last executing test programs:

8m27.356411258s ago: executing program 3 (id=833):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1)
mount$fuse(0x0, 0x0, 0x0, 0x80, 0x0)
r0 = openat$incfs(0xffffffffffffffff, &(0x7f0000000180)='.log\x00', 0x10002, 0x0)
ioctl$HIDIOCGUSAGE(r0, 0xc018480b, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f000000c3c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff8080e9c4, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2}}, 0xffffffffffffff14)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0xb0, 0x0, 0xfffffffffffffff9, [{{0x3, 0x0, 0x10000, 0x3, 0x86, 0xb402, {0x3, 0x1, 0x20000000000000, 0x3, 0xb, 0x7ff, 0x1000, 0x3, 0x3, 0x4000, 0x3, 0xee00, 0x0, 0xc6, 0x2}}, {0x4, 0x81, 0x2, 0x0, 'fd'}}]}, 0x0, 0x0, 0x0})
getdents64(r2, 0x0, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x161140, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60)
r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r5, 0x4008ae8a, &(0x7f00000015c0)={0x1, 0x0, [{0x1, 0x9, 0x7, 0x1, 0x8}]})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0xa}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$KVM_SET_CPUID(r5, 0x4008ae8a, &(0x7f00000002c0)={0x3, 0x0, [{0xb, 0x6, 0x3, 0x9, 0x81}, {0x80000019, 0x5, 0x0, 0x5}, {0x80000019, 0x1, 0x186733, 0xec74, 0xfffff001}]})
ioctl$KVM_TDX_FINALIZE_VM(r4, 0xc004aeba, &(0x7f0000000000))
ioctl$KVM_SET_MP_STATE(r5, 0x4004ae99, &(0x7f00000000c0)=0x3)
ioctl$KVM_SET_LAPIC(r5, 0x4400ae8f, &(0x7f0000000880)={"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"})
ioctl$KVM_RUN(r5, 0xae80, 0x0)

8m26.32432029s ago: executing program 3 (id=835):
ioperm(0x0, 0x2, 0x7e)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000841}, 0x20040000)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
r5 = syz_open_dev$usbfs(&(0x7f0000000040), 0x12, 0x80801)
ioctl$USBDEVFS_FREE_STREAMS(r5, 0x8008551d, 0xffffffffffffffff)

8m25.603570807s ago: executing program 3 (id=837):
socketpair$unix(0x1, 0x1, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000300)={0x2, &(0x7f0000000340)=[{0xb1, 0x57, 0x0, 0xab49}, {0x6, 0x3, 0x9}]}, 0x8)
openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140), 0x82084, 0x0)
syz_extract_tcp_res(0x0, 0x6, 0x5)
openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x2202, 0x0)
openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0xffffffffffffff98)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
io_uring_register$IORING_REGISTER_PBUF_RING(0xffffffffffffffff, 0x22, &(0x7f0000000380)={&(0x7f0000006000)}, 0x1)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0xa, 0x8000000000002})
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r3 = dup3(r2, r1, 0x0)
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r4, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000ec0), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0)
r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000003480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
read$FUSE(r5, &(0x7f0000007fc0)={0x2020}, 0x2020)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)

8m22.621637962s ago: executing program 3 (id=848):
syz_mount_image$fuse(0x0, &(0x7f0000000240)='./file0\x00', 0x83084a, 0x0, 0x0, 0x0, 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0)
mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, 0x0)
chroot(&(0x7f0000000100)='./file0\x00')
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
pivot_root(&(0x7f0000000000)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000100)='./file0/../file0/../file0/../file0\x00')

8m22.268243486s ago: executing program 3 (id=849):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x8)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
syz_clone3(&(0x7f0000000240)={0x200a40080, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58)
rmdir(&(0x7f00000000c0)='./cgroup/../file0\x00')
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r3 = syz_open_procfs(0x0, &(0x7f0000000200)='net/protocols\x00')
syz_ublk_setup_io_uring(0x6548, 0x0, 0x0, 0x0, 0x0)
userfaultfd(0x80001)
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0)
r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
sendmmsg$inet(r4, &(0x7f0000000c40)=[{{&(0x7f0000000040)={0x2, 0x0, @multicast2}, 0x23, 0x0}}], 0x1e1730a30afb6559, 0x8014)
pselect6(0x40, &(0x7f0000000240)={0x4, 0x2, 0x1ff, 0x80007d, 0xffffffff, 0x8000000008000, 0x8, 0x1}, 0x0, &(0x7f0000000100)={0x3ff, 0x6, 0xffffffff, 0x400000009, 0x10000000, 0xb, 0xffff}, 0x0, 0x0)
r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25SFACILITIES(r5, 0x89e3, &(0x7f0000000000)={0x14, 0x7d, 0x9, 0x4, 0x81, 0x81})
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
faccessat(r3, 0x0, 0x9b225701cab8b82)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
socket$inet6(0xa, 0x5, 0x2000)
clock_gettime(0x0, &(0x7f0000000180))
fsopen(&(0x7f0000000000)='udf\x00', 0x1)

8m19.240386141s ago: executing program 3 (id=860):
ioperm(0x0, 0x2, 0x7e)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000841}, 0x20040000)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
r4 = syz_open_dev$usbfs(&(0x7f0000000040), 0x12, 0x80801)
ioctl$USBDEVFS_FREE_STREAMS(r4, 0x8008551d, 0xffffffffffffffff)

8m18.921224024s ago: executing program 32 (id=860):
ioperm(0x0, 0x2, 0x7e)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000841}, 0x20040000)
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
r4 = syz_open_dev$usbfs(&(0x7f0000000040), 0x12, 0x80801)
ioctl$USBDEVFS_FREE_STREAMS(r4, 0x8008551d, 0xffffffffffffffff)

11.650707923s ago: executing program 1 (id=2463):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x2, &(0x7f0000000280)=[{0x5c, 0xf7, 0x1}, {0x64, 0x0, 0x6, 0x100007}]})
r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000600)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r0, &(0x7f0000000400), 0x12)
r1 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
sendmmsg(r2, &(0x7f0000007fc0), 0x0, 0x8301)
setsockopt$inet_mtu(r2, 0x0, 0xa, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000040)=0x3)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
write$cgroup_int(r1, &(0x7f0000000180)=0x3, 0x12)
r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00')
lseek(r5, 0x6, 0x1)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r6, 0x10e, 0x1, &(0x7f0000000080)=0x7, 0x4)
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder1\x00', 0x802, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r7, 0x4018620d, &(0x7f0000000100))
r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r8, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
dup3(r8, r7, 0x0)
r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r9, 0x0)

10.732364434s ago: executing program 5 (id=2465):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x3d}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x457, &(0x7f0000000bc0)="$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")
syz_mount_image$vfat(&(0x7f00000024c0), &(0x7f00000000c0)='./file0\x00', 0x204b82f, 0x0, 0x3, 0x0, &(0x7f0000000240))
syz_mount_image$vfat(&(0x7f0000000180), &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x19bd831, 0x0, 0x5, 0x0, &(0x7f0000000140))
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x824851, 0x0, 0x1, 0x0, &(0x7f0000000d40))
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x804053, 0x0, 0xfc, 0x0, &(0x7f00000000c0))
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0)

9.955720803s ago: executing program 1 (id=2467):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, 0x0, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0], 0xfc}}, 0x0)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x2006}, 0x1c)
syz_open_procfs(0x0, &(0x7f00000037c0)='projid_map\x00')
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0x4c}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vlan0\x00', 0x10)
sendmmsg$inet(r0, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000400)="ea", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x119e75c40673edef)

9.796293905s ago: executing program 5 (id=2469):
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000340)='./bus\x00', 0x0, &(0x7f0000000140), 0x1, 0x55a3, &(0x7f0000005680)="$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")
r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0)

9.778506275s ago: executing program 1 (id=2470):
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @any, 0x0, 0x2}, 0xe)
bind$bt_l2cap(r0, &(0x7f0000000140)={0x1f, 0x3, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x1}, 0xe)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x8000, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10)
socket$inet(0x2, 0x4000000000000001, 0x0)
openat$ppp(0xffffffffffffff9c, 0x0, 0x161042, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
getpid()
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="000000000035d60000", @ANYRESHEX=r4, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB='\x00', @ANYRESDEC=0x0])
read$FUSE(r4, &(0x7f00000021c0)={0x2020}, 0x2020)
fcntl$setstatus(r4, 0x4, 0x2800)
syz_fuse_handle_req(r4, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat$udambuf(0xffffffffffffff9c, &(0x7f0000001400), 0x2)
r5 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_MAKE_EQUIV(r5, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x3f7, 0x300, 0x70bd2d, 0x25dfdbff, {0x7, 0x7, './file0', './file0'}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x11}, 0x4000000)
fcntl$addseals(0xffffffffffffffff, 0x409, 0x7)

9.505151848s ago: executing program 0 (id=2471):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_procs(r0, &(0x7f0000000600)='tasks\x00', 0x2, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, 0x0, 0x0)
sendmmsg(r2, 0x0, 0x0, 0x8301)
setsockopt$inet_mtu(r2, 0x0, 0xa, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000040)=0x3)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
write$cgroup_int(r1, &(0x7f0000000180)=0x3, 0x12)
r5 = syz_open_procfs(r3, &(0x7f0000000200)='fdinfo\x00')
lseek(r5, 0x6, 0x1)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r6, 0x10e, 0x1, &(0x7f0000000080)=0x7, 0x4)
r7 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
writev(r7, &(0x7f0000000780)=[{0x0}], 0x1)
lseek(r6, 0x1, 0x2)
r8 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_linger(r8, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8)
socket(0x10, 0x3, 0x2)

9.36433565s ago: executing program 0 (id=2472):
openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000380)=ANY=[@ANYRESDEC], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0xe4b, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x40}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x10000000000002)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_usbip_server_init(0x6)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000840)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
syz_80211_join_ibss(&(0x7f0000000040)='wlan0\x00', &(0x7f0000000080)=@default_ibss_ssid, 0x6, 0x0)
r3 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x80800)
ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)=[0x0], &(0x7f0000000340), 0x3f, 0x1})
mount(&(0x7f00000001c0)=@sr0, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000200)='ext2\x00', 0x21000d, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x24}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xe}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0xf, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
syz_clone(0x23100000, 0x0, 0x0, 0x0, 0x0, 0x0)

7.685456069s ago: executing program 2 (id=2475):
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000680)={0x2, 0x9, 0x4, 0x9, 0x11, 0x0, 0x70bd28, 0x25dfdbfd, [@sadb_x_sa2={0x2, 0x13, 0x6f, 0x0, 0x0, 0x70bd26, 0x3507}, @sadb_x_nat_t_port={0x1, 0x15, 0x4e20}, @sadb_lifetime={0x4, 0x0, 0xc, 0x4, 0x580000, 0x6}, @sadb_x_policy={0x8, 0x12, 0x4, 0x0, 0x0, 0x6e6bbd, 0x6, {0x6, 0x6c, 0x5, 0x9, 0x0, 0x0, 0x0, @in=@private=0xa010101, @in6=@loopback}}]}, 0x88}}, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000019000100000000000000000002180000"], 0x2c}}, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSETLED(r1, 0x4b45, 0x4)
sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b)
syz_usb_connect(0x6, 0x24, &(0x7f00000007c0)={{0x12, 0x1, 0x200, 0xef, 0x15, 0x62, 0x8, 0x4ca, 0x3004, 0x6bf7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x5, 0xfb, 0x0, 0x1, "", [{{0x9, 0x4, 0x5, 0xf9, 0x0, 0x78, 0x42, 0xdf, 0x9}}]}}]}}, 0x0)
r2 = socket$unix(0x1, 0x2, 0x0)
shutdown(r2, 0x1)
sendmmsg$unix(r2, &(0x7f0000000ac0)=[{{&(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x10}}], 0x1, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000000d00)={0x2020, 0x0, 0x0, 0x0, <r3=>0x0, <r4=>0x0}, 0x2020)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x37}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
socket$inet6_icmp(0xa, 0x2, 0x3a)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="06000000040000000800000007000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00@\x00'/21], 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYRESDEC=r4, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000001000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r6}, 0xc)
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3a0475a, &(0x7f0000000280)={[{@nodiscard}]}, 0x82, 0x48f, &(0x7f0000000380)="$eJzs3M1vVFUfAODfvf3gffmsigpItEqMjR8tLags3Gg0cYHRRBeoq9oWQijU0JpYQqAagxsTQ6JrdWniX+DOjVFXJiaudG9IiLIBjYsx9869Mp12mKFOZwrzPMnQc+acO+ecnnvuPfccpgH0rOHsnyRia0T8EhE7qtHlGYarP65dOTv155WzU0lUKq/+nuT5rl45O1VmLY/bUkRG0oj0g6QoZLn5xTMnJmdnZ04X8bGFk2+PzS+eeeL4ycljM8dmTk0cOnTwwPjTT0082ZZ2Zu26uufc3N7dL75+8aWpIxff+v6rrL5bi/TadqzJ4Mq3hrOG/1HJ1ac9HP//T8VtNNtqwkl/FyvCTemLiKy7BrLxX6lUztek7YgX3m9y+JZ1rh6wjrJ706ZV3i/ui0uVhpIbpgK3giS6XQOgO8r7ffb8W746OP3ousvPVh+AsnZfK17VlP5IizwDdc+37TQcEUeW/vose0U71iEAAJr4aOrTw/H4avO/NO6pybe92EMZiog7IuLOiLgrInZGxN0Red57I2JXK4XWbBDUbw2tnP+kl9beuuay+d8zxd7W8vlfOfuLob4iti1v/0By9PjszP7idzISA5uy+PgNyvjm+Z8+bpRWO//LXln55VywqMel/roFuunJhcl8UtoGl9+L2NMff1cqlbr2J1H2UhIRuyNiz8199PYycPzRL/c2ytS8/Ss+7ro27DNVvoh4pNr/S1HX/lKycn9ycNv1/cmx/8XszP6x8qxY6YcfL7zSqPzW278+sv7fvPz8L1I+XywCQ2/W7tfOR4Ody60Ny7jw64cNn2nWev4PJq/l16Ny2/XdyYWF0+MRg8nhPL7s/Ynrx5bxMn/W/pF9WUrZ/vLINL/GRdH/90XE3mK/7P6IeKCo+4MR8VBE7GvY+ojvnmucthH6f7qm/5OoP/93nav+LPt/8aYDfSe+/bpR+a31/8E8NFK8k1//mmi1gmv/zQEAAMCtI81XbpJ09N9wmo6OVv9j787YnM7OzS88dnTunVPT1RWeoRhIy5WuHTXroePJUvGJ1fhEsVZcph8o1o0/6Ys8Pjo1Nzvd5bZDr9vSYPxnfuvrdu2AdbfaPtrEKl9oA24/9eM/XR49/3InKwN0lO9rQ+9qMv7TTtUD6Dz3f+hdq43/83VxewFwe3L/h95l/EPvMv6hd9WN/774uVs1ATpoDV/nFxCYXzwT6YaoRkuB1v8exHoH3tgY1Wgh0O0rEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQHv8EwAA//9gP+wr")
r7 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r7, 0x40086602, &(0x7f0000000080)={@desc={0x84c00, 0x0, @desc2}})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x10, 0x701, 0x0, 0x0, {0xa}}, 0x14}}, 0x0)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000240), r8)
r9 = socket(0x10, 0x3, 0x0)
write(r9, &(0x7f00000000c0)="240000001e005f3814fffffffffffff8070000000000090000000000060005000d101000", 0x24)
sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, 0x0, 0x4008000)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800f00, &(0x7f0000000000)={[{@oldalloc}, {@journal_dev={'journal_dev', 0x3d, 0x4c3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x105c}}, {@test_dummy_encryption}, {@resgid={'resgid', 0x3d, r3}}, {@sb={'sb', 0x3d, 0xfffffffffffffb1b}}, {@noquota}, {}], [{@pcr={'pcr', 0x3d, 0x33}}]}, 0x3, 0x44f, &(0x7f0000000200)="$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")
prctl$PR_SVE_GET_VL(0x33, 0x1ecd)

6.669318751s ago: executing program 5 (id=2478):
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800002, &(0x7f0000000000)={[{@noblock_validity}, {@dioread_nolock}, {@errors_remount}, {@minixdf}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x22}, 0x84, 0x464, &(0x7f0000000ac0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f00000000c0)={[{@uni_xlateno}, {@iocharset={'iocharset', 0x3d, 'cp861'}}, {@rodir}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'cp850'}}, {@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'iso8859-4'}}, {@fat=@flush}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'cp936'}}, {@iocharset={'iocharset', 0x3d, 'cp1255'}}, {@rodir}, {@shortname_lower}, {@rodir}]}, 0x29, 0x346, &(0x7f00000007c0)="$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")
ioctl$FITRIM(r0, 0x40e8662e, &(0x7f0000000080)={0xae, 0xd000007})

6.399666845s ago: executing program 5 (id=2479):
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000005640), 0x1, 0x55a1, &(0x7f0000005680)="$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")

6.164473178s ago: executing program 2 (id=2480):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, 0x0, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0], 0xfc}}, 0x0)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x2006}, 0x1c)
syz_open_procfs(0x0, &(0x7f00000037c0)='projid_map\x00')
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0x4c}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vlan0\x00', 0x10)
sendmmsg$inet(r0, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000400)="ea", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x119e75c40673edef)

6.072489249s ago: executing program 2 (id=2481):
r0 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz3\x00', 0x2, 0x0)
pread64(r0, 0x0, 0x0, 0x42)

6.058715969s ago: executing program 1 (id=2482):
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
sendmsg$AUDIT_SET_FEATURE(0xffffffffffffffff, 0x0, 0x20000081)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0)
r1 = getpid()
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
r5 = getpid()
r6 = syz_pidfd_open(r5, 0x0)
setns(r6, 0x24020000)
mount_setattr(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x9100, &(0x7f0000000140)={0x6, 0x8a, 0x40000}, 0x37)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x21, 0x3, 0x458, 0x120, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x388, 0xffffffff, 0xffffffff, 0x388, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private2, @private2, [], [], 'veth0\x00', 'syzkaller1\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@ipv6header={{0x28}, {0x12, 0x40, 0x1}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0x200, 0x268, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv6=@private1, [], @ipv4=@remote, [], 0x0, 0x0, 0x0, 0x0, 0x4, 0x13}, {@ipv6=@dev, [0xffffffff], @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {@ipv4=@multicast2, [0x0, 0x0, 0xff000000], @ipv4=@multicast1, [0x0, 0xff], 0x4d6, 0x0, 0x0, 0x0, 0x9}, {@ipv6=@rand_addr=' \x01\x00', [0x0, 0xffffff00], @ipv4=@broadcast, [0x0, 0x0, 0xffffff00]}]}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x7f}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r9 = dup(r8)
r10 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000e40)=@filter={'filter\x00', 0x2, 0x4, 0x350, 0xffffffff, 0x1a8, 0xd0, 0x0, 0xfeffffff, 0xffffffff, 0x280, 0x280, 0x280, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @empty, [0xffffff00], [], 'macsec0\x00', 'bond_slave_0\x00', {}, {}, 0x0, 0x0, 0x1, 0x65}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@private1, @empty, [0xffffff00], [], 'sit0\x00', 'vxcan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x1, 0x6}, {0x0, 0x4, 0x2}, 0x0, 0xd}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xff000000, 0xffffff00, 0xff, 0xff000000], [0xffffff00, 0x0, 0x0, 0xff], 'veth0_to_bond\x00', 'veth1_vlan\x00', {0xff}, {}, 0x29, 0x4, 0x0, 0x10}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x20, 0x1000, 0x2, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0)
write$binfmt_misc(r9, &(0x7f0000000000)="000003", 0xfe64)

5.94843809s ago: executing program 2 (id=2483):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_procs(r0, &(0x7f0000000600)='tasks\x00', 0x2, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, 0x0, 0x0)
sendmmsg(r2, 0x0, 0x0, 0x8301)
setsockopt$inet_mtu(r2, 0x0, 0xa, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000040)=0x3)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
write$cgroup_int(r1, &(0x7f0000000180)=0x3, 0x12)
r5 = syz_open_procfs(r3, &(0x7f0000000200)='fdinfo\x00')
lseek(r5, 0x6, 0x1)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r6, 0x10e, 0x1, &(0x7f0000000080)=0x7, 0x4)
r7 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
writev(r7, &(0x7f0000000780)=[{&(0x7f00000003c0)}], 0x1)
lseek(r6, 0x1, 0x2)
r8 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_linger(r8, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8)
socket(0x10, 0x3, 0x2)

5.06551512s ago: executing program 1 (id=2484):
r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x1)
fchdir(r1)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
r2 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents64(r2, &(0x7f0000000140)=""/131, 0x83)

5.015023621s ago: executing program 2 (id=2485):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x2, &(0x7f0000000280)=[{0x5c, 0xf7, 0x1}, {0x64, 0x0, 0x6, 0x100007}]})
r1 = openat$cgroup_procs(r0, &(0x7f0000000600)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f0000000400), 0x12)
r2 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r3, &(0x7f0000000240)={0x2, 0x4e20, @loopback}, 0x10)
sendmmsg(r3, &(0x7f0000007fc0), 0x0, 0x8301)
setsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000040)=0x3)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
write$cgroup_int(r2, &(0x7f0000000180)=0x3, 0x12)
r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00')
lseek(r6, 0x6, 0x1)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r7, 0x10e, 0x1, 0x0, 0x0)
r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder1\x00', 0x802, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000100))
r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
dup3(r9, r8, 0x0)
r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r10, 0x0)

4.492515227s ago: executing program 4 (id=2486):
syz_mount_image$bfs(&(0x7f00000000c0), &(0x7f0000000100)='./file0\x00', 0x808000, &(0x7f0000000240)=ANY=[@ANYBLOB="00cd067ca5fe94f358a97d3799d10d6a0f0d49553970899fa347aa76be1b2509f63779954a38f01042f578e036051ee7d6d1fb7e07c209e650464433ce970000000900000014c931bb00000000"], 0xfd, 0xa0, &(0x7f0000000000)="$eJzs17GJAlEUBdC7s8vuGjgNGNiBNdiKGGpmpAhWZCuWIIgVmInJyDgziHagngP/Py43fcnbXbaDlEm1Saoni+VqNpk3f/p5MA7voEjyl+Q/ybBs8u+tObRbkOxP62n36ubr3DUAAMArKTKqx3cbj/fmJ0mvvQOaBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPCJrgEAAP//sjg1uA==")
r0 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43)
mkdirat(r0, &(0x7f0000000100)='./file0\x00', 0x14)

3.607998308s ago: executing program 0 (id=2487):
syz_mount_image$xfs(&(0x7f0000009740), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000140)={[{@bsdgroups}]}, 0x1, 0x97f6, &(0x7f000001c700)="$eJzs3QeYHXXhcP8NIbSAIKAiWBBQEJUu1UITRIpSBQXpTWkCKiBVUAQUUCyIIiBSld5777333nvv7f+EJIrxEPX//t4Xf5xzniebvXNnZme/nzszuzu79y6/0NLzDwyMMzC8KQdG7bE5zthg04eXGHTEySs/Pu2iE849YvKIBSYbcXOyQSP+H2NgYGCMEesZMW3og8ceN8bAmG9O/3tDxx1v0AQDA7OMuDnviP/nGP7fJA+NnO+NURp1Qwf97eagnYf/e7MJh32IYe/MtueL8w0MDEz0luWHLTLTP32i0pafb+GF/m71N7dhVkNGvP/Wf2MN/zfJPQMDk9w5wI+Pt8476B34lIZ9zIluum6LGd6Bj/2/ruXnW3iRUfyH7YuDR0ybY9g+Puo+aGzUx/kJhxz+5IghfPPxNjAw7BD3D/vK/4qWn2+hxQbe/jg/cPGcLz/xxpvHzaFPDgwMfWpgYOjTAwNDnxkYGPrswMDQ595pl/o/a775Z51/2P4+8vYI9pGP5YlGPi5efMvj4vl5Pn7cwMDA2MPnGfr68PPF+FOOPCdUVVXVf3fzzT/rAnD+H2fU8/9bvy58+Lrdn+n8X1VV9b+3Reabf9Zh5/FRzv/jj+78P/UOQxYe/rP/eecYvtTr7+wnUVVVVf9RCy2C5/+JRnf+X+u2wTt1/q+qqvrf21KLv3n+H3+U8/+kozv/D5ligrtHzDfy64bX3rLKN39/bMT0V94yffBbpr/8lulD3rKet84/1lumv/iW6eMMDAx9cMT0V/8+eeiTw5b55/UMff7vv48z2Zhvmf7CW6aP9ZbpL47YpmHTx37L9NfeMv84f58+/rA3U474uC+NZqirqqr+a1pq1oUWGHjL79mPmDzyF/vx90LPf2OZ59+p7a2qqqqqqqqq/7zXHzv59L//zfdHBt7yt6t/+xvWET8XGHTkmVde+Y5t6H9Hg/755yHbvtPb9H/aMOdxDp1yYGCDZd/pTal3oP81f6te/1fK313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zFvc31/7/9/f+OFy3/pRGzznX2YWMs+vclJxtYd8R7j81xxgbrvgPb/g70br3+P7DuoIGBEb4TDbNcYr6llpluYGBg0TEOO3v2gb/dN+ew++aZePCbf8w5MDDdm2+HTPY2ax7xKgtvvrjDpH9bx5Fvrn+RN/YbPGiUjXhL7z3+gAPWWf6F2Ub9f9q3/zz+9voSL0xywJQj/5ZljFFmGudtFh65/pGfy6jOI7Z9umHbPuOm62804yabb/GZdddfde01115zg1lnmWOWOeeYaa65Zp1xrXXXW3Om4W/fZsyGv3TF4H9nzMYfdcwem++tYzbq5/Z2Y/bPr+rxD6t4c40HzTHVhSPHbMz/cMwGj37Mplx3xAeabGDIwCpvDs2ggYHJxhwysNmwGzOPPTAw2ZAR8042bN7PTTzGwMDuf/9EB414stHh8wzadtg8/2WvWzLXiBHZauR8oz7P+qgb+q9et+SW+Q+eapTXLfm/1f+v8/8/ec056G8DNfIFEEbMM9zrHX6diX/a3inHfPMk93bbO5rnxXkzenyNOeecW/9PPS8Obe/4o9ne0TyP39tu73yrfuHI4av6H9veUY51iw2/89851g2M/lg3mJZf87IPj3qsW/TtN/Ef9uORYzT2KDO93bHuxiVP3HbY+gdGf6xbbN0RTx7w92PdGAMDkw0eeawbduAba8jA7sNuzDLsxthDBg4edmPWN2+MO3DmsBszrL7hemsMevNpBkasd6Zh65134kFvum87/fR7vLHHG2+MOWJbnh/6j9s64vEx5VvP5/NNPHwwRy47cr3DZh253pm2GH7fWCPW+8J/sN6Ry9L2vrji8PvGHrHeF0dZ75DRrHfksv+0P0w36B9+URWON+/o6xrR/jvOaLZ3NM/DjY+3YdP22XS3y/4Hnod70Ntt75ij3963e92Qt93e7feae5f/qecNp8fZjdMOf6yMM+Jx9tp/8Pgdueyox7HhTwQy/LA/zr9zHJvyn45j2w0eY5TBfktv9zXbGjD/8Pcn+9vabtvhyk+OHPsho6z3X33N9pbPZRAcxyYa5fu5QdvsOzCIxnz3vQat9vq/GPMhA//4vcXIMR+57OjGfOx/Z8w/NPox/3e/Tp5u6uH3Dxll+9865gcMzH7KyDEfa5T1/qsxH3v0545/HvOBgSE05k/eO3zcRnc8fbsxH7nsyDEf9nHmmXjMgWHf5E8zYszH+nfGfLL/mcf5eDD/8PfX/NukeR686/SRYz7qGP+rMR/rPxzzre/82+N8mjfvm2qMgbHGGths1U033Xjm4W9H3pxl+Fs+Fp14wfBxHt259O2MRi47uv1izH/HaKJ/y2jQvzKafMy3M/r7rnXeXoue9v/3WDTmf2p0Jh+LNjt6+LiN7uuitxvzkcvSeXDStyw/6veho3n+LPychk1bb4oV9hu5yhGLvZPPnzXy+93/lc+fNfJnkuuOepCvf7d+/u8uf3f5u8vfXf7i3ub6/5Qjr//fu+vSK434pnPIg8tNeNc7vb3vcO/q6/8jfP/h+v9dEy734LBvrUbcN9rrs8Pn+a+8PjvH8P8meWjkfKNeHxx1Q//V9dkXbvnyrP+Prs/+/2rkvvpvfF/c8d9d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eUv7m2u/8808vcApl789EVHXAgdsuCWy+7xTm/vO9y7+vr/CN9/uP6/x7JbLjjGwN/uG+31/+HzOK7/7zx4gf3/m6//j9xXu/5f/6L83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y1/c21z/n3fk7wFcM+N+B478fYADH5xhmXd6e9/h3q3X/3v9f28d/93l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7iRlz/HxjlZRK/1uMCg+v//7t7G/8l88cs/kvlj1n8l84fs/gvkz9m8V82f8ziv1z+mMX/6/ljFv/l88cs/ivkj1n8v5E/ZvH/Zv6YxX/F/DGL/0r5Yxb/b+WPWfxXzh+z+K+SP2bxXzV/zOK/Wv6YxX/1/DGL/xr5Yxb/NfPHLP5r5Y9Z/NfOH7P4r5M/ZvFfN3/M4v/t/DGL/3fyxyz+6+WPWfzXzx+z+G+QP2bx3zB/zOK/Uf6Yxf+7+WMW/43zxyz+m+SPWfw3zR+z+H8vf8zi//38MYv/D4z+Q/71LBb/zYz+/0YW/83zxyz+W+SPWfx/mD9m8d8yf8ziv1X+mMV/6/wxi/82+WMW/23zxyz+2+WPWfx/lD9m8d8+f8ziv0P+mMX/x/ljFv+f5I9Z/HfMH7P4/zR/zOK/U/6YxX/n/DGL/y75Yxb/n+WPWfx/nj9m8d81f8ziv1v+mMV/9/wxi/8v8scs/r/MH7P475E/ZvH/Vf6Yxf/X+WMW/9/kj1n8f5s/ZvHfM3/M4v+7/DGL/175Yxb/3+ePWfz/kD9m8d87f8zi/8f8MYv/PvljFv9988cs/vvlj1n8/5Q/ZvHfP3/M4v/n/DGL/wH5Yxb/A/PHLP4H5Y9Z/A/OH7P4H5I/ZvE/NH/M4v+X/DGL/1/zxyz+h+WPWfwPzx+z+B+RP2bxPzJ/zOJ/VP6Yxf/o/DGL/zH5Yxb/Y/PHLP7H5Y9Z/I/PH7P4n5A/ZvE/MX/M4n9S/pjF/+T8MYv/KfljFv9T88cs/qflj1n8T88fs/ifkT9m8T8zf8zif1b+mMX/7Pwxi/85+WMW/3Pzxyz+5+WPWfzPzx+z+F+QP2bxvzB/zOJ/Uf6Yxf/i/DGL/yX5Yxb/S/PHLP6X5Y9Z/C/PH7P4X5E/ZvG/Mn/M4n9V/pjF/+r8MYv/NfljFv9r88cs/tflj1n8r88fs/jfkD9m8b8xf8zif1P+mMX/5vwxi/8t+WMW/1vzxyz+t+WPWfxvzx+z+N+RP2bxvzN/zOJ/V/6Yxf/u/DGL/z35Yxb/e/PHLP735Y9Z/O/PH7P4P5A/ZvF/MH/M4v9Q/pjF/+H8MYv/I/ljFv9H88cs/o/lj1n8H88fs/g/kT9m8X8yf8zi/1T+mMX/6fxHbeTwKPyfyR+z7P/P5o9Z/J/LH7P4P58/ZvF/IX/M4v9i/pjF/6X8MYv/y/ljFv9X8scs/q/mj1n8X8sfs/i/nj9m8X8jf0ziP2ggf8ziPyh/zOI/Rv6YxX9w/pjFf8z8MYv/kPwxi/9Y+WMW/7Hzxyz+4+SPWfzHzR+z+I+XP2bxH5o/ZvEfP3/M4j9B/pjF/z35Yxb/CfPHLP4T5Y9Z/N+bP2bxnzh/zOI/Sf6YxX/S/DGL//vyxyz+788fs/h/IH/M4j9Z/pjF/4P5Yxb/yfPHLP5T5I9Z/D+UP2bx/3D+mMX/I/ljFv+P5o9Z/KfMH7P4fyx/zOI/Vf6YxX/q/DGL/zT5Yxb/j+ePWfw/kT9m8Z82f8ziP13+mMX/k/ljFv/p88cs/p/KH7P4fzp/zOL/mfwxi/8M+WMW/xnzxyz+M+WPWfxnzh+z+M+SP2bxnzV/zOI/W/6Yxf+z+WMW/9nzxyz+c+SPWfznzB+z+M+VP2bxnzt/zOI/T/6Yxf9z+WMW/8/nj1n8v5A/ZvH/Yv6YxX/e/DGL/3z5Yxb/+fPHLP4L5I9Z/BfMH7P4fyl/zOK/UP6YxX/h/DGL/5fzxyz+i+SPWfy/kj9m8V80f8ziv1j+mMV/8fwxi/8S+WMW/6/mj1n8v5Y/ZvFfMn/M4r9U/pjFf+n8MYv/MvljFv9l88cs/svlj1n8v54/ZvFfPn/M4r9C/pjF/xv5Yxb/b+aPWfxXzB+z+K+UP2bx/1b+mMV/5fwxi/8q+WMW/1Xzxyz+q+WPWfxXzx+z+K+RP2bxXzN/zOK/Vv6YxX/t/DGL/zr5Yxb/dfPHLP7fzh+z+H8nf8ziv17+mMV//fwxi/8G+WMW/w3zxyz+G+WPWfy/mz9m8d84f8ziv0n+mMV/0/wxi//38scs/t/PH7P4/yB/zOK/Wf6YxX/z/DGL/xb5Yxb/H+aPWfy3zB+z+G+VP2bx3zp/zOK/Tf6YxX/b/DGL/3b5Yxb/H+WPWfy3zx+z+O+QP2bx/3H+mMX/J/ljFv8d88cs/j/NH7P475Q/ZvHfOX/M4r9L/pjF/2f5Yxb/n+ePWfx3zR+z+O+WP2bx3z1/zOL/i/wxi/8v88cs/nvkj1n8f5U/ZvH/df6Yxf83+WMW/9/mj1n898wfs/j/Ln/M4r9X/pjF//f5Yxb/P+SPWfz3zh+z+P8xf8ziv4/U/403Rn+/xX9fqf+/yuK/X/6Yxf9P+WMW//3zxyz+f84fs/gfkD9m8T8wf8zif1D+mMX/4Pwxi/8h+WMW/0Pzxyz+f8kfs/j/NX/M4n9Y/pjF//D8MYv/EfljFv8j88cs/kflj1n8j84fs/gfkz9m8T82f8zif1z+mMX/+Pwxi/8J+WMW/xPzxyz+J+WPWfxPzh+z+J+SP2bxPzV/zOJ/Wv6Yxf/0/DGL/xn5Yxb/M/PHLP5n5Y9Z/M/OH7P4n5M/ZvE/N3/M4n9e/pjF//z8MYv/BfljFv8L88cs/hflj1n8L84fs/hfkj9m8b80f8zif1n+mMX/8vwxi/8V+WMW/yvzxyz+V+WPWfyvzh+z+F+TP2bxvzZ/zOJ/Xf6Yxf/6/DGL/w35Yxb/G/PHLP435Y9Z/G/OH7P435I/ZvG/NX/M4n9b/pjF//b8MYv/HfljFv8788cs/nflj1n8784fs/jfkz9m8b83f8zif1/+mMX//vwxi/8D+WMW/wfzxyz+D+WPWfwfzh+z+D+SP2bxfzR/zOL/WP6Yxf/x/DGL/xP5Yxb/J/PHLP5P5Y9Z/J/OH7P4P5M/ZvF/Nn/M4v9c/pjF//n8MYv/C/ljFv8X88cs/i/lj1n8X84fs/i/kj9m8X81f8zi/1r+mMX/9fwxi/8b+WMS/zffzf+fs/gPyh+z+I+RP2bxH5w/ZvEfc7j/3mO8U9v1X5rFf0j7P2bxHyt/zOI/dv6YxX+c/DGL/7j5Yxb/8fLHLP5D88cs/uPnj1n8J8gfs/i/J3/M4j9h/pjFf6L8MYv/e/PHLP4T549Z/CfJH7P4T5o/ZvF/X/6Yxf/9+WMW/w/kj1n8J8sfs/h/MH/M4j95/pjFf4r8MYv/h/LHLP4fzh+z+H8kf8zi/9H8MYv/lPljFv+P5Y9Z/KfKH7P4T50/ZvGfJn/M4v/x/DGL/yfyxyz+0+aPWfynG43/5P8vtuu/NIv/J9v/MYv/9PljFv9P5Y9Z/D+dP2bx/0z+mMV/hvwxi/+M+WMW/5nyxyz+M+ePWfxnyR+z+M+aP2bxny1/zOL/2fwxi//s+WMW/znyxyz+c+aPWfznyh+z+M+dP2bxnyd/zOL/ufwxi//n88cs/l/IH7P4fzF/zOI/b/6YxX++/DGL//z5Yxb/BfLHLP4L5o9Z/L+UP2bxXyh/zOK/cP6Yxf/L+WMW/0Xyxyz+X8kfs/gvmj9m8V8sf8ziv3j+mMV/ifwxi/9X88cs/l/LH7P4L5k/ZvFfKn/M4r90/pjFf5n8MYv/svljFv/l8scs/l/PH7P4L58/ZvFfIX/M4v+N/DGL/zfzxyz+K+aPWfxXyh+z+H8rf8ziv3L+mMV/lfwxi/+q+WMW/9Xyxyz+q+ePWfzXyB+z+K+ZP2bxXyt/zOK/dv6YxX+d/DGL/7r5Yxb/b+ePWfy/kz9m8V8vf8ziv37+mMV/g/wxi/+G+WMW/43yxyz+380fs/hvnD9m8d8kf8ziv2n+mMX/e/ljFv/v549Z/H+QP2bx3yx/zOK/ef6YxX+L/DGL/w/zxyz+W+aPWfy3yh+z+G+dP2bx3yZ/zOK/bf6YxX+7/DGL/4/yxyz+2+ePWfx3yB+z+P84f8zi/5P8MYv/jvljFv+f5o9Z/HfKH7P475w/ZvHfJX/M4v+z/DGL/8/zxyz+u+aPWfx3yx+z+O+eP2bx/0X+mMX/l/ljFv898scs/r/KH7P4/zp/zOL/m/wxi/9v88cs/nvmj1n8f5c/ZvHfK3/M4v/7/DGL/x/yxyz+e+ePWfz/mD9m8d8nf8ziv2/+mMV/v/wxi/+f8scs/vvnj1n8/5w/ZvE/IH/M4n9g/pjF/6D8MYv/wfljFv9D8scs/ofmj1n8/5I/ZvH/a/6Yxf+w/DGL/+H5Yxb/I/LHLP5H5o9Z/I/KH7P4H50/ZvE/Jn/M4n9s/pjF/7j8MYv/8fljFv8T8scs/ifmj1n8T8ofs/ifnD9m8T8lf8zif2r+mMX/tPwxi//p+WMW/zPyxyz+Z+aPWfzPyh+z+J+dP2bxPyd/zOJ/bv6Yxf+8/DGL//n5Yxb/C/LHLP4X5o9Z/C/KH7P4X5w/ZvG/JH/M4n9p/pjF/7L8MYv/5fljFv8r8scs/lfmj1n8r8ofs/hfnT9m8b8mf8zif23+2KDHBgYM/tflj426/w9+pzfo/7S38b8+f8xy/L8hf8zif2P+mMX/pvwxi//N+WMW/1vyxyz+t+aPWfxvyx+z+N+eP2bxvyN/zOJ/Z/6Yxf+u/DGL/935Yxb/e/LHLP735o9Z/O/LH7P4358/ZvF/IH/M4v9g/pjF/6H8MYv/w/ljFv9H8scs/o/mj1n8H8sfs/g/nj9m8X8if8zi/2T+mMX/qfwxi//T+WMW/2fyxyz+z+aPWfyfyx+z+D+fP2bxfyF/zOL/Yv6Yxf+l/DGL/8v5Yxb/V/LHLP6v5o9Z/F/LH7P4v54/ZvF/I39M4v/m05rm/89Z/Aflj1n8x8gfs/gPzh+z+I+ZP2bxH5I/ZvEfK3/M4j92/pjFf5z8MYv/uPljFv/x8scs/kPzxyz+4+ePWfwnyB+z+L8nf8ziP2H+mMV/ovwxi/9788cs/hPnj1n8J8kfs/hPmj9m8X9f/pjF//35Yxb/D+SPWfwnyx+z+H8wf8ziP3n+mMV/ivwxi/+H8scs/h/OH7P4fyR/zOL/0fwxi/+U+WMW/4/lj1n8p8ofs/hPnT9m8Z8mf8zi//H8MYv/J/LHLP7T5o9Z/KfLH7P4fzJ/zOI/ff6Yxf9T+WMW/0/nj1n8P5M/ZvGfIX/M4j9j/pjFf6b8MYv/zPljFv9Z8scs/rPmj1n8Z8sfs/h/Nn/M4j97/pjFf478MYv/nPljFv+58scs/nPnj1n858kfs/h/Ln/M4v/5/DGL/xfyxyz+X8wfs/jPmz9m8Z8vf8ziP3/+mMV/gfwxi/+C+WMW/y/lj1n8F8ofs/gvnD9m8f9y/pjFf5H8MYv/V/LHLP6L5o9Z/BfLH7P4L54/ZvFfIn/M4v/V/DGL/9fyxyz+S+aPWfyXyh+z+C+dP2bxXyZ/zOK/bP6YxX+5/DGL/9fzxyz+y+ePWfxXyB+z+H8jf8zi/838MYv/ivljFv+V8scs/t/KH7P4r5w/ZvFfJX/M4r9q/pjFf7X8MYv/6vljFv818scs/mvmj1n818ofs/ivnT9m8V8nf8ziv27+mMX/2/ljFv/v5I9Z/NfLH7P4r58/ZvHfIH/M4r9h/pjFf6P8MYv/d/PHLP4b549Z/DfJH7P4b5o/ZvH/Xv6Yxf/7+WMW/x/kj1n8N8sfs/hvnj9m8d8if8zi/8P8MYv/lvljFv+t8scs/lvnj1n8t8kfs/hvmz9m8d8uf8zi/6P8MYv/9vljFv8d8scs/j/OH7P4/yR/zOK/Y/6Yxf+n+WMW/53yxyz+O+ePWfx3yR+z+P8sf8zi//P8MYv/rvljFv/d8scs/rvnj1n8f5E/ZvH/Zf6YxX+P/DGL/6/yxyz+v84fs/j/Jn/M4v/b/DGL/575Yxb/3+WPWfz3yh+z+P8+f8zi/4f8MYv/3vljFv8/5o9Z/PfJH7P475s/ZvHfL3/M4v+n/DGL//75Yxb/P+ePWfwPyB+z+B+YP2bxPyh/zOJ/cP6Yxf+Q/DGL/6H5Yxb/v+SPWfz/mj9m8T8sf8zif3j+mMX/iPwxi/+R+WMW/6Pyxyz+R+ePWfyPyR+z+B+bP2bxPy5/zOJ/fP6Yxf+E/DGL/4n5Yxb/k/LHLP4n549Z/E/JH7P4n5o/ZvE/LX/M4n96/pjF/4z8MYv/mfljFv+z8scs/mfnj1n8z8kfs/ifmz9m8T8vf8zif37+mMX/gvwxi/+F+WMW/4vyH6Uhb761+F+cP2bxvyR/zOJ/af6Yxf+y/DGL/+X5Yxb/K/LHLP5X5o9Z/K/KH7P4X50/ZvG/Jn/M4n9t/ti71n/Mf5g6+Lr8sXet/yj7//X5Yxb/G/LHLP435o9Z/G/KH7P435w/ZvG/JX/M4n9r/pjF/7b8MYv/7fljFv878scs/nfmj1n878ofs/jfnT9m8b8nf8zif2/+mMX/vvwxi//9+WMW/wfyxyz+D+aPWfwfyh+z+D+cP2bxfyR/zOL/aP6Yxf+x/DGL/+P5Yxb/J/LHLP5P5o9Z/J/KH7P4P50/ZvF/Jn/M4v9s/pjF/7n8MYv/8/ljFv8X8scs/i/mj1n8X8ofs/i/nD9m8X8lf8zi/2r+mMX/tfwxi//r+WMW/zfyxyT+bz4bbP7/nMV/UP6YxX+M/DGL/+D8MYv/mPljFv8h+WMW/7Hyxyz+Y+ePWfzHyR+z+I+bP2bxHy9/zOI/NH/M4j9+/pjFf4L8MYv/e/LHLP4T5o9Z/CfKH7P4v/df+UsfHBb/ib3Eo83iP0n+mMV/0vwxi//78scs/u/PH7P4fyB/zOI/Wf6Yxf+D+WMW/8nzxyz+U+SPWfw/lD9m8f9w/pjF/yP5Yxb/j+aPWfynzB+z+H8sf8ziP1X+mMV/6vwxi/80+WMW/4/nj1n8P5E/ZvGfNn/M4j9d/pjF/5P5Yxb/6fPHLP6fyh+z+H86f8zi/5n8MYv/DPljFv8Z88cs/jPlj1n8Z84fs/jPkj9m8Z81f8ziP1v+mMX/s/ljFv/Z88cs/nPkj1n858wfs/jPlT9m8Z87f8ziP0/+mMX/c/ljFv/P549Z/L+QP2bx/2L+mMV/3vwxi/98+WMW//nzxyz+C+SPWfwXzB+z+H8pf8ziv1D+mMV/4fwxi/+X88cs/ovkj1n8v5I/ZvFfNH/M4r9Y/pjFf/H8MYv/EvljFv+v5o9Z/L+WP2bxXzJ/zOK/VP6YxX/p/DGL/zL5Yxb/ZfPHLP7L5Y9Z/L+eP2bxXz5/zOK/Qv6Yxf8b+WMW/2/mj1n8V8wfs/ivlD9m8f9W/pjFf+X8MYv/KvljFv9V88cs/qvlj1n8V88fs/ivkT9m8V8zf8ziv1b+mMV/7fwxi/86+WMW/3Xzxyz+384fs/h/J3/M4r9e/pjFf/38sXev/7z/4L9B/ti71/8f9/8N88cs/hvlj1n8v5s/ZvHfOH/M4r9J/pjFf9P8MYv/9/LHLP7fzx+z+P8gf8ziv1n+mMV/8/wxi/8W+WMW/x/mj1n8t8wfs/hvlT9m8d86f8ziv03+mMV/2/wxi/92+WMW/x/lj1n8t88fs/jvkD9m8f9x/pjF/yf5Yxb/HfPHLP4/zR+z+O+UP2bx3zl/zOK/S/6Yxf9n+WMW/5/nj1n8d80fs/jvlj9m8d89f8zi/4v8MYv/L/PHLP575I9Z/H+VP2bx/3X+mMX/N/ljFv/f5o9Z/PfMH7P4/y5/zOK/V/6Yxf/3+WMW/z/kj1n8984fs/j/MX/M4r9P/pjFf9/8MYv/fvljFv8/5Y9Z/PfPH7P4/zl/zOJ/QP6Yxf/A/DGL/0H5Yxb/g/PHLP6H5I9Z/A/NH7P4/yV/zOL/1/wxi/9h+WMW/8Pzxyz+R+SPWfyPzB+z+B+VP2bxPzp/zOJ/TP6Yxf/Y/DGL/3H5Yxb/4/PHLP4n5I9Z/E9U+n96zn81h8X/JKX/v87if3L+mMX/lPwxi/+p+WMW/9Pyxyz+p+ePWfzPyB+z+J+ZP2bxPyt/zOJ/dv6Yxf+c/DGL/7n5Yxb/8/LHLP7n549Z/C/IH7P4X5g/ZvG/KH/M4n9x/pjF/5L8MYv/pfljFv/L8scs/pfnj1n8r8gfs/hfmT9m8b8qf8zif3X+mMX/mvwxi/+1+WMW/+vyxyz+1+ePWfxvyB+z+N+YP2bxvyl/zOJ/c/6Yxf+W/DGL/635Yxb/2/LHLP63549Z/O/IH7P435k/ZvG/K3/M4n93/pjF/578MYv/vfljFv/78scs/vfnj1n8H8gfs/g/mD9m8X8of8zi/3D+mMX/kfwxi/+j+WMW/8fyxyz+j+ePWfyfyB+z+D+ZP2bxfyp/zOL/dP6Yxf+Z/DGL/7P5Yxb/5/LHLP7P549Z/F/IH7P4v5g/ZvF/KX/M4v9y/pjF/5X8MYv/q/ljFv/X8scs/q/nj1n838gfk/gPGcgfs/gPyh+z+I+RP2bxH5w/ZvEfM3/M4j8kf8ziP1b+mMV/7Pwxi/84+WMW/3Hzxyz+4+WPWfyH5o9Z/MfPH7P4T5A/ZvF/T/6YxX/C/DGL/0T5Yxb/9+aPWfwnzh+z+E+SP2bxnzR/zOL/vvwxi//788cs/h/IH7P4T5Y/ZvH/YP6YxX/y/DGL/xT5Yxb/D+WPWfw/nD9m8f9I/pjF/6P5Yxb/KfPHLP4fyx+z+E+VP2bxnzp/zOI/Tf6Yxf/j+WMW/0/kj1n8p80fs/hPlz9m8f9k/pjFf/r8MYv/p/LHLP6fzh+z+H8mf8ziP0P+mMV/xvwxi/9M+WMW/5nzxyz+s+SPWfxnzR+z+M+WP2bx/2z+mMV/9vwxi/8c+WMW/znzxyz+c+WPWfznzh+z+M+TP2bx/1z+mMX/8/ljFv8v5I9Z/L+YP2bxnzd/zOI/X/6YxX/+/DGL/wL5Yxb/BfPHLP5fyh+z+C+UP2bxXzh/zOL/5fwxi/8i+WMW/6/kj1n8F80fs/gvlj9m8V88f8ziv0T+mMX/q/ljFv+v5Y9Z/JfMH7P4L5U/ZvFfOn/M4r9M/pjFf9n8MYv/cvljFv+v549Z/JfPH7P4r5A/ZvH/Rv6Yxf+b+WMW/xXzxyz+K+WPWfy/lT9m8V85f8ziv0r+mMV/1fwxi/9q+WMW/9Xzxyz+a+SPWfzXzB+z+K+VP2bxXzt/zOK/Tv6YxX/d/DGL/7fzxyz+38kfs/ivlz9m8V8/f8ziv0H+mMV/w/wxi/9G+WMW/+/mj1n8N84fs/hvkj9m8d80f8zi/738MYv/9/PHLP4/yB+z+G+WP2bx3zx/zOK/Rf6Yxf+H+WMW/y3zxyz+W+WPWfy3zh+z+G+TP2bx3zZ/zOK/Xf6Yxf9H+WMW/+3zxyz+O+SPWfx/nD9m8f9J/pjFf8f8MYv/T/PHLP475Y9Z/HfOH7P475I/ZvH/Wf6Yxf/n+WMW/13zxyz+u+WPWfx3zx+z+P8if8zi/8v8MYv/HvljFv9f5Y9Z/H+dP2bx/03+mMX/t/ljFv8988cs/r/LH7P475U/ZvH/ff6Yxf8P+WMW/73zxyz+f8wfs/jvkz9m8d83f8ziv1/+mMX/T/ljFv/988cs/n/OH7P4H5A/ZvE/MH/M4n9Q/pjF/+D8MYv/IfljFv9D88cs/n/JH7P4/zV/zOJ/WP6Yxf/w/DGL/xH5Yxb/I/PHLP5H5Y9Z/I/OH7P4H5M/ZvE/Nn/M4n9c/pjF//j8MYv/CfljFv8T88cs/iflj1n8T84fs/ifkj9m8T81f8zif1r+mMX/9Pwxi/8Z+WMW/zPzxyz+Z+WPWfzPzh+z+J+TP2bxPzd/zOJ/Xv6Yxf/8/DGL/wX5Yxb/C/PHLP4X5Y9Z/C/OH7P4X5I/ZvG/NH/M4n9Z/pjF//L8MYv/FfljFv8r88cs/lflj1n8r84fs/hfkz9m8b82f8zif13+mMX/+vwxi/8NIv8x/oN5Lf43ivz/kyz+N+WPWfxvzh+z+N+SP2bxvzV/zOJ/W/6Yxf/2/DGL/x35Yxb/O/PHLP535Y9Z/O/OH7P435M/ZvG/N3/M4n9f/pjF//78MYv/A/ljFv8H88cs/g/lj1n8H84fs/g/kj9m8X80f8zi/1j+mMX/8fwxi/8T+WMW/yfzxyz+T+WPWfyfzh+z+D+TP2bxfzZ/zOL/XP6Yxf/5/DGL/wv5Yxb/F/PHLP4v5Y9Z/F/OH7P4v5I/ZvF/NX/M4v9a/pjF//X8MYv/G/ljEv+xBvLHLP6D8scs/mPkj1n8B+ePWfzHzB+z+A/JH7P4j5U/ZvEfO3/M4j9O/pjFf9z8MYv/ePljFv+h+WMW//Hzxyz+E+SPWfzfkz9m8Z8wf8ziP1H+mMX/vfljFv+J88cs/pPkj1n8J80fs/i/L3/M4v/+/DGL/wfyxyz+k+WPWfw/mD9m8Z88f8ziP0X+mMX/Q/ljFv8P549Z/D+SP2bx/2j+mMV/yvwxi//H8scs/lPlj1n8p84fs/hPkz9m8f94/pjF/xP5Yxb/afPHLP7T5Y9Z/D+ZP2bxnz5/zOL/qfwxi/+n88cs/p/JH7P4z5A/ZvGfMX/M4j9T/pjFf+b8MYv/LPljFv9Z88cs/rPlj1n8P5s/ZvGfPX/M4j9H/pjFf878MYv/XPljFv+588cs/vPkj1n8P5c/ZvH/fP6Yxf8L+WMW/y/mj1n8580fs/jPlz9m8Z8/f8ziv0D+mMV/wfwxi/+X8scs/gvlj1n8F84fs/h/OX/M4r9I/pjF/yv5Yxb/RfPHLP6L5Y9Z/BfPH7P4L5E/ZvH/av6Yxf9r+WMW/yXzxyz+S+WPWfyXzh+z+C+TP2bxXzZ/zOK/XP6Yxf/r+WMW/+Xzxyz+K+SPWfy/kT9m8f9m/pjFf8X8MYv/SvljFv9v5Y9Z/FfOH7P4r5I/ZvFfNX/M4r9a/pjFf/X8MYv/GvljFv8188cs/mvlj1n8184fs/ivkz9m8V83f8zi/+38MYv/d/LHLP7r5Y9Z/NfPH7P4b5A/ZvHfMH/M4r9R/pjF/7v5Yxb/jfPHLP6b5I9Z/DfNH7P4fy9/zOL//fwxi/8P8scs/pvlj1n8N88fs/hvkT9m8f9h/pjFf8v8MYv/VvljFv+t88cs/tvkj1n8t80fs/hvlz9m8f9R/pjFf/v8MYv/DvljFv8f549Z/H+SP2bx3zF/zOL/0/wxi/9O+WMW/53zxyz+u+SPWfx/lj9m8f95/pjFf9f8MYv/bvljFv/d88cs/r/IH7P4/zJ/zOK/R/6Yxf9X+WMW/1/nj1n8f5M/ZvH/bf6YxX/P/DGL/+/yxyz+e+WPWfx/nz9m8f9D/pjFf+/8MYv/H/PHLP775I9Z/PfNH7P475c/ZvH/U/6YxX///DGL/5/zxyz+B+SPWfwPzB+z+B+UP2bxPzh/zOJ/SP6Yxf/Q/DGL/1/yxyz+f80fs/gflj9m8T88f8zif0T+mMX/yPwxi/9R+WMW/6Pzxyz+x+SPWfyPzR+z+B+XP2bxPz5/zOJ/Qv6Yxf/E/DGL/0n5Yxb/k/PHLP6n5I9Z/E/NH7P4n5Y/ZvE/PX/M4n9G/pjF/8z8MYv/WfljFv+z88cs/ufkj1n8z80fs/iflz9m8T8/f8zif0H+mMX/wvwxi/9F+WMW/4vzxyz+l+SPWfwvzR+z+F+WP2bxvzx/zOJ/Rf6Yxf/K/DGL/1X5Yxb/q/PHLP7X5I9Z/K/NH7P4X5c/ZvG/Pn/M4n9D/pjF/8b8MYv/TfljFv+b88cs/rfkj1n8b80fs/jflj9m8b89f8zif0f+mMX/zvwxi/9d+WMW/7vzxyz+9+SPWfzvzR+z+N+XP2bxvz9/zOL/QP6Yxf/B/DGL/0P5Yxb/h/PHLP6P5I9Z/B/NH7P4P5Y/ZvF/PH/M4v9E/pjF/8n8MYv/U/ljFv+n88cs/s/kj1n8n80fs/g/lz9m8X8+f8zi/0L+mMX/xfwxi/9L+WMW/5fzxyz+r+SPWfxfzR+z+L+WP2bxfz1/zOL/Rv6YxH/sgfwxi/+g/DGL/xj5Yxb/wfljFv8x88cs/kPyxyz+Y+WPWfzHzh+z+I+TP2bxHzd/zOI/Xv6YxX9o/pjFf/z8MYv/BPljFv/35I9Z/CfMH7P4T5Q/ZvF/b/6YxX/i/DGL/yT5Yxb/SfPHLP7vyx+z+L8/f8zi/4H8MYv/ZPljFv8P5o9Z/CfPH7P4T5E/ZvH/UP6Yxf/D+WMW/4/kj1n8P5o/ZvGfMn/M4v+x/DGL/1T5Yxb/qfPHLP7T5I9Z/D+eP2bx/0T+mMV/2vwxi/90+WMW/0/mj1n8p88fs/h/Kn/M4v/p/DGL/2fyxyz+M+SPWfxnzB+z+M+UP2bxnzl/zOI/S/6YxX/W/DGL/2z5Yxb/z+aPWfxnzx+z+M+RP2bxnzN/zOI/V/6YxX/u/DGL/zz5Yxb/z+WPWfw/nz9m8f9C/pjF/4v5Yxb/efPHLP7z5Y9Z/OfPH7P4L5A/ZvFfMH/M4v+l/DGL/0L5Yxb/hfPHLP5fzh+z+C+SP2bx/0r+mMV/0fwxi/9i+WMW/8Xzxyz+S+SPWfy/mj9m8f9a/pjFf8n8MYv/UvljFv+l88cs/svkj1n8l80fs/gvlz9m8f96/pjFf/n8MYv/CvljFv9v5I9Z/L+ZP2bxXzF/zOK/Uv6Yxf9b+WMW/5Xzxyz+q+SPWfxXzR+z+K+WP2bxXz1/zOK/Rv6YxX/N/DGL/1r5Yxb/tfPHLP7r5I9Z/NfNH7P4fzt/zOL/nfwxi/96+WMW//Xzxyz+G+SPWfw3zB+z+G+UP2bx/27+mMV/4/wxi/8m+WMW/03zxyz+38sfs/h/P3/M4v+D/DGL/2b5Yxb/zfPHLP5b5I9Z/H+YP2bx3zJ/zOK/Vf6YxX/r/DGL/zb5Yxb/bfPHLP7b5Y9Z/H+UP2bx3z5/zOK/Q/6Yxf/H+WMW/5/kj1n8d8wfs/j/NH/M4r9T/pjFf+f8MYv/LvljFv+f5Y9Z/H+eP2bx3zV/zOK/W/6YxX/3/DGL/y/yxyz+v8wfs/jvkT9m8f9V/pjF/9f5Yxb/3+SPWfx/mz9m8d8zf8zi/7v8MYv/XvljFv/f549Z/P+QP2bx3zt/zOL/x/wxi/8++WMW/33zxyz+++WPWfz/lD9m8d8/f8zi/+f8MYv/AfljFv8D7f6DebLF/yC7/9tk8T84f8zif0j+mMX/0Pwxi/9f8scs/n/NH7P4H5Y/ZvE/PH/M4n9E/pjF/8j8MYv/UfljFv+j88cs/sfkj1n8j80fs/gflz9m8T8+f8zif0L+mMX/xPwxi/9J+WMW/5Pzxyz+p+SPWfxPzR+z+J+WP2bxPz1/zOJ/Rv6Yxf/M/DGL/1n5Yxb/s/PHLP7n5I9Z/M/NH7P4n5c/ZvE/P3/M4n9B/pjF/8L8MYv/RfljFv+L88cs/pfkj1n8L80fs/hflj9m8b88f8zif0X+mMX/yvwxi/9V+WMW/6vzxyz+1+SPWfyvzR+z+F+XP2bxvz5/zOJ/Q/6Yxf/G/DGL/035Yxb/m/PHLP635I9Z/G/NH7P435Y/ZvG/PX/M4n9H/pjF/878MYv/XfljFv+788cs/vfkj1n8780fs/jflz9m8b8/f8zi/0D+mMX/wfxHNOQfbln8H8ofs/g/nD9m8X8kf8zi/2j+mMX/sfwxi//j+WMW/yfyxyz+T+aPWfyfyh+z+D+dP2bxfyZ/zOL/bP6Yxf+5/DGL//P5Yxb/F/LHLP4v5o9Z/F/KH7P4v5w/ZvF/JX/M4v9q/pjF/7X8MYv/6/ljFv838sck/uMM5I9Z/Aflj1n8x8gfs/gPzh+z+I+ZP2bxH5I/ZvEfK3/M4j92/pjFf5z8MYv/uPljFv/x8scs/kPzxyz+4+ePWfwnyB+z+L8nf8ziP2H+mMV/ovwxi/9788cs/hPnj1n8J8kfs/hPmj/2LvQfi/zflz/2LvTH/f/9+WMW/w/kj1n8Jxut/xuD/+9v2H9nFv8Ptv9jFv/J88cs/lPkj1n8P5Q/ZvH/cP6Yxf8j+WMW/4/mj1n8p8wfs/h/LH/M4j9V/pjFf+r8MYv/NPljFv+P549Z/D+RP2bxnzZ/zOI/Xf6Yxf+T+WMW/+nzxyz+n8ofs/h/On/M4v+Z/DGL/wz5Yxb/GfPHLP4z5Y9Z/GfOH7P4z5I/ZvGfNX/M4j9b/pjF/7P5Yxb/2fPHLP5z5I9Z/OfMH7P4z5U/ZvGfO3/M4j9P/pjF/3P5Yxb/z+ePWfy/kD9m8f9i/pjFf978MYv/fPljFv/588cs/gvkj1n8F8wfs/h/KX/M4r9Q/pjFf+H8MYv/l/PHLP6L5I9Z/L+SP2bxXzR/zOK/WP6YxX/x/DGL/xL5Yxb/r+aPWfy/lj9m8V8yf8ziv1T+mMV/6fwxi/8y+WMW/2Xzxyz+y+WPWfy/nj9m8V8+f8ziv0L+mMX/G/ljFv9v5o9Z/FfMH7P4r5Q/ZvH/Vv6YxX/l/DGL/yr5Yxb/VfPHLP6r5Y9Z/FfPH7P4r5E/ZvFfM3/M4r9W/pjFf+38MYv/OvljFv9188cs/t/OH7P4fyd/zOK/Xv6YxX/9/DGL/wb5Yxb/DfPHLP4b5Y9Z/L+bP2bx3zh/zOK/Sf6YxX/T/DGL//fyxyz+388fs/j/IH/M4r9Z/pjFf/P8MYv/FvljFv8f5o9Z/LfMH7P4b5U/ZvHfOn/M4r9N/pjFf9v8MYv/dvljFv8f5Y9Z/LfPH7P475A/ZvH/cf6Yxf8n+WMW/x3zxyz+P80fs/jvlD9m8d85f8ziv0v+mMX/Z/ljFv+f549Z/HfNH7P475Y/ZvHfPX/M4v+L/DGL/y/zxyz+e+SPWfx/lT9m8f91/pjF/zf5Yxb/3+aPWfz3zB+z+P8uf8ziv1f+mMX/9/ljFv8/5I9Z/PfOH7P4/zF/zOK/T/6YxX/f/DGL/375Yxb/P+WPvfv8/678Vv/988feff68//85f8zif0D+mMX/wPwxi/9B+WMW/4Pzxyz+h+SPWfwPzR+z+P8lf8zi/9f8MYv/YfljFv/D88cs/kfkj1n8j8wfs/gflT9m8T86f8zif0z+mMX/2Pwxi/9x+WMW/+Pzxyz+J+SPWfxPzB+z+J+UP2bxPzl/zOJ/Sv6Yxf/U/DGL/2n5Yxb/0/PHLP5n5I9Z/M/MH7P4n5U/ZvE/O3/M4n9O/pjF/9z8MYv/efljFv/z88cs/hfkj1n8L8wfs/hflD9m8b84f8zif0n+mMX/0vwxi/9l+WMW/8vzxyz+V+SPWfyvzB+z+F+VP2bxvzp/zOJ/Tf6Yxf/a/DGL/3X5Yxb/6/PHLP435I9Z/G/MH7P435Q/ZvG/OX/M4n9L/pjF/9b8MYv/bfljFv/b88cs/nfkj1n878wfs/jflT9m8b87f8zif0/+mMX/3vwxi/99+WMW//vzxyz+D+SPWfwfzB+z+D+UP2bxfzh/zOL/SP6Yxf/R/DGL/2P5Yxb/x/PHLP5P5I9Z/J/MH7P4P5U/ZvF/On/M4v9M/pjF/9n8MYv/c/ljFv/n88cs/i/kj1n8X8wfs/i/lD9m8X85f8zi/0r+mMX/1fwxi/9r+WMW/9fzxyz+b+SPSfzHHcgfs/gPyh+z+I+RP2bxH5w/ZvEfM3/M4j8kf8ziP1b+mMV/7Pwxi/84+WMW/3Hzxyz+4+WPWfyH5o9Z/MfPH7P4T5A/ZvF/T/6YxX/C/DGL/0TkP87/w+36L83i/972f8ziP3H+mMV/kvwxi/+k+WMW//flj1n8358/ZvH/QP6YxX+y/DGL/wfzxyz+k+ePWfynyB+z+H8of8zi/+H8MYv/R/LHLP4fzR+z+E+ZP2bx/1j+mMV/qvwxi//U+WMW/2nyxyz+H88fs/h/In/M4j9t/pjFf7r8MYv/J/PHLP7T549Z/D+VP2bx/3T+mMX/M/ljFv8Z8scs/jPmj1n8Z8ofs/jPnD9m8Z8lf8ziP2v+mMV/tvwxi/9n88cs/rPnj1n858gfs/jPmT9m8Z8rf8ziP3f+mMV/nvwxi//n8scs/p/PH7P4fyF/zOL/xfwxi/+8+WMW//nyxyz+8+ePWfwXyB+z+C+YP2bx/1L+mMV/ofwxi//C+WMW/y/nj1n8F8kfs/h/JX/M4r9o/pjFf7H8MYv/4vljFv8l8scs/l/NH7P4fy1/zOK/ZP6YxX+p/DGL/9L5Yxb/ZfLHLP7L5o9Z/JfLH7P4fz1/zOK/fP6YxX+F/DGL/zfyxyz+38wfs/ivmD9m8V8pf8zi/638MYv/yvljFv9V8scs/qvmj1n8V8sfs/ivnj9m8V8jf8ziv2b+mMV/rfwxi//a+WMW/3Xyxyz+6+aPWfy/nT9m8f9O/pjFf738MYv/+vljFv8N8scs/hvmj1n8N8ofs/h/N3/M4r9x/pjFf5P8MYv/pvljFv/v5Y9Z/L+fP2bx/0H+mMV/s/wxi//m+WMW/y3yxyz+P8wfs/hvmT9m8d8qf8ziv3X+mMV/m/wxi/+2+WMW/+3yxyz+P8ofs/hvnz9m8d8hf8zi/+P8MYv/T/LHLP475o9Z/H+aP2bx3yl/zOK/c/6YxX+X/DGL/8/yxyz+P88fs/jvmj9m8d8tf8ziv3v+mMX/F/ljFv9f5o9Z/PfIH7P4/yp/zOL/6/wxi/9v8scs/r/NH7P475k/ZvH/Xf6YxX+v/DGL/+/zxyz+f8gfs/jvnT9m8f9j/pjFf5/8MYv/vvljFv/98scs/n/KH7P4758/ZvH/c/6Yxf+A/DGL/4H5Yxb/g/LHLP4H549Z/A/JH7P4H5o/ZvH/S/6Yxf+v+WMW/8Pyxyz+h+ePWfyPyB+z+B+ZP2bxPyp/zOJ/dP6Yxf+Y/DGL/7H5Yxb/4/LHLP7H549Z/E/IH7P4n5g/ZvE/KX/M4n9y/pjF/5T8MYv/qfljFv/T8scs/qfnj1n8z8gfs/ifmT9m8T8rf8zif3b+mMX/nPwxi/+5+WMW//Pyxyz+5+ePWfwvyB+z+F+YP2bxvyh/zOJ/cf6Yxf+S/DGL/6X5Yxb/y/LHLP6X549Z/K/IH7P4X5k/ZvG/Kn/M4n91/pjF/5r8MYv/tfljFv/r8scs/tfnj1n8b8gfs/jfmD9m8b8pf8zif3P+mMX/lvwxi/+t+WMW/9vyxyz+t+ePWfzvyB+z+N+ZP2bxvyt/zOJ/d/6Yxf+e/DGL/735Yxb/+/LHLP73549Z/B/IH7P4P5g/ZvF/KH/M4v9w/pjF/5H8MYv/o/ljFv/H8scs/o/nj1n8n8gfs/g/mT9m8X8qf8zi/3T+mMX/mfwxi/+z+WMW/+fyxyz+z+ePWfxfyB+z+L+YP2bxfyl/zOL/cv6Yxf+V/DGL/6v5Yxb/1/LHLP6v549Z/N/IH5P4jzeQP2bxH5Q/ZvEfI3/M4j84f8ziP2b+mMV/SP6YxX+s/DGL/9j5Yxb/cfLHLP7j5o9Z/MfLH7P4D80fs/iPnz9m8Z8gf8zi/578MYv/hPljFv+J8scs/u/NH7P4T5w/ZvGfJH/M4j9p/pjF/335Yxb/9+ePWfw/kD9m8Z8sf8zi/8H8MYv/5PljFv8p8scs/h/KH7P4fzh/zOL/kfwxi/9H88cs/lPmj1n8P5Y/ZvGfKn/M4j91/pjFf5r8MYv/x/PHLP6fyB+z+E+bP2bxny5/zOL/yfwxi//0+WMW/0/lj1n8P50/ZvH/TP6YxX+G/DGL/4z5Yxb/mfLHLP4z549Z/GfJH7P4z5o/ZvGfLX/M4v/Z/DGL/+z5Yxb/OfLHLP5z5o9Z/OfKH7P4z50/ZvGfJ3/M4v+5/DGL/+fzxyz+X8gfs/h/MX/M4j9v/pjFf778MYv//PljFv8F8scs/gvmj1n8v5Q/ZvFfKH/M4r9w/pjF/8v5Yxb/RfLHLP5fyR+z+C+aP2bxXyx/zOK/eP6YxX+J/DGL/1fzxyz+X8sfs/gvmT9m8V8qf8ziv3T+mMV/mfwxi/+y+WMW/+Xyxyz+X88fs/gvnz9m8V8hf8zi/438MYv/N/PHLP4r5o9Z/FfKH7P4fyt/zOK/cv6YxX+V/DGL/6r5Yxb/1fLHLP6r549Z/NfIH7P4r5k/ZvFfK3/M4r92/pjFf538MYv/uvljFv9v549Z/L+TP2bxXy9/zOK/fv6YxX+D/DGL/4b5Yxb/jfLHLP7fzR+z+G+cP2bx3yR/zOK/af6Yxf97+WMW/+/nj1n8f5A/ZvHfLH/M4r95/pjFf4v8MYv/D/PHLP5b5o9Z/LfKH7P4b50/ZvHfJn/M4r9t/pjFf7v8MYv/j/LHLP7b549Z/HfIH7P4/zh/zOL/k/wxi/+O+WMW/5/mj1n8d8ofs/jvnD9m8d8lf8zi/7P8MYv/z/PHLP675o9Z/HfLH7P4754/ZvH/Rf6Yxf+X+WMW/z3yxyz+v8ofs/j/On/M4v+b/DGL/2/zxyz+e+aPWfx/lz9m8d8rf8zi//v8MYv/H/LHLP57549Z/P+YP2bx3yd/zOK/b/6YxX+//DGL/5/yxyz+++ePWfz/nD9m8T8gf8zif2D+mMX/oPwxi//B+WMW/0Pyxyz+h+aPWfz/kj9m8f9r/pjF/7D8MYv/4fljFv8j8scs/kfmj1n8j8ofs/gfnT9m8T8mf8zif2z+mMX/uPwxi//x+WMW/xPyxyz+J+aPWfxPyh+z+J+cP2bxPyV/zOJ/av6Yxf+0/DGL/+n5Yxb/M/LHLP5n5o9Z/M/KH7P4n50/ZvE/J3/M4n9u/pjF/7z8MYv/+fljFv8L8scs/hfmj1n8L8ofs/hfnD9m8b8kf8zif2n+mMX/svwxi//l+WMW/yvyxyz+V+aPWfyvyh+z+F+dP2bxvyZ/zOJ/bf6Yxf+6/DGL//X5Yxb/G/LHLP435o9Z/G/KH7P435w/ZvG/JX/M4n9r/pjF/7b8MYv/7V7/cUd3p8X/Dq//aLP435k/ZvG/K3/M4n93/pjF/578MYv/vfljFv/78scs/vfnj1n8H8gfs/g/mD9m8X8of8zi/3D+mMX/kfwxi/+j+WMW/8fyxyz+j+ePWfyfyB+z+D+ZP2bxfyp/zOL/dP6Yxf+Z/DGL/7P5Yxb/5/LHLP7P549Z/F/IH7P4v5g/ZvF/KX/M4v9y/pjF/5X8MYv/q/ljFv/X8scs/q/nj1n838gfk/gPHcgfs/gPyh+z+I+RP2bxH5w/ZvEfM3/M4j8kf8ziP1b+mMV/7Pwxi/84+WMW/3Hzxyz+4+WPWfyH5o9Z/MfPH7P4T5A/ZvF/T/6YxX/C/DGL/0T5Yxb/9+aPWfwnzh+z+E+SP2bxnzR/zOL/vvwxi//788cs/h/IH7P4T5Y/ZvH/YP6YxX/y/DGL/xT5Yxb/D+WPWfw/nD9m8f9I/pjF/6P5Yxb/KfPHLP4fyx+z+E+VP2bxnzp/zOI/Tf6Yxf/j+WMW/0/kj1n8p80fs/hPlz9m8f9k/pjFf/r8MYv/p/LHLP6fzh+z+H8mf8ziP0P+mMV/xvwxi/9M+WMW/5nzxyz+s+SPWfxnzR+z+M+WP2bx/2z+mMV/9vwxi/8c+WMW/znzxyz+c+WPWfznzh+z+M+TP2bx/1z+mMX/8/ljFv8v5I9Z/L+YP2bxnzd/zOI/X/6YxX/+/DGL/wL5Yxb/BfPHLP5fyh+z+C+UP2bxXzh/zOL/5fwxi/8i+WMW/6/kj1n8F80fs/gvlj9m8V88f8ziv0T+mMX/q/ljFv+v5Y9Z/JfMH7P4L5U/ZvFfOn/M4r9M/pjFf9n8MYv/cvljFv+v549Z/JfPH7P4r5A/ZvH/Rv6Yxf+b+WMW/xXzxyz+K+WPWfy/lT9m8V85f8ziv0r+mMV/1fwxi/9q+WMW/9Xzxyz+a+SPWfzXzB+z+K+VP2bxXzt/zOK/Tv6YxX/d/DGL/7fzxyz+38kfs/ivlz9m8V8/f8ziv0H+mMV/w/wxi/9G+WMW/+/mj1n8N84fs/hvkj9m8d80f8zi/738MYv/9/PHLP4/yB+z+G+WP2bx3zx/zOK/Rf6Yxf+H+WMW/y3zxyz+W+WPWfy3zh+z+G+TP2bx3zZ/zOK/Xf6Yxf9H+WMW/+3zxyz+O+SPWfx/nD9m8f9J/pjFf8f8MYv/T/PHLP475Y9Z/HfOH7P475I/ZvH/Wf6Yxf/n+WMW/13zxyz+u+WPWfx3zx97t/uPNP9F/ti73X9EQ3+ZP2bx3yN/zOL/q/wxi/+v88cs/r/JH7P4/zZ/zOK/Z/6Yxf93+WMW/73yxyz+v88fs/j/IX/M4r93/pjF/4/5Yxb/ffLHLP775o9Z/PfLH7P4/yl/zOK/f/6Yxf/P+WMW/wPyxyz+B+aPWfwPyh+z+B+cP2bxPyR/zOJ/aP6Yxf8v+WMW/7/mj1n8D8sfs/gfnj9m8T8if8zif2T+mMX/qPwxi//R+WMW/2Pyxyz+x+aPWfyPyx+z+B+fP2bxPyF/zOJ/Yv6Yxf+k/DGL/8n5Yxb/U/LHLP6n5o9Z/E/LH7P4n54/ZvE/I3/M4n9m/pjF/6z8MYv/2fljFv9z8scs/ufmj1n8z8sfs/ifnz9m8b8gf8zif2H+mMX/ovwxi//F+WMW/0vyxyz+l+aPWfwvyx+z+F+eP2bxvyJ/zOJ/Zf6Yxf+q/DGL/9X5Yxb/a/LHLP7X5o9Z/K/LH7P4X58/ZvG/IX/M4n9j/pjF/6b8MYv/zfljFv9b8scs/rfmj1n8b8sfs/jfnj9m8b8jf8zif2f+mMX/rvwxi//d+WMW/3vyxyz+9+aPWfzvyx+z+N+fP2bxfyB/zOL/YP6Yxf+h/DGL/8P5Yxb/R/LHLP6P5o9Z/B/LH7P4P54/ZvF/In/M4v9k/pjF/6n8MYv/0/ljFv9n8scs/s/mj1n8n8sfs/g/nz9m8X8hf8zi/2L+mMX/pfwxi//L+WMW/1fyxyz+r+aPWfxfyx+z+L+eP2bxfyN/TOI//kD+mMV/UP6YxX+M/DGL/+D8MYv/mPljFv8h+WMW/7Hyxyz+Y+ePWfzHyR+z+I+bP2bxHy9/zOI/NH/M4j9+/pjFf4L8MYv/e/LHLP4T5o9Z/CfKH7P4vzd/zOI/cf6YxX+S/DGL/6T5Yxb/9+WPWfzfnz9m8f9A/pjFf7L8MYv/B/PHLP6T549Z/KfIH7P4fyh/zOL/4fwxi/9H8scs/h/NH7P4T5k/ZvH/WP6YxX+q/DGL/9T5Yxb/afLHLP4fzx+z+H8if8ziP23+mMV/uvwxi/8n88cs/tPnj1n8P5U/ZvH/dP6Yxf8z+WMW/xnyxyz+M+aPWfxnyh+z+M+cP2bxnyV/zOI/a/6YxX+2/DGL/2fzxyz+s+ePWfznyB+z+M+ZP2bxnyt/zOI/d/6YxX+e/DGL/+fyxyz+n88fs/h/IX/M4v/F/DGL/7z5Yxb/+fLHLP7z549Z/BfIH7P4L5g/ZvH/Uv6YxX+h/DGL/8L5Yxb/L+ePWfwXyR+z+H8lf8ziv2j+mMV/sfwxi//i+WMW/yXyxyz+X80fs/h/LX/M4r9k/pjFf6n8MYv/0vljFv9l8scs/svmj1n8l8sfs/h/PX/M4r98/pjFf4X8sb/7j/Ou9v9G/phl//9m/pjFf8X8MYv/SvljFv9v5Y9Z/FfOH7P4r5I/ZvFfNX/M4r9a/pjFf/X8MYv/GvljFv8188cs/mvlj1n8184fs/ivkz9m8V83f8zi/+38MYv/d/LHLP7r5Y9Z/NfPH7P4b5A/ZvHfMH/M4r9R/pjF/7v5Yxb/jfPHLP6b5I9Z/DfNH7P4fy9/zOL//fwxi/8P8scs/pvlj1n8N88fs/hvkT9m8f9h/pjFf8v8sXe1/5C/TR1/q/yxd7X/36eOv3X+mMV/m/wxi/+2+WMW/+3yxyz+P8ofs/hvnz9m8d8hf8zi/+P8MYv/T/LHLP475o9Z/H+aP2bx3yl/zOK/c/6YxX+X/DGL/8/yxyz+P88fs/jvmj9m8d8tf8ziv3v+mMX/F/ljFv9f5o9Z/PfIH7P4/yp/zOL/6/wxi/9v8scs/r/NH7P475k/ZvH/Xf6YxX+v/DGL/+/zxyz+f8gfs/jvnT9m8f9j/pjFf5/8MYv/vvljFv/98scs/n/KH7P4758/ZvH/c/6Yxf+A/DGL/4H5Yxb/g/LHLP4H549Z/A/JH7P4H5o/ZvH/S/6Yxf+v+WMW/8Pyxyz+h+ePWfyPyB+z+B+ZP2bxPyp/zOJ/dP6Yxf+Y/DGL/7H5Yxb/4/LHLP7H549Z/E/IH7P4n5g/ZvE/KX/M4n9y/pjF/5T8MYv/qfljFv/T8scs/qfnj1n8z8gfs/ifmT9m8T8rf8zif3b+mMX/nPwxi/+5+WMW//Pyxyz+5+ePWfwvyB+z+F+YP2bxvyh/zOJ/cf6Yxf+S/DGL/6X5Yxb/y/LHLP6X549Z/K/IH7P4X5k/ZvG/Kn/M4n91/pjF/5r8MYv/tfljFv/r8scs/tfnj1n8b8gfs/jfmD9m8b8pf8zif3P+mMX/lvwxi/+t+WMW/9vyxyz+t+ePWfzvyB+z+N+ZP2bxvyt/zOJ/d/6Yxf+e/DGL/735Yxb/+/LHLP73549Z/B/IH7P4P5g/ZvF/KH/M4v9w/pjF/5H8MYv/o/ljFv/H8scs/o/nj1n8n8gfs/g/mT9m8X8qf8zi/3T+mMX/mfwxi/+z+WMW/+fyxyz+z+ePWfxfyB+z+L+YP2bxfyl/zOL/cv6Yxf+V/DGL/6v5Yxb/1/LHLP6v549Z/N/IH5P4TzCQP2bxH5Q/ZvEfI3/M4j84f8ziP2b+mMV/SP6YxX+s/DGL/9j5Yxb/cfLHLP7j5o9Z/MfLH7P4D80fs/iPnz9m8Z8gf8zi/578MYv/hPljFv+J8scs/u/NH7P4T5w/ZvGfJH/M4j9p/pjF/335Yxb/9+ePWfw/kD9m8Z8sf8zi/8H8MYv/5PljFv8p8scs/h/KH7P4fzh/zOL/kfwxi/9H88cs/lPmj1n8P5Y/ZvGfKn/M4j91/pjFf5r8MYv/x/PHLP6fyB+z+E+bP2bxny5/zOL/yfwxi//0+WMW/0/lj1n8P50/ZvH/TP6YxX+G/DGL/4z5Yxb/mfLHLP4z549Z/GfJH7P4z5o/ZvGfLX/M4v/Z/DGL/+z5Yxb/OfLHLP5z5o9Z/OfKH7P4z50/ZvGfJ3/M4v+5/DGL/+fzxyz+X8gfs/h/MX/M4j9v/pjFf778MYv//PljFv8F8scs/gvmj1n8v5Q/ZvFfKH/M4r9w/pjF/8v5Yxb/RfLHLP5fyR+z+C+aP2bxXyx/zOK/eP6YxX+J/DGL/1fzxyz+X8sfs/gvmT9m8V8qf8ziv3T+mMV/mfwxi/+y+WMW/+Xyxyz+X88fs/gvnz9m8V8hf8zi/41/9l9t3P+nG/bfmcX/m+3/mMV/xfwxi/9K+WMW/2/lj1n8V84fs/ivkj9m8V81f8ziv1r+mMV/9fwxi/8a+WMW/zXzxyz+a+WPWfzXzh+z+K+TP2bxXzd/zOL/7fwxi/938scs/uvlj1n8188fs/hvkD9m8d8wf8ziv1H+mMX/u/ljFv+N88cs/pvkj1n8N80fs/h/L3/M4v/9/DGL/w/yxyz+m+WPWfw3zx+z+G+RP2bx/2H+mMV/y/wxi/9W+WMW/63zxyz+2+SPWfy3zR+z+G+XP2bx/1H+mMV/+/wxi/8O+WMW/x/nj1n8f5I/ZvHfMX/M4v/T/DGL/075Yxb/nfPHLP675I9Z/H+WP2bx/3n+mMV/1/wxi/9u+WMW/93zxyz+v8gfs/j/Mn/M4r9H/pjF/1f5Yxb/X+ePWfx/kz9m8f9t/pjFf8/8MYv/7/LHLP575Y9Z/H+fP2bx/0P+mMV/7/wxi/8f88cs/vvkj1n8980fs/jvlz9m8f9T/pjFf//8MYv/n/PHLP4H5I9Z/A/MH7P4H5Q/ZvE/OH/M4n9I/pjF/9D8MYv/X/LHLP5/zR+z+B+WP2bxPzx/zOJ/RP6Yxf/I/DGL/1H5Yxb/o/PHLP7H5I9Z/I/NH7P4H5c/ZvE/Pn/M4n9C/pjF/8T8MYv/SfljFv+T88cs/qfkj1n8T80fs/iflj9m8T89f8zif0b+mMX/zPwxi/9Z+WMW/7Pzxyz+5+SPWfzPzR+z+J+XP2bxPz9/zOJ/Qf6Yxf/C/DGL/0X5Yxb/i/PHLP6X5I9Z/C/NH7P4X5Y/ZvG/PH/M4n9F/pjF/8r8MYv/VfljFv+r88cs/tfkj1n8r80fs/hflz9m8b8+f8zif0P+mMX/xvwxi/9N+WMW/5vzxyz+t+SPWfxvzR+z+N+WP2bxvz1/zOJ/R/6Yxf/O/DGL/135Yxb/u/PHLP735I9Z/O/NH7P435c/ZvG/P3/M4v9A/pjF/8H8MYv/Q/ljFv+H88cs/o/kj1n8H80fs/g/lj9m8X88f8zi/0T+mMX/yfwxi/9T+WMW/6fzxyz+z+SPWfyfzR+z+D+XP2bxfz5/zOL/Qv6Yxf/F/DGL/0v5Yxb/l/PHLP6v5I9Z/F/NH7P4v5Y/ZvF/PX/M4v9G/pjE/z0D+WMW/0H5Yxb/MfLHLP6D88cs/mPmj1n8h+SPWfzHyh+z+I+dP2bxHyd/zOI/bv6YxX+8/DGL/9D8MYv/+PljFv8J8scs/u/JH7P4T5g/ZvGfKH/M4v/e/DGL/8T5Yxb/SfLHLP6T5o9Z/N+XP2bxf3/+mMX/A/ljFv/J8scs/h/MH7P4T54/ZvGfIn/M4v+h/DGL/4fzxyz+H8kfs/h/NH/M4j9l/pjF/2P5Yxb/qfLHLP5T549Z/KfJH7P4fzx/zOL/ifwxi/+0+WMW/+nyxyz+n8wfs/hPnz9m8f9U/pjF/9P5Yxb/z+SPWfxnyB+z+M+YP2bxnyl/zOI/c/6YxX+W/DGL/6z5Yxb/2fLHLP6fzR+z+M+eP2bxnyN/zOI/Z/6YxX+u/DGL/9z5Yxb/efLHLP6fyx+z+H8+f8zi/4X8MYv/F/PHLP7z5o9Z/OfLH7P4z58/ZvFfIH/M4r9g/pjF/0v5Yxb/hfLHLP4L549Z/L+cP2bxXyR/zOL/lfwxi/+i+WMW/8Xyxyz+i+ePWfyXyB+z+H81f8zi/7X8MYv/kvljFv+l8scs/kvnj1n8l8kfs/gvmz9m8V8uf8zi//X8MYv/8vljFv8V8scs/t/IH7P4fzN/zOK/Yv6YxX+l/DGL/7fyxyz+K+ePWfxXyR+z+K+aP2bxXy1/zOK/ev6YxX+N/DGL/5r5Yxb/tfLHLP5r549Z/NfJH7P4r5s/ZvH/dv6Yxf87+WMW//Xyxyz+6+ePWfw3yB+z+G+YP2bx3yh/zOL/3fwxi//G+WMW/03yxyz+m+aPWfy/lz9m8f9+/pjF/wf5Yxb/zfLHLP6b549Z/LfIH7P4/zB/zOK/Zf6YxX+r/DGL/9b5Yxb/bfLHLP7b5o9Z/LfLH7P4/yh/zOK/ff6YxX+H/DGL/4/zxyz+P8kfs/jvmD9m8f9p/pjFf6f8MYv/zvljFv9d8scs/j/LH7P4/zx/zOK/a/6YxX+3/DGL/+75Yxb/X+SPWfx/mT9m8d8jf8zi/6v8MYv/r/PHLP6/yR+z+P82f8ziv2f+mMX/d/ljFv+98scs/r/PH7P4/yF/zOK/d/6Yxf+P+WMW/33yxyz+++aPWfz3yx+z+P8pf8ziv3/+mMX/z/ljFv8D8scs/gfmj1n8D8ofs/gfnD9m8T8kf8zif2j+mMX/L/ljFv+/5o9Z/A/LH7P4H54/ZvE/In/M4n9k/pjF/6j8MYv/0fljFv9j8scs/sfmj1n8j8sfs/gfnz9m8T8hf8zif2L+mMX/pPwxi//J+WMW/1Pyxyz+p+aPWfxPyx+z+J+eP2bxPyN/zOJ/Zv6Yxf+s/DGL/9n5Yxb/c/LHLP7n5o9Z/M/LH7P4n58/ZvG/IH/M4n9h/pjF/6L8MYv/xfljFv9L8scs/pfmj1n8L8sfs/hfnj9m8b8if8zif2X+mMX/qvwxi//V+WMW/2vyxyz+1+aPWfyvyx+z+F9v8h80MLDtvzurxP8Gk/9/kMX/xvwxi/9N+WMW/5vzxyz+t+SP/aP/kHd6c/7Pexv/W/PHLPv/bfljFv/b88cs/nfkj1n878wfs/jflT9m8b87f8zif0/+mMX/3vwxi/99+WMW//vzxyz+D+SPWfwfzB+z+D+UP2bxfzh/zOL/SP6Yxf/R/DGL/2P5Yxb/x/PHLP5P5I9Z/J/MH7P4P5U/ZvF/On/M4v9M/pjF/9n8MYv/c/ljFv/n88cs/i/kj1n8X8wfs/i/lD9m8X85f8zi/0r+mMX/1fwxi/9r+WMW/9fzxyz+b+SPSfwnHMgfs/gPyh+z+I+RP2bxH5w/ZvEfM3/M4j8kf8ziP1b+mMV/7Pwxi/84+WMW/3Hzxyz+4+WPWfyH5o9Z/P8/9ujBABTEgAJYza/2bNu2bdu2bdu2bdu2bds2FngT3EtWyAD/Ucv/QP9Ry/8g/1HL/2D/Ucv/EP9Ry////Ect///3H7X8D+U/avkf2n/U8j+M/6jlf1j/Ucv/cP6jlv/h/Uct/yP4j1r+R/QftfyP5D9q+R/Zf9TyP4r/qOV/VP9Ry/9o/qOW/9H9Ry3/Y/iPWv7H9B+1/I/lP2r5H9t/1PI/jv+o5X9c/1HL/3j+o5b/8f1HLf8T+I9a/if0H7X8T+Q/avmf2H/U8j+J/6jlf1L/Ucv/ZP6jlv/J/Uct/1P4j1r+p/QftfxP5T9q+Z/af9TyP43/qOV/Wv9Ry/90/qOW/+n9Ry3/M/iPWv5n9B+1/M/kP2r5n9l/1PI/i/+o5X9W/1HL/2z+o5b/2f1HLf9z+I9a/uf0H7X8z+U/avmf23/U8j+P/6jlf17/Ucv/fP6jlv/5/Uct/wv4j1r+F/Qftfwv5D9q+V/Yf9Tyv4j/qOV/Uf9Ry/9i/qOW/8X9Ry3/S/iPWv6X9B+1/C/lP2r5X9p/1PK/jP+o5X9Z/1HL/3L+o5b/5f1HLf8r+I9a/lf0H7X8r+Q/avlf2X/U8r+K/6jlf1X/Ucv/av6jlv/V/Uct/2v4j1r+1/Qftfyv5T9q+V/bf9Tyv47/qOV/Xf9Ry/96/qOW//X9Ry3/G/iPWv439B+1/G/kP2r539h/1PK/if+o5X9T/1HL/2b+o5b/zf1HLf9b+I9a/rf0H7X8b+U/avnf2n/U8r+N/6jlf1v/Ucv/dv6jlv/t/Uct/zv4j1r+d/Qftfzv5D9q+d/Zf9Tyv4v/qOV/V/9Ry/9u/qOW/939Ry3/e/iPWv739B+1/O/lP2r539t/1PK/j/+o5X9f/1HL/37+o5b//f1HLf8H+I9a/g/0H7X8H+Q/avk/2H/U8n+I/6jl/1D/Ucv/Yf6jlv/D/Uct/0f4j1r+j/Qftfwf5T9q+T/af9Tyf4z/qOX/WP9Ry/9x/qOW/+P9Ry3/J/iPWv5P9B+1/J/kP2r5P9l/1PJ/iv+o5f9U/1HL/2n+o5b/0/1HLf9n+I9a/s/0H7X8n+U/avk/23/U8n+O/6jl/1z/Ucv/ef6jlv/z/Uct/xf4j1r+L/Qftfxf5D9q+b/Yf9Tyf4n/qOX/Uv9Ry/9l/qOW/8v9Ry3/V/iPWv6v9B+1/F/lP2r5v9p/1PJ/jf+o5f9a/1HL/3X+o5b/6/1HLf83+I9a/m/0H7X83+Q/avm/2X/U8n+L/6jl/1b/Ucv/bf6jlv/b/Uct/3f4j1r+7/Qftfzf5T9q+b/bf9Tyf4//qOX/Xv9Ry/99/qOW//v9Ry3/D/iPWv4f9B+1/D/kP2r5f9h/1PL/iP+o5f9R/1HL/2P+o5b/x/1HLf9P+I9a/p/0H7X8P+U/avl/2n/U8v+M/6jl/1n/Ucv/c/6jlv/n/Uct/y/4j1r+X/Qftfy/5D9q+X/Zf9Ty/4r/qOX/Vf9Ry/9r/qOW/9f9Ry3/b/iPWv7f9B+1/L/lP2r5f9t/1PL/jv+o5f9d/1HL/3v+o5b/9/1HLf8f+I9a/j/0H7X8f+Q/avn/2H/U8v+J/6jl/1P/Ucv/Z/6jlv/P/Uct/1/4j1r+v/Qftfx/5T9q+f/af9Ty/43/qOX/W/9Ry/93/qOW/+/9Ry3/P/iPWv5/9B+1/P/kP2r5/9l/1PL/i/+o5f9X/1HL/2/+o5L/IX/yH7X8/9l/1PL/F/9Ry/9f/Uct/3/zH7X8/91/1PL/D/9Ry/8//Uct///yH7X8/9t/1PL/H/9Ry/9//Uct/wP8Ry3/A/1HLf+D/Ect/4P9R3+4fwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgd/btP8bruoDj+Od+IliAQvqW4kdQHmpw/DCOHyWzVuNkHSNd07UUBidqoAa34ofRsWnrDzZxsWZNJ63dzBZrTOdIorR0MTemm7TSskk5YzictoX2Y137ct/vcff1uPF9X+83f/B4/HH3/XyO1+eA7cnnc+MOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEhp05atX129fn3nRi+88MKL/hfn+l8mILXT0Z/r3wkAAAAAAAAAAAAAAHAmOX6c6Fz/GQEAAAAA4HzT3nHtiYa6QacaBh5MPtx56v3V7954W0/PkxdV3pc/vHyIS9YPPOjt7e3dceDNZeXDUUVRlD7b+PLxBdXj0vW796/8Q99RKE60/erOruMddT976pa3WpaPW9x06mxTserW29d3zqkvitDQVGwuHcytK4rQ3FTsKh3MKx2Maip+XDqYf+pgdPF06WD2mrvWry2deN+nhvNOe0d30TCo2GLQvwYD++/e/8h7lffDXLJytcai3P+ln39mV9XHKs7Qf+X6oa66/5r/gMAZ1db/492V98Nc8n33/4l/3X7dUB87c/+V64d6/UM6Qzz/D2q0+rm/6vl/2hCX7N8fmt72aKn/bQ8//1D5VOPZPP+fvn5oqO6/ftDzf+k5vrHy/D+qKELTCP864LzS3rHjxHD3/+H7b5xUtakb2P/B5T94rtT/1I6JjeVTTTX23zjM/b9u+9ODf69Abdo7fthbdf+vof+iZYhL9vc/rWfCu6X+rxn/79cHfKyW/puq+2/t2nB366YtW2fdvmH1us51nXfOn9c2b2HbnEWL5reeeiToezvCvxU4P4zs/l+MqdrUFUVn//6XR48tKfW/6cixzeVTF9TYf/Ow9//X3P9hSNPri+bmYvPqrq6Nc/veVg7n9b3t+2VD9F/D1/8zZpZ/WeXr7tIX5P37AwuKnlL/O1+5YUv5VHON/Y8arv9vnf68QIQR3v/XVm0G9X/Fi/e+Wup/39tvXl8+VevX/xcM2/8e938YifaOqm/4+T8r9X/y5MHIb7YJo/3/H6QzsP+pCa5f6v+V+p8+GbcOY/QP6eS4/z9wz6ihvk/gLIQL9Q/p5Oh/00NrXohbhw/oH9LJ0f/Cvxy6KW4dPqh/SCdH/xMveflvceswVv+QTo7+b7lt49fi1mGc/iGdHP0fu/fZe+LWYbz+IZ0c/f/oX3cdj1uHi/QP6eTo//6x22+IW4eL9Q/p5Oj/2bt/9+u4dZigf0gnR/+X79o3K24dJuof0snR/4a3Jh2IW4cP6R/SydH/tZMujPw53XCJ/iGdHP2PWbvnu3HrcKn+IZ0c/Xftnf3nuHUI+od0zrb/0ZHXL/W/9KX7lsWtw2X6h3Ry3P8ntOw+GbcOk/QP6eTo/8ablq6KW4cP6x/SydH/Uz//8v1x6/AR/UM6Ofp/57dvXxa3DpP1D+nk6P/V+UcfjVuHKfqHdHL0/70vXDc3bh2m6h/SydH/48d3/iJuHabpH9LJ0f97u1uujFuHj+of0snR/5FVC3bHrcN0/UM6Ofp/ZMrD9XHrMEP/kE6O/r/533+eiFuHj+kf0snR/4LuL26LW4eP6x/SydH/pK7PPhe3DpfrH9LJ0f/KMceuj1uHFv1DOjn6b/3NrVPi1mGm/iGdHP2vPXj4O3HrcIX+IZ0c/S9r/9OCuHW4Uv+QTo7+G9q+sSduHa7SP6STo/+jv5+wIm4dPqF/SCdH/z95bP/LceswS/+QTo7+v/2Vx9bFrcNs/UM6Ofo/PKP+nbh1aNU/pJOj/60vPPGfuHWYo39IJ0f/c/dNvSNuHebqH9LJ0f/kz409ErcO8/QP6eTo/0tLej4Ttw7z9Q/p5Oj/iT8+szduHa7WP6STo//enjuWxK3DJ/UP6eTo/6WV2+6LW4cF+od0cvT/YOuLE+LWoU3/kE6O/t944+ab49Zhof4hnRz9733wH4fi1mGR/iGdHP3vWP/61+PWYbH+IZ0c/T9/8YrX4tZhif4hnRz9z/z7VePi1uFT+od0cvS/Zmf39+PW4dP6h3Ry9L9i8wMtcetwjf4hnRz9NzYv3he3Dkv1DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPA/duBAAAAAAADI/7URqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrADBzIAAAAAwvyt82g/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/BQAAP//XKRfbg==")
mknod$loop(&(0x7f0000001280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x0)

3.570557748s ago: executing program 4 (id=2488):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xf7, 0x485, &(0x7f0000001040)="$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")
openat(0xffffffffffffff9c, 0x0, 0x101842, 0x11)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, &(0x7f0000000280))
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={'\x00', 0x6, 0x5, 0x9, 0x4, 0x5})
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f00000008c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x704, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)
pwrite64(0xffffffffffffffff, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)
r2 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0)
pwrite64(r2, &(0x7f00000000c0)='a', 0x1, 0x9003)

3.557892648s ago: executing program 2 (id=2489):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x4000, &(0x7f0000000140)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYRES16], 0x1, 0x6246, &(0x7f0000000280)="$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")
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x399446c, 0x0, 0x1, 0x0, &(0x7f0000000080))
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x6200, 0x0)
sendfile(r0, r1, 0x0, 0x20fffe82)

3.325219451s ago: executing program 4 (id=2490):
r0 = socket$inet6(0x10, 0x3, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000680)={0x2, 0x9, 0x4, 0x9, 0x11, 0x0, 0x70bd28, 0x25dfdbfd, [@sadb_x_sa2={0x2, 0x13, 0x6f, 0x0, 0x0, 0x70bd26, 0x3507}, @sadb_x_nat_t_port={0x1, 0x15, 0x4e20}, @sadb_lifetime={0x4, 0x0, 0xc, 0x4, 0x580000, 0x6}, @sadb_x_policy={0x8, 0x12, 0x4, 0x0, 0x0, 0x6e6bbd, 0x6, {0x6, 0x6c, 0x5, 0x9, 0x0, 0x0, 0x0, @in=@private=0xa010101, @in6=@loopback}}]}, 0x88}}, 0x4)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000019000100000000000000000002180000"], 0x2c}}, 0x0)
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDSETLED(r1, 0x4b45, 0x4)
sendto$inet6(r0, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b)
syz_usb_connect(0x6, 0x24, &(0x7f00000007c0)={{0x12, 0x1, 0x200, 0xef, 0x15, 0x62, 0x8, 0x4ca, 0x3004, 0x6bf7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x5, 0xfb, 0x0, 0x1, "", [{{0x9, 0x4, 0x5, 0xf9, 0x0, 0x78, 0x42, 0xdf, 0x9}}]}}]}}, 0x0)
r2 = socket$unix(0x1, 0x2, 0x0)
shutdown(r2, 0x1)
sendmmsg$unix(r2, &(0x7f0000000ac0)=[{{&(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x10}}], 0x1, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000000d00)={0x2020, 0x0, 0x0, 0x0, <r3=>0x0, <r4=>0x0}, 0x2020)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x8, 0x1, 0x37}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80)
socket$inet6_icmp(0xa, 0x2, 0x3a)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="06000000040000000800000007000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00@\x00'/21], 0x50)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYRESDEC=r4, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000001000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r6}, 0xc)
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3a0475a, &(0x7f0000000280)={[{@nodiscard}]}, 0x82, 0x48f, &(0x7f0000000380)="$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")
r7 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r7, 0x40086602, &(0x7f0000000080)={@desc={0x84c00, 0x0, @desc2}})
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x14, 0x10, 0x701, 0x0, 0x0, {0xa}}, 0x14}}, 0x0)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000240), r8)
r9 = socket(0x10, 0x3, 0x0)
write(r9, &(0x7f00000000c0)="240000001e005f3814fffffffffffff8070000000000090000000000060005000d101000", 0x24)
sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, 0x0, 0x4008000)
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800f00, &(0x7f0000000000)={[{@oldalloc}, {@journal_dev={'journal_dev', 0x3d, 0x4c3}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x105c}}, {@test_dummy_encryption}, {@resgid={'resgid', 0x3d, r3}}, {@sb={'sb', 0x3d, 0xfffffffffffffb1b}}, {@noquota}, {}], [{@pcr={'pcr', 0x3d, 0x33}}]}, 0x3, 0x44f, &(0x7f0000000200)="$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")
prctl$PR_SVE_GET_VL(0x33, 0x1ecd)

3.188410113s ago: executing program 5 (id=2491):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, 0x0, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB], 0xfc}}, 0x0)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x2006}, 0x1c)
syz_open_procfs(0x0, &(0x7f00000037c0)='projid_map\x00')
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0x4c}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vlan0\x00', 0x10)
sendmmsg$inet(r0, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000400)="ea", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x119e75c40673edef)

3.064285594s ago: executing program 5 (id=2492):
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @any, 0x0, 0x2}, 0xe)
bind$bt_l2cap(r0, &(0x7f0000000140)={0x1f, 0x3, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x1}, 0xe)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x8000, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10)
socket$inet(0x2, 0x4000000000000001, 0x0)
openat$ppp(0xffffffffffffff9c, 0x0, 0x161042, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
getpid()
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="000000000035d60000", @ANYRESHEX=r4, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB='\x00', @ANYRESDEC=0x0])
read$FUSE(r4, &(0x7f00000021c0)={0x2020}, 0x2020)
fcntl$setstatus(r4, 0x4, 0x2800)
syz_fuse_handle_req(r4, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat$udambuf(0xffffffffffffff9c, &(0x7f0000001400), 0x2)
r5 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_MAKE_EQUIV(r5, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x3f7, 0x300, 0x70bd2d, 0x25dfdbff, {0x7, 0x7, './file0', './file0'}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x11}, 0x4000000)
fcntl$addseals(0xffffffffffffffff, 0x409, 0x7)

2.710903688s ago: executing program 0 (id=2493):
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x2, &(0x7f0000000280)=[{0x5c, 0xf7, 0x1}, {0x64, 0x0, 0x6, 0x100007}]})
r1 = openat$cgroup_procs(r0, &(0x7f0000000600)='tasks\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f0000000400), 0x12)
r2 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
sendmmsg(r3, &(0x7f0000007fc0), 0x0, 0x8301)
setsockopt$inet_mtu(r3, 0x0, 0xa, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000040)=0x3)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8)
write$cgroup_int(r2, &(0x7f0000000180)=0x3, 0x12)
r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00')
lseek(r6, 0x6, 0x1)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r7, 0x10e, 0x1, &(0x7f0000000080)=0x7, 0x4)
r8 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder1\x00', 0x802, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r8, 0x4018620d, &(0x7f0000000100))
r9 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r9, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
dup3(r9, r8, 0x0)
r10 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r10, 0x0)

2.51516418s ago: executing program 0 (id=2494):
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
sendmsg$AUDIT_SET_FEATURE(0xffffffffffffffff, 0x0, 0x20000081)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0)
r1 = getpid()
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
r5 = getpid()
r6 = syz_pidfd_open(r5, 0x0)
setns(r6, 0x24020000)
mount_setattr(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x9100, &(0x7f0000000140)={0x6, 0x8a, 0x40000}, 0x37)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x21, 0x3, 0x458, 0x120, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x388, 0xffffffff, 0xffffffff, 0x388, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private2, @private2, [], [], 'veth0\x00', 'syzkaller1\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@ipv6header={{0x28}, {0x12, 0x40, 0x1}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0x200, 0x268, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv6=@private1, [], @ipv4=@remote, [], 0x0, 0x0, 0x0, 0x0, 0x4, 0x13}, {@ipv6=@dev, [0xffffffff], @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {@ipv4=@multicast2, [0x0, 0x0, 0xff000000], @ipv4=@multicast1, [0x0, 0xff], 0x4d6, 0x0, 0x0, 0x0, 0x9}, {@ipv6=@rand_addr=' \x01\x00', [0x0, 0xffffff00], @ipv4=@broadcast, [0x0, 0x0, 0xffffff00]}]}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x7f}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x15, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r8 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r9 = dup(r8)
r10 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000e40)=@filter={'filter\x00', 0x2, 0x4, 0x350, 0xffffffff, 0x1a8, 0xd0, 0x0, 0xfeffffff, 0xffffffff, 0x280, 0x280, 0x280, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @empty, [0xffffff00], [], 'macsec0\x00', 'bond_slave_0\x00', {}, {}, 0x0, 0x0, 0x1, 0x65}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@private1, @empty, [0xffffff00], [], 'sit0\x00', 'vxcan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x1, 0x6}, {0x0, 0x4, 0x2}, 0x0, 0xd}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xff000000, 0xffffff00, 0xff, 0xff000000], [0xffffff00, 0x0, 0x0, 0xff], 'veth0_to_bond\x00', 'veth1_vlan\x00', {0xff}, {}, 0x29, 0x4, 0x0, 0x10}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x20, 0x1000, 0x2, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b0)
write$binfmt_misc(r9, &(0x7f0000000000)="000003", 0xfe64)

2.420334962s ago: executing program 4 (id=2495):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
openat$cgroup_procs(r0, &(0x7f0000000600)='tasks\x00', 0x2, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpuset.memory_spread_page\x00', 0x2, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, 0x0, 0x0)
sendmmsg(r2, 0x0, 0x0, 0x8301)
setsockopt$inet_mtu(r2, 0x0, 0xa, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000040)=0x3)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
write$cgroup_int(r1, &(0x7f0000000180)=0x3, 0x12)
r5 = syz_open_procfs(r3, &(0x7f0000000200)='fdinfo\x00')
lseek(r5, 0x6, 0x1)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r6, 0x10e, 0x1, &(0x7f0000000080)=0x7, 0x4)
r7 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
writev(r7, &(0x7f0000000780)=[{&(0x7f00000003c0)}], 0x1)
lseek(r6, 0x1, 0x2)
r8 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_linger(r8, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8)
socket(0x10, 0x3, 0x2)

1.787785769s ago: executing program 4 (id=2496):
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x0, &(0x7f0000000040)={[{}, {@nobarrier}, {@nls={'nls', 0x3d, 'cp1251'}}]}, 0x1, 0x5c8, &(0x7f00000006c0)="$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")
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')
unlinkat(r0, &(0x7f0000000140)='./file1\x00', 0x0)

125.012838ms ago: executing program 0 (id=2497):
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_trace_dev_match', 0x82100, 0x2)
read$eventfd(r3, &(0x7f0000000040), 0x8)

25.12837ms ago: executing program 1 (id=2498):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20, 0xeb, @remote, 0x4}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000580), 0x3)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
getsockname$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, &(0x7f0000000140)=0x1c)
sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000b80)='n', 0x1}], 0x1}, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0x0, 0x9, 0x7a8, 0x6}, 0x14)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x40845}, 0x24044000)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x304}, '\x00', "6ca0ef44bcdaf33d9060001a65aae2621600f79c1f901d896f9157b1a7166ac1", "abfdff7d", "708958f96700"}, 0x38)

0s ago: executing program 4 (id=2499):
r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x7)
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0)
mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil)

kernel console output (not intermixed with test programs):

evice= 0.00
[  170.600484][ T4266] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  170.627638][ T4266] usb 2-1: config 0 descriptor??
[  170.769282][ T4266] usb 2-1: can't set config #0, error -71
[  171.550013][ T4266] usb 2-1: USB disconnect, device number 3
[  171.873453][ T5145] loop2: detected capacity change from 0 to 256
[  172.151280][ T5145] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  172.176072][ T5145] exFAT-fs (loop2): Medium has reported failures. Some data may be lost.
[  172.416029][ T5145] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  172.637557][ T5149] loop1: detected capacity change from 0 to 512
[  172.754195][ T5149] EXT4-fs error (device loop1): ext4_get_branch:178: inode #13: block 2: comm syz.1.262: invalid block
[  172.808442][ T5149] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.262: invalid indirect mapped block 10 (level 1)
[  172.899073][ T5149] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.262: invalid indirect mapped block 8 (level 1)
[  172.919597][ T5149] EXT4-fs (loop1): 1 truncate cleaned up
[  172.925386][ T5149] EXT4-fs (loop1): mounted filesystem without journal. Opts: quota,,errors=continue. Quota mode: writeback.
[  173.235908][ T5161] loop3: detected capacity change from 0 to 128
[  173.335123][ T5161] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem
[  173.380967][ T5161] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  173.412303][ T5161] ext2 filesystem being mounted at /56/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  174.094764][ T5172] loop2: detected capacity change from 0 to 256
[  174.108522][ T5176] loop3: detected capacity change from 0 to 128
[  174.135467][ T5172] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x5955b8de, utbl_chksum : 0xe619d30d)
[  174.378815][ T5172] loop_set_status: loop2 () has still dirty pages (nrpages=32)
[  174.399334][ T4266] usb 2-1: new low-speed USB device number 4 using dummy_hcd
[  174.404308][ T5177] attempt to access beyond end of device
[  174.404308][ T5177] loop2: rw=524288, want=408, limit=256
[  174.418294][   T26] audit: type=1804 audit(1778090658.853:2): pid=5172 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.267" name="/newroot/45/file2/file1" dev="loop2" ino=1048598 res=1 errno=0
[  174.477509][ T5177] attempt to access beyond end of device
[  174.477509][ T5177] loop2: rw=524288, want=664, limit=256
[  174.513055][ T5177] attempt to access beyond end of device
[  174.513055][ T5177] loop2: rw=0, want=288, limit=256
[  174.536933][   T26] audit: type=1800 audit(1778090658.973:3): pid=5177 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.267" name="file1" dev="loop2" ino=1048598 res=0 errno=0
[  174.769574][ T4266] usb 2-1: config 0 has an invalid interface number: 255 but max is 0
[  174.778279][ T4266] usb 2-1: config 0 has no interface number 0
[  175.084707][ T4266] usb 2-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30
[  175.123329][ T4266] usb 2-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  175.138723][ T4266] usb 2-1: config 0 interface 255 has no altsetting 0
[  175.145651][ T4266] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  175.155151][ T4266] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  175.167338][ T4266] usb 2-1: config 0 descriptor??
[  176.399473][ T5198] device batadv_slave_1 entered promiscuous mode
[  177.152228][ T5201] loop2: detected capacity change from 0 to 256
[  177.191452][ T5202] loop3: detected capacity change from 0 to 1024
[  178.116458][ T5206] hfsplus: trying to free free bnode 0(1)
[  178.220827][ T5201] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  178.268836][ T5201] exFAT-fs (loop2): Medium has reported failures. Some data may be lost.
[  178.278263][ T5197] device batadv_slave_1 left promiscuous mode
[  178.299429][ T4295] hfsplus: b-tree write err: -5, ino 25
[  178.334529][ T4295] hfsplus: b-tree write err: -5, ino 4
[  178.358873][ T4266] usb 2-1: string descriptor 0 read error: -71
[  178.367012][ T4266] asix: probe of 2-1:0.255 failed with error -22
[  178.382103][ T4295] hfsplus: b-tree write err: -5, ino 2
[  178.389360][ T5201] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  178.415618][ T4266] usb 2-1: USB disconnect, device number 4
[  178.537082][ T5214] loop1: detected capacity change from 0 to 128
[  179.139654][ T5218] fuse: Bad value for 'fd'
[  179.202680][ T5222] loop3: detected capacity change from 0 to 1024
[  180.010314][ T5231] loop1: detected capacity change from 0 to 256
[  180.469386][ T4353] hfsplus: b-tree write err: -5, ino 25
[  180.475233][ T4353] hfsplus: b-tree write err: -5, ino 4
[  180.578092][ T5231] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d)
[  180.826421][ T4353] hfsplus: b-tree write err: -5, ino 2
[  181.031206][ T5250] loop2: detected capacity change from 0 to 16
[  181.102288][ T5250] erofs: (device loop2): mounted with root inode @ nid 36.
[  181.215805][ T5246] loop1: detected capacity change from 0 to 8192
[  181.395191][   T26] audit: type=1800 audit(1778090665.833:4): pid=5246 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.291" name="file2" dev="loop1" ino=1048600 res=0 errno=0
[  181.999866][ T5246] attempt to access beyond end of device
[  181.999866][ T5246] loop1: rw=0, want=57848, limit=8192
[  182.290720][ T5261] netlink: 71 bytes leftover after parsing attributes in process `syz.3.295'.
[  182.317642][ T5265] loop2: detected capacity change from 0 to 128
[  183.504656][ T5261] loop3: detected capacity change from 0 to 512
[  183.915897][ T5261] EXT4-fs (loop3): 1 truncate cleaned up
[  183.947712][ T5261] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodiscard,,errors=continue. Quota mode: none.
[  184.036013][ T5275] loop2: detected capacity change from 0 to 1024
[  184.187588][ T5276] hfsplus: bad catalog entry type
[  185.004870][ T4339] hfsplus: b-tree write err: -5, ino 25
[  185.038987][ T4339] hfsplus: b-tree write err: -5, ino 4
[  185.077946][ T5290] loop3: detected capacity change from 0 to 512
[  185.084408][ T4339] hfsplus: b-tree write err: -5, ino 2
[  185.091578][ T5288] loop1: detected capacity change from 0 to 8
[  185.149991][ T5296] loop4: detected capacity change from 0 to 16
[  185.183994][ T5290] EXT4-fs (loop3): orphan cleanup on readonly fs
[  186.907562][ T5296] erofs: (device loop4): mounted with root inode @ nid 36.
[  186.950495][ T5290] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.307: bg 0: block 248: padding at end of block bitmap is not set
[  187.170799][ T5290] Quota error (device loop3): write_blk: dquota write failed
[  187.228620][ T5290] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[  187.238681][ T5290] EXT4-fs error (device loop3): ext4_acquire_dquot:6236: comm syz.3.307: Failed to acquire dquot type 1
[  187.305068][ T5290] EXT4-fs (loop3): 1 truncate cleaned up
[  187.331534][ T5290] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  187.450588][ T5290] EXT4-fs (loop3): shut down requested (0)
[  190.198166][ T4231] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  191.503204][ T5324] loop2: detected capacity change from 0 to 1024
[  191.838897][ T4231] usb 4-1: device not accepting address 3, error -71
[  191.893721][    T7] Bluetooth: hci4: command 0x0406 tx timeout
[  191.897395][ T4234] Bluetooth: hci0: command 0x0406 tx timeout
[  191.907144][ T4234] Bluetooth: hci2: command 0x0406 tx timeout
[  191.914409][ T4234] Bluetooth: hci3: command 0x0406 tx timeout
[  192.236868][ T5324] hfsplus: bad catalog entry type
[  193.351080][ T5343] netlink: 16 bytes leftover after parsing attributes in process `syz.3.320'.
[  193.447079][  T144] hfsplus: b-tree write err: -5, ino 25
[  193.453814][ T5348] loop3: detected capacity change from 0 to 16
[  193.486043][  T144] hfsplus: b-tree write err: -5, ino 4
[  193.488343][ T5348] erofs: (device loop3): mounted with root inode @ nid 36.
[  193.504572][  T144] hfsplus: b-tree write err: -5, ino 2
[  194.199528][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  194.207853][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  196.255017][ T5361] xt_policy: neither incoming nor outgoing policy selected
[  196.406380][ T5368] loop3: detected capacity change from 0 to 128
[  196.417222][ T5365] loop2: detected capacity change from 0 to 128
[  196.440404][ T5368] FAT-fs (loop3): Unrecognized mount option "fmask=0000000000000000ã¥3Oošjnonumtail=0" or missing value
[  196.462696][ T5365] EXT4-fs (loop2): Test dummy encryption mode enabled
[  196.549553][ T5365] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none.
[  196.587615][ T4200] Bluetooth: hci2: Received unexpected HCI Event 00000000
[  197.059211][ T5365] ext4 filesystem being mounted at /56/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  197.290490][ T5365] fscrypt (loop2): Missing crypto API support for AES-256-XTS (API name: "xts(aes)")
[  197.382916][ T5381] loop1: detected capacity change from 0 to 256
[  197.891209][ T5381] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  197.948813][ T5381] exFAT-fs (loop1): Medium has reported failures. Some data may be lost.
[  198.029757][ T5381] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  205.257927][ T5426] xt_policy: neither incoming nor outgoing policy selected
[  205.284881][ T5426] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  206.386828][ T5433] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns
[  206.419326][ T5433] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer.
[  207.329613][ T5441] loop2: detected capacity change from 0 to 16
[  207.415683][ T5441] erofs: (device loop2): mounted with root inode @ nid 36.
[  212.556296][ T5469] loop2: detected capacity change from 0 to 128
[  213.787295][ T5472] loop3: detected capacity change from 0 to 128
[  213.838246][ T5472] EXT4-fs (loop3): Test dummy encryption mode enabled
[  213.867683][ T5475] netlink: 4 bytes leftover after parsing attributes in process `syz.2.355'.
[  213.908844][ T5475] netlink: 32 bytes leftover after parsing attributes in process `syz.2.355'.
[  213.989605][ T5472] EXT4-fs (loop3): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none.
[  214.062004][ T5472] ext4 filesystem being mounted at /78/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  214.701899][ T5472] fscrypt (loop3): Missing crypto API support for AES-256-XTS (API name: "xts(aes)")
[  215.490586][ T5491] loop3: detected capacity change from 0 to 1024
[  215.692204][ T5495] loop4: detected capacity change from 0 to 16
[  215.765818][ T5495] erofs: (device loop4): mounted with root inode @ nid 36.
[  215.819811][ T5497] hfsplus: trying to free free bnode 0(1)
[  215.829746][ T5495] erofs: (device loop4): find_target_block_classic: corrupted dir block 8200 @ nid 36
[  215.880733][ T5493] capability: warning: `syz.1.359' uses deprecated v2 capabilities in a way that may be insecure
[  216.004169][ T5502] loop2: detected capacity change from 0 to 128
[  216.094407][ T5502] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  216.113676][ T5502] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  216.593671][ T4409] hfsplus: b-tree write err: -5, ino 25
[  216.612744][ T4409] hfsplus: b-tree write err: -5, ino 4
[  216.826340][ T4409] hfsplus: b-tree write err: -5, ino 2
[  217.019914][ T5509] loop2: detected capacity change from 0 to 1024
[  217.579100][ T5521] loop2: detected capacity change from 0 to 128
[  218.009515][ T5525] netlink: 16 bytes leftover after parsing attributes in process `syz.4.369'.
[  218.050192][ T5521] EXT4-fs (loop2): Test dummy encryption mode enabled
[  219.047999][ T5521] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none.
[  219.072450][ T5521] ext4 filesystem being mounted at /67/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  219.104573][ T5536] loop3: detected capacity change from 0 to 1024
[  219.335796][ T5519] fscrypt (loop2): Missing crypto API support for AES-256-XTS (API name: "xts(aes)")
[  219.465610][ T5546] hfsplus: trying to free free bnode 0(1)
[  219.682672][ T4200] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201'
[  219.692924][ T4200] CPU: 1 PID: 4200 Comm: kworker/u5:5 Not tainted syzkaller #0
[  219.700624][ T4200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  219.710765][ T4200] Workqueue: hci3 hci_rx_work
[  219.715534][ T4200] Call Trace:
[  219.718846][ T4200]  <TASK>
[  219.721807][ T4200]  dump_stack_lvl+0x188/0x250
[  219.726532][ T4200]  ? show_regs_print_info+0x20/0x20
[  219.731805][ T4200]  ? load_image+0x400/0x400
[  219.736368][ T4200]  sysfs_create_dir_ns+0x26a/0x290
[  219.741523][ T4200]  ? sysfs_warn_dup+0xa0/0xa0
[  219.746357][ T4200]  ? process_one_work+0x85f/0x1010
[  219.751510][ T4200]  ? do_raw_spin_unlock+0x11d/0x230
[  219.756847][ T4200]  kobject_add_internal+0x6e0/0xd90
[  219.762097][ T4200]  kobject_add+0x160/0x230
[  219.766557][ T4200]  ? kobject_init+0x1d0/0x1d0
[  219.771318][ T4200]  ? klist_children_get+0x50/0x50
[  219.776644][ T4200]  ? get_device_parent+0x121/0x3f0
[  219.781821][ T4200]  device_add+0x483/0xfb0
[  219.786202][ T4200]  hci_conn_add_sysfs+0xd1/0x1e0
[  219.791184][ T4200]  le_conn_complete_evt+0xc48/0x15c0
[  219.796523][ T4200]  ? cs_le_create_conn+0x5e0/0x5e0
[  219.801683][ T4200]  ? __mutex_trylock_common+0x155/0x260
[  219.807283][ T4200]  hci_le_meta_evt+0x285/0x3c90
[  219.812170][ T4200]  ? hci_event_packet+0x37b/0x1370
[  219.817319][ T4200]  ? __lock_acquire+0x7d10/0x7d10
[  219.822405][ T4200]  ? hci_remote_host_features_evt+0x280/0x280
[  219.828519][ T4200]  ? __mutex_unlock_slowpath+0x1b0/0x6c0
[  219.834472][ T4200]  ? mark_lock+0x94/0x320
[  219.838849][ T4200]  ? mutex_unlock+0x10/0x10
[  219.843399][ T4200]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  219.849426][ T4200]  ? lock_chain_count+0x20/0x20
[  219.854333][ T4200]  ? __rwlock_init+0x140/0x140
[  219.859153][ T4200]  hci_event_packet+0xe48/0x1370
[  219.864136][ T4200]  ? lockdep_hardirqs_on+0x94/0x140
[  219.869389][ T4200]  ? rcu_lock_release+0x20/0x20
[  219.874291][ T4200]  ? hci_send_to_monitor+0x9c/0x4a0
[  219.879612][ T4200]  hci_rx_work+0x255/0xa10
[  219.884082][ T4200]  process_one_work+0x85f/0x1010
[  219.889195][ T4200]  ? worker_detach_from_pool+0x240/0x240
[  219.894863][ T4200]  ? lockdep_hardirqs_off+0x70/0x100
[  219.900203][ T4200]  ? _raw_spin_lock_irq+0xb7/0xf0
[  219.905266][ T4200]  ? _raw_spin_lock_irqsave+0x100/0x100
[  219.910881][ T4200]  ? wq_worker_running+0x97/0x170
[  219.915949][ T4200]  worker_thread+0xaa6/0x1290
[  219.920682][ T4200]  ? lockdep_hardirqs_on+0x94/0x140
[  219.925930][ T4200]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  219.932014][ T4200]  kthread+0x436/0x520
[  219.936132][ T4200]  ? rcu_lock_release+0x20/0x20
[  219.941031][ T4200]  ? kthread_blkcg+0xd0/0xd0
[  219.945662][ T4200]  ret_from_fork+0x1f/0x30
[  219.950313][ T4200]  </TASK>
[  220.048664][ T4200] kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  220.068626][ T4200] Bluetooth: hci3: failed to register connection device
[  220.082136][  T144] hfsplus: b-tree write err: -5, ino 25
[  220.087933][  T144] hfsplus: b-tree write err: -5, ino 4
[  220.093753][  T144] hfsplus: b-tree write err: -5, ino 2
[  220.105737][ T5557] loop2: detected capacity change from 0 to 1024
[  220.147519][ T5557] hfsplus: invalid btree extent records (0 size)
[  220.273057][ T5557] hfsplus: failed to load attributes file
[  222.272337][ T5576] loop2: detected capacity change from 0 to 256
[  223.048729][ T5576] loop_set_status: loop2 () has still dirty pages (nrpages=2)
[  223.513960][ T5588] loop2: detected capacity change from 0 to 128
[  223.587518][ T5590] loop3: detected capacity change from 0 to 1024
[  223.972715][ T5596] hfsplus: trying to free free bnode 0(1)
[  225.000351][ T4292] hfsplus: b-tree write err: -5, ino 25
[  225.006151][ T4292] hfsplus: b-tree write err: -5, ino 4
[  225.134755][ T4292] hfsplus: b-tree write err: -5, ino 2
[  226.143349][ T4199] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201'
[  226.153390][ T4199] CPU: 0 PID: 4199 Comm: kworker/u5:4 Not tainted syzkaller #0
[  226.160944][ T4199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  226.171001][ T4199] Workqueue: hci2 hci_rx_work
[  226.175692][ T4199] Call Trace:
[  226.178972][ T4199]  <TASK>
[  226.182142][ T4199]  dump_stack_lvl+0x188/0x250
[  226.186863][ T4199]  ? show_regs_print_info+0x20/0x20
[  226.192080][ T4199]  ? load_image+0x400/0x400
[  226.196655][ T4199]  sysfs_create_dir_ns+0x26a/0x290
[  226.201779][ T4199]  ? sysfs_warn_dup+0xa0/0xa0
[  226.206672][ T4199]  ? process_one_work+0x85f/0x1010
[  226.211803][ T4199]  ? do_raw_spin_unlock+0x11d/0x230
[  226.217039][ T4199]  kobject_add_internal+0x6e0/0xd90
[  226.222257][ T4199]  kobject_add+0x160/0x230
[  226.226691][ T4199]  ? kobject_init+0x1d0/0x1d0
[  226.231396][ T4199]  ? klist_children_get+0x50/0x50
[  226.236425][ T4199]  ? get_device_parent+0x121/0x3f0
[  226.241545][ T4199]  device_add+0x483/0xfb0
[  226.245885][ T4199]  hci_conn_add_sysfs+0xd1/0x1e0
[  226.250832][ T4199]  le_conn_complete_evt+0xc48/0x15c0
[  226.256136][ T4199]  ? cs_le_create_conn+0x5e0/0x5e0
[  226.261277][ T4199]  ? __mutex_trylock_common+0x155/0x260
[  226.266867][ T4199]  hci_le_meta_evt+0x285/0x3c90
[  226.271754][ T4199]  ? hci_event_packet+0x37b/0x1370
[  226.276907][ T4199]  ? __lock_acquire+0x7d10/0x7d10
[  226.281991][ T4199]  ? hci_remote_host_features_evt+0x280/0x280
[  226.288105][ T4199]  ? __mutex_unlock_slowpath+0x1b0/0x6c0
[  226.293799][ T4199]  ? mark_lock+0x94/0x320
[  226.298134][ T4199]  ? mutex_unlock+0x10/0x10
[  226.302645][ T4199]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  226.308646][ T4199]  ? lock_chain_count+0x20/0x20
[  226.313537][ T4199]  ? __rwlock_init+0x140/0x140
[  226.318314][ T4199]  hci_event_packet+0xe48/0x1370
[  226.323344][ T4199]  ? lockdep_hardirqs_on+0x94/0x140
[  226.328575][ T4199]  ? rcu_lock_release+0x20/0x20
[  226.333448][ T4199]  ? hci_send_to_monitor+0x9c/0x4a0
[  226.338662][ T4199]  hci_rx_work+0x255/0xa10
[  226.343096][ T4199]  process_one_work+0x85f/0x1010
[  226.348064][ T4199]  ? worker_detach_from_pool+0x240/0x240
[  226.353697][ T4199]  ? lockdep_hardirqs_off+0x70/0x100
[  226.359001][ T4199]  ? _raw_spin_lock_irq+0xb7/0xf0
[  226.364051][ T4199]  ? _raw_spin_lock_irqsave+0x100/0x100
[  226.369601][ T4199]  ? wq_worker_running+0x97/0x170
[  226.374628][ T4199]  worker_thread+0xaa6/0x1290
[  226.379330][ T4199]  kthread+0x436/0x520
[  226.383403][ T4199]  ? rcu_lock_release+0x20/0x20
[  226.388264][ T4199]  ? kthread_blkcg+0xd0/0xd0
[  226.392884][ T4199]  ret_from_fork+0x1f/0x30
[  226.397345][ T4199]  </TASK>
[  226.406107][ T4199] kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  226.419420][ T4199] Bluetooth: hci2: failed to register connection device
[  226.503483][ T5611] loop3: detected capacity change from 0 to 1024
[  226.675926][ T5611] hfsplus: invalid btree extent records (0 size)
[  226.792288][ T5611] hfsplus: failed to load attributes file
[  226.829896][ T5617] device batadv_slave_1 entered promiscuous mode
[  226.884830][ T5622] loop2: detected capacity change from 0 to 128
[  227.141175][ T4177] Bluetooth: hci3: command 0x0406 tx timeout
[  227.795197][ T5633] loop3: detected capacity change from 0 to 128
[  228.690155][ T5633] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  228.716619][ T5633] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  229.810031][ T5617] device batadv_slave_1 left promiscuous mode
[  230.950316][ T5650] loop2: detected capacity change from 0 to 1024
[  231.075711][ T5647] loop3: detected capacity change from 0 to 1024
[  231.110345][ T5647] EXT4-fs (loop3): Ignoring removed bh option
[  231.289440][ T5647] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv1,nombcache,barrier,delalloc,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,usrquota,noauto_da_alloc,bh,jqfmt=vfsv1,,errors=continue. Quota mode: writeback.
[  231.453595][ T5653] hfsplus: trying to free free bnode 0(1)
[  231.799337][ T4292] hfsplus: b-tree write err: -5, ino 25
[  231.805149][ T4292] hfsplus: b-tree write err: -5, ino 4
[  231.851890][ T4292] hfsplus: b-tree write err: -5, ino 2
[  232.301583][ T4200] Bluetooth: hci3: hcon ffff88802c452000 sent 1 < count 959
[  232.309507][ T4200] Bluetooth: hci3: hcon ffff888077bee000 sent 1 < count 3
[  232.316659][ T4200] Bluetooth: hci3: hcon ffff888077bee000 sent 0 < count 12802
[  232.397357][ T4200] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201'
[  232.406980][ T4200] CPU: 0 PID: 4200 Comm: kworker/u5:5 Not tainted syzkaller #0
[  232.414573][ T4200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  232.424665][ T4200] Workqueue: hci2 hci_rx_work
[  232.429394][ T4200] Call Trace:
[  232.432720][ T4200]  <TASK>
[  232.435690][ T4200]  dump_stack_lvl+0x188/0x250
[  232.440408][ T4200]  ? show_regs_print_info+0x20/0x20
[  232.445640][ T4200]  ? load_image+0x400/0x400
[  232.450197][ T4200]  sysfs_create_dir_ns+0x26a/0x290
[  232.455349][ T4200]  ? sysfs_warn_dup+0xa0/0xa0
[  232.460057][ T4200]  ? process_one_work+0x85f/0x1010
[  232.465208][ T4200]  ? do_raw_spin_unlock+0x11d/0x230
[  232.470446][ T4200]  kobject_add_internal+0x6e0/0xd90
[  232.475687][ T4200]  kobject_add+0x160/0x230
[  232.480156][ T4200]  ? kobject_init+0x1d0/0x1d0
[  232.484955][ T4200]  ? klist_children_get+0x50/0x50
[  232.490011][ T4200]  ? get_device_parent+0x121/0x3f0
[  232.495161][ T4200]  device_add+0x483/0xfb0
[  232.499533][ T4200]  hci_conn_add_sysfs+0xd1/0x1e0
[  232.504505][ T4200]  le_conn_complete_evt+0xc48/0x15c0
[  232.509841][ T4200]  ? cs_le_create_conn+0x5e0/0x5e0
[  232.514991][ T4200]  ? __mutex_trylock_common+0x155/0x260
[  232.520624][ T4200]  hci_le_meta_evt+0x285/0x3c90
[  232.525511][ T4200]  ? hci_event_packet+0x37b/0x1370
[  232.530656][ T4200]  ? __lock_acquire+0x7d10/0x7d10
[  232.535760][ T4200]  ? hci_remote_host_features_evt+0x280/0x280
[  232.541870][ T4200]  ? __mutex_unlock_slowpath+0x1b0/0x6c0
[  232.547544][ T4200]  ? mark_lock+0x94/0x320
[  232.551905][ T4200]  ? mutex_unlock+0x10/0x10
[  232.556438][ T4200]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  232.562504][ T4200]  ? lock_chain_count+0x20/0x20
[  232.567434][ T4200]  ? __rwlock_init+0x140/0x140
[  232.572744][ T4200]  hci_event_packet+0xe48/0x1370
[  232.577722][ T4200]  ? lockdep_hardirqs_on+0x94/0x140
[  232.582961][ T4200]  ? rcu_lock_release+0x20/0x20
[  232.587856][ T4200]  ? hci_send_to_monitor+0x9c/0x4a0
[  232.593090][ T4200]  hci_rx_work+0x255/0xa10
[  232.597686][ T4200]  process_one_work+0x85f/0x1010
[  232.602756][ T4200]  ? worker_detach_from_pool+0x240/0x240
[  232.608425][ T4200]  ? lockdep_hardirqs_off+0x70/0x100
[  232.613749][ T4200]  ? _raw_spin_lock_irq+0xb7/0xf0
[  232.618823][ T4200]  ? _raw_spin_lock_irqsave+0x100/0x100
[  232.624405][ T4200]  ? wq_worker_running+0x97/0x170
[  232.629460][ T4200]  worker_thread+0xaa6/0x1290
[  232.634189][ T4200]  ? lockdep_hardirqs_on+0x94/0x140
[  232.639429][ T4200]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  232.645369][ T4200]  kthread+0x436/0x520
[  232.649464][ T4200]  ? rcu_lock_release+0x20/0x20
[  232.654494][ T4200]  ? kthread_blkcg+0xd0/0xd0
[  232.659206][ T4200]  ret_from_fork+0x1f/0x30
[  232.663671][ T4200]  </TASK>
[  232.686402][ T4200] kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  232.699840][ T4200] Bluetooth: hci2: failed to register connection device
[  232.809287][ T5671] loop3: detected capacity change from 0 to 1024
[  233.038689][   T13] Bluetooth: hci2: command 0x0406 tx timeout
[  234.245695][ T5671] hfsplus: invalid btree extent records (0 size)
[  234.529016][ T5671] hfsplus: failed to load attributes file
[  235.369934][ T5680] loop3: detected capacity change from 0 to 128
[  235.442987][ T5682] mmap: syz.1.417 (5682) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst.
[  236.375654][   T26] audit: type=1326 audit(1778090720.813:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5687 comm="syz.1.419" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f514267fdd9 code=0x7ffc0000
[  236.580122][   T26] audit: type=1326 audit(1778090720.853:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5687 comm="syz.1.419" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f514267fdd9 code=0x7ffc0000
[  236.908903][ T5360] usb 4-1: new low-speed USB device number 5 using dummy_hcd
[  238.077769][   T26] audit: type=1326 audit(1778090720.853:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5687 comm="syz.1.419" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f514267fdd9 code=0x7ffc0000
[  238.112115][   T26] audit: type=1326 audit(1778090720.883:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5687 comm="syz.1.419" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f514267fdd9 code=0x7ffc0000
[  238.129554][ T5360] usb 4-1: config 0 has an invalid interface number: 255 but max is 0
[  238.183945][   T26] audit: type=1326 audit(1778090720.883:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5687 comm="syz.1.419" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f514267fdd9 code=0x7ffc0000
[  238.211307][ T5360] usb 4-1: config 0 has no interface number 0
[  238.217441][ T5360] usb 4-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30
[  238.259663][ T5360] usb 4-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  238.298699][ T5360] usb 4-1: config 0 interface 255 has no altsetting 0
[  238.314404][ T5360] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  238.388237][   T26] audit: type=1326 audit(1778090720.883:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5687 comm="syz.1.419" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f514267fdd9 code=0x7ffc0000
[  238.412739][   T26] audit: type=1326 audit(1778090720.883:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5687 comm="syz.1.419" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f514267fdd9 code=0x7ffc0000
[  238.436962][   T26] audit: type=1326 audit(1778090720.883:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5687 comm="syz.1.419" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f514267fdd9 code=0x7ffc0000
[  238.574142][ T5360] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  240.156785][ T5360] usb 4-1: config 0 descriptor??
[  240.164009][   T26] audit: type=1326 audit(1778090720.883:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5687 comm="syz.1.419" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f514267fdd9 code=0x7ffc0000
[  240.188474][ T5360] usb 4-1: can't set config #0, error -71
[  240.239596][ T5360] usb 4-1: USB disconnect, device number 5
[  240.250979][ T4199] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201'
[  240.260962][ T4199] CPU: 0 PID: 4199 Comm: kworker/u5:4 Not tainted syzkaller #0
[  240.268560][ T4199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  240.278645][ T4199] Workqueue: hci2 hci_rx_work
[  240.283486][ T4199] Call Trace:
[  240.286790][ T4199]  <TASK>
[  240.289746][ T4199]  dump_stack_lvl+0x188/0x250
[  240.294457][ T4199]  ? show_regs_print_info+0x20/0x20
[  240.299712][ T4199]  ? load_image+0x400/0x400
[  240.304266][ T4199]  sysfs_create_dir_ns+0x26a/0x290
[  240.309418][ T4199]  ? sysfs_warn_dup+0xa0/0xa0
[  240.314126][ T4199]  ? process_one_work+0x85f/0x1010
[  240.319284][ T4199]  ? do_raw_spin_unlock+0x11d/0x230
[  240.324523][ T4199]  kobject_add_internal+0x6e0/0xd90
[  240.329759][ T4199]  kobject_add+0x160/0x230
[  240.334211][ T4199]  ? kobject_init+0x1d0/0x1d0
[  240.338929][ T4199]  ? klist_children_get+0x50/0x50
[  240.343992][ T4199]  ? get_device_parent+0x121/0x3f0
[  240.349148][ T4199]  device_add+0x483/0xfb0
[  240.353524][ T4199]  hci_conn_add_sysfs+0xd1/0x1e0
[  240.358505][ T4199]  le_conn_complete_evt+0xc48/0x15c0
[  240.363834][ T4199]  ? cs_le_create_conn+0x5e0/0x5e0
[  240.368988][ T4199]  ? __mutex_trylock_common+0x155/0x260
[  240.374580][ T4199]  hci_le_meta_evt+0x285/0x3c90
[  240.379468][ T4199]  ? hci_event_packet+0x37b/0x1370
[  240.384614][ T4199]  ? __lock_acquire+0x7d10/0x7d10
[  240.389686][ T4199]  ? hci_remote_host_features_evt+0x280/0x280
[  240.395788][ T4199]  ? __mutex_unlock_slowpath+0x1b0/0x6c0
[  240.398876][   T26] audit: type=1326 audit(1778090720.883:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5687 comm="syz.1.419" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f514267fdd9 code=0x7ffc0000
[  240.401448][ T4199]  ? mark_lock+0x94/0x320
[  240.429661][ T4199]  ? mutex_unlock+0x10/0x10
[  240.434208][ T4199]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  240.440240][ T4199]  ? lock_chain_count+0x20/0x20
[  240.445169][ T4199]  ? __rwlock_init+0x140/0x140
[  240.449964][ T4199]  hci_event_packet+0xe48/0x1370
[  240.454930][ T4199]  ? lockdep_hardirqs_on+0x94/0x140
[  240.460180][ T4199]  ? rcu_lock_release+0x20/0x20
[  240.465093][ T4199]  ? hci_send_to_monitor+0x9c/0x4a0
[  240.470331][ T4199]  hci_rx_work+0x255/0xa10
[  240.474797][ T4199]  process_one_work+0x85f/0x1010
[  240.479795][ T4199]  ? worker_detach_from_pool+0x240/0x240
[  240.485466][ T4199]  ? lockdep_hardirqs_off+0x70/0x100
[  240.490804][ T4199]  ? _raw_spin_lock_irq+0xb7/0xf0
[  240.495849][ T4199]  ? _raw_spin_lock_irqsave+0x100/0x100
[  240.501413][ T4199]  ? wq_worker_running+0x97/0x170
[  240.506459][ T4199]  worker_thread+0xaa6/0x1290
[  240.511182][ T4199]  kthread+0x436/0x520
[  240.515267][ T4199]  ? rcu_lock_release+0x20/0x20
[  240.520138][ T4199]  ? kthread_blkcg+0xd0/0xd0
[  240.524753][ T4199]  ret_from_fork+0x1f/0x30
[  240.529205][ T4199]  </TASK>
[  240.534067][ T4199] kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  240.547356][ T4199] Bluetooth: hci2: failed to register connection device
[  240.554627][ T4199] Bluetooth: hci2: link tx timeout
[  240.560433][ T4199] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  240.635028][ T5713] loop3: detected capacity change from 0 to 1024
[  240.724817][ T5713] hfsplus: invalid btree extent records (0 size)
[  240.734292][ T5360] Bluetooth: hci2: command 0x0406 tx timeout
[  243.053283][ T5713] hfsplus: failed to load attributes file
[  247.413937][ T5750] loop3: detected capacity change from 0 to 512
[  247.562088][ T5757] netlink: 71 bytes leftover after parsing attributes in process `syz.4.442'.
[  247.614569][ T5750] EXT4-fs (loop3): bad geometry: first data block is 0 with a 1k block and cluster size
[  247.846644][ T5760] loop2: detected capacity change from 0 to 128
[  250.477511][   T13] Bluetooth: hci2: command 0x0406 tx timeout
[  250.970396][ T5782] device batadv_slave_1 entered promiscuous mode
[  252.480774][ T5792] loop3: detected capacity change from 0 to 1024
[  252.594931][ T5798] netlink: 71 bytes leftover after parsing attributes in process `syz.0.454'.
[  253.503517][  T144] hfsplus: b-tree write err: -5, ino 25
[  253.513109][  T144] hfsplus: b-tree write err: -5, ino 4
[  253.535241][  T144] hfsplus: b-tree write err: -5, ino 2
[  253.774328][ T5782] device batadv_slave_1 left promiscuous mode
[  255.601092][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  255.607498][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  256.558463][ T5840] loop2: detected capacity change from 0 to 512
[  256.621284][ T5840] EXT4-fs (loop2): Mount option "journal_ioprio=0x0000000000000006" incompatible with ext2
[  256.664895][ T5843] loop3: detected capacity change from 0 to 1024
[  256.692734][ T5845] netlink: 71 bytes leftover after parsing attributes in process `syz.0.467'.
[  256.973361][ T5840] kvm: emulating exchange as write
[  257.463711][ T5848] hfsplus: trying to free free bnode 0(1)
[  257.681747][ T4291] hfsplus: b-tree write err: -5, ino 25
[  257.687529][ T4291] hfsplus: b-tree write err: -5, ino 4
[  257.706681][ T4291] hfsplus: b-tree write err: -5, ino 2
[  257.958730][   T23] usb 3-1: new low-speed USB device number 4 using dummy_hcd
[  258.585519][ T5858] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  258.623014][ T5858] device batadv_slave_0 entered promiscuous mode
[  258.958821][   T23] usb 3-1: config 0 has an invalid interface number: 255 but max is 0
[  259.545271][   T23] usb 3-1: config 0 has no interface number 0
[  259.660607][   T23] usb 3-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30
[  259.692875][   T23] usb 3-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  259.747536][   T23] usb 3-1: config 0 interface 255 has no altsetting 0
[  259.775890][   T23] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  259.874131][   T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  259.905812][   T23] usb 3-1: config 0 descriptor??
[  260.376045][ T5885] device batadv_slave_1 entered promiscuous mode
[  262.293963][ T5885] device batadv_slave_1 left promiscuous mode
[  262.368678][   T23] usb 3-1: string descriptor 0 read error: -71
[  262.375596][   T23] asix: probe of 3-1:0.255 failed with error -22
[  262.428869][   T23] usb 3-1: USB disconnect, device number 4
[  262.480047][ T5910] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  263.520877][ T5910] device batadv_slave_0 entered promiscuous mode
[  263.768133][ T5923] loop2: detected capacity change from 0 to 1024
[  264.117827][ T5927] loop3: detected capacity change from 0 to 512
[  264.312834][ T5923] hfsplus: trying to free free bnode 0(1)
[  264.402972][ T4292] hfsplus: b-tree write err: -5, ino 25
[  264.441481][ T5927] EXT4-fs error (device loop3): ext4_orphan_get:1432: comm syz.3.494: bad orphan inode 11862016
[  264.469583][ T4292] hfsplus: b-tree write err: -5, ino 4
[  264.475174][ T4292] hfsplus: b-tree write err: -5, ino 2
[  264.534721][ T5927] EXT4-fs (loop3): mounted filesystem without journal. Opts: nodelalloc,,errors=continue. Quota mode: writeback.
[  264.632446][ T5927] ext4 filesystem being mounted at /105/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  265.977919][ T5950] xt_CT: You must specify a L4 protocol and not use inversions on it
[  266.023215][ T5950] device bridge2 entered promiscuous mode
[  267.342040][ T5957] device batadv_slave_1 entered promiscuous mode
[  269.490758][ T5957] device batadv_slave_1 left promiscuous mode
[  269.883487][ T5981] loop3: detected capacity change from 0 to 8
[  269.890294][ T5981] squashfs: Unknown parameter ''
[  272.049707][ T6005] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  272.080699][ T6005] device batadv_slave_0 entered promiscuous mode
[  274.139308][ T6028] xt_CT: You must specify a L4 protocol and not use inversions on it
[  274.152651][ T6028] device bridge1 entered promiscuous mode
[  276.466666][ T6051] device bridge1 entered promiscuous mode
[  280.818800][   T23] usb 3-1: new low-speed USB device number 5 using dummy_hcd
[  281.145135][ T6096] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  281.153161][ T6096] device batadv_slave_0 entered promiscuous mode
[  281.219015][   T23] usb 3-1: config 0 has an invalid interface number: 255 but max is 0
[  281.248075][   T23] usb 3-1: config 0 has no interface number 0
[  281.273837][   T23] usb 3-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30
[  281.306647][   T23] usb 3-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  281.347656][   T23] usb 3-1: config 0 interface 255 has no altsetting 0
[  281.367492][   T23] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  281.395337][   T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  281.435251][   T23] usb 3-1: config 0 descriptor??
[  282.021539][ T6106] device batadv_slave_1 entered promiscuous mode
[  282.278538][    C0] hrtimer: interrupt took 44763 ns
[  283.467612][ T6106] device batadv_slave_1 left promiscuous mode
[  283.518756][   T23] usb 3-1: string descriptor 0 read error: -71
[  284.473772][ T6123] netlink: 28 bytes leftover after parsing attributes in process `syz.0.550'.
[  285.707284][   T23] asix: probe of 3-1:0.255 failed with error -22
[  285.736669][   T23] usb 3-1: USB disconnect, device number 5
[  285.797381][ T6127] loop2: detected capacity change from 0 to 128
[  285.879957][ T6127] FAT-fs (loop2): Unrecognized mount option "18446744073709551615ÿÿÿ" or missing value
[  288.111330][ T6160] device batadv_slave_1 entered promiscuous mode
[  289.202768][ T6173] netlink: 71 bytes leftover after parsing attributes in process `syz.2.566'.
[  289.895578][ T6178] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns
[  289.910353][ T6176] loop2: detected capacity change from 0 to 512
[  289.916788][ T6178] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer.
[  290.044497][ T6176] EXT4-fs (loop2): 1 truncate cleaned up
[  290.062955][ T6176] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodiscard,,errors=continue. Quota mode: none.
[  290.148706][ T6158] device batadv_slave_1 left promiscuous mode
[  290.550532][ T6185] netlink: 28 bytes leftover after parsing attributes in process `syz.0.569'.
[  293.554854][ T6205] loop2: detected capacity change from 0 to 128
[  294.000782][ T6205] EXT4-fs (loop2): Test dummy encryption mode enabled
[  295.480195][ T6205] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none.
[  295.548863][ T6205] ext4 filesystem being mounted at /100/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  295.939177][ T6203] fscrypt (loop2): Missing crypto API support for AES-256-XTS (API name: "xts(aes)")
[  296.065278][ T6232] netlink: 28 bytes leftover after parsing attributes in process `syz.0.582'.
[  298.078369][ T6244] loop2: detected capacity change from 0 to 4096
[  298.939116][ T6256] device batadv_slave_1 entered promiscuous mode
[  298.987172][ T6244] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  300.347794][ T4199] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201'
[  300.357988][ T4199] CPU: 0 PID: 4199 Comm: kworker/u5:4 Not tainted syzkaller #0
[  300.365558][ T4199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  300.375757][ T4199] Workqueue: hci0 hci_rx_work
[  300.380454][ T4199] Call Trace:
[  300.383744][ T4199]  <TASK>
[  300.386682][ T4199]  dump_stack_lvl+0x188/0x250
[  300.391394][ T4199]  ? show_regs_print_info+0x20/0x20
[  300.396653][ T4199]  ? load_image+0x400/0x400
[  300.401179][ T4199]  sysfs_create_dir_ns+0x26a/0x290
[  300.406349][ T4199]  ? sysfs_warn_dup+0xa0/0xa0
[  300.411066][ T4199]  ? process_one_work+0x85f/0x1010
[  300.416192][ T4199]  ? do_raw_spin_unlock+0x11d/0x230
[  300.421434][ T4199]  kobject_add_internal+0x6e0/0xd90
[  300.426683][ T4199]  kobject_add+0x160/0x230
[  300.431151][ T4199]  ? kobject_init+0x1d0/0x1d0
[  300.435869][ T4199]  ? klist_children_get+0x50/0x50
[  300.440904][ T4199]  ? get_device_parent+0x121/0x3f0
[  300.446043][ T4199]  device_add+0x483/0xfb0
[  300.450403][ T4199]  hci_conn_add_sysfs+0xd1/0x1e0
[  300.455359][ T4199]  le_conn_complete_evt+0xc48/0x15c0
[  300.460741][ T4199]  ? cs_le_create_conn+0x5e0/0x5e0
[  300.465932][ T4199]  ? __mutex_trylock_common+0x155/0x260
[  300.471520][ T4199]  hci_le_meta_evt+0x285/0x3c90
[  300.476395][ T4199]  ? hci_event_packet+0x37b/0x1370
[  300.481533][ T4199]  ? __lock_acquire+0x7d10/0x7d10
[  300.486576][ T4199]  ? hci_remote_host_features_evt+0x280/0x280
[  300.492671][ T4199]  ? __mutex_unlock_slowpath+0x1b0/0x6c0
[  300.498338][ T4199]  ? mark_lock+0x94/0x320
[  300.502734][ T4199]  ? mutex_unlock+0x10/0x10
[  300.507311][ T4199]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  300.513325][ T4199]  ? lock_chain_count+0x20/0x20
[  300.518190][ T4199]  ? __rwlock_init+0x140/0x140
[  300.522964][ T4199]  hci_event_packet+0xe48/0x1370
[  300.527910][ T4199]  ? lockdep_hardirqs_on+0x94/0x140
[  300.533129][ T4199]  ? rcu_lock_release+0x20/0x20
[  300.538009][ T4199]  ? hci_send_to_monitor+0x9c/0x4a0
[  300.543219][ T4199]  hci_rx_work+0x255/0xa10
[  300.547681][ T4199]  process_one_work+0x85f/0x1010
[  300.552672][ T4199]  ? worker_detach_from_pool+0x240/0x240
[  300.558317][ T4199]  ? lockdep_hardirqs_off+0x70/0x100
[  300.563651][ T4199]  ? _raw_spin_lock_irq+0xb7/0xf0
[  300.568711][ T4199]  ? _raw_spin_lock_irqsave+0x100/0x100
[  300.574267][ T4199]  ? wq_worker_running+0x97/0x170
[  300.579338][ T4199]  worker_thread+0xaa6/0x1290
[  300.584048][ T4199]  kthread+0x436/0x520
[  300.588129][ T4199]  ? rcu_lock_release+0x20/0x20
[  300.593199][ T4199]  ? kthread_blkcg+0xd0/0xd0
[  300.597804][ T4199]  ret_from_fork+0x1f/0x30
[  300.602245][ T4199]  </TASK>
[  300.611530][ T4199] kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  300.624874][ T4199] Bluetooth: hci0: failed to register connection device
[  301.551003][ T6256] device batadv_slave_1 left promiscuous mode
[  301.699876][ T6281] netlink: 71 bytes leftover after parsing attributes in process `syz.4.596'.
[  302.707295][ T6297] loop3: detected capacity change from 0 to 8
[  302.716288][ T6297] squashfs: Unknown parameter ''
[  304.169174][ T4199] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201'
[  304.179111][ T4199] CPU: 0 PID: 4199 Comm: kworker/u5:4 Not tainted syzkaller #0
[  304.186689][ T4199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  304.196784][ T4199] Workqueue: hci4 hci_rx_work
[  304.201504][ T4199] Call Trace:
[  304.204810][ T4199]  <TASK>
[  304.207762][ T4199]  dump_stack_lvl+0x188/0x250
[  304.212595][ T4199]  ? show_regs_print_info+0x20/0x20
[  304.217810][ T4199]  ? load_image+0x400/0x400
[  304.222336][ T4199]  sysfs_create_dir_ns+0x26a/0x290
[  304.227454][ T4199]  ? sysfs_warn_dup+0xa0/0xa0
[  304.232132][ T4199]  ? process_one_work+0x85f/0x1010
[  304.237281][ T4199]  ? do_raw_spin_unlock+0x11d/0x230
[  304.242507][ T4199]  kobject_add_internal+0x6e0/0xd90
[  304.247729][ T4199]  kobject_add+0x160/0x230
[  304.252168][ T4199]  ? kobject_init+0x1d0/0x1d0
[  304.256890][ T4199]  ? klist_children_get+0x50/0x50
[  304.261921][ T4199]  ? get_device_parent+0x121/0x3f0
[  304.267041][ T4199]  device_add+0x483/0xfb0
[  304.271381][ T4199]  hci_conn_add_sysfs+0xd1/0x1e0
[  304.276851][ T4199]  le_conn_complete_evt+0xc48/0x15c0
[  304.282150][ T4199]  ? cs_le_create_conn+0x5e0/0x5e0
[  304.287272][ T4199]  ? __mutex_trylock_common+0x155/0x260
[  304.292847][ T4199]  hci_le_meta_evt+0x285/0x3c90
[  304.297705][ T4199]  ? hci_event_packet+0x37b/0x1370
[  304.302823][ T4199]  ? __lock_acquire+0x7d10/0x7d10
[  304.307858][ T4199]  ? hci_remote_host_features_evt+0x280/0x280
[  304.313932][ T4199]  ? __mutex_unlock_slowpath+0x1b0/0x6c0
[  304.319592][ T4199]  ? mark_lock+0x94/0x320
[  304.323928][ T4199]  ? mutex_unlock+0x10/0x10
[  304.328439][ T4199]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  304.334447][ T4199]  ? lock_chain_count+0x20/0x20
[  304.339316][ T4199]  ? __rwlock_init+0x140/0x140
[  304.344088][ T4199]  hci_event_packet+0xe48/0x1370
[  304.349037][ T4199]  ? lockdep_hardirqs_on+0x94/0x140
[  304.354275][ T4199]  ? rcu_lock_release+0x20/0x20
[  304.359135][ T4199]  ? hci_send_to_monitor+0x9c/0x4a0
[  304.364343][ T4199]  hci_rx_work+0x255/0xa10
[  304.368779][ T4199]  process_one_work+0x85f/0x1010
[  304.373734][ T4199]  ? worker_detach_from_pool+0x240/0x240
[  304.379389][ T4199]  ? lockdep_hardirqs_off+0x70/0x100
[  304.384684][ T4199]  ? _raw_spin_lock_irq+0xb7/0xf0
[  304.389710][ T4199]  ? _raw_spin_lock_irqsave+0x100/0x100
[  304.395264][ T4199]  ? wq_worker_running+0x97/0x170
[  304.400294][ T4199]  worker_thread+0xaa6/0x1290
[  304.405087][ T4199]  kthread+0x436/0x520
[  304.409177][ T4199]  ? rcu_lock_release+0x20/0x20
[  304.414029][ T4199]  ? kthread_blkcg+0xd0/0xd0
[  304.418661][ T4199]  ret_from_fork+0x1f/0x30
[  304.423108][ T4199]  </TASK>
[  304.427858][ T4199] kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  304.441235][ T4199] Bluetooth: hci4: failed to register connection device
[  304.529440][ T6292] binder: 6287:6292 ioctl 4018620d 0 returned -22
[  304.701941][ T6313] loop3: detected capacity change from 0 to 128
[  304.842246][ T6313] FAT-fs (loop3): Unrecognized mount option "18446744073709551615ÿÿÿ" or missing value
[  305.679359][ T4232] usb 3-1: new low-speed USB device number 6 using dummy_hcd
[  305.781036][ T6332] loop3: detected capacity change from 0 to 128
[  305.931307][ T6335] netlink: 71 bytes leftover after parsing attributes in process `syz.4.610'.
[  306.146976][ T4199] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201'
[  306.156921][ T4199] CPU: 0 PID: 4199 Comm: kworker/u5:4 Not tainted syzkaller #0
[  306.164509][ T4199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  306.174606][ T4199] Workqueue: hci0 hci_rx_work
[  306.179339][ T4199] Call Trace:
[  306.182657][ T4199]  <TASK>
[  306.185619][ T4199]  dump_stack_lvl+0x188/0x250
[  306.190336][ T4199]  ? show_regs_print_info+0x20/0x20
[  306.195783][ T4199]  ? load_image+0x400/0x400
[  306.200338][ T4199]  sysfs_create_dir_ns+0x26a/0x290
[  306.205493][ T4199]  ? sysfs_warn_dup+0xa0/0xa0
[  306.210200][ T4199]  ? process_one_work+0x85f/0x1010
[  306.215346][ T4199]  ? do_raw_spin_unlock+0x11d/0x230
[  306.220588][ T4199]  kobject_add_internal+0x6e0/0xd90
[  306.225831][ T4199]  kobject_add+0x160/0x230
[  306.230296][ T4199]  ? kobject_init+0x1d0/0x1d0
[  306.235007][ T4199]  ? klist_children_get+0x50/0x50
[  306.240069][ T4199]  ? get_device_parent+0x121/0x3f0
[  306.245233][ T4199]  device_add+0x483/0xfb0
[  306.249622][ T4199]  hci_conn_add_sysfs+0xd1/0x1e0
[  306.254682][ T4199]  le_conn_complete_evt+0xc48/0x15c0
[  306.260042][ T4199]  ? cs_le_create_conn+0x5e0/0x5e0
[  306.265228][ T4199]  ? __mutex_trylock_common+0x155/0x260
[  306.270816][ T4199]  hci_le_meta_evt+0x285/0x3c90
[  306.275704][ T4199]  ? hci_event_packet+0x37b/0x1370
[  306.280845][ T4199]  ? __lock_acquire+0x7d10/0x7d10
[  306.285931][ T4199]  ? hci_remote_host_features_evt+0x280/0x280
[  306.292032][ T4199]  ? __mutex_unlock_slowpath+0x1b0/0x6c0
[  306.297706][ T4199]  ? mark_lock+0x94/0x320
[  306.302073][ T4199]  ? mutex_unlock+0x10/0x10
[  306.306621][ T4199]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  306.312639][ T4199]  ? lock_chain_count+0x20/0x20
[  306.317619][ T4199]  ? __rwlock_init+0x140/0x140
[  306.322422][ T4199]  hci_event_packet+0xe48/0x1370
[  306.327389][ T4199]  ? lockdep_hardirqs_on+0x94/0x140
[  306.332631][ T4199]  ? rcu_lock_release+0x20/0x20
[  306.337525][ T4199]  ? hci_send_to_monitor+0x9c/0x4a0
[  306.342758][ T4199]  hci_rx_work+0x255/0xa10
[  306.347260][ T4199]  process_one_work+0x85f/0x1010
[  306.352284][ T4199]  ? worker_detach_from_pool+0x240/0x240
[  306.358044][ T4199]  ? lockdep_hardirqs_off+0x70/0x100
[  306.363377][ T4199]  ? _raw_spin_lock_irq+0xb7/0xf0
[  306.368432][ T4199]  ? _raw_spin_lock_irqsave+0x100/0x100
[  306.374012][ T4199]  ? wq_worker_running+0x97/0x170
[  306.379082][ T4199]  worker_thread+0xaa6/0x1290
[  306.383832][ T4199]  kthread+0x436/0x520
[  306.387940][ T4199]  ? rcu_lock_release+0x20/0x20
[  306.392820][ T4199]  ? kthread_blkcg+0xd0/0xd0
[  306.397445][ T4199]  ret_from_fork+0x1f/0x30
[  306.401930][ T4199]  </TASK>
[  306.787117][ T4199] kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  306.805580][ T4199] Bluetooth: hci0: failed to register connection device
[  307.379838][ T4232] usb 3-1: config 0 has an invalid interface number: 255 but max is 0
[  307.388642][ T4232] usb 3-1: config 0 has no interface number 0
[  307.403019][ T4232] usb 3-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30
[  308.275436][ T4232] usb 3-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  308.351368][ T4232] usb 3-1: config 0 interface 255 has no altsetting 0
[  308.373594][ T4232] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  308.392255][ T4232] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  308.446647][ T4232] usb 3-1: config 0 descriptor??
[  308.488833][ T4232] usb 3-1: can't set config #0, error -71
[  308.539387][ T4232] usb 3-1: USB disconnect, device number 6
[  310.950445][ T6384] loop3: detected capacity change from 0 to 1024
[  311.010381][ T4199] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci2/hci2:201'
[  311.019996][ T4199] CPU: 1 PID: 4199 Comm: kworker/u5:4 Not tainted syzkaller #0
[  311.027575][ T4199] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  311.037659][ T4199] Workqueue: hci2 hci_rx_work
[  311.042376][ T4199] Call Trace:
[  311.045673][ T4199]  <TASK>
[  311.048626][ T4199]  dump_stack_lvl+0x188/0x250
[  311.053338][ T4199]  ? show_regs_print_info+0x20/0x20
[  311.058573][ T4199]  ? load_image+0x400/0x400
[  311.063155][ T4199]  sysfs_create_dir_ns+0x26a/0x290
[  311.068297][ T4199]  ? sysfs_warn_dup+0xa0/0xa0
[  311.073005][ T4199]  ? process_one_work+0x85f/0x1010
[  311.078144][ T4199]  ? do_raw_spin_unlock+0x11d/0x230
[  311.083379][ T4199]  kobject_add_internal+0x6e0/0xd90
[  311.088614][ T4199]  kobject_add+0x160/0x230
[  311.093065][ T4199]  ? kobject_init+0x1d0/0x1d0
[  311.097781][ T4199]  ? klist_children_get+0x50/0x50
[  311.102841][ T4199]  ? get_device_parent+0x121/0x3f0
[  311.107988][ T4199]  device_add+0x483/0xfb0
[  311.112416][ T4199]  hci_conn_add_sysfs+0xd1/0x1e0
[  311.117392][ T4199]  le_conn_complete_evt+0xc48/0x15c0
[  311.122722][ T4199]  ? cs_le_create_conn+0x5e0/0x5e0
[  311.127872][ T4199]  ? __mutex_trylock_common+0x155/0x260
[  311.133465][ T4199]  hci_le_meta_evt+0x285/0x3c90
[  311.138357][ T4199]  ? hci_event_packet+0x37b/0x1370
[  311.143514][ T4199]  ? __lock_acquire+0x7d10/0x7d10
[  311.148587][ T4199]  ? hci_remote_host_features_evt+0x280/0x280
[  311.154688][ T4199]  ? __mutex_unlock_slowpath+0x1b0/0x6c0
[  311.160349][ T4199]  ? mark_lock+0x94/0x320
[  311.164704][ T4199]  ? mutex_unlock+0x10/0x10
[  311.169235][ T4199]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  311.175258][ T4199]  ? lock_chain_count+0x20/0x20
[  311.180166][ T4199]  ? __rwlock_init+0x140/0x140
[  311.185112][ T4199]  hci_event_packet+0xe48/0x1370
[  311.190086][ T4199]  ? lockdep_hardirqs_on+0x94/0x140
[  311.195440][ T4199]  ? rcu_lock_release+0x20/0x20
[  311.200369][ T4199]  ? hci_send_to_monitor+0x9c/0x4a0
[  311.205627][ T4199]  hci_rx_work+0x255/0xa10
[  311.210111][ T4199]  process_one_work+0x85f/0x1010
[  311.215106][ T4199]  ? worker_detach_from_pool+0x240/0x240
[  311.220794][ T4199]  ? lockdep_hardirqs_off+0x70/0x100
[  311.226121][ T4199]  ? _raw_spin_lock_irq+0xb7/0xf0
[  311.231180][ T4199]  ? _raw_spin_lock_irqsave+0x100/0x100
[  311.236767][ T4199]  ? wq_worker_running+0x97/0x170
[  311.241825][ T4199]  worker_thread+0xaa6/0x1290
[  311.246567][ T4199]  kthread+0x436/0x520
[  311.250665][ T4199]  ? rcu_lock_release+0x20/0x20
[  311.255550][ T4199]  ? kthread_blkcg+0xd0/0xd0
[  311.260177][ T4199]  ret_from_fork+0x1f/0x30
[  311.264658][ T4199]  </TASK>
[  311.276294][ T4199] kobject_add_internal failed for hci2:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  311.289971][ T4199] Bluetooth: hci2: failed to register connection device
[  311.297183][ T4199] Bluetooth: hci2: link tx timeout
[  311.303964][ T4199] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa
[  311.312997][ T4199] Bluetooth: hci2: link tx timeout
[  311.318181][ T4199] Bluetooth: hci2: killing stalled connection 00:00:00:00:00:00
[  311.325909][ T4199] Bluetooth: hci2: killing stalled connection 00:00:00:00:00:00
[  311.334333][ T4199] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  311.822686][ T6384] hfsplus: invalid btree extent records (0 size)
[  311.854534][ T6384] hfsplus: failed to load attributes file
[  311.925564][ T6389] netlink: 71 bytes leftover after parsing attributes in process `syz.1.630'.
[  312.991743][ T6398] loop2: detected capacity change from 0 to 8
[  313.059098][ T6398] squashfs: Unknown parameter 'ÿÿÿÿ'
[  313.086159][ T6400] loop3: detected capacity change from 0 to 256
[  313.154164][ T6400] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  313.210021][ T6400] exFAT-fs (loop3): Medium has reported failures. Some data may be lost.
[  313.364142][ T6400] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  313.399098][ T5360] Bluetooth: hci2: command 0x0406 tx timeout
[  316.166544][ T6424] binder: BINDER_SET_CONTEXT_MGR already set
[  316.172754][ T6424] binder: 6420:6424 ioctl 4018620d 200000000040 returned -16
[  316.188343][ T6424] binder: 6420:6424 ioctl c0306201 0 returned -14
[  316.204643][ T6424] binder: 6420:6424 ioctl c0306201 0 returned -14
[  316.981287][ T4200] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201'
[  316.990887][ T4200] CPU: 1 PID: 4200 Comm: kworker/u5:5 Not tainted syzkaller #0
[  316.998466][ T4200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  317.008564][ T4200] Workqueue: hci4 hci_rx_work
[  317.013421][ T4200] Call Trace:
[  317.016736][ T4200]  <TASK>
[  317.019703][ T4200]  dump_stack_lvl+0x188/0x250
[  317.024423][ T4200]  ? show_regs_print_info+0x20/0x20
[  317.029756][ T4200]  ? load_image+0x400/0x400
[  317.034314][ T4200]  sysfs_create_dir_ns+0x26a/0x290
[  317.039468][ T4200]  ? sysfs_warn_dup+0xa0/0xa0
[  317.044182][ T4200]  ? process_one_work+0x85f/0x1010
[  317.049337][ T4200]  ? do_raw_spin_unlock+0x11d/0x230
[  317.054574][ T4200]  kobject_add_internal+0x6e0/0xd90
[  317.059832][ T4200]  kobject_add+0x160/0x230
[  317.064295][ T4200]  ? kobject_init+0x1d0/0x1d0
[  317.069012][ T4200]  ? klist_children_get+0x50/0x50
[  317.074079][ T4200]  ? get_device_parent+0x121/0x3f0
[  317.079231][ T4200]  device_add+0x483/0xfb0
[  317.083618][ T4200]  hci_conn_add_sysfs+0xd1/0x1e0
[  317.088609][ T4200]  le_conn_complete_evt+0xc48/0x15c0
[  317.093963][ T4200]  ? cs_le_create_conn+0x5e0/0x5e0
[  317.099132][ T4200]  ? __mutex_trylock_common+0x155/0x260
[  317.104732][ T4200]  hci_le_meta_evt+0x285/0x3c90
[  317.109620][ T4200]  ? hci_event_packet+0x37b/0x1370
[  317.114770][ T4200]  ? __lock_acquire+0x7d10/0x7d10
[  317.119930][ T4200]  ? hci_remote_host_features_evt+0x280/0x280
[  317.126119][ T4200]  ? __mutex_unlock_slowpath+0x1b0/0x6c0
[  317.131802][ T4200]  ? mark_lock+0x94/0x320
[  317.136190][ T4200]  ? mutex_unlock+0x10/0x10
[  317.140751][ T4200]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  317.146781][ T4200]  ? lock_chain_count+0x20/0x20
[  317.151673][ T4200]  ? __rwlock_init+0x140/0x140
[  317.156467][ T4200]  hci_event_packet+0xe48/0x1370
[  317.161437][ T4200]  ? lockdep_hardirqs_on+0x94/0x140
[  317.166677][ T4200]  ? rcu_lock_release+0x20/0x20
[  317.171570][ T4200]  ? hci_send_to_monitor+0x9c/0x4a0
[  317.176805][ T4200]  hci_rx_work+0x255/0xa10
[  317.181290][ T4200]  process_one_work+0x85f/0x1010
[  317.186291][ T4200]  ? worker_detach_from_pool+0x240/0x240
[  317.191989][ T4200]  ? lockdep_hardirqs_off+0x70/0x100
[  317.197325][ T4200]  ? _raw_spin_lock_irq+0xb7/0xf0
[  317.202386][ T4200]  ? _raw_spin_lock_irqsave+0x100/0x100
[  317.207976][ T4200]  ? wq_worker_running+0x97/0x170
[  317.213047][ T4200]  worker_thread+0xaa6/0x1290
[  317.217778][ T4200]  ? lockdep_hardirqs_on+0x94/0x140
[  317.223455][ T4200]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  317.229396][ T4200]  kthread+0x436/0x520
[  317.233504][ T4200]  ? rcu_lock_release+0x20/0x20
[  317.238391][ T4200]  ? kthread_blkcg+0xd0/0xd0
[  317.243022][ T4200]  ret_from_fork+0x1f/0x30
[  317.247490][ T4200]  </TASK>
[  317.257720][ T4200] kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  317.271050][ T4200] Bluetooth: hci4: failed to register connection device
[  317.325471][ T6433] netlink: 71 bytes leftover after parsing attributes in process `syz.0.647'.
[  317.345053][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  317.351498][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  318.048623][ T1111] usb 4-1: new low-speed USB device number 6 using dummy_hcd
[  318.083641][ T6439] loop2: detected capacity change from 0 to 1024
[  319.294369][ T1111] usb 4-1: config 0 has an invalid interface number: 255 but max is 0
[  319.323290][ T1111] usb 4-1: config 0 has no interface number 0
[  319.343592][ T1111] usb 4-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30
[  319.468256][ T1111] usb 4-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  320.377360][ T1111] usb 4-1: config 0 interface 255 has no altsetting 0
[  320.386598][ T1111] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  320.398317][ T1111] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  320.514079][ T6460] device bridge3 entered promiscuous mode
[  320.537354][ T1111] usb 4-1: config 0 descriptor??
[  320.654261][ T1111] usb 4-1: can't set config #0, error -71
[  320.722187][ T1111] usb 4-1: USB disconnect, device number 6
[  321.130133][ T6466] loop3: detected capacity change from 0 to 8
[  321.899581][ T6466] squashfs: Unknown parameter ''
[  326.188670][ T6475] overlayfs: conflicting lowerdir path
[  326.392410][ T6504] device bridge2 entered promiscuous mode
[  327.106309][ T6511] netlink: 71 bytes leftover after parsing attributes in process `syz.0.674'.
[  329.063478][ T6522] loop3: detected capacity change from 0 to 1024
[  330.756170][ T6532] hfsplus: trying to free free bnode 0(1)
[  330.859375][ T4293] hfsplus: b-tree write err: -5, ino 25
[  330.865370][ T4293] hfsplus: b-tree write err: -5, ino 4
[  330.911980][ T4293] hfsplus: b-tree write err: -5, ino 2
[  331.608082][ T6544] xt_policy: neither incoming nor outgoing policy selected
[  331.649637][ T6544] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  332.604054][ T4279] usb 3-1: new low-speed USB device number 7 using dummy_hcd
[  333.726611][ T6556] xt_CT: You must specify a L4 protocol and not use inversions on it
[  334.637101][ T4279] usb 3-1: unable to read config index 0 descriptor/all
[  334.663346][ T4279] usb 3-1: can't read configurations, error -71
[  334.747348][ T6566] loop2: detected capacity change from 0 to 1024
[  336.528979][  T144] hfsplus: b-tree write err: -5, ino 25
[  336.567101][  T144] hfsplus: b-tree write err: -5, ino 4
[  336.574043][  T144] hfsplus: b-tree write err: -5, ino 2
[  336.608185][ T6586] fuse: Bad value for 'fd'
[  336.698255][ T6590] loop2: detected capacity change from 0 to 1024
[  337.822342][ T6603] hfsplus: trying to free free bnode 0(1)
[  342.240000][  T144] hfsplus: b-tree write err: -5, ino 25
[  342.246502][  T144] hfsplus: b-tree write err: -5, ino 4
[  342.356822][  T144] hfsplus: b-tree write err: -5, ino 2
[  343.391536][ T6670] 9pnet: Insufficient options for proto=fd
[  345.816720][ T6689] futex_wake_op: syz.1.730 tries to shift op by 144; fix this program
[  347.428360][ T6701] 9pnet: Insufficient options for proto=fd
[  347.576603][ T6713] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns
[  347.600172][ T6713] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer.
[  351.632652][ T6751] 9pnet: Insufficient options for proto=fd
[  351.668723][ T6755] device bridge2 entered promiscuous mode
[  357.725111][ T6827] binder: 6821:6827 ioctl c0306201 0 returned -14
[  362.760190][ T6867] loop2: detected capacity change from 0 to 8
[  363.291490][ T6867] squashfs: Unknown parameter 'ÿÿÿÿ'
[  363.532132][ T6872] device bridge3 entered promiscuous mode
[  364.493756][ T6878] loop2: detected capacity change from 0 to 8
[  364.572986][ T6878] SQUASHFS error: Unable to read directory block [629:fe]
[  369.076423][ T6922] loop2: detected capacity change from 0 to 8
[  369.381922][ T6923] 9pnet: Insufficient options for proto=fd
[  369.829548][ T6922] squashfs: Unknown parameter ''
[  373.515782][ T6949] device bridge4 entered promiscuous mode
[  374.205992][ T6956] 9pnet: Insufficient options for proto=fd
[  378.447322][ T6984] netlink: 71 bytes leftover after parsing attributes in process `syz.4.827'.
[  378.482190][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  378.488698][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  379.069316][ T6986] device bridge1 entered promiscuous mode
[  379.289071][ T6990] loop2: detected capacity change from 0 to 8
[  379.329273][ T6990] squashfs: Unknown parameter 'ÿÿÿÿ'
[  380.455708][ T6997] loop2: detected capacity change from 0 to 1024
[  382.932148][ T7019] device bridge1 entered promiscuous mode
[  385.172368][ T7036] loop2: detected capacity change from 0 to 1024
[  386.310521][ T7050] xt_CT: You must specify a L4 protocol and not use inversions on it
[  387.512044][ T7059] device bridge3 entered promiscuous mode
[  388.373645][ T7067] xt_policy: neither incoming nor outgoing policy selected
[  388.382248][ T7067] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  388.465534][ T4293] hfsplus: b-tree write err: -5, ino 25
[  388.498827][ T4293] hfsplus: b-tree write err: -5, ino 4
[  388.504428][ T4293] hfsplus: b-tree write err: -5, ino 2
[  388.798911][ T4293] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  388.960315][ T7077] loop2: detected capacity change from 0 to 128
[  389.012998][ T4293] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  389.135269][ T7080] futex_wake_op: syz.1.862 tries to shift op by 144; fix this program
[  389.149029][ T7077] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  389.248764][ T7077] ext4 filesystem being mounted at /131/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  389.280643][ T4293] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  389.446927][ T4293] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  390.156915][ T7098] loop2: detected capacity change from 0 to 128
[  390.218946][ T7098] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  390.231359][ T7098] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  390.298763][ T7082] chnl_net:caif_netlink_parms(): no params data found
[  391.061314][ T7082] bridge0: port 1(bridge_slave_0) entered blocking state
[  391.068619][ T7082] bridge0: port 1(bridge_slave_0) entered disabled state
[  391.076773][ T7082] device bridge_slave_0 entered promiscuous mode
[  391.104176][ T7082] bridge0: port 2(bridge_slave_1) entered blocking state
[  391.113816][ T7082] bridge0: port 2(bridge_slave_1) entered disabled state
[  391.242399][ T7082] device bridge_slave_1 entered promiscuous mode
[  391.608769][ T6462] Bluetooth: hci2: command 0x0409 tx timeout
[  391.669856][ T7113] binder: BINDER_SET_CONTEXT_MGR already set
[  391.675938][ T7113] binder: 7108:7113 ioctl 4018620d 200000000040 returned -16
[  391.686273][ T7113] binder: 7108:7113 ioctl c0306201 0 returned -14
[  393.495928][ T7082] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  393.529443][ T7082] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  393.647991][ T7129] 9pnet: Insufficient options for proto=fd
[  393.675820][ T7082] team0: Port device team_slave_0 added
[  393.682782][ T4234] Bluetooth: hci2: command 0x041b tx timeout
[  393.721999][ T7082] team0: Port device team_slave_1 added
[  393.902811][ T7082] batman_adv: batadv0: Adding interface: batadv_slave_0
[  393.922480][ T7082] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  394.024318][ T7082] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  394.180903][ T7145] futex_wake_op: syz.2.878 tries to shift op by 144; fix this program
[  395.063715][ T7082] batman_adv: batadv0: Adding interface: batadv_slave_1
[  395.075282][ T7082] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  395.179726][ T7082] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  395.235537][ T7161] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  395.243360][ T7163] 9pnet: Insufficient options for proto=fd
[  395.497555][ T7082] device hsr_slave_0 entered promiscuous mode
[  395.516469][ T7082] device hsr_slave_1 entered promiscuous mode
[  395.540623][ T7082] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  395.564978][ T7082] Cannot create hsr debugfs directory
[  396.111202][ T1111] Bluetooth: hci2: command 0x040f tx timeout
[  396.464607][ T7183] futex_wake_op: syz.4.890 tries to shift op by 144; fix this program
[  397.398459][ T7190] binder: 7185:7190 ioctl c0306201 0 returned -14
[  397.602812][ T7197] 9pnet: Insufficient options for proto=fd
[  398.524244][ T1111] Bluetooth: hci2: command 0x0419 tx timeout
[  398.692176][ T7202] device bridge4 entered promiscuous mode
[  399.019648][ T7217] netlink: 28 bytes leftover after parsing attributes in process `syz.1.900'.
[  400.053416][ T7082] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  400.129365][ T7082] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  400.171686][ T7228] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns
[  400.191056][ T7228] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer.
[  400.268633][ T4293] device hsr_slave_0 left promiscuous mode
[  400.300931][ T4293] device hsr_slave_1 left promiscuous mode
[  400.328083][ T4293] batman_adv: batadv0: Removing interface: batadv_slave_0
[  400.369468][ T4293] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  400.376990][ T4293] batman_adv: batadv0: Removing interface: batadv_slave_1
[  400.411822][ T4293] device bridge_slave_1 left promiscuous mode
[  400.426350][ T4293] bridge0: port 2(bridge_slave_1) entered disabled state
[  400.485171][ T4293] device bridge_slave_0 left promiscuous mode
[  400.504111][ T4293] bridge0: port 1(bridge_slave_0) entered disabled state
[  400.577582][ T4293] device veth1_macvtap left promiscuous mode
[  400.607733][ T4293] device veth0_macvtap left promiscuous mode
[  400.633048][ T4293] device veth1_vlan left promiscuous mode
[  400.656634][ T4293] device veth0_vlan left promiscuous mode
[  401.041114][ T7241] 9pnet: Insufficient options for proto=fd
[  401.327028][ T7243] futex_wake_op: syz.4.902 tries to shift op by 144; fix this program
[  404.084194][ T4293] team0 (unregistering): Port device team_slave_1 removed
[  404.192432][ T4293] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  404.220948][ T4293] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  404.307967][ T4293] bond0 (unregistering): Released all slaves
[  404.414887][ T7082] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  404.458850][ T7261] netlink: 28 bytes leftover after parsing attributes in process `syz.1.912'.
[  404.574312][ T7082] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  404.938162][ T7082] 8021q: adding VLAN 0 to HW filter on device bond0
[  405.000147][ T7278] 9pnet: Insufficient options for proto=fd
[  405.009394][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  405.039246][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  405.101190][ T7082] 8021q: adding VLAN 0 to HW filter on device team0
[  405.167367][ T7286] loop2: detected capacity change from 0 to 128
[  405.275053][ T7282] futex_wake_op: syz.0.918 tries to shift op by 144; fix this program
[  405.306452][ T7286] FAT-fs (loop2): Unrecognized mount option "18446744073709551615ÿÿÿ" or missing value
[  405.319935][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  407.208350][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  407.289069][ T4236] bridge0: port 1(bridge_slave_0) entered blocking state
[  407.296235][ T4236] bridge0: port 1(bridge_slave_0) entered forwarding state
[  407.469360][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  407.605275][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  407.653743][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  407.811704][ T4236] bridge0: port 2(bridge_slave_1) entered blocking state
[  407.818936][ T4236] bridge0: port 2(bridge_slave_1) entered forwarding state
[  407.988875][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  408.460844][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  408.533115][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  409.150974][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  409.189520][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  409.215696][ T7323] 9pnet: Insufficient options for proto=fd
[  409.405526][ T7082] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  409.462014][ T7082] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  409.778261][ T7338] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns
[  409.953077][ T7338] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer.
[  410.146598][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  410.180023][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  410.220744][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  410.252760][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  410.292233][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  410.321659][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  410.406329][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  410.472375][ T7325] futex_wake_op: syz.4.930 tries to shift op by 144; fix this program
[  410.646754][ T7350] binder: BINDER_SET_CONTEXT_MGR already set
[  410.653065][ T7350] binder: 7348:7350 ioctl 4018620d 200000000040 returned -16
[  410.666478][ T7350] binder: 7348:7350 ioctl c0306201 0 returned -14
[  411.528356][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  411.549186][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  411.607004][ T7082] 8021q: adding VLAN 0 to HW filter on device batadv0
[  411.656272][ T7359] loop2: detected capacity change from 0 to 128
[  411.673704][ T7359] FAT-fs (loop2): Unrecognized mount option "18446744073709551615ÿÿÿ" or missing value
[  411.947061][ T7371] netlink: 71 bytes leftover after parsing attributes in process `syz.1.936'.
[  412.307316][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  412.332543][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  412.388442][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  412.409156][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  412.452000][ T7082] device veth0_vlan entered promiscuous mode
[  412.469729][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  412.493978][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  412.567457][ T7082] device veth1_vlan entered promiscuous mode
[  412.578388][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  412.871908][ T7082] device veth0_macvtap entered promiscuous mode
[  413.144216][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  413.171804][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  413.624941][ T7082] device veth1_macvtap entered promiscuous mode
[  413.658026][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  413.706425][ T4236] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  413.784630][ T5360] Bluetooth: hci0: command 0x2016 tx timeout
[  413.929164][ T7082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  413.975659][ T7082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  414.006048][ T7399] loop2: detected capacity change from 0 to 1024
[  414.016383][ T7082] batman_adv: batadv0: Interface activated: batadv_slave_0
[  414.898935][ T7399] 9pnet: Insufficient options for proto=fd
[  414.909881][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  414.939898][ T4291] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  414.966535][ T7082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  415.005618][ T7082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  415.061572][ T7082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  415.114522][ T7082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  415.155690][ T7082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  415.197172][ T7082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  415.227811][ T7082] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  415.258593][ T7082] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  415.295740][ T7082] batman_adv: batadv0: Interface activated: batadv_slave_1
[  415.332603][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  415.439228][ T4294] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  415.483541][ T7082] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  415.512409][ T7082] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  415.600149][ T7420] binder: 7417:7420 ioctl c0306201 0 returned -14
[  416.262256][ T7082] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  416.375357][ T7082] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  416.964056][ T4339] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  417.388235][ T4339] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  417.621220][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  417.779942][ T4339] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  417.787812][ T4339] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  417.799353][ T4339] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  418.289025][ T7448] netlink: 28 bytes leftover after parsing attributes in process `syz.4.951'.
[  418.389126][ T7449] loop5: detected capacity change from 0 to 8
[  418.949147][ T7449] squashfs: Unknown parameter ''
[  419.200456][ T7456] futex_wake_op: syz.4.954 tries to shift op by 144; fix this program
[  421.565544][ T7483] device bridge5 entered promiscuous mode
[  422.231295][ T7486] netlink: 71 bytes leftover after parsing attributes in process `syz.0.962'.
[  423.760811][ T7504] futex_wake_op: syz.0.967 tries to shift op by 144; fix this program
[  426.845219][ T7537] loop5: detected capacity change from 0 to 256
[  426.910202][ T7537] FAT-fs (loop5): Directory bread(block 64) failed
[  426.916800][ T7537] FAT-fs (loop5): Directory bread(block 65) failed
[  426.923719][ T7537] FAT-fs (loop5): Directory bread(block 66) failed
[  426.930345][ T7537] FAT-fs (loop5): Directory bread(block 67) failed
[  426.936987][ T7537] FAT-fs (loop5): Directory bread(block 68) failed
[  426.943636][ T7537] FAT-fs (loop5): Directory bread(block 69) failed
[  426.950441][ T7537] FAT-fs (loop5): Directory bread(block 70) failed
[  426.957138][ T7537] FAT-fs (loop5): Directory bread(block 71) failed
[  426.963981][ T7537] FAT-fs (loop5): Directory bread(block 72) failed
[  426.970613][ T7537] FAT-fs (loop5): Directory bread(block 73) failed
[  427.308977][ T7543] netlink: 28 bytes leftover after parsing attributes in process `syz.5.964'.
[  428.159284][ T7547] netlink: 71 bytes leftover after parsing attributes in process `syz.5.977'.
[  428.379068][ T7547] loop5: detected capacity change from 0 to 512
[  428.701427][ T7547] EXT4-fs (loop5): Ignoring removed oldalloc option
[  428.823474][ T7547] EXT4-fs (loop5): Invalid want_extra_isize 4188
[  429.482966][ T7566] futex_wake_op: syz.2.981 tries to shift op by 144; fix this program
[  431.865050][ T7585] loop2: detected capacity change from 0 to 512
[  432.083913][ T7585] EXT4-fs (loop2): mounted filesystem without journal. Opts: noauto_da_alloc,min_batch_time=0x0000000000000004,,errors=continue. Quota mode: writeback.
[  432.132071][ T7585] ext4 filesystem being mounted at /159/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  432.632070][ T7588] device bridge2 entered promiscuous mode
[  432.899371][ T7604] xt_CT: You must specify a L4 protocol and not use inversions on it
[  434.415555][ T7624] netlink: 71 bytes leftover after parsing attributes in process `syz.5.993'.
[  434.599841][ T7624] loop5: detected capacity change from 0 to 512
[  434.772721][ T7624] EXT4-fs (loop5): 1 truncate cleaned up
[  435.223591][ T7624] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodiscard,,errors=continue. Quota mode: none.
[  435.321331][ T7635] loop2: detected capacity change from 0 to 128
[  435.580484][ T7633] futex_wake_op: syz.4.994 tries to shift op by 144; fix this program
[  435.604110][ T7635] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  435.624055][ T7635] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  436.131399][  T146] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201'
[  436.141040][  T146] CPU: 1 PID: 146 Comm: kworker/u5:0 Not tainted syzkaller #0
[  436.148531][  T146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  436.158903][  T146] Workqueue: hci4 hci_rx_work
[  436.163626][  T146] Call Trace:
[  436.167056][  T146]  <TASK>
[  436.170019][  T146]  dump_stack_lvl+0x188/0x250
[  436.174729][  T146]  ? show_regs_print_info+0x20/0x20
[  436.179961][  T146]  ? load_image+0x400/0x400
[  436.184506][  T146]  sysfs_create_dir_ns+0x26a/0x290
[  436.189657][  T146]  ? sysfs_warn_dup+0xa0/0xa0
[  436.194366][  T146]  ? process_one_work+0x85f/0x1010
[  436.199513][  T146]  ? do_raw_spin_unlock+0x11d/0x230
[  436.204745][  T146]  kobject_add_internal+0x6e0/0xd90
[  436.210001][  T146]  kobject_add+0x160/0x230
[  436.214455][  T146]  ? kobject_init+0x1d0/0x1d0
[  436.219192][  T146]  ? klist_children_get+0x50/0x50
[  436.224251][  T146]  ? get_device_parent+0x121/0x3f0
[  436.229393][  T146]  device_add+0x483/0xfb0
[  436.233761][  T146]  hci_conn_add_sysfs+0xd1/0x1e0
[  436.238756][  T146]  le_conn_complete_evt+0xc48/0x15c0
[  436.244100][  T146]  ? cs_le_create_conn+0x5e0/0x5e0
[  436.249245][  T146]  ? __mutex_trylock_common+0x155/0x260
[  436.254853][  T146]  hci_le_meta_evt+0x285/0x3c90
[  436.259736][  T146]  ? hci_event_packet+0x37b/0x1370
[  436.264894][  T146]  ? __lock_acquire+0x7d10/0x7d10
[  436.269971][  T146]  ? hci_remote_host_features_evt+0x280/0x280
[  436.276179][  T146]  ? __mutex_unlock_slowpath+0x1b0/0x6c0
[  436.281858][  T146]  ? mark_lock+0x94/0x320
[  436.286219][  T146]  ? mutex_unlock+0x10/0x10
[  436.290766][  T146]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  436.296805][  T146]  ? lock_chain_count+0x20/0x20
[  436.301708][  T146]  ? __rwlock_init+0x140/0x140
[  436.306512][  T146]  hci_event_packet+0xe48/0x1370
[  436.311486][  T146]  ? lockdep_hardirqs_on+0x94/0x140
[  436.316726][  T146]  ? rcu_lock_release+0x20/0x20
[  436.321654][  T146]  ? hci_send_to_monitor+0x9c/0x4a0
[  436.326893][  T146]  hci_rx_work+0x255/0xa10
[  436.331360][  T146]  process_one_work+0x85f/0x1010
[  436.336352][  T146]  ? worker_detach_from_pool+0x240/0x240
[  436.342010][  T146]  ? lockdep_hardirqs_off+0x70/0x100
[  436.347337][  T146]  ? _raw_spin_lock_irq+0xb7/0xf0
[  436.352400][  T146]  ? _raw_spin_lock_irqsave+0x100/0x100
[  436.357992][  T146]  ? wq_worker_running+0x97/0x170
[  436.363061][  T146]  worker_thread+0xaa6/0x1290
[  436.367812][  T146]  kthread+0x436/0x520
[  436.371906][  T146]  ? rcu_lock_release+0x20/0x20
[  436.376780][  T146]  ? kthread_blkcg+0xd0/0xd0
[  436.381394][  T146]  ret_from_fork+0x1f/0x30
[  436.385839][  T146]  </TASK>
[  436.398281][  T146] kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  436.418610][  T146] Bluetooth: hci4: failed to register connection device
[  436.664299][ T7657] loop5: detected capacity change from 0 to 1024
[  437.232880][ T7657] 9pnet: Insufficient options for proto=fd
[  438.061238][ T7689] netlink: 71 bytes leftover after parsing attributes in process `syz.2.1010'.
[  438.217519][ T7691] futex_wake_op: syz.4.1011 tries to shift op by 144; fix this program
[  439.033100][ T1111] Bluetooth: hci4: command 0x2016 tx timeout
[  439.054198][ T7689] loop2: detected capacity change from 0 to 512
[  439.221299][ T7689] EXT4-fs (loop2): 1 truncate cleaned up
[  439.251523][ T7689] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodiscard,,errors=continue. Quota mode: none.
[  439.369894][  T146] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201'
[  439.379514][  T146] CPU: 0 PID: 146 Comm: kworker/u5:0 Not tainted syzkaller #0
[  439.387013][  T146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  439.397190][  T146] Workqueue: hci4 hci_rx_work
[  439.399671][ T7703] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 465: padding at end of block bitmap is not set
[  439.401911][  T146] Call Trace:
[  439.401950][  T146]  <TASK>
[  439.401960][  T146]  dump_stack_lvl+0x188/0x250
[  439.401988][  T146]  ? show_regs_print_info+0x20/0x20
[  439.432803][  T146]  ? load_image+0x400/0x400
[  439.437367][  T146]  sysfs_create_dir_ns+0x26a/0x290
[  439.442517][  T146]  ? sysfs_warn_dup+0xa0/0xa0
[  439.447223][  T146]  ? process_one_work+0x85f/0x1010
[  439.452354][  T146]  ? do_raw_spin_unlock+0x11d/0x230
[  439.457587][  T146]  kobject_add_internal+0x6e0/0xd90
[  439.462816][  T146]  kobject_add+0x160/0x230
[  439.467262][  T146]  ? kobject_init+0x1d0/0x1d0
[  439.471968][  T146]  ? klist_children_get+0x50/0x50
[  439.477021][  T146]  ? get_device_parent+0x121/0x3f0
[  439.482160][  T146]  device_add+0x483/0xfb0
[  439.486525][  T146]  hci_conn_add_sysfs+0xd1/0x1e0
[  439.491500][  T146]  le_conn_complete_evt+0xc48/0x15c0
[  439.496995][  T146]  ? cs_le_create_conn+0x5e0/0x5e0
[  439.502131][  T146]  ? __mutex_trylock_common+0x155/0x260
[  439.507714][  T146]  hci_le_meta_evt+0x285/0x3c90
[  439.512614][  T146]  ? hci_event_packet+0x37b/0x1370
[  439.517759][  T146]  ? __lock_acquire+0x7d10/0x7d10
[  439.522817][  T146]  ? hci_remote_host_features_evt+0x280/0x280
[  439.528908][  T146]  ? __mutex_unlock_slowpath+0x1b0/0x6c0
[  439.534560][  T146]  ? mark_lock+0x94/0x320
[  439.539025][  T146]  ? mutex_unlock+0x10/0x10
[  439.543553][  T146]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  439.549561][  T146]  ? lock_chain_count+0x20/0x20
[  439.554469][  T146]  ? __rwlock_init+0x140/0x140
[  439.559258][  T146]  hci_event_packet+0xe48/0x1370
[  439.564208][  T146]  ? lockdep_hardirqs_on+0x94/0x140
[  439.569429][  T146]  ? rcu_lock_release+0x20/0x20
[  439.574305][  T146]  ? hci_send_to_monitor+0x9c/0x4a0
[  439.579525][  T146]  hci_rx_work+0x255/0xa10
[  439.583965][  T146]  process_one_work+0x85f/0x1010
[  439.588938][  T146]  ? worker_detach_from_pool+0x240/0x240
[  439.594594][  T146]  ? lockdep_hardirqs_off+0x70/0x100
[  439.599906][  T146]  ? _raw_spin_lock_irq+0xb7/0xf0
[  439.604947][  T146]  ? _raw_spin_lock_irqsave+0x100/0x100
[  439.610508][  T146]  ? wq_worker_running+0x97/0x170
[  439.615557][  T146]  worker_thread+0xaa6/0x1290
[  439.620280][  T146]  kthread+0x436/0x520
[  439.624363][  T146]  ? rcu_lock_release+0x20/0x20
[  439.629246][  T146]  ? kthread_blkcg+0xd0/0xd0
[  439.633882][  T146]  ret_from_fork+0x1f/0x30
[  439.638333][  T146]  </TASK>
[  439.643284][  T146] kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  439.656570][  T146] Bluetooth: hci4: failed to register connection device
[  439.922123][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  439.928512][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  441.259180][ T7732] loop2: detected capacity change from 0 to 4096
[  441.374751][ T7732] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  441.767388][   T13] Bluetooth: hci4: command 0x2016 tx timeout
[  441.933769][ T7745] futex_wake_op: syz.4.1023 tries to shift op by 144; fix this program
[  442.167857][ T7749] loop2: detected capacity change from 0 to 8192
[  442.951368][ T7770] netlink: 71 bytes leftover after parsing attributes in process `syz.0.1030'.
[  444.282014][ T7778] loop5: detected capacity change from 0 to 1024
[  444.554006][ T7785] loop2: detected capacity change from 0 to 8
[  444.809146][ T7785] squashfs: Unknown parameter ''
[  445.928130][ T7802] loop2: detected capacity change from 0 to 1024
[  446.804762][ T7805] loop5: detected capacity change from 0 to 4096
[  447.086054][ T7807] hfsplus: trying to free free bnode 0(1)
[  447.299316][ T4295] hfsplus: b-tree write err: -5, ino 25
[  447.305113][ T4295] hfsplus: b-tree write err: -5, ino 4
[  447.320211][ T4295] hfsplus: b-tree write err: -5, ino 2
[  447.332204][ T7805] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  447.854199][ T7826] netlink: 71 bytes leftover after parsing attributes in process `syz.2.1044'.
[  448.109463][ T7826] loop2: detected capacity change from 0 to 512
[  449.470387][ T7826] EXT4-fs (loop2): 1 truncate cleaned up
[  449.488621][ T7826] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodiscard,,errors=continue. Quota mode: none.
[  451.175318][ T7864] futex_wake_op: syz.0.1051 tries to shift op by 144; fix this program
[  452.207630][ T7871] loop2: detected capacity change from 0 to 4096
[  452.556357][ T7871] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  453.747570][ T7895] loop2: detected capacity change from 0 to 8
[  453.909018][ T7895] squashfs: Unknown parameter ''
[  458.138083][ T7953] loop2: detected capacity change from 0 to 8
[  458.659238][ T7953] squashfs: Unknown parameter ''
[  459.153307][ T7970] netlink: 71 bytes leftover after parsing attributes in process `syz.2.1076'.
[  459.293130][ T7970] loop2: detected capacity change from 0 to 512
[  460.712688][ T7978] syz.5.1078 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  460.977651][ T7970] EXT4-fs (loop2): 1 truncate cleaned up
[  461.028126][ T7970] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodiscard,,errors=continue. Quota mode: none.
[  463.993966][ T8051] netlink: 71 bytes leftover after parsing attributes in process `syz.4.1095'.
[  464.024645][ T8054] loop2: detected capacity change from 0 to 512
[  464.106650][ T8054] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  464.242364][ T8054] EXT4-fs (loop2): warning: checktime reached, running e2fsck is recommended
[  464.290349][ T8054] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a856e01c, mo2=0002]
[  464.326708][ T8061] device bridge5 entered promiscuous mode
[  464.448620][ T8054] System zones: 0-2, 18-18, 34-34
[  464.997635][ T8054] EXT4-fs error (device loop2): ext4_orphan_get:1406: inode #15: comm syz.2.1085: iget: bad i_size value: 360287970189639680
[  465.511143][ T8054] EXT4-fs error (device loop2): ext4_orphan_get:1411: comm syz.2.1085: couldn't read orphan inode 15 (err -117)
[  466.081668][ T8054] EXT4-fs (loop2): mounted filesystem without journal. Opts: nojournal_checksum,bsdgroups,nouid32,grpquota,acl,,errors=continue. Quota mode: writeback.
[  468.595329][ T8090] loop2: detected capacity change from 0 to 4096
[  468.843032][ T8090] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  470.888655][ T6462] usb 3-1: new full-speed USB device number 9 using dummy_hcd
[  471.148042][ T8135] loop5: detected capacity change from 0 to 1024
[  471.308754][ T6462] usb 3-1: unable to get BOS descriptor or descriptor too short
[  471.388797][ T6462] usb 3-1: not running at top speed; connect to a high speed hub
[  471.479038][ T6462] usb 3-1: config 2 has an invalid interface number: 214 but max is 0
[  471.532730][ T6462] usb 3-1: config 2 has an invalid descriptor of length 241, skipping remainder of the config
[  471.628880][ T6462] usb 3-1: config 2 has no interface number 0
[  471.683671][ T6462] usb 3-1: config 2 interface 214 altsetting 1 has an invalid endpoint descriptor of length 4, skipping
[  471.776589][ T6462] usb 3-1: config 2 interface 214 has no altsetting 0
[  471.983832][ T6462] usb 3-1: New USB device found, idVendor=07b8, idProduct=abc1, bcdDevice=c3.af
[  472.048605][ T6462] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  472.056798][ T6462] usb 3-1: Product: syz
[  472.123723][ T6462] usb 3-1: Manufacturer: syz
[  472.188498][ T6462] usb 3-1: SerialNumber: syz
[  472.286401][ T8145] loop5: detected capacity change from 0 to 256
[  472.353710][ T8145] FAT-fs (loop5): Directory bread(block 64) failed
[  472.360423][ T8145] FAT-fs (loop5): Directory bread(block 65) failed
[  472.367107][ T8145] FAT-fs (loop5): Directory bread(block 66) failed
[  472.373830][ T8145] FAT-fs (loop5): Directory bread(block 67) failed
[  472.380760][ T8145] FAT-fs (loop5): Directory bread(block 68) failed
[  472.387330][ T8145] FAT-fs (loop5): Directory bread(block 69) failed
[  472.394140][ T8145] FAT-fs (loop5): Directory bread(block 70) failed
[  472.400770][ T8145] FAT-fs (loop5): Directory bread(block 71) failed
[  472.407385][ T8145] FAT-fs (loop5): Directory bread(block 72) failed
[  472.414012][ T8145] FAT-fs (loop5): Directory bread(block 73) failed
[  472.962305][ T8147] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1119'.
[  473.319460][ T6462] pegasus 3-1:2.214: Missing or invalid endpoints
[  473.368166][ T6462] usb 3-1: USB disconnect, device number 9
[  474.273170][ T8157] loop5: detected capacity change from 0 to 8
[  474.280077][ T8157] squashfs: Unknown parameter ''
[  474.370129][ T8161] netlink: 71 bytes leftover after parsing attributes in process `syz.2.1125'.
[  475.075787][ T8161] loop2: detected capacity change from 0 to 512
[  475.185526][ T8161] EXT4-fs (loop2): 1 truncate cleaned up
[  475.197528][ T8161] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodiscard,,errors=continue. Quota mode: none.
[  475.219260][ T6462] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  475.578946][ T6462] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  475.603648][ T6462] usb 6-1: config 0 has no interfaces?
[  475.634335][ T8180] device bridge6 entered promiscuous mode
[  476.588770][ T6462] usb 6-1: New USB device found, idVendor=10d6, idProduct=2200, bcdDevice= 0.02
[  476.608242][   T26] kauditd_printk_skb: 3 callbacks suppressed
[  476.608258][   T26] audit: type=1326 audit(1778090961.043:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8182 comm="syz.4.1132" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe6f69ddd9 code=0x7ffc0000
[  476.648573][ T6462] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  476.698238][ T6462] usb 6-1: SerialNumber: syz
[  476.739320][ T6462] usb 6-1: config 0 descriptor??
[  476.818572][   T26] audit: type=1326 audit(1778090961.153:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8182 comm="syz.4.1132" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbe6f69ddd9 code=0x7ffc0000
[  477.759763][ T4266] usb 6-1: USB disconnect, device number 2
[  477.883341][   T26] audit: type=1326 audit(1778090961.153:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8182 comm="syz.4.1132" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe6f69ddd9 code=0x7ffc0000
[  477.979304][   T26] audit: type=1326 audit(1778090961.153:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8182 comm="syz.4.1132" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fbe6f69ddd9 code=0x7ffc0000
[  478.079131][   T26] audit: type=1326 audit(1778090961.153:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8182 comm="syz.4.1132" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe6f69ddd9 code=0x7ffc0000
[  478.470103][ T8203] loop2: detected capacity change from 0 to 8
[  478.510999][   T26] audit: type=1326 audit(1778090961.153:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8182 comm="syz.4.1132" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=87 compat=0 ip=0x7fbe6f69ddd9 code=0x7ffc0000
[  478.536222][ T8203] squashfs: Unknown parameter ''
[  479.022217][   T26] audit: type=1326 audit(1778090961.153:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8182 comm="syz.4.1132" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe6f69ddd9 code=0x7ffc0000
[  481.572023][ T8222] loop5: detected capacity change from 0 to 2048
[  481.678582][ T8222] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  484.348227][ T8260] loop2: detected capacity change from 0 to 4096
[  484.545050][ T8260] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  485.590350][ T8276] loop2: detected capacity change from 0 to 2048
[  485.725261][ T8276] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  485.914902][ T8280] futex_wake_op: syz.1.1164 tries to shift op by 144; fix this program
[  486.110763][ T8276] UDF-fs: error (device loop2): udf_fiiter_advance_blk: extent after position 232 not allocated in directory (ino 1376)
[  486.212102][ T8276] UDF-fs: error (device loop2): udf_verify_fi: directory (ino 1376) has entry past directory size at pos 232
[  486.510682][ T8291] nfs: Unknown parameter './file0/file0'
[  487.362112][ T8297] loop2: detected capacity change from 0 to 2048
[  487.485342][ T8297] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  489.390719][ T8318] 9pnet: Insufficient options for proto=fd
[  489.416862][ T8320] loop2: detected capacity change from 0 to 1024
[  489.746269][ T8322] hfsplus: trying to free free bnode 0(1)
[  490.509737][ T8326] futex_wake_op: syz.0.1180 tries to shift op by 144; fix this program
[  491.198166][ T4294] hfsplus: b-tree write err: -5, ino 25
[  491.204312][ T4294] hfsplus: b-tree write err: -5, ino 4
[  491.239381][ T4294] hfsplus: b-tree write err: -5, ino 2
[  492.593792][ T8365] device bridge7 entered promiscuous mode
[  493.985270][ T8381] loop2: detected capacity change from 0 to 764
[  494.150639][ T8381] Symlink component flag not implemented
[  494.156572][ T8381] Symlink component flag not implemented
[  495.789643][ T8395] loop2: detected capacity change from 0 to 4096
[  495.882914][ T8395] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  498.578984][ T8438] loop5: detected capacity change from 0 to 4096
[  498.648727][ T8438] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  500.176359][ T8461] loop2: detected capacity change from 0 to 1024
[  500.274915][ T8461] EXT4-fs (loop2): Ignoring removed bh option
[  500.530933][ T8461] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,sb=0x0000000000000040,. Quota mode: none.
[  500.701217][ T4198] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2807: Unable to expand inode 12. Delete some EAs or run e2fsck.
[  501.170210][ T8479] device bridge4 entered promiscuous mode
[  501.706934][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  501.713619][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  503.250348][ T8490] futex_wake_op: syz.5.1231 tries to shift op by 144; fix this program
[  503.768008][ T8505] loop5: detected capacity change from 0 to 8192
[  505.166849][ T8523] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1242'.
[  505.371477][ T8525] futex_wake_op: syz.5.1243 tries to shift op by 144; fix this program
[  506.269650][ T8541] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1248'.
[  508.141381][ T8562] futex_wake_op: syz.4.1255 tries to shift op by 144; fix this program
[  508.774730][ T8569] device bridge3 entered promiscuous mode
[  509.201350][ T8572] loop2: detected capacity change from 0 to 128
[  510.196695][ T8587] loop2: detected capacity change from 0 to 128
[  510.273012][ T8585] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability
[  510.309689][ T8587] FAT-fs (loop2): Unrecognized mount option "18446744073709551615ÿÿÿ" or missing value
[  510.776945][ T8599] futex_wake_op: syz.4.1267 tries to shift op by 144; fix this program
[  511.684560][ T8610] loop2: detected capacity change from 0 to 128
[  512.778863][ T8624] xt_CT: You must specify a L4 protocol and not use inversions on it
[  513.917887][ T4191] Bluetooth: hci2: command 0x0406 tx timeout
[  516.270276][ T8639] xt_policy: neither incoming nor outgoing policy selected
[  516.278868][ T8639] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  516.391196][ T8644] loop5: detected capacity change from 0 to 128
[  516.424141][ T8644] FAT-fs (loop5): Unrecognized mount option "18446744073709551615ÿÿÿ" or missing value
[  517.213969][ T8651] device bridge8 entered promiscuous mode
[  518.543254][ T8662] xt_CT: You must specify a L4 protocol and not use inversions on it
[  523.265259][ T8691] loop2: detected capacity change from 0 to 128
[  523.278804][ T4231] Bluetooth: hci2: command 0x0405 tx timeout
[  523.372075][ T8691] FAT-fs (loop2): Unrecognized mount option "18446744073709551615ÿÿÿ" or missing value
[  530.391141][ T8743] loop5: detected capacity change from 0 to 128
[  530.491758][ T8743] FAT-fs (loop5): Unrecognized mount option "18446744073709551615ÿÿÿ" or missing value
[  532.082340][ T8760] loop5: detected capacity change from 0 to 512
[  532.220365][ T8760] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  532.445576][   T21] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  532.477161][ T8760] ext4 filesystem being mounted at /54/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  533.602110][ T8760] EXT4-fs error (device loop5): ext4_validate_inode_bitmap:106: comm syz.5.1316: Corrupt inode bitmap - block_group = 0, inode_bitmap = 20
[  533.677937][ T8770] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1318'.
[  533.728691][ T8760] EXT4-fs error (device loop5) in ext4_free_inode:362: Corrupt filesystem
[  533.732292][   T21] usb 3-1: config 160 has an invalid interface number: 200 but max is 0
[  533.766775][   T21] usb 3-1: config 160 has an invalid descriptor of length 0, skipping remainder of the config
[  533.944470][   T21] usb 3-1: config 160 has no interface number 0
[  533.991499][   T21] usb 3-1: config 160 interface 200 altsetting 1 endpoint 0x8 has an invalid bInterval 0, changing to 7
[  534.933785][   T21] usb 3-1: config 160 interface 200 altsetting 1 endpoint 0x8 has invalid wMaxPacketSize 0
[  534.943947][   T21] usb 3-1: config 160 interface 200 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  534.957732][   T21] usb 3-1: config 160 interface 200 has no altsetting 0
[  535.068619][   T21] usb 3-1: string descriptor 0 read error: -71
[  535.074949][   T21] usb 3-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b
[  535.122753][   T21] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  535.208641][   T21] usb 3-1: can't set config #160, error -71
[  535.218822][ T8786] loop2: detected capacity change from 0 to 512
[  535.935724][   T21] usb 3-1: USB disconnect, device number 10
[  536.454548][ T8786] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,errors=continue,,errors=continue. Quota mode: writeback.
[  536.540033][ T8786] ext4 filesystem being mounted at /226/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  536.757105][ T8786] EXT4-fs error (device loop2): ext4_get_first_dir_block:3597: inode #12: comm syz.2.1324: Directory hole found for htree leaf block 0
[  538.021779][ T8814] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1331'.
[  538.246741][ T8822] xt_CT: You must specify a L4 protocol and not use inversions on it
[  538.727183][ T8825] loop2: detected capacity change from 0 to 4096
[  538.953823][ T1111] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  538.970432][ T8825] EXT4-fs (loop2): Ignoring removed mblk_io_submit option
[  538.999947][ T1111] hid-generic 0000:0000:0000.0003: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  540.190361][ T8825] EXT4-fs (loop2): Test dummy encryption mode enabled
[  540.197206][ T8825] EXT4-fs (loop2): Ignoring removed orlov option
[  540.236129][ T8825] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpid,mblk_io_submit,minixdf,test_dummy_encryption,lazytime,nodelalloc,nodioread_nolock,orlov,,errors=continue. Quota mode: writeback.
[  540.365876][ T8829] fido_id[8829]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  544.418677][ T8862] loop5: detected capacity change from 0 to 8
[  544.757125][ T8867] device bridge6 entered promiscuous mode
[  544.959133][ T8862] squashfs: Unknown parameter 'ÿÿÿÿ'
[  550.633430][ T8891] xt_policy: neither incoming nor outgoing policy selected
[  550.642193][ T8891] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  553.095236][ T8915] loop5: detected capacity change from 0 to 128
[  553.174966][ T8920] loop2: detected capacity change from 0 to 128
[  554.219356][ T8915] FAT-fs (loop5): Unrecognized mount option "18446744073709551615ÿÿÿ" or missing value
[  554.239068][ T8920] EXT4-fs (loop2): Test dummy encryption mode enabled
[  554.342967][ T8920] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none.
[  554.474027][ T8920] ext4 filesystem being mounted at /232/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  554.505312][ T8939] overlayfs: failed to resolve './file2': -2
[  555.362503][ T8918] fscrypt (loop2): Missing crypto API support for AES-256-XTS (API name: "xts(aes)")
[  555.436143][ T8949] loop5: detected capacity change from 0 to 1024
[  556.668622][ T8961] loop2: detected capacity change from 0 to 128
[  558.685236][ T8966] xt_policy: neither incoming nor outgoing policy selected
[  558.693857][ T8966] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  560.196161][ T8988] overlayfs: failed to resolve './file2': -2
[  560.530856][ T8992] loop2: detected capacity change from 0 to 128
[  560.559545][ T8992] EXT4-fs (loop2): Test dummy encryption mode enabled
[  560.567205][ T4353] hfsplus: b-tree write err: -5, ino 25
[  560.576641][ T4353] hfsplus: b-tree write err: -5, ino 4
[  560.589267][ T4353] hfsplus: b-tree write err: -5, ino 2
[  560.612786][ T8992] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none.
[  560.638717][ T8992] ext4 filesystem being mounted at /237/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  560.878727][ T8992] fscrypt: AES-256-XTS using implementation "xts-aes-aesni"
[  562.908689][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  562.915012][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  565.379365][ T9035] overlayfs: failed to resolve './file2': -2
[  567.248787][ T9058] loop2: detected capacity change from 0 to 128
[  567.295074][ T9058] EXT4-fs (loop2): Test dummy encryption mode enabled
[  567.421047][ T9058] EXT4-fs (loop2): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none.
[  567.494881][ T9058] ext4 filesystem being mounted at /242/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  573.615067][ T9107] device bridge1 entered promiscuous mode
[  575.910700][ T9119] loop2: detected capacity change from 0 to 128
[  576.079462][ T9119] FAT-fs (loop2): Unrecognized mount option "18446744073709551615ÿÿÿ" or missing value
[  576.517655][ T9132] loop5: detected capacity change from 0 to 128
[  576.619481][ T9132] EXT4-fs (loop5): Test dummy encryption mode enabled
[  576.677415][ T9132] EXT4-fs (loop5): mounted filesystem without journal. Opts: test_dummy_encryption=v1,max_dir_size_kb=0x0000000000000002,,errors=continue. Quota mode: none.
[  576.728859][ T9132] ext4 filesystem being mounted at /67/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  578.709619][ T9153] xt_CT: You must specify a L4 protocol and not use inversions on it
[  578.721389][ T9157] loop5: detected capacity change from 0 to 128
[  582.649269][ T9172] loop5: detected capacity change from 0 to 128
[  582.673117][ T9172] FAT-fs (loop5): Unrecognized mount option "18446744073709551615ÿÿÿ" or missing value
[  586.110247][ T9191] xt_policy: neither incoming nor outgoing policy selected
[  586.119157][ T9191] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  587.324260][ T9201] device bridge5 entered promiscuous mode
[  587.692944][ T9202] loop5: detected capacity change from 0 to 128
[  590.188023][ T9216] loop5: detected capacity change from 0 to 1024
[  594.169473][ T4353] hfsplus: b-tree write err: -5, ino 25
[  594.177532][ T4353] hfsplus: b-tree write err: -5, ino 4
[  595.969593][ T9246] xt_policy: neither incoming nor outgoing policy selected
[  595.978358][ T9246] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  598.671028][ T4353] hfsplus: b-tree write err: -5, ino 2
[  599.425970][ T9282] loop5: detected capacity change from 0 to 128
[  600.710534][ T9282] FAT-fs (loop5): Unrecognized mount option "18446744073709551615ÿÿÿ" or missing value
[  602.744578][ T9304] xt_CT: You must specify a L4 protocol and not use inversions on it
[  603.257453][ T9314] loop5: detected capacity change from 0 to 1024
[  608.796229][ T4292] hfsplus: b-tree write err: -5, ino 25
[  608.809859][ T9354] xt_CT: You must specify a L4 protocol and not use inversions on it
[  608.883785][ T4292] hfsplus: b-tree write err: -5, ino 4
[  608.904929][ T4292] hfsplus: b-tree write err: -5, ino 2
[  609.187654][ T9358] loop5: detected capacity change from 0 to 128
[  609.257537][ T9358] FAT-fs (loop5): Unrecognized mount option "18446744073709551615ÿÿÿ" or missing value
[  614.518809][ T9403] xt_CT: You must specify a L4 protocol and not use inversions on it
[  617.299618][ T9434] device bridge2 entered promiscuous mode
[  624.618888][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  624.625224][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  624.680449][ T9512] loop5: detected capacity change from 0 to 16
[  624.806194][ T9512] erofs: (device loop5): erofs_read_inode: unsupported datalayout 6 of nid 36
[  626.116104][ T9519] loop5: detected capacity change from 0 to 1024
[  626.877656][ T9522] hfsplus: trying to free free bnode 0(1)
[  627.087529][ T4353] hfsplus: b-tree write err: -5, ino 25
[  627.332077][ T4353] hfsplus: b-tree write err: -5, ino 4
[  628.034909][ T4353] hfsplus: b-tree write err: -5, ino 2
[  630.291558][ T9547] device bridge6 entered promiscuous mode
[  630.458581][ T6462] usb 6-1: new low-speed USB device number 3 using dummy_hcd
[  631.398813][ T6462] usb 6-1: too many configurations: 255, using maximum allowed: 8
[  631.570330][ T6462] usb 6-1: unable to read config index 0 descriptor/start: -61
[  631.595504][ T6462] usb 6-1: can't read configurations, error -61
[  631.818779][ T6462] usb 6-1: new low-speed USB device number 4 using dummy_hcd
[  632.612629][ T9570] loop5: detected capacity change from 0 to 512
[  632.713191][ T9570] EXT4-fs error (device loop5): ext4_orphan_get:1406: inode #15: comm syz.5.1559: inode has both inline data and extents flags
[  632.788895][ T9570] EXT4-fs error (device loop5): ext4_orphan_get:1411: comm syz.5.1559: couldn't read orphan inode 15 (err -117)
[  632.902096][ T9570] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  633.092666][ T9576] device bridge7 entered promiscuous mode
[  641.297438][ T9663] loop5: detected capacity change from 0 to 128
[  641.370846][ T9663] FAT-fs (loop5): Unrecognized mount option "18446744073709551615ÿÿÿ" or missing value
[  644.735239][ T9703] loop5: detected capacity change from 0 to 128
[  644.764189][ T9703] FAT-fs (loop5): Unrecognized mount option "18446744073709551615ÿÿÿ" or missing value
[  645.826930][ T9707] futex_wake_op: syz.0.1603 tries to shift op by 144; fix this program
[  649.281189][ T9751] loop5: detected capacity change from 0 to 128
[  649.512488][ T9751] FAT-fs (loop5): Unrecognized mount option "18446744073709551615ÿÿÿ" or missing value
[  651.779272][ T9791] device bridge3 entered promiscuous mode
[  653.218272][ T9822] xt_CT: You must specify a L4 protocol and not use inversions on it
[  654.801590][ T9818] futex_wake_op: syz.2.1643 tries to shift op by 144; fix this program
[  657.066726][ T9865] xt_CT: You must specify a L4 protocol and not use inversions on it
[  660.804762][ T9903] loop5: detected capacity change from 0 to 1024
[  661.279007][ T9916] hfsplus: trying to free free bnode 0(1)
[  663.245747][ T4293] hfsplus: b-tree write err: -5, ino 25
[  663.287982][ T4293] hfsplus: b-tree write err: -5, ino 4
[  663.347953][ T4293] hfsplus: b-tree write err: -5, ino 2
[  666.137409][ T9948] futex_wake_op: syz.5.1683 tries to shift op by 144; fix this program
[  666.218228][ T9966] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1697'.
[  669.878572][ T4234] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  670.298658][ T4234] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  670.320108][ T4234] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  670.348749][ T4234] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[  670.394145][ T4234] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  670.434358][ T4234] usb 6-1: config 0 descriptor??
[  671.500440][ T4234] cm6533_jd 0003:0D8C:0022.0004: unknown main item tag 0x0
[  671.507948][ T4234] cm6533_jd 0003:0D8C:0022.0004: unknown main item tag 0x0
[  671.554199][ T4234] cm6533_jd 0003:0D8C:0022.0004: unknown main item tag 0x0
[  671.566546][ T4234] cm6533_jd 0003:0D8C:0022.0004: unknown main item tag 0x0
[  671.590673][ T4234] cm6533_jd 0003:0D8C:0022.0004: unknown main item tag 0x0
[  671.617760][ T4234] cm6533_jd 0003:0D8C:0022.0004: No inputs registered, leaving
[  671.756511][ T4234] cm6533_jd 0003:0D8C:0022.0004: hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.5-1/input0
[  671.858690][ T4234] usb 6-1: USB disconnect, device number 5
[  671.939063][T10031] fido_id[10031]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory
[  673.628610][ T1325] usb 6-1: new low-speed USB device number 6 using dummy_hcd
[  674.858759][ T1325] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  674.868740][ T1325] usb 6-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  674.918483][ T1325] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  674.948028][ T1325] usb 6-1: config 0 descriptor??
[  676.153447][T10059] xt_policy: neither incoming nor outgoing policy selected
[  676.162016][T10059] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  676.808672][ T4177] usb 6-1: USB disconnect, device number 6
[  676.876908][T10069] loop5: detected capacity change from 0 to 128
[  678.187309][T10082] loop5: detected capacity change from 0 to 512
[  679.151715][T10082] EXT4-fs error (device loop5): ext4_orphan_get:1406: inode #15: comm syz.5.1738: inode has both inline data and extents flags
[  679.278780][T10082] EXT4-fs error (device loop5): ext4_orphan_get:1411: comm syz.5.1738: couldn't read orphan inode 15 (err -117)
[  679.329137][T10082] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  680.560447][T10100] xt_policy: neither incoming nor outgoing policy selected
[  680.569034][T10100] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  681.253027][T10123] loop5: detected capacity change from 0 to 512
[  681.616548][T10123] EXT4-fs error (device loop5): ext4_orphan_get:1406: inode #15: comm syz.5.1754: inode has both inline data and extents flags
[  681.634811][T10123] EXT4-fs error (device loop5): ext4_orphan_get:1411: comm syz.5.1754: couldn't read orphan inode 15 (err -117)
[  681.655922][T10123] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  682.636859][T10137] xt_policy: neither incoming nor outgoing policy selected
[  682.656118][T10137] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  685.739024][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  685.745396][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  686.897975][T10189] device bridge7 entered promiscuous mode
[  689.261736][T10167] xt_policy: neither incoming nor outgoing policy selected
[  689.270390][T10167] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  691.232560][T10229] overlayfs: missing 'workdir'
[  694.885338][T10254] overlayfs: failed to clone upperpath
[  701.176671][T10310] xt_policy: neither incoming nor outgoing policy selected
[  701.192804][T10310] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  703.257930][T10321] overlayfs: failed to clone upperpath
[  705.167038][T10350] xt_policy: neither incoming nor outgoing policy selected
[  705.184844][T10350] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  713.056315][   T26] audit: type=1326 audit(2000000216.270:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10416 comm="syz.1.1850" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f514267fdd9 code=0x7ffc0000
[  713.505603][   T26] audit: type=1326 audit(2000000216.280:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10416 comm="syz.1.1850" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f514267fdd9 code=0x7ffc0000
[  715.557892][T10442] netlink: 'syz.4.1870': attribute type 2 has an invalid length.
[  715.579188][T10442] netlink: 'syz.4.1870': attribute type 1 has an invalid length.
[  720.275233][T10471] xt_CT: You must specify a L4 protocol and not use inversions on it
[  724.548753][T10511] xt_CT: You must specify a L4 protocol and not use inversions on it
[  728.724357][T10540] xt_policy: neither incoming nor outgoing policy selected
[  729.368085][T10540] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  730.790257][T10549] xt_CT: You must specify a L4 protocol and not use inversions on it
[  731.184698][T10558] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability
[  733.645707][T10586] xt_CT: You must specify a L4 protocol and not use inversions on it
[  748.058999][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  748.065365][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  748.568483][T10687] netlink: 'syz.1.1954': attribute type 5 has an invalid length.
[  765.509730][T10814] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1991'.
[  775.848960][T10887] netlink: 136 bytes leftover after parsing attributes in process `syz.0.2018'.
[  776.298614][T10882] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  778.880681][ T4231] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0
[  778.931523][ T4231] Bluetooth: hci4: Injecting HCI hardware error event
[  778.949853][ T4200] Bluetooth: hci4: hardware error 0x00
[  781.374677][T10930] fuse: Bad value for 'fd'
[  785.060629][T10971] netlink: 71 bytes leftover after parsing attributes in process `syz.4.2048'.
[  788.353706][T11018] netlink: 71 bytes leftover after parsing attributes in process `syz.2.2066'.
[  790.850901][ T4200] Bluetooth: Wrong link type (-22)
[  791.155535][T11059] netlink: 71 bytes leftover after parsing attributes in process `syz.1.2083'.
[  793.798709][T11118] netlink: 80 bytes leftover after parsing attributes in process `syz.0.2107'.
[  800.289277][T11174] xt_CT: You must specify a L4 protocol and not use inversions on it
[  802.789356][T11207] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2131'.
[  803.074278][T11223] netlink: 71 bytes leftover after parsing attributes in process `syz.1.2144'.
[  805.358227][   T26] audit: type=1326 audit(2000000309.826:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11247 comm="syz.4.2154" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe6f69ddd9 code=0x7ffc0000
[  806.426950][T11260] netlink: 71 bytes leftover after parsing attributes in process `syz.2.2161'.
[  806.903038][T11272] netlink: 'syz.1.2156': attribute type 1 has an invalid length.
[  807.199581][T11282] xt_CT: You must specify a L4 protocol and not use inversions on it
[  808.122477][T11288] futex_wake_op: syz.1.2171 tries to shift op by 144; fix this program
[  808.580505][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  808.591594][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  810.892377][T11319] netlink: 71 bytes leftover after parsing attributes in process `syz.5.2178'.
[  812.780838][T11337] futex_wake_op: syz.2.2184 tries to shift op by 144; fix this program
[  813.306666][T11364] netlink: 71 bytes leftover after parsing attributes in process `syz.5.2196'.
[  814.287683][T11394] futex_wake_op: syz.1.2209 tries to shift op by 144; fix this program
[  814.363654][   T26] audit: type=1326 audit(2000000318.836:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11396 comm="syz.0.2210" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4834eddd9 code=0x7ffc0000
[  814.394479][   T26] audit: type=1326 audit(2000000318.836:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11396 comm="syz.0.2210" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4834eddd9 code=0x7ffc0000
[  814.424636][   T26] audit: type=1326 audit(2000000318.836:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11396 comm="syz.0.2210" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fd4834eddd9 code=0x7ffc0000
[  814.454982][   T26] audit: type=1326 audit(2000000318.836:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11396 comm="syz.0.2210" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4834eddd9 code=0x7ffc0000
[  817.239705][T11438] futex_wake_op: syz.0.2228 tries to shift op by 144; fix this program
[  819.765024][T11489] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2247'.
[  821.792791][T11504] xt_CT: You must specify a L4 protocol and not use inversions on it
[  829.761848][T11603] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2288'.
[  834.181575][T11654] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  835.226394][T11667] xt_CT: You must specify a L4 protocol and not use inversions on it
[  845.975477][T11780] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2341'.
[  862.853433][T11953] ODEBUG: Out of memory. ODEBUG disabled
[  870.896484][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  870.902824][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  871.254948][T12022] netlink: 'syz.2.2452': attribute type 3 has an invalid length.
[  872.279350][T12033] 9pnet_virtio: no channels available for device syz
[  874.434356][T12040] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2456'.
[  874.802427][ T4200] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201'
[  874.812055][ T4200] CPU: 1 PID: 4200 Comm: kworker/u5:5 Not tainted syzkaller #0
[  874.819638][ T4200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  874.829735][ T4200] Workqueue: hci0 hci_rx_work
[  874.834467][ T4200] Call Trace:
[  874.837770][ T4200]  <TASK>
[  874.837790][T12045] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  874.840724][ T4200]  dump_stack_lvl+0x188/0x250
[  874.852791][ T4200]  ? show_regs_print_info+0x20/0x20
[  874.857993][ T4200]  ? load_image+0x400/0x400
[  874.862518][ T4200]  sysfs_create_dir_ns+0x26a/0x290
[  874.867645][ T4200]  ? sysfs_warn_dup+0xa0/0xa0
[  874.872348][ T4200]  ? process_one_work+0x85f/0x1010
[  874.877482][ T4200]  ? do_raw_spin_unlock+0x11d/0x230
[  874.882687][ T4200]  kobject_add_internal+0x6e0/0xd90
[  874.887893][ T4200]  kobject_add+0x160/0x230
[  874.892313][ T4200]  ? kobject_init+0x1d0/0x1d0
[  874.896997][ T4200]  ? klist_children_get+0x50/0x50
[  874.902025][ T4200]  ? get_device_parent+0x121/0x3f0
[  874.907152][ T4200]  device_add+0x483/0xfb0
[  874.911494][ T4200]  hci_conn_add_sysfs+0xd1/0x1e0
[  874.916450][ T4200]  le_conn_complete_evt+0xc48/0x15c0
[  874.921767][ T4200]  ? cs_le_create_conn+0x5e0/0x5e0
[  874.926889][ T4200]  ? __mutex_trylock_common+0x155/0x260
[  874.932444][ T4200]  hci_le_meta_evt+0xd59/0x3c90
[  874.937325][ T4200]  ? hci_event_packet+0x37b/0x1370
[  874.942462][ T4200]  ? __lock_acquire+0x7d10/0x7d10
[  874.947524][ T4200]  ? hci_remote_host_features_evt+0x280/0x280
[  874.953624][ T4200]  ? __mutex_unlock_slowpath+0x1b0/0x6c0
[  874.959294][ T4200]  ? mark_lock+0x94/0x320
[  874.963636][ T4200]  ? mutex_unlock+0x10/0x10
[  874.968173][ T4200]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  874.974167][ T4200]  ? lock_chain_count+0x20/0x20
[  874.979032][ T4200]  ? __rwlock_init+0x140/0x140
[  874.983801][ T4200]  hci_event_packet+0xe48/0x1370
[  874.988744][ T4200]  ? lockdep_hardirqs_on+0x94/0x140
[  874.993952][ T4200]  ? rcu_lock_release+0x20/0x20
[  874.998818][ T4200]  ? hci_send_to_monitor+0x9c/0x4a0
[  875.004042][ T4200]  hci_rx_work+0x255/0xa10
[  875.008480][ T4200]  process_one_work+0x85f/0x1010
[  875.013447][ T4200]  ? worker_detach_from_pool+0x240/0x240
[  875.019089][ T4200]  ? lockdep_hardirqs_off+0x70/0x100
[  875.024405][ T4200]  ? _raw_spin_lock_irq+0xb7/0xf0
[  875.029523][ T4200]  ? _raw_spin_lock_irqsave+0x100/0x100
[  875.035092][ T4200]  ? wq_worker_running+0x97/0x170
[  875.040121][ T4200]  worker_thread+0xaa6/0x1290
[  875.044819][ T4200]  ? lockdep_hardirqs_on+0x94/0x140
[  875.050023][ T4200]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  875.056055][ T4200]  kthread+0x436/0x520
[  875.060151][ T4200]  ? rcu_lock_release+0x20/0x20
[  875.065011][ T4200]  ? kthread_blkcg+0xd0/0xd0
[  875.069607][ T4200]  ret_from_fork+0x1f/0x30
[  875.074040][ T4200]  </TASK>
[  875.078184][ T4200] kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  875.091968][ T4200] Bluetooth: hci0: failed to register connection device
[  876.072554][T12052] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  876.114468][T12052] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  877.866540][T12077] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2467'.
[  880.808089][T12103] netlink: 87 bytes leftover after parsing attributes in process `syz.2.2475'.
[  881.643773][T12116] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2480'.
[  882.632279][T12121] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  882.632288][T12120] xt_policy: neither incoming nor outgoing policy selected
[  884.558617][T12139] netlink: 87 bytes leftover after parsing attributes in process `syz.4.2490'.
[  884.617996][T12141] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2491'.
[  886.931273][T12151] xt_policy: neither incoming nor outgoing policy selected
[  886.939818][T12151] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  887.842193][T12168] ------------[ cut here ]------------
[  887.862974][T12168] WARNING: CPU: 0 PID: 12168 at include/linux/fs.h:532 hugetlb_split+0x237/0x2a0
[  887.910805][T12168] Modules linked in:
[  887.917175][T12168] CPU: 0 PID: 12168 Comm: syz.4.2499 Not tainted syzkaller #0
[  887.946451][T12168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  887.996394][T12168] RIP: 0010:hugetlb_split+0x237/0x2a0
[  888.016942][T12168] Code: bf ff 4c 89 f7 48 89 de 4c 89 fa 31 c9 5b 41 5c 41 5d 41 5e 41 5f 5d eb 7a e8 95 a8 bf ff 0f 0b e9 62 fe ff ff e8 89 a8 bf ff <0f> 0b e9 2d ff ff ff 48 c7 c1 c4 23 8a 8d 80 e1 07 80 c1 03 38 c1
[  888.102500][T12168] RSP: 0018:ffffc90002e9fac8 EFLAGS: 00010283
[  888.129247][T12168] RAX: ffffffff81b98c07 RBX: 0000200000000000 RCX: 0000000000080000
[  888.164612][T12168] RDX: ffffc90005a2a000 RSI: 0000000000000679 RDI: 000000000000067a
[  888.176417][ T4353] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  888.204967][T12168] RBP: 0000000000000000 R08: ffff88807f58bfbf R09: 1ffff1100feb17f7
[  888.238381][T12168] R10: dffffc0000000000 R11: ffffed100feb17f8 R12: ffff88807eb088e0
[  888.274023][T12168] R13: dffffc0000000000 R14: ffff88807eb08840 R15: ffff888077c826c0
[  888.300251][T12168] FS:  00007fbe6d8f76c0(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000
[  888.329767][T12168] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  888.352336][T12168] CR2: 00005555855e64e8 CR3: 0000000069071000 CR4: 00000000003506f0
[  888.378583][T12168] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  888.409223][T12168] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  888.425443][T12168] Call Trace:
[  888.430010][T12168]  <TASK>
[  888.443546][T12168]  __vma_adjust+0x2b6/0x1c10
[  888.469732][T12168]  ? up_write+0x1bb/0x420
[  888.499831][T12168]  __split_vma+0x34b/0x410
[  888.529998][T12168]  __do_munmap+0x383/0xdf0
[  888.559462][T12168]  mremap_to+0x363/0x6b0
[  888.584320][T12168]  __se_sys_mremap+0x412/0x980
[  888.618809][T12168]  ? __x64_sys_mremap+0xc0/0xc0
[  888.635216][T12168]  ? lock_chain_count+0x20/0x20
[  888.640266][T12168]  ? lockdep_hardirqs_on+0x94/0x140
[  888.665172][T12168]  ? __x64_sys_mremap+0x1c/0xc0
[  888.680352][T12168]  do_syscall_64+0x4c/0xa0
[  888.684846][T12168]  ? clear_bhb_loop+0x30/0x80
[  888.720901][T12168]  ? clear_bhb_loop+0x30/0x80
[  888.745116][T12168]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  888.751299][T12168] RIP: 0033:0x7fbe6f69ddd9
[  888.766352][T12168] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  888.829572][T12168] RSP: 002b:00007fbe6d8f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019
[  888.863685][T12168] RAX: ffffffffffffffda RBX: 00007fbe6f916fa0 RCX: 00007fbe6f69ddd9
[  888.893761][T12168] RDX: 0000000000600000 RSI: 0000000000a00000 RDI: 0000200000000000
[  888.929358][T12168] RBP: 00007fbe6f733d69 R08: 0000200000a00000 R09: 0000000000000000
[  888.960699][T12168] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000
[  888.989477][T12168] R13: 00007fbe6f917038 R14: 00007fbe6f916fa0 R15: 00007fff3c118d58
[  889.018889][T12168]  </TASK>
[  889.030070][T12168] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  889.037403][T12168] CPU: 0 PID: 12168 Comm: syz.4.2499 Not tainted syzkaller #0
[  889.044896][T12168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  889.054986][T12168] Call Trace:
[  889.058293][T12168]  <TASK>
[  889.061339][T12168]  dump_stack_lvl+0x188/0x250
[  889.066091][T12168]  ? show_regs_print_info+0x20/0x20
[  889.071327][T12168]  ? load_image+0x400/0x400
[  889.075873][T12168]  panic+0x2e5/0x810
[  889.079818][T12168]  ? bpf_jit_dump+0xd0/0xd0
[  889.084362][T12168]  ? hugetlb_split+0x237/0x2a0
[  889.089154][T12168]  __warn+0x248/0x2b0
[  889.093169][T12168]  ? hugetlb_split+0x237/0x2a0
[  889.097969][T12168]  report_bug+0x1b7/0x2e0
[  889.102367][T12168]  handle_bug+0x3a/0x70
[  889.106554][T12168]  exc_invalid_op+0x16/0x40
[  889.111093][T12168]  asm_exc_invalid_op+0x16/0x20
[  889.115984][T12168] RIP: 0010:hugetlb_split+0x237/0x2a0
[  889.121507][T12168] Code: bf ff 4c 89 f7 48 89 de 4c 89 fa 31 c9 5b 41 5c 41 5d 41 5e 41 5f 5d eb 7a e8 95 a8 bf ff 0f 0b e9 62 fe ff ff e8 89 a8 bf ff <0f> 0b e9 2d ff ff ff 48 c7 c1 c4 23 8a 8d 80 e1 07 80 c1 03 38 c1
[  889.141187][T12168] RSP: 0018:ffffc90002e9fac8 EFLAGS: 00010283
[  889.147297][T12168] RAX: ffffffff81b98c07 RBX: 0000200000000000 RCX: 0000000000080000
[  889.155302][T12168] RDX: ffffc90005a2a000 RSI: 0000000000000679 RDI: 000000000000067a
[  889.163308][T12168] RBP: 0000000000000000 R08: ffff88807f58bfbf R09: 1ffff1100feb17f7
[  889.171325][T12168] R10: dffffc0000000000 R11: ffffed100feb17f8 R12: ffff88807eb088e0
[  889.179339][T12168] R13: dffffc0000000000 R14: ffff88807eb08840 R15: ffff888077c826c0
[  889.187451][T12168]  ? hugetlb_split+0x237/0x2a0
[  889.192267][T12168]  ? hugetlb_split+0x237/0x2a0
[  889.197085][T12168]  __vma_adjust+0x2b6/0x1c10
[  889.201726][T12168]  ? up_write+0x1bb/0x420
[  889.206103][T12168]  __split_vma+0x34b/0x410
[  889.210553][T12168]  __do_munmap+0x383/0xdf0
[  889.215017][T12168]  mremap_to+0x363/0x6b0
[  889.219320][T12168]  __se_sys_mremap+0x412/0x980
[  889.224237][T12168]  ? __x64_sys_mremap+0xc0/0xc0
[  889.229125][T12168]  ? lock_chain_count+0x20/0x20
[  889.234030][T12168]  ? lockdep_hardirqs_on+0x94/0x140
[  889.239263][T12168]  ? __x64_sys_mremap+0x1c/0xc0
[  889.244193][T12168]  do_syscall_64+0x4c/0xa0
[  889.248634][T12168]  ? clear_bhb_loop+0x30/0x80
[  889.253348][T12168]  ? clear_bhb_loop+0x30/0x80
[  889.258054][T12168]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  889.263978][T12168] RIP: 0033:0x7fbe6f69ddd9
[  889.268429][T12168] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  889.288072][T12168] RSP: 002b:00007fbe6d8f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019
[  889.296652][T12168] RAX: ffffffffffffffda RBX: 00007fbe6f916fa0 RCX: 00007fbe6f69ddd9
[  889.304652][T12168] RDX: 0000000000600000 RSI: 0000000000a00000 RDI: 0000200000000000
[  889.312655][T12168] RBP: 00007fbe6f733d69 R08: 0000200000a00000 R09: 0000000000000000
[  889.320655][T12168] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000
[  889.328664][T12168] R13: 00007fbe6f917038 R14: 00007fbe6f916fa0 R15: 00007fff3c118d58
[  889.336688][T12168]  </TASK>
[  889.340117][T12168] Kernel Offset: disabled
[  889.344783][T12168] Rebooting in 86400 seconds..