last executing test programs:

20.720541762s ago: executing program 4:
syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f0000000000), 0x7, 0x4df, &(0x7f0000000cc0)="$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")
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x28, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0x5, 0x3, "91"}]}], {0x14}}, 0x50}}, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
close_range(r1, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='mm_page_alloc\x00', r2}, 0x10)
pipe2$9p(&(0x7f0000000240)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32], 0x0}, 0x90)
r5 = socket$kcm(0xa, 0x5, 0x0)
r6 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r6, &(0x7f0000000680)={&(0x7f00000002c0)=@nameseq={0x1e, 0x1, 0x2, {0x40, 0x800003, 0x4}}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000480)="b66a7c939d82a588ad1fdf4eccc1f16a8911a906d7bfadda060ee3b7501ab0181f109a162d5b8be4bedb5b38a5c22a87aca0026f0f107c788008e6275ff774baac94766d0a8d591975b79bee3149a992a2d9d406acd4dad75945a430ae115308d5d6cb6ee693673d804c1d89b8822dc8e843d44e18d0ed93f69acdd68a439e34633b8574e632413443d8f840f2855abaf63f9c", 0x93}, {&(0x7f0000000300)='#', 0x1}, {&(0x7f0000000540)="cdab93c1210fbc48d5b5510a86ec6b7abcab79c7995c2cff5dada0110be32fc11dd3acdb143b08786116d72f8176137eebc958e4f6239aa4fd204746b89053f57f2639879fa2f33eb4b268602e2c01870c74b0834359ecb077d6eeb22db659ef6b0a065fe60801f5ff82c0196a7f406ea7f9d456886e3e4dbd7d7b1cb867d7e03f98c50980c966588d0ff5b2a9fe3be5895256c6e33cda0faf812d1ffd373ad7", 0xa0}], 0x3, &(0x7f0000000600)="b369f2ae176b564d1260eff4096f3b25c05afe05cc5553e1ff9c44aa3059822c0ef77e221c27579403b4f3facb46a398c3da648641d27c1ffe4d51921b5bcaad9b9f2f10329cce15e5cc88e09921c6c1122f04625f6b70e8d41b8a64ca21d3ec2d6924adfc4dee4eedb152a4f644ef6ecefa7372f7fc", 0x76, 0x801}, 0x4000000)
sendmsg$kcm(r5, &(0x7f00000017c0)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140a}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000200)='%', 0x1}], 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000084"], 0x18}, 0x0)
r7 = dup(r4)
mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r7}})

18.886871764s ago: executing program 4:
r0 = socket(0x10, 0x803, 0x0)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000a40)={0x14}, 0x14}}, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
recvmsg(0xffffffffffffffff, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000009240)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfff1}, {}, {0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_MARK={0x8}]}}]}, 0x3c}}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

17.733676732s ago: executing program 4:
getpid()
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6f)
r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
read$dsp(r1, &(0x7f00000002c0)=""/4096, 0x1000)
write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000)
read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8)
link(0x0, &(0x7f0000000300)='./bus\x00')
syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="31010000dccd5e08cb060700000000952301090224000100007e0009043401"], 0x0)

16.469049236s ago: executing program 0:
r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280), 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
syz_mount_image$bcachefs(&(0x7f0000002040), &(0x7f0000000080)='./bus\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYRES16, @ANYRES64, @ANYRES8, @ANYRES8=r0, @ANYRESOCT=r0], 0x1, 0x5b66, &(0x7f0000007c00)="$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")
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x10)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r2, &(0x7f00000077c0)={0x2020, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_INIT(r2, &(0x7f0000000100)={0x50, 0x0, r3, {0x7, 0x1f}}, 0x50)
syz_fuse_handle_req(r2, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000015000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a10000000000000000000000000000000000000000000000000000000000000000000000000000000093160000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffff3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f40000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff0000000000000000000000000000002000", 0x2000, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000000))
syz_fuse_handle_req(r2, &(0x7f0000002140)="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", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)={0x20}})

13.147768897s ago: executing program 1:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000300), 0x0, 0x0)
mmap$snddsp_control(&(0x7f0000000000/0x3000)=nil, 0x1000, 0x1, 0x10, r0, 0x82000000)
futex_waitv(&(0x7f0000002300)=[{0x0, &(0x7f0000000480), 0x82}], 0x1, 0x0, 0x0, 0x0)

12.740027443s ago: executing program 4:
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
fsync(0xffffffffffffffff)

11.545299204s ago: executing program 3:
process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000))
ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6f)
r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
read$dsp(r1, &(0x7f00000002c0)=""/4096, 0x1000)
write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000)
syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="31010000dccd5e08cb060700000000952301090224000100007e0009043401"], 0x0)

11.533591656s ago: executing program 1:
mkdir(&(0x7f00000002c0)='./file0\x00', 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0)
syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x83, 0x66, 0x7d, 0x10, 0x2040, 0x264, 0x4ed1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x90, 0xf1, 0x9c, 0x0, [], [{{0x9, 0x5, 0x84}}]}}]}}]}}, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x94, r1, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x8, 0x11d, 0x0, 0x1, [{0x4, 0x0, 0x0, 0x0}]}, @NL80211_ATTR_TID_CONFIG={0x1c, 0x11d, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5}]}]}, @NL80211_ATTR_TID_CONFIG={0x54, 0x11d, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x31}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x97}]}, {0x34, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x4a}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0x83}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x67}]}]}]}, 0x94}}, 0x4008010)
r2 = socket$unix(0x1, 0x1, 0x0)
connect$unix(r2, &(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0)
r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000540)={'#! ', './file0', [{0x20, 'cgroup.subtree_control\x00'}, {0x20, '([&-'}, {0x20, '#]/'}, {0x20, 'cgroup2\x00'}, {0x20, '/&:#'}, {0x20, ')'}, {}], 0xa, "edcc6e07cabe092de11d102225ff7798252ef72e509d9ea64896784d1e1468f468a4b309aa1e43f5438fabbdc1c057c05f46e7a3a7bc884353379590aaa9761bc33be3c6f5ef88927a9fe8dd2cd5a0d3012068db92d633109519570075ebde9da25a2b1fefa28d8d36f814ce9338636c0d24326cb884631668446a4f8f936ceb0cd7c669b13c557dbd0aa0c77850ed0be6e7d3d22a24d22cc306f098782e7b1d73b2472dbbaa252bd38dbde4dbddba"}, 0xec)
r4 = openat$cgroup_subtree(r3, &(0x7f00000001c0), 0x2, 0x0)
write$cgroup_subtree(r4, 0x0, 0x0)
write$cgroup_subtree(r4, &(0x7f00000061c0)=ANY=[@ANYBLOB='+pids'], 0x6)

10.755086021s ago: executing program 0:
socket$pppl2tp(0x18, 0x1, 0x1)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
ioctl$FS_IOC_RESVSP(r0, 0x40305839, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f00000000c0)={0x8, 0x7f, 0x0, 0x0, 0x3, "f06fc539471398450104663ea5b3e92dad434f"})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r3, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000440)='wlan0\x00', 0x10)
sendto$inet(r2, 0x0, 0x0, 0x400c8c6, &(0x7f0000000180)={0x2, 0x4e21, @multicast2}, 0x10)
sendto$inet(r2, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000006c0)='./file0\x00', 0x100040d, &(0x7f0000000140)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@nobh}, {@noquota}, {@noload}]}, 0x3, 0x440, &(0x7f0000000280)="$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")
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58)
accept4(r5, 0x0, 0x0, 0x0)

9.220871485s ago: executing program 2:
r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x109882)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, 0x0)

7.564079243s ago: executing program 1:
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000180))
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0xb, &(0x7f000000c280)={&(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x130}}, 0x0)
write$binfmt_elf32(0xffffffffffffffff, &(0x7f00000008c0)=ANY=[], 0x4b0)
r1 = socket(0x28, 0x5, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="64a4c2ea626e39a470c31be2fcd4b4e7ff24feb834fba4f00484b663519c9dbf01774606192733e004938e7d2237ec64ccc279f876c0fa897d0a573cdc0c9e7251ee94fed7a4aa66f2089a14a5c3773a842bcab95bd893965ed52dc7288f2ac20aa1f045f9774817eb77d903ce37812edc65dcac09ecce18c137164d3453daf2f1788486f410876ce9284abd600d329858c957b052dae5e012cc149909af4de5ece96a5a30d880f1da91a65fb8377cfbe90a5f6655af18ed210b2181fe211872c61a11fd94f85912aa734d43c479852722d3e56961bc2685bda891aa9b18e364f9f15aaa4de8454d80232061219bc9cd4be8cf47", @ANYRES16=r3, @ANYBLOB="4b6f00000000000000000800000004000480"], 0x18}}, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000ac00000095"], &(0x7f0000000180)='GPL\x00', 0x3, 0xe5, &(0x7f0000000240)=""/229, 0x0, 0x1c}, 0x90)
r4 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)
listen(r4, 0x0)
connect$vsock_stream(r1, &(0x7f0000000080), 0x10)
sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x3, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x8080)
r5 = epoll_create1(0x0)
r6 = socket$unix(0x1, 0x1, 0x0)
close(r6)
r7 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r7, 0x7a7, &(0x7f0000000140)=0x20000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r7, 0x7a0, &(0x7f0000000100)={@local})
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000280)={0x10000000})
r8 = accept4$unix(r4, 0x0, 0x0, 0x0)
recvfrom$unix(r8, &(0x7f00000002c0)=""/241, 0x1ffd4, 0x0, 0x0, 0x0)
r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000880)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r9, 0x18000000000002a0, 0xe40, 0x0, &(0x7f0000000380)="b9ff03086844268cb89e0ef086dd", 0x0, 0x0, 0x60000000, 0x0, 0xe2, 0x0, &(0x7f0000000040)="a4"}, 0x48)

7.426633595s ago: executing program 2:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000200)='hugetlb.2MB.failcnt\x00', 0x2, 0x0)
r2 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000000c0)='tasks\x00', 0x2, 0x0)
sendfile(r2, r1, 0x0, 0x4)

7.259190834s ago: executing program 0:
r0 = socket(0x10, 0x4, 0xfffffff8)
syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff)
sendmsg$FOU_CMD_DEL(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000000)=@newtaction={0x6c, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x58, 0x1, [@m_simple={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xb, 0x3, 'simple\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x0, 0x20000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0)
connect$inet6(r1, 0x0, 0x0)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='batadv0\x00', 0x10)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@empty, 0xdf4, 0x2, 0x3, 0x1, 0x1ff, 0x7f}, 0x20)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f00000002c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha1\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="8bf527", 0x3)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f000000e0c0), 0x10010)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10)
ioctl$sock_netdev_private(r5, 0x8914, &(0x7f0000000000))

6.874849703s ago: executing program 4:
getpid()
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0)
ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6f)
r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
read$dsp(r1, &(0x7f00000002c0)=""/4096, 0x1000)
write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000)
read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8)
link(0x0, &(0x7f0000000300)='./bus\x00')
syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="31010000dccd5e08cb060700000000952301090224000100007e0009043401"], 0x0)

6.76406534s ago: executing program 3:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp\x00')
lseek(r0, 0x7f, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)

6.741079529s ago: executing program 2:
r0 = socket(0x10, 0x803, 0x0)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000a40)={0x14}, 0x14}}, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000009240)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfff1}, {}, {0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_MARK={0x8}]}}]}, 0x3c}}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

6.358289283s ago: executing program 1:
syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f0000000000), 0x7, 0x4df, &(0x7f0000000cc0)="$eJzs3E9sFNUfAPDvbP8C5Ud//Pjx+4GoRTQ2GlsoKBxMDEYTD5oY8aDHpi0EKdTQmgghsiQGj4bEu/Ho1YNX9WY8mXjFo4nBEMMF8LRmdme622V26Z9tV9rPJ1nmvZk3M+/tmzfz5j22AWxZI+k/ScRQRNyMiF0RUWpOMFJb3LtzZer+nStTUa5UTv2ZpLvF3TSeSbLljiwyWooofZrUNzSYv3T53OTs7MzFLD6+cP7D8flLl184e37yzMyZmQsTJ04cO3rk+EsTL668UAXnS8t1d/8ncwf2vfH+jbemevP1g9mysRydMhIjRVmpeqbTJ+uynQ3hpLddylfWPzMsW3r9p9XVV23/u6In2lYesIlUKpXKQOvN5Uqzaw+sAR5ZSXQ7B0B35A/69P03/xR1BPrXp/vRdbdP1l6A0nLfyz4RT1ZX5uMgfU3vt500EhHvlf/6Mv3EOo1DAAA0+v5k3hNs6v8NR+xtSPevbA5lOCL+HRG7I+I/EbEnIv4btbT/i4j/Nx2/JyIqEfWOZpORpviD/Z/SrbWXsrW0//dyNrdV7/9F4yzYcE8W21kvx8zh7DsZjb6B02dnZ460OccPr/3yeattjf2/9JOeP+8LZvm41ds0QDc9uTC56gI3uX0tYn9vc/mT3ohkcSYgiYh9EbF/Bccdbgiffe7rA4uRvqXpHl7+qkrhPFoHpioqX0U8W6v/ciyp//oZk/bzk+ODMTtzeDy9Cg4XnuOnn6+/3er8Dy3/t7817/L68e9OZS1r7dL6395w/Uc+f1sv/3ASkSzO187nq4urpMj1Xz9r+U6z2uu/P3m3Gs7fSz+eXFi4eCSiP3nzwfUT9X3zeLqMcq38o4eK2//ubJ+0oI9FRHoRPx4RT0TtDXEkKlcPRsRTEXGoTfl/fPXpD1ZT/sE2x+yUtPzThfe/JfVfn69vFUjKtdQFm3rOHbx5v8XNY3n1f6waGs3WFN//kiXXY5ucLgms9fsDAACAR0EpIoYaxpKGolQaG6uNAe2J7aXZufmF50/PfXRhuvYbgeHoK+UjXbXx4L4kH/8cbohPNMWPZuPGX/Rsq8bHpuZmp7tacmBHtc0npbHFe0Gt/ad+78wQM/BP5ic/sHU9rP3vvbFBGQE2nOc/bF0N7b/cIknZ/5SBzWk5z39jgbA5FbX/q6vYB3i0VFq05T+6kBdg463kWe65D5tLb7yzGC51NSfARvNMhy1pWT+Sbx/ID1WwqTJQvNdgQeIYbH+unlhdDrcVZWw1gf41HiftWXUgGysPbFvNXvlfU2iZJkorO+BAdKZOT6/9azmzt2MXfx6oZPNjna7BbzrXTlcYaH/fmBhal9sRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAx/0dAAD///9t3HY=")
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWCHAIN={0x28, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0x5, 0x3, "91"}]}], {0x14}}, 0x50}}, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
close_range(r1, 0xffffffffffffffff, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000008da4b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='mm_page_alloc\x00', r2}, 0x10)
pipe2$9p(&(0x7f0000000240)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32], 0x0}, 0x90)
r5 = socket$kcm(0xa, 0x5, 0x0)
r6 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r6, &(0x7f0000000680)={&(0x7f00000002c0)=@nameseq={0x1e, 0x1, 0x2, {0x40, 0x800003, 0x4}}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000480)="b66a7c939d82a588ad1fdf4eccc1f16a8911a906d7bfadda060ee3b7501ab0181f109a162d5b8be4bedb5b38a5c22a87aca0026f0f107c788008e6275ff774baac94766d0a8d591975b79bee3149a992a2d9d406acd4dad75945a430ae115308d5d6cb6ee693673d804c1d89b8822dc8e843d44e18d0ed93f69acdd68a439e34633b8574e632413443d8f840f2855abaf63f9c", 0x93}, {&(0x7f0000000300)='#', 0x1}, {&(0x7f0000000540)="cdab93c1210fbc48d5b5510a86ec6b7abcab79c7995c2cff5dada0110be32fc11dd3acdb143b08786116d72f8176137eebc958e4f6239aa4fd204746b89053f57f2639879fa2f33eb4b268602e2c01870c74b0834359ecb077d6eeb22db659ef6b0a065fe60801f5ff82c0196a7f406ea7f9d456886e3e4dbd7d7b1cb867d7e03f98c50980c966588d0ff5b2a9fe3be5895256c6e33cda0faf812d1ffd373ad7", 0xa0}], 0x3, &(0x7f0000000600)="b369f2ae176b564d1260eff4096f3b25c05afe05cc5553e1ff9c44aa3059822c0ef77e221c27579403b4f3facb46a398c3da648641d27c1ffe4d51921b5bcaad9b9f2f10329cce15e5cc88e09921c6c1122f04625f6b70e8d41b8a64ca21d3ec2d6924adfc4dee4eedb152a4f644ef6ecefa7372f7fc", 0x76, 0x801}, 0x4000000)
sendmsg$kcm(r5, &(0x7f00000017c0)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140a}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000200)='%', 0x1}], 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000084"], 0x18}, 0x0)
r7 = dup(r4)
mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r7}})

6.193212964s ago: executing program 0:
r0 = syz_open_dev$sndpcmc(&(0x7f0000000300), 0x0, 0x0)
mmap$snddsp_control(&(0x7f0000000000/0x3000)=nil, 0x1000, 0x1, 0x10, r0, 0x82000000)
futex_waitv(&(0x7f0000002300)=[{0x0, &(0x7f0000000480), 0x82}], 0x1, 0x0, 0x0, 0x0)

6.056931963s ago: executing program 2:
r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280), 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
syz_mount_image$bcachefs(&(0x7f0000002040), &(0x7f0000000080)='./bus\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYRES16, @ANYRES64, @ANYRES8, @ANYRES8=r0, @ANYRESOCT=r0], 0x1, 0x5b66, &(0x7f0000007c00)="$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")
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x10)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r2, &(0x7f00000077c0)={0x2020, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_INIT(r2, &(0x7f0000000100)={0x50, 0x0, r3, {0x7, 0x1f}}, 0x50)
syz_fuse_handle_req(r2, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000015000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a10000000000000000000000000000000000000000000000000000000000000000000000000000000093160000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffff3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f40000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff0000000000000000000000000000002000", 0x2000, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000000))
syz_fuse_handle_req(r2, &(0x7f0000002140)="7c5251077adb5e59da34b7c916c63000c9e092eaadd872740cd6361026078ac3693a2e2c71ac61eab0acf0ed1d375d36940f9332eb2439c297ce540740453d6c13a1b1d38696657547c3bf3f557eb447a0daaa5357602ef8f01a579c1776e0c2d6ea115c20b2cc0a54d26ccdda9fff03106a7bd9cb40957f403f082feda57f8e0f0854cef2ec12bf3f1e9d88d35fba6765830fc5b8fd1aca6c66942b9255f4050197e2368c239d6f63426868073009faedd1227fc550f21a3d16371f460cf97ebdf3e57eae50159755285ec68884eada2ae4afde6412d21dbbcb12c606701ae045da5902806e64187f0b45a78fdcf0eb792523454048c5dbfe382155246cb7629c23b3bb23348e93d8ac81bbd4e3665a0df99bbf4d6e14995cd26996067337ac3965bc0bce1fa973407247f3a727e708522d648380000357eefc767886c3e04c5bd495af05e5582765a611554e0e08564b4e1ec4a6f72a4648eaab27a74538a0f932f12fae0123420d5bdf834333dad96f5c9bc558fb1673bbbca2d35f4681d0dc533b690f9a7c6716fc3329a235d2a78d1f1e03009a207ea25c5ed9543441262269bea40dcc1e3a7a471276a4b6425fdb24b951345c414457109eda1361eade96cde13869cd1f06a0149a65435bba26d065194fab30626db7d662442430f6c15c1aa08581abf3982e600d46b714c32b6f838b9b3c88f0b1018df94583f4c289bee2d683e4bbc7382249c525999a0ebf2786bbd96cd744542611a753c02bb15f99959782ee3ae5aaa5a15bc748a8ff5b6faac0818c3d13fca864777e49e7f00c0e06d1189cea2e52c02e061c5af92d3798b3934a0d87a2f31d3092b7a94e6785a89d55989f0551047b00b3c2edd84601818b1d9e0721753019446c058acdf743149d880d71bae5c720aba9bf0bbc7d16df6f86278e495c13366a04746fdfa1e5483ef3a49965106742629cb457087be201cdbd15043bc40e54d1e32aec8578184aec80d90301679517c4dd787a1365fb4912a7ad78fe4c6046a943870bc3e9ca2e25340c3cbeefa18c545f36a4de975c456ce058839c765fffc28b9f9cac1ac4c252b917bedaf853f469f600758cefb05ae0619bd4d6d5054f59680b329219cbb20c046a2a826f997c84d72fd8ab05dc444973fc95c057a075b767613862894535c8ad41eff0569307ee0c065b3ad26a31324c126162c62c8ae2832a88115cca5b4b6fb67e9c1a7a9f9eec669a0fa8747f445da306b39eadd6e497ba3624847f673d97ecbeb094b6a36038132c72d64a707821090e7412d4c396233083ec09d8ea751e8b0de770c1ba47bf52827836ed3366039a9cc4ac5952ed8943fa8fa87415f2fc6b17287ed2693354265ec75ee875e6b1d9d51a742252ba983dbffbe3414e857cb747f566625c7ad2e6bddd6a77ea4d2834a65d3c92feeb2eb36ae605bac50410ee24a2d6f1a712383055de0cf5e87ca3ee74ff1f4f6392440962606b857e3c19cb69f3dd761ae9beac66edb9e931cc5cb09b8cf02670dfc9fb5fce6d61f6e4cff5a78959850182fe1f76fb8df8c8c164eacadfa25821013490fb1dc3914c08b531ce299be8754f081cc597d083511625db8ec3f0418b46f1ad914c6f420a16c74bddeb5e434f32acdf63357ff42a28be232ad2ac3d1b1ade82fb1d7ee5504291bef43cc6d202cab27d29b123a28c7dbf2c13afda8df24cff68a1eafdde8a89fea29fedc8275905b0761b40902a003391038d8d589717d538dff4560a7385fdf42394bae194cefb79a4f93c11c3b0d4ac0a01a4099ccd60ee42c55ec2b3b6ddf2c29ab7c57ff49a9f85bbe5c906878319142ae9b02bc28b3c25b5cef756e16956a6efdb953714410bbe1cc75bb49825ea91c9b553241f5e70ca6f50b7e80f66d8996e8b2e7c7bcf156edaf72ab3ced73d53911de859488c229acb90c0504a81d822c5c23396c11701aa1deacd1e72aea48a07a42eea42de5b3aafde63839056814f5efd5d6dc66376c9589628b38b7d125c0c358cd3fbb794e441ec7ab5bdd769ae148066b42c282139bcce88b0179d55f220ba6851b486f53b8f867b7eedfb343dc82e2a792cdfb29a784a5f7c23e72c05563d9b9f0cf0c0e69ba0c0f867971f50b42244fbf74fe96551caa07beba7070298a68fa52af22bfd900315fc38ce60baf17165c3e48db370bafb4bf619b9788f864610176d7dde9915645adff984ef313ca9bc1a5e17b29aec14b66c3c93432bc063fee7f1ad7ecab90008aa3914dc32873018b09ef2442ea7dac8a135389b7ff6ab1d2d67a9827f54dfb1f0b7dec662f5680e8f6b80bd7778d786a8ccee6f4d22e51297290621640a88704c5b8b790d7de51a49d3018ac22768c8944fec061cdc4e24cd4c8f5fd698c6f81f985a73b9e566ba8d56fad60be0cee5427621c2338eb7d887b560b81c57805fd5b8cdce231cbca3dea0bda2bad26009cd9513d7c301b96fb5c01e8c44e6e88c6992ea330af1b481ead1b8cf231b1a95ea2026bb492261605f16d6d2e482d0b0f1bd7d65fb3e5f799170dd7055aeb4a5a17af7fb7369ccff580fe3f6545bb8dad67f185c177c4f6e691d1df4fadaa68e5a128a887cbe9540d3f097f7a6f0f7873c6a31b7d7e6a2f8cde36b527807cbc3b87fe61fddd690cce6118c350a8d6a8d7e7f28fa3636bc2a11c8072f3e651de53973d1f3f04ca693d11ba7a67246702e681223945e29b81c27d935c43e2b663d0871451d43c3d1093aa744cbfa13df50d7fb278574a70bcba09d61fe39cdc279c6f7d6ae04d7cebf021a7894a29ba01f30c44f4487f6c14e9a9eb70ad606259ed1835d57d6c74aa6e6bdfcf7529835e39a23166335c15e26351936e8e5db0f9c17e7a546403f7d887ca1659d101096d052c289d5d0ca89158c88370f8eb20b80c88e126f86b6a7b02e176518ffdc2a32939daf35c4a193462c37c27d6f9eba34fdbdab1db25418ef7a59dd038f9b9a9ef6f131db3c9f02913823d9fc4871917273e471334f7e754823bf0e68e37c1cc8fb87dfa0114f3c53b173c4fdef05d960a738f7b7817d46d3988fa7a044a2c0fcdebd62022f9908c0f1e9cd429287fddc6bfb554e55c2279f0dd558ff7e3e3411771d4e78a473dc81a82deb7273d4db80860f97a77c1fc438324a1fe152197fb331a5bd39a36ce65e2b83d7f00d792248eb1e339c666c085977a0bf1b155e7671f95cfd6ad5bce2937ae748be1fba60ca328629333f84e62c72c5780d81abd32e34725a5f2ca6f90ade7678707ddff5d8467485bd6387a210caec4154670e11e039955c358c425a8651ebba1feb5fe6f7c8a67472367d1149064bc40664572a23c7e8f0b50f67d502c03328011fa93185be1dad7bfd9eff62a70ef5be7f1821822ff0496d71aef706b8002f64169722bd42f382530add4f9463946a1958a7e0afe0bf950f34d1ebaff1b583a17bea311a0f6946dfc0c5dadcb189e073338a0f3a479cb32c35f8bbf4837927d0074a02ec905e3c2c4e3440c2923462f5ffde625a00ae0acddd384ad60039795e4770ffb8260298ad8549ffb779d3294a367da88a5b0fb292c61f892f32ac65fe477c9c7fe33f7a402ea6c51c3bbfb342d1fe0a38c65a0c9dda4a4f86c9d4c3b2da43259a250b205f36fa66fc24560b1a0c1dfe269c96b90cb325d53dae82f7175b8cade26396ed33fdd6e940434de30cb82143801adf09aa3495a446633d33a9e273f4420b6c2e31f48cef52a426d03912b57a834748f27d4586b48ceadf1d83708a99e9104260d024195f251e1e192f4040cab55af12847f59e247bcc2612d9b813dcde6d8cdd47634cc06509ceb9123d1588280c4144837ec35612008b8529e5c4fc821eb9cf02aaaa40deb492e10a4d2312fe7470ff4e7c8a88f136573252fbd93f0993f7658b4a230ce265a7dabd01076dde768904c8478e0af1a04615bcd1345a1386b05e0855edbf96048aace33c7b8d139c31b71eb30a286e4927312617ad7f90475d0189bd9f8382d1e9b616cc59f75640e244c4cc1c589180fc4618942f66ea44d0331f79bc7e4cdd6e9d0c76d2fea63f6001c3efdf6a63288c0c02c619eb75074412492e1ac1170cdb4ab455b5a228b566cb5bd7ee97cdc91c974e18078ec0f8cd055504e8977f782c338592816ad27f6d78ec137e9fb011d83e048f2638925ccf645fc507e82ac6912d7731e237a3c65d41ecae394e819931d0d9bc6e9b4745b9bc42217e25fe20f549054206472c73682641b1a2b1f9dfe4f6f8a26fe154f1f7c4092ccb1feb86a0708afadc881fc92806995d35d3fd97e84956a732227c48bc69c58d216bbb7a81ba4947e06ea1af39dd930010e242102c5bb32d3f681e71d95e0553f3cdbba2ac1c310479077f3f512adec1077584bc4a47fe86cb121e59d890ca0dccd4d164aa467d953cb9c1f9f663f93f02ebb0f9436ce4881251e1e5b9a12f6ab5fca622dbcfde01d151b2d014e2ed947ea18aeccf8e25f87b50c734d6c502553eebbc23d437a46c172d2b56b1d9b97ad92646016f438f123f64ce696da175c3fcbfe3fef4e4f625d2a65272667998f4694d4b68fa3a0fea25254210f58f36799d8cf3a8696be28e36f2e28f373602c9d50a10de3e79b990dbf0576ed3384b5a10c8cf17f81337386c253c461a3ebaa85047ec11997a289ed6baf5aba6706ae61d9bdccc51fb866b305a2ebd8d3fe888e4346b4600aa9f0e43638c5a7e3b873e41ef97d4f137a8d6403ddc8e7028da90dbe50312d4fe180a44829a77a4dd7502cee9db2b97074805f3aa88a75da1d85917bd75187a6718b1ef4f3f7257ffb8e7fe99f03ba526a9601625ee139dd85439922345cd5402e68b8062980fd29d9f8c17007273a2e55a7ff0d190aa799a911eaed06cb86aedcbd4d20172fb89d15375f92604b59f7cba6110e5a42f6a3090552e5fe76f0af7ab0f1148ae9685b0a8b3b5815927b3af90c48d4edba8db506625106b55103fb884ea1df7eab0958c3aeb6054833c12c30b3bfaae70c5e7c04bc9fac1d9a855fda25d71ff810bab7903c1907b0e7d3e10ac0bd57a8053ed931ea4349f340e9c2ab7f506779fe77acf6066ade254609006eca6556fd6f481c0ed2aef3acf7bcbead918b8952ed3537a54a6b0c76ba4835ff8f493634bc37e3e3aaad5cb81c375edaf7b276ff24411222efac4d238f6d2c3aef92091ff784fea00c9c940a91c965954e9c83497c871a32c48074dc6f2ea86076093ffa1ea3ab15fa6029bbdbdbaa06b26910e2b693b43a75df3803516ffe783088d94fb695e83105561a92047228404ccb2f2cb5ed0999a4651d482c23fe9f87d60c418c278724426553f6d29b5d8a70b155583b16edea6a511cc8f2a47e4249b18484e9c894e071411a756f380a1d54aa0c917de665d834789ddbfcd8d4c237504c372e885446d6d0fdce308b84dfbd131188a75e2240cbc3028479e797eb8ede7e906d71e7d993671bdc093da4996c896acdeaa2dcc1afdf2bf52c78e0223463df4db49120d22a4ed9dd8041eacfdcfaf880ff233e8245846b297d2befc59dfd6562d7f84f9aa132e301939a171d1f15cadeb7eb4d62941b961159b543f309426a4c308f04c33072d0a5f9bf002914be32e7746c8afb32d90ddc754c403a65fd119b6880a139dbf1b6898af7d18997257cd065368176a0eef51e4c66ecce41af2a105693725d32d6997a1d7c5257478dff9d3eb5f18ff5b27c8b3100e105798dda500fc4b00fd54757d85f91713b8f69d8a44d86dddc4003b155cf56f3a02e63044f9810ef7b2b1a7704dcac4395c35bdb25af7982df722ee690396b8481288200cc165c6494a1c2786388756fd69d6e5d2999b635968fa8bf5fad256e58591760772c66a799615bfcb68a8c531609446beff86c215cfb31ffb1a1714cbb7d34930dcfc86528c59f77ac034fc76f16056763ea74fe55f58f68391a93f8e17266133a26d3ea101187c88dce0852d57e82a5578168244f2e4cf99afe3fae9f724ae2ff1f585035a89f911a13c41747ececfc35ec7ab390e6191545e6a732c11b9045745553e68e0344f996e7b1fc2b5ac4f8969770c636edb7a30898c5dcc86087881e40e9cbfbe01f6e4856eb17a36e8a6080f3b3ff35df0d5aa9484e19a1b468b99f3a35b7e3326a95b5c7e797406b4d8fca2c91ba93d03862a338cb3bdb6bdf9d675d369dc544d625c92b86f605428dda3be2f436cee5be9b7b0806c7b99811e336e23ea6a6d7aa1e2e97a732c30255a8de5d823eec120f37e99f5f4e9a66557b8a785ca2f83de8f0304d365109de9ebd3a6be20920ebd813f1939b3b564d84a5d4d5c24e91bd116b7166bf3d656aed340ddcf39599ff3d8cf4f6be3a87494dd059e8b24a5e9df81a79dcd8ff8b9a7adbd2124dda95ba03b91e460399a535425fc43e2c0564c3d92ab8effdc451e6d67efd5fa2c67aa99956434c2ba4f57db51129259c3406b9be5dacb7a8eef176936efc8acbd4fec4fdfbe384a7158da07025d91194fdcb279586e5a119c7a0d731391ec5cbac58d22788e21cb4a5d8ff955de65d9efefd7a79a2801f8b2283696b6cdc1d4eb68387b16156ca1c9c7f831cddd9f092f40c164d86eb0c8932472370c620bdc01af6aa990fed759b47612616a530ff4d0d59f699040495e2e511e6318b2af3fb2c2517148929abc1b7798bdf6ac396c086aaf3643bac670371c8c49aae4f8b0b68de3a7c710896d517967ccb546064748d06e5ebf4077159c433cba53dd8c60a1f35809db9cbfb29947cc02d789baa7766a03531bfbc5e1d62afbaaca63a493c720af42c02355ce8df36c7fa0095d139b2d8027217145baf011388131ca28149db5243a3594bdc6638614c69827e44daf18d8e66080fb7abeef26a9cb60243d525d3e44cdb7d9cd3ead3412ca59e62ac59bf9ddbce60a418eff0ade83bf56713d5dca51d724b45fc43930ae189bdb5d94aa6a2f609b831e1cffb09e3add19dffc8d30970e6cf29163af6bfdd0ff06675b34d51404ec7c50cebb2aeb5d0d1d2b9e0dd92693c4cdfc1be50e183a8d85191c0610b3cddb4b0a1d6f9f7661b4dc7cd9f6c698edf43b32ebd19eaa7d1908e31b23078589b08afd9a819fc15a9b1f293509f061dd58356cff42a99472fa62578f24d2e80ce06f24c23630b7d57d48db3a85288592343578963a03450717c0c97ce3f2c5f9d78f49a4e4a23fc07dd8976c3b2058f671dc286364a51587cf554cba8795a5e2d2624dbf1c2dc184ba4cc2f70bb8147744e1341512444ba50f43e5939e9ad1ef5cb7b5125c1b9b029f5313926f358f42f1a9c491e5db5cf0151819b1a8f9b02ca29e434fdca2669ee04799ad80f949ed99e6f476f607b2fbcbf669bcaf078905687e8f0c71227e8ebd5bc02ce8574da326b8c7ae5db480c9c3e60d1a75b4734e95bc8025517bc4e5fc627081548226c93a7c14d115a16d5401bd0bbd9b5b9f069ebdce575d08aa0d89f5099285cd9783610a3e73ace209156a8fefffd57381a226b764bd1da6c146223a141ae1961a7ba79d8b9b5bf326640eea5046eabc6c3f59a46d952284ae2900c876565f8bb9d58344e0c20bb15886c6c52167db99df996e87796ca01ef8f21430f64012907141a185fb948b1f054b3e62c32dfa5fd40f3c25b85f10bc0faf4aa20a0542e05bf5452a45a97edcbca45fb2ef401297570087ab9ad5c9670c26192ab6cfd6e22e45e96901ca63a23b8e832ef7b186675acae814a5e49ca0d213200848c6fbf3d540de36bc3d4183ecd875e7205c26c51334ad6746c7b83c373f1f35246ae5c78c9703f581b955009360c159f61bec83e2c24c58991481b4db4a6ee1ba99ee32690cf930207dc25ad9aa13f0513d679ad28400b2d8f99e98401633952efcd8fc06457023d249cb36e14ecc3b561b2a9564f5c7b1bafa3bd155db408bc3470c82aa607a8b8f3f33cd01c731e3e39a5ee4146a6081df6162cd0bf3a5f0fb2b583d7638cfda86bc153491f2546bc01a12fb9c51b1c54731c542f58294199c48567ff10945b5bcf26255c4276f131eeef708da32848ece294bbe9c3a7df61f2a616a8ec9ddb00ffe7bdfefdc7c65e43d657cc501a837281ef82526f5db4625026a9ade9fac1d29b729e846e156059ce761cde331f793481958dc858c2b88799091b50804dd71f82ca2152c4c5839e6cc6496f32f3546445d5cbc9f74a75a07771536717ca941ce901b33b0a741d79d6aa07837d28a893c92a041e99605d41d3994b43df83cc76035ae1f6203fd40b0a3b14b4a9c02f14824c5901cddb03dbdab9d515e9e72dc82cf9ca92656994b495ea2ab89481e49e2ed47dddb8abd3a766967f66876749ff58b446be3758394efd09edae09def3398a463d67bb32c6986a1b02c7643ef3c61a225eca6036de55f8605c2bf4badb34adf77117fc4efe5697e79b0de5d776451d9daa44462ff9f5efac44003fc50561caf1d73d1030d72a5f6cdd6be6686a3cbb33dfd7165579e7420623eaa1bc5647c397438979083600adfc8bdc2285b3d3dc7f51581e43e1ac98c28e8b68faf7847c293af3b45760e09bdaf93dbdd983710a800974a23a29f0c8dde6f005a904e266b30ee46d0af899e995d75b8150847c67e158c195e7e263044ffa7e9eb60838f1971e55f813821ab966a3ee34e9184aa9d2559f0dd37a658a92e8014abf70bf0048478f4943753e538900cb783783fc7a5472187ee7b0e78de04397b68284c9994238482160bb191c7cda51f50c0c27d64db442547ef8384b03714223df5a9379d747bc7e78f302c6b09af223ad63df27ead78d9b0a8d380c8638e1a3ede56c6b4a7e697ea53fbcbb6383b79d2d7d71232e3af66266fcd8db7f16a286f2cced591f63280057ef4e7ca9f5448f0d08157df8f395f07a3a24e02e7a2f046b729668885914fffdb5e452af6b6b29340be77c2a1838bb7ab5a4c6e3974948314c05608ce278d2569c8a17728bc0ead77ba064f5476d09cd54c70006640a7b0a851601f5a9b1945e7f8b7c2fa07abc65d58af312e9e32b7bb1fee102c5e6d1994d6e2065ac5cd98383e1e6ddfa0fdbdecc59c0c37341f356bd5be86b0c7df420cb5d167e630b78dc398480c924232b830888247b385878057bb5443131741224108e742f5f721d584ac2e220295b394197779d3479bd16032d98fcf1793f74184b92a3a5c880397eb1f3ce7becb048fddd4e20a1f8a5b1a7f42cc699018d869066f7b75095f639390f56f3ee468ae17ab8e71fb7d9d36edeade7bec8c5f9ff5a31b61cef10efe4eed0d20c8b3c6ff68aa0903412ccaf44f9e3959096bfab302ea5d6e94367387982a50511a45f7db1a27e07494063f8ce4c4dde804b6d3d7d311f4f37a87ec0754fde02b39bd286902eee5185534dc80585fb084e0abb0975b3fa41a43e16ae4a8c5c4dc9ea3073b0551a57fe29ea4e8703745ccfcdce0fa8d0b1231ccfa7e04cfbf096f1bfc69dde78ad233e7f4ff8f36b4f4dd48b47c2d923bbfa2f32c1207c0a20251bf81f665d3a6eca60d9be5d5587cdd555da31640aaa00a7cfd4b3b2f09b418111fdbcf1770804b5e725be3777ea663fd40213a332cdb7668068fa2a066cc100a990fb068982b83d456ba2ea7521615a6a65307a5a3c1e22be5764584c61e174a859baf9a753396990e47cabfa6226dd68356ce04debf71bdaa27c4b4474a69f09144e4cd8adafd8f52449d9af666b70843846e6708e8fd716ac786450ad9aba78858fec4a85568d483b4e6f3abf64ce213dbad6f212c546e9ee783db5bb6a5da7a965d44d71ab667bcc66d218f0312331613378b4fc6a8ad4d0a2bca5139d9bcf5b8eb8d724711618543cb1bda1b300ad65ca3198639eaf18e820d44762e6cb6d75060428beaeaf1d0925ec9c3df90137d1def10faaa89f300d2697e0e979a4a35fda0d32d703c16b4326b709bdf729ec1e7ba11232651b344a313713a17ef6f908353f264b45dbd1b8c1722f72221541db150d3aaa112c6c94edb042bfe4538a83b069bbf1b3bb6728048a6b7a0ade6611893f01e2f5ed0f5974a61aac65e54954e5a5de2b3a27cdd3483df338a16d381a91c4dd3fa557398b1a7302aecd5f5edab328612965af8ef08fd7330e9559834e8f7f368c3b736c592b235e0b8171495d9db161a2b2f959b69dbd279940fae46754a5f2f35884a9e2f4d064ce0552c790dee52b3303a3cb48d960f8e2f21dd72c990bf9f663b8ce9714a1f19ba4769c7fec6a5076c5140266a0265a427b24c6187e7bb812f052dd23b76078f88bb2fb68559f5629f2a6b91a5badab55363972715f82ede40a1091132363a30a54e8e9a2ac4a29bf65a38a7443249262ff437240cb0e52d235751ea2e94d7c5fa74e0d61417247997481f62af2334810954a2dbbf7cb13cc9973902aeb0525bcfb1cdc2302f04706a8dd12bd90ec9080ec39f76cf828738581ba80b80d5eaab4494b0e23212b57957cfac2dc758f94740937b49f451d647f5c23f6f358cc4924833da33e3826d27fe5dc67d8f5259574e8f9a6b64debad58be8dabd601e231de385a1f32a42d5392cc4da8f3bc9446c03e998b0e774f73bb0a1a5033ad3a1e93ad7aa36708d3815073bbf40d065f616669d5b44756ee8d15cdaf028a9465e1c49022de3beccbfd63797c2f43f5d050ba2bcd142ed11a8bb0a4d7875bc700c138f0f594f13a36a76f0a2274cdc4e105660af24eb3d444adb86e8e8bbb588a97792e5cb87844f3bd0181427e349f858b6560df2fec52411cf028a48f2cc2d32cb1c5489a07c92a92179df4b6b6d1f4b31cd6e73b57c42532ac11dd2743e4b49e0f77e5322c9c1e63b9616373522a3cc0ccc99b1613305bd578b1e98fb09cb84f88c783cb74f9010f283ab35c0b8db44643f2e95f3c7d3a19c86ce535ec8f1fc1fb6a324e9c5c1c06d7707c60e403f52ad34b6064b107816d08f9f5d8c366cf43142f9d644e36d878e95a991ad01ae048a3ed20b922d64f5fccd3e0051f30546af2d7b33351f8c881301f27659047cc0f22cf848a32d1efbf45f8236f14146a9e560ce35df3140c4d8f64601050cccfe3b346d8222e0d342d1b27d8b9997fb68cb9ec97723b1e34cb62dc70e53be1b2dd12ade47536f3fd16bd646e762595188e07285c37757bb86b1f96e1beeaca6e3852fb37c9f98ab71eac382f17ea2a84ff07f5c099d791edd4984fac416a7887178d52ea25fd3aeef0a93e70166caf968c780ad6fc578577f549fab80471f3d4c8d4c2f54fb3401cdd98abcaee3710a3614160cf0c623cb440b2a57fa2c6c91f90ae25619f36c4cfa1989201246e42aeb9642e498385dc6f16e9f3ccc25e430b334c4be43cb96bab57c50d519c63ac5404cbd1906ee159a8cf35994bb90a34c5d943ec8e69713da6113fbdbafd7772799a378cdec73e5025827b9391271bb86b2adcff97f1d54287b747a9b493cd9adb53912dfa3f2af18e94a0c71be5bfe8d12ce69f90eec9199b5a9911defb8991c3777d358c2051f2e160903983a26bf5f5c2a9c44c7b189007691fe71e4d75eb8b9739588038f420321628cebcfcdcdb2feafa0a447", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)={0x20}})

5.712307703s ago: executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000680)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0)
syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x308004a, &(0x7f00000006c0)=ANY=[@ANYRESHEX=r0, @ANYRESHEX=r0, @ANYRES64=r1, @ANYRESHEX=r0, @ANYRES64=r2], 0xe, 0x2b3, &(0x7f0000000200)="$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")
write$binfmt_script(r2, &(0x7f0000000340), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0)
r3 = dup(r1)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0}, 0x90)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0)
syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg2\x00'})
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

4.691588666s ago: executing program 1:
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000040)='./bus\x00', 0x2008412, &(0x7f0000001f80)=ANY=[@ANYBLOB="66617374626f6f742c71756f7461000000000000003b814e50a959736d65720f73ecea54b5e5be45ace9a88f723cb005aeff24212c651baef614d442ae89412ad3dcd0b7586d02002a6d6d65cacd4fc5002207ce994dda65c4b1d23a9bd5ba0f4ce5c2b5a5718c6aa918080002223d2753a5cac974110144cd0a1e368652324a41b31e1eb3b32dccbdf8f68bd96a45a75427a5f789d267fd92f6a5540200b81d5b9fa9b40fe4d7fbd50a6afc3a989c6d60045663c59cbdc4c700000000bc7f6b22df0191acf5912afdcc1c061835177068c40f757dd123d2600b1c544f1525aa8d00000000000000000000002e8b5c733d362417c17f527c0bfebec112d57fc69fabb9b31ef97b2147931ff60cdf666c25244218b1f1a6010000000100000020563b835d0e8e9a09070ef1691fcb2f37bda5d4e3d9d7a2d0ac82b45a53001057f321acc45d5e065a461de90100000077d200000000000040b78f0dd3836f5ab2f6a1a5b798bb7752f192c6b48e568973a59cd9c74bd9a14721856c5499cd8f93f8beaa9cf76718ce7244c8426803000000005c000208886b313bd01a22d576e414011a4f0a897515329f86d4585fa0ea17068f8af349696da4a2b3e24310ca52ec51bc23b57897cb55a2d513e6a00765ee3f58b471c54dd57f0af584afe4a21f92b515d7f2fa6fbb273ca0f751e684584320534667aea39ad7222c8ef531f514939177a47395e94c1723abb3fd44fd64fde4b45cc2f55f4ae05ff48648a4c998257856bcdcf2fa02010000001f54fb936570450e91c8d55abad76a7b7a000016f81ec9da9ccc1191c211632266d907e4d9b23496ae19bac24dc23c43f514f1b4af19988bbe61ee29a368a999435d6872d01b79c7821e875859dfbf3c57e4f1fb0be46cb5f7a0fa13516c0926d19dd2d5862085e1e4cb8279be17cba17ee4d06ad97b4ca282e73ea142b01b4a742fa11c0927ba811dd60903d575db449d775021b542db617086b3ed42e6e60fe043cff79b0c067c584bbf82657974c3736912b4b522052b9467d0da116ccc1652d861a420f09aaf67d3e9f6160100000001000000ae6335ad9896abd3cc00413638cb9bc62ab8054325d72e9144cf4f88702f586507e3147198e0bc4060a7c8f4dce73b653177ecf8228e6e6fae02510000000000000000000000000000f43739fdd2d24e50e0233acfe1c8639070fe00f40b0d01f8a0a35fcfe3ea10faf9c24b8488ed4ed83fb06a9a7c57442ede9e1fc2853b8f4d2241cff61d0125b7750e3fdae6a4ab9c776a191ed8098a780ea2bbaa64978cd3a6458fcc6b949bcbca0dceb7361f66e46731eba4f3aed335e7c8c541e82453218a19d39489e1525466ac93759787e767f601931d94c9c426489b741a6bc8abf475e4bf859e1ce7f7227069e9f51e25fa3d1b18dc565180a1af464a1dd697db85e2b27b90f6bd7cf1b6bc0bcd8ba552ced3d3cfbf9c9bc04f65b6f83cb40173b4bdc393d47e5da95b63a40ac18daf11e8d0706b47795fbe2b56d0ea7ffc5a59ede88621a08b25ca6ebe041317b62373a60951af33eb7954a9731aaa125add0913ed2435a207439e9122512d77096747a4b404459cebc8faff8f7a31758e630c75a1ff90402754d339dc21cf6b8e04e1aedf14df0b4aaf0e03194df3eb41ba066bc343b323a3162d7e7ba687633c2faa8f28b42364b72e3a457476fd6b2a54e670ba798172c44c4390f73fdab743a4cac88b2bd0545b8483f2e2f9846b138a4d8a7332978da70e9050417087c5ae034a735e8b448dd9701404", @ANYRESDEC], 0x1, 0x553b, &(0x7f000000ac00)="$eJzs3EtvG1UUAOA7TtPSJxFiwa4jVUiJVFt12lSwC9CKh0gV8ViwAsd2LLe2J4odJ2SFBEvEgn+CQGLFkt/AgjU7xALEDgnkuWNKKI9WduKk/T5pfGbujM+cO7ISnRnLAXhiLaS//pyES+FsCGEuhHAhCfl6Uiy51RieCyFcDiGU/rIkxfifA6dDCOdCCJdGyWPOpNj1+dXhlZWf3vjlm+/OnDr/xdffz27WwKw9H0LobsX13W6MWSvGu8V4bdjOY/fGsIhxR/desZ3FuNvcyDPs1sbH1fJ4vRWPz7Z2+qO42anVR7HV3szHt3rxhP1ha5wnf8Pd2na+3Whu5LHdz/LY2o917e3Hv237/UHM0yjyfZinD4PBOMbx5l4zzmfrXh7rvUExHvNmjebeKA6LWJwu1LNOI69jY5Irfby92e7t7KXD5na/nfXSlUr1hUr1Zrm6nTWag+aNcq3buHkjXWx1RoeVB81ad7WVZa1Os1LPukvpYqteL1er6eKt5ka71kur1cr1yrXyylKxdjV99c67aaeRLo7iy+3ezul2p59uZttpfMdSuly5/uJSeqWavr22nq6/dfv22vo77996785La6+/Uhz0QFnp4vK15eVy9Vp5ubp0DOY/+r/7kPMfTDL/T4qiH2H+yWSXB/6bDxjAI3ug/w/6f+DwnfT+P0yz/x+1VPr//+9/S5P3/xP1v8e1/z/B84eJ6P8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ5YP8x/+Vq+shC3zxfjF4uhZ4rtJIRQCiH8/g/mwukDOeeKPPP/cvz832r4Ngl5htE5zhTLuRDCarH89vRhXwUAAAB4fH310eXPYrceXxZmXRBHKd60KV34YEr5khDC/MKPU8pWGr08O6Vk+ef7VNibUrb8BtZTU0oWb7mdmla2hzI3Dh9fvD+YTyiJoXSk5QAAAEdi7kA42i4EAACAo/TprAtgNpIwfpQ5fhacf/P+/qPNswf2AQAAACdQMusCAAAAgEOX9/9+/w8AAAAeb/H3/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4g537uU0ciOIA/GwwsP+0aLX3bWVvUEZKyDHHQAFpghJIC2mAGsgtJUQQYY+QHIEUiXGsoO+TPM7Y0W9mgMsbSwYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6NJztZ4/3v97uDRnt79MntUAAAAAp2yr9bz+Y9r0f6Trv9KlP6lfREQZEadq90GMWpmDlFOd+f/q3RyeIuqEwxjjdHyPiP/peP3d9acAAAAA12uzXM2aar1ppn1PiM/UbNqUP28y5RURUU1fMqWVh+ZvprD69z2Mu0xp9QbWJFNYs+U2PH1vlGuQtkHrlFYyWdRfYt0ruxkXAADoU7sSOFOFAAAAcAVu+54A/SiOzfE547g5pQeC31o9AAAA4Asq+p4AAAAA0Lm6/vf+PwAAALhuzfv/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6NK2Ws83y9Xs3P3FB3N2+8vkWxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwBv7844CIRAGYbB3fWcy9z+sNGhobFIFwsffGAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAm9/95f/E1DiTzL02lp5HkrVTY+vU2Ds3jv4wvn4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXOzPSwqEQBBEwZzxv5O+/2ElQc8gQgQ0PKqoRQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBFv/vl/8TUOJPMnTaWjkeStavG1lVj70Hj6MF4+zcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXOzcP28cRRQA8Hd7t5c/gDAGuTCgIFFAQ+xLSEgJBcii4CMgWc45GC4EEhckskBuoEKu0yAoEUICmS7fIXUspQldChdGogbt3u5lkxhyiszuEv9+0uy8Pa9m3uydLD/P2gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAafedeCkp4m52mBnH5Wu39jZWsn7ngT5zY+v2fNayuPOoib55++CTb7eXqycn5ionX9WfDAAAAIdDt6zvI+JOur2U9clMXv+n5TVZzf/9M+O4rOcfrPt39jaOFl+aL+v/3369+8JkopnxPNmgq2uj4eLDqfT+oyW23rOPvKKX3/n8dy/d/A1J3t98fjfN72fn25s33+3n4ZE6sgUAHsfJsi+C8uehrB80mRgAh0avUniX9X93ptmcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOqwuxlPlXEnIuZ79+LMzt7Gyn79ja3b82U7e/36VnXMbIg0IlbXRsO0xrW03ZWr1z5ZHo2Gl+sPTkREc7MXwYdTXBPx79cUH89obhX/HHTakUajQVK8P23J5yCD8rN38CM39A0JAIAnVlq0rK6/k24vZa91ZiP++uH++v+1ShxT1v93Pzp7qzpXtf4f1LbC9ltYv/jZwpWr195Yu7h8YXhh+OmbpwZvDU6fO3Pm3EJ2rxYXViMZLjadJgAAAP9j/aJV6/9k9uH9/+OVOKas/z//bvBlda6u+n9f9zb9ms4EAADgMOpPoude+fOPzj5XdPr9+GJ5ff3yYHycnJ8aH2tN9zEdKVq1/u/ONp0VAAAAUIfdzc59+//nK3FMuf//9I8v/lwdsxsRxyIuRcTw5Mql0fn6ltNqdfyhcj5Rv+mVAgAA0JRjRavu/6f58//J5JGHJCJef3Ucl//rapr6v/ve1z9V56o+/3+6viW2UjI3vh95PxfRm2s6IwAAAJ5kR4uWFfu/p9tLH/9y/IO+5/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6vZ3AAAA//+pzDYD")
ioctl$F2FS_IOC_SET_PIN_FILE(0xffffffffffffffff, 0x4004f50d, &(0x7f0000000180)=0xfffffff9)
sched_setscheduler(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bind$unix(0xffffffffffffffff, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x298)
memfd_create(0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x8, 0x1, 0x6}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa}, 0x90)
creat(&(0x7f0000000080)='./bus\x00', 0x0)
lsetxattr$security_ima(&(0x7f0000000400)='./bus\x00', &(0x7f0000000040), &(0x7f0000000100)=ANY=[@ANYBLOB="0440"], 0x1001, 0x0)
open(&(0x7f0000000200)='./bus\x00', 0x0, 0x0)

4.592016603s ago: executing program 0:
r0 = syz_open_dev$loop(&(0x7f00000001c0), 0x0, 0x109882)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x275a, 0x0)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, 0x0)

3.892343047s ago: executing program 3:
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000006518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) (async)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async)
syz_mount_image$fuse(0x0, &(0x7f0000000080)='./file1\x00', 0x0, 0x0, 0x0, 0x0, 0x0) (async)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) (async)
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) (async)
chdir(&(0x7f0000000080)='./file1\x00') (async)
r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
r4 = inotify_init1(0x0)
fcntl$setown(r4, 0x8, 0xffffffffffffffff) (async)
fcntl$getownex(r4, 0x10, &(0x7f0000000380)={0x0, <r5=>0x0})
setpgid(0x0, r5) (async)
mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) (async)
open$dir(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0) (async)
ioctl$AUTOFS_IOC_PROTOSUBVER(r3, 0x9360, 0x0)
r6 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) (async)
setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000000000)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x16}]}, 0x10) (async)
syz_emit_ethernet(0x46, &(0x7f0000000180)={@random="757e938fd660", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_ra}}}}}, 0x0) (async)
sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x40b, 0x0, 0x0, {}, [@NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @fib={{0x8}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x64}}, 0x0) (async)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r8 = dup2(r1, r7) (async)
r9 = signalfd4(r1, &(0x7f0000000240)={[0x60000000]}, 0x8, 0x80000)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r8, 0xc0189373, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r9, {0x1}}, './file0\x00'}) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000040)='ext4_es_remove_extent\x00', r7}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2600}, 0x90)

3.622775551s ago: executing program 0:
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
fsync(0xffffffffffffffff)

2.911944354s ago: executing program 4:
process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000))
ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6f)
r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
read$dsp(r1, &(0x7f00000002c0)=""/4096, 0x1000)
write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000)
syz_usb_connect(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="31010000dccd5e08cb060700000000952301090224000100007e0009043401"], 0x0)

2.564366809s ago: executing program 3:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000200)='hugetlb.2MB.failcnt\x00', 0x2, 0x0)
r2 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000000c0)='tasks\x00', 0x2, 0x0)
sendfile(r2, r1, 0x0, 0x4)

1.17647691s ago: executing program 1:
prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x2, 0x0)
getpid()
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB], &(0x7f0000000380)=""/233, 0x1a, 0xe9, 0x1}, 0x20)
mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})

1.150949347s ago: executing program 3:
r0 = socket(0x10, 0x4, 0xfffffff8)
syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff)
sendmsg$FOU_CMD_DEL(0xffffffffffffffff, 0x0, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000000)=@newtaction={0x6c, 0x30, 0x216822a75a8bdd29, 0x0, 0x0, {}, [{0x58, 0x1, [@m_simple={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0xb, 0x3, 'simple\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x0, 0x20000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0)
connect$inet6(r1, 0x0, 0x0)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='batadv0\x00', 0x10)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@empty, 0xdf4, 0x2, 0x3, 0x1, 0x1ff, 0x7f}, 0x20)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f00000002c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha1\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="8bf527", 0x3)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f000000e0c0), 0x10010)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10)
ioctl$sock_netdev_private(r5, 0x8914, &(0x7f0000000000))

843.445192ms ago: executing program 2:
r0 = socket(0x10, 0x803, 0x0)
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000a40)={0x14}, 0x14}}, 0x0)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14)
recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10}}}]}, 0x44}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000009240)={&(0x7f0000000440)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0xfff1}, {}, {0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_CT_MARK={0x8}]}}]}, 0x3c}}, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

0s ago: executing program 2:
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/tcp\x00')
lseek(r0, 0x7f, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.250' (ED25519) to the list of known hosts.
2024/06/11 06:59:10 fuzzer started
2024/06/11 06:59:11 dialing manager at 10.128.0.169:30024
[  185.007967][ T5059] cgroup: Unknown subsys name 'net'
[  185.291796][ T5059] cgroup: Unknown subsys name 'rlimit'
[  224.221159][ T1218] ieee802154 phy0 wpan0: encryption failed: -22
[  224.228039][ T1218] ieee802154 phy1 wpan1: encryption failed: -22
2024/06/11 07:00:07 starting 5 executor processes
[  239.348991][ T5065] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[  243.138779][   T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  243.166887][   T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  243.176680][   T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  243.199892][   T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  243.211594][   T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  243.221221][   T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  243.292810][ T5084] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  243.304326][ T5084] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  243.315139][ T5084] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  243.325392][ T5084] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  243.342598][ T5084] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  243.352864][ T5092] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  243.354533][ T5084] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  243.362591][ T5092] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  243.379139][ T5084] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  243.381768][ T5092] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  243.398234][ T5092] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  243.407879][ T5092] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  243.592782][   T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  243.656010][ T5084] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  243.683701][ T5089] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  243.704971][ T5089] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  243.716437][ T5089] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  243.751915][ T5084] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  243.771262][ T5089] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  243.795265][ T5089] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  243.798575][ T5084] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  243.805995][ T5089] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  243.814436][ T5084] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  243.830680][ T5084] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  244.850609][ T5086] chnl_net:caif_netlink_parms(): no params data found
[  244.978179][ T5088] chnl_net:caif_netlink_parms(): no params data found
[  245.327035][ T5084] Bluetooth: hci0: command tx timeout
[  245.489418][ T5084] Bluetooth: hci1: command tx timeout
[  245.489468][   T51] Bluetooth: hci2: command tx timeout
[  245.737787][ T5083] chnl_net:caif_netlink_parms(): no params data found
[  245.899715][ T5084] Bluetooth: hci4: command tx timeout
[  246.046709][ T5084] Bluetooth: hci3: command tx timeout
[  246.200331][ T5094] chnl_net:caif_netlink_parms(): no params data found
[  246.220514][ T5096] chnl_net:caif_netlink_parms(): no params data found
[  246.241659][ T5088] bridge0: port 1(bridge_slave_0) entered blocking state
[  246.249592][ T5088] bridge0: port 1(bridge_slave_0) entered disabled state
[  246.257691][ T5088] bridge_slave_0: entered allmulticast mode
[  246.267228][ T5088] bridge_slave_0: entered promiscuous mode
[  246.297213][ T5086] bridge0: port 1(bridge_slave_0) entered blocking state
[  246.304997][ T5086] bridge0: port 1(bridge_slave_0) entered disabled state
[  246.313009][ T5086] bridge_slave_0: entered allmulticast mode
[  246.322583][ T5086] bridge_slave_0: entered promiscuous mode
[  246.360880][ T5088] bridge0: port 2(bridge_slave_1) entered blocking state
[  246.369031][ T5088] bridge0: port 2(bridge_slave_1) entered disabled state
[  246.377133][ T5088] bridge_slave_1: entered allmulticast mode
[  246.386808][ T5088] bridge_slave_1: entered promiscuous mode
[  246.426065][ T5086] bridge0: port 2(bridge_slave_1) entered blocking state
[  246.433939][ T5086] bridge0: port 2(bridge_slave_1) entered disabled state
[  246.442070][ T5086] bridge_slave_1: entered allmulticast mode
[  246.451696][ T5086] bridge_slave_1: entered promiscuous mode
[  246.884267][ T5083] bridge0: port 1(bridge_slave_0) entered blocking state
[  246.892107][ T5083] bridge0: port 1(bridge_slave_0) entered disabled state
[  246.900032][ T5083] bridge_slave_0: entered allmulticast mode
[  246.909406][ T5083] bridge_slave_0: entered promiscuous mode
[  246.932653][ T5088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  246.942779][ T5083] bridge0: port 2(bridge_slave_1) entered blocking state
[  246.950707][ T5083] bridge0: port 2(bridge_slave_1) entered disabled state
[  246.958592][ T5083] bridge_slave_1: entered allmulticast mode
[  246.968213][ T5083] bridge_slave_1: entered promiscuous mode
[  247.026967][ T5086] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  247.051764][ T5086] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  247.079464][ T5088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  247.280368][ T5083] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  247.304119][ T5086] team0: Port device team_slave_0 added
[  247.376265][ T5083] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  247.406136][ T5084] Bluetooth: hci0: command tx timeout
[  247.509929][ T5086] team0: Port device team_slave_1 added
[  247.536369][ T5088] team0: Port device team_slave_0 added
[  247.587386][ T5084] Bluetooth: hci1: command tx timeout
[  247.587770][   T51] Bluetooth: hci2: command tx timeout
[  247.642964][ T5083] team0: Port device team_slave_0 added
[  247.778902][ T5088] team0: Port device team_slave_1 added
[  247.834768][ T5083] team0: Port device team_slave_1 added
[  247.844436][ T5086] batman_adv: batadv0: Adding interface: batadv_slave_0
[  247.851881][ T5086] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  247.879191][ T5086] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  247.975893][   T51] Bluetooth: hci4: command tx timeout
[  248.058942][ T5086] batman_adv: batadv0: Adding interface: batadv_slave_1
[  248.066316][ T5086] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  248.093201][ T5086] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  248.139281][   T51] Bluetooth: hci3: command tx timeout
[  248.148400][ T5096] bridge0: port 1(bridge_slave_0) entered blocking state
[  248.159103][ T5096] bridge0: port 1(bridge_slave_0) entered disabled state
[  248.167139][ T5096] bridge_slave_0: entered allmulticast mode
[  248.176730][ T5096] bridge_slave_0: entered promiscuous mode
[  248.225406][ T5094] bridge0: port 1(bridge_slave_0) entered blocking state
[  248.233408][ T5094] bridge0: port 1(bridge_slave_0) entered disabled state
[  248.241458][ T5094] bridge_slave_0: entered allmulticast mode
[  248.250753][ T5094] bridge_slave_0: entered promiscuous mode
[  248.279388][ T5083] batman_adv: batadv0: Adding interface: batadv_slave_0
[  248.287114][ T5083] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  248.314637][ T5083] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  248.328661][ T5096] bridge0: port 2(bridge_slave_1) entered blocking state
[  248.337175][ T5096] bridge0: port 2(bridge_slave_1) entered disabled state
[  248.344794][ T5096] bridge_slave_1: entered allmulticast mode
[  248.354327][ T5096] bridge_slave_1: entered promiscuous mode
[  248.366343][ T5088] batman_adv: batadv0: Adding interface: batadv_slave_0
[  248.373542][ T5088] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  248.400198][ T5088] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  248.413837][ T5094] bridge0: port 2(bridge_slave_1) entered blocking state
[  248.421743][ T5094] bridge0: port 2(bridge_slave_1) entered disabled state
[  248.429817][ T5094] bridge_slave_1: entered allmulticast mode
[  248.439352][ T5094] bridge_slave_1: entered promiscuous mode
[  248.490823][ T5083] batman_adv: batadv0: Adding interface: batadv_slave_1
[  248.498102][ T5083] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  248.524681][ T5083] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  248.625885][ T5088] batman_adv: batadv0: Adding interface: batadv_slave_1
[  248.633424][ T5088] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  248.659829][ T5088] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  248.750844][ T5094] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  248.771053][ T5096] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  248.789654][ T5094] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  248.956821][ T5096] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  249.018127][ T5086] hsr_slave_0: entered promiscuous mode
[  249.029643][ T5086] hsr_slave_1: entered promiscuous mode
[  249.084664][ T5083] hsr_slave_0: entered promiscuous mode
[  249.094195][ T5083] hsr_slave_1: entered promiscuous mode
[  249.102593][ T5083] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  249.112613][ T5083] Cannot create hsr debugfs directory
[  249.235166][ T5096] team0: Port device team_slave_0 added
[  249.291258][ T5094] team0: Port device team_slave_0 added
[  249.387633][ T5096] team0: Port device team_slave_1 added
[  249.437181][ T5094] team0: Port device team_slave_1 added
[  249.475090][ T5088] hsr_slave_0: entered promiscuous mode
[  249.488991][ T5088] hsr_slave_1: entered promiscuous mode
[  249.496095][   T51] Bluetooth: hci0: command tx timeout
[  249.502832][ T5088] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  249.510805][ T5088] Cannot create hsr debugfs directory
[  249.646023][   T51] Bluetooth: hci1: command tx timeout
[  249.651109][ T5084] Bluetooth: hci2: command tx timeout
[  249.753224][ T5094] batman_adv: batadv0: Adding interface: batadv_slave_0
[  249.761492][ T5094] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  249.788461][ T5094] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  249.858394][ T5096] batman_adv: batadv0: Adding interface: batadv_slave_0
[  249.865517][ T5096] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  249.892118][ T5096] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  249.922881][ T5096] batman_adv: batadv0: Adding interface: batadv_slave_1
[  249.930215][ T5096] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  249.956631][ T5096] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  249.973494][ T5094] batman_adv: batadv0: Adding interface: batadv_slave_1
[  249.980902][ T5094] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  250.007352][ T5094] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  250.053096][ T5084] Bluetooth: hci4: command tx timeout
[  250.217719][ T5084] Bluetooth: hci3: command tx timeout
[  250.533461][ T5094] hsr_slave_0: entered promiscuous mode
[  250.545161][ T5094] hsr_slave_1: entered promiscuous mode
[  250.554273][ T5094] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  250.563058][ T5094] Cannot create hsr debugfs directory
[  250.720433][ T5096] hsr_slave_0: entered promiscuous mode
[  250.731072][ T5096] hsr_slave_1: entered promiscuous mode
[  250.740018][ T5096] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  250.747901][ T5096] Cannot create hsr debugfs directory
[  251.216837][ T5083] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  251.285996][ T5083] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  251.388282][ T5083] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  251.484900][ T5083] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  251.576845][ T5084] Bluetooth: hci0: command tx timeout
[  251.725989][ T5084] Bluetooth: hci1: command tx timeout
[  251.731780][ T5084] Bluetooth: hci2: command tx timeout
[  251.810817][ T5086] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  251.835888][ T5086] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  251.874686][ T5086] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  251.926874][ T5088] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  251.963496][ T5088] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  251.985448][ T5086] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  252.012879][ T5088] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  252.042601][ T5088] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  252.160105][ T5084] Bluetooth: hci4: command tx timeout
[  252.286721][ T5084] Bluetooth: hci3: command tx timeout
[  252.374853][ T5096] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  252.439025][ T5094] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  252.475574][ T5096] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  252.524770][ T5094] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  252.548307][ T5096] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  252.577154][ T5096] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  252.622945][ T5094] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  252.665376][ T5094] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  253.348258][ T5083] 8021q: adding VLAN 0 to HW filter on device bond0
[  253.443412][ T5088] 8021q: adding VLAN 0 to HW filter on device bond0
[  253.590149][ T5083] 8021q: adding VLAN 0 to HW filter on device team0
[  253.708008][ T5088] 8021q: adding VLAN 0 to HW filter on device team0
[  253.744781][   T10] bridge0: port 1(bridge_slave_0) entered blocking state
[  253.752918][   T10] bridge0: port 1(bridge_slave_0) entered forwarding state
[  253.893878][ T5086] 8021q: adding VLAN 0 to HW filter on device bond0
[  253.975619][   T25] bridge0: port 1(bridge_slave_0) entered blocking state
[  253.983461][   T25] bridge0: port 1(bridge_slave_0) entered forwarding state
[  254.000318][   T25] bridge0: port 2(bridge_slave_1) entered blocking state
[  254.008158][   T25] bridge0: port 2(bridge_slave_1) entered forwarding state
[  254.068641][   T25] bridge0: port 2(bridge_slave_1) entered blocking state
[  254.076594][   T25] bridge0: port 2(bridge_slave_1) entered forwarding state
[  254.329333][ T5086] 8021q: adding VLAN 0 to HW filter on device team0
[  254.567355][ T4595] bridge0: port 1(bridge_slave_0) entered blocking state
[  254.575111][ T4595] bridge0: port 1(bridge_slave_0) entered forwarding state
[  254.629838][ T4595] bridge0: port 2(bridge_slave_1) entered blocking state
[  254.637861][ T4595] bridge0: port 2(bridge_slave_1) entered forwarding state
[  254.731812][ T5096] 8021q: adding VLAN 0 to HW filter on device bond0
[  254.889207][ T5094] 8021q: adding VLAN 0 to HW filter on device bond0
[  255.014489][ T5096] 8021q: adding VLAN 0 to HW filter on device team0
[  255.161097][ T5094] 8021q: adding VLAN 0 to HW filter on device team0
[  255.211403][  T780] bridge0: port 1(bridge_slave_0) entered blocking state
[  255.219322][  T780] bridge0: port 1(bridge_slave_0) entered forwarding state
[  255.309731][ T5086] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  255.401591][  T780] bridge0: port 2(bridge_slave_1) entered blocking state
[  255.409608][  T780] bridge0: port 2(bridge_slave_1) entered forwarding state
[  255.433518][  T780] bridge0: port 1(bridge_slave_0) entered blocking state
[  255.441386][  T780] bridge0: port 1(bridge_slave_0) entered forwarding state
[  255.466275][  T780] bridge0: port 2(bridge_slave_1) entered blocking state
[  255.474053][  T780] bridge0: port 2(bridge_slave_1) entered forwarding state
[  255.881548][ T5096] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  255.892484][ T5096] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  257.178669][ T5083] 8021q: adding VLAN 0 to HW filter on device batadv0
[  257.323063][ T5088] 8021q: adding VLAN 0 to HW filter on device batadv0
[  257.850128][ T5083] veth0_vlan: entered promiscuous mode
[  258.021269][ T5083] veth1_vlan: entered promiscuous mode
[  258.080482][ T5086] 8021q: adding VLAN 0 to HW filter on device batadv0
[  258.222695][ T5088] veth0_vlan: entered promiscuous mode
[  258.325045][ T5096] 8021q: adding VLAN 0 to HW filter on device batadv0
[  258.388731][ T5088] veth1_vlan: entered promiscuous mode
[  258.528790][ T5083] veth0_macvtap: entered promiscuous mode
[  258.633182][ T5083] veth1_macvtap: entered promiscuous mode
[  258.778098][ T5094] 8021q: adding VLAN 0 to HW filter on device batadv0
[  258.937867][ T5088] veth0_macvtap: entered promiscuous mode
[  258.975962][ T5083] batman_adv: batadv0: Interface activated: batadv_slave_0
[  259.035049][ T5088] veth1_macvtap: entered promiscuous mode
[  259.124632][ T5083] batman_adv: batadv0: Interface activated: batadv_slave_1
[  259.233823][ T5096] veth0_vlan: entered promiscuous mode
[  259.281064][ T5083] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  259.290783][ T5083] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  259.300137][ T5083] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  259.309461][ T5083] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  259.347711][ T5088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  259.358616][ T5088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  259.378312][ T5088] batman_adv: batadv0: Interface activated: batadv_slave_0
[  259.542906][ T5096] veth1_vlan: entered promiscuous mode
[  259.559642][ T5088] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  259.573404][ T5088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  259.589382][ T5088] batman_adv: batadv0: Interface activated: batadv_slave_1
[  259.764377][ T5088] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  259.773774][ T5088] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  259.785215][ T5088] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  259.794659][ T5088] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  259.866566][ T5094] veth0_vlan: entered promiscuous mode
[  259.969246][ T5096] veth0_macvtap: entered promiscuous mode
[  260.052306][ T5094] veth1_vlan: entered promiscuous mode
[  260.100277][ T5096] veth1_macvtap: entered promiscuous mode
[  260.436603][ T5094] veth0_macvtap: entered promiscuous mode
[  260.460756][ T5096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  260.473065][ T5096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  260.483399][ T5096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  260.494223][ T5096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  260.510173][ T5096] batman_adv: batadv0: Interface activated: batadv_slave_0
[  260.586255][ T5094] veth1_macvtap: entered promiscuous mode
[  260.758379][ T5094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  260.769375][ T5094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  260.779768][ T5094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  260.790630][ T5094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  260.800931][ T5094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  260.811811][ T5094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  260.827806][ T5094] batman_adv: batadv0: Interface activated: batadv_slave_0
[  260.855526][ T5096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  260.868848][ T5096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  260.879025][ T5096] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  260.889912][ T5096] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  260.905624][ T5096] batman_adv: batadv0: Interface activated: batadv_slave_1
[  261.078752][ T5096] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  261.088278][ T5096] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  261.097543][ T5096] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  261.106998][ T5096] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  261.169035][ T5094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  261.179886][ T5094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  261.190121][ T5094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  261.200925][ T5094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  261.211153][ T5094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  261.223888][ T5094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  261.239887][ T5094] batman_adv: batadv0: Interface activated: batadv_slave_1
[  261.535271][ T5094] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  261.545239][ T5094] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  261.554497][ T5094] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  261.563678][ T5094] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  261.771294][ T5086] veth0_vlan: entered promiscuous mode
[  261.963967][ T5086] veth1_vlan: entered promiscuous mode
[  262.434379][ T5086] veth0_macvtap: entered promiscuous mode
[  262.563877][ T5086] veth1_macvtap: entered promiscuous mode
[  262.803294][ T5086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  262.816698][ T5086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  262.826975][ T5086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  262.837805][ T5086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  262.847989][ T5086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  262.858837][ T5086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  262.869130][ T5086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  262.879881][ T5086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  262.895947][ T5086] batman_adv: batadv0: Interface activated: batadv_slave_0
[  263.012697][ T5086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  263.025166][ T5086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  263.035435][ T5086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  263.046335][ T5086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  263.056595][ T5086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  263.067386][ T5086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  263.077487][ T5086] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  263.088544][ T5086] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  263.104030][ T5086] batman_adv: batadv0: Interface activated: batadv_slave_1
[  263.270154][ T5086] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  263.280782][ T5086] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  263.290007][ T5086] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  263.299153][ T5086] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  266.945543][   T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  266.953843][   T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  267.218388][   T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  267.230058][   T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  267.888839][ T5136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  267.897349][ T5136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  267.944133][ T5254] Zero length message leads to an empty skb
[  268.116565][ T5136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  268.124756][ T5136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  268.855895][ T3304] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  268.864079][ T3304] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  269.127537][ T5142] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  269.171577][ T3413] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  269.179843][ T3413] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  269.386408][ T5142] usb 4-1: Using ep0 maxpacket: 8
[  269.541110][ T5142] usb 4-1: config 0 has an invalid interface number: 52 but max is 0
[  269.549800][ T5142] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  269.560417][ T5142] usb 4-1: config 0 has no interface number 0
[  269.566897][ T5142] usb 4-1: config 0 interface 52 has no altsetting 0
[  269.619559][  T780] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  269.627782][  T780] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  269.837529][ T5142] usb 4-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00
[  269.847027][ T5142] usb 4-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35
[  269.855591][ T5142] usb 4-1: Product: syz
[  269.860328][ T5142] usb 4-1: SerialNumber: syz
[  269.920627][ T5142] usb 4-1: config 0 descriptor??
[  270.063001][   T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  270.071475][   T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  270.208310][ T5142] usb 4-1: Can not set alternate setting to 1, error: -71
[  270.216261][ T5142] synaptics_usb 4-1:0.52: probe with driver synaptics_usb failed with error -71
[  270.325082][ T5142] usb 4-1: USB disconnect, device number 2
[  270.603745][ T3983] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  270.612906][ T3983] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  271.056111][ T3413] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  271.064229][ T3413] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  272.342115][ T5142] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  272.761879][ T5142] usb 5-1: Using ep0 maxpacket: 8
[  272.857084][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[  272.867585][    T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!!
[  272.883521][ T5293] loop3: detected capacity change from 0 to 512
[  272.901038][    T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!!
[  272.902746][ T5293] EXT4-fs: Ignoring removed nobh option
[  272.930055][ T5293] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  272.943763][ T5293] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  272.992422][ T5293] EXT4-fs (loop3): orphan cleanup on readonly fs
[  273.002959][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  273.004156][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  273.040094][ T5293] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2847: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  273.057233][ T5142] usb 5-1: config 0 has an invalid interface number: 52 but max is 0
[  273.065766][ T5142] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  273.076842][ T5142] usb 5-1: config 0 has no interface number 0
[  273.083299][ T5142] usb 5-1: config 0 interface 52 has no altsetting 0
[  273.098692][ T5293] EXT4-fs (loop3): 1 truncate cleaned up
[  273.103064][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  273.105258][ T5293] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  273.425246][ T5296] loop1: detected capacity change from 0 to 512
[  273.456647][ T5296] =======================================================
[  273.456647][ T5296] WARNING: The mand mount option has been deprecated and
[  273.456647][ T5296]          and is ignored by this kernel. Remove the mand
[  273.456647][ T5296]          option from the mount to silence this warning.
[  273.456647][ T5296] =======================================================
[  273.540217][ T5142] usb 5-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00
[  273.547943][ T5083] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  273.549968][ T5142] usb 5-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35
[  273.567501][ T5142] usb 5-1: Product: syz
[  273.571935][ T5142] usb 5-1: SerialNumber: syz
[  273.644258][ T5142] usb 5-1: config 0 descriptor??
[  273.956960][ T5296] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz-executor.1: bg 0: block 5: invalid block bitmap
[  274.005250][ T5142] usb 5-1: Can not set alternate setting to 1, error: -71
[  274.013577][ T5142] synaptics_usb 5-1:0.52: probe with driver synaptics_usb failed with error -71
[  274.033892][ T5296] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6537: Corrupt filesystem
[  274.158805][ T5296] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz-executor.1: invalid indirect mapped block 3 (level 2)
[  274.263488][ T5142] usb 5-1: USB disconnect, device number 2
[  274.409058][ T5302] loop2: detected capacity change from 0 to 512
[  274.432782][ T5302] EXT4-fs: Ignoring removed nobh option
[  274.434164][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  274.507182][ T5302] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  274.531633][    T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!!
[  274.552209][ T5296] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2963: inode #11: comm syz-executor.1: corrupted xattr block 255: invalid header
[  274.650624][ T5302] EXT4-fs (loop2): orphan cleanup on readonly fs
[  274.693203][ T5302] EXT4-fs (loop2): 1 truncate cleaned up
[  274.699566][ T5302] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  274.743900][ T5296] EXT4-fs warning (device loop1): ext4_evict_inode:271: xattr delete (err -117)
[  274.754249][ T5296] EXT4-fs (loop1): 1 orphan inode deleted
[  274.762360][ T5296] EXT4-fs (loop1): 1 truncate cleaned up
[  274.781808][    T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!!
[  274.838017][ T5296] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  274.947274][    T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!!
[  275.076822][ T5096] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  275.240146][ T5296] syz-executor.1[5296] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  275.240898][ T5296] syz-executor.1[5296] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  275.686134][ T5136] usb 4-1: new full-speed USB device number 3 using dummy_hcd
[  275.728350][ T5094] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  276.127844][ T5142] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  276.182292][ T5136] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  276.387324][ T5136] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  276.397416][ T5136] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  276.406104][ T5136] usb 4-1: Product: syz
[  276.410534][ T5136] usb 4-1: Manufacturer: syz
[  276.415412][ T5136] usb 4-1: SerialNumber: syz
[  276.416715][ T5142] usb 3-1: Using ep0 maxpacket: 8
[  276.498965][ T5136] usb 4-1: config 0 descriptor??
[  276.581739][ T5142] usb 3-1: config 0 has an invalid interface number: 52 but max is 0
[  276.590639][ T5142] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  276.592007][ T5136] em28xx 4-1:0.0: New device syz syz @ 12 Mbps (2040:0264, interface 0, class 0)
[  276.601085][ T5142] usb 3-1: config 0 has no interface number 0
[  276.601221][ T5142] usb 3-1: config 0 interface 52 has no altsetting 0
[  276.626519][ T5136] em28xx 4-1:0.0: Device initialization failed.
[  276.633121][ T5136] em28xx 4-1:0.0: Device must be connected to a high-speed USB 2.0 port.
[  276.760010][ T5142] usb 3-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00
[  276.770275][ T5142] usb 3-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35
[  276.779076][ T5142] usb 3-1: Product: syz
[  276.785618][ T5142] usb 3-1: SerialNumber: syz
[  276.820667][   T25] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  276.874032][ T5142] usb 3-1: config 0 descriptor??
[  276.963345][ T5136] usb 4-1: USB disconnect, device number 3
[  277.146130][   T25] usb 5-1: Using ep0 maxpacket: 8
[  277.211333][ T5142] usb 3-1: Can not set alternate setting to 1, error: -71
[  277.218960][ T5142] synaptics_usb 3-1:0.52: probe with driver synaptics_usb failed with error -71
[  277.301525][ T5142] usb 3-1: USB disconnect, device number 2
[  277.345616][   T25] usb 5-1: config 0 has an invalid interface number: 52 but max is 0
[  277.354770][   T25] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  277.365375][   T25] usb 5-1: config 0 has no interface number 0
[  277.371876][   T25] usb 5-1: config 0 interface 52 has no altsetting 0
[  277.548460][   T25] usb 5-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00
[  277.558210][   T25] usb 5-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35
[  277.567107][   T25] usb 5-1: Product: syz
[  277.571624][   T25] usb 5-1: SerialNumber: syz
[  277.658013][   T25] usb 5-1: config 0 descriptor??
[  278.047103][   T25] usb 5-1: Can not set alternate setting to 1, error: -71
[  278.054591][   T25] synaptics_usb 5-1:0.52: probe with driver synaptics_usb failed with error -71
[  278.150358][   T25] usb 5-1: USB disconnect, device number 3
[  278.958264][ T5339] loop3: detected capacity change from 0 to 512
[  278.989506][ T5339] EXT4-fs: Ignoring removed nobh option
[  279.006286][ T5339] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  279.111225][ T5339] EXT4-fs (loop3): orphan cleanup on readonly fs
[  279.154791][ T5339] EXT4-fs (loop3): 1 truncate cleaned up
[  279.161491][ T5339] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  279.861387][ T5348] loop2: detected capacity change from 0 to 512
[  279.888284][ T5348] EXT4-fs: Ignoring removed nobh option
[  280.834812][ T5348] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  284.086968][ T5348] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR
[  284.087232][ T5348] EXT4-fs: failed to create workqueue
[  284.102346][ T5348] EXT4-fs (loop2): mount failed
[  284.598534][ T5083] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  285.053522][ T5354] loop4: detected capacity change from 0 to 512
[  285.253621][ T5354] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz-executor.4: bg 0: block 5: invalid block bitmap
[  285.363994][ T5354] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6537: Corrupt filesystem
[  285.433085][ T5354] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz-executor.4: invalid indirect mapped block 3 (level 2)
[  285.458823][   T25] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  285.527307][ T5354] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2963: inode #11: comm syz-executor.4: corrupted xattr block 255: invalid header
[  285.581440][ T5354] EXT4-fs warning (device loop4): ext4_evict_inode:271: xattr delete (err -117)
[  285.593267][ T5354] EXT4-fs (loop4): 1 orphan inode deleted
[  285.600069][ T5354] EXT4-fs (loop4): 1 truncate cleaned up
[  285.606390][ T5354] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  285.683668][ T1218] ieee802154 phy0 wpan0: encryption failed: -22
[  285.690729][ T1218] ieee802154 phy1 wpan1: encryption failed: -22
[  285.817435][   T25] usb 3-1: Using ep0 maxpacket: 8
[  285.895457][ T5354] syz-executor.4[5354] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  285.916649][ T5354] syz-executor.4[5354] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  285.956427][   T25] usb 3-1: config 0 has an invalid interface number: 52 but max is 0
[  285.977405][   T25] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  285.987930][   T25] usb 3-1: config 0 has no interface number 0
[  285.994306][   T25] usb 3-1: config 0 interface 52 has no altsetting 0
[  286.186507][   T25] usb 3-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00
[  286.196473][   T25] usb 3-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35
[  286.207072][   T25] usb 3-1: Product: syz
[  286.211503][   T25] usb 3-1: SerialNumber: syz
[  286.325397][   T25] usb 3-1: config 0 descriptor??
[  286.341916][ T5086] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  286.467579][  T779] usb 4-1: new full-speed USB device number 4 using dummy_hcd
[  286.686846][   T25] usb 3-1: Can not set alternate setting to 1, error: -71
[  286.694341][   T25] synaptics_usb 3-1:0.52: probe with driver synaptics_usb failed with error -71
[  286.804295][   T25] usb 3-1: USB disconnect, device number 3
[  286.936820][  T779] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  286.977341][ T5136] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  287.135499][  T779] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  287.145132][  T779] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  287.153654][  T779] usb 4-1: Product: syz
[  287.158864][  T779] usb 4-1: Manufacturer: syz
[  287.163726][  T779] usb 4-1: SerialNumber: syz
[  287.282492][  T779] usb 4-1: config 0 descriptor??
[  287.355495][  T779] em28xx 4-1:0.0: New device syz syz @ 12 Mbps (2040:0264, interface 0, class 0)
[  287.365940][  T779] em28xx 4-1:0.0: Device initialization failed.
[  287.372476][  T779] em28xx 4-1:0.0: Device must be connected to a high-speed USB 2.0 port.
[  287.387308][ T5136] usb 2-1: Using ep0 maxpacket: 8
[  287.526984][ T5136] usb 2-1: config 0 has an invalid interface number: 52 but max is 0
[  287.543027][ T5136] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  287.559412][ T5136] usb 2-1: config 0 has no interface number 0
[  287.572914][ T5136] usb 2-1: config 0 interface 52 has no altsetting 0
[  287.756728][ T5136] usb 2-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00
[  287.766496][ T5136] usb 2-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35
[  287.775084][ T5136] usb 2-1: Product: syz
[  287.779768][ T5136] usb 2-1: SerialNumber: syz
[  287.929733][ T5379] loop0: detected capacity change from 0 to 512
[  287.950503][ T5379] EXT4-fs: Ignoring removed nobh option
[  287.967887][ T5379] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  288.059645][ T5136] usb 2-1: config 0 descriptor??
[  288.101826][ T5379] EXT4-fs (loop0): orphan cleanup on readonly fs
[  288.135020][ T5379] EXT4-fs (loop0): 1 truncate cleaned up
[  288.141848][ T5379] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  288.420366][ T5136] usb 2-1: Can not set alternate setting to 1, error: -71
[  288.428907][ T5136] synaptics_usb 2-1:0.52: probe with driver synaptics_usb failed with error -71
[  288.508367][ T5136] usb 2-1: USB disconnect, device number 2
[  288.531458][  T779] usb 4-1: USB disconnect, device number 4
[  288.818597][ T5088] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  289.183486][   T10] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  289.437204][   T10] usb 5-1: Using ep0 maxpacket: 8
[  289.596562][   T10] usb 5-1: config 0 has an invalid interface number: 52 but max is 0
[  289.605184][   T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  289.615929][   T10] usb 5-1: config 0 has no interface number 0
[  289.622306][   T10] usb 5-1: config 0 interface 52 has no altsetting 0
[  289.746573][   T10] usb 5-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00
[  289.756452][   T10] usb 5-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35
[  289.765019][   T10] usb 5-1: Product: syz
[  289.769667][   T10] usb 5-1: SerialNumber: syz
[  289.878846][   T10] usb 5-1: config 0 descriptor??
[  290.243612][ T5388] loop2: detected capacity change from 0 to 512
[  290.270447][ T5388] EXT4-fs: Ignoring removed nobh option
[  290.303474][ T5388] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  290.425460][ T5388] EXT4-fs (loop2): orphan cleanup on readonly fs
[  290.616635][ T5388] EXT4-fs (loop2): 1 truncate cleaned up
[  290.622760][ T5388] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  290.737004][   T10] usb 5-1: Can not set alternate setting to 1, error: -71
[  290.744517][   T10] synaptics_usb 5-1:0.52: probe with driver synaptics_usb failed with error -71
[  290.761541][   T10] usb 5-1: USB disconnect, device number 4
[  291.353490][ T5096] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  291.673780][ T5394] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  292.601922][ T5403] loop3: detected capacity change from 0 to 512
[  292.820529][ T5403] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz-executor.3: bg 0: block 5: invalid block bitmap
[  292.894258][ T5403] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6537: Corrupt filesystem
[  292.982290][ T5403] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz-executor.3: invalid indirect mapped block 3 (level 2)
[  293.075588][ T5403] EXT4-fs error (device loop3): ext4_xattr_delete_inode:2963: inode #11: comm syz-executor.3: corrupted xattr block 255: invalid header
[  293.116619][ T5403] EXT4-fs warning (device loop3): ext4_evict_inode:271: xattr delete (err -117)
[  293.126401][ T5403] EXT4-fs (loop3): 1 orphan inode deleted
[  293.132415][ T5403] EXT4-fs (loop3): 1 truncate cleaned up
[  293.138723][ T5403] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  293.420232][ T5403] syz-executor.3[5403] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  293.420869][ T5403] syz-executor.3[5403] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  293.788375][ T5083] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  293.970986][ T5416] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  294.230871][ T5420] loop2: detected capacity change from 0 to 256
[  294.447291][   T43] usb 2-1: new full-speed USB device number 3 using dummy_hcd
[  294.876575][   T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  295.090233][   T43] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  295.100317][   T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  295.108832][   T43] usb 2-1: Product: syz
[  295.115513][   T43] usb 2-1: Manufacturer: syz
[  295.121067][   T43] usb 2-1: SerialNumber: syz
[  295.160900][   T25] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  295.208616][   T43] usb 2-1: config 0 descriptor??
[  295.464472][   T43] em28xx 2-1:0.0: New device syz syz @ 12 Mbps (2040:0264, interface 0, class 0)
[  295.474151][   T43] em28xx 2-1:0.0: Device initialization failed.
[  295.485895][   T43] em28xx 2-1:0.0: Device must be connected to a high-speed USB 2.0 port.
[  295.676846][   T25] usb 4-1: Using ep0 maxpacket: 8
[  295.806674][   T25] usb 4-1: config 0 has an invalid interface number: 52 but max is 0
[  295.815237][   T25] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  295.826123][   T25] usb 4-1: config 0 has no interface number 0
[  295.834505][   T25] usb 4-1: config 0 interface 52 has no altsetting 0
[  296.096325][   T43] usb 2-1: USB disconnect, device number 3
[  296.147049][   T25] usb 4-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00
[  296.156871][   T25] usb 4-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35
[  296.166162][   T25] usb 4-1: Product: syz
[  296.170672][   T25] usb 4-1: SerialNumber: syz
[  296.413328][   T25] usb 4-1: config 0 descriptor??
[  296.957959][ T5428] loop0: detected capacity change from 0 to 512
[  297.002883][   T25] usb 4-1: Can not set alternate setting to 1, error: -71
[  297.010746][   T25] synaptics_usb 4-1:0.52: probe with driver synaptics_usb failed with error -71
[  297.305028][   T25] usb 4-1: USB disconnect, device number 5
[  297.328366][ T5428] EXT4-fs: Ignoring removed nobh option
[  297.366587][ T5428] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  297.781461][ T5428] EXT4-fs (loop0): orphan cleanup on readonly fs
[  297.873128][ T5428] EXT4-fs (loop0): 1 truncate cleaned up
[  297.881735][ T5428] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  298.112043][ T5088] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  298.239282][ T5437] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'.
[  299.355254][ T5450] loop1: detected capacity change from 0 to 512
[  299.566672][  T779] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  299.576859][ T5450] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz-executor.1: bg 0: block 5: invalid block bitmap
[  299.666604][ T5450] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6537: Corrupt filesystem
[  299.696498][ T5450] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz-executor.1: invalid indirect mapped block 3 (level 2)
[  299.757649][ T5450] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2963: inode #11: comm syz-executor.1: corrupted xattr block 255: invalid header
[  299.832207][ T5450] EXT4-fs warning (device loop1): ext4_evict_inode:271: xattr delete (err -117)
[  299.842029][ T5450] EXT4-fs (loop1): 1 orphan inode deleted
[  299.848226][ T5450] EXT4-fs (loop1): 1 truncate cleaned up
[  299.854164][ T5450] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  299.896484][  T779] usb 5-1: Using ep0 maxpacket: 8
[  300.040458][  T779] usb 5-1: config 0 has an invalid interface number: 52 but max is 0
[  300.049493][  T779] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  300.060191][  T779] usb 5-1: config 0 has no interface number 0
[  300.066737][  T779] usb 5-1: config 0 interface 52 has no altsetting 0
[  300.079557][ T5450] syz-executor.1[5450] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  300.080352][ T5450] syz-executor.1[5450] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  300.240609][ T5459] loop3: detected capacity change from 0 to 256
[  300.344792][  T779] usb 5-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00
[  300.354484][  T779] usb 5-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35
[  300.363403][  T779] usb 5-1: Product: syz
[  300.369806][  T779] usb 5-1: SerialNumber: syz
[  300.406753][  T779] usb 5-1: config 0 descriptor??
[  300.567005][ T5094] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  300.759263][  T779] usb 5-1: Can not set alternate setting to 1, error: -71
[  300.767592][  T779] synaptics_usb 5-1:0.52: probe with driver synaptics_usb failed with error -71
[  300.873484][  T779] usb 5-1: USB disconnect, device number 5
[  302.170698][ T5466] loop1: detected capacity change from 0 to 40427
[  302.201864][ T5466] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  302.210383][ T5466] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  302.398365][ T5466] F2FS-fs (loop1): Found nat_bits in checkpoint
[  302.801358][ T5466] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  302.808956][ T5466] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  303.721290][   T29] audit: type=1804 audit(1718089271.345:2): pid=5487 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir27021880/syzkaller.6AV1xb/15/bus/bus" dev="loop1" ino=10 res=1 errno=0
[  304.035938][   T43] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  304.656568][   T43] usb 5-1: Using ep0 maxpacket: 8
[  305.057161][   T43] usb 5-1: config 0 has an invalid interface number: 52 but max is 0
[  305.065596][   T43] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  305.076296][   T43] usb 5-1: config 0 has no interface number 0
[  305.082682][   T43] usb 5-1: config 0 interface 52 has no altsetting 0
[  305.337154][   T43] usb 5-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 0.00
[  305.347306][   T43] usb 5-1: New USB device strings: Mfr=0, Product=149, SerialNumber=35
[  305.358413][   T43] usb 5-1: Product: syz
[  305.362851][   T43] usb 5-1: SerialNumber: syz
[  305.387034][   T55] =====================================================
[  305.394356][   T55] BUG: KMSAN: uninit-value in virtqueue_add+0x1e86/0x65c0
[  305.401672][   T55]  virtqueue_add+0x1e86/0x65c0
[  305.406633][   T55]  virtqueue_add_sgs+0x186/0x1b0
[  305.411764][   T55]  virtscsi_add_cmd+0x838/0xad0
[  305.416803][   T55]  virtscsi_queuecommand+0x898/0xa60
[  305.422283][   T55]  scsi_queue_rq+0x4cc7/0x5a80
[  305.427229][   T55]  blk_mq_dispatch_rq_list+0x79b/0x3440
[  305.433006][   T55]  __blk_mq_sched_dispatch_requests+0x11b7/0x26e0
[  305.439652][   T55]  blk_mq_sched_dispatch_requests+0x12f/0x270
[  305.445944][   T55]  blk_mq_run_work_fn+0xd0/0x280
[  305.451061][   T55]  process_scheduled_works+0xa81/0x1bd0
[  305.456803][   T55]  worker_thread+0xea5/0x1560
[  305.461668][   T55]  kthread+0x3e2/0x540
[  305.465932][   T55]  ret_from_fork+0x6d/0x90
[  305.470521][   T55]  ret_from_fork_asm+0x1a/0x30
[  305.475487][   T55] 
[  305.477899][   T55] Uninit was stored to memory at:
[  305.483276][   T55]  copy_page_from_iter_atomic+0x12b7/0x2ae0
[  305.489398][   T55]  generic_perform_write+0x4c1/0xc60
[  305.494908][   T55]  ext4_buffered_write_iter+0x564/0xaa0
[  305.500633][   T55]  ext4_file_write_iter+0x208/0x3450
[  305.506176][   T55]  __kernel_write_iter+0x64d/0xc80
[  305.511593][   T55]  dump_user_range+0x8dc/0xee0
[  305.516562][   T55]  elf_core_dump+0x57c7/0x5ae0
[  305.521562][   T55]  do_coredump+0x32d5/0x4920
[  305.526348][   T55]  get_signal+0x267e/0x2d00
[  305.531038][   T55]  arch_do_signal_or_restart+0x53/0xcb0
[  305.536913][   T55]  syscall_exit_to_user_mode+0x5d/0x160
[  305.542688][   T55]  do_syscall_64+0xdc/0x1e0
[  305.547398][   T55]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  305.553510][   T55] 
[  305.555926][   T55] Uninit was created at:
[  305.560403][   T55]  __alloc_pages+0x9d6/0xe70
[  305.565179][   T55]  alloc_pages_mpol+0x299/0x990
[  305.570225][   T55]  alloc_pages+0x1bf/0x1e0
[  305.574923][   T55]  dump_user_range+0x4a/0xee0
[  305.579801][   T55]  elf_core_dump+0x57c7/0x5ae0
[  305.584867][   T55]  do_coredump+0x32d5/0x4920
[  305.589649][   T55]  get_signal+0x267e/0x2d00
[  305.594340][   T55]  arch_do_signal_or_restart+0x53/0xcb0
[  305.600121][   T55]  syscall_exit_to_user_mode+0x5d/0x160
[  305.605882][   T55]  do_syscall_64+0xdc/0x1e0
[  305.610588][   T55]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  305.616702][   T55] 
[  305.619111][   T55] Bytes 0-4095 of 4096 are uninitialized
[  305.624880][   T55] Memory access of size 4096 starts at ffff88804bbe3000
[  305.631935][   T55] 
[  305.634368][   T55] CPU: 0 PID: 55 Comm: kworker/0:1H Not tainted 6.9.0-syzkaller-02707-g614da38e2f7a #0
[  305.644177][   T55] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024
[  305.654475][   T55] Workqueue: kblockd blk_mq_run_work_fn
[  305.660236][   T55] =====================================================
[  305.667275][   T55] Disabling lock debugging due to kernel taint
[  305.673537][   T55] Kernel panic - not syncing: kmsan.panic set ...
[  305.680070][   T55] CPU: 0 PID: 55 Comm: kworker/0:1H Tainted: G    B              6.9.0-syzkaller-02707-g614da38e2f7a #0
[  305.691383][   T55] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024
[  305.701590][   T55] Workqueue: kblockd blk_mq_run_work_fn
[  305.707376][   T55] Call Trace:
[  305.710775][   T55]  <TASK>
[  305.713850][   T55]  dump_stack_lvl+0x216/0x2d0
[  305.718830][   T55]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  305.724882][   T55]  dump_stack+0x1e/0x30
[  305.729298][   T55]  panic+0x4e2/0xcd0
[  305.733426][   T55]  ? kmsan_get_metadata+0xf1/0x1d0
[  305.738762][   T55]  kmsan_report+0x2d5/0x2e0
[  305.743490][   T55]  ? kmsan_internal_check_memory+0x48c/0x560
[  305.749731][   T55]  ? kmsan_handle_dma+0xac/0xc0
[  305.754771][   T55]  ? virtqueue_add+0x1e86/0x65c0
[  305.759920][   T55]  ? virtqueue_add_sgs+0x186/0x1b0
[  305.765246][   T55]  ? virtscsi_add_cmd+0x838/0xad0
[  305.770471][   T55]  ? virtscsi_queuecommand+0x898/0xa60
[  305.776131][   T55]  ? scsi_queue_rq+0x4cc7/0x5a80
[  305.781269][   T55]  ? blk_mq_dispatch_rq_list+0x79b/0x3440
[  305.787256][   T55]  ? __blk_mq_sched_dispatch_requests+0x11b7/0x26e0
[  305.794087][   T55]  ? blk_mq_sched_dispatch_requests+0x12f/0x270
[  305.800570][   T55]  ? blk_mq_run_work_fn+0xd0/0x280
[  305.805867][   T55]  ? process_scheduled_works+0xa81/0x1bd0
[  305.811808][   T55]  ? worker_thread+0xea5/0x1560
[  305.816963][   T55]  ? kthread+0x3e2/0x540
[  305.821519][   T55]  ? ret_from_fork+0x6d/0x90
[  305.826298][   T55]  ? ret_from_fork_asm+0x1a/0x30
[  305.831464][   T55]  ? __enqueue_entity+0x760/0x820
[  305.836716][   T55]  ? kmsan_get_metadata+0x146/0x1d0
[  305.842107][   T55]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  305.848156][   T55]  ? kmsan_get_metadata+0x146/0x1d0
[  305.853569][   T55]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  305.859610][   T55]  ? pick_eevdf+0x56a/0x13e0
[  305.864458][   T55]  kmsan_internal_check_memory+0x48c/0x560
[  305.870533][   T55]  kmsan_handle_dma+0xac/0xc0
[  305.875415][   T55]  virtqueue_add+0x1e86/0x65c0
[  305.880409][   T55]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  305.886433][   T55]  ? kmsan_get_metadata+0x146/0x1d0
[  305.891835][   T55]  ? kmsan_get_metadata+0x146/0x1d0
[  305.897239][   T55]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  305.903279][   T55]  virtqueue_add_sgs+0x186/0x1b0
[  305.908454][   T55]  virtscsi_add_cmd+0x838/0xad0
[  305.913643][   T55]  virtscsi_queuecommand+0x898/0xa60
[  305.919154][   T55]  ? __pfx_virtscsi_queuecommand+0x10/0x10
[  305.925168][   T55]  scsi_queue_rq+0x4cc7/0x5a80
[  305.930252][   T55]  ? __pfx_scsi_queue_rq+0x10/0x10
[  305.935576][   T55]  blk_mq_dispatch_rq_list+0x79b/0x3440
[  305.941450][   T55]  ? sbitmap_get+0x431/0x670
[  305.946235][   T55]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  305.952268][   T55]  ? dd_dispatch_request+0x9a1/0xa20
[  305.957782][   T55]  __blk_mq_sched_dispatch_requests+0x11b7/0x26e0
[  305.964463][   T55]  ? finish_task_switch+0x1c8/0x8f0
[  305.969895][   T55]  ? __blk_mq_sched_dispatch_requests+0x1031/0x26e0
[  305.976740][   T55]  blk_mq_sched_dispatch_requests+0x12f/0x270
[  305.983075][   T55]  blk_mq_run_work_fn+0xd0/0x280
[  305.988250][   T55]  ? __pfx_blk_mq_run_work_fn+0x10/0x10
[  305.994013][   T55]  process_scheduled_works+0xa81/0x1bd0
[  305.999797][   T55]  worker_thread+0xea5/0x1560
[  306.004672][   T55]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  306.010707][   T55]  kthread+0x3e2/0x540
[  306.014977][   T55]  ? __pfx_worker_thread+0x10/0x10
[  306.020308][   T55]  ? __pfx_kthread+0x10/0x10
[  306.025112][   T55]  ret_from_fork+0x6d/0x90
[  306.029712][   T55]  ? __pfx_kthread+0x10/0x10
[  306.034516][   T55]  ret_from_fork_asm+0x1a/0x30
[  306.039599][   T55]  </TASK>
[  307.586992][   T55] Shutting down cpus with NMI
[  307.591940][   T55] Kernel Offset: disabled
[  307.596363][   T55] Rebooting in 86400 seconds..