfkj1n8j80fs/j/Nn/M4n9c/pjF/3f5Yxb/4/PHLP4n5I9Z/H+fP2bxPzF/zOJ/Uv6Yxf/k/DGL/yn5Yxb/U/PHLP5/yB+z+J+WP2bx/2P+mMX/9Pwxi/+f8scs/n/OH7P4n5E/ZvE/M3/M4v+X/DGL/1n5Yxb/v+aPWfzPzh+z+J+TP2bxPzd/zOJ/Xv6Yxf/8/DGL/wX5Yxb/C/PHLP4X5Y9Z/C/OH7P4X5I/ZvG/NH/M4n9Z/pjF//L8MYv/FfljFv8r88cs/lflj1n8r84fs/hfkz9m8b82f8zif13+mMX/+vwxi/8N+WMW/xvzxyz+N+WPWfxvzh+z+N+SP/bmmAj8b80fs+z/t+WPWfxvzx+z+N+RP2bxvzN/zOJ/V/6Yxf/u/DGL/z35Yxb/e/PHLP735Y9Z/O/PH7P4P5A/ZvF/MH/M4v9Q/pjF/+H8MYv/I/ljFv9H88cs/o/lj1n8H88fs/g/kT9m8X8yf8zi/1T+mMX/6fwxi/8z+WMW/2fzxyz+z+WPWfyfzx+z+L+QP2bxfzF/zOL/Uv6Yxf/l/DGL/yv5Yxb/V/PHLP6v5Y9Z/F/PH7P4v5E/JvGfaCB/zOI/KH/M4j84f8ziP0b+mMV/iN3/LZ68xX9Mu/9bZPEfK3/M4j92/pjFf5z8MYv/uPljFv/x8scs/uPnj1n8J8gfs/hPmD9m8Z8of8ziP3H+mMV/kvwxi/+k+WMW/8nyxyz+78kfs/i/N3/M4v++/DGL//vzxyz+H8gfs/hPnj9m8f9g/pjF/0P5Yxb/D+ePWfw/kj9m8Z8if8zi/9H8MYv/lPljFv+h+WMW/6nyxyz+U+ePWfynyR+z+E+bP2bxny5/zOI/ff6YxX+G/DGL/4z5Yxb/j+WPWfw/nj9m8f9E/pjF/5P5Yxb/T+WPWfxnyh+z+M+cP2bxnyV/zOI/a/6YxX+2/DGL/+z5Yxb/OfLHLP5z5o9Z/OfKf2Dg4bH+aZLFf+78MYv/PPljFv9588cs/vPlj1n8588fs/h/On/M4v+Z/DGL/2fzxyz+C+SPWfwXzB+z+C+UP2bxXzh/zOK/SP6Yxf9z+WMW/8/nj1n8F80fs/gvlj9m8f9C/pjFf/H8MYv/F/PHLP5L5I9Z/JfMH7P4fyl/zOK/VP6YxX/p/DGL/zL5Yxb/L+ePWfyXzR+z+C+XP2bxXz5/zOK/Qv6Yxf8r+WMW/xXzxyz+K+WPWfxXzh+z+K+SP2bxXzV/zOL/1fwxi//X8scs/qvlj1n8V88fs/ivkT9m8V8zf8zi/3WT/wL/+qwW/7VM/v9GFv+188cs/uvkj1n8180fs/ivlz9m8V8/f8ziv0H+mMX/G/ljFv8N88cs/hvlj1n8N84fs/hvkj9m8d80f8ziv1n+mMX/m/ljFv/N88cs/lvkj1n8t8wfs/h/K3/M4v/t/DGL/1b5Yxb/rfPHLP7b5I9Z/LfNH7P4fyd/zOL/3fwxi//38scs/t/PH7P4b5c/ZvHfPn/M4r9D/pjF/wf5Yxb/HfPHLP4/zB+z+O+UP2bx3zl/zOL/o/wxi/8u+WMW/13zxyz+u+WPWfx/nD9m8d89f8zi/5P8MYv/T/PHLP575I9Z/PfMH7P475U/ZvHfO3/M4r9P/pjFf9/8MYv/fvljFv/988cs/gfkj1n8D8wfs/j/LH/M4n9Q/pjF/+D8MYv/z/PHLP6/yB+z+B+SP2bx/2X+mMX/0Pwxi/9h+WMW/8Pzxyz+v8ofs/j/On/M4n9E/pjF/zf5Yxb/I/PHLP5H5Y+N5n/iu9X/6Pwxy/5/TP6Yxf/Y/DGL/2/zxyz+x+WPWfx/lz9m8T8+f8zif0L+mMX/9/ljFv8T88cs/iflj1n8T84fs/ifkj9m8T81f8zi/4f8MYv/afljFv8/5o9Z/E/PH7P4/yl/zOL/5/yxQYePrfA/I3/Msv+fmT9m8f9L/pjF/6z8MYv/X/PHLP5n549Z/M/JH7P4n5s/ZvE/L3/M4n9+/pjF/4L8MYv/hfljFv+L8scs/hfnj1n8L8kfs/hfmj9m8b8sf8zif3n+mMX/ivwxi/+V+WMW/6vyxyz+V+ePWfyvyR+z+F+bP2bxvy5/zOJ/ff6Yxf+G/DGL/435Yxb/m/LHLP43549Z/G/JH7P435o/ZvG/LX/M4n97/pjF/478MYv/nfljFv+78scs/nfnj1n878kfs/jfmz9m8b8vf8zif3/+mMX/gfwxi/+D+WMW/4fyxyz+D+ePWfwfyR+z+D+aP2bxfyx/zOL/eP6Yxf+J/DGL/5P5Yxb/p/LHLP5P549Z/J/JH7P4P5s/ZvF/Ln/M4v98/pjF/4X8MYv/i/ljFv+X8scs/i/nj1n8X8kfs/i/mj9m8X/tbfwHibcMi//r7f+Yxf+N/DGJ/8QD+WMW/0H5/x927j7c67q+4/iXw+cAooLO1ULDCETRVBBUJPMGLfUIHO3GUhKUFG8mKFMKdKVkN9ZWznKVayvNm9SZWjprruko55wum5XVNptzM+da6bKcuFWy68A5xDm9PZfny3dfr3g/Hn9wzu93ev9Snle9+B2vYyhL/w79Q1n6D9c/lKV/0T+UpX+n/qEs/UfoH8rSf6T+oSz9R+kfytJ/C/1DWfqP1j+Upf+W+oey9N9K/1CW/lvrH8rSf4z+oSz9x+ofytJ/G/1DWfpvq38oS//f0D+Upf92+oey9P9N/UNZ+r9E/1CW/i/VP5Sl/2/pH8rS/2X6h7L0H6d/KEv/7fUPZem/g/6hLP1frn8oS//x+oey9N9R/1CW/q/QP5Sl/wT9Q1n6v1L/UJb+E/UPZek/Sf9Qlv476R/K0n+y/qEs/XfWP5Sl/y76h7L0n6J/KEv/XfUPZem/m/6hLP1fpX8oS//d9Q9l6b+H/qEs/ffUP5Sl/1T9Q1n6T9M/lKX/XvqHsvSfrn8oS/8Z+oey9N9b/1CW/vvoH8rSf1/9Q1n6z9Q/lKX/fvqHsvSfpX8oS/9X6x/K0n9//UNZ+r9G/1CW/gfoH8rS/0D9Q1n6H6R/KEv/g/UPZek/W/9Qlv6H6B/K0v9Q/UNZ+r9W/1CW/q/TP5Sl/2H6h7L0P1z/UJb+R+gfytK/S/9Qlv5H6h/K0n+O/qEs/efqH8rSf57+oSz9u/UPZel/lP6hLP2P1j+Upf/r9Q9l6f8G/UNZ+r9R/1CW/m/SP5Sl/zH6h7L0f7P+oSz936J/KEv/Y/UPZel/nP6hLP3n6x/K0v+t+oey9D9e/1CW/gv0D2Xpv1D/UJb+J+gfytL/RP1DWfov0j+Upf/b9A9l6X+S/qEs/U/WP5Sl/2L9Q1n6n6J/KEv/U/UPZel/mv6hLP1P1z+Upf9v6x/K0v8M/UNZ+i/RP5Sl/1L9Q1n6n6l/KEv/s/QPZem/TP9Qlv6/o38oS/+z9Q9l6X+O/qEs/ZfrH8rS/+36h7L0f4f+oSz9V+gfytJ/pf6hLP3P1T+Upf95+oey9P9d/UNZ+r9T/1CW/u/SP5Sl//n6h7L0v0D/UJb+q/QPZen/bv1DWfpfqH8oS//36B/K0v+9+oey9H+f/qEs/d+vfyhL/4v0D2Xp/wH9Q1n6f1D/UJb+v6d/KEv/39c/lKX/h/QPZen/Yf1DWfpfrH8oS/8/0D+Upf8l+oey9P+I/qEs/T+qfyhL/0v1D2Xp/4f6h7L0/5j+oSz9P65/KEv/T+gfytL/Mv1DWfr/kf6hLP0/qX8oS/8/1j+Upf+f6B/K0v9T+oey9P+0/qEs/S/XP5Sl/xX6h7L0/4z+oSz9r9Q/lKX/VfqHsvS/Wv9Qlv7X6B/K0v+z+oey9L9W/1CW/tfpH8rS/3r9Q1n6/6n+oSz9b9A/lKX/5/QPZel/o/6hLP1v0j+Upf/N+oey9P+8/qEs/b+gfyhL/1v0D2Xpf6v+oSz9/0z/UJb+t+kfytL/i/qHsvT/kv6hLP3/XP9Qlv636x/K0v8v9A9l6f9l/UNZ+v+l/qEs/e/QP5Sl/536h7L0/yv9Q1n6r9Y/lKX/V/QPZen/Vf1DWfrfpX8oS/+/1j+Upf/d+oey9P8b/UNZ+t+jfyhL/7/VP5Sl/736h7L0v0//UJb+f6d/KEv/r+kfytL/fv1DWfp/Xf9Qlv5/r38oS/8H9A9l6f8N/UNZ+n9T/1CW/t/SP5Sl/4P6h7L0/7b+oSz9v6N/KEv/7+ofytL/H/QPZen/j/qHsvT/J/1DWfo/pH8oS//v6R/K0v+f9Q9l6f+w/qEs/f9F/1CW/o/oH8rS/1/1D2Xp/2/6h7L0f1T/UJb+39c/lKX/Y/qHsvT/d/1DWfo/rn8oS///0D+Upf8P9A9l6f+f+oey9P+h/qEs/X+kfyhL/yf0D2Xp/6T+oSz9/0v/UJb+P9Y/lKX/U/qHsvT/if6hLP1/qn9oc+6/deeRy3o/Hfu0/qHNuf/G//v/b/1DWfo/o38oS/81+oey9H9W/1CW/v+jfyhL///VP5Sl/8/0D2Xp/3P9Q1n6/0L/UJb+z+kfytJ/rf6hJP23qfQPZek/TP9Qlv4d+oey9B+ufyhL/6J/KEv/Tv1DWfqP0D+Upf9I/UNZ+o/SP5Sl/xb6h7L0H61/KEv/LfUPZem/lf6hLP231j+Upf8Y/UNZ+o/VP7TZ9QcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAqqqre/YTw4f1e2r4xg/G37943ce91xx72jXXfHHbvo+9X54TvGTHxg/Wrl27tuPp6mu9D0dWVdXz37ZN7+NRA497Xv+C2ZdNWf+oTLjy2d1uWPHsIe+/+cHr1hx+7ZwbOtc921mdeMrpSxZP66iqMqmzWtnzYK9hVVV27qwu6XkwvefBLp3VdT0PZqx7sEW1uufBniedteTkniem1P49A4Bfd13dq6rh/Ra76vengY33/4LZt67q+zjIS/a9Wql69//2W7Z7x4Cv9Xme/e97/fLKgfs/5L9BAOBXDG3/75rQ93GQl/yV9//zzvz4g9HXnn//+16/TLT/ANC84Pv//TZ64Pf9B3z/P/pzwIb7M064dGTP/l+75pjlvU+VF/L9/1++fpk0cP87+n3/f1hVlZ36vv8/sqrK5E387QCAFLq63/3EYO//B9//sv2Am2Eb7/+2N64+pmf/Hx5980t7n+oc4v7vNNj7/8MG/LUCAC9MV/dn1g54/z+E/a92Dl5yw/4fuvLel/Ts/zce/v6Ejb42lP2fPHD/py5fumzqOeeet8fpSxeduvjUxWfOmjlzv31m7jtr+tR13xFY/+sm/qYAwGZu097/V6MH3Ayrqsc23H/ojvH39uz/9E8ecVrvU6OGuP87D/r+f4L3/wDQz8SOasSIauWi5cvP3mv9r30Pp6//df1/LNj/Ifzz/0l9P0TX9zODw6rqZRvuu8/5QEfP/l81afs7ep8aMcT932XQ/T+4/88qAgAvzCa+/z95wE2//R87/PpZPft/5ORdL+p9aqj//H/KoPt/hff/AFBHV3f1//omumf/L9zqF5fXuy67+vk/AGheG/v/5Pj3TKx3XXaz/wDQvDb2f/FBW99W77q8yv4DQPPa2P97ui5dUO+67G7/AaB5bez/3DPG31fvuuxh/wGgeW3s/4TzTlpR77rsaf8BoHlt7P8Nxz7xSL3rMtX+A0Dz2tj/40c9/FS96zLN/gNA89rY/+/udvQp9a7LXvYfAJrXxv5/ef89H6p3XabbfwBoXhv7P23cFXPrXZcZ9h8AmtfG/n/0rAOvrndd9rb/ANC8NvZ/3LzPz6h3Xfax/wDQvDb2/+3Hf/3ietdlX/sPAM1rY/+fO//gcfWuy0z7DwDNa2P/V9+z4/x612U/+w8AzWtj/+c8dsn99a7LLPsPAM1rY/93efrJZfWuy6vtPwA0r439/9x3Tny83nXZ3/4DQPPa2P8xVzw3tt51eY39B4DmtbH/77tw2WX1rssB9h8AmtfG/v/g0jGT612XA+0/ADSvjf1/2xdW3VLvuhxk/wGgeW3s/zcfnTGn3nU52P4DQPPa2P/jvnLH9+pdl9n2HwCa18b+7/PAXYvqXZdD7D8ANK+N/b/zJ/OeqXddDrX/ANC8Nvb/5e/91o71rstr7T8ANK+N/f/EZxd8sN51eZ39B4DmtbH/P/vSpL3rXZfD7D8ANK+N/V/2sRuvqnddDrf/ANC8Nva/e/efPlLvuhxh/wGgeW3s/91j3rWi3nXpsv8A0Lw29v/6Vwy/r951OdL+A0Dz2tj/iQd8eEG96zLH/gNA89rY/1Vztrut3nWZa/8BoHlt7P+Wp39qYr3rMs/+A0Dz2tj/U1c+enm969Jt/wGgeW3s/4/mLx1V77ocZf8BoHlt7P8OoxeOq3ddjrb/ANC8Nvb/kikPXFzvurze/gNA89rY/5/PumlGvevyBvsPAM1rY/9X7DDh6nrX5Y32HwCa18b+f3vpnXPrXZc32X8AaF4b+7/wqGkP1bsux9h/AGheG/s/fWH3KfWuy5vtPwA0r439v/2dq5+qd13eYv8BoHlt7P9Fd3/6lnrX5Vj7DwDNa2P/t3p8m8n1rstx9h8AmtfG/p/4zJmX1bsu8+0/ADSvjf3/4YOPjK13Xd5q/wGgeW3sf9eV5z9e77ocb/8BoHlt7P9XV/14Wb3rssD+A0Dz2tj/mz5y8f31rstC+w8AzWtj/yffWs2vd11OsP8A0Lxzzj3vjEVLliw+2yc+8YlPNnzyYv8/EwAA0LRf/qH/xf4rAQAAAAAAAAAAAAAAAAAAgLza+NeJvdh/jwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP/HDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwAwcCAAAAAIL8rVcYoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+AoAAP//50nVXg==")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000640)={'#! ', './file1'}, 0xb)
r1 = io_uring_setup(0x177f, &(0x7f0000000140))
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
ioctl$KVM_TRANSLATE(0xffffffffffffffff, 0xc018ae85, 0x0)
r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000380)={0x0, <r3=>0x0})
prlimit64(r3, 0x1, &(0x7f00000001c0)={0xff, 0x8}, &(0x7f0000000280))
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
bpf$ENABLE_STATS(0x20, &(0x7f0000000400), 0x4)
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={<r7=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r2, &(0x7f0000000000)={0x15, 0x110, 0xfa08, {r7, 0x0, 0x10, 0x10, 0x0, @in={0x2, 0x0, @empty}, @in={0x2, 0x0, @local}}}, 0x118)
r8 = socket(0x2b, 0x1, 0x1)
io_uring_enter(r1, 0x5e4c, 0x0, 0x0, 0x0, 0x0)
sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x280060, &(0x7f00000001c0)={[{@mpol={'mpol', 0x3d, {'local'}}}]})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)

3.5405267s ago: executing program 0 (id=716):
r0 = socket(0x10, 0x3, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r1=>0x0}, &(0x7f0000cab000)=0xc)
setregid(r1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r2=>0xffffffffffffffff})
getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r3=>0x0}, &(0x7f0000cab000)=0xc)
syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x2b, 0x64, 0x79, 0x10, 0x586, 0x1500, 0x2e97, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xa, 0xbf, 0x40, 0x0, [], [{{0x9, 0x5, 0xb, 0x2}}, {{0x9, 0x5, 0xa, 0x2}}]}}]}}]}}, 0x0)
setresuid(0x0, 0x0, r3)
syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='nobarrier,mode=lfs,fsync_mode=strict\x00acl,\x00'], 0x1, 0x5509, &(0x7f0000000500)="$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")
r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r6=>0x0}, &(0x7f0000cab000)=0xc)
setresuid(0x0, r6, 0x0)
ioctl$FS_IOC_SETFLAGS(r4, 0x4008f50a, 0x0)
sendmmsg$unix(r2, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, r3}}}], 0x20}}], 0x2, 0x0)

3.063568809s ago: executing program 1 (id=717):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x5c}}, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_emit_vhci(0x0, 0x20)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
mkdir(&(0x7f0000000000)='./control\x00', 0x0)
r4 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0)
mkdirat(r4, &(0x7f0000000100)='./control\x00', 0x0)
unlinkat(r4, &(0x7f0000000140)='./control\x00', 0x200)

3.05445531s ago: executing program 3 (id=718):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0x0, 0x4)
add_key(0x0, 0x0, 0x0, 0x0, 0x0)
io_uring_enter(0xffffffffffffffff, 0x47fa, 0x0, 0x0, 0x0, 0x0)
pivot_root(0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
sendmmsg$inet(r0, &(0x7f00000009c0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000a40)="0036d551863e1902129da79f5986e05288f50e5398660c1a29b0f45c0cc36902e0251c8d34197b357b32b161f9ad72d55a0eab976aae24ed805271b43f0ce2fea5e764494873e0d82a172b3bb54f59b458fd35039c7d81e9ab07f2fb4dad61bd500a119b54c74a12e4569e47b69a95f92c6380af2bd003fa56f06a23bbd1c7", 0x7f}, {&(0x7f0000000f00)="316f825a3d29f96a2093a917017b4cd300000000bee70035ed313e19d6dd1fb41a20baf7f73430670040cdd4b16742e94b62f4eb1c5d9daab7f3028100ae8180db94b9de7456ae62b0e6fe7766a0842912179154a96fa88e161d4a9f77a486e10d1d50e44155790748b7226fa4bb5d77e85729336ba6369a4c33ac53b45d46a92db9fda99af4429dc23db6a1706328df4e75eb173a81bd4af8b89d1870c9b2382a759d67b1cd03b076bf90286b63eb7aaea4cbb1280955e9a59cd8e5e8ac68c27da3d542aece1ba7920e8f39b270458224e74afa52db1ac07f7cce47d5e8ce5b2806ff7171c64a689a0ba35e934506a46a10b9a579dc43630831e2c5400853b58e020c9cb6cd44d4957b00ed35a858d44b25d5b8dad1be420467333d9ce17dddc425dad69c4c9395a5c170170a4fa63091786e2a563e3d5982a73c15edf854046e1a33b2728e74c856a58ba74c80f4f4166ac51d720f507c2c205ef5a04370c77928dfde47e15d533060084d4fc271eab837367369218b1bfc59752696396f49c2f58268", 0x184}, {&(0x7f0000000700)="f5e022a4d2ed0cf5f8b2e9857cb9af98da7aa60f7a1582aadeaef336f9139f6768452f868624c7e6ce0948f33f1a63e0fcf0f2df283b3ca3f1f4de26a8b575ccb465985e48f65b9a7fcc93c0a5be8b16774f7c7ca9848a182d6ee7c0f2b9c0e7030ed93ee34214c25cb51279b18c8e5bfbc52152be37f5e2b783e2149be25180430ac63ee1bbe01fbb6125e65839ae5b02d542a97d1bfb1ca420b5405baaaf5ec6ad96af2814dbbea5a064f2ab6fc0904c07f02cbfadfb96866d962e6e21d3a0a0276a36e01b6edafd6c8461de7afec966f9c023ffe15c3c1caec8ff3e", 0xdd}, {&(0x7f0000000440)="fff5c0293353dbff0f83", 0xa}], 0x4}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000540)="077317e9cc23d57c78c114", 0xb}, {&(0x7f0000000680)="a48ddda58f0c3202e4331de15e27c2f6b69ccda5c86d79ec8171a6447231bbf9a1a0", 0x22}, {&(0x7f0000000b80)="a4b7ff2cf6ed0e4aa03d066059d0eb78a2a95f5a35e6e8976126acad55f830963ee8f12a3fce355acb6b6aae79cecc7dc5c06d7e473af2f6184aaa3dac84a6f74153be22e1f6463a0315ef22ce95638dc04077392687", 0x56}, {&(0x7f0000000c40)="53f7eccc18cedbb3bc85845612c7e785dada1a574ecbc851d59d2d7782e8c746a527aced9001deb392063445a2d7b56bbc2077986f2a4c19e729f60bd577be2559c45c7053c5da9acfb9c7e731b2503ca85866107b22f0c9f1522b1625b8c2441bc2240d6bddd44df4d89979c366eed81bfa0ddf6a8ef9670d74c66d1a0c3cfabd5ab707f18dd344b3", 0x89}], 0x4}}], 0x2, 0x0)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4)
sendmsg$inet(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000000)="14fafa37bf25f04bda99eefbf2930f3151214ef6fdee25bdb2d1873ce347c7b623dd3140cfb20100a1bf9f1dc2375e3c49a4e7ffab4ed7181100", 0x3a}, {&(0x7f0000000240)="16a6fca1943502d7ac24a672321690c0215b73b201e67576ef51abd7cb2bcd21ebc41893e255eea9bba2639084f4dec0", 0x30}, {&(0x7f0000000580)="c3e361cabaa484b0c035139c64932a377f926342f6b052b6a3b273c187a5e0c26fe049092a54eb9b6be2ac2df69e6a36fad43d88851aa162b6aa0d4734e36aad318ea99586ca9f6429200684", 0x4c}], 0x3}, 0x0)
sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27)

2.719277737s ago: executing program 2 (id=719):
syz_mount_image$xfs(&(0x7f000000d4c0), &(0x7f0000000000)='./file0\x00', 0x4090, &(0x7f0000000600), 0x1, 0xd58d, &(0x7f0000027f80)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
renameat2(r1, &(0x7f00000000c0)='./file2\x00', r0, &(0x7f0000000100)='./file1\x00', 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000340)='./file2\x00', 0x804020, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_PUBL_GET(r2, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000001c0)={&(0x7f0000000380)={0x1ec, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x7c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}]}, @TIPC_NLA_LINK={0x11c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff0f18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x39}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fff}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff1567}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff93c9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3fc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xf9a}]}]}, 0x1ec}, 0x1, 0x0, 0x0, 0x40001}, 0x20000000)
socket$inet_udp(0x2, 0x2, 0x0)

2.20633847s ago: executing program 1 (id=720):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0xfffffffc}, 0x48)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000680)=ANY=[@ANYRES16=r1], 0x30}}, 0x0)
accept$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @local}, &(0x7f00000001c0)=0x1c)
r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x2000002, 0x4052, r3, 0x0)
mlock2(&(0x7f0000004000/0x4000)=nil, 0x4000, 0x0)
mlock2(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x0)
mlock2(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@mcast1, 0x80000000, 0x0, 0x1, 0x1, 0x0, 0xffff}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0, <r4=>0xffffffffffffffff}, 0x4)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0)
write$binfmt_script(r5, &(0x7f0000000040), 0xfea7)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r5, 0x0)
getxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)=@known='user.incfs.size\x00', 0x0, 0x2)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x1, 0x0, r4, 0x49b, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xf, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000f9ffffff000000000300000018110000", @ANYRESOCT=r6, @ANYRES32=r6], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x37, 0xffffffffffffffff, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x2, 0x1, 0x5, 0x1420, r0, 0xfffffffa, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x1}, 0x48)
syz_mount_image$squashfs(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x0, 0x1a4, &(0x7f0000000680)="$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")
r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
write$binfmt_script(r8, &(0x7f0000000100), 0xfecc)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r8, 0x0)
syz_open_procfs(0x0, 0x0)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000240)={0x50}, 0x50)
socket$key(0xf, 0x3, 0x2)
ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0)

2.166432373s ago: executing program 3 (id=721):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ieee802154(&(0x7f0000001500), r0)
socket$inet6(0xa, 0x3, 0x7)
socket$inet6_udp(0xa, 0x2, 0x0)
prlimit64(0x0, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x9, 0x2a8, &(0x7f0000000500)="$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")
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
setrlimit(0xf, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0))
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(0xffffffffffffffff, &(0x7f0000000e80)=@file={0x0, './file0/file1\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
clock_nanosleep(0xfffffffa, 0xca9a3b, &(0x7f0000000080)={0x77359400}, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0)
ioctl$KVM_SET_CPUID2(r8, 0x4048aecb, &(0x7f0000000600)={0x5, 0x0, [{0x2}, {}, {}, {}, {}]})
r9 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x2, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10)

2.067634501s ago: executing program 1 (id=722):
r0 = getpid()
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmmsg$unix(r1, &(0x7f0000001700)=[{{0x0, 0x3e80, 0x0, 0x0, &(0x7f0000000fc0)=[@cred={{0x1c, 0x1, 0x2, {r0}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x38}}], 0x1, 0x0)

2.067215241s ago: executing program 1 (id=723):
ioctl$EVIOCGMASK(0xffffffffffffffff, 0x80104592, 0x0)
pause()
syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x0)
syz_open_dev$evdev(0x0, 0x0, 0xad7457651c87786a)
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r1, &(0x7f0000000440)=""/156, 0x94)
r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_connect$hid(0x1, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0xdfc, 0x102, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x4, 0x50, 0x9, [{{0x9, 0x4, 0x0, 0x3, 0x1, 0x3, 0x1, 0x2, 0x9, {0x9, 0x21, 0x5, 0x8, 0x1, {0x22, 0x212}}, {{{0x9, 0x5, 0x81, 0x3, 0x410, 0x2, 0x38, 0xc}}, [{{0x9, 0x5, 0x2, 0x3, 0x10, 0x10, 0x6}}]}}}]}}]}}, &(0x7f0000000100)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x201, 0x0, 0x0, 0x8, 0x0, 0x7}, 0xc9, &(0x7f0000000280)={0x5, 0xf, 0xc9, 0x6, [@generic={0x61, 0x10, 0x1, "3468ecfde972ddb55a69664cb8869da18f4c76398ccfd03e0f00c86d73d25646dcd67bfc8b211f0c68233ed84e98196c36d08b3c5919a868250b8c1388c1a7c8b51b908fe3f710ada15e15f38a88062b4ad04ed9ac1ff65df3ea9bfa5fd2"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x6, 0x7, 0x0, 0x1c3a}, @ss_container_id={0x14, 0x10, 0x4, 0x7d, "849a8772af9cb36591aba536b5528772"}, @wireless={0xb, 0x10, 0x1, 0x4, 0x40, 0x0, 0x2b, 0x2, 0xa}, @generic={0x30, 0x10, 0xb, "7c31b1d4088d16c3a009627887f8a1a78936984b6838495708f26885ca11e1aa7aa600476d566622194293443a"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x3, 0x3, 0xd, 0x8}]}, 0x2, [{0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x440a}}, {0xa6, &(0x7f0000000380)=@string={0xa6, 0x3, "4e034ad395bd344239de92c84a7ab006d47b2dbd8879492ca6125e4828dcf7a920f75ae489385903a6c002796211ba1ef4be9c0a80baf97c6fa98599de724d5b6a967d140b77939883d81c5b1d6a4a3f6975ea4031f0b6ed2fea2116854c0672b7f113be2d0ab8d1692575e9993cd5d21b0c6034b99f6ecc83827bea59666d984d7983c4de3112ca136aed0775c617d46b079ee56e9db17f9b7000ac1e79613bcb9cb34d"}}]})
syz_usb_connect$hid(0x6, 0x3f, &(0x7f00000001c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x10, 0xc16, 0x2, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x1, 0x28, 0x0, [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x3, 0x1, 0x1, 0x6, {0x9, 0x21, 0x2, 0x5, 0x1, {0x22, 0x214}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0xae}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x6, 0x8, 0x8}}]}}}]}}]}}, &(0x7f0000000980)={0xa, &(0x7f0000000500)={0xa, 0x6, 0x110, 0x5, 0x4, 0x3, 0x40, 0x9}, 0x27, &(0x7f0000000540)={0x5, 0xf, 0x27, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x3, "bbad53df66aedadcfc9fd1b6cc5f9a1f"}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x4, 0xd, 0x15}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x4, 0x6, 0x771d}]}, 0xa, [{0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x455}}, {0x4, &(0x7f00000005c0)=@lang_id={0x4, 0x3, 0x40e}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x410}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x300a}}, {0x4, &(0x7f0000000680)=@lang_id={0x4, 0x3, 0x44f}}, {0xbf, &(0x7f00000006c0)=@string={0xbf, 0x3, "8c7272f4e0cbc4387d6279bf4dbbc60fb628d24e52c6046a373c75812f583c3a1be9ce9fca6d8d47a74fc6586627250534c35a3e29536403f104dc60226261c136d522159715c51377eaa011285d21dd3a18548dac77b32abbe2a6dbfc30c49b61e9c6eb21f1b72bf8233b8c6d980d4b7a5fadd1a20b468b241f4217ab0c5acfe751171747f8f9cc1e92d318fcbf15c26f7e9121e44e2b03b6c182c87228f91207af61e4788f22a262ac2fe2b8aee4894a8986a634c086d82bba73209d"}}, {0x13, &(0x7f0000000780)=@string={0x13, 0x3, "9b28a41cc7ea3021c0971f7d67313c1161"}}, {0x68, &(0x7f00000007c0)=@string={0x68, 0x3, "6e9651d687c82f2729aa01ddd5d2734048898804978d3c5513b8ef41d865c960b382d9ecf5f68dcab4577916bb24069d53098c27762a8b6255d6ee24c0eb78a5aaf64a4876e4ad55308d278a94d9ec3735a11bb7d8e582dc76b59c57b46b521835d9cf6e59ec"}}, {0x4, &(0x7f0000000840)=@lang_id={0x4, 0x3, 0x457}}, {0xd0, &(0x7f0000000880)=@string={0xd0, 0x3, "b115578738c8ab0444f4bef6a3ac693f482078f084d2ca2c92de955d01f9280568c74a26491e586df6b191bb86a34159a24ad4339a7f659e8b99ff22ba0d161bc49cef62629cfe0814c5fe4028e0a0c697d0d90ab73338993270f87eb1c2d08bb7011b410cf3a1ab630e3cd8ab63fc35816d034aaadfe435591760c3c0f2c34d363a7ab29ec24f498c10f09acb6f76cc1e1e2271b7de9615793a9c7f2ffb6b90bad8eddf3bb6e677c87fd2376b29a76c9c59c812585efd48eaa8f31e9e1cb5626932694e398614389344318b5f95"}}]})
syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000a40)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x0, 0x46d, 0x4011, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x8, 0x10, 0x61, [{{0x9, 0x4, 0x0, 0x76, 0x1, 0x3, 0x1, 0x2, 0x6, {0x9, 0x21, 0x7831, 0x2, 0x1, {0x22, 0xb75}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x4, 0x5}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x9, 0x1, 0xde}}]}}}]}}]}}, &(0x7f0000000e00)={0xa, &(0x7f0000000a80)={0xa, 0x6, 0x201, 0x9, 0x1, 0x4a, 0x8, 0x4}, 0x1d, &(0x7f0000000ac0)={0x5, 0xf, 0x1d, 0x1, [@ssp_cap={0x18, 0x10, 0xa, 0x8, 0x3, 0xff, 0xf00f, 0x9, [0xf0, 0xc000, 0x30]}]}, 0x7, [{0xf0, &(0x7f0000000b00)=@string={0xf0, 0x3, "970eadce5686d4390f9151a04c0f6c88a6b588b076d6b7a34d143c59971305bb10f8c3256b42a56b375c98c05ad4a1fc4bb4a5f1540f32dffbcce6524ef175b680c81f52093d8325aceeb65f814d2a275fce242ff57887e4bfb8607de78fc0f68fbf6361fabce87fd74fc6bceac7045527cc9f81cd7ec0d6049bcc9774f5ee744f6dac0afc44d8108a09051c4055e68402b9f6c8e0f02638c0e100a5ebd5d71743c74bcd87ad596b8424c137f2be8321a39c1f2152a94f409ff4f5e97d690cc622bb5bdde0dd98bbd8fe9ba203ae8b1dadb332e4948524a491896754267070c38d37b36f699388b062f4fce611a3"}}, {0x4, &(0x7f0000000c00)=@lang_id={0x4, 0x3, 0x3801}}, {0x4, &(0x7f0000000c40)=@lang_id={0x4, 0x3, 0x429}}, {0x4, &(0x7f0000000c80)=@lang_id={0x4, 0x3, 0x430}}, {0x4, &(0x7f0000000cc0)=@lang_id={0x4, 0x3, 0x804}}, {0x4, &(0x7f0000000d00)=@lang_id={0x4, 0x3, 0x44b}}, {0xbc, &(0x7f0000000d40)=@string={0xbc, 0x3, "52e9ebce79d676c3222d0221e9b09e95f9157bc553a465d840ea0c9c4dc36ecfa649ec9c58599efac06a03695eb903d829c757a806c0f2a3a796c7f60641953ede8285794c33e6fac28d72b5ad8877f53bf06e37df3286e543c1342459e6b8ee473fa3f9069f6811e9b7f0217e0ffb913ccad65934370e02824174e00510b7fae990090d9dfc56ec4eab0f11a5d06af1fe18517d431c378ed70f29e4dbf28b789a68e506444504f12d21f8776384f65328591d77ff5d990836fb"}}]})
syz_usb_control_io$hid(r0, 0x0, 0x0)
read$char_usb(r2, &(0x7f0000000200)=""/128, 0x80)
syz_usb_disconnect(r0)
ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0xc0189436, 0x0)
syz_open_dev$evdev(0x0, 0x0, 0x0)
syz_usb_ep_write(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_usb_connect(0x0, 0x41, 0x0, 0x0)
r3 = syz_usb_connect(0x2, 0x24, &(0x7f0000000140)=ANY=[@ANYRESOCT], 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io(r3, 0x0, 0x0)
syz_open_dev$evdev(0x0, 0x0, 0x0)
ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000000e80)=""/4096)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$uac1(r3, 0x0, 0x0)

1.571853512s ago: executing program 3 (id=724):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1, 0x8, 0x2, 0x4}, 0x48)
close(r0)
bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200000019", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2}, 0xc)

1.489231188s ago: executing program 3 (id=725):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x0, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_mount_image$erofs(&(0x7f0000000100), &(0x7f0000000080)='./bus\x00', 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0x3, 0x1bf, &(0x7f0000000680)="$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")
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vcan0\x00'})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x40305839, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001f85236ccc4ce75fa61b6d6978d0", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0)
ioctl$SNAPSHOT_FREE_SWAP_PAGES(0xffffffffffffffff, 0x3309)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000107d332e2c0000000000010902df7301000000000904000001030000000921000000010451425fa9fad45bbfa3dcb9"], 0x0)
r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f00000000c0))
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000180))
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0xff)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0x9)
ioctl$TIOCSTI(r1, 0x5412, 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='xen_mmu_pmd_clear\x00'}, 0x10)
sendto$inet(r2, 0x0, 0x0, 0x2400c806, &(0x7f0000000080)={0x2, 0x4e20, @multicast2}, 0x10)
write$binfmt_elf64(r2, &(0x7f00000012c0)=ANY=[], 0x678)

1.474981979s ago: executing program 4 (id=726):
get_robust_list(0x0, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff)
connect$caif(0xffffffffffffffff, &(0x7f0000000080)=@rfm={0x25, 0x0, "423e650059ef6c664b6dff801d261cd8"}, 0x18)
r3 = mq_open(0x0, 0x40, 0x0, 0x0)
mq_notify(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, @thr={0x0, 0x0}})
mq_notify(r3, &(0x7f0000000000))

1.247493678s ago: executing program 2 (id=727):
get_robust_list(0x0, 0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = mq_open(&(0x7f0000000680)='\r\x00elinu\xef\xe3elinux\x00\x96\xf6\x03\n#*\xac\x05\xce\xf8D\\\x9a\xe6[]L+\x15\n\xb8F!Q9o\x1f#\xbdt\r\xfb\"\x18%\xfdM\xaf_t\xd2\xdcJ\x10\a1\xf0\xe4\xe3R\x95\xee\xe4\xbab\x1a\xdf\xb1\xbdU\xd7Lo\xe7\xac\x81\x10k\xce-\xf5@\xbb\x9d;\xe8\xf6\xffQ\x04\xaai\x92k\x1b;\xddM\xa2\xe1-\x0e\xd8\xde\x00\xff\x18\xdd\bL\xfb\xaa.\xb6{\xb5\x85#\x88\xdc\xf0\xfd\x04\xf1\xc4 \xdeV\x80q\xf7\x04\xf5\x85T\x1f\xc2S]*\xc9lw\xd3J\xc5\xe8\x02\xcb\xbbAHxr\xac\xb77F\xdf\x1c\xcb\xd4\xce\x88L\xf1\xf9[\x98\xd4+pTx\x95\xb5\x1b]x\x1a\x95\xe1\x856\xe7`83\xb7n#\xe0\xc1_\xec\xba\xdezthU\xe3\a\x8b\xc5\x86woo\xbcnq-\x90/\xed\xff\xad+\x03\x10\t\xda\xfd\xa2\xd0\xef4\n%\xf1\xd8u\xedt\xc1-\x16\x86\x85\xb4\x96\x02\x1bI<\x1e\xbd\x1c\xd0\x19\x96h\xc3\x14\xfb\xf7\x10\xee\x91\x9e\x01G\xbfF\n\x04So\xe5Z\xe1\xdf\"\x9ay QR\x9d\xd2Se\xcb\x9e]\x98~\x8aY\r\x0e\xae[\xbcD\x16v\x11C\x06\x94\x8e#?\x12\xac4\xb7\x00\x00\x00\x00\x00\x00\x1c_\x8a\x9d\xa1L\xed??2P\x8b\xdf~a', 0x40, 0x0, 0x0)
mq_notify(r3, &(0x7f00000002c0)={0x0, 0x0, 0x0, @thr={0x0, 0x0}})
mq_notify(r3, 0x0)

535.289547ms ago: executing program 4 (id=728):
openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080))
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001fc0)=@newtaction={0xd44, 0x30, 0x12f, 0x0, 0x0, {0x0, 0x0, 0x1be}, [{0xd30, 0x1, [@m_police={0xd2c, 0x1, 0x0, 0x0, {{0xb}, {0xd00, 0x2, 0x0, 0x1, [[@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0xfff}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}, @TCA_POLICE_PEAKRATE64={0xc}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x5, 0x6, 0x6, 0x1, 0x3fe, 0xcf, 0xfffffff7, 0x1ba7af3c, 0x7, 0x97, 0x1, 0x4, 0x4, 0x1, 0x400, 0x0, 0x6, 0x400, 0xfffffffa, 0x2, 0x1, 0x9, 0x2, 0x1, 0x0, 0x0, 0x5, 0x9, 0xb, 0x0, 0x6, 0x10001, 0x7, 0x5, 0x3ff, 0x8, 0x5, 0x8001, 0x5, 0x756, 0x2, 0x8, 0xa4c, 0x1, 0x8000, 0x0, 0x7, 0xfffffbaf, 0x8001, 0x691, 0x3, 0x0, 0xf3, 0x7, 0x7f, 0x80000000, 0x9, 0xa, 0x1, 0x80, 0x6, 0x2, 0x1, 0x8001, 0x54dcef59, 0x9730, 0x8, 0x2, 0xb469, 0x10, 0x4, 0x1, 0x7, 0x1, 0x1, 0x9, 0x4210fe8d, 0x3, 0x3, 0x5b6, 0x5, 0xfffffffa, 0xa000, 0x3, 0x4, 0xf0c, 0x1ff, 0x4, 0x9, 0x0, 0x8000, 0x7ff, 0xf, 0xd, 0x9, 0x4, 0x1ff, 0x5, 0x7, 0x6, 0xc, 0x9, 0x2, 0x4, 0x5, 0x50, 0x5, 0x3, 0x7, 0x200, 0x2, 0x1e9c, 0x7, 0x4, 0x401, 0x1, 0x0, 0x3, 0x0, 0x2, 0x7, 0x8, 0x30, 0xffff0001, 0x6, 0x26f0, 0x1, 0x0, 0xd, 0x4, 0x5, 0x3, 0x4, 0x1a, 0x7fffffff, 0x5, 0x1, 0x9, 0x3, 0x0, 0x800, 0x0, 0x0, 0x8, 0x8, 0x10000, 0x0, 0x7, 0x74, 0x8, 0x9, 0x9, 0x18000000, 0xfffffff7, 0x3ff, 0x8, 0x800, 0xe, 0xb, 0x3, 0x4, 0xcbde, 0xd71, 0x81, 0x5, 0xe6e, 0x3, 0x3941, 0x61e1, 0x3ff, 0x286, 0x6, 0x80000, 0x1, 0xfffffffa, 0x3, 0x5, 0x9, 0x400000, 0x2, 0x43, 0x8, 0x3, 0x2, 0x7, 0x5, 0x2, 0xeefa, 0x4, 0x6, 0x1, 0x5, 0x0, 0x8, 0xd, 0xaeef, 0xc, 0x10000, 0xffff, 0x2a, 0xe, 0x1, 0x952e, 0x7, 0xf02, 0x22, 0x0, 0x2, 0x7, 0x3, 0x1, 0xd, 0x6, 0x2, 0x2, 0x4, 0x2, 0x0, 0x1, 0x3b, 0x7, 0x97d, 0x12, 0x6, 0x3ff, 0x31, 0x400, 0x4, 0x40000000, 0xfffff801, 0x80, 0x10, 0x2, 0x8, 0x7, 0x10001, 0x3, 0x10001, 0x8001, 0x3, 0x5, 0x7, 0x3, 0x29, 0x9, 0x6, 0xffff7fff, 0x478bd48b, 0x7, 0x8, 0x7, 0x4, 0x8516, 0xfffffff8, 0x6, 0x393d]}], [@TCA_POLICE_RESULT={0x8, 0x5, 0x4}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x5, 0x23d2, 0xff, 0x1000, {0x5, 0x2, 0x3, 0x7, 0x3, 0x5}, {0x1, 0x1, 0xe5, 0x7, 0x4984, 0xf5}, 0x18, 0x7, 0x5}}, @TCA_POLICE_TBF={0x3c, 0x1, {0x3f, 0x3, 0x12, 0x1f, 0x2, {0x0, 0x0, 0x2, 0x322, 0x800, 0x10001}, {0x4, 0x2, 0x0, 0x9}, 0x4, 0x5af7, 0x6b79}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x100}], [@TCA_POLICE_AVRATE={0x8, 0x4, 0x81}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x200, 0xa4, 0xb172, 0x7, 0x2, 0x0, 0x9, 0x90, 0x400, 0x9, 0x200, 0x8, 0x1000, 0xffffff81, 0xffffff01, 0x3, 0x8, 0x314c, 0x6, 0x8, 0x6, 0x2, 0x6, 0x1, 0x101, 0x401, 0xb49f, 0x9, 0x0, 0x1, 0x4, 0x7, 0x3, 0x200, 0x3, 0x4, 0x1000, 0x2, 0x80000000, 0x0, 0x7, 0x3, 0x80, 0x600000, 0x1ff, 0x2818, 0xd7, 0x9, 0x1, 0xf0f8, 0x2, 0x2, 0x1, 0x7fff, 0x1, 0x9, 0x7, 0x7, 0x1, 0x401, 0x80, 0x7fffffff, 0x8, 0x3, 0x7fff, 0x7, 0xfffffe00, 0x20, 0x5, 0x3, 0x1000, 0x1, 0x10001, 0xffffffb5, 0xb9c5, 0x5, 0x5, 0x0, 0x1ff, 0x3, 0x40, 0x81, 0x40, 0x2, 0x1, 0x1, 0x4, 0xffff, 0x3, 0x0, 0x8, 0x8000, 0x8, 0x7f, 0x41, 0x101, 0x6, 0x5, 0x85, 0x6a8b7fc8, 0x3, 0x7, 0x8, 0x7f, 0x1, 0x2, 0x1fd4c367, 0x7, 0xe2, 0x4, 0x7, 0x3ff, 0x1, 0xfffff001, 0x7fff, 0x3f, 0x3, 0x1, 0xfff, 0x0, 0x4, 0x0, 0x400, 0x2, 0x5bc5434c, 0x1, 0xfffffff8, 0x0, 0x200, 0x9, 0x400, 0x8, 0x1, 0x8, 0x0, 0x10001, 0x5, 0x7, 0x5, 0x1, 0x6814ae0, 0x3, 0x101, 0x7, 0x2, 0xb745, 0x6, 0x6bd5, 0x800, 0x9, 0x2, 0x1, 0x7, 0x1ff, 0xb5, 0x4, 0xffffff80, 0x0, 0xfff, 0x0, 0x20, 0x98000000, 0x1, 0x8000004, 0x7, 0xa8000000, 0x4, 0x0, 0x0, 0x87, 0x6, 0x1000, 0x9, 0x6, 0x3f, 0x1, 0x3, 0x7, 0x5efd, 0x5, 0x8, 0x2, 0x800, 0x9, 0xa79a, 0x100, 0x5, 0x7c6e, 0x8, 0x7ffd, 0x6, 0x5, 0x9, 0x9, 0x5, 0x1, 0x3, 0x80000, 0x56f, 0x80, 0x337d, 0x9, 0x9, 0x9, 0x0, 0x1ff, 0x200, 0x7, 0x5, 0x6, 0xa5, 0x1, 0x1, 0x2, 0x80000001, 0x5, 0x10000, 0xbd4, 0x120, 0x9, 0x32ad, 0x7dec, 0xffffffff, 0x1, 0x2, 0x7, 0x1f, 0x80, 0x5, 0x7ff, 0x5, 0x10001, 0x3, 0x48f, 0x2, 0xb54b, 0x3, 0x0, 0x3f00, 0x7ff, 0x2, 0xedb, 0x7, 0x8, 0x1, 0x5, 0x3, 0x7ff, 0xff, 0x0, 0x9, 0x8, 0x10000, 0x14, 0xffff8001]}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x7, 0x7ff, 0x1, 0x1, 0x40, 0x1, 0x0, 0x7, 0xfffffff8, 0x40, 0x3, 0xe998, 0x3f, 0x9, 0x6, 0xa39e, 0x4, 0xc1e1, 0xe2be, 0x3, 0xbd23, 0x51c88a98, 0x8001, 0x9, 0xffff, 0x45f, 0xffff, 0xffff0000, 0x2, 0x80000001, 0x423, 0x6, 0x4, 0x9, 0x200, 0x3, 0x480000, 0x2, 0x4, 0x2, 0x8, 0x1, 0x3f, 0x1, 0x5, 0x32, 0xa0, 0x1, 0x101, 0x2, 0x7b85, 0x8001, 0x5, 0x2, 0x0, 0x2, 0xfffffffc, 0xfffffffe, 0x1, 0xfffff5f3, 0x7, 0x101, 0x6, 0x1000, 0x2, 0x8, 0x1ffc00, 0x1, 0x10001, 0x0, 0x5, 0xfffffff7, 0x6, 0xfffffff8, 0x7, 0xfffffff7, 0x3, 0x8, 0x10000, 0x6, 0x0, 0x5, 0x4, 0x1ff, 0x1000, 0xec39, 0x1ff, 0x7f, 0x0, 0x100, 0x8, 0x0, 0x1f, 0x4, 0x0, 0x2, 0x2, 0x0, 0x0, 0x5d, 0x5, 0x0, 0x18d6, 0x116, 0x80000000, 0xfff, 0xfc5, 0x6, 0x0, 0x84a8, 0x4, 0x0, 0x7, 0x6, 0x0, 0x0, 0x6, 0x7, 0x7, 0x80, 0x5, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffc, 0x0, 0x0, 0x8, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2522, 0x800, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8000, 0x0, 0x3ff, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, 0x401, 0x2, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x2, 0x0, 0x0, 0x0, 0x0, {0x1, 0x0, 0x0, 0x0, 0x0, 0x8}}}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x0, 0x1}}}}]}]}, 0xd44}, 0x1, 0x0, 0x0, 0x4048080}, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0)
ioctl$SNDCTL_SEQ_THRESHOLD(0xffffffffffffffff, 0xc004510e, 0xfffffffffffffffe)
r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0xa8000, 0x0)
process_vm_readv(0x0, &(0x7f00000001c0)=[{0x0}], 0x1, &(0x7f0000000440)=[{&(0x7f0000000340)=""/231, 0xe7}], 0x1, 0x0)
ioctl$FBIOBLANK(r5, 0x4611, 0x0)
r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000880)=ANY=[@ANYBLOB="b2a3e5ad7b263bfff903aa38b452243859a3", @ANYRES16=0x0, @ANYBLOB="20002cbd7000fedbdf25150000000c00018008000100", @ANYRES32=0x0, @ANYBLOB="7400018008000100", @ANYRES32=0x0, @ANYBLOB="1400020067656e657665310000000000000000000800030007000000140002006272696467655f736c6176655f30000014000200697036746e6c30000000000000000000080003000000000014000200697036677265746170300000000000000800030002000000"], 0x94}, 0x1, 0x0, 0x0, 0x2202c880}, 0x81)
r7 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r7, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24)
sendmmsg(r7, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYRESHEX=r4], 0x18}}], 0x1, 0x4)
recvfrom$phonet(r7, 0x0, 0x0, 0x68cee585ffff0000, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b708000000000000fe7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001823007c0be68f89f49c6978d874dfa37082b01c5615a199e2dc66573ceeaa2f73b0de99ad7a4c9793de695e70ba89d61eba6ca3d77c75c8ab3f6f6723c07d02af1e53a712a4c4f3ac6206c3b7a227e303841c3e3717bd5da2d4a5429d21f33bc0058cc70a66f4580d9dc49f00560c53812426463348acdbac8d391e7d90f16eaaf98f9beb18", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000690000009500000000000000"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0)

496.01144ms ago: executing program 0 (id=729):
getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000040)=@assoc_value, &(0x7f0000000080)=0x8)
socket$inet_smc(0x2b, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
io_uring_setup(0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x24}, 0x1, 0x5502000000000000}, 0x0)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x81)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60)
r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="fe", 0x1, 0xfffffffffffffffd)
pipe2$watch_queue(&(0x7f0000000180)={<r3=>0xffffffffffffffff}, 0x80)
keyctl$KEYCTL_WATCH_KEY(0x20, r2, r3, 0x0)
keyctl$setperm(0x5, r2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x1c, &(0x7f00000004c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0x8}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="2800000076000d0b000000000000000003009bc73470000008000a0000000000080001000100000024c69b4325d4ad366c6627b96e65258d64244720ee78f36bb231a522d3f186998ed61b4ac40d3124a58cd07cc1434c16701428dfc796934a75d5e4"], 0x28}}, 0x0)
dup(r4)
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2, &(0x7f0000000000)={[{@noblock_validity}, {@dioread_nolock}, {@errors_remount}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x2c}, 0x84, 0x451, &(0x7f0000000480)="$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")
quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000080)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000100)='./file0/file0\x00')
sched_setaffinity(0x0, 0x8, &(0x7f0000000040))
r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/fscaps', 0x0, 0x0)
lseek(r6, 0x1, 0x0)
ioctl$SNDCTL_TMR_TIMEBASE(0xffffffffffffffff, 0xc0045401, &(0x7f0000000340))
syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c200000008060001080006"], 0x0)
socket$packet(0x11, 0x3, 0x300)

0s ago: executing program 1 (id=730):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x5c}}, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_emit_vhci(0x0, 0x20)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
chdir(&(0x7f0000000240)='./file0\x00')
mkdir(&(0x7f0000000000)='./control\x00', 0x0)
r4 = open(&(0x7f0000022ff6)='./control\x00', 0x0, 0x0)
mkdirat(r4, &(0x7f0000000100)='./control\x00', 0x0)
unlinkat(r4, &(0x7f0000000140)='./control\x00', 0x200)

kernel console output (not intermixed with test programs):

 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  134.481462][ T4919] RSP: 002b:00007f4f01949048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  134.489894][ T4919] RAX: ffffffffffffffda RBX: 00007f4f03658f80 RCX: 00007f4f034ca9f9
[  134.498296][ T4919] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000003
[  134.507225][ T4919] RBP: 00007f4f019490a0 R08: 0000000000000000 R09: 0000000000000000
[  134.515207][ T4919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  134.523177][ T4919] R13: 000000000000000b R14: 00007f4f03658f80 R15: 00007fff86f6e008
[  134.531163][ T4919]  </TASK>
[  134.752690][ T3574] usb 4-1: USB disconnect, device number 6
[  135.021064][   T26] kauditd_printk_skb: 75 callbacks suppressed
[  135.021079][   T26] audit: type=1326 audit(1722716010.002:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4934 comm="syz.4.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f034ca9f9 code=0x7ffc0000
[  135.077132][ T4939] loop2: detected capacity change from 0 to 16
[  135.204958][   T26] audit: type=1326 audit(1722716010.002:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4934 comm="syz.4.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f034ca9f9 code=0x7ffc0000
[  135.219403][ T4939] erofs: (device loop2): erofs_read_superblock: blkszbits 9 isn't supported on this platform
[  135.228117][   T26] audit: type=1326 audit(1722716010.042:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4934 comm="syz.4.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f4f034ca9f9 code=0x7ffc0000
[  135.844536][   T26] audit: type=1326 audit(1722716010.042:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4934 comm="syz.4.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f034ca9f9 code=0x7ffc0000
[  135.968346][   T26] audit: type=1326 audit(1722716010.042:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4934 comm="syz.4.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f034ca9f9 code=0x7ffc0000
[  135.996382][   T26] audit: type=1326 audit(1722716010.052:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4934 comm="syz.4.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4f034ca9f9 code=0x7ffc0000
[  136.026825][   T26] audit: type=1326 audit(1722716010.052:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4934 comm="syz.4.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f034ca9f9 code=0x7ffc0000
[  136.067009][   T26] audit: type=1326 audit(1722716010.052:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4934 comm="syz.4.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4f034ca9f9 code=0x7ffc0000
[  136.152286][ T3611] cdc_ncm 1-1:1.0: bind() failure
[  136.154458][   T26] audit: type=1326 audit(1722716010.052:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4934 comm="syz.4.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f4f034ca9f9 code=0x7ffc0000
[  136.179693][    C1] vkms_vblank_simulate: vblank timer overrun
[  136.182175][ T3611] cdc_ncm: probe of 1-1:1.1 failed with error -71
[  136.272533][ T3611] cdc_mbim: probe of 1-1:1.1 failed with error -71
[  136.365622][ T3611] usbtest: probe of 1-1:1.1 failed with error -71
[  136.459838][ T3611] usb 1-1: USB disconnect, device number 8
[  136.759592][   T26] audit: type=1326 audit(1722716010.052:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4934 comm="syz.4.332" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f4f034caa33 code=0x7ffc0000
[  136.781599][    C1] vkms_vblank_simulate: vblank timer overrun
[  136.816448][ T3574] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  136.906776][ T4936] loop1: detected capacity change from 0 to 32768
[  137.074579][ T3574] usb 3-1: Using ep0 maxpacket: 16
[  137.080871][ T4954] find_entry called with index = 0
[  137.100846][ T4954] read_mapping_page failed!
[  137.284813][ T4954] ERROR: (device loop1): txCommit: 
[  137.284813][ T4954] 
[  137.342978][ T3574] usb 3-1: config index 0 descriptor too short (expected 29663, got 36)
[  137.364379][ T3574] usb 3-1: config 0 has an invalid descriptor of length 95, skipping remainder of the config
[  137.400111][ T4954] ERROR: (device loop1): remounting filesystem as read-only
[  137.416812][ T3574] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  137.438501][ T3574] usb 3-1: New USB device found, idVendor=337d, idProduct=2c2e, bcdDevice= 0.00
[  137.466323][ T3574] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  137.505255][ T3574] usb 3-1: config 0 descriptor??
[  137.550525][ T3574] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[  137.810877][ T3614] usb 3-1: USB disconnect, device number 11
[  137.891182][ T4967] netlink: 40 bytes leftover after parsing attributes in process `syz.4.340'.
[  139.298680][    T7] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  140.564180][   T26] kauditd_printk_skb: 28 callbacks suppressed
[  140.564195][   T26] audit: type=1326 audit(1722716015.542:633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5004 comm="syz.0.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87070db9f9 code=0x7ffc0000
[  140.598742][   T26] audit: type=1326 audit(1722716015.552:634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5004 comm="syz.0.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f87070db9f9 code=0x7ffc0000
[  140.625767][   T26] audit: type=1326 audit(1722716015.552:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5004 comm="syz.0.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87070db9f9 code=0x7ffc0000
[  140.648324][    C1] vkms_vblank_simulate: vblank timer overrun
[  140.654752][   T26] audit: type=1326 audit(1722716015.552:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5004 comm="syz.0.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f87070db9f9 code=0x7ffc0000
[  140.677133][    C1] vkms_vblank_simulate: vblank timer overrun
[  140.704824][   T26] audit: type=1326 audit(1722716015.552:637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5004 comm="syz.0.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87070db9f9 code=0x7ffc0000
[  140.727117][    C1] vkms_vblank_simulate: vblank timer overrun
[  140.769555][   T26] audit: type=1326 audit(1722716015.552:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5004 comm="syz.0.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f87070db9f9 code=0x7ffc0000
[  140.792700][   T26] audit: type=1326 audit(1722716015.552:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5004 comm="syz.0.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f87070dba33 code=0x7ffc0000
[  140.814680][    C1] vkms_vblank_simulate: vblank timer overrun
[  140.822230][    T7] usb 5-1: Using ep0 maxpacket: 32
[  140.869838][ T5018] loop2: detected capacity change from 0 to 16
[  141.010977][ T5018] erofs: (device loop2): erofs_read_superblock: blkszbits 9 isn't supported on this platform
[  141.206921][   T26] audit: type=1326 audit(1722716016.192:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5004 comm="syz.0.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f87070da4df code=0x7ffc0000
[  141.262243][    T7] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  141.442948][ T5005] loop0: detected capacity change from 0 to 40427
[  141.465137][   T26] audit: type=1326 audit(1722716016.422:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5004 comm="syz.0.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f87070dba87 code=0x7ffc0000
[  141.502374][   T26] audit: type=1326 audit(1722716016.432:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5004 comm="syz.0.350" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f87070da390 code=0x7ffc0000
[  141.521357][ T5005] F2FS-fs (loop0): invalid crc value
[  141.562242][    T7] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  141.581690][    T7] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  141.591416][ T4365] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  141.609954][    T7] usb 5-1: Product: syz
[  141.624941][    T7] usb 5-1: Manufacturer: syz
[  141.706875][    T7] usb 5-1: config 0 descriptor??
[  141.779772][ T5005] F2FS-fs (loop0): Found nat_bits in checkpoint
[  141.922846][    T7] usb 5-1: can't set config #0, error -71
[  142.230636][ T5005] F2FS-fs (loop0): Cannot turn on quotas: -2 on 0
[  142.267468][ T5005] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  142.308639][    T7] usb 5-1: USB disconnect, device number 9
[  142.352080][ T4365] usb 3-1: Using ep0 maxpacket: 16
[  142.424055][ T5032] loop3: detected capacity change from 0 to 32768
[  142.477502][ T5032] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.358 (5032)
[  142.483386][ T3569] attempt to access beyond end of device
[  142.483386][ T3569] loop0: rw=2049, want=45104, limit=40427
[  142.507599][ T4365] usb 3-1: config index 0 descriptor too short (expected 29663, got 36)
[  142.519685][ T5049] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[  142.538220][ T4365] usb 3-1: config 0 has an invalid descriptor of length 95, skipping remainder of the config
[  142.586404][ T4365] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  142.607560][ T4365] usb 3-1: New USB device found, idVendor=337d, idProduct=2c2e, bcdDevice= 0.00
[  142.617879][ T4365] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  142.636027][ T4365] usb 3-1: config 0 descriptor??
[  142.644434][ T5032] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  142.678921][ T5032] BTRFS info (device loop3): using free space tree
[  142.687472][ T5032] BTRFS info (device loop3): has skinny extents
[  142.694139][ T4365] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[  142.910958][ T4365] usb 3-1: USB disconnect, device number 12
[  142.986341][ T5032] BTRFS info (device loop3): enabling ssd optimizations
[  144.209503][ T5099] loop0: detected capacity change from 0 to 512
[  144.281256][ T5101] xt_NFQUEUE: number of total queues is 0
[  144.827195][ T5111] loop0: detected capacity change from 0 to 8192
[  145.017514][ T5111] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal
[  145.027201][ T5111] REISERFS (device loop0): using ordered data mode
[  145.033930][ T5111] reiserfs: using flush barriers
[  145.142516][ T5111] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  145.162311][ T5111] REISERFS (device loop0): checking transaction log (loop0)
[  145.164208][ T5102] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  145.209732][ T5111] REISERFS (device loop0): Using tea hash to sort names
[  145.442249][ T5102] usb 4-1: Using ep0 maxpacket: 32
[  145.562351][ T5102] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  145.742790][ T5102] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  145.763530][ T5102] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  145.790675][ T5102] usb 4-1: Product: syz
[  145.802546][ T5102] usb 4-1: Manufacturer: syz
[  145.817589][ T5102] usb 4-1: SerialNumber: syz
[  145.834908][ T5102] usb 4-1: config 0 descriptor??
[  145.872399][ T5112] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  146.162203][ T5118] loop2: detected capacity change from 0 to 32768
[  146.193340][ T5133] udc-core: couldn't find an available UDC or it's busy
[  146.235114][ T5133] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  146.270986][ T5120] loop0: detected capacity change from 0 to 32768
[  146.271750][ T5135] loop1: detected capacity change from 0 to 16
[  146.305249][ T5120] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.376 (5120)
[  146.370602][ T5135] erofs: (device loop1): erofs_read_superblock: blkszbits 9 isn't supported on this platform
[  146.392408][ T5118] XFS (loop2): DAX enabled. Warning: EXPERIMENTAL, use at your own risk
[  146.411274][ T5118] XFS (loop2): DAX unsupported by block device. Turning off DAX.
[  146.413799][ T5120] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  146.428580][ T5118] XFS (loop2): DAX and reflink cannot be used together!
[  146.481457][ T5120] BTRFS info (device loop0): using free space tree
[  146.552500][ T5120] BTRFS info (device loop0): has skinny extents
[  146.738162][ T3611] usb 4-1: USB disconnect, device number 7
[  146.778117][ T5157] fuse: Bad value for 'fd'
[  146.909684][ T5120] BTRFS info (device loop0): enabling ssd optimizations
[  146.936404][    T7] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  147.175697][   T26] kauditd_printk_skb: 39 callbacks suppressed
[  147.175712][   T26] audit: type=1804 audit(1722716022.162:682): pid=5174 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.376" name="/newroot/70/bus/file1" dev="loop0" ino=260 res=1 errno=0
[  147.237376][ T5118] loop2: detected capacity change from 0 to 2048
[  147.351038][    T7] usb 2-1: Using ep0 maxpacket: 16
[  147.396148][ T5118] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  147.513401][    T7] usb 2-1: config index 0 descriptor too short (expected 29663, got 36)
[  147.652520][    T7] usb 2-1: config 0 has an invalid descriptor of length 95, skipping remainder of the config
[  147.966874][    T7] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  148.029424][    T7] usb 2-1: New USB device found, idVendor=337d, idProduct=2c2e, bcdDevice= 0.00
[  148.059461][    T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  148.135733][    T7] usb 2-1: config 0 descriptor??
[  148.204178][    T7] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  148.430287][ T3611] usb 2-1: USB disconnect, device number 11
[  148.617517][ T5190] loop2: detected capacity change from 0 to 8192
[  148.792262][ T5190] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal
[  148.802617][ T5190] REISERFS (device loop2): using ordered data mode
[  148.809187][ T5190] reiserfs: using flush barriers
[  148.822907][ T5192] FAULT_INJECTION: forcing a failure.
[  148.822907][ T5192] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[  148.843558][ T5190] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  148.885465][ T5188] loop3: detected capacity change from 0 to 32768
[  148.892568][ T5192] CPU: 0 PID: 5192 Comm: syz.4.388 Not tainted 5.15.164-syzkaller #0
[  148.900672][ T5192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[  148.903472][ T5197] xt_NFQUEUE: number of total queues is 0
[  148.911091][ T5192] Call Trace:
[  148.920315][ T5192]  <TASK>
[  148.923251][ T5192]  dump_stack_lvl+0x1e3/0x2d0
[  148.927954][ T5192]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[  148.928102][ T5190] REISERFS (device loop2): checking transaction log (loop2)
[  148.933637][ T5192]  ? panic+0x860/0x860
[  148.933669][ T5192]  should_fail+0x38a/0x4c0
[  148.933693][ T5192]  prepare_alloc_pages+0x1db/0x5b0
[  148.933717][ T5192]  __alloc_pages+0x14f/0x700
[  148.933734][ T5192]  ? __rmqueue_pcplist+0x2030/0x2030
[  148.933759][ T5192]  ? count_memcg_event_mm+0x385/0x3e0
[  148.933780][ T5192]  ? remove_device_exclusive_entry+0xbf0/0xbf0
[  148.933803][ T5192]  alloc_pages_vma+0x39a/0x800
[  148.933829][ T5192]  handle_mm_fault+0x2f49/0x5950
[  148.958708][ T5190] REISERFS (device loop2): Using r5 hash to sort names
[  148.959973][ T5192]  ? numa_migrate_prep+0x1a0/0x1a0
[  148.986474][ T5190] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  148.986770][ T5192]  ? vmacache_find+0x1e7/0x590
[  149.013409][ T5192]  ? vmacache_update+0x9f/0xf0
[  149.018226][ T5192]  exc_page_fault+0x271/0x700
[  149.022939][ T5192]  asm_exc_page_fault+0x22/0x30
[  149.027807][ T5192] RIP: 0033:0x7f4f03477d0b
[  149.032414][ T5192] Code: c0 8b 87 c0 00 00 00 66 0f 6c c0 85 c0 0f 85 44 01 00 00 c7 87 c0 00 00 00 ff ff ff ff 48 8d 84 24 20 21 00 00 48 8d 7c 24 20 <0f> 29 44 24 40 49 89 e4 48 89 44 24 50 8b 43 74 48 89 9c 24 00 01
[  149.052226][ T5192] RSP: 002b:00007f4f01946e20 EFLAGS: 00010246
[  149.058307][ T5192] RAX: 00007f4f01948f40 RBX: 00007f4f03629620 RCX: 0000000000000000
[  149.066822][ T5192] RDX: 00007f4f01948f88 RSI: 00007f4f03529900 RDI: 00007f4f01946e40
[  149.074809][ T5192] RBP: 0000000000000009 R08: 0000000000000000 R09: 0000000000000000
[  149.082794][ T5192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  149.091045][ T5192] R13: 000000000000000b R14: 00007f4f03658f80 R15: 00007fff86f6e008
[  149.099363][ T5192]  </TASK>
[  149.164485][ T5192] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF
[  149.172396][ T5188] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by syz.3.386 (5188)
[  149.235949][ T5188] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  149.303856][ T5188] BTRFS info (device loop3): setting nodatasum
[  149.458534][ T5188] BTRFS info (device loop3): setting datasum
[  149.507768][ T5188] BTRFS info (device loop3): using free space tree
[  149.573646][ T5188] BTRFS info (device loop3): has skinny extents
[  149.772642][ T5188] BTRFS info (device loop3): enabling ssd optimizations
[  149.773681][ T5233] loop2: detected capacity change from 0 to 128
[  149.829106][ T5184] ipt_REJECT: ECHOREPLY no longer supported.
[  150.102705][ T5193] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  150.452043][ T5193] usb 5-1: Using ep0 maxpacket: 32
[  150.480177][ T5241] netlink: 8 bytes leftover after parsing attributes in process `syz.1.397'.
[  150.511534][ T5241] batman_adv: Cannot find parent device
[  150.757191][ T5193] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  150.794221][ T5241] device erspan1 entered promiscuous mode
[  151.023368][ T5193] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  151.264023][ T5193] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  151.593536][ T5193] usb 5-1: Product: syz
[  151.605368][   T26] audit: type=1326 audit(1722716026.592:683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5262 comm="syz.0.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87070db9f9 code=0x7ffc0000
[  151.639807][ T5193] usb 5-1: Manufacturer: syz
[  151.660571][ T5193] usb 5-1: SerialNumber: syz
[  151.660700][   T26] audit: type=1326 audit(1722716026.592:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5262 comm="syz.0.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f87070db9f9 code=0x7ffc0000
[  151.678707][ T5193] usb 5-1: config 0 descriptor??
[  151.707418][   T26] audit: type=1326 audit(1722716026.592:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5262 comm="syz.0.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87070db9f9 code=0x7ffc0000
[  151.742407][ T5226] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  151.831057][   T26] audit: type=1326 audit(1722716026.592:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5262 comm="syz.0.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f87070db9f9 code=0x7ffc0000
[  151.871052][   T26] audit: type=1326 audit(1722716026.592:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5262 comm="syz.0.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87070db9f9 code=0x7ffc0000
[  151.896782][ T5267] loop3: detected capacity change from 0 to 16
[  151.919929][   T26] audit: type=1326 audit(1722716026.592:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5262 comm="syz.0.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f87070db9f9 code=0x7ffc0000
[  151.950682][   T26] audit: type=1326 audit(1722716026.592:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5262 comm="syz.0.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f87070dba33 code=0x7ffc0000
[  151.988883][   T26] audit: type=1326 audit(1722716026.932:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5262 comm="syz.0.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f87070da4df code=0x7ffc0000
[  152.022775][ T5267] erofs: (device loop3): erofs_read_superblock: blkszbits 9 isn't supported on this platform
[  152.064151][ T5271] udc-core: couldn't find an available UDC or it's busy
[  152.072045][ T5271] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  152.327975][ T5278] xt_NFQUEUE: number of total queues is 0
[  152.446069][   T26] audit: type=1326 audit(1722716027.432:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5262 comm="syz.0.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f87070dba87 code=0x7ffc0000
[  152.447970][ T5263] loop0: detected capacity change from 0 to 40427
[  152.474836][ T3616] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  152.508934][   T26] audit: type=1326 audit(1722716027.432:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5262 comm="syz.0.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f87070da390 code=0x7ffc0000
[  152.521439][ T5257] usb 5-1: USB disconnect, device number 10
[  152.612429][ T5263] F2FS-fs (loop0): invalid crc value
[  152.655185][   T26] audit: type=1326 audit(1722716027.432:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5262 comm="syz.0.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f87070db5fb code=0x7ffc0000
[  152.694278][ T5263] F2FS-fs (loop0): Found nat_bits in checkpoint
[  152.758152][   T26] audit: type=1326 audit(1722716027.562:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5262 comm="syz.0.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f87070da68a code=0x7ffc0000
[  152.782203][ T3616] usb 4-1: Using ep0 maxpacket: 16
[  152.785830][   T26] audit: type=1326 audit(1722716027.562:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5262 comm="syz.0.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f87070da68a code=0x7ffc0000
[  152.818821][   T26] audit: type=1326 audit(1722716027.572:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5262 comm="syz.0.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f87070da297 code=0x7ffc0000
[  152.824165][ T5288] netlink: 40 bytes leftover after parsing attributes in process `syz.1.405'.
[  152.911103][ T5263] F2FS-fs (loop0): Cannot turn on quotas: -2 on 0
[  152.925651][   T26] audit: type=1326 audit(1722716027.572:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5262 comm="syz.0.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f87070dd0fa code=0x7ffc0000
[  152.962063][ T5263] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  152.972442][ T3616] usb 4-1: config index 0 descriptor too short (expected 29663, got 36)
[  152.995635][ T3616] usb 4-1: config 0 has an invalid descriptor of length 95, skipping remainder of the config
[  153.079120][ T3616] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  153.109668][   T26] audit: type=1326 audit(1722716028.002:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5262 comm="syz.0.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f87070da390 code=0x7ffc0000
[  153.196503][   T26] audit: type=1326 audit(1722716028.002:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5262 comm="syz.0.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=80 compat=0 ip=0x7f87070da777 code=0x7ffc0000
[  153.242545][ T5288] loop1: detected capacity change from 0 to 2048
[  153.361312][   T26] audit: type=1326 audit(1722716028.002:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5262 comm="syz.0.398" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f87070da390 code=0x7ffc0000
[  153.383700][ T3616] usb 4-1: New USB device found, idVendor=337d, idProduct=2c2e, bcdDevice= 0.00
[  153.383727][ T3616] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  153.385287][ T3616] usb 4-1: config 0 descriptor??
[  153.514136][ T3569] attempt to access beyond end of device
[  153.514136][ T3569] loop0: rw=2049, want=45104, limit=40427
[  153.546523][ T3616] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[  154.311470][ T3616] usb 4-1: USB disconnect, device number 8
[  155.337088][ T5315] xt_NFQUEUE: number of total queues is 0
[  155.558952][ T5328] loop3: detected capacity change from 0 to 128
[  155.837984][ T5338] loop0: detected capacity change from 0 to 512
[  155.878615][ T5338] EXT4-fs (loop0): Ignoring removed mblk_io_submit option
[  155.892069][ T5194] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  155.948571][ T5305] loop2: detected capacity change from 0 to 32768
[  155.991661][ T5338] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpid,mblk_io_submit,,errors=continue. Quota mode: writeback.
[  156.002967][ T5305] XFS: attr2 mount option is deprecated.
[  156.020396][ T5338] ext4 filesystem being mounted at /76/file0 supports timestamps until 2038 (0x7fffffff)
[  156.037615][ T5305] XFS: ikeep mount option is deprecated.
[  156.043431][ T5305] XFS: noikeep mount option is deprecated.
[  156.158839][ T5194] usb 5-1: Using ep0 maxpacket: 32
[  156.208375][ T5305] XFS (loop2): Mounting V5 Filesystem
[  156.282330][ T5194] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  156.423576][ T5305] XFS (loop2): Ending clean mount
[  156.449340][ T5305] XFS (loop2): Quotacheck needed: Please wait.
[  156.482411][ T5194] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  156.542100][ T5194] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  156.652068][ T5194] usb 5-1: Product: syz
[  156.679009][ T5194] usb 5-1: Manufacturer: syz
[  156.692132][ T5194] usb 5-1: SerialNumber: syz
[  156.718414][ T5194] usb 5-1: config 0 descriptor??
[  156.752471][ T5331] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  156.772015][ T5305] XFS (loop2): Quotacheck: Done.
[  156.888193][ T3579] XFS (loop2): Unmounting Filesystem
[  157.001369][ T5334] loop1: detected capacity change from 0 to 40427
[  157.115142][ T5334] F2FS-fs (loop1): invalid crc value
[  157.222024][ T5334] F2FS-fs (loop1): Found nat_bits in checkpoint
[  157.223368][ T5404] udc-core: couldn't find an available UDC or it's busy
[  157.240529][ T5404] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  157.303424][ T5334] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0
[  157.318404][ T5334] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  157.418249][ T3568] attempt to access beyond end of device
[  157.418249][ T3568] loop1: rw=2049, want=45104, limit=40427
[  157.654262][ T5410] netlink: 4 bytes leftover after parsing attributes in process `syz.3.424'.
[  158.328399][ T5415] loop3: detected capacity change from 0 to 256
[  158.331630][ T5418] loop0: detected capacity change from 0 to 16
[  158.415715][ T5257] usb 5-1: USB disconnect, device number 11
[  158.422142][ T5418] erofs: (device loop0): erofs_read_superblock: blkszbits 9 isn't supported on this platform
[  158.477223][ T5415] MINIX-fs: mounting file system with errors, running fsck is recommended
[  158.584244][ T5424] capability: warning: `syz.2.428' uses deprecated v2 capabilities in a way that may be insecure
[  158.602670][ T5424] FAULT_INJECTION: forcing a failure.
[  158.602670][ T5424] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  158.622184][ T5424] CPU: 1 PID: 5424 Comm: syz.2.428 Not tainted 5.15.164-syzkaller #0
[  158.630368][ T5424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[  158.640707][ T5424] Call Trace:
[  158.644160][ T5424]  <TASK>
[  158.647184][ T5424]  dump_stack_lvl+0x1e3/0x2d0
[  158.652009][ T5424]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[  158.657805][ T5424]  ? panic+0x860/0x860
[  158.661904][ T5424]  should_fail+0x38a/0x4c0
[  158.666341][ T5424]  _copy_from_user+0x2d/0x170
[  158.671037][ T5424]  btf_new_fd+0x35f/0x920
[  158.675386][ T5424]  __sys_bpf+0x486/0x670
[  158.679821][ T5424]  ? bpf_link_show_fdinfo+0x2d0/0x2d0
[  158.685224][ T5424]  __x64_sys_bpf+0x78/0x90
[  158.689663][ T5424]  do_syscall_64+0x3b/0xb0
[  158.694095][ T5424]  ? clear_bhb_loop+0x15/0x70
[  158.698792][ T5424]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  158.704791][ T5424] RIP: 0033:0x7f801e30e9f9
[  158.709325][ T5424] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  158.729381][ T5424] RSP: 002b:00007f801c78d048 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  158.737989][ T5424] RAX: ffffffffffffffda RBX: 00007f801e49cf80 RCX: 00007f801e30e9f9
[  158.746428][ T5424] RDX: 0000000000000020 RSI: 00000000200001c0 RDI: 0000000000000012
[  158.754611][ T5424] RBP: 00007f801c78d0a0 R08: 0000000000000000 R09: 0000000000000000
[  158.762594][ T5424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  158.770587][ T5424] R13: 000000000000000b R14: 00007f801e49cf80 R15: 00007fffd2c47e38
[  158.778586][ T5424]  </TASK>
[  158.832788][ T5422] netlink: 188 bytes leftover after parsing attributes in process `syz.4.427'.
[  158.900150][ T5435] xt_NFQUEUE: number of total queues is 0
[  158.955918][ T5194] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  159.176233][ T5193] usb 3-1: new low-speed USB device number 13 using dummy_hcd
[  159.212318][ T5194] usb 1-1: Using ep0 maxpacket: 16
[  159.237656][ T5442] loop1: detected capacity change from 0 to 1024
[  159.332321][ T5194] usb 1-1: config index 0 descriptor too short (expected 29663, got 36)
[  159.345488][ T5194] usb 1-1: config 0 has an invalid descriptor of length 95, skipping remainder of the config
[  159.377738][ T5194] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  159.393094][ T5193] usb 3-1: device descriptor read/64, error -71
[  159.436070][ T5194] usb 1-1: New USB device found, idVendor=337d, idProduct=2c2e, bcdDevice= 0.00
[  159.449379][ T5194] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  159.461013][ T5194] usb 1-1: config 0 descriptor??
[  159.504281][ T5194] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[  159.662132][ T5193] usb 3-1: new low-speed USB device number 14 using dummy_hcd
[  159.715673][ T5415] overlayfs: './file1' not a directory
[  159.736540][ T3574] usb 1-1: USB disconnect, device number 9
[  159.742651][ T5104] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  159.787266][   T26] kauditd_printk_skb: 69 callbacks suppressed
[  159.787279][   T26] audit: type=1326 audit(1722716034.772:770): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5448 comm="syz.1.434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c2aeda9f9 code=0x7ffc0000
[  159.847927][   T26] audit: type=1326 audit(1722716034.802:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5448 comm="syz.1.434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f9c2aeda9f9 code=0x7ffc0000
[  159.856397][ T5193] usb 3-1: device descriptor read/64, error -71
[  159.906684][   T26] audit: type=1326 audit(1722716034.802:772): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5448 comm="syz.1.434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c2aeda9f9 code=0x7ffc0000
[  159.966430][   T26] audit: type=1326 audit(1722716034.802:773): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5448 comm="syz.1.434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9c2aeda9f9 code=0x7ffc0000
[  160.012159][   T26] audit: type=1326 audit(1722716034.802:774): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5448 comm="syz.1.434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c2aeda9f9 code=0x7ffc0000
[  160.022593][ T5193] usb usb3-port1: attempt power cycle
[  160.054051][   T26] audit: type=1326 audit(1722716034.802:775): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5448 comm="syz.1.434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f9c2aeda9f9 code=0x7ffc0000
[  160.097531][   T26] audit: type=1326 audit(1722716034.802:776): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5448 comm="syz.1.434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9c2aedaa33 code=0x7ffc0000
[  160.122640][ T5104] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  160.141700][   T26] audit: type=1326 audit(1722716035.032:777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5448 comm="syz.1.434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f9c2aed94df code=0x7ffc0000
[  160.156124][ T5104] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  160.207664][ T5104] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  160.241394][ T5104] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  160.276650][ T5104] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  160.287795][ T5104] usb 5-1: config 0 descriptor??
[  160.327038][ T5422] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[  160.327131][   T26] audit: type=1326 audit(1722716035.312:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5448 comm="syz.1.434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f9c2aedaa87 code=0x7ffc0000
[  160.359803][ T5449] loop1: detected capacity change from 0 to 40427
[  160.379039][   T26] audit: type=1326 audit(1722716035.342:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5448 comm="syz.1.434" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9c2aed9390 code=0x7ffc0000
[  160.476397][ T5193] usb 3-1: new low-speed USB device number 15 using dummy_hcd
[  160.576046][ T5449] F2FS-fs (loop1): invalid crc value
[  160.592467][ T5193] usb 3-1: device descriptor read/8, error -71
[  160.665250][ T5449] F2FS-fs (loop1): Found nat_bits in checkpoint
[  160.749720][ T5449] F2FS-fs (loop1): Cannot turn on quotas: -2 on 0
[  160.770677][ T5449] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  160.816327][ T5104] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x1
[  160.845117][ T5104] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving
[  160.856515][ T3568] attempt to access beyond end of device
[  160.856515][ T3568] loop1: rw=2049, want=45104, limit=40427
[  160.862151][ T5193] usb 3-1: new low-speed USB device number 16 using dummy_hcd
[  160.882601][ T3616] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  160.938328][ T5104] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  160.992517][ T5193] usb 3-1: device descriptor read/8, error -71
[  161.101044][ T5104] usb 5-1: USB disconnect, device number 12
[  161.132503][ T5193] usb usb3-port1: unable to enumerate USB device
[  161.336630][ T3616] usb 4-1: config index 0 descriptor too short (expected 23569, got 27)
[  161.351994][ T3616] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  161.462477][ T3616] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  161.476158][ T3616] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  161.484474][ T3616] usb 4-1: Manufacturer: syz
[  161.507407][ T3616] usb 4-1: config 0 descriptor??
[  161.632269][ T3616] rc_core: IR keymap rc-hauppauge not found
[  161.638457][ T3616] Registered IR keymap rc-empty
[  161.649498][ T3616] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  161.662888][ T3616] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input6
[  161.734466][ T5471] FAULT_INJECTION: forcing a failure.
[  161.734466][ T5471] name failslab, interval 1, probability 0, space 0, times 0
[  161.793150][ T5471] CPU: 0 PID: 5471 Comm: syz.0.440 Not tainted 5.15.164-syzkaller #0
[  161.801343][ T5471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[  161.811398][ T5471] Call Trace:
[  161.814813][ T5471]  <TASK>
[  161.817766][ T5471]  dump_stack_lvl+0x1e3/0x2d0
[  161.822461][ T5471]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[  161.828494][ T5471]  ? panic+0x860/0x860
[  161.832586][ T5471]  ? __might_sleep+0xc0/0xc0
[  161.837204][ T5471]  should_fail+0x38a/0x4c0
[  161.841635][ T5471]  should_failslab+0x5/0x20
[  161.846257][ T5471]  slab_pre_alloc_hook+0x53/0xc0
[  161.851218][ T5471]  __kmalloc_node_track_caller+0x6b/0x390
[  161.856956][ T5471]  ? netlink_dump+0x2cc/0xc40
[  161.861704][ T5471]  ? kmem_cache_alloc_node+0x154/0x2c0
[  161.867353][ T5471]  ? __alloc_skb+0xdd/0x590
[  161.871878][ T5471]  ? netlink_dump+0x2cc/0xc40
[  161.876573][ T5471]  __alloc_skb+0x12c/0x590
[  161.881102][ T5471]  netlink_dump+0x2cc/0xc40
[  161.885704][ T5471]  ? __mutex_unlock_slowpath+0x218/0x750
[  161.891428][ T5471]  ? rcu_lock_release+0x5/0x20
[  161.896191][ T5471]  ? netlink_lookup+0x1d0/0x1d0
[  161.901048][ T5471]  __netlink_dump_start+0x52f/0x6f0
[  161.906248][ T5471]  rtnetlink_rcv_msg+0xbfe/0xee0
[  161.911178][ T5471]  ? rtm_get_nexthop+0x3e0/0x3e0
[  161.916097][ T5471]  ? rtnetlink_bind+0x80/0x80
[  161.920777][ T5471]  ? __local_bh_enable_ip+0x164/0x1f0
[  161.926130][ T5471]  ? lockdep_hardirqs_on+0x94/0x130
[  161.931313][ T5471]  ? __local_bh_enable_ip+0x164/0x1f0
[  161.936667][ T5471]  ? local_bh_enable+0x5/0x20
[  161.941333][ T5471]  ? _local_bh_enable+0xa0/0xa0
[  161.946170][ T5471]  ? __dev_queue_xmit+0x1c56/0x3230
[  161.951358][ T5471]  ? __copy_skb_header+0x47b/0x600
[  161.956448][ T5471]  ? dev_queue_xmit+0x20/0x20
[  161.961105][ T5471]  ? memcpy+0x3c/0x60
[  161.965170][ T5471]  ? rtm_get_nexthop+0x3e0/0x3e0
[  161.970169][ T5471]  netlink_rcv_skb+0x1cf/0x410
[  161.974963][ T5471]  ? rtnetlink_bind+0x80/0x80
[  161.979635][ T5471]  ? netlink_ack+0xb10/0xb10
[  161.984218][ T5471]  netlink_unicast+0x7b6/0x980
[  161.989065][ T5471]  ? netlink_detachskb+0x90/0x90
[  161.993981][ T5471]  ? __virt_addr_valid+0x3bb/0x460
[  161.999159][ T5471]  ? 0xffffffff81000000
[  162.003292][ T5471]  ? __check_object_size+0x300/0x410
[  162.008562][ T5471]  ? bpf_lsm_netlink_send+0x5/0x10
[  162.013663][ T5471]  netlink_sendmsg+0xa30/0xd60
[  162.018447][ T5471]  ? netlink_getsockopt+0x5b0/0x5b0
[  162.023629][ T5471]  ? aa_sock_msg_perm+0x91/0x150
[  162.028663][ T5471]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  162.033958][ T5471]  ? security_socket_sendmsg+0x7d/0xa0
[  162.039933][ T5471]  ? netlink_getsockopt+0x5b0/0x5b0
[  162.045561][ T5471]  ____sys_sendmsg+0x59e/0x8f0
[  162.050309][ T5471]  ? iovec_from_user+0x300/0x390
[  162.055242][ T5471]  ? __sys_sendmsg_sock+0x30/0x30
[  162.060259][ T5471]  ___sys_sendmsg+0x252/0x2e0
[  162.064921][ T5471]  ? __sys_sendmsg+0x260/0x260
[  162.069694][ T5471]  ? __fdget+0x191/0x220
[  162.073950][ T5471]  __se_sys_sendmsg+0x19a/0x260
[  162.078781][ T5471]  ? __x64_sys_sendmsg+0x80/0x80
[  162.083704][ T5471]  ? syscall_enter_from_user_mode+0x2e/0x240
[  162.089682][ T5471]  ? lockdep_hardirqs_on+0x94/0x130
[  162.094866][ T5471]  ? syscall_enter_from_user_mode+0x2e/0x240
[  162.100829][ T5471]  do_syscall_64+0x3b/0xb0
[  162.105237][ T5471]  ? clear_bhb_loop+0x15/0x70
[  162.109904][ T5471]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  162.115802][ T5471] RIP: 0033:0x7f87070db9f9
[  162.120488][ T5471] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  162.140085][ T5471] RSP: 002b:00007f870555a048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  162.149315][ T5471] RAX: ffffffffffffffda RBX: 00007f8707269f80 RCX: 00007f87070db9f9
[  162.157324][ T5471] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000004
[  162.165378][ T5471] RBP: 00007f870555a0a0 R08: 0000000000000000 R09: 0000000000000000
[  162.173334][ T5471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  162.181373][ T5471] R13: 000000000000000b R14: 00007f8707269f80 R15: 00007ffe74e4b348
[  162.189338][ T5471]  </TASK>
[  162.200908][ T5257] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  162.221507][ T5454] udc-core: couldn't find an available UDC or it's busy
[  162.245672][ T5454] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  162.474447][ T3616] usb 4-1: USB disconnect, device number 9
[  162.494468][ T5257] usb 2-1: Using ep0 maxpacket: 32
[  162.597170][ T5493] fuse: Bad value for 'fd'
[  162.602608][ T5493] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  162.613316][ T5257] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  162.804905][ T5257] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  163.522331][ T5257] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  163.532623][ T5257] usb 2-1: Product: syz
[  163.536924][ T5257] usb 2-1: Manufacturer: syz
[  163.541532][ T5257] usb 2-1: SerialNumber: syz
[  163.586689][ T5257] usb 2-1: config 0 descriptor??
[  163.632360][ T5463] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[  163.799282][ T5508] loop3: detected capacity change from 0 to 2048
[  163.879358][ T5492] loop0: detected capacity change from 0 to 40427
[  163.898725][ T5508] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  163.968600][ T5509] udc-core: couldn't find an available UDC or it's busy
[  163.988176][ T5492] F2FS-fs (loop0): invalid crc value
[  164.000908][ T5509] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  164.030924][ T5492] F2FS-fs (loop0): Found nat_bits in checkpoint
[  164.140310][ T5492] F2FS-fs (loop0): Cannot turn on quotas: -2 on 0
[  164.182435][ T5492] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  164.359226][ T5506] loop2: detected capacity change from 0 to 32768
[  164.368244][ T3569] attempt to access beyond end of device
[  164.368244][ T3569] loop0: rw=2049, want=45104, limit=40427
[  164.491659][ T5506] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.452 (5506)
[  164.627384][ T5516] loop3: detected capacity change from 0 to 40427
[  164.676902][ T5193] usb 2-1: USB disconnect, device number 12
[  164.695461][ T5516] F2FS-fs (loop3): invalid crc value
[  164.728905][ T5506] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  164.758871][ T5506] BTRFS error (device loop2): support for check_integrity* not compiled in!
[  164.770607][ T5516] F2FS-fs (loop3): Found nat_bits in checkpoint
[  164.783663][ T5523] netlink: 4 bytes leftover after parsing attributes in process `syz.1.456'.
[  164.815716][ T5516] F2FS-fs (loop3): Cannot turn on quotas: -2 on 1
[  164.824754][ T5516] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  164.898773][ T5506] BTRFS error (device loop2): open_ctree failed
[  164.932969][ T5525] FAULT_INJECTION: forcing a failure.
[  164.932969][ T5525] name failslab, interval 1, probability 0, space 0, times 0
[  165.083079][ T5525] CPU: 1 PID: 5525 Comm: syz.1.456 Not tainted 5.15.164-syzkaller #0
[  165.091498][ T5525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[  165.104001][ T5525] Call Trace:
[  165.107746][ T5525]  <TASK>
[  165.110687][ T5525]  dump_stack_lvl+0x1e3/0x2d0
[  165.115562][ T5525]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[  165.121296][ T5525]  ? panic+0x860/0x860
[  165.125475][ T5525]  ? __might_sleep+0xc0/0xc0
[  165.130075][ T5525]  should_fail+0x38a/0x4c0
[  165.134670][ T5525]  should_failslab+0x5/0x20
[  165.139256][ T5525]  slab_pre_alloc_hook+0x53/0xc0
[  165.144286][ T5525]  kmem_cache_alloc_trace+0x49/0x290
[  165.150199][ T5525]  ? nft_flush_table+0xf80/0x1580
[  165.155859][ T5525]  nft_flush_table+0xf80/0x1580
[  165.162111][ T5525]  nf_tables_deltable+0x729/0x10b0
[  165.168059][ T5525]  ? nf_tables_gettable+0x6d0/0x6d0
[  165.175806][ T5525]  ? __nla_parse+0x3c/0x50
[  165.180278][ T5525]  nfnetlink_rcv+0x11f1/0x25f0
[  165.185577][ T5525]  ? lockdep_hardirqs_on_prepare+0x7a0/0x7a0
[  165.191613][ T5525]  ? nfnetlink_net_exit_batch+0xa0/0xa0
[  165.197739][ T5525]  ? rcu_lock_release+0x5/0x20
[  165.202628][ T5525]  netlink_unicast+0x7b6/0x980
[  165.208383][ T5525]  ? netlink_detachskb+0x90/0x90
[  165.213796][ T5525]  ? __virt_addr_valid+0x3bb/0x460
[  165.219542][ T5525]  ? 0xffffffff81000000
[  165.225126][ T5525]  ? __check_object_size+0x300/0x410
[  165.231559][ T5525]  ? bpf_lsm_netlink_send+0x5/0x10
[  165.238427][ T5525]  netlink_sendmsg+0xa30/0xd60
[  165.243592][ T5525]  ? netlink_getsockopt+0x5b0/0x5b0
[  165.249181][ T5525]  ? aa_sock_msg_perm+0x91/0x150
[  165.255977][ T5525]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  165.262979][ T5525]  ? security_socket_sendmsg+0x7d/0xa0
[  165.268745][ T5525]  ? netlink_getsockopt+0x5b0/0x5b0
[  165.276353][ T5525]  ____sys_sendmsg+0x59e/0x8f0
[  165.281957][ T5525]  ? iovec_from_user+0x300/0x390
[  165.287811][ T5525]  ? __sys_sendmsg_sock+0x30/0x30
[  165.292969][ T5525]  ___sys_sendmsg+0x252/0x2e0
[  165.299241][ T5525]  ? __sys_sendmsg+0x260/0x260
[  165.305042][ T5525]  ? __fdget+0x191/0x220
[  165.310347][ T5525]  __se_sys_sendmsg+0x19a/0x260
[  165.316187][ T5525]  ? __x64_sys_sendmsg+0x80/0x80
[  165.321337][ T5525]  ? syscall_enter_from_user_mode+0x2e/0x240
[  165.327412][ T5525]  ? lockdep_hardirqs_on+0x94/0x130
[  165.333222][ T5525]  ? syscall_enter_from_user_mode+0x2e/0x240
[  165.339729][ T5525]  do_syscall_64+0x3b/0xb0
[  165.344170][ T5525]  ? clear_bhb_loop+0x15/0x70
[  165.348953][ T5525]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  165.355025][ T5525] RIP: 0033:0x7f9c2aeda9f9
[  165.359442][ T5525] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  165.379840][ T5525] RSP: 002b:00007f9c29338048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  165.388451][ T5525] RAX: ffffffffffffffda RBX: 00007f9c2b069058 RCX: 00007f9c2aeda9f9
[  165.397478][ T5525] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003
[  165.405814][ T5525] RBP: 00007f9c293380a0 R08: 0000000000000000 R09: 0000000000000000
[  165.414804][ T5525] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  165.423607][ T5525] R13: 000000000000006e R14: 00007f9c2b069058 R15: 00007fff4ddec648
[  165.431608][ T5525]  </TASK>
[  165.453917][ T3570] attempt to access beyond end of device
[  165.453917][ T3570] loop3: rw=2049, want=45120, limit=40427
[  165.674029][ T5531] netlink: 28 bytes leftover after parsing attributes in process `syz.4.459'.
[  165.747528][ T5534] netlink: 4 bytes leftover after parsing attributes in process `syz.2.460'.
[  166.552285][ T5193] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  166.731795][   T26] kauditd_printk_skb: 74 callbacks suppressed
[  166.731816][   T26] audit: type=1326 audit(1722716041.712:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5553 comm="syz.0.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87070db9f9 code=0x7ffc0000
[  166.848316][   T26] audit: type=1326 audit(1722716041.762:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5553 comm="syz.0.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f87070db9f9 code=0x7ffc0000
[  166.912029][ T5193] usb 5-1: Using ep0 maxpacket: 16
[  166.949305][   T26] audit: type=1326 audit(1722716041.762:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5553 comm="syz.0.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87070db9f9 code=0x7ffc0000
[  167.017363][   T26] audit: type=1326 audit(1722716041.762:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5553 comm="syz.0.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87070db9f9 code=0x7ffc0000
[  167.053125][ T3614] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  167.072337][ T5193] usb 5-1: config index 0 descriptor too short (expected 29663, got 36)
[  167.091892][   T26] audit: type=1326 audit(1722716041.762:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5553 comm="syz.0.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f87070db9f9 code=0x7ffc0000
[  167.115900][ T5193] usb 5-1: config 0 has an invalid descriptor of length 95, skipping remainder of the config
[  167.132074][ T5193] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  167.155830][   T26] audit: type=1326 audit(1722716041.762:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5553 comm="syz.0.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87070db9f9 code=0x7ffc0000
[  167.182068][ T5193] usb 5-1: New USB device found, idVendor=337d, idProduct=2c2e, bcdDevice= 0.00
[  167.201642][ T5193] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  167.216306][ T5252] usb 4-1: new full-speed USB device number 10 using dummy_hcd
[  167.229793][ T5193] usb 5-1: config 0 descriptor??
[  167.248472][   T26] audit: type=1326 audit(1722716041.782:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5553 comm="syz.0.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f87070db9f9 code=0x7ffc0000
[  167.274233][ T5193] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[  167.301718][   T26] audit: type=1326 audit(1722716041.782:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5553 comm="syz.0.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f87070db9f9 code=0x7ffc0000
[  167.312232][ T3614] usb 2-1: Using ep0 maxpacket: 8
[  167.352040][   T26] audit: type=1326 audit(1722716041.782:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5553 comm="syz.0.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f87070dba33 code=0x7ffc0000
[  167.352649][ T5550] loop2: detected capacity change from 0 to 32768
[  167.408525][   T26] audit: type=1326 audit(1722716042.072:863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5553 comm="syz.0.465" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f87070da4df code=0x7ffc0000
[  167.435430][ T5554] loop0: detected capacity change from 0 to 40427
[  167.468371][ T5550] XFS (loop2): Mounting V5 Filesystem
[  167.484461][ T5193] usb 5-1: USB disconnect, device number 13
[  167.487249][ T5554] F2FS-fs (loop0): invalid crc value
[  167.512956][ T5554] F2FS-fs (loop0): Found nat_bits in checkpoint
[  167.559745][ T5554] F2FS-fs (loop0): Cannot turn on quotas: -2 on 0
[  167.560663][ T5550] XFS (loop2): Ending clean mount
[  167.576473][ T5554] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  167.578260][ T5550] XFS (loop2): Quotacheck needed: Please wait.
[  167.633106][ T3614] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  167.633413][ T5252] usb 4-1: unable to get BOS descriptor or descriptor too short
[  167.642740][ T3614] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  167.651176][ T3569] attempt to access beyond end of device
[  167.651176][ T3569] loop0: rw=2049, want=45104, limit=40427
[  167.658660][ T3614] usb 2-1: Product: syz
[  167.658681][ T3614] usb 2-1: Manufacturer: syz
[  167.658695][ T3614] usb 2-1: SerialNumber: syz
[  167.660289][ T3614] usb 2-1: config 0 descriptor??
[  167.700657][ T5550] XFS (loop2): Quotacheck: Done.
[  167.826776][ T5252] usb 4-1: unable to read config index 0 descriptor/start: -71
[  167.846735][ T5252] usb 4-1: can't read configurations, error -71
[  167.933560][ T3614] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  168.011859][ T5572] loop0: detected capacity change from 0 to 256
[  168.088236][ T5572] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d)
[  168.317639][ T3579] XFS (loop2): Unmounting Filesystem
[  168.380218][ T5576] loop3: detected capacity change from 0 to 32768
[  168.520234][ T5582] overlayfs: unrecognized mount option "ro" or missing value
[  168.563970][ T5588] ERROR: (device loop3): dbAllocNext: Corrupt dmap page
[  168.563970][ T5588] 
[  168.578373][ T5588] ERROR: (device loop3): remounting filesystem as read-only
[  168.604155][ T5591] loop0: detected capacity change from 0 to 164
[  168.739330][ T5594] device vlan0 entered promiscuous mode
[  168.820506][ T5596] device vlan0 left promiscuous mode
[  168.834304][ T5104] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  168.905941][ T5601] openvswitch: netlink: ct_state flags 0100007f unsupported
[  169.108390][ T5601] sp0: Synchronizing with TNC
[  169.352296][ T5193] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  169.652107][ T5193] usb 5-1: Using ep0 maxpacket: 16
[  169.772416][ T5193] usb 5-1: config index 0 descriptor too short (expected 29663, got 36)
[  169.804141][ T5193] usb 5-1: config 0 has an invalid descriptor of length 95, skipping remainder of the config
[  169.818349][ T5613] device batadv0 entered promiscuous mode
[  169.839854][ T5616] netlink: 'syz.0.481': attribute type 11 has an invalid length.
[  169.849297][ T5193] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  169.863078][ T3614] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71
[  169.872184][ T5617] xt_NFQUEUE: number of total queues is 0
[  169.890927][ T3614] usb 2-1: USB disconnect, device number 13
[  169.908080][ T5616] loop0: detected capacity change from 0 to 512
[  169.909349][ T5193] usb 5-1: New USB device found, idVendor=337d, idProduct=2c2e, bcdDevice= 0.00
[  169.938487][ T5193] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  169.948907][ T5193] usb 5-1: config 0 descriptor??
[  170.018434][ T5193] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[  170.031203][ T5616] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  170.043194][ T5616] ext4 filesystem being mounted at /89/bus supports timestamps until 2038 (0x7fffffff)
[  170.067701][ T5624] xt_NFQUEUE: number of total queues is 0
[  170.448708][ T3574] usb 5-1: USB disconnect, device number 14
[  170.736731][ T1075] Bluetooth: hci2: command 0x0406 tx timeout
[  170.743454][ T1075] Bluetooth: hci4: command 0x0406 tx timeout
[  170.749599][ T1075] Bluetooth: hci0: command 0x0406 tx timeout
[  170.806593][ T1075] Bluetooth: hci3: command 0x0406 tx timeout
[  170.842175][ T1075] Bluetooth: hci1: command 0x0406 tx timeout
[  170.907060][ T5641] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  171.600931][    T7] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  171.965505][ T5669] loop2: detected capacity change from 0 to 256
[  172.037488][ T5669] exFAT-fs (loop2): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d)
[  172.074305][    T7] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  172.099099][    T7] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  172.102086][ T3574] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  172.112589][ T5252] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  172.132347][    T7] usb 2-1: New USB device found, idVendor=056a, idProduct=0314, bcdDevice= 0.00
[  172.146697][    T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  172.159469][    T7] usb 2-1: config 0 descriptor??
[  172.204276][    T7] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  172.363361][ T3574] usb 5-1: Using ep0 maxpacket: 8
[  172.370719][ T5673] loop2: detected capacity change from 0 to 16
[  172.406190][ T5252] usb 1-1: Using ep0 maxpacket: 32
[  172.479588][ T5673] erofs: (device loop2): erofs_read_superblock: blkszbits 9 isn't supported on this platform
[  172.549178][ T5252] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  172.652241][ T3574] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  172.661425][ T3574] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  172.695499][ T3574] usb 5-1: Product: syz
[  172.699907][ T3574] usb 5-1: Manufacturer: syz
[  172.715424][ T3574] usb 5-1: SerialNumber: syz
[  172.736149][ T3574] usb 5-1: config 0 descriptor??
[  172.762398][ T5252] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  172.783081][ T5252] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  172.783109][ T5252] usb 1-1: Product: syz
[  172.783123][ T5252] usb 1-1: Manufacturer: syz
[  172.811189][ T5252] usb 1-1: SerialNumber: syz
[  172.830827][ T5252] usb 1-1: config 0 descriptor??
[  172.872429][ T5665] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[  172.912045][ T5193] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  172.992368][ T3574] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  173.173084][ T5193] usb 3-1: Using ep0 maxpacket: 16
[  173.194130][ T5667] loop3: detected capacity change from 0 to 131072
[  173.211715][ T5676] udc-core: couldn't find an available UDC or it's busy
[  173.223041][ T5676] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  173.259859][ T5667] XFS (loop3): Mounting V5 Filesystem
[  173.296689][ T5193] usb 3-1: config index 0 descriptor too short (expected 29663, got 36)
[  173.317656][ T5193] usb 3-1: config 0 has an invalid descriptor of length 95, skipping remainder of the config
[  173.359819][ T5193] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  173.383562][ T5193] usb 3-1: New USB device found, idVendor=337d, idProduct=2c2e, bcdDevice= 0.00
[  173.399352][ T5193] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  173.417032][ T5667] XFS (loop3): Ending clean mount
[  173.424352][ T5193] usb 3-1: config 0 descriptor??
[  173.464202][ T5193] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[  173.651900][ T5193] usb 2-1: USB disconnect, device number 14
[  173.675886][ T3616] usb 1-1: USB disconnect, device number 10
[  173.704104][    T7] usb 3-1: USB disconnect, device number 17
[  173.761917][ T5691] xt_NFQUEUE: number of total queues is 0
[  173.784417][ T3570] XFS (loop3): Unmounting Filesystem
[  175.012262][ T3574] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -71
[  175.034249][ T3574] usb 5-1: USB disconnect, device number 15
[  175.172464][ T5706] loop0: detected capacity change from 0 to 8192
[  175.378054][ T5706] REISERFS (device loop0): found reiserfs format "3.6" with non-standard journal
[  175.454495][ T5706] REISERFS (device loop0): using ordered data mode
[  175.509101][ T5706] reiserfs: using flush barriers
[  175.522050][ T5706] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  175.570049][ T5706] REISERFS (device loop0): checking transaction log (loop0)
[  175.706346][ T5706] REISERFS (device loop0): Using tea hash to sort names
[  175.706698][ T5718] loop3: detected capacity change from 0 to 128
[  175.717312][ T5706] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage.
[  175.910171][ T5193] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  175.936227][ T5720] FAULT_INJECTION: forcing a failure.
[  175.936227][ T5720] name failslab, interval 1, probability 0, space 0, times 0
[  175.963792][ T5720] CPU: 0 PID: 5720 Comm: syz.1.509 Not tainted 5.15.164-syzkaller #0
[  175.972329][ T5720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[  175.983352][ T5720] Call Trace:
[  175.986640][ T5720]  <TASK>
[  175.989659][ T5720]  dump_stack_lvl+0x1e3/0x2d0
[  175.994345][ T5720]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[  176.000068][ T5720]  ? panic+0x860/0x860
[  176.004149][ T5720]  ? __might_sleep+0xc0/0xc0
[  176.008746][ T5720]  should_fail+0x38a/0x4c0
[  176.013166][ T5720]  should_failslab+0x5/0x20
[  176.017769][ T5720]  slab_pre_alloc_hook+0x53/0xc0
[  176.022730][ T5720]  kmem_cache_alloc_trace+0x49/0x290
[  176.028723][ T5720]  ? sctp_auth_asoc_copy_shkeys+0x13a/0x580
[  176.034773][ T5720]  sctp_auth_asoc_copy_shkeys+0x13a/0x580
[  176.040630][ T5720]  sctp_association_new+0x15bd/0x2360
[  176.046038][ T5720]  sctp_connect_new_asoc+0x2ca/0x6a0
[  176.051776][ T5720]  ? __sctp_connect+0xe10/0xe10
[  176.056906][ T5720]  ? sctp_sendmsg+0xb21/0x3370
[  176.061807][ T5720]  ? _local_bh_enable+0xa0/0xa0
[  176.066783][ T5720]  ? bpf_lsm_sctp_bind_connect+0x5/0x10
[  176.073032][ T5720]  ? security_sctp_bind_connect+0x86/0xb0
[  176.079297][ T5720]  sctp_sendmsg+0x1cd9/0x3370
[  176.084298][ T5720]  ? sctp_getsockopt+0x7f0/0x7f0
[  176.089528][ T5720]  ? aa_af_perm+0x350/0x350
[  176.094072][ T5720]  ? __fget_files+0x413/0x480
[  176.100094][ T5720]  ? inet_sendmsg+0x81/0x310
[  176.104973][ T5720]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  176.110445][ T5720]  ? security_socket_sendmsg+0x7d/0xa0
[  176.116258][ T5720]  ? inet_send_prepare+0x250/0x250
[  176.121717][ T5720]  __sys_sendto+0x564/0x720
[  176.126244][ T5720]  ? __ia32_sys_getpeername+0x80/0x80
[  176.131838][ T5720]  ? print_irqtrace_events+0x210/0x210
[  176.137406][ T5720]  ? vtime_user_exit+0x2d1/0x400
[  176.142371][ T5720]  __x64_sys_sendto+0xda/0xf0
[  176.147156][ T5720]  do_syscall_64+0x3b/0xb0
[  176.153684][ T5720]  ? clear_bhb_loop+0x15/0x70
[  176.158901][ T5720]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  176.164907][ T5720] RIP: 0033:0x7f9c2aeda9f9
[  176.169335][ T5720] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  176.190370][ T5720] RSP: 002b:00007f9c29359048 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  176.199039][ T5720] RAX: ffffffffffffffda RBX: 00007f9c2b068f80 RCX: 00007f9c2aeda9f9
[  176.207129][ T5720] RDX: 0000000000000001 RSI: 0000000020847fff RDI: 0000000000000003
[  176.215099][ T5720] RBP: 00007f9c293590a0 R08: 000000002005ffe4 R09: 000000000000001c
[  176.223169][ T5720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  176.231643][ T5720] R13: 000000000000000b R14: 00007f9c2b068f80 R15: 00007fff4ddec648
[  176.240034][ T5720]  </TASK>
[  176.432608][ T5193] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  176.465298][ T5193] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  176.487204][ T5193] usb 5-1: Product: syz
[  176.507407][ T5734] loop2: detected capacity change from 0 to 256
[  176.519001][ T5193] usb 5-1: Manufacturer: syz
[  176.536114][ T5193] usb 5-1: SerialNumber: syz
[  176.557852][ T5193] usb 5-1: config 0 descriptor??
[  176.583793][ T5734] exFAT-fs (loop2): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d)
[  176.621512][ T5734] FAULT_INJECTION: forcing a failure.
[  176.621512][ T5734] name failslab, interval 1, probability 0, space 0, times 0
[  176.627982][ T5193] garmin_gps 5-1:0.0: Garmin GPS usb/tty converter detected
[  176.650551][ T5734] CPU: 0 PID: 5734 Comm: syz.2.513 Not tainted 5.15.164-syzkaller #0
[  176.659448][ T5734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[  176.664790][ T5193] garmin_gps ttyUSB0: failed to submit interrupt urb: -22
[  176.669706][ T5734] Call Trace:
[  176.669720][ T5734]  <TASK>
[  176.683482][ T5734]  dump_stack_lvl+0x1e3/0x2d0
[  176.688171][ T5734]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[  176.693898][ T5734]  ? panic+0x860/0x860
[  176.697393][ T5193] garmin_gps: probe of ttyUSB0 failed with error -22
[  176.697980][ T5734]  ? __might_sleep+0xc0/0xc0
[  176.709213][ T5734]  should_fail+0x38a/0x4c0
[  176.713766][ T5734]  should_failslab+0x5/0x20
[  176.718844][ T5734]  slab_pre_alloc_hook+0x53/0xc0
[  176.723882][ T5734]  ? security_file_alloc+0x24/0x120
[  176.729355][ T5734]  kmem_cache_alloc+0x3f/0x280
[  176.734235][ T5734]  security_file_alloc+0x24/0x120
[  176.739560][ T5734]  __alloc_file+0xc3/0x240
[  176.744176][ T5734]  alloc_empty_file+0x92/0x180
[  176.748970][ T5734]  path_openat+0xfc/0x2f20
[  176.753720][ T5734]  ? stack_trace_snprint+0xe0/0xe0
[  176.758930][ T5734]  ? validate_chain+0x112/0x5930
[  176.763888][ T5734]  ? mark_lock+0x98/0x340
[  176.768407][ T5734]  ? __lock_acquire+0x1295/0x1ff0
[  176.773537][ T5734]  ? mark_lock+0x98/0x340
[  176.778262][ T5734]  ? __lock_acquire+0x1295/0x1ff0
[  176.783303][ T5734]  ? do_filp_open+0x460/0x460
[  176.788269][ T5734]  do_filp_open+0x21c/0x460
[  176.792786][ T5734]  ? vfs_tmpfile+0x2e0/0x2e0
[  176.797415][ T5734]  ? _raw_spin_unlock+0x24/0x40
[  176.802298][ T5734]  ? alloc_fd+0x598/0x630
[  176.806649][ T5734]  do_sys_openat2+0x13b/0x4f0
[  176.811445][ T5734]  ? do_sys_open+0x220/0x220
[  176.816072][ T5734]  __x64_sys_openat+0x243/0x290
[  176.820953][ T5734]  ? __ia32_sys_open+0x270/0x270
[  176.825907][ T5734]  ? syscall_enter_from_user_mode+0x2e/0x240
[  176.831905][ T5734]  ? lockdep_hardirqs_on+0x94/0x130
[  176.837105][ T5734]  ? syscall_enter_from_user_mode+0x2e/0x240
[  176.843072][ T5734]  do_syscall_64+0x3b/0xb0
[  176.847467][ T5734]  ? clear_bhb_loop+0x15/0x70
[  176.852124][ T5734]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  176.857997][ T5734] RIP: 0033:0x7f801e30e9f9
[  176.862479][ T5734] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  176.882272][ T5734] RSP: 002b:00007f801c78d048 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  176.890675][ T5734] RAX: ffffffffffffffda RBX: 00007f801e49cf80 RCX: 00007f801e30e9f9
[  176.898836][ T5734] RDX: 000000000000275a RSI: 0000000020000040 RDI: ffffffffffffff9c
[  176.906809][ T5734] RBP: 00007f801c78d0a0 R08: 0000000000000000 R09: 0000000000000000
[  176.914778][ T5734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  176.922734][ T5734] R13: 000000000000000b R14: 00007f801e49cf80 R15: 00007fffd2c47e38
[  176.930702][ T5734]  </TASK>
[  177.002012][    T7] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  177.079201][   T23] usb 5-1: USB disconnect, device number 16
[  177.115520][   T23] garmin_gps 5-1:0.0: device disconnected
[  177.161617][ T5740] xt_NFQUEUE: number of total queues is 0
[  177.282446][    T7] usb 2-1: Using ep0 maxpacket: 32
[  177.402380][    T7] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  177.627669][    T7] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  177.682622][ T5752] loop0: detected capacity change from 0 to 764
[  177.683640][    T7] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  178.252615][    T7] usb 2-1: Product: syz
[  178.257041][    T7] usb 2-1: Manufacturer: syz
[  178.261650][    T7] usb 2-1: SerialNumber: syz
[  178.271484][    T7] usb 2-1: config 0 descriptor??
[  178.278554][ T5752] rock: directory entry would overflow storage
[  178.357479][ T5752] rock: sig=0x4654, size=5, remaining=4
[  178.387125][ T5759] udc-core: couldn't find an available UDC or it's busy
[  178.402548][ T5732] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  178.434452][ T5759] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  178.450649][    C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  178.602081][ T3614] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  178.616670][ T5763] FAULT_INJECTION: forcing a failure.
[  178.616670][ T5763] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  178.641174][ T5763] CPU: 0 PID: 5763 Comm: syz.0.522 Not tainted 5.15.164-syzkaller #0
[  178.649274][ T5763] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[  178.659323][ T5763] Call Trace:
[  178.662620][ T5763]  <TASK>
[  178.665542][ T5763]  dump_stack_lvl+0x1e3/0x2d0
[  178.670217][ T5763]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[  178.675866][ T5763]  ? panic+0x860/0x860
[  178.679942][ T5763]  ? mark_lock+0x98/0x340
[  178.684271][ T5763]  should_fail+0x38a/0x4c0
[  178.688679][ T5763]  prepare_alloc_pages+0x1db/0x5b0
[  178.693776][ T5763]  __alloc_pages+0x14f/0x700
[  178.698370][ T5763]  ? __rmqueue_pcplist+0x2030/0x2030
[  178.703696][ T5763]  ? __lock_acquire+0x1295/0x1ff0
[  178.708748][ T5763]  alloc_pages+0x214/0x570
[  178.713169][ T5763]  get_zeroed_page+0x13/0x30
[  178.717747][ T5763]  __dev_alloc_name+0x3fb/0x950
[  178.722592][ T5763]  ? memset+0x1f/0x40
[  178.726555][ T5763]  ? lockdep_init_map_type+0x9d/0x8d0
[  178.731905][ T5763]  ? rcu_lock_release+0x20/0x20
[  178.736738][ T5763]  ? lockdep_softirqs_off+0x420/0x420
[  178.742096][ T5763]  ? __debug_object_init+0x258/0xd30
[  178.747369][ T5763]  dev_prep_valid_name+0x17f/0x2a0
[  178.752559][ T5763]  register_netdevice+0x489/0x1720
[  178.757652][ T5763]  ? lockdep_hardirqs_on_prepare+0x7a0/0x7a0
[  178.763626][ T5763]  ? mutex_lock_io_nested+0x60/0x60
[  178.768816][ T5763]  ? netif_stacked_transfer_operstate+0x240/0x240
[  178.775210][ T5763]  ? sixpack_open+0x581/0x9f0
[  178.779874][ T5763]  ? _local_bh_enable+0xa0/0xa0
[  178.784708][ T5763]  register_netdev+0x37/0x50
[  178.789275][ T5763]  sixpack_open+0x5d1/0x9f0
[  178.793763][ T5763]  ? local_bh_enable+0x20/0x20
[  178.798508][ T5763]  ? n_tty_close+0x164/0x1d0
[  178.803080][ T5763]  tty_set_ldisc+0x379/0x680
[  178.807653][ T5763]  tty_ioctl+0xace/0xc50
[  178.811971][ T5763]  ? tty_get_icount+0xa0/0xa0
[  178.816630][ T5763]  __se_sys_ioctl+0xf1/0x160
[  178.821204][ T5763]  do_syscall_64+0x3b/0xb0
[  178.825731][ T5763]  ? clear_bhb_loop+0x15/0x70
[  178.830428][ T5763]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  178.836330][ T5763] RIP: 0033:0x7f87070db9f9
[  178.840822][ T5763] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  178.860417][ T5763] RSP: 002b:00007f870555a048 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  178.868822][ T5763] RAX: ffffffffffffffda RBX: 00007f8707269f80 RCX: 00007f87070db9f9
[  178.876773][ T5763] RDX: 00000000200000c0 RSI: 0000000000005423 RDI: 0000000000000003
[  178.884725][ T5763] RBP: 00007f870555a0a0 R08: 0000000000000000 R09: 0000000000000000
[  178.892781][ T5763] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  178.900732][ T5763] R13: 000000000000000b R14: 00007f8707269f80 R15: 00007ffe74e4b348
[  178.908724][ T5763]  </TASK>
[  178.965418][ T5763] sp0: Synchronizing with TNC
[  179.048807][ T5257] usb 2-1: USB disconnect, device number 15
[  179.103479][ T5772] xt_NFQUEUE: number of total queues is 0
[  179.319816][ T5775] loop1: detected capacity change from 0 to 64
[  179.402503][ T3614] usb 5-1: New USB device found, idVendor=05ac, idProduct=0252, bcdDevice=ba.25
[  179.416983][ T3614] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  179.442091][ T3614] usb 5-1: Product: syz
[  179.442113][ T3614] usb 5-1: Manufacturer: syz
[  179.442127][ T3614] usb 5-1: SerialNumber: syz
[  179.459205][ T3614] usb 5-1: config 0 descriptor??
[  179.494966][ T3614] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input7
[  179.578028][ T5785] loop1: detected capacity change from 0 to 64
[  179.712295][ T3012] bcm5974 5-1:0.0: could not read from device
[  179.745830][ T3614] usb 5-1: USB disconnect, device number 17
[  180.018785][ T5780] loop3: detected capacity change from 0 to 32768
[  180.092955][ T5780] xfs: Unknown parameter 'mtpt'
[  181.173053][ T5807] hub 6-0:1.0: USB hub found
[  181.182005][ T5807] hub 6-0:1.0: 1 port detected
[  181.861868][ T5810] xt_NFQUEUE: number of total queues is 0
[  182.145670][ T5822] loop1: detected capacity change from 0 to 8
[  182.196143][   T23] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  182.320528][ T5829] loop2: detected capacity change from 0 to 128
[  182.735614][ T5829] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  182.736274][ T5829] ext4 filesystem being mounted at /108/mnt supports timestamps until 2038 (0x7fffffff)
[  183.426258][ T5842] netlink: 'syz.4.545': attribute type 2 has an invalid length.
[  183.485476][ T5842] netlink: 244 bytes leftover after parsing attributes in process `syz.4.545'.
[  183.542213][   T23] usb 1-1: Using ep0 maxpacket: 32
[  183.662882][   T23] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  183.933191][   T23] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  184.045516][   T23] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  184.221056][   T23] usb 1-1: Product: syz
[  184.225926][ T5856] xt_NFQUEUE: number of total queues is 0
[  184.230923][   T23] usb 1-1: Manufacturer: syz
[  184.244922][   T23] usb 1-1: SerialNumber: syz
[  184.304355][   T23] usb 1-1: config 0 descriptor??
[  184.322339][ T5814] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  184.334963][ T5865] FAULT_INJECTION: forcing a failure.
[  184.334963][ T5865] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  184.383419][ T5864] loop3: detected capacity change from 0 to 256
[  184.418737][ T5865] CPU: 0 PID: 5865 Comm: syz.1.554 Not tainted 5.15.164-syzkaller #0
[  184.426846][ T5865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[  184.437020][ T5865] Call Trace:
[  184.441017][ T5865]  <TASK>
[  184.444468][ T5865]  dump_stack_lvl+0x1e3/0x2d0
[  184.449182][ T5865]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[  184.454915][ T5865]  ? panic+0x860/0x860
[  184.459081][ T5865]  ? snprintf+0xd6/0x120
[  184.463326][ T5865]  should_fail+0x38a/0x4c0
[  184.467757][ T5865]  _copy_to_user+0x2d/0x130
[  184.472278][ T5865]  simple_read_from_buffer+0xc6/0x150
[  184.477844][ T5865]  proc_fail_nth_read+0x1a3/0x210
[  184.482884][ T5865]  ? proc_fault_inject_write+0x390/0x390
[  184.488522][ T5865]  ? fsnotify_perm+0x442/0x590
[  184.493374][ T5865]  ? proc_fault_inject_write+0x390/0x390
[  184.499029][ T5865]  vfs_read+0x2fc/0xe10
[  184.503196][ T5865]  ? kernel_read+0x1f0/0x1f0
[  184.507799][ T5865]  ? __fget_files+0x413/0x480
[  184.512776][ T5865]  ? mutex_lock_nested+0x17/0x20
[  184.518397][ T5865]  ? __fdget_pos+0x2cb/0x380
[  184.523264][ T5865]  ? ksys_read+0x77/0x2c0
[  184.527696][ T5865]  ksys_read+0x1a2/0x2c0
[  184.533007][ T5865]  ? print_irqtrace_events+0x210/0x210
[  184.538490][ T5865]  ? vfs_write+0xe50/0xe50
[  184.543185][ T5865]  ? syscall_enter_from_user_mode+0x2e/0x240
[  184.550849][ T5865]  ? lockdep_hardirqs_on+0x94/0x130
[  184.556139][ T5865]  ? syscall_enter_from_user_mode+0x2e/0x240
[  184.562477][ T5865]  do_syscall_64+0x3b/0xb0
[  184.566912][ T5865]  ? clear_bhb_loop+0x15/0x70
[  184.571607][ T5865]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  184.577518][ T5865] RIP: 0033:0x7f9c2aed943c
[  184.582034][ T5865] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8d 02 00 48
[  184.603028][ T5865] RSP: 002b:00007f9c29359040 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  184.611549][ T5865] RAX: ffffffffffffffda RBX: 00007f9c2b068f80 RCX: 00007f9c2aed943c
[  184.619633][ T5865] RDX: 000000000000000f RSI: 00007f9c293590b0 RDI: 0000000000000004
[  184.627617][ T5865] RBP: 00007f9c293590a0 R08: 0000000000000000 R09: 0000000000000000
[  184.635607][ T5865] R10: 0000000000000013 R11: 0000000000000246 R12: 0000000000000001
[  184.643094][ T5866] udc-core: couldn't find an available UDC or it's busy
[  184.643582][ T5865] R13: 000000000000000b R14: 00007f9c2b068f80 R15: 00007fff4ddec648
[  184.658483][ T5865]  </TASK>
[  184.661591][    C0] vkms_vblank_simulate: vblank timer overrun
[  184.662389][ T5866] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  185.224345][   T23] usb 1-1: USB disconnect, device number 11
[  185.436844][ T5864] loop3: detected capacity change from 0 to 8192
[  185.535955][ T5883] syz.0.557 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  185.776312][ T5883] loop0: detected capacity change from 0 to 32768
[  185.792726][ T5881] loop1: detected capacity change from 0 to 256
[  187.082665][ T5883] XFS: ikeep mount option is deprecated.
[  187.110737][ T5864] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  187.370072][ T5881] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xb75ad3fb, utbl_chksum : 0xe619d30d)
[  187.518805][ T5883] XFS (loop0): Mounting V5 Filesystem
[  187.741597][ T5907] netlink: 'syz.3.562': attribute type 29 has an invalid length.
[  187.838424][ T5907] netlink: 'syz.3.562': attribute type 29 has an invalid length.
[  187.916637][ T5883] XFS (loop0): Ending clean mount
[  187.936914][ T5883] XFS (loop0): Quotacheck needed: Please wait.
[  187.959649][ T5910] netlink: 'syz.3.562': attribute type 29 has an invalid length.
[  188.586193][ T5907] netlink: 'syz.3.562': attribute type 29 has an invalid length.
[  188.629999][ T5914] netlink: 'syz.3.562': attribute type 29 has an invalid length.
[  188.724035][ T5883] XFS (loop0): Quotacheck: Done.
[  188.805863][ T5919] xt_NFQUEUE: number of total queues is 0
[  188.816870][ T3569] XFS (loop0): Unmounting Filesystem
[  189.292028][   T23] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  189.334069][ T5926] loop1: detected capacity change from 0 to 4096
[  189.373022][ T5926] __ntfs_warning: 35 callbacks suppressed
[  189.373038][ T5926] ntfs: (device loop1): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  189.454798][ T5930] netlink: 184 bytes leftover after parsing attributes in process `syz.0.566'.
[  189.493640][ T5926] ntfs: (device loop1): read_ntfs_boot_sector(): Primary boot sector is invalid.
[  189.528221][ T5892] loop2: detected capacity change from 0 to 32768
[  189.532112][   T23] usb 4-1: Using ep0 maxpacket: 32
[  189.548416][ T5926] ntfs: (device loop1): is_boot_sector_ntfs(): Invalid boot sector checksum.
[  189.601700][ T5935] loop0: detected capacity change from 0 to 512
[  189.611283][ T5926] ntfs: (device loop1): read_ntfs_boot_sector(): Could not find a valid backup boot sector.
[  189.652864][ T5926] ntfs: (device loop1): ntfs_fill_super(): Not an NTFS volume.
[  189.765006][   T23] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  189.925649][ T5935] EXT4-fs warning (device loop0): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  189.939931][   T23] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  189.982107][   T23] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  189.990748][   T23] usb 4-1: Product: syz
[  190.012027][   T23] usb 4-1: Manufacturer: syz
[  190.018512][   T23] usb 4-1: SerialNumber: syz
[  190.027385][   T23] usb 4-1: config 0 descriptor??
[  190.052387][ T5924] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  190.225411][ T5935] EXT4-fs warning (device loop0): dx_probe:880: Enable large directory feature to access it
[  190.247511][ T5935] EXT4-fs warning (device loop0): dx_probe:965: inode #2: comm syz.0.571: Corrupt directory, running e2fsck is recommended
[  190.248481][ T5892] XFS (loop2): Mounting V5 Filesystem
[  190.277529][ T5924] udc-core: couldn't find an available UDC or it's busy
[  190.309722][ T5924] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  190.454663][ T5892] XFS (loop2): log mount failed
[  191.201585][ T5935] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2
[  191.242494][ T5935] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2213: inode #15: comm syz.0.571: corrupted in-inode xattr
[  191.297977][ T5960] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0
[  191.320972][ T5935] EXT4-fs (loop0): Remounting filesystem read-only
[  191.349654][ T5935] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.571: couldn't read orphan inode 15 (err -117)
[  191.367360][ T5935] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,nobarrier,init_itable,auto_da_alloc,grpjquota=.journal_async_commit,errors=remount-ro,jqfmt=vfsv1,grpid,,. Quota mode: writeback.
[  191.373937][ T5957] udc-core: couldn't find an available UDC or it's busy
[  191.472675][ T5957] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  191.504400][ T5957] udc-core: couldn't find an available UDC or it's busy
[  191.511911][ T5957] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  191.582237][ T3574] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  191.822186][ T3574] usb 5-1: Using ep0 maxpacket: 8
[  191.848989][ T5975] xt_NFQUEUE: number of total queues is 0
[  191.868125][ T5976] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  191.945592][ T3574] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  191.980485][ T3574] usb 5-1: New USB device found, idVendor=046d, idProduct=c295, bcdDevice= 0.00
[  192.012105][ T3574] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  192.033386][ T3574] usb 5-1: config 0 descriptor??
[  192.049418][ T5981] loop2: detected capacity change from 0 to 512
[  192.073633][ T3574] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[  192.117533][ T5981] EXT4-fs (loop2): 1 truncate cleaned up
[  192.124684][ T5981] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodelalloc,,errors=continue. Quota mode: none.
[  192.275938][ T5960] udc-core: couldn't find an available UDC or it's busy
[  192.292954][ T5960] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  192.350653][   T21] usb 5-1: USB disconnect, device number 18
[  192.452051][ T5252] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  192.539578][    T7] usb 4-1: USB disconnect, device number 12
[  193.232644][ T5252] usb 3-1: config 0 contains an unexpected descriptor of type 0x2, skipping
[  193.288997][ T5252] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  193.491467][ T5252] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 3
[  193.602166][ T5252] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 242, changing to 11
[  193.623233][ T5252] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  193.854684][ T5252] usb 3-1: New USB device found, idVendor=0f11, idProduct=1200, bcdDevice=35.3d
[  193.877105][ T5252] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  193.894856][ T5252] usb 3-1: Product: syz
[  193.901536][ T5252] usb 3-1: Manufacturer: syz
[  193.914836][ T5252] usb 3-1: SerialNumber: syz
[  193.923804][ T6009] netlink: 'syz.1.591': attribute type 29 has an invalid length.
[  193.943143][ T5252] usb 3-1: config 0 descriptor??
[  193.961143][ T6009] netlink: 'syz.1.591': attribute type 29 has an invalid length.
[  194.007482][ T5252] ldusb 3-1:0.0: Interrupt in endpoint not found
[  194.028869][ T6010] loop1: detected capacity change from 0 to 2048
[  194.147899][ T6014] xt_NFQUEUE: number of total queues is 0
[  194.174688][ T6010] EXT4-fs (loop1): Ignoring removed oldalloc option
[  194.202229][ T6010] EXT4-fs (loop1): Unrecognized mount option "appraise_type=imasig" or missing value
[  194.254899][ T1389] ieee802154 phy0 wpan0: encryption failed: -22
[  194.261308][ T1389] ieee802154 phy1 wpan1: encryption failed: -22
[  194.306016][ T3614] usb 3-1: USB disconnect, device number 19
[  194.354215][ T6009] netlink: 'syz.1.591': attribute type 29 has an invalid length.
[  194.396572][ T6009] netlink: 'syz.1.591': attribute type 29 has an invalid length.
[  194.477491][ T6020] FAULT_INJECTION: forcing a failure.
[  194.477491][ T6020] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  194.532885][ T6010] device bond1 entered promiscuous mode
[  194.549340][ T6010] 8021q: adding VLAN 0 to HW filter on device bond1
[  194.557254][ T6020] CPU: 1 PID: 6020 Comm: syz.3.595 Not tainted 5.15.164-syzkaller #0
[  194.565677][ T6020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[  194.576451][ T6020] Call Trace:
[  194.579835][ T6020]  <TASK>
[  194.582779][ T6020]  dump_stack_lvl+0x1e3/0x2d0
[  194.587465][ T6020]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[  194.593100][ T6020]  ? panic+0x860/0x860
[  194.597186][ T6020]  ? __lock_acquire+0x1295/0x1ff0
[  194.602217][ T6020]  should_fail+0x38a/0x4c0
[  194.606643][ T6020]  prepare_alloc_pages+0x1db/0x5b0
[  194.611759][ T6020]  __alloc_pages+0x14f/0x700
[  194.616444][ T6020]  ? __rmqueue_pcplist+0x2030/0x2030
[  194.621733][ T6020]  ? mark_lock+0x98/0x340
[  194.626234][ T6020]  ? __lock_acquire+0x1295/0x1ff0
[  194.631350][ T6020]  alloc_pages_vma+0x39a/0x800
[  194.636293][ T6020]  wp_page_copy+0x221/0x2070
[  194.640886][ T6020]  ? __lock_acquire+0x1ff0/0x1ff0
[  194.646146][ T6020]  ? insert_page_into_pte_locked+0x540/0x540
[  194.652318][ T6020]  ? do_raw_spin_unlock+0x137/0x8b0
[  194.657711][ T6020]  ? _raw_spin_unlock+0x24/0x40
[  194.663274][ T6020]  ? do_wp_page+0x6d0/0xaf0
[  194.667797][ T6020]  handle_mm_fault+0x2a3d/0x5950
[  194.672795][ T6020]  ? numa_migrate_prep+0x1a0/0x1a0
[  194.678747][ T6020]  ? vmacache_find+0x23c/0x590
[  194.684638][ T6020]  exc_page_fault+0x271/0x700
[  194.689330][ T6020]  asm_exc_page_fault+0x22/0x30
[  194.694268][ T6020] RIP: 0033:0x7fd6f38ffc10
[  194.698876][ T6020] Code: 39 4f 08 72 4c 8d 4d ff 85 ed 74 33 66 0f 1f 44 00 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 47 0f b6 0c 08 45 84 c9 74 08 <45> 88 0c 00 49 8b 47 10 48 83 c0 01 49 89 47 10 83 e9 01 73 d3 41
[  194.718745][ T6020] RSP: 002b:00007fd6f1eb94b0 EFLAGS: 00010202
[  194.725891][ T6020] RAX: 0000000000004005 RBX: 00007fd6f1eb9550 RCX: 0000000000000101
[  194.733887][ T6020] RDX: 00000000000509af RSI: 00000000000039b0 RDI: 00007fd6f1eb95f0
[  194.742302][ T6020] RBP: 0000000000000102 R08: 00007fd6e9a9a000 R09: 0000000000000004
[  194.752630][ T6020] R10: 0000000020000742 R11: 00000000000004a8 R12: 0000000000003001
[  194.760959][ T6020] R13: 00007fd6f3abc480 R14: 000000000000001b R15: 00007fd6f1eb95f0
[  194.769041][ T6020]  </TASK>
[  194.772140][    C1] vkms_vblank_simulate: vblank timer overrun
[  194.815740][ T6010] bond1 (unregistering): Released all slaves
[  194.862125][ T6020] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF
[  194.885178][ T6020] loop3: detected capacity change from 0 to 512
[  194.932363][   T21] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  195.030602][ T6020] EXT4-fs warning (device loop3): dx_probe:877: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  195.050789][ T6020] EXT4-fs warning (device loop3): dx_probe:880: Enable large directory feature to access it
[  195.062061][ T6020] EXT4-fs warning (device loop3): dx_probe:965: inode #2: comm syz.3.595: Corrupt directory, running e2fsck is recommended
[  195.098627][ T6020] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2
[  195.128919][ T6020] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2213: inode #15: comm syz.3.595: corrupted in-inode xattr
[  195.146696][ T6020] EXT4-fs (loop3): Remounting filesystem read-only
[  195.162146][ T6020] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.595: couldn't read orphan inode 15 (err -117)
[  195.178350][ T6020] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_lock,noblock_validity,nobarrier,init_itable,auto_da_alloc,grpjquota=.journal_async_commit,errors=remount-ro,jqfmt=vfsv1,grpid,,. Quota mode: writeback.
[  195.183096][   T21] usb 5-1: Using ep0 maxpacket: 32
[  195.372282][   T21] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  196.212355][   T21] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  196.226315][   T21] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  196.249594][   T21] usb 5-1: Product: syz
[  196.261425][   T21] usb 5-1: Manufacturer: syz
[  196.264294][ T6036] loop3: detected capacity change from 0 to 128
[  196.270896][   T21] usb 5-1: SerialNumber: syz
[  196.291792][   T21] usb 5-1: config 0 descriptor??
[  196.322293][ T6022] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  196.611399][ T6046] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  196.633899][ T6046] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  196.675545][ T6052] udc-core: couldn't find an available UDC or it's busy
[  196.689745][ T6052] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  197.226932][ T5252] usb 5-1: USB disconnect, device number 19
[  197.336886][ T6055] xt_NFQUEUE: number of total queues is 0
[  197.452617][ T6051] loop3: detected capacity change from 0 to 32768
[  197.503229][ T6051] gfs2: Unknown parameter 'igòùre_local_fs'
[  197.902067][   T21] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  198.037076][ T6070] loop3: detected capacity change from 0 to 256
[  198.232322][   T21] usb 2-1: Using ep0 maxpacket: 8
[  199.093719][ T6081] loop0: detected capacity change from 0 to 128
[  199.152396][   T21] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  199.171790][   T21] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  199.192580][   T21] usb 2-1: Product: syz
[  199.196868][   T21] usb 2-1: Manufacturer: syz
[  199.257020][   T21] usb 2-1: SerialNumber: syz
[  199.287015][   T21] usb 2-1: config 0 descriptor??
[  199.536043][ T6090] loop3: detected capacity change from 0 to 8
[  199.562149][ T5252] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  199.593636][   T21] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  199.729753][ T6095] loop0: detected capacity change from 0 to 8
[  199.832132][ T5252] usb 3-1: Using ep0 maxpacket: 32
[  199.876997][ T6095] SQUASHFS error: zlib decompression failed, data probably corrupt
[  199.886703][ T6095] SQUASHFS error: Failed to read block 0x9b: -5
[  199.893575][ T6095] SQUASHFS error: Unable to read metadata cache entry [99]
[  199.900838][ T6095] SQUASHFS error: Unable to read inode 0x127
[  199.992368][ T5252] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  200.096301][ T6095] loop0: detected capacity change from 0 to 1024
[  200.212387][ T5252] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  200.246441][ T5252] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  200.260928][ T6097] xt_NFQUEUE: number of total queues is 0
[  200.281564][ T5252] usb 3-1: Product: syz
[  200.292051][ T5252] usb 3-1: Manufacturer: syz
[  200.312982][ T5252] usb 3-1: SerialNumber: syz
[  200.349436][ T5252] usb 3-1: config 0 descriptor??
[  200.383279][ T6086] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  200.914255][ T5194] usb 3-1: USB disconnect, device number 20
[  201.955623][ T6131] tun0: tun_chr_ioctl cmd 21731
[  202.072255][   T21] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71
[  202.133084][   T21] usb 2-1: USB disconnect, device number 16
[  202.244038][ T6136] loop2: detected capacity change from 0 to 256
[  202.327442][ T6136] exFAT-fs (loop2): failed to load alloc-bitmap
[  202.360509][ T6136] exFAT-fs (loop2): failed to recognize exfat type
[  202.603925][ T6136] loop2: detected capacity change from 0 to 8
[  202.739202][ T6136] SQUASHFS error: lzo decompression failed, data probably corrupt
[  202.801584][ T6136] SQUASHFS error: Failed to read block 0x91: -5
[  202.812234][ T6136] SQUASHFS error: Unable to read metadata cache entry [8f]
[  202.821577][ T6136] SQUASHFS error: Unable to read inode 0x11f
[  203.197980][ T6133] loop3: detected capacity change from 0 to 32768
[  203.470749][ T6133] XFS (loop3): Mounting V5 Filesystem
[  203.561392][ T6133] XFS (loop3): Ending clean mount
[  203.786906][ T6162] xt_NFQUEUE: number of total queues is 0
[  203.919966][ T5257] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x39/0xc0, xfs_bnobt block 0x4 
[  203.946870][ T5257] XFS (loop3): Unmount and run xfs_repair
[  203.965454][ T5257] XFS (loop3): First 128 bytes of corrupted metadata buffer:
[  203.986799][ T5257] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff  AB3B............
[  203.999711][ T5257] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10  ................
[  204.010451][ T5257] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a  .7.nt.N..._.'K.:
[  204.026416][ T5257] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01  .....;%.........
[  204.026425][ T3570] XFS (loop3): Unmounting Filesystem
[  204.041212][ T5257] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0  ........... ....
[  204.060535][ T5257] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  204.077077][ T5257] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  204.097542][ T5257] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  204.114136][   T21] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x26e/0x370" at daddr 0x4 len 4 error 74
[  204.161218][   T21] XFS (loop3): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x1750/0x1df0 (fs/xfs/libxfs/xfs_defer.c:504).  Shutting down filesystem.
[  204.202538][   T21] XFS (loop3): Please unmount the filesystem and rectify the problem(s)
[  204.368694][ T6170] loop2: detected capacity change from 0 to 128
[  204.431127][ T6173] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 0, id = 0
[  204.609549][ T6175] FAULT_INJECTION: forcing a failure.
[  204.609549][ T6175] name failslab, interval 1, probability 0, space 0, times 0
[  204.652401][ T6175] CPU: 1 PID: 6175 Comm: syz.4.637 Not tainted 5.15.164-syzkaller #0
[  204.660504][ T6175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[  204.670563][ T6175] Call Trace:
[  204.674310][ T6175]  <TASK>
[  204.677276][ T6175]  dump_stack_lvl+0x1e3/0x2d0
[  204.682060][ T6175]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[  204.687780][ T6175]  ? panic+0x860/0x860
[  204.691963][ T6175]  ? __might_sleep+0xc0/0xc0
[  204.696539][ T6175]  ? __sk_dst_check+0x142/0x280
[  204.701504][ T6175]  should_fail+0x38a/0x4c0
[  204.705935][ T6175]  should_failslab+0x5/0x20
[  204.710435][ T6175]  slab_pre_alloc_hook+0x53/0xc0
[  204.715379][ T6175]  kmem_cache_alloc_node+0x49/0x2c0
[  204.720597][ T6175]  ? __alloc_skb+0xdd/0x590
[  204.725107][ T6175]  __alloc_skb+0xdd/0x590
[  204.729563][ T6175]  sk_stream_alloc_skb+0x1fc/0xac0
[  204.734683][ T6175]  tcp_connect+0x164e/0x4880
[  204.739288][ T6175]  ? ktime_get_with_offset+0x2cb/0x320
[  204.745169][ T6175]  ? secure_tcp_ts_off+0xb7/0x180
[  204.750347][ T6175]  ? prandom_u32+0x218/0x260
[  204.754940][ T6175]  tcp_v4_connect+0x10db/0x1b10
[  204.760064][ T6175]  ? tcp_twsk_unique+0xa90/0xa90
[  204.765099][ T6175]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  204.771075][ T6175]  __inet_stream_connect+0x254/0xe50
[  204.776355][ T6175]  ? __local_bh_enable_ip+0x164/0x1f0
[  204.781707][ T6175]  ? lockdep_hardirqs_on+0x94/0x130
[  204.786908][ T6175]  ? inet_dgram_connect+0x400/0x400
[  204.792115][ T6175]  ? __local_bh_enable_ip+0x164/0x1f0
[  204.797470][ T6175]  ? inet_stream_connect+0x4c/0xa0
[  204.802654][ T6175]  ? _local_bh_enable+0xa0/0xa0
[  204.807512][ T6175]  inet_stream_connect+0x61/0xa0
[  204.812470][ T6175]  kernel_connect+0x103/0x150
[  204.817158][ T6175]  ? kernel_accept+0x410/0x410
[  204.821990][ T6175]  smc_connect+0x4d6/0x910
[  204.826519][ T6175]  ? smc_bind+0x2d0/0x2d0
[  204.830883][ T6175]  __sys_connect+0x38b/0x410
[  204.835482][ T6175]  ? __sys_connect_file+0x170/0x170
[  204.840691][ T6175]  ? syscall_enter_from_user_mode+0x2e/0x240
[  204.847542][ T6175]  ? lockdep_hardirqs_on+0x94/0x130
[  204.852795][ T6175]  __x64_sys_connect+0x76/0x80
[  204.857723][ T6175]  do_syscall_64+0x3b/0xb0
[  204.862138][ T6175]  ? clear_bhb_loop+0x15/0x70
[  204.866804][ T6175]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  204.872783][ T6175] RIP: 0033:0x7f4f034ca9f9
[  204.877211][ T6175] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  204.897091][ T6175] RSP: 002b:00007f4f01949048 EFLAGS: 00000246 ORIG_RAX: 000000000000002a
[  204.905709][ T6175] RAX: ffffffffffffffda RBX: 00007f4f03658f80 RCX: 00007f4f034ca9f9
[  204.913677][ T6175] RDX: 0000000000000010 RSI: 0000000020000000 RDI: 0000000000000004
[  204.921671][ T6175] RBP: 00007f4f019490a0 R08: 0000000000000000 R09: 0000000000000000
[  204.929653][ T6175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  204.937981][ T6175] R13: 000000000000000b R14: 00007f4f03658f80 R15: 00007fff86f6e008
[  204.946278][ T6175]  </TASK>
[  205.033369][ T6174] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  205.167880][ T6186] loop2: detected capacity change from 0 to 512
[  205.207579][ T6186] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  205.290061][ T6186] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended
[  205.353732][ T6186] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002]
[  205.382146][ T5257] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  205.404708][ T6186] System zones: 0-2, 18-18, 34-34
[  205.436955][ T6186] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.638: bad orphan inode 15
[  205.455026][ T6186] ext4_test_bit(bit=14, block=18) = 1
[  205.460549][ T6186] is_bad_inode(inode)=0
[  205.467791][ T6186] NEXT_ORPHAN(inode)=2264924160
[  205.475341][ T6186] max_ino=32
[  205.478666][ T6186] i_nlink=0
[  205.482242][ T6186] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1061: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  205.505088][ T6186] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.638: bg 0: block 80: padding at end of block bitmap is not set
[  205.528565][ T6186] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6186: Corrupt filesystem
[  205.545054][ T6186] EXT4-fs (loop2): mounted filesystem without journal. Opts: resuid=0x0000000000000000,,errors=continue. Quota mode: none.
[  205.810935][ T6192] netlink: 152 bytes leftover after parsing attributes in process `syz.2.638'.
[  206.472381][ T5257] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  206.506157][ T5257] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  206.517526][ T6195] netlink: 8 bytes leftover after parsing attributes in process `syz.4.642'.
[  206.550656][ T6199] xt_NFQUEUE: number of total queues is 0
[  206.577602][    T7] Bluetooth: hci5: command 0x0406 tx timeout
[  206.632581][ T5257] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  206.652110][ T5257] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  206.674280][ T5257] usb 2-1: SerialNumber: syz
[  207.014258][ T6183] netlink: 'syz.1.639': attribute type 12 has an invalid length.
[  207.141599][ T6183] netlink: 132 bytes leftover after parsing attributes in process `syz.1.639'.
[  207.496216][ T6215] udc-core: couldn't find an available UDC or it's busy
[  207.567753][ T6215] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  207.591141][ T6183] netlink: 16 bytes leftover after parsing attributes in process `syz.1.639'.
[  207.626726][ T6183] loop1: detected capacity change from 0 to 512
[  207.847986][ T6183] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  207.982056][ T6183] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  208.050277][ T6183] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec018, mo2=0002]
[  208.089052][ T6229] FAULT_INJECTION: forcing a failure.
[  208.089052][ T6229] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  208.107389][ T6183] System zones: 1-12
[  208.146643][ T6183] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  208.169627][ T6183] EXT4-fs (loop1): 1 truncate cleaned up
[  208.178350][ T6183] EXT4-fs (loop1): mounted filesystem without journal. Opts: nogrpid,jqfmt=vfsv0,debug_want_extra_isize=0x0000000000000068,debug,max_dir_size_kb=0x0000000000000005,quota,,errors=continue. Quota mode: writeback.
[  208.230635][ T6229] CPU: 0 PID: 6229 Comm: syz.4.650 Not tainted 5.15.164-syzkaller #0
[  208.238875][ T6229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[  208.248939][ T6229] Call Trace:
[  208.252227][ T6229]  <TASK>
[  208.255163][ T6229]  dump_stack_lvl+0x1e3/0x2d0
[  208.259856][ T6229]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[  208.265492][ T6229]  ? panic+0x860/0x860
[  208.269590][ T6229]  should_fail+0x38a/0x4c0
[  208.274025][ T6229]  _copy_from_user+0x2d/0x170
[  208.278739][ T6229]  ___sys_recvmsg+0x150/0x690
[  208.283638][ T6229]  ? __sys_recvmsg+0x260/0x260
[  208.288446][ T6229]  ? __might_fault+0xb4/0x110
[  208.293275][ T6229]  do_recvmmsg+0x36f/0x8f0
[  208.298086][ T6229]  ? __sys_recvmmsg+0x270/0x270
[  208.302969][ T6229]  ? __lock_acquire+0x1ff0/0x1ff0
[  208.308978][ T6229]  __x64_sys_recvmmsg+0x195/0x240
[  208.314382][ T6229]  ? do_recvmmsg+0x8f0/0x8f0
[  208.318994][ T6229]  ? syscall_enter_from_user_mode+0x2e/0x240
[  208.325701][ T6229]  ? lockdep_hardirqs_on+0x94/0x130
[  208.331795][ T6229]  ? syscall_enter_from_user_mode+0x2e/0x240
[  208.338385][ T6229]  do_syscall_64+0x3b/0xb0
[  208.342992][ T6229]  ? clear_bhb_loop+0x15/0x70
[  208.347705][ T6229]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  208.354247][ T6229] RIP: 0033:0x7f4f034ca9f9
[  208.358769][ T6229] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  208.379231][ T6229] RSP: 002b:00007f4f01949048 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  208.387692][ T6229] RAX: ffffffffffffffda RBX: 00007f4f03658f80 RCX: 00007f4f034ca9f9
[  208.395763][ T6229] RDX: 0000000000000a0d RSI: 00000000200066c0 RDI: 0000000000000004
[  208.403745][ T6229] RBP: 00007f4f019490a0 R08: 0000000000000000 R09: 0000000000000000
[  208.411724][ T6229] R10: 00000000000000f0 R11: 0000000000000246 R12: 0000000000000002
[  208.419707][ T6229] R13: 000000000000000b R14: 00007f4f03658f80 R15: 00007fff86f6e008
[  208.427791][ T6229]  </TASK>
[  208.929081][ T5257] usb 2-1: 0:2 : does not exist
[  208.937478][ T5257] usb 2-1: unit 56 not found!
[  208.960476][ T5257] usb 2-1: unit 52 not found!
[  208.994071][ T5257] usb 2-1: unit 54 not found!
[  209.029142][ T5257] usb 2-1: unit 55 not found!
[  209.032788][ T6267] xt_NFQUEUE: number of total queues is 0
[  209.051660][ T5257] usb 2-1: unit 48 not found!
[  209.069191][ T5257] usb 2-1: unit 51 not found!
[  209.085105][ T5257] usb 2-1: unit 57 not found!
[  209.105485][ T5257] usb 2-1: unit 53 not found!
[  209.131095][ T5257] usb 2-1: unit 49 not found!
[  209.159444][ T5257] usb 2-1: unit 3 not found!
[  209.251183][ T5257] usb 2-1: USB disconnect, device number 17
[  209.700220][ T5194] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[  209.882804][ T5257] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  209.952047][ T5194] usb 5-1: Using ep0 maxpacket: 32
[  210.072374][ T5194] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  210.142072][ T5257] usb 2-1: Using ep0 maxpacket: 32
[  210.241866][ T6292] loop2: detected capacity change from 0 to 32768
[  210.252459][ T5194] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  210.269118][ T5194] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  210.281657][ T5194] usb 5-1: Product: syz
[  210.287693][ T5257] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  210.291213][ T5194] usb 5-1: Manufacturer: syz
[  210.306104][ T5194] usb 5-1: SerialNumber: syz
[  210.315882][ T5194] usb 5-1: config 0 descriptor??
[  210.316409][ T5257] usb 2-1: config 0 has no interface number 0
[  210.332417][ T6281] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  210.345278][ T5257] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  210.359320][ T5257] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  210.370089][ T5257] usb 2-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00
[  210.379616][ T5257] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  210.396030][ T6292] XFS (loop2): Mounting V5 Filesystem
[  210.408478][ T5257] usb 2-1: config 0 descriptor??
[  210.428146][ T6300] loop3: detected capacity change from 0 to 32768
[  210.482961][ T6300] XFS: attr2 mount option is deprecated.
[  210.505124][ T6292] XFS (loop2): Corruption warning: Metadata has LSN (1:384) ahead of current LSN (1:256). Please unmount and run xfs_repair (>= v4.3) to resolve.
[  210.522910][ T6292] XFS (loop2): log mount/recovery failed: error -22
[  210.547915][ T6292] XFS (loop2): log mount failed
[  210.572530][ T6300] XFS (loop3): Mounting V5 Filesystem
[  210.646391][ T6300] XFS (loop3): Ending clean mount
[  210.653545][ T6317] udc-core: couldn't find an available UDC or it's busy
[  210.664120][ T6317] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  210.671312][ T6300] XFS (loop3): Quotacheck needed: Please wait.
[  210.710948][ T6300] XFS (loop3): Quotacheck: Done.
[  210.816367][ T3570] XFS (loop3): Unmounting Filesystem
[  210.919932][ T6320] FAULT_INJECTION: forcing a failure.
[  210.919932][ T6320] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  210.942469][ T6320] CPU: 1 PID: 6320 Comm: syz.2.665 Not tainted 5.15.164-syzkaller #0
[  210.951533][ T6320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[  210.961704][ T6320] Call Trace:
[  210.965175][ T6320]  <TASK>
[  210.968308][ T6320]  dump_stack_lvl+0x1e3/0x2d0
[  210.973088][ T6320]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[  210.979259][ T6320]  ? panic+0x860/0x860
[  210.983710][ T6320]  should_fail+0x38a/0x4c0
[  210.988147][ T6320]  _copy_from_user+0x2d/0x170
[  210.993352][ T6320]  __se_sys_mount+0x179/0x3c0
[  210.999016][ T6320]  ? print_irqtrace_events+0x210/0x210
[  211.004566][ T6320]  ? __x64_sys_mount+0xc0/0xc0
[  211.009500][ T6320]  ? syscall_enter_from_user_mode+0x2e/0x240
[  211.015913][ T6320]  ? lockdep_hardirqs_on+0x94/0x130
[  211.021215][ T6320]  ? __x64_sys_mount+0x1c/0xc0
[  211.026345][ T6320]  do_syscall_64+0x3b/0xb0
[  211.030774][ T6320]  ? clear_bhb_loop+0x15/0x70
[  211.035456][ T6320]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  211.041391][ T6320] RIP: 0033:0x7f801e30e9f9
[  211.045836][ T6320] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  211.065711][ T6320] RSP: 002b:00007f801c78d048 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  211.074630][ T6320] RAX: ffffffffffffffda RBX: 00007f801e49cf80 RCX: 00007f801e30e9f9
[  211.082814][ T6320] RDX: 0000000020000180 RSI: 0000000020000140 RDI: 0000000000000000
[  211.092383][ T6320] RBP: 00007f801c78d0a0 R08: 00000000200003c0 R09: 0000000000000000
[  211.100653][ T6320] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  211.109325][ T6320] R13: 000000000000000b R14: 00007f801e49cf80 R15: 00007fffd2c47e38
[  211.117496][ T6320]  </TASK>
[  211.125988][ T5257] uclogic 0003:28BD:0094.0003: pen parameters not found
[  211.137939][ T5257] uclogic 0003:28BD:0094.0003: interface is invalid, ignoring
[  211.153829][ T3562] udevd[3562]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  211.191782][ T5257] usb 5-1: USB disconnect, device number 20
[  211.333651][ T6279] udc-core: couldn't find an available UDC or it's busy
[  211.353064][ T6279] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  211.408947][ T3645] usb 2-1: USB disconnect, device number 18
[  211.523488][ T6328] xt_NFQUEUE: number of total queues is 0
[  211.588035][ T6325] netlink: 'syz.4.667': attribute type 4 has an invalid length.
[  211.914114][ T6336] xt_NFQUEUE: number of total queues is 0
[  212.002945][ T6337] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  213.160517][ T6356] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  213.555062][ T6364] loop3: detected capacity change from 0 to 512
[  213.671871][ T6364] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  213.712099][ T6364] ext4 filesystem being mounted at /130/file0 supports timestamps until 2038 (0x7fffffff)
[  213.789646][ T6364] FAULT_INJECTION: forcing a failure.
[  213.789646][ T6364] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  213.804090][ T6364] CPU: 0 PID: 6364 Comm: syz.3.675 Not tainted 5.15.164-syzkaller #0
[  213.812463][ T6364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[  213.822607][ T6364] Call Trace:
[  213.825990][ T6364]  <TASK>
[  213.828925][ T6364]  dump_stack_lvl+0x1e3/0x2d0
[  213.833983][ T6364]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[  213.839898][ T6364]  ? panic+0x860/0x860
[  213.844529][ T6364]  should_fail+0x38a/0x4c0
[  213.849662][ T6364]  strncpy_from_user+0x32/0x370
[  213.854619][ T6364]  getname_flags+0xf5/0x4e0
[  213.859298][ T6364]  __x64_sys_linkat+0xc5/0xf0
[  213.864202][ T6364]  do_syscall_64+0x3b/0xb0
[  213.868650][ T6364]  ? clear_bhb_loop+0x15/0x70
[  213.873348][ T6364]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  213.880125][ T6364] RIP: 0033:0x7fd6f3a3b9f9
[  213.884961][ T6364] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  213.905120][ T6364] RSP: 002b:00007fd6f1eba048 EFLAGS: 00000246 ORIG_RAX: 0000000000000109
[  213.913641][ T6364] RAX: ffffffffffffffda RBX: 00007fd6f3bc9f80 RCX: 00007fd6f3a3b9f9
[  213.921630][ T6364] RDX: ffffffffffffff9c RSI: 00000000200004c0 RDI: ffffffffffffff9c
[  213.930403][ T6364] RBP: 00007fd6f1eba0a0 R08: 0000000000000000 R09: 0000000000000000
[  213.938480][ T6364] R10: 0000000020000500 R11: 0000000000000246 R12: 0000000000000001
[  213.946565][ T6364] R13: 000000000000000b R14: 00007fd6f3bc9f80 R15: 00007ffc10896a18
[  213.954721][ T6364]  </TASK>
[  214.191069][ T6370] loop1: detected capacity change from 0 to 8192
[  214.234567][ T6374] loop3: detected capacity change from 0 to 1024
[  214.317114][ T6374] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000088,resuid=0x0000000000000000,max_batch_time=0x0000000000000003,lazytime,usrquota,data_err=abort,data_err=abort,noquota,,errors=continue. Quota mode: writeback.
[  214.401028][ T6334] loop2: detected capacity change from 0 to 65536
[  214.449439][ T6370] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 0)
[  214.518393][ T6370] FAT-fs (loop1): Filesystem has been set read-only
[  214.609326][ T6334] XFS (loop2): Mounting V5 Filesystem
[  214.790464][ T6334] XFS (loop2): Ending clean mount
[  214.908210][ T3579] XFS (loop2): Unmounting Filesystem
[  215.074454][ T6398] loop1: detected capacity change from 0 to 128
[  216.152257][ T3614] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  216.343023][ T6415] xt_NFQUEUE: number of total queues is 0
[  216.472665][ T6417] loop2: detected capacity change from 0 to 8192
[  216.482235][ T3614] usb 5-1: Using ep0 maxpacket: 8
[  216.489235][ T6422] FAULT_INJECTION: forcing a failure.
[  216.489235][ T6422] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  216.529884][ T6422] CPU: 1 PID: 6422 Comm: syz.1.689 Not tainted 5.15.164-syzkaller #0
[  216.538201][ T6422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[  216.548271][ T6422] Call Trace:
[  216.551557][ T6422]  <TASK>
[  216.554483][ T6422]  dump_stack_lvl+0x1e3/0x2d0
[  216.559167][ T6422]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[  216.564800][ T6422]  ? panic+0x860/0x860
[  216.568884][ T6422]  should_fail+0x38a/0x4c0
[  216.573305][ T6422]  prepare_alloc_pages+0x1db/0x5b0
[  216.578530][ T6422]  __alloc_pages+0x14f/0x700
[  216.583313][ T6422]  ? __rmqueue_pcplist+0x2030/0x2030
[  216.588612][ T6422]  ? count_memcg_event_mm+0x385/0x3e0
[  216.593994][ T6422]  ? remove_device_exclusive_entry+0xbf0/0xbf0
[  216.600154][ T6422]  alloc_pages_vma+0x39a/0x800
[  216.605373][ T6422]  handle_mm_fault+0x2f49/0x5950
[  216.610341][ T6422]  ? numa_migrate_prep+0x1a0/0x1a0
[  216.615473][ T6422]  ? vmacache_find+0x4f9/0x590
[  216.620329][ T6422]  ? vmacache_update+0x9f/0xf0
[  216.625094][ T6422]  exc_page_fault+0x271/0x700
[  216.629782][ T6422]  asm_exc_page_fault+0x22/0x30
[  216.634631][ T6422] RIP: 0010:copy_user_enhanced_fast_string+0xe/0x40
[  216.641222][ T6422] Code: 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 0f 1f 80 00 00 00 00 0f 01 cb 83 fa 40 0f 82 70 ff ff ff 89 d1 <f3> a4 31 c0 0f 01 ca c3 66 2e 0f 1f 84 00 00 00 00 00 89 d1 83 f8
[  216.661003][ T6422] RSP: 0018:ffffc9000341f518 EFLAGS: 00050202
[  216.667073][ T6422] RAX: ffffffff8406dc01 RBX: ffff888078ccc3e1 RCX: 0000000000000157
[  216.675042][ T6422] RDX: 0000000000000197 RSI: ffff888078ccc421 RDI: 0000000020001000
[  216.683014][ T6422] RBP: ffffc9000341f670 R08: dffffc0000000000 R09: ffffed100f1998af
[  216.691071][ T6422] R10: 0000000000000007 R11: dffffc0000000001 R12: 00007ffffffff000
[  216.699218][ T6422] R13: 0000000020000fc0 R14: 0000000000000197 R15: 0000000000000000
[  216.707197][ T6422]  ? _copy_to_iter+0x211/0xea0
[  216.712084][ T6422]  _copy_to_iter+0x31c/0xea0
[  216.716881][ T6422]  ? iov_iter_init+0x170/0x170
[  216.721857][ T6422]  ? __virt_addr_valid+0x3bb/0x460
[  216.727077][ T6422]  ? __phys_addr_symbol+0x2b/0x70
[  216.732096][ T6422]  ? 0xffffffff81000000
[  216.736254][ T6422]  ? __check_object_size+0x300/0x410
[  216.741826][ T6422]  __skb_datagram_iter+0xdd/0x7c0
[  216.747209][ T6422]  ? skb_copy_datagram_iter+0x210/0x210
[  216.752850][ T6422]  skb_copy_datagram_iter+0xbb/0x210
[  216.758227][ T6422]  netlink_recvmsg+0x2bb/0x1190
[  216.763621][ T6422]  ? netlink_sendmsg+0xd60/0xd60
[  216.768654][ T6422]  ? aa_af_perm+0x350/0x350
[  216.773168][ T6422]  ? bpf_lsm_socket_recvmsg+0x5/0x10
[  216.778456][ T6422]  ? security_socket_recvmsg+0x86/0xb0
[  216.783915][ T6422]  ? netlink_sendmsg+0xd60/0xd60
[  216.788956][ T6422]  ____sys_recvmsg+0x286/0x530
[  216.794039][ T6422]  ? __sys_recvmsg_sock+0x40/0x40
[  216.799203][ T6422]  ___sys_recvmsg+0x1ec/0x690
[  216.803977][ T6422]  ? __sys_recvmsg+0x260/0x260
[  216.808891][ T6422]  ? __fdget+0x191/0x220
[  216.813143][ T6422]  ? do_recvmmsg+0x172/0x8f0
[  216.817750][ T6422]  do_recvmmsg+0x36f/0x8f0
[  216.822262][ T6422]  ? __lock_acquire+0x1ff0/0x1ff0
[  216.827497][ T6422]  ? __sys_recvmmsg+0x270/0x270
[  216.832362][ T6422]  ? __might_fault+0xb4/0x110
[  216.837065][ T6422]  ? __lock_acquire+0x1ff0/0x1ff0
[  216.842203][ T6422]  ? timespec64_add_safe+0x220/0x220
[  216.847596][ T6422]  __x64_sys_recvmmsg+0x1b4/0x240
[  216.852771][ T6422]  ? do_recvmmsg+0x8f0/0x8f0
[  216.857379][ T6422]  ? syscall_enter_from_user_mode+0x2e/0x240
[  216.863383][ T6422]  ? lockdep_hardirqs_on+0x94/0x130
[  216.868585][ T6422]  ? syscall_enter_from_user_mode+0x2e/0x240
[  216.874572][ T6422]  do_syscall_64+0x3b/0xb0
[  216.878990][ T6422]  ? clear_bhb_loop+0x15/0x70
[  216.883667][ T6422]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  216.889566][ T6422] RIP: 0033:0x7f9c2aeda9f9
[  216.893984][ T6422] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  216.913761][ T6422] RSP: 002b:00007f9c29359048 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  216.922181][ T6422] RAX: ffffffffffffffda RBX: 00007f9c2b068f80 RCX: 00007f9c2aeda9f9
[  216.930323][ T6422] RDX: 04000000000003b4 RSI: 00000000200037c0 RDI: 0000000000000003
[  216.938306][ T6422] RBP: 00007f9c293590a0 R08: 0000000020003700 R09: 0000000000000000
[  216.946287][ T6422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  216.954260][ T6422] R13: 000000000000000b R14: 00007f9c2b068f80 R15: 00007fff4ddec648
[  216.962248][ T6422]  </TASK>
[  217.061009][ T6428] loop0: detected capacity change from 0 to 256
[  217.127175][ T6417] REISERFS warning (device loop2): super-6502 reiserfs_getopt: unknown mount option "dont_hash"
[  217.174796][ T6428] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  217.292593][ T3614] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  217.322037][ T3614] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  217.340382][ T3614] usb 5-1: Product: syz
[  217.349875][ T3614] usb 5-1: Manufacturer: syz
[  217.362094][ T3614] usb 5-1: SerialNumber: syz
[  217.381717][ T3614] usb 5-1: config 0 descriptor??
[  217.652275][ T3614] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  217.852457][ T6439] loop2: detected capacity change from 0 to 2048
[  218.240568][ T6439] hpfs: filesystem error: improperly stopped; already mounted read-only
[  218.260132][ T6439] hpfs: filesystem error: sector(s) 'dir_band_bitmap' badly placed at 7b318cc4
[  219.772303][ T3614] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -71
[  219.812398][ T3614] usb 5-1: USB disconnect, device number 21
[  220.272068][ T5257] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  220.275426][ T6468] netlink: 'syz.0.703': attribute type 10 has an invalid length.
[  220.372205][ T3611] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  220.428907][   T26] audit: type=1326 audit(1722716095.412:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6472 comm="syz.1.705" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9c2aeda9f9 code=0x0
[  220.552509][ T5257] usb 3-1: Using ep0 maxpacket: 8
[  220.620890][ T6476] netlink: 4 bytes leftover after parsing attributes in process `syz.4.704'.
[  220.630563][ T6476] netlink: 4 bytes leftover after parsing attributes in process `syz.4.704'.
[  220.976545][ T6477] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  220.992301][ T3611] usb 4-1: Using ep0 maxpacket: 32
[  221.022305][ T5257] usb 3-1: config 135 has an invalid interface number: 230 but max is 0
[  221.036051][ T5257] usb 3-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config
[  221.049057][ T5257] usb 3-1: config 135 has no interface number 0
[  221.059470][ T5257] usb 3-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  221.080716][ T6475] loop1: detected capacity change from 0 to 32768
[  221.111894][ T6475] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.705 (6475)
[  221.123026][ T3611] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  221.179253][ T6475] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  221.205194][ T6475] BTRFS info (device loop1): max_inline at 8
[  221.225817][ T6475] BTRFS info (device loop1): setting nodatacow, compression disabled
[  221.246801][ T6475] BTRFS info (device loop1): enabling auto defrag
[  221.265155][ T6475] BTRFS info (device loop1): enabling ssd optimizations
[  221.282681][ T5257] usb 3-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a
[  221.285118][ T6475] BTRFS info (device loop1): doing ref verification
[  221.301093][ T5257] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  221.319672][ T6475] BTRFS info (device loop1): using free space tree
[  221.330062][ T5257] usb 3-1: Product: syz
[  221.334874][ T3611] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  221.339925][ T6475] BTRFS info (device loop1): has skinny extents
[  221.351984][ T5257] usb 3-1: Manufacturer: syz
[  221.356842][ T3611] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  221.375661][ T5257] usb 3-1: SerialNumber: syz
[  221.395718][ T3611] usb 4-1: Product: syz
[  221.416316][ T3611] usb 4-1: Manufacturer: syz
[  221.423835][ T3611] usb 4-1: SerialNumber: syz
[  221.478683][ T5257] usb 3-1: Found UVC 0.00 device syz (18ec:3288)
[  221.517917][ T3611] usb 4-1: config 0 descriptor??
[  221.532759][ T5257] usb 3-1: No valid video chain found.
[  221.582340][ T6461] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  221.758129][ T4038] usb 3-1: USB disconnect, device number 21
[  221.903666][ T6506] udc-core: couldn't find an available UDC or it's busy
[  221.932259][ T6506] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  222.488858][   T21] usb 4-1: USB disconnect, device number 13
[  222.682151][ T3614] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  222.926385][ T3614] usb 5-1: Using ep0 maxpacket: 8
[  223.202463][ T3614] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  223.219316][ T3614] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  223.252438][ T3614] usb 5-1: Product: syz
[  223.271472][ T3614] usb 5-1: Manufacturer: syz
[  223.290258][ T3614] usb 5-1: SerialNumber: syz
[  223.335067][ T3614] usb 5-1: config 0 descriptor??
[  223.617029][ T3614] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  224.023074][ T6532] loop2: detected capacity change from 0 to 32768
[  224.157098][ T6532] XFS (loop2): Mounting V5 Filesystem
[  224.249425][ T6532] XFS (loop2): Ending clean mount
[  224.589366][ T6550] devtmpfs: Bad value for 'mpol'
[  224.796790][ T3579] XFS (loop2): Unmounting Filesystem
[  225.348503][ T6557] loop3: detected capacity change from 0 to 128
[  225.427847][ T6553] loop2: detected capacity change from 0 to 65536
[  225.647337][ T6553] XFS (loop2): Mounting V5 Filesystem
[  225.829960][ T6553] XFS (loop2): Ending clean mount
[  225.984630][   T21] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  226.027746][ T6579] loop3: detected capacity change from 0 to 16
[  226.082290][ T3614] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -71
[  226.095760][ T3614] usb 5-1: USB disconnect, device number 22
[  226.127608][ T6579] erofs: (device loop3): erofs_read_superblock: blkszbits 9 isn't supported on this platform
[  226.219584][ T3579] XFS (loop2): Unmounting Filesystem
[  226.252669][   T21] usb 2-1: Using ep0 maxpacket: 32
[  226.372338][   T21] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  226.542352][   T21] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  226.551763][   T21] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  226.560612][   T21] usb 2-1: Product: syz
[  226.565531][   T21] usb 2-1: Manufacturer: syz
[  226.570239][   T21] usb 2-1: SerialNumber: syz
[  226.577453][   T21] usb 2-1: config 0 descriptor??
[  226.583358][   T23] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  226.602415][ T6566] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  226.825095][   T23] usb 4-1: Using ep0 maxpacket: 16
[  226.923709][ T6566] udc-core: couldn't find an available UDC or it's busy
[  226.930835][ T6566] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  226.952353][   T23] usb 4-1: config index 0 descriptor too short (expected 29663, got 36)
[  226.960755][   T23] usb 4-1: config 0 has an invalid descriptor of length 95, skipping remainder of the config
[  226.991723][   T23] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  227.022168][   T23] usb 4-1: New USB device found, idVendor=337d, idProduct=2c2e, bcdDevice= 0.00
[  227.031256][   T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  227.063659][   T23] usb 4-1: config 0 descriptor??
[  227.096855][ T6590] loop0: detected capacity change from 0 to 512
[  227.104093][   T23] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[  227.153984][ T6590] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  227.184924][ T6590] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13
[  227.206848][ T6590] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.729: invalid indirect mapped block 2683928664 (level 1)
[  227.227280][ T6590] EXT4-fs (loop0): Remounting filesystem read-only
[  227.234130][ T6590] EXT4-fs (loop0): 1 truncate cleaned up
[  227.240681][ T6590] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,dioread_nolock,errors=remount-ro,minixdf,jqfmt=vfsv0,usrjquota=.,. Quota mode: writeback.
[  227.337666][ T6590] EXT4-fs (loop0): Quota file not on filesystem root. Journaled quota will not work
[  227.453905][   T23] usb 2-1: USB disconnect, device number 19
[  227.532449][   T27] INFO: task syz.4.77:3952 blocked for more than 143 seconds.
[  227.549680][ T5194] usb 4-1: USB disconnect, device number 14
[  227.559547][   T27]       Not tainted 5.15.164-syzkaller #0
[  227.616392][   T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  227.626660][   T27] task:syz.4.77        state:D stack:25912 pid: 3952 ppid:  3571 flags:0x00004006
[  227.636648][   T27] Call Trace:
[  227.640034][   T27]  <TASK>
[  227.643431][   T27]  __schedule+0x12c4/0x45b0
[  227.648201][   T27]  ? release_firmware_map_entry+0x190/0x190
[  227.654358][   T27]  ? lockdep_hardirqs_on_prepare+0x438/0x7a0
[  227.661150][   T27]  ? blk_flush_plug_list+0x452/0x490
[  227.666991][   T27]  ? preempt_schedule+0xd9/0xe0
[  227.672256][   T27]  ? release_firmware_map_entry+0x190/0x190
[  227.679386][   T27]  ? preempt_schedule+0xd9/0xe0
[  227.685135][   T27]  ? lockdep_hardirqs_on+0x94/0x130
[  227.690609][   T27]  ? blk_check_plugged+0x250/0x250
[  227.696185][   T27]  schedule+0x11b/0x1f0
[  227.700439][   T27]  io_schedule+0x88/0x100
[  227.711325][   T27]  wait_on_page_bit_common+0xa13/0x1180
[  227.718077][   T27]  ? wait_on_page_bit+0x50/0x50
[  227.725134][   T27]  ? rcu_lock_release+0x20/0x20
[  227.730158][   T27]  ? bio_add_page+0x2ba/0x450
[  227.735897][   T27]  z_erofs_runqueue+0x788/0x1a80
[  227.740955][   T27]  ? z_erofs_do_read_page+0x2600/0x2600
[  227.748676][   T27]  ? __bpf_trace_erofs_destroy_inode+0x20/0x20
[  227.755756][   T27]  z_erofs_readahead+0xc9a/0x1280
[  227.762270][   T27]  ? z_erofs_readpage+0x840/0x840
[  227.767730][   T27]  read_pages+0x159/0x8e0
[  227.772736][   T27]  ? page_cache_ra_unbounded+0x930/0x930
[  227.778495][   T27]  ? add_to_page_cache_locked+0x40/0x40
[  227.782028][ T6592] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:476: comm ext4lazyinit: Invalid block bitmap block 3 in block_group 0
[  227.784302][   T27]  ? down_read+0x1b3/0x2e0
[  227.807492][   T27]  page_cache_ra_unbounded+0x7b0/0x930
[  227.815421][   T27]  ? read_cache_pages_invalidate_pages+0x1c0/0x1c0
[  227.822425][   T27]  force_page_cache_ra+0x378/0x3e0
[  227.827897][   T27]  generic_fadvise+0x5ba/0x8b0
[  227.833089][   T27]  ? dump_task+0x5f0/0x5f0
[  227.837888][   T27]  ? __fdget+0x191/0x220
[  227.839752][ T6592] EXT4-fs (loop0): Remounting filesystem read-only
[  227.842307][   T27]  __x64_sys_fadvise64+0x138/0x180
[  227.842338][   T27]  do_syscall_64+0x3b/0xb0
[  227.842355][   T27]  ? clear_bhb_loop+0x15/0x70
[  227.842374][   T27]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  227.842393][   T27] RIP: 0033:0x7f40fd8f99f9
[  227.842410][   T27] RSP: 002b:00007f40fbd78048 EFLAGS: 00000246 ORIG_RAX: 00000000000000dd
[  227.842431][   T27] RAX: ffffffffffffffda RBX: 00007f40fda87f80 RCX: 00007f40fd8f99f9
[  227.842445][   T27] RDX: 0000000000000000 RSI: 0000000000e0ffff RDI: 0000000000000005
[  227.842457][   T27] RBP: 00007f40fd9678ee R08: 0000000000000000 R09: 0000000000000000
[  227.842468][   T27] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000
[  227.842479][   T27] R13: 000000000000000b R14: 00007f40fda87f80 R15: 00007fffbcdf8108
[  227.842505][   T27]  </TASK>
[  227.842577][   T27] 
[  227.842577][   T27] Showing all locks held in the system:
[  227.973589][   T27] 1 lock held by khungtaskd/27:
[  227.989589][   T27]  #0: ffffffff8c91fb20 (rcu_read_lock){....}-{1:2}, at: rcu_lock_acquire+0x0/0x30
[  227.999159][   T27] 1 lock held by syslogd/3009:
[  228.004056][   T27]  #0: ffff8880b9b3a358 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x26/0x140
[  228.014704][   T27] 1 lock held by klogd/3016:
[  228.019408][   T27]  #0: ffff8880b9b3a358 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x26/0x140
[  228.030157][   T27] 2 locks held by getty/3325:
[  228.035490][   T27]  #0: ffff8880243ce098 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x21/0x70
[  228.045347][   T27]  #1: ffffc9000229b2e8 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6af/0x1db0
[  228.056782][   T27] 1 lock held by syz-executor/3569:
[  228.062035][   T27]  #0: ffffffff8c9240e8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x350/0x740
[  228.074266][   T27] 2 locks held by syz-executor/3579:
[  228.079693][   T27]  #0: ffff88807d6780e0 (&type->s_umount_key#56){++++}-{3:3}, at: deactivate_super+0xa9/0xe0
[  228.094235][   T27]  #1: ffffffff8c9240e8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x280/0x740
[  228.105465][   T27] 2 locks held by kworker/0:4/3613:
[  228.110762][   T27]  #0: ffff888011c72138 ((wq_completion)rcu_gp){+.+.}-{0:0}, at: process_one_work+0x78a/0x10c0
[  228.121275][   T27]  #1: ffffc900040d7d20 ((work_completion)(&rew.rew_work)){+.+.}-{0:0}, at: process_one_work+0x7d0/0x10c0
[  228.132967][   T27] 1 lock held by syz.4.77/3952:
[  228.137852][   T27]  #0: ffff888063b74320 (mapping.invalidate_lock#4){.+.+}-{3:3}, at: page_cache_ra_unbounded+0x1a6/0x930
[  228.157535][   T27] 
[  228.160267][   T27] =============================================
[  228.160267][   T27] 
[  228.180874][   T27] NMI backtrace for cpu 0
[  228.185236][   T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted 5.15.164-syzkaller #0
[  228.193571][   T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[  228.203620][   T27] Call Trace:
[  228.206923][   T27]  <TASK>
[  228.209847][   T27]  dump_stack_lvl+0x1e3/0x2d0
[  228.214528][   T27]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[  228.220155][   T27]  ? panic+0x860/0x860
[  228.224208][   T27]  ? nmi_cpu_backtrace+0x23b/0x4a0
[  228.229305][   T27]  nmi_cpu_backtrace+0x46a/0x4a0
[  228.234309][   T27]  ? __wake_up_klogd+0xd5/0x100
[  228.239156][   T27]  ? nmi_trigger_cpumask_backtrace+0x2a0/0x2a0
[  228.245400][   T27]  ? _printk+0xd1/0x120
[  228.249538][   T27]  ? panic+0x860/0x860
[  228.253588][   T27]  ? __wake_up_klogd+0xcc/0x100
[  228.258418][   T27]  ? panic+0x860/0x860
[  228.262482][   T27]  ? __rcu_read_unlock+0x92/0x100
[  228.267491][   T27]  ? arch_trigger_cpumask_backtrace+0x10/0x10
[  228.273550][   T27]  nmi_trigger_cpumask_backtrace+0x181/0x2a0
[  228.279776][   T27]  watchdog+0xe72/0xeb0
[  228.284013][   T27]  kthread+0x3f6/0x4f0
[  228.288240][   T27]  ? hungtask_pm_notify+0x50/0x50
[  228.293246][   T27]  ? kthread_blkcg+0xd0/0xd0
[  228.297818][   T27]  ret_from_fork+0x1f/0x30
[  228.302313][   T27]  </TASK>
[  228.305367][    C0] vkms_vblank_simulate: vblank timer overrun
[  228.312260][   T27] Sending NMI from CPU 0 to CPUs 1:
[  228.317514][    C1] NMI backtrace for cpu 1 skipped: idling at acpi_idle_do_entry+0x10f/0x340
[  228.321848][   T27] Kernel panic - not syncing: hung_task: blocked tasks
[  228.337536][   T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted 5.15.164-syzkaller #0
[  228.346127][   T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
[  228.356282][   T27] Call Trace:
[  228.359771][   T27]  <TASK>
[  228.362785][   T27]  dump_stack_lvl+0x1e3/0x2d0
[  228.367463][   T27]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[  228.373191][   T27]  ? panic+0x860/0x860
[  228.377286][   T27]  panic+0x318/0x860
[  228.381215][   T27]  ? schedule_preempt_disabled+0x20/0x20
[  228.386838][   T27]  ? nmi_trigger_cpumask_backtrace+0x221/0x2a0
[  228.393105][   T27]  ? fb_is_primary_device+0xd0/0xd0
[  228.398686][   T27]  ? arch_trigger_cpumask_backtrace+0x10/0x10
[  228.404759][   T27]  ? nmi_trigger_cpumask_backtrace+0x221/0x2a0
[  228.410914][   T27]  ? nmi_trigger_cpumask_backtrace+0x281/0x2a0
[  228.417069][   T27]  ? nmi_trigger_cpumask_backtrace+0x286/0x2a0
[  228.423235][   T27]  watchdog+0xeb0/0xeb0
[  228.427408][   T27]  kthread+0x3f6/0x4f0
[  228.431647][   T27]  ? hungtask_pm_notify+0x50/0x50
[  228.436689][   T27]  ? kthread_blkcg+0xd0/0xd0
[  228.441283][   T27]  ret_from_fork+0x1f/0x30
[  228.445725][   T27]  </TASK>
[  228.448944][   T27] Kernel Offset: disabled
[  228.453261][   T27] Rebooting in 86400 seconds..