last executing test programs:

13.993721973s ago: executing program 4 (id=451):
syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x45e, 0x713, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x6, 0x40, 0x7, [{{0x9, 0x4, 0x0, 0x10, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x3, 0x0, 0x1, {0x22, 0x29f}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x4, 0x3}}}}}]}}]}}, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x458}}, {0x6, &(0x7f0000000380)=@string={0x6, 0x3, "28da18de"}}]})
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
listen(r0, 0x0)
ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000100)={'veth1_to_bridge\x00', {0x2, 0x0, @broadcast}})
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000000), 0x4)
r1 = openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r3 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
getsockopt$rose(r3, 0x104, 0x5, 0x0, &(0x7f0000000180))
listen(r3, 0x3)
mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x840802, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRES8=r0])
syz_mount_image$hfs(&(0x7f0000000080), &(0x7f0000000040)='./bus\x00', 0x808008, &(0x7f0000000380)=ANY=[@ANYBLOB="636f6465706167653d757466382c66696c655f756d61736b3d30303030303030303030303030303030303030303030332c696f636861727365743d63703737352c71756965742c008f7881d185c35a6a28ef06c5b85628f12a02248de249c2a338d049166371583781680d171f47"], 0x1, 0x2df, &(0x7f0000000400)="$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")
r4 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
ftruncate(r4, 0x2007ffa)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
setsockopt$netrom_NETROM_N2(r2, 0x103, 0x3, &(0x7f00000000c0)=0xd, 0x4)
ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000440)={0x0, 0x87c, 0x2, 0x80, 0x5, 0x0, [{0xffff, 0x4f27, 0x4, '\x00', 0x200}, {0x8, 0x0, 0x9fa, '\x00', 0x2206}, {0x1, 0x80000005, 0x99b3, '\x00', 0x81}, {0x5, 0x1, 0xfffffffffffffffd, '\x00', 0x2}, {0x7, 0xffff, 0x7eb74baf, '\x00', 0x260d}]})
capset(&(0x7f0000000080)={0x20080522}, &(0x7f0000000040)={0xffc, 0x10ffff, 0x6, 0x0, 0x1, 0xffffff80})
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid\x00')
syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/pid_for_children\x00')
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/slabinfo\x00', 0x41, 0x0)

13.745740442s ago: executing program 1 (id=452):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200004, 0x200004, 0x4, 0x0, 0x0, 0x5})
r1 = socket$inet(0x2, 0x4000000000000001, 0x7ff)
syz_mount_image$iso9660(&(0x7f0000000200), &(0x7f0000000540)='./file0\x00', 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0xfc, 0x55a, &(0x7f0000000f40)="$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")
setsockopt$inet_tcp_int(r1, 0x6, 0x2a, &(0x7f0000000140)=0x100, 0x24)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143441, 0x98)
quotactl_fd$Q_GETNEXTQUOTA(r2, 0xffffffff80000901, 0x0, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000000)={0x40, 0x1, 0x3}, 0x10)

13.518519722s ago: executing program 2 (id=453):
r0 = socket$pptp(0x18, 0x1, 0x2)
r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x80080, 0x0)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0x2)
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000))
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0)
r3 = syz_open_pts(r2, 0x900)
r4 = dup3(r3, r2, 0x80000)
read(r4, &(0x7f00000000c0)=""/226, 0xe2)
bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev}}, 0x1e)
connect$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @multicast1}}, 0x1e)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0)
ioctl$EVIOCGPROP(r5, 0x40047438, &(0x7f0000000180)=""/246)
pwritev(r5, &(0x7f00000007c0)=[{&(0x7f0000000080)="508f", 0x2}, {&(0x7f0000000280)="31bcbfca570b87d37723468fa47afbfc39ebf11663b1051617568c9c796152a8736d6f619ba8957605a9994e05ba74c34148e92c0862597fccd90034b90676a509f129f472da6488b07f09c0453e44d08d4c5099343c7964ba93b16ee8d61540b62a75104abf2df1fecca0114fba662f0c1827eef63e924f3cd50d28b94be32d049760fee37fffdbef26fa09607978ea956c33354d1135974665412c2d742af3dbc6bd34b04bfca6a5267888644a242b2dc758c2af3e8716ac0fadff975652bc2c3dbb5ae549acee3ee3ba6be72e8dbac0", 0xd1}, {&(0x7f00000000c0)="88f84926cf1e065f2e319fcb97c7fd9e49a74a4f9194dab37672c1612a70a3434b4c60474482851187c40434ef102e86c43c856984ce99f2d48a45d9662de82ad10bd6ddc472f23b36bbf1c9e0423c8e042b4349e4391bfaf25684dbd39bd691726ded99c9c17b142c9323183073b41b1f22c72112523711d34fec9205ceabb53dc0092f9b35c854c91c393b533f46d79a08959e4b60efb7", 0x98}, {&(0x7f0000000380)="4f5e10e5f32088f374f3cefe94c45722c214815edb009c482121c1fff3a0488e0930b7aab5c7b5090a711af4dd7eba399725bf39eaf794c691e94933f70e705c812872f305c953f33f45973a6e7730fa2d7bb6e96cab5b9fdb484b9224ef994b5a730feab318913a54c0638ca31f9d2c10749036f9d75fbc3c8658333a0210", 0x7f}, {&(0x7f0000000480)="274556a9889f1eacf4d7fd691810d872bcce72819cb5fff81d8d1d044f381b640afeae673e5a1c15fa21f5b8fa17ed97fb59ab1d8f2c3db989", 0x39}, {&(0x7f0000000500)="186c297aba6cec1c9887c27da7c5830b0cf602a1c88561af2c03ab5b9a1af65b0ff4906a81ef9e36725b1499a9", 0x2d}, {&(0x7f0000000540)="a6909a265024898a769b99c34e09b26276c703c160c8768915d063c9d8beed31044db518b6a0d3e5eb58f4118f7013564247a85c94b9c4a1190e05a8a1770c13ca7e68957d34d94ad40c04c80561390878519499864b37ef6a0e97a259f3451efb28c18ef8b463d45bd4cce803", 0x6d}, {0x0}, {0x0}], 0x9, 0x6, 0x82db)

13.492207981s ago: executing program 0 (id=454):
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
syz_mount_image$ocfs2(&(0x7f00000026c0), &(0x7f0000004780)='./file0\x00', 0x200000, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x4703, &(0x7f0000004800)="$eJzs212IXFcBB/BzZ1ezmybb/UibpOnHJBFctCybPlXrQ1yrNpo2H9pWU2Wd3Ww3q7M76+6MFgxSgyAKghIEFT+oCqUvtSAG+lKLUPADaRVKRdH6IlKogg8GbaArM3Nvdu6d2d7JTtLS9veDdvaee8+5Z/a/99w590wKseqphdXiwmqxtFSszN6/ekvxc5VybXEuFF4lr/X56c6VyEn2r50j7/vAR+65JYQ/HPvah9bW1tZC3XDo6EDLz+f/fXq29TVRyNSpt9u5taY/1h556edveaUj8pwIIexo61ddXwjhY78IYUsIYSQuG41fB0MI20IIUQjh0d/868cDvXShxdl7X3ju2JnD+85MPf7YMxfmj254YBTCd8u7b55ffHF/323Pv+MynR4AAF7RB48fufvo5IHwZBSGzvW3f17fGb8mn4/vfNun7nq4f33/Gt3pexVDBQAAgIz1+f9w9HKH9bpkZS1ZEnzigRN3PxWt7zexfX07dNeR298/eSBe/43a9t8aF/3zvX2NNdTsum92/XckU7/z+u/6eR7+6rO/XHrr5vuf9C8573CIChOp7UJhYiKEY1PN7V3R1kK5slp95/2V2tLJzZ/3jSKdf3b1fn1Bv9v8RzPV89b/d3/i8z8b7O/lHYyF7F9tfbvY/qdMB+n8Nx7Lf/KlqKv8xzL18vK/4+nt53+1pZd3kD0jlyKdf/NC3Nd6QLE5ANTz/2Z/fv47Mu3n5f/9qXOPntjE93/q48xwVO/rQGoEeDku3+ArTGSk828GkRo641/kRtf//zL5X5NpPy//Oyv/+N3ferj/bzT+j0/10uabRzr/ZhDF1BHr1/9IIf/6vzbTfl7+vz3152c/2dO9uj3/ev/H3f+7ks4/vhGnB8/Gb7Lb8X9npv28/HeN3ffQwib6/eHBuJ9DURhr+dbpufotbGh9vboxpanvXt7ESd4E0vk3f2upS2eo+dK4/ofzx/9dmfbz8n9oz9ffc7qn7/92Hv8njf9dSec/2Ci7lPxfyuS/O9N+Xv4/PP33v9x3mcf/+vZB+Xclnf/Wtv3rz38KXc3/rsvUz3v+s2/0qUf+2sP8P+lfct7k+U/yHGI8aj7/obN0/ldteFy39/89mXp51/+3/vP80/t7Gf+jAU8AepDOf1uzsMMEsNv8r8+0n5f/F+758sf/tIn5X+MT30CSf8v8f0uz/Kjxvyvp/Lc3C1P/GOrBxv8b9/+oPff/ZvK/IdN+Xv4XDk30f+Uy3//r/R/v8Cibdun8hzY8rp7/77u4/9+YqZeX/xf3/vTFm3v6/B/CpLn+pqXzv3rD4xrX/0B+/jdl6uXl/51v/PqJB3vo/9t7qEs2/+a9PnU5xZ/Nu53/FzPt5+X/o/HzZ/dfgfnfre7/XUnn31w1v5T8s/P/vZn28/L/3pEfrPRfgec/d8gfAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgU0bj1+EQFSZS24XCxEQIY/H2rrA1mimdnJ4pV2Y/sxrCjri8GEaj+XJlplSeXliqnJybLpXLldkQron37wgD0Wq5Up1eLC1fe7GtwejUXGmlOjNXqoYQdsbl14ftSVszC9XF0nLj2KTOVVHps7VKtTRRW51bCbsvlm9LyudXKrXl6y62dXWhsrJ8qrQ0fXJh5d2Tk5OTYc/FPo9Ecw9U55aqzd4299brJHWHo5Y309h9Q8v5Pl2prSyVyo3yG1vqlCuzpXJLnZtazlddqS3Nlqpz0+XKfHK+YkvdlvfW2L033jceRlLvL6mbdTB+vf3Q8Y8eP3ygbX8xSue9VFucm9ze+W8CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgDeuJ29717dDCH3NrUII4WDyQxT/l3L23heeO3bm8L4zU48/9syF+aOdjgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg/+zAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVh535equjiOACfGd/7WiCltBFyGRgiojsJC/pFJJXXyJZtWge1SsigKDCMaFkQBEHtooKgVVD5F0QtXLaqNrVoYRBBxehMXu4IN7zQMed5YDgzzL1nvjBw78z5HA4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD6cXbHYlfWXtq1eWnr7g+hMz/3fwhhNFne/7y3I/SEEL5+mTkdVmkLPU39v5mcGy9fNfm9t3/84fXRZO31F98trtsdknSo4XhnkqZDQ2vvf6O6M/hsejAJIY1dCFEsjD05UwshdMQuhCh+fpy/mP2+/xe7EKLo/3C3K7v/tdiFEMXW3Z/6avkzHtVzvn5hsPG/v9UjeBuP6KxDb09eeZe6qZX3Mn//T/LN+2A1zJ448v557CKIZnZu6mjsGgAAgL/rXIv8P2xZ3r9/OQk93eXc/1tT/t/b1P/q+f+Ke9tvjM20FUJsK41NZsfD+9rpc+M7NXD19uua8Z6qkv9Xm/y/2uT/1Sb/rzb5f7XJ/8m8kv9X0uObexZfxC6CaOT/AABQPYeOT0zVh0eyl/9NPzrLeX1f3tbzPP3BremBRw3jRvLDf9vhYxMHDg6P5Pe9PCC4sv5DunT2ez7fo7ktTDbNu2i1/kPv04X5a53lT9T/cP5GUV9xXes/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC/2J17GgbBKAyj321F1EarogkLPwk+0MCIAKQwowEdTBiAgRBQwEDOWe5NnuUFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnu9f5XXx/aUx0muNSFPZZdf+OZ5mP3PfDsv77HHjVgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANjYgQMZAAAAAGH+1nm0HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgKcCAAD//wTsyzo=")
r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0xc)
r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000480)=ANY=[@ANYBLOB='-pids R'], 0x1f)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x40)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
recvmsg(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000280)=""/199, 0xc7}], 0x4}, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
syz_mount_image$xfs(&(0x7f0000009740), &(0x7f0000009780)='./file1\x00', 0x0, &(0x7f0000000180)={[{@uquota}]}, 0x1, 0x97a4, &(0x7f0000012f40)="$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")
symlink(&(0x7f0000000580)='.\x02/file1\x00', &(0x7f00000002c0)='.\x02\x00')
lchown(&(0x7f0000000200)='.\x02\x00', 0x0, 0x0)
bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0x80, &(0x7f0000000100)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x1, 0x61, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e24, 0x4e20, 0x4d, 0x0, @wg=@initiation={0x1, 0x1, "65a252e7cb7a5918c004a9971a46afced2c32642b1ec9fe34818d8ccd82041b7", "c930713c550e74ee13c2638ac75b2a9666efd31a34fce4498df8105d8bd8ed283a220c3a9becd8a70d3607ea8270d351", "ae12e16b560f2f8ac4ca3e745ce285f12f6e8719e7f1e7f286a68f76", {"980aa8fb8f80d69f1fb587086447e93e", "55e824bb69e833bd36300b088233545a"}}}}}}}, 0x0)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs2/binder1\x00', 0x800, 0x0)
ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000600)={0x58, 0x0, &(0x7f0000000540)=[@exit_looper, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f00000002c0)={@flat=@weak_binder={0x77622a85, 0x100a, 0x2}, @flat=@handle={0x73682a85, 0x100}, @fda={0x66646185, 0x1, 0x2, 0x26}}, &(0x7f0000000500)={0x0, 0x18, 0x30}}, 0x40}, @acquire={0x40046305, 0x2}], 0x30, 0x0, &(0x7f00000005c0)="0812939b850211e55b6f2d106d39b3bddd6127d74af3ce1cd2b600d577da0593fc7108a39b8f31d9983c9e0c2765237e"})
getdents(r3, &(0x7f0000000080)=""/43, 0x2b)
mknod(&(0x7f0000000000)='./file0\x00', 0x10, 0x7ff)
getdents(r3, 0x0, 0xbb)
socket$inet_sctp(0x2, 0x1, 0x84)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000000069000ba9e70000000000000000800000000000000800010001"], 0x20}}, 0x4000000)
syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=<r6=>0x0, &(0x7f0000000080))
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002fc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x7e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10)

12.995027194s ago: executing program 1 (id=456):
r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0xc0000, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x7)
ioctl$TIOCL_GETKMSGREDIRECT(r0, 0x8910, 0x0)
r1 = socket$kcm(0xa, 0x2, 0x3a)
sendmsg$kcm(r1, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x0, @loopback}, 0x80, &(0x7f0000000c00)=[{&(0x7f0000000780)="80005b020eaa4da2", 0xfdef}], 0x1, 0x0, 0x0, 0x900}, 0x0)

12.740999199s ago: executing program 2 (id=457):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={<r0=>0xffffffffffffffff})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff)
r3 = socket$inet6_udplite(0xa, 0x2, 0x88)
ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f0000000640)={@remote, @dev={0xfe, 0x80, '\x00', 0x10}, @empty, 0x9, 0x40, 0x8000, 0x100, 0x0, 0x110227})
ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000240)={{0x1, 0x1, 0x18, r1}, './file1\x00'})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', <r4=>0x0})
sendmsg$BATADV_CMD_TP_METER(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="0152fc6e1b0013b765fbdbdf250200000b080003aff60598e176b7c2a200", @ANYRES32=r4, @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0x20000050}, 0x20040084)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x40000010, 0x800000000004, @thr={&(0x7f0000000380)="06acb918807e7e5a2c5a704cd3ffdb2dba67de7d08190a7f425b2fe1d4a247e3eddfba6fdd7adfcf4200a2c300f636b6ae5ef239d287c2653d94853dcfc5ecd8f1abc512", &(0x7f0000000400)="e805a6e9edc0e4d39b1789db08d1915f31b5ad7d9314a2a4be39f9fd36ec7aaf3eee8ff60a86a11c99a37889edeba20b27999596b56c5412ae904f4a328372746172d3ae9c3dc47061bd7c16752583ccff477ff69fc2d6faa039bdceb6b62e3c3d2199a89be2599c6d46bd45b7ba6941b3cdeb0d465f92e30891ce349fe716770fd3b5c1e351e4a71b2cb7cb9bacb0e975ed"}}, 0x0)
r5 = userfaultfd(0x1)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
pipe(&(0x7f0000000000)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
write$RDMA_USER_CM_CMD_BIND_IP(r7, &(0x7f0000000500)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x8, @mcast2, 0x2}}}, 0x30)
pipe(&(0x7f0000000080)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff})
write$binfmt_misc(r9, &(0x7f0000000980), 0xfdef)
splice(r8, 0x0, r9, 0x0, 0x80, 0x4)
read(r6, &(0x7f0000000800)=""/217, 0xd9)
read$FUSE(r8, &(0x7f0000000980)={0x2020}, 0x2020)
ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(r5, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2})
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x1004800, &(0x7f00000006c0)=ANY=[], 0x1, 0xdac, &(0x7f0000003180)="$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")
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_LINK_SET(r10, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01062dbd700000000000090000002c0004801300010062726f6164636173742d6c696e6b000014000780080005000300000008000300a5"], 0x40}}, 0x0)
r12 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$SNDCTL_DSP_GETCAPS(r12, 0x8004500f, &(0x7f0000000040))
r13 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r10)
sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r10, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="00040b000000fbdbdf250400000005003800010000000800320002000000060028000200000008000b0003000000050033000100000008002b000400000006002c00a50c000008000600", @ANYRES32=0x0, @ANYBLOB="05003800010000000600280003000000"], 0x64}, 0x1, 0x0, 0x0, 0x30040001}, 0x40400d0)

11.670625485s ago: executing program 1 (id=458):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup\x00', 0x0, 0x160)
getdents64(r0, 0xfffffffffffffffe, 0x29)
r1 = syz_open_dev$sg(0x0, 0x0, 0x8002)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="240000006d00010028bd7000fedbdf2500000000", @ANYRES32, @ANYBLOB="060c00004100000004000180"], 0x24}}, 0x0)
r3 = fcntl$dupfd(r1, 0x0, r1)
r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000003c0)=0x2, 0x4)
syz_usb_control_io$hid(r4, 0x0, 0x0)
syz_usb_control_io$hid(r4, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f000000b308405af30b000900000700e695cd"], 0x0}, 0x0)
r5 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
ioctl$HIDIOCGCOLLECTIONINDEX(r5, 0xd01c4813, &(0x7f0000000100)={0x40006, 0xffffffff, 0x5, 0x0, 0x7, 0x412})
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0)
fcntl$lock(r6, 0x25, 0x0)
socket$unix(0x1, 0x1, 0x0)
renameat2(r3, 0x0, r3, &(0x7f0000000340)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
sigaltstack(0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0)
setresuid(0xee01, 0xee01, 0x0)
sigaltstack(&(0x7f0000000040)={&(0x7f0000000180)=""/212, 0x80000001, 0xd4}, &(0x7f00000000c0)={&(0x7f0000000280)=""/131, 0x0, 0x83})
io_uring_setup(0x669, 0x0)

10.075194011s ago: executing program 0 (id=459):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0)
openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0)
r3 = openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x808c10, &(0x7f0000000000)=ANY=[], 0x3, 0x1d3, &(0x7f0000000280)="$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")
read$FUSE(r3, &(0x7f00000040c0)={0x2020}, 0x2020)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a300000000014000780050015000000000008001240000000000d000300686173683a6e657400000000050005000a000000050004"], 0x5c}}, 0x0)
sendmsg$IPSET_CMD_DESTROY(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040800}, 0x8d0)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x9, 0x7, 0x0, 0x1, 0x0, 0x2, 0xfffffffffffff801, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, 0x1, 0x5], 0x8000000, 0x49340})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

9.720479956s ago: executing program 3 (id=460):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1e7d, 0x2e22, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x4, [{{0x9, 0x4, 0x0, 0x0, 0xff, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x200, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200}}}}}]}}]}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000002000000010080030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a32000000008c000000060a010400000000080000000100000008000b400000000064000480340001800b000100657874686472000024000280080001400000000c0800034000000000080004400000002205000200070000002c0001800b0001007470726f787900001c0002800800024000000011080003400000001108000140000000020900010073797a30"], 0x100}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r2 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0)
r3 = fsmount(r2, 0x0, 0x5)
fchdir(r3)
openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x2, 0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0)

9.476543021s ago: executing program 4 (id=461):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0)
openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0)
r3 = openat$sw_sync_info(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x808c10, &(0x7f0000000000)=ANY=[], 0x3, 0x1d3, &(0x7f0000000280)="$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")
read$FUSE(r3, &(0x7f00000040c0)={0x2020}, 0x2020)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x9, 0x7, 0x0, 0x1, 0x0, 0x2, 0xfffffffffffff801, 0x0, 0x0, 0x0, 0x0, 0x7, 0x6, 0x1, 0x5], 0x8000000, 0x49340})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

9.107396629s ago: executing program 2 (id=462):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r0)
sendmsg$TIPC_NL_NET_SET(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, r1, 0x2, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6a4}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffff7fff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x100}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040000}, 0x84)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x48c0}, 0x0)

8.248650795s ago: executing program 2 (id=463):
r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=@newae={0x5c, 0x1e, 0x468bbc8229e18b43, 0x70bd2c, 0x0, {{}, @in6=@rand_addr=' \x01\x00'}, [@mark={0xc, 0x15, {0x35075b}}, @replay_val={0x10, 0xa, {0x70bd27, 0x70bd2a, 0x1644}}]}, 0x5c}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_connect$cdc_ecm(0x5, 0x70, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5e, 0x1, 0x1, 0x1, 0x70, 0x6, [{{0x9, 0x4, 0x0, 0xf, 0x2, 0x2, 0x6, 0x0, 0x4, {{0x8, 0x24, 0x6, 0x0, 0x0, "303083"}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x7, 0x5, 0x9}, [@ncm={0x6, 0x24, 0x1a, 0xffc0, 0x16}, @country_functional={0xc, 0x24, 0x7, 0x0, 0x9, [0x5, 0x9, 0x2]}, @obex={0x5, 0x24, 0x15, 0x4}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x7, 0xe, 0x7f}}], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x2, 0x7, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x10, 0x4, 0x4, 0x7}}}}}]}}]}}, &(0x7f0000000280)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x300, 0x1, 0x9, 0x1b, 0x40, 0x8}, 0x34, &(0x7f0000000140)={0x5, 0xf, 0x34, 0x3, [@ss_container_id={0x14, 0x10, 0x4, 0x3, "c208dd38fe9760a9deb130b3671afdb3"}, @ext_cap={0x7, 0x10, 0x2, 0xe, 0x6, 0x6, 0xe5}, @ss_container_id={0x14, 0x10, 0x4, 0x5, "101630f729ad5f70fc32f5ef660aa342"}]}, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0xc0c}}]})
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000003c0)={'ip6tnl0\x00', &(0x7f0000000340)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0xd66}})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'dummy0\x00', <r3=>0x0})
ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'ip6tnl0\x00', r3, 0x4, 0x84, 0x0, 0xffffffff, 0x47, @remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x7, 0x0, 0x9}})
r4 = syz_usb_connect$cdc_ecm(0x6, 0x8d, &(0x7f00000002c0)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x7b, 0x1, 0x1, 0x7, 0x60, 0x7, [{{0x9, 0x4, 0x0, 0x5d, 0x3, 0x2, 0x6, 0x0, 0x2, {{0xa, 0x24, 0x6, 0x0, 0x0, "b306fd056d"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x0, 0xe, 0xf, 0x2}, [@network_terminal={0x7, 0x24, 0xa, 0x0, 0x4, 0xf}, @mdlm={0x15, 0x24, 0x12, 0x1}, @mbim={0xc, 0x24, 0x1b, 0x2, 0x1, 0x5, 0x0, 0x8, 0x8}, @obex={0x5, 0x24, 0x15, 0x1888}, @obex={0x5, 0x24, 0x15, 0x1}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x200, 0x5}}], {{0x9, 0x5, 0x82, 0x2, 0x400, 0x8, 0xf, 0xb1}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x9, 0x17, 0xe}}}}}]}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000380)={0xa, 0x6, 0x110, 0xfb, 0xe, 0x5, 0xff, 0xe1}, 0x48, &(0x7f00000003c0)={0x5, 0xf, 0x48, 0x3, [@generic={0xf, 0x10, 0x1, "94cd8f62c6abf9f81c356130"}, @ssp_cap={0x20, 0x10, 0xa, 0xbd, 0x5, 0x5e3, 0xf00, 0x2, [0x7ec0, 0x30, 0x0, 0x0, 0xffff00]}, @ss_container_id={0x14, 0x10, 0x4, 0x8, "9f0d807c1e441e4cd52dc3cf7f892796"}]}, 0x2, [{0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x446}}, {0x67, &(0x7f00000004c0)=@string={0x67, 0x3, "66582e9d8ff532b1160401828331da65adef2959eeef0fa07e96af900328601693e1f816ed8516f9eb497385c386527ba8af5995424554d691015362b1870bcccaaad7d52ea48540eb2229ce3e9f878abb51e4cc105c70331758ceac5a7ccd367be8d711c9"}}]})
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010400000000000000000100000a74000000060a0b04000000000000000002000008400004803c000180080001006c6f670030000280060004400001000008000340fffffffa0a0002407d5def2e21000000080003400000000806000140000100000900010073797a30000000000900020073797a320000000008000b400000000314000000110001"], 0x9c}}, 0x0)
close(r5)
syz_usb_control_io$cdc_ecm(r4, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x3004000, &(0x7f00000001c0)={[{@errors_remount}, {@resuid}, {@block_validity}, {@min_batch_time={'min_batch_time', 0x3d, 0x7}}, {@nobarrier}, {@noblock_validity}, {@dioread_nolock}]}, 0x1, 0x790, &(0x7f0000001740)="$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")
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="0200000001000000000000000400000000000000100000000000000020"], 0x24, 0x0)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$sierra_net(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
r6 = socket$kcm(0x2, 0x922000000001, 0x106)
setsockopt$sock_attach_bpf(r6, 0x29, 0x3, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)

7.712106807s ago: executing program 4 (id=464):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="1400000010000100f5000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000213c0000001f0a05010000000000000000070000070900020073797a31000000000900010073797a3000000000100003"], 0xc0}}, 0x40088)

7.442709634s ago: executing program 1 (id=465):
socket$inet_sctp(0x2, 0x5, 0x84)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
r1 = socket(0x10, 0x2, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r2, &(0x7f0000000340)={0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0xfffffffe}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33c81cf7995313c09de00fd6ded74", "62266bd8", "1e00040000000100"}, 0x28)
write$binfmt_script(r2, &(0x7f0000000500)={'#! ', './file0'}, 0xb)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000280)={&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd87}, &(0x7f0000000240)=0x40)
writev(r2, &(0x7f0000000100), 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000040)=0x1, 0x4)
close_range(r1, r2, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0xa1)
process_madvise(0xffffffffffffffff, &(0x7f0000000600), 0x0, 0x3, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000180), 0x4)
syz_mount_image$ext4(0x0, &(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0x2000000, 0x0, 0x0, 0x0, &(0x7f0000000000))
preadv(r3, &(0x7f0000001b00)=[{&(0x7f00000009c0)=""/239, 0xef}], 0x1, 0x2, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x0, 0x96, 0xd1, 0xca}}]}}]}}, 0x0)
read$FUSE(r3, &(0x7f0000005b80)={0x2020}, 0x2020)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0xff, 0x1b96, 0x12, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xc2, 0x50, 0x3, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x3, 0x1, 0x1, 0x3, {0x9, 0x21, 0x2, 0xf1, 0x1, {0x22, 0x77c}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x5, 0x1}}}}}]}}]}}, 0x0)

7.222094712s ago: executing program 4 (id=466):
r0 = socket$xdp(0x2c, 0x3, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x41, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket(0x2, 0x80805, 0x0)
socket$igmp(0x2, 0x3, 0x2)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00')
pread64(r1, &(0x7f0000000180)=""/15, 0xfffffe9c, 0xb6)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
r3 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001a140100000000000000000008000300000000000800", @ANYRES64=r2], 0x20}, 0x1, 0x0, 0x0, 0x4000015}, 0x0)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47)
setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000200)='dctcp\x00', 0x6)
connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendmmsg(r0, &(0x7f0000001540)=[{{&(0x7f0000000000)=@l2tp={0x2, 0x0, @multicast2, 0x3}, 0x80, &(0x7f0000001180), 0x0, &(0x7f0000000080)=ANY=[@ANYRESDEC=r4], 0x1f0}}, {{&(0x7f00000013c0)=@ieee802154={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x80, &(0x7f0000001500)=[{&(0x7f0000001440)="f3e7009f92e1d16823281aeeca21100f374db8ea65b5269134f85f95f8f1574d88f7616868bc20d0a28230cf53821a07dfffcc5313301d343755b1421ad572a627d3d50463487fd43ee0d2754c59d25b5f5f2c97964468da3ef15a9ef6425319b0750f37e47517020d775486d7d8173a6badf98df3fa6986a72823d3ecaa9967afb4c0f1c92852f4c161e41058241041e3ae3b0fc411ef98ea5a", 0x9a}], 0x1}}], 0x2, 0x20000080)

6.92925113s ago: executing program 3 (id=467):
r0 = socket$pptp(0x18, 0x1, 0x2)
r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x80080, 0x0)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0x2)
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000))
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0)
r3 = syz_open_pts(r2, 0x900)
r4 = dup3(r3, r2, 0x80000)
read(r4, &(0x7f00000000c0)=""/226, 0xe2)
bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev}}, 0x1e)
connect$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @multicast1}}, 0x1e)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0)
ioctl$EVIOCGPROP(r5, 0x40047438, &(0x7f0000000180)=""/246)
pwritev(r5, &(0x7f00000007c0)=[{&(0x7f0000000080)="508f", 0x2}, {&(0x7f0000000280)="31bcbfca570b87d37723468fa47afbfc39ebf11663b1051617568c9c796152a8736d6f619ba8957605a9994e05ba74c34148e92c0862597fccd90034b90676a509f129f472da6488b07f09c0453e44d08d4c5099343c7964ba93b16ee8d61540b62a75104abf2df1fecca0114fba662f0c1827eef63e924f3cd50d28b94be32d049760fee37fffdbef26fa09607978ea956c33354d1135974665412c2d742af3dbc6bd34b04bfca6a5267888644a242b2dc758c2af3e8716ac0fadff975652bc2c3dbb5ae549acee3ee3ba6be72e8dbac0", 0xd1}, {&(0x7f00000000c0)="88f84926cf1e065f2e319fcb97c7fd9e49a74a4f9194dab37672c1612a70a3434b4c60474482851187c40434ef102e86c43c856984ce99f2d48a45d9662de82ad10bd6ddc472f23b36bbf1c9e0423c8e042b4349e4391bfaf25684dbd39bd691726ded99c9c17b142c9323183073b41b1f22c72112523711d34fec9205ceabb53dc0092f9b35c854c91c393b533f46d79a08959e4b60efb7", 0x98}, {&(0x7f0000000380)="4f5e10e5f32088f374f3cefe94c45722c214815edb009c482121c1fff3a0488e0930b7aab5c7b5090a711af4dd7eba399725bf39eaf794c691e94933f70e705c812872f305c953f33f45973a6e7730fa2d7bb6e96cab5b9fdb484b9224ef994b5a730feab318913a54c0638ca31f9d2c10749036f9d75fbc3c8658333a0210", 0x7f}, {&(0x7f0000000480)="274556a9889f1eacf4d7fd691810d872bcce72819cb5fff81d8d1d044f381b640afeae673e5a1c15fa21f5b8fa17ed97fb59ab1d8f2c3db989", 0x39}, {&(0x7f0000000500)="186c297aba6cec1c9887c27da7c5830b0cf602a1c88561af2c03ab5b9a1af65b0ff4906a81ef9e36725b1499a9", 0x2d}, {&(0x7f0000000540)="a6909a265024898a769b99c34e09b26276c703c160c8768915d063c9d8beed31044db518b6a0d3e5eb58f4118f7013564247a85c94b9c4a1190e05a8a1770c13ca7e68957d34d94ad40c04c80561390878519499864b37ef6a0e97a259f3451efb28c18ef8b463d45bd4cce803", 0x6d}, {0x0}, {0x0}], 0x9, 0x6, 0x82db)

6.418361575s ago: executing program 0 (id=468):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=0x0, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffff"], 0x6c}}, 0x40000)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0) (async)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901) (async)
open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901)
timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = socket(0x14, 0x2, 0x4)
syz_mount_image$bcachefs(&(0x7f0000000080), &(0x7f0000000000)='./file1\x00', 0x800015, &(0x7f0000005bc0)=ANY=[@ANYRESDEC=r1, @ANYBLOB="288394335a5a87ec7250c205cdf7e7af7fc4c86266fc971394d1c87ea26f7c98dae70350b6e8df61cc15f6e52564fb9f231098c4383f3c5e334d1fcdf25aeb5b32a03af0bb9e217e254f62245b08522c5e073c9bf9c2e0cf7222739a3ee9a0cb7bd7c4a099c116cf449f3f46f0dac61e20212a0fe7e3268e85d55da63ba6a32a6b4cb096160067ea686b1d2fb1915650ad99e314cc4e58d5a32dd2348e6ee3385295eb6255", @ANYRESDEC=r1, @ANYRES16=r1, @ANYBLOB="9effa2585ba9450f077e641689aef58337fa99e92776d048ecc96414d3e8a8f7d366bdacfeeace399e02a8a9551e97b7a83a622b378fe90799179bee920608a83bcdb4229c87f6d41af1ebdbff6987cf78bb415d09039d1e5ac03aa9b2916a874e3a4e919d3824ce2f7cd97b844e24dc5516dcb88b08ba728319d2f40ddcf9a6789459283695891bfa12293c076a22", @ANYBLOB="c564804cb7c8482ad9fe2fdf1a40b3e9c0fec6055e3f3099aadcd88ddbc300cd332955ffa79c4f3d557d26c28389fe138b72690dbb295914cb8146fea7a0f7493650b341db77229d710d381c4a5d6ee476c10f6eb3a96e6a239e5af9c6a4399a5fe39a5287de7874c8869b278d486d8201624b7045ecddf03dfb9cdee7b438f9d2dfcd7803fb77535b89e3988b4aa2baffc15c071dd57e4d8f871d3a87c13fb086264c4ddec0ede40c14f923c08c3cb125ba650960094c", @ANYRESDEC=r1, @ANYRESOCT=0x0, @ANYRES32=r1, @ANYRESHEX=r1], 0x0, 0x5a08, &(0x7f0000000180)="$eJzs3X+MXNV9KPBzZ2a9412vvTYkOBDWi8EthSZe80skqRq3r00qoMgRVYp5TmDBa+rENpZtAhhaTB/kgYCIRIlS0v5BI4JK4kZI8BpcFGrg2bxAQLR5qCLokVeSP/JEKVYBP4Tyuk+zc8/s7N25vrOzs2aBz0ewd+7ZM99z7r1n7tzvmbueAAAAwPvCwVt2Hr7w+N9/6s/H3rzxD/5+602hvzxRXo0VBtPlte9UDzmaeivLJ5bZcfHr13/3F8NX/O6PHuj7zlsHNp606ae/d8wVj3zhvH13/+Vjbww89B8vF8WN4+m0yfXk1SSE6g8PfePLB54+rlaWhBDKyeCeEJYmyx5bmmRCjLwdQtiYE//BN8/cVFvedHvvlPIlmXrG+/tbNR1nuw9fc3p46XfW3/zMiu//bc/eV/ZMVkmqTeMphMWXNT+/J4SwMP2/Jo625fHJ6XJdCKEvfVwbYefm9OffvvbU2bXlyW32f3XO+gnpckG67C+IE3+/MrNeytTLrkc9mWVfQXuzldePTusVWZRZnzwZfbNo17Ylr5+xfGm6/EG6PG2G8cvx/ySUklBpdH9LMjlGQtNxS0IyUT89D34pGy9pOtbpepJZL2XWyz2Z7ZpoN9175SSZWh7rZcrj6biSlp/UfK5u4aKc8g+ly2r6Qn0rrofsg7r+aQ8a2zUh9uvQEfpyNJSazkGtyhsHPj0Ytc0ZHx8f70+WTXvOeAvxdwfW37GqvOHxg4M5/UgeSNL4yUSbM42/+8dLF33+e7ddvTwv/mWlNH6po/g/O//Z1y657dvfyo1/V4xf7ij+GY/2vXr+E7eszN0/h+L+qXQUf/TlJ+9ccezle3P7f0+MX+0o/tp9z/YOHH50f27/R+L+WdhR/Bc/8amf3//8w6/kxg8xfl9h/Bub1uPvNuzb/pXeocOnTsYvT42/P+6f/s7Gz+t7z3lhaOiXw3n9fy7GH+go/n177v74vUtuPy/3+K6L+2ewo/gXnPLIzYsOP3xi3rkzuadb75wA70/HpNdYt6brneaZs9WUL/zFcKV+Hbgo/X8gfKN7DWUuPmvtLO5edAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACY8IHT/8en/+Wzg69W0vXe9MGLpfoyli8IIVkYQti5a3THrs3brhz+wlVX79g2umV4dNfw2LZdO64bPus3h3eMbd8yel3ttyMfObP+vGUhqS+TE6e13Ts+Pl4anFoW2/tPp+x9adW5/+dfQxj5wE+GKrn9X3331nuPbfEzI1k7/smtV1/4k7P/Ot2uwbRfgy36NT4+Ph5y+vVvF//q3q8d+sWpIYx88Ej9evLF3/6HKR2aKJiMkyr1hnqHepO+lv1o9DrtT9xflU2bt4yNHHn/1p5fnrYdayeW//n6V97edO1Xf1Xfv9Xc7Whz/y5cO76l9M31F/y/b95QLyjq1zt13Iv2d9yK2L+4/6rp/l6cbtfinO2q5GzXLc/sf/6Hx9/2xp4wUnl9xfS2i7arJx0APcmH2mo3ttCXLJ1SXk3rxyMen7d619btq3det/sjm7eOXjl25di2j605a805I2efc/bqiS1f3eXtj+3/Wpvbf3TG05Iv7flB/NneeCrqV9H+qPWreH809yjv9dd30Ze//rG7n7iwXlA0zmPtxvkkXfbVjvOa0DTepu+rVttVtB9CCMOt9sNrb5wXjvvnzTcXnYeaj0zzz4xk7fjTK//9r8/9q+W/VS84Kuf55g51eJ5v9HqyPxP7q5oej/HadvTOv/3bG8rpdvW37Neap5/ouePgv/5po38LFoRrR3ft2rGm/nNR2tNFyQkt+9VU2te8XSsmfpZDenhDY5i2GK81PaHev+z5M1bP7tX+9Hf9ybKW25UVf3dg/R2ryhseP5i3p5MH6i0uDAP1ZfLhnJpbMk8sNzrcqv35+vorGh9Dn/6rhz770N+dNW18nFH/WbRdSc52ff/5+77+na/+17/r3nZ9+refHfz3//Unq+oF75bzSqPXaX+S5vPKGSEUvf5WhNbbkfv6K7XenqLXX7adyfqt4w1n1vtDuaPX6xmP9r16/hO3rMx9vR5q9/V6w5S1csHrtfPxkwbt0vjJvr6SytR+zN3ra8pASdaO/+jWY/Y8duO64+sFReO6UbvVuD6zjfwjZ7v+4ZIXhq4a/i//s3vnje/+5oOX/nR07Z/VCzo/7rEv3Tnu1XT/VnP2b6PXMe9s3r8fveKqLRvr5fP3+jddFuQ/8VSy87rdXxzdsmVsx872tqvd99PYTnYvd/p+Gs9uywq2qzRtu+buQTv7q93XW9r/cjZGp6+3/pB09L6w+8dLF33+e7ddPTjtWWlDl5XS+KWO4v/s/Gdfu+S2b38rN/5dMX6lo/ijLz9554pjL9+bG/+eJI1f7Sj+2n3P9g4cfnR/bvyR2P+FHcV/8ROf+vn9zz/8Sm78EOP3d7b/X997zgtDQ7/Mjf9ckrZTu0YK4cE3z9xUX09CT/p6i/3omdKvkF1PMuulzHq5eb1Un2ttNFBOkqnlsV5aflJTX1r545zyeBVWXV5fvhXXQ/bBkcvnm1LTub9VedF1KgDAe138/D9eg8bP/8fSC6X8mQaYNNs8bHlO3JiHTc7nLJjy++Vp/Pj8OA849NEwUlveNFy/0J/p5wjx9ZCd54ztnHry1BidznMWzb+vzKzHftXnyytNeWhqel5TCW3Mv8d2BhrtHHn+PbP5xfPjw7dO69Zw07xV9vj1pDNmre53CFP3S6UWIW98ZOfF4v0cQ4vDuon22hwf2fto4nHI3kcT2zk+c+Ls9D6a2Y6P2O0jjI+JLhd/vjH9+IUj7N/J49c6Wvb4zeB4V2v15/rz2S7MG7Y8pR29ecO5/TzsKM9LVtqNP1/mJef7vGEsj9tRaXM+8bM55d2aT4yni9ivQ0foy9FgPhF4r4r5f3yPqOX/tQvw/5upV3Qdmr1qjPFy7xOa9glvXVHeMf0+vb6O3sc37PvnTa1bSPu5v937frZPWesruO+naD+uyqwX7secCZqifC/bTtF+z96X0R8GOtrv9+25++P3Lrn9vNzry3X1N9Li/f71KWsDBfv9XZAvtI4vX5ij+xjqL5z5ki/M9fzZO5aPpDc+zVU+8kc55TPNR/qmPWhs14R3XT7Sc3T7BQC8e8T8v/H5WZr//+9YIb2OKMpbT8usx3i5eWvO9Ule3vqH6fLaTP3+9C8qZnrdfMEpj9y86PDDrS6l6v28p9089G+mrA0W5qGzy5tz84h13blfPDePaORZs8sTc/vfyBNnl6fnxm/k6bPLo3P3TyOPnt08QG78xjzA/L1ff3FoJ88tmK/LNBZXN+zb/pXeocOn5s4z7I/H9z2aR6d/PjtXefRFOeUzzaP7pz1obNcEeTQAwDsr5v/xMi7m/09k6nX+OXv9uj03L+jSdXv23wNpxH/uaOWVc533tZu3/svb4x3lrXOd18/1vEQ9Ly6F+ZcXt/f571zPC81qnuzE3Lz7nnf4ftf5khenjcqLAQCYz2L+vzBdz8//Z5eftMrfeqbkJ++X/Hxq/Pdbfj4fP7duLz/v4vxX099YHL35L/n/ghBuiuVz8rl4tTq58+T/AADMQzH/j3/2GP/9v/8ePvg3/3ju9Pry9Jz48vT3Xp7eHH9/MpFXzn2e3v15tuA+gHf2/viFk/XfA/MA4+PjN04WmAcAAHhX6JnIlKb/nf3n0mX27+zz/i7/kpz67aqkl8eX79oxNnbp1ds3ju4au3TbVRvHdl56zY7Nu3aNbavXm23emJu3pHljT6ik+6N1vWzetiT99xCW5Px7CNn6MewJEw+m/3sI2WYXFvw7ApPHr73+5h2/0hHqtxofecc7L/4f59SPGsf/ij8549JNOy/dvG3zrs2jWzbvHptar5a19s3gezPjbpnR9+1mfkxTmvn3d3anH6Vp/ehJ90f2+C+M32eQ6cfStCdL877/IKffT/3j1750yviv7g9h5APlD89q/yVrx//bxWN/uOvgT7bX+l/KHb+1/jRqpv0q+r7SbP24PZUtV+3cdfqmq67etjG37zMR5zNKjfU5ms9IX/7lNucnNuSUz/Tv98vTHsxPbd+nAADAFPHz/3g9Gz8//Gp6ARXL28/TZ/f5cW6ePtJenp79XrKiPD1bP25vu3l6dZZ5erb9ojy9Vf1WeXpe3p0X/49y6s9U++Nkdvd55I6Ty9obJ9nvMygaJ9n6Mx0nySzHSbb9onHSqn6rcZJ33PPifyanfp72x8Ps7svJHQ93tTcefiOzXjQesvVnOh5KsxwP2faLxkOr+q3GQ97xzYt/YU79dk0dH7WBMTEuxi695qodX2yqN9fff1Hz0qz6N7ff/9Gp9vs/t/d9zX3/5/a+srnv/+zuK8vt/3Ozmwlrv/9z+/0unTpq87XpzWZF958VzeOun74BE2Y6j7tg2oP5yTwuvHNi/h8/7on5/+3pstsfA3XzOml8yeTjo/c9afPte8zq5s/993N7HfOufz9PFb2f77lvan3v5wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADvLb2V5RPLg7fsPHzh8b//1J+PvXnjH/z91pt+/frv/mL4it/90QN933nrwMaTNv3094654pEvnLfv7r987I2Bh/7j5fj8cl7gwYmfldPS1WoIyatJCNUfHvrGlw88fVytLKk9PxncE8LSZNljS5NMhJG3QwgbG/2c+ssH3zxzU2150+29U8qXZIJktyv0l2N/mvsZwrVt7CzedarpONt9+JrTw0u/s/7mZ1Z8/2979r6yZ7JKUm0aTyEsvqz5+T0hhIXp/zVxtC2PT06X60IIfU3PO7egXyfXxm4b/V+ds35CulyQLvsL4sTfr8yslzL1sutRT2bZV9DebOX1o9N6RRZl1rMno9nK62csX5ouf5AuT5th/HL8PwmlJFQa3d+STI6R0HTckpBMHMtqY73UOLYh3f7MepJZL2XWyz2Z7ZpoNx1o5SSZWh7rZcrj6biSlp/UfK5u4aKc8g+ly2r6Qn0rrofsg7r+aQ8a2zUh9uvQEfpyNCRN56BmpbS8ceDTg9GflvUnyyYrj4/H5TSxyoH1d6wqb3j84GBePx5I0vjJ9PghN3wj/u4fL130+e/ddvXyvPiXldL4pY7i/+z8Z1+75LZvfys3/l0xfrmj+Gc82vfq+U/csjJ3/xyK+6fSUfzRl5+8c8Wxl+/N7f89taiV0B+qbcdfECbjr933bO/A4Uf35/Z/JO6fhR31/8VPfOrn9z//8Cu58UOM39dR/A37tn+ld+jwqbnx98f939/Z+Hl97zkvDA39cnjas+oXoslzMf5AR/Hv23P3x+9dcvt5ucd3Xdw/gx3Fv+CUR25edPjhE/POnck93XrnBHh/Oia9xro1Xa/lmbUz683PrBiYSZ45W035wl8MV+rXfIvS/we62VBGrZ3FcxgfAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID3pn+64azPXfzJz6yvJCEkOXXGW4i/Ky9Yu3a4g3ZHX37yzhXHXr63uWx5B3EAAACAYjEPLzVKqmF5uCZZGE5oWT/OEZwQ15Kp5dk5hBgnO0fQaZxSl+KUuxSn0qU4PVOLb+w0zoIu9ae3S3GqBXGqob04C48Qp1IbFW32p++I/Wk/Tv+s4ixoxFnUpf4MdCnO4i7FWdKlOINHjNP+OFzapTjLuhTnmC7FObZLcT7QpTgfDFNPip3GOa5L/cnOKc90HA6kNY/PizPxoFwYp5KUG79oNZ9+XNrOibNsp7+gnYGi9+M221nYZjsnZ55XmmE71Tbb+bVZtpO02c5vzLKdUkE7cdxem+1fbCeutTn+r+tSnN1dinN9l+Lc0KU4f9qlOH/WpTg3zjIOQLti/j+Z7w2G3spvhb70jJOdBYiXdismfk5/v8s7IcV4H86ULyiKl03UM/FWzLR/2QmETLyVmfKeKfEqjXzkCPGqzfFWZX5ZuL2VyRit+ndapry3KF7PtP4BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJz5pxvO+tzFn/zM+pCE2n8tjbcQf1desHbtcO1B78zaPbD+jlXlDY8fbC7rrXS0CQAAAECBmIf3NEqqobeyJvQmC6bUq6bzANV0vTxYXw4tDutqy2S4NLHelyw94vMq6fNW79q6ffXO63Z/ZPPW0SvHrhzb9rE1Z605Z+Tsc85evWnzlrGR+s8QegvihRAmph92Xrf7i6Nbtozt2FkvzPZ/efq85el6kj5v6KNhpLa8Ke3/soL2StPam7sHxUcPAAAAAAAAAAAAAAAAAAAAAACA/8+u3YXIVd5/AP+dmdmZcTV/949vYzDrEKPYVlq1a9FW3AOFCr4EF6HM2m4l1EilqwmaiLVTDVStoaWgBEJKLpqSSrXSG1+qlPpCwGLTBrppKCqtF+1Fi7aWKLkokSnZnTM7MzvjbIdgYvx8Ls6ZeZ7f8/zOs4HA9+wCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDhmqtPzNQmp6ZHk4ikT02jh2wuX0zT6hB9v/r8xh+Wxg9d2D5WKnQVnT7ExgAAAMASWQ4faY2Uo1TIRz7Onv+2OtomYjH3AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHz9z9YmZ2uTU9MlJRNKnptFDNpcvpml1mb3a93/z3Sc/99r4+N/b5ytDnQAAAAAYJMvhudZIOSpxXowkZ3fUZdl9Zdf67rpsn1XLrOt+d9Cv7rxl1l2wzLpPDKhb27zfEwAAAPDRl+X/QmtkLEqFFX3z/6Bcn9Wd21WXb96X+7cCAAAAwNGT5f9Sa6QSpUKlldeXm/dXd9Vl6wf93j5bf36f9YN+n3998+739AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADw0TFXn5ipTU5N55OIpE9No4dsLl9M0+oQfS99YfSf1+55cHX7WKkwxEYAAADAQFkOX4ze5SgVRmMkTp7P/eNX73z6y08/OxERCzG/WIx71m3adOelC9es7pK9e0Z+8Mrb31lSd8nC9ZgdEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOGrm6hMztcmp6ZOSiKRPTaOHbC5fTNPqEH3f+MKX/vr4gefeah+rDLEPAAAAMFiWwxezfzkqUYxinDn/rT3rH5HrWt/vnQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABw4rjrW/d+c93s7Po7ffjYfog4Lh7Dh+Pqw7H+nwkAADjazo0kGv+js2441k8NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcD+bqEzO1yanpchKR9Klp9JDN5YtpWh2ib/r8vtKKQy+81D5WGWIfAAAAYLAshy9m/3JUYiRG4oz5b73eCczn/7EP8SEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA48pcfWKmNjk1vSKJSPrUNHrI5vLFNK0O0fexLTs+v/vU71/TPlYqDLERAAAAMFCWw4utkXKUCp+MUpzT/D7buSDJN++93wssrtvYsWx02evqHevyy173cNfJCs3TLKwrZ/uNLdxb66pL11Xb1lWi1b7asS62daxaMeA5AwAAAI6hLP+XWiNjUSqU2nLuzzrqx+RcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKCPufrETG1yajpJIpI+NY0esrl8MU2rQ/S993f/f8rXfr51c/tYZYh9AAAAgMGyHJ6clY2UoxKr4v9i1Xzuj7HO+uwdwb9qh3c/+u+/XRhx8Zn7xwvd2/44+/CbN656sfsSkeuszkWc2uyX9On32z88eveaxuHHIy4+I3/Okn7xwf06t0wbz9TWX79pY2wc9NMBAACAE0OW/0daI2NRKtzRN/9nyXtA/m+ZD+Cn3r3ll6c3r81E3rUiN9bsl+vT74trnvzL+Zf/4+0j+f+D+n1mx+27F1o17o840nBhpEuSNiZv37x2/2W7ctmpF/rnu/pnP5evfPut/9x6zyOHF/qXo9wcX1no1X/ptWu/k9LGbG779HXvb6939i/0Of+Dv3/pwK9Xbn3vSP93zx1t9b+g7/l7949W/9EbH9p2xY49azv7R0S1V/933rsmzvrTbQ90n3+0a+P2f+r2a5ckbexdfXDX5TsrV3b2T7r6Zz//Xxx4bNtPH/nes1n/7G9FLjxvuf1zXf1fffi0LS/ff8PKzv65Pud/8abXxjdUv/vH7vPf0rFroe9TLD3/Exc9dfPr69L7uqcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABOLHP1iZna5NR0LolI+tQ0esjm8sU0rQ7R981r971z09af/Kh9rDLEPgAAAMBgWQ5fzP7lqEQxijE6n/ufqa2/ftMr+zfG2MJs0rwXZjfctelTt27YfMctx+jJAQAAgOXK8n+hNTIWpcKaGGnm/8nbN6/df9muXJb/c1n+v/W22fUXR6vu1YdP2/Ly/TesbL0niJj/s4DykbrPLtZdfdW+sYN//sb5PesuXazbu/rgrst3Vq7M6qK97pJovZ944qKnbn59XXpf6/na6z799Q2zzdcT2b6jNz607Yode9a2ztG8jzb3zepmc9unr3t/ez2ryzfv5ea5AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICl5uoTM7XJqenIRyR9aho9ZHP5YppWh+h73ZpfPXDKoedWtY+VCkNsBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAf9mBAwEAAAAAIP/XRqiqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrCfv2FSFXFcQA/Z2ZtZ3d2110N2orW1YrCHpKCiHqpqAgNEXpSJCzNhzAIIgojWkMjsaKXIOtFooJqC6EgN0m0WKN/0ksPFRRYD4FIC+kiQX/YmXNnZ+/ObWpWgurzgeHMOXPvd373njNnZgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP5VuruGa+3RXQ9Mr73glk8ev+f0Y7e9d9+Oyx55/YfRzTd9vL/3lTOTW5Zv/frmpZsP3rt6Yu+LR071v/Pb8eaMU62CH643K1O3EkI8GUOovD/13BOTn543MxZDCOU4OBbCUFxyZCjmElb9EkLY0qhz7otvn75660y7Y0/3nPHFuZD8dYVqOaunbnBuvfy3VNI62z790BXh2xvX7/x82VtvLho/MTZ7SKw0racQBjY1nz85EEJPqD9mZKttODs5tetCCL1N513bpq6L/2L9Vxb0L0ztOamttsnJXl+R65dyx5VmL3GORSH8urbe1vS2L31B8nUt9Lh2+nL9/Ga0UKnObQXjYSi176Z25d/ML4fw6IbafhpKMXQ1yt8WZ9dIaJq3GGJtLiuNfqkxtyFdf64fc/1Srl9elLuu2vumhVaOce54dlxuPNuOu9L48ua9uoU7CsbPT20lfVDPZP2Qf1JXnfekcV01WV1Tf1LLP6EUWn9As/HGxKfJqKaxalwy75zfW8hem1z/1KXljR8cHSyoI+6PKT+2zx8M8/K3fzbUd+cbux8cLsrfVEr5pY7q/27NsZ827H7phcL8Z7P8ckf5Vx3qPbnmw10rWtyfgVr+VHZ/ujrKv+v4R08vO/fu8Zab8Uz+viy/0lH+DRPHuvunDx0unN9V2f3p6Sj/m+tv/f61Lw+cKMwPWX5vR/kbJ+5/pntk+vLC/MP1j0K1tkI7WD8/j1/z1cjIj6NF+V9k97+/RX5smd/TdMSrY3uve3nxntWF63Nddn8GO6r/9ksO7uybPnBR0d4Z952tb06A/6el6TfWk6nf6f/MhWr6v/D8aFf9G6gvPfrP5hvlxOwHDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAf7MCxAAAAAIAwf+veIDYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJgCAAD//7ATLFw=")
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)) (async)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000500)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
recvmsg(r2, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000680)=""/140, 0x8c}], 0x1, &(0x7f0000002f40)=""/229, 0xe5}, 0x0) (async)
recvmsg(r2, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000680)=""/140, 0x8c}], 0x1, &(0x7f0000002f40)=""/229, 0xe5}, 0x0)
sendmsg$tipc(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000440)="b8d3d8e48974aae5039847936746be1d81a34f9b68100dbf05177b2436f9d642df271fd6b9aa6701365ffc723899ad120c5a54b1f6fcf2fbb053e277a04d3f44e3f9bafec64080f64f103ee1de769e5e9dd8cbb68869a662eaad499c52a16f40cb3a1f6f3d5f8df14c53b2e6b5397f7806b6ff846de37a34c8342b9ac5a51eacf8a09cede8676044eafd3d7935f906", 0x8f}, {&(0x7f0000000040)="8d03cab9cb86bcdcffec", 0xa}, {&(0x7f0000000080)="ea8fd1dfaf042f4498f19fd629a5c0", 0xf}], 0x3, 0x0, 0x0, 0x400c800}, 0x4000000)
close(r3)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
semget$private(0x0, 0x7, 0x191) (async)
r4 = semget$private(0x0, 0x7, 0x191)
semtimedop(r4, &(0x7f0000000200)=[{0x0, 0xffff, 0x2000}, {0x4, 0x3, 0x1800}], 0x2, 0x0) (async)
semtimedop(r4, &(0x7f0000000200)=[{0x0, 0xffff, 0x2000}, {0x4, 0x3, 0x1800}], 0x2, 0x0)
semop(r4, &(0x7f0000000180)=[{0x2, 0x2, 0x800}, {0x0, 0x5, 0x1000}], 0x2) (async)
semop(r4, &(0x7f0000000180)=[{0x2, 0x2, 0x800}, {0x0, 0x5, 0x1000}], 0x2)
semget$private(0x0, 0x2, 0x2a8)
semop(r4, &(0x7f0000000140)=[{0x2, 0xce97, 0x800}, {0x1, 0x5}], 0x1f4)
socket$nl_route(0x10, 0x3, 0x0) (async)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x54, 0x10, 0xffffffffffffffff, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x37c13, 0x71a2b}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @loopback}]}}}, @IFLA_TXQLEN={0x8, 0xd, 0xff000000}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x20040040)
semctl$SETALL(r4, 0x0, 0x11, &(0x7f00000002c0))
syz_usb_connect$uac1(0x3, 0xa4, &(0x7f0000000040)=ANY=[], 0x0)
r6 = socket(0x10, 0x3, 0x0)
sendmmsg$alg(r6, &(0x7f0000000140), 0x4924b68, 0x0) (async)
sendmmsg$alg(r6, &(0x7f0000000140), 0x4924b68, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000100)={<r7=>0x0, 0x3c, &(0x7f00000000c0)=[@in6={0xa, 0x4e24, 0x5, @private1, 0xfffffffc}, @in={0x2, 0x4e22, @empty}, @in={0x2, 0x4e21, @local}]}, &(0x7f0000005e40)=0x10)
setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000005e80)=@assoc_value={r7, 0x401}, 0x8)

6.300903954s ago: executing program 3 (id=469):
openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn'])
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f00000004c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000000c0)='./bus\x00')
r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
statfs(&(0x7f0000000080)='./bus\x00', &(0x7f0000000380)=""/196)
getdents(r0, 0x0, 0x0)

5.280144138s ago: executing program 4 (id=470):
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x8)
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000000240)={[{@nodiscard}, {@nocheckpoint_merge}, {@alloc_mode_def}, {@six_active_logs}, {@user_xattr}, {@fault_injection={'fault_injection', 0x3d, 0x10}}, {@discard}, {@noacl}, {@fsync_mode_posix}, {@alloc_mode_def}, {@noextent_cache}, {@two_active_logs}, {@fault_type={'fault_type', 0x3d, 0xfffffe}}]}, 0x1, 0x5505, &(0x7f0000000340)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x410281, 0x0)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000080)={0x2, 0x9}, 0x2)
socketpair$unix(0x1, 0x1, 0x0, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2ec881, 0x0)
write$cgroup_devices(r0, &(0x7f0000000140)={'b', ' *:* ', 'rw\x00'}, 0x9)

4.385910608s ago: executing program 3 (id=471):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10e, &(0x7f0000000240)={[{@errors_remount}, {@noinit_itable}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2a}}, {@errors_remount}, {@block_validity}, {@grpjquota}]}, 0x3, 0x45b, &(0x7f00000010c0)="$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")
chdir(&(0x7f00000001c0)='./file0\x00')
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140))
r1 = epoll_create1(0x80000)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r2, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4)
shutdown(r2, 0x1)
connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto(r2, 0x0, 0x0, 0x8080, 0x0, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x8804, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000200)={0x40000012})
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file3\x00', 0x42, 0x141)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="6000000010004b04bd7000fcdbdf257a000d0000", @ANYRES32=r3, @ANYBLOB="0010000020900000400012800b0001006272696467651a00300002"], 0x60}}, 0x14)

3.958402567s ago: executing program 1 (id=472):
syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000f00)='./file0\x00', 0x0, &(0x7f0000000f40)=ANY=[], 0x1, 0xeb3, &(0x7f0000000f80)="$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")
r0 = open(&(0x7f0000001b80)='.\x00', 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10)
openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000100), 0x18041, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x0, 0x1ff)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x6200, 0x0)
syz_clone(0x40c01400, 0x0, 0x0, 0x0, 0x0, 0x0)
sendfile(r2, r3, 0x0, 0x20fffe82)
r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r0)
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r2, &(0x7f0000000400)={&(0x7f00000000c0), 0xc, &(0x7f00000002c0)={&(0x7f0000000340)={0xa0, r4, 0x2, 0x70bd25, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x20000088)

3.709316281s ago: executing program 2 (id=473):
r0 = socket$kcm(0x10, 0x5, 0x10) (async)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0)
ioctl$BLKSECTGET(r1, 0x1267, &(0x7f0000000140))
socket$netlink(0x10, 0x3, 0x4) (async)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b08d25a80648c7494f90224fc60580002400c000400030082c137153e3719ac018000f01700d1bd", 0x33fe0}], 0x1}, 0x0)

2.933867738s ago: executing program 4 (id=474):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001cc0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x40, 0x0)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000600)) (async)
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000600)=<r2=>0x0)
sched_getaffinity(r2, 0x8, &(0x7f0000000640))
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29, <r3=>0xffffffffffffffff}, './file0\x00'})
close(r0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x2, &(0x7f00000003c0)=ANY=[@ANYBLOB="696f636861727365743d6d616363726f617469616e2c646973636172643d3078303030303030303030303030303030332c6e6f646973636172642c6572726f72733d636f6e74696e75652c696f636861727365743d6d6163637972696c6c69632c0067add4ceec7cb8702b1bb9ec930dabfc165907d7478e0706b00408dc59283f5c0159b8e3c0289dcb182504844ef8e6972cdb3f50680fc9602ed27c1f6b47a91f941f154ae205d34a9b7a7c67efa0c0e2a70251d664fce12ae64a5a521aa83080b7672c4e1566a61a0ade4b6c9d78151053d9fb31c0971007f269f873e14e5fe3c46c0ac2b22d40391ae31d2025dcd947adf76739ae4ecbe3b630040b37e2b09d7816e0b93981de1147532cf2f46d4d4904f68fb43cd165b98ade053b2f9b7918"], 0x1, 0x625c, &(0x7f000000bdc0)="$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")
syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) (async)
r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_DISABLE(r3, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000500)={0xc8, r4, 0x8, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x88, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x964}, @TIPC_NLA_CON_NODE={0x8}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xce90}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffff9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1000}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7af1}, @TIPC_NLA_SOCK_CON={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffbff}]}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffe}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80000000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffc}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1ff}]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x40040}, 0x24801)
openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f00000001c0)={0x444, 0x112}, 0x18)
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2b1245d, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) (async)
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2b1245d, 0x0, 0xfc, 0x0, &(0x7f00000000c0))

2.185271907s ago: executing program 2 (id=475):
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect(0x2, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000043242108d81301006230010203010902120001000000000904"], 0x0)
removexattr(0x0, &(0x7f0000000780)=@random={'security.', '\xa4/\x00'})
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
r0 = socket$inet6(0xa, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000001440)={'ip6gre0\x00', &(0x7f0000000000)=@ethtool_rxfh_indir={0x38}})
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x8)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000580)="d8000000180081034e91f783db4cb9040a1d020006007409e8fc55a10a0015000400142603600e120800060000000401a8000800080002000000000004000461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d4e1cace81ed0bffece0b42a9ecbeeccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d93000000000000004867edef090d82c399b3b549", 0xd8}], 0x1}, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000180), 0x1000000, &(0x7f0000000540)=ANY=[])
r5 = pidfd_getfd(r2, r1, 0x0)
openat(r5, &(0x7f0000000240)='./file1\x00', 0x4000, 0x5)
read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, <r6=>0x0}, 0x2020)
write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f, 0x2000000, 0x20002, 0x2, 0x0, 0xd, 0x0, 0x0, 0x0, 0x10, 0x5}}, 0x50)
syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000280)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x0, 0x20d6, 0xcb17, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x5, 0x20, 0xb8, [{{0x9, 0x4, 0x0, 0x7, 0x1, 0x3, 0x1, 0x1, 0xfe, {0x9, 0x21, 0x4, 0x0, 0x1, {0x22, 0xa9a}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0xe, 0x3}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0x8, 0x1, 0x82}}]}}}]}}]}}, &(0x7f0000000900)={0xa, &(0x7f00000002c0)={0xa, 0x6, 0x310, 0x3, 0x9, 0x0, 0x20, 0x40}, 0x5, &(0x7f0000000300)={0x5, 0xf, 0x5}, 0x9, [{0x59, &(0x7f0000000340)=@string={0x59, 0x3, "b278ab04a8b18aa4497fb9588040782fb979939fe6c0d7df4babdab031b9d5bcb356bb2412c8bb0cbec396d887a1facf466fd7c806058e8cf15bc65cdef92628d7ad88a6e94b3482eadcdfe040352f3399a9c2b2064298"}}, {0x61, &(0x7f0000000400)=@string={0x61, 0x3, "c902b9bf59130d27c45282956a104a093c77dfc5cf876e18636364be7acfb0307bb4f091f9f21332d91a492d56e9b8631315a280e083153c4918c1669f6904d1a28fdadeb41a3d9bd78be562ccd8ea0643aee4a411a8e1cbaf001394cefc84"}}, {0x4b, &(0x7f0000000480)=@string={0x4b, 0x3, "f313f7de849ae661d1932e3ac94c85b39189e2f652ff5d1c302945928aa396f68a8453b4986117270f1346afb175f9079c483bde4407c3a688cb391ae44daf3e56cc5e787e0dbfb467"}}, {0x2, &(0x7f0000000500)=@string={0x2}}, {0x4, &(0x7f0000000540)=@lang_id={0x4, 0x3, 0x40b}}, {0xc9, &(0x7f0000000680)=@string={0xc9, 0x3, "1aa0dc992675dfd27c3fc1c027e69c112a7ebe558a5b949ce4d8b3c118fab0e121a6734413c55fc1f4fe04d2c05470ae055ce5c91deff7577dc1d90bf6b4ed5978b7c405da7063676a16e5c023b1ce9f38a2436acb8015553ce7fc8f15b979460f91c3b40c2712b50a398a33fce9c461ab537a458956692455be306c7e65c1836334d5e458fb27aa75cbb0e885578c6425fdd41615f76314f371cc512bfd3ace8859ec5d67ca4e4ebbbf549c983ff38d5bf4dd6dbe1a5bd5b1d1ef5f31b38608e0dcd916491891"}}, {0xa2, &(0x7f00000007c0)=@string={0xa2, 0x3, "1cd81dbca24db59de83e2df9127c7d211e72caca51ce2a1fbf2f9cb7535433973f089e831ab2b01665637ae2d6261b1e53a588bb1b24f7548b89fed01dfaafb8be97ebc30181923259b7ab7ea5270747c5c17f4d59efdbe07cad39ac8d64e199cf28cc1813b97786717352de8dcaa12c4214897a826643eb8fc8a26f02826a8b969bfd6d12d037057d0a2addfb0afda59803fc7a7ae9d3fc4088336c1060fac4"}}, {0x4, &(0x7f0000000880)=@lang_id={0x4, 0x3, 0x814}}, {0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x42c}}]})
syz_fuse_handle_req(r3, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r3, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={&(0x7f00000000c0)={0xfe5a, 0x0, 0x1, {0x7, 0x29, 0x5, 0x201800, 0xbe3, 0x200, 0xffff, 0x12800, 0x0, 0x0, 0x100, 0x17f}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0)
syz_clone3(&(0x7f00000001c0)={0x7000, 0x0, 0x0, 0x0, {}, 0x0, 0xffffffffffffff2f, 0x0, &(0x7f0000000240), 0x1, {r2}}, 0x58)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_inet_SIOCSIFFLAGS(r7, 0x8924, &(0x7f00000000c0)={'dummy0\x00', 0x1})
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
timer_create(0x7, &(0x7f0000000000)={0x0, 0x20, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000040)=<r8=>0x0)
timer_settime(r8, 0x0, &(0x7f0000000080)={{0x77359400}}, &(0x7f00000000c0))

1.843086923s ago: executing program 0 (id=476):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x20000)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000240)={0x7, 0x1, 0xa0008000})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0xb, 0x100})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000080)={0x2, 0x5, 0x3})
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8fff7ff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b70500000000e000720aa3fe00000000850000000a000000b70000000000000095000000000000004e6258941c823b7505608556ba4ababb42684e890d31ae450400373a0a5447a801b8c1c4f0c4bd97c6555e61345400f9bd42abeb9ade0105000000000000a21902ff07000094a2b51c21df74924f5436a6ed89b98f75e800230c49c90fe1336481f3b92a63336c36fcd745d61d7739c6554ca201000000bebbe8282f8b1e26407437a397bf8f50e87ed4d27adfd876bffc402887781979461c4363bc5c9b6202ea471428197ef88bc333fbcec0ea4334f1ddb9d679ae95a90fd41d528f587e05000000435883df6c10ce86188c92292b2d0226082960be682836bdff8b0971f2a5405e453228e7b1005bd73479358a90df3e481947de6453736aa572158af6ea63d6d418fbbd2bba050000001da000ef78df03000000d19913a5fb03c79dac2e489f68127892658115e7ffb588a71dffffff951b8535167ab8069a2c92a3aa18e22517000026637b4c34bf2d0aa304ed42bf70480e9e97203fd169411f37fddd1f7fbe16dbbc0f307bceb5064f388a0350c3dc9271aa8b0e638b1e2b2a9d25264233e5d45eb377f56b95241024dbe30f67191c2b56b70328d6d3215dfffe5d89af1d10599bd494d921d1fb2db99b6aba0fa978f41eb1d4c553e5a9326ed550c13f8dd36716a899a1e79234294707c5312b924d142c17b20bb80ee202222c03fa84ccc374e717f694018630366397266090a82343aedfbf7afe892390c2eb775b0d16073da2229958db05de7df6ab7600004000010000006d8081cb3bf251d906c00da0e23b50465f8394820be571e3592d0000c7ef10fdc462e7040e7074ec43aa461fc54401a76406db718d4efd6c1bd10ce1d087cf9bba461162555a95524c84df0952d32093082b7aa71304e0d2d9ec310d1b676b378a5879e47941de1a28c3a8f400000000000000000e032b7d2badd0bc6617a859b7ac273b6304555f664469cec152030f06cc0ca1765838eb5590264736fbccfc3a8f4e3b10daf6a275daf5db2dac7096fe8ac8876acaad043663b3b0fedb05e6d31408fa20140c9d2db1c59ac8a3ce28e489d67d87d3a107ccea3007f58f2c5017e8807107f79ac50cc1d4f546b4443d137eb706b71b1767a10cca7a7c82b76c96e874aff249f36329a6526b354b6e674b08f7ef492b804c4b08fb10de807d79fd782027318cd7632e22d2faa16209272b39b5ec8d239832ea02cc88e249a2e77753a58987547571fbc8de747faab724bebb6401412b496e078fcb6c78ab447e871b76a8b0506f49594aa1d610567e14d739a60ff3ce04d0d2e5681e787c7e1ad25467bb81f2f440128207fe07a83759ec30cf9e0a3fd3f2fcee97fe8d273f8e712a8a64eaf2d89a1fa44554357fcd7ab531ff7a41c27164fca430a62d015b477de61853f5ee2e25b00a63642ec32ece2ff3bb5883deb895f52a923b5c744d8dccdd6a09ded8b90f1eeda8e6e884a4f090edb6ab9fc8107846508d51f3735493d5860cf80200ce31b92eb3563d485b5a7d192092d7a9fd2bc67d305d1d1b4b8345f6501d1cd27657ce17330402dacb78d72d776330711645eed7d4c292f4448733c0826c4eb950f3d40457f82d7f792d106518f6bde874aff9e2bea7d73f74bebeeacfc700000000000000000000d40d73be47803297db004264c8c70b7761b22a7114a078a87d63d63b0c9dcc263a5b773bfeba212abef4181ad9e4872e328c0f105d5100000000b717051d7681ba04552eeba18a000000b22b50d76d85040c9000ea68a528049a60d5e26b20455194f4be3b8466fd66d0e6cefcff7891c485d61cb66f4076cd60a22733cb00cf7cc12ca7d9bb864c0e650236a79a5c85349a9b1e6bbc3bace197e72490c566431cd3a08e9d1b641c1ba1f661d01573b904c3fa1427370fa15cecd294ac21fefe3d161fdf58e8bc5957ef145839f4370176e1be88d2e3516a1998c1621a00b4438b85a4dfee6f61827a1e50e158038b037dfda3ffb35069e41fc740ae720800de53948f176c3c15f3a529c02434b920d87f12a6e3420a2fdcb3559e7a5b1ddbb06b7a5977f63bfac701e673bf626d126b213c92e7169a930beb8d76f9db34e8098bea301baa96916d6458c923866dc192928b320738d1b298fb55f2a64500000000000000000000000000509885a38d9d995a46817e7ff7acddcc5f9253c63f86baf33f92820c9ff497cf76b6482c3ab53fb6ecea6d220b91b99b2fb4279ab09ae0645ab92df309000000000000a4868411948f8e3e259b717d722a1eebd3f6860a17f1ae9e10a1178f6aef4951b192d13e9600c1f700ca7b1d127e451034469bf2a8f93dbae6ad8e932e431dc18323794156238625bb9c45c5a76a68a8646e701b29a71ffbd854f50f195823106a5625ff94221f1f04c72525b50aae69081de9626de9847bf53475d90642d9730101d80b1b0000000000000000822b0641698d60160d9157548302dd2636d12c431f96728ae4a45361e6d47a1c4a52d67c0f0a62585c09fcfd70d0f249f87c44b47283c1c6f2430d70c751e4ada9b646e6e7c1719faee476d88a2943c71a21db55b7497dd7ed385ac2e8cb916390a3a0ed141e69afa07b46ac20f3521fb251b72c82ee1c7eb4f67c0deed5618d0db925ce7a7c50a99835544c540f5d528587d1a26e78df1bc9a8e4d90c57d0b8122eae7b23e4456624f5337c16c42648c7a3d0b799ad409befe0cbe2aa781ba826918df7aa80dff4f62258e54419629eb1d37de7f6a3512bd618781d1ad3a4d4b0da44df9f9a93f0487f79a9b16dfa6f68b06ce6a96ca344d194cded05702c2300d1a4f451b33830765f8131f6c28fada65701851bba089b8a8347900e72d68cea965feb6a06225dd3f0e135323a5bde3b43c9d242b73abf9e05336af040a4a6bb5918146393f1d50705c1d1e986bf2f690de51ee8727d37339df5391db535bb1e9bb3e5dadb6e5a2bb4faa2dcbc6ca9b40ac96e448b9dadeb08fc2cf3a960f22bf20b9e967b7a75687372b8e3edc543896c360674d901a7f56b07ba1479b46eea3d94026a9c7e670ab40bb2c1ca1a7c90299361239bef773140af974c7efc285a64633d21513481b3ac62dec9fa3e8ce6156d76b82baa145bc550b0ccbc0934ccfea45292caa2f0654fe18dc0669a4f2af9fa232a293ad94261f55675cc686db72783a6bacc0df6a1ea943ae266af112f35319980cd681811a369e0d03cf7d22bed7cbe1afe498b88942b1bf7edae441a0d0d88fce65cb4e848793a28cbd7373f6acd3b5a48c034e487750388929d37fa3165f205dab3be5f3e5781a84298687cbf02dcaf0e14a2b260293f349d076eb75a2ddc5382d106f0beea02aa45018fe36d1176cf7704383b6922d10dc80bc7feca3982ae232d4bb47c722c83a7cf6ee8832f038b072eb803a47cd7f753e80c9f6eedb82e4541f92cb59b197a600331887e92dbcbad7b6b9af3c6f2d42ab9e591f57cc93d629b634518686492e0378547e1a33df35cbc133308dc1a87371bba153f03b8f177560732000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x87}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x300f000, 0xe, 0x0, &(0x7f0000000e40)="0049c69d2786a4b8d3dce769c270", 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
r5 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000340)={0xda2, 0x5, 0x7})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x200, 0x1fb, 0xc38})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000340)={0x3, 0xc, 0x7})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f00000000c0)={0xdb, 0x1ff, 0xb})
r6 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x49, 0x7fff, 0x4})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000140)={0x6, 0x1000, 0x800})
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000380)={0x100, 0x1, 0xaef})
close_range(r0, 0xffffffffffffffff, 0x0)

1.392011105s ago: executing program 3 (id=477):
r0 = socket$inet(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @empty}, 0x10)
sendmmsg$inet(r0, &(0x7f0000000680)=[{{0x0, 0x97ff, 0x0}}], 0x1, 0x80)

994.381922ms ago: executing program 1 (id=478):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001480)=@delchain={0x30, 0x5f, 0xf31, 0x0, 0x2, {0x0, 0x0, 0x0, r2, {}, {0x5, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4800}, 0x40)
setsockopt$sock_int(r1, 0x1, 0x23, &(0x7f00000004c0)=0x5, 0x4)
syz_mount_image$nilfs2(&(0x7f0000000240), &(0x7f0000000200)='./file0\x00', 0x10, &(0x7f0000000480)=ANY=[], 0x5, 0xa6c, &(0x7f0000001380)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file7\x00', 0x1c0)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_adj\x00')
read$watch_queue(r3, 0x0, 0x4f)
ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r1, {0x3}}, './file1\x00'})
syz_usb_connect(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xa7, 0x2b, 0x7a, 0x10, 0x54c, 0x2e1, 0xe2c8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x71, 0x2, 0x2, 0x16, 0xfa, 0x1f, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r6=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002abd7000fcdbdf254f00000008000300", @ANYRES32=r6, @ANYBLOB="48007a800c000300793bb0bb537be83314000200b4f42dfba9439deef1df2342c81fc614050001"], 0x64}}, 0x4000080)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1400000004000000080000000800000004050000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000020000000000000000000000000000000000000000000000fce99b5fff3227246d515316385b5640c6f9233a8d2292cdb40473e17c25ede1cb071967d4ff3edcb3594bc00817798ed05fd012840e22fc9b1837a32ebc6fa1292dbf343e24095ccefb7379406b7fba2158a7ef02685d3fd501cfdbccac880bbae40c74d8ba0cb7317aa7ac4d9715605ac5a5f1a91069130b63f43f34b3e956f4c3290fdd45e858386a75b5cc0b0a4dae6c747984b337318ba566797f784e10e62d36c1a3cba6fb3867"], 0x48)
bind(r0, &(0x7f00000000c0)=@ll={0x11, 0x5, r2, 0x1, 0x7, 0x6, @link_local}, 0x80)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100626f6e6400000000180002801400088008"], 0x48}}, 0x0)
sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0)

914.885191ms ago: executing program 0 (id=479):
r0 = socket$pptp(0x18, 0x1, 0x2)
r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x80080, 0x0)
ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0x2)
syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000))
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0)
r3 = syz_open_pts(r2, 0x900)
r4 = dup3(r3, r2, 0x80000)
read(r4, &(0x7f00000000c0)=""/226, 0xe2)
bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev}}, 0x1e)
connect$pptp(r0, &(0x7f0000000040)={0x18, 0x2, {0x0, @multicast1}}, 0x1e)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90)
r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0)
ioctl$EVIOCGPROP(r5, 0x40047438, &(0x7f0000000180)=""/246)
pwritev(r5, &(0x7f00000007c0)=[{&(0x7f0000000080)="508f", 0x2}, {&(0x7f0000000280)="31bcbfca570b87d37723468fa47afbfc39ebf11663b1051617568c9c796152a8736d6f619ba8957605a9994e05ba74c34148e92c0862597fccd90034b90676a509f129f472da6488b07f09c0453e44d08d4c5099343c7964ba93b16ee8d61540b62a75104abf2df1fecca0114fba662f0c1827eef63e924f3cd50d28b94be32d049760fee37fffdbef26fa09607978ea956c33354d1135974665412c2d742af3dbc6bd34b04bfca6a5267888644a242b2dc758c2af3e8716ac0fadff975652bc2c3dbb5ae549acee3ee3ba6be72e8dbac0", 0xd1}, {&(0x7f00000000c0)="88f84926cf1e065f2e319fcb97c7fd9e49a74a4f9194dab37672c1612a70a3434b4c60474482851187c40434ef102e86c43c856984ce99f2d48a45d9662de82ad10bd6ddc472f23b36bbf1c9e0423c8e042b4349e4391bfaf25684dbd39bd691726ded99c9c17b142c9323183073b41b1f22c72112523711d34fec9205ceabb53dc0092f9b35c854c91c393b533f46d79a08959e4b60efb7", 0x98}, {&(0x7f0000000380)="4f5e10e5f32088f374f3cefe94c45722c214815edb009c482121c1fff3a0488e0930b7aab5c7b5090a711af4dd7eba399725bf39eaf794c691e94933f70e705c812872f305c953f33f45973a6e7730fa2d7bb6e96cab5b9fdb484b9224ef994b5a730feab318913a54c0638ca31f9d2c10749036f9d75fbc3c8658333a0210", 0x7f}, {&(0x7f0000000480)="274556a9889f1eacf4d7fd691810d872bcce72819cb5fff81d8d1d044f381b640afeae673e5a1c15fa21f5b8fa17ed97fb59ab1d8f2c3db989", 0x39}, {&(0x7f0000000500)="186c297aba6cec1c9887c27da7c5830b0cf602a1c88561af2c03ab5b9a1af65b0ff4906a81ef9e36725b1499a9", 0x2d}, {&(0x7f0000000540)="a6909a265024898a769b99c34e09b26276c703c160c8768915d063c9d8beed31044db518b6a0d3e5eb58f4118f7013564247a85c94b9c4a1190e05a8a1770c13ca7e68957d34d94ad40c04c80561390878519499864b37ef6a0e97a259f3451efb28c18ef8b463d45bd4cce803", 0x6d}, {0x0}, {0x0}], 0x9, 0x6, 0x82db)

420.180806ms ago: executing program 3 (id=480):
r0 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
r2 = openat$cgroup_subtree(r1, 0x0, 0x2, 0x0)
write$cgroup_subtree(r2, &(0x7f0000000040)={[{0x2b, 'rdma'}, {0x2b, 'cpuset'}]}, 0xe)

0s ago: executing program 0 (id=481):
pipe(&(0x7f0000000080))
syz_io_uring_setup(0x23b, &(0x7f0000000380)={0x0, 0xce0a, 0x10100, 0x3, 0x370}, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a00000004000000dd0000000a"], 0x50)
socket$can_bcm(0x1d, 0x2, 0x2)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48)
socket$inet6_tcp(0xa, 0x1, 0x0)
pipe(&(0x7f00000001c0))
socket$nl_rdma(0x10, 0x3, 0x14)
eventfd2(0x8, 0x80001)
epoll_create(0xa)
socket$kcm(0xa, 0x2, 0x73)
socket$key(0xf, 0x3, 0x2)
socket$inet(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
socket$nl_route(0x10, 0x3, 0x0)
open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
creat(&(0x7f0000000300)='./bus\x00', 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r0], 0xc4}}, 0x0) (fail_nth: 9)

kernel console output (not intermixed with test programs):

][ T1611] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  252.056182][ T1611] usb 4-1: Using ep0 maxpacket: 32
[  252.113550][ T1611] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  252.127234][ T1611] usb 4-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00
[  252.136835][ T1611] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  252.244245][ T1611] usb 4-1: config 0 descriptor??
[  252.879655][ T1611] steelseries 0003:1038:1410.0007: not enough fields in HID_OUTPUT_REPORT 0
[  253.156108][ T1611] usb 5-1: USB disconnect, device number 6
[  253.225276][ T1842] hfsplus: b-tree write err: -5, ino 4
[  253.257699][ T6505] loop3: detected capacity change from 0 to 1024
[  254.889763][ T1611] usb 4-1: USB disconnect, device number 6
[  254.990190][ T3783] hfsplus: b-tree write err: -5, ino 4
[  256.048047][ T6565] netlink: 4 bytes leftover after parsing attributes in process `syz.0.187'.
[  256.634161][ T6571] netlink: 28 bytes leftover after parsing attributes in process `syz.2.189'.
[  256.646642][ T6571] netlink: 28 bytes leftover after parsing attributes in process `syz.2.189'.
[  256.672154][ T6571] bond0: entered promiscuous mode
[  256.680188][ T6571] bond_slave_0: entered promiscuous mode
[  256.687462][ T6571] bond_slave_1: entered promiscuous mode
[  257.005406][ T6571] bond0: left promiscuous mode
[  257.010768][ T6571] bond_slave_0: left promiscuous mode
[  257.017573][ T6571] bond_slave_1: left promiscuous mode
[  257.595575][ T6580] loop3: detected capacity change from 0 to 128
[  258.096221][ T6584] loop0: detected capacity change from 0 to 1024
[  258.201114][ T6584] hfsplus: bad catalog folder entry
[  258.525867][ T5898] usb 4-1: new full-speed USB device number 7 using dummy_hcd
[  258.793893][ T5898] usb 4-1: config 0 has an invalid interface number: 128 but max is 0
[  258.802663][ T5898] usb 4-1: config 0 has no interface number 0
[  258.883327][ T5898] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  258.893179][ T5898] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  258.901697][ T5898] usb 4-1: Product: syz
[  258.908727][ T5898] usb 4-1: Manufacturer: syz
[  258.913522][ T5898] usb 4-1: SerialNumber: syz
[  259.080814][ T5898] usb 4-1: config 0 descriptor??
[  259.265064][ T1611] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  259.475177][ T1611] usb 5-1: Using ep0 maxpacket: 32
[  259.514493][ T5898] usb 4-1: Firmware version (0.0) predates our first public release.
[  259.525593][ T5898] usb 4-1: Please update to version 0.2 or newer
[  259.609727][ T1611] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  259.621374][ T1611] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  259.636608][ T1611] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  259.648653][ T1611] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  259.779714][ T5898] usb 4-1: USB disconnect, device number 7
[  260.023693][ T1611] usb 5-1: config 0 descriptor??
[  260.097576][ T1611] hub 5-1:0.0: USB hub found
[  260.307230][ T1611] hub 5-1:0.0: 1 port detected
[  260.733395][ T6606] loop0: detected capacity change from 0 to 512
[  260.909752][ T6605] Page cache invalidation failure on direct I/O.  Possible data corruption due to collision with buffered I/O!
[  260.922529][ T6605] File: /dev/nullb0 PID: 6605 Comm: syz.0.199
[  261.228013][ T1611] hub 5-1:0.0: activate --> -90
[  261.933539][ T5898] usb 5-1: USB disconnect, device number 7
[  262.516986][ T6615] netlink: 4 bytes leftover after parsing attributes in process `syz.2.203'.
[  263.082570][ T6620] netlink: 28 bytes leftover after parsing attributes in process `syz.3.204'.
[  263.085348][ T6622] loop4: detected capacity change from 0 to 128
[  263.094542][ T6620] netlink: 28 bytes leftover after parsing attributes in process `syz.3.204'.
[  263.126042][ T6620] bond0: entered promiscuous mode
[  263.131271][ T6620] bond_slave_0: entered promiscuous mode
[  263.138222][ T6620] bond_slave_1: entered promiscuous mode
[  263.328177][ T6620] bond0: left promiscuous mode
[  263.333281][ T6620] bond_slave_0: left promiscuous mode
[  263.341643][ T6620] bond_slave_1: left promiscuous mode
[  264.035500][ T6626] loop2: detected capacity change from 0 to 1024
[  264.121199][ T6631] loop4: detected capacity change from 0 to 16
[  264.139175][ T6626] hfsplus: bad catalog folder entry
[  264.202794][ T6631] erofs (device loop4): dirblkbits 1 isn't supported
[  264.459333][ T6631] program syz.4.209 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  264.814220][ T6631] netlink: 'syz.4.209': attribute type 1 has an invalid length.
[  264.822465][ T6631] netlink: 12 bytes leftover after parsing attributes in process `syz.4.209'.
[  264.935366][ T6639] ipvlan2: entered promiscuous mode
[  264.946077][ T6639] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  264.963784][ T6639] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  264.978476][ T6634] loop3: detected capacity change from 0 to 32768
[  265.008877][ T6634] (syz.3.211,6634,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  265.028144][ T6634] (syz.3.211,6634,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  265.118640][ T6634] (syz.3.211,6634,0):ocfs2_verify_userspace_stack:858 ERROR: cluster stack passed to mount, but this filesystem does not support it
[  265.135110][ T5898] usb 1-1: new full-speed USB device number 6 using dummy_hcd
[  265.149083][ T6634] (syz.3.211,6634,0):ocfs2_fill_super:1177 ERROR: status = -22
[  265.736594][ T5898] usb 1-1: config 0 has an invalid interface number: 128 but max is 0
[  265.745606][ T5898] usb 1-1: config 0 has no interface number 0
[  265.859833][ T5898] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  265.869418][ T5898] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  265.881827][ T5898] usb 1-1: Product: syz
[  265.886944][ T5898] usb 1-1: Manufacturer: syz
[  265.891725][ T5898] usb 1-1: SerialNumber: syz
[  266.043807][ T5898] usb 1-1: config 0 descriptor??
[  266.598150][ T5898] usb 1-1: Firmware version (0.0) predates our first public release.
[  266.606805][ T5898] usb 1-1: Please update to version 0.2 or newer
[  266.845391][ T6650] loop4: detected capacity change from 0 to 2048
[  266.914269][ T6650] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found
[  266.922545][ T6650] UDF-fs: Scanning with blocksize 512 failed
[  267.118930][ T6650] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  267.216142][ T5898] usb 1-1: USB disconnect, device number 6
[  267.298291][ T6650] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  267.641623][ T6661] netlink: 4 bytes leftover after parsing attributes in process `syz.2.218'.
[  268.179767][ T6658] loop3: detected capacity change from 0 to 32768
[  268.754500][ T6658] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,recovery_pass_last=snapshots_read,nojournal_transaction_names,noexcl,read_only,no_data_io
[  268.754800][ T6658]   allowing incompatible features above 0.0: (unknown version)
[  268.754884][ T6658]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  268.805377][ T6658] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0
[  268.815275][ T6658] bcachefs (loop3): invalid journal entry, version=1.7: mi_btree_bitmap type=clock in superblock: bad rw, fixing
[  268.831174][ T6658] bcachefs (loop3): recovering from clean shutdown, journal seq 10
[  268.843790][ T6658] bcachefs (loop3): Version upgrade required:
[  268.843790][ T6658] Version upgrade from 0.11: inode_btree_change to 1.7: mi_btree_bitmap incomplete
[  268.843790][ T6658] Doing incompatible version upgrade from 0.11: inode_btree_change to 1.28: inode_has_case_insensitive
[  268.843790][ T6658]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance
[  268.957191][ T6658] bcachefs (loop3): btree node read error at btree extents level 0/0
[  268.957286][ T6658]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c6c25c03258c59c5 written 16 min_key 0:3064397824:0 durability: 1 ptr: 0:27:0 gen 0
[  268.957387][ T6658]   loop3 node offset 0/16: incorrect min_key: got POS_MIN should be 0:3064397824:0
[  268.957467][ T6658]   loop3 btree validate error
[  268.957530][ T6658]   flagging btree extents lost data
[  268.957600][ T6658]   running recovery pass check_topology (2), currently at recovery_pass_empty (0)
[  268.957682][ T6658]   running recovery pass check_topology (2), currently at recovery_pass_empty (0)
[  268.957767][ T6658]   running recovery pass scan_for_btree_nodes (1), currently at recovery_pass_empty (0)
[  268.957848][ T6658]   ret btree_node_read_err_bad_node
[  269.037984][ T6658] bcachefs (loop3): error reading btree root btree=extents level=0: btree_node_read_error, fixing
[  269.062168][ T6658] bcachefs (loop3): btree node read error at btree dirents level 0/0
[  269.062263][ T6658]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0
[  269.062362][ T6658]   loop3 node offset 16/24: btree node data missing: expected 24 sectors, found 16
[  269.062441][ T6658]   loop3 btree validate error
[  269.062504][ T6658]   repair success (rewriting node)
[  269.118791][ T6658] bcachefs (loop3): btree node read error at btree alloc level 0/0
[  269.118884][ T6658]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0
[  269.118983][ T6658]   loop3 node offset 0/24 bset u64s 0: invalid bkey format: field 2 too large: 4294967295 + 3328 > 4294967295
[  269.119070][ T6658]   u64s 3 fields 64:0, 64:0, 32:3328, 0:0, 0:0, 0:0
[  269.119145][ T6658]   loop3 btree validate error
[  269.119208][ T6658]   flagging btree alloc lost data
[  269.119267][ T6658]   ret btree_node_read_err_bad_node
[  269.178798][ T6658] bcachefs (loop3): error reading btree root btree=alloc level=0: btree_node_read_error, fixing
[  269.218482][ T6658] bcachefs (loop3): btree node read error at btree backpointers level 0/0
[  269.218581][ T6658]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 4a8b0fa43a9980a6 written 24 min_key POS_MIN durability: 1 ptr: 0:37:0 gen 0
[  269.218679][ T6658]   loop3 node offset 0/24 bset u64s 0: checksum error, type none: got  should be 
[  269.218754][ T6658]   loop3 btree validate error
[  269.218817][ T6658]   flagging btree backpointers lost data
[  269.218881][ T6658]   ret fsck_errors_not_fixed
[  269.270430][ T6658] bcachefs (loop3): error reading btree root btree=backpointers level=0: btree_node_read_error, fixing
[  269.290314][ T6658] bcachefs (loop3): check_topology...
[  269.290690][ T6658] bcachefs (loop3): btree root extents unreadable, must recover from scan
[  269.310443][ T6658] bcachefs (loop3): running recovery pass scan_for_btree_nodes (1), currently at check_topology (2) - rewinding
[  269.324197][ T6658] bcachefs (loop3): bch2_check_root(): error restart_recovery
[  269.331970][ T6658] bcachefs (loop3): scan_for_btree_nodes...
[  269.649126][ T6675] netlink: 28 bytes leftover after parsing attributes in process `syz.0.221'.
[  269.666772][ T6675] netlink: 28 bytes leftover after parsing attributes in process `syz.0.221'.
[  269.690865][ T6675] bond0: entered promiscuous mode
[  269.696295][ T6675] bond_slave_0: entered promiscuous mode
[  269.703342][ T6675] bond_slave_1: entered promiscuous mode
[  270.069017][ T6674] loop2: detected capacity change from 0 to 32768
[  270.087971][ T6675] bond0: left promiscuous mode
[  270.093177][ T6675] bond_slave_0: left promiscuous mode
[  270.100046][ T6675] bond_slave_1: left promiscuous mode
[  270.244280][ T6674] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode.
[  270.545025][ T6658] bcachefs (loop3): btree node scan found 1 nodes after overwrites
[  270.581352][ T6658]  done
[  270.587004][ T6658] bcachefs (loop3): check_topology...
[  270.587385][ T6658] bcachefs (loop3): btree root extents unreadable, must recover from scan
[  270.602726][ T6658] bcachefs (loop3): bch2_get_scanned_nodes(): recovery btree=extents level=0 POS_MIN - SPOS_MAX
[  270.614378][ T6658] bcachefs (loop3): bch2_get_scanned_nodes(): recovering u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c6c25c03258c59c5 written 16 min_key POS_MIN durability: 1 ptr: 0:27:0 gen 0
[  270.652690][ T6683] mmap: syz.4.224 (6683) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  270.758707][ T6658]  done
[  270.761760][ T6658] bcachefs (loop3): accounting_read... done
[  270.815214][ T6658] bcachefs (loop3): alloc_read... done
[  270.844738][ T6658] bcachefs (loop3): snapshots_read... done
[  270.862152][ T6658] bcachefs (loop3): Fixed errors, running fsck a second time to verify fs is clean
[  270.883259][ T6658] bcachefs (loop3): done starting filesystem
[  270.987640][ T5818] bcachefs (loop3): shutting down
[  271.122439][ T5818] bcachefs (loop3): shutdown complete
[  271.278541][ T5825] ocfs2: Unmounting device (7,2) on (node local)
[  271.306133][ T6691] loop0: detected capacity change from 0 to 256
[  271.358993][ T6691] exfat: Deprecated parameter 'namecase'
[  271.575381][ T6691] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xec4b13f1, utbl_chksum : 0xe619d30d)
[  271.699719][ T6691] fuse: Bad value for 'fd'
[  271.831323][ T6695] netlink: 8 bytes leftover after parsing attributes in process `syz.4.230'.
[  271.841359][ T6695] veth0_to_bond: entered allmulticast mode
[  272.410452][ T6698] overlayfs: failed to resolve './file0': -2
[  272.809073][ T6702] netlink: 4 bytes leftover after parsing attributes in process `syz.4.232'.
[  275.218027][ T6716] netlink: 4 bytes leftover after parsing attributes in process `syz.2.235'.
[  275.628590][ T6719] netlink: 28 bytes leftover after parsing attributes in process `syz.0.236'.
[  275.638598][ T6719] netlink: 28 bytes leftover after parsing attributes in process `syz.0.236'.
[  275.734157][ T6719] bond0: entered promiscuous mode
[  275.739586][ T6719] bond_slave_0: entered promiscuous mode
[  275.746566][ T6719] bond_slave_1: entered promiscuous mode
[  275.875497][ T6719] bond0: left promiscuous mode
[  275.880652][ T6719] bond_slave_0: left promiscuous mode
[  275.887551][ T6719] bond_slave_1: left promiscuous mode
[  276.093599][ T6726] loop4: detected capacity change from 0 to 164
[  276.171260][ T6720] sp0: Synchronizing with TNC
[  276.222587][ T6726] Unable to read rock-ridge attributes
[  276.277892][ T6726] Unable to read rock-ridge attributes
[  276.957893][ T6733] loop0: detected capacity change from 0 to 256
[  277.316986][ T6733] FAT-fs (loop0): Directory bread(block 64) failed
[  277.323968][ T6733] FAT-fs (loop0): Directory bread(block 65) failed
[  277.331092][ T6733] FAT-fs (loop0): Directory bread(block 66) failed
[  277.338071][ T6733] FAT-fs (loop0): Directory bread(block 67) failed
[  277.351254][ T6733] FAT-fs (loop0): Directory bread(block 68) failed
[  277.359781][ T6733] FAT-fs (loop0): Directory bread(block 69) failed
[  277.366893][ T6733] FAT-fs (loop0): Directory bread(block 70) failed
[  277.373593][ T6733] FAT-fs (loop0): Directory bread(block 71) failed
[  277.380556][ T6733] FAT-fs (loop0): Directory bread(block 72) failed
[  277.387520][ T6733] FAT-fs (loop0): Directory bread(block 73) failed
[  277.468950][ T6737] loop3: detected capacity change from 0 to 2048
[  277.519524][ T6737] UDF-fs: error (device loop3): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  277.533465][ T6737] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found
[  277.541520][ T6737] UDF-fs: Scanning with blocksize 512 failed
[  277.591431][ T6740] netlink: 4 bytes leftover after parsing attributes in process `syz.2.244'.
[  277.627640][ T6737] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  277.715412][ T1611] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  277.791257][ T6737] netlink: 'syz.3.243': attribute type 75 has an invalid length.
[  277.912534][ T1611] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  277.935494][ T5870] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  277.972773][ T1611] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  277.982253][ T1611] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  277.990917][ T1611] usb 5-1: Product: syz
[  277.995579][ T1611] usb 5-1: Manufacturer: syz
[  278.000362][ T1611] usb 5-1: SerialNumber: syz
[  278.125290][ T5870] usb 2-1: Using ep0 maxpacket: 16
[  278.150950][ T5870] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  278.164370][ T5870] usb 2-1: config 0 has no interface number 0
[  278.253665][ T5870] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  278.268033][ T5870] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  278.278181][ T5870] usb 2-1: Product: syz
[  278.282762][ T5870] usb 2-1: Manufacturer: syz
[  278.287804][ T5870] usb 2-1: SerialNumber: syz
[  278.428855][ T5870] usb 2-1: config 0 descriptor??
[  278.495334][ T5870] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  279.117447][ T1611] cdc_ncm 5-1:1.0: bind() failure
[  279.141376][ T1611] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found
[  279.148888][ T1611] cdc_ncm 5-1:1.1: bind() failure
[  279.542851][ T6748] loop0: detected capacity change from 0 to 4096
[  279.607513][ T6748] EXT4-fs: Ignoring removed nobh option
[  279.638498][ T1611] usb 5-1: USB disconnect, device number 8
[  279.716576][ T6748] EXT4-fs (loop0): Test dummy encryption mode enabled
[  279.741917][ T5870] gspca_spca1528: reg_w err -71
[  279.748929][ T5870] spca1528 2-1:0.1: probe with driver spca1528 failed with error -71
[  279.791645][ T5870] usb 2-1: USB disconnect, device number 3
[  279.835932][ T6748] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  280.704399][ T6765] loop2: detected capacity change from 0 to 164
[  280.763915][ T6765] Unable to read rock-ridge attributes
[  280.783932][ T6764] netlink: 28 bytes leftover after parsing attributes in process `syz.1.251'.
[  280.793492][ T6764] netlink: 28 bytes leftover after parsing attributes in process `syz.1.251'.
[  280.816720][ T6764] bond0: entered promiscuous mode
[  280.823925][ T6764] bond_slave_0: entered promiscuous mode
[  280.831468][ T6764] bond_slave_1: entered promiscuous mode
[  280.875721][ T6765] Unable to read rock-ridge attributes
[  280.902793][ T6764] bond0: left promiscuous mode
[  280.908442][ T6764] bond_slave_0: left promiscuous mode
[  280.918647][ T6764] bond_slave_1: left promiscuous mode
[  280.947792][ T6748] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000.
[  281.032983][ T6766] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000.
[  281.121259][ T6769] capability: warning: `syz.4.253' uses deprecated v2 capabilities in a way that may be insecure
[  281.369930][ T5817] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  281.480185][ T5898] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  281.691520][ T5898] usb 5-1: Using ep0 maxpacket: 16
[  281.737697][ T5898] usb 5-1: config index 0 descriptor too short (expected 1541, got 18)
[  281.788864][ T5898] usb 5-1: config index 1 descriptor too short (expected 1541, got 18)
[  281.854535][ T5898] usb 5-1: config index 2 descriptor too short (expected 1541, got 18)
[  281.940884][ T5898] usb 5-1: config index 3 descriptor too short (expected 1541, got 18)
[  282.056423][ T5898] usb 5-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5
[  282.065940][ T5898] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  282.074217][ T5898] usb 5-1: Product: syz
[  282.079025][ T5898] usb 5-1: Manufacturer: syz
[  282.083795][ T5898] usb 5-1: SerialNumber: syz
[  282.188286][ T5898] usb 5-1: config 0 descriptor??
[  282.246950][ T6779] netlink: 4 bytes leftover after parsing attributes in process `syz.1.258'.
[  282.295041][ T5870] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  282.439190][ T5898] visor 5-1:0.0: Sony Clie 3.5 converter detected
[  282.495780][ T5870] usb 1-1: Using ep0 maxpacket: 8
[  282.527333][ T5870] usb 1-1: unable to get BOS descriptor or descriptor too short
[  282.547833][ T5870] usb 1-1: config 7 has an invalid interface number: 84 but max is 0
[  282.556710][ T5870] usb 1-1: config 7 has no interface number 0
[  282.600562][ T5870] usb 1-1: New USB device found, idVendor=04b4, idProduct=5500, bcdDevice=9e.50
[  282.610629][ T5870] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  282.619058][ T5870] usb 1-1: Product: syz
[  282.623492][ T5870] usb 1-1: Manufacturer: syz
[  282.628450][ T5870] usb 1-1: SerialNumber: syz
[  282.646457][ T5898] usb 5-1: clie_3_5_startup: get config number failed: -71
[  282.654745][ T5898] visor 5-1:0.0: probe with driver visor failed with error -71
[  282.717392][ T5898] usb 5-1: USB disconnect, device number 9
[  282.945971][ T5870] cypress_m8 1-1:7.84: HID->COM RS232 Adapter converter detected
[  282.957973][ T5870] cyphidcom ttyUSB0: required endpoint is missing
[  283.056007][ T5870] usb 1-1: USB disconnect, device number 7
[  283.064497][ T5870] cypress_m8 1-1:7.84: device disconnected
[  283.236035][ T6786] loop3: detected capacity change from 0 to 512
[  283.272954][ T6786] EXT4-fs: Ignoring removed nomblk_io_submit option
[  283.283586][ T6786] EXT4-fs: Ignoring removed i_version option
[  283.447189][ T6786] EXT4-fs (loop3): 1 orphan inode deleted
[  283.455188][ T6786] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  283.540423][ T6786] EXT4-fs error (device loop3): ext4_add_entry:2417: inode #2: comm syz.3.261: Directory hole found for htree leaf block 0
[  283.870257][ T5818] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  283.926245][ T6793] loop1: detected capacity change from 0 to 2048
[  284.085308][ T6797] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  284.120813][ T6796] netlink: 28 bytes leftover after parsing attributes in process `syz.2.265'.
[  284.130213][ T6796] netlink: 28 bytes leftover after parsing attributes in process `syz.2.265'.
[  284.153253][ T6796] bond0: entered promiscuous mode
[  284.158881][ T6796] bond_slave_0: entered promiscuous mode
[  284.165877][ T6796] bond_slave_1: entered promiscuous mode
[  284.265143][ T6796] bond0: left promiscuous mode
[  284.270233][ T6796] bond_slave_0: left promiscuous mode
[  284.277163][ T6796] bond_slave_1: left promiscuous mode
[  284.457696][ T6799] ------------[ cut here ]------------
[  284.463332][ T6799] verifier bug: REG INVARIANTS VIOLATION (true_reg1): range bounds violation u64=[0x1f, 0x1f] s64=[0x1f, 0x1f] u32=[0x1f, 0x17] s32=[0x1f, 0x1f] var_off=(0x1f, 0x0)(1)
[  284.481146][ T6799] WARNING: CPU: 0 PID: 6799 at kernel/bpf/verifier.c:2728 reg_bounds_sanity_check+0xb26/0x14b0
[  284.491922][ T6799] Modules linked in:
[  284.496251][ T6799] CPU: 0 UID: 0 PID: 6799 Comm: syz.0.267 Not tainted syzkaller #0 PREEMPT(none) 
[  284.506011][ T6799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  284.518768][ T6799] RIP: 0010:reg_bounds_sanity_check+0xb26/0x14b0
[  284.525538][ T6799] Code: ff ff ff b5 20 ff ff ff ff b5 18 ff ff ff ff b5 48 ff ff ff ff b5 10 ff ff ff ff b5 08 ff ff ff e8 7f 1c 02 ff 48 83 c4 38 90 <0f> 0b 90 90 4c 8b bd 70 ff ff ff e9 83 f8 ff ff 8b 3a e8 23 54 79
[  284.545847][ T6799] RSP: 0018:ffff888114b5af58 EFLAGS: 00010282
[  284.552166][ T6799] RAX: ffffffff81207e75 RBX: ffff88804c659168 RCX: 0000000000080000
[  284.560511][ T6799] RDX: ffffc90008802000 RSI: 0000000000015673 RDI: 0000000000015674
[  284.568914][ T6799] RBP: ffff888114b5b0d8 R08: ffffea000000000f R09: 0000000000000000
[  284.577407][ T6799] R10: ffff888237b77028 R11: ffff88823f2635e0 R12: 0000000000000000
[  284.585734][ T6799] R13: ffff88804d100b60 R14: 0000000000000000 R15: 0000000000000000
[  284.593911][ T6799] FS:  00007f0d6bdac6c0(0000) GS:ffff8881aa694000(0000) knlGS:0000000000000000
[  284.603187][ T6799] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  284.610139][ T6799] CR2: 000000110c3019cf CR3: 0000000114b84000 CR4: 00000000003526f0
[  284.620994][ T6799] Call Trace:
[  284.624424][ T6799]  <TASK>
[  284.627793][ T6799]  ? kmsan_get_metadata+0xfb/0x160
[  284.633214][ T6799]  reg_set_min_max+0x267/0x440
[  284.638398][ T6799]  check_cond_jmp_op+0x3187/0x4820
[  284.643797][ T6799]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  284.650123][ T6799]  do_check+0x2374/0x15760
[  284.654922][ T6799]  ? kmsan_get_metadata+0xfb/0x160
[  284.660311][ T6799]  ? kmsan_internal_unpoison_memory+0x14/0x20
[  284.666928][ T6799]  do_check_common+0x2482/0x3740
[  284.672139][ T6799]  bpf_check+0x61f8/0x2a100
[  284.677134][ T6799]  ? pcpu_block_refresh_hint+0x450/0x580
[  284.682994][ T6799]  ? kmsan_get_metadata+0xfb/0x160
[  284.688675][ T6799]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  284.694915][ T6799]  ? pcpu_block_update_hint_alloc+0x12df/0x1390
[  284.701500][ T6799]  ? kmsan_get_metadata+0x150/0x160
[  284.707143][ T6799]  ? kmsan_get_metadata+0xfb/0x160
[  284.712494][ T6799]  ? kmsan_internal_set_shadow_origin+0x79/0x110
[  284.721400][ T6799]  ? kmsan_internal_unpoison_memory+0x14/0x20
[  284.728551][ T6799]  ? kmsan_get_metadata+0xfb/0x160
[  284.733930][ T6799]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  284.740136][ T6799]  ? kmsan_get_metadata+0xfb/0x160
[  284.746899][ T6799]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  284.752986][ T6799]  ? strncpy_from_user+0x71/0x470
[  284.758411][ T6799]  ? stack_depot_save_flags+0x35/0x7b0
[  284.764174][ T6799]  ? kmsan_internal_set_shadow_origin+0x79/0x110
[  284.771037][ T6799]  ? kmsan_get_metadata+0xfb/0x160
[  284.777343][ T6799]  ? kmsan_get_metadata+0xfb/0x160
[  284.782730][ T6799]  ? kmsan_get_metadata+0xfb/0x160
[  284.788275][ T6799]  ? kmsan_internal_set_shadow_origin+0x79/0x110
[  284.795014][ T6799]  ? kmsan_get_metadata+0xfb/0x160
[  284.800390][ T6799]  ? kmsan_get_metadata+0xfb/0x160
[  284.806171][ T6799]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  284.812260][ T6799]  bpf_prog_load+0x28e6/0x2e50
[  284.819907][ T6799]  ? kmsan_internal_set_shadow_origin+0x79/0x110
[  284.826755][ T6799]  ? kmsan_internal_unpoison_memory+0x14/0x20
[  284.833131][ T6799]  ? security_bpf+0x88/0x620
[  284.838070][ T6799]  ? _copy_from_user+0xcb/0x100
[  284.843182][ T6799]  __sys_bpf+0x7f4/0xed0
[  284.847908][ T6799]  __x64_sys_bpf+0xa4/0xf0
[  284.852892][ T6799]  x64_sys_call+0x3550/0x3e20
[  284.858071][ T6799]  do_syscall_64+0xd9/0x210
[  284.862847][ T6799]  ? irqentry_exit+0x16/0x60
[  284.868027][ T6799]  ? clear_bhb_loop+0x40/0x90
[  284.872944][ T6799]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  284.879246][ T6799] RIP: 0033:0x7f0d6af8ebe9
[  284.883864][ T6799] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  284.904023][ T6799] RSP: 002b:00007f0d6bdac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  284.915275][ T6799] RAX: ffffffffffffffda RBX: 00007f0d6b1c5fa0 RCX: 00007f0d6af8ebe9
[  284.925552][ T6799] RDX: 0000000000000048 RSI: 00002000000017c0 RDI: 0000000000000005
[  284.933764][ T6799] RBP: 00007f0d6b011e19 R08: 0000000000000000 R09: 0000000000000000
[  284.942678][ T6799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  284.951169][ T6799] R13: 00007f0d6b1c6038 R14: 00007f0d6b1c5fa0 R15: 00007fffd5cbe298
[  284.959548][ T6799]  </TASK>
[  284.962702][ T6799] ---[ end trace 0000000000000000 ]---
[  285.253456][ T6802] loop3: detected capacity change from 0 to 164
[  285.426548][ T6802] Unable to read rock-ridge attributes
[  285.570592][ T5898] usb 2-1: new full-speed USB device number 4 using dummy_hcd
[  285.654454][ T6802] Unable to read rock-ridge attributes
[  285.731538][ T6806] FAULT_INJECTION: forcing a failure.
[  285.731538][ T6806] name failslab, interval 1, probability 0, space 0, times 0
[  285.747236][ T6806] CPU: 0 UID: 0 PID: 6806 Comm: syz.2.269 Tainted: G        W           syzkaller #0 PREEMPT(none) 
[  285.747409][ T6806] Tainted: [W]=WARN
[  285.747455][ T6806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  285.747529][ T6806] Call Trace:
[  285.747575][ T6806]  <TASK>
[  285.747622][ T6806]  __dump_stack+0x26/0x30
[  285.747783][ T6806]  dump_stack_lvl+0x1df/0x270
[  285.747947][ T6806]  dump_stack+0x1e/0x25
[  285.748089][ T6806]  should_fail_ex+0x7dc/0x8a0
[  285.748296][ T6806]  should_failslab+0x15b/0x200
[  285.748453][ T6806]  __kmalloc_noprof+0x182/0x1310
[  285.748614][ T6806]  ? tomoyo_encode+0x626/0xa10
[  285.748758][ T6806]  ? kmsan_get_metadata+0xfb/0x160
[  285.748905][ T6806]  ? kmsan_get_metadata+0xfb/0x160
[  285.749063][ T6806]  tomoyo_encode+0x626/0xa10
[  285.749243][ T6806]  tomoyo_mount_permission+0x3c7/0xfe0
[  285.749430][ T6806]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  285.749584][ T6806]  ? kmem_cache_free+0x121/0xec0
[  285.749772][ T6806]  ? kmsan_get_metadata+0xfb/0x160
[  285.749914][ T6806]  ? kmsan_internal_set_shadow_origin+0x79/0x110
[  285.750063][ T6806]  tomoyo_sb_mount+0x4e/0x70
[  285.750230][ T6806]  security_sb_mount+0x169/0x630
[  285.750394][ T6806]  path_mount+0x103/0x1e90
[  285.750553][ T6806]  ? user_path_at+0x32d/0x3d0
[  285.750721][ T6806]  __se_sys_mount+0x6eb/0x7d0
[  285.750879][ T6806]  ? kmsan_internal_unpoison_memory+0x14/0x20
[  285.751095][ T6806]  __x64_sys_mount+0xe4/0x150
[  285.751270][ T6806]  x64_sys_call+0x3604/0x3e20
[  285.751437][ T6806]  do_syscall_64+0xd9/0x210
[  285.751601][ T6806]  ? irqentry_exit+0x16/0x60
[  285.751745][ T6806]  ? clear_bhb_loop+0x40/0x90
[  285.751886][ T6806]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  285.752021][ T6806] RIP: 0033:0x7fabae78ebe9
[  285.752118][ T6806] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  285.752225][ T6806] RSP: 002b:00007fabac9f6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  285.752354][ T6806] RAX: ffffffffffffffda RBX: 00007fabae9c5fa0 RCX: 00007fabae78ebe9
[  285.752447][ T6806] RDX: 0000200000000040 RSI: 00002000000000c0 RDI: 0000200000000000
[  285.752538][ T6806] RBP: 00007fabac9f6090 R08: 0000000000000000 R09: 0000000000000000
[  285.752619][ T6806] R10: 0000000000200002 R11: 0000000000000246 R12: 0000000000000001
[  285.752697][ T6806] R13: 00007fabae9c6038 R14: 00007fabae9c5fa0 R15: 00007fff3df40aa8
[  285.752820][ T6806]  </TASK>
[  286.085806][ T1287] ieee802154 phy0 wpan0: encryption failed: -22
[  286.092651][ T1287] ieee802154 phy1 wpan1: encryption failed: -22
[  286.185257][ T5898] usb 2-1: config index 0 descriptor too short (expected 149, got 148)
[  286.193764][ T5898] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  286.204288][ T5898] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  286.246440][ T5898] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00
[  286.257753][ T5898] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  286.266165][ T5898] usb 2-1: SerialNumber: syz
[  286.293130][ T5898] usb 2-1: 0:2 : does not exist
[  286.551051][ T5870] usb 2-1: USB disconnect, device number 4
[  286.632185][ T5990] udevd[5990]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  286.690344][ T6815] netlink: 'syz.3.271': attribute type 6 has an invalid length.
[  286.737155][ T6815] netlink: 324 bytes leftover after parsing attributes in process `syz.3.271'.
[  286.896901][ T1611] usb 3-1: new full-speed USB device number 6 using dummy_hcd
[  287.081647][ T6816] loop3: detected capacity change from 0 to 2048
[  287.146312][ T6816] udf: Unknown parameter '@'
[  287.159566][ T1611] usb 3-1: config 36 has an invalid descriptor of length 255, skipping remainder of the config
[  287.175398][ T1611] usb 3-1: config 36 has 0 interfaces, different from the descriptor's value: 1
[  287.247801][ T1611] usb 3-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29
[  287.258041][ T1611] usb 3-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16
[  287.267489][ T1611] usb 3-1: Manufacturer: syz
[  287.273033][ T1611] usb 3-1: SerialNumber: syz
[  287.861261][ T6812] loop2: detected capacity change from 0 to 1024
[  288.045600][ T6823] netlink: 4 bytes leftover after parsing attributes in process `syz.1.273'.
[  288.493400][ T1611] usb 3-1: USB disconnect, device number 6
[  288.924386][ T6825] loop4: detected capacity change from 0 to 32768
[  289.032695][ T6825] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  289.089999][   T30] audit: type=1800 audit(1756647480.174:3): pid=6825 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.274" name="file3" dev="loop4" ino=17058 res=0 errno=0
[  289.353803][ T5823] ocfs2: Unmounting device (7,4) on (node local)
[  289.457700][ T6833] loop3: detected capacity change from 0 to 32768
[  289.637260][ T6833] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  289.717076][ T6833] tmpfs: Unknown parameter 'usrquota0
[  289.717076][ T6833] 0
[  289.717076][ T6833] 0
[  289.717076][ T6833] 0
[  289.717076][ T6833] 0
[  289.717076][ T6833] 0
[  289.717076][ T6833] 0
[  289.717076][ T6833] 0
[  289.717076][ T6833] 0
[  289.717076][ T6833] 0
[  289.717076][ T6833] 0
[  289.717076][ T6833] 0
[  289.717076][ T6833] 0
[  289.717076][ T6833] 0
[  289.717076][ T6833] 0
[  289.717076][ T6833] 0
[  289.717076][ T6833] 0
[  289.717076][ T6833] 0
[  289.717076][ T6833] 0
[  289.717076][ T6833] 0
[  289.717076][ T6833] 0
[  289.717076][ T6833] 0
[  289.717076][ T6833] 0
[  289.717076][ T6833] 0
[  289.717076][ T6833] 0
[  289.717076][ T6833] 0
[  289.717076][ T6833] 0
[  289.717076][ T6833] 0
[  289.717076][ T6833] 0
[  289.717076][ T6833] 0
[  289.717076][ T6833] 0
[  289.717076][ T6833] 0
[  289.717076][ T6833] 0
[  289.717076][ T6833] 0
[  289.717076][ T6833] 0
[  289.717076][ T6833] 0
[  289.717076][ T6833] 0
[  289.717076][ T6833] 0
[  289.717076][ T6833] 0
[  289.717076][ T6833] 0
[  289.717076][ T6833] 0
[  289.717076][ T6833] 0
[  289.717076][ T6833] 0
[  289.717076][ T6833] 0
[  289.717076][ T6833] 0
[  289.717076][ T6833] 0
[  289.717076][ T6833] 0
[  289.717076][ T6833] 0
[  289.717076][ T6833] 0
[  289.717076][ T6833] 0
[  289.717076][ T6833] 0
[  289.717076][ T6833] 0
[  289.717076][ T6833] 0
[  289.717076][ T6833] 0
[  289.717076][ T6833] 0
[  289.717076][ T6833] 0
[  289.717076][ T6833] 0
[  289.717076][ T6833] 0
[  289.717076][ T6833] 0
[  289.717076][ T6833] 0
[  289.717076][ T6833] 0
[  289.717076][ T6833] 0
[  289.717076][ T6833] 0
[  289.717076][ T6833] 0
[  289.717076][ T6833] 0
[  289.717076][ T6833] 0
[  289.717076][ T6833] 0
[  289.717076][ T6833] 0
[  289.717076][ T6833] 0
[  289.717076][ T6833] 0
[  289.717076][ T6833] 0
[  289.717076][ T6833] 0
[  289.717076][ T6833] 0
[  289.717076][ T6833] 0
[  289.717076][ T6833] 0
[  289.717076][ T6833] 0
[  289.717076][ T6833] 0
[  289.717076][ T6833] 0
[  289.717076][ T6833] 0
[  289.717076][ T6833] 0
[  290.017442][   T30] audit: type=1800 audit(1756647481.014:4): pid=6833 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.276" name="file3" dev="loop3" ino=17059 res=0 errno=0
[  290.339825][ T5818] ocfs2: Unmounting device (7,3) on (node local)
[  290.517335][ T6843] netlink: 28 bytes leftover after parsing attributes in process `syz.2.279'.
[  290.531117][ T6843] netlink: 28 bytes leftover after parsing attributes in process `syz.2.279'.
[  290.563296][ T6843] bond0: entered promiscuous mode
[  290.568710][ T6843] bond_slave_0: entered promiscuous mode
[  290.575603][ T6843] bond_slave_1: entered promiscuous mode
[  290.735115][ T6843] bond0: left promiscuous mode
[  290.740246][ T6843] bond_slave_0: left promiscuous mode
[  290.747059][ T6843] bond_slave_1: left promiscuous mode
[  291.282537][ T6847] loop0: detected capacity change from 0 to 128
[  291.326917][ T6847] EXT4-fs: Ignoring removed nobh option
[  291.433914][ T6847] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  291.555334][ T6847] ext4 filesystem being mounted at /57/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  291.713263][ T6853] loop2: detected capacity change from 0 to 764
[  291.859118][ T6853] rock: directory entry would overflow storage
[  291.859179][ T6853] rock: sig=0x4654, size=5, remaining=4
[  292.097148][ T5817] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  292.285923][ T1611] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  292.493820][ T1611] usb 2-1: Using ep0 maxpacket: 32
[  292.565177][ T1611] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[  292.643277][ T1611] usb 2-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5
[  292.652957][ T1611] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=15
[  292.661558][ T1611] usb 2-1: Product: syz
[  292.666103][ T1611] usb 2-1: Manufacturer: syz
[  292.670983][ T1611] usb 2-1: SerialNumber: syz
[  292.686778][ T6862] loop0: detected capacity change from 0 to 256
[  292.735134][ T6862] exfat: Deprecated parameter 'utf8'
[  292.740784][ T6862] exfat: Deprecated parameter 'utf8'
[  292.823724][ T6866] netlink: 4 bytes leftover after parsing attributes in process `syz.3.288'.
[  292.858175][ T1611] usb 2-1: config 0 descriptor??
[  292.876935][ T1611] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  293.037143][ T1611] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -2
[  293.045433][ T6862] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36d2a6b4, utbl_chksum : 0xe619d30d)
[  293.132662][ T1611] usb 2-1: USB disconnect, device number 5
[  293.238523][ T6862] FAULT_INJECTION: forcing a failure.
[  293.238523][ T6862] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  293.252398][ T6862] CPU: 0 UID: 0 PID: 6862 Comm: syz.0.286 Tainted: G        W           syzkaller #0 PREEMPT(none) 
[  293.252552][ T6862] Tainted: [W]=WARN
[  293.252593][ T6862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  293.252665][ T6862] Call Trace:
[  293.252722][ T6862]  <TASK>
[  293.252774][ T6862]  __dump_stack+0x26/0x30
[  293.252951][ T6862]  dump_stack_lvl+0x1df/0x270
[  293.253111][ T6862]  dump_stack+0x1e/0x25
[  293.253259][ T6862]  should_fail_ex+0x7dc/0x8a0
[  293.253461][ T6862]  should_fail+0x2a/0x40
[  293.253626][ T6862]  should_fail_usercopy+0x2e/0x40
[  293.253754][ T6862]  copy_folio_from_iter_atomic+0x646/0x3c20
[  293.253905][ T6862]  ? __pfx_exfat_get_block+0x10/0x10
[  293.254107][ T6862]  ? kmsan_get_metadata+0xfb/0x160
[  293.254268][ T6862]  generic_perform_write+0x8b1/0x1050
[  293.254509][ T6862]  __generic_file_write_iter+0x213/0x460
[  293.254699][ T6862]  exfat_file_write_iter+0x80e/0x1070
[  293.254854][ T6862]  ? kmsan_get_metadata+0xfb/0x160
[  293.255026][ T6862]  ? __pfx_exfat_file_write_iter+0x10/0x10
[  293.255178][ T6862]  aio_write+0x701/0xa10
[  293.255346][ T6862]  ? kmsan_get_metadata+0xfb/0x160
[  293.255492][ T6862]  ? kmsan_internal_set_shadow_origin+0x79/0x110
[  293.255622][ T6862]  ? kmsan_get_metadata+0xfb/0x160
[  293.255811][ T6862]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  293.255966][ T6862]  io_submit_one+0x260e/0x3450
[  293.256119][ T6862]  ? kmsan_get_metadata+0xfb/0x160
[  293.256296][ T6862]  __se_sys_io_submit+0x27c/0x6a0
[  293.256464][ T6862]  __x64_sys_io_submit+0x97/0xe0
[  293.256605][ T6862]  x64_sys_call+0x39b0/0x3e20
[  293.256775][ T6862]  do_syscall_64+0xd9/0x210
[  293.256939][ T6862]  ? irqentry_exit+0x16/0x60
[  293.257095][ T6862]  ? clear_bhb_loop+0x40/0x90
[  293.257229][ T6862]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  293.257360][ T6862] RIP: 0033:0x7f0d6af8ebe9
[  293.257457][ T6862] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  293.257564][ T6862] RSP: 002b:00007f0d6bdac038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1
[  293.257683][ T6862] RAX: ffffffffffffffda RBX: 00007f0d6b1c5fa0 RCX: 00007f0d6af8ebe9
[  293.257778][ T6862] RDX: 0000200000000540 RSI: 0000000000000048 RDI: 00007f0d6bd8b000
[  293.257864][ T6862] RBP: 00007f0d6bdac090 R08: 0000000000000000 R09: 0000000000000000
[  293.257944][ T6862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  293.258018][ T6862] R13: 00007f0d6b1c6038 R14: 00007f0d6b1c5fa0 R15: 00007fffd5cbe298
[  293.258139][ T6862]  </TASK>
[  293.581847][ T5990] udevd[5990]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  294.038514][ T1611] usb 5-1: new full-speed USB device number 10 using dummy_hcd
[  294.265888][ T1611] usb 5-1: config 36 has an invalid descriptor of length 255, skipping remainder of the config
[  294.276878][ T1611] usb 5-1: config 36 has 0 interfaces, different from the descriptor's value: 1
[  294.361209][ T1611] usb 5-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29
[  294.370956][ T1611] usb 5-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16
[  294.379801][ T1611] usb 5-1: Manufacturer: syz
[  294.384805][ T1611] usb 5-1: SerialNumber: syz
[  294.705443][ T5870] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  294.958085][ T6869] loop4: detected capacity change from 0 to 1024
[  294.995170][ T5870] usb 1-1: Using ep0 maxpacket: 32
[  295.113832][ T5870] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  295.175785][ T5880] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  295.352144][ T5870] usb 1-1: New USB device found, idVendor=05ac, idProduct=0232, bcdDevice= 0.40
[  295.361806][ T5870] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  295.375414][ T5870] usb 1-1: Product: syz
[  295.379770][ T5870] usb 1-1: Manufacturer: syz
[  295.386188][ T5870] usb 1-1: SerialNumber: syz
[  295.536346][ T5880] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  295.547433][ T5880] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  295.557200][ T5880] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  295.716287][ T5870] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input8
[  295.915880][ T5156] bcm5974 1-1:1.0: could not read from device
[  295.926938][ T5880] usb 2-1: config 0 descriptor??
[  295.996089][ T5880] pwc: Askey VC010 type 2 USB webcam detected.
[  296.126981][ T5156] bcm5974 1-1:1.0: could not read from device
[  296.481476][ T5156] bcm5974 1-1:1.0: could not read from device
[  296.525843][ T5880] pwc: recv_control_msg error -32 req 02 val 2b00
[  296.714196][ T5880] pwc: recv_control_msg error -32 req 02 val 2700
[  296.723614][ T5156] bcm5974 1-1:1.0: could not read from device
[  296.732816][ T5870] usb 1-1: USB disconnect, device number 8
[  296.895590][ T5880] pwc: recv_control_msg error -32 req 02 val 2c00
[  297.079217][ T5880] pwc: recv_control_msg error -32 req 04 val 1000
[  297.142393][ T5880] pwc: recv_control_msg error -32 req 04 val 1300
[  297.183373][ T5880] pwc: recv_control_msg error -32 req 04 val 1400
[  297.246492][ T5880] pwc: recv_control_msg error -32 req 02 val 2000
[  297.281895][ T5880] pwc: recv_control_msg error -32 req 02 val 2100
[  297.306372][ T5880] pwc: recv_control_msg error -32 req 04 val 1500
[  297.346720][ T5880] pwc: recv_control_msg error -32 req 02 val 2500
[  297.379929][ T1611] usb 5-1: USB disconnect, device number 10
[  297.388908][ T5880] pwc: recv_control_msg error -32 req 02 val 2400
[  297.603777][ T5880] pwc: recv_control_msg error -71 req 02 val 2900
[  297.636839][ T5880] pwc: recv_control_msg error -71 req 02 val 2800
[  297.654096][ T5880] pwc: recv_control_msg error -71 req 04 val 1100
[  297.703577][ T5880] pwc: recv_control_msg error -71 req 04 val 1200
[  297.756761][ T5880] pwc: Registered as video103.
[  297.765103][ T5880] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input9
[  297.837368][ T6882] netlink: 28 bytes leftover after parsing attributes in process `syz.3.294'.
[  297.846992][ T6882] netlink: 28 bytes leftover after parsing attributes in process `syz.3.294'.
[  297.867197][ T5880] usb 2-1: USB disconnect, device number 6
[  297.896172][ T6882] bond0: entered promiscuous mode
[  297.901603][ T6882] bond_slave_0: entered promiscuous mode
[  297.908592][ T6882] bond_slave_1: entered promiscuous mode
[  297.975806][ T6889] 9pnet_fd: Insufficient options for proto=fd
[  297.992238][ T6890] loop2: detected capacity change from 0 to 256
[  298.018588][ T6882] bond0: left promiscuous mode
[  298.023685][ T6882] bond_slave_0: left promiscuous mode
[  298.039356][ T6882] bond_slave_1: left promiscuous mode
[  298.385495][ T5829] Bluetooth: hci3: command 0x0406 tx timeout
[  298.391915][ T5829] Bluetooth: hci4: command 0x0405 tx timeout
[  298.399894][ T5822] Bluetooth: hci1: command 0x0406 tx timeout
[  298.406662][ T5822] Bluetooth: hci0: command 0x0406 tx timeout
[  298.412851][ T5822] Bluetooth: hci2: command 0x0406 tx timeout
[  298.545243][ T1611] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  298.803660][ T1611] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  298.815791][ T1611] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  298.826063][ T1611] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  298.839349][ T1611] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  298.853578][ T1611] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  298.954165][ T1611] usb 3-1: config 0 descriptor??
[  299.211712][ T6902] syz_tun: entered allmulticast mode
[  299.523615][ T1611] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  299.589736][ T6902] loop0: detected capacity change from 0 to 512
[  299.764893][ T6902] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.298: casefold flag without casefold feature
[  299.839926][ T6902] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.298: couldn't read orphan inode 15 (err -117)
[  299.860079][ T6902] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  300.042514][ T6910] netlink: 4 bytes leftover after parsing attributes in process `syz.3.300'.
[  300.085939][ T6911] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  300.149931][ T6899] syz_tun: left allmulticast mode
[  300.602401][ T5817] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  301.716160][ T5875] usb 5-1: new full-speed USB device number 11 using dummy_hcd
[  301.729886][ T1611] usb 3-1: USB disconnect, device number 7
[  301.915239][ T5875] usb 5-1: config 36 has an invalid descriptor of length 255, skipping remainder of the config
[  301.928139][ T5875] usb 5-1: config 36 has 0 interfaces, different from the descriptor's value: 1
[  302.074294][ T6929] loop0: detected capacity change from 0 to 512
[  302.081699][ T5875] usb 5-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29
[  302.091603][ T5875] usb 5-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16
[  302.100272][ T5875] usb 5-1: Manufacturer: syz
[  302.105407][ T5875] usb 5-1: SerialNumber: syz
[  302.209665][ T6929] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  302.307975][ T6929] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842e02c, mo2=0002]
[  302.353523][ T6929] EXT4-fs (loop0): orphan cleanup on readonly fs
[  302.361121][ T6929] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.306: bad orphan inode 267
[  302.475234][ T6929] EXT4-fs (loop0): Remounting filesystem read-only
[  302.483783][ T6929] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[  302.597133][ T6924] loop4: detected capacity change from 0 to 1024
[  302.645073][ T6929] EXT4-fs warning (device loop0): dx_probe:861: inode #2: comm syz.0.306: dx entry: limit 0 != root limit 125
[  302.657639][ T6929] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.306: Corrupt directory, running e2fsck is recommended
[  302.870416][ T6937] netlink: 28 bytes leftover after parsing attributes in process `syz.2.309'.
[  302.880238][ T6937] netlink: 28 bytes leftover after parsing attributes in process `syz.2.309'.
[  302.910405][ T6937] bond0: entered promiscuous mode
[  302.916056][ T6937] bond_slave_0: entered promiscuous mode
[  302.923774][ T6937] bond_slave_1: entered promiscuous mode
[  303.032782][ T6937] bond0: left promiscuous mode
[  303.038358][ T6937] bond_slave_0: left promiscuous mode
[  303.053822][ T6937] bond_slave_1: left promiscuous mode
[  303.115424][ T5875] usb 5-1: USB disconnect, device number 11
[  303.117200][ T6940] loop3: detected capacity change from 0 to 1024
[  303.665203][ T6929] EXT4-fs warning (device loop0): dx_probe:861: inode #2: comm syz.0.306: dx entry: limit 0 != root limit 125
[  303.677719][ T6929] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.306: Corrupt directory, running e2fsck is recommended
[  304.174998][ T1611] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  304.733749][ T6945] loop2: detected capacity change from 0 to 32768
[  304.867103][ T5817] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  304.915522][ T6951] netlink: 4 bytes leftover after parsing attributes in process `syz.4.314'.
[  305.180149][ T6959] loop0: detected capacity change from 0 to 256
[  305.209232][ T6959] exfat: Deprecated parameter 'utf8'
[  305.216088][ T6959] exfat: Deprecated parameter 'utf8'
[  305.323508][ T6959] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36d2a6b4, utbl_chksum : 0xe619d30d)
[  305.977529][ T5875] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  306.196162][ T5875] usb 3-1: Using ep0 maxpacket: 32
[  306.243491][ T5875] usb 3-1: config 0 has an invalid interface number: 85 but max is 0
[  306.252084][ T5875] usb 3-1: config 0 has no interface number 0
[  306.258611][ T5875] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  306.269953][ T5875] usb 3-1: config 0 interface 85 has no altsetting 0
[  306.453101][ T5875] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  306.463236][ T5875] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  306.487804][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  306.510857][ T5875] usb 3-1: Product: syz
[  306.515473][ T5875] usb 3-1: Manufacturer: syz
[  306.520333][ T5875] usb 3-1: SerialNumber: syz
[  306.568759][ T6964] loop1: detected capacity change from 0 to 4096
[  306.582777][ T6965] loop3: detected capacity change from 0 to 4096
[  306.701704][ T6964] NILFS (loop1): invalid segment: Inconsistency found
[  306.710643][ T6964] NILFS (loop1): trying rollback from an earlier position
[  306.746419][ T5875] usb 3-1: config 0 descriptor??
[  306.810810][ T6965] NILFS (loop3): invalid segment: Inconsistency found
[  306.818456][ T6965] NILFS (loop3): trying rollback from an earlier position
[  306.932671][ T6964] NILFS (loop1): recovery complete
[  306.990639][ T6965] NILFS (loop3): recovery complete
[  306.997213][ T6970] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  307.049116][ T6971] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  307.105576][ T5875] appletouch 3-1:0.85: Failed to read mode from device.
[  307.113487][ T5875] appletouch 3-1:0.85: probe with driver appletouch failed with error -5
[  307.197406][   T30] audit: type=1800 audit(1756647498.284:5): pid=6965 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.320" name="file1" dev="loop3" ino=12 res=0 errno=0
[  307.313146][ T6965] netlink: 'syz.3.320': attribute type 11 has an invalid length.
[  307.425847][   T30] audit: type=1800 audit(1756647498.384:6): pid=6964 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.319" name="file1" dev="loop1" ino=12 res=0 errno=0
[  307.722756][   T30] audit: type=1326 audit(1756647498.804:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6960 comm="syz.2.318" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fabae78ebe9 code=0x0
[  307.812910][ T6976] netlink: 28 bytes leftover after parsing attributes in process `syz.4.323'.
[  307.823235][ T6976] netlink: 28 bytes leftover after parsing attributes in process `syz.4.323'.
[  307.847162][ T6976] bond0: entered promiscuous mode
[  307.852393][ T6976] bond_slave_0: entered promiscuous mode
[  307.867872][ T6976] bond_slave_1: entered promiscuous mode
[  307.909238][ T6976] bond0: left promiscuous mode
[  307.914429][ T6976] bond_slave_0: left promiscuous mode
[  307.921779][ T6976] bond_slave_1: left promiscuous mode
[  307.973416][ T1611] usb 1-1: new full-speed USB device number 9 using dummy_hcd
[  308.133190][ T5875] usb 3-1: USB disconnect, device number 8
[  308.178751][ T1611] usb 1-1: config 36 has an invalid descriptor of length 255, skipping remainder of the config
[  308.189707][ T1611] usb 1-1: config 36 has 0 interfaces, different from the descriptor's value: 1
[  308.305784][ T1611] usb 1-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29
[  308.315421][ T1611] usb 1-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16
[  308.326190][ T1611] usb 1-1: Manufacturer: syz
[  308.331446][ T1611] usb 1-1: SerialNumber: syz
[  308.812238][ T6977] loop0: detected capacity change from 0 to 1024
[  309.023483][ T1611] usb 1-1: USB disconnect, device number 9
[  309.549688][ T6987] loop3: detected capacity change from 0 to 4096
[  309.696468][ T6987] NILFS error (device loop3): nilfs_bmap_lookup_at_level: broken bmap (inode number=6)
[  309.726023][ T6994] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  309.847309][ T6987] Remounting filesystem read-only
[  310.239940][ T6998] netlink: 4 bytes leftover after parsing attributes in process `syz.0.331'.
[  311.475650][ T5875] usb 3-1: new full-speed USB device number 9 using dummy_hcd
[  311.601379][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  311.633352][ T7015] netlink: 28 bytes leftover after parsing attributes in process `syz.0.338'.
[  311.643118][ T7015] netlink: 28 bytes leftover after parsing attributes in process `syz.0.338'.
[  311.677304][ T7015] bond0: entered promiscuous mode
[  311.685643][ T7015] bond_slave_0: entered promiscuous mode
[  311.688210][ T5875] usb 3-1: device descriptor read/64, error -71
[  311.694942][ T7015] bond_slave_1: entered promiscuous mode
[  311.776503][ T7015] bond0: left promiscuous mode
[  311.781606][ T7015] bond_slave_0: left promiscuous mode
[  311.789058][ T7015] bond_slave_1: left promiscuous mode
[  311.945160][ T5875] usb 3-1: new full-speed USB device number 10 using dummy_hcd
[  312.180112][ T5875] usb 3-1: device descriptor read/64, error -71
[  312.314913][ T5875] usb usb3-port1: attempt power cycle
[  312.720846][ T5875] usb 3-1: new full-speed USB device number 11 using dummy_hcd
[  312.801706][ T7020] loop4: detected capacity change from 0 to 32768
[  312.819809][ T5875] usb 3-1: device descriptor read/8, error -71
[  312.880293][ T7020] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  312.946655][ T7024] loop3: detected capacity change from 0 to 1764
[  313.096607][ T5875] usb 3-1: new full-speed USB device number 12 using dummy_hcd
[  313.159243][ T5875] usb 3-1: device descriptor read/8, error -71
[  313.205758][ T7020] XFS (loop4): Ending clean mount
[  313.323323][ T5875] usb usb3-port1: unable to enumerate USB device
[  313.343588][ T5823] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  313.365465][ T1963] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  313.469728][ T7038] netlink: ct family unspecified
[  313.475481][ T7038] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  313.537568][ T1963] usb 4-1: Using ep0 maxpacket: 32
[  313.568746][ T1963] usb 4-1: config 0 has an invalid interface number: 89 but max is 0
[  313.577897][ T1963] usb 4-1: config 0 has no interface number 0
[  313.584197][ T1963] usb 4-1: config 0 interface 89 has no altsetting 0
[  313.596329][ T7038] loop1: detected capacity change from 0 to 8
[  313.646939][ T7038] SQUASHFS error: lzo decompression failed, data probably corrupt
[  313.656128][ T7038] SQUASHFS error: Failed to read block 0x82: -5
[  313.662629][ T7038] SQUASHFS error: Unable to read metadata cache entry [80]
[  313.670374][ T7038] SQUASHFS error: Unable to read inode 0x11f
[  313.712083][ T1963] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e
[  313.722050][ T1963] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  313.730562][ T1963] usb 4-1: Product: syz
[  313.735131][ T1963] usb 4-1: Manufacturer: syz
[  313.739906][ T1963] usb 4-1: SerialNumber: syz
[  313.783887][ T1963] usb 4-1: config 0 descriptor??
[  313.907754][ T1963] em28xx 4-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[  313.917885][ T1963] em28xx 4-1:0.89: Video interface 89 found: bulk
[  313.997920][ T7040] syz_tun: entered allmulticast mode
[  314.198581][ T7039] syz_tun: left allmulticast mode
[  314.456439][ T1963] em28xx 4-1:0.89: unknown em28xx chip ID (0)
[  314.543970][ T7043] loop1: detected capacity change from 0 to 256
[  314.630145][ T7043] vfat: Bad value for 'shortname'
[  315.128995][ T1963] em28xx 4-1:0.89: read from i2c device at 0xa0 failed with unknown error (status=64)
[  315.140526][ T1963] em28xx 4-1:0.89: board has no eeprom
[  315.729837][ T7052] netlink: 1284 bytes leftover after parsing attributes in process `syz.0.349'.
[  315.739338][ T7052] openvswitch: netlink: Missing key (keys=40, expected=80)
[  315.774182][ T7056] sch_tbf: burst 0 is lower than device macvlan1 mtu (1514) !
[  316.030478][ T7049] loop4: detected capacity change from 0 to 4096
[  316.078742][ T7049] ntfs3: Unknown parameter 'nosparse'
[  316.294838][ T1963] em28xx 4-1:0.89: Identified as Terratec Grabby (card=67)
[  316.302605][ T1963] em28xx 4-1:0.89: analog set to bulk mode.
[  316.315687][ T5875] em28xx 4-1:0.89: Registering V4L2 extension
[  316.716197][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  316.726308][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  316.891175][ T1611] usb 4-1: USB disconnect, device number 8
[  316.899646][ T1611] em28xx 4-1:0.89: Disconnecting em28xx
[  317.210731][ T7064] netlink: 28 bytes leftover after parsing attributes in process `syz.1.352'.
[  317.221078][ T7064] netlink: 28 bytes leftover after parsing attributes in process `syz.1.352'.
[  317.250383][ T7064] bond0: entered promiscuous mode
[  317.257151][ T7064] bond_slave_0: entered promiscuous mode
[  317.266481][ T7064] bond_slave_1: entered promiscuous mode
[  317.507304][ T7066] loop4: detected capacity change from 0 to 32768
[  317.525361][ T5875] em28xx 4-1:0.89: Config register raw data: 0xffffffed
[  317.532539][ T5875] em28xx 4-1:0.89: AC97 chip type couldn't be determined
[  317.540382][ T5875] em28xx 4-1:0.89: No AC97 audio processor
[  317.561142][ T7064] bond0: left promiscuous mode
[  317.567433][ T7064] bond_slave_0: left promiscuous mode
[  317.573948][ T7064] bond_slave_1: left promiscuous mode
[  317.606305][ T5875] usb 4-1: Decoder not found
[  317.611106][ T5875] em28xx 4-1:0.89: failed to create media graph
[  317.617890][ T5875] em28xx 4-1:0.89: V4L2 device video103 deregistered
[  317.653355][ T5875] em28xx 4-1:0.89: Registering snapshot button...
[  317.662922][ T5875] input: em28xx snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.89/input/input11
[  317.724852][ T7066] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  317.765772][ T5875] em28xx 4-1:0.89: Remote control support is not available for this card.
[  317.801210][ T1611] em28xx 4-1:0.89: Closing input extension
[  317.808218][ T1611] em28xx 4-1:0.89: Deregistering snapshot button
[  317.914125][ T7075] syz_tun: entered allmulticast mode
[  317.962426][ T5823] ocfs2: Unmounting device (7,4) on (node local)
[  317.964398][ T1611] em28xx 4-1:0.89: Freeing device
[  318.097662][ T7075] loop0: detected capacity change from 0 to 512
[  318.282763][ T7075] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.357: casefold flag without casefold feature
[  318.411325][ T7075] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.357: couldn't read orphan inode 15 (err -117)
[  318.557270][ T7075] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  318.695792][ T7072] loop3: detected capacity change from 0 to 4096
[  318.781678][ T7074] syz_tun: left allmulticast mode
[  318.966111][ T5875] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  319.169681][ T5875] usb 2-1: Using ep0 maxpacket: 16
[  319.179043][ T5817] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  319.197271][ T7088] FAULT_INJECTION: forcing a failure.
[  319.197271][ T7088] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  319.206158][ T5875] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  319.211085][ T7088] CPU: 1 UID: 0 PID: 7088 Comm: syz.3.355 Tainted: G        W           syzkaller #0 PREEMPT(none) 
[  319.211253][ T7088] Tainted: [W]=WARN
[  319.211300][ T7088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  319.211385][ T7088] Call Trace:
[  319.211443][ T7088]  <TASK>
[  319.211491][ T7088]  __dump_stack+0x26/0x30
[  319.211654][ T7088]  dump_stack_lvl+0x1df/0x270
[  319.211818][ T7088]  dump_stack+0x1e/0x25
[  319.211954][ T7088]  should_fail_ex+0x7dc/0x8a0
[  319.212158][ T7088]  should_fail+0x2a/0x40
[  319.212318][ T7088]  should_fail_usercopy+0x2e/0x40
[  319.212452][ T7088]  _copy_from_user+0x33/0x100
[  319.212588][ T7088]  vga_arb_write+0xd1/0x4670
[  319.212728][ T7088]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  319.212890][ T7088]  ? kmsan_get_metadata+0xfb/0x160
[  319.213033][ T7088]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  319.213194][ T7088]  ? __pfx_vga_arb_write+0x10/0x10
[  319.213322][ T7088]  vfs_write+0x48a/0x15d0
[  319.213471][ T7088]  ? stack_depot_save_flags+0x35/0x7b0
[  319.213641][ T7088]  ? __fget_files+0x3b9/0x4a0
[  319.213791][ T7088]  ? kmsan_get_metadata+0xfb/0x160
[  319.213933][ T7088]  ? kmsan_internal_set_shadow_origin+0x79/0x110
[  319.214082][ T7088]  ? kmsan_get_metadata+0xfb/0x160
[  319.214243][ T7088]  __x64_sys_write+0x1fb/0x4d0
[  319.214413][ T7088]  x64_sys_call+0x3014/0x3e20
[  319.214585][ T7088]  do_syscall_64+0xd9/0x210
[  319.214746][ T7088]  ? irqentry_exit+0x16/0x60
[  319.214893][ T7088]  ? clear_bhb_loop+0x40/0x90
[  319.215030][ T7088]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  319.215177][ T7088] RIP: 0033:0x7f861bb8ebe9
[  319.215273][ T7088] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  319.215380][ T7088] RSP: 002b:00007f8619df6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  319.215500][ T7088] RAX: ffffffffffffffda RBX: 00007f861bdc6090 RCX: 00007f861bb8ebe9
[  319.215592][ T7088] RDX: 000000000000000d RSI: 0000200000000080 RDI: 0000000000000004
[  319.215672][ T7088] RBP: 00007f8619df6090 R08: 0000000000000000 R09: 0000000000000000
[  319.215750][ T7088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  319.215826][ T7088] R13: 00007f861bdc6128 R14: 00007f861bdc6090 R15: 00007ffe5e24cbe8
[  319.215946][ T7088]  </TASK>
[  319.463702][ T5875] usb 2-1: config 0 has no interface number 0
[  319.548231][ T7091] loop2: detected capacity change from 0 to 64
[  319.769378][ T7091] overlayfs: upper fs needs to support d_type.
[  319.828152][ T7091] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  319.837928][ T7091] overlayfs: failed to set xattr on upper
[  319.843894][ T7091] overlayfs: ...falling back to redirect_dir=nofollow.
[  319.851648][ T7091] overlayfs: ...falling back to index=off.
[  319.857747][ T7091] overlayfs: ...falling back to uuid=null.
[  319.911847][ T7087] loop4: detected capacity change from 0 to 4096
[  319.940313][ T5875] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  319.950195][ T5875] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  319.958651][ T5875] usb 2-1: Product: syz
[  319.962996][ T5875] usb 2-1: Manufacturer: syz
[  319.968008][ T5875] usb 2-1: SerialNumber: syz
[  320.030441][ T7087] NILFS (loop4): mounting unchecked fs
[  320.051843][ T5875] usb 2-1: config 0 descriptor??
[  320.091711][ T7094] loop0: detected capacity change from 0 to 512
[  320.105696][ T7087] NILFS (loop4): invalid segment: Checksum error in segment payload
[  320.114118][ T7087] NILFS (loop4): trying rollback from an earlier position
[  320.142215][ T7094] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  320.174320][ T5875] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  320.296511][ T7087] NILFS (loop4): recovery cancelled because norecovery option was specified for a read/write mount
[  320.415092][ T7094] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002]
[  320.466196][ T7094] System zones: 0-2, 18-18, 34-34
[  320.574033][ T7094] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  320.587344][ T7094] ext4 filesystem being mounted at /74/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  320.827102][ T7099] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters
[  321.382024][ T5898] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  321.466197][ T5817] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  321.540759][ T5875] gspca_spca1528: reg_w err -71
[  321.546563][ T5875] spca1528 2-1:0.1: probe with driver spca1528 failed with error -71
[  321.575883][ T7101] loop3: detected capacity change from 0 to 32768
[  321.705026][ T5898] usb 5-1: Using ep0 maxpacket: 32
[  321.736501][ T5875] usb 2-1: USB disconnect, device number 8
[  321.773347][ T5898] usb 5-1: config 0 has an invalid interface number: 51 but max is 0
[  321.783806][ T5898] usb 5-1: config 0 has no interface number 0
[  321.837651][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  321.881957][ T7101] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  321.924916][ T1963] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  321.969187][ T5898] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  321.979351][ T5898] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  321.989535][ T5898] usb 5-1: Product: syz
[  321.993967][ T5898] usb 5-1: Manufacturer: syz
[  321.999575][ T5898] usb 5-1: SerialNumber: syz
[  322.131311][ T5818] ocfs2: Unmounting device (7,3) on (node local)
[  322.177592][ T1963] usb 3-1: Using ep0 maxpacket: 32
[  322.203547][ T1963] usb 3-1: config 2 has an invalid interface number: 157 but max is 0
[  322.212762][ T1963] usb 3-1: config 2 has no interface number 0
[  322.251764][ T5898] usb 5-1: config 0 descriptor??
[  322.328006][ T1963] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=a4.1b
[  322.337724][ T1963] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  322.346361][ T1963] usb 3-1: Product: syz
[  322.350836][ T1963] usb 3-1: Manufacturer: syz
[  322.355902][ T1963] usb 3-1: SerialNumber: syz
[  322.560198][ T1963] imon 3-1:2.157: unable to register, err -19
[  322.725856][ T5898] usb 5-1: can't set config #0, error -71
[  322.760729][ T1963] usb 3-1: USB disconnect, device number 13
[  322.879248][ T5898] usb 5-1: USB disconnect, device number 12
[  323.986600][ T7130] syz_tun: entered allmulticast mode
[  324.029405][ T7124] binder: 7123:7124 ioctl c018620c 200000000040 returned -22
[  324.216933][ T7130] loop2: detected capacity change from 0 to 512
[  324.635244][ T7130] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.371: casefold flag without casefold feature
[  324.771557][ T7130] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.371: couldn't read orphan inode 15 (err -117)
[  324.943591][ T7130] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  325.305078][ T1611] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  325.411088][ T7125] syz_tun: left allmulticast mode
[  325.484976][ T1611] usb 4-1: device descriptor read/64, error -71
[  325.754963][ T1611] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  325.831510][ T7141] FAULT_INJECTION: forcing a failure.
[  325.831510][ T7141] name failslab, interval 1, probability 0, space 0, times 0
[  325.844931][ T7141] CPU: 0 UID: 0 PID: 7141 Comm: syz.0.375 Tainted: G        W           syzkaller #0 PREEMPT(none) 
[  325.845088][ T7141] Tainted: [W]=WARN
[  325.845138][ T7141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  325.845215][ T7141] Call Trace:
[  325.845262][ T7141]  <TASK>
[  325.845308][ T7141]  __dump_stack+0x26/0x30
[  325.845470][ T7141]  dump_stack_lvl+0x1df/0x270
[  325.845643][ T7141]  dump_stack+0x1e/0x25
[  325.845784][ T7141]  should_fail_ex+0x7dc/0x8a0
[  325.845977][ T7141]  should_failslab+0x15b/0x200
[  325.846133][ T7141]  __kmalloc_cache_noprof+0xcb/0xed0
[  325.846299][ T7141]  ? snd_pcm_oss_change_params_locked+0x10b/0x6690
[  325.846490][ T7141]  ? kmsan_internal_set_shadow_origin+0x79/0x110
[  325.846624][ T7141]  ? kmsan_get_metadata+0xfb/0x160
[  325.846787][ T7141]  snd_pcm_oss_change_params_locked+0x10b/0x6690
[  325.846954][ T7141]  ? kmsan_internal_set_shadow_origin+0x79/0x110
[  325.847096][ T7141]  ? kmsan_internal_unpoison_memory+0x14/0x20
[  325.847291][ T7141]  ? _raw_spin_unlock_irq+0x31/0x50
[  325.847427][ T7141]  ? snd_pcm_drain+0x132a/0x13b0
[  325.847596][ T7141]  ? __pfx_default_wake_function+0x10/0x10
[  325.847752][ T7141]  ? kmsan_get_metadata+0xfb/0x160
[  325.847896][ T7141]  ? kmsan_internal_set_shadow_origin+0x79/0x110
[  325.848045][ T7141]  ? kmsan_internal_unpoison_memory+0x14/0x20
[  325.848254][ T7141]  snd_pcm_oss_make_ready+0x273/0x580
[  325.848443][ T7141]  snd_pcm_oss_sync+0x2be/0x1660
[  325.848650][ T7141]  snd_pcm_oss_ioctl+0x11f3/0x1d60
[  325.848812][ T7141]  ? __pfx_snd_pcm_oss_ioctl+0x10/0x10
[  325.848975][ T7141]  ? __pfx_snd_pcm_oss_ioctl+0x10/0x10
[  325.849138][ T7141]  __se_sys_ioctl+0x23c/0x400
[  325.849292][ T7141]  __x64_sys_ioctl+0x97/0xe0
[  325.849436][ T7141]  x64_sys_call+0x1cbc/0x3e20
[  325.849611][ T7141]  do_syscall_64+0xd9/0x210
[  325.849775][ T7141]  ? irqentry_exit+0x16/0x60
[  325.849919][ T7141]  ? clear_bhb_loop+0x40/0x90
[  325.850055][ T7141]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  325.850189][ T7141] RIP: 0033:0x7f0d6af8ebe9
[  325.850294][ T7141] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  325.850409][ T7141] RSP: 002b:00007f0d6bd8b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  325.850542][ T7141] RAX: ffffffffffffffda RBX: 00007f0d6b1c6090 RCX: 00007f0d6af8ebe9
[  325.850639][ T7141] RDX: 0000000000000000 RSI: 0000000000005001 RDI: 0000000000000005
[  325.850717][ T7141] RBP: 00007f0d6bd8b090 R08: 0000000000000000 R09: 0000000000000000
[  325.850800][ T7141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  325.850877][ T7141] R13: 00007f0d6b1c6128 R14: 00007f0d6b1c6090 R15: 00007fffd5cbe298
[  325.851004][ T7141]  </TASK>
[  326.022651][ T1611] usb 4-1: device descriptor read/64, error -71
[  326.253786][ T5825] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  326.569619][ T1611] usb usb4-port1: attempt power cycle
[  327.045375][ T1611] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  327.265735][ T1611] usb 4-1: device not accepting address 11, error -71
[  327.615202][ T5880] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  327.749474][ T7167] loop0: detected capacity change from 0 to 256
[  327.802913][ T7167] exfat: Deprecated parameter 'utf8'
[  327.808853][ T7167] exfat: Deprecated parameter 'utf8'
[  327.900036][ T5880] usb 3-1: Using ep0 maxpacket: 32
[  327.915556][ T5880] usb 3-1: config 0 has an invalid interface number: 184 but max is 0
[  327.924220][ T5880] usb 3-1: config 0 has no interface number 0
[  327.935536][ T5880] usb 3-1: config 0 interface 184 has no altsetting 0
[  327.993364][ T5880] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  328.003006][ T5880] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  328.011491][ T5880] usb 3-1: Product: syz
[  328.016056][ T5880] usb 3-1: Manufacturer: syz
[  328.020835][ T5880] usb 3-1: SerialNumber: syz
[  328.079656][ T7167] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36d2a6b4, utbl_chksum : 0xe619d30d)
[  328.091962][ T5880] usb 3-1: config 0 descriptor??
[  328.148307][ T5880] smsc75xx v1.0.0
[  328.152238][ T5880] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[  328.163471][ T5880] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -22
[  328.243814][ T7168] loop4: detected capacity change from 0 to 512
[  328.317494][ T7159] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  328.327724][ T7159] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  328.409272][ T7172] syz_tun: entered allmulticast mode
[  328.468353][ T7172] loop3: detected capacity change from 0 to 512
[  328.476836][ T7168] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  328.490156][ T7168] ext4 filesystem being mounted at /72/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  328.602671][ T7172] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.388: casefold flag without casefold feature
[  328.730928][ T7172] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.388: couldn't read orphan inode 15 (err -117)
[  328.787259][ T7172] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  328.992304][ T7171] syz_tun: left allmulticast mode
[  329.159406][ T5823] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  329.575296][ T5818] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  329.678539][ T7178] loop1: detected capacity change from 0 to 32768
[  329.756908][ T7178] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,recovery_pass_last=snapshots_read,nojournal_transaction_names,noexcl,read_only,no_data_io
[  329.757053][ T7178]   allowing incompatible features above 0.0: (unknown version)
[  329.757139][ T7178]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  329.807918][ T7178] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0
[  329.817504][ T7178] bcachefs (loop1): invalid journal entry, version=1.7: mi_btree_bitmap type=clock in superblock: bad rw, fixing
[  329.830569][ T7178] bcachefs (loop1): recovering from clean shutdown, journal seq 10
[  329.840050][ T7178] bcachefs (loop1): Version upgrade required:
[  329.840050][ T7178] Version upgrade from 0.11: inode_btree_change to 1.7: mi_btree_bitmap incomplete
[  329.840050][ T7178] Doing incompatible version upgrade from 0.11: inode_btree_change to 1.28: inode_has_case_insensitive
[  329.840050][ T7178]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance
[  330.010088][ T7178] bcachefs (loop1): btree node read error at btree extents level 0/0
[  330.010186][ T7178]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c6c25c03258c59c5 written 16 min_key 0:3064397824:0 durability: 1 ptr: 0:27:0 gen 0
[  330.010289][ T7178]   loop1 node offset 0/16: incorrect min_key: got POS_MIN should be 0:3064397824:0
[  330.010370][ T7178]   loop1 btree validate error
[  330.010432][ T7178]   flagging btree extents lost data
[  330.010501][ T7178]   running recovery pass check_topology (2), currently at recovery_pass_empty (0)
[  330.010579][ T7178]   running recovery pass check_topology (2), currently at recovery_pass_empty (0)
[  330.010662][ T7178]   running recovery pass scan_for_btree_nodes (1), currently at recovery_pass_empty (0)
[  330.010740][ T7178]   ret btree_node_read_err_bad_node
[  330.097104][ T7178] bcachefs (loop1): error reading btree root btree=extents level=0: btree_node_read_error, fixing
[  330.127804][ T7178] bcachefs (loop1): btree node read error at btree dirents level 0/0
[  330.127925][ T7178]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0
[  330.128031][ T7178]   loop1 node offset 16/24: btree node data missing: expected 24 sectors, found 16
[  330.128113][ T7178]   loop1 btree validate error
[  330.128174][ T7178]   repair success (rewriting node)
[  330.225194][ T7178] bcachefs (loop1): btree node read error at btree alloc level 0/0
[  330.225293][ T7178]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0
[  330.225400][ T7178]   loop1 node offset 0/24 bset u64s 0: invalid bkey format: field 2 too large: 4294967295 + 3328 > 4294967295
[  330.225495][ T7178]   u64s 3 fields 64:0, 64:0, 32:3328, 0:0, 0:0, 0:0
[  330.225567][ T7178]   loop1 btree validate error
[  330.225631][ T7178]   flagging btree alloc lost data
[  330.225692][ T7178]   ret btree_node_read_err_bad_node
[  330.289273][ T7178] bcachefs (loop1): error reading btree root btree=alloc level=0: btree_node_read_error, fixing
[  330.347418][ T7189] netlink: 28 bytes leftover after parsing attributes in process `syz.3.392'.
[  330.427352][ T7178] bcachefs (loop1): btree node read error at btree backpointers level 0/0
[  330.427457][ T7178]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 4a8b0fa43a9980a6 written 24 min_key POS_MIN durability: 1 ptr: 0:37:0 gen 0
[  330.427563][ T7178]   loop1 node offset 0/24 bset u64s 0: checksum error, type none: got  should be 
[  330.427643][ T7178]   loop1 btree validate error
[  330.427727][ T7178]   flagging btree backpointers lost data
[  330.427794][ T7178]   ret fsck_errors_not_fixed
[  330.477467][ T7178] bcachefs (loop1): error reading btree root btree=backpointers level=0: btree_node_read_error, fixing
[  330.522100][ T1611] usb 3-1: USB disconnect, device number 14
[  330.538497][ T7178] bcachefs (loop1): check_topology...
[  330.538883][ T7178] bcachefs (loop1): btree root extents unreadable, must recover from scan
[  330.556018][ T7178] bcachefs (loop1): running recovery pass scan_for_btree_nodes (1), currently at check_topology (2) - rewinding
[  330.568458][ T7178] bcachefs (loop1): bch2_check_root(): error restart_recovery
[  330.578955][ T7178] bcachefs (loop1): scan_for_btree_nodes...
[  330.978994][ T7193] netlink: 8 bytes leftover after parsing attributes in process `syz.2.394'.
[  330.995092][ T7193] veth0_to_bond: entered allmulticast mode
[  331.264993][ T7178] bcachefs (loop1): btree node scan found 1 nodes after overwrites
[  331.336256][ T7178]  done
[  331.339198][ T7178] bcachefs (loop1): check_topology...
[  331.339579][ T7178] bcachefs (loop1): btree root extents unreadable, must recover from scan
[  331.355447][ T7178] bcachefs (loop1): bch2_get_scanned_nodes(): recovery btree=extents level=0 POS_MIN - SPOS_MAX
[  331.366957][ T7178] bcachefs (loop1): bch2_get_scanned_nodes(): recovering u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c6c25c03258c59c5 written 16 min_key POS_MIN durability: 1 ptr: 0:27:0 gen 0
[  331.456244][ T7178]  done
[  331.459192][ T7178] bcachefs (loop1): accounting_read... done
[  331.478078][ T7178] bcachefs (loop1): alloc_read... done
[  331.503054][ T7178] bcachefs (loop1): snapshots_read... done
[  331.519596][ T7178] bcachefs (loop1): Fixed errors, running fsck a second time to verify fs is clean
[  331.533156][ T1611] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  331.551756][ T7178] bcachefs (loop1): done starting filesystem
[  331.696628][ T5813] bcachefs (loop1): shutting down
[  331.762264][ T1611] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  331.768806][ T7201] netlink: 4 bytes leftover after parsing attributes in process `syz.2.398'.
[  331.773383][ T1611] usb 4-1: config 0 has no interfaces?
[  331.854156][ T5813] bcachefs (loop1): shutdown complete
[  331.929086][ T1611] usb 4-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  331.938917][ T1611] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  331.939047][ T1611] usb 4-1: Product: syz
[  331.951486][ T1611] usb 4-1: Manufacturer: syz
[  331.956477][ T1611] usb 4-1: SerialNumber: syz
[  331.972930][ T7205] loop0: detected capacity change from 0 to 512
[  332.057905][ T1611] usb 4-1: config 0 descriptor??
[  332.192475][ T7205] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  332.192851][ T7205] ext4 filesystem being mounted at /84/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  332.429555][ T7210] syz_tun: entered allmulticast mode
[  332.632590][ T7210] loop2: detected capacity change from 0 to 512
[  332.763384][ T7210] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.402: casefold flag without casefold feature
[  332.764353][ T7210] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.402: couldn't read orphan inode 15 (err -117)
[  332.769640][ T7210] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  332.920423][ T7209] syz_tun: left allmulticast mode
[  333.343016][ T5825] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  333.712859][ T7216] kernel read not supported for file /file1 (pid: 7216 comm: syz.2.403)
[  333.728033][   T30] audit: type=1800 audit(1756647524.814:8): pid=7216 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.403" name="file1" dev="mqueue" ino=14216 res=0 errno=0
[  334.292273][ T5817] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  334.395308][ T1611] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  334.502430][ T5898] usb 4-1: USB disconnect, device number 13
[  334.605492][ T1611] usb 5-1: Using ep0 maxpacket: 32
[  334.665235][ T1611] usb 5-1: config 0 has an invalid interface number: 184 but max is 0
[  334.673870][ T1611] usb 5-1: config 0 has no interface number 0
[  334.680403][ T1611] usb 5-1: config 0 interface 184 has no altsetting 0
[  334.796832][ T1611] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  334.806392][ T1611] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  334.814858][ T1611] usb 5-1: Product: syz
[  334.819204][ T1611] usb 5-1: Manufacturer: syz
[  334.823976][ T1611] usb 5-1: SerialNumber: syz
[  334.912299][ T7227] netlink: 16 bytes leftover after parsing attributes in process `syz.0.405'.
[  334.923617][ T7226] loop3: detected capacity change from 0 to 512
[  334.927385][ T1611] usb 5-1: config 0 descriptor??
[  334.990646][ T1611] smsc75xx v1.0.0
[  335.001890][ T1611] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[  335.015120][ T1611] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -22
[  335.044017][ T7226] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  335.058213][ T7226] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  335.156659][ T7221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  335.167324][ T7221] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  335.202803][ T7226] EXT4-fs (loop3): 1 truncate cleaned up
[  335.210736][ T7226] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  335.495067][ T5898] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  335.684913][ T5898] usb 3-1: Using ep0 maxpacket: 32
[  335.725921][ T5898] usb 3-1: config 1 interface 0 altsetting 5 bulk endpoint 0x82 has invalid maxpacket 1024
[  335.736507][ T5898] usb 3-1: config 1 interface 0 altsetting 5 bulk endpoint 0x3 has invalid maxpacket 1024
[  335.746864][ T5898] usb 3-1: config 1 interface 0 altsetting 5 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  335.760788][ T5898] usb 3-1: config 1 interface 0 has no altsetting 0
[  335.963931][ T7237] loop0: detected capacity change from 0 to 164
[  336.008102][ T5818] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  336.096274][ T7237] Unable to read rock-ridge attributes
[  336.188315][ T7237] Unable to read rock-ridge attributes
[  336.482862][ T7235] loop1: detected capacity change from 0 to 32768
[  336.496956][ T7235] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.400 (7235)
[  336.523132][ T7235] BTRFS info (device loop1 state S): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  336.537432][ T7235] BTRFS info (device loop1 state S): using crc32c (crc32c-lib) checksum algorithm
[  336.555511][ T5898] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  336.564999][ T5898] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  336.573297][ T5898] usb 3-1: Product: ␉
[  336.577891][ T5898] usb 3-1: Manufacturer: 䉜௼괋᠃戣љ䟮侎솉촻㹳Ͷѣ歱儿㊔鯒㏎廜뗈鶤裄醆Ќ瀅枾鸺尫闷怇脶೙蔺⌉ؖ⛲㏐䍻釘힑慗릭慉ꛞ厥ჱ싈脃뤉ῒꀋㆰ퓻鈝
[  336.598661][ T5898] usb 3-1: SerialNumber: 퓊䱁⓳㡮跏楄䮬컵⁽邁痡Ⓟ㲯ꭡ퇨烦ꋌ۟一擎풮痿↼木畡摍䊑ジ人ᠾ镾㽢歓痣ᑻ쑛荺䦊擒᧋솼犯圐䒳ꦱ툐▟ᢸ왱ꓜ㫕韎蓸ᗕꌨ
[  336.706167][ T7230] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  336.716954][ T7230] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  336.820031][ T4057] BTRFS warning (device loop1 state S): checksum verify failed on logical 1052672 mirror 1 wanted 0x37e030f7 found 0x5a2abccf level 0, ignored
[  336.905188][ T4057] BTRFS warning (device loop1 state S): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0x6607e867 level 0, ignored
[  336.957146][ T4057] BTRFS warning (device loop1 state S): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0x28b693f7 level 0, ignored
[  336.973462][ T7235] BTRFS error (device loop1 state CS): failed to load root free space
[  337.052724][ T1873] BTRFS warning (device loop1 state CS): checksum verify failed on logical 5255168 mirror 1 wanted 0x9df47653 found 0x9d251998 level 1, ignored
[  337.069953][ T7235] BTRFS critical (device loop1 state CS): unable to find chunk map for logical 26884158816018432 length 4096
[  337.082670][ T7235] BTRFS critical (device loop1 state CS): unable to find chunk map for logical 26884158816018432 length 4096
[  337.095151][ T7235] BTRFS warning (device loop1 state CS): failed to read fs tree: -5
[  337.215416][ T7235] BTRFS error (device loop1 state CS): open_ctree failed: -5
[  337.235387][ T1611] usb 5-1: USB disconnect, device number 13
[  337.641941][ T7261] capability: warning: `syz.0.410' uses 32-bit capabilities (legacy support in use)
[  337.695768][ T1963] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  337.916926][ T1963] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  337.929416][ T1963] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  337.939818][ T1963] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  337.949399][ T1963] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  338.169336][ T1963] usb 4-1: config 0 descriptor??
[  338.525514][ T7268] syz_tun: entered allmulticast mode
[  338.635494][ T5898] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -71
[  338.745818][ T1963] cp2112 0003:10C4:EA90.0009: unknown main item tag 0x0
[  338.786381][ T5898] usb 3-1: USB disconnect, device number 15
[  338.808520][ T7266] syz_tun: left allmulticast mode
[  338.916525][ T1963] cp2112 0003:10C4:EA90.0009: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0
[  339.002011][ T1963] cp2112 0003:10C4:EA90.0009: Part Number: 0x82 Device Version: 0xFE
[  339.443034][ T7253] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  339.453777][ T7253] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  339.531320][ T7280] openvswitch: netlink: Port 808464432 exceeds max allowable 65535
[  339.698089][ T7253] support for cryptoloop has been removed.  Use dm-crypt instead.
[  339.783638][ T1963] cp2112 0003:10C4:EA90.0009: error setting SMBus config
[  339.830931][ T1963] cp2112 0003:10C4:EA90.0009: probe with driver cp2112 failed with error -71
[  339.947386][ T7285] comedi comedi0: multiq3: I/O port conflict (0x8,16)
[  339.957124][ T1963] usb 4-1: USB disconnect, device number 14
[  340.399726][ T7282] overlayfs: missing 'lowerdir'
[  340.772663][ T7294] netlink: 16 bytes leftover after parsing attributes in process `syz.4.422'.
[  340.817415][ T1611] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  340.871075][ T7294] batadv0: entered promiscuous mode
[  340.883472][ T7294] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  340.895942][ T7294] batadv0: left promiscuous mode
[  341.027229][ T1611] usb 3-1: Using ep0 maxpacket: 32
[  341.095255][ T1611] usb 3-1: config 0 has an invalid interface number: 184 but max is 0
[  341.103669][ T1611] usb 3-1: config 0 has no interface number 0
[  341.110392][ T1611] usb 3-1: config 0 interface 184 has no altsetting 0
[  341.174710][ T1611] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  341.184014][ T1611] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  341.192774][ T1611] usb 3-1: Product: syz
[  341.197228][ T1611] usb 3-1: Manufacturer: syz
[  341.202038][ T1611] usb 3-1: SerialNumber: syz
[  341.219980][ T1611] usb 3-1: config 0 descriptor??
[  341.288536][ T1611] smsc75xx v1.0.0
[  341.292355][ T1611] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[  341.303489][ T1611] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -22
[  341.453803][ T7292] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  341.464103][ T7292] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  341.946733][ T7305] syz_tun: entered allmulticast mode
[  342.174164][ T7305] loop3: detected capacity change from 0 to 512
[  342.300766][ T7305] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.428: casefold flag without casefold feature
[  342.386705][ T7305] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.428: couldn't read orphan inode 15 (err -117)
[  342.465276][ T7305] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  342.606473][ T7303] syz_tun: left allmulticast mode
[  342.686364][ T7304] loop4: detected capacity change from 0 to 40427
[  342.697067][ T7304] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  342.705183][ T7304] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  342.732631][ T7304] F2FS-fs (loop4): invalid crc value
[  343.050601][ T7312] netlink: 8 bytes leftover after parsing attributes in process `syz.0.430'.
[  343.069455][ T7304] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  343.151019][ T7304] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  343.153555][ T5818] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  343.158471][ T7304] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  343.235896][ T5171] udevd[5171]: worker [5990] terminated by signal 33 (Unknown signal 33)
[  343.255422][ T5171] udevd[5171]: worker [5990] failed while handling '/devices/virtual/block/loop3'
[  343.644070][ T1611] usb 3-1: USB disconnect, device number 16
[  344.287372][ T7330] loop2: detected capacity change from 0 to 256
[  344.384094][ T7330] exfat: Deprecated parameter 'utf8'
[  344.391014][ T7330] exfat: Deprecated parameter 'utf8'
[  344.605174][ T5898] usb 4-1: new full-speed USB device number 15 using dummy_hcd
[  344.634231][ T7330] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36d2a6b4, utbl_chksum : 0xe619d30d)
[  344.728020][ T7330] FAULT_INJECTION: forcing a failure.
[  344.728020][ T7330] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[  344.742046][ T7330] CPU: 0 UID: 0 PID: 7330 Comm: syz.2.434 Tainted: G        W           syzkaller #0 PREEMPT(none) 
[  344.742213][ T7330] Tainted: [W]=WARN
[  344.742270][ T7330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  344.742349][ T7330] Call Trace:
[  344.742405][ T7330]  <TASK>
[  344.742453][ T7330]  __dump_stack+0x26/0x30
[  344.742616][ T7330]  dump_stack_lvl+0x1df/0x270
[  344.742781][ T7330]  dump_stack+0x1e/0x25
[  344.742926][ T7330]  should_fail_ex+0x7dc/0x8a0
[  344.743126][ T7330]  should_fail_alloc_page+0x222/0x240
[  344.743300][ T7330]  __alloc_frozen_pages_noprof+0x30f/0xf00
[  344.743486][ T7330]  alloc_pages_mpol+0x328/0x860
[  344.743697][ T7330]  folio_alloc_noprof+0x109/0x360
[  344.743855][ T7330]  filemap_alloc_folio_noprof+0x9d/0x420
[  344.744013][ T7330]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  344.744184][ T7330]  __filemap_get_folio+0xb45/0x1930
[  344.744369][ T7330]  ? kmsan_get_metadata+0xfb/0x160
[  344.744553][ T7330]  block_write_begin+0x6c/0x2c0
[  344.744714][ T7330]  ? __pfx_exfat_get_block+0x10/0x10
[  344.744881][ T7330]  exfat_write_begin+0xea/0x430
[  344.745041][ T7330]  ? kmsan_get_metadata+0xfb/0x160
[  344.745191][ T7330]  ? __pfx_exfat_write_begin+0x10/0x10
[  344.745362][ T7330]  ? __pfx_exfat_write_begin+0x10/0x10
[  344.745524][ T7330]  generic_perform_write+0x365/0x1050
[  344.745764][ T7330]  __generic_file_write_iter+0x213/0x460
[  344.745974][ T7330]  exfat_file_write_iter+0x80e/0x1070
[  344.746129][ T7330]  ? kmsan_get_metadata+0xfb/0x160
[  344.746312][ T7330]  ? __pfx_exfat_file_write_iter+0x10/0x10
[  344.746466][ T7330]  aio_write+0x701/0xa10
[  344.746638][ T7330]  ? kmsan_get_metadata+0xfb/0x160
[  344.746785][ T7330]  ? kmsan_internal_set_shadow_origin+0x79/0x110
[  344.746923][ T7330]  ? kmsan_get_metadata+0xfb/0x160
[  344.747068][ T7330]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  344.747231][ T7330]  io_submit_one+0x260e/0x3450
[  344.747406][ T7330]  ? kmsan_get_metadata+0xfb/0x160
[  344.747593][ T7330]  __se_sys_io_submit+0x27c/0x6a0
[  344.747770][ T7330]  __x64_sys_io_submit+0x97/0xe0
[  344.747919][ T7330]  x64_sys_call+0x39b0/0x3e20
[  344.748090][ T7330]  do_syscall_64+0xd9/0x210
[  344.748265][ T7330]  ? irqentry_exit+0x16/0x60
[  344.748415][ T7330]  ? clear_bhb_loop+0x40/0x90
[  344.748553][ T7330]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  344.748688][ T7330] RIP: 0033:0x7fabae78ebe9
[  344.748786][ T7330] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  344.748901][ T7330] RSP: 002b:00007fabac9f6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1
[  344.749026][ T7330] RAX: ffffffffffffffda RBX: 00007fabae9c5fa0 RCX: 00007fabae78ebe9
[  344.749122][ T7330] RDX: 0000200000000540 RSI: 0000000000000048 RDI: 00007fabaf511000
[  344.749214][ T7330] RBP: 00007fabac9f6090 R08: 0000000000000000 R09: 0000000000000000
[  344.749303][ T7330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  344.749383][ T7330] R13: 00007fabae9c6038 R14: 00007fabae9c5fa0 R15: 00007fff3df40aa8
[  344.749509][ T7330]  </TASK>
[  345.135274][ T7336] loop0: detected capacity change from 0 to 1024
[  345.145506][ T7336] EXT4-fs: Ignoring removed nomblk_io_submit option
[  345.160775][ T1963] hid-generic 0000:0000:0000.000A: unknown main item tag 0x0
[  345.172059][ T7336] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  345.185429][ T1963] hid-generic 0000:0000:0000.000A: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  345.275615][ T5898] usb 4-1: config 0 has an invalid interface number: 41 but max is 0
[  345.283930][ T5898] usb 4-1: config 0 has no interface number 0
[  345.290504][ T5898] usb 4-1: config 0 interface 41 has no altsetting 0
[  345.309814][ T5898] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  345.319332][ T5898] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  345.327728][ T5898] usb 4-1: Product: syz
[  345.332070][ T5898] usb 4-1: Manufacturer: syz
[  345.339319][ T5898] usb 4-1: SerialNumber: syz
[  345.340445][ T7336] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  345.349420][ T5898] usb 4-1: config 0 descriptor??
[  345.785611][ T5898] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -71
[  345.867151][ T5898] usb 4-1: USB disconnect, device number 15
[  346.499782][ T5817] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  346.532929][ T7343] fido_id[7343]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  346.551523][ T7345] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  346.561077][ T7345] batman_adv: batadv0: Removing interface: batadv_slave_0
[  346.598839][ T7345] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  346.606816][ T7345] batman_adv: batadv0: Removing interface: batadv_slave_1
[  347.235263][ T1611] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  347.306559][ T7357] netlink: 'syz.4.445': attribute type 27 has an invalid length.
[  347.454801][ T1611] usb 4-1: Using ep0 maxpacket: 32
[  347.463814][ T1287] ieee802154 phy0 wpan0: encryption failed: -22
[  347.470947][ T1287] ieee802154 phy1 wpan1: encryption failed: -22
[  347.501744][ T1611] usb 4-1: config 0 has an invalid interface number: 184 but max is 0
[  347.510493][ T1611] usb 4-1: config 0 has no interface number 0
[  347.517250][ T1611] usb 4-1: config 0 interface 184 has no altsetting 0
[  347.563289][ T1611] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  347.573100][ T1611] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  347.581604][ T1611] usb 4-1: Product: syz
[  347.586037][ T1611] usb 4-1: Manufacturer: syz
[  347.597900][ T1611] usb 4-1: SerialNumber: syz
[  347.636539][ T1611] usb 4-1: config 0 descriptor??
[  347.653788][ T1611] smsc75xx v1.0.0
[  347.658803][ T1611] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[  347.670043][ T1611] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -22
[  347.852439][ T7355] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  347.862434][ T7355] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  347.896477][ T7357] bridge0: port 2(bridge_slave_1) entered disabled state
[  347.906105][ T7357] bridge0: port 1(bridge_slave_0) entered disabled state
[  347.979410][ T7364] loop1: detected capacity change from 0 to 256
[  348.063981][ T7364] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  348.076025][ T7364] exFAT-fs (loop1): Medium has reported failures. Some data may be lost.
[  348.144175][ T7364] exFAT-fs (loop1): Invalid exboot-signature(sector = 2): 0x1119abd0
[  348.187588][ T7364] exFAT-fs (loop1): Invalid exboot-signature(sector = 5): 0x1119abd0
[  348.225012][ T7364] exFAT-fs (loop1): Invalid exboot-signature(sector = 6): 0x00000000
[  348.259816][ T7357] veth0_to_bond: left allmulticast mode
[  348.270469][ T7364] exFAT-fs (loop1): Invalid exboot-signature(sector = 7): 0x00000000
[  348.308201][ T7364] exFAT-fs (loop1): Invalid exboot-signature(sector = 8): 0x00000000
[  348.346725][ T7364] exFAT-fs (loop1): Invalid boot checksum (boot checksum : 0x00000000, checksum : 0x231e8b82)
[  348.358526][ T7364] exFAT-fs (loop1): invalid boot region
[  348.364504][ T7364] exFAT-fs (loop1): failed to recognize exfat type
[  348.416467][ T7369] loop0: detected capacity change from 0 to 1764
[  348.466071][ T7369] iso9660: Unknown parameter '0xffffffffffffffff0x0000000000000000'
[  348.480598][ T7357] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  348.581977][ T7357] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  349.193237][ T7377] netlink: 4 bytes leftover after parsing attributes in process `syz.0.450'.
[  349.271045][ T4339] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  349.289221][ T4339] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  349.300711][ T7377] bridge_slave_1: left allmulticast mode
[  349.307117][ T7377] bridge_slave_1: left promiscuous mode
[  349.314123][ T7377] bridge0: port 2(bridge_slave_1) entered disabled state
[  349.364079][ T7377] bridge_slave_0: left allmulticast mode
[  349.370309][ T7377] bridge_slave_0: left promiscuous mode
[  349.377370][ T7377] bridge0: port 1(bridge_slave_0) entered disabled state
[  349.612778][ T4339] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  349.623348][ T4339] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  349.804882][ T1611] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  349.823178][ T7381] loop1: detected capacity change from 0 to 164
[  349.900642][ T7381] rock: directory entry would overflow storage
[  349.907835][ T7381] rock: sig=0x4543, size=28, remaining=18
[  349.996493][ T1611] usb 5-1: unable to get BOS descriptor or descriptor too short
[  350.035623][ T1611] usb 5-1: config 1 interface 0 has no altsetting 0
[  350.102225][ T1611] usb 5-1: New USB device found, idVendor=045e, idProduct=0713, bcdDevice= 0.40
[  350.112025][ T1611] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  350.120449][ T1611] usb 5-1: Product: syz
[  350.125090][ T1611] usb 5-1: Manufacturer: 򚈘
[  350.129972][ T1611] usb 5-1: SerialNumber: syz
[  350.211629][ T1963] usb 4-1: USB disconnect, device number 16
[  350.887510][ T7385] loop0: detected capacity change from 0 to 32768
[  350.952796][ T7387] sctp: [Deprecated]: syz.3.455 (pid 7387) Use of int in max_burst socket option.
[  350.952796][ T7387] Use struct sctp_assoc_value instead
[  350.976392][ T7385] (syz.0.454,7385,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  350.992877][ T7385] (syz.0.454,7385,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  351.024260][ T7390] sp0: Synchronizing with TNC
[  351.102218][ T7385] JBD2: Ignoring recovery information on journal
[  351.238918][ T7385] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  352.136868][ T7396] loop3: detected capacity change from 0 to 4096
[  352.228409][ T7396] ntfs3: Unknown parameter ''
[  352.618834][ T1963] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  352.956748][ T1963] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  352.968783][ T1963] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  352.979334][ T1963] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  352.992839][ T1963] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  353.002465][ T1963] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  353.312453][ T7398] loop2: detected capacity change from 0 to 4096
[  353.390265][ T5817] ocfs2: Unmounting device (7,0) on (node local)
[  353.397338][ T1611] usbhid 5-1:1.0: can't add hid device: -71
[  353.397880][ T1611] usbhid 5-1:1.0: probe with driver usbhid failed with error -71
[  353.429628][ T1963] usb 2-1: config 0 descriptor??
[  353.490724][ T7398] NILFS (loop2): invalid segment: Checksum error in segment payload
[  353.499139][ T7398] NILFS (loop2): trying rollback from an earlier position
[  353.508815][ T7398] NILFS (loop2): invalid segment: Checksum error in segment payload
[  353.517137][ T7398] NILFS (loop2): error -22 while searching super root
[  353.565664][ T1611] usb 5-1: USB disconnect, device number 14
[  353.958069][ T1963] plantronics 0003:047F:FFFF.000B: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  354.260856][ T1611] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  354.322179][ T7407] loop4: detected capacity change from 0 to 8
[  354.487614][ T7407] SQUASHFS error: zlib decompression failed, data probably corrupt
[  354.496147][ T7407] SQUASHFS error: Failed to read block 0x9b: -5
[  354.502730][ T7407] SQUASHFS error: Unable to read metadata cache entry [99]
[  354.510477][ T7407] SQUASHFS error: Unable to read inode 0x127
[  354.519082][ T1611] usb 4-1: Using ep0 maxpacket: 8
[  354.575398][ T1611] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30
[  354.586787][ T1611] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  354.598171][ T1611] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255
[  354.611639][ T1611] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00
[  354.621205][ T1611] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  354.792423][ T7405] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  354.847983][ T1611] usb 4-1: config 0 descriptor??
[  355.572905][ T1611] usbhid 4-1:0.0: can't add hid device: -71
[  355.586475][ T1611] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  355.668790][ T1611] usb 4-1: USB disconnect, device number 17
[  355.774975][ T5870] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  355.874937][ T7415] netlink: 'syz.4.464': attribute type 3 has an invalid length.
[  355.980798][ T5880] usb 2-1: USB disconnect, device number 9
[  356.030843][ T5870] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  356.041646][ T5870] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  356.051130][ T5870] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  356.115124][ T5870] usb 3-1: config 0 descriptor??
[  356.140610][ T5870] pwc: Askey VC010 type 2 USB webcam detected.
[  356.218497][ T7417] loop0: detected capacity change from 0 to 8
[  356.318572][ T7417] SQUASHFS error: zlib decompression failed, data probably corrupt
[  356.327274][ T7417] SQUASHFS error: Failed to read block 0x9b: -5
[  356.333704][ T7417] SQUASHFS error: Unable to read metadata cache entry [99]
[  356.341401][ T7417] SQUASHFS error: Unable to read inode 0x127
[  356.537192][ T7422] netlink: 'syz.4.466': attribute type 13 has an invalid length.
[  356.594098][ T7413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  356.606167][ T5880] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  356.606396][ T7413] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  356.825140][ T5880] usb 2-1: Using ep0 maxpacket: 32
[  356.862036][ T5880] usb 2-1: config 0 has an invalid interface number: 184 but max is 0
[  356.870982][ T5880] usb 2-1: config 0 has no interface number 0
[  356.877777][ T5880] usb 2-1: config 0 interface 184 has no altsetting 0
[  356.898024][ T5870] pwc: recv_control_msg error -32 req 02 val 2b00
[  356.946439][ T5870] pwc: recv_control_msg error -32 req 02 val 2700
[  357.025667][ T5880] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  357.035424][ T5880] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  357.043631][ T5880] usb 2-1: Product: syz
[  357.048213][ T5880] usb 2-1: Manufacturer: syz
[  357.053130][ T5880] usb 2-1: SerialNumber: syz
[  357.140129][ T5880] usb 2-1: config 0 descriptor??
[  357.193781][ T5880] smsc75xx v1.0.0
[  357.198258][ T5880] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[  357.210058][ T5880] smsc75xx 2-1:0.184: probe with driver smsc75xx failed with error -22
[  357.215347][ T7413] loop2: detected capacity change from 0 to 2048
[  357.452080][ T7420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  357.463153][ T7420] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  357.814137][ T7413] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  357.945677][ T7428] loop0: detected capacity change from 0 to 32768
[  358.041816][ T7428] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names,read_only
[  358.041937][ T7428]   allowing incompatible features above 0.0: (unknown version)
[  358.042027][ T7428]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  358.081616][ T7428] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0
[  358.090797][ T7428] bcachefs (loop0): recovering from clean shutdown, journal seq 10
[  358.099692][ T7428] bcachefs (loop0): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.28: inode_has_case_insensitive
[  358.099692][ T7428]   running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes
[  358.121817][ T7432] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  358.183235][ T5870] pwc: recv_control_msg error -32 req 02 val 2c00
[  358.206629][ T7428] bcachefs (loop0): cannot start: journal seq overflow
[  358.214125][ T7428] bcachefs (loop0): error in recovery: EINVAL
[  358.214204][ T7428]   emergency read only at seq 0
[  358.226381][ T7428] bcachefs (loop0): bch2_fs_start(): error starting filesystem EINVAL
[  358.234826][ T7428] bcachefs (loop0): shutting down
[  358.257700][ T7432] overlayfs: failed lookup in lower (/, name='bus', err=-66): unsupported object type
[  358.280406][ T5870] pwc: recv_control_msg error -32 req 04 val 1000
[  358.325290][ T7428] bcachefs (loop0): shutdown complete
[  358.325841][ T5870] pwc: recv_control_msg error -32 req 04 val 1300
[  358.455484][ T5870] pwc: recv_control_msg error -32 req 04 val 1400
[  358.519297][ T5870] pwc: recv_control_msg error -32 req 02 val 2000
[  358.576416][ T5870] pwc: recv_control_msg error -32 req 02 val 2100
[  358.634456][ T5870] pwc: recv_control_msg error -32 req 04 val 1500
[  358.733538][ T5870] pwc: recv_control_msg error -32 req 02 val 2500
[  358.816435][ T5870] pwc: recv_control_msg error -71 req 02 val 2400
[  358.880134][ T5870] pwc: recv_control_msg error -71 req 02 val 2600
[  358.980685][ T5870] pwc: recv_control_msg error -71 req 02 val 2900
[  359.074427][ T5870] pwc: recv_control_msg error -71 req 02 val 2800
[  359.145398][ T5870] pwc: recv_control_msg error -71 req 04 val 1100
[  359.212501][ T7439] loop4: detected capacity change from 0 to 40427
[  359.228371][ T5870] pwc: recv_control_msg error -71 req 04 val 1200
[  359.230459][ T7439] F2FS-fs (loop4): build fault injection rate: 14
[  359.241755][ T7439] F2FS-fs (loop4): build fault injection type: 0x3bfe8c
[  359.251786][ T7439] F2FS-fs (loop4): invalid crc value
[  359.276901][    C1] F2FS-fs (loop4): inject read IO error in f2fs_read_end_io of bio_endio+0xeb1/0x1010
[  359.321451][ T5870] pwc: Registered as video103.
[  359.330027][ T5870] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input14
[  359.351595][ T1963] usb 2-1: USB disconnect, device number 10
[  359.353643][    C1] F2FS-fs (loop4): inject read IO error in f2fs_read_end_io of bio_endio+0xeb1/0x1010
[  359.566405][ T5870] usb 3-1: USB disconnect, device number 17
[  359.637608][ T7439] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  359.646942][ T7439] F2FS-fs (loop4): inject page alloc in f2fs_grab_cache_folio of f2fs_get_tmp_folio+0x38/0x50
[  359.689053][ T7439] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  359.689189][ T7443] loop3: detected capacity change from 0 to 512
[  359.752130][ T5825] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  359.805602][ T7443] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  359.821363][ T7439] F2FS-fs (loop4): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x831/0x19b0
[  359.837399][ T7439] F2FS-fs (loop4): inject page alloc in f2fs_grab_cache_folio of f2fs_new_inode_folio+0xb9/0x100
[  359.852012][ T7439] F2FS-fs (loop4): inject inconsistent footer in sanity_check_node_footer of f2fs_get_dnode_of_data+0x129f/0x2fc0
[  359.864886][ T7439] F2FS-fs (loop4): inconsistent node block, node_type:0, nid:13, node_footer[nid:13,ino:3,ofs:191623,cpver:0,blkaddr:0]
[  359.969401][ T7443] EXT4-fs (loop3): 1 orphan inode deleted
[  359.976037][ T7443] EXT4-fs (loop3): 1 truncate cleaned up
[  359.986568][ T7443] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  360.003239][ T7439] F2FS-fs (loop4): inject inconsistent footer in sanity_check_node_footer of f2fs_get_inode_folio+0x40/0x50
[  360.015561][ T7439] F2FS-fs (loop4): inconsistent node block, node_type:1, nid:10, node_footer[nid:10,ino:10,ofs:0,cpver:10241045589465957861,blkaddr:4104]
[  360.053379][ T7428] bcachefs: bch2_fs_get_tree() error: EINVAL
[  360.212315][ T7446] loop1: detected capacity change from 0 to 4096
[  360.239705][ T7443] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[  360.333280][ T7446] NILFS (loop1): invalid segment: Inconsistency found
[  360.340771][ T7446] NILFS (loop1): trying rollback from an earlier position
[  360.347933][ T7443] EXT4-fs (loop3): Remounting filesystem read-only
[  360.427190][ T7446] NILFS (loop1): recovery complete
[  360.440455][ T7443] EXT4-fs (loop3): error restoring inline_data for inode -- potential data loss! (inode 12, error -30)
[  360.495005][ T5870] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  360.521994][ T7456] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  360.590727][    C1] F2FS-fs (loop4): inject write IO error in f2fs_write_end_io of bio_endio+0xeb1/0x1010
[  360.601276][    C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Tainted: G        W           syzkaller #0 PREEMPT(none) 
[  360.601443][    C1] Tainted: [W]=WARN
[  360.601492][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  360.601572][    C1] Call Trace:
[  360.601621][    C1]  <TASK>
[  360.601670][    C1]  __dump_stack+0x26/0x30
[  360.601842][    C1]  dump_stack_lvl+0x1df/0x270
[  360.602008][    C1]  dump_stack+0x1e/0x25
[  360.602144][    C1]  f2fs_handle_critical_error+0xa6f/0xc20
[  360.602350][    C1]  f2fs_stop_checkpoint+0x65/0x80
[  360.602529][    C1]  f2fs_write_end_io+0x101c/0x1bc0
[  360.602693][    C1]  ? __pfx_f2fs_write_end_io+0x10/0x10
[  360.602819][    C1]  bio_endio+0xeb1/0x1010
[  360.602959][    C1]  blk_update_request+0xf4c/0x1a90
[  360.603178][    C1]  blk_mq_end_request+0x50/0xb0
[  360.603355][    C1]  lo_complete_rq+0x188/0x3a0
[  360.603505][    C1]  ? __pfx_lo_complete_rq+0x10/0x10
[  360.603654][    C1]  blk_done_softirq+0x10f/0x1f0
[  360.603823][    C1]  ? __pfx_blk_done_softirq+0x10/0x10
[  360.603985][    C1]  handle_softirqs+0x166/0x6e0
[  360.604141][    C1]  ? __pfx_run_ksoftirqd+0x10/0x10
[  360.604285][    C1]  run_ksoftirqd+0x29/0x50
[  360.604426][    C1]  smpboot_thread_fn+0x56c/0xa30
[  360.604617][    C1]  kthread+0xd59/0xf00
[  360.604747][    C1]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  360.604934][    C1]  ? __pfx_kthread+0x10/0x10
[  360.605062][    C1]  ret_from_fork+0x1e3/0x310
[  360.605189][    C1]  ? __pfx_kthread+0x10/0x10
[  360.605320][    C1]  ret_from_fork_asm+0x1a/0x30
[  360.605517][    C1]  </TASK>
[  360.758694][    C1] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  360.765942][    C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Tainted: G        W           syzkaller #0 PREEMPT(none) 
[  360.766105][    C1] Tainted: [W]=WARN
[  360.766156][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  360.766234][    C1] Call Trace:
[  360.766285][    C1]  <TASK>
[  360.766332][    C1]  __dump_stack+0x26/0x30
[  360.766496][    C1]  dump_stack_lvl+0x1df/0x270
[  360.766665][    C1]  dump_stack+0x1e/0x25
[  360.766820][    C1]  f2fs_handle_critical_error+0xa6f/0xc20
[  360.767036][    C1]  f2fs_stop_checkpoint+0x65/0x80
[  360.767217][    C1]  f2fs_write_end_io+0x101c/0x1bc0
[  360.767394][    C1]  ? __pfx_f2fs_write_end_io+0x10/0x10
[  360.767521][    C1]  bio_endio+0xeb1/0x1010
[  360.767664][    C1]  blk_update_request+0xf4c/0x1a90
[  360.767898][    C1]  blk_mq_end_request+0x50/0xb0
[  360.768083][    C1]  lo_complete_rq+0x188/0x3a0
[  360.768233][    C1]  ? __pfx_lo_complete_rq+0x10/0x10
[  360.768380][    C1]  blk_done_softirq+0x10f/0x1f0
[  360.768546][    C1]  ? __pfx_blk_done_softirq+0x10/0x10
[  360.768714][    C1]  handle_softirqs+0x166/0x6e0
[  360.768871][    C1]  ? __pfx_run_ksoftirqd+0x10/0x10
[  360.769017][    C1]  run_ksoftirqd+0x29/0x50
[  360.769156][    C1]  smpboot_thread_fn+0x56c/0xa30
[  360.769359][    C1]  kthread+0xd59/0xf00
[  360.769482][    C1]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  360.769682][    C1]  ? __pfx_kthread+0x10/0x10
[  360.769820][    C1]  ret_from_fork+0x1e3/0x310
[  360.769949][    C1]  ? __pfx_kthread+0x10/0x10
[  360.770085][    C1]  ret_from_fork_asm+0x1a/0x30
[  360.770281][    C1]  </TASK>
[  360.770334][    C1] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  360.930831][    C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Tainted: G        W           syzkaller #0 PREEMPT(none) 
[  360.930999][    C1] Tainted: [W]=WARN
[  360.931048][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  360.931125][    C1] Call Trace:
[  360.931173][    C1]  <TASK>
[  360.931221][    C1]  __dump_stack+0x26/0x30
[  360.931385][    C1]  dump_stack_lvl+0x1df/0x270
[  360.931553][    C1]  dump_stack+0x1e/0x25
[  360.931710][    C1]  f2fs_handle_critical_error+0xa6f/0xc20
[  360.931930][    C1]  f2fs_stop_checkpoint+0x65/0x80
[  360.932111][    C1]  f2fs_write_end_io+0x101c/0x1bc0
[  360.932283][    C1]  ? __pfx_f2fs_write_end_io+0x10/0x10
[  360.932414][    C1]  bio_endio+0xeb1/0x1010
[  360.932558][    C1]  blk_update_request+0xf4c/0x1a90
[  360.932806][    C1]  blk_mq_end_request+0x50/0xb0
[  360.932990][    C1]  lo_complete_rq+0x188/0x3a0
[  360.933143][    C1]  ? __pfx_lo_complete_rq+0x10/0x10
[  360.933291][    C1]  blk_done_softirq+0x10f/0x1f0
[  360.933457][    C1]  ? __pfx_blk_done_softirq+0x10/0x10
[  360.933619][    C1]  handle_softirqs+0x166/0x6e0
[  360.933781][    C1]  ? __pfx_run_ksoftirqd+0x10/0x10
[  360.933923][    C1]  run_ksoftirqd+0x29/0x50
[  360.934065][    C1]  smpboot_thread_fn+0x56c/0xa30
[  360.934267][    C1]  kthread+0xd59/0xf00
[  360.934395][    C1]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  360.934598][    C1]  ? __pfx_kthread+0x10/0x10
[  360.934835][    C1]  ret_from_fork+0x1e3/0x310
[  360.934972][    C1]  ? __pfx_kthread+0x10/0x10
[  360.935110][    C1]  ret_from_fork_asm+0x1a/0x30
[  360.935311][    C1]  </TASK>
[  361.088481][    C1] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  361.095653][    C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Tainted: G        W           syzkaller #0 PREEMPT(none) 
[  361.095805][    C1] Tainted: [W]=WARN
[  361.095859][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  361.095932][    C1] Call Trace:
[  361.095973][    C1]  <TASK>
[  361.096013][    C1]  __dump_stack+0x26/0x30
[  361.096166][    C1]  dump_stack_lvl+0x1df/0x270
[  361.096324][    C1]  dump_stack+0x1e/0x25
[  361.096470][    C1]  f2fs_handle_critical_error+0xa6f/0xc20
[  361.096691][    C1]  f2fs_stop_checkpoint+0x65/0x80
[  361.096883][    C1]  f2fs_write_end_io+0x101c/0x1bc0
[  361.097049][    C1]  ? __pfx_f2fs_write_end_io+0x10/0x10
[  361.097177][    C1]  bio_endio+0xeb1/0x1010
[  361.097323][    C1]  blk_update_request+0xf4c/0x1a90
[  361.097550][    C1]  blk_mq_end_request+0x50/0xb0
[  361.097736][    C1]  lo_complete_rq+0x188/0x3a0
[  361.097889][    C1]  ? __pfx_lo_complete_rq+0x10/0x10
[  361.098041][    C1]  blk_done_softirq+0x10f/0x1f0
[  361.098204][    C1]  ? __pfx_blk_done_softirq+0x10/0x10
[  361.098369][    C1]  handle_softirqs+0x166/0x6e0
[  361.098526][    C1]  ? __pfx_run_ksoftirqd+0x10/0x10
[  361.098683][    C1]  run_ksoftirqd+0x29/0x50
[  361.098825][    C1]  smpboot_thread_fn+0x56c/0xa30
[  361.099037][    C1]  kthread+0xd59/0xf00
[  361.099166][    C1]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  361.099365][    C1]  ? __pfx_kthread+0x10/0x10
[  361.099509][    C1]  ret_from_fork+0x1e3/0x310
[  361.099643][    C1]  ? __pfx_kthread+0x10/0x10
[  361.099776][    C1]  ret_from_fork_asm+0x1a/0x30
[  361.099980][    C1]  </TASK>
[  361.100033][    C1] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  361.260852][    C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Tainted: G        W           syzkaller #0 PREEMPT(none) 
[  361.261018][    C1] Tainted: [W]=WARN
[  361.261069][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  361.261145][    C1] Call Trace:
[  361.261195][    C1]  <TASK>
[  361.261242][    C1]  __dump_stack+0x26/0x30
[  361.261408][    C1]  dump_stack_lvl+0x1df/0x270
[  361.261575][    C1]  dump_stack+0x1e/0x25
[  361.261722][    C1]  f2fs_handle_critical_error+0xa6f/0xc20
[  361.261945][    C1]  f2fs_stop_checkpoint+0x65/0x80
[  361.262124][    C1]  f2fs_write_end_io+0x101c/0x1bc0
[  361.262295][    C1]  ? __pfx_f2fs_write_end_io+0x10/0x10
[  361.262421][    C1]  bio_endio+0xeb1/0x1010
[  361.262561][    C1]  blk_update_request+0xf4c/0x1a90
[  361.262784][    C1]  blk_mq_end_request+0x50/0xb0
[  361.262969][    C1]  lo_complete_rq+0x188/0x3a0
[  361.263121][    C1]  ? __pfx_lo_complete_rq+0x10/0x10
[  361.263269][    C1]  blk_done_softirq+0x10f/0x1f0
[  361.263435][    C1]  ? __pfx_blk_done_softirq+0x10/0x10
[  361.263598][    C1]  handle_softirqs+0x166/0x6e0
[  361.263755][    C1]  ? __pfx_run_ksoftirqd+0x10/0x10
[  361.263904][    C1]  run_ksoftirqd+0x29/0x50
[  361.264045][    C1]  smpboot_thread_fn+0x56c/0xa30
[  361.264243][    C1]  kthread+0xd59/0xf00
[  361.264371][    C1]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  361.264564][    C1]  ? __pfx_kthread+0x10/0x10
[  361.264688][    C1]  ret_from_fork+0x1e3/0x310
[  361.264820][    C1]  ? __pfx_kthread+0x10/0x10
[  361.264945][    C1]  ret_from_fork_asm+0x1a/0x30
[  361.265137][    C1]  </TASK>
[  361.417078][    C1] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  361.587263][ T5823] F2FS-fs (loop4): do_checkpoint failed err:-5, stop checkpoint
[  362.058526][ T5818] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  362.411138][ T5880] usb 3-1: new full-speed USB device number 18 using dummy_hcd
[  362.682012][ T5880] usb 3-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62
[  362.691519][ T5880] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  362.700101][ T5880] usb 3-1: Product: syz
[  362.704633][ T5880] usb 3-1: Manufacturer: syz
[  362.709419][ T5880] usb 3-1: SerialNumber: syz
[  363.313941][ T7469] loop1: detected capacity change from 0 to 2048
[  363.479340][ T7469] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[  363.660167][ T7467] loop4: detected capacity change from 0 to 32768
[  363.679475][ T5880] usb 3-1: config 0 descriptor??
[  363.698573][ T7473] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  363.720224][ T5880] usb 3-1: selecting invalid altsetting 3
[  363.726623][ T5880] comedi comedi5: could not set alternate setting 3 in high speed
[  363.734764][ T5880] usbdux 3-1:0.0: driver 'usbdux' failed to auto-configure device.
[  363.790000][ T7467] 
[  363.790000][ T7467]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  363.790000][ T7467] 
[  363.849296][ T7467] ERROR: (device loop4): diWrite: ixpxd invalid
[  363.849296][ T7467] 
[  363.875843][ T7467] ERROR: (device loop4): txAbort: 
[  363.875843][ T7467] 
[  363.885120][ T7470] ERROR: (device loop4): dtSearch: stack overrun!
[  363.885120][ T7470] 
[  363.894285][ T7470] btstack dump:
[  363.898036][ T7470] bn = 0, index = 0
[  363.901984][ T7470] bn = 0, index = 0
[  363.903090][ T5880] usbdux 3-1:0.0: probe with driver usbdux failed with error -22
[  363.906033][ T7470] bn = 0, index = 0
[  363.906095][ T7470] bn = 0, index = 0
[  363.906150][ T7470] bn = 0, index = 0
[  363.906207][ T7470] bn = 0, index = 0
[  363.930053][ T7470] bn = 0, index = 0
[  363.933987][ T7470] =====================================================
[  363.941341][ T7470] BUG: KMSAN: uninit-value in BT_STACK_DUMP+0x5e5/0x600
[  363.948695][ T7470]  BT_STACK_DUMP+0x5e5/0x600
[  363.954009][ T7470]  dtSearch+0x393f/0x3d30
[  363.958767][ T7470]  jfs_mkdir+0x4eb/0x13a0
[  363.963267][ T7470]  vfs_mkdir+0x4ea/0x850
[  363.967568][ T7476] FAULT_INJECTION: forcing a failure.
[  363.967568][ T7476] name failslab, interval 1, probability 0, space 0, times 0
[  363.967720][ T7476] CPU: 1 UID: 0 PID: 7476 Comm: syz.0.481 Tainted: G        W           syzkaller #0 PREEMPT(none) 
[  363.967869][ T7476] Tainted: [W]=WARN
[  363.967916][ T7476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  363.967994][ T7476] Call Trace:
[  363.968041][ T7476]  <TASK>
[  363.968087][ T7476]  __dump_stack+0x26/0x30
[  363.968246][ T7476]  dump_stack_lvl+0x1df/0x270
[  363.968415][ T7476]  dump_stack+0x1e/0x25
[  363.968559][ T7476]  should_fail_ex+0x7dc/0x8a0
[  363.968754][ T7476]  should_failslab+0x15b/0x200
[  363.968911][ T7476]  __kvmalloc_node_noprof+0x24c/0x1530
[  363.969081][ T7476]  ? kmsan_internal_memmove_metadata+0x91/0x230
[  363.969215][ T7476]  ? rhashtable_init_noprof+0x651/0xd80
[  363.969414][ T7476]  ? kmsan_get_metadata+0xfb/0x160
[  363.969568][ T7476]  ? __pfx_nft_chain_hash+0x10/0x10
[  363.969707][ T7476]  rhashtable_init_noprof+0x651/0xd80
[  363.969905][ T7476]  rhltable_init_noprof+0x3a/0x80
[  363.970035][ T7476]  nf_tables_newtable+0xe7a/0x2e10
[  363.970244][ T7476]  ? __pfx_nf_tables_newtable+0x10/0x10
[  363.970396][ T7476]  nfnetlink_rcv+0x228f/0x5420
[  363.970704][ T7476]  ? kmsan_get_metadata+0xfb/0x160
[  363.970847][ T7476]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  363.970998][ T7476]  ? kmsan_get_metadata+0xfb/0x160
[  363.971141][ T7476]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  363.971290][ T7476]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  363.971469][ T7476]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  363.971639][ T7476]  netlink_unicast+0xf01/0x12b0
[  363.971806][ T7476]  netlink_sendmsg+0x10b3/0x1250
[  363.971985][ T7476]  ? __pfx_netlink_sendmsg+0x10/0x10
[  363.972133][ T7476]  ? __pfx_netlink_sendmsg+0x10/0x10
[  363.972304][ T7476]  __sock_sendmsg+0x330/0x3d0
[  363.972493][ T7476]  ____sys_sendmsg+0x7e0/0xd80
[  363.972680][ T7476]  ___sys_sendmsg+0x271/0x3b0
[  363.972855][ T7476]  ? __rcu_read_unlock+0x6d/0xd0
[  363.972987][ T7476]  ? __fget_files+0x3b4/0x4a0
[  363.973146][ T7476]  ? __fget_files+0x3b9/0x4a0
[  363.973314][ T7476]  ? kmsan_get_metadata+0xfb/0x160
[  363.973461][ T7476]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  363.973622][ T7476]  __x64_sys_sendmsg+0x211/0x3e0
[  363.973790][ T7476]  ? kmsan_get_metadata+0xfb/0x160
[  363.973961][ T7476]  x64_sys_call+0x1dfd/0x3e20
[  363.974130][ T7476]  do_syscall_64+0xd9/0x210
[  363.974294][ T7476]  ? irqentry_exit+0x16/0x60
[  363.974443][ T7476]  ? clear_bhb_loop+0x40/0x90
[  363.974583][ T7476]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  363.974720][ T7476] RIP: 0033:0x7f0d6af8ebe9
[  363.974814][ T7476] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  363.974927][ T7476] RSP: 002b:00007f0d6bdac038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  363.975052][ T7476] RAX: ffffffffffffffda RBX: 00007f0d6b1c5fa0 RCX: 00007f0d6af8ebe9
[  363.975147][ T7476] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 000000000000001b
[  363.975232][ T7476] RBP: 00007f0d6bdac090 R08: 0000000000000000 R09: 0000000000000000
[  363.975315][ T7476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  363.975398][ T7476] R13: 00007f0d6b1c6038 R14: 00007f0d6b1c5fa0 R15: 00007fffd5cbe298
[  363.975527][ T7476]  </TASK>
[  364.310753][ T7470]  do_mkdirat+0x41a/0xf30
[  364.315751][ T7470]  __x64_sys_mkdirat+0xc1/0x140
[  364.320787][ T7470]  x64_sys_call+0x338/0x3e20
[  364.325790][ T7470]  do_syscall_64+0xd9/0x210
[  364.330807][ T7470]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  364.337171][ T7470] 
[  364.339586][ T7470] Local variable btstack created at:
[  364.345278][ T7470]  jfs_mkdir+0x7e/0x13a0
[  364.349689][ T7470]  vfs_mkdir+0x4ea/0x850
[  364.354172][ T7470] 
[  364.356825][ T7470] CPU: 0 UID: 0 PID: 7470 Comm: syz.4.474 Tainted: G        W           syzkaller #0 PREEMPT(none) 
[  364.368073][ T7470] Tainted: [W]=WARN
[  364.371998][ T7470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  364.384065][ T7470] =====================================================
[  364.391902][ T7470] Disabling lock debugging due to kernel taint
[  364.398357][ T7470] Kernel panic - not syncing: kmsan.panic set ...
[  364.404912][ T7470] CPU: 0 UID: 0 PID: 7470 Comm: syz.4.474 Tainted: G    B   W           syzkaller #0 PREEMPT(none) 
[  364.416474][ T7470] Tainted: [B]=BAD_PAGE, [W]=WARN
[  364.421702][ T7470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[  364.431886][ T7470] Call Trace:
[  364.435270][ T7470]  <TASK>
[  364.438286][ T7470]  __dump_stack+0x26/0x30
[  364.442793][ T7470]  dump_stack_lvl+0x53/0x270
[  364.447591][ T7470]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  364.453645][ T7470]  dump_stack+0x1e/0x25
[  364.457983][ T7470]  vpanic+0x361/0xc50
[  364.462147][ T7470]  panic+0x15d/0x160
[  364.466450][ T7470]  kmsan_report+0x31c/0x320
[  364.471154][ T7470]  ? __msan_warning+0x1b/0x30
[  364.475973][ T7470]  ? BT_STACK_DUMP+0x5e5/0x600
[  364.480909][ T7470]  ? dtSearch+0x393f/0x3d30
[  364.485688][ T7470]  ? jfs_mkdir+0x4eb/0x13a0
[  364.490332][ T7470]  ? vfs_mkdir+0x4ea/0x850
[  364.494909][ T7470]  ? do_mkdirat+0x41a/0xf30
[  364.499576][ T7470]  ? __x64_sys_mkdirat+0xc1/0x140
[  364.504989][ T7470]  ? x64_sys_call+0x338/0x3e20
[  364.509947][ T7470]  ? do_syscall_64+0xd9/0x210
[  364.514812][ T7470]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  364.521055][ T7470]  ? vprintk_emit+0xab3/0xcd0
[  364.525915][ T7470]  ? vprintk_default+0x3f/0x50
[  364.530840][ T7470]  ? vprintk+0x36/0x50
[  364.535086][ T7470]  ? _printk+0x17e/0x1b0
[  364.539556][ T7470]  ? kmsan_get_metadata+0xfb/0x160
[  364.544850][ T7470]  __msan_warning+0x1b/0x30
[  364.549503][ T7470]  BT_STACK_DUMP+0x5e5/0x600
[  364.554333][ T7470]  dtSearch+0x393f/0x3d30
[  364.558884][ T7470]  ? kfree+0x3a8/0xec0
[  364.563196][ T7470]  jfs_mkdir+0x4eb/0x13a0
[  364.567710][ T7470]  ? anon_pipe_write+0x1d0/0x21e0
[  364.573034][ T7470]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  364.579035][ T7470]  ? kmsan_get_shadow_origin_ptr+0x4a/0xb0
[  364.585018][ T7470]  ? __pfx_jfs_mkdir+0x10/0x10
[  364.589944][ T7470]  vfs_mkdir+0x4ea/0x850
[  364.594450][ T7470]  do_mkdirat+0x41a/0xf30
[  364.598975][ T7470]  __x64_sys_mkdirat+0xc1/0x140
[  364.604175][ T7470]  x64_sys_call+0x338/0x3e20
[  364.608986][ T7470]  do_syscall_64+0xd9/0x210
[  364.613673][ T7470]  ? irqentry_exit+0x16/0x60
[  364.618433][ T7470]  ? clear_bhb_loop+0x40/0x90
[  364.623370][ T7470]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  364.629438][ T7470] RIP: 0033:0x7ff88198d457
[  364.634064][ T7470] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  364.654000][ T7470] RSP: 002b:00007ff87fbd4e68 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[  364.662660][ T7470] RAX: ffffffffffffffda RBX: 00007ff87fbd4ef0 RCX: 00007ff88198d457
[  364.670769][ T7470] RDX: 00000000000001ff RSI: 0000200000000240 RDI: 00000000ffffff9c
[  364.678892][ T7470] RBP: 0000200000000200 R08: 00002000000000c0 R09: 0000000000000000
[  364.687006][ T7470] R10: 0000200000000200 R11: 0000000000000246 R12: 0000200000000240
[  364.695109][ T7470] R13: 00007ff87fbd4eb0 R14: 0000000000000000 R15: 0000000000000000
[  364.703243][ T7470]  </TASK>
[  364.706648][ T7470] Kernel Offset: disabled
[  364.711045][ T7470] Rebooting in 86400 seconds..