last executing test programs:

2m52.844391976s ago: executing program 1 (id=96):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc)
r1 = syz_open_dev$sndpcmp(&(0x7f0000000500), 0xb, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r1, 0xc2604110, &(0x7f0000000000)={0x1, [[0x7fff, 0x40, 0x0, 0xd, 0x0, 0x0, 0x1, 0xfffffffc], [0x2, 0x0, 0x0, 0x0, 0x1, 0x5, 0x4, 0x800], [0x200000, 0x5, 0x0, 0x7, 0xfffffffe, 0xa, 0xfffffffe]], '\x00', [{0x7}, {0x3}, {0xffffffff, 0xa40}, {0x0, 0x1}, {0xb07, 0x6}, {0xfffffffc, 0x4}, {0x20004, 0x8}, {0x9, 0xe595}, {0x4, 0x200000}, {0x164, 0xffff}, {0x8, 0x1}], '\x00', 0x80000001, 0x0, 0x0, 0x2, 0x0, 0x35})
r2 = openat$fb0(0xffffffffffffff9c, 0x0, 0x1, 0x0)
ioctl$FBIOGET_CON2FBMAP(r2, 0x460f, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000005580)=""/102392, 0x18ff8)
setresuid(0xee00, 0x0, 0xee00)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000340), &(0x7f00000001c0)=0xc)
sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x2a, 0x107, 0xfffffffc, 0x0, {0x5, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000)
bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f00000002c0)=0x240000, 0x4)
r5 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0)
r6 = creat(&(0x7f0000000040)='./file0\x00', 0x125)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x1, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r5}})

2m51.831245787s ago: executing program 1 (id=101):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x18}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000a80)=0x2)
syz_mount_image$xfs(&(0x7f0000000300), &(0x7f0000000000)='./file1\x00', 0x2200010, &(0x7f0000000200)={[{@grpquota}]}, 0x1, 0xb985, &(0x7f0000000ac0)="$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")
r1 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
clock_gettime(0x2, &(0x7f0000000500))
syz_mount_image$fuse(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_fuse_handle_req(r1, &(0x7f0000000000)="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", 0x2000, &(0x7f0000004b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000022c0)={0x20, 0x0, 0x7, {0x0, 0x11}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x204c83, 0x0)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/sysvipc/msg\x00', 0x0, 0x0)
read$dsp(r5, &(0x7f000000c480)=""/213, 0xf5)
lchown(&(0x7f00000001c0)='./file0\x00', 0xee00, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0)
close(r6)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0))
name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000240), 0x1000)

2m49.142513408s ago: executing program 1 (id=108):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x7)
r3 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x2182, 0x0)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0)
sendfile(r3, r4, 0x0, 0x20000023896)
socket$inet(0x2, 0x2, 0x0)
setrlimit(0xa, &(0x7f0000000840)={0x400, 0xfff})
madvise(&(0x7f0000074000/0x2000)=nil, 0x2000, 0x0)
getpid()
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCPKT(r5, 0x5420, &(0x7f0000000000)=0x6)
ioctl$TIOCSSOFTCAR(r5, 0x541a, &(0x7f00000000c0)=0x7)
socket(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff)
open_tree(r4, 0x0, 0x80100)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = openat$cgroup_int(r6, &(0x7f0000000040)='cpuset.sched_load_balance\x00', 0x2, 0x0)
write$cgroup_int(r7, &(0x7f00000000c0)=0x100000000, 0x12)
syz_read_part_table(0x4030, &(0x7f0000004040)="$eJzszjFKw3AYxuE3avCPZBHchGAQHCVuTrlFLpAzODuYmziGHqDH6wFaKB0aCH2e9fte+IVN2k+75yRvXea+T0qShxNv/Vfqp3KXJsnP8Xlc1mgFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2bXrN/Dvku0nKY5K/+9RDW+Ul6T7Pz8dljUgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Kb9v2ce2iol6T4un4/LNaIAAAAAAAAAAAA4sAMHAgAAAABA/q+NUFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYUdOBAAAAAAAPJ/bYSqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoq7MABCQAAAICg/6/bESgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwUgAAAP//1SYMTA==")

2m46.472127819s ago: executing program 1 (id=112):
r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x101440, 0x0)
syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='./file0\x00', 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="6e6f626172726965722c706172743d3078303030303030303030303030303030392c756d61736b3d30303030303030303030303030303030343030302c626172726965722c747970653df268d6512c6e6c733d69736f383835392d312c756d61736b3d30303030303030303030303030303030303030303030372c00000000"], 0x3, 0x6d5, &(0x7f0000001880)="$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")
getdents(0xffffffffffffffff, 0xfffffffffffffffd, 0xbb)
ioctl$TIOCSERGETLSR(r0, 0x5459, 0x0)
ioctl$TUNGETIFF(0xffffffffffffffff, 0x800454d2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0)
r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
fcntl$setstatus(r1, 0x4, 0x6000)
io_setup(0x1ff, &(0x7f00000001c0)=<r2=>0x0)
ftruncate(r1, 0x81fe)
io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x4000, 0xa00}])

2m45.217704445s ago: executing program 1 (id=118):
socket$vsock_stream(0x28, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
syz_open_dev$sndmidi(0x0, 0x2, 0x141102)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000000206010700000000000000000000000014000300686173683a69702c706f72742c6970000900020073797a31000000000500010007000000050005000a000000050004"], 0x4c}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0)

2m42.770913542s ago: executing program 1 (id=123):
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x25, 0x5586, &(0x7f00000079c0)="$eJzs3EtvG2UXAOAzTtP71y9CLNh1pAopkWqrTi+CFQVacRGtKi4LVuDYruXW9kSx44SsumCJWPBPEEisWPIbWMASdogFiB0SyDMTaNoGSuM4avs80vjMHL8+874jK9KZiRzAU2sh/e2XJE7FsYiYi4iTSeT7SblF3Im4XIx9LiJOR0Tlri0p838lDkfE8Yg4NSle1EzKtz47Oz5z8ec3f/362yOHTnz+1XcHunDgQD0fEf3VYn+jX8SsU8RbZb4x7uaxf2FcxtUdNfpZkd9or+QVNhrb4xp5PN8pxmer68NJvNlrNCex072Z51cHxQmH4852nckH0luNtfy41V7JY3eY5bGzVZx3c6v427Y1HBV1WmW9j/LyMRptxyLf3mwX61m9ncfmYFTmi7pZq705ieMylqeLZtZr5fNYecSL/Bh4qztY30zH7bVhNxukF2v1F2r1S9X6WtZqj9oXqo1+69KFdLHTmwyrjtqN/uVOlnV67Voz6y+li51ms1qvp4tX2ivdxiCt12vna+eqF5fKvbPpa9ffS3utdHESX+kO1kfd3jC9ma2lxSeW0uXa+ReX0jP19J1rN9Ibb1+9eu3Gux9cef/6y9feeLUcdN+00sXlc8vL1fq56nJ96Sla/8flpP/D+pMHp3/4fm+XDQq7fMEA2N19/X/c2/+H/h+Yur30//3b5fH+9P/xMP1/TLP/n7RU+v9/738rB9D/zof+fx/XD3vyaP3/4anPAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAmftx/ovX852F4vhEmf9fmXqmPE4iohIRfzzAXBzeUXOurDO/y/j5e+bwTRJ5hck5jpTb8Yi4XG6//3+/rwIAAAA8ub68c/rTolsvXhYOekLMUnHTpnLywynVSyJifuGnKVWrTF6enVKx/Pt9KDanVC2/gXV0SsWKW26HplXtocztCEfvCkkRKjOdDgAAMBM7O4HZdiEAAADM0if/+O5LM5sHM5bE9qPM7WfB+X/e//1A8NiO9wAAAIDHUHLQEwAAAAD2Xd7/+/0/AAAAeLIVv/8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf7JzP7lpA1EcgJ8Nhv5VUdV9r9IdHKNH6LLLwgF6CY5Ar9ALcAYiZZEjRBBhT5CcgBSJMU7Q90m2M+Po5xlg88bSAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXbqpVrN/f77/PTdnuztPntkAAAAAx2yq1az+Y9K0P6b+z6nra2oXEVFGxLHafRCjVuYg5VQn/r96Mob/EXXCvn+cjg8R8SMd91+6/hQAAADgeq0Xy2lTrTentARw2++ouJBm0ab89DNTXhER1eQuU1q5P33LFFb/vofxO1NavYD1LlNYs+Q2PH5vlOshbYPW5XEm8/pLrFtlN88FAAD61K4ETlQhAAAAXIFffQ+AS3he2heH0+E947i5pBeC71stAAAA4A0q+h4AAAAA0Lm6/n9N+/8V9v8DAACA7Jr9/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOjSplrN1ovl9NT9+Qtztrvz5JsRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPLA/7ygQAmEQBnvXdyZz/8NKg4bGJlUgfPyNwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJvf/eX/xNQ4k8y9NpaeR5K1U2Pr1Ng7N47+ML5+DQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAxf68pEAIBEEUzBn/O+n7H1YS9AwiREDDo4paNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwRb/75f/E1DiTzJ02lo5HkrWrxtZVY+9B4+jBePs3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAxb799EZRhgEAf3anu1DUWKtpYtVgwkEvUhYEuRqjaTz4EUyassXqIgo9CGnEXryZnrkYPRpjoqm3fgfONOGCNw491MSTh5r5V2bbFRqUmUJ/v+Td99nZ4f23E9Jn3lkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABKm+/Gq+0iTtKXiTwuj93eWp5P641ddWp99c50WtK4VfO4nwCvVd8cn2puIAAAABweSZnfR8TdztpsWrcnsvy/U56T5vw/PJfHZT6/O+/f2Fo+Wnw0Xeb/v/9276WdjiaSrJ+00YXFQf/U3qGMPaYpHnjPP/SMsWzls3svSfaFtD9ceXGzk61n67tbt97vZuGROkYLADyKk2VdBOXfQ2nda3JgABwaY5XEu8z/k4lmxwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQh82VeKaMWxExPXY/Tm1sLc+Pqr9ZvTO9XpRzN2+uVttMm+hExMLioH+qxrkcXOVqXv9sbjDoX7l6re7geESM+OjG/v55Ugz/X8/pRsTQkRMvj2jn4330taudPUFxeUa9aziezu+hJ7eGjrT2LPh727kmLoC6gnbx/TyOLsZr/96Hg/La+/9brvm/IwAAnnqdoqSZ6N3O2mx6rDUZsf3jcP7/RiWOobx/+0Z+JH+/Xsn/731y7na1r2r+36tpfk+CmaVLX8xcvXb9rcVLcxf7F/ufv326907vzPmzZ8/PZPdKZhai7Y4JAAAA/0G3KNX8vz25d///WCWOB+z/51vCef7/5fe9r6t9JfL/ke5v+jU9EgAAgMOouxO98Ppff7ZGnNHqduOruaWlK738def96fy11uE+oiNFqeb/yWTTowIAAADqsLnSGtr/v1CJ4wH7/9Xn/5/96ZVfqm0mETEecTki+ifnLw8u1DedA62OHypnHXWbnikAAABNGS9Kdf+/kz3/39555KEdEW+eiPi7+A1/7DP/Tz749udqX9Xn/8/UOsuDpz2Vr0dWT0WMTTU9IgAAAJ5mR4uSJvt/dNZmP/312Eddz/8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA1O2fAAAA//+FVSwP")
r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x182)
lseek(r0, 0x9, 0x4)

2m42.159248238s ago: executing program 32 (id=123):
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x25, 0x5586, &(0x7f00000079c0)="$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")
r0 = creat(&(0x7f00000000c0)='./bus\x00', 0x182)
lseek(r0, 0x9, 0x4)

2m20.825058061s ago: executing program 4 (id=176):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb4e02000)
syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
close(r1)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x12}, 0x50)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r3, 0x26}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20)
sendmsg$inet(r2, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')

2m12.172061692s ago: executing program 4 (id=179):
r0 = socket$inet_icmp(0x2, 0x2, 0x1)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10)

2m8.500719332s ago: executing program 4 (id=187):
getuid()
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000002400)={{{@in6=@private1, @in6=@private2}}, {{@in6=@private0}, 0x0, @in=@private}}, 0x0)
stat(&(0x7f0000002540)='./file0\x00', &(0x7f0000002580))
lstat(&(0x7f0000002640)='./file0\x00', 0x0)
read(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000002a00)='/sys/kernel/uevent_seqnum', 0x0, 0x32)
read$FUSE(r0, &(0x7f0000002cc0)={0x2020}, 0x2020)

2m8.181826942s ago: executing program 4 (id=189):
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file1\x00', 0x0, &(0x7f0000000000), 0xfe, 0x250, &(0x7f0000000300)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24040800}, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
chroot(&(0x7f0000000100)='./file0\x00')
syz_open_dev$tty1(0xc, 0x4, 0x2)

2m7.636629804s ago: executing program 4 (id=192):
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x5c399000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x4, 0x0, 0x0)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00')
read$FUSE(r3, &(0x7f0000000280)={0x2020}, 0x2020)
symlinkat(&(0x7f0000003040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x0, 0x106)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x40042, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x8c, &(0x7f0000000300)=ANY=[])
mount(0x0, &(0x7f0000000300)='./file0\x00', 0x0, 0x2014050, 0x0)
r4 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0)

2m1.72260803s ago: executing program 4 (id=208):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
ptrace$ARCH_SHSTK_ENABLE(0x1e, r0, 0x0, 0x5001)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socket$unix(0x1, 0x2, 0x0)
socket$inet(0x2, 0x4000000000000001, 0x0)
unshare(0x28000600)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10)

2m1.374518611s ago: executing program 33 (id=208):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
ptrace$ARCH_SHSTK_ENABLE(0x1e, r0, 0x0, 0x5001)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socket$unix(0x1, 0x2, 0x0)
socket$inet(0x2, 0x4000000000000001, 0x0)
unshare(0x28000600)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10)

17.919886232s ago: executing program 6 (id=493):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0)
read$FUSE(r0, 0x0, 0x0)
syz_fuse_handle_req(r0, 0x0, 0x0, 0x0)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3)
ptrace$peeksig(0x4209, r2, &(0x7f0000000200)={0x8, 0x1, 0x5}, &(0x7f0000000540)=[{}, {}, {}, {}, {}])
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0xfff}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000400)={{0x1}})
ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0)
r4 = syz_open_dev$sndpcmp(&(0x7f0000000500), 0x0, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="8580f84432e1aaaaaaaaaa1c08004515001c00670000020290780a"], 0x0)
ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r4, 0xc0884123, &(0x7f00000000c0)={0x0, "d8d7531c1c6054b6b70257ec47e25dc91f003f19004f6ceb55fb98d58dccd7f0fe41ae63a0df07926f45a38667304ab9b9b98347fbe76528e77e751fd98d62be", {0x2, 0x4}})

17.12751319s ago: executing program 6 (id=494):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc)
r1 = syz_open_dev$sndpcmp(&(0x7f0000000500), 0xb, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r1, 0xc2604110, &(0x7f0000000000)={0x1, [[0x7fff, 0x40, 0x0, 0xd, 0x0, 0x0, 0x1, 0xfffffffc], [0x2, 0x0, 0x0, 0x0, 0x1, 0x5, 0x4, 0x800], [0x200000, 0x5, 0x0, 0x7, 0xfffffffe, 0xa, 0xfffffffe]], '\x00', [{0x7}, {0x3}, {0xffffffff, 0xa40}, {0x0, 0x1}, {0xb07, 0x6}, {0xfffffffc, 0x4}, {0x20004, 0x8}, {0x9, 0xe595}, {0x4, 0x200000}, {0x164, 0xffff}, {0x8, 0x1}], '\x00', 0x80000001, 0x0, 0x0, 0x2, 0x0, 0x35})
r2 = openat$fb0(0xffffffffffffff9c, 0x0, 0x1, 0x0)
ioctl$FBIOGET_CON2FBMAP(r2, 0x460f, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000005580)=""/102392, 0x18ff8)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000340), &(0x7f00000001c0)=0xc)
sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x2a, 0x107, 0xfffffffc, 0x0, {0x5, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000)
bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f00000002c0)=0x240000, 0x4)
r5 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0)
r6 = creat(&(0x7f0000000040)='./file0\x00', 0x125)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x1, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r5}})

16.369583036s ago: executing program 2 (id=499):
symlink(0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x2a, 0x0, &(0x7f00000000c0))
bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r2 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7, 0x200}}, 0xe8)
sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuset.effective_mems\x00', 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000002c0))
r4 = socket$packet(0x11, 0x2, 0x300)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000480)={'wg2\x00', <r6=>0x0})
sendto$packet(r5, &(0x7f00000002c0)="05030500d3fc030000004788800509101128", 0x100f, 0x4, &(0x7f0000000140)={0x11, 0x88a8, r6, 0x1, 0x0, 0x6, @multicast}, 0x14)
getsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f0000000100)={@dev, @loopback, <r7=>0x0}, &(0x7f00000001c0)=0xc)
fstat(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, <r8=>0x0})
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=@newsa={0x19c, 0x16, 0x633, 0x0, 0x80000000, {{@in=@rand_addr=0x64010100, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20}, {@in=@broadcast, 0x4d2, 0x32}, @in6=@loopback, {}, {0x5, 0xffffffffffffffff, 0x0, 0x5}, {0x4, 0x2}, 0x6, 0x2, 0x0, 0x4, 0x18, 0x19}, [@policy={0xac, 0x7, {{@in=@loopback, @in=@remote, 0x4e23, 0x9, 0x4e23, 0xe, 0xa, 0xc0, 0x20, 0x3a, r7, r8}, {0x1, 0x3, 0x1, 0xfa, 0x9, 0xd2f, 0x3c, 0x8000}, {0xfffffffffffff11c, 0x81, 0x9, 0x7}, 0x4, 0x6e6bb2, 0x1, 0x1, 0x0, 0x3}}]}, 0x19c}}, 0x0)
futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000000080), 0x2)
futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x0)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', &(0x7f0000000080)={0x101000, 0x10}, 0xffa8)

11.679248628s ago: executing program 2 (id=504):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0)
read$FUSE(r0, 0x0, 0x0)
syz_fuse_handle_req(r0, 0x0, 0x0, 0x0)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3)
ptrace$peeksig(0x4209, r2, &(0x7f0000000200)={0x8, 0x1, 0x5}, &(0x7f0000000540)=[{}, {}, {}, {}, {}])
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
read$msr(0xffffffffffffffff, &(0x7f0000032680)=""/102392, 0x18ff8)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0xfff}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000400)={{0x1}})
ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0)
r4 = syz_open_dev$sndpcmp(&(0x7f0000000500), 0x0, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="8580f84432e1aaaaaaaaaa1c08004515001c00670000020290780a"], 0x0)
ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r4, 0xc0884123, &(0x7f00000000c0)={0x0, "d8d7531c1c6054b6b70257ec47e25dc91f003f19004f6ceb55fb98d58dccd7f0fe41ae63a0df07926f45a38667304ab9b9b98347fbe76528e77e751fd98d62be", {0x2, 0x4}})

11.588967583s ago: executing program 0 (id=505):
mkdirat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0)
read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000001240)={0x50, 0x0, r1, {0x7, 0x2b, 0xfff, 0x83120, 0x3, 0x7, 0x1ff, 0x9, 0x0, 0x0, 0x10, 0x8}}, 0x50)
openat(0xffffffffffffff9c, &(0x7f0000000640)='./file0/file0\x00', 0x4a300, 0xcd)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
syz_io_uring_setup(0x208c, &(0x7f0000000200)={0x0, 0xcb14, 0x10100, 0x3, 0x4001bf}, 0x0, 0x0)
add_key$fscrypt_v1(0x0, &(0x7f0000001f40)={'fscrypt:', @desc1}, &(0x7f0000000440)={0x0, "51f435b675ba491895df818c52f9e875d9b1bd2c20f5c6b1e36d59e2036887f264d726807797b2e0d0768e1791a519f4aac513fc3713901f18f58a56f75b0121", 0x2d}, 0x48, 0xfffffffffffffffe)
syz_init_net_socket$x25(0x9, 0x5, 0x27)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x4000000000001, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, 0x0})
syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x1008014, &(0x7f0000000940)=ANY=[], 0x3, 0x7fb, &(0x7f0000000bc0)="$eJzs3U1oHPfZAPBnZMl2FDAm74vfYBxnbOcFBxxlJcVKRaDJZjWSJ5F2xe6q2JSSmlgOwnISkoY2viSmkLSlUHrqMc01t9xaCi300PZUaA699BbIqaTQL1JCQWVmd2V97Er+ip00v5/wzuzMM/N/ZjSeZ2a1MxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQCS1mUplPIn5vL50Nh2sNtNsLOwwvje/X23qbPLUpnYjkuJf7N8fn/y9M+x/r40+VLwcjyOdd0dif9HZH1fuPXTwif8ZHupNv0NCN+OeiDh2nbFJxJtFUpfOr64uv3KbE7nDfvCLG57kX2vF61xWz1uRL1TnsjRvNdLpqanKo2dmW+lsPp+1zrXa2UJaa2bVdqOZnqw9nI5PT0+m2di5xlJ9bqY6n/UGPv7IRKUylT4ztphVm61G/dFnolU7k8/P5/W5Mmai8u0oYh4vNsRn83bazqoLaXpxZXV5crdUi6DxfiP2dLafIw8d/Oi1D/+2slxskINmknQ3zInx8YmJ8anT06cfr1SGJyoTmwdUtoj1iBiKKCJu+0bLF8zt3YHDLRjq1v+YjzzqsRRnI+3zMxK1mIlmNGKheP/HkW0RXb36//+P/uX3O7W7sf73qvz910YfjrL+H+28Ozqo/vfN9U7+vBqvx5W4FOdjNVZjOV656xnt8jN0q3NINr2biyzqkUcrGpHHQlTLIWl3SBrTMRVTUYnn4kzMRivSmI085iOLVpyLVrQjK7eoWjQji2q0oxHNSONk1OLhSGM8pmM6JiONLMbiXDRiKeoxFzNRLedyMVbK9T65JctD98TPX/jDR+8U/etB4zstVnEwVwT9dYegbeV+x/q/tlYcL2yNUP+/BPbuNPIz2IvDzVnr1X8AAADgv1ZSfvpenP+PxANl32w+n339bqcFAAAA3EblX/6PFJ2Rou+BSIrz/0qfyA/ueG4AAADA7ZGU19glETEaD3b6LsZKvBnL0e9DgIg4eKdTBAAAAG5R+ff/o0VnNOKNckDvdikDzv8BAACAL5rvDbrH/oe9e+y2FvclvxyJiJHk6uLZh5LL1SKuenlPZ7pu52vrc2zPHk4OdGdSdqaGr9ybRMRwLTuS9O5++e99ne7H5evh4fXJB93rP2k2d0wgdk6gfBc/jGOdmGMXys693UmGk04ro7P5fDZWa8w/Ud4SsfjXfu3Fle9EFK1/v75wIImLK6vLY8+/tHqhzOVqMfnVy90bKG67j+IOuax110A80H+JR8oLMbrtjnbarWxc/qHO5EM7t5lsbPOtON6JOT7a6Y72xnTa3F+0OT72xHhUqweG2tnZ9mtrG5a+m8X4+pKP3NSSvxUnNv3qTpzsk8XEpixe3J7FxMb1f33rYlMWp796otf8ia1ZvHPsjbP//E0jySZ3y2LyBrJY2xOxNQuAu+Viedefa1XonrIKfbrWUdT/Tt0tilW1E9B1Hfvaf/TKwsVrRxm96TfUuuHYWt2H1neM11fd16JTV052Yk52jieGD/epK1f77NFfXnn5t909+mPv/eSn3zj6u/fLdm+qur0XD3diup2479fbsuithJFk/5aq+m4x+N2B7bbmJ5K4GrHnW5dfjkOvvn7lkZXL519YfmH5xYmJyanKY5XK6Ym9vZmXRww7ZArAl9fxONq58n/gM3YGPoWnV2eSx7acVceFzXX3vvWvFIzF8/FSrMaFOFVebRARD/Zvd3TD1xBO7XLWOrrhCS+nYvBZ3ebYie2xSQyIndywxv7vx2Xnk4j3PTYBgC+o47vU4WTveuigI4Tk1C7n3Ztr+Zaz4xhcy/v5yme3KgDgSyNrfpyMtt9Oms188bnx6enxavtMljYbtWfTZj4zl6V5vZ01a2eq9bksXWw22o1a74PjmayVtpYWFxvNdjrbaKYx1MrPlk9+T7uPfm9lC9V6O6+1FuezaitLa416u1prpzN5q5YuLj09n7f2Z81y4tZiVstn81q1nTfqaaux1KxlY2nayrJu4JmsmeYzWb2dz+ZFbz1dbOYL1ebViJhfWsjSmaxVa+aL7UZnhr228vpso7lQznZs++L/+U6vbwD4PHj19SuXzq+uLr9ycz1/2jEmOX/gbi8fALDdtXJ9tzMBAAAAAAAAAAAAAAAGWf/+/8FeTzF0t8v+huK6rhHcE7vF7Isbuehw361cqvgZ9MTez0Ua23uSiDdXi1/k5ySfu9fzzSefvDQo5uk37j9zffOJ671SNt4+ELH3Zz/qDHlqcPB3u///+ozq3fb5Bpb0g4i4ifWzlvQZ9elaL40N9t7p/RIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9POfAAAA///7fk//")
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmmsg$unix(r3, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x804}}, {{&(0x7f00000000c0)=@file={0x1, './file1\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40080}}], 0x2, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000100), 0x208e24b)
recvfrom$inet_nvme(r4, &(0x7f00000001c0)=""/251, 0xfb, 0x40000000, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0)
syz_mount_image$minix(&(0x7f0000000340), &(0x7f00000001c0)='./bus\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYRES16=0x0], 0x1, 0x197, &(0x7f0000000900)="$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")
syz_open_dev$tty1(0xc, 0x4, 0x1)
truncate(&(0x7f00000002c0)='./file1\x00', 0x42d9)

11.547503876s ago: executing program 5 (id=506):
r0 = syz_open_dev$loop(&(0x7f0000000040), 0x400000000, 0x40)
ioctl$BLKSECTGET(r0, 0x1267, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$BLKROGET(r0, 0x125e, &(0x7f0000000000))

10.682558478s ago: executing program 2 (id=507):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
io_setup(0x9, &(0x7f0000000b80)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000580)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}])
io_cancel(r1, 0x0, 0x0)

10.209854936s ago: executing program 5 (id=508):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x4e, 0x0, 0x0)
syz_open_dev$usbmon(&(0x7f0000000000), 0x6, 0x200)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x0, 0xd000})
syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0f7f"], 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

9.514480428s ago: executing program 0 (id=509):
syz_mount_image$iso9660(&(0x7f0000000300), &(0x7f0000000240)='./file0\x00', 0x2204806, &(0x7f0000000580)=ANY=[@ANYBLOB="6d61703d6f66662c636865636b3d72656c61786564006e6f6a6f6c6965742c6d61703d6ff0a2b466662c73657373696f6e3d3078303030303030303030303030303036300c696f636861727365743d6d6163677265656b412203bc91fde777b21d626c6f636b3d3078303030303030283030303030306330302c696f636861727365743d69734f383835392d322c73657373696f6e3d3078303030303030303030303030090035632c73686f776173736f632c696f636861727365743d6d6163637972696c6c69632c636865636b3d7374726963742c6673636f6e7428a4743d73797374656d5f752c7065726d69745f64697265637469"], 0xfa, 0x6bf, &(0x7f0000001cc0)="$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")
mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0)

9.462809031s ago: executing program 6 (id=511):
r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xeef, 0x72d0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xc0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0xfc}}}}}]}}]}}, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f0000000500)={0x40, 0x7, 0x2, {0x2, 0x11}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

9.205629176s ago: executing program 5 (id=512):
r0 = socket$unix(0x1, 0x5, 0x0)
listen(r0, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00', 0xff})
write$sndseq(r1, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000c40)={0x7, 0x8, 0x7})
r2 = syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000240)='./bus\x00', 0x2008012, &(0x7f0000000300), 0x1, 0x576, &(0x7f0000002380)="$eJzs3c9vHFcdAPDvjH/mR+MEeoAKSIBCQFHW8aaNql5aLiBUVUJUHBCH1Ngby2SdDfG61CYS7t8AEkic4E/ggMQBqScOcOKIxAEQ5YBUIALFSD0Mmtmxs7HXZJP91ex+PtJk5s2bme97u5l9b9+u9wUwsS5ExG5EzEbEmxGxUO5PyiVebS35cffv3V3Zu3d3JYkse+OfSZGf74u2c3KnymvOR8TXvxLx7eRo3M3tnZvL9XrtTplebG7cXtzc3rm8vrG8Vlur3apWry1du/LS1Rerfavr+Y1fvP/l9de+8etfffK93+9+8ft5sU6Xee316KdW1WcO4uSmI+K1QQQbgalyPTvicvBk0oj4SER8prj/F2Kq+N8JAIyzLFuIbKE9DQCMu7QYA0vSSkSkadkJqLTG8J6Nk2m9sdm8dKOxdWu1NVZ2NmbSG+v12pVzc3/8bnHwTJKnl4q8Ir9IVw+lr0bEuYj40dyJIl1ZadRXR9PlAYCJd6q9/Y+I/8ylaaXS1akdPtUDAJ4a86MuAAAwdNp/AJg82n8AmDxdtP/lh/27Ay8LADAc3v8DwOTR/gPA5NH+A8BE+drrr+dLtlf+/vXqW9tbNxtvXV6tbd6sbGytVFYad25X1hqNteI3ezYedb16o3F76YXYenuxWdtsLm5u71zfaGzdal4vftf7em1mKLUCAP6fc+ff/UMSEbsvnyiWaJvLQVsN4y198qP8/hc85aZ6OVkHAZ5qZvuCydVVE150En478LIAo9Hxzfx8x82H/eQxgvieEXyoXPx49+P/5niG8XJoZP+DbFQFAYZuqsPWo70ykLIAw/XE4/9/7m85gOHLsuTwnP+zB1kAwFjq4St82Q/61QkBRupRX+bvy+f/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMGZOR8R3IkkrxVzgaf5vWqlEPBMRZ2MmubFer12JiDNxPiJm5vL00qgLDQD0KP17Us7/dXHh+dOHc2eT/84V64j43k/f+PHby83mnaV8/78O9s/tTx9WfXBeD/MKAgDd+2s3BxXtd7Vct72Rv3/v7sr+MsAyHvH+lw4mH13Zu3e3WFo505FlWRYxX/QlTv47ienynPmIeC4ipvoQf/ediPhYp/onxdjI2XLm0/b4UcZ+Zqjx04fip0Vea50/fB/tQ1lg0rybv/682un+S+NCse58/88Xr1C9K17/5iP2X/v22uJPl5GmOsTP7/kL3cZ44TdfPbIzW2jlvRPx3HSn+MlB/OSY+M93Gf9Pn/jUD185Ji/7WcTF6By/PdZic+P24ub2zuX1jeW12lrtVrV6benalZeuvlhdLMaoF/dHqo/6x8uXznTav3eiVf+Tx8RvPfOnDtV/9uD8z3VZ/59/8Oa3Pv0gOdeel8f/wmc7P//PFhE7P/55m/j5LuMvn/zlsdN35/FXj6n/o57/S13Gf+9vO6tdHgoADMHm9s7N5Xq9dqenjfxdaD+uc2QjL2J3B+93F3sL+pcoNh48LEkk8TjXmY+2PTPHHRPRzQVnBvWoDnxj+qCv2N8rfzO/4pCrk/a9Fk+yEWfLjfuPcVb+LPR06wHj7MFNHxG/G3VpAAAAAAAAAAAAAACATtr/6OfMgP7OadR1BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYHz9LwAA///oMcIc")
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x0, &(0x7f0000000180), 0x1, 0x5d8, &(0x7f00000005c0)="$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")
setxattr$system_posix_acl(0x0, 0x0, 0x0, 0x24, 0x0)
execveat(r2, 0x0, 0x0, 0x0, 0x100)

8.870880227s ago: executing program 0 (id=513):
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200010, &(0x7f0000000400)=ANY=[@ANYBLOB="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", @ANYRESOCT=0x0], 0x3, 0x260, &(0x7f0000000780)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0)
pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0)
copy_file_range(r0, &(0x7f0000000000)=0x3ff, r0, 0x0, 0x6, 0x0)
r1 = syz_open_procfs(0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x8, &(0x7f00000000c0)={[{@lazytime}, {@errors_remount}]}, 0x2, 0x53a, &(0x7f0000000c80)="$eJzs3c9vI1cdAPDvOPHmR7NNCj0AArqUwoJW6yTeNqp6YXsBoaoSouLEYRsSN4pir6PYK5qwh+yReyVW4gT8B9w4IPXEgRs3kDj0Ug5IC6xADRIHoxlPEjexE7dJ7ST+fKTJzHszO9/34n3veV5kvwBG1o2I2I2IaxHxdkTM5vlJvsXd9pZe99HThyt7Tx+uJNFqvfXPJDuf5kXHv0k9k99zMiJ++L2InyTH4za2dzaWq9XKVp6eb9Y25xvbO7fXC3lOeWlxaeHVO6+Uz62uL9R+++S762/86Pe/+8qHf9r99s/SYs38/Hp2rrMeh4pnjpnk95npyBuPiDfOfOeLYzz//8Plk7a2z0XEi1n7n42x7NUEAK6yVms2WrOdaQDgqkuf/2ciKZTyuYCZKBRKpfYc3vMxXajWG81bs/UH91cjm8Oai2LhnfVqZSGfK5yLYpKmF7Pjw3T5Y+n3Knci4rmIeG9iKjtfWqlXV4f5xgcARtgzR8b//0y0x/9OZ/8rGABw4UwOuwAAwMB1jP9zwywHADA4nv8BYPR8gvHfpwMB4Irw/A8Ao8f4DwCj59Tx/9FgygEADMQP3nwz3Vp77e+/3v+m7turlcZGqfZgpbRS39osrdXra9VKaaXVOu1+1Xp9c/Hlg2Rje+derf7gfvPeem15rXKv4rsEAGD4nnvh/b+kg/7ua1PZFh1rORir4WorDLsAwNCMDbsAwND4PA+Mrj6e8U0DwBXXZYnetnyCIOl1wWOLv8JldfOL5v9hVJ1l/t/cAVxun27+/zvnXg5g8IzhMLparcSa/wAwYszxAz3//p/r+RUhj/u4+d1PXh4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4DGayLSmUsrXAd9OfhVIp4npEzEUxeWe9WlmIiGcj4s8TxYk0vTjsQgMAZ1T4e5Kv/3Vz9qWZo2evJf+dyPYR8dNfvvWLd5ebza3FNP9fB/nNx2n+VHOrfG0YFQAAOu2vu/nBYVY2fpfzfceD/EdPH67sb4Ms4pPXI2JyKou/l2/tM+Mxnu0noxgR0/9O8nRb+n5l7Bzi7z6KiC/s138y3u2IMJPNgbRXPj0aP419/dzjd/7+j8YvfKy+hexcui9mv4vPx5HCAad6//V2P5m3vbSJ5+2vEDeyfff2P5n1UGeX9n9pc9071v8VDvq/sWPxk6zN3zhIn1ySJy//4fvHMluz7XOPIr403i1+chA/6d7/Fl/qs44ffPmrL/Y61/pVxM2u9d9fkbqWdbPzzdrmfGN75/Z6bXmtsla5Xy4vLS4tvHrnlfJ8Nkfd/vnHbjH+8dqtZ3vFT+s/3SP+5Mn1j2/0Wf9f/+/tH3/thPjf+nr31//5E+KnY+I3+4y/PH235/LdafzVHvU/5fWPW33G//BvO6t9XgoADEBje2djuVqtbJ1ykL7XPO0aB/0fpM/2F6AY2UHsRpzXDbNJiYjoek36jvpiVPmzOkiGFv03533DYfdMwGftsNH3vuavgywQAAAAAAAAAAAAAABwTGN7Z2Oi+6e1zu1g2HUEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg6vp/AAAA//9W1cZQ")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141442, 0x40)
fallocate(r2, 0x0, 0xfff, 0x9)
write$UHID_INPUT(r2, &(0x7f0000001440)={0x8, {"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", 0x1000}}, 0x1006)
fstat(r1, 0x0)

8.834033049s ago: executing program 3 (id=514):
r0 = fsmount(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socket$inet(0x2, 0x4000000000000001, 0x0)
r4 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000140)='{:\'@-\x00', &(0x7f0000000180)='%*.\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000a40)='^,/K', 0x0, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000a80)={'syz0\x00', {0x2, 0x9f, 0x88f8, 0x3}, 0x3f, [0x2, 0x2, 0x8, 0x2, 0x9, 0x8, 0x1, 0xfffffffa, 0x8, 0x10, 0x3, 0x3, 0xffffff81, 0x81, 0xe, 0x3ff, 0x1, 0x8000, 0x7, 0xf8, 0x9, 0xe, 0x38, 0x80000001, 0x2, 0x34, 0x8, 0xffffffff, 0x9, 0x3, 0x1, 0xa, 0x1, 0xfff, 0x4, 0x2, 0x0, 0x9, 0xb, 0x9, 0x401, 0xfffffff8, 0xf4a, 0x5, 0x6, 0x4, 0xd71, 0x5, 0xb, 0xfb, 0x8, 0x0, 0xf2, 0x9, 0xef, 0x8, 0x6, 0xffff, 0xc93e, 0x7, 0x3ff, 0x1, 0x8, 0x7f], [0x0, 0x0, 0x1, 0x4, 0x3, 0x6d6, 0xd, 0x2, 0x10001, 0x2, 0x10, 0x1, 0x1, 0x7, 0xfffffffa, 0x8001, 0x40, 0x2, 0x100, 0x7fff, 0x81, 0x9, 0x3, 0x4b, 0x3, 0x4c70, 0x7102, 0x10, 0x57a, 0x4, 0x9, 0x4, 0x3, 0x9, 0x6, 0x9, 0x7, 0x6, 0x4, 0x9a, 0x0, 0x100, 0x9, 0x8, 0x1, 0x7, 0x4, 0x744, 0xf, 0xc, 0x29, 0x58, 0x4, 0x800, 0x1000, 0x3, 0x6, 0x4, 0x9, 0x27, 0xfffffffa, 0x8, 0x1, 0x4], [0x2, 0x6, 0xd4, 0x5, 0xca, 0x9, 0x38, 0x6, 0x0, 0x81, 0x1ff, 0x40, 0x9, 0x6, 0x7fffffff, 0x3, 0x7, 0x0, 0x5, 0xff, 0x2, 0xd, 0x3, 0x0, 0xfffffff8, 0x7, 0x10000, 0xc, 0x6, 0x800, 0x5, 0xb, 0x4, 0xffffff62, 0x1ff, 0x1ff, 0x5, 0xcb5, 0x2, 0x0, 0x0, 0x1, 0x0, 0x100, 0x80, 0xfffffff9, 0x2, 0x6, 0x0, 0x1, 0xb0, 0x6, 0x2, 0x2, 0xf05b, 0x1f398dea, 0xa84, 0x6, 0x8, 0x2, 0x0, 0xffffffff, 0x10001, 0x6], [0xfffffc00, 0x2, 0x357, 0x3, 0x685, 0x7fffffff, 0x5, 0x3, 0x5e, 0x80000000, 0xffff7fff, 0x1, 0x2, 0xc, 0xbd5, 0x6, 0x3, 0x6, 0x200, 0x7, 0xffffff00, 0x100, 0x5, 0x9, 0x358, 0x9, 0x14, 0xfffeffff, 0x7, 0x2, 0x7fff, 0x4d, 0x123, 0x1ff, 0x6d32, 0xffff, 0xb8c9, 0x6, 0x7, 0x6, 0x9, 0xfffffff9, 0x5, 0xd84, 0x8, 0x80000001, 0x2, 0x0, 0x3, 0x3bb4, 0x4, 0x3, 0x8000, 0x4, 0x7, 0x4, 0x0, 0x138, 0x6dacd37e, 0x4, 0x2, 0x7e5, 0x10, 0x6268]}, 0x45c)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000280)='\x1c@\\\x00', &(0x7f0000000080)='\xe6\x98J\xcf\xe62\x7f(\x84Wv5f&\xe8\xd2', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r4, 0x2, 0x0, &(0x7f0000000340)="02", 0x1)
fsconfig$FSCONFIG_SET_BINARY(r4, 0x2, &(0x7f0000000540)='\xc1J\xaf\xfd,\x86\xbc\xa9\x02\xf2\xf6\xe2\xcd\x9f\xf6\x83\xeb\xba_6\xfdR\xd0\x8d\xc1\xf6.$w\xab|*`\x11H+^\xbb\x8ar\xb1\x8ec\xecQ\x94\x15\xbe\x80E\x9c\x93Hq?<(+\xceb0\xcc\xad\xdd\x1c\xee\x19\x1b\x91Z\x85\xb7\x04\xe7\xaf\xe0W,G\xc8\xc0\xbcR\x90\x17\x19@m\xa5\x19\x16i\xc8\x99)\xa5\xb0\xba\xbc\xe0rV\x06\xd0B\x0f\xcdF\xbc\x8e\x8a^%8k\x849@\x15=kxS\x1c\xc1\xdaT\x9c\b\xb6\xd8\xa0st~\xf1\x93\xb8\xba\xa5gV\x18F\x8f\xf4b\xdc\x19_P\x81\xa4\xc3\\g\x11\xd1\xc8 U\xba\x03\xc9\xf17\x88\r\xb99]\xdfM\xc8AQB\xc3\xf0\xf7t\xee\x95&w\xc3;\xf1C\xea!J\x19\xe1\xfe\x0f\x84\xdfY\x10\xed\x1c\xb2n\xc0ME\xaa\x9e\xd1f\x92q\xeb\xdb)\xcd1(>\x8e\x0f}\x03\xdd\xf8\x84\x9bz!\x80F\xc5ls< \x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x98\x1c\x9f\xbd\xcd\xea\xc3w\xa3\xf5\x1d.\x00\x00\x00\xa0\xf4\xe9\xe2\x83\xac\xde\x95cmvM\x12\xc1O\x1f#\xcd\x90\x1e\x03\x1e}\xe7w\xe7\"Oh`\xed\bM9\xaf\xa3BQ\xbf\xfd1\x1cG\xb5\xed\x86\xb9Q(\x19dZ\x8da\x008e*\x928\xcf\x0f\x0e\x05\x1dM?\x11$E\xc3\x12\x1e\xffI\x84t0D\xec\xf3T\xe2\xddJm\x87\xc9\xb1\xff\n\xa1\x13\xcbo\xc6\xda\x84\x02\xa3\x14\xf2q\x96\xa8Sa\xe4\x1f\x01\xa2]\xb2\xc9\xd5\xff\xfd\xf2\xb5\xf5\xef \xc7\x02\x927\xdb\xa5\a\x9eS\xb6\xe2\xbaL\x99n\xb4\xe3\xf7\x0eU\xc0', &(0x7f0000000700)="19", 0x1)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000380)='}\x00', &(0x7f0000000880)='\xc1J\xaf\xfd,\x86\xbc\xa9\x02\xf2\xf6\xe2\xcd\x9f\xf6\x83\xeb\xba_6\xfdR\xd0\x8d\xc1\xf6.$w\xab|*`\x11H+^\xbb\x8ar\xb1\x8ec\xecQ\x94\x15\xbe\x80E\x9c\x93Hq?<(+\xceb0\xcc\xad\xdd\x1c\xee\x19\x1b\x91Z\x85\xb7\x04\xe7\xaf\xe0W,G\xc8\xc0\xbcR\x90\x17\x19@m\xa5\x19\x16i\xc8\x99)\xa5\xb0\xba\xbc\xe0rV\x06\xd0B\x0f\xcdF\xbc\x8e\x8a^%8k\x849@\x15=kxS\x1c\xc1\xdaT\x9c\b\xb6\xd8\xa0st~\xf1\x93\xb8\xba\xa5gV\x18F\x8f\xf4b\xdc\x19_P\x81\xa4\xc3\\g\x11\xd1\xc8 U\xba\x03\xc9\xf17\x88\r\xb99]\xdfM\xc8AQB\xc3\xf0\xf7t\xee\x95&w\xc3;\xf1C\xea!J\x19\xe1\xfe\x0f\x84\xdfY\x10\xed\x1c\xb2n\xc0ME\xaa\x9e\xd1f\x92q\xeb\xdb)\xcd1(>\x8e\x0f}\x03\xdd\xf8\x84\x9bz!\x80F\xc5ls< \x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x98\x1c\x9f\xbd\xcd\xea\xc3w\xa3\xf5\x1d.\x00\x00\x00\xa0\xf4\xe9\xe2\x83\xac\xde\x95cmvM\x12\xc1O\x1f#\xcd\x90\x1e\x03\x1e}\xe7w\xe7\"Oh`\xed\bM9\xaf\xa3BQ\xbf\xfd1\x1cG\xb5\xed\x86\xb9Q(\x19dZ\x8da\x008e*\x928\xcf\x0f\x0e\x05\x1dM?\x11$E\xc3\x12\x1e\xffI\x84t0D\xec\xf3T\xe2\xddJm\x87\xc9\xb1\xff\n\xa1\x13\xcbo\xc6\xda\x84\x02\xa3\x14\xf2q\x96\xa8Sa\xe4\x1f\x01\xa2]\xb2\xc9\xd5\xff\xfd\xf2\xb5\xf5\xef \xc7\x02\x927\xdb\xa5\a\x9eS\xb6\xe2\xbaL\x99n\xb4\xe3\xf7\x0eU\xc0', 0x0)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='(\xed\xef(.(\\-]\x00', &(0x7f00000000c0)='f\xf0p\xce\x97\xbb\xd2dH\xdf\xbd\x18\x9baE\xef\x90\x90\x057g\x85\xf4\xf0\xba\xb0\xb1\x06\xa6q\xef\x03H\xda\"`\xd6', 0x0)
ioctl$UI_SET_SNDBIT(r0, 0x4004556a, 0x4)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r5, 0xffffffffffffffff, 0x0)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000200), &(0x7f00000003c0)=0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0)
r6 = landlock_create_ruleset(0x0, 0x0, 0x1)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r6, 0x1, 0x0, 0x0)

7.781732692s ago: executing program 3 (id=515):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bind$inet6(r0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0)
r2 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff)
keyctl$read(0x2, r2, &(0x7f00000000c0)=""/4096, 0x1000)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCXONC(r3, 0x540a, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90b, 0xf4c, '\x00', @p_u16=&(0x7f0000000440)}})
r4 = gettid()
timer_create(0x8, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=<r5=>0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f000001b440)=@newqdisc={0x26c, 0x24, 0x400, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x5, 0xf}, {0x5, 0x10}, {0x6, 0x2}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x6}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x5}, @TCA_RATE={0x6, 0x5, {0x5, 0xa}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_RATE={0x6, 0x5, {0x7, 0xb}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x3ff}, @qdisc_kind_options=@q_mqprio={{0xb}, {0x20c, 0x2, {{0xc, [0xf, 0x7, 0xe, 0x6, 0x9, 0x1, 0xe, 0x2, 0x9, 0x2, 0x5, 0x3, 0x0, 0x4, 0xe, 0xe], 0x0, [0x53a2, 0x8000, 0x0, 0x8, 0xa6, 0x3, 0x5, 0x6, 0x5, 0x1, 0x5870, 0x80, 0xff, 0xd742, 0xa7fa, 0x100], [0x8001, 0x2765, 0x9, 0x2, 0x101, 0x4, 0x0, 0x7f, 0x4c7, 0x5, 0xf0c5, 0x0, 0x9, 0x3, 0x8b06, 0x2e90]}, [@TCA_MQPRIO_SHAPER={0x6, 0x2, 0x1}, @TCA_MQPRIO_MAX_RATE64={0x4}, @TCA_MQPRIO_MAX_RATE64={0xa0, 0x4, 0x0, 0x1, [{0xc, 0x4, 0x7f}, {0xc}, {0xc, 0x4, 0x400}, {0xc, 0x4, 0xca9}, {0xc, 0x4, 0xffffffff}, {0xc, 0x4, 0x6cf7}, {0xc, 0x4, 0x5}, {0xc, 0x4, 0xe}, {0xc, 0x4, 0x8}, {0xc, 0x4, 0x8}, {0xc, 0x4, 0x5}, {0xc, 0x4, 0x4}, {0xc, 0x4, 0x8000000000000001}]}, @TCA_MQPRIO_MAX_RATE64={0x4}, @TCA_MQPRIO_MIN_RATE64={0x1c, 0x3, 0x0, 0x1, [{0xc, 0x3, 0xbd44}, {0xc, 0x3, 0x10001}]}, @TCA_MQPRIO_MIN_RATE64={0x4}, @TCA_MQPRIO_MIN_RATE64={0x28, 0x3, 0x0, 0x1, [{0xc, 0x3, 0x2000000000}, {0xc, 0x3, 0x2}, {0xc, 0x3, 0x2}]}, @TCA_MQPRIO_MODE={0x6}, @TCA_MQPRIO_SHAPER={0x6, 0x2, 0x1}, @TCA_MQPRIO_MIN_RATE64={0xac, 0x3, 0x0, 0x1, [{0xc, 0x3, 0xfffffffffffffff8}, {0xc, 0x3, 0x6}, {0xc, 0x3, 0xda}, {0xc}, {0xc, 0x3, 0x7}, {0xc, 0x3, 0x7f}, {0xc}, {0xc, 0x3, 0x1aa58030}, {0xc, 0x3, 0x4}, {0xc, 0x3, 0x3}, {0xc, 0x3, 0x7fffffff}, {0xc, 0x3, 0xea5}, {0xc, 0x3, 0x6}, {0xc, 0x3, 0xe34}]}]}}}]}, 0x26c}, 0x1, 0x0, 0x0, 0x4000880}, 0x20000080)
r6 = socket(0x10, 0x803, 0x0)
sendto(r6, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r6, 0x0, 0x0, 0x2040000, 0x0)
timer_settime(r5, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_linger(r7, 0x1, 0xd, 0x0, 0x0)
setsockopt$inet_tcp_int(r7, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e1f, @local}, 0x10)

7.781187882s ago: executing program 5 (id=516):
symlink(0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0xb, 0x31, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x3, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x2a, 0x0, &(0x7f00000000c0))
bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r2 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7, 0x200}}, 0xe8)
sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuset.effective_mems\x00', 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000002c0))
r4 = socket$packet(0x11, 0x2, 0x300)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000480)={'wg2\x00'})
sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r3, 0x0, 0x9004153d9c6c6619)
getsockopt$inet_mreqn(r2, 0x0, 0x24, &(0x7f0000000100)={@dev, @loopback, <r6=>0x0}, &(0x7f00000001c0)=0xc)
fstat(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, <r7=>0x0})
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=@newsa={0x19c, 0x16, 0x633, 0x0, 0x80000000, {{@in=@rand_addr=0x64010100, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x20}, {@in=@broadcast, 0x4d2, 0x32}, @in6=@loopback, {}, {0x5, 0xffffffffffffffff, 0x0, 0x5}, {0x4, 0x2}, 0x6, 0x2, 0x0, 0x4, 0x18, 0x19}, [@policy={0xac, 0x7, {{@in=@loopback, @in=@remote, 0x4e23, 0x9, 0x4e23, 0xe, 0xa, 0xc0, 0x20, 0x3a, r6, r7}, {0x1, 0x3, 0x1, 0xfa, 0x9, 0xd2f, 0x3c, 0x8000}, {0xfffffffffffff11c, 0x81, 0x9, 0x7}, 0x4, 0x6e6bb2, 0x1, 0x1, 0x0, 0x3}}]}, 0x19c}}, 0x0)
futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000000080), 0x2)
futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x0)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', &(0x7f0000000080)={0x101000, 0x10}, 0xffa8)

7.201347987s ago: executing program 6 (id=517):
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0)
read$FUSE(r0, 0x0, 0x0)
syz_fuse_handle_req(r0, 0x0, 0x0, 0x0)
r1 = getpgrp(0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3)
ptrace$peeksig(0x4209, r2, &(0x7f0000000200)={0x8, 0x1, 0x5}, &(0x7f0000000540)=[{}, {}, {}, {}, {}])
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0)
read$msr(0xffffffffffffffff, &(0x7f0000032680)=""/102392, 0x18ff8)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0xfff}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x15, 0x1c, 0x0, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000400)={{0x1}})
ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0)
r4 = syz_open_dev$sndpcmp(&(0x7f0000000500), 0x0, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000040)=ANY=[@ANYBLOB="8580f84432e1aaaaaaaaaa1c08004515001c00670000020290780a"], 0x0)
ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r4, 0xc0884123, &(0x7f00000000c0)={0x0, "d8d7531c1c6054b6b70257ec47e25dc91f003f19004f6ceb55fb98d58dccd7f0fe41ae63a0df07926f45a38667304ab9b9b98347fbe76528e77e751fd98d62be", {0x2, 0x4}})

7.131533841s ago: executing program 3 (id=518):
r0 = userfaultfd(0x800)
socket$inet(0x2, 0x2, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x104})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f00002b9000/0x400000)=nil, &(0x7f0000779000/0x1000)=nil, 0x400000, 0x0, 0x2})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, 0x0, 0x0)
openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0)
wait4(0xffffffffffffffff, 0x0, 0x40000000, 0x0)

7.119220122s ago: executing program 0 (id=519):
mkdirat(0xffffffffffffffff, &(0x7f0000000000)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
mount$fuse(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x0, 0x0)
read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000001240)={0x50, 0x0, r1, {0x7, 0x2b, 0xfff, 0x83120, 0x3, 0x7, 0x1ff, 0x9, 0x0, 0x0, 0x10, 0x8}}, 0x50)
openat(0xffffffffffffff9c, &(0x7f0000000640)='./file0/file0\x00', 0x4a300, 0xcd)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
syz_io_uring_setup(0x208c, &(0x7f0000000200)={0x0, 0xcb14, 0x10100, 0x3, 0x4001bf}, 0x0, 0x0)
add_key$fscrypt_v1(0x0, &(0x7f0000001f40)={'fscrypt:', @desc1}, &(0x7f0000000440)={0x0, "51f435b675ba491895df818c52f9e875d9b1bd2c20f5c6b1e36d59e2036887f264d726807797b2e0d0768e1791a519f4aac513fc3713901f18f58a56f75b0121", 0x2d}, 0x48, 0xfffffffffffffffe)
syz_init_net_socket$x25(0x9, 0x5, 0x27)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x4000000000001, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x0, 0x0})
syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x1008014, &(0x7f0000000940)=ANY=[], 0x3, 0x7fb, &(0x7f0000000bc0)="$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")
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmmsg$unix(r3, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x804}}, {{&(0x7f00000000c0)=@file={0x1, './file1\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40080}}], 0x2, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r4, &(0x7f0000000100), 0x208e24b)
recvfrom$inet_nvme(r4, &(0x7f00000001c0)=""/251, 0xfb, 0x40000000, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0)
syz_mount_image$minix(&(0x7f0000000340), &(0x7f00000001c0)='./bus\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYRES16=0x0], 0x1, 0x197, &(0x7f0000000900)="$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")
syz_open_dev$tty1(0xc, 0x4, 0x1)
truncate(&(0x7f00000002c0)='./file1\x00', 0x42d9)

6.352012228s ago: executing program 6 (id=520):
fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)={0x0, <r0=>0x0})
sendmsg$inet(0xffffffffffffffff, 0x0, 0x40000)
setreuid(0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new default user:syz 000040'], 0x2a, 0x0)
r4 = add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe)
add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f0000000500)="14", 0x1, 0xfffffffffffffffd)
keyctl$read(0xb, r4, &(0x7f0000000240)=""/112, 0x349b7f55)
r5 = syz_init_net_socket$ax25(0x3, 0x3, 0x8)
ioctl$SIOCAX25OPTRT(r5, 0x89e7, &(0x7f00000003c0)={@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x2, 0x20})
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001080)=ANY=[@ANYBLOB="500000001000e800000000000000", @ANYBLOB="a5f9ad8800000000300012800b00010067656e65766500002000028008000200e000000114000700ff01000000000000", @ANYRESDEC=r0], 0x50}}, 0x8080)
mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x400, 0x0)

5.683846788s ago: executing program 2 (id=521):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)=<r1=>0x0)
r2 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000580)=@mangle={'mangle\x00', 0x64, 0x6, 0x518, 0x270, 0x270, 0x1a0, 0x360, 0x270, 0x448, 0x448, 0x448, 0x448, 0x448, 0x6, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x3c}, @local, [0xff, 0xff, 0xff000000], [0x0, 0xffffffff], 'pim6reg\x00', 'netdevsim0\x00', {}, {0xff}, 0x0, 0x0, 0x3}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x1, 0x0, 0x7}, {0x4, 0x1, 0x6}}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x360}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xd0}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@dev={0xfe, 0x80, '\x00', 0x2a}, 0x3a, 0x8, 0x6}}}, {{@ipv6={@local, @empty, [0x0, 0xff000000, 0xff000000], [], 'tunl0\x00', '\x00', {}, {0xf7d589580f149d60}, 0x0, 0x5, 0x7}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0xc, {0x4}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x578)
timer_settime(r1, 0x1, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120100003952b2400120053c2f3f000000010902240001000000"], 0x0)
splice(r3, 0x0, r4, 0x0, 0x7, 0x0)
r5 = syz_clone(0x2180, 0x0, 0x0, 0x0, 0x0, 0x0)
kcmp(0x0, r5, 0x6, 0xffffffffffffffff, 0xffffffffffffffff)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)

5.249542164s ago: executing program 0 (id=522):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000001000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000180)={[{@orlov}]}, 0xfe, 0x269, &(0x7f0000000200)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0)
fadvise64(r0, 0x0, 0x60, 0x4)

2.505805279s ago: executing program 3 (id=523):
socket$inet_tcp(0x2, 0x1, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x836d9fb164f927b3)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)=ANY=[@ANYBLOB="0213f803030000002cbd7000fddbdf250100", @ANYRES64=r0], 0x18}}, 0x2080)

2.318586741s ago: executing program 5 (id=524):
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000200)='.\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYRESDEC, @ANYRES16, @ANYRES8], 0x1, 0x37c, &(0x7f0000001680)="$eJzs3c+LG2UYwPEnu7PZZEs3OYiiIPugF70Mu6tnJUgL4oJl24itIEy7Ew0Zk2UmRCLiriev4s1/QLD0WPBQUG+e9uKtXrx4ci+CoEXEkfnx5ldnN9k0JWn7/UCbJ3nfJ/O+ySQ8b9i8OX73y48atcCuOW1ZKqjkRETuiZRlSYxccpGXDIfy8rk/7z5/+eq1tyo7Oxd2VS9WrryyrarrG99//GnRSrrdWZWj8vvHUvjt6OmjZ4//u/JhPdB6oM1WWx293vq17Vz3XN2rBw1b9ZLnOoGr9Wbg+kl7K2mvea39/a46zb3za/u+GwTqNLvacLvabmnb76rzgVNvqm3ben4ta7iPscIUOdWbu7tOZcoD3pgyD7P2TxiGpzT7fsVZFrGL97VUbz7UcQEAgIU0Uv9/bWqEsiz1CspcuhbIx/HwMiCq/03ca+nX/7de+LF97p3b62n9fyffr/+lbOr/V39J0obq/+joM6//vx25fn9F9Mg7OEvnB6r/sRg2hl+Rv/dX7Kmo/o9eDb0V/efv3dqMA+p/AAAAAAAAAAAAAAAAAAAAAAAeBffCsBSGYclcmn/9rxCk18219IvGq/MZLmbshOe/992v3vmAx9Llq9ekEG/cYa2LeF90qp1qcpm2m46bUpJ/4/MhlWw4cRg3aqQsP3gHnepKmrAc/18RUfHElS0pSXkoP44vvrlzYUsTSX58/INONWetRfk1qcf521KSp7LztzPz8/LSiwP5tpTk5xvSEk/20vcxk//Zluobb++M5Bfjfllef7hPCQAAAAAAM2erFtLlc3l4/Zus321bNas9WsvL4Po8+XzgJ8lYn29mrs+t0nPWfOcOAAAAAMCTIsh/0nA8z/WD7olBUcb1MX8NNNJkyZh7jgJrgj5Dwd04WDmtz/LADCe953z6CxqTDsMPujLxmE3w16pkPphmC9foFrMpsVfIflQnDMz8J+hcOOtT4AdLZ5+76wcb0Xh0qukMBPHHRjlLTuojl6LAPKQPdqwkMDvnjuv8zFff/D3dIXLprr2DTa/dNmfAqem5kVsOx5y0f4Th2PGsZL9bfDfNj8wAAAAAWBCm6C8G8x4JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABPrlnsjjYumPccAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgEXxfwAAAP//3RHskQ==")
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
ioctl$VHOST_SET_OWNER(0xffffffffffffffff, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0})
timer_create(0x7, &(0x7f0000000080)={0x0, 0x2c, 0x2}, 0x0)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000400))
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92})
ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f00000000c0)=0x1)
ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, &(0x7f0000000040)={@my=0x1})
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000100)={0x1, 0x0, [{0x0, 0x6e, &(0x7f0000001540)=""/110}]})
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r0, &(0x7f0000000200)={0x28, 0x0, 0xffffffff, @my=0x1}, 0x10)
ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=""/57, 0x0, &(0x7f0000000500)=""/4092})
ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, &(0x7f0000000000)=0x1)

2.282014862s ago: executing program 2 (id=525):
r0 = fsmount(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
socket$inet(0x2, 0x4000000000000001, 0x0)
r4 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000140)='{:\'@-\x00', &(0x7f0000000180)='%*.\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000a40)='^,/K', 0x0, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000a80)={'syz0\x00', {0x2, 0x9f, 0x88f8, 0x3}, 0x3f, [0x2, 0x2, 0x8, 0x2, 0x9, 0x8, 0x1, 0xfffffffa, 0x8, 0x10, 0x3, 0x3, 0xffffff81, 0x81, 0xe, 0x3ff, 0x1, 0x8000, 0x7, 0xf8, 0x9, 0xe, 0x38, 0x80000001, 0x2, 0x34, 0x8, 0xffffffff, 0x9, 0x3, 0x1, 0xa, 0x1, 0xfff, 0x4, 0x2, 0x0, 0x9, 0xb, 0x9, 0x401, 0xfffffff8, 0xf4a, 0x5, 0x6, 0x4, 0xd71, 0x5, 0xb, 0xfb, 0x8, 0x0, 0xf2, 0x9, 0xef, 0x8, 0x6, 0xffff, 0xc93e, 0x7, 0x3ff, 0x1, 0x8, 0x7f], [0x0, 0x0, 0x1, 0x4, 0x3, 0x6d6, 0xd, 0x2, 0x10001, 0x2, 0x10, 0x1, 0x1, 0x7, 0xfffffffa, 0x8001, 0x40, 0x2, 0x100, 0x7fff, 0x81, 0x9, 0x3, 0x4b, 0x3, 0x4c70, 0x7102, 0x10, 0x57a, 0x4, 0x9, 0x4, 0x3, 0x9, 0x6, 0x9, 0x7, 0x6, 0x4, 0x9a, 0x0, 0x100, 0x9, 0x8, 0x1, 0x7, 0x4, 0x744, 0xf, 0xc, 0x29, 0x58, 0x4, 0x800, 0x1000, 0x3, 0x6, 0x4, 0x9, 0x27, 0xfffffffa, 0x8, 0x1, 0x4], [0x2, 0x6, 0xd4, 0x5, 0xca, 0x9, 0x38, 0x6, 0x0, 0x81, 0x1ff, 0x40, 0x9, 0x6, 0x7fffffff, 0x3, 0x7, 0x0, 0x5, 0xff, 0x2, 0xd, 0x3, 0x0, 0xfffffff8, 0x7, 0x10000, 0xc, 0x6, 0x800, 0x5, 0xb, 0x4, 0xffffff62, 0x1ff, 0x1ff, 0x5, 0xcb5, 0x2, 0x0, 0x0, 0x1, 0x0, 0x100, 0x80, 0xfffffff9, 0x2, 0x6, 0x0, 0x1, 0xb0, 0x6, 0x2, 0x2, 0xf05b, 0x1f398dea, 0xa84, 0x6, 0x8, 0x2, 0x0, 0xffffffff, 0x10001, 0x6], [0xfffffc00, 0x2, 0x357, 0x3, 0x685, 0x7fffffff, 0x5, 0x3, 0x5e, 0x80000000, 0xffff7fff, 0x1, 0x2, 0xc, 0xbd5, 0x6, 0x3, 0x6, 0x200, 0x7, 0xffffff00, 0x100, 0x5, 0x9, 0x358, 0x9, 0x14, 0xfffeffff, 0x7, 0x2, 0x7fff, 0x4d, 0x123, 0x1ff, 0x6d32, 0xffff, 0xb8c9, 0x6, 0x7, 0x6, 0x9, 0xfffffff9, 0x5, 0xd84, 0x8, 0x80000001, 0x2, 0x0, 0x3, 0x3bb4, 0x4, 0x3, 0x8000, 0x4, 0x7, 0x4, 0x0, 0x138, 0x6dacd37e, 0x4, 0x2, 0x7e5, 0x10, 0x6268]}, 0x45c)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000280)='\x1c@\\\x00', &(0x7f0000000080)='\xe6\x98J\xcf\xe62\x7f(\x84Wv5f&\xe8\xd2', 0x0)
fsconfig$FSCONFIG_SET_BINARY(r4, 0x2, 0x0, &(0x7f0000000340)="02", 0x1)
fsconfig$FSCONFIG_SET_BINARY(r4, 0x2, &(0x7f0000000540)='\xc1J\xaf\xfd,\x86\xbc\xa9\x02\xf2\xf6\xe2\xcd\x9f\xf6\x83\xeb\xba_6\xfdR\xd0\x8d\xc1\xf6.$w\xab|*`\x11H+^\xbb\x8ar\xb1\x8ec\xecQ\x94\x15\xbe\x80E\x9c\x93Hq?<(+\xceb0\xcc\xad\xdd\x1c\xee\x19\x1b\x91Z\x85\xb7\x04\xe7\xaf\xe0W,G\xc8\xc0\xbcR\x90\x17\x19@m\xa5\x19\x16i\xc8\x99)\xa5\xb0\xba\xbc\xe0rV\x06\xd0B\x0f\xcdF\xbc\x8e\x8a^%8k\x849@\x15=kxS\x1c\xc1\xdaT\x9c\b\xb6\xd8\xa0st~\xf1\x93\xb8\xba\xa5gV\x18F\x8f\xf4b\xdc\x19_P\x81\xa4\xc3\\g\x11\xd1\xc8 U\xba\x03\xc9\xf17\x88\r\xb99]\xdfM\xc8AQB\xc3\xf0\xf7t\xee\x95&w\xc3;\xf1C\xea!J\x19\xe1\xfe\x0f\x84\xdfY\x10\xed\x1c\xb2n\xc0ME\xaa\x9e\xd1f\x92q\xeb\xdb)\xcd1(>\x8e\x0f}\x03\xdd\xf8\x84\x9bz!\x80F\xc5ls< \x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x98\x1c\x9f\xbd\xcd\xea\xc3w\xa3\xf5\x1d.\x00\x00\x00\xa0\xf4\xe9\xe2\x83\xac\xde\x95cmvM\x12\xc1O\x1f#\xcd\x90\x1e\x03\x1e}\xe7w\xe7\"Oh`\xed\bM9\xaf\xa3BQ\xbf\xfd1\x1cG\xb5\xed\x86\xb9Q(\x19dZ\x8da\x008e*\x928\xcf\x0f\x0e\x05\x1dM?\x11$E\xc3\x12\x1e\xffI\x84t0D\xec\xf3T\xe2\xddJm\x87\xc9\xb1\xff\n\xa1\x13\xcbo\xc6\xda\x84\x02\xa3\x14\xf2q\x96\xa8Sa\xe4\x1f\x01\xa2]\xb2\xc9\xd5\xff\xfd\xf2\xb5\xf5\xef \xc7\x02\x927\xdb\xa5\a\x9eS\xb6\xe2\xbaL\x99n\xb4\xe3\xf7\x0eU\xc0', &(0x7f0000000700)="19", 0x1)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000380)='}\x00', &(0x7f0000000880)='\xc1J\xaf\xfd,\x86\xbc\xa9\x02\xf2\xf6\xe2\xcd\x9f\xf6\x83\xeb\xba_6\xfdR\xd0\x8d\xc1\xf6.$w\xab|*`\x11H+^\xbb\x8ar\xb1\x8ec\xecQ\x94\x15\xbe\x80E\x9c\x93Hq?<(+\xceb0\xcc\xad\xdd\x1c\xee\x19\x1b\x91Z\x85\xb7\x04\xe7\xaf\xe0W,G\xc8\xc0\xbcR\x90\x17\x19@m\xa5\x19\x16i\xc8\x99)\xa5\xb0\xba\xbc\xe0rV\x06\xd0B\x0f\xcdF\xbc\x8e\x8a^%8k\x849@\x15=kxS\x1c\xc1\xdaT\x9c\b\xb6\xd8\xa0st~\xf1\x93\xb8\xba\xa5gV\x18F\x8f\xf4b\xdc\x19_P\x81\xa4\xc3\\g\x11\xd1\xc8 U\xba\x03\xc9\xf17\x88\r\xb99]\xdfM\xc8AQB\xc3\xf0\xf7t\xee\x95&w\xc3;\xf1C\xea!J\x19\xe1\xfe\x0f\x84\xdfY\x10\xed\x1c\xb2n\xc0ME\xaa\x9e\xd1f\x92q\xeb\xdb)\xcd1(>\x8e\x0f}\x03\xdd\xf8\x84\x9bz!\x80F\xc5ls< \x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x98\x1c\x9f\xbd\xcd\xea\xc3w\xa3\xf5\x1d.\x00\x00\x00\xa0\xf4\xe9\xe2\x83\xac\xde\x95cmvM\x12\xc1O\x1f#\xcd\x90\x1e\x03\x1e}\xe7w\xe7\"Oh`\xed\bM9\xaf\xa3BQ\xbf\xfd1\x1cG\xb5\xed\x86\xb9Q(\x19dZ\x8da\x008e*\x928\xcf\x0f\x0e\x05\x1dM?\x11$E\xc3\x12\x1e\xffI\x84t0D\xec\xf3T\xe2\xddJm\x87\xc9\xb1\xff\n\xa1\x13\xcbo\xc6\xda\x84\x02\xa3\x14\xf2q\x96\xa8Sa\xe4\x1f\x01\xa2]\xb2\xc9\xd5\xff\xfd\xf2\xb5\xf5\xef \xc7\x02\x927\xdb\xa5\a\x9eS\xb6\xe2\xbaL\x99n\xb4\xe3\xf7\x0eU\xc0', 0x0)
fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='(\xed\xef(.(\\-]\x00', &(0x7f00000000c0)='f\xf0p\xce\x97\xbb\xd2dH\xdf\xbd\x18\x9baE\xef\x90\x90\x057g\x85\xf4\xf0\xba\xb0\xb1\x06\xa6q\xef\x03H\xda\"`\xd6', 0x0)
fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f0000000240)='fuseblk\x00', 0x0, r4)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
close_range(r5, 0xffffffffffffffff, 0x0)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000200), &(0x7f00000003c0)=0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0)
r6 = landlock_create_ruleset(0x0, 0x0, 0x1)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r6, 0x1, 0x0, 0x0)

1.983951931s ago: executing program 0 (id=526):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
r1 = userfaultfd(0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000))
readv(r1, &(0x7f0000000480)=[{&(0x7f0000000180)=""/39, 0x27}], 0x1)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
unshare(0x20060400)
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800, &(0x7f00000004c0)={[{@usrjquota_path={'usrjquota', 0x3d, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}}]}, 0xff, 0x49b, &(0x7f0000001040)="$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")
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58)
read$alg(0xffffffffffffffff, 0x0, 0x0)
r3 = openat$ttynull(0xffffffffffffff9c, 0x0, 0x4000, 0x0)
ioctl$VT_SETMODE(r3, 0x5602, &(0x7f00000002c0)={0x6, 0x6, 0xffff, 0x0, 0x7})
socket$alg(0x26, 0x5, 0x0)
sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, 0x0, 0x8c0)
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r4, 0x0, 0x0)
ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f0000000000)='veth1_virt_wifi\x00')
syz_usb_connect$cdc_ncm(0x5, 0x6e, &(0x7f0000000180)={{0x12, 0x1, 0x300, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x4, 0xc0, 0x5, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0xfffffff7, 0xa, 0x7, 0x5}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x35, 0xa, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x10, 0x8, 0x1, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0xfd, 0x4, 0x7}}}}}}}]}}, &(0x7f0000000640)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x300, 0xfa, 0x5, 0x6, 0xff, 0x9}, 0x0, 0x0, 0x3, [{0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x42c}}, {0xb0, &(0x7f0000000580)=@string={0xb0, 0x3, "e17942791a099c727b857e19fea00e0ac5baf36220e71428b3dde3444753489cf6fc8bf1282edcc7c61a66d86e45303ff3044987ef7d7b28cdd21d1b06a9c9adcce49362da6d713981153998bb83de4a1d44b4ff6b873a1832e6760763525354b06c9116544962276f583aea925e7aa42715110e0dd27c419f1bcd9288abeab9a29363c0c283477e3559cb6d25ba156a0d5bbef61f43469e83c7a8d184e614644db65a840a49df0fa63bbb4a3e05"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x816}}]})
r5 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r5, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="020320001300000000000000000000000400030000000000000000000000000000000000000000010000000000000000030006000000000002004e206401010000000000000000000400040000000000feffffffffffffff000000000000000000000000000000000200010000000000000002fd01000080030005000000000002004e21ffffffff0000000000000000010018"], 0x98}}, 0x0)
syz_usb_connect$cdc_ncm(0x6, 0x0, 0x0, 0x0)

1.901844746s ago: executing program 3 (id=527):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c)
connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e1d, 0x9, @local, 0x4}, 0x1c)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r1, &(0x7f0000000240)={0x2, 0x4e20, @remote}, 0x10)
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@random="d3f34746b238", @local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x8}}}}}, 0x0)

1.232703715s ago: executing program 2 (id=528):
r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xeef, 0x72d0, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xc0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0xfc}}}}}]}}]}}, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f0000000500)={0x40, 0x7, 0x2, {0x2, 0x11}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

1.024659378s ago: executing program 5 (id=529):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bind$inet6(r0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0)
r2 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff)
keyctl$read(0x2, r2, &(0x7f00000000c0)=""/4096, 0x1000)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCXONC(r3, 0x540a, 0x0)
ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90b, 0xf4c, '\x00', @p_u16=&(0x7f0000000440)}})
r4 = gettid()
timer_create(0x8, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)=<r5=>0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f000001b440)=@newqdisc={0x26c, 0x24, 0x400, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x5, 0xf}, {0x5, 0x10}, {0x6, 0x2}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x6}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x5}, @TCA_RATE={0x6, 0x5, {0x5, 0xa}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_RATE={0x6, 0x5, {0x7, 0xb}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x3ff}, @qdisc_kind_options=@q_mqprio={{0xb}, {0x20c, 0x2, {{0xc, [0xf, 0x7, 0xe, 0x6, 0x9, 0x1, 0xe, 0x2, 0x9, 0x2, 0x5, 0x3, 0x0, 0x4, 0xe, 0xe], 0x0, [0x53a2, 0x8000, 0x0, 0x8, 0xa6, 0x3, 0x5, 0x6, 0x5, 0x1, 0x5870, 0x80, 0xff, 0xd742, 0xa7fa, 0x100], [0x8001, 0x2765, 0x9, 0x2, 0x101, 0x4, 0x0, 0x7f, 0x4c7, 0x5, 0xf0c5, 0x0, 0x9, 0x3, 0x8b06, 0x2e90]}, [@TCA_MQPRIO_SHAPER={0x6, 0x2, 0x1}, @TCA_MQPRIO_MAX_RATE64={0x4}, @TCA_MQPRIO_MAX_RATE64={0xa0, 0x4, 0x0, 0x1, [{0xc, 0x4, 0x7f}, {0xc}, {0xc, 0x4, 0x400}, {0xc, 0x4, 0xca9}, {0xc, 0x4, 0xffffffff}, {0xc, 0x4, 0x6cf7}, {0xc, 0x4, 0x5}, {0xc, 0x4, 0xe}, {0xc, 0x4, 0x8}, {0xc, 0x4, 0x8}, {0xc, 0x4, 0x5}, {0xc, 0x4, 0x4}, {0xc, 0x4, 0x8000000000000001}]}, @TCA_MQPRIO_MAX_RATE64={0x4}, @TCA_MQPRIO_MIN_RATE64={0x1c, 0x3, 0x0, 0x1, [{0xc, 0x3, 0xbd44}, {0xc, 0x3, 0x10001}]}, @TCA_MQPRIO_MIN_RATE64={0x4}, @TCA_MQPRIO_MIN_RATE64={0x28, 0x3, 0x0, 0x1, [{0xc, 0x3, 0x2000000000}, {0xc, 0x3, 0x2}, {0xc, 0x3, 0x2}]}, @TCA_MQPRIO_MODE={0x6}, @TCA_MQPRIO_SHAPER={0x6, 0x2, 0x1}, @TCA_MQPRIO_MIN_RATE64={0xac, 0x3, 0x0, 0x1, [{0xc, 0x3, 0xfffffffffffffff8}, {0xc, 0x3, 0x6}, {0xc, 0x3, 0xda}, {0xc}, {0xc, 0x3, 0x7}, {0xc, 0x3, 0x7f}, {0xc}, {0xc, 0x3, 0x1aa58030}, {0xc, 0x3, 0x4}, {0xc, 0x3, 0x3}, {0xc, 0x3, 0x7fffffff}, {0xc, 0x3, 0xea5}, {0xc, 0x3, 0x6}, {0xc, 0x3, 0xe34}]}]}}}]}, 0x26c}, 0x1, 0x0, 0x0, 0x4000880}, 0x20000080)
r6 = socket(0x10, 0x803, 0x0)
sendto(r6, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r6, 0x0, 0x0, 0x2040000, 0x0)
timer_settime(r5, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r7 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_linger(r7, 0x1, 0xd, 0x0, 0x0)
setsockopt$inet_tcp_int(r7, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
connect$inet(r7, &(0x7f0000000180)={0x2, 0x4e1f, @local}, 0x10)

1.66948ms ago: executing program 3 (id=530):
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2042, 0x0)
ioctl$AUTOFS_IOC_FAIL(r2, 0x4c80, 0x7000000)

0s ago: executing program 6 (id=531):
syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000740)={[{@debug}, {@stripe={'stripe', 0x3d, 0x61}}, {@grpid}, {@test_dummy_encryption_v1}, {@data_err_abort}, {@oldalloc}, {@acl}, {@journal_ioprio}, {@resuid}]}, 0x1, 0xbb4, &(0x7f00000017c0)="$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")
syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x80f811, 0x0, 0x0, 0x0, &(0x7f00000000c0))
chdir(&(0x7f00000003c0)='./bus\x00')
r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
r1 = open(&(0x7f0000000180)='./file1\x00', 0x185102, 0x2b)
sendfile(r0, r1, 0x0, 0x1000000201001)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0xc41, 0x20)

kernel console output (not intermixed with test programs):

500][ T4265] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   63.196680][ T4345] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.204550][ T4345] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.207060][ T4271] device veth1_macvtap entered promiscuous mode
[   63.242748][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[   63.266655][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   63.274894][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   63.638921][   T75] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   63.648430][   T75] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   63.885814][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   63.910382][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.926128][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   63.946396][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   63.968664][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   63.990079][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   64.028237][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[   64.046213][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   64.059661][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.069958][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   64.078459][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   64.092254][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   64.118106][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   64.129999][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   64.139984][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   64.150457][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   64.160922][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   64.172573][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   64.183203][ T4271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[   64.193779][ T4271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[   64.217492][ T4271] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.237712][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.245563][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.265698][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   64.278384][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   64.289931][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   64.302817][ T4271] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.312178][ T4271] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.320991][ T4271] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.329869][ T4271] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.356615][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.361956][    T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   64.364455][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.406195][    T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   64.418144][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   64.437305][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   64.766115][ T4267] Bluetooth: hci0: command 0x0419 tx timeout
[   64.772271][ T4267] Bluetooth: hci2: command 0x0419 tx timeout
[   64.778543][ T4267] Bluetooth: hci3: command 0x0419 tx timeout
[   64.784557][ T4267] Bluetooth: hci4: command 0x0419 tx timeout
[   64.791665][ T4267] Bluetooth: hci1: command 0x0419 tx timeout
[   65.658281][ T4393] loop1: detected capacity change from 0 to 65536
[   65.826153][ T4393] XFS (loop1): Mounting V5 Filesystem
[   65.885997][ T4393] XFS (loop1): Ending clean mount
[   65.897222][ T4393] XFS (loop1): Quotacheck needed: Please wait.
[   65.953160][ T4393] XFS (loop1): Quotacheck: Done.
[   66.305976][    C0] sched: RT throttling activated
[   66.432084][ T4383] loop0: detected capacity change from 0 to 262144
[   66.440905][ T4383] =======================================================
[   66.440905][ T4383] WARNING: The mand mount option has been deprecated and
[   66.440905][ T4383]          and is ignored by this kernel. Remove the mand
[   66.440905][ T4383]          option from the mount to silence this warning.
[   66.440905][ T4383] =======================================================
[   66.714146][ T4383] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop0 scanned by syz.0.1 (4383)
[   67.032091][ T4383] BTRFS info (device loop0): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53
[   67.042573][ T4383] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm
[   67.052446][ T4383] BTRFS info (device loop0): using free space tree
[   67.130685][ T4264] XFS (loop1): Unmounting Filesystem
[   67.141278][ T4345] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.179318][ T4345] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.202606][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   67.220384][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.228900][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.251523][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[   67.367224][ T4383] BTRFS info (device loop0): enabling ssd optimizations
[   67.425706][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   67.453130][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   67.497005][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[   67.577830][ T4273] BTRFS info (device loop0): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53
[   67.664452][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[   67.676009][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[   67.686009][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[   67.696005][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[   67.706006][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[   67.714291][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[   67.722505][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[   67.730713][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[   67.738926][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[   67.747139][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[   69.416147][ T4452] usb 5-1: new full-speed USB device number 2 using dummy_hcd
[   69.463007][ T4457] netlink: 16 bytes leftover after parsing attributes in process `syz.0.11'.
[   69.701493][ T4460] loop1: detected capacity change from 0 to 764
[   69.743183][ T4460] Symlink component flag not implemented
[   69.749304][ T4460] Symlink component flag not implemented
[   69.755596][ T4460] Symlink component flag not implemented (129)
[   69.761953][ T4460] Symlink component flag not implemented (6)
[   70.391102][ T4452] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   70.417260][ T4452] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 2
[   70.431383][ T4452] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[   70.440666][ T4452] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   70.453885][ T4452] usb 5-1: config 0 descriptor??
[   70.663343][ T4472] loop1: detected capacity change from 0 to 128
[   70.675429][ T4452] usb 5-1: USB disconnect, device number 2
[   70.727097][ T4472] FAT-fs (loop1): Unrecognized mount option "18446744073709551615���" or missing value
[   70.912712][ T4477] loop2: detected capacity change from 0 to 764
[   70.942367][ T4477] Symlink component flag not implemented
[   70.948163][ T4477] Symlink component flag not implemented
[   70.954218][ T4477] Symlink component flag not implemented (129)
[   70.960710][ T4477] Symlink component flag not implemented (6)
[   71.402407][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[   71.411064][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[   72.155885][ T4485] futex_wake_op: syz.2.21 tries to shift op by 32; fix this program
[   72.391782][ T4495] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   72.402956][ T4495] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   72.410797][ T4495] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   72.474689][ T4495] netlink: 16 bytes leftover after parsing attributes in process `syz.2.21'.
[   73.377699][ T4494] loop1: detected capacity change from 0 to 65536
[   73.514570][ T4494] XFS (loop1): Mounting V5 Filesystem
[   73.757497][ T4494] XFS (loop1): Ending clean mount
[   73.763902][ T4494] XFS (loop1): Quotacheck needed: Please wait.
[   73.779987][ T4509] capability: warning: `syz.0.22' uses deprecated v2 capabilities in a way that may be insecure
[   73.845859][ T4513] netlink: 12 bytes leftover after parsing attributes in process `syz.0.22'.
[   73.870858][ T4513] netlink: 72 bytes leftover after parsing attributes in process `syz.0.22'.
[   75.353491][ T4494] XFS (loop1): Quotacheck: Done.
[   75.438659][ T4264] XFS (loop1): Unmounting Filesystem
[   75.770025][ T4281] Bluetooth: hci1: Unknown advertising packet type: 0x7773
[   75.770106][ T4281] Bluetooth: hci1: Malformed LE Event: 0x0d
[   75.930577][ T4522] vivid-007: kernel_thread() failed
[   76.542167][   T41] cfg80211: failed to load regulatory.db
[   77.926060][ T4378] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   78.126613][ T4378] usb 2-1: Using ep0 maxpacket: 32
[   78.146628][ T4378] usb 2-1: config 0 has an invalid interface number: 51 but max is 0
[   78.176286][ T4378] usb 2-1: config 0 has no interface number 0
[   78.216825][ T4378] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[   78.226485][ T4378] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   78.234896][ T4378] usb 2-1: Product: syz
[   78.242804][ T4378] usb 2-1: Manufacturer: syz
[   78.249243][ T4378] usb 2-1: SerialNumber: syz
[   78.314235][ T4378] usb 2-1: config 0 descriptor??
[   78.351239][ T4378] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[   78.562129][ T4378] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[   78.622012][ T4378] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[   78.846856][ T4553] loop2: detected capacity change from 0 to 764
[   78.971189][    C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71
[   79.305846][ T4553] Symlink component flag not implemented
[   79.311762][ T4553] Symlink component flag not implemented
[   79.318003][ T4553] Symlink component flag not implemented (129)
[   79.324221][ T4553] Symlink component flag not implemented (6)
[   79.485224][ T4378] usb 2-1: USB disconnect, device number 2
[   79.534621][ T4378] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[   79.562276][ T4378] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[   79.583088][ T4378] quatech2 2-1:0.51: device disconnected
[   80.190248][ T4562] futex_wake_op: syz.1.34 tries to shift op by 32; fix this program
[   80.329591][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   80.345380][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   80.353684][ T4567] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   80.472311][ T4567] netlink: 16 bytes leftover after parsing attributes in process `syz.1.34'.
[   81.514597][ T4577] loop4: detected capacity change from 0 to 65536
[   82.137922][ T4582] vivid-005: kernel_thread() failed
[   82.283033][ T4281] Bluetooth: hci3: Unknown advertising packet type: 0x7773
[   82.283081][ T4281] Bluetooth: hci3: Malformed LE Event: 0x0d
[   82.440172][ T4577] XFS (loop4): Mounting V5 Filesystem
[   82.535326][ T4577] XFS (loop4): Ending clean mount
[   82.543475][ T4577] XFS (loop4): Quotacheck needed: Please wait.
[   82.581027][ T4577] XFS (loop4): Quotacheck: Done.
[   83.295734][ T4599] loop3: detected capacity change from 0 to 128
[   83.317716][ T4271] XFS (loop4): Unmounting Filesystem
[   83.349076][ T4599] FAT-fs (loop3): Unrecognized mount option "18446744073709551615���" or missing value
[   83.433013][ T4258] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[   83.554132][ T4609] netlink: 16 bytes leftover after parsing attributes in process `syz.1.43'.
[   83.648645][ T4610] loop0: detected capacity change from 0 to 764
[   83.671498][ T4610] Symlink component flag not implemented
[   83.677441][ T4610] Symlink component flag not implemented
[   83.684180][ T4610] Symlink component flag not implemented (129)
[   83.690457][ T4610] Symlink component flag not implemented (6)
[   84.786667][ T4623] futex_wake_op: syz.3.48 tries to shift op by 32; fix this program
[   85.014562][ T4627] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   85.023892][ T4627] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   85.031578][ T4627] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   85.068710][ T4627] netlink: 16 bytes leftover after parsing attributes in process `syz.3.48'.
[   86.062350][ T4638] loop4: detected capacity change from 0 to 764
[   86.339041][ T4281] Bluetooth: hci1: Unknown advertising packet type: 0x7773
[   86.339080][ T4281] Bluetooth: hci1: Malformed LE Event: 0x0d
[   86.725648][ T4639] vivid-007: kernel_thread() failed
[   88.316571][ T4631] Symlink component flag not implemented
[   88.322283][ T4631] Symlink component flag not implemented
[   88.328089][ T4631] Symlink component flag not implemented (129)
[   88.334288][ T4631] Symlink component flag not implemented (6)
[   89.284643][    C0] vxcan1: j1939_simple_recv: Received already invalidated message
[   91.018565][ T4669] loop3: detected capacity change from 0 to 764
[   91.049312][ T4669] Symlink component flag not implemented
[   91.055011][ T4669] Symlink component flag not implemented
[   91.061063][ T4669] Symlink component flag not implemented (129)
[   91.067374][ T4669] Symlink component flag not implemented (6)
[   91.991339][ T4671] netlink: 8 bytes leftover after parsing attributes in process `syz.3.58'.
[   92.269252][ T4674] loop2: detected capacity change from 0 to 16
[   92.276014][ T4674] MTD: Attempt to mount non-MTD device "/dev/loop2"
[   92.456050][ T4676] futex_wake_op: syz.3.60 tries to shift op by 32; fix this program
[   92.801992][ T4281] Bluetooth: hci0: Unknown advertising packet type: 0x7773
[   92.802644][ T4281] Bluetooth: hci0: Malformed LE Event: 0x0d
[   93.147213][ T4680] vivid-003: kernel_thread() failed
[   93.279737][ T4689] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[   93.289040][ T4689] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[   93.296735][ T4689] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[   93.517843][ T4691] netlink: 8 bytes leftover after parsing attributes in process `syz.3.60'.
[   96.621745][ T4709] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   97.008288][ T4711] netlink: 8 bytes leftover after parsing attributes in process `syz.2.70'.
[   97.214071][ T4713] loop2: detected capacity change from 0 to 256
[   97.385666][ T4713] FAT-fs (loop2): Directory bread(block 64) failed
[   97.406119][ T4713] FAT-fs (loop2): Directory bread(block 65) failed
[   97.412847][ T4713] FAT-fs (loop2): Directory bread(block 66) failed
[   97.664114][ T4717] loop0: detected capacity change from 0 to 65536
[   97.726801][ T4713] FAT-fs (loop2): Directory bread(block 67) failed
[   97.752159][ T4713] FAT-fs (loop2): Directory bread(block 68) failed
[   97.764437][ T4717] XFS (loop0): Mounting V5 Filesystem
[   97.786203][ T4713] FAT-fs (loop2): Directory bread(block 69) failed
[   97.804785][ T4713] FAT-fs (loop2): Directory bread(block 70) failed
[   97.843337][ T4717] XFS (loop0): Ending clean mount
[   97.850779][ T4713] FAT-fs (loop2): Directory bread(block 71) failed
[   97.858003][ T4713] FAT-fs (loop2): Directory bread(block 72) failed
[   97.865381][ T4713] FAT-fs (loop2): Directory bread(block 73) failed
[   97.873015][ T4717] XFS (loop0): Quotacheck needed: Please wait.
[   97.897076][ T4717] XFS (loop0): Quotacheck: Done.
[   98.589570][ T4273] XFS (loop0): Unmounting Filesystem
[   99.118106][   T26] audit: type=1800 audit(1771325067.888:2): pid=4737 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.73" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0
[   99.118358][ T4737] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12
[   99.147710][ T4737] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12
[   99.157334][ T4737] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[   99.191385][ T4737] syz.3.73 (4737) used greatest stack depth: 20120 bytes left
[  100.228188][    T7] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  100.643076][ T4281] Bluetooth: hci2: Unknown advertising packet type: 0x7773
[  100.643915][ T4281] Bluetooth: hci2: Malformed LE Event: 0x0d
[  101.118745][    T7] usb 2-1: config 0 has no interfaces?
[  101.124278][    T7] usb 2-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b
[  101.146014][    T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  101.240900][    T7] usb 2-1: config 0 descriptor??
[  101.473013][    T7] usb 2-1: USB disconnect, device number 3
[  101.532677][ T4763] netlink: 8 bytes leftover after parsing attributes in process `syz.3.81'.
[  101.557786][   T46] Bluetooth: hci5: Frame reassembly failed (-84)
[  102.665707][ T4776] loop0: detected capacity change from 0 to 65536
[  102.803872][ T4776] XFS (loop0): Mounting V5 Filesystem
[  103.161989][ T4776] XFS (loop0): Ending clean mount
[  103.171675][ T4776] XFS (loop0): Quotacheck needed: Please wait.
[  103.248463][ T4776] XFS (loop0): Quotacheck: Done.
[  103.493864][ T4797] loop1: detected capacity change from 0 to 764
[  103.646735][ T4281] Bluetooth: hci5: Opcode 0x1003 failed: -110
[  103.647208][ T4267] Bluetooth: hci5: command 0x1003 tx timeout
[  104.711669][ T4799] syz.3.87 (4799) used greatest stack depth: 17048 bytes left
[  104.869886][ T4797] Symlink component flag not implemented
[  104.875766][ T4797] Symlink component flag not implemented
[  104.882397][ T4797] Symlink component flag not implemented (129)
[  104.889102][ T4797] Symlink component flag not implemented (6)
[  105.232513][ T4273] XFS (loop0): Unmounting Filesystem
[  105.333666][ T4804] loop3: detected capacity change from 0 to 4096
[  105.360435][ T4806] loop4: detected capacity change from 0 to 1024
[  105.399421][ T4806] EXT4-fs: Ignoring removed oldalloc option
[  106.118439][ T4267] Bluetooth: hci0: Unknown advertising packet type: 0x7773
[  106.123216][ T4267] Bluetooth: hci0: Malformed LE Event: 0x0d
[  106.249552][ T4815] vivid-003: kernel_thread() failed
[  106.663816][ T4806] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  106.696233][ T4806] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  106.838571][ T4806] EXT4-fs error (device loop4): ext4_lookup:1858: inode #15: comm syz.4.93: inode has both inline data and extents flags
[  107.124572][ T4271] EXT4-fs (loop4): unmounting filesystem.
[  107.165829][ T4830] netlink: 8 bytes leftover after parsing attributes in process `syz.2.95'.
[  108.472778][ T4847] loop1: detected capacity change from 0 to 65536
[  108.583875][ T4857] loop3: detected capacity change from 0 to 764
[  109.418266][ T4267] Bluetooth: hci3: Unknown advertising packet type: 0x7773
[  109.418305][ T4267] Bluetooth: hci3: Malformed LE Event: 0x0d
[  109.863212][ T4863] vivid-005: kernel_thread() failed
[  110.022775][ T4857] Symlink component flag not implemented
[  110.025147][ T4847] XFS (loop1): Mounting V5 Filesystem
[  110.034036][ T4857] Symlink component flag not implemented
[  110.040479][ T4857] Symlink component flag not implemented (129)
[  110.046930][ T4857] Symlink component flag not implemented (6)
[  110.222781][ T4847] XFS (loop1): Ending clean mount
[  110.246558][ T4847] XFS (loop1): Quotacheck needed: Please wait.
[  110.278618][ T4847] XFS (loop1): Quotacheck: Done.
[  110.650491][ T4879] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  110.679728][ T4264] XFS (loop1): Unmounting Filesystem
[  111.803089][ T4881] loop0: detected capacity change from 0 to 262144
[  111.837560][ T4881] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop0 scanned by syz.0.109 (4881)
[  111.854394][ T4881] BTRFS info (device loop0): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53
[  111.864628][ T4881] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm
[  111.874407][ T4881] BTRFS info (device loop0): using free space tree
[  112.119603][ T4888] loop3: detected capacity change from 0 to 32768
[  112.132069][ T4888] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.110 (4888)
[  112.150684][ T4888] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  112.160981][ T4888] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  112.169662][ T4888] BTRFS info (device loop3): using free space tree
[  112.540886][ T4897] loop1: detected capacity change from 0 to 32768
[  113.265686][ T3636]  loop1: p1 p3 < p5 p6 >
[  113.296101][ T4881] BTRFS info (device loop0): enabling ssd optimizations
[  113.401767][ T4881] BTRFS info (device loop0): balance: start -d -m -s
[  113.427102][ T4881] BTRFS info (device loop0): relocating block group 30408704 flags metadata|dup
[  113.463920][ T4888] BTRFS info (device loop3): enabling ssd optimizations
[  113.525016][ T4881] BTRFS info (device loop0): found 3 extents, stage: move data extents
[  113.561685][ T4881] BTRFS info (device loop0): relocating block group 22020096 flags system|dup
[  113.591729][ T4881] BTRFS info (device loop0): found 1 extents, stage: move data extents
[  113.632289][ T4881] BTRFS info (device loop0): relocating block group 13631488 flags data
[  113.675590][ T4926] loop1: detected capacity change from 0 to 1024
[  113.783020][ T4881] BTRFS info (device loop0): balance: canceled
[  113.846197][   T26] audit: type=1800 audit(1771325082.538:3): pid=4929 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.110" name="file2" dev="loop3" ino=261 res=0 errno=0
[  114.081304][ T4273] BTRFS info (device loop0): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53
[  114.206215][ T4265] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  114.387504][ T4935] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  114.547627][ T4264] hfsplus: bad catalog entry type
[  114.724550][ T4948] netlink: 164 bytes leftover after parsing attributes in process `syz.4.117'.
[  115.327504][ T4267] Bluetooth: hci1: Unknown advertising packet type: 0x7773
[  115.328079][ T4267] Bluetooth: hci1: Malformed LE Event: 0x0d
[  115.962905][ T4833] hfsplus: b-tree write err: -5, ino 4
[  116.140439][ T4972] loop0: detected capacity change from 0 to 764
[  116.160869][ T4972] Symlink component flag not implemented
[  116.166920][ T4972] Symlink component flag not implemented
[  116.173501][ T4972] Symlink component flag not implemented (129)
[  116.179842][ T4972] Symlink component flag not implemented (6)
[  117.035888][ T4258] udevd[4258]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[  117.072616][ T4554] udevd[4554]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory
[  117.085749][ T4257] udevd[4257]: inotify_add_watch(7, /dev/loop1p6, 10) failed: No such file or directory
[  117.085844][ T4448] udevd[4448]: inotify_add_watch(7, /dev/loop1p5, 10) failed: No such file or directory
[  117.289859][ T4977] loop0: detected capacity change from 0 to 128
[  117.304560][ T4409] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  117.338475][ T4977] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem
[  117.431599][ T4977] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  117.449724][ T4409] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  117.471998][ T4977] ext2 filesystem being mounted at /22/w��5�T��)�`)Y�F�nA��@T<�3�ڂ$���r�cnH�<�p�r��>�wC�" ��-������8 supports timestamps until 2038-01-19 (0x7fffffff)
[  117.743142][ T4409] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  117.878890][ T4984] loop4: detected capacity change from 0 to 32768
[  117.923802][ T4984] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.126 (4984)
[  117.940319][ T4984] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  117.951466][ T4984] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  117.960235][ T4984] BTRFS info (device loop4): using free space tree
[  118.121356][ T4273] EXT4-fs (loop0): unmounting filesystem.
[  118.226962][ T4409] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  118.368979][ T4984] BTRFS info (device loop4): enabling ssd optimizations
[  119.897774][   T26] audit: type=1800 audit(1771325087.448:4): pid=5010 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.126" name="file2" dev="loop4" ino=261 res=0 errno=0
[  120.116085][ T4454] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  120.202903][ T4281] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  120.213899][ T4281] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  120.257484][ T4271] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  120.379045][ T4281] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  120.391937][ T4281] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  120.406132][ T4281] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  120.543435][ T4281] Bluetooth: hci3: Unknown advertising packet type: 0x7773
[  120.544306][ T4281] Bluetooth: hci3: Malformed LE Event: 0x0d
[  120.562104][ T4281] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  120.809318][ T4454] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  120.828849][ T5018] vivid-005: kernel_thread() failed
[  120.885877][ T4454] usb 4-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00
[  121.039590][ T4454] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  121.186770][ T4454] usb 4-1: config 0 descriptor??
[  121.823351][ T4454] usbhid 4-1:0.0: can't add hid device: -71
[  121.874380][ T4454] usbhid: probe of 4-1:0.0 failed with error -71
[  122.270146][ T4454] usb 4-1: USB disconnect, device number 2
[  122.586797][ T5043] process 'syz.2.135' launched './file0' with NULL argv: empty string added
[  122.869030][ T5016] chnl_net:caif_netlink_parms(): no params data found
[  122.918405][ T4267] Bluetooth: hci0: command 0x0409 tx timeout
[  122.936674][ T5045] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  124.640180][ T5016] bridge0: port 1(bridge_slave_0) entered blocking state
[  125.306736][ T4267] Bluetooth: hci0: command 0x041b tx timeout
[  125.366795][ T5016] bridge0: port 1(bridge_slave_0) entered disabled state
[  125.386103][ T5016] device bridge_slave_0 entered promiscuous mode
[  125.587162][ T5016] bridge0: port 2(bridge_slave_1) entered blocking state
[  125.622113][ T5016] bridge0: port 2(bridge_slave_1) entered disabled state
[  125.772752][ T5016] device bridge_slave_1 entered promiscuous mode
[  127.316168][ T4267] Bluetooth: hci0: command 0x040f tx timeout
[  127.430243][ T5096] Bluetooth: MGMT ver 1.22
[  127.488111][ T5016] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  128.401730][ T5016] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  128.622833][ T5016] team0: Port device team_slave_0 added
[  128.648129][ T5104] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  128.749538][ T5016] team0: Port device team_slave_1 added
[  128.875700][ T5016] batman_adv: batadv0: Adding interface: batadv_slave_0
[  128.878438][ T5109] loop3: detected capacity change from 0 to 1024
[  128.883226][ T5016] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  129.022088][ T5109] hfsplus: found bad thread record in catalog
[  129.057229][ T5016] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  129.079211][ T5109] hfsplus: found bad thread record in catalog
[  129.286813][ T4354] hfsplus: found bad thread record in catalog
[  129.316191][ T4354] hfsplus: found bad thread record in catalog
[  129.374448][ T5016] batman_adv: batadv0: Adding interface: batadv_slave_1
[  129.384048][ T5016] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  129.396160][ T4267] Bluetooth: hci0: command 0x0419 tx timeout
[  129.604306][ T5016] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  129.644384][ T5125] loop3: detected capacity change from 0 to 256
[  130.351919][ T5125] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  130.364541][ T5125] exFAT-fs (loop3): Medium has reported failures. Some data may be lost.
[  130.379318][ T5125] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  130.532609][   T26] audit: type=1804 audit(1771325099.278:5): pid=5125 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.152" name="/newroot/32/bus/bus" dev="loop3" ino=1048596 res=1 errno=0
[  130.554839][   T26] audit: type=1804 audit(1771325099.278:6): pid=5125 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.152" name="/newroot/32/bus/bus" dev="loop3" ino=1048596 res=1 errno=0
[  130.739604][ T5016] device hsr_slave_0 entered promiscuous mode
[  130.764424][ T5016] device hsr_slave_1 entered promiscuous mode
[  130.826203][ T5016] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  130.876238][ T5016] Cannot create hsr debugfs directory
[  131.048605][ T5137] loop0: detected capacity change from 0 to 128
[  131.131132][ T5137] FAT-fs (loop0): Directory bread(block 32) failed
[  131.174045][ T5137] FAT-fs (loop0): Directory bread(block 33) failed
[  131.228097][ T5137] FAT-fs (loop0): Directory bread(block 34) failed
[  131.251001][ T4409] device hsr_slave_0 left promiscuous mode
[  131.255104][ T5137] FAT-fs (loop0): Directory bread(block 35) failed
[  131.272044][ T5137] FAT-fs (loop0): Directory bread(block 36) failed
[  131.289082][ T5137] FAT-fs (loop0): Directory bread(block 37) failed
[  131.299237][ T4409] device hsr_slave_1 left promiscuous mode
[  131.309894][ T4409] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  131.319516][ T5137] FAT-fs (loop0): Directory bread(block 38) failed
[  131.340972][ T4409] batman_adv: batadv0: Removing interface: batadv_slave_0
[  131.346047][ T5137] FAT-fs (loop0): Directory bread(block 39) failed
[  131.365677][ T4409] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  131.381168][ T5137] FAT-fs (loop0): Directory bread(block 40) failed
[  131.384429][ T4409] batman_adv: batadv0: Removing interface: batadv_slave_1
[  131.396946][ T5137] FAT-fs (loop0): Directory bread(block 41) failed
[  131.411221][ T4409] device bridge_slave_1 left promiscuous mode
[  131.432061][ T4409] bridge0: port 2(bridge_slave_1) entered disabled state
[  131.465688][ T4409] device bridge_slave_0 left promiscuous mode
[  131.483397][ T4409] bridge0: port 1(bridge_slave_0) entered disabled state
[  131.608150][ T4409] device veth1_macvtap left promiscuous mode
[  131.610358][ T5137] syz.0.157: attempt to access beyond end of device
[  131.610358][ T5137] loop0: rw=524288, sector=4108, nr_sectors = 4 limit=128
[  131.650474][ T4409] device veth0_macvtap left promiscuous mode
[  131.672267][ T4409] device veth1_vlan left promiscuous mode
[  131.681943][ T5137] syz.0.157: attempt to access beyond end of device
[  131.681943][ T5137] loop0: rw=0, sector=4108, nr_sectors = 4 limit=128
[  131.702100][ T4409] device veth0_vlan left promiscuous mode
[  131.711957][   T26] audit: type=1800 audit(1771325100.478:7): pid=5137 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.157" name="file1" dev="loop0" ino=1048602 res=0 errno=0
[  132.934393][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  132.940803][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  133.296077][ T4937] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  133.336151][ T4266] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  133.496064][ T4937] usb 4-1: Using ep0 maxpacket: 32
[  133.514391][ T4937] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  133.538027][ T4937] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  133.538335][ T4266] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  133.566189][ T4937] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  133.602125][ T4937] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  133.612970][ T4266] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  133.646489][ T4937] usb 4-1: config 0 descriptor??
[  133.667629][ T4266] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  133.726769][ T4266] usb 3-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00
[  133.771027][ T4266] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  133.825893][ T4266] usb 3-1: config 0 descriptor??
[  134.116162][ T5160] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  134.227343][ T4937] savu 0003:1E7D:2D5A.0001: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.3-1/input0
[  134.259445][ T4266] hid-multitouch 0003:0EEF:72D0.0002: unknown main item tag 0x1
[  134.298406][ T4266] hid-multitouch 0003:0EEF:72D0.0002: unknown main item tag 0x1
[  134.371922][ T4266] hid-multitouch 0003:0EEF:72D0.0002: hidraw1: USB HID v0.00 Device [HID 0eef:72d0] on usb-dummy_hcd.2-1/input0
[  134.452998][ T5038] usb 4-1: USB disconnect, device number 3
[  134.482400][ T4266] usb 3-1: USB disconnect, device number 2
[  134.572736][ T5162] fido_id[5162]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  134.784461][ T5163] fido_id[5163]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  134.874339][ T4409] team0 (unregistering): Port device team_slave_1 removed
[  134.924918][ T4409] team0 (unregistering): Port device team_slave_0 removed
[  134.987586][ T4409] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  135.174304][ T4409] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  135.212478][ T5171] loop0: detected capacity change from 0 to 256
[  136.084316][ T5171] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x8f9fe1ed, utbl_chksum : 0xe619d30d)
[  136.183687][ T5175] loop2: detected capacity change from 0 to 764
[  136.259485][ T5175] Symlink component flag not implemented
[  136.265207][ T5175] Symlink component flag not implemented
[  136.271262][ T5175] Symlink component flag not implemented (129)
[  136.278157][ T5175] Symlink component flag not implemented (6)
[  136.461523][ T5177] loop3: detected capacity change from 0 to 1024
[  136.485909][ T5177] EXT4-fs: Ignoring removed orlov option
[  136.585269][ T5180] loop2: detected capacity change from 0 to 512
[  136.592566][ T5180] EXT4-fs: Ignoring removed bh option
[  136.598958][ T5177] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  136.760083][ T5186] loop0: detected capacity change from 0 to 8192
[  136.847622][ T5180] EXT4-fs (loop2): 1 truncate cleaned up
[  136.877382][ T5180] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  136.913139][ T4265] EXT4-fs (loop3): unmounting filesystem.
[  137.148671][ T4274] EXT4-fs (loop2): unmounting filesystem.
[  137.264349][ T5195] loop2: detected capacity change from 0 to 2048
[  137.333920][ T5195] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  137.343993][ T5195] ext4 filesystem being mounted at /43/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  137.525195][ T4409] bond0 (unregistering): Released all slaves
[  139.193420][ T5016] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  147.601021][ T5182] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set
[  147.658822][ T5016] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  147.732183][ T4784] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 1599 with error 117
[  147.759059][ T5016] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  147.794519][ T4784] EXT4-fs (loop2): This should not happen!! Data will be lost
[  147.794519][ T4784] 
[  147.846973][ T5016] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  148.128708][ T5235] netlink: 8 bytes leftover after parsing attributes in process `syz.3.181'.
[  148.696730][ T4274] EXT4-fs (loop2): unmounting filesystem.
[  148.800422][ T5239] loop3: detected capacity change from 0 to 136
[  148.868081][ T5239] syz.3.182: attempt to access beyond end of device
[  148.868081][ T5239] loop3: rw=524288, sector=164, nr_sectors = 64 limit=136
[  148.940878][ T5239] syz.3.182: attempt to access beyond end of device
[  148.940878][ T5239] loop3: rw=524288, sector=228, nr_sectors = 128 limit=136
[  149.018643][ T5239] syz.3.182: attempt to access beyond end of device
[  149.018643][ T5239] loop3: rw=0, sector=164, nr_sectors = 8 limit=136
[  149.051070][ T5244] loop2: detected capacity change from 0 to 764
[  149.078725][ T5244] Symlink component flag not implemented
[  149.084464][ T5244] Symlink component flag not implemented
[  149.090466][ T5244] Symlink component flag not implemented (129)
[  149.096829][ T5244] Symlink component flag not implemented (6)
[  149.402045][   T26] audit: type=1800 audit(2000000012.470:8): pid=5239 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.182" name="file0" dev="loop3" ino=1542 res=0 errno=0
[  149.752781][ T5226] loop0: detected capacity change from 0 to 512
[  149.874669][ T5226] ext4: Unknown parameter 'uid'
[  149.916366][ T5016] 8021q: adding VLAN 0 to HW filter on device bond0
[  149.978252][ T5226] netlink: 'syz.0.180': attribute type 4 has an invalid length.
[  150.237823][ T5016] 8021q: adding VLAN 0 to HW filter on device team0
[  150.260510][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  150.402853][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  150.696346][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  150.866747][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  150.875287][ T4479] bridge0: port 1(bridge_slave_0) entered blocking state
[  150.882462][ T4479] bridge0: port 1(bridge_slave_0) entered forwarding state
[  150.980275][ T4453] usb 4-1: new full-speed USB device number 4 using dummy_hcd
[  150.997339][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  151.005568][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  151.087070][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  151.117067][ T5255] loop0: detected capacity change from 0 to 2048
[  151.125065][ T4466] bridge0: port 2(bridge_slave_1) entered blocking state
[  151.132257][ T4466] bridge0: port 2(bridge_slave_1) entered forwarding state
[  151.160025][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  151.177820][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  151.188019][ T4453] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  151.208594][ T4453] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2
[  151.219728][ T5255] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  151.244667][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  151.252395][ T5255] ext4 filesystem being mounted at /42/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  151.271169][ T4453] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  151.308917][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  151.317765][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  151.328707][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  151.343001][ T4453] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  151.359558][ T5255] fs-verity: sha256 using implementation "sha256-avx2"
[  151.402070][ T4453] usb 4-1: config 0 descriptor??
[  151.438042][ T4453] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  151.446502][ T4453] dvb-usb: bulk message failed: -22 (3/0)
[  151.452699][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  151.483574][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  151.491395][ T4453] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  151.492833][ T4453] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  151.538882][ T4453] usb 4-1: media controller created
[  151.545433][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  151.550269][ T4453] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  151.574114][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  151.604485][ T4466] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  151.637680][ T5016] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  151.686982][ T4453] dvb-usb: bulk message failed: -22 (6/0)
[  151.693237][ T4453] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  151.699680][ T5272] loop4: detected capacity change from 0 to 128
[  151.716829][ T5270] loop2: detected capacity change from 0 to 2048
[  151.721543][ T4273] EXT4-fs (loop0): unmounting filesystem.
[  151.729400][ T4453] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input5
[  151.755075][ T5272] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none.
[  151.771567][ T4453] dvb-usb: schedule remote query interval to 150 msecs.
[  151.779105][ T4453] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  151.784433][ T5272] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  151.807737][ T4453] usb 4-1: USB disconnect, device number 4
[  151.838304][ T4554] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  151.930217][ T4453] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  152.348252][ T4271] EXT4-fs error (device loop4): ext4_readdir:223: inode #11: comm syz-executor: path /26/file1/lost+found: directory fails checksum at offset 1024
[  152.562909][ T4271] EXT4-fs error (device loop4): ext4_readdir:223: inode #11: comm syz-executor: path /26/file1/lost+found: directory fails checksum at offset 8192
[  153.414251][ T4271] EXT4-fs error (device loop4): ext4_empty_dir:3166: inode #11: block 1: comm syz-executor: Directory block failed checksum
[  153.458679][ T4271] EXT4-fs error (device loop4): ext4_readdir:223: inode #11: comm syz-executor: path /26/file1/lost+found: directory fails checksum at offset 1024
[  153.477389][ T4271] EXT4-fs error (device loop4): ext4_readdir:223: inode #11: comm syz-executor: path /26/file1/lost+found: directory fails checksum at offset 8192
[  153.549457][ T4271] EXT4-fs error (device loop4): ext4_empty_dir:3166: inode #11: block 1: comm syz-executor: Directory block failed checksum
[  153.822644][ T4271] EXT4-fs error (device loop4): ext4_readdir:223: inode #11: comm syz-executor: path /26/file1/lost+found: directory fails checksum at offset 1024
[  154.603734][ T4271] EXT4-fs error (device loop4): ext4_readdir:223: inode #11: comm syz-executor: path /26/file1/lost+found: directory fails checksum at offset 8192
[  154.670694][ T4271] EXT4-fs error (device loop4): ext4_empty_dir:3166: inode #11: block 1: comm syz-executor: Directory block failed checksum
[  154.821496][ T4271] EXT4-fs error (device loop4): ext4_readdir:223: inode #11: comm syz-executor: path /26/file1/lost+found: directory fails checksum at offset 1024
[  154.971443][ T5311] input: syz0 as /devices/virtual/input/input6
[  155.025260][ T4833] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  155.039800][ T4833] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  155.109267][ T5016] 8021q: adding VLAN 0 to HW filter on device batadv0
[  155.851623][ T5325] netlink: 68 bytes leftover after parsing attributes in process `syz.0.200'.
[  156.938369][ T5335] loop0: detected capacity change from 0 to 512
[  156.988055][ T5335] EXT4-fs: Ignoring removed nobh option
[  157.052534][ T5335] EXT4-fs: Ignoring removed nobh option
[  157.093114][ T5335] EXT4-fs: Ignoring removed i_version option
[  157.142491][ T5335] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  157.166143][ T4266] usb 3-1: new full-speed USB device number 3 using dummy_hcd
[  157.252144][ T5335] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  157.378146][ T4266] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  157.413291][ T5340] loop3: detected capacity change from 0 to 2048
[  157.420106][ T4266] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2
[  157.459881][ T5335] EXT4-fs (loop0): 1 truncate cleaned up
[  157.465583][ T5335] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  157.497000][ T4266] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  157.578554][ T4266] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  157.676071][ T4271] EXT4-fs (loop4): unmounting filesystem.
[  157.694231][ T4266] usb 3-1: config 0 descriptor??
[  157.733109][ T5340]  loop3: p2 < > p4
[  157.743493][ T4266] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  157.760781][ T5340] loop3: p4 size 262144 extends beyond EOD, truncated
[  157.839416][ T4266] dvb-usb: bulk message failed: -22 (3/0)
[  157.921154][ T4266] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  158.033605][ T4273] EXT4-fs (loop0): unmounting filesystem.
[  158.046342][ T4266] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  158.155259][ T4266] usb 3-1: media controller created
[  158.180392][ T4266] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  158.223627][ T4266] dvb-usb: bulk message failed: -22 (6/0)
[  158.254471][ T4266] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  158.266027][ T4256] udevd[4256]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory
[  158.269728][ T4258] udevd[4258]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory
[  158.290464][ T4266] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input7
[  158.305575][ T4266] dvb-usb: schedule remote query interval to 150 msecs.
[  158.315365][ T4266] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  158.350644][ T4266] usb 3-1: USB disconnect, device number 3
[  158.360940][ T4554] udevd[4554]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory
[  158.374692][ T4258] udevd[4258]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory
[  158.419810][ T4266] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  158.545587][ T5221] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  158.731361][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  159.108878][ T4345] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  160.258663][ T5352] loop3: detected capacity change from 0 to 8192
[  160.303235][ T5221] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  160.353731][ T5016] device veth0_vlan entered promiscuous mode
[  160.391159][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  160.425398][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  160.519851][ T5221] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  160.640833][ T5016] device veth1_vlan entered promiscuous mode
[  160.913126][ T5370] futex_wake_op: syz.3.216 tries to shift op by 32; fix this program
[  161.807158][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  161.857823][ T4281] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  161.876361][ T4272] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  161.884951][ T4281] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  161.895592][ T4272] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  161.903218][ T4281] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  161.920913][ T4272] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  162.080938][ T4404] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  162.680796][ T5221] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  162.705190][ T5374] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  162.714413][ T5374] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  162.722099][ T5374] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  162.744516][ T5376] netlink: 4 bytes leftover after parsing attributes in process `syz.3.216'.
[  162.877719][ T5016] device veth0_macvtap entered promiscuous mode
[  162.902238][ T5016] device veth1_macvtap entered promiscuous mode
[  162.942884][ T5392] loop3: detected capacity change from 0 to 1024
[  162.955651][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  163.013529][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  163.037444][ T5392] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  163.056871][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  163.177780][ T4461] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  163.215491][ T5016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  163.251168][    T7] usb 3-1: new full-speed USB device number 4 using dummy_hcd
[  163.256134][ T5016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  163.288970][ T5016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  163.303468][ T5405] EXT4-fs (loop3): shut down requested (1)
[  163.311447][ T5016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  163.331625][ T5016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  163.352439][ T5016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  163.364023][ T5016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  163.374801][ T5016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  163.397044][ T5016] batman_adv: batadv0: Interface activated: batadv_slave_0
[  163.426105][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  163.455301][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  163.469510][    T7] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  163.477500][ T4265] EXT4-fs (loop3): unmounting filesystem.
[  163.497869][    T7] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2
[  163.509098][ T5016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  163.520382][ T5016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  163.530508][    T7] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  163.539759][ T5016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  163.550371][    T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  163.558491][ T5016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  163.558506][ T5016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  163.558520][ T5016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  163.558529][ T5016] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  163.558541][ T5016] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  163.560006][ T5016] batman_adv: batadv0: Interface activated: batadv_slave_1
[  163.586312][    T7] usb 3-1: config 0 descriptor??
[  163.653422][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  163.674315][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  163.701401][ T5016] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  163.724845][ T5016] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  163.726247][    T7] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  163.734374][ T5016] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  163.745359][ T5413] loop3: detected capacity change from 0 to 1024
[  163.749728][ T5016] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  163.766858][    T7] dvb-usb: bulk message failed: -22 (3/0)
[  163.785752][    T7] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  163.838347][    T7] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  163.860636][    T7] usb 3-1: media controller created
[  163.879274][    T7] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  163.918773][    T7] dvb-usb: bulk message failed: -22 (6/0)
[  163.926204][    T7] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  163.958197][    T7] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input8
[  163.969594][ T4281] Bluetooth: hci4: command 0x0409 tx timeout
[  163.989946][    T7] dvb-usb: schedule remote query interval to 150 msecs.
[  164.003746][    T7] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  164.028651][    T7] usb 3-1: USB disconnect, device number 4
[  164.107462][ T4461] hfsplus: b-tree write err: -5, ino 4
[  164.122001][    T7] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  164.281985][ T5421] loop3: detected capacity change from 0 to 512
[  164.513393][ T5421] EXT4-fs: Ignoring removed nobh option
[  164.692665][ T4479] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  164.714086][ T4479] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  165.660285][ T5421] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  165.696606][ T5421] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  165.711286][ T5431] input: syz0 as /devices/virtual/input/input9
[  165.783918][ T5421] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1113: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[  165.862114][ T5421] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 33 with error 28
[  165.884871][   T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  165.955430][ T5371] chnl_net:caif_netlink_parms(): no params data found
[  165.996020][ T5421] EXT4-fs (loop3): This should not happen!! Data will be lost
[  165.996020][ T5421] 
[  166.013039][ T4354] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  166.036083][ T4281] Bluetooth: hci4: command 0x041b tx timeout
[  166.073367][ T4354] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  166.091284][ T5421] EXT4-fs (loop3): Total free blocks count 0
[  166.118261][ T5443] futex_wake_op: syz.0.227 tries to shift op by 32; fix this program
[  166.135048][ T5421] EXT4-fs (loop3): Free/Dirty block details
[  166.139686][ T5442] loop2: detected capacity change from 0 to 256
[  166.141833][ T5421] EXT4-fs (loop3): free_blocks=65280
[  166.154209][ T5421] EXT4-fs (loop3): dirty_blocks=33
[  166.164058][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  166.176032][ T5421] EXT4-fs (loop3): Block reservation details
[  166.190277][ T5421] EXT4-fs (loop3): i_reserved_data_blocks=33
[  166.209504][ T5442] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d)
[  166.487583][ T5451] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  166.501816][ T5451] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  166.510271][ T5451] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  167.023031][ T4265] EXT4-fs (loop3): unmounting filesystem.
[  167.133427][ T5371] bridge0: port 1(bridge_slave_0) entered blocking state
[  167.256254][ T5371] bridge0: port 1(bridge_slave_0) entered disabled state
[  167.312849][ T5371] device bridge_slave_0 entered promiscuous mode
[  168.124104][ T4281] Bluetooth: hci4: command 0x040f tx timeout
[  168.517024][ T5371] bridge0: port 2(bridge_slave_1) entered blocking state
[  168.524214][ T5371] bridge0: port 2(bridge_slave_1) entered disabled state
[  168.573593][ T5371] device bridge_slave_1 entered promiscuous mode
[  168.658774][ T5472] loop5: detected capacity change from 0 to 128
[  168.683617][ T5472] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  168.795942][ T5371] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  168.968464][ T5371] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  168.982259][ T5472] ext4 filesystem being mounted at /1/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  169.014068][    C1] vkms_vblank_simulate: vblank timer overrun
[  169.211145][ T5371] team0: Port device team_slave_0 added
[  169.784822][    T7] usb 1-1: new full-speed USB device number 2 using dummy_hcd
[  169.900756][ T5472] fscrypt (loop5, inode 12): Direct key flag not allowed with different contents and filenames modes
[  169.993468][    T7] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  170.026055][    T7] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2
[  170.034998][    T7] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  170.190342][    T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  170.198840][ T4281] Bluetooth: hci4: command 0x0419 tx timeout
[  170.211078][    T7] usb 1-1: config 0 descriptor??
[  170.241864][ T5371] team0: Port device team_slave_1 added
[  170.242954][    T7] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  170.254493][    T7] dvb-usb: bulk message failed: -22 (3/0)
[  170.266243][ T5016] EXT4-fs (loop5): unmounting filesystem.
[  170.300699][    T7] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  170.334727][    T7] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  170.364375][    T7] usb 1-1: media controller created
[  170.382121][    T7] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  170.416913][ T5490] loop5: detected capacity change from 0 to 128
[  170.417988][    T7] dvb-usb: bulk message failed: -22 (6/0)
[  170.577632][ T5490] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem
[  170.586296][ T5493] futex_wake_op: syz.2.239 tries to shift op by 32; fix this program
[  170.596781][    T7] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  170.636938][    T7] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input10
[  170.650376][ T5490] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  170.660971][    T7] dvb-usb: schedule remote query interval to 150 msecs.
[  170.668221][    T7] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  170.681003][    T7] usb 1-1: USB disconnect, device number 2
[  170.987914][ T5490] ext2 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  171.562408][ T5371] batman_adv: batadv0: Adding interface: batadv_slave_0
[  171.570728][    T7] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  171.581270][   T26] audit: type=1800 audit(2000000034.690:9): pid=5490 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.238" name="file0" dev="loop5" ino=12 res=0 errno=0
[  171.616016][ T5371] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  171.691694][ T5016] EXT4-fs (loop5): unmounting filesystem.
[  171.765814][ T5371] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  171.879134][ T5371] batman_adv: batadv0: Adding interface: batadv_slave_1
[  171.888032][ T5371] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  171.913934][    C1] vkms_vblank_simulate: vblank timer overrun
[  171.958857][ T5371] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  172.947131][ T5371] device hsr_slave_0 entered promiscuous mode
[  172.954333][ T5371] device hsr_slave_1 entered promiscuous mode
[  172.961616][ T5371] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  172.974177][ T5371] Cannot create hsr debugfs directory
[  173.052684][ T5221] device hsr_slave_0 left promiscuous mode
[  173.079934][ T5221] device hsr_slave_1 left promiscuous mode
[  173.124680][ T5221] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  173.189504][ T5221] batman_adv: batadv0: Removing interface: batadv_slave_0
[  173.277792][ T5221] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  173.285272][ T5221] batman_adv: batadv0: Removing interface: batadv_slave_1
[  173.538987][ T5221] device bridge_slave_1 left promiscuous mode
[  173.618053][ T5525] loop2: detected capacity change from 0 to 1024
[  173.635402][ T5221] bridge0: port 2(bridge_slave_1) entered disabled state
[  173.666349][ T4453] usb 6-1: new full-speed USB device number 2 using dummy_hcd
[  173.825307][ T5525] EXT4-fs: Ignoring removed nobh option
[  173.842505][ T5221] device bridge_slave_0 left promiscuous mode
[  173.873509][ T4453] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  173.881806][ T5525] EXT4-fs: inline encryption not supported
[  173.904746][ T5221] bridge0: port 1(bridge_slave_0) entered disabled state
[  173.914406][ T4453] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2
[  173.930620][ T5527] loop0: detected capacity change from 0 to 8192
[  173.975786][ T5221] device veth1_macvtap left promiscuous mode
[  173.982164][ T5221] device veth0_macvtap left promiscuous mode
[  173.988408][ T5221] device veth1_vlan left promiscuous mode
[  173.994431][ T5221] device veth0_vlan left promiscuous mode
[  174.011403][ T5525] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  174.023218][ T4453] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  174.032469][ T4453] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  174.047599][ T4453] usb 6-1: config 0 descriptor??
[  174.060971][ T4453] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  174.062865][ T5527] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  174.088104][ T4453] dvb-usb: bulk message failed: -22 (3/0)
[  174.107808][ T4453] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  174.117301][ T4453] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  174.124382][ T4453] usb 6-1: media controller created
[  174.131429][ T4453] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  174.144986][ T4453] dvb-usb: bulk message failed: -22 (6/0)
[  174.145056][ T5525] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  174.151198][ T4453] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  174.172174][ T4453] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input11
[  174.186389][ T4453] dvb-usb: schedule remote query interval to 150 msecs.
[  174.193452][ T4453] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  174.238026][ T5533] loop3: detected capacity change from 0 to 1024
[  174.286467][ T5040] usb 6-1: USB disconnect, device number 2
[  174.313263][ T5040] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  174.445761][ T5525] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3852: comm syz.2.248: Allocating blocks 497-513 which overlap fs metadata
[  174.485356][ T5525] EXT4-fs (loop2): pa ffff888075345b60: logic 256, phys. 385, len 8
[  174.494176][ T5525] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4892: group 0, free 0, pa_free 1
[  174.508208][ T4453] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  174.633881][ T5537] futex_wake_op: syz.3.252 tries to shift op by 32; fix this program
[  174.929663][ T4453] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 232, changing to 11
[  175.043068][ T4274] EXT4-fs (loop2): unmounting filesystem.
[  175.374765][ T4453] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 16
[  175.384622][ T4453] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18
[  175.416270][ T4453] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  175.463328][ T4453] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  175.500004][ T4453] usb 1-1: SerialNumber: syz
[  175.514129][ T5527] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  175.742209][ T5527] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  175.906350][ T4309] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  176.106210][ T4309] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  176.117165][ T4309] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2
[  176.130649][ T4309] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  176.175881][ T4309] usb 6-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5
[  176.185762][ T4309] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  176.194041][ T4309] usb 6-1: Product: syz
[  176.198381][ T4309] usb 6-1: Manufacturer: syz
[  176.203012][ T4309] usb 6-1: SerialNumber: syz
[  176.237100][ T4309] usb 6-1: config 0 descriptor??
[  176.582208][ T5221] team0 (unregistering): Port device team_slave_1 removed
[  176.634222][ T5221] team0 (unregistering): Port device team_slave_0 removed
[  176.679828][ T5221] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  176.725685][ T5221] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  177.066966][ T5221] bond0 (unregistering): Released all slaves
[  177.173042][ T5556] loop0: detected capacity change from 0 to 512
[  177.181632][ T5556] EXT4-fs: Ignoring removed i_version option
[  177.188133][ T5556] EXT4-fs: Ignoring removed oldalloc option
[  177.208612][ T5556] EXT4-fs (loop0): Test dummy encryption mode enabled
[  177.255733][ T5540] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  177.263094][ T5556] EXT4-fs (loop0): 1 truncate cleaned up
[  177.263124][ T5556] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none.
[  177.278599][ T5540] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  177.286153][ T5540] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  177.316623][ T4453] cdc_ether 1-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 42:42:42:42:42:42
[  177.331182][ T4453] usb 1-1: USB disconnect, device number 3
[  177.338777][ T4453] cdc_ether 1-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device
[  177.402961][   T26] audit: type=1800 audit(2000000040.500:10): pid=5556 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.257" name="file1" dev="loop0" ino=15 res=0 errno=0
[  177.443153][ T5560] loop2: detected capacity change from 0 to 512
[  177.493624][ T4266] usb 6-1: USB disconnect, device number 3
[  177.525790][ T4273] EXT4-fs (loop0): unmounting filesystem.
[  177.562219][ T5562] loop3: detected capacity change from 0 to 128
[  177.612585][ T5560] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  177.635135][ T5562] netlink: 40 bytes leftover after parsing attributes in process `syz.3.258'.
[  177.655417][ T5560] ext4 filesystem being mounted at /70/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  177.667720][ T5562] netlink: 40 bytes leftover after parsing attributes in process `syz.3.258'.
[  177.726420][ T5562] netlink: 40 bytes leftover after parsing attributes in process `syz.3.258'.
[  177.766889][ T5562] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check.
[  178.178335][ T4274] EXT4-fs (loop2): unmounting filesystem.
[  178.225651][ T5577] loop0: detected capacity change from 0 to 256
[  178.304330][ T5577] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  178.344228][ T5371] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  178.370631][ T5577] exFAT-fs (loop0): Medium has reported failures. Some data may be lost.
[  178.389046][ T5371] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  178.409257][ T5577] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  178.465294][ T5371] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  178.486195][ T5039] usb 6-1: new full-speed USB device number 4 using dummy_hcd
[  178.494314][ T5371] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  178.881779][ T5039] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  179.019827][ T5039] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2
[  179.053140][ T5039] usb 6-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  179.082944][ T5039] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  179.109155][ T5039] usb 6-1: config 0 descriptor??
[  179.217189][ T5039] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  179.240129][ T5039] dvb-usb: bulk message failed: -22 (3/0)
[  179.288425][ T5039] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  179.326901][ T5039] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  179.366175][ T5039] usb 6-1: media controller created
[  179.372568][ T5039] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  179.383096][ T5371] 8021q: adding VLAN 0 to HW filter on device bond0
[  179.402219][ T4784] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  179.436684][ T5039] dvb-usb: bulk message failed: -22 (6/0)
[  179.442524][ T5039] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  179.446859][ T4784] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  179.467951][ T5039] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input12
[  179.502232][ T5371] 8021q: adding VLAN 0 to HW filter on device team0
[  179.519362][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  179.529793][ T5039] dvb-usb: schedule remote query interval to 150 msecs.
[  179.536700][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  179.546074][ T5039] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  179.571023][   T75] bridge0: port 1(bridge_slave_0) entered blocking state
[  179.578250][   T75] bridge0: port 1(bridge_slave_0) entered forwarding state
[  179.595790][ T5039] usb 6-1: USB disconnect, device number 4
[  179.620754][ T5039] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  179.642960][ T5606] futex_wake_op: syz.3.268 tries to shift op by 32; fix this program
[  180.686907][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  180.801092][ T5610] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  180.809666][ T5610] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  180.817586][ T5610] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  180.991937][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  181.000353][ T4267] Bluetooth: hci3: command 0x0406 tx timeout
[  181.006441][ T4267] Bluetooth: hci1: command 0x0406 tx timeout
[  181.012468][ T4267] Bluetooth: hci2: command 0x0406 tx timeout
[  181.076968][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  181.256720][   T75] bridge0: port 2(bridge_slave_1) entered blocking state
[  181.263851][   T75] bridge0: port 2(bridge_slave_1) entered forwarding state
[  181.269170][ T5624] loop5: detected capacity change from 0 to 128
[  181.352627][ T5624] FAT-fs (loop5): Unrecognized mount option "18446744073709551615���" or missing value
[  181.694978][ T5629] loop0: detected capacity change from 0 to 128
[  181.723754][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  181.772535][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  181.796716][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  181.819074][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  181.819996][   T75] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  181.859789][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  181.860768][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  181.861358][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  181.861789][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  181.869152][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  181.910611][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  181.924247][ T5371] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  181.960203][ T5633] loop0: detected capacity change from 0 to 512
[  182.092194][ T5633] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  182.136272][ T5633] ext4 filesystem being mounted at /64/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  182.251307][ T5644] loop3: detected capacity change from 0 to 764
[  182.275017][ T5644] Symlink component flag not implemented
[  182.280829][ T5644] Symlink component flag not implemented
[  182.286824][ T5644] Symlink component flag not implemented (129)
[  182.293060][ T5644] Symlink component flag not implemented (6)
[  183.131069][ T5648] loop2: detected capacity change from 0 to 256
[  183.208376][ T5648] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x712033c0, utbl_chksum : 0xe619d30d)
[  183.263530][ T5653] loop5: detected capacity change from 0 to 128
[  183.342184][ T4273] EXT4-fs (loop0): unmounting filesystem.
[  183.856365][ T5653] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none.
[  184.221987][ T5653] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  185.208961][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  185.223645][ T4379] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  185.270574][ T5371] 8021q: adding VLAN 0 to HW filter on device batadv0
[  185.352778][ T5016] EXT4-fs (loop5): unmounting filesystem.
[  185.546166][ T4309] usb 3-1: new full-speed USB device number 5 using dummy_hcd
[  185.801719][ T4309] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  185.813147][ T4309] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2
[  185.824495][ T4309] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  185.870769][ T4309] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  185.920264][ T4309] usb 3-1: config 0 descriptor??
[  185.954547][ T4309] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  185.962117][ T4309] dvb-usb: bulk message failed: -22 (3/0)
[  186.003583][ T4309] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  186.014961][ T4309] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  186.025018][ T4309] usb 3-1: media controller created
[  186.043974][ T4309] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  186.096621][ T4309] dvb-usb: bulk message failed: -22 (6/0)
[  186.102874][ T4309] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  186.145019][ T4309] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input13
[  186.150134][ T5670] dvb-usb: bulk message failed: -22 (2/0)
[  186.157823][ T4309] dvb-usb: schedule remote query interval to 150 msecs.
[  186.173029][ T4309] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  186.365812][ T4309] dvb-usb: bulk message failed: -22 (1/0)
[  186.383929][ T4309] dvb-usb: error while querying for an remote control event.
[  186.408104][ T4309] usb 3-1: USB disconnect, device number 5
[  186.489378][ T4309] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  187.914444][ T5706] loop2: detected capacity change from 0 to 128
[  187.921977][ T5706] FAT-fs (loop2): Unrecognized mount option "18446744073709551615���" or missing value
[  188.118836][ T5712] loop5: detected capacity change from 0 to 1764
[  188.187126][ T4256] I/O error, dev loop5, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  188.243329][ T5712] loop5: detected capacity change from 0 to 256
[  188.246470][ T4256] I/O error, dev loop5, sector 8 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  188.275627][ T5221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  188.285470][ T5221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  188.308828][ T5712] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d)
[  188.341076][ T4784] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  188.356380][ T4784] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  188.389925][ T5371] device veth0_vlan entered promiscuous mode
[  188.494761][ T4784] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  188.620034][ T4784] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  188.948076][ T5371] device veth1_vlan entered promiscuous mode
[  189.083045][ T4784] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  189.099694][ T4784] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  189.108087][ T4784] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  189.118403][ T4784] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  189.130404][ T5371] device veth0_macvtap entered promiscuous mode
[  189.145108][ T5371] device veth1_macvtap entered promiscuous mode
[  189.164578][ T5371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  189.176475][ T5371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  189.242022][ T5371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  189.303630][ T5371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  189.361345][ T5371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  189.413359][ T5371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  189.464632][ T5371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  189.502456][ T5371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  189.551858][ T5371] batman_adv: batadv0: Interface activated: batadv_slave_0
[  189.856122][ T4784] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  189.893623][ T4784] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  190.192867][ T4784] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  190.954656][ T4784] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  191.023512][ T5371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  191.039950][ T5740] loop5: detected capacity change from 0 to 512
[  191.091667][ T5371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  191.134976][ T5371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  191.142059][ T5740] EXT4-fs: Ignoring removed nobh option
[  191.181712][ T5371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  191.238683][ T5371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  191.269761][ T5740] EXT4-fs error (device loop5): __ext4_iget:5095: inode #11: block 1: comm syz.5.296: invalid block
[  191.297726][ T5371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  191.308767][ T5750] loop3: detected capacity change from 0 to 128
[  191.329139][ T5371] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  191.340660][ T5371] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  191.352884][ T5371] batman_adv: batadv0: Interface activated: batadv_slave_1
[  191.370278][ T5371] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  191.376084][ T5040] usb 1-1: new full-speed USB device number 4 using dummy_hcd
[  191.379257][ T5371] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  191.395853][ T5371] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  191.405835][ T5371] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  191.417408][ T5740] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.296: couldn't read orphan inode 11 (err -117)
[  191.432169][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  191.456810][ T5740] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  191.463077][   T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  191.470682][ T5750] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  191.573038][ T5750] ext4 filesystem being mounted at /73/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  191.628159][ T5040] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  191.657179][ T5040] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2
[  191.681368][ T5740] x_tables: unsorted entry at hook 2
[  191.701509][ T5740] EXT4-fs error (device loop5): htree_dirblock_to_tree:1083: inode #2: comm syz.5.296: Directory hole found for htree leaf block 0
[  191.718504][ T5040] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  191.729481][ T4461] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  191.749170][ T5040] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  191.767363][ T4461] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  191.776792][ T5040] usb 1-1: config 0 descriptor??
[  191.795198][ T5040] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  191.809789][ T5040] dvb-usb: bulk message failed: -22 (3/0)
[  191.818932][   T35] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  191.875710][ T5040] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  191.923101][   T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  191.960658][ T5040] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  191.983642][   T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  191.995729][ T5742] dvb-usb: bulk message failed: -22 (2/0)
[  192.005045][ T5040] usb 1-1: media controller created
[  192.037707][ T5040] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  192.058842][ T5040] dvb-usb: bulk message failed: -22 (6/0)
[  192.082354][ T5040] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  192.093558][ T4464] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  192.375369][ T5750] fscrypt: Error allocating hmac(sha512): -2
[  192.471789][ T5040] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input14
[  192.508908][ T5016] EXT4-fs (loop5): unmounting filesystem.
[  192.546781][ T5040] dvb-usb: schedule remote query interval to 150 msecs.
[  192.553778][ T5040] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  192.746905][ T5040] usb 1-1: USB disconnect, device number 4
[  192.861500][ T4265] EXT4-fs (loop3): unmounting filesystem.
[  194.730194][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  194.736557][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  194.744370][ T5040] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  196.170196][ T5806] loop2: detected capacity change from 0 to 128
[  196.345743][ T5806] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  196.502215][ T5806] ext4 filesystem being mounted at /83/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  196.779527][ T5806] EXT4-fs (loop2): shut down requested (0)
[  196.797158][ T5804] loop0: detected capacity change from 0 to 4096
[  196.950590][ T5804] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  197.169495][ T4274] EXT4-fs (loop2): unmounting filesystem.
[  197.170190][ T4273] EXT4-fs (loop0): unmounting filesystem.
[  197.229330][ T5818] loop3: detected capacity change from 0 to 128
[  197.287028][ T5819] loop6: detected capacity change from 0 to 2048
[  197.416988][ T5819] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none.
[  197.436290][ T5819] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  198.472478][ T5818] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  198.496724][ T5371] EXT4-fs (loop6): unmounting filesystem.
[  199.667644][ T5844] loop2: detected capacity change from 0 to 16
[  199.708185][ T5818] FAT-fs (loop3): Filesystem has been set read-only
[  199.715052][ T5818] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  199.744333][ T5844] erofs: (device loop2): mounted with root inode @ nid 36.
[  199.835287][ T5818] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  199.966950][ T5818] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  199.975444][ T5818] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  200.080593][ T5853] netlink: 164 bytes leftover after parsing attributes in process `syz.6.318'.
[  200.094500][ T5818] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  200.162706][ T5818] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  200.233281][ T5818] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  200.292263][ T5818] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  200.420553][ T5818] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  200.506236][ T5818] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  200.561264][ T5818] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  200.642389][ T5863] loop2: detected capacity change from 0 to 2048
[  200.648874][ T5818] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  200.736146][ T5818] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  200.806227][ T5863] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  200.819245][ T5818] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  200.901405][ T5818] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  200.947941][ T5818] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  201.117992][ T5818] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  201.284307][ T5876] loop2: detected capacity change from 0 to 8
[  201.306772][ T5818] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  201.413372][ T5818] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  201.599311][ T5880] loop6: detected capacity change from 0 to 764
[  201.625708][ T5880] Symlink component flag not implemented
[  201.631646][ T5880] Symlink component flag not implemented
[  201.638039][ T5880] Symlink component flag not implemented (129)
[  201.644295][ T5880] Symlink component flag not implemented (6)
[  202.376142][ T5818] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  202.384656][ T5818] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  202.393321][ T5818] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  202.402297][ T5818] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  202.410843][ T5818] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  202.419418][ T5818] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  202.528509][ T5818] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  202.591550][ T5818] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  202.656148][ T5818] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  202.662137][ T5886] loop0: detected capacity change from 0 to 128
[  202.715810][ T5886] FAT-fs (loop0): Unrecognized mount option "18446744073709551615���" or missing value
[  202.724982][ T5818] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  202.758292][ T5818] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  202.771409][ T5818] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  202.905808][ T5818] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  203.024374][ T5894] loop2: detected capacity change from 0 to 256
[  204.298248][ T5894] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  204.309059][ T5894] exFAT-fs (loop2): Medium has reported failures. Some data may be lost.
[  204.350424][ T5894] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  204.717155][ T5818] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  204.868990][ T5818] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  205.251134][ T5818] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  205.669356][ T5818] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  205.802711][ T5818] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  205.842656][ T5904] loop5: detected capacity change from 0 to 512
[  205.886138][ T5818] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  206.016588][ T5818] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  206.025442][ T5818] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  206.039214][ T5904] EXT4-fs (loop5): can't mount with data_err=abort, fs mounted w/o journal
[  206.146233][ T5818] FAT-fs (loop3): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  206.156635][   T26] audit: type=1800 audit(2000000069.250:11): pid=5818 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.310" name="file1" dev="loop3" ino=1048623 res=0 errno=0
[  207.401471][ T5937] loop2: detected capacity change from 0 to 764
[  207.426808][ T5937] Symlink component flag not implemented
[  207.432527][ T5937] Symlink component flag not implemented
[  207.438659][ T5937] Symlink component flag not implemented (129)
[  207.445436][ T5937] Symlink component flag not implemented (6)
[  208.207254][ T5935] netlink: 164 bytes leftover after parsing attributes in process `syz.3.335'.
[  208.739629][ T5953] loop2: detected capacity change from 0 to 764
[  208.760098][ T5953] Symlink component flag not implemented
[  208.765927][ T5953] Symlink component flag not implemented
[  208.772588][ T5953] Symlink component flag not implemented (129)
[  208.778939][ T5953] Symlink component flag not implemented (6)
[  209.893169][ T5959] loop6: detected capacity change from 0 to 128
[  209.906497][ T5959] FAT-fs (loop6): Unrecognized mount option "18446744073709551615���" or missing value
[  210.863686][ T5973] loop3: detected capacity change from 0 to 2048
[  211.087008][ T4256] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  211.702272][ T5984] loop0: detected capacity change from 0 to 764
[  213.314236][ T5980] Symlink component flag not implemented
[  213.320250][ T5980] Symlink component flag not implemented
[  213.326066][ T5980] Symlink component flag not implemented (129)
[  213.332270][ T5980] Symlink component flag not implemented (6)
[  213.616878][ T6000] loop3: detected capacity change from 0 to 764
[  213.659982][ T6000] Symlink component flag not implemented
[  213.665705][ T6000] Symlink component flag not implemented
[  213.671822][ T6000] Symlink component flag not implemented (129)
[  213.678098][ T6000] Symlink component flag not implemented (6)
[  213.716199][ T4332] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  213.946309][ T4332] usb 3-1: Using ep0 maxpacket: 16
[  213.965445][ T4332] usb 3-1: unable to get BOS descriptor or descriptor too short
[  214.138187][ T4332] usb 3-1: config 0 has an invalid interface number: 180 but max is 0
[  214.321747][ T4332] usb 3-1: config 0 has an invalid interface number: 39 but max is 0
[  214.365504][ T6004] loop0: detected capacity change from 0 to 256
[  214.396746][ T4332] usb 3-1: config 0 has an invalid interface number: 5 but max is 0
[  214.442741][ T6004] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  214.466105][ T4332] usb 3-1: config 0 has 3 interfaces, different from the descriptor's value: 1
[  214.491394][ T6004] exFAT-fs (loop0): Medium has reported failures. Some data may be lost.
[  214.520376][ T4332] usb 3-1: config 0 has no interface number 0
[  214.532444][ T4453] hid-generic 0005:0B57:0005.0003: item fetching failed at offset 0/1
[  214.552426][ T4332] usb 3-1: config 0 has no interface number 1
[  214.560134][ T6004] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  214.562779][ T4453] hid-generic: probe of 0005:0B57:0005.0003 failed with error -22
[  214.609412][ T6010] futex_wake_op: syz.6.358 tries to shift op by 32; fix this program
[  214.620690][ T4332] usb 3-1: config 0 has no interface number 2
[  214.641319][ T4332] usb 3-1: config 0 interface 180 altsetting 249 endpoint 0x9 has invalid wMaxPacketSize 0
[  214.656733][ T4332] usb 3-1: config 0 interface 180 altsetting 249 has a duplicate endpoint with address 0xE, skipping
[  214.672750][ T4332] usb 3-1: too many endpoints for config 0 interface 39 altsetting 46: 162, using maximum allowed: 30
[  214.758844][ T4332] usb 3-1: config 0 interface 39 altsetting 46 has 0 endpoint descriptors, different from the interface descriptor's value: 162
[  214.952857][ T4332] usb 3-1: config 0 interface 5 altsetting 19 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  215.036206][   T26] audit: type=1800 audit(2000000078.130:12): pid=6004 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.355" name="file1" dev="loop0" ino=1048628 res=0 errno=0
[  215.209820][ T4332] usb 3-1: config 0 interface 180 has no altsetting 0
[  215.332682][ T4332] usb 3-1: config 0 interface 39 has no altsetting 0
[  215.370752][ T4332] usb 3-1: config 0 interface 5 has no altsetting 0
[  215.393757][ T4332] usb 3-1: New USB device found, idVendor=0681, idProduct=0010, bcdDevice=b7.e0
[  215.407120][ T4332] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  215.415322][ T4332] usb 3-1: Product: syz
[  215.420279][ T4332] usb 3-1: Manufacturer: syz
[  215.424985][ T4332] usb 3-1: SerialNumber: syz
[  215.433099][ T4332] usb 3-1: config 0 descriptor??
[  215.500621][ T6016] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  215.510562][ T6016] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  215.518597][ T6016] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  215.546643][ T6018] netlink: 60 bytes leftover after parsing attributes in process `syz.6.358'.
[  215.722591][ T4332] usb 3-1: USB disconnect, device number 6
[  215.733555][ T6030] loop6: detected capacity change from 0 to 128
[  215.762866][ T6030] FAT-fs (loop6): Unrecognized mount option "18446744073709551615���" or missing value
[  215.854571][ T6036] loop3: detected capacity change from 0 to 1024
[  215.895530][ T4258] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  215.932794][ T6036] hfsplus: invalid file type 0113366 for inode 2
[  215.984270][ T6036] hfsplus: failed to load root directory
[  217.456471][ T4332] usb 3-1: new full-speed USB device number 7 using dummy_hcd
[  217.476239][ T5040] usb 4-1: new full-speed USB device number 5 using dummy_hcd
[  217.484413][ T6060] loop0: detected capacity change from 0 to 764
[  217.505643][ T6060] Symlink component flag not implemented
[  217.511394][ T6060] Symlink component flag not implemented
[  217.517421][ T6060] Symlink component flag not implemented (129)
[  217.523668][ T6060] Symlink component flag not implemented (6)
[  217.695038][ T4332] usb 3-1: config 0 interface 0 altsetting 132 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  217.810194][ T4332] usb 3-1: config 0 interface 0 has no altsetting 0
[  217.908086][ T4332] usb 3-1: New USB device found, idVendor=056a, idProduct=0064, bcdDevice= 0.00
[  218.009709][ T4332] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  218.176937][ T4332] usb 3-1: config 0 descriptor??
[  219.418210][ T5040] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  219.436103][ T5040] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2
[  219.448331][ T5040] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  219.457703][ T5040] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  219.473853][ T5040] usb 4-1: config 0 descriptor??
[  219.484187][ T5040] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  219.499393][ T5040] dvb-usb: bulk message failed: -22 (3/0)
[  219.549281][ T5040] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  219.586597][ T5040] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  219.599846][ T6065] futex_wake_op: syz.5.371 tries to shift op by 32; fix this program
[  219.604943][ T5040] usb 4-1: media controller created
[  219.632630][ T5040] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  219.675798][ T5040] dvb-usb: bulk message failed: -22 (6/0)
[  219.707669][ T6052] dvb-usb: bulk message failed: -22 (2/0)
[  219.751046][ T6070] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  219.766156][ T6070] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  219.774441][ T6070] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  219.881691][ T6070] netlink: 60 bytes leftover after parsing attributes in process `syz.5.371'.
[  219.993771][ T4332] wacom 0003:056A:0064.0004: unknown main item tag 0x0
[  220.159190][ T4332] wacom 0003:056A:0064.0004: unknown main item tag 0x0
[  220.179665][ T4332] wacom 0003:056A:0064.0004: Unknown device_type for 'HID 056a:0064'. Assuming pen.
[  220.209323][ T4332] wacom 0003:056A:0064.0004: hidraw0: USB HID v4.0a Device [HID 056a:0064] on usb-dummy_hcd.2-1/input0
[  220.337032][ T4332] input: Wacom PenPartner2 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:0064.0004/input/input15
[  220.381340][ T5040] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  220.391486][ T5040] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input18
[  220.432111][ T5040] dvb-usb: schedule remote query interval to 150 msecs.
[  220.492870][ T5040] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  220.524114][ T4332] usb 3-1: USB disconnect, device number 7
[  220.574323][ T5040] usb 4-1: USB disconnect, device number 5
[  220.667627][ T5040] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  220.778299][ T6076] loop3: detected capacity change from 0 to 2048
[  220.843533][ T6071] fido_id[6071]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[  221.897395][ T6076] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  222.277959][ T6092] fuse: Bad value for 'fd'
[  222.634082][ T6101] loop6: detected capacity change from 0 to 512
[  222.652166][ T6101] ext4: Unknown parameter 'noacl'
[  222.790843][ T4265] EXT4-fs (loop3): unmounting filesystem.
[  224.272777][ T6117] loop0: detected capacity change from 0 to 764
[  224.299567][ T6117] Symlink component flag not implemented
[  224.305256][ T6117] Symlink component flag not implemented
[  224.311305][ T6117] Symlink component flag not implemented (129)
[  224.317535][ T6117] Symlink component flag not implemented (6)
[  224.709190][ T6118] futex_wake_op: syz.2.384 tries to shift op by 32; fix this program
[  224.960632][ T6122] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  224.969986][ T6122] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  224.977579][ T6122] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  225.012566][ T6122] netlink: 60 bytes leftover after parsing attributes in process `syz.2.384'.
[  225.787175][ T6128] loop0: detected capacity change from 0 to 512
[  225.794285][ T6128] EXT4-fs: Ignoring removed nobh option
[  225.804437][ T6128] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  225.819294][ T6128] EXT4-fs (loop0): 1 truncate cleaned up
[  225.829356][ T6128] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback.
[  225.926834][ T6133] loop2: detected capacity change from 0 to 4096
[  225.969627][ T4273] EXT4-fs (loop0): unmounting filesystem.
[  225.993195][ T6133] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  226.227838][ T6140] loop0: detected capacity change from 0 to 16
[  226.316260][ T6140] erofs: (device loop0): mounted with root inode @ nid 36.
[  226.369462][ T4274] EXT4-fs (loop2): unmounting filesystem.
[  226.389994][ T6140] erofs: (device loop0): init_inode_xattrs: xattr_isize 12 of nid 46 is not supported yet
[  226.448599][ T6142] loop3: detected capacity change from 0 to 512
[  226.860280][ T6150] loop2: detected capacity change from 0 to 764
[  226.881128][ T6150] Symlink component flag not implemented
[  226.887011][ T6150] Symlink component flag not implemented
[  226.893259][ T6150] Symlink component flag not implemented (129)
[  226.900107][ T6150] Symlink component flag not implemented (6)
[  226.944817][ T6142] EXT4-fs error (device loop3): ext4_orphan_get:1399: inode #15: comm syz.3.391: inode has both inline data and extents flags
[  227.288247][ T6142] EXT4-fs error (device loop3): ext4_orphan_get:1404: comm syz.3.391: couldn't read orphan inode 15 (err -117)
[  227.393702][ T6142] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  227.582724][ T6156] loop0: detected capacity change from 0 to 128
[  227.634007][ T6156] FAT-fs (loop0): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1)
[  227.683181][ T4265] EXT4-fs (loop3): unmounting filesystem.
[  229.013848][ T6174] futex_wake_op: syz.0.397 tries to shift op by 32; fix this program
[  230.039624][ T6181] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  230.048837][ T6181] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  230.056416][ T6181] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  230.083663][ T6183] netlink: 60 bytes leftover after parsing attributes in process `syz.0.397'.
[  230.394466][ T6193] loop5: detected capacity change from 0 to 764
[  230.416933][ T6193] Symlink component flag not implemented
[  230.422644][ T6193] Symlink component flag not implemented
[  230.428848][ T6193] Symlink component flag not implemented (129)
[  230.435182][ T6193] Symlink component flag not implemented (6)
[  231.746037][ T4332] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  231.938732][ T4332] usb 4-1: unable to get BOS descriptor or descriptor too short
[  231.952531][ T4332] usb 4-1: config 229 has an invalid descriptor of length 0, skipping remainder of the config
[  231.966482][ T4332] usb 4-1: config 229 has 0 interfaces, different from the descriptor's value: 2
[  231.980350][ T4332] usb 4-1: language id specifier not provided by device, defaulting to English
[  232.034636][ T4332] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  232.045166][ T4332] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  232.091273][ T4332] usb 4-1: Product: syz
[  232.096377][ T4308] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  232.114069][ T4332] usb 4-1: Manufacturer: 띧埏趀긵䪇綡쟼镶쑗꟏釗倿酦◇購耫㱿闶瓌乊㸃똮톙◬ꂰ鸁틟덻鸡繱콅
[  232.145852][ T4332] usb 4-1: SerialNumber: syz
[  232.296080][ T4308] usb 6-1: Using ep0 maxpacket: 16
[  232.303449][ T4308] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  232.328967][ T4308] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  232.350260][ T4308] usb 6-1: config 0 interface 0 has no altsetting 0
[  232.367474][ T4332] usb 4-1: USB disconnect, device number 6
[  232.397377][ T4308] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  232.410157][ T4308] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  232.422353][ T4308] usb 6-1: config 0 descriptor??
[  232.763759][ T6250] netlink: 164 bytes leftover after parsing attributes in process `syz.2.412'.
[  232.839633][ T6226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  232.885805][ T6226] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  233.405127][ T5040] usb 6-1: USB disconnect, device number 5
[  234.685850][ T6266] loop2: detected capacity change from 0 to 764
[  234.706349][ T6266] Symlink component flag not implemented
[  234.712071][ T6266] Symlink component flag not implemented
[  234.718076][ T6266] Symlink component flag not implemented (129)
[  234.724293][ T6266] Symlink component flag not implemented (6)
[  236.237726][ T6275] loop2: detected capacity change from 0 to 2048
[  236.409659][ T6275] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found
[  236.448577][ T6275] UDF-fs: Scanning with blocksize 512 failed
[  236.528125][ T6279] bridge: RTM_NEWNEIGH with invalid state 0x0
[  236.551504][ T6275] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  236.784571][ T6288] bridge0: port 3(ip6gretap0) entered blocking state
[  236.808372][ T6288] bridge0: port 3(ip6gretap0) entered disabled state
[  236.826178][ T4943] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  236.849301][ T6288] device ip6gretap0 entered promiscuous mode
[  236.864241][ T6288] bridge0: port 3(ip6gretap0) entered blocking state
[  236.871338][ T6288] bridge0: port 3(ip6gretap0) entered forwarding state
[  236.889002][ T6294] device ip6gretap0 left promiscuous mode
[  236.902302][ T6294] bridge0: port 3(ip6gretap0) entered disabled state
[  236.952493][ T6295] loop5: detected capacity change from 0 to 1024
[  236.997806][ T6272] UDF-fs: warning (device loop2): udf_truncate_tail_extent: Too long extent after EOF in inode 818: i_size: 134745186 lbcount: 134747136 extent 0+133856256
[  237.011843][ T6294] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  237.026603][ T4943] usb 4-1: Using ep0 maxpacket: 32
[  237.034532][ T4943] usb 4-1: unable to read config index 0 descriptor/start: -61
[  237.055201][ T4943] usb 4-1: can't read configurations, error -61
[  237.064100][ T6294] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  237.080117][ T6294] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  237.120486][ T6294] device bridge_slave_0 left promiscuous mode
[  237.155013][ T5613] kworker/u4:19: attempt to access beyond end of device
[  237.155013][ T5613] loop2: rw=1, sector=2048, nr_sectors = 2 limit=2048
[  237.179591][ T6294] bridge0: port 1(bridge_slave_0) entered disabled state
[  237.198767][ T6294] device bridge_slave_1 left promiscuous mode
[  237.205293][ T5613] Buffer I/O error on dev loop2, logical block 1024, lost async page write
[  237.220474][ T6294] bridge0: port 2(bridge_slave_1) entered disabled state
[  237.229735][ T5613] kworker/u4:19: attempt to access beyond end of device
[  237.229735][ T5613] loop2: rw=1, sector=2048, nr_sectors = 2 limit=2048
[  237.244580][ T4943] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  237.263129][ T5613] Buffer I/O error on dev loop2, logical block 1024, lost async page write
[  237.274994][ T6294] bond0: (slave bond_slave_0): Releasing backup interface
[  237.314531][ T6294] bond0: (slave bond_slave_1): Releasing backup interface
[  237.325390][ T5613] kworker/u4:19: attempt to access beyond end of device
[  237.325390][ T5613] loop2: rw=1, sector=2048, nr_sectors = 2 limit=2048
[  237.367756][ T5613] Buffer I/O error on dev loop2, logical block 1024, lost async page write
[  237.408696][ T5613] kworker/u4:19: attempt to access beyond end of device
[  237.408696][ T5613] loop2: rw=1, sector=2048, nr_sectors = 2 limit=2048
[  237.447102][ T4943] usb 4-1: Using ep0 maxpacket: 32
[  237.463479][ T4943] usb 4-1: unable to read config index 0 descriptor/start: -61
[  237.467456][ T5613] Buffer I/O error on dev loop2, logical block 1024, lost async page write
[  237.482944][ T5613] kworker/u4:19: attempt to access beyond end of device
[  237.482944][ T5613] loop2: rw=1, sector=2050, nr_sectors = 2 limit=2048
[  237.495525][ T4943] usb 4-1: can't read configurations, error -61
[  237.498899][ T5613] Buffer I/O error on dev loop2, logical block 1025, lost async page write
[  237.511891][ T5613] kworker/u4:19: attempt to access beyond end of device
[  237.511891][ T5613] loop2: rw=1, sector=2050, nr_sectors = 2 limit=2048
[  237.515187][ T4943] usb usb4-port1: attempt power cycle
[  237.538363][ T5613] Buffer I/O error on dev loop2, logical block 1025, lost async page write
[  237.548064][ T6294] team0: Port device team_slave_0 removed
[  237.560400][ T5613] kworker/u4:19: attempt to access beyond end of device
[  237.560400][ T5613] loop2: rw=1, sector=2050, nr_sectors = 2 limit=2048
[  237.590007][ T5613] Buffer I/O error on dev loop2, logical block 1025, lost async page write
[  237.608309][ T5613] kworker/u4:19: attempt to access beyond end of device
[  237.608309][ T5613] loop2: rw=1, sector=2050, nr_sectors = 2 limit=2048
[  237.634467][ T5613] Buffer I/O error on dev loop2, logical block 1025, lost async page write
[  237.647631][ T5613] kworker/u4:19: attempt to access beyond end of device
[  237.647631][ T5613] loop2: rw=1, sector=2052, nr_sectors = 2 limit=2048
[  237.709628][ T5613] Buffer I/O error on dev loop2, logical block 1026, lost async page write
[  237.762026][ T6294] team0: Port device team_slave_1 removed
[  237.802148][ T6294] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  237.856979][ T6294] batman_adv: batadv0: Removing interface: batadv_slave_0
[  237.885184][ T6294] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  237.915150][ T6294] batman_adv: batadv0: Removing interface: batadv_slave_1
[  237.983591][ T6317] netlink: 164 bytes leftover after parsing attributes in process `syz.6.427'.
[  238.060263][ T4943] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  238.118918][ T4943] usb 4-1: Using ep0 maxpacket: 32
[  238.140595][ T4943] usb 4-1: unable to read config index 0 descriptor/start: -61
[  239.226209][ T4943] usb 4-1: can't read configurations, error -61
[  239.272993][ T6323] loop5: detected capacity change from 0 to 256
[  239.955538][ T6323] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  239.986372][ T4943] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  239.997392][ T6323] exFAT-fs (loop5): Medium has reported failures. Some data may be lost.
[  240.055141][ T6323] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d)
[  240.226087][ T4943] usb 4-1: device not accepting address 10, error -71
[  240.253401][ T4943] usb usb4-port1: unable to enumerate USB device
[  240.267035][ T6329] loop2: detected capacity change from 0 to 8192
[  240.317365][ T6329] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found
[  240.365837][ T6329] UDF-fs: Scanning with blocksize 512 failed
[  240.413727][ T6329] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found
[  240.448277][ T6329] UDF-fs: Scanning with blocksize 1024 failed
[  240.491149][ T6329] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found
[  240.516108][ T6329] UDF-fs: Scanning with blocksize 2048 failed
[  240.571803][ T6329] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  240.648157][   T26] audit: type=1800 audit(2000000103.750:13): pid=6329 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.429" name="bus" dev="loop2" ino=824 res=0 errno=0
[  243.349372][ T6361] netlink: 28 bytes leftover after parsing attributes in process `syz.3.438'.
[  243.488406][ T6364] loop6: detected capacity change from 0 to 512
[  243.548566][ T6364] EXT4-fs (loop6): orphan cleanup on readonly fs
[  243.592886][ T6364] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.439: bg 0: block 248: padding at end of block bitmap is not set
[  243.641395][ T6364] Quota error (device loop6): write_blk: dquota write failed
[  243.649505][ T6364] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota
[  243.701489][ T6364] EXT4-fs error (device loop6): ext4_acquire_dquot:6835: comm syz.6.439: Failed to acquire dquot type 1
[  243.803225][ T6364] EXT4-fs (loop6): 1 truncate cleaned up
[  243.865622][ T6364] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback.
[  244.652514][ T6364] EXT4-fs (loop6): shut down requested (0)
[  244.840128][ T6388] loop2: detected capacity change from 0 to 256
[  244.847552][ T6388] exfat: Deprecated parameter 'utf8'
[  244.852938][ T6388] exfat: Deprecated parameter 'namecase'
[  244.858678][ T6388] exfat: Deprecated parameter 'utf8'
[  246.311701][ T6388] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d)
[  247.295071][ T5371] EXT4-fs (loop6): unmounting filesystem.
[  247.554590][ T6395] kvm [6394]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc1) = 0x100000000
[  247.556215][ T4267] Bluetooth: hci0: command 0x0406 tx timeout
[  248.006427][ T4332] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  248.216562][ T4332] usb 4-1: Using ep0 maxpacket: 32
[  248.230151][ T4332] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  248.242627][ T4332] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 34546, setting to 1024
[  248.254622][ T4332] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  248.277267][ T4332] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  248.339845][ T4332] usb 4-1: config 0 descriptor??
[  248.350481][ T6407] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  248.390608][ T4332] hub 4-1:0.0: USB hub found
[  248.598934][ T4332] hub 4-1:0.0: 1 port detected
[  249.012076][ T6425] binder: 6421:6425 ioctl c0306201 0 returned -14
[  250.483076][ T4332] usb 4-1-port1: cannot reset (err = -71)
[  250.483269][ T4453] usb 4-1: USB disconnect, device number 11
[  250.497024][ T4332] usb 4-1-port1: attempt power cycle
[  250.661227][ T6440] loop2: detected capacity change from 0 to 1024
[  251.527277][ T6450] loop3: detected capacity change from 0 to 128
[  251.567310][ T6450] FAT-fs (loop3): Unrecognized mount option "18446744073709551615���" or missing value
[  251.715505][ T6455] netlink: 164 bytes leftover after parsing attributes in process `syz.5.462'.
[  251.755221][ T6458] netlink: 20 bytes leftover after parsing attributes in process `syz.0.463'.
[  252.370738][ T5039] usb 7-1: new full-speed USB device number 2 using dummy_hcd
[  252.685618][ T5039] usb 7-1: config 128 has an invalid interface number: 99 but max is 0
[  252.760563][ T5039] usb 7-1: config 128 has no interface number 0
[  252.776105][ T5039] usb 7-1: config 128 interface 99 has no altsetting 0
[  252.828908][ T5039] usb 7-1: New USB device found, idVendor=04ca, idProduct=3005, bcdDevice=ce.ec
[  252.865505][ T5039] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  252.875621][ T5039] usb 7-1: Product: syz
[  252.894100][ T5039] usb 7-1: Manufacturer: syz
[  252.899124][ T5039] usb 7-1: SerialNumber: syz
[  253.166411][ T6474] trusted_key: encrypted_key: key user:syz not found
[  253.202694][ T6463] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  253.834196][ T6463] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  253.922374][ T6463] rtc_cmos 00:00: Alarms can be up to one day in the future
[  253.967020][ T5039] usb 7-1: USB disconnect, device number 2
[  254.648180][ T6481] Bluetooth: MGMT ver 1.22
[  254.678593][ T6486] loop3: detected capacity change from 0 to 256
[  255.826988][ T1277] ieee802154 phy0 wpan0: encryption failed: -22
[  255.833346][ T1277] ieee802154 phy1 wpan1: encryption failed: -22
[  255.839931][ T6489] loop6: detected capacity change from 0 to 262144
[  255.859421][ T6489] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop6 scanned by syz.6.472 (6489)
[  255.881345][ T6489] BTRFS info (device loop6): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53
[  255.891663][ T6489] BTRFS info (device loop6): using xxhash64 (xxhash64-generic) checksum algorithm
[  255.900977][ T6489] BTRFS info (device loop6): using free space tree
[  256.334127][ T6489] BTRFS info (device loop6): enabling ssd optimizations
[  256.427394][ T6489] BTRFS info (device loop6): balance: start -d -m -s
[  256.436783][ T6489] BTRFS info (device loop6): relocating block group 30408704 flags metadata|dup
[  256.489309][ T6489] BTRFS info (device loop6): found 3 extents, stage: move data extents
[  256.542420][ T6489] BTRFS info (device loop6): relocating block group 22020096 flags system|dup
[  256.564706][ T6489] BTRFS info (device loop6): found 1 extents, stage: move data extents
[  256.588039][ T6489] BTRFS info (device loop6): relocating block group 13631488 flags data
[  256.632483][ T6489] BTRFS info (device loop6): balance: canceled
[  256.719028][ T5371] BTRFS info (device loop6): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53
[  257.935758][ T6538] netlink: 164 bytes leftover after parsing attributes in process `syz.3.479'.
[  258.389452][ T6550] loop2: detected capacity change from 0 to 256
[  258.430256][ T6550] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d)
[  261.445991][ T6581] loop3: detected capacity change from 0 to 262144
[  261.466273][ T6581] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop3 scanned by syz.3.489 (6581)
[  261.491128][ T6581] BTRFS info (device loop3): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53
[  261.501994][ T6581] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm
[  261.512057][ T6581] BTRFS info (device loop3): using free space tree
[  261.746192][ T6581] BTRFS info (device loop3): enabling ssd optimizations
[  261.841155][ T6581] BTRFS info (device loop3): balance: start -d -m -s
[  261.856924][ T6581] BTRFS info (device loop3): relocating block group 30408704 flags metadata|dup
[  261.889233][ T6581] BTRFS info (device loop3): found 3 extents, stage: move data extents
[  261.909285][ T6581] BTRFS info (device loop3): relocating block group 22020096 flags system|dup
[  262.707307][ T6581] BTRFS info (device loop3): found 1 extents, stage: move data extents
[  262.743420][ T6581] BTRFS info (device loop3): relocating block group 13631488 flags data
[  262.770694][ T6581] BTRFS info (device loop3): balance: canceled
[  262.874606][ T4265] BTRFS info (device loop3): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53
[  263.165264][ T4554] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 25 /dev/loop3 scanned by udevd (4554)
[  263.586191][ T5039] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  263.646120][ T6631] netlink: 164 bytes leftover after parsing attributes in process `syz.2.499'.
[  263.871152][ T5039] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  263.903866][ T5039] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  265.266021][ T5039] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  265.289569][ T6638] TCP: TCP_TX_DELAY enabled
[  266.260302][ T5039] usb 6-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00
[  266.525670][ T5039] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  266.614921][ T5039] usb 6-1: config 0 descriptor??
[  266.659554][ T5039] usb 6-1: can't set config #0, error -71
[  266.703946][ T5039] usb 6-1: USB disconnect, device number 6
[  268.188913][ T6665] loop3: detected capacity change from 0 to 1024
[  268.195802][ T6665] EXT4-fs: inline encryption not supported
[  269.110571][ T6665] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  269.430460][ T6665] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[  270.437078][ T4265] EXT4-fs (loop3): unmounting filesystem.
[  270.759248][ T6706] loop5: detected capacity change from 0 to 512
[  270.796153][ T4940] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  271.022736][ T4940] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  271.036650][ T4940] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  271.047735][ T4940] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  271.060922][ T4940] usb 7-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00
[  271.070308][ T4940] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  271.087288][ T4940] usb 7-1: config 0 descriptor??
[  271.106094][ T6706] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback.
[  271.115153][ T6706] ext4 filesystem being mounted at /66/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  271.774779][ T4940] usbhid 7-1:0.0: can't add hid device: -71
[  271.932533][ T4940] usbhid: probe of 7-1:0.0 failed with error -71
[  271.960315][ T4940] usb 7-1: USB disconnect, device number 3
[  272.048975][ T5016] EXT4-fs (loop5): unmounting filesystem.
[  273.483630][ T6735] netlink: 164 bytes leftover after parsing attributes in process `syz.5.516'.
[  274.856926][    T7] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  277.559409][ T6752] loop5: detected capacity change from 0 to 128
[  277.627754][ T6752] FAT-fs (loop5): Unrecognized mount option "18446744073709551615���" or missing value
[  279.595861][ T5039] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  279.603484][    T7] usb 3-1: device descriptor read/64, error -71
[  384.825974][    C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[  384.832953][    C0] rcu: 	Tasks blocked on level-0 rcu_node (CPUs 0-1): P6770/1:b..l
[  384.841254][    C0] 	(detected by 0, t=10502 jiffies, g=23625, q=281 ncpus=2)
[  384.848537][    C0] task:modprobe        state:R  running task     stack:24336 pid:6770  ppid:5767   flags:0x00004000
[  384.860266][    C0] Call Trace:
[  384.863540][    C0]  <TASK>
[  384.866463][    C0]  __schedule+0x11d1/0x40e0
[  384.870968][    C0]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  384.876931][    C0]  ? __sched_text_start+0x8/0x8
[  384.881765][    C0]  ? lock_chain_count+0x20/0x20
[  384.886602][    C0]  ? preempt_schedule_irq+0xb0/0x160
[  384.891869][    C0]  preempt_schedule_irq+0xbb/0x160
[  384.896966][    C0]  ? preempt_schedule_notrace+0x120/0x120
[  384.902672][    C0]  ? rcu_is_watching+0x11/0xa0
[  384.907424][    C0]  ? rcu_irq_exit_check_preempt+0xdb/0x210
[  384.913213][    C0]  irqentry_exit+0x63/0x70
[  384.917610][    C0]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[  384.923581][    C0] RIP: 0010:lock_is_held_type+0x13a/0x190
[  384.929296][    C0] Code: 75 40 48 c7 04 24 00 00 00 00 9c 8f 04 24 f7 04 24 00 02 00 00 75 46 41 f7 c5 00 02 00 00 74 01 fb 65 48 8b 04 25 28 00 00 00 <48> 3b 44 24 08 75 3c 89 e8 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f
[  384.948895][    C0] RSP: 0018:ffffc9001cc4f858 EFLAGS: 00000206
[  384.954945][    C0] RAX: 63cc22cb3a3e4300 RBX: ffff8880579c3b80 RCX: 63cc22cb3a3e4300
[  384.962899][    C0] RDX: 0000000000000000 RSI: ffffffff8a8c23a0 RDI: ffffffff8adf0d20
[  384.970866][    C0] RBP: 0000000000000001 R08: ffff8880579c3b80 R09: 0000000000000003
[  384.979354][    C0] R10: 0000000000000003 R11: 0000000000000000 R12: 0000000000000000
[  384.987310][    C0] R13: 0000000000000246 R14: ffff88807ce488d8 R15: ffff8880579c4660
[  384.995290][    C0]  mt_validate+0x43d1/0x4cb0
[  384.999874][    C0]  ? mt_validate+0x110/0x4cb0
[  385.004545][    C0]  ? mt_cache_shrink+0x20/0x20
[  385.009300][    C0]  ? mark_lock+0x94/0x320
[  385.013928][    C0]  validate_mm_mt+0xe2/0x440
[  385.018556][    C0]  ? __split_vma+0x500/0x500
[  385.023159][    C0]  ? verify_lock_unused+0x140/0x140
[  385.028364][    C0]  validate_mm+0xe1/0x2e0
[  385.032687][    C0]  ? vma_expand+0x880/0x880
[  385.037182][    C0]  do_mmap+0xc7/0xfd0
[  385.041156][    C0]  ? __lock_acquire+0x7d10/0x7d10
[  385.046176][    C0]  ? rwsem_write_trylock+0x135/0x1c0
[  385.051552][    C0]  ? mlock_future_check+0x100/0x100
[  385.056758][    C0]  ? ima_file_free+0x3e0/0x3e0
[  385.061535][    C0]  ? common_file_perm+0x171/0x1c0
[  385.066637][    C0]  vm_mmap_pgoff+0x1c1/0x2d0
[  385.071320][    C0]  ? account_locked_vm+0xe0/0xe0
[  385.076261][    C0]  ? __fget_files+0x28/0x4b0
[  385.080847][    C0]  ksys_mmap_pgoff+0x516/0x6f0
[  385.085599][    C0]  ? lockdep_hardirqs_on+0x94/0x140
[  385.090783][    C0]  do_syscall_64+0x4c/0xa0
[  385.095185][    C0]  ? clear_bhb_loop+0x60/0xb0
[  385.100036][    C0]  ? clear_bhb_loop+0x60/0xb0
[  385.104697][    C0]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  385.110749][    C0] RIP: 0033:0x7f5e12a48242
[  385.115162][    C0] RSP: 002b:00007ffd923e8038 EFLAGS: 00000206 ORIG_RAX: 0000000000000009
[  385.123558][    C0] RAX: ffffffffffffffda RBX: 00007f5e1276e000 RCX: 00007f5e12a48242
[  385.131520][    C0] RDX: 0000000000000001 RSI: 0000000000001000 RDI: 00007f5e1276e000
[  385.139562][    C0] RBP: 0000000000000812 R08: 0000000000000000 R09: 0000000000004000
[  385.148043][    C0] R10: 0000000000000812 R11: 0000000000000206 R12: 00007ffd923e80c0
[  385.156006][    C0] R13: 00007f5e12a25050 R14: 00007ffd923e8470 R15: 00000fffb247d00a
[  385.164065][    C0]  </TASK>
[  385.167089][    C0] rcu: rcu_preempt kthread starved for 10532 jiffies! g23625 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1
[  385.178284][    C0] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[  385.188339][    C0] rcu: RCU grace-period kthread stack dump:
[  385.194209][    C0] task:rcu_preempt     state:R  running task     stack:27736 pid:16    ppid:2      flags:0x00004000
[  385.205057][    C0] Call Trace:
[  385.208418][    C0]  <TASK>
[  385.211353][    C0]  __schedule+0x11d1/0x40e0
[  385.215853][    C0]  ? _raw_spin_unlock_irqrestore+0x82/0x120
[  385.221733][    C0]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  385.227611][    C0]  ? __sched_text_start+0x8/0x8
[  385.232537][    C0]  ? __mod_timer+0x91e/0xd00
[  385.237178][    C0]  schedule+0xb9/0x180
[  385.241244][    C0]  schedule_timeout+0x184/0x2d0
[  385.246081][    C0]  ? console_conditional_schedule+0x40/0x40
[  385.251958][    C0]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  385.257923][    C0]  ? update_process_times+0x1b0/0x1b0
[  385.263277][    C0]  ? prepare_to_swait_event+0x335/0x350
[  385.268812][    C0]  rcu_gp_fqs_loop+0x303/0x1340
[  385.273649][    C0]  ? rcu_gp_kthread+0x3b0/0x3b0
[  385.278490][    C0]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  385.284635][    C0]  ? lockdep_hardirqs_on+0x94/0x140
[  385.289819][    C0]  ? rcu_gp_init+0x14e0/0x14e0
[  385.294577][    C0]  rcu_gp_kthread+0x99/0x3b0
[  385.299183][    C0]  ? rcu_report_qs_rsp+0x1a0/0x1a0
[  385.304282][    C0]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  385.310245][    C0]  ? __kthread_parkme+0x162/0x1c0
[  385.315439][    C0]  kthread+0x29d/0x330
[  385.319506][    C0]  ? rcu_report_qs_rsp+0x1a0/0x1a0
[  385.324606][    C0]  ? kthread_blkcg+0xd0/0xd0
[  385.329182][    C0]  ret_from_fork+0x1f/0x30
[  385.333589][    C0]  </TASK>
[  385.336592][    C0] rcu: Stack dump where RCU GP kthread last ran:
[  385.342924][    C0] Sending NMI from CPU 0 to CPUs 1:
[  385.348196][    C1] NMI backtrace for cpu 1 skipped: idling at default_idle+0xb/0x10