last executing test programs:

19.193862791s ago: executing program 0 (id=14):
r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
write$binfmt_register(r0, &(0x7f00000005c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x6, 0x3a, 'us\x86jquot\\=', 0x3a, '', 0x3a, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa', 0x3a, [0x4f, 0x4f]}, 0x128)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000240)="b9800000c00f3235000100000f300f20c035000000800f22c066ba6100b805000000efc4e1555538c4c1b1d24900660f60c50f2055660fae3a66bad004edc744240000000080c7442402f8ff0000c7442406000000000f011c24", 0x5a}], 0x1, 0x44, 0x0, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x101100, 0x0)
lseek(r0, 0x7fff, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x1)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x47, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

18.110945449s ago: executing program 0 (id=27):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002540)=@delchain={0x51c, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x1, 0x2}, {0x0, 0x10}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4f0, 0x2, [@TCA_BPF_ACT={0x4ec, 0x1, [@m_bpf={0xd0, 0x11, 0x0, 0x0, {{0x8}, {0x40, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x2}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_NAME={0x12, 0x6, './file0/file0\x00'}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0xffffffff, 0x3, 0xffffffffffffffff, 0x10001, 0x6}}]}, {0x69, 0x6, "a41f25d22b1bae1b6bfb4a42ad5ba9db462fca41280c331f630e2c9f0be1093117392575082305ebc27660464ef802792ce06133244235023f0f4882fc0a47f4d5e499a8857cd81b0e6fda422cbc53ad098872214190756df6bbd0e760248aa97e200702fd"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}, @m_xt={0x144, 0x5, 0x0, 0x0, {{0x7}, {0x30, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x2a, 0x6, {0x7, 'raw\x00', 0x7, 0x100}}]}, {0xed, 0x6, "a5fd64840366fd7ad44f3f053221ded9ced495590e2bc8690a2765e56ded8425cb3eb0e04bbcfec50e639bf373167e617b24eccd260f28bb850873b1e2154b158987d6e585e10ffeaba32641bae47de041e1169d8e4a65b8ce3633a4469c93c5228320c572237d92a9ae6bbc2d2bd3a2d1e27de283017ecf9fca6b2cd8a119dee59702830717b694625f60f5c81f688775c5e292f76a0ffa39e1d2cabd639d1c111c01e0d2f9faa220154db33399242bca9f4fac65c74cb6264c28ac7a50037564c7b417fb61d617d212ab3243c30e0e82d9a12651b74553d539b991a302489af94626e5aac41c53b2"}, {0xc, 0x7, {0x1, 0xeb0757422c733451}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_bpf={0xd0, 0x8, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_FD={0x8}, @TCA_ACT_BPF_OPS={0x14, 0x4, [{0xa3b7, 0x9, 0xb, 0x7}, {0x28a3, 0x4, 0x4, 0xfffffffa}]}]}, {0x81, 0x6, "5d3aee85a6264cff4a2163adaec321e008985cfa435b8922eeb16f1932265618158a3fe72c442a68b182e8f673f9251a03dc831c5947be17ca906c3dcb99adb55bc5f0ad8886f235f45d7e29bb727715f2e7a3200ac63eb79f7a023835874514b60b0177c40370157c0c21b37875e7e4a2e75b3cc54be7d719fa695469"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}, @m_tunnel_key={0xb8, 0x8, 0x0, 0x0, {{0xf}, {0x4}, {0x85, 0x6, "51719d53a2b05eda58a80a40d29b01394b8749d7d9ef9f47cce75187b6f333f4bfe797fa4227bf38cf0b71e1b4888d8d1ed410a788c182ba498076ca9ab3d63a8f29175d44a2e8364296c34ac0cdb8972288ecf6515bec4861a53e1e18e54679f5666b0536d0a008aa9b3be1f5e00c4c72460249c372de16eb2cfc15714543d6f3"}, {0xc}, {0xc, 0x8, {0x3, 0xddc47d017e85c037}}}}, @m_xt={0x14c, 0x13, 0x0, 0x0, {{0x7}, {0x124, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TARG={0xce, 0x6, {0x8, 'filter\x00', 0xd, 0x6cca, "51100666dd78f1337c421065ba00caa97aaa8e1aa207a78c6d7e2a3e620334de1a64a8d40af7536c5a07a1997c6fd28e7ed1f866f9454e1014a5129fbeaf1a76cb7b54d80907f7d86c39ff782b12b0422666997d539a25e55b0591b44929ef0dcea5434727f1d8aa8d1ec3a7d56965dae69f90f152f907a0ab28fc8d30bcdb763cd5f45e6a19be6dae4c5659ea76f0641d19c50157b11a5d9f8f9f5d0efd5d7395e68091"}}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}}]}, 0x51c}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080)
r0 = socket(0x10, 0x803, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000480)='./file3\x00', 0x20400049, &(0x7f0000000180)={[], [{@pcr={'pcr', 0x3d, 0x2e}}]}, 0x0, 0x4bb, &(0x7f00000004c0)="$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")
utimensat(0xffffffffffffffff, &(0x7f00000001c0)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x0, 0x100)
syz_open_procfs(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xffffffffffff0001}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
syz_open_procfs(0x0, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$FIBMAP(r3, 0x2284, &(0x7f0000000100)=0x3)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400})
socket$packet(0x11, 0x2, 0x300)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
syz_usb_connect$uac2(0x5, 0xa8, &(0x7f0000000000)=ANY=[@ANYBLOB="120110030000004090054c00400001020301090296000301053009080b00010107208c0904000000010120000924010040041d000708240b0001ff23000c2403"], &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.subtree_control\x00', 0x2, 0x0)

15.70349691s ago: executing program 3 (id=43):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000080)=@generic={0x3, 0x200000000000, 0xf1df})
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
unshare(0x20060400)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$inet6_udp_int(r1, 0x11, 0xb, &(0x7f00000001c0)=0x10000006, 0x4)
r2 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x9, 0x3, 0x300, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70}}, {{@uncond, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x100)

15.621907432s ago: executing program 3 (id=46):
socket$netlink(0x10, 0x3, 0x0) (async)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c00ffff25bd7000fddbdf09000000e0ffffff0035ed", @ANYRES32=0x0, @ANYBLOB="00000000230800001c0012800b00010062726964676500000c0002800800050001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000000)
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x1000800, &(0x7f0000000380)=ANY=[@ANYBLOB="6e6f646973636172642c6261636b67726f756e645f67633d73796e632c6261636b67726f756e645f67633d6f6e2c6e6f757365725f78617474722c6e6f71756f74612c64697361626c655f726f6c6c5f666f72776172642c67635f6d657267652c6e6f757365725f78617474722c636865636b706f696e743d64697361626c652c757365725f78617474722c6673796e635f6d6f64653d7374726963742c646973636172645f756e69743d73656374696f6e2c636865636b706f696e743d64697361626c652c6e6f696e6c696e655f64656e7472792c00ec6da92d1c80a6c720380e3c2c55bf27596d2776ce408c4bb19b149757508e1c7e919c6c2047023baa412d14fa75c8cac6e5f103e13ea52708af0a7c5da8af4ecb6612"], 0x2, 0x5524, &(0x7f00000108c0)="$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") (async)
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x1000800, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5524, &(0x7f00000108c0)="$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")
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='pids.current\x00', 0x275a, 0x0)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="090000000c0000004200000040000000c0000000", @ANYRES32=0x1, @ANYBLOB="ff07000000000000f312a1dce02878aedd004630", @ANYRES32=0x0, @ANYRES32, @ANYRES16=0x0], 0x50)
fsopen(&(0x7f0000000140)='configfs\x00', 0x0) (async)
r4 = fsopen(&(0x7f0000000140)='configfs\x00', 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000028c0)=@raw={'raw\x00', 0x9, 0x3, 0x2c0, 0x108, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0x108, 0x0, {}, [@common=@hl={{0x28}, {0x0, 0x5}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x2, 0x6}, {0x2, 0x6, 0x5}, {0x4, 0x0, 0x3}, 0x6, 0x5}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x4, 0x95, {0x7}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
r6 = fsmount(r4, 0x0, 0x9)
fchdir(r6)
openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) (async)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
lseek(r7, 0x0, 0x0)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r3, &(0x7f0000000000), 0x0}, 0x20)
socket$inet6(0xa, 0x1, 0x0)
r8 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) (async)
ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0)
write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) (async)
write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (async)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
fdatasync(r2) (async)
fdatasync(r2)
socket$nl_audit(0x10, 0x3, 0x9)
ioctl$OCFS2_IOC_INFO(r0, 0x80106f05, &(0x7f0000003dc0)={&(0x7f0000003c00)=[&(0x7f0000000880)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x1}, [{0x62, 0x5}, {0x9}, {0x2, 0x75}, {0x1a7b, 0x2}, {0x9, 0x8}, {0xb1, 0x7f}, {0xfffd, 0x4}, {0x7, 0x7fffffffffffffff}, {0x19a, 0x9}, {0x8, 0x6}, {0xfffffffffffffffa, 0x6c6}, {0x2, 0x9}, {0x7fff, 0x80000000000000}, {0x3, 0x4}, {0xfffffffffffffff8, 0xb699}, {0x7f, 0x7a9}, {0x1, 0xfffffffffffffffb}, {0x8bd, 0x10000}, {0xf76, 0x80}, {0x7, 0x400}, {0x9c8, 0xc3}, {0xf, 0x8000000000000000}, {0x81, 0x5}, {0x0, 0x1}, {0x6, 0xfff}, {0x4, 0x2}, {0xb000000000000000, 0x4}, {0xe566}, {0x8, 0x3}, {0x1000, 0xccd}, {0x3, 0x2}, {0x3, 0x5}, {0x7}, {0xff, 0x1}, {0x3, 0x4}, {0x5, 0x10000}, {0x80000000}, {0x1000}, {0x7, 0xeaa}, {0x2, 0x8}, {0x10, 0xffffffff00000001}, {0x4, 0x2c}, {0x0, 0x7}, {0x879e, 0x3}, {0x7, 0x4}, {0x7, 0x9}, {0x2, 0x9}, {0x9, 0x52}, {0x5, 0x9}, {0xd, 0x4}, {0x1000, 0xa7f}, {0xa7b, 0x9}, {0x90000000, 0x3b1369f8}, {0x4, 0xfc}, {0x3, 0xc}, {0x4, 0x1}, {0x9, 0x100000000}, {0x7, 0xb}, {0x9, 0x7}, {0x8000000000000001, 0x18c0}, {0x5}, {0x9, 0xf}, {0x8}, {0x81, 0xb}, {0x4a34, 0x9}, {0x5, 0x400}, {0x3, 0x7}, {0x6, 0x6}, {0x7, 0xa891}, {0xed09, 0x1}, {0x73000, 0x6}, {0x10, 0x4344b3d6}, {0x9}, {0xa, 0x79b3}, {0x9ee0}, {0x6, 0xfffffffffffffff7}, {0x0, 0x7fffffffffffffff}, {0x8, 0x5}, {0xb5, 0x1}, {0xfffffffffffffffc, 0x60}, {0x408, 0x4c5}, {0x80000000, 0x8}, {0x5, 0x3}, {0x0, 0x1}, {0xbb23, 0x8}, {0x1, 0x100000000000000}, {0x4, 0x3}, {0xb96, 0x8}, {0xa89f, 0x8}, {0x63c, 0x9fc2}, {0x7, 0x2}, {0x5, 0x1e2133cb}, {0x8, 0x8}, {0x1000}, {0x8000000000000001, 0x5}, {0x4, 0x400}, {0x4, 0x10001}, {0x3, 0x2}, {0x8c, 0x8000000000000000}, {0xa, 0xef}, {0x2, 0x9}, {0x9, 0x800}, {0x7, 0x7}, {0x9, 0xe2}, {0x2, 0x5}, {0xfffffffffffffffd, 0x81}, {0x0, 0x4}, {0x7}, {0x0, 0xfffffffffffffffc}, {0x7a6, 0x9}, {0x7fff, 0x7}, {0xd, 0x10}, {0x1e9, 0x100}, {0x2, 0x173}, {0x2c9, 0xffff}, {0x9, 0xffffffffffffff80}, {0x1, 0x31adc0000000}, {0x3, 0x1ff}, {0x9, 0x1000000000000000}, {0x1, 0x8000}, {0x1, 0x8000000000000000}, {0x6}, {0x6, 0x2}, {0x8, 0x5}, {0x7, 0x7}, {0x1000, 0x7}, {}, {0x9, 0x1}, {0x8, 0xd48f}, {0x5, 0xb}, {0x5, 0x8}, {0x6, 0x6}, {0xde, 0x8}, {0x9, 0x101}, {0xfff, 0x8}, {0xd}, {0xa0b8, 0x9}, {0x9, 0x3}, {0xaf46, 0x8000}, {0x3, 0xffffffffffffffff}, {0x70b09ae5, 0xfffffffffffffffb}, {0x3, 0x6}, {0x9, 0x1}, {0x1, 0x2}, {0x4, 0xd96b}, {0x3, 0x6}, {0x45c, 0x2}, {0x401, 0x2}, {0x400002de, 0x7}, {0xfffffffffffffff7, 0xffffffffffffffff}, {0x8, 0xf}, {0x0, 0xd6}, {0x6, 0x8}, {0x1, 0x1}, {0x4c15, 0x83}, {0xfffffffffffffffb, 0x3}, {0x74, 0x3ff}, {0xc4, 0x783f}, {0x800000006, 0x3ff}, {0xc, 0xff}, {0xc, 0x5}, {0x2, 0x7}, {0xfffffffffffff342, 0x36f7}, {0x1, 0x2}, {0x93f, 0x2}, {0x9, 0x7ff}, {0xb, 0x6}, {0x3609, 0x8000000000000000}, {0xc1d2, 0x9}, {0x8}, {0x2, 0x8}, {0x10001, 0x9}, {0x7, 0xddb3}, {0x6}, {0xf7, 0xdd2}, {0xffffffffffffffff, 0xc0}, {0x7, 0x3}, {0xc50, 0x4}, {0x6, 0x7f}, {0x0, 0x4}, {0xdac, 0x2c}, {0x9, 0xfffffffffffffffb}, {0x2, 0x5}, {0x8001}, {0x7fffffff, 0x8}, {0x81, 0x4}, {0x5, 0x8}, {0x3, 0xfffffffffffffffc}, {0x3, 0x9}, {0x0, 0x8}, {0x0, 0x70}, {0x1, 0x8000000000000000}, {0x2, 0x7}, {0xffffffffffffff60, 0x200}, {0xfffffffeffffffff, 0x8000000000000001}, {0x8a, 0xffff}, {0x3, 0x9}, {0x0, 0xf}, {0x1, 0x6}, {0x100, 0x1}, {0xb43, 0x61af}, {0x41e6, 0x9}, {0x81, 0x80000001}, {0x100000000000}, {0x1, 0x8000000}, {0xda3f, 0xc0d7}, {0x3, 0xfffffffffffffffa}, {0xff, 0xec}, {0x1}, {0x9, 0x8001}, {0x0, 0xf4b}, {0x100000000}, {0x224b, 0x8}, {0x4e05, 0x10000}, {}, {0xff, 0x5}, {0x81, 0x4}, {0x9, 0x9}, {0x4, 0x8001}, {0x7fff, 0x9}, {0x6, 0x7fff}, {0x0, 0xfffffffffffffffc}, {0x2, 0x104}, {0x7fffffff, 0x7ff}, {0x5, 0x5}, {0x3, 0x3}, {0x7, 0x9}, {0x8, 0x5264}, {0x29, 0x907e}, {0x8, 0x8000000000000000}, {0x7fffffff, 0xb2}, {0x7, 0x6}, {0x7fffffff, 0x1ff}, {0x4317, 0xc28}, {0x7fffffffffffffff, 0x3ff}, {0x2, 0x1}, {0x200, 0x100}, {0x9, 0x4}, {0xffffffffffffff3e, 0x101}, {0x4, 0x6}, {0x8, 0x7}, {0x8, 0x40}, {0x8, 0x9}, {0x39, 0x10}, {0x9, 0x5}, {0xcf, 0x4}, {0x1, 0xfffffffffffffff7}, {0x4, 0x1}, {0x1000, 0x6}, {0x100, 0x6}, {0x8000000000000000, 0x4}, {0x8, 0x8000000000000000}, {}, {0xe, 0x1}, {0x3, 0x3}]}, &(0x7f00000018c0)=@uuid={{0x4f32494e, 0x5, 0x10}}, &(0x7f0000001900)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x80000001}}, &(0x7f0000001940)=@features={{0x4f32494e, 0x6, 0x10}}, &(0x7f0000001980)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x40000000}}, &(0x7f00000019c0)=@maxslots={{0x4f32494e, 0x3, 0x10}}, &(0x7f0000001a00)=@clustersize={{0x4f32494e, 0x1, 0x10, 0xc0000001}}, &(0x7f0000001a40)=@uuid={{0x4f32494e, 0x5, 0x10, 0x80000001}}, &(0x7f0000001a80)=@features={{0x4f32494e, 0x6, 0x10, 0x40000001}}, 0x0, &(0x7f0000001b00)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x80000000}}, &(0x7f0000001b40)=@uuid={{0x4f32494e, 0x5, 0x10, 0x1}}, &(0x7f0000001b80)=@features={{0x4f32494e, 0x6, 0x10, 0x40000001}}, &(0x7f0000001bc0)=@label={{0x4f32494e, 0x4, 0x10, 0xc0000000}}, &(0x7f0000001c40)=@maxslots={{0x4f32494e, 0x3, 0x10, 0xc0000000}}, &(0x7f0000001c80)=@freeinode={{0x4f32494e, 0x8, 0x10, 0x1}, [{0x3, 0x401}, {0x7, 0x1000}, {0x7, 0x2}, {0x3, 0x1}, {0x1, 0x7}, {0x16, 0x6}, {0x0, 0xffffffff}, {0xfff, 0x8000000000000001}, {0xc53e, 0x2}, {0x6, 0xffffffffffffffff}, {0x6, 0xc}, {0x4909, 0x1ff}, {0x10000, 0xb}, {0xffffffffb009eb91, 0x40}, {0x3, 0x6}, {0x20, 0xe}, {0x8, 0xd}, {0xbe00, 0x8}, {0x5, 0x6}, {0x3, 0x1}, {0x5, 0x1a5e00}, {0x8, 0x3}, {0x7, 0xffffffffc15679f1}, {0x5, 0x2}, {0xf, 0x8}, {0x8000, 0x47}, {0x3, 0x7}, {0x0, 0xd}, {0x2, 0x1}, {0x4, 0x10000}, {0x1, 0x800000}, {0x779, 0x3}, {0x7, 0x1}, {0x10, 0x2}, {0x6}, {0x101, 0x10}, {0x1, 0x8}, {0x2, 0x3ff}, {0x1, 0x1}, {0x0, 0x9}, {0x6, 0x85}, {0x9, 0xd}, {0x0, 0x401}, {0x6, 0x3}, {0x8000000000000000, 0xfffffffffffffff9}, {0x32c, 0x2}, {0x4, 0x423d}, {0xffffffffffff7fff, 0xffff}, {0x3, 0x5}, {0x8, 0x3}, {0x8, 0x4}, {0x6, 0x2098}, {0x8, 0x1}, {0x8, 0x80000001}, {0xffffffffffffffbe, 0x8}, {0x7, 0x80000001}, {0x2, 0x200}, {0x5, 0x15c}, {0x4, 0x7}, {0x100000}, {0xe}, {0x66, 0xc}, {0x19ec2565, 0x2}, {0x1, 0xcca}, {0xfffffffffffffff9, 0x2}, {0xffffffffffffff18, 0x7}, {0x57, 0x8}, {0x2, 0x2}, {0x4, 0x5}, {0x2, 0x4}, {0xac9c58b, 0x5}, {0xdb, 0x1}, {0x1000, 0xfc5f}, {0x2, 0x3}, {0xff3, 0x40}, {0x6, 0xffffffffffffffff}, {0xb14, 0x9}, {0x5b8b, 0xe5}, {0x4, 0x9}, {0x9fb, 0x3}, {0xffffffff, 0xffffffffffffffff}, {0xa, 0x7}, {0x5, 0xac0}, {0x200, 0x7}, {0x9a, 0xe2}, {0xa6b, 0x9}, {0xb6, 0xc}, {0x1, 0x100000001}, {0x3, 0x7}, {0x0, 0x2}, {0x2, 0x8}, {0x7, 0x7}, {0x101, 0x1}, {0xa, 0x4}, {0x360, 0x7}, {0x8001, 0x2}, {0x1000, 0x4}, {0x3, 0x1}, {0x5, 0x81}, {0x1b77, 0x1}, {0x7, 0x8}, {0xfff}, {0x0, 0x7}, {0x858, 0x4}, {0x8, 0x50}, {0xc, 0xf2c1}, {0x7fffffffffffffff, 0x6}, {0x1, 0x8}, {0x2, 0x3}, {0x400, 0x2eb}, {0x8}, {0xc271, 0xfffffffffffffffc}, {0x8, 0x5}, {0x6, 0x3}, {0x100000000, 0x6}, {0x9, 0x3}, {0x3, 0x7}, {0xfb, 0x5}, {0x7, 0xffffffff}, {0x3, 0x2}, {0x0, 0x4}, {0x8000000000000000, 0x7}, {0x400, 0x7}, {0x1, 0xd66}, {0x6, 0x8}, {0x80000000, 0x2}, {0x0, 0x8}, {0x7d, 0x80000001}, {0x7, 0x2}, {0xffffffffffffff6d, 0x6}, {0x4, 0x3}, {0xfff, 0x6}, {0x3, 0xc}, {0x10}, {0x7b2, 0x800}, {0xf4d, 0xdd}, {0xfffffffffffffff3, 0x2}, {0x1, 0x6}, {0x8000000000000000, 0x8}, {0x800, 0x7}, {0x6}, {0x0, 0x6}, {0x1, 0x4}, {0x57, 0xb032}, {0x10000, 0x8}, {0x6, 0x4}, {0xc3da, 0x3bd}, {0x100000000, 0x80}, {0x4, 0xffffffffffffff28}, {0x3bba, 0x8}, {0x4}, {0xffffffff, 0x4}, {0x0, 0xfffffffeffffffff}, {0x80, 0xfffffffffffffffd}, {0x4e3, 0x6011}, {0x1, 0xa6b1}, {0x1, 0x6}, {0x2, 0x15}, {0x8, 0x3}, {0x10, 0xfff}, {0x2, 0x3}, {0x2, 0x40}, {0x8000000000000001, 0x34}, {0x9, 0xfff}, {0x8}, {0xc58b, 0x800}, {0x7, 0x6}, {0x2, 0x5f31}, {0x8}, {0xa, 0x7}, {0x3, 0x40}, {0x0, 0xa}, {0x3, 0x4}, {0x2, 0x80}, {0x80, 0xa}, {0xfffffffffffffffc, 0x1}, {0x4, 0x97f}, {0x3, 0xffffffffffffffb2}, {0x2, 0x2}, {0xff, 0x3ff}, {0x3, 0x6}, {0x1, 0x4}, {0x3, 0xfffffffffffffff8}, {0x1000, 0x9}, {0x7, 0xe}, {0x3a2, 0xc52}, {0x0, 0x8}, {0xffffffffffffae26}, {0x3, 0x5}, {0x1, 0x100000000}, {0x770000, 0x9}, {0x6, 0x7f}, {0x3ff, 0x7fffffff}, {0x4, 0x4}, {0x8, 0x1}, {0x1000, 0x2}, {0x6, 0x100000001}, {0x1, 0xd}, {}, {0xe, 0x8}, {0xb37, 0x4}, {0x1, 0x100000000}, {0x6, 0x8}, {0x9, 0x1}, {0x2, 0x2}, {0x8, 0x3}, {0x15c, 0x1}, {0x100, 0x9}, {0x7f, 0xb}, {0x5, 0xff}, {0xfffffffffffffffa, 0xffffffff}, {0x6, 0xffffffffffffffff}, {0x24f7, 0x1}, {0x4dd, 0x2}, {0x19, 0x9}, {0x7, 0x98}, {0xfffffffffffffffc, 0x9a1}, {0x8, 0x9}, {0x8, 0x8}, {0x6, 0x2}, {0x7f, 0x2113}, {0x1c, 0xb1}, {0x3, 0x5}, {0xfff}, {0x1c4, 0x2}, {0x5, 0xfffffffffffffff7}, {0xffff, 0x100000000}, {0x39b4, 0xfffffffffffffffe}, {0x9fc6, 0x3326d3d}, {0x3, 0x67}, {0x80, 0x6}, {0x800, 0x80}, {0x0, 0x81}, {0x2, 0x9e}, {0x6, 0x2}, {0x0, 0x5}, {0x10000, 0x81}, {0x800, 0x7fff}, {0x0, 0x4}, {0x9, 0x6}, {0xfffffffffffff3f8, 0x9}, {0x1, 0xc7}, {0x80, 0x401}, {0x1613, 0x4}, {0x1, 0x6}, {0x3, 0x2}, {0x2, 0x9}, {0x2, 0x7f}, {0x0, 0x3}, {0xffffffff, 0x1}, {0x7ffffffffffffffd}, {0x8, 0x3}, {0x8, 0x5fc}, {0x6, 0x3}, {0x2, 0x5}]}, &(0x7f0000002cc0)=@label={{0x4f32494e, 0x4, 0x10, 0x40000001}}, &(0x7f0000002d40)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x40000000}, {}, 0x4}, &(0x7f0000002e80)=@features={{0x4f32494e, 0x6, 0x10, 0x80000000}}, &(0x7f0000002ec0)=@blocksize={{0x4f32494e, 0x2, 0x10}}, &(0x7f0000002f00)=@uuid={{0x4f32494e, 0x5, 0x10, 0x1}}, &(0x7f0000002f40)=@freefrag={{0x4f32494e, 0x9, 0x10, 0xc0000000}}, &(0x7f0000003080)=@freefrag={{0x4f32494e, 0x9, 0x10}, {}, 0x5}, &(0x7f00000031c0)=@uuid={{0x4f32494e, 0x5, 0x10, 0x3}}, &(0x7f0000003200)=@journal={{0x4f32494e, 0x7, 0x10, 0x100000000}}, &(0x7f0000003240)=@features={{0x4f32494e, 0x6, 0x10, 0xc0000000}}, &(0x7f0000003280)=@uuid={{0x4f32494e, 0x5, 0x10, 0x80000001}}, &(0x7f00000032c0)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x80000000}}, &(0x7f0000003300)=@clustersize={{0x4f32494e, 0x1, 0x10, 0xa0000000}}, &(0x7f0000003340)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x1}, {}, 0x401}, &(0x7f0000003480)=@features={{0x4f32494e, 0x6, 0x10}}, &(0x7f00000034c0)=@journal={{0x4f32494e, 0x7, 0x10, 0x1}}, &(0x7f0000003500)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x40000000}, {}, 0xffffef66}, &(0x7f0000003640)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x40000001}}, &(0x7f0000003680)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x2}}, &(0x7f00000036c0)=@freefrag={{0x4f32494e, 0x9, 0x10, 0x80000000}, {}, 0x3}, &(0x7f0000003800)=@uuid={{0x4f32494e, 0x5, 0x10, 0x40000001}}, &(0x7f0000003840)=@features={{0x4f32494e, 0x6, 0x10, 0xa0000000}}, &(0x7f0000003880)=@label={{0x4f32494e, 0x4, 0x10, 0x2}}, &(0x7f0000003900)=@journal={{0x4f32494e, 0x7, 0x10, 0x80000000}}, &(0x7f0000003940)=@features={{0x4f32494e, 0x6, 0x10}}, &(0x7f0000003980)=@features={{0x4f32494e, 0x6, 0x10, 0x20000002}}, &(0x7f00000039c0)=@label={{0x4f32494e, 0x4, 0x10}}, &(0x7f0000003a40)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x60000001}}, &(0x7f0000003a80)=@features={{0x4f32494e, 0x6, 0x10, 0x40000001}}, &(0x7f0000003ac0)=@blocksize={{0x4f32494e, 0x2, 0x10, 0x1}}, &(0x7f0000003b00)=@maxslots={{0x4f32494e, 0x3, 0x10, 0x40000001}}, &(0x7f0000003b40)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x80000001}}, &(0x7f0000003b80)=@clustersize={{0x4f32494e, 0x1, 0x10, 0x80000000}}, &(0x7f0000003bc0)=@blocksize={{0x4f32494e, 0x2, 0x10}}], 0x32})
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) (async)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x492492492492846, 0x0)
ftruncate(r2, 0x4a8e)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="850000008b00001dd2cd0254d2be96005c0000a40c56e27e5f0500000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0xfe8e}, 0x3f) (async)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="850000008b00001dd2cd0254d2be96005c0000a40c56e27e5f0500000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0xfe8e}, 0x3f)
openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0)

15.132365795s ago: executing program 0 (id=50):
syz_extract_tcp_res(&(0x7f0000000000), 0x4, 0x8)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', <r1=>0x0})
r2 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_DONE(r2, 0x0, 0xc9, 0x0, 0x0) (async, rerun: 64)
ioctl$TCSETSF(0xffffffffffffffff, 0x5404, &(0x7f0000000080)={0x7fff, 0xdc6c, 0x2, 0x1, 0x14, "15a1955b5760d8dafdf2f3f99ac600111286f5"}) (async, rerun: 64)
r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_tracing={0x1a, 0x4, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4000000}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}]}, &(0x7f0000000100)='GPL\x00', 0x8, 0xc4, &(0x7f0000000140)=""/196, 0x40f00, 0x0, '\x00', r1, 0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000280)={0x5, 0xa, 0x60, 0x5}, 0x10, 0x2e9f2, 0xffffffffffffffff, 0x0, &(0x7f00000002c0)=[0xffffffffffffffff], 0x0, 0x10, 0x3a9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r3, 0x0, 0x2a, 0x2e, &(0x7f00000003c0)="d67fe7cc1301359243e28454392f61171e8a8ef3eafbce162cce64496d755921dc6195ea3ba2c0de1db6", &(0x7f0000000400)=""/46, 0x5, 0x0, 0xc5, 0x15, &(0x7f0000000440)="122538ca5e2656e476bd63fbf57ea80f0dc4503b6030b49fd65abd6e089deeb8114bdd265cd96a84b9c2644b3726eaf42b8dc5d278e8bca72783efe3f789ebe2ff40748bdd5d4eb38739b132049efedd5f45b05d4a4d8ee927c7ed65c5f18a6342624d7a7066008e6303284d1bd3dbae48e27a8ecb79933dafd626c5876842b2ba4cc960c8179a36d49944d068d326f3bfbffb48535d97d766bc272dafe77684ffabe0ac5588e7ee0af43a31a2925e7168fe066d69cc4df850c450acd9df3a9446572ea9d8", &(0x7f0000000540)="92c7a60c2b63adbb5f935c818b9eea6e5cc9fbfbaf", 0x1, 0x0, 0xa}, 0x50)
timer_settime(0x0, 0x1, &(0x7f0000000600)={{0x0, 0x3938700}, {0x77359400}}, &(0x7f0000000640)) (async)
ioctl$NILFS_IOCTL_GET_CPINFO(r2, 0x80186e82, &(0x7f0000000800)={&(0x7f0000000680)=[{0x1, 0x0, 0x1, 0x7, 0x100, 0x8, 0x4, 0x4}, {0x2, 0x0, 0x8, 0x2, 0x4, 0x6, 0x1, 0xcc}, {0x1, 0x0, 0x1, 0x5713, 0x9, 0x36cc125d, 0x10000, 0x5}, {0x3, 0x0, 0x7, 0x3, 0xe967, 0x8, 0x4, 0xffffffffffffffff}, {0x0, 0x0, 0x3, 0x3, 0x2, 0x3, 0x2, 0xfc}, {0x0, 0x0, 0x4e1, 0x3d85eddd, 0x1, 0x6, 0xd9a30000000000, 0x7fffffffffffffff}], 0x6, 0x38, 0x1, 0x9}) (async, rerun: 32)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000840)={0x2, 'pim6reg\x00', {0x5}, 0x80}) (rerun: 32)
ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f00000008c0)={'sit0\x00', &(0x7f0000000880)={@remote, @dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x18}}) (async, rerun: 64)
r4 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000900), r4) (async)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000940)={'batadv_slave_0\x00', <r5=>0x0}) (async)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), r4)
sendmsg$NL80211_CMD_SET_WDS_PEER(r4, &(0x7f0000000ac0)={&(0x7f0000000980), 0xc, &(0x7f0000000a80)={&(0x7f0000000a00)={0x44, r6, 0x400, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x3, 0x5d}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @random="e5fa8c921ee7"}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}]}, 0x44}, 0x1, 0x0, 0x0, 0x90}, 0x0) (async, rerun: 64)
ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f0000000b00)) (rerun: 64)
clock_adjtime(0x6, &(0x7f0000000b40)={0xffffffffffffff80, 0x0, 0x3, 0xcd, 0xffff, 0x207, 0x5, 0x9, 0x6, 0x4, 0x2, 0x7ff, 0x1800000, 0x597, 0x3, 0xb, 0x64, 0x2, 0x88a, 0x8, 0x5e, 0x1, 0x7, 0x101, 0xfffffffffffffff9, 0x400}) (async)
r7 = socket(0x6, 0x800, 0xd) (async)
fcntl$F_SET_RW_HINT(r4, 0x40c, &(0x7f0000000c40)) (async)
setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000c80)=0x100001, 0x4)
r8 = socket$xdp(0x2c, 0x3, 0x0)
bind$xdp(r7, &(0x7f0000000cc0)={0x2c, 0x0, r1, 0x20, r8}, 0x10)
clock_adjtime(0x1, &(0x7f0000000d00)={0x4, 0x0, 0x800, 0x805, 0x9, 0x2, 0xffffffffffffd96b, 0xff, 0x0, 0x6, 0xfffffffffffffffe, 0x80000001, 0x6a, 0x0, 0x250bdf53, 0x61, 0x2, 0x0, 0x2, 0x1, 0x1, 0x4, 0x2, 0x2, 0x1b7, 0xbdc}) (async)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r7, 0x89f8, &(0x7f0000000ec0)={'gre0\x00', &(0x7f0000000e00)={'ip_vti0\x00', r5, 0x8, 0x700, 0x8000, 0x659, {{0x1c, 0x4, 0x2, 0x2f, 0x70, 0x66, 0x0, 0x10, 0x29, 0x0, @loopback, @broadcast, {[@ssrr={0x89, 0x7, 0x97, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @ssrr={0x89, 0xb, 0x39, [@loopback, @private=0xa010102]}, @cipso={0x86, 0x37, 0x3, [{0x2, 0x12, "1972de34391afc9432637ff92da4ccc1"}, {0x1, 0x12, "9fca741dedc105d570283fc3f6860cbb"}, {0x0, 0x5, "7b111e"}, {0x7, 0x8, "7d115e8fb3c8"}]}, @ssrr={0x89, 0x7, 0x43, [@rand_addr=0x64010100]}, @timestamp={0x44, 0x8, 0x9a, 0x0, 0x2, [0x7ff]}, @noop]}}}}}) (async)
fcntl$setlease(r4, 0x400, 0x0)
open_tree(0xffffffffffffffff, &(0x7f0000000f00)='./file0\x00', 0x88000)
socket$xdp(0x2c, 0x3, 0x0) (async)
ioctl$BTRFS_IOC_BALANCE_V2(r3, 0xc4009420, &(0x7f0000001380)={0x10, 0x4, {0x3, @struct={0x6}, 0x0, 0x8, 0x2, 0x9, 0x0, 0x3, 0x8, @struct={0x3d, 0x4}, 0x6, 0x1a24, [0x8, 0x8e, 0xdf, 0x3, 0xf6, 0x7f]}, {0x7, @struct={0x8, 0x5}, 0x0, 0xffffffffba189457, 0x757, 0x3, 0x4, 0x200, 0x407, @struct={0x8000, 0x10000}, 0x8, 0x6, [0x0, 0x0, 0xed, 0x430d, 0x6]}, {0x8, @struct={0x6, 0x5}, 0x0, 0x8000000000000001, 0xadcd, 0xe7, 0x6, 0x82, 0x0, @usage=0x81, 0x4, 0xad3e, [0x8, 0x7, 0x3, 0x5, 0xf, 0x3]}, {0x0, 0xc8f, 0x81}})

15.065997996s ago: executing program 0 (id=52):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0xa04080, &(0x7f0000000700)=ANY=[@ANYBLOB="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", @ANYBLOB="a713181e559874d3248cfa1fbc363f05bc2131cee79269b1c768e4ec65dcdf33b37596b60939efd164ccdbcd"], 0x2, 0x5524, &(0x7f0000003cc0)="$eJzs3L9vG3UUAPDnpGnTH5QIMbD1pAopkWqrTpsKtgCt+CFSRQUGJnBsx3Jr+6LYcUImBkbEwH+CQGJi5G9gYGZDDCA2JJDvzqUpFCHFjZvk85HO7+7rr9+9rxWd9O4iB3BqLSS//1qKy3E+ImYj4lJEtl+KiLnxpNU8vBQRVyJi5pGtVIw/HDgbERci4vIoeZ6zVLz15bXh1ZVf3vntux/Onbn41bc/Tm/VwLS9HBHdrXx/t5vHtJXH+8V4bdjOYvfmsIj5G90HxXGax93mRpZhtzaeV8vijVY+P93a6Y/iZqdWH8VWezMb3+rlJ+wPW+M82Qfu17az40ZzI4vtfprF1n5e195+fm3b7w/yPI0i3ydZ+hgMxjEfb+418/VsPchivTcoxvO8aaO5N4rDIhani3raaWR1bBzmm362vdvu7ewlw+Z2v532kpVK9ZVK9Va5up02moPmzXKt27h1M1lsdUbTyoNmrbvaStNWp1mpp92lZLFVr5er1WTxdnOjXesl1WrlRuV6eWWp2LuWvHn3g6TTSBZH8fV2b2fQ7vSTzXQ7yT+xlCxXbry6lFytJu+trSfr9+7cWVt//6PbH959be3tN4pJ/ygrWVy+vrxcrl4vL1eXTtH6PyuKnuD64VBK0y4A4Pj5r/7/4WVV/w9M2BP7/9EF6FD9//a9iKff/4f+fyKOVf/7zPT/83FS1g+Hov8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADi1fpr7+q1sZyE/vliMP1cMvVAclyJiJiL+/BezcfZAztkiz9wT5s89VsP3pcgyjM5xrtguRMRqsf3x/NP+FgAAAODk+ubTK1/k3Xr+sjDtgjhK+U2bmUsfTyjffETMLfw8oWwzo5cXJ5Qs+/s+E3sTypbdwJqfULL8ltuZSWX7X2YPhPlHQikPM0daDgAAcCQOdgJH24UAAABwlD6fdgFMRynGjzLHz4Kz/7z/+4Hg+QNHAAAAwDFUmnYBAAAAwMQ9/hw/6//9/h8AAACcbPnv/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8xc7946gNRHEAfjYYyD8FRelzlXRwjBwhZcqIA+QSHCAFuUK6VJyBdDlChCPsCQu7FKwY26vV90nGeGT/eIOgmBlpAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADo0u9qs/zx9cO3W3P29bV+RcTD1jy9AQAAAC7ZVZtl82beXr9K7W9S07t0XUREeXHkXtejmJxljlJOdXf/99P7q3s1/IxoEg6fMU3Hy4j4mI6/b7v+FgAAAOD52q7Wi3a03r7Mhy6IPrWTNuXrT5nyioio5n8ypZWHvPc5kibp9z2OLzni0sRWzDKFtVNu41xpV2n+7sdZu9nJqWhP5cXHjkVm6zsAANCj0dmp31EIAAAAffo8dAHkdt3yXBH/lzKPS4HTs+dfPCYNAAAAeIqKoQsAAAAAOteM/3va/6+2/x8AAAAMo93/DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgC7tqs1yu1ovbs3Z17fJ0xsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPjH/ryjQAiEQRjsXd+ZzP0PKw2amppUgfDxNwYDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAb373l/8TU+NMMvfaWHoeSdZOja1TY+/cOPrD+Po1AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABf785ICIRAEUTBn/O+k739YSdAziBABDY8qatEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAX/e6X/xNT40wyd9pYOh5J1q4aW1eNvQeNowfj7d8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABc79+8bNxUHAPzZPl9pAXEEdEMQAokBFnq9lpZuiAEUMfAnIEXptYRe+dFmoFWFuIUNZe6CYEQICRS2/g+dWylL2DLcECRmkM92zvkhcUBkX5LPR3p+Xzsnv++zpShfP+cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKI3fncZJtunkcVwce7xzfyXrn+zrMw/XNxezlsVRnUkfDy9Xd6Juc4kAAABwoo2qO0lZ34cQttKNpayPO5P6Py0/k9X83z+bx2U9v7/uL/uy9s/ab79uv7g7UCcfJzvp9dXh4MLBvFpHPtNj4rl/+Hl+YaL82UsyuSHxB6MXxunkekbfPnr0XnsSnqkjWwDgvzhf9kVQ/j2U9f0mEwPg1GhVCu+y/k86zeYEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAUIfxKDxdxlEIYbE1jTNPdu6vHNY/XN9cLNuVBw/Ww9fTc2anSEMI11eHgwu1zma+3bl77+bycDi4XX/wSgihqdHfKaZ/86MZPhxCI9dHcERBXNzsecnneAQN/lICAOBESouW1fVb6cZSdixaCOGvH/bW/69X4jBj/b/98ZXH1bGq9X+/thnOv97arc97d+7ee3P11vKNwY3Bp29d7L/dv3T18uWrvcmzkp4nJgAAAPw/7aJV6/944eD6/7lKHGas/7/4rv9VdaxE/X+o6aJf05kAAACcbs+/+ucf0SHHo3Y7fLm8tna7n2939y/m2wZS/dfOFK1a/ycLTWcFAAAA1GE8ivas/1+rxGHG9f9nfnzp5+o5kxDC2WL9//zKZ8Nr9U1nrtXx78RNzxEAAIBmnS1adf0/nbz/H+++8hCHEN54LY+LrwGcqf5P3v/mp+pY1ff/L9U3xbkUd/PrMem7IbS6TWcEAADASfZU0bJi//d0Y+mTX8592Pb+PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEDd/g4AAP//MY062g==")
mkdir(&(0x7f00000000c0)='./bus\x00', 0xa5)
mount$incfs(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./bus\x00', &(0x7f0000000840), 0x1004002, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x40, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x26, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x39}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
syz_emit_ethernet(0x0, 0x0, 0x0)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2)
prctl$PR_SET_ENDIAN(0x14, 0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
getsockopt$inet6_buf(r0, 0x29, 0x30, 0x0, &(0x7f00000041c0))
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000100)={0x0, 'erspan0\x00', {0x1}, 0x26})
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0)
execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00')
r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000020000000000000002000004000000000000000002000000000000000000000002000000000000000100000000000001"], 0x0, 0x4e}, 0x20)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000140)={0x1b, 0x0, 0x0, 0x1000, 0x0, 0x1, 0x0, '\x00', 0x0, r5, 0x801, 0x1}, 0x50)
read$FUSE(r4, &(0x7f0000001180)={0x2020}, 0x2020)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)=ANY=[])
chdir(&(0x7f00000001c0)='./bus\x00')
rename(&(0x7f0000000180)='./bus\x00', &(0x7f0000000000)='./file0\x00')
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="7a0a00ff0000000271106f00000000009500000000000000"], &(0x7f0000000480)='syzkaller\x00'}, 0x80)

14.658737127s ago: executing program 1 (id=55):
r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x38, r1, 0x1, 0x70bd2c, 0xfffffffc, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x204e}}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x40c0}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x25e2906596869c9d}, 0x804)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_START_SCHED_SCAN(r0, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, r1, 0x200, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0xff}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x8, 0x9}}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x8c}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x3ff}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x4040)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x8c51, &(0x7f0000000540)={[{@fat=@fmask={'fmask', 0x3d, 0xbc}}, {@uni_xlate}, {@rodir}, {@shortname_winnt}, {@utf8}, {@fat=@check_normal}, {@uni_xlate}, {@numtail}, {@uni_xlateno}, {@utf8}, {@fat=@dos1xfloppy}, {@uni_xlateno}, {@uni_xlate}, {@shortname_lower}, {@rodir}, {@utf8no}, {@fat=@errors_remount}, {@fat=@quiet}]}, 0xf5, 0x2f4, &(0x7f0000000240)="$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")

14.658352057s ago: executing program 3 (id=56):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000040000008500000010000000850000005000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = openat$full(0xffffffffffffff9c, &(0x7f00000001c0), 0x149000, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r0}, 0x8)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYRESDEC=r1], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0x1e, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000100)=@newtclass={0xfffffc53, 0x28, 0x2, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x9, 0x5}, {0x7, 0xb}, {0xb, 0xf}}}, 0x24}}, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="840000001000010428bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="9180030000200000500012800b000100697036746e6c"], 0x84}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0)
r4 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x8000)
ioctl$KDGETLED(r4, 0x4b31, &(0x7f0000000180))
mount$incfs(&(0x7f0000000300)='./file0\x00', &(0x7f0000000440)='./cgroup.net/cgroup.procs\x00', &(0x7f0000000380), 0x40, &(0x7f0000005880)=ANY=[@ANYRES64])
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000010000000000000000000000711806000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, @cgroup_sock_addr=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

14.597139488s ago: executing program 1 (id=57):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000580), 0x4, 0xbc7, &(0x7f00000005c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f00000021c0)='./file1\x00', 0x8442, 0x5c)
r1 = open(&(0x7f0000000580)='./file1\x00', 0x80242, 0x1df2a23c5997fa5f)
timer_create(0xfffffffffffffffd, 0x0, 0x0)
clock_gettime(0x0, 0x0)
timer_gettime(0x0, 0x0)
io_setup(0x202, 0x0)
r2 = socket$inet6(0xa, 0x80802, 0x0)
fcntl$setstatus(r2, 0x4, 0x2000)
sendmmsg$inet6(r2, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)="1ce02c7a", 0xfe60}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000), 0x1}}], 0x3, 0x1c000)
ppoll(&(0x7f0000000140)=[{r2, 0x5}], 0x1, 0x0, 0x0, 0x0)
fcntl$setlease(r2, 0x400, 0x2)
write$FUSE_CREATE_OPEN(r1, &(0x7f00000002c0)={0xa0, 0xffffffffffffffda, 0x0, {{0x6, 0x7, 0x8000000200007, 0x282b, 0x20103, 0x80001, {0x200006, 0x10005c62, 0x203, 0x1000000000, 0x83, 0xd616, 0x1000000a, 0x6, 0xfff, 0xc000, 0x8, 0xee01, 0xee00, 0x8, 0x1}}, {0x0, 0xa}}}, 0xa0)
ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x5, 0x200000ffb})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r3, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)

14.203513759s ago: executing program 3 (id=58):
r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000000)={0x0, &(0x7f0000000280)=[@wrmsr={0x65, 0x20, {0xc0000103, 0x1fd}}], 0x20})
ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f00000000c0))
ioctl$KVM_RUN(r3, 0xae80, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000041c0)={0x1e, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="850000008a0000000400f7ffffff000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x80401c, &(0x7f0000000040)=ANY=[@ANYBLOB="666c7573685f6d657267652c6e6f666c7573685f6d657267652c6d6f64653d667261676d656e743a7365676d656e742c636f6d70726573735f63616368652c696e6c696e655f78617474722c636f6d70726573735f63616368652c6e6f696e6c696e655f78617474722c6e6f646973636172642c6261636b67726f756e645f67633d6f6e2c6261636b67726f756e645f67633d6f66662c636865636b706f696e743d64697361626c652c617467632c67635f6d657267652c6e6f626172726965722c004b1c091f21dfc606226168fd668d440f"], 0xfd, 0x5532, &(0x7f0000005a80)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
newfstatat(0xffffffffffffff9c, &(0x7f0000002440)='./file0\x00', &(0x7f0000000100), 0x100)
openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) (async)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async)
syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) (async)
syz_kvm_add_vcpu$x86(r2, &(0x7f0000000000)={0x0, &(0x7f0000000280)=[@wrmsr={0x65, 0x20, {0xc0000103, 0x1fd}}], 0x20}) (async)
ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f00000000c0)) (async)
ioctl$KVM_RUN(r3, 0xae80, 0x0) (async)
bpf$PROG_LOAD(0x5, &(0x7f00000041c0)={0x1e, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="850000008a0000000400f7ffffff000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sk_lookup=0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x80401c, &(0x7f0000000040)=ANY=[@ANYBLOB="666c7573685f6d657267652c6e6f666c7573685f6d657267652c6d6f64653d667261676d656e743a7365676d656e742c636f6d70726573735f63616368652c696e6c696e655f78617474722c636f6d70726573735f63616368652c6e6f696e6c696e655f78617474722c6e6f646973636172642c6261636b67726f756e645f67633d6f6e2c6261636b67726f756e645f67633d6f66662c636865636b706f696e743d64697361626c652c617467632c67635f6d657267652c6e6f626172726965722c004b1c091f21dfc606226168fd668d440f"], 0xfd, 0x5532, &(0x7f0000005a80)="$eJzs3M1rI2UYAPA3/djtfrgW8eBtBxahhU1o+rHoreoufmCXsurBk6bJNGQ3yZQmTWtPHjyKB/8TUfDk0b/Bg2dv4kHxJiiZd6pbXUFomtjN7weTZ95n3jzzTg6BZyYkAFNrMfn151K4Ea6EEGZDCNdDyPdLxZbbjOGFEMLNEMLMY1upyP+ZuBRCuBpCuDEsHmuWikOf3x7c2vjprV+++e7y3LUvvv6+SANTaPi10tmL+4edGLNmjA+LfG3QymNnfVDEeKC9EI93spg/THfyCoe1k3m1PK414/xs76A3jLvtWn0Ym63dPL/XjSfsDZondfI3PKzt5+NGupPHVi/LY/M4nvfoOH63Hff6sU6jqPdRXj70+ycx5tOjNF7P3qM81rv9Ih/rZo30aBgHRSxOF+pZu5GvY+cMH/T/3Nut7sFRMkj3e62sm2xUqi9VqnfK1f2skfbT9XKt07izniw128Np5X5a62w2s6zZTiv1rLOcLDXr9XK1mizdTXdatW5SrVbWKivljeVi73by+v33knYjWRrGV1vdg36r3Ut2s/0kvmM5Wa2svbyc3Kom72xtJ9sP7t3b2n73g7vv339l683Xikn/WFaytLqyulqurpRXq8tTdP2fFIse4fXDmZQmvQCAi2fC/T8wpV48Q//feVSMn9j/7z8I4fz7/6D/H4kL1f9Oe/9/DtcPZ6L/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACYWj/Mf/lGvrMYx9eK/DNF6rliXAohzIQQfn+C2XDpVM3Zos78v8yf/9savi2FvMLwHJeL7WoIYbPYfnv2vD8FAAAAeHp99fHNz2K3Hl8WJ70gxinetJm5/uGI6i2EEOYXfxxRtZnhy/MjKhbm8u1oRNXyG1gLIyoWb7nNjarafzJ7Kiw8FkoxzIx1OQAAwFic7gTG24UAAAAwTp9OegFMRimcPMo8eRac//L+rweCV06NAAAAgAuoNOkFAAAAAOcu7//9/x8AAAA83eL//wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH+wcz83agNRHICfbRzIPwVFuaeV3KCMlJBjjhEFpAkKyIEa0gA1kFtKiHCEx8vCisNKHtta9H2SGWyZH28sOMyMNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADCkP/Wujh+ff/bNOTb95OkNAAAAcMuh3q3bN8t0/ra7/r679LE7LyKijIhbY/cqXl1lVl1O/Xj/r8v76yc1/I5oE07fMe+ONxHxpTv+fRj6KQAAAMD92m+2qzRaTy/LqQtiTGnSpnz3NVNeERH18m+mtPKU9ylTWPv7nsX3TGntBNYiU1iacpvlSnuW9u9+nrVbXDRFasqbHzsXma3vAADAiKqrZtxRCAAAAGP6NnUBTKOIh6XM81LgPDXd8t7rqzMAAADgBSqmLgAAAAAYXDv+H2n/v2ag/f+aKtvjAAAAgPuU9v8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgSId6t95vtqu+Ocemnzy9AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4z/68o0AIhEEY7F3fmcz9DysNmpqaVIHw8TcGAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDmd3/5PzE1ziRzr42l55Fk7dTYOjX2zo2jP4yvXwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAX+/OSAiEQBFEwZ/zvpO9/WEnQM4gQAQ2PKmrRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfNHvfvk/MTXOJHOnjaXjkWTtqrF11dh70Dh6MN7+DQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXO/fzGkcVBwD8zczO1lbFGCWHiCh4sBebbmtrD4J4UIIH/wQhpNsau/VHm4MtRczFm+Tci6g3EUGJt578B3puoZd66yGHCuJxZGZndqdtsNtgZ6bJ5wNv33eG4b3vm4WQ77xJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDK9rvTOMk/5sZxXJ67cffKat7fvK/PXdu8tZi3PI6aTPrJ8HL9IFpoLxEAAAD2j6Sq70MIt9Ot5byP54r6P62uyWv+758dx1U9f3/dX/VV7Z+333+78+JkornxPPmgZ9ZGw6MPptJ7fKvstuceekWvuPPFs5ek+ELiDzZe2E6L+xl9e/36e/0iPNBEtgDAbhyp+jKofh/K+0GbiQGwb/RqhXdV/ydz7eYEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0ITtjfB0FUchhMXeNM7dvHtldaf+2uatxaqdvHp1M3w9HTMfIg0hnFkbDY82uppuu3jp8rmV0Wh4YYbg7cN//JhlWTbTxQ8PXgkh/B/j7CZ4p1z+uY9muDiEFjLcTfBPN9LoWhCXX3ZX8nkyghZ/KAEAsCelZcvr+tvp1nJ+LpoPIfvh3vr/9VocZqz/73x88kZ9rnr9P2hshd23tH7+86WLly6/sXZ+5ezw7PDTN48N3hocP3XixKml4lnJkicmAAAAPLIsy7LJQb9s9fo/nn9w//9QLQ4z1v9ffDf4qj5xov7f0XTTr+1MAAAA9rfnX/37r2iH81G/H75cWV+/MBh/To6PjT9bSPWRHShbvf5P5tvOCgAAAGjC9kZ0z/7/6VocZtz/f+anl36pj5mEEA6W+/9HVj8bnW5uOZ3WxJ8Tt71GAAAA2nWwbPX9/7R4/z+evPIQhxAOvzaOy38D+J/1f1rW/8n73/xcn6v+/v/x5pbYSfHC+H4U/UIIvYW2MwIAAGAve6psebH/Z7q1/Mmvhz7se/8fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoGn/BgAA//9kDEPy") (async)
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) (async)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) (async)
newfstatat(0xffffffffffffff9c, &(0x7f0000002440)='./file0\x00', &(0x7f0000000100), 0x100) (async)

14.15180374s ago: executing program 0 (id=59):
r0 = epoll_create1(0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x1003ffffffc]}, 0x8, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000000)={0xc000200f}) (async)
epoll_pwait(r0, &(0x7f0000000180)=[{}], 0x1, 0xfffffffb, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000009c0)=@newqdisc={0x168, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xc}}, [@TCA_STAB={0x144, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x3, 0xd9, 0x3, 0x40, 0x1, 0x1, 0x9, 0x3}}, {0xa, 0x2, [0x3, 0x6, 0x6]}}, {{0x1c, 0x1, {0xc, 0xe, 0x2f00, 0x6, 0x1, 0x7fffffff, 0xdd, 0x1}}, {0x6, 0x2, [0x5]}}, {{0x1c, 0x1, {0x5, 0x9f, 0x5, 0x4, 0x0, 0x56b, 0x7fffffff, 0x6}}, {0x10, 0x2, [0x6, 0x8001, 0x9, 0x6, 0x6, 0x3]}}, {{0x1c, 0x1, {0x2, 0xb, 0x80, 0x34a3, 0x2, 0x9, 0x0, 0x3}}, {0xa, 0x2, [0xf, 0x9, 0x4d6]}}, {{0x1c, 0x1, {0x4, 0x0, 0x2e54, 0x4, 0x2, 0x7, 0x8, 0x1}}, {0x6, 0x2, [0xffff]}}, {{0xa, 0x1, {0xfa, 0x2, 0x2, 0x0, 0x1, 0x4c3d, 0x400, 0x7}}, {0x12, 0x2, [0x8, 0x619a, 0x8, 0x80, 0x0, 0x3, 0x9]}}, {{0x1c, 0x1, {0x0, 0x2, 0x6, 0x6, 0x0, 0x6, 0x1, 0x2}}, {0x8, 0x2, [0x4, 0xeaa1]}}, {{0x1c, 0x1, {0xfd, 0x3, 0x8, 0xfff, 0x0, 0x1000, 0xd, 0x4}}, {0xc, 0x2, [0x0, 0xa, 0x6, 0x3]}}]}]}, 0x168}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) (async)
sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {0x2, 0x7}, {0xffff, 0x8}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x5, 0x6, 0x8, 0x4fbee}, 0x13, 0x1, 0x7fff, 0x7, 0x10, 0x4, 0x5f, 0x18, 0x5, 0x402, {0x6, 0x8001, 0xfffffffc, 0x0, 0xffffffff, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240048e4}, 0x44884) (async)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081f, &(0x7f0000000080)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x4000000}}, {@nogrpid}, {@inlinecrypt}]}, 0x1, 0x51d, &(0x7f0000000200)="$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") (async)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r5, 0x40086610, &(0x7f00000001c0)={@id={0x2, 0x0, @c}}) (async, rerun: 32)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000002c00000095000000000000003d789ade838a5ad00c21f97a9d6f55528c474cb385573d9f5ec0798d497a5d0ab93dbb637fd8de14970b4f76b599911df77098a8cd51e5ee070239f048bff4c9d6d337c8759d1737b62deae7412f1b5c334ef76307b8139d8f019360bea59a74b86ce453bc8964c32f955d410083f7567775a2ca15dbbf01550310a78644e80171753107cee23ecb376879ae14b9e1ab987023c7db41925c55b0a4141ae3c08d264831d0f6365469c3562185000000000000004f78cd03163b2d00101e000000000000000000000000000000001a18f6de00bb8c95f8bdc2a5effe88e5bc3a969a35af8033d11474cfa5d73d92c9bd2b72c3ce63d47075ae7c59d82cea124301000000000000000cb56281877934e99919c82bfdffaedc4df6f74e8f286454fcd2967415b826a6300d100e7eb8717c8528e445fbefe6a3139191529f22e4c0435e5c53e469f70c08bdff633307bbf119ffdb2e1d717eb268ee7fee0486fa294b41c1d4dc44a9801c34ada4ed759f4312dd000000000000000000000000f4ad23f3df7cdc65edcb81f103ef861a5d12eb4e1f33f6b43b6661b680850fc55aa8465b0500000000000000a17b60f43b4b2a2afc8730a587525ba1fd296b7aa4cc8936da97ff62885b8586b67e3e9b5b8d4f18df39f65ef75a42bb84587a838b828024ece8f64d74a1502d74f7e42d103e469920ae8c58f7418e67918676abfe37c9a619c27ff1a82d78431843ae38f5ba8207978a16ec9c1fc0dc752684576c8830e8e4e480b4b1649717078100000000000000001900000000ecdc068efc4f590529f07f581874420767f696a260fde832f3bbd50b84d2f0e03d75459da25aee1d3e99d41da9938eb84dfb58dbca8d9d4f1a23e6ce8b6e7e95034e6c1c"], &(0x7f0000000240)='syzkaller\x00', 0x4, 0xff0, &(0x7f000062b000)=""/4080, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x3d) (rerun: 32)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={r6, 0x2000002, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x50) (async)
r7 = socket$packet(0x11, 0x3, 0x300)
setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000002280)={0x3, &(0x7f0000000180)=[{0x20, 0x2, 0x81, 0xfffff034}, {0x20, 0x0, 0x8, 0xfffff010}, {0x6, 0xba, 0x2, 0xffff}]}, 0x10) (async)
ioctl$AUTOFS_IOC_READY(0xffffffffffffffff, 0x9360, 0x6) (async)
r8 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r8, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x22}}, 0x6}, 0x1c) (async)
connect$inet6(r8, &(0x7f0000000100)={0xa, 0x4e22, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0xd}, 0x1c) (async)
r9 = fcntl$dupfd(r8, 0x0, r8)
setuid(0xee01) (async)
sendmmsg$inet6(r9, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="cd", 0x1}], 0x1}}], 0x4000000000000ec, 0x8001) (async)
socket$packet(0x11, 0x3, 0x300)

14.050728932s ago: executing program 0 (id=60):
r0 = syz_mount_image$exfat(&(0x7f0000000280), &(0x7f0000000240)='./file2\x00', 0x2000000, &(0x7f00000018c0)=ANY=[], 0xfb, 0x1501, &(0x7f00000002c0)="$eJzs3Au4TlW3OPAx5pyLbefyJrmvMcfiTS6TJAklySVJkpDcE5IkSZLEJrckJCHXneQeck87bff7JfeknU+SJCEhyfw/u8tx+i7H932n89c5e/yeZz17jr3WmGvMPZ53v2ut/ez3667DqjeqUaU+M8O/Q/82wF++JAFAAgAMBIAcABAAQNmcZXOm78+iMenfOon4H9JgxpWuQFxJ0v+MTfqfsUn/Mzbpf8Ym/c/YpP8Zm/Q/Y5P+C5Ghzcp3tWwZd5Pn///Lqf9Osrz/Zwj4j3ZI//+v0f/S0dL/jE36n7FJ/zM26X9GFlzpAsQVJq//jE36L0SG9oc/U95w7ko/05btX9iEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQoj/D875SwwA/Da+0nUJIYQQQgghhBDij+PfvdIVCCGEEEIIIYQQ4n8eggINBgLIBJkhAbJAIlwFWSEbZIccEIOrISdcA7ngWsgNeSAv5IP8UAAKQggEFhgiKASFIQ7XQRG4HopCMSgOJcBBSSgFN0BpuBHKwE1QFm6GcnALlIcKP58z3e1QGe6AKnAnVIVqUB1qwF1QE+6GWnAP1IZ7oQ7cB3XhfqgHD0B9aAAN4UFoBA9BY2gCTaEZNIcW0PIy+ck5/l7+89ADXoCe0AuSoDf0gRehL/SD/jAABsJLMAhehsHwCgyBoTAMXoXh8BqMgNdhJIyC0fAGjIGxMA7GwwSYCMnwJkyCt2AyvP1QNpgK02A6zICZMAvegdkwB+bCuzAP5sMCSM6yCBbDEngPlsL7kAIfwDL4EFJhOayAlbAKVsMaWAvrYD1sgI2wCTbDFtgK2+Aj2A47YCfsgt2wB/bCx7APPoH98Cmk4Wf/Yv7Z3+dDNwQEVKjQoMFMmAkTMAETMRGzYlbMjtkxhjHMiTkxF+bC3Jgb82JeTML8WBALIiEhI2MhLIRxjGMRLIJFsSgWx+Lo0GEpLIWl8UYsg2WwLJbFclgOy2MFrIC34q1YCSthZayMVbAKVsWqWB2r4114F96NtbAW1sbaWAfrYF2si/WwHtbH+tgQG2IjbISNsTE2xabYHJtjS2yJrbAVtsbW2BbbYjtsh+2xPXbADtgRO2In7ISdsTN2wS7YFbtiN3wOn8Pn8Xl8AV/AXlhV9cY+2Af7Yl/sjwNwAL6Eg/BlfBlfwSE4FIfhq/gqvoYj8AyOxFE4GkdjJTUWx+F4ZDURkzEZM8MknIyTcQpOxak4HWfgTJyFs3A2zsE5+C7Ow/k4HxfiQlyMS3AJLsX3MQVTcBmexVRcjitwJa7C1bgK1+I6XIsbcCNuwM24GbfiVvwIP8IduAN34S7cg3vwY/wYP8FPcAimYRoewAN4EA/iITyEh/EwHsEjeBSP4jE8hsfxOJ7Ak3gKT+JpPI1n8CyeA4DzeB4v4AW8iBfTX/wqnVFGZVKZVIJKUIkqUWVVWVV2lV3FVEzlVDlVLpVL5Va5VV6VV+VX+VVBVVCRIsUqUoVUIRVXcVVEFVFFVVFVXBVXTjlVSpVSpVVpVUaVUWXVzaqcukWVVxVUG3erulVVUm1dZXWHqqKqqKqqmqquaqgaqqaqqWqpWqq2qq3qqDqqrrpf1VO9sT82UOmdaaSGYmM1DJuqZqq5aqFew4dVKzUCW6s2qq16VI3CkdhetXId1BOqoxqHndRTajw+rbqoidhVPau6qedUd/W86qFau56ql5qCvVUfNR37qn6qvxqgZmM1ld6x6uoV9XzmoWqYelUtxtfUCPW6GqlGqdHqDTVGjVXj1Hg1QU1UyepNNUm9pSart9UUNVVNU9PVDDVTzVLvqNlqjpqr3lXz1Hy1QC1Ui9RitUS9p5aq91WK+kAtUx+qVLVcrVAr1Sq1Wq1Ra9U6tV5tUBvVJrVZbVFb1Tb1kdqudqidapfarfaovepjtU99ovarT1Wa+kwdUH9RB9Xn6pD6Qh1WX6oj6it1VH2tjqlv1HH1rTqhTqpT6jt1Wn2vzqiz6pz6QZ1XP6oL6id1UXkFGrXSWhsd6Ew6s07QWXSivkpn1dl0dp1Dx/TVOqe+RufS1+rcOo/Oa/Lp/LqALqhDTdpq1pEupAvruL5OF9HX66K6mC6uS2inS+pS+gZdWt+oy+ibdFl9sy6nb9HldQVd0YO+TVfSt+vK+g5dRd+pq+pqurquoe/SNfXdupa+R9fW9+o6+j5dV9+v6+kHdH3dQDfUD+pG+iHdWDfRTXUz3Vy30C31w7qVfkS31m10W/2obqcf0+3147qDfkJ31E/qTvop3Vk/rbvoZ3RX/azupp/T3fVP+qL2uqfupZN0b91Hv6j76n66vx6gB+qX9CD9sh6sX9FD9FA9TL+qh+vX9Aj9uh6pR+nR+g09Ro/V4/R4PUFP1Mn6TT1Jv6Un67f1FD1VT9PT9Qw9U/f/daa5/0T+W38nf/DPZ9+qt+mP9Ha9Q+/Uu/RuvUfv1Xv1Pr1P79f7dZpO0wf0AX1QH9SH9CF9WB/WR/QRfVQf1cf0MX1cH9cn9En9g/5On9bf6zP6rD6rf9Dn9Xl94defARg0ymhjTGAymcwmwWQxieYqk9VkM9lNDhMzV5uc5hqTy1xrcps8Jq/JZ/KbAqagCQ0Za9hEppApbOLmOlPEXG+KmmKmuClhnClpSpkb/tv5l6uvpWlpWplWprVpbdqatqadaWfam/amg+lgOpqOppPpZDqbzqaL6WK6mq6mm+lmupvupofpYXqanibJJJk+5kXT1/Qz/c0AM9C8ZAaZQWawGWyGmCFmmBlmhpvhZoQZYUaakWa0GW3GmDFmnBlnJpgJJtnnMJPMJDPZTDZTzBQzbWAOM8PMMLPMLDPbzDZzzVwzz8wzC8wCs8gsMkvMErPULDUpJsUsM8tMqllulpuVZqVZbVabtWatWW/Wm41mo9lsNptUs81sM9vNdrPT7DS7zW6z1+w1+8w+s9/sN2kmzRwwB8xBc9AcMofMYXPYHDFHzFFz1Bwzx8xxc9ycMCfMKXPKnDanzRlzxpwz58x5c95cMBfMRXMx/bIvUIEKTGCCTEGmICFICBKDxCBrkDXIHmQPYkEsyBnkDHIF1wa5gzxB3iBfkD8oEBQMwoACG3AQBYWCwkE8uC4oElwfFA2KBcWDEoELSgalghuC0sGNQZngpqBscHNQLrglKB9UCCoGtwa3BZWC24PKwR1BleDOoGpQLage1AjuCmoGdwe1gnuC2sG9QZ3gvqBucH9QL3ggqB80CBoGDwaNgoeCxkGToGnQLGgetAha/qHze38mzyOuZ9grTAp7h33CF8O+Yb+wfzggHBi+FA4KXw4Hh6+EQ8Kh4bDw1XB4+Fo4Inw9HBmOCkeHb4RjwrHhuHB8OCGcGCaHb4aTwrfCyeHb4ZRwajgtmB7OCGeGs8J3wtnhnHBu+G44L5wfLggXhovCxSH+ckkMKeEH4bLwwzA1XB6uCFeGq8LV4ZpwbbguXB9uCDeGm8LNZQf9cmi4PdwR7gx3hbvDPeHe8ONwX/hJuD/8NEwLPwsPhH8JD4afh4fCL8LD4ZfhkfCr8Gj4dXgs/CY8Hn4bnghPhqfC78LT4ffhmfBseC78ITwf/hheCH8KL4Y+/eI+/e2dDBnKRJkogRIokRIpK2Wl7JSdYhSjnJSTclEuyk25KS/lpfyUnwpSQUrHxFSIClGc4lSEilBRKkrFqTg5clSKSlFpKk1lqAyVpbJUjspReSpPFaki3Ua30e10O91Bd9CddCdVo2pUg2pQTapJtagW1abaVIfqUF2qS/WoHtWn+tSQGlIjakSNqTE1pabUnJpTS2pJragVtabW1JbaUjtqR+2pPXWgDtSROlIn6kSdqTN1oS7UlbpSN+pG3ak79aAe1JN6UhIlUR/qQ32pL/Wn/jSQBtIgGkSDaTANoSE0jIbRcBpOI2gEjaRRNJreoDE0lsbReJpAEymZkmkSTaLJNJmm0BSaRtNoBs2gWTSLZtNsmktzaR7NowW0gBbRIlpCS2gpLaUUSqFltIxSKZVW0ApaRatoDa2hdbSONtAG2kSbaAttoW20jbbTdtpJO2k37aa9tJf20T7aT/spjdLoAB2gg3SQDtEhOkyH6QgdoaN0lI7RMTpOx+kEnaBTdIpO02k6Q2foHJ2j8/QjXaCf6CJ5SrBZbKK9yma12Wx2m8P+dZzX5rP5bQFb0IY2t83zu5istUVtMVvclrDOlrSl7A1/E5e3FWxFe6u9zVayt9vKtrzNAv85rmnvtrXsPba2vdfWsHf9Lq5j77N17UO2nm1i69tmtqFtYRvZh2xj28Q2tc1sc9vCtrOP2fb2cdvBPmE72if/Jl5q37fr7Hq7wW60++wn9pz9wR61X9vz9kfb0/ayA+1LdpB92Q62r9ghdujvYwA72r5hx9ixdpwdbyfYiX8TT7PT7Qw7086y79jZds7fxEvse3aeTbEL7EK7yC7+OU6vKcV+YJfZD22qXW5X2JV2lV1t19i1/1HrSrvZbrFb7V77sd1ud9iddpfdbff8HKevY7/91KbZz+wR+5U9aD+3h+wxe9h++XOcvr5j9ht73H5rT9iT9pT9zp6239sz9uzP609f+3f2J3vReguMrFiz4YAzcWZO4CycyFdxVs7G2TkHx/hqzsnXcC6+lnNzHs7L+Tg/F+CCHDKxZeaIC3FhjvN1XISv56JcjItzCXZckkvxDVyab+QyfBOX5Zu5HN/C5bkCV+Rb+TauxLdzZb6Dq/CdXJWrcXWuwXdxTb6ba/E9XJvv5Tp8H9fl+7keP8D1uQE35Ae5ET/EjbkJN+Vm3JxbcEt+mFvxI9ya23BbfpTb8WPcnh/nDvwEd+QnuRM/xZ35ae7Cz3BXfpa78XPcnZ/nHvwC9+RenMS9uQ+/yH25H/fnATyQX+JB/DIP5ld4CA/lYfwqD+fXeAS/ziN5FI/mN3gMj+VxPJ4n8ERO5jd5Er/Fk/ltnsJTeRpP5xk8k2fxOzyb5/Bcfpfn8XxewAt5ES/mJfweL+X3OYU/4GX8Iafycl7BK3kVr+Y1vJbX8XrewBt5E2/mLbyVt/FHvJ138E7exbt5D+/lj3kff8L7+VNO48/4AP+FD/LnfIi/4MP8JR/hr/gof83H+Bs+zt/yCT7Jp/g7Ps3f8xk+y+f4Bz7PP/IF/okvsmeIMFKRjkwURJmizFFClCVKjK6KskbZouxRjigWXR3ljK6JckXXRrmjPFHeKF+UPyoQFYzCiCIbcRRFhaLCUTy6LioSXR8VjYpFxaMSkYtKRqWiG6LS0Y1RmeimqGx0c1QuuiUqH1WIKka3RrdFlaLbo8rRHVGV6M6oalQtqh7ViO6KakZ3R7Wie6La0b1Rmei+qG50f1QveiCqHzWIGkYPRo2ih6LGUZOoadQsah61iFpGD0etokei1lGbqG30aNQueixqHz0edYieiDpGT17aXyz45d30r/YnRb0j/esTsnv0ovji+JL4e/Gl8ffjKfEP4sviH8ZT48vjK+Ir46viq+Nr4mvj6+Lr4xviG+Ob4pvjW+Jb497XyAwO02+EwbjAZXKZXYLL4hLdVS6ry+ayuxwu5q52Od01Lpe71uV2eVxel8/ldwVcDhc6ctaxi1whV9jF3XWuiLveFXXFXHFXwjlX0pVyLVxL19K1co+41q6Na+sedY+6x9xj7vGEXwt3ndxTrrN72nVxz7hn3LOum3vOdXfPux7uBdfT9XJJLsn1cX1cX9fX9Xf93UA30A1yg9xgN9gNcUPcMDfMDXfD3Qg3wo10I91oN9qNcWPcODfOTXATXLJLdpPcJDfZTXZT3BQ3zU1zM9wMN8vNcrPdbDfXzXXz3Dy3wC1wi9wit8QtcUvdUpfiUtwyt8ylulS3wq1wq9wqt8atcevcOrfBbXCb3Ca3xW1x29w2t91tdzvdTrfb7XZ73V63z+1z+91+l+bS3AF3wB10B90h94U77L50R9xX7qj72h1z37jj7lt3wp10p5zXp9337ow76865H9x596O74H5yF513ybE3Y5Nib8Umx96OTYlNjU2LTY/NiM2MzYq9E5sdmxObG3s3Ni82P7YgtjC2KLY4tiT2Xmxp7P1YSuyD2LLYh7HU2PLYitjK2KrY6pj3BbZHvpAv7OP+Ol/EX++L+mK+uC/hnS/pS/kbfGl/oy/jb/Jl/c2+nL/Fl/cVfEXfxDf1zXxz38K39A/7Vv4R39q38W39o76df8y394/7Dv4J39E/6Tv5p3xn/7Tv4p/xXf2z83/tsu/hX/A9fS+f5Hv7Pv5F39f38/39AD/Qv+QH+Zf9YP+KH+KH+mH+VT/cv+ZH+Nf9SD/Kj/Zv+DF+rB/nx/sJfqJP9m/6Sf4tP9m/7af4qX6an+5n+Jl+ln/Hz/Zz/Fz/rp/n5/sFfqFf5Bf7Jf49v9S/71P8B36Z/9Cn+uV+hV/pV/nVfo1f69f59X6D3+g3+c1+i9/qt/mP/Ha/w+/0u/xuv8fv9R/7ff4Tv99/6tP8Z/6A/4s/6D/3h/wX/rD/0h/xX/mj/mt/zH/jj/tv/Ql/0p/y3/nT/nt/xp/15/wP/rz/0V/wP/mL8j9rQgghhBD/FH2Z/b3/zvfUf/wFH6APAGTbke/wX8+5Kfcv435qX8cYADzRq2uD37YGDZKSkn49NlVDUHghAMQu5f/8+QO/xsuhLTwGHaANlP679fVTFX++7vuv5o/fDJAIkOW3nPTbo0T46/lv/AfzN3mPLzf/QoCihS/lpJ/ot/jS/GX+wfx72l1m/iyfJwO0/k85WeFSfGn+UvAIPAkdfnekEEIIIYQQQgjxi37qfLfL3d+m35/nN5dyMsOl+HL355dR+Y9YgxBCCCGEEEIIIf5rTz/X/fGHO3Ro0/n/8iDzn6OMP8EAAeBPUIYM/vyDK/2bSQghhBBCCPFHu3TRf6UrEUIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghMq5//xPC1D998JVeoxBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCHGl/b8AAAD//8Q+VcU=")
fstat(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@ipv4={""/10, ""/2, @remote}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6=@private2}, 0x0, @in=@multicast2}}, &(0x7f0000001800)=0xe8)
syz_usb_connect$cdc_ncm(0x0, 0x83, &(0x7f0000000080)=ANY=[@ANYBLOB="1201100102000008000000000000000303010902710002010540040904000001020d00000624060001e905240009000d240f010900000008000700db06241406001207240a300b01060624070d060007241401000008090581032000400402090401"], 0x0)
mount$9p_unix(&(0x7f0000000000)='./file2\x00', &(0x7f0000000040)='./file2\x00', &(0x7f0000000080), 0x20, &(0x7f0000001840)={'trans=unix,', {[{@fscache}, {@aname={'aname', 0x3d, 'exfat\x00'}}, {@access_uid={'access', 0x3d, r1}}], [{@uid_gt={'uid>', r3}}, {@flag='dirsync'}, {@dont_hash}, {@fsmagic={'fsmagic', 0x3d, 0x3}}, {@dont_hash}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '\v\\\xdb^.'}}, {@dont_hash}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]}})

14.050467802s ago: executing program 32 (id=60):
r0 = syz_mount_image$exfat(&(0x7f0000000280), &(0x7f0000000240)='./file2\x00', 0x2000000, &(0x7f00000018c0)=ANY=[], 0xfb, 0x1501, &(0x7f00000002c0)="$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")
fstat(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, <r1=>0x0})
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x2, 0x0, 0x0)
getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000140)={{{@in6=@ipv4={""/10, ""/2, @remote}, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r3=>0x0}}, {{@in6=@private2}, 0x0, @in=@multicast2}}, &(0x7f0000001800)=0xe8)
syz_usb_connect$cdc_ncm(0x0, 0x83, &(0x7f0000000080)=ANY=[@ANYBLOB="1201100102000008000000000000000303010902710002010540040904000001020d00000624060001e905240009000d240f010900000008000700db06241406001207240a300b01060624070d060007241401000008090581032000400402090401"], 0x0)
mount$9p_unix(&(0x7f0000000000)='./file2\x00', &(0x7f0000000040)='./file2\x00', &(0x7f0000000080), 0x20, &(0x7f0000001840)={'trans=unix,', {[{@fscache}, {@aname={'aname', 0x3d, 'exfat\x00'}}, {@access_uid={'access', 0x3d, r1}}], [{@uid_gt={'uid>', r3}}, {@flag='dirsync'}, {@dont_hash}, {@fsmagic={'fsmagic', 0x3d, 0x3}}, {@dont_hash}, {@permit_directio}, {@smackfsdef={'smackfsdef', 0x3d, '\v\\\xdb^.'}}, {@dont_hash}, {@fsmagic={'fsmagic', 0x3d, 0x6}}]}})

13.898269927s ago: executing program 3 (id=62):
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$BTRFS_IOC_FS_INFO(r0, 0x8400941f, &(0x7f0000000440))
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000140)=@newtaction={0x2f0, 0x30, 0x9, 0xfffffffe, 0x0, {}, [{0x2dc, 0x1, [@m_bpf={0x44, 0x1, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x8, 0x2, 0x10000000, 0x8, 0x3}}]}, {0x4}, {0xc}, {0xc}}}, @m_xt={0xec, 0x17, 0x0, 0x0, {{0x7}, {0x30, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_HOOK={0x8, 0x2, 0x3}]}, {0x98, 0x6, "9360d81d3cf92eda5ac9842bc8abf0eb4b64503aee524fdf438a8cb35a6ec05d91a5ea8432cb2755a3cea3b0d8d5af21d7b0a446d7b74e5dfe8d1f4c668f7ea28872c2978584c30469595e719557e20708b2d08ab591692a3aea4cdd0fe560fd2d80fb2356ef93bb827332860515d5c22e116ce74ccace75a23a41e89e4a780977aa4f143e2bc27b5885ebbe9f948dcad9571d8e"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_connmark={0x1a8, 0x20, 0x0, 0x0, {{0xd}, {0x90, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x90000000, 0x7fffffff, 0x7ffffffffffffff8, 0x4, 0x8}, 0x81}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xb183, 0xa, 0x7, 0x401, 0x2d1651be}, 0xffff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x3, 0x6, 0x9, 0x7}, 0xb15}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffff1, 0x1, 0x20000000, 0x7, 0x9}, 0xffff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xd9, 0x6, 0x10000000, 0x2, 0x7fffffff}, 0x7f57}}]}, {0xeb, 0x6, "48ae8c2cbb5edc9e03810e6accaad72be410377af61bcff96b9c3f096d55e1f6a0bc877ea3d4b719d8bf20de94817b2b67251fc88f291f4c31736a957ec1b51254cb5783c9f7954cb7718103ceee4c0d00555e7adb64d8576f022230dac2790f0ce92a3780292afe28a21bb1fa8daeaa53a7eff1088a0ff2c549cf40bc1a9a37f74fd194c10d7c6e04d9dcfe25e8817466b2fd79c21612b9b79b6397d31bc0e4632a78bb944cd620f84f162c8bfba0ae16a4a6c664d5ee845ff12da8bc43127b0e920e012781863b07c11e3f54df63a4e7ea10b802dca562e1989a87a9c59bfe4597a49c2ce5c8"}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x2f0}}, 0x0)

13.568882715s ago: executing program 1 (id=63):
r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
splice(r1, 0x0, r2, &(0x7f00000002c0)=0x87ffffd, 0x10, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00222200000096231b26e53f07060000002a050683749e821dab8b9236592b000440f0829b", @ANYRES8=r2], 0x0}, 0x0)

12.818816944s ago: executing program 3 (id=66):
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000d80)='./file0\x00', 0x280540e, &(0x7f0000000040), 0x1, 0xc14, &(0x7f0000000dc0)="$eJzs3F9rXGkZAPDnPZn8aZp1siKL682miOyCOE0rWdxFsJUVb7wQ9FbYkE6WkNltSSI1acCJfgFRv4AIXmhRemGve6PgrTdaby1eCEVioiCiI+fMTJsmM0nazOTE9PeDk/P+O+d9np6ZOecwPRPAS2sm/5NFvB4R76eIaqc9i7g0WZQmIprtcbvbmwv/3N5cSNFqfeNvKVJE7GxvLnT3leJSsb7YruRbxu+/nOLj3z8wbavVai3PNxr1lU7D5bUPb11eXd/43NKH8x/UP6h/dOXtL8xdnXt79p25geX6rz9fu/+PS1/9S/PfP//P3b//6GcprsVUp29vHp2sT2wmZop/o/0qETE/gP2fBSOdfPbmmSpHbJQNOSgAAPrK9lzDvRbVGImnF2/V+M0fSg0OAAAAGIjWSPvLuK7xFgAAAHD+pCg7AgAAAGC4uv8PYGd7c2Fnu7Kw/znY8+7x9dFinee921naPZVoFuuJyEdM7qTY+1hriojpAcw/ExGP/vTOr/IlejyHPGzNrYj4ZPf4b+45/qnIf7rzJPT+/LOImB3A/DP76v9P+V8bwPxl5w/Ay+nB9faJ7OD5L3ty/RM9zn+VHueuF1H2+e/x9faF3O6B67+uieL52F7Xf18/5hx3KnG7X1+e/xfvf+WX3SWfP18fb89Tx4ygv8dbEZ+q9Mo/PTn+qU/+7x+x7xTtXVT/e7veb8zJ8j+51k8i3oze+Xelw3+f6PLiUqM+2/7bc46t3839ot/8ZeefH//JPvkfcvwn8rZbz+yp/4/6fOu99+4daOwMPzr/7K9j6ZtFaazT8p35tbWVKxFj6WsH268enm93THcfef5vfbpX/tmhr//8M6HZeW3kqWx11nn9e/vm/NLdO7/uF0/3/q/M43/j+Y9/0faDY87xmd/+8K39bd3f19p7/5sv+fyPUvteGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC6soiYipTVIiIV5Syr1SIuRsQnYjJr3Fxd++zizW9/dCPvi5iO0WxxqVGfjYhqu57y+pWi/LR+dV/98xHxakT8uHqhqNcWbjZulJ08AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAT1yMiKlIWS0isojYrWZZrVZ2VAAAAMDATZcdAAAAADB0+f3/SNlBAAAAAEPV9/v/yunGAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwLn16hsPHqaIaL57oVhyY52+0VIjA4YtO86gNPw4gNM3UnYAQGkqZQcAlOY57/FdLsA5dNQt/kTsVg+25p8e48MKCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAz6M3XHzxMEdF890Kx5MY6faM9t3jjFKMDhikrOwCgNCOHdVZOLw7g9L3wW/yVwcYBnL7e9/jAyyQd0T/xdEzz2Z7xocUEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwNkzVSwpq0VEVpSzrFaLeCUipmM0LS416rMR8bGI+GN1dDyvj5cdNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAO3ur6xPN9o1FdepJBOtrlCOYWRyAsR0Twb8fQqfPd4g9MZCHVwhVQUJjotP33thG/PkxXK/mQCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKAMq+sby/ONRn1ltexIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgLKtrm8szzca9ZVjFO49z+A9hbJzBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgPP8LAAD//5NPCrc=")
r0 = syz_mount_image$fuse(0x0, 0x0, 0x20020, 0x0, 0x1, 0x0, 0x0)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f0000000080))
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x4)
mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0)

12.818579474s ago: executing program 33 (id=66):
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000d80)='./file0\x00', 0x280540e, &(0x7f0000000040), 0x1, 0xc14, &(0x7f0000000dc0)="$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")
r0 = syz_mount_image$fuse(0x0, 0x0, 0x20020, 0x0, 0x1, 0x0, 0x0)
ioctl$AUTOFS_IOC_EXPIRE_MULTI(r0, 0x40049366, &(0x7f0000000080))
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x4)
mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0)

10.230575669s ago: executing program 1 (id=80):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2804c0e, &(0x7f0000000cc0)={[{@debug}, {@oldalloc}, {@inlinecrypt}, {@delalloc}, {@noinit_itable}, {@norecovery}, {@minixdf}, {@nodioread_nolock}, {@errors_remount}, {@jqfmt_vfsv0}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@debug}, {@barrier_val={'barrier', 0x3d, 0x3}}]}, 0x1, 0xbdb, &(0x7f0000001000)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x85b400, 0x0)
mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0)
mount$bind(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0x887008, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r0, &(0x7f0000004200)={0x2020}, 0x2020)

10.120271563s ago: executing program 1 (id=81):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x14, 0x2f, 0x9, 0x70bd24, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x82004}, 0x80000)

9.992149916s ago: executing program 1 (id=82):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x403, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646, 0x4a721}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x0, 0x1}}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x600}, 0x0)

9.975363466s ago: executing program 34 (id=82):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x40, 0x10, 0x403, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646, 0x4a721}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x0, 0x1}}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x600}, 0x0)

7.110666119s ago: executing program 5 (id=115):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = epoll_create(0x800)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0xa0000007})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000200))
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000080)=0x200000000)
r2 = dup2(r0, r0)
ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x5)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x3, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x20000000, 0x6, 0x2, 0x9, 0x5, 0xffff2d37, 0xfffffefe, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c1b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0xcc74, 0x80000000, 0x23f, 0x5, 0xe, 0x0, 0xfffffc00, 0x7, 0x6, 0x37f6, 0x7, 0x8, 0x3e, 0x10008f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x200003ff, 0xc0, 0x0, 0x2005, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x5, 0x8000012f, 0x8004, 0x5, 0xffff7ff3, 0x129432e2, 0xc8, 0xf9, 0x0, 0x2bf, 0x1, 0x9, 0xa, 0x4, 0x10001, 0x0, 0x8000005, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x3, 0x6, 0x400, 0x401, 0x3, 0x5, 0xff, 0x5, 0x1000007, 0x5f31, 0x1000b, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x4, 0xf, 0x5ab2, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x8, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x2, 0x83, 0x3, 0x6, 0x2950bfaf, 0x1001, 0xa2, 0x7, 0xa9, 0x5, 0x8, 0xac8, 0xbf, 0x4002, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0xfffffffd, 0x5, 0x1c, 0x120001, 0x5, 0x3, 0x2, 0x4, 0x28], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce6, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0xfffc, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x6, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x12, 0xffffffff, 0x80000000, 0xfffffffe, 0x4, 0xc8, 0xfffffffc, 0xfffff000, 0x5, 0x1003, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x227, 0x8001, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xdb, 0x200, 0xffff343e, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

7.110490299s ago: executing program 5 (id=116):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0)
mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)

6.790884707s ago: executing program 6 (id=119):
r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000180)={[0x4000000000]}, 0x8, 0x80000)
faccessat2(r0, &(0x7f0000000040)='\x00', 0x2, 0x1200)

6.69799223s ago: executing program 6 (id=120):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast2, 0xffffffff, 0x2, 0x3, 0xa, 0x4, 0x46}, 0xfffffffffffffe9f)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_open_procfs(0x0, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0)
r4 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', <r5=>0x0})
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r5, @ANYBLOB="000000000000000010010c8013000c800ca3488008000000000000000800038064001d80050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2314000400e48f01e49713f0c2d839f940d9f088d8050006000000003bd00002006272696467655f736c6176655f30000007000200293a00000500060000000000080001000000000018002580140004004d2906d0880fc8acc30fe2020f9849675000028004000500a1085e7df341b9dc3d"], 0x270}, 0x1, 0x0, 0x0, 0x20008014}, 0x4)

6.366866078s ago: executing program 5 (id=122):
r0 = fsopen(&(0x7f0000000040)='debugfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x1, 0x3)
fchdir(r1)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xe9)
getdents(r2, &(0x7f0000000080)=""/43, 0x2b)

6.366498038s ago: executing program 6 (id=123):
r0 = add_key$user(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000200)='*', 0x1, 0xfffffffffffffffb)
r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff)
add_key$fscrypt_v1(&(0x7f0000000640), &(0x7f0000000680)={'fscrypt:', @desc3}, &(0x7f0000000740)={0x0, "3d80d8516735dab25665edc36620827794e952b841d8c443aef02b2927d66898851070a0b0c37c0b5b358c2d1ad856721421926896028fedd8917faa923964dc", 0x35}, 0x48, r1)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x30, 0x30, 0x36, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x39, 0x30, 0x30, 0x30, 0x30, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x65, 0x38, 0x30, 0x34, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000840)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344a2e3c35c2758f590ddeeff00112233445566778899aabbccddeeff", 0x1b}, 0x48, r1)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x51, 0x30, 0x62, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000580)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccdd2233445566778899aabbccddeeff00", 0x40}, 0x48, r1)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x39, 0x65, 0x61, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33, 0x63, 0x30, 0x30, 0x36, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @auto=[0x37, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000440)={'fscrypt:', @auto=[0x32, 0x30, 0x62, 0x67, 0x30, 0x30, 0x0, 0x30, 0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x64]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3c}, 0x48, r1)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000480)={'fscrypt:', @auto=[0x30, 0x61, 0x30, 0x38, 0x30, 0x30, 0x6e, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x65]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1)
add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32, 0x30, 0x30, 0x35, 0x30, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1)
add_key$user(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='c', 0x1, r1)
r2 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$KEYCTL_MOVE(0x1e, r0, r1, r2, 0x1)

6.366355098s ago: executing program 5 (id=124):
sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)=ANY=[@ANYBLOB="1000000100800c0001000000000000000000140003002001000000000000000000000000000050bb2d6f67d29d6fabadb1"], 0x110}], 0x1}, 0x0)
syz_usb_connect(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010002b63418202505a4a47ed30102030109022400010604a0f309048406020205b50809050a011000f86c050905"], 0x0)

6.356263928s ago: executing program 6 (id=125):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
syz_mount_image$erofs(&(0x7f00000003c0), &(0x7f0000000880)='./file0\x00', 0x18000c2, &(0x7f0000000240)=ANY=[@ANYRES16=0x0, @ANYRESOCT, @ANYRES8, @ANYRESOCT, @ANYRESDEC, @ANYRES32, @ANYRES16], 0x0, 0x181, &(0x7f00000008c0)="$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")
mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0)
move_mount(r0, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x152)

6.107381655s ago: executing program 6 (id=129):
epoll_create(0x2cb)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0)
getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240))
ioctl$AUTOFS_IOC_SETTIMEOUT(0xffffffffffffffff, 0x80049367, &(0x7f0000000100)=0x5)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x6, 0x3, 0x4, 0x4, 0x2, 0x3, 0xf1, 0x0, 0x7fffffffffffb, 0x8000, 0x0, 0x1, 0x0, 0x5, 0x0, 0xbde], 0x1000, 0x3c53c5})
ioctl$KVM_CLEAR_DIRTY_LOG(0xffffffffffffffff, 0xc018aec0, &(0x7f0000000040)={0x10200, 0x80, 0xc0, &(0x7f0000000340)=[0x5, 0x0, 0xe, 0x80, 0xe6b4, 0x101, 0xfffffffffffffffa, 0x2, 0x8, 0x2, 0x2, 0x700000000000000, 0x9, 0xffff, 0xfffffffffffffffe, 0x7, 0x7fffffff, 0x5, 0x26, 0x9880, 0x5, 0x6, 0x8, 0xfffffffffffffffe, 0x4, 0x20000000009, 0x2, 0x1fd, 0x8, 0x0, 0x7, 0x5, 0x5, 0x2, 0x501, 0x40, 0xfffffffffffffff5, 0x4, 0x7fffffff, 0x7d, 0x0, 0x6, 0x20008, 0x2e2, 0x103, 0x6, 0x8000000000000001, 0xfffffffffffffff9, 0x4100000000, 0xfffffffffffffffd, 0x8, 0x9, 0x7fff, 0xec, 0x8000000000000000, 0x4, 0x94f, 0x7, 0x7fffffffffffffff, 0x8, 0xffffffffffffffff, 0xd, 0x11, 0xa, 0x5, 0xa8, 0x1, 0x2000000000000007, 0x7fffffffffffffff, 0x3, 0x7, 0x7, 0xae8f, 0x100001e30fa4c, 0xa, 0x0, 0x4000008, 0xdac, 0xe94, 0x7, 0xfffffffffffffffc, 0xa7, 0xba00, 0x4, 0x9, 0x0, 0x1, 0x3, 0x4, 0x10001, 0xfffffffffffffff9, 0x3, 0x5, 0x21, 0xfffffffffffffc01, 0xfffffffffffffffd, 0x401, 0x3, 0x1e4b, 0x2, 0x79, 0xf, 0x10000, 0xe, 0x2, 0x3, 0x3, 0xfffffffffffffff9, 0x0, 0x4, 0xa, 0x40000001, 0x9, 0x2, 0xfff, 0x80, 0x3, 0xd, 0x4, 0x9, 0xffff, 0x1, 0x401, 0x1, 0x2, 0x7, 0xea7, 0x1]})
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x408d6}, 0x24000010)

5.923188409s ago: executing program 6 (id=131):
r0 = getpid()
tgkill(r0, r0, 0x1e)

5.923050449s ago: executing program 35 (id=131):
r0 = getpid()
tgkill(r0, r0, 0x1e)

4.72465512s ago: executing program 8 (id=132):
r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000b510f210950b2a7773820102030109022400010000000009042200028953950009050a02ff0300fa000905820250"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f0000000600)=ANY=[@ANYBLOB="001606"], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="400f02"], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000040)={0x44, &(0x7f00000000c0)={0x40, 0x31, 0x1, ' '}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$sierra_net(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

3.92706512s ago: executing program 5 (id=151):
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300))
socket$inet_udp(0x2, 0x2, 0x0)
io_submit(0x0, 0x0, &(0x7f0000009100))
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000)
r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe})
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000080)='system.posix_acl_default\x00', 0x0, 0x0, 0x1)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700)

3.92023553s ago: executing program 5 (id=152):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
syz_usb_disconnect(r0)
r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_connect$midi(0x0, 0x4a, &(0x7f00000001c0)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x1430, 0x474b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x38, 0x1, 0x1, 0x8, 0x30, 0xc, "", {{{0x9, 0x4, 0x0, 0x0, 0x2, 0x1, 0x3, 0x20, 0x1, [@ms_header={0x7, 0x24, 0x1, 0x0, 0x7}], [{{0x9, 0x5, 0x3, 0x10, 0x40, 0x8, 0x6f, 0x20, {0x5, 0x25, 0x1, 0x1, "a2"}}}, {{0x9, 0x5, 0xf, 0x76f40b2c72d285e5, 0x400, 0xb, 0x0, 0x4, {0x8, 0x25, 0x1, 0x4, "37ce0645"}}}]}}}}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000")

3.362682544s ago: executing program 4 (id=155):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0)
write$binfmt_aout(r0, &(0x7f0000000400)=ANY=[], 0xff2e)
ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x83, "00000000000000000000ffff00"})
ioctl$TCSETS(r0, 0x5402, &(0x7f0000000080)={0x0, 0xfffffffd, 0x0, 0x6, 0x3, "e315bc1cc24ff7b7cdb242e1ff0aa6905446b3"})
r1 = syz_open_pts(r0, 0x0)
r2 = dup3(r1, r0, 0x0)
read$watch_queue(r2, &(0x7f0000000340)=""/133, 0x85)

3.096953251s ago: executing program 2 (id=158):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getrlimit(0xb, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x4, 0x0, 0xfffffffe}, 0x10)
r4 = socket(0x1e, 0x4, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SET_NODE_ADDR(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r6, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0)
sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r3, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x3, 0x2, 0x401, 0x0, 0x0, {0x3, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x1)
setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f0000003240), 0x4000000000000e4, 0x0)

2.486789867s ago: executing program 4 (id=159):
socket(0x10, 0x3, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x881, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604000000002e"], 0x0, 0x37}, 0x20)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x9, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3, 0x2, 0x1}, 0x50)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={r4, 0x0, 0x0}, 0x10)
socket$inet_udp(0x2, 0x2, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2}, 0x50)
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0x7, &(0x7f00000003c0), 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
dup(r5)

2.198823424s ago: executing program 2 (id=162):
r0 = socket$inet6(0xa, 0x3, 0xff)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x370, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ipv6={@empty, @empty}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d0)
sendto$inet6(r0, &(0x7f00000006c0)="60000004001433400000000000000000000000000000000100000000000000003434e54e9a486803", 0x28, 0x0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c)

2.198583264s ago: executing program 2 (id=163):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCXONC(r3, 0x4b45, 0x2)
sched_setaffinity(r1, 0x8, &(0x7f0000000200)=0x3)
setgroups(0x6, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0])
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x48000)
setregid(0x0, 0xffffffffffffffff)
setresgid(0x0, 0x0, 0x0)
unshare(0x20400)
syz_mount_image$ext4(&(0x7f0000000180)='ext3\x00', &(0x7f00000000c0)='./file1\x00', 0x21081e, &(0x7f0000000080)={[{@grpquota}, {@nogrpid}, {@nobarrier}]}, 0x1, 0x505, &(0x7f0000000ac0)="$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")
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
socket$inet6_tcp(0xa, 0x1, 0x0)

1.434826433s ago: executing program 4 (id=167):
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0)
setregid(0xee00, 0xee00)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r0)
mount(0x0, &(0x7f00000010c0)='.\x00', &(0x7f0000000000)='proc\x00', 0x80, 0x0)
r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_open_procfs$namespace(r1, &(0x7f0000000080)='ns/user\x00')

1.338025656s ago: executing program 4 (id=168):
unshare(0x400)
r0 = socket$inet(0xa, 0x801, 0x84)
connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
listen(r0, 0x8)
accept4(r0, 0x0, 0x0, 0x0)

1.17262562s ago: executing program 4 (id=169):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}, 0x1, 0x0, 0x0, 0x20000050}, 0x4000810)
recvmmsg(r3, &(0x7f0000007700), 0x318, 0xfc0, 0x0)
syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x2000000, &(0x7f00000018c0)=ANY=[], 0xfb, 0x1500, &(0x7f00000002c0)="$eJzs3Am4T1X3OPC19t6H62b4JpnP2uvwTYZNkoSSZEiSJCRzQpIkSZK4ZEpCEjLeJHPInG665nnInHTzSpIkJCTZ/+c2/P16h5/3fX/9/vq/d32e5zz2cs7aZ+27nu89w/Pc79ddh1VvVKNKfWaGf4f+bYC//JMEAAkAMBAAcgBAAABlc5bNmb4/i8akf+sk4n9JgxlXugJxJUn/Mzbpf8Ym/c/YpP8Zm/Q/Y5P+Z2zS/4xN+i9EhjYr39WyZdxN3v//f079T5Ll+p8h4D/aIf3/T6P/paOl/xmb9D9jk/5nbNL/jCy40gWIK0w+/xmb9F+IDO0Pf6e84dyVfqct27+wCSGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQ/w+c85cYAPhtfKXrEkIIIYQQQgghxB/Hv3ulKxBCCCGEEEIIIcT/PgQFGgwEkAkyQwJkgUS4CrJCNsgOOSAGV0NOuAZywbWQG/JAXsgH+aEAFIQQCCwwRFAICkMcroMicD0UhWJQHEqAg5JQCm6A0nAjlIGboCzcDOXgFigPFX4+Z7rboTLcAVXgTqgK1aA61IC7oCbcDbXgHqgN90IduA/qwv1QDx6A+tAAGsKD0AgegsbQBJpCM2gOLaDlZfKTc/y9/OehB7wAPaEXJEFv6AMvQl/oB/1hAAyEl2AQvAyD4RUYAkNhGLwKw+E1GAGvw0gYBaPhDRgDY2EcjIcJMBGS4U2YBG/BZHj7oWwwFabBdJgBM2EWvAOzYQ7MhXdhHsyHBZCcZREshiXwHiyF9yEFPoBl8CGkwnJYASthFayGNbAW1sF62AAbYRNshi2wFbbBR7AddsBO2AW7YQ/shY9hH3wC++FTSMPP/sX8s7/Ph24ICKhQoUGDmTATJmACJmIiZsWsmB2zYwxjmBNzYi7MhbkxN+bFvJiE+bEgFkRCQkbGQlgI4xjHIlgEi2JRLI7F0aHDUlgKS+ONWAbLYFksi+WwHJbHClgBb8VbsRJWwspYGatgFayKVbE6Vse78C68G2thLayNtbEO1sG6WBfrYT2sj/WxITbERtgIG2NjbIpNsTk2x5bYElthK2yNrbEttsV22A7bY3vsgB2wI3bETtgJO2Nn7IJdsCt2xW74HD6Hz+Pz+AK+gL2wquqNfbAP9sW+2B8H4AB8CQfhy/gyvoJDcCgOw1fxVXwNR+AZHImjcDSOxkpqLI7D8chqIiZjMmaGSTgZJ+MUnIpTcTrOwJk4C2fhbJyDc/BdnIfzcT4uxIW4GJfgElyK72MKpuAyPIupuBxX4EpchatxFa7FdbgWN+BG3ICbcTNuxa34EX6EO3AH7sJduAf34Mf4MX6Cn+AQTMM0PIAH8CAexEN4CA/jYTyCR/AoHsVjeAyP43E8gSfxFJ7E03gaz+BZPAcAHgAu4AW8iBfTP/wqnVFGZVKZVIJKUIkqUWVVWVV2lV3FVEzlVDlVLpVL5Va5VV6VV+VX+VVBVVCRIsUqUoVUIRVXcVVEFVFFVVFVXBVXTjlVSpVSpVVpVUaVUWXVzaqcukWVVxVUG3erulVVUm1dZXWHqqKqqKqqmqquaqgaqqaqqWqpWqq2qq3qqDqqrrpf1VO9sT82UOmdaaSGYmM1DJuqZqq5aqFew4dVKzUCW6s2qq16VI3CkdhetXId1BOqoxqHndRTajw+rbqoidhVPau6qedUd/W86qFau56ql5qCvVUfNR37qn6qvxqgZmM1ld6x6uoV9XzmoWqYelUtxtfUCPW6GqlGqdHqDTVGjVXj1Hg1QU1UyepNNUm9pSart9UUNVVNU9PVDDVTzVLvqNlqjpqr3lXz1Hy1QC1Ui9RitUS9p5aq91WK+kAtUx+qVLVcrVAr1Sq1Wq1Ra9U6tV5tUBvVJrVZbVFb1Tb1kdqudqidapfarfaovepjtU99ovarT1Wa+kwdUH9RB9Xn6pD6Qh1WX6oj6it1VH2tjqlv1HH1rTqhTqpT6jt1Wn2vzqiz6pz6QZ1XP6oL6id1UXkFGrXSWhsd6Ew6s07QWXSivkpn1dl0dp1Dx/TVOqe+RufS1+rcOo/Oa/Lp/LqALqhDTdpq1pEupAvruL5OF9HX66K6mC6uS2inS+pS+gZdWt+oy+ibdFl9sy6nb9HldQVd0YO+TVfSt+vK+g5dRd+pq+pqurquoe/SNfXdupa+R9fW9+o6+j5dV9+v6+kHdH3dQDfUD+pG+iHdWDfRTXUz3Vy30C31w7qVfkS31m10W/2obqcf0+3147qDfkJ31E/qTvop3Vk/rbvoZ3RX/azupp/T3fVP+qL2uqfupZN0b91Hv6j76n66vx6gB+qX9CD9sh6sX9FD9FA9TL+qh+vX9Aj9uh6pR+nR+g09Ro/V4/R4PUFP1Mn6TT1Jv6Un67f1FD1VT9PT9Qw9U/f/daa5/0T+W38nP9PPZ9+qt+mP9Ha9Q+/Uu/RuvUfv1Xv1Pr1P79f7dZpO0wf0AX1QH9SH9CF9WB/WR/QRfVQf1cf0MX1cH9cn9En9g/5On9bf6zP6rD6rf9Dn9Xl94defARg0ymhjTGAymcwmwWQxieYqk9VkM9lNDhMzV5uc5hqTy1xrcps8Jq/JZ/KbAqagCQ0Za9hEppApbOLmOlPEXG+KmmKmuClhnClpSpkb/sf5l6uvpWlpWplWprVpbdqatqadaWfam/amg+lgOpqOppPpZDqbzqaL6WK6mq6mm+lmupvupofpYXqanibJJJk+5kXT1/Qz/c0AM9C8ZAaZQWawGWyGmCFmmBlmhpvhZoQZYUaakWa0GW3GmDFmnBlnJpgJJtnnMJPMJDPZTDZTzBQzbWAOM8PMMLPMLDPbzDZzzVwzz8wzC8wCs8gsMkvMErPULDUpJsUsM8tMqllulpuVZqVZbVabtWatWW/Wm41mo9lsNptUs81sM9vNdrPT7DS7zW6z1+w1+8w+s9/sN2kmzRwwB8xBc9AcMofMYXPYHDFHzFFz1Bwzx8xxc9ycMCfMKXPKnDanzRlzxpwz58x5c95cMBfMRXMx/bYvUIEKTGCCTEGmICFICBKDxCBrkDXIHmQPYkEsyBnkDHIF1wa5gzxB3iBfkD8oEBQMwoACG3AQBYWCwkE8uC4oElwfFA2KBcWDEoELSgalghuC0sGNQZngpqBscHNQLrglKB9UCCoGtwa3BZWC24PKwR1BleDOoGpQLage1AjuCmoGdwe1gnuC2sG9QZ3gvqBucH9QL3ggqB80CBoGDwaNgoeCxkGToGnQLGgetAha/qHze38mzyOuZ9grTAp7h33CF8O+Yb+wfzggHBi+FA4KXw4Hh6+EQ8Kh4bDw1XB4+Fo4Inw9HBmOCkeHb4RjwrHhuHB8OCGcGCaHb4aTwrfCyeHb4ZRwajgtmB7OCGeGs8J3wtnhnHBu+G44L5wfLggXhovCxSH+cksMKeEH4bLwwzA1XB6uCFeGq8LV4ZpwbbguXB9uCDeGm8LNZQf9cmi4PdwR7gx3hbvDPeHe8ONwX/hJuD/8NEwLPwsPhH8JD4afh4fCL8LD4ZfhkfCr8Gj4dXgs/CY8Hn4bnghPhqfC78LT4ffhmfBseC78ITwf/hheCH8KL4Y+/eY+/fJOhgxlokyUQAmUSImUlbJSdspOMYpRTspJuSgX5abclJfyUn7KTwWpIKVjYipEhShOcSpCRagoFaXiVJwcOSpFpag0laYyVIbKUlkqR+WoPJWnilSRbqPb6Ha6ne6gO+hOupOqUTWqQTWoJtWkWlSLalNtqkN1qC7VpXpUj+pTfWpIDakRNaLG1JiaUlNqTs2pJbWkVtSKWlNrakttqR21o/bUnjpQB+pIHakTdaLO1Jm6UBfqSl2pG3Wj7tSdelAP6kk9KYmSqA/1ob7Ul/pTfxpIA2kQDaLBNJiG0BAaRsNoOA2nETSCRtIoGk1v0BgaS+NoPE2giZRMyTSJJtFkmkxTaApNo2k0g2bQLJpFs2k2zaW5NI/m0QJaQItoES2hJbSUllIKpdAyWkaplEoraAWtolW0htbQOlpHG2gDbaJNtIW20DbaRttpO+2knbSbdtNe2kv7aB/tp/2URml0gA7QQTpIh+gQHabDdISO0FE6SsfoGB2n43SCTtApOkWn6TSdoTN0js7RefqRLtBPdJE8JdgsNtFeZbPabDa7zWH/Os5r89n8toAtaEOb2+b5XUzW2qK2mC1uS1hnS9pS9oa/icvbCraivdXeZivZ221lW95mgf8a17R321r2Hlvb3mtr2Lt+F9ex99m69iFbzzax9W0z29C2sI3sQ7axbWKb2ma2uW1h29nHbHv7uO1gn7Ad7ZN/Ey+179t1dr3dYDfaffYTe87+YI/ar+15+6PtaXvZgfYlO8i+bAfbV+wQO/T3MYAdbd+wY+xYO86OtxPsxL+Jp9npdoadaWfZd+xsO+dv4iX2PTvPptgFdqFdZBf/HKfXlGI/sMvshzbVLrcr7Eq7yq62a+za/1vrSrvZbrFb7V77sd1ud9iddpfdbff8HKevY7/91KbZz+wR+5U9aD+3h+wxe9h++XOcvr5j9ht73H5rT9iT9pT9zp6239sz9uzP609f+3f2J3vReguMrFiz4YAzcWZO4CycyFdxVs7G2TkHx/hqzsnXcC6+lnNzHs7L+Tg/F+CCHDKxZeaIC3FhjvN1XISv56JcjItzCXZckkvxDVyab+QyfBOX5Zu5HN/C5bkCV+Rb+TauxLdzZb6Dq/CdXJWrcXWuwXdxTb6ba/E9XJvv5Tp8H9fl+7keP8D1uQE35Ae5ET/EjbkJN+Vm3JxbcEt+mFvxI9ya23BbfpTb8WPcnh/nDvwEd+QnuRM/xZ35ae7Cz3BXfpa78XPcnZ/nHvwC9+RenMS9uQ+/yH25H/fnATyQX+JB/DIP5ld4CA/lYfwqD+fXeAS/ziN5FI/mN3gMj+VxPJ4n8ERO5jd5Er/Fk/ltnsJTeRpP5xk8k2fxOzyb5/Bcfpfn8XxewAt5ES/mJfweL+X3OYU/4GX8Iafycl7BK3kVr+Y1vJbX8XrewBt5E2/mLbyVt/FHvJ138E7exbt5D+/lj3kff8L7+VNO48/4AP+FD/LnfIi/4MP8JR/hr/gof83H+Bs+zt/yCT7Jp/g7Ps3f8xk+y+f4Bz7PP/IF/okvsmeIMFKRjkwURJmizFFClCVKjK6KskbZouxRjigWXR3ljK6JckXXRrmjPFHeKF+UPyoQFYzCiCIbcRRFhaLCUTy6LioSXR8VjYpFxaMSkYtKRqWiG6LS0Y1RmeimqGx0c1QuuiUqH1WIKka3RrdFlaLbo8rRHVGV6M6oalQtqh7ViO6KakZ3R7Wie6La0b1Rmei+qG50f1QveiCqHzWIGkYPRo2ih6LGUZOoadQsah61iFpGD0etokei1lGbqG30aNQueixqHz0edYieiDpGT17aXyz45Wr6V/uTot6R/vUN2T16UXxxfEn8vfjS+PvxlPgH8WXxD+Op8eXxFfGV8VXx1fE18bXxdfH18Q3xjfFN8c3xLfGtce9rZAaH6Q/CYFzgMrnMLsFlcYnuKpfVZXPZXQ4Xc1e7nO4al8td63K7PC6vy+fyuwIuhwsdOevYRa6QK+zi7jpXxF3virpirrgr4Zwr6Uq5Fq6la+lauUdca9fGtXWPukfdY+4x93jCr4W7Tu4p19k97bq4Z9wz7lnXzT3nurvnXQ/3guvperkkl+T6uD6ur+vr+rv+bqAb6Aa5QW6wG+yGuCFumBvmhrvhboQb4Ua6kW60G+3GuDFunBvnJrgJLtklu0lukpvsJrspboqb5qa5GW6Gm+Vmudlutpvr5rp5bp5b4Ba4RW6RW+KWuKVuqUtxKW6ZW+ZSXapb4Va4VW6VW+PWuHVundvgNrhNbpPb4ra4bW6b2+62u51up9vtdru9bq/b5/a5/W6/S3Np7oA74A66g+6Q+8Iddl+6I+4rd9R97Y65b9xx96074U66U87r0+57d8addefcD+68+9FdcD+5i8675NibsUmxt2KTY2/HpsSmxqbFpsdmxGbGZsXeic2OzYnNjb0bmxebH1sQWxhbFFscWxJ7L7Y09n4sJfZBbFnsw1hqbHlsRWxlbFVsdcz7AtsjX8gX9nF/nS/ir/dFfTFf3Jfwzpf0pfwNvrS/0ZfxN/my/mZfzt/iy/sKvqJv4pv6Zr65b+Fb+od9K/+Ib+3b+Lb+Ud/OP+bb+8d9B/+E7+if9J38U76zf9p38c/4rv7Z+b922ffwL/ievpdP8r19H/+i7+v7+f5+gB/oX/KD/Mt+sH/FD/FD/TD/qh/uX/Mj/Ot+pB/lR/s3/Bg/1o/z4/0EP9En+zf9JP+Wn+zf9lP8VD/NT/cz/Ew/y7/jZ/s5fq5/18/z8/0Cv9Av8ov9Ev+eX+rf9yn+A7/Mf+hT/XK/wq/0q/xqv8av9ev8er/Bb/Sb/Ga/xW/12/xHfrvf4Xf6XX633+P3+o/9Pv+J3+8/9Wn+M3/A/8Uf9J/7Q/4Lf9h/6Y/4r/xR/7U/5r/xx/23/oQ/6U/57/xp/70/48/6c/4Hf97/6C/4n/xF+Zs1IYQQQoh/ir7M/t5/5//Ur1u6PgCQbUe+w38956bcv4z7qX0dYwDwRK+uDX7bGjRISkr69dhUDUHhhQAQu5T/8/cP/Bovh7bwGHSANlD679bXT1X8+b7vv5s/fjNAIkCW33LSH48S4a/nv/EfzN/kPb7c/AsBiha+lJN+ot/iS/OX+Qfz72l3mfmzfJ4M0Pq/5GSFS/Gl+UvBI/AkdPjdkUIIIYQQQgghxC/6qfPdLvd8m/58nt9cyskMl+LLPZ9fRuU/Yg1CCCGEEEIIIYT47z39XPfHH+7QoU3n/+RB5j9HGX+CAQLAn6AMGfz5B1f6N5MQQgghhBDij3bppv9KVyKEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQmRc//43hKl/+uArvUYhhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBDiSvs/AQAA///c71RJ")
truncate(&(0x7f0000000080)='./file2\x00', 0x6002)
r4 = open(&(0x7f0000000040)='./file2\x00', 0x181042, 0x124)
write$P9_RREADDIR(r4, &(0x7f00000001c0)={0x2a, 0x29, 0x3, {0x5, [{{0x10, 0x9, 0x5}, 0x7, 0x7, 0xf45b3bccc711007a, './file0'}]}}, 0xfffffceb)

450.800329ms ago: executing program 7 (id=173):
r0 = syz_open_dev$loop(&(0x7f0000000000), 0xffff, 0x14f600)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000002060101000000000000000000f90003050005000a000000090002007379"], 0x30}}, 0x0)
write(0xffffffffffffffff, &(0x7f0000000180)="a788b9a48d1de6603c475fe3cfa8a27d7c8425073f756d1cefddc08a6dd4c4c0a5323f8f93d65682bc4974397001a396624e1bd23560952dee5736311e3d06e60f168e59f8a3125595ff42643b55d9addf2ea3fa011611a8c539558baf2581e9a8b722f2108f58cb3d552779ea51ba9462992a9156243c50c162d06280d116e26d280aacfb494b66c66bb4df665381440690afc4854f4a", 0x97)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d9600010000000000000000000000000000000000000000000000000400", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00040000170000000400", "f4bd00000080190000002c88f16b00", [0x100000000, 0x7ffffffffffffffe]}})

400.93444ms ago: executing program 7 (id=174):
bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e24, @broadcast}, 0x10)
mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4)
setitimer(0x2, &(0x7f0000000000)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0)

386.493ms ago: executing program 2 (id=175):
mkdir(&(0x7f0000000100)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/max_speed\x00', 0x1, 0x0)
write(r0, &(0x7f00000005c0)='h\x00', 0x2)

258.804194ms ago: executing program 7 (id=176):
sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)
syz_open_procfs$namespace(0x0, 0x0)
ptrace$peeksig(0x4209, 0x0, &(0x7f0000000100)={0xd, 0x1, 0x4}, &(0x7f0000000380)=[{}, {}, {}, {}])
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x20008801)
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0)

173.693166ms ago: executing program 7 (id=177):
syz_emit_ethernet(0x32, &(0x7f00000002c0)={@random="d3f34746b238", @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x11, 0x0, @loopback, @multicast1}, {0x4e21, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x1, 0x7, 0x0, @val=0x80}}}}}}}, 0x0)

143.861237ms ago: executing program 4 (id=178):
sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="00082dbd7000fbd8df25"], 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0xa4)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000002480)={0x2020}, 0x2020)
lseek(0xffffffffffffffff, 0xfffffffffffffffe, 0x1)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x0, 'syzkaller0\x00', {0x102}, 0xd})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8042, 0x48)
ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f00000000c0)=0x8)
pwrite64(r3, &(0x7f0000000140)="10", 0xda0443d9, 0xfff)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text64={0x40, &(0x7f0000000180)="66baa000ecc744240011000000c7442402b16e0000ff2c2443f466baf80cb8f2c96789ef66bafc0c66ed0f072e0f01c248b820450000000000000f23d00f21f835000000010f23f8c46289900cabb9f9080000b8c93c0000ba000000000f30c4816857a601000000", 0x68}], 0x1, 0x4, 0x0, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000880)={0x1, 0x0, @pic={0x8, 0x7, 0x8, 0x3, 0x2, 0x1, 0xc5, 0x9, 0x28, 0x2, 0x1, 0x95, 0xb, 0x8, 0x7f, 0x7}})
ioctl$KVM_RUN(r2, 0xae80, 0x0)

98.848498ms ago: executing program 7 (id=179):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
socketpair$unix(0x1, 0x2, 0x0, 0x0)
open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x10)

59.491908ms ago: executing program 2 (id=180):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./tracing\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
recvmmsg(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x0, 0xffffffffffffffff}}], 0x1, 0x100, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4, 0x0, 0x0)
r0 = syz_create_resource$binfmt(&(0x7f0000000400)='./file0\x00')
openat$binfmt(0xffffffffffffff9c, r0, 0x241, 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./tracing/uprobe_events\x00', 0x1, 0x0)
write(r1, &(0x7f0000000700)='p:myevent ./file0:0', 0x13)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./tracing/uprobe_events\x00', 0xe242, 0x48)

35.179909ms ago: executing program 2 (id=181):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000180)={0x24, 0x0, 0x0, &(0x7f0000000d80)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x5, '\toAg'}]}}, 0x0}, 0x0)
syz_usb_ep_write(r0, 0x81, 0x79, &(0x7f00000002c0)="b9425b44651dd23241963599000000110000004a16941ff5f4b4f1f0add7fcf2b877fceafffffffffff1ffdf4cd9f5d3969890522c77157d88010000003a5bd5531d459dffff03000000000091ff000000e8f5b3371da3635b8b4fa637135800001f65e4b436aa9e50bc0f19b7d3372ff9ebcede1fb5e9428f")

659.87µs ago: executing program 7 (id=182):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x129241, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x2)
ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x40, 0x0, 0x7, 0x10}]})
ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000540)=0xfff)
write$ppp(r0, &(0x7f0000000100)="43f14e42f1a5c5c0c20cc3a5fbd2f900000000", 0x13)

0s ago: executing program 8 (id=183):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
pipe(&(0x7f0000000200)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioprio_set$pid(0x2, 0x0, 0x0)
splice(r1, 0x0, r2, 0x0, 0xf3a, 0x0)
write(r0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

rocess permissive=1
[   11.299753][   T24] audit: type=1400 audit(1786196330.380:63): avc:  denied  { siginh } for  pid=216 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
Warning: Permanently added '10.128.1.88' (ED25519) to the list of known hosts.
[   18.156044][   T24] audit: type=1400 audit(1786196337.260:64): avc:  denied  { mounton } for  pid=271 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   18.157084][  T271] cgroup: Unknown subsys name 'net'
[   18.160466][   T24] audit: type=1400 audit(1786196337.260:65): avc:  denied  { mount } for  pid=271 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   18.164827][   T24] audit: type=1400 audit(1786196337.260:66): avc:  denied  { unmount } for  pid=271 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   18.164947][  T271] cgroup: Unknown subsys name 'devices'
[   18.254199][  T271] cgroup: Unknown subsys name 'hugetlb'
[   18.259789][  T271] cgroup: Unknown subsys name 'rlimit'
[   18.366292][   T24] audit: type=1400 audit(1786196337.470:67): avc:  denied  { setattr } for  pid=271 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   18.389471][   T24] audit: type=1400 audit(1786196337.470:68): avc:  denied  { mounton } for  pid=271 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[   18.389566][  T273] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
[   18.414377][   T24] audit: type=1400 audit(1786196337.470:69): avc:  denied  { mount } for  pid=271 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[   18.445807][   T24] audit: type=1400 audit(1786196337.530:70): avc:  denied  { relabelto } for  pid=273 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   18.445831][  T271] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   18.471169][   T24] audit: type=1400 audit(1786196337.530:71): avc:  denied  { write } for  pid=273 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   18.505530][   T24] audit: type=1400 audit(1786196337.530:72): avc:  denied  { read } for  pid=271 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   18.531042][   T24] audit: type=1400 audit(1786196337.530:73): avc:  denied  { open } for  pid=271 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   18.917540][  T279] bridge0: port 1(bridge_slave_0) entered blocking state
[   18.924752][  T279] bridge0: port 1(bridge_slave_0) entered disabled state
[   18.932136][  T279] device bridge_slave_0 entered promiscuous mode
[   18.946092][  T279] bridge0: port 2(bridge_slave_1) entered blocking state
[   18.953269][  T279] bridge0: port 2(bridge_slave_1) entered disabled state
[   18.960612][  T279] device bridge_slave_1 entered promiscuous mode
[   19.060186][  T280] bridge0: port 1(bridge_slave_0) entered blocking state
[   19.067247][  T280] bridge0: port 1(bridge_slave_0) entered disabled state
[   19.074682][  T280] device bridge_slave_0 entered promiscuous mode
[   19.081422][  T280] bridge0: port 2(bridge_slave_1) entered blocking state
[   19.088612][  T280] bridge0: port 2(bridge_slave_1) entered disabled state
[   19.095939][  T280] device bridge_slave_1 entered promiscuous mode
[   19.117200][  T279] bridge0: port 2(bridge_slave_1) entered blocking state
[   19.124250][  T279] bridge0: port 2(bridge_slave_1) entered forwarding state
[   19.131510][  T279] bridge0: port 1(bridge_slave_0) entered blocking state
[   19.138543][  T279] bridge0: port 1(bridge_slave_0) entered forwarding state
[   19.170140][  T281] bridge0: port 1(bridge_slave_0) entered blocking state
[   19.177206][  T281] bridge0: port 1(bridge_slave_0) entered disabled state
[   19.184548][  T281] device bridge_slave_0 entered promiscuous mode
[   19.191334][  T281] bridge0: port 2(bridge_slave_1) entered blocking state
[   19.198420][  T281] bridge0: port 2(bridge_slave_1) entered disabled state
[   19.205744][  T281] device bridge_slave_1 entered promiscuous mode
[   19.233039][  T284] bridge0: port 1(bridge_slave_0) entered blocking state
[   19.240079][  T284] bridge0: port 1(bridge_slave_0) entered disabled state
[   19.247475][  T284] device bridge_slave_0 entered promiscuous mode
[   19.256535][  T284] bridge0: port 2(bridge_slave_1) entered blocking state
[   19.263630][  T284] bridge0: port 2(bridge_slave_1) entered disabled state
[   19.270962][  T284] device bridge_slave_1 entered promiscuous mode
[   19.294427][  T286] bridge0: port 1(bridge_slave_0) entered blocking state
[   19.301472][  T286] bridge0: port 1(bridge_slave_0) entered disabled state
[   19.309024][  T286] device bridge_slave_0 entered promiscuous mode
[   19.315836][  T286] bridge0: port 2(bridge_slave_1) entered blocking state
[   19.322881][  T286] bridge0: port 2(bridge_slave_1) entered disabled state
[   19.330225][  T286] device bridge_slave_1 entered promiscuous mode
[   19.397234][  T280] bridge0: port 2(bridge_slave_1) entered blocking state
[   19.404293][  T280] bridge0: port 2(bridge_slave_1) entered forwarding state
[   19.411523][  T280] bridge0: port 1(bridge_slave_0) entered blocking state
[   19.418561][  T280] bridge0: port 1(bridge_slave_0) entered forwarding state
[   19.455352][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   19.463674][   T49] bridge0: port 2(bridge_slave_1) entered disabled state
[   19.470895][   T49] bridge0: port 1(bridge_slave_0) entered disabled state
[   19.478200][   T49] bridge0: port 2(bridge_slave_1) entered disabled state
[   19.485993][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   19.493593][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   19.515663][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   19.523851][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[   19.530851][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[   19.540237][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   19.558426][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   19.584682][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   19.593296][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   19.600847][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   19.609058][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[   19.616097][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[   19.623657][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   19.631712][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[   19.638736][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[   19.648486][  T279] device veth0_vlan entered promiscuous mode
[   19.665206][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   19.673740][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   19.681059][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   19.688684][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   19.696538][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   19.704736][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[   19.711746][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[   19.719105][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   19.727210][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[   19.734245][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[   19.741563][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   19.764014][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   19.772056][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   19.780124][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   19.788537][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   19.801214][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   19.818160][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   19.826193][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   19.834773][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   19.843082][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[   19.850100][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[   19.857901][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   19.866026][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[   19.873081][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[   19.880426][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   19.888654][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[   19.895685][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[   19.903256][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   19.910842][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   19.928434][  T281] device veth0_vlan entered promiscuous mode
[   19.936328][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   19.944703][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   19.953293][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[   19.960329][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[   19.967961][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   19.976121][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   19.984139][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   19.992044][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   20.000029][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   20.008432][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   20.016917][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   20.024731][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   20.032671][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   20.040869][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   20.049145][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   20.056672][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   20.067341][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   20.075428][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   20.083436][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   20.091388][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   20.100516][  T279] device veth1_macvtap entered promiscuous mode
[   20.111744][  T280] device veth0_vlan entered promiscuous mode
[   20.123003][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   20.130625][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   20.139209][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   20.147210][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   20.155981][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   20.164321][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   20.171666][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   20.184879][  T281] device veth1_macvtap entered promiscuous mode
[   20.192816][  T284] device veth0_vlan entered promiscuous mode
[   20.200065][  T280] device veth1_macvtap entered promiscuous mode
[   20.211166][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   20.219403][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   20.227708][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   20.235645][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   20.244068][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   20.251908][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   20.260341][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   20.268434][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   20.276083][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   20.284415][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   20.292900][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   20.301014][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   20.309366][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   20.316934][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   20.330972][  T286] device veth0_vlan entered promiscuous mode
[   20.342221][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   20.350563][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   20.359254][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   20.368002][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   20.376582][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   20.384498][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   20.392297][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   20.400577][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   20.408939][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   20.417256][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   20.425776][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   20.434121][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   20.442412][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   20.449959][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   20.459327][  T284] device veth1_macvtap entered promiscuous mode
[   20.470321][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   20.478608][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   20.486753][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   20.494350][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   20.502410][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   20.513873][  T286] device veth1_macvtap entered promiscuous mode
[   20.531533][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   20.539540][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   20.540140][  T279] request_module fs-gadgetfs succeeded, but still no fs?
[   20.548807][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   20.564489][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   20.572738][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   20.588880][  T281] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation
[   20.599682][  T300] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   20.609118][  T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   20.616699][  T306] ip6t_REJECT: TCP_RESET illegal for non-tcp
[   20.617781][  T300] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   20.631757][  T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   20.682705][  T306] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
[   20.691947][  T306] ext4 filesystem being mounted at /0/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   20.697192][  T315] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   20.769157][  T311] EXT4-fs (loop3): mounted filesystem without journal. Opts: inode_readahead_blks=0x0000000004000000,nogrpid,inlinecrypt,,errors=continue
[   20.783679][  T317] ======================================================
[   20.783679][  T317] WARNING: the mand mount option is being deprecated and
[   20.783679][  T317]          will be removed in v5.15!
[   20.783679][  T317] ======================================================
[   20.815498][  T306] EXT4-fs error (device loop0): ext4_get_first_dir_block:3730: inode #12: comm syz.0.1: directory missing '..'
[   20.853613][  T311] EXT4-fs error (device loop3): ext4_resize_begin:61: comm syz.3.4: resize_inode disabled but reserved GDT blocks non-zero
[   20.981243][  T334] netlink: 37 bytes leftover after parsing attributes in process `syz.0.7'.
[   21.037193][  T323] F2FS-fs (loop1): invalid crc value
[   21.044235][  T323] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[   21.064128][  T323] F2FS-fs (loop1): Start checkpoint disabled!
[   21.070828][  T323] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[   21.115401][  T347] netlink: 40 bytes leftover after parsing attributes in process `syz.0.12'.
[   21.126946][  T347] netlink: 2 bytes leftover after parsing attributes in process `syz.0.12'.
[   21.136800][  T347] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[   21.172563][    C1] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[   21.193158][  T352] FAT-fs (loop3): Unrecognized mount option "gid=RÛpy_À€kÆ-Ï= QÖ'|zðUüHB$>Mc©(�˜•ÕÿYÀ×¾à½mø��@»(
[   21.193158][  T352] öÌŸ½ªk�ñxMõzÿ" or missing value
[   21.428596][  T358]  loop2: p1 p2 p3 < p5 p6 p7 >
[   21.454717][  T358] loop2: p2 size 16775168 extends beyond EOD, truncated
[   21.463122][  T373] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability
[   21.478988][  T358] loop2: p5 start 4294970168 is beyond EOD, truncated
[   21.567725][  T380] FAT-fs (loop3): bogus number of FAT sectors
[   21.578907][  T380] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[   21.589772][  T380] FAT-fs (loop3): Can't find a valid FAT filesystem
[   21.613503][  T372] erofs: (device loop1): mounted with root inode @ nid 36.
[   21.665274][  T321] blk_update_request: I/O error, dev loop2, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[   21.678150][  T330] blk_update_request: I/O error, dev loop2, sector 2056 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[   21.691355][  T332] blk_update_request: I/O error, dev loop2, sector 3072 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[   21.704543][  T331] blk_update_request: I/O error, dev loop2, sector 14720 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[   21.717373][  T385] blk_update_request: I/O error, dev loop2, sector 3072 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[   21.722668][  T284] __loop_clr_fd: partition scan of loop2 failed (rc=-16)
[   21.733482][  T385] blk_update_request: I/O error, dev loop2, sector 3072 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   21.739040][  T331] blk_update_request: I/O error, dev loop2, sector 14720 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   21.752707][  T332] blk_update_request: I/O error, dev loop2, sector 3072 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   21.759544][  T331] Buffer I/O error on dev loop2p6, logical block 11648, async page read
[   21.778174][  T321] blk_update_request: I/O error, dev loop2, sector 32640 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   21.789732][  T330] blk_update_request: I/O error, dev loop2, sector 2056 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   21.792539][  T385] Buffer I/O error on dev loop2p7, logical block 0, async page read
[   21.802545][  T331] Buffer I/O error on dev loop2p6, logical block 11649, async page read
[   21.812522][  T332] Buffer I/O error on dev loop2p3, logical block 0, async page read
[   21.817594][  T321] Buffer I/O error on dev loop2p2, logical block 4080, async page read
[   21.833640][  T330] Buffer I/O error on dev loop2p1, logical block 1, async page read
[   21.841762][  T331] Buffer I/O error on dev loop2p6, logical block 11650, async page read
[   21.850730][  T331] Buffer I/O error on dev loop2p6, logical block 11651, async page read
[   21.863306][  T331] Buffer I/O error on dev loop2p6, logical block 11652, async page read
[   21.875903][  T331] Buffer I/O error on dev loop2p6, logical block 11653, async page read
[   21.884598][   T25] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   22.066931][  T403] EXT4-fs (loop1): Ignoring removed bh option
[   22.095835][  T403] EXT4-fs error (device loop1): ext4_map_blocks:632: inode #3: block 2: comm syz.1.24: lblock 2 mapped to illegal pblock 2 (length 1)
[   22.110374][  T403] EXT4-fs (loop1): Remounting filesystem read-only
[   22.117248][  T403] EXT4-fs error (device loop1): __ext4_get_inode_loc:4451: comm syz.1.24: Invalid inode table block 1 in block_group 0
[   22.130008][  T403] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5971: Corrupt filesystem
[   22.140001][  T403] EXT4-fs error (device loop1): __ext4_ext_dirty:182: inode #3: comm syz.1.24: mark_inode_dirty error
[   22.152270][  T403] EXT4-fs error (device loop1): ext4_acquire_dquot:6230: comm syz.1.24: Failed to acquire dquot type 0
[   22.165318][  T403] EXT4-fs (loop1): 1 orphan inode deleted
[   22.171048][  T403] EXT4-fs (loop1): mounted filesystem without journal. Opts: acl,noblock_validity,bh,max_batch_time=0x00000000000008c9,inlinecrypt,errors=remount-ro,
[   22.219555][  T280] EXT4-fs error (device loop1): __ext4_get_inode_loc:4451: comm syz-executor: Invalid inode table block 1 in block_group 0
[   22.234660][  T412] EXT4-fs (loop0): Unrecognized mount option "pcr=00000000000000000046" or missing value
[   22.246194][  T280] EXT4-fs (loop1): Remounting filesystem read-only
[   22.253040][  T280] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5971: Corrupt filesystem
[   22.263039][  T280] EXT4-fs error (device loop1): ext4_quota_off:6549: inode #3: comm syz-executor: mark_inode_dirty error
[   22.302680][   T25] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[   22.312464][   T25] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[   22.493137][  T422] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[   22.504945][  T422] EXT4-fs (loop2): barriers disabled
[   22.510239][  T422] JBD2: no valid journal superblock found
[   22.516264][  T422] EXT4-fs (loop2): error loading journal
[   22.522633][   T25] usb 5-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[   22.531741][   T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   22.539972][   T25] usb 5-1: Product: syz
[   22.544326][   T25] usb 5-1: Manufacturer: syz
[   22.548948][   T25] usb 5-1: SerialNumber: syz
[   22.557260][  T425] binder: 424:425 ioctl 4068aea3 200000000600 returned -22
[   22.577127][   T25] usb 5-1: config 0 descriptor??
[   22.603990][  T384] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   22.611054][  T384] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   22.762582][   T20] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   22.833631][  T384] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   22.840704][  T384] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[   22.982632][  T302] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   23.052536][   T20] usb 1-1: device descriptor read/64, error -71
[   23.054617][  T384] geneve1: tun_chr_ioctl cmd 1074025677
[   23.064397][  T384] geneve1: linktype set to 776
[   23.186110][  T443] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.36: inode has both inline data and extents flags
[   23.199318][  T443] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.36: couldn't read orphan inode 15 (err -117)
[   23.211227][  T443] EXT4-fs (loop3): mounted filesystem without journal. Opts: user_xattr,,errors=continue
[   23.226425][  T302] usb 2-1: Using ep0 maxpacket: 16
[   23.231669][   T24] kauditd_printk_skb: 93 callbacks suppressed
[   23.231678][   T24] audit: type=1400 audit(1786196342.330:165): avc:  denied  { create } for  pid=442 comm="syz.3.36" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   23.258556][   T24] audit: type=1400 audit(1786196342.330:166): avc:  denied  { map } for  pid=442 comm="syz.3.36" path="/9/file1/file1" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   23.372584][  T302] usb 2-1: config 0 has an invalid interface number: 105 but max is 0
[   23.380789][  T302] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   23.391004][  T302] usb 2-1: config 0 has no interface number 0
[   23.452985][  T448] FAT-fs (loop3): Unrecognized mount option "ÿÿÿÿ00000000000000000000" or missing value
[   23.462574][   T20] usb 1-1: device descriptor read/64, error -71
[   23.498176][   T24] audit: type=1400 audit(1786196342.600:167): avc:  denied  { create } for  pid=383 comm="syz.4.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   23.518524][   T25] dm9601 5-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID
[   23.530300][   T24] audit: type=1400 audit(1786196342.600:168): avc:  denied  { write } for  pid=383 comm="syz.4.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   23.550396][   T24] audit: type=1400 audit(1786196342.600:169): avc:  denied  { nlmsg_write } for  pid=383 comm="syz.4.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[   23.570909][  T302] usb 2-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28
[   23.614646][  T302] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   23.630445][  T302] usb 2-1: Product: syz
[   23.644981][  T302] usb 2-1: Manufacturer: syz
[   23.649596][  T302] usb 2-1: SerialNumber: syz
[   23.665574][  T302] usb 2-1: config 0 descriptor??
[   23.684672][   T24] audit: type=1400 audit(1786196342.790:170): avc:  denied  { setopt } for  pid=446 comm="syz.3.37" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   23.732545][   T20] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   23.740084][   T24] audit: type=1400 audit(1786196342.830:171): avc:  denied  { checkpoint_restore } for  pid=454 comm="syz.3.39" capability=40  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   23.770970][  T455] netlink: 40 bytes leftover after parsing attributes in process `syz.3.39'.
[   23.788301][   T24] audit: type=1400 audit(1786196342.840:172): avc:  denied  { write } for  pid=456 comm="syz.2.40" name="ppp" dev="devtmpfs" ino=152 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   23.811388][   T24] audit: type=1400 audit(1786196342.840:173): avc:  denied  { open } for  pid=456 comm="syz.2.40" path="/dev/ppp" dev="devtmpfs" ino=152 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   23.835658][   T24] audit: type=1400 audit(1786196342.940:174): avc:  denied  { bind } for  pid=456 comm="syz.2.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   23.985671][  T434] udc-core: couldn't find an available UDC or it's busy
[   24.042535][   T20] usb 1-1: device descriptor read/64, error -71
[   24.052050][  T434] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[   24.112593][  T302] uvcvideo: Found UVC 0.00 device syz (046d:08d3)
[   24.132599][  T302] uvcvideo: Failed to query (GET_INFO) UVC control 2 on unit 1: -71 (exp. 1).
[   24.152545][  T302] uvcvideo: Failed to query (GET_INFO) UVC control 3 on unit 1: -71 (exp. 1).
[   24.172571][  T302] uvcvideo: Failed to query (GET_INFO) UVC control 6 on unit 1: -71 (exp. 1).
[   24.192561][  T302] uvcvideo: Failed to query (GET_INFO) UVC control 5 on unit 1: -71 (exp. 1).
[   24.212565][  T302] uvcvideo: Failed to query (GET_INFO) UVC control 13 on unit 1: -71 (exp. 1).
[   24.232620][  T302] uvcvideo: Failed to query (GET_INFO) UVC control 14 on unit 1: -71 (exp. 1).
[   24.252566][  T302] uvcvideo: Failed to query (GET_INFO) UVC control 17 on unit 1: -71 (exp. 1).
[   24.272557][  T302] uvcvideo: Failed to query (GET_INFO) UVC control 18 on unit 1: -71 (exp. 1).
[   24.281616][  T302] uvcvideo: No valid video chain found.
[   24.291807][  T302] usb 2-1: USB disconnect, device number 2
[   24.432591][   T20] usb 1-1: device descriptor read/64, error -71
[   24.548683][  T407] usb 5-1: USB disconnect, device number 2
[   24.552607][   T20] usb usb1-port1: attempt power cycle
[   24.665724][  T467] mmap: syz.4.42 (467) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst.
[   24.796984][  T466] erofs: (device loop4): mounted with root inode @ nid 36.
[   25.000492][  T303] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready
[   25.062596][   T20] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   25.069677][  T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   25.088482][  T303] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready
[   25.102872][  T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   25.111181][  T303] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   25.119476][  T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   25.129218][  T303] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   25.137545][  T478] F2FS-fs (loop3): invalid crc value
[   25.137636][  T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   25.150763][  T478] F2FS-fs (loop3): Found nat_bits in checkpoint
[   25.175031][  T492] netlink: 40 bytes leftover after parsing attributes in process `syz.4.49'.
[   25.184613][  T492] netlink: 83 bytes leftover after parsing attributes in process `syz.4.49'.
[   25.186081][  T478] F2FS-fs (loop3): Start checkpoint disabled!
[   25.200452][  T478] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[   25.222711][   T20] usb 1-1: device descriptor read/8, error -71
[   25.259845][  T477] x_tables: duplicate underflow at hook 3
[   25.349689][  T477] attempt to access beyond end of device
[   25.349689][  T477] loop3: rw=2049, want=81920, limit=40427
[   25.360984][  T407] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   25.388447][  T477] attempt to access beyond end of device
[   25.388447][  T477] loop3: rw=2049, want=53248, limit=40427
[   25.409352][  T477] attempt to access beyond end of device
[   25.409352][  T477] loop3: rw=2049, want=77824, limit=40427
[   25.432576][   T20] usb 1-1: device descriptor read/8, error -71
[   25.473694][  T503] F2FS-fs (loop0): invalid crc value
[   25.480583][  T503] F2FS-fs (loop0): Found nat_bits in checkpoint
[   25.512170][  T503] F2FS-fs (loop0): Start checkpoint disabled!
[   25.513001][  T477] attempt to access beyond end of device
[   25.513001][  T477] loop3: rw=2049, want=94600, limit=40427
[   25.529270][  T503] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[   25.536027][  T287] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   25.589044][  T503] incfs: ino conflict with backing FS 3
[   25.627796][  T504] attempt to access beyond end of device
[   25.627796][  T504] loop3: rw=2049, want=101096, limit=40427
[   25.666264][  T303] attempt to access beyond end of device
[   25.666264][  T303] loop3: rw=2049, want=45104, limit=40427
[   25.813319][  T517] process 'syz.0.52' launched './file2' with NULL argv: empty string added
[   25.997853][  T519] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue
[   26.022607][  T287] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   26.033614][  T523] netlink: 20 bytes leftover after parsing attributes in process `syz.3.56'.
[   26.042418][  T287] usb 5-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c
[   26.042689][  T523] netlink: 64 bytes leftover after parsing attributes in process `syz.3.56'.
[   26.051664][  T287] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   26.065262][  T523] netlink: 20 bytes leftover after parsing attributes in process `syz.3.56'.
[   26.069646][  T287] usb 5-1: config 0 descriptor??
[   26.077740][  T407] usb 3-1: New USB device found, idVendor=1235, idProduct=8203, bcdDevice= 0.40
[   26.083248][  T523] netlink: 64 bytes leftover after parsing attributes in process `syz.3.56'.
[   26.094061][  T407] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   26.105782][  T523] incfs: Options parsing error. -22
[   26.108476][  T407] usb 3-1: Product: syz
[   26.113854][  T523] incfs: mount failed -22
[   26.117708][  T407] usb 3-1: Manufacturer: syz
[   26.117722][  T407] usb 3-1: SerialNumber: syz
[   26.123350][  T287] usb 5-1: bad CDC descriptors
[   26.197647][  T281] attempt to access beyond end of device
[   26.197647][  T281] loop0: rw=524288, want=45072, limit=40427
[   26.216095][  T281] attempt to access beyond end of device
[   26.216095][  T281] loop0: rw=0, want=45072, limit=40427
[   26.292962][  T526] F2FS-fs (loop3): Corrupted extension count (64 + 1 > 64)
[   26.304567][  T526] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[   26.314024][  T526] F2FS-fs (loop3): invalid crc value
[   26.320158][  T526] F2FS-fs (loop3): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[   26.341913][  T501] netlink: 12 bytes leftover after parsing attributes in process `syz.4.51'.
[   26.365885][  T526] F2FS-fs (loop3): Start checkpoint disabled!
[   26.366820][  T530] bridge0: port 1(bridge_slave_0) entered blocking state
[   26.372646][  T526] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[   26.379188][  T530] bridge0: port 1(bridge_slave_0) entered disabled state
[   26.386213][  T526] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[   26.393745][  T488] udc-core: couldn't find an available UDC or it's busy
[   26.410132][  T488] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[   26.411125][  T530] device bridge_slave_0 entered promiscuous mode
[   26.434990][  T530] bridge0: port 2(bridge_slave_1) entered blocking state
[   26.442101][  T530] bridge0: port 2(bridge_slave_1) entered disabled state
[   26.450497][  T530] device bridge_slave_1 entered promiscuous mode
[   26.465258][  T279] F2FS-fs (loop3): Inconsistent error blkaddr:5633, sit bitmap:0
[   26.473151][  T279] CPU: 1 PID: 279 Comm: syz-executor Not tainted syzkaller #0
[   26.480601][  T279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   26.490663][  T279] Call Trace:
[   26.493968][  T279]  __dump_stack+0x21/0x24
[   26.498284][  T279]  dump_stack_lvl+0x1a7/0x208
[   26.502931][  T279]  ? f2fs_get_next_page_offset+0x760/0x760
[   26.508707][  T279]  ? show_regs_print_info+0x18/0x18
[   26.513874][  T279]  dump_stack+0x15/0x1c
[   26.518000][  T279]  f2fs_is_valid_blkaddr+0xc2f/0x1330
[   26.523342][  T279]  f2fs_map_blocks+0xa2b/0x34e0
[   26.528180][  T279]  ? f2fs_do_map_lock+0x2e0/0x2e0
[   26.533177][  T279]  ? page_cache_sync_ra+0x250/0x2a0
[   26.538344][  T279]  ? f2fs_readdir+0x43e/0x970
[   26.542992][  T279]  ? xa_load+0x47d/0x490
[   26.547211][  T279]  f2fs_mpage_readpages+0xc02/0x1e20
[   26.552512][  T279]  ? has_enough_free_blks+0x2d0/0x2d0
[   26.557863][  T279]  ? __mod_memcg_state+0xc0/0x210
[   26.562855][  T279]  ? xas_nomem+0x6b/0x1d0
[   26.567174][  T279]  f2fs_readahead+0xfc/0x240
[   26.571743][  T279]  ? f2fs_set_data_page_dirty+0x6e0/0x6e0
[   26.577440][  T279]  read_pages+0x17b/0xb50
[   26.581745][  T279]  ? workingset_activation+0x250/0x250
[   26.587189][  T279]  ? gfp_pfmemalloc_allowed+0x130/0x130
[   26.592711][  T279]  ? page_cache_ra_unbounded+0x790/0x790
[   26.598325][  T279]  ? lru_cache_add+0x15f/0x380
[   26.603081][  T279]  page_cache_ra_unbounded+0x638/0x790
[   26.608530][  T279]  ? avc_has_perm+0x168/0x3d0
[   26.613187][  T279]  ? read_cache_pages_invalidate_pages+0x1c0/0x1c0
[   26.619669][  T279]  ? do_wp_page+0x9d8/0xd00
[   26.624155][  T279]  ondemand_readahead+0x780/0xbc0
[   26.629173][  T279]  page_cache_sync_ra+0x250/0x2a0
[   26.634182][  T279]  f2fs_readdir+0x43e/0x970
[   26.638663][  T279]  ? f2fs_fill_dentries+0xc90/0xc90
[   26.643846][  T279]  ? __kasan_check_write+0x14/0x20
[   26.648935][  T279]  iterate_dir+0x25c/0x560
[   26.653325][  T279]  ? f2fs_fill_dentries+0xc90/0xc90
[   26.658499][  T279]  __se_sys_getdents64+0xf2/0x250
[   26.663499][  T279]  ? __x64_sys_getdents64+0x90/0x90
[   26.668669][  T279]  ? filldir+0x660/0x660
[   26.672891][  T279]  ? debug_smp_processor_id+0x17/0x20
[   26.678234][  T279]  ? fpregs_assert_state_consistent+0xb1/0xe0
[   26.684271][  T279]  __x64_sys_getdents64+0x7b/0x90
[   26.689265][  T279]  do_syscall_64+0x31/0x40
[   26.693658][  T279]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   26.699522][  T279] RIP: 0033:0x7f51a514da73
[   26.703910][  T279] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8
[   26.723486][  T279] RSP: 002b:00007fff7a090fa8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9
[   26.731873][  T279] RAX: ffffffffffffffda RBX: 000055558e4b3910 RCX: 00007f51a514da73
[   26.739817][  T279] RDX: 0000000000008000 RSI: 000055558e4b3940 RDI: 0000000000000005
[   26.747761][  T279] RBP: 000055558e4b3940 R08: 00007f51a5379e20 R09: 0000000000000001
[   26.755707][  T279] R10: 0000000000000000 R11: 0000000000000293 R12: 000055558e4b3914
[   26.763655][  T279] R13: ffffffffffffffe8 R14: 0000000000000010 R15: 00007fff7a093250
[   26.771798][  T407] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found
[   26.780885][  T279] F2FS-fs (loop3): Inconsistent error blkaddr:5633, sit bitmap:0
[   26.790827][  T279] CPU: 1 PID: 279 Comm: syz-executor Not tainted syzkaller #0
[   26.798282][  T279] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   26.808326][  T279] Call Trace:
[   26.811619][  T279]  __dump_stack+0x21/0x24
[   26.815947][  T279]  dump_stack_lvl+0x1a7/0x208
[   26.817270][  T530] bridge0: port 2(bridge_slave_1) entered blocking state
[   26.820618][  T279]  ? f2fs_get_next_page_offset+0x760/0x760
[   26.820635][  T279]  ? show_regs_print_info+0x18/0x18
[   26.827651][  T530] bridge0: port 2(bridge_slave_1) entered forwarding state
[   26.833409][  T279]  ? mark_page_accessed+0x334/0x6c0
[   26.833419][  T279]  dump_stack+0x15/0x1c
[   26.833428][  T279]  f2fs_is_valid_blkaddr+0xc2f/0x1330
[   26.833441][  T279]  f2fs_get_read_data_page+0x417/0x7a0
[   26.838681][  T530] bridge0: port 1(bridge_slave_0) entered blocking state
[   26.845776][  T279]  ? f2fs_get_block+0x140/0x140
[   26.845786][  T279]  ? __kasan_check_read+0x11/0x20
[   26.845800][  T279]  f2fs_find_data_page+0x18f/0x3f0
[   26.850965][  T530] bridge0: port 1(bridge_slave_0) entered forwarding state
[   26.855086][  T279]  f2fs_readdir+0x457/0x970
[   26.855096][  T279]  ? f2fs_fill_dentries+0xc90/0xc90
[   26.855111][  T279]  ? __kasan_check_write+0x14/0x20
[   26.860699][  T407] usb 3-1: Focusrite Scarlett Gen 2 Mixer Driver disabled; use options snd_usb_audio vid=0x1235 pid=0x8203 device_setup=1 to enable and report any issues to g@b4.vu
[   26.865881][  T279]  iterate_dir+0x25c/0x560
[   26.865890][  T279]  ? f2fs_fill_dentries+0xc90/0xc90
[   26.865905][  T279]  __se_sys_getdents64+0xf2/0x250
[   26.879519][  T407] usb 3-1: USB disconnect, device number 2
[   26.882844][  T279]  ? __x64_sys_getdents64+0x90/0x90
[   26.882851][  T279]  ? filldir+0x660/0x660
[   26.882869][  T279]  ? debug_smp_processor_id+0x17/0x20
[   26.922203][  T530] device veth0_vlan entered promiscuous mode
[   26.926282][  T279]  ? fpregs_assert_state_consistent+0xb1/0xe0
[   26.926303][  T279]  __x64_sys_getdents64+0x7b/0x90
[   26.936297][  T530] device veth1_macvtap entered promiscuous mode
[   26.940880][  T279]  do_syscall_64+0x31/0x40
[   26.988922][  T279]  entry_SYSCALL_64_after_hwframe+0x61/0xcb
[   26.994789][  T279] RIP: 0033:0x7f51a514da73
[   26.999182][  T279] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8
[   27.018787][  T279] RSP: 002b:00007fff7a090fa8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9
[   27.027177][  T279] RAX: ffffffffffffffda RBX: 000055558e4b3910 RCX: 00007f51a514da73
[   27.035127][  T279] RDX: 0000000000008000 RSI: 000055558e4b3940 RDI: 0000000000000005
[   27.043076][  T279] RBP: 000055558e4b3940 R08: 00007f51a5379e20 R09: 0000000000000001
[   27.051023][  T279] R10: 0000000000000000 R11: 0000000000000293 R12: 000055558e4b3914
[   27.058969][  T279] R13: ffffffffffffffe8 R14: 0000000000000010 R15: 00007fff7a093250
[   27.080238][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   27.088013][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   27.096369][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   27.114342][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   27.122312][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   27.130506][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   27.138907][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   27.146810][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   27.154312][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   27.161858][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   27.180748][  T331] udevd[331]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   27.198340][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   27.199723][  T330] print_req_error: 339 callbacks suppressed
[   27.199736][  T330] blk_update_request: I/O error, dev loop2, sector 2056 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[   27.217425][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   27.233663][  T385] blk_update_request: I/O error, dev loop2, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[   27.235786][  T330] blk_update_request: I/O error, dev loop2, sector 2056 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   27.246719][  T304] blk_update_request: I/O error, dev loop2, sector 3072 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[   27.269452][  T389] blk_update_request: I/O error, dev loop2, sector 14720 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[   27.282312][  T390] blk_update_request: I/O error, dev loop2, sector 3072 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[   27.295527][   T49] attempt to access beyond end of device
[   27.295527][   T49] loop3: rw=2049, want=45104, limit=40427
[   27.295849][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   27.314749][  T390] blk_update_request: I/O error, dev loop2, sector 3072 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   27.315401][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   27.326300][  T385] blk_update_request: I/O error, dev loop2, sector 32640 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   27.334569][  T304] blk_update_request: I/O error, dev loop2, sector 3072 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   27.347306][  T389] blk_update_request: I/O error, dev loop2, sector 14720 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   27.356716][  T304] buffer_io_error: 269 callbacks suppressed
[   27.356724][  T304] Buffer I/O error on dev loop2p3, logical block 0, async page read
[   27.372025][  T330] Buffer I/O error on dev loop2p1, logical block 1, async page read
[   27.374135][  T304] Buffer I/O error on dev loop2p3, logical block 0, async page read
[   27.386806][  T390] Buffer I/O error on dev loop2p7, logical block 0, async page read
[   27.389868][  T385] Buffer I/O error on dev loop2p2, logical block 4080, async page read
[   27.397922][  T389] Buffer I/O error on dev loop2p6, logical block 11648, async page read
[   27.422373][  T389] Buffer I/O error on dev loop2p6, logical block 11649, async page read
[   27.431096][  T389] Buffer I/O error on dev loop2p6, logical block 11650, async page read
[   27.442140][  T304] Buffer I/O error on dev loop2p3, logical block 0, async page read
[   27.450672][  T301] usb 2-1: new low-speed USB device number 3 using dummy_hcd
[   27.459557][  T390] Buffer I/O error on dev loop2p7, logical block 0, async page read
[   27.523766][  T552] EXT4-fs (loop5): 1 truncate cleaned up
[   27.529668][  T552] EXT4-fs (loop5): mounted filesystem without journal. Opts: noload,stripe=0x000000000000030c,jqfmt=vfsv1,nojournal_checksum,jqfmt=vfsv1,usrjquota=,,errors=continue
[   27.588127][  T558] usb usb7: usbfs: process 558 (syz.2.65) did not claim interface 0 before use
[   27.835354][  T559] bridge0: port 1(bridge_slave_0) entered blocking state
[   27.842797][  T559] bridge0: port 1(bridge_slave_0) entered disabled state
[   27.861641][  T559] device bridge_slave_0 entered promiscuous mode
[   27.903072][    C1] Illegal XDP return value 16128, expect packet loss!
[   27.941264][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_0: link becomes ready
[   27.963508][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[   27.973465][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): bond_slave_1: link becomes ready
[   27.983744][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[   27.994280][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[   28.004403][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[   28.014350][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[   28.024088][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[   28.034745][  T559] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.041983][  T559] bridge0: port 2(bridge_slave_1) entered disabled state
[   28.052355][  T559] device bridge_slave_1 entered promiscuous mode
[   28.162182][  T303] device bridge_slave_1 left promiscuous mode
[   28.170848][  T303] bridge0: port 2(bridge_slave_1) entered disabled state
[   28.181104][  T303] device bridge_slave_0 left promiscuous mode
[   28.187744][  T303] bridge0: port 1(bridge_slave_0) entered disabled state
[   28.200111][  T303] device veth1_macvtap left promiscuous mode
[   28.206545][  T303] device veth0_vlan left promiscuous mode
[   28.212784][  T287] usb 6-1: new full-speed USB device number 2 using dummy_hcd
[   28.502564][  T301] usb 2-1: Invalid ep0 maxpacket: 16
[   28.550155][  T437] usb 5-1: USB disconnect, device number 3
[   28.579709][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   28.587366][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   28.603422][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   28.612144][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   28.630531][   T49] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.637708][   T49] bridge0: port 1(bridge_slave_0) entered forwarding state
[   28.646014][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   28.654398][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   28.662650][  T287] usb 6-1: not running at top speed; connect to a high speed hub
[   28.662748][  T301] usb 2-1: new low-speed USB device number 4 using dummy_hcd
[   28.670625][   T49] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.684827][   T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[   28.703944][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   28.713118][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   28.720800][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   28.730164][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   28.740705][  T559] device veth0_vlan entered promiscuous mode
[   28.746836][  T287] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   28.763085][  T287] usb 6-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00
[   28.772382][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   28.780735][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   28.788472][  T287] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   28.792552][   T15] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   28.796939][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   28.813596][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   28.821929][  T559] device veth1_macvtap entered promiscuous mode
[   28.834325][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   28.847366][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   28.854183][  T287] uvcvideo: Found UVC 1.00 device <unnamed> (046d:0825)
[   28.862811][  T287] uvcvideo: No streaming interface found for terminal 2.
[   28.881480][   T24] kauditd_printk_skb: 37 callbacks suppressed
[   28.881490][   T24] audit: type=1400 audit(1786196347.980:212): avc:  denied  { read write } for  pid=575 comm="syz.6.67" name="uhid" dev="devtmpfs" ino=261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[   28.882651][  T576] netlink: 'syz.6.67': attribute type 4 has an invalid length.
[   28.892945][   T24] audit: type=1400 audit(1786196347.980:213): avc:  denied  { open } for  pid=575 comm="syz.6.67" path="/dev/uhid" dev="devtmpfs" ino=261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[   28.949505][  T579] netlink: 'syz.6.67': attribute type 4 has an invalid length.
[   28.957738][  T301] usb 2-1: Invalid ep0 maxpacket: 16
[   28.963264][  T301] usb usb2-port1: attempt power cycle
[   28.972199][  T576] netlink: 'syz.6.67': attribute type 4 has an invalid length.
[   29.077424][   T55] usb 6-1: USB disconnect, device number 2
[   29.102649][   T15] usb 3-1: Using ep0 maxpacket: 16
[   29.305236][   T24] audit: type=1400 audit(1786196348.370:214): avc:  denied  { create } for  pid=580 comm="syz.6.72" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1
[   29.336961][  T587] EXT4-fs (loop5): mounted filesystem without journal. Opts: barrier,nodioread_nolock,nobarrier,barrier,block_validity,nodioread_nolock,nodelalloc,resuid=0x0000000000000000,init_itable=0x0000000000000006,,errors=continue
[   29.358535][  T587] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   29.372647][   T15] usb 3-1: unable to get BOS descriptor or descriptor too short
[   29.379944][  T587] EXT4-fs error (device loop5): ext4_map_blocks:742: inode #15: comm syz.5.73: lblock 0 mapped to illegal pblock 0 (length 1)
[   29.395605][   T24] audit: type=1400 audit(1786196348.500:215): avc:  denied  { map } for  pid=586 comm="syz.5.73" path="/1/file1/file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   29.396377][  T587] EXT4-fs error (device loop5): ext4_map_blocks:632: inode #15: comm syz.5.73: lblock 0 mapped to illegal pblock 0 (length 1)
[   29.431567][  T301] usb 2-1: new low-speed USB device number 5 using dummy_hcd
[   29.431706][   T24] audit: type=1400 audit(1786196348.500:216): avc:  denied  { execute } for  pid=586 comm="syz.5.73" path="/1/file1/file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   29.463174][  T587] EXT4-fs error (device loop5): ext4_map_blocks:632: inode #15: comm syz.5.73: lblock 0 mapped to illegal pblock 0 (length 1)
[   29.476902][  T586] EXT4-fs error (device loop5): ext4_map_blocks:632: inode #15: comm syz.5.73: lblock 0 mapped to illegal pblock 0 (length 1)
[   29.490488][  T586] EXT4-fs error (device loop5): ext4_map_blocks:632: inode #15: comm syz.5.73: lblock 0 mapped to illegal pblock 0 (length 1)
[   29.504713][  T587] EXT4-fs error (device loop5): ext4_map_blocks:632: inode #15: comm syz.5.73: lblock 0 mapped to illegal pblock 0 (length 1)
[   29.518825][  T587] EXT4-fs error (device loop5): ext4_map_blocks:632: inode #15: comm syz.5.73: lblock 0 mapped to illegal pblock 0 (length 1)
[   29.532817][   T15] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   29.533225][  T587] EXT4-fs error (device loop5): ext4_map_blocks:632: inode #15: comm syz.5.73: lblock 0 mapped to illegal pblock 0 (length 1)
[   29.556474][   T15] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[   29.556696][  T593] EXT4-fs error (device loop5): ext4_map_blocks:632: inode #15: comm syz.5.73: lblock 0 mapped to illegal pblock 0 (length 1)
[   29.580856][  T301] usb 2-1: Invalid ep0 maxpacket: 16
[   29.581306][  T593] EXT4-fs error (device loop5): ext4_map_blocks:632: inode #15: comm syz.5.73: lblock 0 mapped to illegal pblock 0 (length 1)
[   29.739717][   T24] audit: type=1400 audit(1786196348.840:217): avc:  denied  { execute } for  pid=594 comm="syz.4.74" name="file1" dev="tmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   29.761779][  T301] usb 2-1: new low-speed USB device number 6 using dummy_hcd
[   29.761833][   T24] audit: type=1400 audit(1786196348.840:218): avc:  denied  { execute_no_trans } for  pid=594 comm="syz.4.74" path="/7/file1" dev="tmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   29.802694][   T15] usb 3-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40
[   29.812388][   T24] audit: type=1400 audit(1786196348.910:219): avc:  denied  { unmount } for  pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[   29.849894][  T303] device bridge_slave_1 left promiscuous mode
[   29.856314][  T303] bridge0: port 2(bridge_slave_1) entered disabled state
[   29.863891][  T303] device bridge_slave_0 left promiscuous mode
[   29.870047][  T303] bridge0: port 1(bridge_slave_0) entered disabled state
[   29.878091][  T303] device veth1_macvtap left promiscuous mode
[   29.884158][  T303] device veth0_vlan left promiscuous mode
[   29.920865][   T15] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   29.931577][   T15] usb 3-1: Product: syz
[   29.935960][   T15] usb 3-1: Manufacturer: syz
[   29.940557][   T15] usb 3-1: SerialNumber: syz
[   30.005048][  T599] sch_tbf: burst 1520 is lower than device lo mtu (65550) !
[   30.032672][  T301] usb 2-1: Invalid ep0 maxpacket: 16
[   30.038021][  T301] usb usb2-port1: unable to enumerate USB device
[   30.144080][  T609] EXT4-fs (loop1): Ignoring removed oldalloc option
[   30.150971][  T609] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled
[   30.161716][  T609] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=2802c1a8, mo2=0003]
[   30.169937][  T609] System zones: 0-5
[   30.174753][  T609] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,oldalloc,inlinecrypt,delalloc,noinit_itable,norecovery,minixdf,nodioread_nolock,errors=remount-ro,jqfmt=vfsv0,min_batch_time=0x0000000000000001,debug,barrier=0x0000000000000003,
[   30.198805][   T15] usb 3-1: Audio class v2/v3 interfaces need an interface association
[   30.207244][   T15] snd-usb-audio: probe of 3-1:1.0 failed with error -22
[   30.218241][   T24] audit: type=1400 audit(1786196349.320:220): avc:  denied  { mounton } for  pid=608 comm="syz.1.80" path="/16/file0/file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   30.242598][  T407] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[   30.243858][   T24] audit: type=1400 audit(1786196349.350:221): avc:  denied  { rmdir } for  pid=280 comm="syz-executor" name="lost+found" dev="loop1" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   30.362637][  T578] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[   30.402624][   T15] usb 3-1: 2:1 : can't get High Capability descriptor
[   30.450164][  T614] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.457421][  T614] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.464788][  T614] device bridge_slave_0 entered promiscuous mode
[   30.473082][  T614] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.480105][  T614] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.487527][  T614] device bridge_slave_1 entered promiscuous mode
[   30.520792][  T614] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.527856][  T614] bridge0: port 2(bridge_slave_1) entered forwarding state
[   30.535142][  T614] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.542325][  T614] bridge0: port 1(bridge_slave_0) entered forwarding state
[   30.560207][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   30.568037][    T7] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.575557][    T7] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.586149][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   30.594306][    T7] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.601326][    T7] bridge0: port 1(bridge_slave_0) entered forwarding state
[   30.612316][   T20] usb 3-1: USB disconnect, device number 3
[   30.612331][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   30.627522][    T7] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.634602][    T7] bridge0: port 2(bridge_slave_1) entered forwarding state
[   30.646595][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   30.657374][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   30.665291][  T407] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[   30.672409][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   30.675101][  T407] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[   30.688046][  T614] device veth0_vlan entered promiscuous mode
[   30.699602][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   30.707572][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   30.715327][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   30.726510][  T614] device veth1_macvtap entered promiscuous mode
[   30.734816][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   30.745655][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   30.763577][  T578] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   30.774200][  T578] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 4
[   30.787627][  T578] usb 6-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00
[   30.796792][  T578] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   30.806940][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   30.844724][  T303] device bridge_slave_1 left promiscuous mode
[   30.855535][  T303] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.863099][  T407] usb 7-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00
[   30.872134][  T407] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   30.881946][  T407] usb 7-1: Product: syz
[   30.890760][  T407] usb 7-1: Manufacturer: syz
[   30.895534][  T407] usb 7-1: SerialNumber: syz
[   30.900934][  T303] device bridge_slave_0 left promiscuous mode
[   30.915023][  T303] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.933059][  T303] device veth1_macvtap left promiscuous mode
[   30.939271][  T303] device veth0_vlan left promiscuous mode
[   31.149171][  T642] device-mapper: ioctl: name not supplied when creating device
[   31.272582][  T387] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[   31.318648][  T652] tipc: Started in network mode
[   31.323581][  T652] tipc: Own node identity 4, cluster identity 4711
[   31.330093][  T652] tipc: 32-bit node address hash set to 4
[   31.572575][  T287] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[   31.592660][   T25] android_work: sent uevent USB_STATE=CONNECTED
[   31.652571][  T387] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   31.662732][  T387] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3
[   31.742618][  T387] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[   31.751722][  T387] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   31.759728][  T387] usb 8-1: SerialNumber: syz
[   31.852583][  T287] usb 1-1: Dual-Role OTG device on HNP port
[   31.872583][  T287] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 5.10
[   31.881700][  T287] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   31.903111][   T25] android_work: sent uevent USB_STATE=CONFIGURED
[   32.043081][  T387] usb 8-1: 0:2 : does not exist
[   32.051416][  T387] usb 8-1: USB disconnect, device number 2
[   32.232047][   T15] usb 7-1: USB disconnect, device number 2
[   32.251200][  T330] print_req_error: 290 callbacks suppressed
[   32.251209][  T330] blk_update_request: I/O error, dev loop2, sector 2056 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[   32.253844][  T385] blk_update_request: I/O error, dev loop2, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[   32.257742][  T331] udevd[331]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card2/controlC2/../uevent} for writing: No such file or directory
[   32.271255][  T304] blk_update_request: I/O error, dev loop2, sector 3072 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[   32.282745][  T385] blk_update_request: I/O error, dev loop2, sector 32640 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   32.296844][  T330] blk_update_request: I/O error, dev loop2, sector 2056 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   32.309649][  T389] blk_update_request: I/O error, dev loop2, sector 14720 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[   32.320897][  T304] blk_update_request: I/O error, dev loop2, sector 3072 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   32.333523][  T390] blk_update_request: I/O error, dev loop2, sector 3072 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[   32.343284][  T304] blk_update_request: I/O error, dev loop2, sector 3072 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   32.359414][  T389] blk_update_request: I/O error, dev loop2, sector 14720 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   32.365272][  T304] buffer_io_error: 233 callbacks suppressed
[   32.365280][  T304] Buffer I/O error on dev loop2p3, logical block 0, async page read
[   32.377418][  T390] Buffer I/O error on dev loop2p7, logical block 0, async page read
[   32.387060][  T304] Buffer I/O error on dev loop2p3, logical block 0, async page read
[   32.392895][  T390] Buffer I/O error on dev loop2p7, logical block 0, async page read
[   32.402125][  T304] Buffer I/O error on dev loop2p3, logical block 0, async page read
[   32.408972][  T389] Buffer I/O error on dev loop2p6, logical block 11648, async page read
[   32.417179][  T304] Buffer I/O error on dev loop2p3, logical block 0, async page read
[   32.424837][  T390] Buffer I/O error on dev loop2p7, logical block 0, async page read
[   32.433838][  T389] Buffer I/O error on dev loop2p6, logical block 11649, async page read
[   32.441351][  T390] Buffer I/O error on dev loop2p7, logical block 0, async page read
[   32.502587][  T287] usb 3-1: new full-speed USB device number 4 using dummy_hcd
[   32.637462][  T678] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   32.704893][  T682] F2FS-fs (loop6): fault_injection options not supported
[   32.712018][  T682] F2FS-fs (loop6): fault_type options not supported
[   32.725472][  T682] F2FS-fs (loop6): invalid crc value
[   32.735553][  T682] F2FS-fs (loop6): Found nat_bits in checkpoint
[   32.770099][  T682] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[   32.908508][  T559] attempt to access beyond end of device
[   32.908508][  T559] loop6: rw=2049, want=45104, limit=40427
[   32.966653][  T692] EXT4-fs (loop7): Test dummy encryption mode enabled
[   32.973613][  T287] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   32.990120][  T287] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   33.001057][  T692] EXT4-fs error (device loop7): ext4_expand_extra_isize_ea:2749: inode #11: comm syz.7.111: corrupted xattr block 95
[   33.010247][  T287] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   33.026232][  T287] usb 3-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00
[   33.035310][  T287] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   33.044234][  T287] usb 3-1: config 0 descriptor??
[   33.048815][  T692] EXT4-fs warning (device loop7): ext4_expand_extra_isize_ea:2799: Unable to expand inode 11. Delete some EAs or run e2fsck.
[   33.067903][  T692] EXT4-fs error (device loop7): ext4_validate_block_bitmap:429: comm syz.7.111: bg 0: block 7: invalid block bitmap
[   33.080658][  T692] EXT4-fs error (device loop7) in ext4_mb_clear_bb:5650: Corrupt filesystem
[   33.090028][  T692] EXT4-fs error (device loop7): ext4_xattr_delete_inode:2914: inode #11: comm syz.7.111: corrupted xattr block 95
[   33.118212][  T578] usb 6-1: USB disconnect, device number 3
[   33.156068][  T692] EXT4-fs warning (device loop7): ext4_evict_inode:305: xattr delete (err -117)
[   33.194761][  T692] EXT4-fs (loop7): 1 orphan inode deleted
[   33.212255][  T692] EXT4-fs (loop7): mounted filesystem without journal. Opts: test_dummy_encryption,nogrpid,,errors=continue
[   33.641707][  T287] hid-generic 0003:0457:07DA.0001: unknown main item tag 0x0
[   33.664743][  T287] hid-generic 0003:0457:07DA.0001: unknown main item tag 0x0
[   33.685856][  T287] hid-generic 0003:0457:07DA.0001: unknown main item tag 0x0
[   33.744912][  T287] hid-generic 0003:0457:07DA.0001: unknown main item tag 0x0
[   33.752357][  T287] hid-generic 0003:0457:07DA.0001: unknown main item tag 0x0
[   33.760005][  T287] hid-generic 0003:0457:07DA.0001: unknown main item tag 0x0
[   33.837052][  T719] netlink: 'syz.6.120': attribute type 12 has an invalid length.
[   33.845383][  T719] netlink: 'syz.6.120': attribute type 29 has an invalid length.
[   33.853130][  T719] netlink: 148 bytes leftover after parsing attributes in process `syz.6.120'.
[   33.913157][   T24] kauditd_printk_skb: 28 callbacks suppressed
[   33.913365][   T24] audit: type=1400 audit(1786196352.900:250): avc:  denied  { read } for  pid=718 comm="syz.6.120" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[   34.044433][  T730] erofs: (device loop6): erofs_superblock_csum_verify: invalid checksum 0xcd06164b, 0x02d6543f expected
[   34.056937][  T330] udevd[330]: incorrect erofs checksum on /dev/loop6
[   34.082601][   T24] audit: type=1400 audit(1786196352.900:251): avc:  denied  { open } for  pid=718 comm="syz.6.120" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[   34.110160][   T24] audit: type=1400 audit(1786196353.060:252): avc:  denied  { write } for  pid=723 comm="syz.6.123" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[   34.129541][   T24] audit: type=1400 audit(1786196353.070:253): avc:  denied  { mount } for  pid=721 comm="syz.5.122" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1
[   34.260154][   T24] audit: type=1400 audit(1786196353.350:254): avc:  denied  { append } for  pid=734 comm="syz.4.128" name="001" dev="devtmpfs" ino=177 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[   34.267612][  T287] hid-generic 0003:0457:07DA.0001: unknown main item tag 0x0
[   34.290311][  T287] hid-generic 0003:0457:07DA.0001: unknown main item tag 0x0
[   34.297927][  T287] hid-generic 0003:0457:07DA.0001: unknown main item tag 0x0
[   34.305356][  T287] hid-generic 0003:0457:07DA.0001: unknown main item tag 0x0
[   34.306849][   T24] audit: type=1400 audit(1786196353.390:255): avc:  denied  { unmount } for  pid=559 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   34.313921][  T287] hid-generic 0003:0457:07DA.0001: unknown main item tag 0x0
[   34.340110][  T287] hid-generic 0003:0457:07DA.0001: unknown main item tag 0x0
[   34.347728][  T287] hid-generic 0003:0457:07DA.0001: unknown main item tag 0x0
[   34.355269][  T287] hid-generic 0003:0457:07DA.0001: unknown main item tag 0x0
[   34.362550][  T578] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[   34.362723][  T287] hid-generic 0003:0457:07DA.0001: unknown main item tag 0x0
[   34.377561][  T287] hid-generic 0003:0457:07DA.0001: unknown main item tag 0x0
[   34.385068][  T287] hid-generic 0003:0457:07DA.0001: unknown main item tag 0x0
[   34.392557][  T287] hid-generic 0003:0457:07DA.0001: unknown main item tag 0x0
[   34.400079][  T287] hid-generic 0003:0457:07DA.0001: unknown main item tag 0x0
[   34.407832][  T287] hid-generic 0003:0457:07DA.0001: unknown main item tag 0x0
[   34.415367][  T287] hid-generic 0003:0457:07DA.0001: unknown main item tag 0x0
[   34.423834][  T287] hid-generic 0003:0457:07DA.0001: unknown main item tag 0x0
[   34.431350][  T287] hid-generic 0003:0457:07DA.0001: unknown main item tag 0x0
[   34.439631][  T287] hid-generic 0003:0457:07DA.0001: unknown main item tag 0x0
[   34.447499][  T287] hid-generic 0003:0457:07DA.0001: unknown main item tag 0x0
[   34.455626][  T287] hid-generic 0003:0457:07DA.0001: unknown main item tag 0x0
[   34.588478][  T287] hid-generic 0003:0457:07DA.0001: unknown main item tag 0x0
[   34.742886][  T287] hid-generic 0003:0457:07DA.0001: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.2-1/input0
[   34.758026][  T287] usb 3-1: USB disconnect, device number 4
[   34.777083][  T743] bridge0: port 1(bridge_slave_0) entered blocking state
[   34.784159][  T743] bridge0: port 1(bridge_slave_0) entered disabled state
[   34.791620][  T743] device bridge_slave_0 entered promiscuous mode
[   34.798836][  T743] bridge0: port 2(bridge_slave_1) entered blocking state
[   34.806092][  T743] bridge0: port 2(bridge_slave_1) entered disabled state
[   34.813737][  T743] device bridge_slave_1 entered promiscuous mode
[   34.872116][  T743] bridge0: port 2(bridge_slave_1) entered blocking state
[   34.879365][  T743] bridge0: port 2(bridge_slave_1) entered forwarding state
[   34.886695][  T743] bridge0: port 1(bridge_slave_0) entered blocking state
[   34.893739][  T743] bridge0: port 1(bridge_slave_0) entered forwarding state
[   34.911791][  T748] fido_id[748]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory
[   35.025122][   T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   35.032925][   T49] bridge0: port 1(bridge_slave_0) entered disabled state
[   35.040313][   T49] bridge0: port 2(bridge_slave_1) entered disabled state
[   35.048346][   T24] audit: type=1400 audit(1786196354.150:256): avc:  denied  { setattr } for  pid=741 comm="syz.2.133" name="/" dev="configfs" ino=14159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   35.142265][   T24] audit: type=1400 audit(1786196354.240:257): avc:  denied  { create } for  pid=753 comm="syz.4.134" dev="anon_inodefs" ino=18820 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   35.213812][   T24] audit: type=1400 audit(1786196354.270:258): avc:  denied  { ioctl } for  pid=753 comm="syz.4.134" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=18820 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1
[   35.263460][  T578] usb 6-1: Using ep0 maxpacket: 32
[   35.284114][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   35.295392][    T7] bridge0: port 1(bridge_slave_0) entered blocking state
[   35.302449][    T7] bridge0: port 1(bridge_slave_0) entered forwarding state
[   35.364522][  T546] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   35.372793][  T546] bridge0: port 2(bridge_slave_1) entered blocking state
[   35.379835][  T546] bridge0: port 2(bridge_slave_1) entered forwarding state
[   35.387996][  T546] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   35.402573][  T578] usb 6-1: config 6 has an invalid interface number: 132 but max is 0
[   35.410746][  T578] usb 6-1: config 6 has no interface number 0
[   35.417578][  T578] usb 6-1: config 6 interface 132 altsetting 6 endpoint 0xA has an invalid bInterval 248, changing to 7
[   35.429396][  T578] usb 6-1: config 6 interface 132 altsetting 6 has an invalid endpoint with address 0xAD, skipping
[   35.440935][  T578] usb 6-1: config 6 interface 132 has no altsetting 0
[   35.450517][  T546] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   35.458650][  T546] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   35.471195][  T743] device veth0_vlan entered promiscuous mode
[   35.477512][  T546] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   35.485818][  T546] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   35.494174][  T546] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   35.501957][  T546] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   35.510408][  T546] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[   35.517977][  T546] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[   35.529984][  T546] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   35.538081][  T546] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   35.547189][  T743] device veth1_macvtap entered promiscuous mode
[   35.556227][  T546] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[   35.564003][  T546] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   35.572196][  T546] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   35.583026][  T546] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   35.591205][  T546] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   35.605421][   T24] audit: type=1400 audit(1786196354.710:259): avc:  denied  { mounton } for  pid=743 comm="syz-executor" path="/root/syzkaller.XynLOV/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[   35.632710][  T578] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a4, bcdDevice=d3.7e
[   35.644284][  T578] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   35.653145][  T578] usb 6-1: Product: syz
[   35.657291][  T578] usb 6-1: Manufacturer: syz
[   35.661852][  T578] usb 6-1: SerialNumber: syz
[   35.693024][  T303] device bridge_slave_1 left promiscuous mode
[   35.699195][  T303] bridge0: port 2(bridge_slave_1) entered disabled state
[   35.706736][  T303] device bridge_slave_0 left promiscuous mode
[   35.712900][  T437] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   35.712949][  T303] bridge0: port 1(bridge_slave_0) entered disabled state
[   35.728103][  T303] device veth1_macvtap left promiscuous mode
[   35.734147][  T303] device veth0_vlan left promiscuous mode
[   35.906359][  T773] netlink: 4 bytes leftover after parsing attributes in process `syz.7.142'.
[   35.918711][  T773] bridge0: port 1(bridge_slave_0) entered disabled state
[   35.928625][  T773] device bridge_slave_0 left promiscuous mode
[   35.935465][  T773] bridge0: port 1(bridge_slave_0) entered disabled state
[   35.942948][  T611] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[   35.953574][  T437] usb 3-1: Using ep0 maxpacket: 16
[   35.984828][  T578] usb 6-1: USB disconnect, device number 4
[   36.083014][  T437] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[   36.091120][  T437] usb 3-1: config 0 has no interface number 0
[   36.097340][  T437] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0
[   36.182581][  T437] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[   36.190627][  T437] usb 3-1: config 0 has no interface number 0
[   36.196734][  T437] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0
[   36.212533][  T611] usb 9-1: Using ep0 maxpacket: 16
[   36.362596][  T437] usb 3-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d
[   36.371681][  T437] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   36.372604][  T611] usb 9-1: config 0 has an invalid interface number: 34 but max is 0
[   36.379868][  T437] usb 3-1: Product: syz
[   36.387969][  T611] usb 9-1: config 0 has no interface number 0
[   36.392118][  T437] usb 3-1: Manufacturer: syz
[   36.398167][  T611] usb 9-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[   36.403036][  T437] usb 3-1: SerialNumber: syz
[   36.413257][  T611] usb 9-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[   36.421444][  T437] usb 3-1: config 0 descriptor??
[   36.463244][  T437] snd-usb-audio: probe of 3-1:0.1 failed with error -2
[   36.602630][  T611] usb 9-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[   36.611908][  T611] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   36.619910][  T611] usb 9-1: Product: syz
[   36.624114][  T611] usb 9-1: Manufacturer: syz
[   36.628683][  T611] usb 9-1: SerialNumber: syz
[   36.633857][  T611] usb 9-1: config 0 descriptor??
[   36.652584][  T766] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[   36.659612][  T766] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[   36.690982][  T584] usb 3-1: USB disconnect, device number 5
[   36.722563][   T20] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[   36.874442][  T766] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[   36.881500][  T766] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[   36.894143][  T803] EXT4-fs (loop7): mounted filesystem without journal. Opts: quota,noload,init_itable,,errors=continue
[   36.905394][  T803] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   36.919971][  T803] EXT4-fs error (device loop7): ext4_mb_generate_buddy:824: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[   36.935120][  T802] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[   36.947368][  T802] EXT4-fs (loop7): This should not happen!! Data will be lost
[   36.947368][  T802] 
[   36.957019][  T802] EXT4-fs (loop7): Total free blocks count 0
[   36.963646][  T802] EXT4-fs (loop7): Free/Dirty block details
[   36.969549][  T802] EXT4-fs (loop7): free_blocks=65281
[   36.974918][  T802] EXT4-fs (loop7): dirty_blocks=1
[   36.979937][  T802] EXT4-fs (loop7): Block reservation details
[   36.986148][  T802] EXT4-fs (loop7): i_reserved_data_blocks=1
[   37.112575][   T20] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   37.112594][  T611] asix 9-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random
[   37.123674][   T20] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[   37.142321][   T20] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   37.153684][   T20] usb 6-1: config 0 descriptor??
[   37.274581][  T304] print_req_error: 115 callbacks suppressed
[   37.274595][  T304] blk_update_request: I/O error, dev loop2, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[   37.274614][  T385] blk_update_request: I/O error, dev loop2, sector 2056 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   37.280981][  T304] blk_update_request: I/O error, dev loop2, sector 32640 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   37.293417][  T389] blk_update_request: I/O error, dev loop2, sector 3072 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[   37.306321][  T321] blk_update_request: I/O error, dev loop2, sector 3072 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[   37.314924][  T389] blk_update_request: I/O error, dev loop2, sector 3072 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   37.326530][  T390] blk_update_request: I/O error, dev loop2, sector 14720 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[   37.363193][  T389] blk_update_request: I/O error, dev loop2, sector 3072 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   37.374626][  T389] buffer_io_error: 88 callbacks suppressed
[   37.374636][  T389] Buffer I/O error on dev loop2p3, logical block 0, async page read
[   37.401453][  T389] blk_update_request: I/O error, dev loop2, sector 3072 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   37.416547][  T389] Buffer I/O error on dev loop2p3, logical block 0, async page read
[   37.425289][  T304] Buffer I/O error on dev loop2p2, logical block 4080, async page read
[   37.434283][  T385] Buffer I/O error on dev loop2p1, logical block 1, async page read
[   37.442998][  T389] blk_update_request: I/O error, dev loop2, sector 3072 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   37.455621][  T321] Buffer I/O error on dev loop2p7, logical block 0, async page read
[   37.475809][  T321] Buffer I/O error on dev loop2p7, logical block 0, async page read
[   37.488641][  T389] Buffer I/O error on dev loop2p3, logical block 0, async page read
[   37.494781][  T390] Buffer I/O error on dev loop2p6, logical block 11648, async page read
[   37.502784][   T20] usbhid 6-1:0.0: can't add hid device: -71
[   37.505175][  T390] Buffer I/O error on dev loop2p6, logical block 11649, async page read
[   37.519523][  T390] Buffer I/O error on dev loop2p6, logical block 11650, async page read
[   37.527949][   T20] usbhid: probe of 6-1:0.0 failed with error -71
[   37.536854][   T20] usb 6-1: USB disconnect, device number 5
[   37.971311][  T826] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue
[   37.981416][  T826] ext4 filesystem being mounted at /11/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   38.072561][   T20] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[   38.207182][  T832] kvm [831]: vcpu0, guest rIP: 0x1b8 disabled perfctr wrmsr: 0xc2 data 0x0
[   38.409804][  T844] mtrr: base(0x3000) is not aligned on a size(0x0000) boundary
[   38.494067][   T20] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   38.505398][   T20] usb 6-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40
[   38.514479][   T20] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   38.524699][   T20] usb 6-1: config 0 descriptor??
[   38.610396][  T849] overlayfs: overlapping lowerdir path
[   38.620557][  T849] overlayfs: "xino=on" is useless with all layers on same fs, ignore.
[   38.628861][  T849] overlayfs: overlapping lowerdir path
[   39.104113][   T24] kauditd_printk_skb: 6 callbacks suppressed
[   39.104131][   T24] audit: type=1400 audit(1786196358.210:266): avc:  denied  { create } for  pid=854 comm="syz.4.168" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   39.363334][  T801] udc-core: couldn't find an available UDC or it's busy
[   39.370353][  T801] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[   39.443354][  T861] netlink: 8 bytes leftover after parsing attributes in process `syz.4.169'.
[   39.452863][  T861] netlink: 8 bytes leftover after parsing attributes in process `syz.4.169'.
[   39.461738][  T861] netlink: 8 bytes leftover after parsing attributes in process `syz.4.169'.
[   39.470650][  T861] netlink: 8 bytes leftover after parsing attributes in process `syz.4.169'.
[   39.515996][  T848] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities
[   39.529334][  T861] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xa9436649, utbl_chksum : 0xe619d30d)
[   39.546722][   T24] audit: type=1400 audit(1786196358.650:267): avc:  denied  { write } for  pid=857 comm="syz.4.169" name="file2" dev="loop4" ino=1048610 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   39.557663][  T864] netlink: 204 bytes leftover after parsing attributes in process `syz.7.170'.
[   39.569532][  T861] exFAT-fs (loop4): hint_cluster is invalid (17)
[   39.596912][  T861] exFAT-fs (loop4): error, invalid access to FAT (entry 0xffffffff)
[   39.605073][  T861] exFAT-fs (loop4): Filesystem has been set read-only
[   39.622673][   T20] aiptek 6-1:0.0: Aiptek using 400 ms programming speed
[   39.632601][   T20] input: Aiptek as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input4
[   39.644748][   T24] audit: type=1400 audit(1786196358.750:268): avc:  denied  { read } for  pid=80 comm="acpid" name="event3" dev="devtmpfs" ino=611 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   39.667082][   T24] audit: type=1400 audit(1786196358.750:269): avc:  denied  { open } for  pid=80 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=611 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   39.691793][   T24] audit: type=1400 audit(1786196358.750:270): avc:  denied  { ioctl } for  pid=80 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=611 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   39.702601][  T611] asix 9-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[   39.727083][  T611] asix 9-1:0.34 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9
[   39.813208][  T611] asix: probe of 9-1:0.34 failed with error -71
[   39.849857][  T611] usb 9-1: USB disconnect, device number 2
[   39.904751][   T24] audit: type=1400 audit(1786196359.010:271): avc:  denied  { append } for  pid=869 comm="syz.7.173" name="loop5" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   40.329150][   T24] audit: type=1326 audit(1786196359.430:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=883 comm="syz.7.179" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e235ea0d9 code=0x7ffc0000
[   40.367532][  T887] kvm: pic: single mode not supported
[   40.367895][  T887] kvm: pic: single mode not supported
[   40.373334][  T887] kvm: pic: level sensitive irq not supported
[   40.375907][   T24] audit: type=1326 audit(1786196359.440:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=883 comm="syz.7.179" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f6e235ea0d9 code=0x7ffc0000
[   40.399252][  T887] kvm: pic: single mode not supported
[   40.409473][    C1] ================================================================================
[   40.409485][    C1] UBSAN: array-index-out-of-bounds in drivers/input/tablet/aiptek.c:741:31
[   40.409493][    C1] index 68 is out of range for type 'const int[34]'
[   40.409504][    C1] CPU: 1 PID: 24 Comm: kauditd Not tainted syzkaller #0
[   40.409512][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   40.409516][    C1] Call Trace:
[   40.409520][    C1]  <IRQ>
[   40.409538][    C1]  __dump_stack+0x21/0x24
[   40.409548][    C1]  dump_stack_lvl+0x1a7/0x208
[   40.409567][    C1]  ? show_regs_print_info+0x18/0x18
[   40.415075][  T887] kvm: pic: level sensitive irq not supported
[   40.424279][    C1]  dump_stack+0x15/0x1c
[   40.424292][    C1]  ubsan_epilogue+0xe/0x40
[   40.424304][    C1]  __ubsan_handle_out_of_bounds+0xdf/0xf0
[   40.424329][    C1]  aiptek_irq+0x1fa2/0x2860
[   40.453456][  T887] kvm: pic: level sensitive irq not supported
[   40.456408][    C1]  __usb_hcd_giveback_urb+0x32f/0x4f0
[   40.456426][    C1]  usb_hcd_giveback_urb+0x11d/0x3f0
[   40.465295][  T887] kvm: pic: single mode not supported
[   40.466832][    C1]  ? _raw_spin_unlock+0x4d/0x70
[   40.466852][    C1]  ? usb_hcd_unlink_urb_from_ep+0x10e/0x120
[   40.471521][  T887] kvm: pic: level sensitive irq not supported
[   40.476684][    C1]  dummy_timer+0xa34/0x31d0
[   40.476703][    C1]  ? dummy_free_streams+0x5c0/0x5c0
[   40.476716][    C1]  ? dummy_free_streams+0x5c0/0x5c0
[   40.476727][    C1]  call_timer_fn+0x38/0x290
[   40.476743][    C1]  ? dummy_free_streams+0x5c0/0x5c0
[   40.494901][  T887] kvm: pic: single mode not supported
[   40.497008][    C1]  __run_timers+0x637/0x9a0
[   40.497026][    C1]  ? calc_index+0x200/0x200
[   40.501500][  T887] kvm: pic: level sensitive irq not supported
[   40.507535][    C1]  ? sched_clock_cpu+0x1b/0x3d0
[   40.507547][    C1]  run_timer_softirq+0x6a/0xf0
[   40.507559][    C1]  __do_softirq+0x255/0x563
[   40.507573][    C1]  ? __this_cpu_preempt_check+0x13/0x20
[   40.507584][    C1]  asm_call_irq_on_stack+0xf/0x20
[   40.507588][    C1]  </IRQ>
[   40.507599][    C1]  do_softirq_own_stack+0x60/0x80
[   40.507610][    C1]  __irq_exit_rcu+0x128/0x150
[   40.507627][    C1]  irq_exit_rcu+0x9/0x10
[   40.514965][  T887] kvm: pic: single mode not supported
[   40.518147][    C1]  sysvec_apic_timer_interrupt+0xbf/0xe0
[   40.518165][    C1]  asm_sysvec_apic_timer_interrupt+0x12/0x20
[   40.523539][  T887] kvm: pic: level sensitive irq not supported
[   40.528333][    C1] RIP: 0010:console_unlock+0x10b7/0x10d0
[   40.528342][    C1] Code: c3 e8 1d 6f 17 00 eb 98 e8 16 6f 17 00 eb 91 e8 0f 6f 17 00 c6 05 28 07 9d 05 00 e8 33 55 00 00 48 89 5c 24 58 ff 74 24 58 9d <e9> 71 ff ff ff e8 ef 6e 17 00 e9 19 ff ff ff e8 a5 59 2f 03 0f 1f
[   40.528355][    C1] RSP: 0018:ffffc9000019f7c0 EFLAGS: 00000293
[   40.534746][  T887] kvm: pic: single mode not supported
[   40.540366][    C1] 
[   40.540377][    C1] RAX: ffffffff814d8c19 RBX: 0000000000000293 RCX: ffff8881002fbb40
[   40.540383][    C1] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 00000000ffffffff
[   40.540397][    C1] RBP: ffffc9000019fa90 R08: 0000000000000003 R09: 0000000000000004
[   40.544914][  T887] kvm: pic: level sensitive irq not supported
[   40.550054][    C1] R10: dffffc0000000000 R11: fffff52000033ee8 R12: dffffc0000000000
[   40.555774][  T887] kvm: pic: single mode not supported
[   40.559693][    C1] R13: fffff52000033f08 R14: 0000000000000000 R15: 0000000000000000
[   40.559710][    C1]  ? __printk_safe_exit+0x9/0x20
[   40.559727][    C1]  ? vprintk_emit+0x340/0x340
[   40.564910][  T887] kvm: pic: level sensitive irq not supported
[   40.570239][    C1]  ? kvm_sched_clock_read+0x18/0x40
[   40.570249][    C1]  ? sched_clock+0x3a/0x40
[   40.570266][    C1]  ? sched_clock_cpu+0x1b/0x3d0
[   40.575472][  T887] kvm: pic: single mode not supported
[   40.579215][    C1]  ? sched_clock+0x3a/0x40
[   40.579224][    C1]  ? sched_clock_cpu+0x1b/0x3d0
[   40.579244][    C1]  ? debug_smp_processor_id+0x17/0x20
[   40.585322][  T887] kvm: pic: level sensitive irq not supported
[   40.590114][    C1]  ? sysvec_apic_timer_interrupt+0xcb/0xe0
[   40.590131][    C1]  ? __printk_safe_exit+0x9/0x20
[   40.595627][  T887] kvm: pic: single mode not supported
[   40.599343][    C1]  vprintk_emit+0x1a3/0x340
[   40.599354][    C1]  ? vprintk_store+0xb80/0xb80
[   40.599373][    C1]  ? __kasan_check_write+0x14/0x20
[   40.604901][  T887] kvm: pic: level sensitive irq not supported
[   40.609907][    C1]  ? _raw_spin_trylock+0xb7/0x150
[   40.609920][    C1]  ? __lock_text_start+0x8/0x8
[   40.609932][    C1]  vprintk_default+0x26/0x30
[   40.609952][    C1]  vprintk_func+0x1a3/0x1e0
[   40.850688][    C1]  printk+0xda/0x130
[   40.854563][    C1]  ? thaw_kernel_threads+0x220/0x220
[   40.859826][    C1]  kauditd_hold_skb+0x1bc/0x210
[   40.864651][    C1]  ? kauditd_send_queue+0x2e0/0x2e0
[   40.869821][    C1]  ? auditd_conn_free+0xe0/0xe0
[   40.874644][    C1]  kauditd_send_queue+0x28c/0x2e0
[   40.879640][    C1]  ? auditd_conn_free+0xe0/0xe0
[   40.884486][    C1]  ? kauditd_send_queue+0x2e0/0x2e0
[   40.889657][    C1]  ? auditd_conn_free+0xe0/0xe0
[   40.894484][    C1]  kauditd_thread+0x4e4/0x870
[   40.899142][    C1]  ? _raw_spin_lock+0xf0/0xf0
[   40.903791][    C1]  ? audit_log+0x160/0x160
[   40.908186][    C1]  ? io_schedule+0xe0/0xe0
[   40.912578][    C1]  ? __kasan_check_read+0x11/0x20
[   40.917577][    C1]  ? __kthread_parkme+0xb3/0x1b0
[   40.922501][    C1]  kthread+0x324/0x3b0
[   40.926544][    C1]  ? audit_log+0x160/0x160
[   40.930933][    C1]  ? kthread_blkcg+0xd0/0xd0
[   40.935499][    C1]  ret_from_fork+0x1f/0x30
[   40.939890][    C1] ================================================================================
[   40.949147][    C1] ================================================================================
[   40.958399][    C1] UBSAN: array-index-out-of-bounds in drivers/input/tablet/aiptek.c:763:30
[   40.966959][    C1] index 69 is out of range for type 'const int[34]'
[   40.973524][    C1] CPU: 1 PID: 24 Comm: kauditd Not tainted syzkaller #0
[   40.980463][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[   40.990495][    C1] Call Trace:
[   40.993756][    C1]  <IRQ>
[   40.996597][    C1]  __dump_stack+0x21/0x24
[   41.000904][    C1]  dump_stack_lvl+0x1a7/0x208
[   41.005559][    C1]  ? show_regs_print_info+0x18/0x18
[   41.010735][    C1]  dump_stack+0x15/0x1c
[   41.014867][    C1]  ubsan_epilogue+0xe/0x40
[   41.019263][    C1]  __ubsan_handle_out_of_bounds+0xdf/0xf0
[   41.024963][    C1]  aiptek_irq+0x1e71/0x2860
[   41.029449][    C1]  __usb_hcd_giveback_urb+0x32f/0x4f0
[   41.034798][    C1]  usb_hcd_giveback_urb+0x11d/0x3f0
[   41.039980][    C1]  ? _raw_spin_unlock+0x4d/0x70
[   41.044811][    C1]  ? usb_hcd_unlink_urb_from_ep+0x10e/0x120
[   41.050682][    C1]  dummy_timer+0xa34/0x31d0
[   41.055171][    C1]  ? dummy_free_streams+0x5c0/0x5c0
[   41.060350][    C1]  ? dummy_free_streams+0x5c0/0x5c0
[   41.065524][    C1]  call_timer_fn+0x38/0x290
[   41.070002][    C1]  ? dummy_free_streams+0x5c0/0x5c0
[   41.075176][    C1]  __run_timers+0x637/0x9a0
[   41.079657][    C1]  ? calc_index+0x200/0x200
[   41.084135][    C1]  ? sched_clock_cpu+0x1b/0x3d0
[   41.088961][    C1]  run_timer_softirq+0x6a/0xf0
[   41.093719][    C1]  __do_softirq+0x255/0x563
[   41.098201][    C1]  ? __this_cpu_preempt_check+0x13/0x20
[   41.103721][    C1]  asm_call_irq_on_stack+0xf/0x20
[   41.108740][    C1]  </IRQ>
[   41.111678][    C1]  do_softirq_own_stack+0x60/0x80
[   41.116700][    C1]  __irq_exit_rcu+0x128/0x150
[   41.121351][    C1]  irq_exit_rcu+0x9/0x10
[   41.125574][    C1]  sysvec_apic_timer_interrupt+0xbf/0xe0
[   41.131185][    C1]  asm_sysvec_apic_timer_interrupt+0x12/0x20
[   41.137143][    C1] RIP: 0010:console_unlock+0x10b7/0x10d0
[   41.142755][    C1] Code: c3 e8 1d 6f 17 00 eb 98 e8 16 6f 17 00 eb 91 e8 0f 6f 17 00 c6 05 28 07 9d 05 00 e8 33 55 00 00 48 89 5c 24 58 ff 74 24 58 9d <e9> 71 ff ff ff e8 ef 6e 17 00 e9 19 ff ff ff e8 a5 59 2f 03 0f 1f
[   41.162339][    C1] RSP: 0018:ffffc9000019f7c0 EFLAGS: 00000293
[   41.168386][    C1] RAX: ffffffff814d8c19 RBX: 0000000000000293 RCX: ffff8881002fbb40
[   41.176359][    C1] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 00000000ffffffff
[   41.184309][    C1] RBP: ffffc9000019fa90 R08: 0000000000000003 R09: 0000000000000004
[   41.192270][    C1] R10: dffffc0000000000 R11: fffff52000033ee8 R12: dffffc0000000000
[   41.200221][    C1] R13: fffff52000033f08 R14: 0000000000000000 R15: 0000000000000000
[   41.208187][    C1]  ? __printk_safe_exit+0x9/0x20
[   41.213280][    C1]  ? vprintk_emit+0x340/0x340
[   41.217937][    C1]  ? kvm_sched_clock_read+0x18/0x40
[   41.223130][    C1]  ? sched_clock+0x3a/0x40
[   41.227525][    C1]  ? sched_clock_cpu+0x1b/0x3d0
[   41.232352][    C1]  ? sched_clock+0x3a/0x40
[   41.236745][    C1]  ? sched_clock_cpu+0x1b/0x3d0
[   41.241573][    C1]  ? debug_smp_processor_id+0x17/0x20
[   41.246922][    C1]  ? sysvec_apic_timer_interrupt+0xcb/0xe0
[   41.252712][    C1]  ? __printk_safe_exit+0x9/0x20
[   41.257628][    C1]  vprintk_emit+0x1a3/0x340
[   41.262107][    C1]  ? vprintk_store+0xb80/0xb80
[   41.266852][    C1]  ? __kasan_check_write+0x14/0x20
[   41.271941][    C1]  ? _raw_spin_trylock+0xb7/0x150
[   41.276940][    C1]  ? __lock_text_start+0x8/0x8
[   41.281683][    C1]  vprintk_default+0x26/0x30
[   41.286251][    C1]  vprintk_func+0x1a3/0x1e0
[   41.290734][    C1]  printk+0xda/0x130
[   41.294608][    C1]  ? thaw_kernel_threads+0x220/0x220
[   41.299871][    C1]  kauditd_hold_skb+0x1bc/0x210
[   41.304696][    C1]  ? kauditd_send_queue+0x2e0/0x2e0
[   41.309866][    C1]  ? auditd_conn_free+0xe0/0xe0
[   41.314692][    C1]  kauditd_send_queue+0x28c/0x2e0
[   41.319693][    C1]  ? auditd_conn_free+0xe0/0xe0
[   41.324520][    C1]  ? kauditd_send_queue+0x2e0/0x2e0
[   41.329693][    C1]  ? auditd_conn_free+0xe0/0xe0
[   41.334517][    C1]  kauditd_thread+0x4e4/0x870
[   41.339170][    C1]  ? _raw_spin_lock+0xf0/0xf0
[   41.343824][    C1]  ? audit_log+0x160/0x160
[   41.348215][    C1]  ? io_schedule+0xe0/0xe0
[   41.352616][    C1]  ? __kasan_check_read+0x11/0x20
[   41.357623][    C1]  ? __kthread_parkme+0xb3/0x1b0
[   41.362536][    C1]  kthread+0x324/0x3b0
[   41.366579][    C1]  ? audit_log+0x160/0x160
[   41.370969][    C1]  ? kthread_blkcg+0xd0/0xd0
[   41.375535][    C1]  ret_from_fork+0x1f/0x30
[   41.379926][    C1] ================================================================================
[   41.391383][   T24] audit: type=1326 audit(1786196359.440:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=883 comm="syz.7.179" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e235ea0d9 code=0x7ffc0000
[   41.396461][  T387] usb 6-1: USB disconnect, device number 6
[   41.421392][   T24] audit: type=1326 audit(1786196359.440:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=883 comm="syz.7.179" exe="/root/ci2-android-5-10/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f6e235ea0d9 code=0x7ffc0000
[   41.532546][   T20] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[   41.902636][   T20] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   41.913555][   T20] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[   41.922583][   T20] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   41.930946][   T20] usb 3-1: config 0 descriptor??
[   42.413088][   T20] keytouch 0003:0926:3333.0002: fixing up Keytouch IEC report descriptor
[   42.422374][   T20] input: HID 0926:3333 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0926:3333.0002/input/input5
[   42.504403][   T20] keytouch 0003:0926:3333.0002: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.2-1/input0
[   42.942567][    C1] keytouch 0003:0926:3333.0002: Event data for report 0 was too short (8 vs 1)
[   43.145184][   T20] usb 3-1: USB disconnect, device number 6
[   43.658461][  T331] print_req_error: 164 callbacks suppressed
[   43.658475][  T331] blk_update_request: I/O error, dev loop2, sector 2056 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[   43.658495][  T330] blk_update_request: I/O error, dev loop2, sector 32640 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   43.664613][  T331] blk_update_request: I/O error, dev loop2, sector 2056 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   43.675961][  T330] buffer_io_error: 129 callbacks suppressed
[   43.675970][  T330] Buffer I/O error on dev loop2p2, logical block 4080, async page read
[   43.688664][  T385] blk_update_request: I/O error, dev loop2, sector 3072 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[   43.699300][  T331] Buffer I/O error on dev loop2p1, logical block 1, async page read
[   43.705417][  T304] blk_update_request: I/O error, dev loop2, sector 14720 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[   43.713754][  T385] blk_update_request: I/O error, dev loop2, sector 3072 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   43.725432][  T389] blk_update_request: I/O error, dev loop2, sector 3072 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0
[   43.731840][  T385] Buffer I/O error on dev loop2p3, logical block 0, async page read
[   43.744056][  T389] blk_update_request: I/O error, dev loop2, sector 3072 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   43.754864][  T385] blk_update_request: I/O error, dev loop2, sector 3072 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   43.766158][  T304] blk_update_request: I/O error, dev loop2, sector 14720 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0
[   43.774087][  T385] Buffer I/O error on dev loop2p3, logical block 0, async page read
[   43.785276][  T304] Buffer I/O error on dev loop2p6, logical block 11648, async page read
[   43.796339][  T385] Buffer I/O error on dev loop2p3, logical block 0, async page read
[   43.807581][  T304] Buffer I/O error on dev loop2p6, logical block 11649, async page read
[   43.815432][  T389] Buffer I/O error on dev loop2p7, logical block 0, async page read
[   43.823860][  T304] Buffer I/O error on dev loop2p6, logical block 11650, async page read
[   43.831795][  T385] Buffer I/O error on dev loop2p3, logical block 0, async page read