last executing test programs:

4.604192799s ago: executing program 0 (id=1):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x24)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
r4 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000000)={0x0, 0x4, 0x40000060, 0x100007f, 0x17, "9f940b3491d052d172e0e573229ac6de50806c"})
mount$9p_fd(0x0, &(0x7f0000000280)='./cgroup\x00', &(0x7f0000000340), 0x8401, &(0x7f0000000040)=ANY=[@ANYBLOB="d0e966921c0f85372c7266646e6f3d", @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r4, @ANYBLOB=',\x00'])
recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
syz_mount_image$minix(&(0x7f0000000180), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="000704a012704c6f011367acc6ae8fb462852ab71c7c6f55b1b4a47a69445efcc2e32c4d490fec2c09f2a282f690ad436cb19f682e0c5057a8335d1c7b4f56aff9319a78ec3079531468811b33b5d83aa6b2fb3e91d9c8446fa08b4e3b086fb3e4699b52c12cb5346981b1411dbe467f7613e498d4858ad51883225a1fc73ed7219ec2d34c4a94b4b673866ad068b3fce87bd0504e4c6b10c84bc9520eba51484a2e3bc36d461d72"], 0x1, 0x166, &(0x7f0000000480)="$eJzs281KOmEUx/Hf+Pr/2/vbplVQUJucNGhql5ciOpk0lmQbJYgupSvrBhTqBppglKkZgiZDH9LvB2TOEQ7nPItHjwsFYG6tSrJkKSvJ9/2Hyz1LO6aHAjAVvt58APMq/WJ6AgBmDCrpYA9oS3p+va/1R69swv1hUEkFz3NJ/U/1uaT1j1bw3M5E6/OS/iXZX56G9fux/v9/2L8Qqy8krh+e/2A3Wr8gaVHSkqRlSSuj31prkta/6F+P9d9K2B/4DUvFeB55I6WLpucehXk2yEthngvyciw/DvN8kBdrN159UkcAMKbUN/c/Hbv/mdj9B/B3dbq9q6rnubcEBAQEYWD6kwnApNl3rbbd6fYOm61qw22412XnzHFKp6UTxw42fzu6/wOYHR9f+qYnAQAAAAAAAAAAAAAA49qQtGl6CAAAAABTMY2/E5k+IwAAAAAAAAAAAAAAAAAAADAr3gMAAP//s9VQng==")
r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x133042, 0x19)
renameat2(0xffffffffffffff9c, &(0x7f0000000580)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file7\x00', 0x0)
r6 = socket$inet(0x2, 0x2, 0x1)
shutdown(r6, 0x0)
recvmmsg(r6, &(0x7f00000066c0), 0xa0d, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@volatile}]})
write$FUSE_LSEEK(r0, &(0x7f00000001c0)={0x18, 0x0, 0x0, {0xfee8}}, 0x18)
openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file0/file1\x00', 0x1e1902, 0x5e)
r7 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r7, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0xdfffffff, 0x800, 0x0, 0x1}, 0x20)
socket$inet6_udplite(0xa, 0x2, 0x88)
sendmsg$AUDIT_MAKE_EQUIV(r5, &(0x7f0000000400)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0xfffffffffffffe61, 0x3f7, 0x200, 0x70bd2c, 0x25dbdbfe, {0x5, 0x7, './bus', './bus'}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20040000}, 0x40041)

3.290403025s ago: executing program 2 (id=3):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x3, @loopback, 0x6}, 0x1c)
r1 = syz_open_procfs(0x0, &(0x7f0000000140)='net/tcp6\x00')
socket$netlink(0x10, 0x3, 0xc)
landlock_create_ruleset(0x0, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
read$hiddev(r1, &(0x7f0000000780)=""/93, 0x5d)
read$FUSE(r1, &(0x7f0000002580)={0x2020}, 0x2020)

3.251123107s ago: executing program 0 (id=6):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000200000109022400010000000009040000010300000009210000000122050009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000400)={0x24, 0x0, &(0x7f00000002c0)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x12, @string={0x12, 0x3, "e8d0e22e124c6e526de1833dc38e155b"}}, 0x0, 0x0, 0x0}, 0x0)

3.179127534s ago: executing program 4 (id=5):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x10f, 0x4})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0})
dup3(r1, r0, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x10000000000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x70, 0xf90, &(0x7f0000000800)={@ptr={0x66642a85, 0x0, 0x0, 0x0, 0x2, 0x400000000024}, @ptr={0x70742a85, 0x20000000, &(0x7f0000000400)=""/223, 0xdf, 0x2}, @fda={0x66646185, 0x9, 0x1, 0x10}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0})

3.151543009s ago: executing program 2 (id=7):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf)
ioctl$TCFLSH(r0, 0x400455c8, 0x0)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
syz_usb_connect(0x5, 0x0, 0x0, 0x0)
ioctl$sock_bt_hci(r1, 0x400448e1, &(0x7f00000023c0))

3.135371434s ago: executing program 4 (id=8):
r0 = socket$xdp(0x2c, 0x3, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x1, 0x10)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}})
read$FUSE(r1, &(0x7f00000062c0)={0x2020, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x29, 0x0, 0x300d2140, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x50)
close(0x3)
syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000785700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b6295202f2133be30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000587c961a83a273710000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000eeffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000140000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000190000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010800", 0x2000, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x0, 0x4, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x0)
mmap$xdp(&(0x7f00009b7000/0x2000)=nil, 0x2000, 0x2, 0x12, r0, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x5, 0x3032, 0xffffffffffffffff, 0x0)

3.047372797s ago: executing program 3 (id=9):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000200)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8)
connect$inet6(r0, &(0x7f00000003c0)={0xa, 0xfffe, 0x3080000, @mcast2, 0x6}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10)
write(r0, &(0x7f00000000c0)="8f2a0a65bd8c3a2b0304000e0580a7b6070d63e286a5cefe", 0x5ac)

3.01689828s ago: executing program 3 (id=10):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000011c0)=ANY=[@ANYBLOB="12010001090003206d0414c340000000000109022400010000a0000904000001030101000921000800012203000905", @ANYRES64], 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000001180)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x1e0, 0x20}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)

2.283951776s ago: executing program 3 (id=12):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
syz_mount_image$ext4(&(0x7f0000000180)='ext2\x00', &(0x7f0000000000)='./bus\x00', 0x200400, &(0x7f0000000140)={[{@dioread_nolock}, {@jqfmt_vfsv0}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$eJzs3c9vG1kdAPCvnThx0uwmu+wBEOyW3YWCqjqJuxut9gDLCSFUCdEjSG1I3CiKHUexU5rQQ3rmikQlTnDkD+DcE3cuCG5cygGJHxGoQeLg1YwnqZvaTdQkdhR/PtJo3ps39fe9pvNe/U3iF8DQuhoRuxExFhF3I2I6u57LjvisfST3Pdt7uLS/93ApF63W7X/l0vbkWnT8mcSV7DWLEfGj70X8NPdy3Mb2ztpitVrZzOqzzdrGbGN758ZqbXGlslJZL5cX5hfmPrn5cfnMxvpebSwrffXpH3e/9fOkW1PZlc5xnKX20AuHcRKjEfGD8wg2ACPZeMYG3RFeSz4i3o6I99PnfzpG0q8mAHCZtVrT0ZrurAMAl10+zYHl8qUsFzAV+Xyp1M7hvROT+Wq90bx+r761vtzOlc1EIX9vtVqZy3KFM1HIJfX5tPy8Xj5SvxkRb0XEL8cn0nppqV5dHuR/fABgiF05sv7/d7y9/gMAl1xx0B0AAPrO+g8Aw8f6DwDDx/oPAMOnvf5PDLobAEAfef8PAMPH+g8AQ+WHt24lR2s/+/zr5fvbW2v1+zeWK421Um1rqbRU39wordTrK+ln9tSOe71qvb4x/1FsPZj59kajOdvY3rlTq2+tN++kn+t9p1JI79rtw8gAgF7eeu/JX3LJivzpRHpEx14OhYH2DDhv+UF3ABiYkUF3ABgYu33B8DrFe3zpAbgkumzR+4Jit18QarVarfPrEnDOrn1J/h+GVUf+308Bw5CR/4fhJf8Pw6vVyp10z/846Y0AwMUmxw/0+P7/29n5d9k3B36yfPSOx+fZKwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYDvb/LWV7gU9FPl8qRbwRETNRyN1brVbmIuLNiPjzeGE8qc8PuM8AwGnl/57L9v+6Nv3h1AtN7145LI5FxM9+fftXDxabzc0/RYzl/j1+cL35OLte7n/vAYDjHazT6bnjjfyzvYdLB0c/+/OP70ZEsR1/f28s9g/jj8Zoei5GISIm/5PL6m25jtzFaew+iogvdht/LqbSHEh759Oj8ZPYb/Q1fv6F+Pm0rX1O/i6+cAZ9gWHzJJl/Puv2/OXjanru/vwX0xnq9LL5L3mppf10Dnwe/2D+G+kx/109aYyP/vD9dmni5bZHEV8ejTiIvd8x/xzEz/WI/+EJ4//1K+++36ut9ZuIa9E9fmes2WZtY7axvXNjtba4UlmprJfLC/MLc5/c/Lg8m+aoZ3uvBv/89PqbvdqS8U/2iF88ZvxfP+H4f/v/uz/+2ivif/ODbvHz8c4r4idr4jdOGH9x8vfFXm1J/OUe4z/u63/9hPGf/m3npW3DAYDBaWzvrC1Wq5VNBYWLX0j+yV6AbnQtfKdfscaie9MvPmg/00eaWq3XitVrxjiLrBtwERw+9BHxv0F3BgAAAAAAAAAAAAAA6Kofv7E06DECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABweX0eAAD//19xzyM=")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={0x0, 0x0, 0x4a}, 0x28)
read$FUSE(0xffffffffffffffff, &(0x7f0000000980)={0x2020}, 0x2020)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c000280080001400000000014000180090001006c61737400000000040002800800034000000105"], 0xe4}}, 0x20050800)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xb, &(0x7f0000000040)=ANY=[], 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000327bd7000fedbdf251300000008000100706369303a30303a31302e3000000000080003000000000008000b00d00900000600110007000000080001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x48050)
r7 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r8=>0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r8, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4)
r9 = socket(0x10, 0x3, 0x0)
sendmmsg(r9, &(0x7f0000000000), 0x4000000000001f2, 0x0)
quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000100)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000280)={0x1, 0x4, 0x800077, 0x20800000000412, 0x1, 0x3e, 0x1000, 0x8, 0xfffffffc})
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000580)=@newtaction={0x18, 0x12, 0xbf68af9d17701211, 0x0, 0x0, {0x7}, [{0x4}]}, 0x18}}, 0x0)
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x38, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x38}}, 0x0)

1.403313369s ago: executing program 3 (id=14):
read$FUSE(0xffffffffffffffff, &(0x7f00000023c0)={0x2020, 0x0, 0x0, <r0=>0x0, <r1=>0x0}, 0x2020)
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800002, &(0x7f0000000040)={[{@nls={'nls', 0x3d, 'cp866'}}, {@force}, {@nobarrier}, {@uid={'uid', 0x3d, r0}}, {@umask={'umask', 0x3d, 0xffffffff}}, {@gid={'gid', 0x3d, r1}}, {}, {@part={'part', 0x3d, 0x80}}, {@nodecompose}, {@force}]}, 0xff, 0x6c9, &(0x7f0000000180)="$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")
r2 = socket$kcm(0xa, 0x5, 0x0)
r3 = socket$kcm(0xa, 0x5, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)=ANY=[@ANYBLOB="9beb01031800000008000000000000000000000002"], 0x0, 0x1a}, 0x28)
ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x8916, &(0x7f0000000000)={r3})
r4 = socket$kcm(0xa, 0x5, 0x0)
ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x8916, &(0x7f0000000000)={r4})
ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x8936, &(0x7f0000000000)={r3})
unlinkat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0)

1.336631276s ago: executing program 3 (id=15):
r0 = syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000180)='./bus\x00', 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB="6e6f646973636172642c61636c2c616c6c6f635f6d6f64653d64656661756c74000063746976655f6c6f67733d362c696e6c696e655f78617474725f73697a653d3078607d0000000084fe463bf9a38bdcd1e0303030303030303030382c6661756c745f696e6a3030303030303030303030303032312c646973636172655f756e69743d626c6f636b2c6e6f61636c2c6e6f636865636b706f696e745f6d657267652c646973636172642c6e6f657874656e745f63616368652c6e6f666c7573685f6d657267652c6661756c745f747970653d30300030303030303030303030303030303030322c000000"], 0x1, 0x5505, &(0x7f0000002480)="$eJzs3E1rY9UbAPAn7XTe//Mv4sLdXBiEFiZh0nlBd6PO4At2KKMuXGmapCEzSW5p0rR25cKluPCbiIIrl34GF67diQvFnaDknlud+gJC08ZOfz+4ee45OXnuc8Iw8NxbEsCptZj9/GMlrsSFiJiPiMsRxXmlPAp3U3guIq5GxNwTR6Wc/33ibERcjIgrk+QpZ6V869Pr42u3f3jjp6++OXfm0mdffju7XQOz9nxE9DfT+U4/xbyT4qNyvjHuFrF/a1zG9Eb/cTnOU9xprxcZdhr76xpFvNlJ6/PN7eEkbvQazUnsdDeK+c1BuuBw3NnPU3zgUWOrGLfa60XsDvMidvZSXbt76f+2veEo5WmV+T4o0sdotB/TfHu3nfaz+biIzcGonE9581Z7dxLHZSwvF8281yrqWD/MN/3f9mZ3sL2bjdtbw24+yG7X6i/U6neq9a281R61b1Ub/dadW9lSpzdZVh21G/27nTzv9Nq1Zt5fzpY6zWa1Xs+W7rXXu41BVq/XbtZuVG8vl2fXs1cfvJP1WtnSJL7cHWyPur1htpFvZekTy9lK7eaLy9m1evbW6lq29vD+/dW1t9+79+6Dl1Zff6Vc9JeysqWVGysr1fqN6kp9+RTt/6Oy6CnuHw6lMusCAE4e/T8wC0fX/289jDj6/j/0/1Nxovrf097/H8H+4VD0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp9Z3C5+/VpwspvGlcv5/5dQz5bgSEXMR8evfmI+zB3LOl3kW/mH9wp9q+LoSRYbJNc6Vx8WIuFsev/z/qL8FAAAAeHp98eHVT1K3nl4WZ10QxyndtJm7/P6U8lUiYmHx+yllm5u8PDulZMW/7zOxO6VsxQ2s81NKlm65nZlWtn9l/kA4/0SopDB3rOUAAADH4mAncLxdCAAAAMfp41kXwGxUYv9R5v6z4OIv7/94IHjhwAgAAAA4gSqzLgAAAAA4ckX/7/f/AAAA4OmWfv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfmPnfm4TB6I4AD8bvLD/tGi1921lb1DGlrDHPUYUkCYoIAfSQhqgBnJLCRFEeBwCEYdIHttK9H2SMxnL/HiD4DAz0gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF26r9aL26vf121zdvt28owGAAAAuGRbrRf1P7PU/9rc/97c+tn0i4goI+LS3H0Un84yR01O9fL8zenz1asa7iLqhMN7TJrrS0T8aa7HH11/CgAAAPBxbZareZqtpz+zoQuiT2nRpvz2N1NeERHV7CFTWnnI+5UprP5+j+N/prR6AWuaKSwtuY1zpb1J/XM/rtpNT5oiNeXFlx2LzDZ2AACgR6Ozpt9ZCAAAAH36N3QBDKOI563M41bgJDXN9t7nsx4AAADwDhVDFwAAAAB0rp7/93T+3975fwAAADCMdP4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXdpW68VmuZq3zdnt28kzGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhif95RIATCIAz2ru9M5v6HlQZNTU2qQPj4G4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIv9eUmBEAiCKJgz/nfS9z+sJOgZRIiAhkcVtWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIud+3mNo4oDAP5mZmdrq+IaZQ8RUfCgF7vd1tbexIMSPPgnCCHd1titP9ocbCliLt4k515EjyKCEm/9H3JOIJd4y2EPETwrMzuTnfwA118zm+TzgTfvu8Mw7/tmIeQ77yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACURm9P4iQ7dMZxXJzb3Hu4lPVbh/rM47Xt+axlcVRn0ifDi9UPUbe5RAAAADg7krK+DyHspOsLWR938vo/La/Jav5vnx7HZT1/uO4v+7L2z9ovP+8+vz9QZzxOdtOby8PBpaOptP6/Wc62Z/7yilb+5PN3L0n+hcTvrT43SvPnGX29sfFOOw/P1ZEtAPBPXCz7Iih/H8r6fpOJAXBmtCqFd1n/J51mcwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACow2g1PFnGUQhhvjWJM1t7D5eO6x+vbc+X7dqjR2vhy8k9s1ukIYSby8PBpVpnM9vu3X9we3E4HNytP3gphNDU6G8V07/9wRQXh9DI8xH8R0FcfNmzks/JCBr8oQQAwKmUFi2r63fS9YXsXDQXwh/fHaz/X63EYcr6f/fDa5vVsar1f7+2Gc6+3sqdT3v37j94ffnO4q3BrcHHb1zuv9m/cv3q1eu9/F1JzxsTAAAA/p120ar1fzx3dP3/QiUOU9b/n33T/6I6VqL+P9Zk0a/pTAAAAM62Z1/+/bfomPNRux0+X1xZudsfH/c/Xx4fG0j1bztXtGr9n8w1nRUAAABQh9FqdGD9/0YlDlOu/z/1/Qs/Vu+ZhBDOF+v/F5c+Gd6obzozrY4/J256jgAAADTrfNGq6/9pvv8/3t/yEIcQXntlHBf/BnCq+j9596sfqmNV9/9fqW+KMynujp9H3ndDaHWbzggAAIDT7ImiZcX+r+n6wkc/XXi/bf8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQN3+DAAA//962D6S")
r1 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2001}, 0x0)
socket$packet(0x11, 0x2, 0x300)
r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r3, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0)
sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="4400000010001fff000000000100000000000000", @ANYRES32=0x0, @ANYBLOB="08400000000004001c0012800e00010069703665727370616e000000080002800400120008000a00", @ANYRES32=r4], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
r5 = syz_open_dev$sndctrl(&(0x7f0000001ac0), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0xc1105511, &(0x7f0000000040))
r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x8000)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r6, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x101, 0x4})
r7 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[<r8=>0x0], 0x0, 0x0, 0xfffffd52, 0x1})
ioctl$DRM_IOCTL_MODE_CURSOR(r6, 0xc01c64a3, &(0x7f0000000280)={0x3, r8, 0x1, 0xffff, 0xa, 0x1ff, 0x1})
ioctl$DRM_IOCTL_MODE_CURSOR2(r6, 0xc02464bb, &(0x7f0000000100)={0x3, r8, 0x1ff, 0x0, 0x4, 0x80000c, 0x0, 0x4, 0x4000})
r9 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f00000002c0), 0x80000, 0x0)
ioctl$TIOCVHANGUP(r9, 0x5437, 0x0)
r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r2, r4, 0x25, 0x1b, @void}, 0x10)
bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000280)={0x80000001}, 0x8)
r11 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/current\x00')
preadv(r11, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/44, 0x2c}], 0x1, 0x0, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)={@map=0x1, r10, 0x2e, 0x0, 0xffffffffffffffff, @void, @value=0x0}, 0x20)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x13, &(0x7f0000000140)=0x80000001, 0x4)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)=ANY=[], 0x20)
close_range(r0, r0, 0x0)

878.564888ms ago: executing program 3 (id=18):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0)
ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0x0, 0x4ce, 0x3, 0x9dff, 0xf, "000300eb00cbe600"})
write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0xfffffffe, 0x0, 0x5, 0x0, "f7ffffff00"})
r1 = syz_open_pts(r0, 0x0)
r2 = dup3(r1, r0, 0x0)
ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x2)

489.038656ms ago: executing program 0 (id=20):
r0 = syz_usb_connect$uac1(0x2, 0xa5, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902930003010000000904000000010100000a240100000002010213240600000600000000000000dfff000000000924030000000000000924050000f8431cfd09240300000300040206240504"], 0x0)
syz_usb_control_io(r0, &(0x7f00000009c0)={0x2c, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x816}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$uac1(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4}}}, 0x0)
syz_usb_control_io$uac1(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000340)={0x0, 0x3, 0xb, @string={0xb, 0x3, "d689c133dc34cfa811"}}}, 0x0)

380.994301ms ago: executing program 2 (id=21):
mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x7542d000)
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000002c0)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x5})
timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2})

284.983554ms ago: executing program 1 (id=22):
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
writev(r0, &(0x7f0000000580)=[{&(0x7f0000000180)="b1ff5cc9", 0x4}, {&(0x7f00000013c0)="d6", 0x1}], 0x2)

284.79525ms ago: executing program 1 (id=23):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x191)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0)
mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000001c0)='./bus\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80)
getdents64(r0, &(0x7f0000000400)=""/4096, 0xc00)

261.415882ms ago: executing program 1 (id=24):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0)
ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000000)={0xffffffff, 0xc9a, 0xfffff001, 0x6, 0x18, "5cadf0fa59ebc3cef90ac43c5c135252e5d962"})
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000500)={0xb, 0x3, 0xdff1f001, 0x32, 0x7, "bea092df7d4c0ca7bfaff3690900501bb821b1"})

241.694304ms ago: executing program 1 (id=25):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000880)='./binderfs/binder1\x00', 0x800, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x2)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4, 0x0, &(0x7f00000008c0)=[@enter_looper], 0x5, 0x0, &(0x7f0000000780)="1f4e60867a"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000280)="8eafecc6"})

180.844172ms ago: executing program 2 (id=26):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
sendmmsg$inet(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f0000001500)='\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x9}, {&(0x7f0000002800)="cf", 0x1}, {&(0x7f0000000380)="08e0ac8fb1d99df61d7b518d0a62", 0xe}, {&(0x7f0000000180)="8a", 0x1}, {&(0x7f00000005c0)="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", 0xfe}], 0x5}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f0000001580)="ce90bfdb", 0x4}, {&(0x7f00000007c0)="f2e659", 0x3}, {&(0x7f0000002e40)="d4", 0x1}], 0x3}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000003000)="e1", 0x1}, {&(0x7f00000010c0)="fa", 0x1}, {&(0x7f0000001680)="d8", 0x1}, {&(0x7f0000001600)="f2964dd1", 0x4}, {&(0x7f0000000580)="b8a2f6", 0x3}, {&(0x7f00000002c0)="7940e900e0377757a9edc0d9376c21328ad2f7584fe4c8b712b3e5e08ecff5258151bd9eea7b4ce21f67ab51922ce035987127fda5812df903188e321419610f4beb6cdf6fa073876157c4f1d2054439d8db3f4d937872de928b62741fd60e6b56979ad883f89a02e24a577275bfb498b7a127abd0eb099e704d18d63dad611b45acfc3b8dc5457c8383d7d8621942e8e2ce6e4017dd6e5ed9732e739be6593c3b033524669ce17c3b822a6953eb11a20921220000000000000000", 0xbb}, {&(0x7f0000000280)="87", 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000880)="87", 0x1}, {&(0x7f0000000900)="11e09017", 0xfffffec4}], 0x2}}], 0x4, 0x4000000)
sendto$inet(r0, 0x0, 0x0, 0x4040000, 0x0, 0x0)
setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000000)=0x7fffffff, 0x4)

180.57778ms ago: executing program 1 (id=27):
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0xdfffffff, 0x5e490420, 0x4, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x88}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={0x20, 0x0, 0x3f31, {0x0, 0x7f69ff17f1e1ab77}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0xc5501, 0x104)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
fstat(r3, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
setreuid(r4, r4)
ioctl$NS_GET_OWNER_UID(r2, 0xb704, 0x0)

132.213849ms ago: executing program 2 (id=28):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, <r2=>0x0, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x10400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}}, 0x50)
syz_fuse_handle_req(r1, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r1, &(0x7f0000004200)="a28096c80abf3543ecde7564abff5085d2227ebcb0f164ae92706ad0b083a3f469a3efd15b4921e9c3063b98b3082068e7c31950dde842eac55df0f991453cad62a6956b0b6f7b8cf49b506a3060fe1127eca99663ade8efa89ee189acb5f3b92f6bc4c46621c803eed0d0bb5f32384870ed08f89d4f74445762fb99715e083c4c92a8878be19ffacc30d0f2da64f971cd40563163adc15670ecf25cd3ad96138967c4b53ad9d04b5193ab5fb674aa0030a9d703d1baf810ce897f969121f142161919e583c275671b999e7f363891dfdfdf3556d01b86ee29eca8fccbfeaf1771395148706cc6e6be7ce29fc9ffef061b5420950c1a525bf75ad06edec51538d1c5bbc77da72dc90fd9998936fffdda2427e5a68966c7e2208f76304680182ec73007e482f034195712af922db2726195d997708734db9e7825a864be00b2a4f800881fc0363f5e618398454f35b148b4ccb88d418269fac868a8ba4a2d5b4f06a1ac01b5ad158b842e05adca22c7372585bf4ce95560b6c1e021a3ed2ff7bd3b6b3c7734c3b66d7e4c460096312082f89b16baa6e73814aa60925780cd92cd65087e260ec046fc363264366a9df2c849c0644911303946adad544521ceb469a3e193ecc9a7876403fac461a4a70d6193b2451189a5c5120b3535e9edf619108af7f517b58abd3fa7fb1ab832213430d2e6901076fba9c9e1acc6c6f48ff0e419bbc45589745a176f52a7407ad5e3dd49acb31b47862806f47077dda04905e45a80a12cbcd4d2dd9fe66c2d1f99394fed8ec60961cd2dc7115a96ece432fac86d51bebb08b95f447a83792fe80291fca7b298c9043ef2c26f0f7e42798d3f54c84b94c24c76c555d83ccc53b99bb22d71845e5cf21a5ba7fbeffeb6306e1730db14561b950a3f24bcfd78d4ab0d97de8054bb1a6077ae7cca6e45d846d3df82298d07212922742cb0facac3b77edfbab90e9ee2d4f7b0ee9b17bb11ec5e5721340d84cb6bd93428167e69b47759172557acda313c3decdfc6fe9336bfade459f43b39d0f2289f9142db280f4ee668e650e12858c577e12e2b9a57ee66c834be97979bcbe94747fa5d8d0b7d3a9f8f218df1bf960f828429a1efe838616b18faf6629236ddbded43a093efae163228e5c38fd7714743c2fcca47e3382bcfb1ab893fd7377527b4ec43f3fa60ebd338161d8de7cad65b15579e4af258f5fe3a63c2637a15703207029b0899b5427767647baef11e291358e6e54f6f13d3d2ca7a5e7969e04d2733b3b9ab822c69a3cfac097384de5071a9b74a656136d55eb190df08747b509fd610ff62b4950ef71c934fe21a48a4931d3d9458b415f112cee65c660f5490e982341da1c58634b3967ca6f3596d20cc90f508382156e36f16539093240ef5f2aa6a2c0dff2a67df30dcf50bf6e0b82a3d49f2d532a8dde1b3ceefcf0837190b74186090d1c18b59917d7efce1adfb238ef4a7b1d22c4cef09320221de883e97e6882466508de06fcdabad3b741bdca2cff879d57ddda52f42b3dcb8a78cfc05826af7e4ff155960ff8491194f4d321ef195990abaeeefdcb852d1e1e3703f317385a9458b6c2dd9db830f757ec29c9939fc7313e639fe485bc1e41ddaaef3fbf1f7cc527c8fad0d21b8082482caad7bee440e5097665f636c3dfec82f8c98afb6243bc3944939675a594277d278ba4361461f7da52e224e4ce5dee4a467bf6ae9f67b61ac6eb0a440406abac2016eec907e241c57f5f44be47290fd0fef785ff04df3810ccd637b4d97a84bae8486a36f75d872e645fe46625969fc2d1f032c56ed44bd98ea27bd9b6ddc8eb2dc2ec9f90f2f1ca1bd20e37ac58b03c84c872f4ba47310654986641460dfdd531ac62a76ad87b89c103ac5c9c2e7e70c66447b3412d4a1e5cbc30e16939505116c04de33ae054ed366de8d1f971c2de439957a194e22a488f58d7efd46439177f3f3c45a1475927eecd846d3d2e6a2ab5c7f8addd99062c2fc6b272d1f51bb8f22f1b6f8bb3faf8aa85e5eb9abf7df5cf8f26267323808b0833a987989cbe59205e7ad06556e2d1b8a4873ca1cbcbc8d43abc145fd4eb832e7a58ab2c793d003ce7b1850ce45eb7480417a1e9eb9d39a1028a2a04a2aa649c098c4f8eee514db5f6021173bb254b8e22b150b2ca01dc7ff235db46ed78d07f43d1adab13b8445d1b32069eb45f9d389fcf5a3f7d3ebe243c5b1fe17b1f5a3d571b65f21b9e471e818172554dc956749b99cb7a5f303ec480d7194a2ba86e204f06aa1becdddc8c49082c527e7064ac2ad77dc05639d3d2a7778f6943ed6105ebf6f0b9e94fddbe05c236ec000f4d1d4e496b10068211ab68ada4c7f7ac61f5f5ba5f1810d5bbe87ff4f8356af0d3f682baedb0ad8f8488b277421f0a03fc5e3095ee34bc4472d8f17e3f7013cf2f79f5ff3ea4b6bae56d1365a33b09bfa9a496323f7da923b7e29dce4beb81035f13130004c96e56d7ef6ca6c101d20c27a218e623227c33c9e488b17e7ae9ac20da8240501f7b614a1730f164553fe479ef149866e4ea47296814284a3d3eb7cbb294289ffb996e0eb053b9c16e54cf267832e3d360eb196ed51305630223309ea97215628f01ec9d3ea48096418d5e962cac5063460f0a18772ec7ce66d14a1cce14b52c40bbbfafccbf1e76f09e57ff0718048e5b993157a6cf4718826b1e09430413a3596a15c4a620fa8c8e1d1663e5739f9f790ddbb3be0e00187d43717d659242467d8681ac10303346157f894d9037641417010e9654c6a5b22263e73a5a37128f50078a980c30930321aa5c5e7851d5d392ddce3a14a96916fa8421ae6728f37f5de7c3e98feb4babd4e1bd2315d595e209d52748f70adc2284fcdaa6ad880470d2a071f3490aaf3491fb64b4547419e8eccdc491a8921156cb4811ad1e66514a32b0b31b641438881f28c1e6461b4f451938999af671e8c6a5cd0c072a9fe4cdbefe24ca616f3d0a15ac97cca835b1a440e04fa28340c6044176c8ecc8ee0d033d47db8a0aacfa0eabdfa1c9509fc2604008f01cbafeb5bd2b503b809ed672340b9a576593f1ef388391b54b605e7a15bef7b1345627a34fca57738b0f8f4f19eea93c903495274a4425a1a1cc6c4c6e335b631df5185c95b485e4257867b5347a40e4e14dcc560f061fd4fd265137dc68afd548adde778f1330f769acb1ccf5da14ff6992c24e210ea6e6179421881b803393bc6974e37106c5b5b3b5d0b3469f8969bffb7e4ceb2c98e928e74366492d27235ae4c74a2f48511aeeaa53a2beafa7a331b50e454c507af1b63350a5cef35668a5b9325014192277e509561008b3601088f79d42eaa8b1e4ae2000b31749e2b8094312ddb7f3c1cd625ef885c11fa22a66e374b52b3425e0b8016154e1fd8471339e32e7373d63ab646d893fbe09ae07b06074c01401ea76b3c382a9d32f24f93c789964e16bc4206ecd75c10917ab84ffd8d6cdf4cd28fd90375ff28518f8c1a3befc538e1b9e427fb671988d29f2fb2fcd039f4d341c84eb4d7cf600ddaba88bb094e4d87a1419180149f491368e648b69985b05ac39a4ecdd3c5135f3a5c8ad7792dacb6470144bb9e67805a211efb3ec9ccaf8e0901345fb19e4da579e1fbe86a1207f4f13c3436009c2c640b7cf3f8b77ca7bd994bf93308027359c6dd1b7db1e153fc0821968ef36c003b6c73fe890f4de24f5c6458dbaaf3819edeaa91783c3cfc7e773689236248195c7bbd60113f2476fa3687621d668d1728ee433d2f8f4db707345d30f1e52ab87a2a0afd547c6b3f0000f59f17facde48f693490e22494b75d11df1a143b85068d143ef6a9bb5937a9df380c8948f1a01e9675e18409edb0f6b9605b68e34632fcce472dc50b90b0f6dcd57931f78e1e8861a0fb62e72b0baad6f9d23c1cfb0f19b25013c8d9fcd786a2f6f79768b5fb398f7b2baa31ce8156d1fc4a46c1c463fdf30360d42aeed2ef11611d0b7f654bb51052fd4dc39328f8ec4c58bbda05e6f1b3c8f6d8adca0268f2410e9a4a7d63b6616006d0e02f6edacc10e5c54fd85f15a8bd7648a293f23d6a699bd9a675250475a73a96d7475e4fabb89fb5e7de5d7a3479aa485c0befc60d0ac4fd5ac6dbecceb06cad86e219fc0ce4720758917811a3215f8d13e413bfb64fc065fc421aede0b56691797dac428c7e463479fa591b9072c309b7533e427c5cc11a1f6cf9a5b995d328d796d874c5b55dfc12a5039b413ce319cf5ba1f355c4e0717d32650b43e18010f37f048731931c52c4f36eb969dda702afe96c2a5241350a67ba2d026946189c5e281293c9a8e2cff3784753f1de78b917101b54e5ab00c045ea15f28a0e3f509962cf8bd3385d85250737eae5c34ece86b86669c13b00308a3b13c0ac3c83ff26fb52a4aa83c1233a9490cb9ca917a056908931751bddb88a62379a713395f0764e4a393faf253a4026d0472270e6036287d56850df1751543484d65b3062155b6300e0024241c59a862ae769c1a9232a2d9fb24705177a09cceb3eefbf9f106f67e01be14cdeb4d2fc7d8661df3e75de5ccd09a7e559f028fb9837c621ea0045b4d1b679067f246339c974631aa7134d4e910efb28d3c48929cef1df7e6c73668762d55086b6c59c36ac90154135fd7ca4e4047dd0aa161fa982d8edf9c0cb9666477e096c55718f6e4742415fefd4f696d1f1ccd6322bc19496ddebd36282a7c707d5b44113e30678e6e33ab7d34be04a59ac614d6a54134490998be02636fa91633d6294781c2b9a54c611c0045cfcfe81f49aa21b29d835cd2047c854486fd8e65a2ebf629f7ced602b9dd107bfde483e5c9b5cbba4a08cdce09920bda9978b7fc2b4a89bf1573a26389e52090fdf5dccf22111dc8c42fd3c8c477092895398086cc22cca665269e193fc650742a361a44b857d258429f701f22e9b7615bc3dab78c1479a41cf8575cdb17169470b347adfc03e03daea3e269725cfc72df5664b9df36d2f2b55013b71133e0b80577a47182511ebb308b6248d457bd2af7b28e77182c305241178c4124ab102771fd5a8c3dacb8775de881301d71587c76bcf0a97a72ad244d0c42fd71aceec32dd48bb5c9a95b391166c832ac5bac8c7cae4d18b3f7d9f2e4782fdf97732e3d51f67bbb57f989ee0d7589dbd0c2a5c63840e914b9d7d720fa120acbffebf816b588b2ccc052e7fa78992e0ea39dd21a122add41195f8e2e1acd777c1a4e8ef4362fef441feb4d9252c6bfbd2742152300a32027776e3341620d3c8d9365e10e81adcca7d87a0e555c98a0353c692557d90ee9be3fbaab766abf93e2462149fd99c92a5fc58d899ee75535cd1fe1386c5ab0b157c2102039d6015258f59cef3f15b951893a30ae839f740402a30b34e7be73796286403c5beb0853d856d83f1b00b48328f56dcb32e1faab08a3435b1482bf18b21c95aefeaafa7fd761c7f28d416fcde06bf7aee5c6e9eb50e55874253ba3f1d0ce2505b4fc7c3fc996bfbb8446bafe84f5bea94bfd7ca5aeaf237fe793b66e5c521d4092e4e1f9bde1dfcfe53fa55005d21cfa833a338fd9792614129336060e10d1911862070761aa20c2902eb7c5a355eff4cf6253d7102a2ca1fead4c53b57d576d104c081310d92797e4e2e8c269d19910d0d4cedf30fa28ba680c00137f83de940624229b6a125ce5233c6cf4a3640b74f58f288dad8451fbe37641c5559a5f3caf1299c8bfb230723652278fe378efd8e459b9da26cffeb58468a6301dbc06d713ba2d8d43d9038f5f2dc8b831ba58a88eeb5b1786b21e398aeeeb7c1f3d6f01d82b3947862fb9e7cbd7da5d04c5fcd34da28d53e2246e3ac1e3a619ad174efa6435eaa0fc94d610799ce0158421dce046306eb5042143daa336d52206b12610ea6389cdda49bf5af1d4ee42ac090a94ae7b7612073f3a5c36a2205eda887f41478f7d20f18667f941f71eebcfa76c1ab28f2a49a3bd56bd3f4e6bd079ab3fe2d94782236e83585a03e52907abaef7456a95d5d3f3d37efdc035dbfd7c41b8ba0af2df8adf1cf24f7ff0beccd3d26bc91caf42314ef7e466f74e19ae0df2e2298fc2f694a7ec134632035585d530e7e19f65c256f001d75382d9825ef741bc213af186377d9ca10d3722354e1897ca5c23ac6a52c9ad0e6b686e1776f7ec65df033e8f4d5db80c1bc354093b319cb70df93d610667675816328c99322f14e636b95f04e6497f139d508b453f53ddb5c289d849fd5407c9bdcefd1642abd46e28cb4e94371bdc606eeb67c9fe17747c68f2d50e82711da4d3edb0eda06f41b7f93fa8fb4d83cf21c79da67000bac2275508217ade1659fa8d24e5f8efb9f4bd21073ebef3d06368eb03fa3cf0d638448bd055ed20d292033ffdba538559c8ff9a2a5c8f83b5c393643d6585d1df994c3be43e72b8f3f53114d2a5f6bcedb573842b23b6a3eb7fca8495bf03bd03fde7b19bd39a16cec49e01f38e671af33cae082d9788e3202799bc466babec2080528d0609c0b731964719093735b4c1e73bd0705637c47516922197c552baeaf3516b5e3bbc2cd1afa3ef8215196ed580d9561092f620b897e98e786a0c7cbb0eedda8063292ba6482497f5f6bb62fb5ab4c97cb7658dc6579718eb97b547fcf47ced1426561af93a15fb4dc6d3d93b868644943c2c94b23b0570bbb81df2666c24f5abccfcdd71e209f3bb43c01d17f9bc8b9af2c26762fc6a741a150b7d1186e4f35175f3c315243e1c11e92c43a1fc492eef5a13c77a81fcf514ebfd0f8e645dae15a07e86b2f01fda065db4505a5eea83cb616f744f6bee731be191c65449c02603556d5a51422cf9c2f19f8d6843e0c1091e0708aa271e91f71c8602b9fa72189e036b7cb6af1569f21269283de94a6d7fe5849fd433d5b719c80419873db0587fc29786cc598d896fb16360bddd2ce12e54d05418f4f5e5f2d7aafe9fcd6268cbe2e9e6329ffb6c67fab8f3ce673028cc06aaa6b857556bba3b44d3fab5b6e875e70a2f3ad4b2ff76f31ead3462d3801ba373b3c2f545e94f57021575e2947f81f53283fc0a5137fd44fa3d074c92de54a0a3465c858f5a7ef08313faddbc3663e4e0167f3cba39612057a7518fbfb031f5ad0f9f75831973ebd733b82e554bf3fdec84e51f65dab6028c6c51366d9d4700fdf255e4c7bd70766e7f2281b3f2a5363f85ce49f9135904d14bcb117ad754c2594dcdca2d30e40ff265b5accfb116f64ed99aad570c4c5a91efdbb984ac651d8721405a0342cf77f448c17a152eabf29e88950558a86d0074e1cefab1eb7c366682f686ee1338737e675ea58eb8b4c86b9f28a6f6e96459f29e3b4dc59ff044c61a0dcc5c31d803e6e98420e446229ccdec3d0f705e92ffe016bb3696373eadab7f35ccf65ab4d9be09a085ce21bbd7c0555376e4d7fe68b5e7a64f48b5127825fb2be598d991f9c1a54bf52713417dcc599e812d85513a537e6eafa738edc972b67e065595d11678449bce6cd3d69800a649b560d0e057c502ca3e72e97820829ecfea801192c3f4e2c8763c095a43ee6fe45fe8730130937668df1d4ee577ada28238be03286481f2d2a004cc4d48856e71fbd64f1a0043a4520ecbbf1b3abdc96b87a27be8495a20542967aa4cd3a44a11502419a083d84e97abfde0901b66dde48388649a0ed6d93b9f20c530e990c7c52370a114d800d6ab3f6687d6bbc105b63738fe05fa6cac98ad6663936bb18cb923264e44312c24c2ce8e642bb73c921012b68a26a70977446b8f15f9d62467d8b356560c183a6bd6cd76ec868c3bd94a595cd7bf996755a508a814980c5e588b275200c45afd900c8c2de329ec2484b0e3ecd7b0960e5e3425881d1ff7f8bd8b20f5cc98ffc3acb77f5e88775a4bd3ab9f9eb027e27d3af55ebdf4eebab48ea911128d668d00fc3f5b5480aa0d9a4af563ba577384448e5425157133d59e1cef3c722f33700bd372825046b1fa5824e405154a3af1440bc2b75acfbd07cf92e8c162587e74b5ab66b1c6aeab3ad5fa3ee91da4900ef30ad04baea326df912517dd96e1696b4a91faa66675978a375e81f25464a1073dc6737af08d7e25956bb31d438548a7da38662d49db812a8cf1d6cc65f5c63879fd9ee7fd2a66ca3fc1a748cb239aab88c87206470b4c60592afeb6d69ed97a8f990155862ba4e22b64804142c131a23792937aa8a8696e165c24d7692a04bb4471b0f0d2507fe7c8618421428fc7a0acc984ca5cc6bacb772e8a717bbaa646f9643275910a6037afaf5a80678d18edda138a4e13d06d04a5d06431eab48738225cf1567e960e765728dc12e91b91c6f2b33dfb6e033aa68c1c2334d24335abc4a7a1df5636dec29091da54d5f5a1fff41e4a35a0c2f04f968f7d78e2f51c73577e2192bb20f289aaba5a175c2ed533855bd9ed9a842ad482136dd5e0cf45eb5e2d31ff62a3be1cf8a94a58316e74f4ab9fc54f3a0bb83beef0f355993bdea2c83e61cdc796bf2564ae51fae616799e8711998cd88d35cd9824452fdd65226174b46792cb87f4dd282e4e6f67eb66da413ad877ed6ce775f7e19bc93f48bb9e5ec04009de3c042aeacf7f4b25ad6b30e017303f64fe07ac79e8744aab6926d117f13513d0469cef335fe1d0d787c2d0b2c031a9521786ac10e9f8b768271680337f2c3262abdccb5d3107c632bf1f74c83ee91f49988222fb080cc8faa9b1a02526d8b6087e0b2354173d29016b3309587c16f057dd812aa63c3169150de81f3af97d082a8f8da4ce4f909ff649821d7f96d97613552e8cc4902e046ecfa329b1d980ff5ece69b8f1615fdff5244f41cec0af924624ae1641ecae5fa26c5fb9006e57100ee71377ced7c255ae17a0845e2ee0287c62c1852f93877f9f86157ca9675d383fff5cd6f2b001ec0136c07cf37f5ace1853122c2baa1092d418e2a490c4a5c8f56b828ce1bafeef4e77f095d6b4ed99d56f66812cb19be540ebe5d52e7eff2d69cbb8477e11514f7e3604bf9999f78c2f1ca6f60a2216b87fa0f25269c425b7d50709b200912b3b7899c95e12d6e9c4dacc19e327721860e0477a53e6793fbb7fb9704a848f395f48c24a6e79b9e1358cc3497251de88b8d3a7b22c6d8af1a7fab81530d9f0cc98f62debb222b54780d89794238532717b447d71b46a60ed481c21db85b590b31720009695ecffd4ef029964e5d5149622233ac013e960a005c924f73ea82c318455546c53d74aa3f7e2ff26aa074c40a55aba8b08027fc19b596eec6c4f89bae39e74b9aad88344f7cc5ad3eefa5095f2ab47222e9a357ecd71c6700ac576025201490d9e446603dfd4bda7617dd500981b2d2ab8c43882a5208494cb3f8ebc720bca8a7cf6c80bd7aaaf89507bb3412ea490a78973f12cc30413e9df1458917ea3d68b438d424c1314bc8d01939c5a5a842438281e62d0c800dee704b2a6cd3e1e4b885a6b26b894a98765fa3308c9e4b87f93625faecdb17c29a27cd243bf6030a67874ec9f2443cf8154261ac2a834c01cbe1f314ee7aa3ca552e1648cf8b42a63f249e3538026e09e44d69dc259adb0d1a0cbccb5a5dd5d0dccc90d023da79d5634188ff060f7e35a5f9d7ad99546824d63975d4452de876093f4e997dc46eedcd80a9eebf5e4f077fbb10c7d9e19a3419e7b845972a3b62613c5404a209b16fa88e0ff49d7b4f21fecc1f773c5b4be61021e0cab8602c6e8257649303aaeafcbb178e7a460ff07f219c46eb6fe5bf8113723e454003bd707767c107daf4255751daaf8decf35262640058924eb6587868b2c08230b317e97396ebc928ba8d274ca0eed0bfcb637676003c64e8c1e1a0420b6c96a44226061ced41b8448382abd2f3d0c472afcde231fbc9ee90c2f1132f8e2391246f95ad93354c7460e20de996ad0f61b13b27646887a637cede90b94b7d8c3130f0fe060e8d955c711a2700b302a75bdeb32a0a6802ea795cb114f5f82a1a381a86bbff88b299e47728b746dff964c94c52b661b9429376b1320b46081426b7c340206dc0da151bf84be2a49e78b6b5938753d2b1be8d9e67c43c5d70e72519f5f90d9f95e84ee38f82b191ac4d968b0a37901fd923cb289d585693ac3c3f8a94fca6df45e694e199a9cd0b1bc1fa7394bcc96aae670dca6605a998793b7e067ac410ba631057b8b76fcbe9524df820c02efef1608b743cd2aa6d60d3d8e476fa12d3acc329f8272b087d89471177ed531fec1f9c24a975ca2fcd8c246a33e291a3f00b7f234052067a0059c86762475256bb5e7dac6f121a0925506b18933c6e314915d4b3b2130aafc2483ef22ff8bb7b887565b1bd22fabca22037d8fc9437f675c5313526266f60bb7c7c47f30c7d567ed142ea5ec367c4298328d20e5344f01c0c90cf8a6302f4d84b6ba7495fba314a05ba29b63bb6d458fdb05a4411136958309f418fb178e19aa09ff9e62b29732fb2986c96e738f7a688cb2122dbb8f2ad9a5f28bc49ec0c462413552afee8e403259b55ad6dc334dde7f2d306929dd01f2aa6036cafd41874522689301b81c9e50e86828894140356db0a3317b081ed9d8148c41e77e6bda6287762532b86eb91f5480915680deb8a91fb8656b7f0109064865d2b846af0861f67d3f720d6e306540cd7b68f095ef3690b88ea93fb6a402ff5697597cda83171f159e85307d1a8c01611189bd4eb4f0453ab88d43ae181a562a76902a67c687514079d6f4304d9a7c0fa24b6e86074ea0a9fd8187c120312078f5ebfa674adc0303734bf8f6b5585943706594192ad24c9f7d9794fb83758924f862855ddd50bff58b522c43d73c03289baec628cd693cab93101b1e473b76532510e10f03e86812fea6f2d6f5467dcf29e6d7cf8524f383a0ded3f0951c3ffb171a6b8a6d97b5fa8899a19f1a3d0e934a1d4741076e4394ba225158f697bf7d5651717c6950229a0be22e8120d76a414edbcd03d505264b7ede8272ccbd6dbdcebaf11daf6a652f6f9eb74ba7a3ecc942892891388005ae5d971e4e79d696564906dffd44845b704a9abc2fa5ba1bb69a548423a08044ad6d0e365db7e6bea0f3844a452759716cb98dcf326001ec90c1c343174098cdf47ea2e13341058ca014d2a30e9ba3c526de72a6e387181bf76a278c9cbc518d8c374a3f1d9802a39464a100903dbec16f8f095f5d82d9d09507281e4f7fe0ce4fbeced193902a5f658af2a4c1d0952dabdc6ae5830b6b5a2c3f5b8d33a73665990822e5f4a7ce5366755a1615543bdf78299c71e890e0bedb6ec277b10a389d6a3ba9c037221421279e51ab50fb115de2076cc99444202e88ebd9d0fbe4e60234b7b761495ac6c9e615ddac8176164a88fb6d6cc2b52672c8949afe3efc1e87a598896bc93e421423844fcaafe65af898a015b3bcaf623ebeef9a57155af5278ceb52b995f7ca466d9e18b05e86380679e0257cff6d0c6750078462f2ee4701d6d8289ed848b877cf5918625b7937060d667c11119881c30809056892352c6c53c01e395af6866ea350e6f21fa3db772c1177c759999973b51e11ffc5908", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x200000, 0x8000, 0x0, 0x0, r3}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0)
writev(r4, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1)
close(r1)
close_range(r0, 0xffffffffffffffff, 0x0)

2.370666ms ago: executing program 1 (id=29):
r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000340), 0x2)
r1 = memfd_create(&(0x7f0000000380)='y\x005\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x1a\x98S7\xc9\f\xfb\x1fZ+o\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2)
ftruncate(r1, 0xffff)
fcntl$addseals(r1, 0x409, 0x7)
r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000bc0)={r1, 0x1, 0x0, 0x8000})
ioctl$DMA_BUF_IOCTL_SYNC(r2, 0xc0086202, 0x0)

0s ago: executing program 4 (id=30):
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x105c01, 0x1b0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup(r1)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="001c86dd0700100000004200000060ec97000fc83a00fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.12' (ED25519) to the list of known hosts.
[   24.505919][ T6556] cgroup: Unknown subsys name 'net'
[   24.656073][ T6556] cgroup: Unknown subsys name 'cpuset'
[   24.658096][ T6556] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   24.817792][ T6556] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k SS
[   25.990364][   T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   25.992127][   T53] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   25.993571][   T53] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   25.995428][   T53] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   25.996934][   T53] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   26.006803][ T6163] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   26.008831][ T6163] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   26.010396][ T6163] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   26.012842][ T6163] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   26.015800][ T6163] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   26.034423][   T53] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   26.037066][   T53] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   26.039138][   T53] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   26.050740][ T6572] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   26.051423][ T6572] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   26.051717][ T6572] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   26.059942][ T6572] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   26.063886][ T6582] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   26.064739][ T6582] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   26.065607][ T6582] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   26.066395][ T6582] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   26.066969][ T6582] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   26.067183][ T6582] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   26.076002][ T6582] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   26.079249][ T6582] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   26.173338][ T6570] chnl_net:caif_netlink_parms(): no params data found
[   26.250161][ T6575] chnl_net:caif_netlink_parms(): no params data found
[   26.256864][ T6570] bridge0: port 1(bridge_slave_0) entered blocking state
[   26.258324][ T6570] bridge0: port 1(bridge_slave_0) entered disabled state
[   26.259700][ T6570] bridge_slave_0: entered allmulticast mode
[   26.261508][ T6570] bridge_slave_0: entered promiscuous mode
[   26.273205][ T6570] bridge0: port 2(bridge_slave_1) entered blocking state
[   26.274840][ T6570] bridge0: port 2(bridge_slave_1) entered disabled state
[   26.276062][ T6570] bridge_slave_1: entered allmulticast mode
[   26.277659][ T6570] bridge_slave_1: entered promiscuous mode
[   26.300255][ T6570] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   26.304457][ T6570] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   26.320059][ T6580] chnl_net:caif_netlink_parms(): no params data found
[   26.353533][ T6578] chnl_net:caif_netlink_parms(): no params data found
[   26.355261][ T6575] bridge0: port 1(bridge_slave_0) entered blocking state
[   26.355334][ T6575] bridge0: port 1(bridge_slave_0) entered disabled state
[   26.355397][ T6575] bridge_slave_0: entered allmulticast mode
[   26.355843][ T6575] bridge_slave_0: entered promiscuous mode
[   26.358067][ T6570] team0: Port device team_slave_0 added
[   26.370941][ T6575] bridge0: port 2(bridge_slave_1) entered blocking state
[   26.371014][ T6575] bridge0: port 2(bridge_slave_1) entered disabled state
[   26.371062][ T6575] bridge_slave_1: entered allmulticast mode
[   26.371468][ T6575] bridge_slave_1: entered promiscuous mode
[   26.372865][ T6570] team0: Port device team_slave_1 added
[   26.396813][ T6573] chnl_net:caif_netlink_parms(): no params data found
[   26.400521][ T6575] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   26.403583][ T6570] batman_adv: batadv0: Adding interface: batadv_slave_0
[   26.405683][ T6570] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   26.409984][ T6570] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   26.414451][ T6570] batman_adv: batadv0: Adding interface: batadv_slave_1
[   26.415726][ T6570] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   26.420024][ T6570] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   26.425163][ T6575] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   26.438689][ T6578] bridge0: port 1(bridge_slave_0) entered blocking state
[   26.439989][ T6578] bridge0: port 1(bridge_slave_0) entered disabled state
[   26.441243][ T6578] bridge_slave_0: entered allmulticast mode
[   26.442709][ T6578] bridge_slave_0: entered promiscuous mode
[   26.447046][ T6580] bridge0: port 1(bridge_slave_0) entered blocking state
[   26.447090][ T6580] bridge0: port 1(bridge_slave_0) entered disabled state
[   26.447141][ T6580] bridge_slave_0: entered allmulticast mode
[   26.447747][ T6580] bridge_slave_0: entered promiscuous mode
[   26.458468][ T6578] bridge0: port 2(bridge_slave_1) entered blocking state
[   26.459717][ T6578] bridge0: port 2(bridge_slave_1) entered disabled state
[   26.460984][ T6578] bridge_slave_1: entered allmulticast mode
[   26.462373][ T6578] bridge_slave_1: entered promiscuous mode
[   26.466791][ T6580] bridge0: port 2(bridge_slave_1) entered blocking state
[   26.466840][ T6580] bridge0: port 2(bridge_slave_1) entered disabled state
[   26.466890][ T6580] bridge_slave_1: entered allmulticast mode
[   26.467735][ T6580] bridge_slave_1: entered promiscuous mode
[   26.472745][ T6570] hsr_slave_0: entered promiscuous mode
[   26.473798][ T6570] hsr_slave_1: entered promiscuous mode
[   26.479492][ T6575] team0: Port device team_slave_0 added
[   26.487734][ T6575] team0: Port device team_slave_1 added
[   26.489343][ T6580] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   26.493202][ T6578] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   26.499039][ T6580] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   26.506259][ T6578] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   26.521381][ T6575] batman_adv: batadv0: Adding interface: batadv_slave_0
[   26.521402][ T6575] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   26.521418][ T6575] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   26.528234][ T6573] bridge0: port 1(bridge_slave_0) entered blocking state
[   26.528553][ T6573] bridge0: port 1(bridge_slave_0) entered disabled state
[   26.528604][ T6573] bridge_slave_0: entered allmulticast mode
[   26.529152][ T6573] bridge_slave_0: entered promiscuous mode
[   26.533097][ T6575] batman_adv: batadv0: Adding interface: batadv_slave_1
[   26.533312][ T6575] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   26.533330][ T6575] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   26.535678][ T6580] team0: Port device team_slave_0 added
[   26.536480][ T6580] team0: Port device team_slave_1 added
[   26.538632][ T6573] bridge0: port 2(bridge_slave_1) entered blocking state
[   26.538696][ T6573] bridge0: port 2(bridge_slave_1) entered disabled state
[   26.539042][ T6573] bridge_slave_1: entered allmulticast mode
[   26.539723][ T6573] bridge_slave_1: entered promiscuous mode
[   26.543370][ T6578] team0: Port device team_slave_0 added
[   26.550608][ T6580] batman_adv: batadv0: Adding interface: batadv_slave_0
[   26.550626][ T6580] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   26.550638][ T6580] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   26.551331][ T6580] batman_adv: batadv0: Adding interface: batadv_slave_1
[   26.551339][ T6580] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   26.551353][ T6580] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   26.568442][ T6578] team0: Port device team_slave_1 added
[   26.576393][ T6580] hsr_slave_0: entered promiscuous mode
[   26.576722][ T6580] hsr_slave_1: entered promiscuous mode
[   26.576929][ T6580] debugfs: 'hsr0' already exists in 'hsr'
[   26.576960][ T6580] Cannot create hsr debugfs directory
[   26.584060][ T6573] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   26.593218][ T6573] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   26.599508][ T6578] batman_adv: batadv0: Adding interface: batadv_slave_0
[   26.600705][ T6578] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   26.605051][ T6578] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   26.608923][ T6578] batman_adv: batadv0: Adding interface: batadv_slave_1
[   26.609128][ T6578] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   26.609149][ T6578] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   26.613049][ T6575] hsr_slave_0: entered promiscuous mode
[   26.613323][ T6575] hsr_slave_1: entered promiscuous mode
[   26.613510][ T6575] debugfs: 'hsr0' already exists in 'hsr'
[   26.613519][ T6575] Cannot create hsr debugfs directory
[   26.627452][ T6573] team0: Port device team_slave_0 added
[   26.628172][ T6573] team0: Port device team_slave_1 added
[   26.649234][ T6573] batman_adv: batadv0: Adding interface: batadv_slave_0
[   26.649254][ T6573] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   26.649270][ T6573] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   26.652447][ T6573] batman_adv: batadv0: Adding interface: batadv_slave_1
[   26.652454][ T6573] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   26.652467][ T6573] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   26.670556][ T6578] hsr_slave_0: entered promiscuous mode
[   26.670844][ T6578] hsr_slave_1: entered promiscuous mode
[   26.671027][ T6578] debugfs: 'hsr0' already exists in 'hsr'
[   26.671036][ T6578] Cannot create hsr debugfs directory
[   26.685112][ T6573] hsr_slave_0: entered promiscuous mode
[   26.686436][ T6573] hsr_slave_1: entered promiscuous mode
[   26.687619][ T6573] debugfs: 'hsr0' already exists in 'hsr'
[   26.688598][ T6573] Cannot create hsr debugfs directory
[   26.740856][ T6570] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   26.754261][ T6570] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   26.763353][ T6570] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   26.767195][ T6570] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   26.812501][ T6580] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   26.816014][ T6570] bridge0: port 2(bridge_slave_1) entered blocking state
[   26.816059][ T6570] bridge0: port 2(bridge_slave_1) entered forwarding state
[   26.816227][ T6570] bridge0: port 1(bridge_slave_0) entered blocking state
[   26.816252][ T6570] bridge0: port 1(bridge_slave_0) entered forwarding state
[   26.823220][ T6580] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   26.826398][ T6580] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   26.831322][ T6580] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   26.849634][ T6575] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   26.852264][ T6575] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   26.854994][ T6580] bridge0: port 2(bridge_slave_1) entered blocking state
[   26.855031][ T6580] bridge0: port 2(bridge_slave_1) entered forwarding state
[   26.855121][ T6580] bridge0: port 1(bridge_slave_0) entered blocking state
[   26.855149][ T6580] bridge0: port 1(bridge_slave_0) entered forwarding state
[   26.861710][ T6575] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   26.866885][ T6575] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   26.892157][ T6578] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   26.895063][ T6578] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   26.897365][ T6578] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   26.900408][ T6570] 8021q: adding VLAN 0 to HW filter on device bond0
[   26.904309][ T6575] bridge0: port 2(bridge_slave_1) entered blocking state
[   26.904353][ T6575] bridge0: port 2(bridge_slave_1) entered forwarding state
[   26.904415][ T6575] bridge0: port 1(bridge_slave_0) entered blocking state
[   26.904445][ T6575] bridge0: port 1(bridge_slave_0) entered forwarding state
[   26.907018][ T6578] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   26.935529][   T41] bridge0: port 1(bridge_slave_0) entered disabled state
[   26.937407][   T41] bridge0: port 2(bridge_slave_1) entered disabled state
[   26.940446][   T41] bridge0: port 1(bridge_slave_0) entered disabled state
[   26.942824][   T41] bridge0: port 2(bridge_slave_1) entered disabled state
[   26.944805][   T41] bridge0: port 1(bridge_slave_0) entered disabled state
[   26.946357][   T41] bridge0: port 2(bridge_slave_1) entered disabled state
[   26.957586][ T6573] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   26.960953][ T6573] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   26.963749][ T6570] 8021q: adding VLAN 0 to HW filter on device team0
[   26.967005][ T6573] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   26.969696][ T6573] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   26.977316][   T41] bridge0: port 1(bridge_slave_0) entered blocking state
[   26.977357][   T41] bridge0: port 1(bridge_slave_0) entered forwarding state
[   26.988246][ T6580] 8021q: adding VLAN 0 to HW filter on device bond0
[   26.991492][   T41] bridge0: port 2(bridge_slave_1) entered blocking state
[   26.991530][   T41] bridge0: port 2(bridge_slave_1) entered forwarding state
[   27.022996][ T6570] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   27.023024][ T6570] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   27.027683][ T6580] 8021q: adding VLAN 0 to HW filter on device team0
[   27.035950][   T12] bridge0: port 1(bridge_slave_0) entered blocking state
[   27.035989][   T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[   27.036324][   T12] bridge0: port 2(bridge_slave_1) entered blocking state
[   27.036339][   T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[   27.070839][ T6578] 8021q: adding VLAN 0 to HW filter on device bond0
[   27.073475][ T6578] 8021q: adding VLAN 0 to HW filter on device team0
[   27.076610][ T6575] 8021q: adding VLAN 0 to HW filter on device bond0
[   27.080498][ T2614] bridge0: port 1(bridge_slave_0) entered blocking state
[   27.080562][ T2614] bridge0: port 1(bridge_slave_0) entered forwarding state
[   27.091798][ T2614] bridge0: port 2(bridge_slave_1) entered blocking state
[   27.091837][ T2614] bridge0: port 2(bridge_slave_1) entered forwarding state
[   27.100773][ T6570] 8021q: adding VLAN 0 to HW filter on device batadv0
[   27.129957][ T6573] 8021q: adding VLAN 0 to HW filter on device bond0
[   27.135644][ T6575] 8021q: adding VLAN 0 to HW filter on device team0
[   27.156601][ T5071] bridge0: port 1(bridge_slave_0) entered blocking state
[   27.156642][ T5071] bridge0: port 1(bridge_slave_0) entered forwarding state
[   27.159757][ T6573] 8021q: adding VLAN 0 to HW filter on device team0
[   27.162343][ T5071] bridge0: port 2(bridge_slave_1) entered blocking state
[   27.162376][ T5071] bridge0: port 2(bridge_slave_1) entered forwarding state
[   27.166443][ T5071] bridge0: port 1(bridge_slave_0) entered blocking state
[   27.166470][ T5071] bridge0: port 1(bridge_slave_0) entered forwarding state
[   27.179530][ T5071] bridge0: port 2(bridge_slave_1) entered blocking state
[   27.179564][ T5071] bridge0: port 2(bridge_slave_1) entered forwarding state
[   27.202710][ T6580] 8021q: adding VLAN 0 to HW filter on device batadv0
[   27.210629][ T6570] veth0_vlan: entered promiscuous mode
[   27.223530][ T6578] 8021q: adding VLAN 0 to HW filter on device batadv0
[   27.234205][ T6570] veth1_vlan: entered promiscuous mode
[   27.269892][ T6580] veth0_vlan: entered promiscuous mode
[   27.282494][ T6570] veth0_macvtap: entered promiscuous mode
[   27.283770][ T6570] veth1_macvtap: entered promiscuous mode
[   27.298726][ T6578] veth0_vlan: entered promiscuous mode
[   27.300184][ T6578] veth1_vlan: entered promiscuous mode
[   27.301830][ T6580] veth1_vlan: entered promiscuous mode
[   27.322619][ T6570] batman_adv: batadv0: Interface activated: batadv_slave_0
[   27.332952][ T6575] 8021q: adding VLAN 0 to HW filter on device batadv0
[   27.334401][ T6570] batman_adv: batadv0: Interface activated: batadv_slave_1
[   27.345392][ T6580] veth0_macvtap: entered promiscuous mode
[   27.351716][ T4952] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   27.353448][ T4952] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   27.358203][ T6580] veth1_macvtap: entered promiscuous mode
[   27.360256][ T4952] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   27.361791][ T4952] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   27.377196][ T6578] veth0_macvtap: entered promiscuous mode
[   27.384439][ T6573] 8021q: adding VLAN 0 to HW filter on device batadv0
[   27.387199][ T6578] veth1_macvtap: entered promiscuous mode
[   27.392113][ T6578] batman_adv: batadv0: Interface activated: batadv_slave_0
[   27.396851][ T6580] batman_adv: batadv0: Interface activated: batadv_slave_0
[   27.409238][ T6578] batman_adv: batadv0: Interface activated: batadv_slave_1
[   27.417002][ T2614] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   27.417037][ T2614] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   27.417056][ T2614] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   27.417072][ T2614] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   27.440138][ T5071] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   27.440166][ T5071] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   27.447691][ T6580] batman_adv: batadv0: Interface activated: batadv_slave_1
[   27.469417][ T6575] veth0_vlan: entered promiscuous mode
[   27.473228][ T5071] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   27.473624][ T5071] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   27.473658][ T5071] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   27.473680][ T5071] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   27.478189][ T6575] veth1_vlan: entered promiscuous mode
[   27.506184][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   27.506211][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   27.527308][ T4348] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   27.527342][ T4348] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   27.530245][ T6573] veth0_vlan: entered promiscuous mode
[   27.535140][ T6575] veth0_macvtap: entered promiscuous mode
[   27.542399][ T6575] veth1_macvtap: entered promiscuous mode
[   27.552905][ T6573] veth1_vlan: entered promiscuous mode
[   27.558916][ T6570] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   27.560907][ T6575] batman_adv: batadv0: Interface activated: batadv_slave_0
[   27.561995][ T6575] batman_adv: batadv0: Interface activated: batadv_slave_1
[   27.572340][ T5071] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   27.572389][ T5071] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   27.572411][ T5071] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   27.572428][ T5071] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   27.581535][ T5071] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   27.581560][ T5071] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   27.594214][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   27.594245][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   27.622307][ T4348] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   27.622339][ T4348] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   27.641913][ T6573] veth0_macvtap: entered promiscuous mode
[   27.667518][ T6573] veth1_macvtap: entered promiscuous mode
[   27.692816][ T6573] batman_adv: batadv0: Interface activated: batadv_slave_0
[   27.708206][ T6573] batman_adv: batadv0: Interface activated: batadv_slave_1
[   27.714140][ T4245] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   27.719614][ T4245] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   27.719658][ T4245] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   27.719679][ T4245] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   27.726987][ T4348] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   27.727025][ T4348] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   28.074888][ T6582] Bluetooth: hci0: command tx timeout
[   28.076525][   T53] Bluetooth: hci1: command tx timeout
[   28.104718][   T53] Bluetooth: hci3: command tx timeout
[   28.114996][ T6582] Bluetooth: hci2: command tx timeout
[   28.116379][   T53] Bluetooth: hci4: command tx timeout
[   28.617249][ T6687] loop0: detected capacity change from 0 to 64
[   28.706004][   T24] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[   28.710638][   T24] hid-generic 0000:0000:0000.0001: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   28.775733][ T6684] overlayfs: upper fs needs to support d_type.
[   28.777309][ T5071] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   28.777323][ T5071] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   28.780885][ T6684] overlayfs: upper fs does not support RENAME_WHITEOUT.
[   28.780916][ T6684] overlayfs: failed to set xattr on upper
[   28.780924][ T6684] overlayfs: ...falling back to redirect_dir=nofollow.
[   28.780931][ T6684] overlayfs: ...falling back to index=off.
[   28.780938][ T6684] overlayfs: ...falling back to uuid=null.
[   28.812445][ T6684] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   28.879520][ T4348] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   28.879549][ T4348] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   28.965279][  T695] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   28.965325][  T695] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   29.061348][ T6696] binder: BINDER_SET_CONTEXT_MGR already set
[   29.061379][ T6696] binder: 6695:6696 ioctl 4018620d 20000040 returned -16
[   29.061654][ T6696] binder: 6695:6696 ioctl c0306201 200003c0 returned -14
[   29.061862][ T6696] binder: 6695:6696 got transaction to invalid handle, 1
[   29.061883][ T6696] binder: 6695:6696 cannot find target node
[   29.061895][ T6696] binder: 6695:6696 transaction call to 0:0 failed 3/29201/-22, code 0 size 112-3984 line 3232
[   29.069904][ T6638] binder: undelivered TRANSACTION_ERROR: 29201
[   29.161570][  T373] Bluetooth: hci5: Frame reassembly failed (-84)
[   29.161659][  T373] Bluetooth: hci5: Frame reassembly failed (-84)
[   29.161684][  T373] Bluetooth: hci5: Frame reassembly failed (-84)
[   29.161707][  T373] Bluetooth: hci5: Frame reassembly failed (-84)
[   29.161729][  T373] Bluetooth: hci5: Frame reassembly failed (-84)
[   29.205286][ T6707] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   29.207269][ T6707] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   29.315756][ T6672] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   29.676029][ T6672] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   29.676060][ T6672] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   29.677101][ T6672] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[   29.677111][ T6672] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[   29.677119][ T6672] usb 1-1: Manufacturer: syz
[   29.679356][ T6672] usb 1-1: config 0 descriptor??
[   29.933707][ T6715] loop3: detected capacity change from 0 to 512
[   29.936529][ T6715] EXT4-fs: Mount option(s) incompatible with ext2
[   30.189140][ T6718] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   30.198174][ T6718] netlink: 'syz.3.12': attribute type 12 has an invalid length.
[   30.198223][ T6718] netlink: 'syz.3.12': attribute type 29 has an invalid length.
[   30.198288][ T6718] netlink: 148 bytes leftover after parsing attributes in process `syz.3.12'.
[   30.198344][ T6718] netlink: 43 bytes leftover after parsing attributes in process `syz.3.12'.
[   30.198920][ T6718] Zero length message leads to an empty skb
[   30.225509][ T6572] Bluetooth: hci0: command tx timeout
[   30.225572][ T6572] Bluetooth: hci4: command tx timeout
[   30.225615][ T6572] Bluetooth: hci2: command tx timeout
[   30.225658][ T6572] Bluetooth: hci3: command tx timeout
[   30.230020][ T6582] Bluetooth: hci1: command tx timeout
[   30.815014][ T6725] loop3: detected capacity change from 0 to 1024
[   30.850951][ T6725] syz.3.14: attempt to access beyond end of device
[   30.850951][ T6725] loop3: rw=8388608, sector=33030148, nr_sectors = 2 limit=1024
[   30.853797][ T6725] Buffer I/O error on dev loop3, logical block 16515074, async page read
[   30.855082][ T6725] hfsplus: unable to mark blocks free: error -5
[   30.855099][ T6725] hfsplus: can't free extent: start 134, count 1
[   30.866972][  T373] hfsplus: b-tree write err: -5, ino 4
[   30.957253][ T6672] input: syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0002/input/input2
[   30.962373][ T6672] input: syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0002/input/input3
[   30.967420][ T6672] input: syz Touch Strip as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0002/input/input4
[   30.970831][ T6672] input: syz Dial as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0002/input/input5
[   30.975987][ T6672] uclogic 0003:256C:006D.0002: input,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.0-1/input0
[   30.995986][ T6727] loop3: detected capacity change from 0 to 40427
[   31.002360][ T6727] F2FS-fs (loop3): invalid crc value
[   31.044760][ T6727] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   31.046281][ T6727] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   31.074207][ T6727] netlink: 'syz.3.15': attribute type 1 has an invalid length.
[   31.186792][ T6672] usb 1-1: USB disconnect, device number 2
[   31.225812][   T53] Bluetooth: hci5: Opcode 0x1003 failed: -110
[   31.228003][ T6702] Bluetooth: hci0: Opcode 0x080f failed: -110
[   31.297329][ T6741] usb usb7: usbfs: process 6741 (syz.1.16) did not claim interface 0 before use
[   31.356183][ T6745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   31.357989][ T6745] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   31.881231][ T6755] random: crng reseeded on system resumption
[   31.964623][ T6749] usb 1-1: new full-speed USB device number 3 using dummy_hcd
[   31.972954][ T6761] binder: 6761 RLIMIT_NICE not set
[   31.974845][ T6761] binder: 6760:6761 ioctl c0306201 20000300 returned -11
[   31.976750][ T6761] binder: 6761 RLIMIT_NICE not set
[   31.977886][ T6761] binder: 6760:6761 ioctl c0306201 200002c0 returned -11
[   32.116388][ T6749] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   32.118202][ T6749] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[   32.121686][ T6749] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   32.121877][ T6749] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   32.121886][ T6749] usb 1-1: Product: syz
[   32.121893][ T6749] usb 1-1: Manufacturer: syz
[   32.121900][ T6749] usb 1-1: SerialNumber: syz
[   32.200547][ T6769] 
[   32.200959][ T6769] =====================================================
[   32.202043][ T6769] WARNING: HARDIRQ-safe -> HARDIRQ-unsafe lock order detected
[   32.203076][ T6769] syzkaller #0 Not tainted
[   32.203707][ T6769] -----------------------------------------------------
[   32.204692][ T6769] syz.2.28/6769 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire:
[   32.205823][ T6769] ffff800097626150 (&p->sequence){+.-.}-{0:0}, at: __fprop_add_percpu_max+0x130/0x1f4
[   32.207296][ T6769] 
[   32.207296][ T6769] and this task is already holding:
[   32.208397][ T6769] ffff0000f7d01040 (&xa->xa_lock#10){..-.}-{3:3}, at: __folio_end_writeback+0x10c/0x6f8
[   32.209946][ T6769] which would create a new lock dependency:
[   32.210890][ T6769]  (&xa->xa_lock#10){..-.}-{3:3} -> (&p->sequence){+.-.}-{0:0}
[   32.212054][ T6769] 
[   32.212054][ T6769] but this new dependency connects a HARDIRQ-irq-safe lock:
[   32.213619][ T6769]  (&fq->mq_flush_lock){-.-.}-{3:3}
[   32.213641][ T6769] 
[   32.213641][ T6769] ... which became HARDIRQ-irq-safe at:
[   32.215692][ T6769]   lock_acquire+0x140/0x2e0
[   32.216385][ T6769]   _raw_spin_lock_irqsave+0x5c/0x7c
[   32.217277][ T6769]   flush_end_io+0xb4/0xd68
[   32.218013][ T6769]   __blk_mq_end_request+0x37c/0x57c
[   32.218881][ T6769]   blk_mq_end_request+0x68/0x88
[   32.219726][ T6769]   nvme_complete_rq+0x150/0x464
[   32.220472][ T6769]   nvme_poll_cq+0x644/0x1018
[   32.221227][ T6769]   nvme_irq+0x90/0x240
[   32.221890][ T6769]   __handle_irq_event_percpu+0x20c/0x8e4
[   32.222787][ T6769]   handle_irq_event+0x9c/0x1d0
[   32.223528][ T6769]   handle_fasteoi_irq+0x328/0x8d8
[   32.224312][ T6769]   generic_handle_domain_irq+0xe0/0x140
[   32.225159][ T6769]   gic_handle_irq+0x6c/0x18c
[   32.225977][ T6769]   call_on_irq_stack+0x30/0x48
[   32.226791][ T6769]   do_interrupt_handler+0xd4/0x138
[   32.227668][ T6769]   el0_interrupt+0x6c/0x2bc
[   32.228428][ T6769]   __el0_irq_handler_common+0x18/0x24
[   32.229373][ T6769]   el0t_64_irq_handler+0x10/0x1c
[   32.230235][ T6769]   el0t_64_irq+0x198/0x19c
[   32.230940][ T6769] 
[   32.230940][ T6769] to a HARDIRQ-irq-unsafe lock:
[   32.232099][ T6769]  (&p->sequence){+.-.}-{0:0}
[   32.232125][ T6769] 
[   32.232125][ T6769] ... which became HARDIRQ-irq-unsafe at:
[   32.234101][ T6769] ...
[   32.234109][ T6769]   lock_acquire+0x140/0x2e0
[   32.235254][ T6769]   fprop_new_period+0x3b8/0x718
[   32.236117][ T6769]   writeout_period+0x94/0x11c
[   32.236911][ T6769]   call_timer_fn+0x19c/0x814
[   32.237706][ T6769]   __run_timer_base+0x51c/0x76c
[   32.238422][ T6769]   run_timer_softirq+0x11c/0x194
[   32.239209][ T6769]   handle_softirqs+0x31c/0xc88
[   32.239937][ T6769]   __do_softirq+0x14/0x20
[   32.240633][ T6769]   ____do_softirq+0x14/0x20
[   32.241346][ T6769]   call_on_irq_stack+0x30/0x48
[   32.242090][ T6769]   do_softirq_own_stack+0x20/0x2c
[   32.242864][ T6769]   __irq_exit_rcu+0x1b0/0x478
[   32.243638][ T6769]   irq_exit_rcu+0x14/0x84
[   32.244324][ T6769]   el1_interrupt+0x40/0x60
[   32.245014][ T6769]   el1h_64_irq_handler+0x18/0x24
[   32.245859][ T6769]   el1h_64_irq+0x6c/0x70
[   32.246498][ T6769]   lock_acquire+0x16c/0x2e0
[   32.247229][ T6769]   __might_fault+0xc4/0x124
[   32.247997][ T6769]   _inline_copy_from_user+0x3c/0x180
[   32.248857][ T6769]   ___sys_recvmsg+0x11c/0x45c
[   32.249593][ T6769]   do_recvmmsg+0x294/0x7cc
[   32.250268][ T6769]   __arm64_sys_recvmmsg+0x17c/0x238
[   32.251059][ T6769]   invoke_syscall+0x98/0x254
[   32.251700][ T6769]   el0_svc_common+0xe8/0x23c
[   32.252435][ T6769]   do_el0_svc+0x48/0x58
[   32.253056][ T6769]   el0_svc+0x5c/0x26c
[   32.253676][ T6769]   el0t_64_sync_handler+0x84/0x12c
[   32.254581][ T6769]   el0t_64_sync+0x198/0x19c
[   32.255362][ T6769] 
[   32.255362][ T6769] other info that might help us debug this:
[   32.255362][ T6769] 
[   32.257051][ T6769] Chain exists of:
[   32.257051][ T6769]   &fq->mq_flush_lock --> &xa->xa_lock#10 --> &p->sequence
[   32.257051][ T6769] 
[   32.259230][ T6769]  Possible interrupt unsafe locking scenario:
[   32.259230][ T6769] 
[   32.260526][ T6769]        CPU0                    CPU1
[   32.261349][ T6769]        ----                    ----
[   32.262160][ T6769]   lock(&p->sequence);
[   32.262803][ T6769]                                local_irq_disable();
[   32.263777][ T6769]                                lock(&fq->mq_flush_lock);
[   32.264917][ T6769]                                lock(&xa->xa_lock#10);
[   32.265987][ T6769]   <Interrupt>
[   32.266503][ T6769]     lock(&fq->mq_flush_lock);
[   32.267327][ T6769] 
[   32.267327][ T6769]  *** DEADLOCK ***
[   32.267327][ T6769] 
[   32.268609][ T6769] 5 locks held by syz.2.28/6769:
[   32.269377][ T6769]  #0: ffff0000c9281cf8 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x1fc/0x2a0
[   32.270838][ T6769]  #1: ffff0000ce3ea420 (sb_writers#14){.+.+}-{0:0}, at: vfs_writev+0x21c/0x7cc
[   32.272244][ T6769]  #2: ffff0000f7d00f48 (&sb->s_type->i_mutex_key#27){+.+.}-{4:4}, at: fuse_fsync+0xf0/0x2b8
[   32.273886][ T6769]  #3: ffff0000f7d01438 (&fi->lock){+.+.}-{3:3}, at: fuse_iomap_writeback_range+0x674/0x149c
[   32.275483][ T6769]  #4: ffff0000f7d01040 (&xa->xa_lock#10){..-.}-{3:3}, at: __folio_end_writeback+0x10c/0x6f8
[   32.277207][ T6769] 
[   32.277207][ T6769] the dependencies between HARDIRQ-irq-safe lock and the holding lock:
[   32.278853][ T6769]  -> (&fq->mq_flush_lock){-.-.}-{3:3} {
[   32.279753][ T6769]     IN-HARDIRQ-W at:
[   32.280405][ T6769]                       lock_acquire+0x140/0x2e0
[   32.281364][ T6769]                       _raw_spin_lock_irqsave+0x5c/0x7c
[   32.282410][ T6769]                       flush_end_io+0xb4/0xd68
[   32.283302][ T6769]                       __blk_mq_end_request+0x37c/0x57c
[   32.284390][ T6769]                       blk_mq_end_request+0x68/0x88
[   32.285425][ T6769]                       nvme_complete_rq+0x150/0x464
[   32.286466][ T6769]                       nvme_poll_cq+0x644/0x1018
[   32.287478][ T6769]                       nvme_irq+0x90/0x240
[   32.288428][ T6769]                       __handle_irq_event_percpu+0x20c/0x8e4
[   32.289518][ T6769]                       handle_irq_event+0x9c/0x1d0
[   32.290545][ T6769]                       handle_fasteoi_irq+0x328/0x8d8
[   32.291632][ T6769]                       generic_handle_domain_irq+0xe0/0x140
[   32.292783][ T6769]                       gic_handle_irq+0x6c/0x18c
[   32.293770][ T6769]                       call_on_irq_stack+0x30/0x48
[   32.294806][ T6769]                       do_interrupt_handler+0xd4/0x138
[   32.295914][ T6769]                       el0_interrupt+0x6c/0x2bc
[   32.296886][ T6769]                       __el0_irq_handler_common+0x18/0x24
[   32.297979][ T6769]                       el0t_64_irq_handler+0x10/0x1c
[   32.299025][ T6769]                       el0t_64_irq+0x198/0x19c
[   32.299952][ T6769]     IN-SOFTIRQ-W at:
[   32.300592][ T6769]                       lock_acquire+0x140/0x2e0
[   32.301584][ T6769]                       _raw_spin_lock_irqsave+0x5c/0x7c
[   32.302612][ T6769]                       mq_flush_data_end_io+0x270/0x480
[   32.303783][ T6769]                       __blk_mq_end_request+0x37c/0x57c
[   32.304918][ T6769]                       blk_mq_end_request+0x68/0x88
[   32.306029][ T6769]                       nvme_complete_rq+0x150/0x464
[   32.307029][ T6769]                       nvme_poll_cq+0x644/0x1018
[   32.307947][ T6769]                       nvme_irq+0x90/0x240
[   32.308764][ T6769]                       __handle_irq_event_percpu+0x20c/0x8e4
[   32.309953][ T6769]                       handle_irq_event+0x9c/0x1d0
[   32.310911][ T6769]                       handle_fasteoi_irq+0x328/0x8d8
[   32.311937][ T6769]                       generic_handle_domain_irq+0xe0/0x140
[   32.313052][ T6769]                       gic_handle_irq+0x6c/0x18c
[   32.313982][ T6769]                       do_interrupt_handler+0xe0/0x138
[   32.315065][ T6769]                       el1_interrupt+0x3c/0x60
[   32.315972][ T6769]                       el1h_64_irq_handler+0x18/0x24
[   32.316996][ T6769]                       el1h_64_irq+0x6c/0x70
[   32.317864][ T6769]                       _raw_spin_unlock_irqrestore+0x44/0x98
[   32.318875][ T6769]                       dummy_timer+0x3358/0x348c
[   32.319818][ T6769]                       __hrtimer_run_queues+0x404/0xb78
[   32.320899][ T6769]                       hrtimer_run_softirq+0x160/0x400
[   32.321950][ T6769]                       handle_softirqs+0x31c/0xc88
[   32.322990][ T6769]                       __do_softirq+0x14/0x20
[   32.323913][ T6769]                       ____do_softirq+0x14/0x20
[   32.324883][ T6769]                       call_on_irq_stack+0x30/0x48
[   32.325870][ T6769]                       do_softirq_own_stack+0x20/0x2c
[   32.326955][ T6769]                       __irq_exit_rcu+0x1b0/0x478
[   32.328047][ T6769]                       irq_exit_rcu+0x14/0x84
[   32.328905][ T6769]                       el1_interrupt+0x40/0x60
[   32.329796][ T6769]                       el1h_64_irq_handler+0x18/0x24
[   32.330798][ T6769]                       el1h_64_irq+0x6c/0x70
[   32.331673][ T6769]                       arch_local_irq_enable+0x8/0xc
[   32.332669][ T6769]                       do_idle+0x1e0/0x474
[   32.333573][ T6769]                       cpu_startup_entry+0x5c/0x74
[   32.334527][ T6769]                       rest_init+0x2d8/0x2f4
[   32.335410][ T6769]                       start_kernel+0x38c/0x3dc
[   32.336426][ T6769]                       __primary_switched+0x8c/0x94
[   32.337442][ T6769]     INITIAL USE at:
[   32.337999][ T6769]                      lock_acquire+0x140/0x2e0
[   32.338917][ T6769]                      _raw_spin_lock_irq+0x58/0x70
[   32.339928][ T6769]                      blk_insert_flush+0x360/0x4b8
[   32.340904][ T6769]                      blk_mq_submit_bio+0x1668/0x21e8
[   32.341946][ T6769]                      __submit_bio+0x1d8/0x4d8
[   32.342891][ T6769]                      submit_bio_noacct_nocheck+0x274/0x990
[   32.344041][ T6769]                      submit_bio_noacct+0xdc0/0x186c
[   32.345106][ T6769]                      submit_bio+0x3b4/0x550
[   32.345955][ T6769]                      submit_bio_wait+0x104/0x208
[   32.346920][ T6769]                      blkdev_issue_flush+0xb4/0x100
[   32.347950][ T6769]                      ext4_init_inode_table+0x420/0x780
[   32.348951][ T6769]                      ext4_lazyinit_thread+0x6dc/0x1730
[   32.349933][ T6769]                      kthread+0x5fc/0x75c
[   32.350759][ T6769]                      ret_from_fork+0x10/0x20
[   32.351676][ T6769]   }
[   32.352041][ T6769]   ... key      at: [<ffff8000977c9400>] blk_alloc_flush_queue.__key+0x0/0x20
[   32.353479][ T6769] -> (&xa->xa_lock#10){..-.}-{3:3} {
[   32.354352][ T6769]    IN-SOFTIRQ-W at:
[   32.354998][ T6769]                     lock_acquire+0x140/0x2e0
[   32.355947][ T6769]                     _raw_spin_lock_irqsave+0x5c/0x7c
[   32.357017][ T6769]                     __folio_end_writeback+0x10c/0x6f8
[   32.358076][ T6769]                     folio_end_writeback_no_dropbehind+0xd0/0x204
[   32.359250][ T6769]                     folio_end_writeback+0xd8/0x248
[   32.360248][ T6769]                     mpage_write_end_io+0x164/0x224
[   32.361262][ T6769]                     bio_endio+0x8d4/0x910
[   32.362206][ T6769]                     blk_update_request+0x474/0xba8
[   32.363227][ T6769]                     blk_mq_end_request+0x54/0x88
[   32.364237][ T6769]                     lo_complete_rq+0x124/0x274
[   32.365273][ T6769]                     blk_done_softirq+0x11c/0x168
[   32.366286][ T6769]                     handle_softirqs+0x31c/0xc88
[   32.367264][ T6769]                     run_ksoftirqd+0x70/0xc0
[   32.368190][ T6769]                     smpboot_thread_fn+0x4d8/0x9cc
[   32.369166][ T6769]                     kthread+0x5fc/0x75c
[   32.370044][ T6769]                     ret_from_fork+0x10/0x20
[   32.370965][ T6769]    INITIAL USE at:
[   32.371573][ T6769]                    lock_acquire+0x140/0x2e0
[   32.372525][ T6769]                    _raw_spin_lock_irq+0x58/0x70
[   32.373599][ T6769]                    shmem_add_to_page_cache+0x564/0xa24
[   32.374654][ T6769]                    shmem_alloc_and_add_folio+0x758/0x10c4
[   32.375754][ T6769]                    shmem_get_folio_gfp+0x4d4/0x159c
[   32.376788][ T6769]                    shmem_read_folio_gfp+0x8c/0xf0
[   32.377763][ T6769]                    drm_gem_get_pages+0x1cc/0x7c0
[   32.378767][ T6769]                    drm_gem_shmem_get_pages_locked+0x1d4/0x364
[   32.379956][ T6769]                    drm_gem_shmem_pin_locked+0x1f8/0x410
[   32.381025][ T6769]                    drm_gem_shmem_vmap_locked+0x3cc/0x658
[   32.382085][ T6769]                    drm_gem_shmem_object_vmap+0x28/0x38
[   32.383150][ T6769]                    drm_gem_vmap+0x104/0x1d8
[   32.384023][ T6769]                    drm_client_buffer_vmap+0x68/0xb0
[   32.385071][ T6769]                    drm_fbdev_shmem_driver_fbdev_probe+0x1f4/0x700
[   32.386287][ T6769]                    __drm_fb_helper_initial_config_and_unlock+0x108c/0x1728
[   32.387590][ T6769]                    drm_fb_helper_initial_config+0x3c/0x58
[   32.388687][ T6769]                    drm_fbdev_client_hotplug+0x154/0x22c
[   32.389719][ T6769]                    drm_client_register+0x13c/0x1d4
[   32.390727][ T6769]                    drm_fbdev_client_setup+0x194/0x3d0
[   32.391800][ T6769]                    drm_client_setup+0x114/0x228
[   32.392736][ T6769]                    vkms_create+0x370/0x420
[   32.393611][ T6769]                    vkms_init+0x64/0x9c
[   32.394450][ T6769]                    do_one_initcall+0x248/0x9b4
[   32.395349][ T6769]                    do_initcall_level+0x128/0x1c4
[   32.396263][ T6769]                    do_initcalls+0x70/0xd0
[   32.397139][ T6769]                    do_basic_setup+0x78/0x8c
[   32.398119][ T6769]                    kernel_init_freeable+0x268/0x39c
[   32.399161][ T6769]                    kernel_init+0x24/0x1dc
[   32.400054][ T6769]                    ret_from_fork+0x10/0x20
[   32.400938][ T6769]  }
[   32.401306][ T6769]  ... key      at: [<ffff80009764a620>] xa_init_flags.__key+0x0/0x20
[   32.402542][ T6769]  ... acquired at:
[   32.403112][ T6769]    _raw_spin_lock_irqsave+0x5c/0x7c
[   32.403914][ T6769]    __folio_end_writeback+0x10c/0x6f8
[   32.404733][ T6769]    folio_end_writeback_no_dropbehind+0xd0/0x204
[   32.405704][ T6769]    folio_end_writeback+0xd8/0x248
[   32.406454][ T6769]    f2fs_write_end_io+0x6c0/0xa78
[   32.407234][ T6769]    bio_endio+0x8d4/0x910
[   32.407912][ T6769]    blk_update_request+0x474/0xba8
[   32.408733][ T6769]    blk_mq_end_request+0x54/0x88
[   32.409480][ T6769]    blk_flush_complete_seq+0x57c/0xad4
[   32.410329][ T6769]    flush_end_io+0x9e8/0xd68
[   32.410998][ T6769]    __blk_mq_end_request+0x37c/0x57c
[   32.411829][ T6769]    blk_mq_end_request+0x68/0x88
[   32.412584][ T6769]    lo_complete_rq+0x124/0x274
[   32.413374][ T6769]    blk_done_softirq+0x11c/0x168
[   32.414183][ T6769]    handle_softirqs+0x31c/0xc88
[   32.414895][ T6769]    run_ksoftirqd+0x70/0xc0
[   32.415565][ T6769]    smpboot_thread_fn+0x4d8/0x9cc
[   32.416326][ T6769]    kthread+0x5fc/0x75c
[   32.416965][ T6769]    ret_from_fork+0x10/0x20
[   32.417676][ T6769] 
[   32.418000][ T6769] 
[   32.418000][ T6769] the dependencies between the lock to be acquired
[   32.418010][ T6769]  and HARDIRQ-irq-unsafe lock:
[   32.420050][ T6769] -> (&p->sequence){+.-.}-{0:0} {
[   32.420834][ T6769]    HARDIRQ-ON-W at:
[   32.421427][ T6769]                     lock_acquire+0x140/0x2e0
[   32.422288][ T6769]                     fprop_new_period+0x3b8/0x718
[   32.423289][ T6769]                     writeout_period+0x94/0x11c
[   32.424246][ T6769]                     call_timer_fn+0x19c/0x814
[   32.425177][ T6769]                     __run_timer_base+0x51c/0x76c
[   32.426150][ T6769]                     run_timer_softirq+0x11c/0x194
[   32.427154][ T6769]                     handle_softirqs+0x31c/0xc88
[   32.428147][ T6769]                     __do_softirq+0x14/0x20
[   32.429034][ T6769]                     ____do_softirq+0x14/0x20
[   32.429929][ T6769]                     call_on_irq_stack+0x30/0x48
[   32.430871][ T6769]                     do_softirq_own_stack+0x20/0x2c
[   32.431959][ T6769]                     __irq_exit_rcu+0x1b0/0x478
[   32.432900][ T6769]                     irq_exit_rcu+0x14/0x84
[   32.434076][ T6769]                     el1_interrupt+0x40/0x60
[   32.434975][ T6769]                     el1h_64_irq_handler+0x18/0x24
[   32.435989][ T6769]                     el1h_64_irq+0x6c/0x70
[   32.436774][ T6769]                     lock_acquire+0x16c/0x2e0
[   32.437731][ T6769]                     __might_fault+0xc4/0x124
[   32.438672][ T6769]                     _inline_copy_from_user+0x3c/0x180
[   32.439765][ T6769]                     ___sys_recvmsg+0x11c/0x45c
[   32.440781][ T6769]                     do_recvmmsg+0x294/0x7cc
[   32.441725][ T6769]                     __arm64_sys_recvmmsg+0x17c/0x238
[   32.442729][ T6769]                     invoke_syscall+0x98/0x254
[   32.443697][ T6769]                     el0_svc_common+0xe8/0x23c
[   32.444636][ T6769]                     do_el0_svc+0x48/0x58
[   32.445486][ T6769]                     el0_svc+0x5c/0x26c
[   32.446302][ T6769]                     el0t_64_sync_handler+0x84/0x12c
[   32.447335][ T6769]                     el0t_64_sync+0x198/0x19c
[   32.448218][ T6769]    IN-SOFTIRQ-W at:
[   32.448800][ T6769]                     lock_acquire+0x140/0x2e0
[   32.449767][ T6769]                     fprop_new_period+0x3b8/0x718
[   32.450794][ T6769]                     writeout_period+0x94/0x11c
[   32.451729][ T6769]                     call_timer_fn+0x19c/0x814
[   32.452615][ T6769]                     __run_timer_base+0x51c/0x76c
[   32.453551][ T6769]                     run_timer_softirq+0x11c/0x194
[   32.454510][ T6769]                     handle_softirqs+0x31c/0xc88
[   32.455429][ T6769]                     __do_softirq+0x14/0x20
[   32.456310][ T6769]                     ____do_softirq+0x14/0x20
[   32.457278][ T6769]                     call_on_irq_stack+0x30/0x48
[   32.458156][ T6769]                     do_softirq_own_stack+0x20/0x2c
[   32.459069][ T6769]                     __irq_exit_rcu+0x1b0/0x478
[   32.459925][ T6769]                     irq_exit_rcu+0x14/0x84
[   32.460805][ T6769]                     el1_interrupt+0x40/0x60
[   32.461672][ T6769]                     el1h_64_irq_handler+0x18/0x24
[   32.462681][ T6769]                     el1h_64_irq+0x6c/0x70
[   32.463573][ T6769]                     lock_acquire+0x16c/0x2e0
[   32.464531][ T6769]                     __might_fault+0xc4/0x124
[   32.465412][ T6769]                     _inline_copy_from_user+0x3c/0x180
[   32.466498][ T6769]                     ___sys_recvmsg+0x11c/0x45c
[   32.467435][ T6769]                     do_recvmmsg+0x294/0x7cc
[   32.468384][ T6769]                     __arm64_sys_recvmmsg+0x17c/0x238
[   32.469455][ T6769]                     invoke_syscall+0x98/0x254
[   32.470463][ T6769]                     el0_svc_common+0xe8/0x23c
[   32.471530][ T6769]                     do_el0_svc+0x48/0x58
[   32.472360][ T6769]                     el0_svc+0x5c/0x26c
[   32.473165][ T6769]                     el0t_64_sync_handler+0x84/0x12c
[   32.474203][ T6769]                     el0t_64_sync+0x198/0x19c
[   32.475173][ T6769]    INITIAL USE at:
[   32.475799][ T6769]                    lock_acquire+0x140/0x2e0
[   32.476814][ T6769]                    fprop_new_period+0x3b8/0x718
[   32.477814][ T6769]                    writeout_period+0x94/0x11c
[   32.478705][ T6769]                    call_timer_fn+0x19c/0x814
[   32.479576][ T6769]                    __run_timer_base+0x51c/0x76c
[   32.480481][ T6769]                    run_timer_softirq+0x11c/0x194
[   32.481479][ T6769]                    handle_softirqs+0x31c/0xc88
[   32.482386][ T6769]                    __do_softirq+0x14/0x20
[   32.483278][ T6769]                    ____do_softirq+0x14/0x20
[   32.484249][ T6769]                    call_on_irq_stack+0x30/0x48
[   32.485239][ T6769]                    do_softirq_own_stack+0x20/0x2c
[   32.486250][ T6769]                    __irq_exit_rcu+0x1b0/0x478
[   32.487204][ T6769]                    irq_exit_rcu+0x14/0x84
[   32.488093][ T6769]                    el1_interrupt+0x40/0x60
[   32.489066][ T6769]                    el1h_64_irq_handler+0x18/0x24
[   32.490134][ T6769]                    el1h_64_irq+0x6c/0x70
[   32.491044][ T6769]                    lock_acquire+0x16c/0x2e0
[   32.491949][ T6769]                    __might_fault+0xc4/0x124
[   32.492876][ T6769]                    _inline_copy_from_user+0x3c/0x180
[   32.493873][ T6769]                    ___sys_recvmsg+0x11c/0x45c
[   32.494770][ T6769]                    do_recvmmsg+0x294/0x7cc
[   32.495632][ T6769]                    __arm64_sys_recvmmsg+0x17c/0x238
[   32.496610][ T6769]                    invoke_syscall+0x98/0x254
[   32.497497][ T6769]                    el0_svc_common+0xe8/0x23c
[   32.498380][ T6769]                    do_el0_svc+0x48/0x58
[   32.499203][ T6769]                    el0_svc+0x5c/0x26c
[   32.500038][ T6769]                    el0t_64_sync_handler+0x84/0x12c
[   32.501049][ T6769]                    el0t_64_sync+0x198/0x19c
[   32.501961][ T6769]    INITIAL READ USE at:
[   32.502616][ T6769]                         lock_acquire+0x140/0x2e0
[   32.503557][ T6769]                         fprop_fraction_percpu+0xac/0x270
[   32.504590][ T6769]                         __wb_calc_thresh+0xfc/0x3b0
[   32.505541][ T6769]                         domain_over_bg_thresh+0xb8/0x1f0
[   32.506566][ T6769]                         wb_over_bg_thresh+0xf8/0x17c
[   32.507546][ T6769]                         wb_workfn+0xa30/0xdc0
[   32.508461][ T6769]                         process_one_work+0x7c0/0x1558
[   32.509497][ T6769]                         worker_thread+0x958/0xed8
[   32.510480][ T6769]                         kthread+0x5fc/0x75c
[   32.511328][ T6769]                         ret_from_fork+0x10/0x20
[   32.512257][ T6769]  }
[   32.512616][ T6769]  ... key      at: [<ffff800097b9a340>] fprop_global_init.__key.1+0x0/0x20
[   32.513871][ T6769]  ... acquired at:
[   32.514404][ T6769]    fprop_fraction_percpu+0xf0/0x270
[   32.515179][ T6769]    __fprop_add_percpu_max+0x130/0x1f4
[   32.516000][ T6769]    __wb_writeout_add+0xbc/0x27c
[   32.516720][ T6769]    __folio_end_writeback+0x380/0x6f8
[   32.517557][ T6769]    folio_end_writeback_no_dropbehind+0xd0/0x204
[   32.518522][ T6769]    folio_end_writeback+0xd8/0x248
[   32.519301][ T6769]    iomap_finish_folio_write+0x1c0/0x2a4
[   32.520140][ T6769]    fuse_flush_writepages+0x578/0x788
[   32.520930][ T6769]    fuse_iomap_writeback_range+0x744/0x149c
[   32.521782][ T6769]    iomap_writeback_folio+0x1064/0x1fc4
[   32.522605][ T6769]    iomap_writepages+0x128/0x25c
[   32.523324][ T6769]    fuse_writepages+0x208/0x2bc
[   32.524033][ T6769]    do_writepages+0x270/0x468
[   32.524710][ T6769]    file_write_and_wait_range+0x1d0/0x2c4
[   32.525550][ T6769]    fuse_fsync+0x100/0x2b8
[   32.526241][ T6769]    vfs_fsync_range+0x160/0x19c
[   32.526990][ T6769]    fuse_file_write_iter+0xa20/0xb88
[   32.527796][ T6769]    do_iter_readv_writev+0x4bc/0x720
[   32.528582][ T6769]    vfs_writev+0x29c/0x7cc
[   32.529255][ T6769]    do_writev+0x128/0x290
[   32.529928][ T6769]    __arm64_sys_writev+0x80/0x94
[   32.530667][ T6769]    invoke_syscall+0x98/0x254
[   32.531358][ T6769]    el0_svc_common+0xe8/0x23c
[   32.532049][ T6769]    do_el0_svc+0x48/0x58
[   32.532680][ T6769]    el0_svc+0x5c/0x26c
[   32.533287][ T6769]    el0t_64_sync_handler+0x84/0x12c
[   32.534053][ T6769]    el0t_64_sync+0x198/0x19c
[   32.534738][ T6769] 
[   32.535101][ T6769] 
[   32.535101][ T6769] stack backtrace:
[   32.535970][ T6769] CPU: 1 UID: 0 PID: 6769 Comm: syz.2.28 Not tainted syzkaller #0 PREEMPT 
[   32.537302][ T6769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/03/2025
[   32.538917][ T6769] Call trace:
[   32.539388][ T6769]  show_stack+0x2c/0x3c (C)
[   32.540057][ T6769]  __dump_stack+0x30/0x40
[   32.540699][ T6769]  dump_stack_lvl+0xd8/0x12c
[   32.541381][ T6769]  dump_stack+0x1c/0x28
[   32.541995][ T6769]  __lock_acquire+0x3058/0x30a4
[   32.542703][ T6769]  lock_acquire+0x140/0x2e0
[   32.543375][ T6769]  fprop_fraction_percpu+0xf0/0x270
[   32.544120][ T6769]  __fprop_add_percpu_max+0x130/0x1f4
[   32.544885][ T6769]  __wb_writeout_add+0xbc/0x27c
[   32.545601][ T6769]  __folio_end_writeback+0x380/0x6f8
[   32.546414][ T6769]  folio_end_writeback_no_dropbehind+0xd0/0x204
[   32.547372][ T6769]  folio_end_writeback+0xd8/0x248
[   32.548124][ T6769]  iomap_finish_folio_write+0x1c0/0x2a4
[   32.548914][ T6769]  fuse_flush_writepages+0x578/0x788
[   32.549690][ T6769]  fuse_iomap_writeback_range+0x744/0x149c
[   32.550504][ T6769]  iomap_writeback_folio+0x1064/0x1fc4
[   32.551306][ T6769]  iomap_writepages+0x128/0x25c
[   32.552023][ T6769]  fuse_writepages+0x208/0x2bc
[   32.552708][ T6769]  do_writepages+0x270/0x468
[   32.553394][ T6769]  file_write_and_wait_range+0x1d0/0x2c4
[   32.554276][ T6769]  fuse_fsync+0x100/0x2b8
[   32.554934][ T6769]  vfs_fsync_range+0x160/0x19c
[   32.555635][ T6769]  fuse_file_write_iter+0xa20/0xb88
[   32.556433][ T6769]  do_iter_readv_writev+0x4bc/0x720
[   32.557181][ T6769]  vfs_writev+0x29c/0x7cc
[   32.557813][ T6769]  do_writev+0x128/0x290
[   32.558420][ T6769]  __arm64_sys_writev+0x80/0x94
[   32.559114][ T6769]  invoke_syscall+0x98/0x254
[   32.559776][ T6769]  el0_svc_common+0xe8/0x23c
[   32.560419][ T6769]  do_el0_svc+0x48/0x58
[   32.561023][ T6769]  el0_svc+0x5c/0x26c
[   32.561588][ T6769]  el0t_64_sync_handler+0x84/0x12c
[   32.562303][ T6769]  el0t_64_sync+0x198/0x19c
[   32.563130][   T53] Bluetooth: hci3: command tx timeout
[   32.563384][   T53] Bluetooth: hci2: command tx timeout
[   32.563403][   T53] Bluetooth: hci4: command tx timeout
[   32.563433][   T53] Bluetooth: hci0: command 0x040f tx timeout
[   32.563512][ T6582] Bluetooth: hci1: command tx timeout
[   32.777435][ T6749] usb 1-1: 0:2 : does not exist
[   33.182303][ T6713] usb 1-1: USB disconnect, device number 3
[   34.584571][ T6582] Bluetooth: hci0: command 0x040f tx timeout
[   34.584610][ T6582] Bluetooth: hci4: command tx timeout
[   34.584616][   T53] Bluetooth: hci2: command tx timeout
[   34.584986][ T6572] Bluetooth: hci3: command tx timeout
[   34.585182][ T6583] Bluetooth: hci1: command tx timeout
[   36.674547][ T6583] Bluetooth: hci0: command 0x040f tx timeout