last executing test programs:

3.191794329s ago: executing program 0 (id=429):
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$can_raw(0x1d, 0x3, 0x1)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$packet(0x11, 0x3, 0x300)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180))
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_io_uring_setup(0x19f1, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x8, 0x241}, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0)
write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[@ANYRES64=r3], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, r4, 0x0})
io_uring_enter(r0, 0x2d3e, 0xfffffffe, 0x0, 0x0, 0x0)

3.154118898s ago: executing program 0 (id=430):
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
waitid(0x1, r0, &(0x7f0000002080), 0x4, 0x0)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x8528c000)

2.93605415s ago: executing program 0 (id=431):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2140, 0x25)
capset(&(0x7f0000000c00)={0x20080522}, &(0x7f0000000280)={0x0, 0x3, 0x7, 0x0, 0x10040, 0x8f})
fremovexattr(r0, &(0x7f00000000c0)=@known='trusted.overlay.metacopy\x00')

2.935821182s ago: executing program 0 (id=432):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$packet(0x11, 0x3, 0x300)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0x3)
ioctl$TCSETSW2(r4, 0x5408, &(0x7f0000000040)={0x0, 0xfffffffc, 0x0, 0x6b1dc80, 0x0, "000000010000004000"})

2.351614966s ago: executing program 4 (id=440):
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$can_raw(0x1d, 0x3, 0x1)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet6_udplite(0xa, 0x2, 0x88)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$packet(0x11, 0x3, 0x300)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180))
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_io_uring_setup(0x19f1, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x8, 0x241}, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0)
write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[@ANYRES64=r3], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, r4, 0x0})
io_uring_enter(r0, 0x2d3e, 0xfffffffe, 0x0, 0x0, 0x0)

2.323054914s ago: executing program 1 (id=441):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x2c, 0x3f, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x19}]}, @nested={0x4, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4048001}, 0xc000)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TIOCPKT(r1, 0x5420, 0x0)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000300)=0x5)

2.302435196s ago: executing program 4 (id=442):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x200a})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0})
dup3(r1, r0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x8, 0x0, &(0x7f0000000340)=[@decrefs], 0x0, 0x0, 0x0})

2.252091626s ago: executing program 1 (id=443):
r0 = io_uring_setup(0x7d1, &(0x7f0000000580)={0x0, 0xddf9, 0x2, 0xfffffffe, 0x183})
close_range(r0, r0, 0x0)
r1 = mq_open(&(0x7f0000000a00)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!T\xeeux\x00\xbf@\xf4\x1c\xbce\xca\x97\xd5pkv\x88L\xe8$\xef\xfeI\xdaW1\xfcg\xa1\xdb$,0y$\xcd{zl.\xae\x805\xa8\xd6\x85\x15\xd2\x0e~\xcc\x90\x97\xe8h\v\x1a9X\a\xca{\x11#\x95m{U\xe5-\xabRw\xcafy\xe6\aNhX4Ll[\x14\x15<z\xb2\x03d\xad\x925\xbfP\x1b\xea\vt\xe9C\xe9\xb4R\x85*\xdc\xc4@\xee\xd2\xae\x06\x1a\xe1\xd2s\x01\xb8\xf3\xf2\rr\x01mq\xd2\xaf\xe2{\xe4\x1a\xd3Z\x01C\xfbW', 0x6e93ebbbcc0884f2, 0x1c4, &(0x7f0000000040)={0x0, 0x1, 0x4, 0x3})
mq_timedreceive(r1, &(0x7f0000000280)=""/211, 0xd3, 0x800000000000, 0x0)

2.25175242s ago: executing program 4 (id=444):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0, <r2=>0x0, <r3=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x9}}, 0x50)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18)
syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0xb1, {0x0, 0x11}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r0, &(0x7f000000a3c0)="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", 0x2000, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="b802000000000000f9ffffffffffffff05000000000000000200000000000000020000000000000002000000000000000500000006000000060000000000000009000000000000000000000080000000ff0000000000000003000000000000000300000000000000ffffff7f550000000300000000c00000ff030000", @ANYRES32=0x0, @ANYRES32=r3, @ANYBLOB="040000000400000000000000000000000000200038050000000000002b000000090000003a2d285cc980000000c30000f3397dd86d4d928d24d3a461b60245898556c60000000000002b133b000000000000000004000000000000000200000000000000ff03000000000000f8ffffffffffffff00000000cc0d00000100000000000000fdffffffffffffff000100000000000001000000000000004922000000000000b0e40000000000007f000000050000000700000000c00000690d0000", @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="0010000001000000000000000200000000000000010000000000000005"], 0x0, 0x0, 0x0})
getdents64(r4, &(0x7f0000000100)=""/134, 0x86)

2.074595841s ago: executing program 0 (id=446):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x18)
prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r0 = io_uring_setup(0x4, 0x0)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCGETD(r4, 0x5424, &(0x7f0000000080))
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r5, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc)
r6 = socket$inet6(0xa, 0x3, 0x1)
connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x33}, 0xfffffffd, 0x33}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x2}, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0xfffffffe}}, 0xe8)
sendmmsg(r6, &(0x7f0000000480), 0x21, 0x0)

1.560037982s ago: executing program 2 (id=449):
r0 = socket(0x11, 0x2, 0x0)
unshare(0x400)
setsockopt(r0, 0x107, 0x8, 0x0, 0x0)

1.488065583s ago: executing program 2 (id=450):
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000029c0)={0x0, 0x0, 0x0}, 0x20000004)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = socket(0x400000000010, 0x3, 0x0)
r3 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001740)=@newtfilter={0x884, 0x2c, 0xd27, 0x70bd2c, 0x25dfdc00, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0x84c, 0x2, [@TCA_BASIC_POLICE={0x848, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0xfff, 0x2, 0x1d, 0x1, 0x7e1, 0x0, 0x13, 0x5, 0x2, 0x5, 0xfffffff7, 0xffffff81, 0x4, 0x2, 0x4, 0x7, 0xffff, 0x7ff, 0x1ff, 0x3, 0x40, 0x92ef, 0x2e8, 0x8, 0xffff, 0x7, 0x6, 0x10000, 0x7, 0xfffffff8, 0x7, 0x6, 0xb, 0x1000, 0x4, 0x2, 0xe2e6, 0x7, 0x8, 0x5, 0x2, 0xffffff5f, 0x8, 0x6, 0x1000004, 0x5, 0x0, 0x0, 0x7, 0x9, 0xe9ee, 0x5, 0x3, 0x5, 0xbc4, 0x4c, 0x4, 0x2, 0x80000000, 0x6, 0xfffffffb, 0x3655b20, 0xe7, 0x400, 0x7, 0x6, 0x0, 0x36acaece, 0xe9, 0x7, 0xa, 0x9, 0x4, 0xf357, 0xa50, 0x6, 0x4, 0x1, 0x1800, 0x3, 0x3, 0xd7, 0x7ff, 0x56, 0x39f, 0x16bb46f8, 0x2, 0x10000, 0x4, 0xfff, 0x0, 0x800000, 0xfff, 0x2400, 0xde4, 0x100, 0x2, 0xe1, 0x3, 0x3, 0xcf09, 0x7, 0x8, 0xd, 0x7, 0x7, 0xd5, 0x7, 0x5, 0x9, 0x7ff, 0x6, 0x0, 0x40, 0x6, 0xfffffffd, 0x1, 0x5, 0x0, 0xc, 0x9, 0x80000000, 0x2f, 0xf486, 0x7, 0x9, 0x1, 0xd, 0x200, 0x7, 0x6, 0x6, 0x54e, 0x3, 0x80, 0x2, 0x27, 0x7, 0x0, 0x9, 0x0, 0x6, 0x7f, 0x1ff, 0xf8000000, 0xa242, 0x3, 0x5, 0x3, 0x9, 0x43e, 0x7, 0x5, 0x4, 0xb20, 0x10001, 0x7, 0xfffffff4, 0x9, 0x8, 0x1, 0xb, 0xa, 0x1, 0x80000000, 0x4, 0x7, 0x7fffffff, 0xd, 0xa8, 0x9, 0x2, 0x0, 0x8, 0x9, 0x1ff, 0xffff, 0x7, 0x7, 0xffff, 0x80000000, 0x8, 0x3, 0xff, 0x4, 0x1, 0xcec7, 0x7, 0x3, 0x6, 0x5, 0x40, 0x8000, 0x7, 0x1, 0x3, 0x3ab58aef, 0x8001, 0xc1d, 0x5, 0x5, 0x6, 0x1, 0x5, 0x0, 0x0, 0x27ae800, 0x1, 0x12a7, 0x3ff, 0xb, 0x2, 0x1000, 0x2, 0xbf72, 0x6, 0x3, 0x7fff, 0xedd, 0x1fd, 0x9, 0x1, 0x4, 0x4, 0x9, 0x1, 0x1, 0x2, 0x18, 0x6, 0x5, 0x10001, 0x0, 0x7, 0x80000000, 0x400, 0x3, 0x9d0e, 0x81, 0x5, 0xfffffffc, 0x17d0, 0xfffffffb, 0x6, 0x9, 0x10000008, 0x5, 0x0, 0x4, 0x5, 0x265, 0x6, 0x3, 0x7, 0xe, 0x1]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x9, 0x2, 0x0, 0xffff, 0xc, 0x8, 0x3, 0x70910bcc, 0x2, 0xdf, 0x4, 0x9, 0x9, 0x22, 0x2, 0xd6, 0x4, 0x10001, 0x6, 0x2, 0x3, 0x2, 0x562, 0x4, 0x2, 0xfffffffe, 0x0, 0x0, 0x8000, 0x4, 0xb7, 0x7, 0x0, 0x6, 0x7, 0xe3, 0xbf, 0x0, 0x0, 0x5, 0x0, 0x0, 0xfff, 0x6, 0x2, 0xa, 0x10, 0x48000000, 0x0, 0x7, 0x5, 0x33, 0xffffffff, 0x2, 0x9, 0xfffffffd, 0xc9ad, 0x5, 0x9, 0x40, 0x5, 0xdf, 0x7, 0x7fffffff, 0x5, 0xe, 0x4, 0xfffffffb, 0x4b46, 0x1, 0x0, 0x4, 0x4d, 0x8, 0x3, 0x7f, 0x3, 0x1332ec45, 0x2000, 0x2, 0xc, 0x0, 0x1, 0x7, 0x7, 0x800, 0x2, 0xff, 0xfffffffa, 0x2, 0x8, 0xc, 0x68289988, 0x18000, 0x7, 0x7ff, 0x8, 0x8, 0xe, 0xf1, 0x4, 0x7, 0xe, 0x9, 0x4, 0x0, 0x0, 0x0, 0x6, 0x1, 0x4, 0x9, 0x1, 0x40004, 0x1d, 0x0, 0x4c9ef933, 0x4, 0x7fc, 0x7, 0x4, 0x3, 0x1000, 0x5, 0x3ff, 0xc1b, 0x81, 0x9, 0x6, 0x8, 0xc32c, 0x8, 0xd67, 0x9, 0x3, 0x6, 0xff, 0xff8, 0x80000000, 0x9, 0x5, 0x8, 0xaf, 0xffffff9e, 0x6, 0x8, 0x9c1, 0xffffffc0, 0x3, 0xce99, 0x7fffffff, 0xf2ae, 0xfffffffa, 0x5, 0x2, 0x7, 0x2, 0x5, 0x4, 0x2, 0x0, 0x3, 0x0, 0x4b, 0xfffffff6, 0xf2c, 0xd, 0x81, 0x8, 0x3, 0xfff, 0x5, 0x8001, 0x2, 0x5, 0x0, 0x37eda383, 0x9, 0x80000000, 0x67a, 0x4, 0x1, 0x9c, 0x8000, 0x5, 0x61f9, 0x7f, 0x9, 0x200, 0xeb2, 0x8001, 0x3, 0xfffffffc, 0x8, 0x4, 0x9c3f, 0x2, 0xcd6, 0x8, 0xe, 0x8, 0x1, 0x0, 0x7fff, 0xffff, 0x80000000, 0x8, 0x6, 0x1, 0x400, 0x7, 0x30, 0x6, 0x8000, 0xc, 0x9, 0x7, 0xda0, 0xb3, 0x2, 0x8, 0x5, 0x4, 0x95, 0x4, 0x400, 0x3, 0x5, 0x5, 0x9, 0x7, 0x6, 0x5, 0xd, 0x5, 0x8, 0x8, 0x0, 0x92, 0x4, 0x80000000, 0x6, 0xfffffffe, 0x2, 0x7, 0x0, 0x6, 0x7f, 0x2, 0x2, 0x7, 0x2, 0xea38, 0xfbf, 0x5, 0x5]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xa97, 0x3, 0x1d, 0x1, 0x959, {0xf, 0x2, 0xfff9, 0x2, 0xfff7, 0x58}, {0x2, 0x1, 0x6, 0x7330, 0xee8d, 0x80000000}, 0x180, 0x0, 0x7}}]}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0x44}}]}, 0x884}, 0x1, 0x0, 0x0, 0x10}, 0x0)

1.46483548s ago: executing program 2 (id=451):
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x0, 0x0})
io_uring_enter(0xffffffffffffffff, 0x7f33, 0x7c5b, 0x0, 0x0, 0xfffffe36)

1.449216419s ago: executing program 2 (id=452):
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$can_raw(0x1d, 0x3, 0x1)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$packet(0x11, 0x3, 0x300)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180))
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_io_uring_setup(0x19f1, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x8, 0x241}, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0)
write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[@ANYRES64=r3], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, r4, 0x0})
io_uring_enter(r0, 0x2d3e, 0xfffffffe, 0x0, 0x0, 0x0)

1.413705297s ago: executing program 1 (id=453):
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)
ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, 0x0)

1.412646489s ago: executing program 2 (id=454):
io_uring_setup(0x60f7, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000400)='sched_kthread_work_execute_start\x00'}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x103}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffefe}, 0x36)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
accept4$rose(r3, 0x0, &(0x7f00000000c0), 0x800)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'gre0\x00', <r4=>0x0})
bind$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, r4}, 0x14)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000440)=ANY=[], 0xdd12}], 0x1}, 0x0)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000600), 0x0)
r5 = socket$rxrpc(0x21, 0x2, 0xa)
bind$rxrpc(r5, &(0x7f00000005c0)=@in4={0x21, 0x8, 0x2, 0x10, {0x2, 0x1, @empty}}, 0x24)
listen(r5, 0x4)

1.386968134s ago: executing program 4 (id=455):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000000100)=ANY=[], 0x1, 0x2f4, &(0x7f0000000500)="$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")
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r2, 0x0, 0x30)
write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b)

1.385874462s ago: executing program 1 (id=456):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000000c0)={0x0, 0x5, 0xfff, 0x1}, 0x10)
bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

1.279899141s ago: executing program 1 (id=457):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = io_uring_setup(0x2754, &(0x7f0000000080)={0x0, 0xfffffffc, 0x800, 0xfffffffe, 0x800001b4})
io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0), 0x0)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f1, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
r4 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000a40)=@newsa={0x154, 0x10, 0x1, 0x8000000, 0x0, {{@in=@remote, @in6=@loopback, 0x2, 0x0, 0x4e20, 0x50, 0x0, 0x20, 0x0, 0x16}, {@in6=@local, 0xfffffffc, 0x33}, @in=@local, {0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x5680000000, 0x0, 0x0, 0x10000}, {0x401, 0x9}, 0x0, 0x0, 0xa, 0x1, 0x0, 0x90}, [@algo_auth={0x48, 0x1, {{'sha256\x00'}}}, @replay_esn_val={0x1c, 0x17, {0x0, 0x70bd2d, 0x70bd28, 0x70bd2b, 0x70bd2b, 0x8}}]}, 0x154}}, 0x24000058)

901.84735ms ago: executing program 0 (id=458):
timer_create(0x1, &(0x7f0000000240)={0x0, 0x21, 0x2}, &(0x7f0000000300)=<r0=>0x0)
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
execveat$binfmt(0xffffffffffffff9c, r1, &(0x7f0000000800)={[&(0x7f00000006c0)='\x00']}, 0x0, 0x0)

796.095602ms ago: executing program 3 (id=461):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f0000000940)={'syztnl0\x00', &(0x7f0000000140)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x2, {{0x5, 0x4, 0x0, 0x24, 0x14, 0x40, 0x0, 0xfe, 0x0, 0x0, @multicast1, @empty}}}})

795.921602ms ago: executing program 3 (id=462):
r0 = syz_io_uring_setup(0x237, &(0x7f0000000480)={0x0, 0x8101, 0x0, 0x0, 0x2cf}, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x0, 0x0})
io_uring_enter(r0, 0x7f33, 0x7c5b, 0x0, 0x0, 0xfffffe36)

736.211564ms ago: executing program 3 (id=463):
syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000080)='./file0\x00', 0xa00004, &(0x7f00000001c0)=ANY=[@ANYBLOB='adinicb,iocharset=maciceland,utf8,uid=', @ANYRESDEC=0x0, @ANYBLOB="2c6e6f76727300806f636861727365743d6d6163696e7569742c756e64656c6574652c696f636861727365743d69736f383835392d322c6164696e6963622c766f6c756d653d303030303030303030303030302c756d5b30495330303030303030303030303030303030303030303030302c6769643d666f726765742c756e686964652c00000070d3020e5538c1ffed98de950f03cee932a103c89869fc66fe435ca5cd6825cf"], 0x1, 0xc5a, &(0x7f00000036c0)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0xc0086c43, &(0x7f00000002c0)=0x700)

557.617759ms ago: executing program 3 (id=464):
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$can_raw(0x1d, 0x3, 0x1)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$packet(0x11, 0x3, 0x300)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180))
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180))
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_io_uring_setup(0x19f1, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x8, 0x241}, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000100)=<r2=>0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0)
write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[@ANYRES64=r3], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, r4, 0x0})
io_uring_enter(r0, 0x2d3e, 0xfffffffe, 0x0, 0x0, 0x0)

492.144207ms ago: executing program 2 (id=465):
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000400)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000680)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000100)='sched_switch\x00', r5}, 0x18)
r6 = fsopen(&(0x7f0000000040)='binder\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r7, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r7, &(0x7f0000000180)=ANY=[@ANYBLOB="0e00010002"], 0x8)
getsockname$packet(r1, 0x0, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32, @ANYBLOB="01000000000000001c0012000c00010062"], 0x3c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c0000001000030425bd70000000000000000000", @ANYRES32], 0x2c}, 0x1, 0x0, 0x0, 0x20008004}, 0x8000)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)

457.538942ms ago: executing program 1 (id=466):
socket$nl_route(0x10, 0x3, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000))
sched_setscheduler(0x0, 0x1, 0x0)
ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, 0x0)
r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000001600), 0x0, 0x559e, &(0x7f0000005680)="$eJzs3X9sVeX9B/BzWwoN+C39jhUYfxAgBoMkyJYtjqB4MQa24eKlgsKcCEQlBivYRDcYqUWSZcaghU4EF5GQaDJjscM/FMywy7CMZfzY5hZjs4JSaZZsAzVrHDG69N77XO49l9tembNOXy/SnvPcz3me+9yT88d9X/qcGwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAURUcSc9+d0f3i0ZE1X77/Hz+e+OjGn4zfvX/roVvu23T/gjMjbto5a1nf+mlN8zdsbDjS/PS+ObdGUSLdL5Htf9u136q/88bbvlsdBly+MLOtrS31lJmuJzON4QUP9vcr/FkRRVFVbIDK7PbV7E5FwQC53cbiAQf0Tuui6O7J8ya1dT01bklyYU/xS6df9VBPYKhkr6ue89dSMv27InZErp136SUKLtFM//gF96m8CADgY5mZSm9yb0ezb3Fz7eZ4PdZOxtotsXZ4h9CS37gYmXGHl5rnpHh9iOaZzESFESXnGatnz3+unYr3j7VjUeNjzLPw0GykqS41z7Wx+lDNEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCzZOzxo2tWtD2y575fdtQceff9OVc+8KWOw22LT4y8eunKHWum/HTWsr7105rmb9jYcKT56X1zbo2i2nS/RKZ74kTL5b9NjZ3fvXfcG427n6vpq8yOG7bD8g6OXg87s0ZH0cq8Sk8Y9q81UZQqLKSb0Y7iwl3pnW+HAgAAAJ8nX0n/rsi1M3GwqqCdSKfJRPpfkAmL77Quiu6ePG9SW9dT45YkF/Zc/HipEuMlLzherl17/ieRF4xD/I2Pd74eDm0sGmdg8RHjef7SMWPefmty/eSvT5v7xA3PjOru+r8nZ2xJ/bGu5oUrru+tf/a6ovxfO3D+D2dO/gcAAOA/If/HxxnYYPn/jqVTt7z+i2Grft3a8MTB+h1/bv3OMzsXneq54Ud9L09N3v7o1UX5f1LBUxbl/zDjkP8roovL/wAAAPBZ9t/O/8micQY2WP5vONM3+wcHX6vr+PucxXt+9dAVi8+e/tv8U7t3DV9zR8v6uoeuLMr/M8vL/8Pypx0e/F2Y8OrRUTSz/JMKAAAAFAj/737+o4WQ1zOfHMTz+rX/vKp5380ffPMbD97zpzff/s2xA7MnrdteN/PgyzfVf1j5ve3dRfk/WV7+r/p0Xi4AAABQhuePrpw773jPucfPvtB18vDu3pMznjyzrqnvdOslLatXbTr2WlH+T5WX/0cMzcsBAAAALuDeO59bsfnVl/oe2H/X2Ck9FVc1XpK4ZduOqU0TPuq8tPfy7VuL8v/y8vL/yOw2u/Ih06kz/BVC6+goqu7fWZspHIparskVAAAAgE9IyOlbP1ixbOzOsb3jj59+rObQG4dn/2Vt55yN13RXdW/uXNZ4WdH9AkJiL3X//3Cng7D+v+D+f0Xr//MKmbv+zXZjAAAAAL6Iitfzh9vjZ765oNT375e7/n9J3cQTiba33lv11XMHzo1ZsP/7129aV9/be8+El37/wz9M/6i6KP83l5f/K/O3n+T3/wEAAMBF+F/7/r+lReMMbLD7/zdV9DWsWrd3+uota7csTCw7UH3qwdV731+w5l9Tb36+qea6A0X5v6W8/B+2o/JfXkc4P5tGR9H4/p3s3QR/Hqa7OlZor8orZE58rMeNoUe20D4ir5C2Ntbja6OjaHL/TnOs8P+h0BIrnK3JFnbFCsdCIXs95Ap7YoWOcKVtq8lON154MRSyCyzawwqKUbklEbEe75Xq0V+4YI+u3JMDAAB8oYTwnM2yVYXNKB5l2xODHTBysAMqBjugcrADhsUOiB9Y6vFoeWEhPH575yMbNjVMSb7y8NzHfvbms40T9j1+WV3v5g9f2XbvxJ3TW6YW5f9d5eX/cCqGZzal1v9HYf1/9nsNc+v/l4dCbazQHgqp+B0DUuE5MmH34fActalsj7PjcwUAAAD4XAufC1QO8TwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/s3evcdJVd0JAj/d9INumqaNE9GMk3TUgGakaWwNw+AoaoxGRZpZddxkNBBoEGmE8FgFURtQZxziZ3ztrJnoCAoiu+qHGFeDwUhcxIw6iWLiA/Cxjq7r+h6VGM2E/XTfOkXVrS67EFDa+X7/6DpVv/O89eg69946FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/xjuPfjlk4YunP0PHzace8nqqqmL/kfH6Mv+cNW3vvjUPy5b9G9h/i9GnLll3kEXHjd/wbR/6Vi++ogzQmjtKleWFC977oqvPtS613HP3jFw48wbb63fUpWpNxMP/Tr/lGfuXBxbfbF/CHeXhVCRDgypSwKVmft1sb5960LYI2wLZEu01SYl0g2HB2pCWBK2BbJVra4JoS4ncMqG+++7vDNxTU0IXwkhVKfbeKY6aaMmHRhUlQRq04HpFUngt1sT2cBPypMA7LD4Zsi+6Fe15mdo6L5ckddf5U7r2KcrPbw+MdFQPN/rR+3iTuWoSj/QukNPW0F17BIFb4+13m294N1WsJ2v8LTlfpHKfEPZui1UHcontk0aP6d9dnykPDQ19SlW0y56np9+e/6E7Un3mtdh7EDDTnkdXvrYiun9lo2+9OrNvxqz4ayaA3a0m0/lbNLc9K5WHTKvuV7zPEajfJ70grdfwbekRl+6Qghbzz17xtfnTDz7iD63PLnu1QcfrNty9pwFvzhz4nmLLj55w7/Pf6lg/t/w0fP/+HKOt+V5uWOrH9Ync/P4SF1MvFmfzM0BAACg1+gNe01Xnv/6X73+/bWtMxed/u23Dj73w71afz3i/gFVB7yxrqn1/I2ff6Vg/t9Y2vH/eMi/Lne0a0MY1ZVYNCCEvbseTwIrY3e+OyCEL3elWvMDR6UCa0PYpytxULaqVIm+sURjKvByfSYwKhVYHwOtqcDyGLgiFbg4BlalAhNiYG0qcHQMhCn54/hqfWYcJQdqYmBcshFXxbMQ3qmPraW21aZsVQAAADtJZnZYmX8351yHHc0Qp5eranrKEM/ALpqhOlVDegabnVYVraGipxrKe6ohO+6Ojx5+Qc1lPdVccBpGWX6GG9f85X2LXjzsC2P3mvj5xUMvmPKz8eGst++uerx5yYtv7XvEzesK5v/NHz3/r+6mI2UFx/9DGNv1N+Yuz0Tas/FxrXkZAAAAgB1w0R//xR61Lw85oGHT+2X3zl/7xKMrfrl5j1NOf3/c8a//8PCaxnsL5v+jSjv/P+4T6ZOTOTwSd0NMHRBCc34gqXZkYSA56t0vEwAAAIDeIHs8PnssfErmNjlFOz2fLszfup3544H/Ud3m//09/7P2jq3/+mLZBd89d0TNgKX/9GrHhBNOPvqW47/1zj4VB/yyvGD+31ra+f+1+bdJJ9bHXlw9IIS+OYEHYy87A10aY+D5I/MDmfGvjxtgcawqc2JCtqrFscS4GGhOBZYUK/FotsTe+YHMk5VtfFF2HFMyJXICAAAA8ImLuwPicfl4/n/LGSNO++vvzfrbha88eN7qCy75q+Ed80eedP/THzbMvXJp2PTmEQXz/3Hbd/5/1zy44PT+9n4hDK0IoU/6hwGP1CYLA8ZAXVkmcW9tUlefdFULa0MY2TmwdFUvZNb/r0ivMfh4TVJVDOy93y1vD+pMLKsJYWhu4IlvLz2sMzEnFcg2flpNCF/qHG268bv6Jo1Xphu/tm8IX8wJZKua0DeEzsaq0lX9r+rMdQzSVa2qDmHPnEC2quHVIcwNAPRW8X/pxNwHZ82dN3V8e3vbzF2YiDvxa8KkKe1tTROmt0+sLtKniak+561jtKBwTKVe+mZTZo2ixSsnV5aSzv5QsDm3rcyO/IIzBzP345ehyq5xHlKZd7clPeQD9y9sIuR8lSo25PJdPOTa3Eq2PYkF9cf8VaFf6DtnVtvMpvPGz549c1jyt9TshyR/43GmZFsNS2+r2u76VsLLo+hyWSkfd1sNyq1k6OxpM4bOmjtvyJRp4ye3TW47p+XQP2sZMXz410YM7RxUc/K3h5EO6q7m1Ei3Li1xWDtxpF+oyKnkk/jQkJCQ6G2J/f7L5odH77n+nOt/9tqPz+/3zdPu3fvImT889KqpD1Xve/ji24ccWDD/n/HR8//4qRM/+DPrMxQ7/t8QD/Mnj287zD8uBpaUevy/odjR/OyJAY2pQEcMdDjMDwAAwGdD3B0Z92bGndKbb1m/buOSlrk/aHin5dY17Utvuum+U39y58ATvjQ47LXhuhM+VzD/7yjt9/87af3/7NL1JxRb5v+gWKK52Pr/6WX+s+v/dxRb/z+9zH92/f8ln8L6/3OygdQmecf6/wAAwGfBJ7f+f4/L+6cvEFCQocfl/dMXCCjI0OMy/qVeIGC71/9f8+Bff6Wq35g7/qTlN/WXvPZ39xzWeuS6zTP/5Etb10+877qxt6wpmP9fUdr838L9AAAAsPv4z5ddU3H02Xff0bJu6sZxbw5+98m3lgzq80HF0Q+3j3xh4Bu3nlcw/19S2vz/k1//LxQ7/7+xWKC12MKA1v8DAACglyq2/t89Q1sa/zCm/x+eHvab5Q/ePPqnj/z898v3+/mJPyvfZ8Gxz8+8bFLB/H9VafP/eNpFeV7u2JsP65M17UJ6Tbs367M/GQAAAIDeoTw0NVWWmDdvYdSjPn6bT2eWAv2odK7vvXLt2ZtfmH7c46ev+7uaEwbvOWHaBasa/2b4gXd+ftQley7ddGrB/H9tafP/vN9lXPrYiun9lo2+9MOrN/9qzIazag7YdvwfAAAA2HVK3S8BAAAAAAAAAAAAAAB8+s7tWHzhI8uOfe+bt//F/kcseXXwbXcd+Lsh/V664qoHJq1648zJXy/4/X8Y21Wu2O//43X/4u8L/igvd2y15/X/MvdPOfH2uV1LFj5SH8L+uYGpC6fuETLX5h+cG7jvjIMGdiYWpkusefbolzoT30kHjh/yuS2dicNTgXFxkcR90oF4VcUt/VOBuLzi4+lA3B6r0oGqTOCy/sk4ytLb6pW6ZFuVpbfVxroQBuQEstvq7rqkjbL0AK9JBbID/F46EAd4ciZQnu7V7f2SXsVAXSx6Q7+kVwAA7Lbit8DKMGlKe1tz/Aofb79QkX8b5S1ZtqCw2rISm9+UWZps8crJlaWk+6S/i2671nhlqO4cwrCCr6u5Wcq6Rrlzaulh0/1RkSH3tNpbeZFyadu76aqKj6gmGVHThOntEyt7HHhLz1kOqegxy7CCyU5ulvKuTVpCLSX0pYQRlbhtSuhyvF8empr6pHL9eQw2hDw9vSJK/b1+7jp/xV4FuXluO/TKt758zE+f++CfP/9E/2+cVnP7rO+/e+KvX7//wEOOuG5C05otBfP/htLm/9W549qSuRhAR7yy3sgBIYwrcUQAAADw2XfbRbfecfr09a9MWlvx5GOPTS0fc3rl1vl3zp93ycZ7Fx9/2cErdjR+2Fm//f5vBu//b89e9dJPR+7zwA03/58nD3v8z3//8I8eeqduZZ+x7xXM/xtLm//HPViZQ8HJ3o618fr/iwaE0HVp/YYksDIO97sDQvhyV6o1lkguqH9CLNGcBFbGHSYHxRLjWvOr6hsDq1KBl+szgbWpwPoYyOyluCVkduVcWR/CYV2psfklZsQSDanAmBhoTAWaYqA5FegfA6NSgdf6ZwKtqcDDMRCm5G+rH/fPbCsAAIDtkZlnVebfDel53qqKnjKU9ZShtqcM5T1lqO4pQ7FRxPt3xAyVqZNXynIyVaZrrUnVUpAhXgx/u/tVkCE8mp8zXbCg6Xj+QfZ8g7L8DFf+4NlT1w+e/tDqzcd8beBt/zhkz4Obp9e9t+CGp3475pzrnv/TQQXz/+bS5v+1+bdJ6+vj/H/b9f+SwIOxe1fHU8cbY+D5I/MDmR0D6+Nkd3G2qtZMicykfXEsMSoGGlOBGTEwKhUYNzYTWDIwP5CZaWcbX5RtfEqmRE4AAAAAPnFxB0HcTRPn/zce9YOr3x8wccuyeTPvH9vyxMmjv3H1XT+6d/9ld767YvCAce99p2D+P6q0+X9sr19uYxfH3rzYP4S7y7b1JhsYUpcE4n6Muvjz+H3rQtgjZwdHtkRbbVKiKtVweKAm+YV6Vbqq1TXJGgPx/ikb7r/v8s7ENTUhfCVn70u2jWeqkzZq0oFBVUmgNh2YXpEE4p6fbOAn5UkAdlh2r2B8QWVOdclq6L5ckdffZ+WaoOnhFewD7SZfd7+52lWq0w9k9qlmbd/TVlAdu0TB22Otd1tvfLc1eLflfpHKfEPZui1UHcontk0aP6d9dnwk95esBXbR85z7K9VS0jvhddjx8Xvbs+p0B5pTHx/N3Zfr/nVYFqu79LEV0/stG33p1Zt/NWbDWTUHlNyNIuIPhX+05X9XPpWzeXe16pB5zfW6z5NWnye98d9Ao6cthHDZ9cfsu+TdX+/33A3Pnbqu7Maxr/7lrHs2Lf+bysNHrXv/yaGjLy+Y/7eWNv+vSN12+V3cmLMGhHBgzsZ9JG7+YwYkn4M5geRTcs/CQHLI/V/ri35yAgAAwM6W3d2R3V8wJXObnBCenicX5m/dzvxxf8WobvOX2u9j121cedLQN6474G8vOPGNv7/28Kceuv6ysnXL//vYD1avuXzxe08UzP/HffT8v2+qm47/O/7PLuL4f7d2913RfdMPdOzQruiC6tglHP/v1u7+bnP8v1uO/zv+3x3H/3vg+H+3dvenreBb0gxfujonwdff+fPfTbzpg7mN+x180lPPHDrxun+6quXuu0555b+de9601761uWD+P6O0+b/1/7pftC+7/t+4Yuv/zSi2/l+H9f8AAIBdqshCc+l5XsHqfQUZ0qv3FWTocYHAHpcYtP7fdq//t3Dkv1904Q+fb7n2nTvHXb5m07Fnvvr0utXPzFpx3Lnnv9V6112tBfP/jtLm//Hl0C+39d6y/l/j2CJVXREDMywMCAAAwO6o2A4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPl2HnvbO+5d8/R/aBv1ixc1/f+v/+7/P1q594JvfuGn4L6f86RllazZcM+LMLfMOuvC4+Qum/UvH8tVHnBHClK5yZUnxsueu+OpDrXsd9+wdAzfOvPHW+i3VmXorM7d/nJc7tvphfQhLch6pi4k36zvvbAuccuLtcys6E4/Uh7B/bmDqwql7dCaW14cwODdw3xkHDexMLEyXWPPs0S91Jr6TDhw/5HNbOhOHZwJl6e5e1z/pblm6u5f3D2FATiDb3bP751eVbeO4TKA83caKuqSNGKiLRa+tS9qIgfZYYkrfEIZWhNAnXdU/VydV9UlXdU91UlWfdFUXVYcwMoRQka7quaqkqor0yB+tSqqKgb33u+XtQZ2JpVUhDM0NPPHtpYd1JmamAtnG/1NVCF/qfMmkG/9xZdJ4Zbrx/1oZwhdDCFXpEu9VJCWq0iVeqAhhz5zAto1YEcLcwGdD/PSZmPvgrLnzpo5vb2+buQsTVZm2asKkKe1tTROmt0+sTvWpmLKc9NYFH3/sm96eP6HzdvHKyZWlpCsy5Sq7unxIZd7dlt2997FftbmVbHs+CuqP+atCv9B3zqy2mU3njZ89e+aw5G+p2Q9J/vbJRJNtNay3bKtBuZUMnT1txtBZc+cNmTJt/OS2yW3ntBz6Zy0jhg//2oihnYNqTv7ujJEu/eRH+oWKnEo+ife/hIREb0uU5326Ne/un+MFX/S3dbQyVHd9QBdMK3KzlHWNcmcM+qiPOeKP8zWlxxENK5g4FGQ5pOcsLQWTiW1ZapIsXV/rCiaHuTWVd23SeL88NDX1KbYdGvLv5m7e13dg8z6d2XSlpgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+P/swIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCwAAAAAIMzfOoyeDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4FAAA//8fSxmR")
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r1, 0xc0709411, &(0x7f0000000100)={{0x0, 0x8, 0x10000b2b, 0x4, 0x7fffffff, 0x5, 0x7, 0x7, 0xffffffff, 0x80000000, 0x0, 0x5, 0x20404005, 0xf4, 0x8}, 0x20, [0x0, 0x0, 0x0, 0x0]})
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0)
sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, 0x0, 0x4000)

447.300274ms ago: executing program 4 (id=467):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000980)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}, {@bh}, {@init_itable}]}, 0xff, 0x551, &(0x7f0000000cc0)="$eJzs3d9vU1UcAPDv7Tp+KyMhJPpgFnkQg3Rs8wcmPuCjUSKJvmOzXRaylpK1I2ySCA/y4oshJsZIYvwDfPeR+A/4V5AoCTFk0Qdfam53ywprt9EVNuznk9xyzj23nHt67vdwbs8lDWBojWcvhYhXIuLbJOJwR1kx8sLx1eNWHl6fybYkms3P/koiyfe1j0/yPw+2M8WI376OOFl4rMqx7KW+tDxfrlTShXznRKN6ZaK+tHzqUrU8l86ll6emp8+8Mz31/nvvDqytb57/54dP73505pvjK9//cv/I7STOxqG8rLMd23CjMzMe4/lnMhpnnzhwcgCV7SbJTp8AfRnJ43w0sjHgcIzkUQ/8/30VEU1gSCXiH4ZUex7Qvrcf0H3wC+PBh6s3QOvbX1z9biT2te6NDqwkj90ZJe0vMrYpq+PXP+/czrYY3PcQAJu6cTMiTheL68e/JB//+nd6C8c8WYfxD56fu9n8561u85/Co/lPdJn/HOwSu/3YPP4L9wdQTU/Z/O+DrvPffNFqLMZG8txLrexocvFSJc3Gtpcj4kSM7s3yG63nnFm51+xV1jn/y7as/vZcMD+P+8W9j79nttwob6/Vax7cjHi16/w3edT/SZf+zz6P81us41h657VeZZu3/9lq/hzxRtf+X1vRSjZen5xoXQ8T7ativb9vHfu9V/073f6s/w9s3P6xpHO9tv70dfy079+0V1m/1/+e5PNWek++71q50ViYjNiTfLJ+/9Tae9v59vFZ+08c33j863b974+IL7bY/ltHb/U8dFv9P4BF16z9s0/V/0+fuPfxlz/23/6s/99upU7ke7Yy/m31BLfz2QEAAAAAAMBuU4iIQ5EUSo/ShUKptPp8x9E4UKjU6o2TF2uvR6us9fxDob3SfbjjeYjJ/HnYdn7qifx0RByJiO9G9rfypZlaZXanGw8AAAAAAAAAAAAAAAAAAAC7xMEe//8/88fITp8d8Mz5yW8YXpvG/yB+6QnYlfz7D8NL/MPwEv8wvMQ/DC/xD8NL/MPwEv8wvMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAADNT5c+eyrbny8PpMlp+9urQ4X7t6ajatz5eqizOlmdrCldJcrTZXSUsztepmf1+lVrsyORWL1yYaab0xUV9avlCtLV5uXLhULc+lF9LR59IqAAAAAAAAAAAAAAAAAAAAeLHUl5bny5VKuiAh0VeiuDtOQ2LAiZ0emQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgzX8BAAD//7VBN58=")
r0 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0)
landlock_restrict_self(r0, 0x0)
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x101442, 0x0)

126.231047ms ago: executing program 3 (id=468):
r0 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)={0x20, 0x12, 0x1, 0x0, 0x0, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xc, 0x35, 0x0, 0x0, @u64=0x7}]}]}, 0x20}], 0x1}, 0x0)

301.665µs ago: executing program 4 (id=469):
syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0)
wait4(0x0, 0x0, 0x40000000, 0x0)

0s ago: executing program 3 (id=470):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x18)
prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r0 = io_uring_setup(0x4, 0x0)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCGETD(r4, 0x5424, &(0x7f0000000080))
madvise(&(0x7f0000519000/0x1000)=nil, 0x1000, 0x66)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r5, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc)
r6 = socket$inet6(0xa, 0x3, 0x1)
connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, {}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x33}, 0xfffffffd, 0x33}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x2}, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x0, 0xfffffffe}}, 0xe8)
sendmmsg(r6, &(0x7f0000000480), 0x21, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.83' (ED25519) to the list of known hosts.
[   23.345201][ T6514] cgroup: Unknown subsys name 'net'
[   23.449448][ T6514] cgroup: Unknown subsys name 'cpuset'
[   23.451452][ T6514] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   23.595838][ T6514] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k SS
[   24.652340][ T6536] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   24.654929][ T6535] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   24.657244][ T6536] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   24.658865][ T6536] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   24.660129][ T6535] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   24.661643][ T6535] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   24.663260][ T6535] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   24.665385][ T6535] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   24.665486][ T6535] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   24.668710][ T6536] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   24.670370][   T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   24.670421][   T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   24.673766][ T6534] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   24.675874][ T6534] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   24.676814][ T6534] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   24.676922][ T6534] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   24.682618][ T6534] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   24.684082][ T6534] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   24.691938][ T6541] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   24.693579][ T6546] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   24.695186][ T6546] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   24.697086][   T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   24.699536][ T6541] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   24.700040][ T6541] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   24.700253][ T6541] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   24.809316][ T6531] chnl_net:caif_netlink_parms(): no params data found
[   24.831715][ T6528] chnl_net:caif_netlink_parms(): no params data found
[   24.891704][ T6531] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.891953][ T6531] bridge0: port 1(bridge_slave_0) entered disabled state
[   24.892042][ T6531] bridge_slave_0: entered allmulticast mode
[   24.892472][ T6531] bridge_slave_0: entered promiscuous mode
[   24.894457][ T6538] chnl_net:caif_netlink_parms(): no params data found
[   24.909677][ T6531] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.910998][ T6531] bridge0: port 2(bridge_slave_1) entered disabled state
[   24.912247][ T6531] bridge_slave_1: entered allmulticast mode
[   24.913579][ T6531] bridge_slave_1: entered promiscuous mode
[   24.921653][ T6528] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.922852][ T6528] bridge0: port 1(bridge_slave_0) entered disabled state
[   24.923967][ T6528] bridge_slave_0: entered allmulticast mode
[   24.925299][ T6528] bridge_slave_0: entered promiscuous mode
[   24.941959][ T6531] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   24.944467][ T6531] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   24.947752][ T6528] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.948837][ T6528] bridge0: port 2(bridge_slave_1) entered disabled state
[   24.948921][ T6528] bridge_slave_1: entered allmulticast mode
[   24.949382][ T6528] bridge_slave_1: entered promiscuous mode
[   24.966634][ T6528] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   24.969311][ T6528] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   24.977252][ T6538] bridge0: port 1(bridge_slave_0) entered blocking state
[   24.977545][ T6538] bridge0: port 1(bridge_slave_0) entered disabled state
[   24.977613][ T6538] bridge_slave_0: entered allmulticast mode
[   24.978472][ T6538] bridge_slave_0: entered promiscuous mode
[   24.979561][ T6529] chnl_net:caif_netlink_parms(): no params data found
[   24.992080][ T6528] team0: Port device team_slave_0 added
[   24.994083][ T6531] team0: Port device team_slave_0 added
[   24.994322][ T6538] bridge0: port 2(bridge_slave_1) entered blocking state
[   24.994377][ T6538] bridge0: port 2(bridge_slave_1) entered disabled state
[   24.994428][ T6538] bridge_slave_1: entered allmulticast mode
[   24.994806][ T6538] bridge_slave_1: entered promiscuous mode
[   25.003162][ T6528] team0: Port device team_slave_1 added
[   25.007583][ T6531] team0: Port device team_slave_1 added
[   25.024175][ T6538] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   25.024998][ T6538] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   25.034608][ T6531] batman_adv: batadv0: Adding interface: batadv_slave_0
[   25.034630][ T6531] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   25.034651][ T6531] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   25.039071][ T6531] batman_adv: batadv0: Adding interface: batadv_slave_1
[   25.039081][ T6531] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   25.039091][ T6531] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   25.049317][ T6528] batman_adv: batadv0: Adding interface: batadv_slave_0
[   25.050501][ T6528] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   25.054723][ T6528] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   25.058425][ T6528] batman_adv: batadv0: Adding interface: batadv_slave_1
[   25.059554][ T6528] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   25.060579][ T6528] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   25.070150][ T6538] team0: Port device team_slave_0 added
[   25.082582][ T6531] hsr_slave_0: entered promiscuous mode
[   25.082887][ T6531] hsr_slave_1: entered promiscuous mode
[   25.090282][ T6538] team0: Port device team_slave_1 added
[   25.095006][ T6537] chnl_net:caif_netlink_parms(): no params data found
[   25.110141][ T6529] bridge0: port 1(bridge_slave_0) entered blocking state
[   25.110226][ T6529] bridge0: port 1(bridge_slave_0) entered disabled state
[   25.110284][ T6529] bridge_slave_0: entered allmulticast mode
[   25.110701][ T6529] bridge_slave_0: entered promiscuous mode
[   25.111467][ T6529] bridge0: port 2(bridge_slave_1) entered blocking state
[   25.111484][ T6529] bridge0: port 2(bridge_slave_1) entered disabled state
[   25.111526][ T6529] bridge_slave_1: entered allmulticast mode
[   25.112230][ T6529] bridge_slave_1: entered promiscuous mode
[   25.128358][ T6538] batman_adv: batadv0: Adding interface: batadv_slave_0
[   25.129557][ T6538] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   25.130366][ T6538] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   25.131097][ T6538] batman_adv: batadv0: Adding interface: batadv_slave_1
[   25.131105][ T6538] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   25.131119][ T6538] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   25.143771][ T6528] hsr_slave_0: entered promiscuous mode
[   25.145326][ T6528] hsr_slave_1: entered promiscuous mode
[   25.146505][ T6528] debugfs: 'hsr0' already exists in 'hsr'
[   25.147460][ T6528] Cannot create hsr debugfs directory
[   25.155760][ T6529] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   25.156641][ T6529] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   25.185176][ T6529] team0: Port device team_slave_0 added
[   25.195188][ T6537] bridge0: port 1(bridge_slave_0) entered blocking state
[   25.195261][ T6537] bridge0: port 1(bridge_slave_0) entered disabled state
[   25.195319][ T6537] bridge_slave_0: entered allmulticast mode
[   25.195710][ T6537] bridge_slave_0: entered promiscuous mode
[   25.201182][ T6529] team0: Port device team_slave_1 added
[   25.206075][ T6537] bridge0: port 2(bridge_slave_1) entered blocking state
[   25.207361][ T6537] bridge0: port 2(bridge_slave_1) entered disabled state
[   25.208866][ T6537] bridge_slave_1: entered allmulticast mode
[   25.210434][ T6537] bridge_slave_1: entered promiscuous mode
[   25.217312][ T6538] hsr_slave_0: entered promiscuous mode
[   25.217644][ T6538] hsr_slave_1: entered promiscuous mode
[   25.217833][ T6538] debugfs: 'hsr0' already exists in 'hsr'
[   25.217844][ T6538] Cannot create hsr debugfs directory
[   25.241599][ T6529] batman_adv: batadv0: Adding interface: batadv_slave_0
[   25.241628][ T6529] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   25.247265][ T6529] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   25.251234][ T6529] batman_adv: batadv0: Adding interface: batadv_slave_1
[   25.251258][ T6529] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   25.251286][ T6529] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   25.253311][ T6537] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   25.254301][ T6537] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   25.284956][ T6537] team0: Port device team_slave_0 added
[   25.296673][ T6537] team0: Port device team_slave_1 added
[   25.302305][ T6529] hsr_slave_0: entered promiscuous mode
[   25.303633][ T6529] hsr_slave_1: entered promiscuous mode
[   25.305439][ T6529] debugfs: 'hsr0' already exists in 'hsr'
[   25.306524][ T6529] Cannot create hsr debugfs directory
[   25.332540][ T6531] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   25.337407][ T6537] batman_adv: batadv0: Adding interface: batadv_slave_0
[   25.338521][ T6537] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   25.338541][ T6537] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   25.339270][ T6537] batman_adv: batadv0: Adding interface: batadv_slave_1
[   25.339277][ T6537] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   25.339289][ T6537] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   25.355673][ T6531] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   25.363229][ T6531] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   25.365643][ T6531] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   25.394739][ T6528] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   25.401672][ T6537] hsr_slave_0: entered promiscuous mode
[   25.403013][ T6537] hsr_slave_1: entered promiscuous mode
[   25.404375][ T6537] debugfs: 'hsr0' already exists in 'hsr'
[   25.405378][ T6537] Cannot create hsr debugfs directory
[   25.409909][ T6528] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   25.424079][ T6528] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   25.427520][ T6528] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   25.432635][ T6531] bridge0: port 2(bridge_slave_1) entered blocking state
[   25.432690][ T6531] bridge0: port 2(bridge_slave_1) entered forwarding state
[   25.432841][ T6531] bridge0: port 1(bridge_slave_0) entered blocking state
[   25.432864][ T6531] bridge0: port 1(bridge_slave_0) entered forwarding state
[   25.464780][ T6528] bridge0: port 2(bridge_slave_1) entered blocking state
[   25.464817][ T6528] bridge0: port 2(bridge_slave_1) entered forwarding state
[   25.464874][ T6528] bridge0: port 1(bridge_slave_0) entered blocking state
[   25.464896][ T6528] bridge0: port 1(bridge_slave_0) entered forwarding state
[   25.466388][ T6538] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   25.468842][ T6538] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   25.482977][ T6538] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   25.485322][ T6538] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   25.512947][ T6529] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   25.517364][ T6529] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   25.520779][ T6529] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   25.523505][ T6529] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   25.534104][ T6538] bridge0: port 2(bridge_slave_1) entered blocking state
[   25.534151][ T6538] bridge0: port 2(bridge_slave_1) entered forwarding state
[   25.534212][ T6538] bridge0: port 1(bridge_slave_0) entered blocking state
[   25.534237][ T6538] bridge0: port 1(bridge_slave_0) entered forwarding state
[   25.551496][ T6531] 8021q: adding VLAN 0 to HW filter on device bond0
[   25.552764][ T6537] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   25.554829][ T6537] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   25.557244][ T6537] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   25.565457][ T6537] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   25.569455][   T42] bridge0: port 1(bridge_slave_0) entered disabled state
[   25.570777][   T42] bridge0: port 1(bridge_slave_0) entered disabled state
[   25.572007][   T42] bridge0: port 2(bridge_slave_1) entered disabled state
[   25.573247][   T42] bridge0: port 2(bridge_slave_1) entered disabled state
[   25.575659][   T42] bridge0: port 1(bridge_slave_0) entered disabled state
[   25.577214][   T42] bridge0: port 2(bridge_slave_1) entered disabled state
[   25.585837][ T6531] 8021q: adding VLAN 0 to HW filter on device team0
[   25.594376][   T42] bridge0: port 1(bridge_slave_0) entered blocking state
[   25.594421][   T42] bridge0: port 1(bridge_slave_0) entered forwarding state
[   25.594888][   T42] bridge0: port 2(bridge_slave_1) entered blocking state
[   25.594904][   T42] bridge0: port 2(bridge_slave_1) entered forwarding state
[   25.605845][ T6528] 8021q: adding VLAN 0 to HW filter on device bond0
[   25.617394][ T6528] 8021q: adding VLAN 0 to HW filter on device team0
[   25.628604][ T6529] 8021q: adding VLAN 0 to HW filter on device bond0
[   25.635986][ T6531] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   25.637880][ T6531] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   25.642210][   T14] bridge0: port 1(bridge_slave_0) entered blocking state
[   25.642252][   T14] bridge0: port 1(bridge_slave_0) entered forwarding state
[   25.642545][   T14] bridge0: port 2(bridge_slave_1) entered blocking state
[   25.642559][   T14] bridge0: port 2(bridge_slave_1) entered forwarding state
[   25.647330][ T6529] 8021q: adding VLAN 0 to HW filter on device team0
[   25.654206][   T14] bridge0: port 1(bridge_slave_0) entered blocking state
[   25.654247][   T14] bridge0: port 1(bridge_slave_0) entered forwarding state
[   25.662153][ T6538] 8021q: adding VLAN 0 to HW filter on device bond0
[   25.666122][ T6538] 8021q: adding VLAN 0 to HW filter on device team0
[   25.674053][   T42] bridge0: port 1(bridge_slave_0) entered blocking state
[   25.674092][   T42] bridge0: port 1(bridge_slave_0) entered forwarding state
[   25.679089][ T4473] bridge0: port 2(bridge_slave_1) entered blocking state
[   25.679124][ T4473] bridge0: port 2(bridge_slave_1) entered forwarding state
[   25.701725][ T6528] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   25.705494][   T14] bridge0: port 2(bridge_slave_1) entered blocking state
[   25.705548][   T14] bridge0: port 2(bridge_slave_1) entered forwarding state
[   25.720052][ T6531] 8021q: adding VLAN 0 to HW filter on device batadv0
[   25.730083][ T6531] veth0_vlan: entered promiscuous mode
[   25.737070][ T6537] 8021q: adding VLAN 0 to HW filter on device bond0
[   25.746688][ T6529] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   25.747078][ T6529] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   25.761242][ T6531] veth1_vlan: entered promiscuous mode
[   25.773267][ T6537] 8021q: adding VLAN 0 to HW filter on device team0
[   25.783966][ T6528] 8021q: adding VLAN 0 to HW filter on device batadv0
[   25.786067][   T41] bridge0: port 1(bridge_slave_0) entered blocking state
[   25.786106][   T41] bridge0: port 1(bridge_slave_0) entered forwarding state
[   25.794123][   T41] bridge0: port 2(bridge_slave_1) entered blocking state
[   25.794171][   T41] bridge0: port 2(bridge_slave_1) entered forwarding state
[   25.812463][ T6537] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   25.814273][ T6537] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   25.830998][ T6528] veth0_vlan: entered promiscuous mode
[   25.833659][ T6528] veth1_vlan: entered promiscuous mode
[   25.856876][ T6528] veth0_macvtap: entered promiscuous mode
[   25.863675][ T6531] veth0_macvtap: entered promiscuous mode
[   25.865732][ T6531] veth1_macvtap: entered promiscuous mode
[   25.874636][ T6531] batman_adv: batadv0: Interface activated: batadv_slave_0
[   25.877123][ T6531] batman_adv: batadv0: Interface activated: batadv_slave_1
[   25.886889][ T6528] veth1_macvtap: entered promiscuous mode
[   25.891396][ T6528] batman_adv: batadv0: Interface activated: batadv_slave_0
[   25.894408][ T6529] 8021q: adding VLAN 0 to HW filter on device batadv0
[   25.896774][   T41] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   25.897061][   T41] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   25.897084][   T41] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   25.897101][   T41] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   25.902095][ T6537] 8021q: adding VLAN 0 to HW filter on device batadv0
[   25.907724][ T6528] batman_adv: batadv0: Interface activated: batadv_slave_1
[   25.911904][ T6538] 8021q: adding VLAN 0 to HW filter on device batadv0
[   25.928482][  T666] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   25.929344][  T666] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   25.929750][  T666] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   25.930121][  T666] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   25.965785][ T6529] veth0_vlan: entered promiscuous mode
[   25.982655][ T6529] veth1_vlan: entered promiscuous mode
[   25.985195][ T6538] veth0_vlan: entered promiscuous mode
[   25.991664][  T241] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   25.991688][  T241] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   26.005613][ T6538] veth1_vlan: entered promiscuous mode
[   26.016255][ T6537] veth0_vlan: entered promiscuous mode
[   26.016646][  T666] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   26.016656][  T666] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   26.032144][ T1824] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   26.032173][ T1824] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   26.037832][ T6537] veth1_vlan: entered promiscuous mode
[   26.047858][ T6529] veth0_macvtap: entered promiscuous mode
[   26.050196][ T6529] veth1_macvtap: entered promiscuous mode
[   26.052219][  T241] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   26.052240][  T241] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   26.061455][ T6538] veth0_macvtap: entered promiscuous mode
[   26.062411][ T6538] veth1_macvtap: entered promiscuous mode
[   26.065201][ T6538] batman_adv: batadv0: Interface activated: batadv_slave_0
[   26.066048][ T6538] batman_adv: batadv0: Interface activated: batadv_slave_1
[   26.067669][   T14] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   26.067805][   T14] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   26.067860][   T14] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   26.067903][   T14] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   26.083899][ T6537] veth0_macvtap: entered promiscuous mode
[   26.087555][ T6529] batman_adv: batadv0: Interface activated: batadv_slave_0
[   26.090827][ T6529] batman_adv: batadv0: Interface activated: batadv_slave_1
[   26.096130][ T6528] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   26.105937][ T6537] veth1_macvtap: entered promiscuous mode
[   26.107167][  T241] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   26.107325][  T666] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   26.107442][  T666] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   26.107550][  T666] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   26.131220][ T6537] batman_adv: batadv0: Interface activated: batadv_slave_0
[   26.138621][ T6537] batman_adv: batadv0: Interface activated: batadv_slave_1
[   26.192171][  T666] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   26.192194][  T666] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   26.195467][   T14] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   26.197098][   T14] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   26.197529][   T14] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   26.197929][   T14] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   26.217095][ T6649] loop3: detected capacity change from 0 to 16
[   26.225070][ T6649] erofs (device loop3): mounted with root inode @ nid 36.
[   26.232698][ T1824] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   26.232722][ T1824] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   26.236710][  T666] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   26.236736][  T666] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   26.454336][ T6652] erofs (device loop3): bogus lookback distance 1388 @ lcn 42 of nid 36
[   26.510555][ T6653] erofs (device loop3): bogus lookback distance 1388 @ lcn 42 of nid 36
[   26.510597][ T6653] erofs (device loop3): bogus lookback distance 1388 @ lcn 42 of nid 36
[   26.510608][ T6653] erofs (device loop3): readahead error at folio 42 @ nid 36
[   26.510629][ T6653] erofs (device loop3): bogus lookback distance 774 @ lcn 40 of nid 36
[   26.510639][ T6653] erofs (device loop3): readahead error at folio 41 @ nid 36
[   26.510647][ T6653] erofs (device loop3): bogus lookback distance 774 @ lcn 40 of nid 36
[   26.510656][ T6653] erofs (device loop3): readahead error at folio 40 @ nid 36
[   26.510708][ T6653] erofs (device loop3): readahead error at folio 39 @ nid 36
[   26.510717][ T6653] erofs (device loop3): readahead error at folio 38 @ nid 36
[   26.510809][ T6653] erofs (device loop3): readahead error at folio 36 @ nid 36
[   26.510867][ T6653] erofs (device loop3): bogus lookback distance 1468 @ lcn 31 of nid 36
[   26.510876][ T6653] erofs (device loop3): readahead error at folio 31 @ nid 36
[   26.510924][ T6653] erofs (device loop3): readahead error at folio 25 @ nid 36
[   26.510936][ T6653] erofs (device loop3): readahead error at folio 24 @ nid 36
[   26.510976][ T6653] erofs (device loop3): readahead error at folio 19 @ nid 36
[   26.511332][ T6653] syz.3.6: attempt to access beyond end of device
[   26.511332][ T6653] loop3: rw=524288, sector=784, nr_sectors = 64 limit=16
[   26.511416][ T6653] syz.3.6: attempt to access beyond end of device
[   26.511416][ T6653] loop3: rw=524288, sector=13478624080, nr_sectors = 24 limit=16
[   26.511471][ T6653] syz.3.6: attempt to access beyond end of device
[   26.511471][ T6653] loop3: rw=524288, sector=13478624032, nr_sectors = 48 limit=16
[   26.511743][ T6653] erofs (device loop3): bogus lookback distance 1586 @ lcn 46 of nid 36
[   26.511754][ T6653] erofs (device loop3): readahead error at folio 47 @ nid 36
[   26.511762][ T6653] erofs (device loop3): bogus lookback distance 1586 @ lcn 46 of nid 36
[   26.511771][ T6653] erofs (device loop3): readahead error at folio 46 @ nid 36
[   26.511793][ T6653] erofs (device loop3): readahead error at folio 45 @ nid 36
[   26.511837][ T6653] syz.3.6: attempt to access beyond end of device
[   26.511837][ T6653] loop3: rw=524288, sector=16, nr_sectors = 16 limit=16
[   26.662758][ T6652] erofs (device loop3): failed to decompress -29 in[58, 4038] out[3537]
[   26.662832][ T6652] erofs (device loop3): read error -117 @ 43 of nid 36
[   26.670614][  T666] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   26.670639][  T666] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   26.687276][  T666] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   26.687312][  T666] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   26.707067][  T666] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   26.707091][  T666] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   26.739856][ T6536] Bluetooth: hci0: command tx timeout
[   26.740087][ T6535] Bluetooth: hci3: command tx timeout
[   26.740156][   T52] Bluetooth: hci2: command tx timeout
[   26.748491][ T6535] Bluetooth: hci1: command tx timeout
[   26.748620][   T52] Bluetooth: hci4: command tx timeout
[   27.138854][ T6662] syzkaller0: entered promiscuous mode
[   27.138886][ T6662] syzkaller0: entered allmulticast mode
[   27.149527][ T6590] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   27.247237][ T6668] bridge0: port 2(bridge_slave_1) entered disabled state
[   27.247589][ T6668] bridge0: port 1(bridge_slave_0) entered disabled state
[   27.251276][ T6668] bridge0: entered allmulticast mode
[   27.264425][ T6668] bridge_slave_1: left allmulticast mode
[   27.265568][ T6668] bridge_slave_1: left promiscuous mode
[   27.266783][ T6668] bridge0: port 2(bridge_slave_1) entered disabled state
[   27.271195][ T6668] bridge_slave_0: left allmulticast mode
[   27.271219][ T6668] bridge_slave_0: left promiscuous mode
[   27.271288][ T6668] bridge0: port 1(bridge_slave_0) entered disabled state
[   27.514137][ T6590] usb 1-1: Using ep0 maxpacket: 32
[   27.519781][ T6590] usb 1-1: config 0 has an invalid interface number: 85 but max is 0
[   27.519805][ T6590] usb 1-1: config 0 has no interface number 0
[   27.519830][ T6590] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[   27.519843][ T6590] usb 1-1: config 0 interface 85 has no altsetting 0
[   27.522580][ T6590] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[   27.522591][ T6590] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   27.522598][ T6590] usb 1-1: Product: syz
[   27.522604][ T6590] usb 1-1: Manufacturer: syz
[   27.522609][ T6590] usb 1-1: SerialNumber: syz
[   27.532647][ T6590] usb 1-1: config 0 descriptor??
[   28.560794][ T6590] appletouch 1-1:0.85: Geyser mode initialized.
[   28.562350][ T6590] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.85/input/input2
[   28.662777][ T6738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   28.663044][ T6738] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   28.781483][ T6647] usb 1-1: USB disconnect, device number 2
[   28.818167][   T52] Bluetooth: hci4: command tx timeout
[   28.818205][   T52] Bluetooth: hci1: command tx timeout
[   28.818529][   T52] Bluetooth: hci2: command tx timeout
[   28.818550][   T52] Bluetooth: hci3: command tx timeout
[   28.818567][   T52] Bluetooth: hci0: command tx timeout
[   28.848876][ T6647] appletouch 1-1:0.85: input: appletouch disconnected
[   29.016769][ T6753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   29.020553][ T6753] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   29.025079][ T6753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   29.025257][ T6753] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   29.330135][ T6764] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode balance-alb(6)
[   29.951537][ T6785] loop2: detected capacity change from 0 to 32768
[   29.964208][ T6785] XFS (loop2): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[   29.991858][ T6785] XFS (loop2): Ending clean mount
[   30.087579][   T41] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x50/0xf0, xfs_bnobt block 0x4 
[   30.087636][   T41] XFS (loop2): Unmount and run xfs_repair
[   30.087657][   T41] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[   30.087670][   T41] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff  AB3B............
[   30.087680][   T41] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10  ................
[   30.087689][   T41] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a  .7.nt.N..._.'K.:
[   30.087696][   T41] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01  .....;%.........
[   30.087703][   T41] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0  ........... ....
[   30.087710][   T41] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   30.087717][   T41] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   30.087724][   T41] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   30.087757][   T41] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x1f8/0x380" at daddr 0x4 len 4 error 74
[   30.087860][   T41] XFS (loop2): page discard on page 00000000bc5aa6d3, inode 0x1809, pos 0.
[   30.088445][   T41] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x50/0xf0, xfs_bnobt block 0x4 
[   30.088468][   T41] XFS (loop2): Unmount and run xfs_repair
[   30.088472][   T41] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[   30.088477][   T41] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff  AB3B............
[   30.088481][   T41] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10  ................
[   30.088485][   T41] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a  .7.nt.N..._.'K.:
[   30.088489][   T41] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01  .....;%.........
[   30.088493][   T41] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0  ........... ....
[   30.088496][   T41] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   30.088500][   T41] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   30.088504][   T41] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   30.088509][   T41] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x1f8/0x380" at daddr 0x4 len 4 error 74
[   30.088554][   T41] XFS (loop2): page discard on page 0000000024b2baa7, inode 0x1809, pos 134219776.
[   30.088703][   T41] XFS (loop2): Metadata CRC error detected at xfs_allocbt_read_verify+0x50/0xf0, xfs_bnobt block 0x4 
[   30.088714][   T41] XFS (loop2): Unmount and run xfs_repair
[   30.088717][   T41] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[   30.088722][   T41] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff  AB3B............
[   30.088726][   T41] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10  ................
[   30.088730][   T41] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a  .7.nt.N..._.'K.:
[   30.088734][   T41] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01  .....;%.........
[   30.088738][   T41] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0  ........... ....
[   30.088741][   T41] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   30.088745][   T41] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   30.088749][   T41] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[   30.088754][   T41] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x1f8/0x380" at daddr 0x4 len 4 error 74
[   30.088794][   T41] XFS (loop2): page discard on page 00000000d6d77641, inode 0x1809, pos 134744064.
[   30.095437][ T6531] XFS (loop2): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[   30.096716][ T6531] XFS (loop2): Uncorrected metadata errors detected; please run xfs_repair.
[   30.321576][ T6804] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   30.474106][ T6543] IPVS: starting estimator thread 0...
[   30.638551][ T6816] IPVS: using max 52 ests per chain, 124800 per kthread
[   30.900418][ T6535] Bluetooth: hci0: command tx timeout
[   30.900439][   T52] Bluetooth: hci3: command tx timeout
[   30.901842][ T6535] Bluetooth: hci2: command tx timeout
[   30.901976][ T6535] Bluetooth: hci1: command tx timeout
[   30.902067][ T6535] Bluetooth: hci4: command tx timeout
[   31.243482][ T6821] loop3: detected capacity change from 0 to 32768
[   31.281609][ T6522]  loop3: p1 p3 < p5 p6 >
[   31.307321][ T6821]  loop3: p1 p3 < p5 p6 >
[   31.388464][ T6840] loop1: detected capacity change from 0 to 1024
[   31.637048][ T6842] 8021q: adding VLAN 0 to HW filter on device bond1
[   31.643820][   T52] Bluetooth: hci3: hardware error 0xf4
[   31.647344][ T6847] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[   31.678788][ T6851] Bluetooth: MGMT ver 1.23
[   31.724095][ T6853] netlink: 4 bytes leftover after parsing attributes in process `syz.3.50'.
[   31.739001][ T6547] udevd[6547]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory
[   31.741304][ T6520] udevd[6520]: inotify_add_watch(7, /dev/loop3p6, 10) failed: No such file or directory
[   31.743946][ T6522] udevd[6522]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[   31.748589][ T6539] udevd[6539]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory
[   31.771940][ T6859] udevd[6859]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory
[   31.773769][ T6522] udevd[6522]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[   31.775979][ T6547] udevd[6547]: inotify_add_watch(7, /dev/loop3p5, 10) failed: No such file or directory
[   31.777787][ T6539] udevd[6539]: inotify_add_watch(7, /dev/loop3p6, 10) failed: No such file or directory
[   31.835133][ T6869] loop2: detected capacity change from 0 to 512
[   31.855411][ T6869] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   31.876219][ T6531] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   32.522372][ T6901] 9pnet_fd: Insufficient options for proto=fd
[   32.987222][ T6536] Bluetooth: hci4: command tx timeout
[   32.987260][ T6536] Bluetooth: hci1: command tx timeout
[   32.987288][ T6536] Bluetooth: hci2: command tx timeout
[   32.987308][ T6536] Bluetooth: hci0: command tx timeout
[   33.265643][ T6924] Zero length message leads to an empty skb
[   33.822826][   T52] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[   33.994426][ T6935] loop4: detected capacity change from 0 to 1764
[   34.013462][ T6939] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   34.038472][ T6941] ubi31: attaching mtd0
[   34.038505][ T6941] ubi31 error: ubi_attach_mtd_dev: bad VID header (2) or data offsets (66)
[   34.067058][ T6943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   34.067227][ T6943] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   34.253499][ T6957] netlink: 4 bytes leftover after parsing attributes in process `syz.1.85'.
[   34.609419][ T6953] loop2: detected capacity change from 0 to 32768
[   34.617290][ T6953] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.83 (6953)
[   34.623103][ T6953] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   34.625151][ T6953] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[   34.902719][ T6953] BTRFS info (device loop2): enabling ssd optimizations
[   34.902750][ T6953] BTRFS info (device loop2): enabling free space tree
[   35.245130][ T6531] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   35.319681][ T6994] bridge0: port 3(syz_tun) entered blocking state
[   35.321264][ T6994] bridge0: port 3(syz_tun) entered disabled state
[   35.322632][ T6994] syz_tun: entered allmulticast mode
[   35.325016][ T6994] syz_tun: entered promiscuous mode
[   35.326365][ T6994] bridge0: port 3(syz_tun) entered blocking state
[   35.326425][ T6994] bridge0: port 3(syz_tun) entered forwarding state
[   35.374164][ T6997] loop2: detected capacity change from 0 to 4096
[   35.381804][ T6997] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512).
[   35.409543][ T6997] ntfs3(loop2): ino=1a, mi_enum_attr
[   35.410755][ T6997] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[   35.442732][   T41] ntfs3(loop2): ino=1e, ntfs3_write_inode failed, -22.
[   35.514997][   T31] audit: type=1326 audit(35.490:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7009 comm="syz.1.99" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb555c0a8 code=0x7ffc0000
[   35.519797][   T31] audit: type=1326 audit(35.500:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7009 comm="syz.1.99" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb555c0a8 code=0x7ffc0000
[   35.523462][   T31] audit: type=1326 audit(35.500:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7009 comm="syz.1.99" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb555c0a8 code=0x7ffc0000
[   35.527028][   T31] audit: type=1326 audit(35.500:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7009 comm="syz.1.99" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb555c0a8 code=0x7ffc0000
[   35.531177][   T31] audit: type=1326 audit(35.510:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7009 comm="syz.1.99" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb555c0a8 code=0x7ffc0000
[   35.535120][   T31] audit: type=1326 audit(35.510:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7009 comm="syz.1.99" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb555c0a8 code=0x7ffc0000
[   35.538563][   T31] audit: type=1326 audit(35.510:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7009 comm="syz.1.99" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb555c0a8 code=0x7ffc0000
[   35.542303][   T31] audit: type=1326 audit(35.520:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7009 comm="syz.1.99" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=280 compat=0 ip=0xffffb555c0a8 code=0x7ffc0000
[   35.542329][   T31] audit: type=1326 audit(35.520:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7009 comm="syz.1.99" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb555c0a8 code=0x7ffc0000
[   35.545777][   T31] audit: type=1326 audit(35.520:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7009 comm="syz.1.99" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb555c0a8 code=0x7ffc0000
[   36.697436][ T7062] syz.0.106 uses obsolete (PF_INET,SOCK_PACKET)
[   37.409383][ T7092] netlink: 16 bytes leftover after parsing attributes in process `syz.1.116'.
[   37.968198][   T26] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   38.143955][   T26] usb 1-1: Using ep0 maxpacket: 32
[   38.199989][   T26] usb 1-1: config 0 has an invalid interface number: 51 but max is 0
[   38.202051][   T26] usb 1-1: config 0 has no interface number 0
[   38.210614][   T26] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[   38.212394][   T26] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   38.214026][   T26] usb 1-1: Product: syz
[   38.214694][   T26] usb 1-1: Manufacturer: syz
[   38.215522][   T26] usb 1-1: SerialNumber: syz
[   38.222983][   T26] usb 1-1: config 0 descriptor??
[   38.231222][   T26] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[   38.256452][ T7146] loop4: detected capacity change from 0 to 512
[   38.272751][ T7146] EXT4-fs: Ignoring removed nobh option
[   38.276825][ T7146] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   38.309024][ T7146] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #3: comm syz.4.131: corrupted inode contents
[   38.309684][ T7146] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #3: comm syz.4.131: mark_inode_dirty error
[   38.312620][ T7146] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #3: comm syz.4.131: corrupted inode contents
[   38.312769][ T7146] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #3: comm syz.4.131: mark_inode_dirty error
[   38.315519][ T7146] EXT4-fs error (device loop4): ext4_acquire_dquot:6937: comm syz.4.131: Failed to acquire dquot type 0
[   38.322304][ T7146] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.131: corrupted inode contents
[   38.324624][ T7146] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #16: comm syz.4.131: mark_inode_dirty error
[   38.325234][ T7146] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.131: corrupted inode contents
[   38.325372][ T7146] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #16: comm syz.4.131: mark_inode_dirty error
[   38.327435][ T7146] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.131: corrupted inode contents
[   38.327598][ T7146] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem
[   38.327708][ T7146] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #16: comm syz.4.131: corrupted inode contents
[   38.335104][ T7146] EXT4-fs error (device loop4): ext4_truncate:4666: inode #16: comm syz.4.131: mark_inode_dirty error
[   38.338119][ T7146] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem
[   38.342272][ T7146] EXT4-fs (loop4): 1 truncate cleaned up
[   38.342826][ T7146] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   38.434806][   T26] usb 1-1: qt2_attach - failed to power on unit: -71
[   38.434886][   T26] quatech2 1-1:0.51: probe with driver quatech2 failed with error -71
[   38.441397][   T26] usb 1-1: USB disconnect, device number 3
[   38.466800][ T7146] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   38.890105][ T7179] warning: `syz.2.137' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   39.876547][ T7218] Bluetooth: MGMT ver 1.23
[   39.999110][ T7235] loop3: detected capacity change from 0 to 128
[   40.002325][ T7235] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[   40.003653][ T7235] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   40.006423][ T7233] loop1: detected capacity change from 0 to 1024
[   40.009409][ T7233] =======================================================
[   40.009409][ T7233] WARNING: The mand mount option has been deprecated and
[   40.009409][ T7233]          and is ignored by this kernel. Remove the mand
[   40.009409][ T7233]          option from the mount to silence this warning.
[   40.009409][ T7233] =======================================================
[   40.016825][ T7233] EXT4-fs: Ignoring removed nobh option
[   40.084464][ T7233] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   40.106390][ T7233] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 15: block 225:freeing already freed block (bit 14); block bitmap corrupt.
[   40.220119][ T6529] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   40.906405][ T7269] netlink: 12 bytes leftover after parsing attributes in process `syz.2.166'.
[   40.913952][ T7269] 8021q: adding VLAN 0 to HW filter on device bond2
[   40.929141][ T7269] vlan2: entered promiscuous mode
[   40.930239][ T7269] bond2: entered promiscuous mode
[   40.931623][ T7269] vlan2: entered allmulticast mode
[   40.932943][ T7269] bond2: entered allmulticast mode
[   40.952437][ T7269] gretap1: entered promiscuous mode
[   40.957034][ T7269] gretap1: entered allmulticast mode
[   40.958744][ T7269] bond2: (slave gretap1): Enslaving as an active interface with an up link
[   40.979123][ T7272] netlink: 'syz.2.168': attribute type 1 has an invalid length.
[   41.032244][ T7272] 8021q: adding VLAN 0 to HW filter on device bond3
[   41.938380][ T6535] Bluetooth: hci0: command 0x0c1a tx timeout
[   41.948132][   T52] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[   41.957287][ T7299] loop1: detected capacity change from 0 to 4096
[   41.995400][ T7303] loop3: detected capacity change from 0 to 128
[   42.015035][ T7303] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   42.017288][ T7299] ntfs3(loop1): ino=19, mi_enum_attr
[   42.017317][ T7299] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[   42.579712][ T7318] capability: warning: `syz.2.186' uses deprecated v2 capabilities in a way that may be insecure
[   42.592474][ T7322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   42.593010][ T7322] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   42.738655][ T7330] trusted_key: encrypted_key: insufficient parameters specified
[   43.169541][ T6528] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   43.422031][ T7335] loop3: detected capacity change from 0 to 32768
[   43.428966][ T7335] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.191 (7335)
[   43.435142][ T7335] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[   43.435244][ T7335] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm
[   43.435341][ T7335] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[   43.460391][ T7335] BTRFS info (device loop3): rebuilding free space tree
[   43.473579][ T7335] BTRFS info (device loop3): disabling free space tree
[   43.473628][ T7335] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   43.473645][ T7335] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   43.488544][ T7335] BTRFS info (device loop3): setting nodatasum
[   43.488576][ T7335] BTRFS info (device loop3): setting nodatacow
[   43.488586][ T7335] BTRFS info (device loop3): enabling ssd optimizations
[   43.488596][ T7335] BTRFS info (device loop3): turning on flush-on-commit
[   43.488603][ T7335] BTRFS info (device loop3): enabling disk space caching
[   43.488609][ T7335] BTRFS info (device loop3): force clearing of disk cache
[   43.488615][ T7335] BTRFS info (device loop3): enabling auto defrag
[   43.488620][ T7335] BTRFS info (device loop3): doing ref verification
[   43.508821][ T7353] netlink: 'syz.0.192': attribute type 4 has an invalid length.
[   43.582415][ T7335] BTRFS info (device loop3): balance: start -d -m
[   43.584118][ T7335] BTRFS info (device loop3): balance: paused
[   43.853696][ T7358] BTRFS info (device loop3): balance: resume -dusage=90 -musage=90
[   43.856717][ T7358] BTRFS info (device loop3): relocating block group 6881280 flags data|metadata
[   43.884927][ T7358] BTRFS info (device loop3): relocating block group 5242880 flags data|metadata
[   43.931725][ T7372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   43.931915][ T7372] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   43.937133][   T52] Bluetooth: hci0: Unknown advertising packet type: 0x7f
[   43.939474][ T7358] BTRFS info (device loop3): found 8 extents, stage: move data extents
[   43.960384][ T7358] BTRFS info (device loop3): found 1 extents, stage: update data pointers
[   43.974258][ T7358] BTRFS info (device loop3): balance: ended with status: 0
[   43.994648][ T6528] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[   44.081736][ T7374] loop4: detected capacity change from 0 to 32768
[   44.140427][ T7376] loop3: detected capacity change from 0 to 32768
[   44.147620][ T7376] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.202 (7376)
[   44.153706][ T7376] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   44.153748][ T7376] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[   44.247744][ T7376] BTRFS info (device loop3): rebuilding free space tree
[   44.253089][ T7378] loop4: detected capacity change from 0 to 32768
[   44.256779][ T7378] BTRFS info: device /dev/loop4 (7:4) using temp-fsid 8753b440-58b2-402a-a180-f66a089262f5
[   44.256788][ T7376] BTRFS info (device loop3): disabling free space tree
[   44.256807][ T7376] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   44.257208][ T7376] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   44.268800][ T7378] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.203 (7378)
[   44.273450][ T7376] BTRFS info (device loop3): enabling ssd optimizations
[   44.275790][ T7376] BTRFS info (device loop3): force clearing of disk cache
[   44.275828][ T7376] BTRFS info (device loop3): enabling auto defrag
[   44.275843][ T7376] BTRFS info (device loop3): doing ref verification
[   44.275859][ T7376] BTRFS info (device loop3): max_inline set to 4096
[   44.284557][ T7378] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   44.287450][ T7378] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm
[   44.315496][ T7378] BTRFS info (device loop4): rebuilding free space tree
[   44.325386][ T7378] BTRFS info (device loop4): disabling free space tree
[   44.326762][ T7378] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   44.329422][ T7378] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   44.331955][ T7378] BTRFS info (device loop4): enabling ssd optimizations
[   44.331981][ T7378] BTRFS info (device loop4): force clearing of disk cache
[   44.331992][ T7378] BTRFS info (device loop4): doing ref verification
[   44.371199][ T6537] BTRFS info (device loop4): last unmount of filesystem 8753b440-58b2-402a-a180-f66a089262f5
[   44.390563][ T7376] BTRFS info (device loop3): balance: start -d -m
[   44.402767][ T7376] BTRFS info (device loop3): relocating block group 6881280 flags data|metadata
[   44.440626][ T7376] BTRFS info (device loop3): relocating block group 5242880 flags data|metadata
[   44.445298][ T7417] netlink: 8 bytes leftover after parsing attributes in process `syz.2.204'.
[   44.508717][ T7417] netlink: 8 bytes leftover after parsing attributes in process `syz.2.204'.
[   44.556883][ T7423] netlink: 8 bytes leftover after parsing attributes in process `syz.4.207'.
[   44.612028][ T7428] netlink: 16 bytes leftover after parsing attributes in process `syz.1.210'.
[   44.642205][ T7376] BTRFS info (device loop3): found 8 extents, stage: move data extents
[   44.927704][ T7376] BTRFS info (device loop3): balance: canceled
[   45.016762][ T6528] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   45.401154][ T7451] syzkaller1: entered promiscuous mode
[   45.401194][ T7451] syzkaller1: entered allmulticast mode
[   45.746628][ T7456] netlink: 44 bytes leftover after parsing attributes in process `syz.3.217'.
[   45.746810][ T7455] netlink: 44 bytes leftover after parsing attributes in process `syz.3.217'.
[   45.854745][ T7468] loop0: detected capacity change from 0 to 2048
[   45.866992][ T7468] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[   45.869507][ T6522] udevd[6522]: incorrect nilfs2 checksum on /dev/loop0
[   45.880283][ T7470] loop1: detected capacity change from 0 to 16
[   45.882581][ T7470] erofs (device loop1): unsupported i_format 32 of nid 36
[   45.919864][ T7473] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   46.100210][   T52] Bluetooth: Wrong link type (-71)
[   46.257469][ T7482] loop2: detected capacity change from 0 to 512
[   46.261592][ T7482] EXT4-fs (loop2): Test dummy encryption mode enabled
[   46.261635][ T7482] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   46.268671][ T7482] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.230: bad orphan inode 131083
[   46.277582][ T7482] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   46.280141][ T7480] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   47.326272][ T6531] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   47.338063][ T7498] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   47.339740][ T7498] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   47.417448][ T7510] netlink: 36 bytes leftover after parsing attributes in process `syz.1.239'.
[   48.590040][ T7547] netlink: 60 bytes leftover after parsing attributes in process `syz.1.252'.
[   48.706560][   T24] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   48.714971][   T24] hid-generic 0000:0000:0000.0001: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   49.050380][ T7544] loop0: detected capacity change from 0 to 32768
[   49.089600][ T7544] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   49.156120][ T7553] fido_id[7553]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[   49.201483][ T7544] XFS (loop0): Ending clean mount
[   49.242496][ T7576] input: syz0 as /devices/virtual/input/input3
[   49.253781][ T6538] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   49.373302][ T7585] netlink: 16 bytes leftover after parsing attributes in process `syz.2.264'.
[   49.482507][   T31] kauditd_printk_skb: 10 callbacks suppressed
[   49.484252][   T31] audit: type=1326 audit(49.460:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7590 comm="syz.1.266" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb555c0a8 code=0x7ffc0000
[   49.492990][   T31] audit: type=1326 audit(49.470:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7590 comm="syz.1.266" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb555c0a8 code=0x7ffc0000
[   49.496577][   T31] audit: type=1326 audit(49.470:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7590 comm="syz.1.266" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb555c0a8 code=0x7ffc0000
[   49.500185][   T31] audit: type=1326 audit(49.480:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7590 comm="syz.1.266" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=213 compat=0 ip=0xffffb555c0a8 code=0x7ffc0000
[   49.503926][   T31] audit: type=1326 audit(49.480:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7590 comm="syz.1.266" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb555c0a8 code=0x7ffc0000
[   49.507362][   T31] audit: type=1326 audit(49.480:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7590 comm="syz.1.266" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb555c0a8 code=0x7ffc0000
[   49.612432][   T31] audit: type=1326 audit(49.530:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7590 comm="syz.1.266" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb555c0a8 code=0x7ffc0000
[   49.612509][   T31] audit: type=1326 audit(49.530:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7590 comm="syz.1.266" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=436 compat=0 ip=0xffffb555c0a8 code=0x7ffc0000
[   49.612569][   T31] audit: type=1326 audit(49.530:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7590 comm="syz.1.266" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=94 compat=0 ip=0xffffb555c0a8 code=0x7ffc0000
[   50.675304][ T7613] loop3: detected capacity change from 0 to 32768
[   50.685340][ T7613] (syz.3.270,7613,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[   50.690344][ T7613] (syz.3.270,7613,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[   50.780017][ T7613] JBD2: Ignoring recovery information on journal
[   50.827410][ T7613] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode.
[   50.987978][ T6535] Bluetooth: hci0: command 0x0c1a tx timeout
[   51.135571][ T6528] ocfs2: Unmounting device (7,3) on (node local)
[   51.178695][ T7650] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   51.178891][ T7650] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   51.576167][ T7672] loop3: detected capacity change from 0 to 128
[   51.587108][ T7672] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   51.636046][ T6528] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   51.666440][ T7680] loop1: detected capacity change from 0 to 2048
[   51.671516][ T7680] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   51.715902][ T7684] loop3: detected capacity change from 0 to 512
[   51.720595][ T7684] EXT4-fs (loop3): Test dummy encryption mode enabled
[   51.721918][ T7684] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   51.728268][ T7684] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.298: bad orphan inode 131083
[   51.733234][ T7684] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   51.765687][ T7688] Driver unsupported XDP return value 0 on prog  (id 18) dev N/A, expect packet loss!
[   52.665011][ T7702] loop2: detected capacity change from 0 to 8
[   52.682938][ T7702] SQUASHFS error: xz decompression failed, data probably corrupt
[   52.683130][ T7702] SQUASHFS error: Failed to read block 0x108: -5
[   52.683170][ T7702] SQUASHFS error: Unable to read metadata cache entry [106]
[   52.683198][ T7702] SQUASHFS error: Unable to read inode 0x11f
[   52.968227][ T6528] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   53.106281][ T7719] input: syz1 as /devices/virtual/input/input4
[   53.972001][ T7740] loop1: detected capacity change from 0 to 2048
[   53.983128][ T7740] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   54.003200][ T6529] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   54.086507][ T7750] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode
[   54.089711][ T7749] mac80211_hwsim hwsim10 wlan0: left promiscuous mode
[   54.267804][ T7756] loop4: detected capacity change from 0 to 4096
[   54.283553][ T7760] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   54.535369][ T7773] loop4: detected capacity change from 0 to 1024
[   54.537124][ T7773] EXT4-fs: inline encryption not supported
[   54.551456][ T7773] EXT4-fs: Ignoring removed bh option
[   54.605328][ T7773] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   54.642791][ T6537] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   54.845920][ T7794] dvmrp6: entered allmulticast mode
[   54.849105][ T7793] dvmrp6: left allmulticast mode
[   56.166830][ T7812] loop2: detected capacity change from 0 to 64
[   56.347408][ T7822] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check.
[   56.500987][ T6544] libceph: connect (1)[c::]:6789 error -101
[   56.503246][ T6544] libceph: mon0 (1)[c::]:6789 connect error
[   56.723695][ T7820] loop1: detected capacity change from 0 to 32768
[   56.758906][ T6544] libceph: connect (1)[c::]:6789 error -101
[   56.758997][ T6544] libceph: mon0 (1)[c::]:6789 connect error
[   56.898075][ T6574] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   56.993728][ T7829] ceph: No mds server is up or the cluster is laggy
[   57.050698][ T6574] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   57.050735][ T6574] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[   57.050747][ T6574] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   57.053723][ T6574] usb 1-1: config 0 descriptor??
[   57.245467][ T7851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   57.247081][ T7851] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   57.256287][ T7851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   57.284585][ T7851] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   57.396584][ T7863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   57.396788][ T7863] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   57.489942][ T6574] keytouch 0003:0926:3333.0002: fixing up Keytouch IEC report descriptor
[   57.494453][ T6574] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.0002/input/input5
[   57.638823][ T6574] keytouch 0003:0926:3333.0002: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0
[   57.941409][ T6574] usb 1-1: USB disconnect, device number 4
[   60.339290][ T7939] loop1: detected capacity change from 0 to 1024
[   60.339676][ T7939] EXT4-fs: Ignoring removed nobh option
[   60.339684][ T7939] EXT4-fs: Ignoring removed bh option
[   60.349096][ T7939] EXT4-fs (loop1): can't mount with journal_async_commit, fs mounted w/o journal
[   60.645227][   T31] audit: type=1326 audit(60.620:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7945 comm="syz.1.389" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb555c0a8 code=0x7ffc0000
[   60.645423][   T31] audit: type=1326 audit(60.620:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7945 comm="syz.1.389" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb555c0a8 code=0x7ffc0000
[   60.654422][   T31] audit: type=1326 audit(60.630:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7945 comm="syz.1.389" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=216 compat=0 ip=0xffffb555c0a8 code=0x7ffc0000
[   60.654882][   T31] audit: type=1326 audit(60.630:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7945 comm="syz.1.389" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb555c0a8 code=0x7ffc0000
[   60.655927][   T31] audit: type=1326 audit(60.630:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7945 comm="syz.1.389" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb555c0a8 code=0x7ffc0000
[   60.675267][   T31] audit: type=1326 audit(60.650:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7945 comm="syz.1.389" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=211 compat=0 ip=0xffffb555c0a8 code=0x7ffc0000
[   60.675312][   T31] audit: type=1326 audit(60.650:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7945 comm="syz.1.389" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb555c0a8 code=0x7ffc0000
[   60.675327][   T31] audit: type=1326 audit(60.650:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=7945 comm="syz.1.389" exe="/root/syz-executor" sig=0 arch=c00000b7 syscall=98 compat=0 ip=0xffffb555c0a8 code=0x7ffc0000
[   61.724891][ T7991] loop3: detected capacity change from 0 to 128
[   62.171229][ T7997] loop1: detected capacity change from 0 to 32768
[   62.188470][ T7997] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   62.200141][ T7997] XFS (loop1): Ending clean mount
[   62.224271][ T6529] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   62.572001][ T8000] hub 8-0:1.0: USB hub found
[   62.573805][ T8000] hub 8-0:1.0: 8 ports detected
[   62.640728][ T8013] vlan0: entered promiscuous mode
[   62.769262][ T8018] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   62.792171][ T8018] batman_adv: batadv0: Removing interface: batadv_slave_0
[   64.499972][ T2415] ieee802154 phy0 wpan0: encryption failed: -22
[   64.500042][ T2415] ieee802154 phy1 wpan1: encryption failed: -22
[   64.504430][ T2339] cfg80211: failed to load regulatory.db
[   65.122232][ T8081] loop3: detected capacity change from 0 to 32768
[   65.123319][ T8081] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.438 (8081)
[   65.125088][ T8081] BTRFS info (device loop3): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[   65.125121][ T8081] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[   65.149884][ T8081] BTRFS info (device loop3): enabling ssd optimizations
[   65.149939][ T8081] BTRFS info (device loop3): enabling free space tree
[   65.191276][ T6528] BTRFS info (device loop3): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[   66.025639][ T8140] loop4: detected capacity change from 0 to 128
[   66.727182][ T8164] loop3: detected capacity change from 0 to 2048
[   66.749488][ T8164] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   66.922583][   T12] kworker/u8:0: attempt to access beyond end of device
[   66.922583][   T12] loop4: rw=1, sector=145, nr_sectors = 8 limit=128
[   66.922663][   T12] kworker/u8:0: attempt to access beyond end of device
[   66.922663][   T12] loop4: rw=1, sector=161, nr_sectors = 8 limit=128
[   66.922709][   T12] kworker/u8:0: attempt to access beyond end of device
[   66.922709][   T12] loop4: rw=1, sector=177, nr_sectors = 8 limit=128
[   66.922741][   T12] kworker/u8:0: attempt to access beyond end of device
[   66.922741][   T12] loop4: rw=1, sector=193, nr_sectors = 8 limit=128
[   66.922776][   T12] kworker/u8:0: attempt to access beyond end of device
[   66.922776][   T12] loop4: rw=1, sector=209, nr_sectors = 8 limit=128
[   66.922805][   T12] kworker/u8:0: attempt to access beyond end of device
[   66.922805][   T12] loop4: rw=1, sector=225, nr_sectors = 8 limit=128
[   66.922846][   T12] kworker/u8:0: attempt to access beyond end of device
[   66.922846][   T12] loop4: rw=1, sector=241, nr_sectors = 8 limit=128
[   66.923441][   T12] kworker/u8:0: attempt to access beyond end of device
[   66.923441][   T12] loop4: rw=1, sector=257, nr_sectors = 8 limit=128
[   66.923549][   T12] kworker/u8:0: attempt to access beyond end of device
[   66.923549][   T12] loop4: rw=1, sector=273, nr_sectors = 8 limit=128
[   66.923578][   T12] kworker/u8:0: attempt to access beyond end of device
[   66.923578][   T12] loop4: rw=1, sector=289, nr_sectors = 8 limit=128
[   66.995965][ T8170] Bluetooth: MGMT ver 1.23
[   66.997358][ T8170] netlink: 12 bytes leftover after parsing attributes in process `syz.2.465'.
[   67.245247][ T8176] loop4: detected capacity change from 0 to 1024
[   67.245957][ T8176] EXT4-fs: Ignoring removed bh option
[   67.276503][ T8176] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback.
[   67.407237][ T6537] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-001000000000.
[   67.549137][ T8188] ==================================================================
[   67.549152][ T8188] BUG: KASAN: slab-use-after-free in xfrm_state_find+0x2a48/0x4170
[   67.549175][ T8188] Read of size 1 at addr ffff0000f54c8330 by task syz.3.470/8188
[   67.549181][ T8188] 
[   67.549185][ T8188] CPU: 1 UID: 0 PID: 8188 Comm: syz.3.470 Not tainted syzkaller #0 PREEMPT 
[   67.549192][ T8188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025
[   67.549197][ T8188] Call trace:
[   67.549199][ T8188]  show_stack+0x2c/0x3c (C)
[   67.549209][ T8188]  __dump_stack+0x30/0x40
[   67.549215][ T8188]  dump_stack_lvl+0xd8/0x12c
[   67.549221][ T8188]  print_address_description+0xa8/0x238
[   67.549233][ T8188]  print_report+0x68/0x84
[   67.549241][ T8188]  kasan_report+0xb0/0x110
[   67.549253][ T8188]  __asan_report_load1_noabort+0x20/0x2c
[   67.549259][ T8188]  xfrm_state_find+0x2a48/0x4170
[   67.549269][ T8188]  xfrm_resolve_and_create_bundle+0x60c/0x2a30
[   67.549278][ T8188]  xfrm_lookup_with_ifid+0x234/0x1a5c
[   67.549285][ T8188]  xfrm_lookup_route+0x4c/0x1c0
[   67.549293][ T8188]  ip6_dst_lookup_flow+0xac/0xe0
[   67.549303][ T8188]  rawv6_sendmsg+0xc40/0x13f0
[   67.549314][ T8188]  inet_sendmsg+0x154/0x284
[   67.549321][ T8188]  ____sys_sendmsg+0x490/0x7b8
[   67.549331][ T8188]  ___sys_sendmsg+0x204/0x278
[   67.549338][ T8188]  __sys_sendmmsg+0x1f4/0x548
[   67.549346][ T8188]  __arm64_sys_sendmmsg+0xa0/0xbc
[   67.549354][ T8188]  invoke_syscall+0x98/0x2b8
[   67.549361][ T8188]  el0_svc_common+0x130/0x23c
[   67.549367][ T8188]  do_el0_svc+0x48/0x58
[   67.549372][ T8188]  el0_svc+0x58/0x180
[   67.549381][ T8188]  el0t_64_sync_handler+0x84/0x12c
[   67.549389][ T8188]  el0t_64_sync+0x198/0x19c
[   67.549396][ T8188] 
[   67.549397][ T8188] Allocated by task 6806:
[   67.549401][ T8188]  kasan_save_track+0x40/0x78
[   67.549409][ T8188]  kasan_save_alloc_info+0x44/0x54
[   67.549414][ T8188]  __kasan_slab_alloc+0x70/0x88
[   67.549422][ T8188]  kmem_cache_alloc_noprof+0x238/0x3e8
[   67.549430][ T8188]  xfrm_state_alloc+0x2c/0x264
[   67.549438][ T8188]  __find_acq_core+0x720/0x1540
[   67.549442][ T8188]  xfrm_find_acq+0x94/0xcc
[   67.549446][ T8188]  xfrm_alloc_userspi+0x52c/0x9c8
[   67.549454][ T8188]  xfrm_user_rcv_msg+0x588/0x7c4
[   67.549461][ T8188]  netlink_rcv_skb+0x220/0x3fc
[   67.549470][ T8188]  xfrm_netlink_rcv+0x80/0x9c
[   67.549477][ T8188]  netlink_unicast+0x694/0x8c4
[   67.549485][ T8188]  netlink_sendmsg+0x648/0x930
[   67.549489][ T8188]  ____sys_sendmsg+0x490/0x7b8
[   67.549496][ T8188]  ___sys_sendmsg+0x204/0x278
[   67.549502][ T8188]  __arm64_sys_sendmsg+0x184/0x238
[   67.549509][ T8188]  invoke_syscall+0x98/0x2b8
[   67.549514][ T8188]  el0_svc_common+0x130/0x23c
[   67.549519][ T8188]  do_el0_svc+0x48/0x58
[   67.549523][ T8188]  el0_svc+0x58/0x180
[   67.549530][ T8188]  el0t_64_sync_handler+0x84/0x12c
[   67.549536][ T8188]  el0t_64_sync+0x198/0x19c
[   67.549541][ T8188] 
[   67.549542][ T8188] Freed by task 6574:
[   67.549545][ T8188]  kasan_save_track+0x40/0x78
[   67.549552][ T8188]  kasan_save_free_info+0x58/0x70
[   67.549557][ T8188]  __kasan_slab_free+0x74/0x98
[   67.549564][ T8188]  kmem_cache_free+0x184/0x550
[   67.549572][ T8188]  xfrm_state_gc_task+0x468/0x560
[   67.549578][ T8188]  process_one_work+0x7e8/0x155c
[   67.549583][ T8188]  worker_thread+0x958/0xed8
[   67.549588][ T8188]  kthread+0x5fc/0x75c
[   67.549596][ T8188]  ret_from_fork+0x10/0x20
[   67.549601][ T8188] 
[   67.549603][ T8188] The buggy address belongs to the object at ffff0000f54c8000
[   67.549603][ T8188]  which belongs to the cache xfrm_state of size 928
[   67.549608][ T8188] The buggy address is located 816 bytes inside of
[   67.549608][ T8188]  freed 928-byte region [ffff0000f54c8000, ffff0000f54c83a0)
[   67.549614][ T8188] 
[   67.549616][ T8188] The buggy address belongs to the physical page:
[   67.549619][ T8188] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1354c8
[   67.549625][ T8188] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[   67.549629][ T8188] flags: 0x5ffc00000000040(head|node=0|zone=2|lastcpupid=0x7ff)
[   67.549635][ T8188] page_type: f5(slab)
[   67.549641][ T8188] raw: 05ffc00000000040 ffff0000c30ceb40 dead000000000122 0000000000000000
[   67.549646][ T8188] raw: 0000000000000000 00000000000f000f 00000000f5000000 0000000000000000
[   67.549652][ T8188] head: 05ffc00000000040 ffff0000c30ceb40 dead000000000122 0000000000000000
[   67.549657][ T8188] head: 0000000000000000 00000000000f000f 00000000f5000000 0000000000000000
[   67.549662][ T8188] head: 05ffc00000000002 fffffdffc3d53201 00000000ffffffff 00000000ffffffff
[   67.549667][ T8188] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[   67.549670][ T8188] page dumped because: kasan: bad access detected
[   67.549673][ T8188] 
[   67.549674][ T8188] Memory state around the buggy address:
[   67.549677][ T8188]  ffff0000f54c8200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   67.549681][ T8188]  ffff0000f54c8280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   67.549685][ T8188] >ffff0000f54c8300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   67.549688][ T8188]                                      ^
[   67.549691][ T8188]  ffff0000f54c8380: fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc fc
[   67.549695][ T8188]  ffff0000f54c8400: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb
[   67.549698][ T8188] ==================================================================
[   67.549715][ T8188] Disabling lock debugging due to kernel taint
[   67.685793][ T8174] loop1: detected capacity change from 0 to 32768
[   67.686789][ T8174] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.466 (8174)
[   67.692570][ T8174] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   67.692616][ T8174] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm
[   67.749292][ T8174] BTRFS info (device loop1): enabling ssd optimizations
[   67.749318][ T8174] BTRFS info (device loop1): enabling free space tree
[   68.258281][ T6529] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d