last executing test programs:

1m6.151067651s ago: executing program 1 (id=57):
syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000240)='./file0\x00', 0x450, &(0x7f0000005f80)=ANY=[@ANYBLOB="66617374626f6f742c71756f7461000000000000003b814e50a959736d65720f73ecea54b5e5be45ace9a88f723cb005aeff24212c651baef614d442ae89412ad3dcd0b7586d02002a6d6d65cacd4fc5002207ce994dda65c4b1d23a9bd5ba0f4ce5e0b5a5718c6aa918080002223d2753a5cac974110144cd0a1e368652324a41b31ee56a4bc5fdcd2dad721eb3b32dcc92f6a5540200b81d5b9fa9b40fe4d7fbd50a6afc3a989c6d60045663c59cbdc4c700000000bc7f6b22df0191acf5912afdcc1c061835177068c40f757dd123d2600b1c544f1525aa8d00000000000000000000002e8b5c733d362417c17f527c0bfebec112d57fc69fabb9b31ef97b2147931ff60cdf666c25244218b1f1a6010000000100000020563b835d0e8e9a09070ef1691fcb2f37bda5d4e3d9d7a2d0ac82b45a53001057f321acc45d5e065a461de90100000077d200000000000040b78f0dd3836f5ab2f6a1a5b798bb7752f192c6b48e568973a59cd9c74bd9a14721856c5499cd8f93f8beaa9cf76718ce7244c84268030000000000000208886b313bd01a22d576e414011a4f0a897515329f86d4585fa0ea17068f8af349696da4a2b3e24310ca52ec51bc23b57897cb55a2d513e6a00765ee3f58b471c54dd57f0af584afe4a21f92b515d7f2fa6fbb273ca0f751e684584320534667aea39ad7222c8ef531f514939177a47395e94c1723abb3fd44fd64fde4b45cc2f55f4ae05ff48648a4c998257856bcdcf2fa02010000001f54fb936570450e91c8d55abad76a7b7a000016f81ec9da9ccc1191c211632266d907e4d9b23496ae19bac24dc23c43f514f1b4af19988bbe61ee29a368a999435d6872d01b79c7821e875859dfbf3c57e4f1fb0be46cb5f7a0fa13516c0926d19dd2d5862085e1e4cb8279be17cba17ee4d06ad97b4ca282e73ea142b01b4a742fa11c0927ba811dd60903d575db449d775021b542db617086b3ed42e6e60fe043cff79b0c067c584bbf82657974c3736912b4b522052b9467d0da116ccc1652d861a420f09aaf67d3e9f6160100000001000000ae6335ad9896abd3cc00413638cb9bc62ab8054325d72e9144cf4f88702f586507e3147198e0bc4060a7c8f4dce73b653177ecf8228e6e6fae02510000000000000000000000000000f43739fdd2d24e50e0233acfe1c8639070fe00f40b0d01f8a0a35fcfe3ea10faf9c24b8488ed4ed83fb06a9a7c57442ede9e1fc2853b8f4d2241cff61d0125b7750e3fdae6a4ab9c776a191ed8098a780ea2bbaa64978cd3a6458fcc6b949bcbca0dceb7361f66e46731eba4f3aed335e7c8c541e82453218a19d39489e1525466ac93759787e767f601931d94c9c426489b741a6bc8abf475e4bf859e1ce7f7227069e9f51e25fa3d1b18dc565180a1af464a1dd697db85e2b27b90f6bd7cf1b6bc0bcd8ba552ced3d3cfbf9c9bc04f65b6f83cb40173b4bdc393d47e5da95b63a40ac18daf11e8d0706b47795fbe2b56d0ea7ffc5a59ede88621a08b25ca6ebe041317b62373a60951af33eb7954a9731aaa125add0913ed2435a207439e9122512d77096747a4b404459cebc8faff8f7a31758e630c75a1ff90402754d339dc21cf6b8e04e1aedf14df0b4aaf0e03194df3eb41ba066bc343b323a3162d7e7ba687633c2faa8f28b42364b72e3a457476fd6b2a54e670ba798172c44c4390f73fdab743a4cac88b2bd0545b8483f2e2f9846b138a4d8a7332978da70e9050417087c5ae034a735e8b448dd970140400000000000000", @ANYRES32], 0x1, 0x5558, &(0x7f0000000a00)="$eJzs3EtvG9UXAPBju2n/ff4jxIJdR6qQEqm26vQh2BVoxUO0qngsWIFju5Zb2xPFrhOyQoIlYsE3QSCxQmLDZ2DBmh1iAWKHBPLMmBLCo5XdOGl/P2l85t65PnPvyEp0ZiwH8MRaTn75qRRn4nhEVCLiVCmy/VKxZa7m4ZmIOBsR5T9tpaL/j46jEXEiIs5Mkkd8PczHTA59en587vKPr/381bfHjpz87MvvFrdqYNGejYj+Rr6/1c9j2snjnaK/Me5msX9pXMT8QP9u0U7zuNVezzJsNabjGlm82MnHpxv3hpN4u9doTmKnezvr3xjkJxyOO9M82RvuNDazdqu9nsXuMM1iZyef1/ZO/vdyZzjK87SKfO9n6WM0msa8v73dztezcTeLzcGo6M/zpq329iSOi1icLpppr5XNY32WK32wvd4d3NtOxu3NYTcdJJdr9edq9SvV+mbaao/al6qNfuvKpWSl05sMq47ajf7VTpp2eu1aM+2vJiudZrNarycr19rr3cYgqddrF2sXqpdXi73zycs33056rWRlEl/sDu4d7faGye10M8nfsZqs1S4+v5qcqydv3riV3Hrj+vUbt95699o7N1+48epLxaA900pW1i6srVXrF6pr9dUDsP7J/90HXP9olvV/VEz6IdZfmu3ywL/zAQN4aHvq/5hv/V8J9T+w12Gv/2Oe9f+kpFL//3f9W569/p+p/j2o9f8hXj/MRP0PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDE+n7p81eyneW8fbLoP110PVW0SxFRjojf/kYlju7KWSnyLP3D+KW/zOGbUmQZJuc4VmwnIuJqsf36/0d9FQAAAODx9cUHZz/Jq/X8ZXnRE2I/5Tdtyqfem1O+UkQsLf8wp2zlycvTc0qWfb6PxPacsmU3sP43p2T5Lbcj88r2QCrT8OHp+53Zgkp5KO/rdAAAgH1R2RX2twoBAABgP3286AmwGKWYPsqcPgvOvnl//9Hm8V3HAAAAgEOotOgJAAAAAI9cVv/7/T8AAAB4vOW//wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPzOzv3kpg1EcQB+NhjoPxVV3fcq3cExeoQuuywcoJfgCPQKuQBnILvss4kgwh4hOQIpCuNYoO+TbDM2+s0MsHljYQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOjSfbWe///749+lObv9ZfLMBgAAADhlW63n9Ytp0/6Uzn9Jp76ldhERZUScqt0HMWplDlJOdeb91Ysx3EXUCYc+xmn7GBE/0/b0tetPAQAAAG7XZrmaNdV6s5v2PSDeU7NoU37+lSmviIhq+pAprTzsvmcKq3/fw/iTKa1ewJpkCmuW3Ianr41yddI2aB3STCaL+kusW2U3/QIAAH1qVwJnqhAAAABuwO++B0A/iuPueJ9x3BzSDcEPrRYAAABwhYq+BwAAAAB0rq7/r+H5f4/+lgAAAABv1jz/DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgC5tq/V8s1zNzl1fvDJnt79MvhkBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8sz/3KBACYQxAs4u/ncz9DysRLa1t3oOBkDDFBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8OZ3v/yfcDVHkqltw9x6JFk6NaydGrbODXs/jK+vAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABO9uclBUIgCKJgzvjfSd//sJKgZxAhAhoeVdSiAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC+6He//J+YGmeSudPG0vFIsnbV2Lpq7D1oHD0Yb/8GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAudu6fN24yDAD4c77z9Q8gQkAZAqhIDLDQ5FpaOsIAihj4CEhReimBK4U2A60iUBaYUOYuCEaEkEBh63fo3EhdytYhQ5CYQfbZV7e90qM09tH8ftJ773O2877P67OiPLETAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKO2+Ey8lRdzOXmaGcbntxt7GStbv3NNnrm3dnM9aFrceNtE3bz/+5Kfby9U3x+Yqb76qPxkAAAAOhnZZ30fErXR7KeuTmbz+T8tjspr/+2eGcVnP31v37+xtHC52zZf1/2+/3n5hNNHMcJ5s0NW1QX/x/lQ6+7TEqffsQ4/o5Gc+/91LO/9Akvc3n99N8/PZ+vb69Xe7eXiojmwBgEdxvOyLoPx5KOt7TSYGwIHRqRTeZf3fnmk2JwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA67G7GU2Xcioj5zp04s7O3sTKuv7Z1c75sp69e3aqOmQ2RRsTq2qCf1riWaXfp8pVPlgeD/sWxQcQDd/334FhE7M/IDwhizK4PJ/jyiH8+prg8o55V/LugNR1pNBokxedTbOnWe9Xtb1Bee49/5Ia+IQEA8MRKi5bV9bfS7aVsW2s24q8f7q7/X6vEMWH9f/uj0zeqc1Xr/15tK5x+C+vnP1u4dPnKG2vnl8/1z/U/ffNE763eyTOnTp1ZyM7V4sJqJP3FptMEAADgf6xbtGr9n8zef///aCWOCev/z7/rfVmdq63+H+vOTb+mMwEAADiIuqPouVf+/KM15ohWtxtfLK+vX+wNX0fvTwxfa033ER0qWrX+b882nRUAAABQh93N1l33/89W4pjw/v/TP774c3XMdkQcibgQEf3jKxcGZ+tbzlSr4w+V84m6Ta8UAACAphwpWvX+f5o//5+MHnlIIuL1V4dx+b+uJqn/2+99/VN1rurz/yfrW+JUSuaG5yPv5yI6c01nBAAAwJPscNGyYv/3dHvp41+OftD1/D8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA3f4OAAD//1AjNPw=")
symlink(&(0x7f000000a900)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
unlink(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
socket$inet_icmp_raw(0x2, 0x3, 0x1)

1m5.799445626s ago: executing program 1 (id=59):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x4, 0xd6, 0x5, 0xa}, {0x44, 0x6, 0x9, 0x3ff}, {0x6, 0x5, 0x2b, 0x6}]})
munmap(&(0x7f0000001000/0x4000)=nil, 0x4000)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000011c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}, {0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xc}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0xa0}}, 0x0)
r1 = syz_open_dev$swradio(&(0x7f0000000140), 0x1, 0x2)
r2 = syz_open_dev$radio(&(0x7f0000000200), 0x2, 0x2)
ioctl$VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000240)={0x4, 0x5})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1770, 0xff00, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xb0, 0x0, [{{0x9, 0x4, 0x0, 0xfa, 0xff, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0xf4f6, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x3, 0x0, 0x9}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r4, 0x0, 0x0)
syz_usb_control_io(r4, &(0x7f0000000b80)={0x2c, &(0x7f0000000400)={0x20, 0x7, 0x5, {0x5, 0x3, '\\]:'}}, &(0x7f0000000440)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x438}}, &(0x7f0000000600)={0x0, 0xf, 0x1a, {0x5, 0xf, 0x1a, 0x2, [@wireless={0xb, 0x10, 0x1, 0x2, 0x42, 0x9, 0x5, 0x3, 0x4}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x7, 0x8, 0x9}]}}, &(0x7f0000000a80)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x0, 0x8, 0xb, "32afa2bc", "e7db3153"}}, &(0x7f0000000ac0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xf9, 0x0, 0x6, 0x0, 0x7c, 0x1000, 0x3}}}, &(0x7f0000001080)={0x84, &(0x7f0000000bc0)={0x40, 0x13, 0xd1, "0ffeb89da6baa23a3b7f0e745d2370e396962bd1c734b27357aa5e37f2fcd998a5ae91244a0a5b0ba0b229d7d4e5cc7435ad682b75b8573c3f9c019f2f47e4aafd217e2c5df76443e9a92ce1f488eb1a09864f6fa80dec02f5aad77d40f632eed19eeb7429be5bef2e61be8fb578d7829bce722c8d946c8433ee48e119ca997da05c075c83a98b56772d8f0f1433aff90847647eabf77e50a8a1887dd7397631f90701733eed9136e1cc4e6d88f7c213ae931118bcc58320bd496dfa2cdee7db450697527eebf00cdf4449f42d603d3592"}, &(0x7f0000000cc0)={0x0, 0xa, 0x1, 0x10}, &(0x7f0000000d00)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000d40)={0x20, 0x0, 0x4, {0x2, 0x1}}, &(0x7f0000000d80)={0x20, 0x0, 0x4, {0x1e0, 0x20}}, &(0x7f0000000dc0)={0x40, 0x7, 0x2, 0x80}, &(0x7f0000000e00)={0x40, 0x9, 0x1, 0x9}, &(0x7f0000000e40)={0x40, 0xb, 0x2, "d146"}, &(0x7f0000000e80)={0x40, 0xf, 0x2, 0xe4}, &(0x7f0000000ec0)={0x40, 0x13, 0x6, @remote}, &(0x7f0000000f00)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}}, &(0x7f0000000f40)={0x40, 0x19, 0x2, "30c1"}, &(0x7f0000000f80)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000000fc0)={0x40, 0x1c, 0x1, 0xd9}, &(0x7f0000001000)={0x40, 0x1e, 0x1, 0x9}, &(0x7f0000001040)={0x40, 0x21, 0x1, 0xf9}})
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="bc1b0000400007012bbd700000000000027c00000400c2800c000180060006008035"], 0x1bbc}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
ioctl$VIDIOC_ENUMINPUT(r1, 0xc050561a, &(0x7f0000000180)={0x9, "50fbf64c920dad3b6181bb54c1cbc6e37a97f6ca3de03ece6a4b7dbf04186af5", 0x2, 0x80, 0x2, 0x4000, 0x102, 0x2})
syz_mount_image$ocfs2(&(0x7f00000026c0), &(0x7f0000004780)='./file0\x00', 0x200000, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x4703, &(0x7f0000008f40)="$eJzs212IXFcBB/BzZ1ezmybb/UibpOnHJBFctCybPlXrQ1yrNpo2H9pWU2Wd3Ww3q7M76+6MFgxSgyAKghIEFT+oCqUvtSAG+lKLUPADaRVKRdH6IlKogg8GbaArM3Nvdu6d2d7JTtLS9veDdvaee8+5Z/a/99w590wKseqphdXiwmqxtFSszN6/ekvxc5VybXEuFF4lr/X56c6VyEn2r50j7/vAR+65JYQ/HPvah9bW1tZC3XDo6EDLz+f/fXq29TVRyNSpt9u5taY/1h556edveaUj8pwIIexo61ddXwjhY78IYUsIYSQuG41fB0MI20IIUQjh0d/868cDvXShxdl7X3ju2JnD+85MPf7YMxfmj254YBTCd8u7b55ffHF/323Pv+MynR4AAF7RB48fufvo5IHwZBSGzvW3f17fGb8mn4/vfNun7nq4f33/Gt3pexVDBQAAgIz1+f9w9HKH9bpkZS1ZEnzigRN3PxWt7zexfX07dNeR298/eSBe/43a9t8aF/3zvX2NNdTsum92/XckU7/z+u/6eR7+6rO/XHrr5vuf9C8573CIChOp7UJhYiKEY1PN7V3R1kK5slp95/2V2tLJzZ/3jSKdf3b1fn1Bv9v8RzPV89b/d3/i8z8b7O/lHYyF7F9tfbvY/qdMB+n8Nx7Lf/KlqKv8xzL18vK/4+nt53+1pZd3kD0jlyKdf/NC3Nd6QLE5ANTz/2Z/fv47Mu3n5f/9qXOPntjE93/q48xwVO/rQGoEeDku3+ArTGSk828GkRo641/kRtf//zL5X5NpPy//Oyv/+N3ferj/bzT+j0/10uabRzr/ZhDF1BHr1/9IIf/6vzbTfl7+vz3152c/2dO9uj3/ev/H3f+7ks4/vhGnB8/Gb7Lb8X9npv28/HeN3ffQwib6/eHBuJ9DURhr+dbpufotbGh9vboxpanvXt7ESd4E0vk3f2upS2eo+dK4/ofzx/9dmfbz8n9oz9ffc7qn7/92Hv8njf9dSec/2Ci7lPxfyuS/O9N+Xv4/PP33v9x3mcf/+vZB+Xclnf/Wtv3rz38KXc3/rsvUz3v+s2/0qUf+2sP8P+lfct7k+U/yHGI8aj7/obN0/ldteFy39/89mXp51/+3/vP80/t7Gf+jAU8AepDOf1uzsMMEsNv8r8+0n5f/F+758sf/tIn5X+MT30CSf8v8f0uz/Kjxvyvp/Lc3C1P/GOrBxv8b9/+oPff/ZvK/IdN+Xv4XDk30f+Uy3//r/R/v8Cibdun8hzY8rp7/77u4/9+YqZeX/xf3/vTFm3v6/B/CpLn+pqXzv3rD4xrX/0B+/jdl6uXl/51v/PqJB3vo/9t7qEs2/+a9PnU5xZ/Nu53/FzPt5+X/o/HzZ/dfgfnfre7/XUnn31w1v5T8s/P/vZn28/L/3pEfrPRfgec/d8gfAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgU0bj1+EQFSZS24XCxEQIY/H2rrA1mimdnJ4pV2Y/sxrCjri8GEaj+XJlplSeXliqnJybLpXLldkQron37wgD0Wq5Up1eLC1fe7GtwejUXGmlOjNXqoYQdsbl14ftSVszC9XF0nLj2KTOVVHps7VKtTRRW51bCbsvlm9LyudXKrXl6y62dXWhsrJ8qrQ0fXJh5d2Tk5OTYc/FPo9Ecw9U55aqzd4299brJHWHo5Y309h9Q8v5Pl2prSyVyo3yG1vqlCuzpXJLnZtazlddqS3Nlqpz0+XKfHK+YkvdlvfW2L033jceRlLvL6mbdTB+vf3Q8Y8eP3ygbX8xSue9VFucm9ze+W8CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgDeuJ29717dDCH3NrUII4WDyQxT/l3L23heeO3bm8L4zU48/9syF+aOdjgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg/+zAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVh535equjiOACfGd/7WiCltBFyGRgiojsJC/pFJJXXyJZtWge1SsigKDCMaFkQBEHtooKgVVD5F0QtXLaqNrVoYRBBxehMXu4IN7zQMed5YDgzzL1nvjBw78z5HA4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD6cXbHYlfWXtq1eWnr7g+hMz/3fwhhNFne/7y3I/SEEL5+mTkdVmkLPU39v5mcGy9fNfm9t3/84fXRZO31F98trtsdknSo4XhnkqZDQ2vvf6O6M/hsejAJIY1dCFEsjD05UwshdMQuhCh+fpy/mP2+/xe7EKLo/3C3K7v/tdiFEMXW3Z/6avkzHtVzvn5hsPG/v9UjeBuP6KxDb09eeZe6qZX3Mn//T/LN+2A1zJ448v557CKIZnZu6mjsGgAAgL/rXIv8P2xZ3r9/OQk93eXc/1tT/t/b1P/q+f+Ke9tvjM20FUJsK41NZsfD+9rpc+M7NXD19uua8Z6qkv9Xm/y/2uT/1Sb/rzb5f7XJ/8m8kv9X0uObexZfxC6CaOT/AABQPYeOT0zVh0eyl/9NPzrLeX1f3tbzPP3BremBRw3jRvLDf9vhYxMHDg6P5Pe9PCC4sv5DunT2ez7fo7ktTDbNu2i1/kPv04X5a53lT9T/cP5GUV9xXes/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC/2J17GgbBKAyj321F1EarogkLPwk+0MCIAKQwowEdTBiAgRBQwEDOWe5NnuUFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnu9f5XXx/aUx0muNSFPZZdf+OZ5mP3PfDsv77HHjVgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANjYgQMZAAAAAGH+1nm0HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgKcCAAD//wTsyzo=")
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FITRIM(r5, 0x40046f01, &(0x7f0000000500)={0x7fffffff, 0x2, 0x401})
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000dc0)={{0x1, 0x1, 0x18, <r6=>r5, {0x2}}, './file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'})
ioctl$SNDCTL_SYNTH_ID(r6, 0xc08c5114, &(0x7f0000000040)={"61f23db21fa4ce643a4c08cc9072b43d77aff9917407ebf5c0edf794e97b", 0x700000, 0x1, 0x1, 0x40, 0x5abd, 0xb38, 0xfffff001, 0x0, [0xffffff61, 0x1, 0xfffffffc, 0x100, 0x9, 0x200, 0xd, 0x6, 0x0, 0x200, 0x7, 0x6, 0x9, 0x9, 0x6, 0x8ba, 0x51, 0x4, 0x370]})
creat(&(0x7f0000000100)='./file0\x00', 0xa0)
syz_usb_control_io$hid(r4, &(0x7f0000000580)={0x24, &(0x7f0000000640)={0x40, 0x11, 0xca, {0xca, 0x10, "0c226fc090e521dc78babcb3147cfcca366d45d7b3fd3eb96b12e4551ff7674d85d25c02af53ea6b070cb8af57d6681646328f61aace8adc82252673e6ad0baa7c2e632ee07ce429c5157ab18d5301d3f9e0a2b4a05fa5786e4470de3a176c8f096add2a9838e9aba494c3ee2332e3c98f33eef502ddd41ce3e771f2c735a2793f57ea35a9b9fb37c36812fd596db784f19dab81f1f9b786f634a4585c5e8f6ce1f6b71d24abe6bd7cd6f40709bdbf3cdf5c3da6824402c7dbee51a898fc89649a3c402d63963629"}}, &(0x7f0000000480)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x445}}, &(0x7f00000004c0)={0x0, 0x22, 0x10, {[@local=@item_012={0x1, 0x2, 0x14, "ed"}, @local=@item_4={0x3, 0x2, 0x7, "9bfc0bfe"}, @local=@item_4={0x3, 0x2, 0x3, "e80cedea"}, @global=@item_012={0x1, 0x1, 0x7, 'U'}, @local=@item_012={0x1, 0x2, 0xa, "d5"}]}}, &(0x7f0000000540)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3, 0x96, 0x1, {0x22, 0xffd}}}}, &(0x7f0000000900)={0x2c, &(0x7f0000000740)=ANY=[@ANYBLOB="4031ca00000001901ff0b187e5d79cfe8b827a15069467b62ac811ff4ff47d5119b42b0f479c0dc051c745be9eb2ead7c3838615c634b8b4ee680bed4fb318ae79e9297671d2e1fb7426574c0f9ba1d83f5be6c3fe9c9670189ac99ca8e13877b5d4a386f2d5ec94f813ffa7f3e778efb819272473e678ec825a05eab428c754b40b2127b433be0e75a8e4d6c74f805b925f1c8c44b02ac0d1e161b0fa8df3c6b68335d0b62fc3ac66ec415557f7358378b33a21e1e5754d2956fa8726436bd9792c1ac1cd45ab7be9b98b5c28c14e3b"], &(0x7f00000005c0)={0x0, 0xa, 0x1, 0xe4}, &(0x7f0000000840)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000880)={0x20, 0x1, 0x2b, "ec3af98c6263a52f5d375962d04ee9d959acf6adf8ee770a58b87066744a9e4777c316c4d11fb033c0c6d9"}, &(0x7f00000008c0)={0x20, 0x3, 0x1, 0x4}})
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000300), 0x6801, 0x0)
r7 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$revoke(0x3, r7)
symlink(&(0x7f000000a900)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000cc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

1m2.51072974s ago: executing program 1 (id=73):
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8)
r1 = syz_io_uring_setup(0x38a9, &(0x7f0000000300)={0x0, 0x1595, 0x10100, 0x2, 0xc4}, &(0x7f0000000040)=<r2=>0x0, &(0x7f0000000180)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x3, r0})
io_uring_enter(r1, 0x44fd, 0x3, 0x1, 0x0, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r4}, 0x10)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xb, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000b5000000180102002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000180000008900000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc85}, 0x94)

1m2.210186556s ago: executing program 1 (id=77):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000010900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010173797a30000000020000054000000025680000000c0a01030000000000000000070000080900020073797a31000000000900010073797a30000000003c0003803800008008000340000000022c000b80140001800c000100636f756e7465720004000280140001560dd709f2dd259d4c7fb457800c000100636f756e74657200040002801400000010000100"], 0xec}}, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r1)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000000c0)={'wpan1\x00', <r3=>0x0})
r4 = syz_open_procfs(0x0, &(0x7f0000000080)='timerslack_ns\x00')
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="b402000000000000791100000000000085000000a40000009500000000000000359bb9f43d86b136000000008762000000f3"], &(0x7f0000000100)='syzkaller\x00', 0x4, 0xc5, &(0x7f0000000300)=""/197, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000002c0), 0xffffffffffffff35}, 0x54)
writev(r4, &(0x7f0000002500)=[{&(0x7f00000023c0)='2', 0x1}], 0x1)
sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002cbd7000fddbdf253100000008000200", @ANYRES32=r3, @ANYBLOB="05003300030000010500350006000000050036"], 0x34}}, 0x4000)
syz_mount_image$exfat(&(0x7f0000000400), &(0x7f00000013c0)='./file0\x00', 0x800, &(0x7f00000000c0)=ANY=[@ANYRES64=0x0], 0x2, 0x14e1, &(0x7f0000003f40)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x108)
creat(&(0x7f0000000040)='./file2\x00', 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbb8a0a63cdec59f9ffffff080006040002aaaaaaaaaa32ac1414bbffffffffffffac1414bb"], 0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nbd(&(0x7f0000000240), r5)
r6 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000080)={'batadv0\x00', <r7=>0x0})
sendto$packet(r6, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @link_local}, 0x14)
open(&(0x7f0000000340)='./bus\x00', 0x14927e, 0x102)
mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0)
r8 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r8, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7ffffffffffffffb, 0x3, 0x0, 0x0, 0x17, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220fffff2ff00000000000000000e00", [0x4]})
truncate(&(0x7f00000000c0)='./file1\x00', 0x3a40)
r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="4000000010002104000000000200000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006772657461700000040002800a0001000000000087270ecf00000000"], 0x40}}, 0x0)
r11 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7020000000d0000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000be000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088000000008000"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r11, 0x2000012, 0x100e, 0x7ffe, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r9)
sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000003ddc7a6cd557d53c895adde3e819b846ca0322c4535111115d3f0cb8fb6d0d2dbdb66bd6f2653ff20d1e66da73", @ANYRES16=r12, @ANYBLOB="01002cbd7000fbdbdf2530000000"], 0x14}, 0x1, 0x0, 0x0, 0x40408d8}, 0x4000040)

1m1.720896418s ago: executing program 1 (id=80):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) (async)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
fchmod(r0, 0x104)
fchown(r0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000003440), 0x0, &(0x7f00000001c0)={[{@uuid_null, 0x3a}], [], 0x3a})

1m1.46080115s ago: executing program 1 (id=82):
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x30}, [@ldst={0x3, 0x3, 0x3, 0xa, 0x0, 0xff00}], {0x95, 0x0, 0x74}}, &(0x7f0000000000)='syzkaller\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x94)
syz_init_net_socket$ax25(0x3, 0x3, 0xcf)
signalfd4(0xffffffffffffffff, &(0x7f0000000500), 0x8, 0x0)
r0 = socket$igmp(0x2, 0x3, 0x2)
syz_mount_image$btrfs(&(0x7f0000000540), &(0x7f0000000040)='./file1\x00', 0x810, &(0x7f0000000940), 0x1, 0x50f3, &(0x7f000000a2c0)="$eJzs3U+IVWUfB/Dnzp1x5lVw7isEtsoikGrh4CYioqtMUFF0y8VgBE4tgnThJEi0EMQW/Vt4S4paSK6kFsksjKA2LqQwArehYS7cKAaSi3Yac8957pz7HO+5d0ZtTD8fmTnnOb/zPOe5l7O43+uccwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACEEF74/bNDVfVT16bPnJtp7jywZebyvul1p0OodbbX8vqOrc++8ua2HS9OxA6zL2fLRqPfkFnX81ljVc/GhX69P6+HEMaSAer58pk1pVGLq3vKA1a6fnH30U17mxuPH27Xr146e7L80lkwsdITWCn5eXVh8Vxqdn6PJHt024VTr9Zzimb90xPuX3kRAMCSTLU6i+7H0fwjbre9P60n7WbSbift+AmhXWwsRzbuqn7z3JDWV2iezSwqjPedZ1LP3/9uu5X2T9pJ1FjCPHt3zSPNRL95ziX1lZonAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJ3kkbdHH6qqn7o2febcTHPngS0zl/dNrzsdQqOzvZaVa6vfP9z869utxw78uPmr4xeef6ye94vL0cLO4be48sRkCG8UKhfisBfXhtDqLXSa4cty4a3OynOxAAAAwN3k/s7vkW47i4NjPe1aJ03WOv+iLCxev7j76Ka9zY3HD7frVy+dPbn88Vp9xmvecLxuu7H4UysE4xh/0/EW63HXPaVxqqUjpnn+8fNTf1f1L+X/RnX+j++c/A8AAMDNkP/TcaoNyv/fvfbHJ1X9S/l/Q88hS/k/zjjm/5GwvPwPAAAAd7Lbnf+bpXGqDcr/4y+NfV3Vv5T/p4bL/6PFaceNv8YJ75oMYWrQ1AEAAIA+4v+7L361EPN69s1BmtefevTguarxSvm/OVz+H7ulrwoAAAC4GUe+2P5wVb2U/1vD5f/x2zprAAAAYCne+XDig6p6Kf/PDpf/V+fL/MqHrNNP8a8QDk2GMLGwMpcVfg7tp7sFAAAA4BaJOf3PT3f+ULVfKf/PVd//P97pIF7/33P/v9L1/4VCdte/J90YAAAAgHtR+Xr+eHv87MkF/Z6/P+z1/w/87+CrVccv5f/9w+X/enF5K5//BwAAAMvwX3v+3/bSONUG3f//vo/e/aWqfyn/t4fL/3G5pvjyTtRq2fvz3mQI6xdW8rsJfhMPtyspzI8VCh2tpMe22CMvzI8XCh1zSY/NkyE8uLCyPyn8PxbaSeHK2rxwJCmcjoX8fOgWjiWFE/FM+3xtPt208H0s5BdYzMcrKNZ0L4lIelzt12OhcMMeZ7sHBwAAuKfE8Jxn2bHeZkij7Hxt0A6rB+0wMmiH+qAdRpMd0h37bQ+zvYW4vX1m49Ke/39kuPwf34pV2aLf9f8hXv+fP9ewe/3/bCw0ksJ8LLTSOwa04jGysPtxPEajlfe4sr5bAAAAgLta/F6gvsLzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP5h715j5KruA4CffY734fVCUoXQKNkkNY6beL22gUQtVdaUqhEpzbqhoCqi2NhrsnjBjm1KjEJkbCIaIShtkJIPRRhFUc0HqBWISAoIFymOUHlEVEUBBAqtIQoipSQRaYIUqtl7z+ydc3cefqzx0t9P8s6Z+Z/nnYfn3HvnXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+P/h4Feu+dtm8Ud/e96zL1w8fsWetRe/et15pz4ZwsTM4x1ZuKP/xtvHf373uffseWD1HfcdPv+jvXm5PB4Gqn868zs3xFoPLw7h/o4QutPAisEs0JPfH4z1vW8whFPCbKBWYrI/K5E2HL7fF8K+MBuoVfW9vhAGC4ELn3rk4Zuridv6QlgaQqikbTxfydroSwNn9GaB/jSwtTsL/OqtTC3w3c4sAMcsvhlqL/oDE/UZhucu1+D113PcOvb2SofXFRPDjfP9bO08d6qgN31g4pietlJ1zIvS2+Ogd9sCeLeVtvOtnrbiF6n8G8pbs6FK6Nw0uXnD1dM74yOdYXS0q1FN8/Q8P/P6lzYeSXrBvA5jB4aPy+vwlieW3t21/ILH71ux9OX9H9v7yrF280eFTVpMz7dKyF9zC+Z5jMZ9niyAt1/pW9KIL10hhM2f/73PNIuX5v/Dzef/8eUcbzvrcsda3xzK5ubxkcGYeG0om5sDAADAgrEQ9ppuHX3oE83qK83/R9o7/h8P+eeT+Wy0B0MYn0nsXRLCaTOPZ4G7YnOXLQnhgzOpifrA2iRwMIT3ziSW16pKSiyKJUaSwE+G8sB4EjgUAxNJ4FsxcGsSuCEGDiSBjTFwMAmcGwNhqn4cvz+Uj6PtQF8MrM824oF4FsIvhmJrybZ6rlYVAADAcZLPDnvq7xbOdTjWDHF6eaCvVYZ4BnbDDJWkhnQGW5tWNayhu1UNna1qqI17d/Phl2ruaFVz6TSMjvoMt//ybz4bmijN/8eaz/8rc3Sko3T8P4R1M39j7s48Ml2Lr5+oywAAAAAcg4H/ffGbzeKl+f94e+f/x30iXYXM4bG4G2LLkhDG6gNZtX9YDmRHvQfyAAAAACwEtePxtWPhU/ltdop2Op8u5584wvzxwP/4nPl7Dz64vll/S/P/ifbO/++vv806cSj24mtLQlhUCPwg9rIamDESAz/+ZH0gH/+huAFuilXlJybUqropllgfA2NJYF+jEj+slTitPpA/WbXG99bGMZWXKAQAAADghIu7A+Jx+Xj+/4d+s/qaZuVK8//1R3b+/8w8uHR6//RACCu7Q+hKfxjwWH+2MGAMDHbkiYf6s7q60qqu7w/hnOrA0qpezNf/707XGHyqL6sqBk770P7Xz6gmvtkXwspi4OnP3XlWNbEzCdQa/8u+ED5QHW3a+HcWZY33pI1/fVEI7y8EalVdtiiEamO9aVWPVPLrGKRV/XMlhHcVArWqzq6EsCsAsEDF/0o3FR/csevaLRumpye3z2Mi7sPvC5unpidHN26d3lRp0KdNSZ/rljG6vjymdq9881y+RNFF964bbCdd+53gWLGtfD9+6cTB/H78LtQzM87VPXV316RD/siHy02EwjepRkPunOch9xcrmX0SS/XH/L1hICy6esfk9tEvbti5c/uq7G+72Vdnf+NhpmxbrUq3Vf9cfWvj5dFwtazE0W6rZcVKVu68ctvKHbuuXTF15YbLJy+fvGrV2avHzhxbM/bxM1dWRzWW/W0x1GVzVZ0M9a072xzXcRzq6d2FSk7Ep4aEhMRCS2wdWNb0/+TS/H9b8/l//NSJn/z5+gyNjv8Px8P82eOzh/nXx8C+do//Dzc6ml87MWAkCeyOgd0O8wMAAPDOECf5cW9m3Cv90+XfeblZudL8f3d7v/8/Tuv/15auP7/RMv/LY4mxRuv/p8v819b/391o/f90mf/a+v/73ob1/6+uBZJN8gvr/wMAAO8EJ279/5bL+6cXCChlaLm8f3qBgFKGlsv4t3uBgCNe///5//yr/w5NlOb/t7Y3/7dwPwAAAJw8vvxn1/xOs3hp/r+vvfn/iV//LzQ6/3+kUWCi0cKA1v8DAABggWq0/t/wjf2XNitXmv8faG/+H0+76KzLHWt9cyhb0y6ka9q9NlT7yQAAAAAsDJ1hdLSnzbx1K6OuPfo2n8mXAm2WLnrxTw4f2fn/B9ub/9f9LuOWJ5be3bX8gsffvG/F0pf3f2zvK7PH/wEAAID50+5+CQAAAAAAAAAAAAAA4O334n/sWdMsXvr9f1g383ij3//H6/7F3xe8uy53rLX1+n/5/Qs/fc+umSULHxsK4cPFwJY9W04J+bX5lxUDD1+y/D3VxJ60xIMvnPtSNXFpGvjUilPfqCbOSQLr4yKJ700D8aqKbyxOAnF5xX9PA3F7HEgDvXngq4uzcXSk2+qng9m26ki31bODISwpBGrb6v7BrI2OdIC3JYHaAL+QBuIA/zwPdKa9umcg61UMDMaidwxkvQIA4KQVvwX2hM1T05Nj8St8vD29u/42qluy7PpytR1tNv9cvjTZRfeuG2wn3ZV+F5291nhPqFSHsKr0dbWYpWNmlMenlhab7t0NhtxqtbfOBuVSR7rpehuPqC8b0ejGrdObeloOfE3rLKu7W2ZZVZrsFLN0zmzSNmppoy9tjKjNbdNGl+P9zjA62pXk+oMYHA51Wr0i2v29fnGdv0avgmKeqw7v/VWz+krz/+H25v+V4rjeyC8GsDteWe/vlljmHwAAAObXV9f++hvx32dvfPTpZnlL8/+R9ub/cQ9Wfig429txMF7/f++SEGYurT+cBe6KzV22JIQPzqQmYonsgvrnxxJjWeCuuMNkeSyxfqK+qkUxcCAJ/GQoDxxMAodiIN9LsT/ku3L+fiiEs2ZS6+pLbIslhpPAZ2JgJAmMxsBYElgcA+NJ4NXFeWAiCfxbDISp+m117+J8WwEAAByJfJ7VU383pPO8A92tMnS0ytDfKkNnqwyVVhkajSLe/3bM0JOcvNJRyNST1tqX1FLKEC+Gf8T9KmUIP6zPmRYsNR3PP6idb9BRn+GBT3RXQhOl+f9Ye/P//vrbrPVDcf4/e/2/LPCD2L2vxVPHR2Lgx5+sD+Q7Bg7Fye5Ntaom8hL5pP2mWGI8BkaSwLYYGE8C69flgX3vqQ/kM+1a43trjU/lJQoBAAAAOOHiDoK4mybO/+/Y8ZWBZuVK8//x9ub/sb2BYmM3xFoPLw7h/o7Z3tQCKwazQNyPMRh/Hv++wRBOKezgqJWY7M9K9CYNh+/3Zb9Q702r+l5f9uODeP/Cpx55+OZq4ra+EJYW9r7U2ni+krXRlwbO6M0C/Wlga3cWiHt+aoHvdmYBOGa1vYLxBZWf6lIzPHe5Bq+/d8o1QdPhlfaBzpFvrt9czZfSDtd8n2rNkT1tTfffctyU3h4HvdsW4rtt2Lut+EUq/4by1myoEjo3TW7ecPX0zvhI8ZesJfP0PBd/pdpO+ji8DncffW9bq6QdGEs+PsbmLjf367AjVnfLE0vv7lp+weP3rVj68v6P7X2l7W40EH8o/Mh1/zr4o8LmnW+VkL/mFtznyYTPk4X438CIpy2EsO7Vr9/ULF6a/0+0N//vTm5n/DpuzB1LQvhIYeM+Fjf/Hy/JPgcLgexT8l3lQHbI/b+GGn5yAgAAwPFW291R218wld9mJ4Sn8+Ry/okjzB/3V4zPmb/dfvf/9SVLm8VL8//1zef/i5JuOv7v+D/zxPH/OZ3su6IXpQ/sPqZd0aXqmBeO/8/pZH+3Of4/J8f/Hf+fi+P/LTj+P6eT/WkrfUva5ktXCOHlP3ro2Wbx0vx/W3vzf+v/zb1oX239v/WN1v/b1mj9v93W/wMAAOZVg4Xm0nleafW+UoZ09b5ShpYLBLZcYtD6f0e8/t9Lpz//m9BEaf6/u735f3w5DBRbXyjr/42sa1DVrTGwzcKAAAAAnIwa7SAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg7fXAP/zPpmbxR3973rMvXDx+xZ61F7963XmnPhnC1MzjHVm4o//G28d/fve59+x5YPUd9x0+/6OVvFxPfvu7dbljrW8OhbCv8MhgTLw2VL0zG7jw0/fs6q4mHhsK4cPFwJY9W06pJr41FMKyYuDhS5a/p5rYk5Z48IVzX6omLk0Dn1px6hvVxDl5oCPt7j8uzrrbkXb35sUhLCkEat29YnF9VbU2/jQPdKZt/NNg1kYMDMai3xjM2oiB6VhialEIK7tD6EqrerSSVdWVVvUvlayqrrSqL1dCOCeE0J1W9UJvVlV3OvIne7OqYuC0D+1//YxqYl9vCCuLgac/d+dZ1cQXkkCt8b/oDeED1ZdM2vi3e7LGe9LGb+sJ4f0hhN60xC+7sxK9aYkXu0N4VyFQa/zz3SHsCrwjxA+fuk+0Hbuu3bJhenpy+zwmevO2+sLmqenJ0Y1bpzdVkj410lFIv3X90Y/9ude/tLF6e9G96wbbSXfn5Xpmury6p+7umpO997Ff/cVKZp+PUv0xf28YCIuu3jG5ffSLG3bu3L4q+9tu9tXZ3648mm2rVQtlWy0rVrJy55XbVu7Yde2KqSs3XD55+eRVq85ePXbm2Jqxj5+5sjqqsezv8RjqnSd+qKd3Fyo5ER8AEhISCy3RWffpNnayf5CXvujPdrQnVGY+oEvTimKWjplRHo9Brz3KER/N95SWI1pVmjiUsqyeI8v19VnWlCYTs7X0ZVlmvteVJofFxjpnNmm83xlGR7sabYfh+rvFzfuzY9i8z+Sbrt00AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP/HDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwA8cCAAAAAML8rcPo2QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgEsBAAD//+erI4o=")
open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0)
socket$unix(0x1, 0x1, 0x0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
syz_usb_connect$uac1(0x2, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r1, @ANYRES32=r0], 0x0)

1m1.277702375s ago: executing program 32 (id=82):
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_tcp(0x2, 0x1, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x30}, [@ldst={0x3, 0x3, 0x3, 0xa, 0x0, 0xff00}], {0x95, 0x0, 0x74}}, &(0x7f0000000000)='syzkaller\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x94)
syz_init_net_socket$ax25(0x3, 0x3, 0xcf)
signalfd4(0xffffffffffffffff, &(0x7f0000000500), 0x8, 0x0)
r0 = socket$igmp(0x2, 0x3, 0x2)
syz_mount_image$btrfs(&(0x7f0000000540), &(0x7f0000000040)='./file1\x00', 0x810, &(0x7f0000000940), 0x1, 0x50f3, &(0x7f000000a2c0)="$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")
open(&(0x7f0000000340)='./bus\x00', 0x143142, 0x0)
socket$unix(0x1, 0x1, 0x0)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
syz_usb_connect$uac1(0x2, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r1, @ANYRES32=r0], 0x0)

4.836706645s ago: executing program 2 (id=305):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000003400)={0x10, 0x2, &(0x7f0000003200)=ANY=[@ANYBLOB='\x00'/16], &(0x7f0000003240)='GPL\x00'}, 0xc01)
r0 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4, 0x80010, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x2ed0, &(0x7f0000000000)={0x0, 0x759f, 0x80, 0x3, 0x1ab}, &(0x7f0000000080), &(0x7f00000000c0)=<r1=>0x0)
r2 = accept4$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs, &(0x7f0000000180)=0x6e, 0x80800)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x24, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2031}, [@IFLA_XDP={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x20048054}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="280000006a000105fefdfffffedbdf25000000000000000408000500", @ANYRES32=0x0, @ANYBLOB='\b\x00\n'], 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x20008000)
r4 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x717e, 0x100, 0x14, 0x800150}, &(0x7f0000000140)=<r5=>0x0, &(0x7f0000000200)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@restrict={0x4, 0x0, 0x0, 0xb, 0x1}]}, {0x0, [0x0]}}, &(0x7f0000000300)=""/88, 0x27, 0x58, 0x1, 0x7fffffff}, 0x28)
r8 = syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x717e, 0x100, 0x14, 0x150}, &(0x7f0000000140)=<r9=>0x0, &(0x7f0000000200)=<r10=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r8, 0x9, 0x0, 0x0)
syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_CLOSE={0x13, 0x1d, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r11}})
syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x0, 0x0, @fd=r4, 0x25b4, 0x0, 0x7, 0x0, 0x0, {0x0, r11}})
syz_io_uring_submit(r0, r1, &(0x7f00000001c0)=@IORING_OP_SHUTDOWN={0x22, 0xa, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, r7}})

4.727621702s ago: executing program 2 (id=306):
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005938d74010973077339600000001090212000100001e000904"], 0x0)
listen(0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000d00)={0x2c, &(0x7f0000000a40)=ANY=[@ANYBLOB="e5d05b"], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$sierra_net(r0, &(0x7f0000000000)={0x14, 0x0, 0x0}, &(0x7f0000000280)={0x1c, &(0x7f0000000540)=ANY=[@ANYBLOB="0009f5000000ab5a"], &(0x7f0000000d40)={0xa1, 0x1, 0x400, "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"}, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$sg(&(0x7f00000003c0), 0x4a38, 0x0)
setuid(0xee01)
ioctl$SG_IO(r1, 0x2285, &(0x7f0000000900)={0x53, 0x4, 0x6, 0x34, @scatter={0x0, 0x0, 0x0}, &(0x7f00000004c0)="bc0acad5f317", 0x0, 0x4, 0x10002, 0xffffffffffffffff, 0x0})
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000680)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]})
r2 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43)
r3 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
r5 = io_uring_setup(0xd71, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x2})
io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r5, 0x10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000002700)=""/4096, 0x1000}], 0x0, 0xa}, 0x20)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', <r6=>0x0})
sendto$inet6(r3, 0x0, 0x0, 0x44010, 0x0, 0x0)
sendmsg$nl_route_sched(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5, 0x9, 0x2, 0x1}, 0x9, 0x0, 0x3, 0x3, 0xc, 0x5a, 0x10, 0x7, 0x5, 0x3fb, {0xe, 0x9, 0xfffffffe, 0x7, 0x6, 0x7ff}}}}]}, 0x78}}, 0x0)
mknodat$loop(r2, &(0x7f0000000200)='./file1\x00', 0x800, 0x1)
chdir(&(0x7f0000000140)='./bus\x00')
link(&(0x7f0000000940)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

4.183870577s ago: executing program 3 (id=314):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$sock_x25_SIOCDELRT(r1, 0x890c, &(0x7f0000000380)={@null, 0xa, 'lo\x00'})
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYRES16=r0], 0xd8}}, 0x0)
r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000280), 0x802, 0x0)
ioctl$UI_ABS_SETUP(r2, 0x401c5504, &(0x7f0000000340)={0x400000100002f})
ioctl$UI_SET_EVBIT(r2, 0x40045564, 0x3)
r3 = io_uring_setup(0x4520, &(0x7f0000000380)={0x0, 0xdca4, 0x2000, 0x2, 0x2e6})
r4 = syz_io_uring_setup(0x18d6, &(0x7f0000000040)={0x0, 0x3, 0x800, 0xfffffffc, 0xad, 0x0, r3}, &(0x7f0000000440), &(0x7f0000000500))
io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r4, 0x2, &(0x7f0000000180), 0xfe)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
getsockopt$sock_cred(r5, 0x1, 0x11, 0x0, &(0x7f0000004b40)=0xc00)
write$uinput_user_dev(r2, &(0x7f0000000380)={'syz1\x00', {0x1, 0x2, 0x1ff, 0xb06}, 0x25, [0x1000, 0x10001, 0x80, 0x10, 0xc, 0x827, 0x0, 0x1, 0xcf1, 0x2, 0x0, 0x8, 0x6, 0x100, 0xc776, 0x7, 0x7, 0xd, 0x3, 0xfffffffd, 0xfffffffd, 0x4, 0x2, 0xa, 0xe, 0x1, 0x80000000, 0x4, 0x8, 0xb, 0x4, 0xa9, 0x956, 0x1, 0x88, 0x4, 0x8000, 0x7, 0xa, 0x0, 0x9de, 0x1, 0xf82d, 0x80000000, 0x7, 0x2, 0x7fff, 0x63, 0x40000000, 0x6, 0xb05, 0xc, 0x5, 0x5, 0x6, 0x4, 0x0, 0x3, 0x3, 0x9, 0x5, 0x6252, 0x0, 0x3fcc], [0x800, 0x96, 0x2fd1d58, 0x0, 0x401, 0x6, 0x1, 0x8, 0x7, 0x80, 0xffc, 0x2f, 0x9, 0x0, 0x10001, 0x0, 0xfffffbff, 0x106, 0x100, 0x4, 0x7fffffff, 0x1, 0x8001, 0x800, 0xd, 0x5, 0x1000, 0x8, 0x1, 0x9, 0x80000000, 0xc, 0x1, 0x0, 0xfa, 0x7, 0x9f9, 0x1, 0x2, 0xb342, 0x2, 0x451f, 0x1, 0x605f, 0xb2, 0xd4e5, 0x3, 0x80000001, 0x1, 0x2, 0x5, 0x0, 0x6c, 0x7, 0x101, 0xca8, 0x0, 0x7fffffff, 0xfffffffe, 0xffffff81, 0x5, 0x7, 0x5, 0xff], [0xfffffff5, 0x0, 0x0, 0xdd, 0x6, 0x0, 0x80000349, 0x10000000, 0x89ef, 0xcb4, 0x4, 0x587a, 0x0, 0xf, 0x100, 0xa0000000, 0x0, 0x5, 0x4, 0x9, 0x6, 0x5, 0xcc, 0x7, 0x200, 0x8, 0x6, 0x6, 0x3, 0x10001, 0x7fff, 0x1, 0xfb, 0x2, 0x5, 0x1, 0x0, 0x1fd, 0x6, 0xf, 0x4, 0x2, 0x1000, 0xfa, 0x5, 0x2, 0x6, 0x0, 0x2, 0x3, 0x9, 0x5, 0x741, 0x3, 0x8, 0x2, 0xff, 0x0, 0x6, 0x7ff, 0xd, 0x7, 0x3], [0x2e, 0x9, 0x1, 0x1d47, 0x5, 0x4f84, 0x7ff, 0x0, 0x4, 0x2b, 0x6, 0x81, 0x8, 0x5, 0xa, 0x1, 0x7fff, 0x7, 0x4, 0x1, 0x2acd684b, 0x2, 0x0, 0x80000000, 0x9, 0x4, 0x41, 0x7, 0x2, 0x4, 0x80, 0x6, 0xda, 0x200, 0x0, 0x6, 0x2, 0xa0000, 0x6a, 0x4, 0x8, 0x8, 0x5, 0xfffffffc, 0x4, 0xbe9f, 0x6, 0x2, 0x8cb3, 0x7, 0x400, 0x7, 0x10000, 0x1c0000, 0x8, 0xaa3, 0x38e5, 0x0, 0x5, 0x2, 0x1, 0x1, 0x6, 0x4]}, 0x45c)
syz_emit_ethernet(0x45, &(0x7f0000001180)={@local, @empty, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0xf, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @mcast2, {[@routing={0x37}], "223427d5c9a46b"}}}}}, 0x0)

4.1057039s ago: executing program 3 (id=315):
r0 = syz_usb_connect$uac1(0x1, 0xcb, &(0x7f0000000000)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb9, 0x3, 0x1, 0x1, 0x0, 0x6b, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x2, 0xff}, [@input_terminal={0xc, 0x24, 0x2, 0x6, 0x204, 0x4, 0x2, 0x9, 0x9, 0x5}, @processing_unit={0xc, 0x24, 0x7, 0x5, 0x5, 0x7b, "dcbed94086"}, @input_terminal={0xc, 0x24, 0x2, 0x2, 0x205, 0x1, 0x9, 0x8000, 0x2, 0xc}, @output_terminal={0x9, 0x24, 0x3, 0x2, 0x1ff, 0x1, 0x3}, @input_terminal={0xc, 0x24, 0x2, 0x1, 0x0, 0x6, 0x8, 0x7, 0xc1, 0x3}, @mixer_unit={0x8, 0x24, 0x4, 0x3, 0x80, "8dad03"}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x2, 0x9, 0x81}, @as_header={0x7, 0x24, 0x1, 0x3, 0x5, 0x3}]}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0x9, 0xc, 0x4, {0x7, 0x25, 0x1, 0x0, 0x6, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0x5, 0x4, 0x4, 0x1, '4'}]}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x9, 0x2, 0x6, {0x7, 0x25, 0x1, 0x2, 0x0, 0xd}}}}}}}]}}, &(0x7f0000000540)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x0, 0x1, 0x3, 0x51, 0x20, 0xf}, 0x4c, &(0x7f0000000140)={0x5, 0xf, 0x4c, 0x1, [@generic={0x47, 0x10, 0x4, "781c552a1e4d949381bd26fc2892a3166da58dcc8244405ffd03af6314b013f5e8232fc3ee6721e9bcb97f014d5d17f34a5fc7412af88920815001932977c714aa14563c"}]}, 0x8, [{0x19, &(0x7f00000001c0)=@string={0x19, 0x3, "2c758cd3eb85471da76980b14160b15484e2e0b15d18e4"}}, {0xde, &(0x7f0000000200)=@string={0xde, 0x3, "0c4cf5f0ed0e9ae59aca2eaec14a65584c0cbe934e37f8d2dda2b3505814e801cbf1e0bc7462b42a60603b63ac3d98db59f7e74c98c83685808a42d2c1de6f70c03346d5f84de53bf2092a645944236a6b9a63375c1bbc501e4813f95c7f480d7c2c3dae77f90dfedd5b72c1bb0a03dc816e708bf2a70074f54a78c62da23af14c033caa0f1aec6455662406ef619cfc390cf626bc49e920b3f624714758bd46866b641c8c0e98d948b69cca2b2beed9b47e274a369fba85bd37b05561c70f62654921fe393e8902f411f8e74485ace94afe60384fb37ad7e7a8f083"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x1409}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x427}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0xc04}}, {0xd0, &(0x7f00000003c0)=@string={0xd0, 0x3, "8a10a6ccf7c32d13c20700f85f41fcf496590ba579f361c9d0c0e97bb8b422f28ecd9b06c29cc1c36453dbf99c9dcfd5d5f1725d179430d8a52aa31eaba16a1da29ee3aeea7e59cab2c453ab2639bbc53f9752c4aeda46cc6d8e359cf35cd35faf4b3ff1b2bc84248e71565f5af2910eea17c08a59b709c211815592a58fc68b962ee0823a68c6ef5f03b394a27e4139859efa2e1f34389dc2b1be29b373f1981105b058a7c75aec0554e5cbb752aec37360b6d3df42bbd454dcf515eb507be10b7af27ce51aa72339eea8e90336"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x458}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x418}}]})
syz_usb_control_io$uac1(r0, &(0x7f0000000640)={0x14, &(0x7f00000005c0)={0x40, 0x32, 0x37, {0x37, 0x6, "143acebae0c00c11d0474071618909e7aaded4e1d6035528394ed8a4394eb4e92a3b54aa166604cec976db996ba27ca3c4de80d4df"}}, &(0x7f0000000600)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x3c0a}}}, &(0x7f0000000940)={0x44, &(0x7f0000000680)={0x20, 0x6, 0xe1, "11ffcd7a93df6895c3021df1b7c9bff8a7527a4f16ec17f4e59d9e499ac9cda23b7780f8041832bd267dcaa719d852d6d06cfc402fdfc0566abe599f0420a457e95af7d553d991b0dba0b334a6eab978c857870e9cf79c1cf150c03e1741df161d937d8547c7e86bbe1e4cf491eb91e26259444b8650f4ad96df0e7e4925fc75192e0ec4ed2ffbff0bf29cf0ef716b99885e37b7a1f4de27a600956169a50e3a63ed3bf03e027e7783d417aa46b275fe0fae7734114c9e4bafb2b4254ecb1691dd5e192a84af6b9ebec731f22c2719ca5857b3a48eee97a2c0f29471ac012f4301"}, &(0x7f0000000780)={0x0, 0xa, 0x1}, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x18}, &(0x7f0000000800)={0x20, 0x81, 0x1, '.'}, &(0x7f0000000840)={0x20, 0x82, 0x2, "e106"}, &(0x7f0000000880)={0x20, 0x83, 0x1, "bc"}, &(0x7f00000008c0)={0x20, 0x84, 0x1, '0'}, &(0x7f0000000900)={0x20, 0x85, 0x3, "77f5f3"}})
syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f00000009c0)={0x0, 0x22, 0x9, {0x9, 0x23, "8ad8f082b7f847"}}, &(0x7f0000000a00)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x40f}}, &(0x7f0000000a40)={0x0, 0xf, 0xf, {0x5, 0xf, 0xf, 0x1, [@ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x5, 0x4, 0x101}]}}, &(0x7f0000000a80)={0x20, 0x29, 0xf, {0xf, 0x29, 0xfa, 0x0, 0x80, 0x4, "d61b663a", "5067cfb5"}}, &(0x7f0000000ac0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x6, 0x80, 0x0, 0x8, 0x8, 0x4, 0x9}}}, &(0x7f0000001000)={0x84, &(0x7f0000000b40)={0x20, 0x13, 0xc5, "1ea538be118c482e957e38f730b63ebaf209bbce87a9b42904e7e748bf01e86910733b1b393492415db9a40e10145ecfdbd8a78a5004977fdda07ad9043e15ec0ac76b3ff29bbd46de7ca2fad5d2493089a896badcaf9b7e74e3889b1081a1ddd5667ecb3c9f68f8d7c4958f882896fc80f8ef3d53a700cb2db1040e95018dd378db728b30c1659a73fc222ce8ee514ca6ed9903054c57afac7fb2113f5a5c3295fbc344660b96b4fcaeaa8e38142feec9ee9b3eda0ebb46aa3cb1e0265b8b8dc67ee76495"}, &(0x7f0000000c40)={0x0, 0xa, 0x1, 0x3f}, &(0x7f0000000c80)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000000cc0)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000000d00)={0x20, 0x0, 0x4, {0x160, 0x8}}, &(0x7f0000000d40)={0x40, 0x7, 0x2, 0x400}, &(0x7f0000000d80)={0x40, 0x9, 0x1, 0xa}, &(0x7f0000000dc0)={0x40, 0xb, 0x2, "6cc2"}, &(0x7f0000000e00)={0x40, 0xf, 0x2, 0xa}, &(0x7f0000000e40)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000000e80)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000ec0)={0x40, 0x19, 0x2, "5606"}, &(0x7f0000000f00)={0x40, 0x1a, 0x2, 0x9}, &(0x7f0000000f40)={0x40, 0x1c, 0x1, 0x5}, &(0x7f0000000f80)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000fc0)={0x40, 0x21, 0x1}})
r1 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f00000010c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x10, 0x17ef, 0x61ae, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x1, 0x70, 0x9, [{{0x9, 0x4, 0x0, 0x1, 0x1, 0x3, 0x1, 0x3, 0x0, {0x9, 0x21, 0xdf89, 0x2, 0x1, {0x22, 0xbc2}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x2, 0xbf, 0xfe}}, [{{0x9, 0x5, 0x2, 0x3, 0x200, 0x7f, 0x3, 0x8}}]}}}]}}]}}, &(0x7f0000001380)={0xa, &(0x7f0000001100)={0xa, 0x6, 0x100, 0x40, 0x6, 0x9, 0x10, 0x3a}, 0x19, &(0x7f0000001140)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x10, "faf42dcda0fc1ee2d4626c1b99e9553a"}]}, 0x5, [{0x4, &(0x7f0000001180)=@lang_id={0x4, 0x3, 0x240a}}, {0x4, &(0x7f00000011c0)=@lang_id={0x4, 0x3, 0x44c}}, {0x6b, &(0x7f0000001200)=@string={0x6b, 0x3, "db7ff8c17a31abf42b7c19ab19a397a1366e26126789eebff702f6f562c3b34e1c678a53b8c17fbb513dadb7468c701012ece12fb4ff8b5e27f5e9c245a0cd5c1d5be475c5f7ab20a854c4d7037abd222bef4246e198c77cf3e03756e76f9b15ed0acbdded71b48253"}}, {0x4, &(0x7f0000001280)=@lang_id={0x4, 0x3, 0x83e}}, {0xbb, &(0x7f00000012c0)=@string={0xbb, 0x3, "5ad3b99cce3880f0a994a28887abef121d4620829b36d8ee236ccd11a8930e64879b4dcdcb1c88d1f86c0a911832e73a77d235a0e92fb2214ea6d295d1e75ac1b94b0353f491c082e748e9f895b5286ea25a809dd9298ed4c9a49c74e9a4149b20c0a233b1bf26ac9082409cf5c9a03885cf1d0f5473f7f082a2d1b9570156c5882c41fc8ec50c7d123c7ad6df9491ec9da485b8f3576e7a1cd8d326d9801ae18172bccf91df49a84a861f109f3341766b4fa81ddb11d00738"}}]})
syz_usb_control_io$hid(r1, &(0x7f0000001600)={0x24, &(0x7f0000001400)={0x0, 0x24, 0x5, {0x5, 0x6, "df5b3b"}}, &(0x7f0000001440)={0x0, 0x3, 0xfd, @string={0xfd, 0x3, "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"}}, &(0x7f0000001580)={0x0, 0x22, 0x2, {[@global=@item_012={0x1, 0x1, 0x6, "83"}]}}, &(0x7f00000015c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x4, 0x5, 0x1, {0x22, 0xb78}}}}, &(0x7f00000018c0)={0x2c, &(0x7f0000001640)={0x20, 0xc, 0xa7, "9ae9a981c634669f459735571aec666b7a020fef19511e576d843fc867992ff22328ea5c350f7168ae78330ac0b378a8e4f2c973b4c1818787687b6c1d04432d0b007769cfb97bea4f206b71797054abd0bcaef6237831844781e21372d22ad4e6f2a85a218fc4accc8ef01f9419997b2e5a98c460d761363f16b27291a5e1884c3074d32faee5140fb877637228519bbef6221118353088e11d362326c5a60d184508f5444dc9"}, &(0x7f0000001700)={0x0, 0xa, 0x1, 0x5}, &(0x7f0000001740)={0x0, 0x8, 0x1, 0x5b}, &(0x7f0000001780)={0x20, 0x1, 0xda, "c9b1eb4b8460f8295f86f2a011a854ee94b3389788952e4ffc49dd2ac105d25e2da0562ec5f811f7d1ae9f15f56961e16ba07f68d6eb900bc0c0176358d922218d6d866098a701d47539e9580cc2ea985c4430450b570a0fe56fc8916568a716b0e6dd74f5fe3773b3fd73501b399e670c2b692d13735122950845982f42bb3f2ab7f1ad8755956918b3235f8e1c5c3983b147385922132b7323142d3990ed0c3fb16a18ede960c55d134cc65e7e2b6f5627fd8813b8a606fc9b46ba77525bb1225018391608a2825d6e8de9ca04e63be63c0b95175c1d28b285"}, &(0x7f0000001880)={0x20, 0x3, 0x1, 0x9}})
r2 = accept$netrom(0xffffffffffffffff, &(0x7f0000001900)={{0x3, @null}, [@default, @default, @bcast, @null, @rose, @netrom, @bcast, @netrom]}, &(0x7f0000001980)=0x48)
getsockopt$sock_timeval(r2, 0x1, 0x43, &(0x7f00000019c0), &(0x7f0000001a00)=0x10)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000001a40)=0x9, 0x12)
read(r2, &(0x7f0000001a80)=""/57, 0x39)
r3 = accept4$packet(0xffffffffffffffff, &(0x7f0000001ac0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000001b00)=0x14, 0x800)
ioctl$F2FS_IOC_GET_PIN_FILE(r3, 0x8004f50e, &(0x7f0000001b40))
r5 = syz_usb_connect$lan78xx(0x0, 0x3f, &(0x7f0000001b80)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$lan78xx(r5, &(0x7f0000001d00)={0x14, &(0x7f0000001bc0)={0x20, 0x22, 0xb3, {0xb3, 0xe, "78738fb1a121d4be21808a2863328440d25c413fe2aff67f4ae7652f44f72eadf92bc0f8c0bdfdd5f4e94893d8d6854297cb577f596362d54d2c9ee5b6ebb0ae1e8f97b806dbcff059d1562be001d3e52d10ccb2beec954bd0224e6b528c4fb7525a10d945681e9f1b552aa8d85de5a51012908fd6ea93a2c4ce785f33b967701b9027f67b761d46955592d636968cb9cc71c89e0f86ef218a9072c08009c6947b6b6179842e9e7502ac3a2abbcc91a668"}}, &(0x7f0000001c80)={0x0, 0x3, 0x3b, @string={0x3b, 0x3, "8906689b9b0b534ac86c6ed9417498d4347c10c5784b10bf79df264bdeb7b19db2dd72cd63d12959ca2b78879c1dc3179c6a1c417395ec4dca"}}}, &(0x7f0000001f00)={0x34, &(0x7f0000001d40)={0x0, 0x31, 0x78, "95e83e19a6fe1d5b9ff41ef2e0239045bc1987b423e14a7b42ace195d585d8634a85c0f2c632f4e941b6252f69a3f42719dc5473dd3f361802cfa26c9d864fb03bef876b1f0bc055b6cc165f499d48d7841df8dc184ba30a092871d735f10198e7202b8ad7da9822482805486e2fb06bc78c0f00fe8ab333"}, &(0x7f0000001dc0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000001e00)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000001e40)={0xc0, 0xa1, 0x4, 0x3ff}, &(0x7f0000001e80)={0x40, 0xa0, 0x4}, &(0x7f0000001ec0)={0xc0, 0xa2, 0x2f, "0f8f6da3a4e09c8172b98c50cce532e7b9dcd20587d14091e35dae735a76a6bbef03a01082be97ace023e52f9a48ee"}})
ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r2, 0xf505, 0x0)
ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r2, 0x80286722, &(0x7f0000001f80)={&(0x7f0000001f40)=""/15, 0xf, 0x9f, 0x9})
r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001fc0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xd, '\x00', r4, 0xffffffffffffffff, 0x3, 0x3, 0x4}, 0x50)
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000020c0)={'syztnl0\x00', &(0x7f0000002040)={'syztnl2\x00', <r7=>r4, 0x40, 0x7, 0x3, 0x1, {{0x16, 0x4, 0x2, 0x18, 0x58, 0x67, 0x0, 0xff, 0x29, 0x0, @multicast1, @loopback, {[@rr={0x7, 0xf, 0xfa, [@remote, @loopback, @multicast1]}, @timestamp_addr={0x44, 0x34, 0x7e, 0x1, 0x9, [{@private=0xa010102, 0x4}, {@remote, 0x1}, {@private=0xa010101, 0x6}, {@multicast2, 0x1}, {@dev={0xac, 0x14, 0x14, 0x44}, 0x9}, {@multicast2}]}]}}}}})
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000002100)={0x3, 0x4, 0x4, 0xa, 0x0, r6, 0x10001, '\x00', r7, 0xffffffffffffffff, 0x5, 0x2, 0x1}, 0x50)
syz_usb_control_io$hid(r1, &(0x7f0000002340)={0x24, &(0x7f0000002180)={0x0, 0x5, 0x45, {0x45, 0x8, "9aca5417c18458adc0e089b1ea7abfc060d32eee8982a7a1c2f9c38ffd0803eb28a12988706d33800be39ded04b5a4acdfc2fecce555e1dd3ab2c1eced488b6ab5997b"}}, &(0x7f0000002200)={0x0, 0x3, 0xb6, @string={0xb6, 0x3, "3ff10d73bc18302364ea8b5f2730db015b31f76e11f324fc78d2b769174861d785439356e4577aac18561886464022bc5e25f4b1bb331b66f401db176a7ac21065d32c42a8bd8c7b63ce118fa3c186c1006ec21e4ce33068a73912f671cd11e3d63902f6ff4407ca6c574269a9a43dd1224885d0ce5130768021d6e8bf111cc8cc7db97409f589f82c6c93b2663e4e280980a09a0a61cd603853264b41ed91071fb28d4e1f7860787999682a8a5e852e28874eed"}}, &(0x7f00000022c0)={0x0, 0x22, 0x12, {[@main=@item_4={0x3, 0x0, 0xe, "638efafa"}, @local=@item_012={0x2, 0x2, 0x9, "d2d5"}, @main=@item_4={0x3, 0x0, 0x8, "f1335a44"}, @local=@item_4={0x3, 0x2, 0x2, "e26d681f"}]}}, &(0x7f0000002300)={0x0, 0x21, 0x9, {0x9, 0x21, 0x76, 0x9, 0x1, {0x22, 0x4f2}}}}, &(0x7f0000002580)={0x2c, &(0x7f0000002380)={0x0, 0xf, 0xf6, "ac4fab8728fb876aab2ebd288112befe682e775a6fddcdf8fbd646b358bea9fe86a1546dcb946f49c7dae05f583219abe02c9b5a8cc24d661177073b43bbbf9a68d7f146d02f0f76bcdc01933e17124e204326cb9d721b22314f85d4c17fd321fb216e5b877e77cb104c96af74b91aa45cc1135abc730407c46dc78437f085ffec7137de31397a9f05f694e6df5d541a07417a632dc668a9f1d7592ed4fe89c72f4fd21d4c33e468e291326b526613f0ee4aa8f0baf070dde20b48ed42d464a3233d38b4cc076f72feb5524b365631df134d28238a0d13e11e210bd357c08aa2b5e895315a07afdd05d7bd9968d4f7c289d8ddbae2e3"}, &(0x7f0000002480)={0x0, 0xa, 0x1, 0xf}, &(0x7f00000024c0)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000002500)={0x20, 0x1, 0x3, "f6391e"}, &(0x7f0000002540)={0x20, 0x3, 0x1, 0x2}})
syz_usb_connect$lan78xx(0x1, 0x3f, &(0x7f00000025c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r3, 0x8983, &(0x7f0000002600)={0x7, 'pim6reg\x00', {0x9}, 0x1000})
r8 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r8, 0x0, 0xca, &(0x7f0000002640)={0x1, 0x0, 0x10, 0x0, @vifc_lcl_ifindex=r4, @rand_addr=0x64010100}, 0x10)
r9 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002680)='/proc/cgroups\x00', 0x0, 0x0)
sendmsg$FOU_CMD_DEL(r9, &(0x7f0000002780)={&(0x7f00000026c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002740)={&(0x7f0000002700)={0x24, 0x0, 0x50da9e383c683aa3, 0x70bd26, 0x25dfdbfe, {}, [@FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e24}]}, 0x24}, 0x1, 0x0, 0x0, 0x64040802}, 0x4040010)
recvmmsg(0xffffffffffffffff, &(0x7f000000c980)=[{{&(0x7f00000027c0)=@un=@abs, 0x80, &(0x7f0000002d00)=[{&(0x7f0000002840)=""/8, 0x8}, {&(0x7f0000002880)=""/88, 0x58}, {&(0x7f0000002900)=""/238, 0xee}, {&(0x7f0000002a00)=""/121, 0x79}, {&(0x7f0000002a80)=""/151, 0x97}, {&(0x7f0000002b40)=""/227, 0xe3}, {&(0x7f0000002c40)=""/130, 0x82}], 0x7, &(0x7f0000002d80)=""/239, 0xef}, 0x7}, {{&(0x7f0000002e80)=@generic, 0x80, &(0x7f0000004f00)=[{&(0x7f0000002f00)=""/4096, 0x1000}, {&(0x7f0000003f00)=""/4096, 0x1000}], 0x2, &(0x7f0000004f40)=""/13, 0xd}, 0x4}, {{&(0x7f0000004f80)=@tipc, 0x80, &(0x7f0000007380)=[{&(0x7f0000005000)=""/4096, 0x1000}, {&(0x7f0000006000)=""/13, 0xd}, {&(0x7f0000006040)=""/211, 0xd3}, {&(0x7f0000006140)=""/204, 0xcc}, {&(0x7f0000006240)=""/4096, 0x1000}, {&(0x7f0000007240)=""/52, 0x34}, {&(0x7f0000007280)=""/205, 0xcd}], 0x7, &(0x7f0000007400)=""/131, 0x83}, 0xfe}, {{&(0x7f00000074c0)=@can, 0x80, &(0x7f000000a940)=[{&(0x7f0000007540)=""/89, 0x59}, {&(0x7f00000075c0)=""/4096, 0x1000}, {&(0x7f00000085c0)=""/4096, 0x1000}, {&(0x7f00000095c0)=""/171, 0xab}, {&(0x7f0000009680)=""/4096, 0x1000}, {&(0x7f000000a680)=""/213, 0xd5}, {&(0x7f000000a780)=""/133, 0x85}, {&(0x7f000000a840)=""/188, 0xbc}, {&(0x7f000000a900)=""/17, 0x11}], 0x9}, 0x8}, {{&(0x7f000000aa00)=@un=@abs, 0x80, &(0x7f000000af00)=[{&(0x7f000000aa80)=""/4, 0x4}, {&(0x7f000000aac0)=""/209, 0xd1}, {&(0x7f000000abc0)=""/91, 0x5b}, {&(0x7f000000ac40)=""/215, 0xd7}, {&(0x7f000000ad40)=""/238, 0xee}, {&(0x7f000000ae40)=""/16, 0x10}, {&(0x7f000000ae80)=""/113, 0x71}], 0x7, &(0x7f000000af80)=""/125, 0x7d}, 0x200}, {{&(0x7f000000b000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f000000c580)=[{&(0x7f000000b080)=""/123, 0x7b}, {&(0x7f000000b100)=""/134, 0x86}, {&(0x7f000000b1c0)=""/70, 0x46}, {&(0x7f000000b240)=""/63, 0x3f}, {&(0x7f000000b280)=""/17, 0x11}, {&(0x7f000000b2c0)=""/248, 0xf8}, {&(0x7f000000b3c0)=""/85, 0x55}, {&(0x7f000000b440)=""/4096, 0x1000}, {&(0x7f000000c440)=""/213, 0xd5}, {&(0x7f000000c540)=""/40, 0x28}], 0xa, &(0x7f000000c640)=""/145, 0x91}, 0x1}, {{&(0x7f000000c700)=@tipc=@name, 0x80, &(0x7f000000c840)=[{&(0x7f000000c780)=""/183, 0xb7}], 0x1, &(0x7f000000c880)=""/203, 0xcb}, 0x3}], 0x7, 0x2002, &(0x7f000000cb40))
syz_usb_connect$lan78xx(0x1, 0x3f, &(0x7f000000cb80)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f000000cdc0)={'ip_vti0\x00', &(0x7f000000cd40)={'syztnl1\x00', <r10=>r4, 0x1, 0x8000, 0x1, 0x3bec00, {{0x9, 0x4, 0x0, 0x3b, 0x24, 0x65, 0x0, 0x6, 0x29, 0x0, @empty, @private=0xa010100, {[@lsrr={0x83, 0xb, 0xe1, [@private=0xa010100, @local]}, @generic={0x94, 0x5, "606896"}]}}}}})
r11 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f000000ce00)=0xffffffffffffffff, 0x4)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f000000cf40)={0x9, 0x5, &(0x7f000000cbc0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xf05, 0x0, 0x0, 0x0, 0x84}, [@func={0x85, 0x0, 0x1, 0x0, 0x4}, @jmp={0x5, 0x1, 0x8, 0xb, 0x8, 0xffffffffffffffff, 0xffffffffffffffff}]}, &(0x7f000000cc00)='GPL\x00', 0x2, 0xd1, &(0x7f000000cc40)=""/209, 0x100, 0x46, '\x00', r10, 0x0, r11, 0x8, &(0x7f000000ce40)={0x9, 0x4}, 0x8, 0x10, &(0x7f000000ce80)={0x5, 0x9, 0x1, 0x9}, 0x10, 0x0, 0x0, 0x2, &(0x7f000000cec0)=[r9], &(0x7f000000cf00)=[{0x2, 0x5, 0xc, 0x2}, {0x0, 0x3, 0x5, 0xa}], 0x10, 0x8}, 0x94)

3.781618062s ago: executing program 0 (id=318):
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffc, '\x00', 0x0, 0x0}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x10, 0xb, &(0x7f00000009c0)=@framed={{0x18, 0x2}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit]}, &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0xa}, 0x94) (async)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) (async)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
syz_mount_image$nilfs2(&(0x7f0000000080), &(0x7f0000000000)='./file2\x00', 0x10, &(0x7f0000000480)=ANY=[], 0x5, 0xa84, &(0x7f0000001380)="$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") (async)
r3 = socket$xdp(0x2c, 0x3, 0x0)
r4 = socket(0x28, 0x5, 0x0)
r5 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r5, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) (async)
listen(r5, 0x4) (async)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r5, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x4, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x7}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000)
r6 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x121202, 0x0) (async)
r7 = syz_io_uring_setup(0x890, &(0x7f0000000140)={0x0, 0xe311, 0x400, 0x2, 0x1c4}, &(0x7f0000000240)=<r8=>0x0, &(0x7f00000000c0)=<r9=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async)
syz_io_uring_submit(r8, r9, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) (async)
io_uring_enter(r7, 0x47f6, 0x0, 0x0, 0x0, 0x0) (async)
ioctl$TIOCVHANGUP(r6, 0x5437, 0x2)
connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10)
close(r5) (async)
sendmmsg(r4, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x64, &(0x7f00000000c0)=0x425, 0x4) (async)
sendto$inet6(r2, &(0x7f0000000640)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x1c) (async)
setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000100)=0x5, 0x4) (async)
seccomp$SECCOMP_GET_NOTIF_SIZES(0x3, 0x11, 0x0) (async)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r1, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0)
shutdown(r1, 0x1)

3.696579251s ago: executing program 0 (id=319):
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400"], 0x48)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000006c0)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
fcntl$lock(r0, 0x6, &(0x7f0000000040)={0x0, 0x2, 0x10001, 0x4}) (async)
r1 = socket$inet6(0xa, 0x80001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) (async)
setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x2d, &(0x7f0000001140)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff"], 0x90) (async)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) (async)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async)
r5 = socket$inet6(0xa, 0x1, 0x84)
setsockopt$inet6_int(r5, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) (async)
sendto$inet6(r5, &(0x7f00000002c0)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x27b6a97, @private2={0xfc, 0x2, '\x00', 0xff}, 0x8080}, 0x1c)
getsockopt$bt_hci(r5, 0x84, 0x6d, &(0x7f00000006c0)=""/4097, &(0x7f0000000040)=0x1001) (async)
fcntl$lock(r0, 0x6, &(0x7f0000000080)={0x0, 0x2, 0x1, 0x9})
fcntl$lock(r0, 0x24, &(0x7f0000000000)={0x0, 0x2, 0x5, 0x1})
r6 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r6}, &(0x7f0000bbdffc)) (async)
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r7 = inotify_init1(0x80000)
read(r7, 0x0, 0x0)

3.691612425s ago: executing program 0 (id=320):
ioctl$SIOCRSSL2CALL(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)=@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0})
r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0)
ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000080)={0x2, 0x4, {0x7dca, @struct={0x5, 0x10}, 0x0, 0x2, 0x18000, 0x9, 0x400, 0x3, 0x1, @usage=0x400, 0x8, 0x5, [0xc4, 0x1, 0x5, 0x74a8, 0xffff, 0x1]}, {0x5, @struct={0x8, 0x8}, <r1=>0x0, 0x61, 0xe6f, 0x6, 0x6ea3a715, 0x7, 0x410, @struct={0x2, 0x6}, 0x1, 0x1, [0x45e, 0xb12, 0x2, 0x7, 0x8dc, 0x7fffffff]}, {0x3, @struct={0x4, 0x100}, 0x0, 0x200, 0x3, 0x2, 0x7, 0x2, 0x1, @usage, 0xffffffff, 0x8, [0x243, 0x6, 0x1ff, 0x0, 0x3, 0x4]}, {0x600, 0x7a5, 0xf}})
ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000480)={r1, "04e8f4d11e1ff78994ed96b8c69c4574"})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r2, &(0x7f0000001540)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001500)={&(0x7f00000014c0)={0x14, 0x7, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x9}, ["", "", "", "", "", "", "", "", ""]}, 0x14}}, 0x40000)
sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x38, 0xa, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x484a6ac4969d4bea}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x27}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x84}, 0x0) (async)
sendmsg$NFT_MSG_GETSET(r0, &(0x7f0000001640)={&(0x7f0000001580)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001600)={&(0x7f00000015c0)={0x38, 0xa, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x484a6ac4969d4bea}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x27}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x84}, 0x0)
sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x2c, 0x0, 0x100, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xa}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x64}, @BATADV_ATTR_GW_MODE={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$OSF_MSG_ADD(r3, &(0x7f0000002880)={&(0x7f0000001780)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002840)={&(0x7f00000017c0)={0x1060, 0x0, 0x5, 0x0, 0x0, 0x0, {0x5, 0x0, 0x3}, [{{0x254, 0x1, {{0x1, 0xc}, 0x38, 0xfc, 0x8c, 0x0, 0x6, 'syz0\x00', "79b9e5b57c5f811f5a50e5582cfc8f0f4ec98a6a2a102e2b9ff8ee7a89e2d9df", "b78da78f5d96c963ba03fbb5fac4db3a2f0966d64db3a0c487eb00cfafb1fb3c", [{0x2, 0x800, {0x1, 0x7fffffff}}, {0x6d78, 0x5, {0x1}}, {0x40, 0x1, {0x3, 0x6}}, {0xb, 0x9, {0x0, 0x8000}}, {0xfff8, 0x7, {0x3, 0xf}}, {0x2, 0x101, {0x0, 0x24000}}, {0xd016, 0xe, {0x0, 0x2}}, {0xfffc, 0x2, {0x2, 0x4}}, {0x1, 0xc000, {0x2, 0x9b}}, {0x3, 0x8, {0x1, 0x824f}}, {0x0, 0xfffc, {0x1, 0x6}}, {0xc7, 0x9, {0x0, 0x25}}, {0x5, 0x7ff, {0x3, 0xfff}}, {0xff, 0xfff, {0x0, 0x37}}, {0x7, 0x7, {0x3, 0x1}}, {0xb, 0x2, {0x1, 0xfffffffa}}, {0x9, 0x4, {0x3, 0x7681}}, {0x6, 0x0, {0x0, 0x5}}, {0x8, 0xb, {0x2, 0xe}}, {0x7, 0x40, {0x1, 0x100}}, {0x14, 0x8, {0x3, 0x9}}, {0x3ff, 0xed3, {0x2, 0x9}}, {0x130, 0x6, {0x1, 0x3}}, {0x9, 0x9, {0x2, 0x6}}, {0x3, 0xfffd}, {0x4, 0x401, {0x3, 0x6}}, {0x0, 0x7, {0x2, 0xa}}, {0x9af, 0x5, {0x2, 0x5}}, {0x7, 0x3, {0x6, 0x9}}, {0x8, 0x8, {0x2, 0x8}}, {0x274, 0x7, {0x3, 0xb}}, {0xcc, 0x8, {0x0, 0xad1}}, {0x3d8d, 0x9, {0x3, 0x2}}, {0x4, 0x6}, {0xa, 0x0, {0x2, 0x1}}, {0xb, 0x8, {0x2, 0x9}}, {0x5, 0xd, {0x3, 0x4}}, {0x4, 0x800, {0x0, 0x800}}, {0x8, 0x4, {0x0, 0x5}}, {0x1, 0x3, {0x2, 0x8}}]}}}, {{0x254, 0x1, {{0x2, 0x81}, 0x6, 0x1, 0x40, 0x9, 0x25, 'syz1\x00', "63f4db3e5e9b7d1ad0d328d81a4c9bf74cf1be77dd618860356f9bccc4e0fe61", "9304a6534fcd5553a2c7d974ef20dc8b841458d5d58b7d779711a06f38be9b82", [{0xf8ae, 0x1, {0x2, 0x2d0}}, {0x101, 0xbdc5, {0x3, 0x1}}, {0x2, 0x9, {0x3, 0x1}}, {0x9, 0x5, {0x1, 0x3}}, {0x401, 0xb, {0x1, 0xc8}}, {0x10, 0x5, {0x2, 0x40}}, {0x300b, 0x0, {0x0, 0xfffffff9}}, {0x4, 0x4, {0x1, 0x3a}}, {0x1, 0x400, {0x2, 0x2b34000}}, {0x1, 0x3ff, {0x3, 0x9}}, {0x2, 0x5, {0x1, 0x40}}, {0xb, 0x8, {0x0, 0x8}}, {0x7, 0x4, {0x0, 0x2}}, {0x9, 0x8001, {0x2, 0x9}}, {0x3, 0x4, {0x3, 0x5}}, {0x400, 0x3, {0x3, 0x8}}, {0x6, 0x6, {0x1, 0xfffffffc}}, {0x0, 0x4, {0x2, 0xffff096a}}, {0x5, 0x2, {0x3, 0xd}}, {0x4, 0x0, {0x0, 0x80000001}}, {0xd, 0x4, {0x3, 0x6}}, {0x4, 0x3, {0x3, 0x5}}, {0x5, 0x0, {0x1, 0xbf5a}}, {0xb, 0x200, {0x2, 0x3}}, {0x5, 0x5, {0x2, 0x7}}, {0xfff7, 0x0, {0x3, 0x1}}, {0x9, 0x7, {0x0, 0x80000000}}, {0x2, 0xfb19, {0x2, 0x1}}, {0x4, 0x6d6e, {0x2, 0x3}}, {0x1, 0x3, {0x0, 0x6cf}}, {0x7, 0x8, {0x1, 0x8}}, {0x851b, 0x0, {0x1, 0x3ff}}, {0xe8c, 0x0, {0x3, 0x1000}}, {0x0, 0x1, {0x1}}, {0x3, 0x1, {0xa6e75a6110be8621, 0x6}}, {0x2a, 0xd, {0x67416b5b94e73447, 0x80000001}}, {0x0, 0x7, {0x2, 0x722}}, {0x5, 0x3, {0x2, 0x6}}, {0x2, 0x100}, {0x9, 0x3, {0x3, 0xfffffffc}}]}}}, {{0x254, 0x1, {{0x2, 0x7}, 0x5, 0xad, 0x8, 0x40, 0x1b, 'syz0\x00', "8cef1276fbf7096fb0d38192d05b6196931411df7bba4a21521cb7e464b94e62", "432a99ee6d31e6cabda7cc31b276173f3673ac9e48281db2682fdbc35d1383ac", [{0x9b3d, 0x6, {0x0, 0xfffffffa}}, {0x2, 0x4, {0x1, 0x1ff}}, {0x0, 0x0, {0x2, 0x10000}}, {0x6, 0x5, {0x3, 0x4}}, {0x4a, 0xecfd, {0x0, 0x9}}, {0x4, 0xd, {0x0, 0x9}}, {0xfffd, 0x5, {0x1, 0x7}}, {0xa, 0x7, {0x2, 0x1000}}, {0x401, 0x8000, {0x0, 0x8001}}, {0xdce3, 0x81, {0x1, 0x8}}, {0x0, 0x8, {0x0, 0x569}}, {0x1, 0x6a4, {0x1, 0x5e70f2d8}}, {0x7, 0x86c7, {0x1, 0x3}}, {0x1ff, 0x100, {0x1}}, {0x3, 0x9, {0x0, 0x7}}, {0xfffb, 0xa42f, {0x3, 0x2}}, {0x2, 0x10, {0x0, 0x5}}, {0x9, 0x8}, {0x9, 0x7, {0x1, 0x5}}, {0x9597, 0x0, {0x1, 0xbe6}}, {0x3, 0x4b5d, {0x2, 0x506}}, {0x4, 0x48, {0x1, 0xb}}, {0x200, 0x4, {0x2, 0x8}}, {0x4b, 0x6, {0x1, 0x400}}, {0x4, 0x2, {0x3, 0x2}}, {0x1, 0x6, {0x0, 0x1}}, {0x1, 0xe4e3, {0x0, 0x2}}, {0x200, 0x8000, {0x0, 0x6}}, {0x9, 0x2, {0x3, 0x298c}}, {0x0, 0x7, {0x0, 0x3}}, {0x1, 0x80, {0x3, 0x100}}, {0x0, 0x7ff, {0x0, 0xffff55a7}}, {0x7, 0x0, {0x0, 0x3a000000}}, {0xd, 0xfffa, {0x0, 0x8}}, {0x6, 0x13, {0x2, 0xd}}, {0x0, 0x9, {0x3}}, {0xba1, 0xffff, {0x2, 0x9}}, {0x0, 0x0, {0x0, 0x6}}, {0xf800, 0x8, {0x1, 0x1ff}}, {0x400, 0x8652, {0x0, 0x10}}]}}}, {{0x254, 0x1, {{0x3, 0x1000}, 0xc, 0x10, 0xe, 0x3, 0x16, 'syz1\x00', "b118a409c80cae46554f9b40ba6eb52d6338128816f79410547b7647c27af879", "f03e1bfde4c9013d7f6458f5ef74678a86a57984449815eccec029f5819f543d", [{0xffff, 0x2897, {0x2, 0x8}}, {0x2, 0x7fff, {0x2, 0xf}}, {0x7, 0x51, {0x0, 0x3}}, {0x10, 0x9, {0x3, 0x1}}, {0x800, 0x2, {0x1, 0x7fffffff}}, {0xffff, 0x0, {0x3, 0x7b688e67}}, {0x5, 0x400, {0x0, 0xfffffffe}}, {0x3, 0x3f0, {0x2, 0x7}}, {0x7b, 0x4, {0x1, 0x18}}, {0x401, 0x2, {0x0, 0x100}}, {0x4, 0x6, {0x0, 0x7fffffff}}, {0x4, 0x5, {0x3, 0x2}}, {0x5, 0x3, {0x2, 0xf3a3}}, {0xbc8, 0x4564, {0x0, 0x1d}}, {0x3, 0x81, {0x2, 0x4}}, {0xf1e6, 0xe, {0x2, 0xfbf}}, {0xd, 0x800}, {0x6, 0x6f2a, {0x1, 0x2}}, {0xf000, 0x3, {0x0, 0xffffffff}}, {0x5, 0x9, {0x0, 0xb}}, {0x6a6b, 0x4, {0x0, 0x3}}, {0x80e, 0xff, {0x1, 0x4e}}, {0x400, 0x100, {0x0, 0x6}}, {0x6, 0x682, {0x2, 0x40}}, {0x2, 0x2, {0x6}}, {0x9, 0x6, {0x3, 0x6}}, {0x6, 0xfe42, {0x2, 0x8b}}, {0x100, 0x2, {0x1e5f06e9096661c1, 0x101}}, {0xffff, 0x9a, {0x1, 0x400}}, {0x8, 0x779e, {0x3, 0x9}}, {0x0, 0xe, {0x1, 0x28}}, {0x1800, 0x8, {0x3, 0x8}}, {0x5, 0x8, {0x0, 0x7}}, {0xaf4, 0x3, {0x3, 0x3}}, {0x6, 0x7, {0x1, 0x7530}}, {0x7, 0x9, {0x2, 0xfffffff9}}, {0x3d, 0xfffe, {0x3, 0x1}}, {0x7f, 0x0, {0x0, 0xa0000}}, {0xc499, 0x1, {0x2, 0x8}}, {0x7, 0x2, {0x0, 0xa}}]}}}, {{0x254, 0x1, {{0x1, 0x7}, 0x3, 0x6, 0x8001, 0xfff9, 0x7, 'syz1\x00', "31c000a6fdf3a8c845e7f0836d367ce5be4c90be4590d61c29efba8162c12d50", "d775b0af10740a3e2c9d43194f7fa454414bc35258c159e455dcc7aab877f34f", [{0x3, 0x6, {0x1, 0x87f0}}, {0xfff9, 0x3, {0x33451fd020ebad9, 0xf}}, {0x3, 0x80, {0x2, 0x2}}, {0xfff8, 0x1, {0x3, 0x1}}, {0xc48, 0x5}, {0x2, 0x52a, {0x2, 0x3}}, {0x2, 0xf, {0x2, 0x101}}, {0x7, 0x1000, {0x2, 0x1}}, {0x4, 0x8001, {0x0, 0x400}}, {0x8, 0xc1, {0x2, 0x2}}, {0x5, 0x0, {0x0, 0x7fff}}, {0x10, 0x400, {0x1, 0x5}}, {0xf, 0x6, {0xc98c32865e6f6abf, 0xd9}}, {0x9, 0x894, {0x0, 0x5}}, {0x8c3d, 0x3, {0x3, 0x70}}, {0x3, 0x74, {0x3, 0x4}}, {0x0, 0x4, {0x3, 0xff}}, {0x8, 0x31, {0x0, 0x6}}, {0x0, 0x8, {0x3, 0x8}}, {0x200, 0x4, {0x2, 0x98}}, {0xff, 0xfff7, {0x1, 0x7}}, {0x3, 0xfff7, {0x3}}, {0x1000, 0x5, {0x3, 0x1}}, {0x6, 0x4, {0x3, 0x7fffffff}}, {0x1, 0x9080, {0x3, 0x6}}, {0x101, 0x7, {0x1, 0x5152}}, {0x2819, 0x6, {0x2, 0x664f}}, {0x6, 0x1, {0x1, 0x4}}, {0x5, 0x3, {0x3, 0x8}}, {0x6, 0x85a, {0x1, 0x4}}, {0x6, 0x1ff, {0x2, 0x57f}}, {0x1, 0xff, {0x0, 0x1}}, {0x7, 0x9, {0x3, 0xf}}, {0x0, 0x1f, {0x2, 0x100}}, {0x100, 0x0, {0x3, 0x81}}, {0x7, 0x3ff, {0x3, 0x2}}, {0x1, 0x7, {0x2, 0xbf1}}, {0x3, 0xffff, {0xb1bbaeeaad0ae83, 0xff}}, {0x5, 0x5, {0x0, 0x5}}, {0x3, 0x0, {0x3, 0x5261}}]}}}, {{0x254, 0x1, {{0x2, 0x1000}, 0x4, 0x3, 0xbb89, 0x0, 0xd, 'syz1\x00', "74c9fb1d8caa2341bc98a6cfa431a12037037071712099c981926ed2db8e4b72", "d3087c37d49188fccadee6d1a2e2f526be29dc1191bf687f58333bdcb458779d", [{0x713, 0xd, {0x0, 0x3}}, {0x4, 0x7, {0x3, 0xc}}, {0x800, 0x7, {0x1, 0x8}}, {0x6, 0x37d, {0x2, 0x4ada}}, {0x0, 0x7, {0x0, 0x6}}, {0x7fff, 0xbb8, {0x3, 0x10}}, {0x3, 0x3, {0x2, 0xfffffffe}}, {0x3, 0x7, {0x0, 0x38c}}, {0x200, 0x4, {0x1, 0x6}}, {0x6, 0x8000, {0x0, 0x8b}}, {0x5, 0xc, {0x3, 0xe70}}, {0x1ff, 0x7, {0x4ecfd766b98305c8, 0xe}}, {0x8c6a, 0x2, {0x2, 0x6}}, {0x0, 0x56, {0x0, 0x6}}, {0x8, 0xa, {0x0, 0x6}}, {0x9, 0x7fff, {0x3, 0x8}}, {0x77bc, 0x3, {0x0, 0x10}}, {0x0, 0x9, {0x1}}, {0x2, 0x8, {0x2, 0x8}}, {0x1d73, 0x8, {0x0, 0x4}}, {0x3000, 0x1ff, {0x0, 0xaea8}}, {0x2, 0x5, {0x3, 0x1}}, {0x5, 0x0, {0x0, 0x3127}}, {0x8, 0x3, {0x0, 0x4}}, {0xf, 0xffff, {0x3, 0xd}}, {0x7fff, 0x100, {0x1, 0x3}}, {0xfff, 0x7, {0x1, 0x8}}, {0x3fc, 0x3, {0x3, 0x6}}, {0x8, 0x9, {0x1, 0x1}}, {0x8, 0xa48, {0x0, 0x10001}}, {0x401, 0xd6b6, {0x3, 0xf112}}, {0x3, 0xfffe, {0x0, 0x8}}, {0x0, 0x7ff, {0x0, 0x8001}}, {0x8, 0x0, {0x3, 0xe0000000}}, {0xc, 0x401, {0x0, 0x4}}, {0xa, 0xe, {0x0, 0x8}}, {0x9, 0x5, {0x3, 0xc}}, {0x1, 0xe8c, {0x0, 0x1}}, {0xe, 0x10, {0x2, 0x8515}}, {0x4, 0x848a, {0x0, 0xfff}}]}}}, {{0x254, 0x1, {{0x1, 0x8e}, 0xff, 0x7, 0x4, 0xc3, 0x1, 'syz0\x00', "74a86ef144fef0c823f277f8af02fa4956e2e65a3a90c95a7ee842d97c468f31", "91d8d4b548aa5769de4c262aab7012c05280fec56b6f7f54da83bbe77db81b1e", [{0x2, 0x0, {0x2, 0x144eadfc}}, {0x3, 0x4, {0x2, 0xfffffff8}}, {0x9, 0x9, {0x2, 0x5}}, {0xa1, 0x1, {0x3, 0x1}}, {0x7, 0x6, {0x0, 0x4}}, {0x2, 0xffff, {0x0, 0x66}}, {0x8, 0x9, {0x3, 0x804}}, {0x6, 0x2, {0x0, 0x1ff}}, {0x5, 0xbc00, {0x1, 0x10}}, {0x2, 0x7, {0x2, 0x2}}, {0xfff9, 0x1000, {0x1, 0x1}}, {0x87f2, 0xc6, {0x1, 0x7}}, {0x9, 0x4, {0x2, 0x9}}, {0x0, 0x6, {0x1, 0x6d}}, {0x4, 0x1, {0x3, 0x654}}, {0x6, 0xff, {0x2, 0xe70e}}, {0xb217, 0x1, {0x1, 0x37d5}}, {0xbcb2, 0xb, {0x3, 0x39f}}, {0x1ff, 0xffe1, {0x2, 0xffffffff}}, {0x19b, 0x0, {0x3}}, {0x2, 0x0, {0x0, 0x7}}, {0x4, 0x9, {0x2}}, {0xff, 0x0, {0x1, 0x7}}, {0x1d4, 0xfff8, {0x0, 0x5fb}}, {0x7, 0x5, {0x3, 0xe45c}}, {0xe, 0x4, {0x1, 0x9}}, {0x200, 0x0, {0x2, 0x3}}, {0x0, 0x70a5, {0x3, 0x1}}, {0x3, 0x9, {0x1, 0x1}}, {0x4, 0x1ff, {0x0, 0x80000000}}, {0x40, 0x81, {0x3, 0x7f}}, {0x7, 0x4, {0x0, 0xdb6}}, {0x8, 0xff, {0x2, 0xfffffffd}}, {0x4, 0x800, {0x0, 0x4}}, {0x7fff, 0x5, {0x1, 0xfff}}, {0x0, 0x2, {0x0, 0x80000}}, {0x8, 0x2b, {0x1, 0x80}}, {0x3, 0x7fd, {0x2, 0x50}}, {0x5, 0x10, {0x1, 0x7}}, {0x40, 0x5, {0x0, 0x2}}]}}}]}, 0x1060}, 0x1, 0x0, 0x0, 0x80}, 0x51)
pidfd_getfd(0xffffffffffffffff, r2, 0x0) (async)
r4 = pidfd_getfd(0xffffffffffffffff, r2, 0x0)
ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f00000028c0)=0x8000)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nbd(&(0x7f0000002940), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000002a00)={&(0x7f0000002900)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000029c0)={&(0x7f0000002980)={0x20, r6, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x40080}, 0x20000000)
ioctl$EXT4_IOC_GETFSUUID(r4, 0x8008662c, &(0x7f0000002a40))
syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000002a80)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) (async)
r7 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000002a80)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0)
syz_usb_control_io(r7, &(0x7f0000002e40)={0x2c, &(0x7f0000002b00)={0x40, 0x1, 0xf2, {0xf2, 0x21, "ab50f7b5387bd32e7a87725bbe81961ff7f2d8bc9b059192ec907b40f9ae6aef2dea403dd0fd5c56680a6f3cdd5c7dfe9a56f2d6471d1b84ecd1f34ecfda2f6d2997889a69b97b9a965af77e14dacb1fcbbfd3f12de5376f8178e8af3b526841e8930581e73cce357de01c3e33777921994bea5404f8ef11ce87375a588aefecafd363c73b065f884d7e2bc859f6cb6646b4e4c54c5f37b4959c70e1e66830015f88f8b8f3b36d8a877e077f010c773df122a1b47510ee7ca8966e1237957e4eafac5af0a01556cfbe077523f56e116be903e2dfa9571d8afd824071ab3a5e39656a37d2638dd8cd4e1b0a918077cac4"}}, &(0x7f0000002c00)={0x0, 0x3, 0x6b, @string={0x6b, 0x3, "db80fe897903bd65a171c329b0458c87c22c744404dc3cba9980d0ae8f8422e04d166ae17d01665d72aa508c416f61ff936fd15ac829e74ebf2a2252c27cd10c13fb76d420dad48723ebf698957459e2ddac03784ae58283b47ea746d92b2134b1fecde8a85b9ce0c1"}}, &(0x7f0000002c80)={0x0, 0xf, 0x11c, {0x5, 0xf, 0x11c, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x5, "917aa647bc5e400776f4f96c0909b113"}, @ssp_cap={0x20, 0x10, 0xa, 0x9, 0x5, 0x6, 0xf00f, 0x4, [0x3f00, 0x3f1e, 0xff0000, 0xf33ed003df01015b, 0x808000]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x1, 0x4, 0x9, 0x9}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x9, 0x8, 0x6}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x9, 0xff, 0x6, 0xff}, @generic={0xc5, 0x10, 0x0, "a213c8110e62a9483a8479518ed8de167f5caed015370440f2bb8e32a56ab2fa54c3600617bd32cd303af614f39b02973b5f8e8a7cea318cd2177bcfee923e940a407bce65b4c55c55d06e6ec3f2fae72af83d8f649c08e078555a03191d76e012b371d691b9c7a30b760cba9ff5274e6ef1b731ca6a655f1a1efd2ea0ff94e1b899e11edfb905109589b98db12d3742b17f189de87c2fb14a27ca25bc68cded4030ded0a36b0348ff2a47df8d7e6cdaa30c5819f7ccc225b146fdc3d308ff5db55b"}]}}, &(0x7f0000002dc0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x5, 0x11, 0x8, 0xe, "64e7a466", "e93084e4"}}, &(0x7f0000002e00)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x0, 0x6, 0x5d, 0x5, 0xff86, 0x5}}}, &(0x7f0000003340)={0x84, &(0x7f0000002e80)={0x40, 0x3, 0xbc, "4aff833f8d796d558e3d75fb00dee0c9ec60befb336aa596001c4c4588956b65c73a249f70d4576a2f164b1a38348f0401bebb86085628e039a05aadaa285c73cb96ba7c5f6fb2b273c1f656c1618cc8c76d5422d2d6242899fed3a0f3095f1f4aa1316d893ede66dc343af8d1b6c4ea8a7a4d0e3b01bc660889df6f3b1165abdf898baa3ad1997afc9af28266067e848e865a269306b489e8d97ad08e9cecbf73519706c523007ed6b2a40aa0d9b626424cfdf2ada970ee885927f4"}, &(0x7f0000002f80)={0x0, 0xa, 0x1, 0x75}, &(0x7f0000002fc0)={0x0, 0x8, 0x1, 0x4c}, &(0x7f0000003000)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000003040)={0x20, 0x0, 0x8, {0x1e0, 0x2, [0xff00]}}, &(0x7f0000003080)={0x40, 0x7, 0x2, 0x6}, &(0x7f00000030c0)={0x40, 0x9, 0x1, 0x6}, &(0x7f0000003100)={0x40, 0xb, 0x2, "7e13"}, &(0x7f0000003140)={0x40, 0xf, 0x2, 0x3}, &(0x7f0000003180)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f00000031c0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, &(0x7f0000003200)={0x40, 0x19, 0x2, "f851"}, &(0x7f0000003240)={0x40, 0x1a, 0x2}, &(0x7f0000003280)={0x40, 0x1c, 0x1, 0x5}, &(0x7f00000032c0)={0x40, 0x1e, 0x1, 0x99}, &(0x7f0000003300)={0x40, 0x21, 0x1, 0xe}})
ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, &(0x7f0000003400)={0xd, 0x4}) (async)
ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, &(0x7f0000003400)={0xd, 0x4})
syz_emit_vhci(&(0x7f0000003440)=@HCI_SCODATA_PKT={0x3, {0x1, 0x93}, "8e0cf65aa92fbbe9736f6b38f3af09e764f558f5caf61c73f0c619bbd9f74e322e0b4cd6d7c61a0fd7d97af352f5f69b847d5e9642f831b74cce58945fe6356f84c43b2e6508c9d02f896098f4afd2aaa06e98dedb2e1cd166ae80831213b5a58d6835c6905b19a8ddf70dcd4deb67228cab0b7ab555c3745e3308214397526994a0f6432da8281897f38d1883f6d5a478858b"}, 0x97)
ioctl$VT_WAITACTIVE(r0, 0x5607)
syz_genetlink_get_family_id$wireguard(&(0x7f0000003500), r4) (async)
syz_genetlink_get_family_id$wireguard(&(0x7f0000003500), r4)
sendmsg$NFT_MSG_GETSET(r3, &(0x7f0000003980)={&(0x7f0000003540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003940)={&(0x7f0000003580)={0x394, 0xa, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_SET_USERDATA={0xfb, 0xd, 0x1, 0x0, "9c13b51381ee6c11ef5107eed9b8b4e19d05013ff5823f7fb72378775cb8b6f3386c51727666d103ffec02301a2a5006dcf5ffe6dc8500c4e027090ea5197d7dfff4d3317f49a09041de9f82840ee83e7668f716b050fe729cd000b91586a2768fa2d6e390532689c18a4c3be9a8b657274d44cbeb64ca07dc75675667ffda3ecfa40edc5fd29208af966594d2ed81896f8bf8122ce96a1d8eccb70a63814fc60a3947be513b96ea4257f4a8c0d0526da0103a91d4dbe8c929e71be29b1326ee55541348da336e4b1915c940bc8d96af5a9ec7d800df13a254e52c21d9791b4658214fa14c16c658fa8832e64c1b9dd4a6c87e2dd3bc35"}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @quota={{0xa}, @void}}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0xa}, @NFTA_SET_DESC={0xcc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x2c, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x89}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7f}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_DESC_CONCAT={0x3c, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xda}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8477}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_DESC_CONCAT={0x50, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x85}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x100}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa18}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}]}]}, @NFTA_SET_DESC={0x18c, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8}, @NFTA_SET_DESC_CONCAT={0xb8, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb588}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff8}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10000}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fffffff}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x300}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1d7}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7ff}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7f}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_DESC_CONCAT={0x2c, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffa}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}]}, @NFTA_SET_DESC_CONCAT={0x84, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6108}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff8000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x8000}]}]}, 0x394}, 0x1, 0x0, 0x0, 0x104}, 0x4000000) (async)
sendmsg$NFT_MSG_GETSET(r3, &(0x7f0000003980)={&(0x7f0000003540)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003940)={&(0x7f0000003580)={0x394, 0xa, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_SET_USERDATA={0xfb, 0xd, 0x1, 0x0, "9c13b51381ee6c11ef5107eed9b8b4e19d05013ff5823f7fb72378775cb8b6f3386c51727666d103ffec02301a2a5006dcf5ffe6dc8500c4e027090ea5197d7dfff4d3317f49a09041de9f82840ee83e7668f716b050fe729cd000b91586a2768fa2d6e390532689c18a4c3be9a8b657274d44cbeb64ca07dc75675667ffda3ecfa40edc5fd29208af966594d2ed81896f8bf8122ce96a1d8eccb70a63814fc60a3947be513b96ea4257f4a8c0d0526da0103a91d4dbe8c929e71be29b1326ee55541348da336e4b1915c940bc8d96af5a9ec7d800df13a254e52c21d9791b4658214fa14c16c658fa8832e64c1b9dd4a6c87e2dd3bc35"}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @quota={{0xa}, @void}}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0xa}, @NFTA_SET_DESC={0xcc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_CONCAT={0x2c, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x89}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7f}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_DESC_CONCAT={0x3c, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xda}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8477}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_DESC_CONCAT={0x50, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x85}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x100}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xa18}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}]}]}]}, @NFTA_SET_DESC={0x18c, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8}, @NFTA_SET_DESC_CONCAT={0xb8, 0x2, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb588}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffff8}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x10000}]}, {0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fffffff}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7ff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x300}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xe9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}, {0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1d7}, @NFTA_SET_FIELD_LEN={0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7ff}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x7f}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_DESC_CONCAT={0x2c, 0x2, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xfffffffa}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}]}, @NFTA_SET_DESC_CONCAT={0x84, 0x2, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6108}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fffffff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xffff8000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0x4c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7fff}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x8000}]}]}, 0x394}, 0x1, 0x0, 0x0, 0x104}, 0x4000000)
ioctl$TCGETA(r0, 0x5405, &(0x7f00000039c0)) (async)
ioctl$TCGETA(r0, 0x5405, &(0x7f00000039c0))
sendmsg$TIPC_NL_LINK_SET(r4, &(0x7f0000003b00)={&(0x7f0000003a00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000003ac0)={&(0x7f0000003a40)={0x68, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_NET={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffffffff}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK={0x2c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x40)
sendmsg$IPSET_CMD_GET_BYNAME(r4, &(0x7f0000003c40)={&(0x7f0000003b40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000003c00)={&(0x7f0000003b80)={0x50, 0xe, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x400d4}, 0x800) (async)
sendmsg$IPSET_CMD_GET_BYNAME(r4, &(0x7f0000003c40)={&(0x7f0000003b40)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000003c00)={&(0x7f0000003b80)={0x50, 0xe, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}, 0x1, 0x0, 0x0, 0x400d4}, 0x800)
sendmsg$IPSET_CMD_GET_BYNAME(r4, &(0x7f0000003d40)={&(0x7f0000003c80)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000003d00)={&(0x7f0000003cc0)={0x24, 0xe, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x9}, 0x20000800)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$l2tp(&(0x7f0000003d80), r8)
setsockopt$inet_sctp_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000003e40)={0x0, 0x228, 0x2, [0x100, 0x8]}, 0xc) (async)
setsockopt$inet_sctp_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000003e40)={0x0, 0x228, 0x2, [0x100, 0x8]}, 0xc)

2.276357201s ago: executing program 2 (id=321):
syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000005140)='./file0\x00', 0x0, &(0x7f0000005180), 0x1, 0x50ec, &(0x7f00000051c0)="$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") (async)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r0, &(0x7f00000005c0)='\"', 0x1, 0x4fed0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, &(0x7f0000000340), &(0x7f0000000380)=r2}, 0x20) (async)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async)
syz_mount_image$msdos(&(0x7f0000000940), &(0x7f0000001cc0)='.\x00', 0x1a4a438, &(0x7f0000000300)=ANY=[], 0xb, 0x0, &(0x7f0000000300)) (async)
r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x6, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000010000000000000000018200000", @ANYRES32=r3, @ANYBLOB="0000000000000000c30000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x8, 0xdf, &(0x7f0000001400)=""/223, 0x0, 0x43}, 0x94) (async)
mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x9)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, 0x0, 0x0, 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0)
sendfile(r0, r0, 0x0, 0xe3aa6ea)

2.271810032s ago: executing program 2 (id=322):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0e0000476c4d6a83f50004000000040000000400000000000000ffd69c5f9a6b60a1499c6cb330a70a8ad0379455918f436e3bee97c47b1f198fa4c34603b288c4514d424bc78c78b2cc1a6218cf42c42855d6a0ba8ee6591b32e89c7bc2668b8e58192b546ce36c700fdae97b944beb19618e6214957d1175efa2dec3805b2d1ff7893e16608b70b37f14234652028b074b9d2acdcb4834da200d85707a08fae309b6b6797d8bfeb2028d5fd7194ac9120a7f1376af1becf8e32252fbd9d53b030000000000000065ff2abafd130b0e8a368ec391627aabf130d38642b7", @ANYRES32=0x1, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0x14, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000001000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001240)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x18)
r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000001740)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1}, 0x6d)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, <r5=>0x0}, 0x8)
r6 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r6, &(0x7f0000000740)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58)
r7 = accept4(r6, 0x0, 0x0, 0x0)
sendto$packet(r7, &(0x7f00000002c0)="48357e0287af48ffa745b497a54e0eec1bf2c69011f35b48339d15afaef1bd7efe075ff441b16e244b8b05fe09e29583ad142567826dfa5cbc6f979b050015bde8c4441cd0fa6be03213181bfe84743015ec12ced8b1aa8f44e5c30afac6f9fd2ab1303be0d1b2c02533bcc97cce7da9b507b053b11821323590d379e9e350a3291fbedb6382de878b7a56e4e38c7f746d04", 0x92, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1c, 0x3, &(0x7f0000000640)=@framed={{0x18, 0x2, 0x0, 0x7a, 0x0, 0x0, 0x0, 0x0, 0x3b}}, &(0x7f00000000c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r5, r4}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x8, 0x1, &(0x7f0000000040)=@raw=[@jmp={0x5, 0x1, 0xf, 0x8, 0xa, 0x50, 0xfffffffffffffff0}], &(0x7f00000000c0)='GPL\x00', 0x3, 0xf5, &(0x7f0000000280)=""/245, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x8, &(0x7f0000000140)={0x2, 0x2}, 0x8, 0x10, &(0x7f0000000180)={0x1, 0xb, 0x9, 0x1507}, 0x10, r5, r2, 0x0, &(0x7f0000000200)=[r1, r1, r1], 0x0, 0x10, 0xffffff98}, 0x94)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
r9 = open_tree(r8, &(0x7f00000001c0)='./cgroup\x00', 0x8901)
move_mount(r8, 0x0, r9, 0x0, 0x46)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r10=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r10, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6}]}, 0x10)
r11 = openat$cgroup_int(r0, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0)
write$cgroup_subtree(r11, &(0x7f0000000100)=ANY=[@ANYBLOB='-0'], 0x9)
r12 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
ioctl$sock_rose_SIOCRSCLRRT(r12, 0x89e4)
syz_clone(0x84000100, 0x0, 0x0, 0x0, 0x0, 0x0)

2.157018934s ago: executing program 2 (id=323):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x24, 0x140f, 0x1, 0x70bd25, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_CHARDEV_TYPE={0x9, 0x45, 'issm\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000840}, 0x4004804)
setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0x2, 0x3b}, 0x1c)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000000, 0x10031, 0xffffffffffffffff, 0x65be1000)
r3 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={0x0, 0x304000, 0x800, 0x6, 0x3}, 0x20)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000180)=@req3={0x6, 0x2, 0x500d, 0x6, 0x3, 0x7, 0x5}, 0x1c)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'gretap0\x00'})
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x6c, 0x30, 0x871a15abc695f91d, 0x0, 0x80000, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xcc1}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x3468802, 0x40, 0x1, 0x3, 0x7ffffffc}, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000004}, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

1.936357902s ago: executing program 2 (id=324):
r0 = socket$igmp(0x2, 0x3, 0x2)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000080)={@multicast2, @dev={0xac, 0x14, 0x14, 0x1f}, 0x0, "344162522924e1998e4199bc5e463e4c1f7a7781248b159b0c00ff000500", 0x2, 0x7f, 0x8, 0x8}, 0x3c)
ioctl$SIOCGETSGCNT_IN6(r0, 0x89e1, &(0x7f0000000140)={@local, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000640)={'wlan0\x00', <r3=>0x0})
r4 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_STATUS64(r4, 0x40084149, &(0x7f0000000080)) (async)
ioctl$SNDRV_PCM_IOCTL_STATUS64(r4, 0x40084149, &(0x7f0000000080))
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async)
sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x34, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_MAC_HINT={0xa, 0xc8, @random="5b8bdf9592bf"}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)

1.31941749s ago: executing program 0 (id=325):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0b00000007000000080000000800000005"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000027b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async)
r2 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r3, &(0x7f00000007c0)={0x1f, 0x3, 0x3}, 0x6) (async)
sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff00000000017c0000040042800c0001800621060090390000100002"], 0x34}, 0x1, 0x0, 0x0, 0x4000895}, 0xc000)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000701feffffff0000000002"], 0x34}, 0x1, 0x0, 0x0, 0x4000895}, 0xc000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) (async)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f00000003c0)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@auto_da_alloc}, {@noload}, {@nodiscard}], [{@obj_user}, {@smackfsfloor={'smackfsfloor', 0x3d, 'max_batch_time'}}, {@appraise}, {@smackfsdef={'smackfsdef', 0x3d, ']-)\xc5.{\xa7%'}}, {@subj_type={'subj_type', 0x3d, '/'}}]}, 0x64, 0x51c, &(0x7f0000000a00)="$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")

1.045409435s ago: executing program 3 (id=326):
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0x0, &(0x7f0000000300)={0x1, 0xf7e}, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
socket$nl_rdma(0x10, 0x3, 0x14)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket(0x15, 0x5, 0x0)
getsockopt(r4, 0x200000000114, 0x2721, 0x0, &(0x7f0000000000))
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYRES64=r0, @ANYRESDEC, @ANYRESHEX], 0x48)
r5 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000009000000dd0b1dcc0dc822c567886097e89bd8"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x8}, 0x94)
shutdown(r0, 0x0)
close(0xffffffffffffffff)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={<r6=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000640)={0x10, 0x3f8, 0x300, 0x70bd2d, 0x25dfdbfd, "", ["", "", "", "", ""]}, 0xffffffffffffffb7}, 0x1, 0x0, 0x0, 0x77bca45933760956}, 0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r6, @in={{0x2, 0x4e21, @remote}}}, &(0x7f0000000040)=0x84)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000240)={r6, @in={{0x2, 0x4e20, @multicast1}}, [0x401, 0x7, 0x2bcd, 0x5, 0x2, 0x28e, 0x3, 0x3, 0x9476, 0xd99, 0xb, 0x8, 0x1, 0x7, 0x7]}, &(0x7f0000000180)=0x100)

574.427011ms ago: executing program 0 (id=327):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = inotify_init()
inotify_add_watch(r1, &(0x7f0000000000)='.\x00', 0x400017e)
mkdir(&(0x7f0000000300)='./file1\x00', 0xfffffffffffffff1) (async)
syz_emit_ethernet(0xfdef, 0x0, 0x0)
r2 = syz_io_uring_setup(0x4f73, &(0x7f0000000640)={0x0, 0xc967, 0x20, 0x0, 0x40000237}, &(0x7f00000006c0)=<r3=>0x0, &(0x7f00000000c0)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) (async)
syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) (async)
io_uring_enter(r2, 0x47b6, 0x800000, 0x0, 0x0, 0x0) (async)
r5 = socket(0x40000000015, 0x5, 0x0)
bind$inet(r5, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) (async)
getsockname$packet(r5, 0x0, &(0x7f0000000180))
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f00000017c0)='./file1/file0\x00', 0x4, &(0x7f00000000c0)=ANY=[], 0x1, 0x612d, &(0x7f000001b000)="$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") (async)
r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) (async)
r7 = getpid()
sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) (async)
ptrace$setregs(0xf, r7, 0xc7, &(0x7f00000005c0)="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") (async)
lseek(r6, 0x50000000, 0x1) (async)
r8 = socket$rxrpc(0x21, 0x2, 0xa)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r9=>0xffffffffffffffff, <r10=>0xffffffffffffffff})
recvmsg(r9, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) (async)
sendmsg$tipc(r10, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
sendmmsg$sock(r0, &(0x7f0000000f00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000300)="6f2fdd9ec45cc6411a5f559113bf33aa5c2590598d509bfd796347498f76c038d9285228b5419230ef6ba87d1698a2d288a7953d3f3259de44eceaa15ff35d56b88a2802905fde8ac5e4db5979ed6e0dbf2b4768b2952e03ae70cfd23194fa118c27d8cc19e43d5793e7aa20a443937c7ff074efbf00b33b01c59226ddd2096dd82374cc64dcdfe893496cb3f25c2f2d393667e23a02af1deff75f743d56a1a5e052bffdf30999d9792ae939958e930b8c852f99761c681236c9a5f809", 0xbd}, {&(0x7f0000000540)="0703a7c3f2bebb055d1e52892e9bf7c74ef6e9a87b37501b33be0951013a91dac8593aac1cdfbda89aec802800eeaa4b250f285c02a6ef938ae8a2d43803a586ec24658e2a3469ecfa29350e390b1be974a819d6c45ec858dfd693e4442766af8664f7afa025a915e812679a7af7aeee6d1cc62d3554271d08389fc4afc64be0c7e3f0cfaa7f0239034700000000", 0x8e}, {&(0x7f0000001640)="5c1aec6b067165864ac89d079f7ae228b12bd322e9076ef6626ecb969b18011809e68c7759a3b625d81edab4f55c3168b8c347f42d1e0df30c059b04ea938925f351d6404961009ab100b4720a6643d0b5240aeb09448730be5c3da8e4cc76efa4ab636643f702c74aafb6b52bbc4ebcadd617ca84e7311734f3ed6b69be4071f4142e29d08ad6ac9ae6bf879a3c45b4daa9c91fe652988f7e", 0x99}, {&(0x7f00000006c0)="b616ee6f330ddb57e9ce7a0c58a66d5ef2b5c32e120200000086f42ec382731055e77ee8d728c3978a7aa65a700541aee6a81f6da206ea9b4a67f8a037a0d08119ba", 0x42}, {&(0x7f0000000740)="58b21162359c52272b5535876b05d4709fd42e4c01e3635bb7a91021d65f18fa36f3e3bd0205037b9e049f3f77fbdf4831478bc5dbdbdb5c3a49d607b90ab824bde681d13dabfe4157d3f22a6b319ccd09899322ce56347356c7e5d8fdf5027a4d0b63fadeae648f61404b134ef5e1", 0x6f}, {&(0x7f00000007c0)="27e5750b79a2e118266e181dd79f190df3f8ff918ed2a3f5599ec770c447a39b8bea726a54f949a73b3e309c95187ebfe8f7a95ad0bf75d69664e5c0790b09b81d1f194ed81cb7c8757b1bbce4ccce04418feef357c5e65cf7402e3000e5f0c247a4f5923cfbf1fd41485eac17631b2dd40d07e343f9bceaef81117f44a6932d20b6dd04d4f668738fa4c9509ba4f3221e5954b8f9dbc87b99db546780b22c004dfee35e9c41d1777b45b0c8087a5f325f17eed51c4bdea9f1d7c55d4b3c5fc41e1827eeff2cb0ac3eaa5a60708861080bea8d34", 0xd4}], 0x6}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000001100)="035667ca0000000000000000e81deb5ac064084d1f49557a10f3017890bc6ec2368bb3f5fc8158854542c6c0d1fda9455fbb52fe0500b5bb01c26d0a53ce1f06c0e383fa992aa025a7ed115635ffec2c9c3b915d4b9beb919744ddf38a9254ab4767b73fbaef1f75769b4a4d440801f44fadb7fd5be39640a915306adabb9c9d8b6f32ad286a4e9370", 0x89}, {&(0x7f0000000b40)="e830bf6980a60ca5a450bc8ff794a58de6f67b2218a3944a52c0b477335d14ae29ad3573fff74f99bf815fab6e5e8be6cac7037673fc5373e32e6b5b827138486240d8e9cf2dcfbc44ce7abf65dd79b9efadc93d8dc383c0ccad461617223c4d0b3cd8f2da4edbb8e7ff9350b05eb151a40d82932f334a364d896f4c61f3cbfae25211fda729594102650b7ffddecf79942022f1a77e7d8eba3dc076113b530de904f3dece9a8691a361d4c1fc9e124a7f97f1209694efc8d99970a1fba968b14877c5c1fb054e34917aff3f31", 0xcd}, {&(0x7f00000003c0)="0cb0d93bdf68ddfcfda8a4900ff37eea8cb48e", 0x13}, {&(0x7f0000000c40)="45ed63d2b4c4834e6240a30f4cb3ce4d89f30975b94238a8294326325f3f86381ba190ca87e40ce9f719fee915b02cc74b0238", 0x33}, {&(0x7f0000001700)="8c38dd033afd5a974fecb19c2d96b9716122de262d6d54c8a120ad2d9d9477c71ffd035537666cf6999156a72bdd0933d71c4c8cafe3f204ea1c2cb31ae10f4c36e1232981f7272970ecdb7196e8f925c008fa02aa577938b7f96602a7e72b44fcef090bb21495e49b3a1dd76a093b5f6beff23863736f2d6b2ed0d595950800714bc8a8d233d9b7296666c87a19abd29188e777eba6ea5dfc837c82a9550d9233d6474084e07f99a5f1069ddb", 0xad}, {&(0x7f0000001040)="3c81029d88386c4965a1d89703c154e63f4d7f", 0x13}], 0x6}}], 0x3, 0x4)
bind$rxrpc(r8, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e24, @multicast1}}, 0x24) (async)
r11 = syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x5883, 0x0, 0x0, 0xfffffdfc}, &(0x7f0000000040)=<r12=>0x0, &(0x7f0000000280)=<r13=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r12, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async)
syz_io_uring_submit(r12, r13, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) (async)
io_uring_enter(r11, 0x3516, 0x0, 0x0, 0x0, 0x0)
fanotify_init(0x2, 0x101000) (async)
getdents64(r6, 0x0, 0x4f)

475.664971ms ago: executing program 0 (id=328):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x121403, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, 0x0, &(0x7f0000000240))
sendmsg$inet6(r2, &(0x7f0000000340)={&(0x7f00000001c0)={0xa, 0x4e24, 0x7, @mcast2}, 0x12, 0x0, 0x0, &(0x7f0000000380)=ANY=[], 0x18}, 0x24004811)
ioctl$FS_IOC_SETFLAGS(r0, 0x40081271, &(0x7f0000000980)=0x4000)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r3)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x1c, &(0x7f00000002c0)=[@in6={0xa, 0x4e24, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7177}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r7=>0x0]}, &(0x7f0000000080)=0x5d6aff9e)
syz_usb_connect(0x2, 0x34, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000094d9d4084e080110aeed010203010902220001000000000904000001437b6a00090500000000000000070594ef", @ANYRESDEC=0x0], 0x0)
openat$mice(0xffffffffffffff9c, &(0x7f0000000100), 0x45040)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000080)={r7, @in6={{0xa, 0x4e24, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x7}}, 0x5, 0x0, 0x80000003, 0x104, 0xe2d8f2eb1d010935, 0x7, 0x6}, 0x9c)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000480)={r7, 0x4}, 0x8)
sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000002c000880140007800800050000000000080006000000000014000780080005000000000008000600ff00000043851d342eb54533a884e8de63459ad4aacf27e521ca946cba06ba86b36db1e90385e8fa2a5d0a8280ed02f21f6d5726076cdc43e0916c1dc9f66435da169b62c94b3b98cdc7c14d3e6aa7fa28fe5d743244375aced1bd0dba747dfdf89fda9734f49ca0d86709c7b6e04cc68517107bd4e3362b53a5d88b47061e5826ea92e67c28e662a96f1df8de19202088399dbd00d8bebfb199b4936f"], 0x54}}, 0x0)
r8 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r8, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000140)={<r9=>0xffffffffffffffff}, 0x13f, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r8, &(0x7f00000001c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0xe, @empty, 0x8}, r9}}, 0x30)
write$RDMA_USER_CM_CMD_LISTEN(r8, &(0x7f0000000c80)={0x7, 0x8, 0xfa00, {r9, 0x1}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r8, &(0x7f0000000d00)={0x1, 0x10, 0xfa00, {&(0x7f0000000cc0), r9}}, 0x18)
r10 = syz_open_dev$MSR(&(0x7f0000000080), 0x1, 0x0)
read$msr(r10, &(0x7f0000000240)=""/150, 0x96)
mount(&(0x7f0000000000)=@nullb, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='cramfs\x00', 0x800, 0x0)
r11 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x8800, 0x4a)
mkdirat(r11, &(0x7f0000000300)='./file0\x00', 0xc5)

126.586891ms ago: executing program 3 (id=329):
r0 = signalfd(0xffffffffffffffff, &(0x7f0000000140), 0x8)
r1 = syz_io_uring_setup(0x38a9, &(0x7f0000000300)={0x0, 0x1595, 0x10100, 0x2, 0xc4}, &(0x7f0000000040)=<r2=>0x0, &(0x7f0000000180)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x3, r0})
io_uring_enter(r1, 0x44fd, 0x3, 0x1, 0x0, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r4}, 0x10)
rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xb, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000b5000000180102002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000a008900000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc85}, 0x94)

758.031µs ago: executing program 3 (id=330):
sendmsg$NL802154_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, 0x0, 0x800, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x408c4}, 0x4044000)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000380)={'erspan0\x00', &(0x7f0000000200)={'erspan0\x00', <r0=>0x0, 0x80, 0x20, 0x98b1, 0xf, {{0x4b, 0x4, 0x3, 0x7, 0x12c, 0x65, 0x0, 0x7f, 0x4, 0x0, @multicast2, @dev={0xac, 0x14, 0x14, 0x43}, {[@cipso={0x86, 0x55, 0x1, [{0x0, 0x12, "5b2d3d57dec32b8f60700e68219f4d9b"}, {0x5, 0xa, "679dcb7a33d38bcf"}, {0x1, 0x9, "5043c1b3084902"}, {0x0, 0x9, "4a627373d6c177"}, {0x2, 0x3, "eb"}, {0x1, 0xd, "901c755c3dc2fab6a820cc"}, {0x5, 0x7, "5e58a99825"}, {0x2, 0xa, "efb5d2e2d0f078bc"}]}, @timestamp_prespec={0x44, 0xc, 0xad, 0x3, 0x4, [{@broadcast, 0x7}]}, @lsrr={0x83, 0x7, 0x30, [@multicast1]}, @timestamp_addr={0x44, 0x24, 0x8e, 0x1, 0x8, [{@rand_addr=0x64010101, 0xfffffffd}, {@broadcast, 0x8}, {@rand_addr=0x64010102, 0xca42}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xe7b}]}, @timestamp_addr={0x44, 0x44, 0x2d, 0x1, 0x8, [{@rand_addr=0x64010102}, {@empty, 0x9000}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@broadcast, 0x9}, {@empty, 0x8001}, {@broadcast, 0x665}, {@local}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x3}]}, @rr={0x7, 0xf, 0x8a, [@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback]}, @timestamp_prespec={0x44, 0x24, 0x5d, 0x3, 0xa, [{@loopback, 0x9}, {@empty, 0x2de}, {@remote, 0x9}, {@loopback, 0xd}]}, @timestamp_addr={0x44, 0x14, 0x5, 0x1, 0x9, [{@remote, 0x10000000}, {@loopback, 0xfffffff7}]}]}}}}})
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001400)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@typedef={0x3, 0x0, 0x0, 0x8, 0x3}]}, {0x0, [0x71, 0x2e, 0x0]}}, &(0x7f0000000400)=""/4096, 0x29, 0x1000, 0x9, 0x9}, 0x28)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001540)={{0xffffffffffffffff, <r2=>0xffffffffffffffff}, &(0x7f00000014c0), &(0x7f0000001500)}, 0x20)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001640)={0x9, 0x2, &(0x7f0000000100)=@raw=[@btf_id={0x18, 0x0, 0x3, 0x0, 0x3}], &(0x7f0000000140)='GPL\x00', 0x7, 0x42, &(0x7f0000000180)=""/66, 0x40f00, 0x2, '\x00', r0, 0x0, r1, 0x8, &(0x7f0000001440)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000001480)={0x3, 0xc, 0x3347, 0x7}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000001580)=[r2], &(0x7f00000015c0)=[{0x2, 0x4, 0x4, 0x4}, {0x3, 0x3, 0xa, 0x6}, {0x5, 0x1, 0xa, 0x8}, {0x3, 0x1, 0x6, 0xb}, {0x2, 0x5, 0x10, 0x4}, {0x0, 0x4, 0x0, 0xb}, {0x0, 0x5, 0xa, 0xb}], 0x10, 0xc}, 0x94)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r4, &(0x7f0000001940)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001900)={&(0x7f0000001740)={0x1b0, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_DEVKEY={0x184, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x100, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x5c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x8000}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x58, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x38, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x4}]}, @NL802154_DEVKEY_ATTR_ID={0x3c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xfff}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x9}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x200}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1}, @NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xffffff4d}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x1}]}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x4000082}, 0x22040040)
r5 = fspick(0xffffffffffffffff, &(0x7f0000001980)='./file0\x00', 0x0)
r6 = fsmount(r5, 0x0, 0x4)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001a00)={&(0x7f00000019c0)='dlm_lock_end\x00', r3, 0x0, 0x3ff}, 0x18)
r7 = gettid()
syz_pidfd_open(r7, 0x0)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001a40)={r6}, 0x4)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000001a80)={0xffffffff, <r8=>0x0}, 0x8)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001ac0)=r8, 0x4)
r9 = openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000001b00), 0x111000, 0x0)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001c80)={r9, &(0x7f0000001b40)="a890e1c257652963392facefc9b74d138a3798375b9b299fbc94574f22b0b222fce02d40d336b201af28cb9d4ebff2da5339e32fb0ef6b306e8b", &(0x7f0000001b80)=""/217}, 0x20)
r10 = socket$inet_icmp(0x2, 0x2, 0x1)
ioctl$sock_proto_private(r10, 0x89ec, &(0x7f0000001cc0)="3fccdbc42db9733dea01566442a138fbdc5d1f2f0b4a5e7f34")
symlink(&(0x7f0000001d00)='./file0\x00', &(0x7f0000001d40)='./file0\x00')
ioctl$IOC_PR_RELEASE(r9, 0x401070ca, &(0x7f0000001d80)={0x1, 0x3, 0x1})
mq_open(&(0x7f0000001dc0)='dlm_lock_end\x00', 0x800, 0x101, &(0x7f0000001e00)={0x9, 0xffffffff7fffffff, 0x8, 0x7ff})
ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020662a, &(0x7f0000001e40)={0x6, 0x0, 0x2, 0x1, 0x2, 0x0, [{0x53d, 0x7, 0x6, '\x00', 0x188}, {0x9a0, 0x1, 0x8, '\x00', 0x2809}]})
r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001f40), r4)
sendmsg$IEEE802154_LLSEC_DEL_KEY(r11, &(0x7f0000002000)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x1010010}, 0xc, &(0x7f0000001fc0)={&(0x7f0000001f80)={0x2c, r12, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
fsetxattr$security_capability(r1, &(0x7f0000002040), &(0x7f0000002080)=@v1={0x1000000, [{0xfffffffc, 0x2}]}, 0xc, 0x3)
setsockopt$bt_BT_SNDMTU(r9, 0x112, 0xc, &(0x7f00000020c0), 0x2)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ptrace$ARCH_SHSTK_LOCK(0x1e, r7, 0x0, 0x5003)

0s ago: executing program 3 (id=331):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000680), 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$unix(0x1, 0x2, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vxcan0\x00', <r5=>0x0})
r6 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r6, &(0x7f0000000200)={0x1d, r5}, 0x10)
sendmsg$can_bcm(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="01000000d7fe68ca7e4d5d5bdbe70000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r5, @ANYRES64=r4, @ANYBLOB="3bf81bb9e9"], 0x20000600}}, 0x0)
sendmsg$sock(r6, &(0x7f0000001940)={&(0x7f00000002c0)=@sco={0x1f, @none}, 0x80, &(0x7f0000000000), 0x5, &(0x7f00000008c0)=[@timestamping={{0x14}}], 0x18}, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f00000008c0)={0x5, 0x1})
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x1, 0x6213, &(0x7f0000000240)="$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")
chdir(&(0x7f0000000040)='./file0\x00')
ioctl$EXT4_IOC_CHECKPOINT(r2, 0x4004662b, &(0x7f0000006480)=0x4)
symlink(&(0x7f0000000000)='./file1\x00', &(0x7f00000065c0)='./file1\x00')
mkdirat(0xffffffffffffff9c, 0x0, 0xf1)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000bc0)='./file0\x00', 0x101c8ca, &(0x7f0000000400)=ANY=[], 0x6, 0x2c0, &(0x7f0000000900)="$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")
r7 = creat(&(0x7f0000000080)='./file0\x00', 0x1bc)
r8 = fanotify_init(0xf00, 0x40000)
fanotify_mark(r8, 0x105, 0x4000997d, r7, 0x0)
unlink(&(0x7f0000000000)='./file0\x00')
open(&(0x7f0000000040)='./file4\x00', 0x62142, 0xcc)

kernel console output (not intermixed with test programs):

50:50
[   83.297683][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.335860][  T744] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.338650][  T744] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.361665][ T6377] loop0: detected capacity change from 0 to 32768
[   83.376664][ T6377] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.93 (6377)
[   83.387827][ T6377] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   83.393079][ T6377] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm
[   83.447293][ T6377] BTRFS info (device loop0): rebuilding free space tree
[   83.471542][ T6377] BTRFS info (device loop0): turning off barriers
[   83.473825][ T6377] BTRFS info (device loop0): enabling free space tree
[   83.475815][ T6377] BTRFS info (device loop0): force clearing of disk cache
[   83.626363][ T6396] loop3: detected capacity change from 0 to 32768
[   83.660110][ T5813] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   83.670495][ T6396] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   83.720019][ T6396] XFS (loop3): Ending clean mount
[   83.755301][ T6396] XFS (loop3): Quotacheck needed: Please wait.
[   83.828332][ T6396] XFS (loop3): Quotacheck: Done.
[   83.838837][ T6396] iommufd_mock iommufd_mock0: Adding to iommu group 0
[   83.884191][ T6278] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   83.923403][ T5818] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   84.084094][ T6413] loop3: detected capacity change from 0 to 2048
[   84.111812][ T6413] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   84.373667][ T6423] loop2: detected capacity change from 0 to 32768
[   84.386889][ T6423] (syz.2.98,6423,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[   84.396820][ T6423] (syz.2.98,6423,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[   84.400886][ T5861] usb 4-1: new full-speed USB device number 2 using dummy_hcd
[   84.421137][ T6423] JBD2: Ignoring recovery information on journal
[   84.450100][ T6423] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[   84.468855][ T6423] (syz.2.98,6423,0):ocfs2_read_blocks_sync:112 ERROR: status = -12
[   84.473638][ T6423] (syz.2.98,6423,0):update_backups:196 ERROR: status = -12
[   84.475964][ T6423] ocfs2: Failed to update super blocks on 7,2 during fs resize. This condition is not fatal, but fsck.ocfs2 should be run to fix it
[   84.520941][ T5818] ocfs2: Unmounting device (7,2) on (node local)
[   84.574300][ T5861] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[   84.578119][ T5861] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 1024, setting to 64
[   84.588193][ T5861] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   84.592061][ T5861] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   84.601203][ T5861] usb 4-1: Product: syz
[   84.602616][ T5861] usb 4-1: Manufacturer: 湋⌨係췬ᢣ捠旮᝼롦⤵﨨
[   84.604847][ T5861] usb 4-1: SerialNumber: syz
[   84.698211][ T6427] loop2: detected capacity change from 0 to 512
[   84.716458][ T6427] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   84.788341][ T6427] EXT4-fs (loop2): 1 truncate cleaned up
[   84.793828][ T6427] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   84.806927][ T6427] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[   84.826181][ T6413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   84.832944][ T6413] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   84.846358][ T5861] cdc_ncm 4-1:1.0: bind() failure
[   84.856367][ T5861] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found
[   84.858790][ T5861] cdc_ncm 4-1:1.1: bind() failure
[   84.874148][ T5861] usb 4-1: USB disconnect, device number 2
[   84.971294][ T6430] 9pnet_fd: Insufficient options for proto=fd
[   85.022533][ T5199] Bluetooth: hci0: command tx timeout
[   85.182015][ T6432] loop0: detected capacity change from 0 to 4096
[   85.189467][ T6432] ntfs3: Bad value for 'uid'
[   85.196216][ T6432] ntfs3: Bad value for 'uid'
[   85.369817][ T6278] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   85.427523][ T6434] loop3: detected capacity change from 0 to 64
[   85.471568][ T5814] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[   85.549822][ T5818] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   85.583715][ T6437] netlink: 24 bytes leftover after parsing attributes in process `syz.3.102'.
[   85.586513][ T6437] netlink: 24 bytes leftover after parsing attributes in process `syz.3.102'.
[   85.611430][ T5814] usb 1-1: device descriptor read/64, error -71
[   85.657439][ T6441] veth0_vlan: entered allmulticast mode
[   85.684244][ T6441] veth0_vlan: left promiscuous mode
[   85.686992][ T6441] veth0_vlan: entered promiscuous mode
[   85.813360][ T6439] loop2: detected capacity change from 0 to 32768
[   85.851160][ T5814] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[   85.868894][ T6439] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   85.880948][ T6439] XFS (loop2): Ending clean mount
[   85.884414][ T6439] XFS (loop2): Quotacheck needed: Please wait.
[   85.907964][ T6439] XFS (loop2): Quotacheck: Done.
[   85.914324][ T6439] iommufd_mock iommufd_mock0: Adding to iommu group 0
[   85.944481][ T6439] iommufd_mock iommufd_mock1: Adding to iommu group 1
[   85.980865][ T5814] usb 1-1: device descriptor read/64, error -71
[   85.992946][ T5818] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   86.092472][ T5814] usb usb1-port1: attempt power cycle
[   86.410859][    T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[   86.440901][ T5814] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[   86.461998][ T5814] usb 1-1: device descriptor read/8, error -71
[   86.550856][    T9] usb 3-1: device descriptor read/64, error -71
[   86.720885][ T5814] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[   86.741998][ T5814] usb 1-1: device descriptor read/8, error -71
[   86.791670][    T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[   86.851229][ T5814] usb usb1-port1: unable to enumerate USB device
[   86.920824][    T9] usb 3-1: device descriptor read/64, error -71
[   86.948653][ T6462] loop3: detected capacity change from 0 to 32768
[   86.952877][ T6462] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.109 (6462)
[   86.963892][ T6462] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   86.966906][ T6462] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[   87.010313][ T6462] BTRFS info (device loop3): rebuilding free space tree
[   87.019899][ T6462] BTRFS info (device loop3): turning off barriers
[   87.024377][ T6462] BTRFS info (device loop3): enabling free space tree
[   87.026869][ T6462] BTRFS info (device loop3): force clearing of disk cache
[   87.031216][    T9] usb usb3-port1: attempt power cycle
[   87.080602][ T6278] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   87.100920][ T5199] Bluetooth: hci0: command tx timeout
[   87.183311][   T24] cfg80211: failed to load regulatory.db
[   87.327129][ T6483] loop3: detected capacity change from 0 to 512
[   87.333800][ T6483] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   87.350052][ T6483] EXT4-fs (loop3): 1 truncate cleaned up
[   87.354676][ T6483] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   87.365877][ T6483] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[   87.370973][    T9] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[   87.385270][ T6278] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   87.393128][    T9] usb 3-1: device descriptor read/8, error -71
[   87.463975][ T6487] IPVS: set_ctl: invalid protocol: 167 172.20.20.187:20001
[   87.641017][    T9] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[   87.661793][    T9] usb 3-1: device descriptor read/8, error -71
[   87.699777][ T6491] loop3: detected capacity change from 0 to 32768
[   87.706687][ T6491] (syz.3.114,6491,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[   87.711556][ T6491] (syz.3.114,6491,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[   87.721773][ T6491] JBD2: Ignoring recovery information on journal
[   87.745180][ T6491] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[   87.755017][ T6491] netlink: 16 bytes leftover after parsing attributes in process `syz.3.114'.
[   87.758125][ T6491] netlink: 4 bytes leftover after parsing attributes in process `syz.3.114'.
[   87.771392][    T9] usb usb3-port1: unable to enumerate USB device
[   87.987216][   T34] audit: type=1800 audit(1764314620.380:6): pid=6491 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.114" name="file1" dev="loop3" ino=16978 res=0 errno=0
[   88.023884][ T6278] ocfs2: Unmounting device (7,3) on (node local)
[   88.165407][ T6498] loop3: detected capacity change from 0 to 2048
[   88.172653][ T6498] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   88.184744][ T6497] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[   88.193794][ T6497] CIFS mount error: No usable UNC path provided in device string!
[   88.193794][ T6497] 
[   88.196983][ T6497] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[   88.253270][ T6502] netlink: 'syz.0.117': attribute type 2 has an invalid length.
[   88.709462][ T6510] loop3: detected capacity change from 0 to 32768
[   88.723981][ T6514] loop0: detected capacity change from 0 to 32768
[   88.728024][ T6514] (syz.0.121,6514,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[   88.731997][ T6514] (syz.0.121,6514,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[   88.740444][ T6514] JBD2: Ignoring recovery information on journal
[   88.743624][ T6510] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   88.760173][ T6510] XFS (loop3): Ending clean mount
[   88.769845][ T6510] XFS (loop3): Quotacheck needed: Please wait.
[   88.774964][ T6514] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[   88.805051][ T6510] XFS (loop3): Quotacheck: Done.
[   88.812787][ T6514] netlink: 16 bytes leftover after parsing attributes in process `syz.0.121'.
[   88.815513][ T6514] netlink: 4 bytes leftover after parsing attributes in process `syz.0.121'.
[   88.986566][ T6278] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   89.056860][   T34] audit: type=1800 audit(1764314621.440:7): pid=6514 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.121" name="file1" dev="loop0" ino=16978 res=0 errno=0
[   89.127438][ T5813] ocfs2: Unmounting device (7,0) on (node local)
[   89.212725][ T6529] loop3: detected capacity change from 0 to 512
[   89.215550][ T6529] EXT4-fs: Ignoring removed nomblk_io_submit option
[   89.230870][ T6529] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   89.240638][ T6529] EXT4-fs (loop3): 1 truncate cleaned up
[   89.257067][ T6529] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   89.290635][ T6278] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   89.522348][ T6541] loop3: detected capacity change from 0 to 32768
[   89.531964][ T6541] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.125 (6541)
[   89.560277][ T6541] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   89.566937][ T6541] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[   89.618938][ T6551] loop0: detected capacity change from 0 to 32768
[   89.620984][    T9] usb 3-1: new full-speed USB device number 10 using dummy_hcd
[   89.630445][ T6551] (syz.0.129,6551,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[   89.646754][ T6551] (syz.0.129,6551,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[   89.670247][ T6541] BTRFS info (device loop3): rebuilding free space tree
[   89.694624][ T6551] JBD2: Ignoring recovery information on journal
[   89.698793][ T6541] BTRFS info (device loop3): turning off barriers
[   89.708680][ T6541] BTRFS info (device loop3): enabling free space tree
[   89.710642][ T6541] BTRFS info (device loop3): force clearing of disk cache
[   89.734507][ T6551] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[   89.747964][ T6551] netlink: 16 bytes leftover after parsing attributes in process `syz.0.129'.
[   89.751055][ T6551] netlink: 4 bytes leftover after parsing attributes in process `syz.0.129'.
[   89.772931][    T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   89.776495][    T9] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2
[   89.779396][    T9] usb 3-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[   89.783801][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   89.788702][    T9] usb 3-1: config 0 descriptor??
[   89.799225][    T9] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[   89.802812][    T9] dvb-usb: bulk message failed: -22 (3/0)
[   89.818160][    T9] dvb-usb: will use the device's hardware PID filter (table count: 16).
[   89.824452][    T9] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[   89.826597][    T9] usb 3-1: media controller created
[   89.830674][    T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[   89.848821][    T9] dvb-usb: bulk message failed: -22 (6/0)
[   89.857590][    T9] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[   89.870474][    T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input7
[   89.885731][    T9] dvb-usb: schedule remote query interval to 150 msecs.
[   89.887956][    T9] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[   89.960921][ T5842] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   89.968099][   T34] audit: type=1800 audit(1764314622.360:8): pid=6551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.129" name="file1" dev="loop0" ino=16978 res=0 errno=0
[   89.987673][ T5813] ocfs2: Unmounting device (7,0) on (node local)
[   90.043269][    T9] dvb-usb: bulk message failed: -22 (1/0)
[   90.045193][    T9] dvb-usb: error while querying for an remote control event.
[   90.109367][ T6575] loop0: detected capacity change from 0 to 512
[   90.113436][ T6575] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   90.118644][ T5842] usb 4-1: config 1 has an invalid interface number: 4 but max is 1
[   90.121251][ T5842] usb 4-1: config 1 has no interface number 0
[   90.124449][ T5842] usb 4-1: config 1 interface 4 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   90.129046][ T6575] EXT4-fs (loop0): 1 truncate cleaned up
[   90.133617][ T5842] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   90.135507][ T6575] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   90.136426][ T5842] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   90.144648][ T5842] usb 4-1: Product: syz
[   90.146358][ T5842] usb 4-1: Manufacturer: syz
[   90.147635][ T6575] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[   90.148036][ T5842] usb 4-1: SerialNumber: syz
[   90.203361][    T9] dvb-usb: bulk message failed: -22 (1/0)
[   90.207097][    T9] dvb-usb: error while querying for an remote control event.
[   90.211910][ T5814] usb 3-1: USB disconnect, device number 10
[   90.242824][ T5814] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[   90.390897][   T24] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[   90.520906][   T24] usb 1-1: device descriptor read/64, error -71
[   90.739630][ T6580] nfs: Unknown parameter '/dev/sr0'
[   90.760914][   T24] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[   90.890861][   T24] usb 1-1: device descriptor read/64, error -71
[   90.974469][ T6580] loop2: detected capacity change from 0 to 32768
[   91.003187][   T24] usb usb1-port1: attempt power cycle
[   91.171057][ T5842] cdc_ncm 4-1:1.4: MAC-Address: 42:42:42:42:42:42
[   91.172936][ T5842] cdc_ncm 4-1:1.4: dwNtbInMaxSize=16 is too small. Using 2048
[   91.175097][ T5842] cdc_ncm 4-1:1.4: setting rx_max = 2048
[   91.346037][   T24] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[   91.361627][   T24] usb 1-1: device descriptor read/8, error -71
[   91.588711][ T5842] cdc_ncm 4-1:1.4: setting tx_max = 88
[   91.601234][   T24] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[   91.610491][ T5842] cdc_ncm 4-1:1.4 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42
[   91.614798][ T6582] overlayfs: failed lookup in lower (newroot/41, name='bus', err=-40): overlapping layers
[   91.621955][ T5842] usb 4-1: USB disconnect, device number 3
[   91.624593][ T5842] cdc_ncm 4-1:1.4 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP)
[   91.631985][   T24] usb 1-1: device descriptor read/8, error -71
[   91.741620][   T24] usb usb1-port1: unable to enumerate USB device
[   91.914490][ T6587] loop2: detected capacity change from 0 to 65536
[   91.934630][ T6587] XFS (loop2): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[   91.952122][ T6587] XFS (loop2): Ending clean mount
[   91.954854][ T6587] XFS (loop2): Quotacheck needed: Please wait.
[   91.989306][ T6587] XFS (loop2): Quotacheck: Done.
[   92.137306][ T6278] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   92.214103][ T5818] XFS (loop2): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[   92.611826][ T6602] loop2: detected capacity change from 0 to 32768
[   92.623080][ T6602] (syz.2.136,6602,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[   92.627311][ T6602] (syz.2.136,6602,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[   92.629116][ T6600] loop3: detected capacity change from 0 to 32768
[   92.636381][ T6602] JBD2: Ignoring recovery information on journal
[   92.660377][ T6600] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[   92.661529][ T6602] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[   92.677419][ T6602] netlink: 16 bytes leftover after parsing attributes in process `syz.2.136'.
[   92.679993][ T6602] netlink: 4 bytes leftover after parsing attributes in process `syz.2.136'.
[   92.690444][   T34] audit: type=1800 audit(1764314625.080:9): pid=6600 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.137" name="file1" dev="loop3" ino=17058 res=0 errno=0
[   92.742548][   T34] audit: type=1800 audit(1764314625.140:10): pid=6608 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.137" name="file3" dev="loop3" ino=17059 res=0 errno=0
[   92.919493][ T5818] ocfs2: Unmounting device (7,2) on (node local)
[   93.194007][ T5813] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   93.296530][ T6623] loop2: detected capacity change from 0 to 512
[   93.300611][ T6623] EXT4-fs: quotafile must be on filesystem root
[   93.352343][ T6278] ocfs2: Unmounting device (7,3) on (node local)
[   93.445569][ T6628] netlink: 24 bytes leftover after parsing attributes in process `syz.2.143'.
[   93.448248][ T6628] netlink: 24 bytes leftover after parsing attributes in process `syz.2.143'.
[   93.546214][ T6634] netlink: 'syz.3.145': attribute type 1 has an invalid length.
[   93.678713][ T6632] loop2: detected capacity change from 0 to 32768
[   93.682892][ T6632] (syz.2.144,6632,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[   93.687044][ T6632] (syz.2.144,6632,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[   93.700829][ T6632] JBD2: Ignoring recovery information on journal
[   93.737689][ T6632] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[   93.764790][ T6632] netlink: 16 bytes leftover after parsing attributes in process `syz.2.144'.
[   93.768342][ T6632] netlink: 4 bytes leftover after parsing attributes in process `syz.2.144'.
[   93.780985][    T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[   93.933438][    T9] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   93.936938][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[   93.940180][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[   93.944489][    T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   93.948182][    T9] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   93.952155][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   93.957587][    T9] usb 4-1: config 0 descriptor??
[   93.959817][ T6634] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[   94.020237][ T5818] ocfs2: Unmounting device (7,2) on (node local)
[   94.148776][ T6645] netlink: 9 bytes leftover after parsing attributes in process `syz.2.146'.
[   94.164364][ T6645] ..0: renamed from hsr0 (while UP)
[   94.172177][ T6645] ..0: entered allmulticast mode
[   94.173769][ T6645] hsr_slave_0: entered allmulticast mode
[   94.175654][ T6645] hsr_slave_1: entered allmulticast mode
[   94.181753][ T6645] A link change request failed with some changes committed already. Interface ..0 may have been left with an inconsistent configuration, please check.
[   94.188301][ T6647] loop0: detected capacity change from 0 to 512
[   94.214590][ T6647] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   94.241450][ T6647] EXT4-fs (loop0): 1 truncate cleaned up
[   94.244505][ T6647] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   94.292189][ T6647] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[   94.298952][ T6647] netlink: 'syz.0.147': attribute type 3 has an invalid length.
[   94.305585][ T6654] input: syz1 as /devices/virtual/input/input8
[   94.334744][ T5813] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   94.443570][    T9] plantronics 0003:047F:FFFF.0002: reserved main item tag 0xd
[   94.479844][    T9] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[   94.706204][ T6661] loop0: detected capacity change from 0 to 32768
[   94.718410][    T9] usb 4-1: USB disconnect, device number 4
[   94.898059][ T6669] loop2: detected capacity change from 0 to 8192
[   94.942570][ T5820]  loop2: p1 p2[DM] p4
[   94.946200][ T5820] loop2: p1 size 196608 extends beyond EOD, truncated
[   94.959208][ T5820] loop2: p2 start 4292936063 is beyond EOD, truncated
[   94.967239][ T5820] loop2: p4 size 50331648 extends beyond EOD, truncated
[   94.984786][ T6669]  loop2: p1 p2[DM] p4
[   94.986271][ T6669] loop2: p1 size 196608 extends beyond EOD, truncated
[   94.989653][ T6669] loop2: p2 start 4292936063 is beyond EOD, truncated
[   94.999331][ T6669] loop2: p4 size 50331648 extends beyond EOD, truncated
[   95.055218][ T6674] loop0: detected capacity change from 0 to 32768
[   95.059035][ T6674] (syz.0.152,6674,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[   95.063591][ T6674] (syz.0.152,6674,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[   95.072320][ T6674] JBD2: Ignoring recovery information on journal
[   95.106845][ T6674] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[   95.128772][ T6674] netlink: 16 bytes leftover after parsing attributes in process `syz.0.152'.
[   95.143189][ T6674] netlink: 4 bytes leftover after parsing attributes in process `syz.0.152'.
[   95.282696][ T5842] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[   95.443021][ T5842] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   95.447537][ T5842] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[   95.456840][ T5842] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[   95.460289][ T5842] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   95.467418][ T5813] ocfs2: Unmounting device (7,0) on (node local)
[   95.469415][ T5842] usb 3-1: SerialNumber: syz
[   95.651177][ T6686] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[   95.666208][ T6688] loop0: detected capacity change from 0 to 512
[   95.672176][ T6688] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   95.695239][ T6688] EXT4-fs (loop0): 1 truncate cleaned up
[   95.698155][ T6688] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   95.703657][ T5842] usb 3-1: 0:2 : does not exist
[   95.706732][ T5842] usb 3-1: unit 5 not found!
[   95.719759][ T5842] usb 3-1: USB disconnect, device number 11
[   95.734165][ T6688] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[   95.747218][ T5810] udevd[5810]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   95.792002][ T5813] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   96.091189][ T6698] netlink: 'syz.3.159': attribute type 1 has an invalid length.
[   96.126989][ T6694] loop0: detected capacity change from 0 to 32768
[   96.132635][ T6694] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.158 (6694)
[   96.157245][ T6694] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   96.162452][ T6694] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm
[   96.165657][ T6694] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[   96.277462][ T6694] BTRFS info (device loop0): rebuilding free space tree
[   96.296058][ T6694] BTRFS info (device loop0): disabling free space tree
[   96.298077][ T6694] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   96.321638][ T6694] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   96.331089][   T10] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[   96.344521][ T6694] BTRFS info (device loop0): enabling ssd optimizations
[   96.347204][ T6694] BTRFS info (device loop0): turning on async discard
[   96.350173][ T6694] BTRFS info (device loop0): enabling disk space caching
[   96.390912][ T6694] BTRFS info (device loop0): force clearing of disk cache
[   96.399129][ T6694] BTRFS info (device loop0): enabling auto defrag
[   96.403396][ T6694] BTRFS info (device loop0): use zlib compression, level 3
[   96.406028][ T6694] BTRFS info (device loop0): max_inline set to 0
[   96.491255][ T5813] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   96.545390][   T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   96.550017][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[   96.559230][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[   96.562917][   T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   96.566992][   T10] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   96.579255][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   96.620366][   T10] usb 4-1: config 0 descriptor??
[   96.641914][ T6698] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[   96.738205][ T6718] loop2: detected capacity change from 0 to 32768
[   96.755373][ T6718] (syz.2.161,6718,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[   96.759998][ T6718] (syz.2.161,6718,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[   96.799411][ T6718] JBD2: Ignoring recovery information on journal
[   96.872544][ T6718] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[   96.911358][ T6718] netlink: 16 bytes leftover after parsing attributes in process `syz.2.161'.
[   96.935457][   T34] audit: type=1800 audit(1764314629.330:11): pid=6718 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.161" name="file1" dev="loop2" ino=16978 res=0 errno=0
[   96.985270][ T6721] loop0: detected capacity change from 0 to 4096
[   97.086571][   T10] plantronics 0003:047F:FFFF.0003: reserved main item tag 0xd
[   97.097921][   T34] audit: type=1800 audit(1764314629.490:12): pid=6721 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.162" name="file1" dev="loop0" ino=30 res=0 errno=0
[   97.098468][ T6721] ntfs3(loop0): ino=1e, "file1" attr_set_size
[   97.123007][   T10] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[   97.131846][ T6721] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[   97.147669][ T6721] ntfs3(loop0): ino=3, ntfs_set_state failed, -22.
[   97.178558][   T37] ntfs3(loop0): ino=3, ntfs3_write_inode failed, -22.
[   97.294632][ T5818] ocfs2: Unmounting device (7,2) on (node local)
[   97.362182][   T10] usb 4-1: USB disconnect, device number 5
[   97.526135][ T6725] loop0: detected capacity change from 0 to 32768
[   97.535385][ T6725] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.163 (6725)
[   97.553352][ T6725] BTRFS info (device loop0 state S): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   97.558874][ T6725] BTRFS info (device loop0 state S): using crc32c (crc32c-lib) checksum algorithm
[   97.600241][   T27] BTRFS warning (device loop0 state S): checksum verify failed on logical 1052672 mirror 1 wanted 0x37e030f7 found 0x5afefc99 level 0, ignored
[   97.607646][   T37] BTRFS warning (device loop0 state S): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0x23b2bbff level 0, ignored
[   97.613408][   T27] BTRFS warning (device loop0 state S): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0x32c165c1 level 0, ignored
[   97.618979][ T6725] BTRFS error (device loop0 state S): dev extent physical offset 5242880 on devid 1 length doesn't match chunk 5242880, have 1638400 expect 3298536521728
[   97.625360][ T6725] BTRFS error (device loop0 state S): failed to verify dev extents against chunks: -117
[   97.656562][ T6725] BTRFS error (device loop0 state S): open_ctree failed: -117
[   97.721146][ T6725] vlan3: entered promiscuous mode
[   97.722820][ T6725] vlan3: entered allmulticast mode
[   97.724439][ T6725] hsr_slave_1: entered allmulticast mode
[   97.785815][ T6727] loop2: detected capacity change from 0 to 40427
[   97.794767][ T6727] F2FS-fs (loop2): invalid crc value
[   97.829103][ T6727] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   97.833157][ T6727] F2FS-fs (loop2): Start checkpoint disabled!
[   97.850088][ T6727] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0
[   97.853229][ T6727] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[   97.929669][ T6746] loop0: detected capacity change from 0 to 512
[   97.934772][ T6746] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   97.952078][ T6746] EXT4-fs (loop0): 1 truncate cleaned up
[   97.962978][ T6746] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   97.987845][ T6746] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[   98.022874][ T5813] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   98.105493][ T6752] xt_l2tp: v2 doesn't support IP mode
[   98.120448][ T6752] loop0: detected capacity change from 0 to 1024
[   98.150082][ T6752] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   98.240376][ T6750] loop3: detected capacity change from 0 to 32768
[   98.255425][ T5813] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   98.276839][ T6750] read_mapping_page failed!
[   98.280981][ T6750] jfs_create: dtInsert returned -EIO
[   98.283327][ T6750] ERROR: (device loop3): jfs_create: 
[   98.283327][ T6750] 
[   98.302102][ T6750] ERROR: (device loop3): remounting filesystem as read-only
[   98.370037][ T6758] __nla_validate_parse: 1 callbacks suppressed
[   98.370050][ T6758] netlink: 24 bytes leftover after parsing attributes in process `syz.0.169'.
[   98.375013][ T6758] netlink: 24 bytes leftover after parsing attributes in process `syz.0.169'.
[   98.377615][ T3541] kworker/u9:4: attempt to access beyond end of device
[   98.377615][ T3541] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[   98.393495][ T3541] CPU: 0 UID: 0 PID: 3541 Comm: kworker/u9:4 Not tainted syzkaller #0 PREEMPT(full) 
[   98.393517][ T3541] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   98.393527][ T3541] Workqueue: writeback wb_workfn (flush-7:2)
[   98.393554][ T3541] Call Trace:
[   98.393561][ T3541]  <TASK>
[   98.393567][ T3541]  dump_stack_lvl+0x189/0x250
[   98.393591][ T3541]  ? __pfx_dump_stack_lvl+0x10/0x10
[   98.393607][ T3541]  ? __pfx_queue_work_on+0x10/0x10
[   98.393621][ T3541]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   98.393641][ T3541]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   98.393698][ T3541]  f2fs_handle_critical_error+0x37c/0x540
[   98.393725][ T3541]  f2fs_write_end_io+0x886/0xb60
[   98.393760][ T3541]  __submit_merged_bio+0x27a/0x6a0
[   98.393802][ T3541]  __submit_merged_write_cond+0x255/0x530
[   98.393826][ T3541]  f2fs_write_data_pages+0x261d/0x3000
[   98.393865][ T3541]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   98.393889][ T3541]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[   98.393929][ T3541]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[   98.393947][ T3541]  ? look_up_lock_class+0x74/0x170
[   98.393973][ T3541]  ? trace_f2fs_writepages+0x7f/0x200
[   98.393992][ T3541]  ? f2fs_write_node_pages+0x478/0x6e0
[   98.394014][ T3541]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[   98.394034][ T3541]  ? __lock_acquire+0xab9/0xd20
[   98.394053][ T3541]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   98.394067][ T3541]  do_writepages+0x32e/0x550
[   98.394089][ T3541]  ? reacquire_held_locks+0x127/0x1d0
[   98.394102][ T3541]  ? writeback_sb_inodes+0x384/0x1010
[   98.394125][ T3541]  __writeback_single_inode+0x145/0xff0
[   98.394144][ T3541]  ? do_raw_spin_unlock+0x4d/0x240
[   98.394165][ T3541]  writeback_sb_inodes+0x6c7/0x1010
[   98.394188][ T3541]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   98.394211][ T3541]  ? __pfx_writeback_sb_inodes+0x10/0x10
[   98.394251][ T3541]  ? rcu_is_watching+0x15/0xb0
[   98.394270][ T3541]  wb_writeback+0x43b/0xaf0
[   98.394290][ T3541]  ? queue_io+0x3b1/0x590
[   98.394326][ T3541]  ? __pfx_wb_writeback+0x10/0x10
[   98.394350][ T3541]  ? _raw_spin_unlock_irq+0x23/0x50
[   98.394369][ T3541]  wb_workfn+0x409/0xef0
[   98.394393][ T3541]  ? __pfx_wb_workfn+0x10/0x10
[   98.394410][ T3541]  ? __lock_acquire+0xab9/0xd20
[   98.394427][ T3541]  ? process_scheduled_works+0x9ef/0x17b0
[   98.394446][ T3541]  ? _raw_spin_unlock_irq+0x23/0x50
[   98.394460][ T3541]  ? process_scheduled_works+0x9ef/0x17b0
[   98.394471][ T3541]  ? process_scheduled_works+0x9ef/0x17b0
[   98.394485][ T3541]  process_scheduled_works+0xae1/0x17b0
[   98.394516][ T3541]  ? __pfx_process_scheduled_works+0x10/0x10
[   98.394541][ T3541]  worker_thread+0x8a0/0xda0
[   98.394556][ T3541]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   98.394577][ T3541]  ? __kthread_parkme+0x7b/0x200
[   98.394598][ T3541]  kthread+0x711/0x8a0
[   98.394616][ T3541]  ? __pfx_worker_thread+0x10/0x10
[   98.394627][ T3541]  ? __pfx_kthread+0x10/0x10
[   98.394670][ T3541]  ? _raw_spin_unlock_irq+0x23/0x50
[   98.394688][ T3541]  ? lockdep_hardirqs_on+0x9c/0x150
[   98.394701][ T3541]  ? __pfx_kthread+0x10/0x10
[   98.394716][ T3541]  ret_from_fork+0x4bc/0x870
[   98.394733][ T3541]  ? __pfx_ret_from_fork+0x10/0x10
[   98.394759][ T3541]  ? __switch_to_asm+0x39/0x70
[   98.394770][ T3541]  ? __switch_to_asm+0x33/0x70
[   98.394779][ T3541]  ? __pfx_kthread+0x10/0x10
[   98.394796][ T3541]  ret_from_fork_asm+0x1a/0x30
[   98.394819][ T3541]  </TASK>
[   98.399171][ T3541] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[   98.554885][ T3541] CPU: 0 UID: 0 PID: 3541 Comm: kworker/u9:4 Not tainted syzkaller #0 PREEMPT(full) 
[   98.554906][ T3541] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   98.554914][ T3541] Workqueue: writeback wb_workfn (flush-7:2)
[   98.554940][ T3541] Call Trace:
[   98.554946][ T3541]  <TASK>
[   98.554952][ T3541]  dump_stack_lvl+0x189/0x250
[   98.554974][ T3541]  ? __pfx_dump_stack_lvl+0x10/0x10
[   98.554989][ T3541]  ? __pfx_queue_work_on+0x10/0x10
[   98.555003][ T3541]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   98.555023][ T3541]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   98.555049][ T3541]  f2fs_handle_critical_error+0x37c/0x540
[   98.555078][ T3541]  f2fs_write_end_io+0x886/0xb60
[   98.555109][ T3541]  __submit_merged_bio+0x27a/0x6a0
[   98.555135][ T3541]  __submit_merged_write_cond+0x255/0x530
[   98.555160][ T3541]  f2fs_write_data_pages+0x261d/0x3000
[   98.555205][ T3541]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   98.555231][ T3541]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[   98.555272][ T3541]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[   98.555293][ T3541]  ? look_up_lock_class+0x74/0x170
[   98.555319][ T3541]  ? trace_f2fs_writepages+0x7f/0x200
[   98.555338][ T3541]  ? f2fs_write_node_pages+0x478/0x6e0
[   98.555362][ T3541]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[   98.555384][ T3541]  ? __lock_acquire+0xab9/0xd20
[   98.555404][ T3541]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   98.555419][ T3541]  do_writepages+0x32e/0x550
[   98.555441][ T3541]  ? reacquire_held_locks+0x127/0x1d0
[   98.555455][ T3541]  ? writeback_sb_inodes+0x384/0x1010
[   98.555482][ T3541]  __writeback_single_inode+0x145/0xff0
[   98.555499][ T3541]  ? do_raw_spin_unlock+0x4d/0x240
[   98.555518][ T3541]  writeback_sb_inodes+0x6c7/0x1010
[   98.555542][ T3541]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   98.555574][ T3541]  ? __pfx_writeback_sb_inodes+0x10/0x10
[   98.555628][ T3541]  ? rcu_is_watching+0x15/0xb0
[   98.555687][ T3541]  wb_writeback+0x43b/0xaf0
[   98.555713][ T3541]  ? queue_io+0x3b1/0x590
[   98.555739][ T3541]  ? __pfx_wb_writeback+0x10/0x10
[   98.555765][ T3541]  ? _raw_spin_unlock_irq+0x23/0x50
[   98.555787][ T3541]  wb_workfn+0x409/0xef0
[   98.555817][ T3541]  ? __pfx_wb_workfn+0x10/0x10
[   98.555837][ T3541]  ? __lock_acquire+0xab9/0xd20
[   98.555860][ T3541]  ? process_scheduled_works+0x9ef/0x17b0
[   98.555878][ T3541]  ? _raw_spin_unlock_irq+0x23/0x50
[   98.555894][ T3541]  ? process_scheduled_works+0x9ef/0x17b0
[   98.555906][ T3541]  ? process_scheduled_works+0x9ef/0x17b0
[   98.555921][ T3541]  process_scheduled_works+0xae1/0x17b0
[   98.555961][ T3541]  ? __pfx_process_scheduled_works+0x10/0x10
[   98.555991][ T3541]  worker_thread+0x8a0/0xda0
[   98.556009][ T3541]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   98.556030][ T3541]  ? __kthread_parkme+0x7b/0x200
[   98.556054][ T3541]  kthread+0x711/0x8a0
[   98.556070][ T3541]  ? __pfx_worker_thread+0x10/0x10
[   98.556081][ T3541]  ? __pfx_kthread+0x10/0x10
[   98.556099][ T3541]  ? _raw_spin_unlock_irq+0x23/0x50
[   98.556115][ T3541]  ? lockdep_hardirqs_on+0x9c/0x150
[   98.556131][ T3541]  ? __pfx_kthread+0x10/0x10
[   98.556148][ T3541]  ret_from_fork+0x4bc/0x870
[   98.556165][ T3541]  ? __pfx_ret_from_fork+0x10/0x10
[   98.556186][ T3541]  ? __switch_to_asm+0x39/0x70
[   98.556198][ T3541]  ? __switch_to_asm+0x33/0x70
[   98.556207][ T3541]  ? __pfx_kthread+0x10/0x10
[   98.556225][ T3541]  ret_from_fork_asm+0x1a/0x30
[   98.556254][ T3541]  </TASK>
[   98.556261][ T3541] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[   99.549066][ T6774] loop2: detected capacity change from 0 to 32768
[   99.558045][ T6774] (syz.2.170,6774,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[   99.562979][ T6774] (syz.2.170,6774,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[   99.585700][ T6774] JBD2: Ignoring recovery information on journal
[   99.617255][ T6774] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[   99.708008][ T6774] netlink: 16 bytes leftover after parsing attributes in process `syz.2.170'.
[   99.711671][ T6774] netlink: 4 bytes leftover after parsing attributes in process `syz.2.170'.
[   99.739080][   T34] audit: type=1800 audit(1764314632.130:13): pid=6774 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.170" name="file1" dev="loop2" ino=16978 res=0 errno=0
[  100.055691][ T5818] ocfs2: Unmounting device (7,2) on (node local)
[  100.270552][ T6785] loop2: detected capacity change from 0 to 512
[  100.277647][ T6785] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  100.299122][ T6785] EXT4-fs (loop2): 1 truncate cleaned up
[  100.302603][ T6785] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  100.328721][ T6785] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  100.451035][ T5814] usb 4-1: new full-speed USB device number 6 using dummy_hcd
[  100.624676][ T5814] usb 4-1: not running at top speed; connect to a high speed hub
[  100.628146][ T5814] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  100.640810][ T5814] usb 4-1: config 1 has no interface number 1
[  100.644812][ T5814] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  100.647563][ T5814] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  100.650468][ T5814] usb 4-1: Product: syz
[  100.652251][ T5814] usb 4-1: Manufacturer: syz
[  100.654144][ T5814] usb 4-1: SerialNumber: syz
[  100.746730][ T6792] loop0: detected capacity change from 0 to 40427
[  100.756577][ T6792] F2FS-fs (loop0): invalid crc value
[  100.855581][ T6792] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  100.859885][ T6792] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  100.873725][ T5814] usb 4-1: 2:1 : invalid channels 0
[  100.883940][ T6793] f2fs_ckpt-7:0: attempt to access beyond end of device
[  100.883940][ T6793] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  100.891975][ T6793] CPU: 0 UID: 0 PID: 6793 Comm: f2fs_ckpt-7:0 Not tainted syzkaller #0 PREEMPT(full) 
[  100.891998][ T6793] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  100.892005][ T6793] Call Trace:
[  100.892011][ T6793]  <TASK>
[  100.892018][ T6793]  dump_stack_lvl+0x189/0x250
[  100.892046][ T6793]  ? __pfx_dump_stack_lvl+0x10/0x10
[  100.892063][ T6793]  ? __pfx_queue_work_on+0x10/0x10
[  100.892078][ T6793]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  100.892098][ T6793]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  100.892124][ T6793]  f2fs_handle_critical_error+0x37c/0x540
[  100.892152][ T6793]  f2fs_write_end_io+0x886/0xb60
[  100.892181][ T6793]  __submit_merged_bio+0x27a/0x6a0
[  100.892205][ T6793]  __submit_merged_write_cond+0x255/0x530
[  100.892229][ T6793]  f2fs_write_data_pages+0x261d/0x3000
[  100.892270][ T6793]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  100.892337][ T6793]  ? __lock_acquire+0xab9/0xd20
[  100.892357][ T6793]  ? do_raw_spin_lock+0x121/0x290
[  100.892413][ T6793]  ? do_raw_spin_unlock+0x4d/0x240
[  100.892430][ T6793]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  100.892444][ T6793]  do_writepages+0x32e/0x550
[  100.892501][ T6793]  ? do_raw_spin_unlock+0x4d/0x240
[  100.892521][ T6793]  filemap_fdatawrite+0x199/0x240
[  100.892539][ T6793]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  100.892600][ T6793]  ? do_raw_spin_unlock+0x4d/0x240
[  100.892619][ T6793]  f2fs_sync_dirty_inodes+0x31f/0x830
[  100.892645][ T6793]  f2fs_write_checkpoint+0x93e/0x2440
[  100.892680][ T6793]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  100.892722][ T6793]  ? down_write+0x162/0x1f0
[  100.892736][ T6793]  ? __pfx_down_write+0x10/0x10
[  100.892749][ T6793]  ? do_raw_spin_lock+0x121/0x290
[  100.892770][ T6793]  __checkpoint_and_complete_reqs+0xdf/0x3d0
[  100.892787][ T6793]  ? __pfx___schedule+0x10/0x10
[  100.892808][ T6793]  ? __pfx___checkpoint_and_complete_reqs+0x10/0x10
[  100.892829][ T6793]  ? schedule+0x91/0x360
[  100.892853][ T6793]  issue_checkpoint_thread+0xd9/0x260
[  100.892868][ T6793]  ? __pfx_issue_checkpoint_thread+0x10/0x10
[  100.892883][ T6793]  ? __pfx_autoremove_wake_function+0x10/0x10
[  100.892903][ T6793]  ? __kthread_parkme+0x7b/0x200
[  100.892920][ T6793]  ? __kthread_parkme+0x1a1/0x200
[  100.892937][ T6793]  kthread+0x711/0x8a0
[  100.892955][ T6793]  ? __pfx_issue_checkpoint_thread+0x10/0x10
[  100.892970][ T6793]  ? __pfx_kthread+0x10/0x10
[  100.892988][ T6793]  ? _raw_spin_unlock_irq+0x23/0x50
[  100.893004][ T6793]  ? lockdep_hardirqs_on+0x9c/0x150
[  100.893020][ T6793]  ? __pfx_kthread+0x10/0x10
[  100.893036][ T6793]  ret_from_fork+0x4bc/0x870
[  100.893053][ T6793]  ? __pfx_ret_from_fork+0x10/0x10
[  100.893072][ T6793]  ? __switch_to_asm+0x39/0x70
[  100.893084][ T6793]  ? __switch_to_asm+0x33/0x70
[  100.893093][ T6793]  ? __pfx_kthread+0x10/0x10
[  100.893111][ T6793]  ret_from_fork_asm+0x1a/0x30
[  100.893137][ T6793]  </TASK>
[  100.894089][ T6793] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  100.895832][ T5814] usb 4-1: USB disconnect, device number 6
[  100.930320][ T6792] netlink: 20 bytes leftover after parsing attributes in process `syz.0.178'.
[  100.986683][ T5810] udevd[5810]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  101.097621][ T5818] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  101.381598][ T5814] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  101.433336][ T6806] loop3: detected capacity change from 0 to 1024
[  101.485535][ T6806] EXT4-fs error (device loop3): __ext4_fill_super:5512: inode #2: comm syz.3.182: casefold flag without casefold feature
[  101.492177][ T6806] EXT4-fs (loop3): get root inode failed
[  101.494357][ T6806] EXT4-fs (loop3): mount failed
[  101.570064][ T5814] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  101.573702][ T5814] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  101.582152][ T5814] usb 3-1: config 0 descriptor??
[  101.666429][ T6810] loop3: detected capacity change from 0 to 256
[  101.680303][ T6804] loop0: detected capacity change from 0 to 32768
[  101.693723][ T6804] (syz.0.181,6804,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  101.706452][ T6804] (syz.0.181,6804,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  101.755484][ T6804] JBD2: Ignoring recovery information on journal
[  101.857240][ T6813] process 'syz.3.183' launched './file0' with NULL argv: empty string added
[  101.932981][ T6800] loop2: detected capacity change from 0 to 1024
[  101.998681][ T6804] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  102.053598][ T6804] netlink: 16 bytes leftover after parsing attributes in process `syz.0.181'.
[  102.056818][ T6804] netlink: 4 bytes leftover after parsing attributes in process `syz.0.181'.
[  102.086678][   T34] audit: type=1800 audit(1764314634.480:14): pid=6804 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.181" name="file1" dev="loop0" ino=16978 res=0 errno=0
[  102.148273][ T5814] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  102.339727][ T5813] ocfs2: Unmounting device (7,0) on (node local)
[  102.439962][ T6818] netlink: 20 bytes leftover after parsing attributes in process `syz.3.185'.
[  102.529112][ T6820] loop3: detected capacity change from 0 to 4096
[  102.723235][ T6822] loop0: detected capacity change from 0 to 32768
[  102.754829][ T6822] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  102.835466][ T6822] XFS (loop0): Ending clean mount
[  102.850040][ T6835] fuse: blksize only supported for fuseblk
[  102.853706][ T6822] XFS (loop0): Quotacheck needed: Please wait.
[  102.916120][ T6822] XFS (loop0): Quotacheck: Done.
[  102.944860][ T5814] [drm:udl_init] *ERROR* Selecting channel failed
[  102.974636][ T5814] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 3
[  102.978406][ T5814] [drm] Initialized udl on minor 3
[  102.985497][ T5814] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  102.999425][ T5814] udl 3-1:0.0: [drm] Cannot find any crtc or sizes
[  103.010370][  T796] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  103.013993][ T5814] usb 3-1: USB disconnect, device number 12
[  103.019320][  T796] udl 3-1:0.0: [drm] Cannot find any crtc or sizes
[  103.036667][ T6837] tmpfs: Bad value for 'mpol'
[  103.229607][ T6842] loop2: detected capacity change from 0 to 32768
[  103.232367][   T24] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  103.246358][ T6842] (syz.2.190,6842,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  103.255334][ T6842] (syz.2.190,6842,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  103.272407][ T6842] JBD2: Ignoring recovery information on journal
[  103.309781][ T6842] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  103.335313][ T6842] netlink: 16 bytes leftover after parsing attributes in process `syz.2.190'.
[  103.338630][ T6842] netlink: 4 bytes leftover after parsing attributes in process `syz.2.190'.
[  103.380932][   T24] usb 1-1: Using ep0 maxpacket: 32
[  103.385175][   T24] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  103.388852][   T24] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  103.393049][   T24] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  103.430458][   T24] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  103.434231][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  103.437299][   T24] usb 1-1: Product: syz
[  103.438903][   T24] usb 1-1: Manufacturer: syz
[  103.440656][   T24] usb 1-1: SerialNumber: syz
[  103.734826][   T24] usb 1-1: USB disconnect, device number 14
[  103.770086][ T5810] udevd[5810]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  103.834627][   T34] audit: type=1800 audit(1764314636.230:15): pid=6842 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.190" name="file1" dev="loop2" ino=16978 res=0 errno=0
[  103.891061][    T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  104.038456][ T5818] ocfs2: Unmounting device (7,2) on (node local)
[  104.054879][    T9] usb 4-1: config index 0 descriptor too short (expected 23569, got 27)
[  104.058123][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  104.066545][    T9] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  104.070037][    T9] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  104.074118][    T9] usb 4-1: Manufacturer: syz
[  104.081797][    T9] usb 4-1: config 0 descriptor??
[  104.150882][    T9] rc_core: IR keymap rc-hauppauge not found
[  104.152693][    T9] Registered IR keymap rc-empty
[  104.159087][    T9] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  104.167775][    T9] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input11
[  104.247784][ T5813] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  104.476983][ T6851] loop2: detected capacity change from 0 to 32768
[  104.524089][ T6851] XFS (loop2): DAX unsupported by block device. Turning off DAX.
[  104.528102][ T6851] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  104.548381][ T6851] XFS (loop2): Ending clean mount
[  104.558681][ T6851] XFS (loop2): Quotacheck needed: Please wait.
[  104.606169][ T6851] XFS (loop2): Quotacheck: Done.
[  104.610880][ T6851] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  104.656448][ T6854] loop0: detected capacity change from 0 to 32768
[  104.672364][ T6854] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.193 (6854)
[  104.698397][ T6854] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  104.707755][ T6854] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm
[  104.753831][ T6869] loop3: detected capacity change from 0 to 256
[  104.768265][ T6869] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  104.778586][ T6869] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  104.782432][ T6869] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  104.801620][ T6854] BTRFS info (device loop0): rebuilding free space tree
[  104.821750][ T6854] BTRFS info (device loop0): disabling free space tree
[  104.827804][ T6854] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  104.835894][ T6854] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  104.848107][ T6854] BTRFS info (device loop0): setting nodatasum
[  104.853745][ T6854] BTRFS info (device loop0): setting nodatacow
[  104.859322][ T6854] BTRFS info (device loop0): turning off barriers
[  104.864195][ T6854] BTRFS info (device loop0): force clearing of disk cache
[  105.093835][ T6892] Bluetooth: MGMT ver 1.23
[  105.254017][ T6892] loop2: detected capacity change from 0 to 4096
[  105.330396][ T6892] ntfs3(loop2): ino=1a, mi_enum_attr
[  105.334788][ T6892] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  105.369258][ T5813] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  105.559289][ T6903] loop2: detected capacity change from 0 to 64
[  105.645247][ T6907] mmap: syz.0.197 (6907) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  106.256602][ T6909] loop0: detected capacity change from 0 to 32768
[  106.268097][ T6909] (syz.0.198,6909,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  106.279630][ T6909] (syz.0.198,6909,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  106.292499][ T6909] JBD2: Ignoring recovery information on journal
[  106.333616][ T6909] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  106.343777][ T6909] netlink: 16 bytes leftover after parsing attributes in process `syz.0.198'.
[  106.346773][ T6909] netlink: 4 bytes leftover after parsing attributes in process `syz.0.198'.
[  106.512584][   T24] usb 4-1: USB disconnect, device number 7
[  106.570275][ T6917] loop2: detected capacity change from 0 to 128
[  106.576198][ T6917] ubifs: Unknown parameter 'dont_appraise'
[  107.012228][   T34] audit: type=1800 audit(1764314639.410:16): pid=6909 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.198" name="file1" dev="loop0" ino=16978 res=0 errno=0
[  107.031638][   T24] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  107.160851][   T24] usb 4-1: device descriptor read/64, error -71
[  107.210026][ T5813] ocfs2: Unmounting device (7,0) on (node local)
[  107.346636][ T6928] netlink: 'syz.0.204': attribute type 1 has an invalid length.
[  107.380417][ T6928] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[  107.386402][ T6928] bond1: (slave vxcan3): Error -95 calling set_mac_address
[  107.440275][   T24] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  107.471530][ T6932] openvswitch: netlink: Actions may not be safe on all matching packets
[  107.571390][   T24] usb 4-1: device descriptor read/64, error -71
[  107.670908][   T10] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  107.683081][   T24] usb usb4-port1: attempt power cycle
[  107.840522][   T10] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  107.845100][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  107.849501][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  107.860176][   T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  107.865771][   T10] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  107.869312][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  107.891504][   T10] usb 1-1: config 0 descriptor??
[  107.895971][ T6930] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  108.020937][   T24] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  108.041349][   T24] usb 4-1: device descriptor read/8, error -71
[  108.280881][   T24] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  108.302009][   T24] usb 4-1: device descriptor read/8, error -71
[  108.307742][   T10] plantronics 0003:047F:FFFF.0004: reserved main item tag 0xd
[  108.322700][   T10] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  108.414465][   T24] usb usb4-port1: unable to enumerate USB device
[  108.446145][ T6939] loop2: detected capacity change from 0 to 8
[  108.459699][ T6939] SQUASHFS error: Unable to read directory block [2c0:35]
[  108.466084][ T6939] SQUASHFS error: Failed to read block 0x2fc: -5
[  108.468110][ T6939] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  108.470135][ T6939] SQUASHFS error: Unable to read directory block [247:26]
[  108.481412][ T6939] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  108.484545][ T6939] SQUASHFS error: Unable to read directory block [247:26]
[  108.491564][ T6939] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  108.494385][ T6939] SQUASHFS error: Unable to read directory block [247:26]
[  108.497369][ T6939] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  108.500306][ T6939] SQUASHFS error: Unable to read directory block [247:26]
[  108.504250][ T6939] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  108.508629][ T6939] SQUASHFS error: Unable to read directory block [247:26]
[  108.512609][ T6939] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  108.515167][ T6939] SQUASHFS error: Unable to read directory block [247:26]
[  108.518417][ T6939] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  108.520647][ T6939] SQUASHFS error: Unable to read directory block [247:26]
[  108.523973][ T6939] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  108.526282][ T6939] SQUASHFS error: Unable to read directory block [247:26]
[  108.528834][ T6939] SQUASHFS error: Unable to read metadata cache entry [2fa]
[  108.531661][ T6939] SQUASHFS error: Unable to read directory block [247:26]
[  108.601044][   T24] usb 1-1: USB disconnect, device number 15
[  109.067860][ T6942] loop2: detected capacity change from 0 to 512
[  109.071270][ T6942] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  109.089313][ T6942] EXT4-fs (loop2): 1 truncate cleaned up
[  109.092012][ T6942] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  109.470101][ T5818] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  109.575098][ T6948] loop0: detected capacity change from 0 to 32768
[  109.580031][ T6948] (syz.0.209,6948,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  109.587781][ T6948] (syz.0.209,6948,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  109.630604][ T6948] JBD2: Ignoring recovery information on journal
[  109.663152][ T6948] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  110.269979][   T34] audit: type=1800 audit(1764314642.660:17): pid=6948 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.209" name="file1" dev="loop0" ino=16978 res=0 errno=0
[  110.650600][ T6967] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  110.660196][ T6967] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  110.845324][ T6972] loop2: detected capacity change from 0 to 512
[  111.098755][ T6977] loop2: detected capacity change from 0 to 32768
[  111.111064][ T6977] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.217 (6977)
[  111.155220][ T6977] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  111.158296][ T6977] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[  111.172423][ T5813] ocfs2: Unmounting device (7,0) on (node local)
[  111.274005][ T6964] loop3: detected capacity change from 0 to 262144
[  111.274948][ T6977] BTRFS info (device loop2): rebuilding free space tree
[  111.278364][ T6964] BTRFS: device fsid f14e9105-5c88-4782-b968-4539b9a731cb devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.213 (6964)
[  111.321157][ T6977] BTRFS info (device loop2): turning off barriers
[  111.323500][ T6977] BTRFS info (device loop2): enabling free space tree
[  111.325731][ T6977] BTRFS info (device loop2): force clearing of disk cache
[  111.341511][ T6964] BTRFS info (device loop3): first mount of filesystem f14e9105-5c88-4782-b968-4539b9a731cb
[  111.344532][ T6964] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[  111.398575][ T5818] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  111.515834][ T6964] BTRFS info (device loop3): enabling ssd optimizations
[  111.517911][ T6964] BTRFS info (device loop3): turning on async discard
[  111.519838][ T6964] BTRFS info (device loop3): enabling free space tree
[  111.586687][ T6964] netlink: 'syz.3.213': attribute type 8 has an invalid length.
[  111.830055][ T7016] loop2: detected capacity change from 0 to 136
[  111.839122][ T7016] iso9660: Unknown parameter '}0x0000000000000000'
[  111.874372][ T6278] BTRFS info (device loop3): last unmount of filesystem f14e9105-5c88-4782-b968-4539b9a731cb
[  111.895800][ T7011] loop0: detected capacity change from 0 to 40427
[  111.909535][ T7011] F2FS-fs (loop0): build fault injection rate: 25
[  111.912107][ T7011] F2FS-fs (loop0): build fault injection type: 0x7698c
[  111.927224][ T7011] F2FS-fs (loop0): invalid crc value
[  111.941387][ T7011] F2FS-fs (loop0): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_ra_meta_pages+0x1cb/0x970
[  111.954926][ T7011] F2FS-fs (loop0): inject page alloc in f2fs_grab_cache_folio of f2fs_ra_meta_pages+0x615/0x970
[  112.053302][ T7011] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  112.071019][ T7011] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  112.081139][ T7011] F2FS-fs (loop0): inject too big dir depth in f2fs_add_regular_entry of f2fs_add_dentry+0xda/0x1d0
[  112.107531][   T34] audit: type=1800 audit(1764314644.500:18): pid=7011 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.219" name="file1" dev="loop0" ino=11 res=0 errno=0
[  112.133311][ T5813] syz-executor: attempt to access beyond end of device
[  112.133311][ T5813] loop0: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  112.160992][ T5813] F2FS-fs (loop0): inject write IO error in f2fs_write_end_io of __submit_merged_bio+0x27a/0x6a0
[  112.166574][ T5813] CPU: 0 UID: 0 PID: 5813 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  112.166589][ T5813] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  112.166619][ T5813] Call Trace:
[  112.166627][ T5813]  <TASK>
[  112.166633][ T5813]  dump_stack_lvl+0x189/0x250
[  112.166653][ T5813]  ? __pfx_dump_stack_lvl+0x10/0x10
[  112.166664][ T5813]  ? __pfx_queue_work_on+0x10/0x10
[  112.166674][ T5813]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  112.166689][ T5813]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  112.166704][ T5813]  f2fs_handle_critical_error+0x37c/0x540
[  112.166723][ T5813]  f2fs_write_end_io+0x886/0xb60
[  112.166740][ T5813]  __submit_merged_bio+0x27a/0x6a0
[  112.166755][ T5813]  __submit_merged_write_cond+0x255/0x530
[  112.166770][ T5813]  f2fs_write_data_pages+0x261d/0x3000
[  112.166793][ T5813]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  112.166807][ T5813]  ? kernel_text_address+0xa5/0xe0
[  112.166832][ T5813]  ? check_path+0x21/0x40
[  112.166841][ T5813]  ? check_noncircular+0xe0/0x160
[  112.166884][ T5813]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  112.166894][ T5813]  do_writepages+0x32e/0x550
[  112.166910][ T5813]  ? do_raw_spin_unlock+0x4d/0x240
[  112.166923][ T5813]  filemap_fdatawrite+0x199/0x240
[  112.166934][ T5813]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  112.166964][ T5813]  ? do_raw_spin_unlock+0x4d/0x240
[  112.166976][ T5813]  f2fs_sync_dirty_inodes+0x31f/0x830
[  112.166991][ T5813]  f2fs_write_checkpoint+0x93e/0x2440
[  112.167000][ T5813]  ? __lock_acquire+0xab9/0xd20
[  112.167020][ T5813]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  112.167053][ T5813]  kill_f2fs_super+0x2cc/0x6d0
[  112.167065][ T5813]  ? __pfx_kill_f2fs_super+0x10/0x10
[  112.167081][ T5813]  ? shrinker_free+0x2ce/0x3e0
[  112.167091][ T5813]  deactivate_locked_super+0xbc/0x130
[  112.167104][ T5813]  cleanup_mnt+0x425/0x4c0
[  112.167114][ T5813]  ? lockdep_hardirqs_on+0x9c/0x150
[  112.167128][ T5813]  task_work_run+0x1d4/0x260
[  112.167139][ T5813]  ? __pfx_task_work_run+0x10/0x10
[  112.167149][ T5813]  ? __x64_sys_umount+0x122/0x160
[  112.167162][ T5813]  ? exit_to_user_mode_loop+0x40/0x130
[  112.167171][ T5813]  exit_to_user_mode_loop+0xe9/0x130
[  112.167178][ T5813]  do_syscall_64+0x2bd/0xfa0
[  112.167190][ T5813]  ? lockdep_hardirqs_on+0x9c/0x150
[  112.167201][ T5813]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  112.167209][ T5813]  ? exc_page_fault+0xab/0x100
[  112.167220][ T5813]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  112.167227][ T5813] RIP: 0033:0x7f6fedf90a77
[  112.167236][ T5813] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  112.167243][ T5813] RSP: 002b:00007ffe7da44f58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  112.167252][ T5813] RAX: 0000000000000000 RBX: 00007f6fee013d7d RCX: 00007f6fedf90a77
[  112.167257][ T5813] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe7da45010
[  112.167262][ T5813] RBP: 00007ffe7da45010 R08: 0000000000000000 R09: 0000000000000000
[  112.167266][ T5813] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe7da460a0
[  112.167271][ T5813] R13: 00007f6fee013d7d R14: 000000000001b582 R15: 00007ffe7da460e0
[  112.167285][ T5813]  </TASK>
[  112.167303][ T5813] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  112.282362][ T5813] CPU: 0 UID: 0 PID: 5813 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  112.282380][ T5813] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  112.282386][ T5813] Call Trace:
[  112.282392][ T5813]  <TASK>
[  112.282397][ T5813]  dump_stack_lvl+0x189/0x250
[  112.282416][ T5813]  ? __pfx_dump_stack_lvl+0x10/0x10
[  112.282427][ T5813]  ? __pfx_queue_work_on+0x10/0x10
[  112.282446][ T5813]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  112.282461][ T5813]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  112.282477][ T5813]  f2fs_handle_critical_error+0x37c/0x540
[  112.282497][ T5813]  f2fs_write_end_io+0x886/0xb60
[  112.282516][ T5813]  __submit_merged_bio+0x27a/0x6a0
[  112.282533][ T5813]  __submit_merged_write_cond+0x255/0x530
[  112.282549][ T5813]  f2fs_write_data_pages+0x261d/0x3000
[  112.282575][ T5813]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  112.282616][ T5813]  ? kernel_text_address+0xa5/0xe0
[  112.282647][ T5813]  ? check_path+0x21/0x40
[  112.282655][ T5813]  ? check_noncircular+0xe0/0x160
[  112.282691][ T5813]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  112.282699][ T5813]  do_writepages+0x32e/0x550
[  112.282718][ T5813]  ? do_raw_spin_unlock+0x4d/0x240
[  112.282730][ T5813]  filemap_fdatawrite+0x199/0x240
[  112.282742][ T5813]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  112.282777][ T5813]  ? do_raw_spin_unlock+0x4d/0x240
[  112.282790][ T5813]  f2fs_sync_dirty_inodes+0x31f/0x830
[  112.282807][ T5813]  f2fs_write_checkpoint+0x93e/0x2440
[  112.282816][ T5813]  ? __lock_acquire+0xab9/0xd20
[  112.282838][ T5813]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  112.282876][ T5813]  kill_f2fs_super+0x2cc/0x6d0
[  112.282889][ T5813]  ? __pfx_kill_f2fs_super+0x10/0x10
[  112.282906][ T5813]  ? shrinker_free+0x2ce/0x3e0
[  112.282917][ T5813]  deactivate_locked_super+0xbc/0x130
[  112.282931][ T5813]  cleanup_mnt+0x425/0x4c0
[  112.282942][ T5813]  ? lockdep_hardirqs_on+0x9c/0x150
[  112.282956][ T5813]  task_work_run+0x1d4/0x260
[  112.282968][ T5813]  ? __pfx_task_work_run+0x10/0x10
[  112.282978][ T5813]  ? __x64_sys_umount+0x122/0x160
[  112.282992][ T5813]  ? exit_to_user_mode_loop+0x40/0x130
[  112.283002][ T5813]  exit_to_user_mode_loop+0xe9/0x130
[  112.283009][ T5813]  do_syscall_64+0x2bd/0xfa0
[  112.283022][ T5813]  ? lockdep_hardirqs_on+0x9c/0x150
[  112.283033][ T5813]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  112.283040][ T5813]  ? exc_page_fault+0xab/0x100
[  112.283052][ T5813]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  112.283060][ T5813] RIP: 0033:0x7f6fedf90a77
[  112.283072][ T5813] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  112.283079][ T5813] RSP: 002b:00007ffe7da44f58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  112.283089][ T5813] RAX: 0000000000000000 RBX: 00007f6fee013d7d RCX: 00007f6fedf90a77
[  112.283094][ T5813] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe7da45010
[  112.283099][ T5813] RBP: 00007ffe7da45010 R08: 0000000000000000 R09: 0000000000000000
[  112.283104][ T5813] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe7da460a0
[  112.283109][ T5813] R13: 00007f6fee013d7d R14: 000000000001b582 R15: 00007ffe7da460e0
[  112.283124][ T5813]  </TASK>
[  112.283128][ T5813] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  112.284227][ T7016] loop2: detected capacity change from 0 to 32768
[  112.454475][ T7016] XFS (loop2): DAX unsupported by block device. Turning off DAX.
[  112.458463][ T7016] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  112.470561][ T7016] XFS (loop2): Ending clean mount
[  112.479744][ T7016] XFS (loop2): Quotacheck needed: Please wait.
[  112.511128][ T7016] XFS (loop2): Quotacheck: Done.
[  112.696841][ T7034] loop0: detected capacity change from 0 to 16
[  112.709774][ T7034] erofs (device loop0): mounted with root inode @ nid 36.
[  112.832711][ T5818] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  112.852378][ T7041] loop3: detected capacity change from 0 to 4096
[  112.980869][    T9] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  113.006221][ T7044] loop2: detected capacity change from 0 to 256
[  113.021375][ T7044] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xbc8dc3cd, utbl_chksum : 0xe619d30d)
[  113.133508][    T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  113.137448][    T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[  113.147639][    T9] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  113.155824][    T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  113.159312][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  113.165067][ T3541] ntfs3(loop3): ino=5, mi_enum_attr
[  113.187511][    T9] usb 1-1: Product: syz
[  113.193599][    T9] usb 1-1: Manufacturer: syz
[  113.198931][    T9] usb 1-1: SerialNumber: syz
[  113.219237][    T9] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found
[  113.234353][    T9] cdc_ncm 1-1:1.0: bind() failure
[  113.387648][ T7050] loop3: detected capacity change from 0 to 32768
[  113.390998][ T7050] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.225 (7050)
[  113.411435][ T7050] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  113.419463][ T7050] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[  113.440585][ T5861] usb 1-1: USB disconnect, device number 16
[  113.519329][ T7050] BTRFS info (device loop3): rebuilding free space tree
[  113.527886][ T7050] BTRFS info (device loop3): turning off barriers
[  113.530016][ T7050] BTRFS info (device loop3): enabling free space tree
[  113.532846][ T7050] BTRFS info (device loop3): force clearing of disk cache
[  113.547053][ T7050] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  113.649009][ T7074] loop0: detected capacity change from 0 to 512
[  113.670572][ T7074] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[  113.691824][ T7074] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a042c11c, mo2=0002]
[  113.694239][ T7074] System zones: 1-12
[  113.699307][ T7074] EXT4-fs error (device loop0): ext4_iget_extra_inode:5075: inode #15: comm syz.0.227: corrupted in-inode xattr: e_value size too large
[  113.713419][ T7074] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.227: couldn't read orphan inode 15 (err -117)
[  113.723615][ T7074] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  113.758657][ T6278] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  113.799351][ T5813] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  113.910418][ T7081] program syz.0.229 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  114.018197][ T7085] loop3: detected capacity change from 0 to 512
[  114.037168][ T7085] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  114.045388][ T7085] EXT4-fs (loop3): 1 truncate cleaned up
[  114.051441][ T7085] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  114.170868][ T5861] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  114.240929][   T24] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  114.285381][ T6278] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  114.340972][ T5861] usb 1-1: Using ep0 maxpacket: 16
[  114.346047][ T5861] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  114.350140][ T5861] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  114.355100][ T5861] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  114.363687][ T5861] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice= 0.00
[  114.367136][ T5861] usb 1-1: New USB device strings: Mfr=32, Product=0, SerialNumber=0
[  114.370258][ T5861] usb 1-1: Manufacturer: syz
[  114.389717][ T5861] usb 1-1: config 0 descriptor??
[  114.412573][   T24] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  114.415282][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  114.422958][   T24] usb 3-1: config 0 descriptor??
[  114.426628][   T24] cp210x 3-1:0.0: cp210x converter detected
[  114.450606][ T7090] loop3: detected capacity change from 0 to 4096
[  114.524602][ T7093] loop3: detected capacity change from 0 to 2048
[  114.575238][ T7093]  loop3: p1 p2 p3
[  114.647488][ T5821] udevd[5821]: inotify_add_watch(7, /dev/loop3p2, 10) failed: No such file or directory
[  114.649242][ T7097] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280
[  114.653880][ T5820] udevd[5820]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[  114.656696][ T5822] udevd[5822]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory
[  114.798820][ T5861] playstation 0003:054C:0DF2.0005: item fetching failed at offset 4/5
[  114.803263][ T5861] playstation 0003:054C:0DF2.0005: Parse failed
[  114.805216][ T5861] playstation 0003:054C:0DF2.0005: probe with driver playstation failed with error -22
[  114.836898][   T24] usb 3-1: cp210x converter now attached to ttyUSB0
[  115.200887][ T7081] loop0: detected capacity change from 0 to 32768
[  115.204842][ T5861] usb 1-1: USB disconnect, device number 17
[  115.257302][ T7083] loop2: detected capacity change from 0 to 40427
[  115.384426][ T5861] usb 3-1: USB disconnect, device number 13
[  115.388604][ T5861] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  115.392518][ T5861] cp210x 3-1:0.0: device disconnected
[  115.632254][ T7105] loop3: detected capacity change from 0 to 512
[  115.635549][ T7105] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  115.646513][ T7105] EXT4-fs (loop3): 1 truncate cleaned up
[  115.649308][ T7105] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  115.655711][ T7105] netlink: 'syz.3.237': attribute type 10 has an invalid length.
[  115.659184][ T7105] netlink: 2 bytes leftover after parsing attributes in process `syz.3.237'.
[  115.664367][ T7105] batadv_slave_1: entered promiscuous mode
[  115.667103][ T7105] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  115.669999][ T7105] batman_adv: batadv0: Removing interface: batadv_slave_1
[  115.675396][ T7105] bridge0: port 3(batadv_slave_1) entered blocking state
[  115.678688][ T7105] bridge0: port 3(batadv_slave_1) entered disabled state
[  115.681825][ T7105] batadv_slave_1: entered allmulticast mode
[  115.686824][ T7105] bridge0: port 3(batadv_slave_1) entered blocking state
[  115.690270][ T7105] bridge0: port 3(batadv_slave_1) entered forwarding state
[  115.699885][ T7105] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  115.726524][ T6278] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  115.920994][ T7109] loop3: detected capacity change from 0 to 32768
[  115.929267][ T7109] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.238 (7109)
[  115.935219][ T7109] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  115.938267][ T7109] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[  115.941121][ T7109] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  116.001920][ T5861] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  116.061045][ T7109] BTRFS info (device loop3): rebuilding free space tree
[  116.075232][ T7109] BTRFS info (device loop3): disabling free space tree
[  116.077374][ T7109] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  116.080426][ T7109] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  116.087681][ T7109] BTRFS info (device loop3): enabling ssd optimizations
[  116.090002][ T7109] BTRFS info (device loop3): enabling disk space caching
[  116.092400][ T7109] BTRFS info (device loop3): force clearing of disk cache
[  116.094539][ T7109] BTRFS info (device loop3): enabling auto defrag
[  116.096705][ T7109] BTRFS info (device loop3): max_inline set to 0
[  116.127990][ T7109] BTRFS info (device loop3): scrub: started on devid 1
[  116.134204][ T7109] BTRFS info (device loop3): scrub: finished on devid 1 with status: 0
[  116.159714][ T5861] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  116.163604][ T5861] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  116.176515][ T5861] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  116.182755][ T5861] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  116.187569][ T5861] usb 1-1: Product: syz
[  116.190998][ T5861] usb 1-1: Manufacturer: syz
[  116.193800][ T5861] usb 1-1: SerialNumber: syz
[  116.202666][ T5861] hub 1-1:1.0: Invalid hub with more than one config or interface
[  116.213552][ T5861] hub 1-1:1.0: probe with driver hub failed with error -22
[  116.238649][ T6278] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  116.411959][ T5861] usb 1-1: USB disconnect, device number 18
[  116.711002][   T24] usb 4-1: new full-speed USB device number 12 using dummy_hcd
[  116.863084][ T7143] loop2: detected capacity change from 0 to 512
[  116.866335][ T7143] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  116.875122][   T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  116.878716][   T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  116.882771][ T7143] EXT4-fs (loop2): 1 truncate cleaned up
[  116.885352][ T7143] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  116.889352][   T24] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  116.895124][   T24] usb 4-1: New USB device found, idVendor=0925, idProduct=8888, bcdDevice= 0.00
[  116.897719][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  116.904894][   T24] usb 4-1: config 0 descriptor??
[  116.969490][ T7147] loop0: detected capacity change from 0 to 512
[  116.982541][ T7147] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  116.996120][ T7147] EXT4-fs (loop0): 1 truncate cleaned up
[  116.998708][ T7147] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  117.010118][ T7147] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  117.114954][ T5813] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  117.213053][ T7150] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm syz.2.244: bg 0: block 4: invalid block bitmap
[  117.313981][ T7141] loop3: detected capacity change from 0 to 32768
[  117.327903][ T7141] JBD2: Ignoring recovery information on journal
[  117.372731][ T7141] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  117.585435][ T7158] loop0: detected capacity change from 0 to 32768
[  117.590875][ T7141] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  117.601427][ T7141] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  117.609148][ T7158] XFS (loop0): DAX unsupported by block device. Turning off DAX.
[  117.618975][ T7158] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  117.639232][ T7158] XFS (loop0): Ending clean mount
[  117.644124][ T7158] XFS (loop0): Quotacheck needed: Please wait.
[  117.658307][  T744] XFS (loop0): Metadata corruption detected at xfs_dinode_verify+0x1a6/0x1570, inode 0x2448 dinode
[  117.662011][  T744] XFS (loop0): Unmount and run xfs_repair
[  117.663871][  T744] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[  117.666127][  T744] 00000000: 49 4e 81 ed 03 02 00 00 00 00 00 00 00 00 00 00  IN..............
[  117.669730][  T744] 00000010: 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  117.673393][  T744] 00000020: 34 f7 58 68 a5 e2 bf 3d 34 f7 58 68 a5 e2 bf 3d  4.Xh...=4.Xh...=
[  117.676049][  T744] 00000030: 34 f7 58 68 a5 e2 bf 3d 00 00 00 00 00 00 00 64  4.Xh...=.......d
[  117.678664][  T744] 00000040: 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 01  ................
[  117.681749][  T744] 00000050: 00 00 18 02 00 00 00 00 00 00 00 00 a7 ae dc a3  ................
[  117.684412][  T744] 00000060: ff ff ff ff 4b 8f a7 16 00 00 00 00 00 00 00 05  ....K...........
[  117.687073][  T744] 00000070: 00 00 00 01 00 00 00 80 00 00 00 00 00 00 00 08  ................
[  117.717630][ T7158] XFS (loop0): Quotacheck: Unsuccessful (Error -117): Disabling quotas.
[  117.737140][ T5813] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  117.743952][ T5813] XFS (loop0): Uncorrected metadata errors detected; please run xfs_repair.
[  118.554241][ T5818] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  118.618162][ T7174] loop2: detected capacity change from 0 to 512
[  118.630400][ T7174] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (18771!=2687)
[  118.638471][ T7174] EXT4-fs (loop2): group descriptors corrupted!
[  118.748166][ T7178] loop2: detected capacity change from 0 to 128
[  119.021917][ T7180] loop2: detected capacity change from 0 to 32768
[  119.027548][ T7180] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.252 (7180)
[  119.052036][ T7180] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  119.057358][ T7180] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[  119.088614][ T7182] loop0: detected capacity change from 0 to 32768
[  119.106033][ T7182] (syz.0.253,7182,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  119.111880][ T7182] (syz.0.253,7182,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  119.125842][ T7182] JBD2: Ignoring recovery information on journal
[  119.145943][ T7180] BTRFS info (device loop2): rebuilding free space tree
[  119.163728][ T7180] BTRFS info (device loop2): turning off barriers
[  119.165710][ T7180] BTRFS info (device loop2): enabling free space tree
[  119.167684][ T7180] BTRFS info (device loop2): force clearing of disk cache
[  119.171834][ T7182] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  119.221535][ T7180] vcan0: tx address claim with dlc 0
[  119.278051][ T5818] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  119.474254][   T24] usb 4-1: string descriptor 0 read error: -71
[  119.481970][   T24] usbhid 4-1:0.0: can't add hid device: -71
[  119.483810][   T24] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  119.500375][   T24] usb 4-1: USB disconnect, device number 12
[  119.557598][ T6278] ocfs2: Unmounting device (7,3) on (node local)
[  119.614415][   T34] audit: type=1800 audit(1764314652.010:19): pid=7182 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.253" name="file1" dev="loop0" ino=16978 res=0 errno=0
[  119.640848][    T9] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  119.970785][    T9] usb 3-1: Using ep0 maxpacket: 16
[  119.978358][    T9] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  119.981893][ T5813] ocfs2: Unmounting device (7,0) on (node local)
[  119.983885][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  119.986215][    T9] usb 3-1: Product: syz
[  119.987468][    T9] usb 3-1: Manufacturer: syz
[  119.988837][    T9] usb 3-1: SerialNumber: syz
[  119.995609][ T7209] loop3: detected capacity change from 0 to 32768
[  120.009845][ T7209] 
[  120.009845][ T7209]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  120.009845][ T7209] 
[  120.012613][    T9] usb 3-1: config 0 descriptor??
[  120.026347][ T7208] read_mapping_page failed!
[  120.028346][ T7208] ERROR: (device loop3): txCommit: 
[  120.028346][ T7208] 
[  120.035362][ T7208] read_mapping_page failed!
[  120.036780][ T7208] ERROR: (device loop3): txCommit: 
[  120.036780][ T7208] 
[  120.137452][ T7211] loop0: detected capacity change from 0 to 512
[  120.167507][ T7211] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  120.172522][ T7211] ext4 filesystem being mounted at /85/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  120.183249][ T7211] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  120.186911][ T7211] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  120.214591][ T5813] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  120.231209][    T9] usb 3-1: USB disconnect, device number 14
[  120.474583][ T7215] loop0: detected capacity change from 0 to 32768
[  120.486418][ T7215] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  120.523564][ T7215] XFS (loop0): Ending clean mount
[  120.528489][ T7215] XFS (loop0): Quotacheck needed: Please wait.
[  120.541460][ T7215] XFS (loop0): Quotacheck: Done.
[  120.573459][ T6278] 
[  120.573459][ T6278]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  120.573459][ T6278] 
[  120.574237][ T6278] 
[  120.574237][ T6278]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  120.574237][ T6278] 
[  120.613884][ T7224] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  120.672028][ T5813] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  120.975153][ T7240] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  120.990678][ T7235] loop2: detected capacity change from 0 to 32768
[  121.001109][ T7235] (syz.2.262,7235,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  121.005771][ T7235] (syz.2.262,7235,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  121.022336][ T7235] JBD2: Ignoring recovery information on journal
[  121.031230][ T7242] loop3: detected capacity change from 0 to 8
[  121.056189][ T7242] SQUASHFS error: Unable to read directory block [629:fe]
[  121.058858][ T7235] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  121.136387][ T7238] loop0: detected capacity change from 0 to 32768
[  121.340394][ T7249] loop9: detected capacity change from 0 to 7
[  121.356124][   T34] audit: type=1800 audit(1764314653.750:20): pid=7235 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.262" name="file1" dev="loop2" ino=16978 res=0 errno=0
[  121.364456][ T7249]  loop9: [CUMANA/ADFS] p1 [ADFS] p1
[  121.367813][ T7249] loop9: partition table partially beyond EOD, truncated
[  121.371308][ T7249] loop9: p1 size 2437361653 extends beyond EOD, truncated
[  121.430945][ T5810] udevd[5810]: inotify_add_watch(7, /dev/loop9p1, 10) failed: No such file or directory
[  121.980964][ T7255] loop1: detected capacity change from 0 to 255
[  122.017966][ T7252] loop0: detected capacity change from 0 to 131072
[  122.023420][ T7252] F2FS-fs (loop0): Test dummy encryption mode enabled
[  122.026776][ T7252] F2FS-fs (loop0): invalid crc value
[  122.030249][ T5818] ocfs2: Unmounting device (7,2) on (node local)
[  122.057685][ T7252] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  122.067339][ T7252] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  122.330915][    T9] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  122.450920][   T10] usb 3-1: new full-speed USB device number 15 using dummy_hcd
[  122.460993][    T9] usb 1-1: device descriptor read/64, error -71
[  122.603725][   T10] usb 3-1: config 150 has an invalid interface number: 204 but max is 2
[  122.607005][   T10] usb 3-1: config 150 has 2 interfaces, different from the descriptor's value: 3
[  122.610486][   T10] usb 3-1: config 150 has no interface number 0
[  122.613115][   T10] usb 3-1: config 150 interface 204 has no altsetting 0
[  122.618230][   T10] usb 3-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb
[  122.623670][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  122.626838][   T10] usb 3-1: Product: syz
[  122.628488][   T10] usb 3-1: Manufacturer: syz
[  122.630266][   T10] usb 3-1: SerialNumber: syz
[  122.718987][    T9] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  122.736428][ T7266] loop3: detected capacity change from 0 to 128
[  122.740499][ T7266] EXT4-fs (loop3): Test dummy encryption mode enabled
[  122.753358][ T7266] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  122.764310][ T7266] ext4 filesystem being mounted at /62/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  122.830362][ T7266] fscrypt: AES-256-CBC-CTS using implementation "cts(cbc(ecb(aes-fixed-time)))"
[  122.850917][    T9] usb 1-1: device descriptor read/64, error -71
[  122.855582][   T10] xr_serial 3-1:150.204: skipping garbage
[  122.857315][   T10] xr_serial 3-1:150.204: xr_serial converter detected
[  122.962516][    T9] usb usb1-port1: attempt power cycle
[  123.012018][ T7272] netlink: 8 bytes leftover after parsing attributes in process `syz.3.270'.
[  123.187818][ T7272] fscrypt: AES-256-XTS using implementation "xts(ecb(aes-fixed-time))"
[  123.420830][    T9] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  123.444033][    T9] usb 1-1: device descriptor read/8, error -71
[  123.701607][    T9] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  123.721468][    T9] usb 1-1: device descriptor read/8, error -71
[  123.831506][    T9] usb usb1-port1: unable to enumerate USB device
[  123.949887][ T7279] loop2: detected capacity change from 0 to 4096
[  123.976469][   T34] audit: type=1800 audit(1764314656.370:21): pid=7279 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.269" name="file1" dev="loop2" ino=0 res=0 errno=0
[  123.996073][   T10] usb 3-1: xr_serial converter now attached to ttyUSB0
[  124.117572][ T6278] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  124.155284][ T7284] loop3: detected capacity change from 0 to 512
[  124.159745][ T7284] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  124.164362][ T7284] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities
[  124.430891][ T5861] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  124.591071][ T5861] usb 4-1: Using ep0 maxpacket: 32
[  124.596111][ T5861] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 49, changing to 9
[  124.600185][ T5861] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 8447, setting to 1024
[  124.608725][ T5861] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16
[  124.612749][ T5861] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  124.615764][ T5861] usb 4-1: Product: syz
[  124.617285][ T5861] usb 4-1: Manufacturer: syz
[  124.619045][ T5861] usb 4-1: SerialNumber: syz
[  124.633546][ T5861] usb 4-1: config 0 descriptor??
[  124.654626][ T5861] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  124.844790][ T7286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  124.849440][ T7286] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  124.855979][ T5861] usb 4-1: USB disconnect, device number 13
[  124.861281][   T12] usb 4-1: Failed to submit usb control message: -71
[  124.863961][   T12] usb 4-1: unable to send the bmi data to the device: -71
[  124.866162][   T12] usb 4-1: unable to get target info from device
[  124.867940][   T12] usb 4-1: could not get target info (-71)
[  124.869814][   T12] usb 4-1: could not probe fw (-71)
[  125.109102][ T7291] loop0: detected capacity change from 0 to 32768
[  125.119655][ T7291] (syz.0.273,7291,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  125.124449][ T7291] (syz.0.273,7291,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  125.133559][ T7291] JBD2: Ignoring recovery information on journal
[  125.155644][ T7291] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  125.235179][  T796] usb 3-1: USB disconnect, device number 15
[  125.251381][  T796] xr_serial ttyUSB0: xr_serial converter now disconnected from ttyUSB0
[  125.264083][  T796] xr_serial 3-1:150.204: device disconnected
[  125.368361][   T34] audit: type=1800 audit(1764314657.760:22): pid=7291 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.273" name="file1" dev="loop0" ino=16978 res=0 errno=0
[  125.438619][ T7298] netlink: 16 bytes leftover after parsing attributes in process `syz.3.275'.
[  125.492674][ T7295] loop2: detected capacity change from 0 to 32768
[  125.524003][ T7295] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  125.554981][ T7295] XFS (loop2): Ending clean mount
[  125.564185][   T34] audit: type=1800 audit(1764314657.960:23): pid=7295 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.274" name="file1" dev="loop2" ino=4422 res=0 errno=0
[  125.612516][ T7295] netlink: 4 bytes leftover after parsing attributes in process `syz.2.274'.
[  125.770986][  T796] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  125.876033][ T5813] ocfs2: Unmounting device (7,0) on (node local)
[  125.931161][  T796] usb 4-1: Using ep0 maxpacket: 8
[  125.943185][  T796] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  125.955263][  T796] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  125.959301][  T796] usb 4-1: New USB device found, idVendor=046d, idProduct=c20e, bcdDevice= 0.00
[  125.972597][  T796] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  125.980595][ T5818] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  125.995065][  T796] usb 4-1: config 0 descriptor??
[  126.023983][ T7316] loop0: detected capacity change from 0 to 8192
[  126.257343][ T7311] loop3: detected capacity change from 0 to 16
[  126.269016][ T7311] erofs (device loop3): mounted with root inode @ nid 36.
[  126.500160][  T796] usbhid 4-1:0.0: can't add hid device: -71
[  126.506758][  T796] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  126.524929][  T796] usb 4-1: USB disconnect, device number 14
[  126.545162][ T7328] loop2: detected capacity change from 0 to 16
[  126.554630][ T7328] erofs (device loop2): mounted with root inode @ nid 36.
[  126.568443][ T7328] netlink: 'syz.2.280': attribute type 1 has an invalid length.
[  126.585840][   T34] audit: type=1800 audit(1764314658.980:24): pid=7328 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.280" name="file1" dev="loop2" ino=86 res=0 errno=0
[  126.593895][ T7328] Invalid ELF header len 10
[  126.830923][   T24] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  126.960841][   T24] usb 3-1: device descriptor read/64, error -71
[  127.200859][   T24] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  127.207443][ T7334] loop3: detected capacity change from 0 to 8
[  127.216780][ T7334] SQUASHFS error: zlib decompression failed, data probably corrupt
[  127.220091][ T7334] SQUASHFS error: Failed to read block 0x9b: -5
[  127.222673][ T7334] SQUASHFS error: Unable to read metadata cache entry [99]
[  127.225634][ T7334] SQUASHFS error: Unable to read inode 0x127
[  127.330872][   T24] usb 3-1: device descriptor read/64, error -71
[  127.368198][ T7334] loop3: detected capacity change from 0 to 32768
[  127.370843][ T7334] btrfs: Unknown parameter 'check_int'
[  127.452620][   T24] usb usb3-port1: attempt power cycle
[  127.790840][   T24] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  127.813385][   T24] usb 3-1: device descriptor read/8, error -71
[  127.875934][ T7337] loop0: detected capacity change from 0 to 32768
[  127.880064][ T7337] (syz.0.283,7337,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  127.884399][ T7337] (syz.0.283,7337,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  127.913809][ T7337] JBD2: Ignoring recovery information on journal
[  127.947797][ T7337] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  128.015896][ T7341] loop3: detected capacity change from 0 to 47
[  128.060936][   T24] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  128.084016][   T24] usb 3-1: device descriptor read/8, error -71
[  128.087851][ T7341] xt_ecn: cannot match TCP bits for non-tcp packets
[  128.199689][ T7346] loop3: detected capacity change from 0 to 4096
[  128.202466][   T24] usb usb3-port1: unable to enumerate USB device
[  128.220022][   T34] audit: type=1800 audit(1764314660.610:25): pid=7337 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.283" name="file1" dev="loop0" ino=16978 res=0 errno=0
[  128.243437][ T7346] fuse: Bad value for 'fd'
[  128.541225][   T24] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  128.629989][ T5813] ocfs2: Unmounting device (7,0) on (node local)
[  128.680816][   T24] usb 4-1: device descriptor read/64, error -71
[  128.761702][ T7351] loop0: detected capacity change from 0 to 2048
[  128.767090][ T7351] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities
[  128.788065][ T7351] macsec0: entered promiscuous mode
[  128.789728][ T7351] macsec0: entered allmulticast mode
[  128.791884][ T7351] veth1_macvtap: entered allmulticast mode
[  128.795744][ T7351] netlink: 28 bytes leftover after parsing attributes in process `syz.0.287'.
[  128.920854][   T24] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  129.050839][  T796] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  129.053082][   T24] usb 4-1: device descriptor read/64, error -71
[  129.160962][   T24] usb usb4-port1: attempt power cycle
[  129.213420][  T796] usb 1-1: config index 0 descriptor too short (expected 9, got 0)
[  129.216210][  T796] usb 1-1: can't read configurations, error -22
[  129.341287][  T796] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[  129.494235][  T796] usb 1-1: config index 0 descriptor too short (expected 9, got 0)
[  129.497308][  T796] usb 1-1: can't read configurations, error -22
[  129.500043][  T796] usb usb1-port1: attempt power cycle
[  129.502241][   T24] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  129.521404][   T24] usb 4-1: device descriptor read/8, error -71
[  129.761090][   T24] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  129.781596][   T24] usb 4-1: device descriptor read/8, error -71
[  129.840856][  T796] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[  129.863529][  T796] usb 1-1: config index 0 descriptor too short (expected 9, got 0)
[  129.866629][  T796] usb 1-1: can't read configurations, error -22
[  129.891302][   T24] usb usb4-port1: unable to enumerate USB device
[  129.970899][ T5876] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  129.990954][  T796] usb 1-1: new high-speed USB device number 26 using dummy_hcd
[  130.013911][  T796] usb 1-1: config index 0 descriptor too short (expected 9, got 0)
[  130.017023][  T796] usb 1-1: can't read configurations, error -22
[  130.019665][  T796] usb usb1-port1: unable to enumerate USB device
[  130.120993][ T5876] usb 3-1: Using ep0 maxpacket: 32
[  130.125122][ T5876] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  130.131678][ T5876] usb 3-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39
[  130.135379][ T5876] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  130.138480][ T5876] usb 3-1: Product: syz
[  130.140056][ T5876] usb 3-1: Manufacturer: syz
[  130.142212][ T5876] usb 3-1: SerialNumber: syz
[  130.151450][ T5876] usb 3-1: config 0 descriptor??
[  130.156331][ T5876] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b
[  130.558278][ T7357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  130.561797][ T7357] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  130.768998][ T5876] gspca_pac7302: reg_w() failed i: ff v: 01 error -71
[  130.772717][ T5876] gspca_pac7302 3-1:0.0: probe with driver gspca_pac7302 failed with error -71
[  130.776650][ T5876] usb 3-1: USB disconnect, device number 20
[  131.560875][ T5842] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  131.584252][ T7361] loop3: detected capacity change from 0 to 32768
[  131.600232][ T7361] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  131.626644][ T7361] XFS (loop3): Ending clean mount
[  131.662181][ T6278] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  131.725307][ T5842] usb 3-1: Using ep0 maxpacket: 8
[  131.746744][ T5842] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  131.749800][ T5842] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  131.756665][ T5842] usb 3-1: config 0 has no interface number 0
[  131.759013][ T5842] usb 3-1: config 0 interface 1 altsetting 0 has an endpoint descriptor with address 0xB6, changing to 0x86
[  131.780003][ T5842] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[  131.788908][ T5842] usb 3-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  131.807388][ T5842] usb 3-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b
[  131.813454][ T5842] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  131.817154][ T5842] usb 3-1: SerialNumber: syz
[  131.827286][ T5842] usb 3-1: config 0 descriptor??
[  131.854749][ T5842] hso 3-1:0.1: Failed to find BULK IN ep
[  132.006565][ T7373] loop3: detected capacity change from 0 to 32768
[  132.009402][ T7373] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.293 (7373)
[  132.021254][ T7373] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  132.024965][ T7373] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[  132.062481][ T7371] loop0: detected capacity change from 0 to 32768
[  132.081480][ T7371] BTRFS info: device /dev/loop0 (7:0) using temp-fsid 445c965e-2f1c-4d5c-ad39-b6debd3b298f
[  132.085445][ T7371] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.294 (7371)
[  132.111053][ T5259] udevd[5259]: worker [5820] terminated by signal 33 (Unknown signal 33)
[  132.114193][ T5259] udevd[5259]: worker [5820] failed while handling '/devices/virtual/block/loop0'
[  132.123557][ T5259] udevd[5259]: worker [5810] terminated by signal 33 (Unknown signal 33)
[  132.126562][ T5259] udevd[5259]: worker [5810] failed while handling '/devices/virtual/block/loop3'
[  133.021864][ T7371] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  133.033768][ T7371] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm
[  133.045695][ T7373] BTRFS info (device loop3): enabling ssd optimizations
[  133.048554][ T7371] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  133.058675][ T7373] BTRFS info (device loop3): turning on async discard
[  133.061703][ T7373] BTRFS info (device loop3): enabling free space tree
[  133.090128][ T7359] loop2: detected capacity change from 0 to 262144
[  133.092701][   T34] audit: type=1800 audit(1764314665.480:26): pid=7373 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.293" name="file1" dev="loop3" ino=260 res=0 errno=0
[  133.105954][ T7359] BTRFS: device fsid f14e9105-5c88-4782-b968-4539b9a731cb devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.291 (7359)
[  133.131998][ T7359] BTRFS info (device loop2): first mount of filesystem f14e9105-5c88-4782-b968-4539b9a731cb
[  133.135831][ T7359] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[  133.157439][ T5259] udevd[5259]: worker [5821] terminated by signal 33 (Unknown signal 33)
[  133.177671][ T5259] udevd[5259]: worker [5821] failed while handling '/devices/virtual/block/loop3'
[  133.191035][ T7359] BTRFS info (device loop2): enabling ssd optimizations
[  133.193613][ T7359] BTRFS info (device loop2): turning on async discard
[  133.194183][ T7371] BTRFS info (device loop0): rebuilding free space tree
[  133.195958][ T7359] BTRFS info (device loop2): enabling free space tree
[  133.238958][ T5259] udevd[5259]: worker [5822] terminated by signal 33 (Unknown signal 33)
[  133.239694][ T5842] usb 3-1: USB disconnect, device number 21
[  133.242760][ T5259] udevd[5259]: worker [5822] failed while handling '/devices/virtual/block/loop2'
[  133.260387][ T7371] BTRFS info (device loop0): disabling free space tree
[  133.275228][ T1361] ieee802154 phy0 wpan0: encryption failed: -22
[  133.277609][ T1361] ieee802154 phy1 wpan1: encryption failed: -22
[  133.301194][ T7371] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  133.311275][ T7371] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  133.337195][ T7371] BTRFS info (device loop0): enabling ssd optimizations
[  133.340048][ T7371] BTRFS info (device loop0): turning on async discard
[  133.347486][ T6278] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  133.351719][ T7371] BTRFS info (device loop0): enabling disk space caching
[  133.354260][ T7371] BTRFS info (device loop0): force clearing of disk cache
[  133.357816][ T7371] BTRFS info (device loop0): enabling auto defrag
[  133.360885][ T7371] BTRFS info (device loop0): use zlib compression, level 3
[  133.363763][ T7371] BTRFS info (device loop0): max_inline set to 0
[  133.416063][ T5813] BTRFS info (device loop0): last unmount of filesystem 445c965e-2f1c-4d5c-ad39-b6debd3b298f
[  133.690027][ T7429] IPv6: addrconf: prefix option has invalid lifetime
[  133.788596][ T5818] BTRFS info (device loop2): last unmount of filesystem f14e9105-5c88-4782-b968-4539b9a731cb
[  133.799259][ T7431] loop3: detected capacity change from 0 to 2048
[  133.843863][ T7431] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  133.861818][ T5842] usb 1-1: new high-speed USB device number 27 using dummy_hcd
[  134.012527][ T6278] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  134.040971][ T5842] usb 1-1: Using ep0 maxpacket: 32
[  134.045068][ T5842] usb 1-1: config 0 has an invalid interface number: 184 but max is 0
[  134.048087][ T5842] usb 1-1: config 0 has no interface number 0
[  134.050409][ T5842] usb 1-1: config 0 interface 184 has no altsetting 0
[  134.058358][ T5842] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  134.062250][ T5842] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  134.065230][ T5842] usb 1-1: Product: syz
[  134.066900][ T5842] usb 1-1: Manufacturer: syz
[  134.068662][ T5842] usb 1-1: SerialNumber: syz
[  134.074231][ T5842] usb 1-1: config 0 descriptor??
[  134.083541][ T5842] smsc75xx v1.0.0
[  134.092607][ T7439] loop3: detected capacity change from 0 to 512
[  134.095920][ T7439] EXT4-fs (loop3): Test dummy encryption mode enabled
[  134.098719][ T7439] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  134.105461][ T7439] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.299: bad orphan inode 131083
[  134.112840][ T7439] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  134.138771][ T6278] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  134.395667][ T7449] loop3: detected capacity change from 0 to 32768
[  134.398940][ T7449] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.301 (7449)
[  134.405440][ T7449] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  134.408587][ T7449] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[  134.448248][ T7449] BTRFS info (device loop3): enabling ssd optimizations
[  134.450423][ T7449] BTRFS info (device loop3): turning on async discard
[  134.452557][ T7449] BTRFS info (device loop3): enabling free space tree
[  134.457944][   T34] audit: type=1800 audit(1764314666.850:27): pid=7449 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.301" name="file1" dev="loop3" ino=260 res=0 errno=0
[  134.649035][ T7466] netlink: 28 bytes leftover after parsing attributes in process `syz.2.298'.
[  134.659248][ T7468] netlink: 16 bytes leftover after parsing attributes in process `syz.2.298'.
[  134.659528][ T7466] netlink: 'syz.2.298': attribute type 7 has an invalid length.
[  134.665852][ T7466] netlink: 'syz.2.298': attribute type 8 has an invalid length.
[  134.669112][ T7466] netlink: 4 bytes leftover after parsing attributes in process `syz.2.298'.
[  134.777387][ T7470] gre1: entered promiscuous mode
[  134.779990][ T7470] netlink: 28 bytes leftover after parsing attributes in process `syz.2.302'.
[  134.822377][ T7474] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  134.825122][ T7474] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  134.970227][ T7474] loop2: detected capacity change from 0 to 32768
[  134.979663][ T7474] (syz.2.303,7474,1):ocfs2_read_journal_inode:1659 ERROR: status = -13
[  134.982847][ T7474] (syz.2.303,7474,1):ocfs2_mark_dead_nodes:1942 ERROR: status = -13
[  134.985241][ T7474] (syz.2.303,7474,1):ocfs2_check_volume:2420 ERROR: status = -13
[  134.987555][ T7474] (syz.2.303,7474,1):ocfs2_check_volume:2432 ERROR: status = -13
[  134.989929][ T7474] (syz.2.303,7474,1):ocfs2_mount_volume:1764 ERROR: status = -13
[  135.006443][ T7474] (syz.2.303,7474,1):ocfs2_fill_super:1177 ERROR: status = -13
[  135.098826][ T5842] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[  135.102327][ T5842] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  135.105706][    C0] raw-gadget.0 gadget.0: ignoring, device is not running
[  135.108210][ T5842] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32
[  135.111523][ T5842] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32
[  135.116559][ T5842] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset
[  135.120164][ T5842] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32
[  135.123656][ T5842] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -32
[  135.131145][ T5842] usb 1-1: USB disconnect, device number 27
[  135.133240][ T6278] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  135.500936][   T10] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  135.543628][ T7490] loop3: detected capacity change from 0 to 256
[  135.554465][ T7490] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xf4000b1f, utbl_chksum : 0xe619d30d)
[  135.671122][   T10] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  135.674478][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  135.695326][   T10] usb 3-1: config 0 descriptor??
[  136.102999][ T5842] usb 4-1: new low-speed USB device number 19 using dummy_hcd
[  136.137170][ T7526] syz.0.317 uses obsolete (PF_INET,SOCK_PACKET)
[  136.283213][ T5842] usb 4-1: Invalid ep0 maxpacket: 32
[  136.312438][ T7541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  136.315902][ T7541] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  136.421023][ T5842] usb 4-1: new low-speed USB device number 20 using dummy_hcd
[  136.551040][   T24] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[  136.571298][ T5842] usb 4-1: Invalid ep0 maxpacket: 32
[  136.574313][ T5842] usb usb4-port1: attempt power cycle
[  136.705112][   T24] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  136.708670][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  136.711872][   T24] usb 1-1: Product: syz
[  136.714326][   T24] usb 1-1: Manufacturer: syz
[  136.716099][   T24] usb 1-1: SerialNumber: syz
[  136.723276][   T24] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  136.756654][   T24] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  136.910932][ T5842] usb 4-1: new low-speed USB device number 21 using dummy_hcd
[  136.931815][ T5842] usb 4-1: Invalid ep0 maxpacket: 32
[  137.060940][ T5842] usb 4-1: new low-speed USB device number 22 using dummy_hcd
[  137.082684][ T5842] usb 4-1: Invalid ep0 maxpacket: 32
[  137.084728][ T5842] usb usb4-port1: unable to enumerate USB device
[  137.141098][   T10] usb 3-1: Cannot set autoneg
[  137.142900][   T10] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[  137.150513][   T10] usb 3-1: USB disconnect, device number 22
[  137.309332][ T5199] Bluetooth: hci1: SCO packet for unknown connection handle 1
[  137.677019][ T7548] Driver unsupported XDP return value 0 on prog  (id 51) dev N/A, expect packet loss!
[  137.741582][ T7551] cgroup: fork rejected by pids controller in /syz2
[  137.820861][   T24] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive
[  137.824416][   T24] ath9k_htc: Failed to initialize the device
[  137.863012][   T24] usb 1-1: ath9k_htc: USB layer deinitialized
[  138.023973][   T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  138.081375][   T24] usb 1-1: USB disconnect, device number 28
[  138.110441][   T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  138.180007][   T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  138.223257][ T5811] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  138.227416][ T5811] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  138.230390][ T5811] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  138.238105][ T5811] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  138.242842][ T5811] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  138.257946][   T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  138.383491][ T7555] chnl_net:caif_netlink_parms(): no params data found
[  138.430009][   T12] bridge_slave_1: left allmulticast mode
[  138.432563][   T12] bridge_slave_1: left promiscuous mode
[  138.434915][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  138.440057][   T12] bridge_slave_0: left allmulticast mode
[  138.442946][   T12] bridge_slave_0: left promiscuous mode
[  138.445194][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  138.640450][ T7564] netlink: 'syz.0.325': attribute type 2 has an invalid length.
[  138.691173][ T7563] netlink: 'syz.0.325': attribute type 2 has an invalid length.
[  138.956130][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  138.964164][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  138.968965][   T12] bond0 (unregistering): Released all slaves
[  139.008709][ T7564] !: entered promiscuous mode
[  139.013473][ T7555] bridge0: port 1(bridge_slave_0) entered blocking state
[  139.016361][ T7555] bridge0: port 1(bridge_slave_0) entered disabled state
[  139.018498][ T7555] bridge_slave_0: entered allmulticast mode
[  139.022551][ T7555] bridge_slave_0: entered promiscuous mode
[  139.025953][ T7555] bridge0: port 2(bridge_slave_1) entered blocking state
[  139.028235][ T7555] bridge0: port 2(bridge_slave_1) entered disabled state
[  139.031852][ T7555] bridge_slave_1: entered allmulticast mode
[  139.035786][ T7555] bridge_slave_1: entered promiscuous mode
[  139.072494][ T7563] !: left promiscuous mode
[  139.090140][ T7555] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  139.119820][ T7555] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  139.344756][   T12] !: left promiscuous mode
[  139.419807][ T7555] team0: Port device team_slave_0 added
[  139.432613][ T7555] team0: Port device team_slave_1 added
[  139.485097][ T7555] batman_adv: batadv0: Adding interface: batadv_slave_0
[  139.488604][ T7555] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  139.519412][ T7555] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  139.528575][ T7555] batman_adv: batadv0: Adding interface: batadv_slave_1
[  139.531667][ T7555] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  139.541809][ T7555] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  139.633047][ T7555] hsr_slave_0: entered promiscuous mode
[  139.636124][ T7555] hsr_slave_1: entered promiscuous mode
[  139.638741][ T7555] debugfs: 'hsr0' already exists in 'hsr'
[  139.640924][ T7555] Cannot create hsr debugfs directory
[  139.679498][   T12] hsr_slave_0: left promiscuous mode
[  139.682833][   T12] hsr_slave_1: left promiscuous mode
[  139.685638][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  139.688586][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  139.693154][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  139.696146][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  139.716954][   T12] veth1_macvtap: left promiscuous mode
[  139.719342][   T12] veth0_macvtap: left promiscuous mode
[  139.725204][   T12] veth1_vlan: left promiscuous mode
[  139.727549][   T12] veth0_vlan: left promiscuous mode
[  139.870874][   T10] usb 1-1: new full-speed USB device number 29 using dummy_hcd
[  140.134345][   T10] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  140.138275][   T10] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84
[  140.143100][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 12336, setting to 64
[  140.147126][   T10] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  140.155395][   T10] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae
[  140.158762][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  140.162560][   T10] usb 1-1: Product: syz
[  140.164261][   T10] usb 1-1: Manufacturer: syz
[  140.514970][   T10] usb 1-1: SerialNumber: syz
[  140.521898][   T10] usb 1-1: config 0 descriptor??
[  140.528465][   T10] input: KB Gear Tablet as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input14
[  140.549185][ T5199] Bluetooth: hci2: command tx timeout
[  140.683499][ T7588] loop3: detected capacity change from 0 to 32768
[  140.690297][ T7588] 
[  140.690297][ T7588]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  140.690297][ T7588] 
[  140.719683][ T7587] read_mapping_page failed!
[  140.721775][ T7587] ERROR: (device loop3): txCommit: 
[  140.721775][ T7587] 
[  140.731595][    C0] kbtab 1-1:0.0: kbtab_irq - usb_submit_urb failed with result -1
[  140.759679][ T7587] read_mapping_page failed!
[  140.761859][ T7587] ERROR: (device loop3): txCommit: 
[  140.761859][ T7587] 
[  140.784031][ T7587] ==================================================================
[  140.786987][ T7587] BUG: KASAN: slab-out-of-bounds in dtSplitPage+0x12c6/0x3b20
[  140.789594][ T7587] Read of size 1 at addr ffff88811b0608b5 by task syz.3.331/7587
[  140.792414][ T7587] 
[  140.793489][ T7587] CPU: 0 UID: 0 PID: 7587 Comm: syz.3.331 Not tainted syzkaller #0 PREEMPT(full) 
[  140.793508][ T7587] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  140.793517][ T7587] Call Trace:
[  140.793525][ T7587]  <TASK>
[  140.793532][ T7587]  dump_stack_lvl+0x189/0x250
[  140.793555][ T7587]  ? __virt_addr_valid+0x1c8/0x5c0
[  140.793574][ T7587]  ? rcu_is_watching+0x15/0xb0
[  140.793587][ T7587]  ? __pfx_dump_stack_lvl+0x10/0x10
[  140.793602][ T7587]  ? rcu_is_watching+0x15/0xb0
[  140.793614][ T7587]  ? lock_release+0x4b/0x3e0
[  140.793625][ T7587]  ? _raw_spin_lock_irqsave+0xb3/0xf0
[  140.793643][ T7587]  ? __virt_addr_valid+0x1c8/0x5c0
[  140.793657][ T7587]  ? __virt_addr_valid+0x4a5/0x5c0
[  140.793672][ T7587]  print_report+0xca/0x240
[  140.793693][ T7587]  ? dtSplitPage+0x12c6/0x3b20
[  140.793709][ T7587]  kasan_report+0x118/0x150
[  140.793722][ T7587]  ? dtSplitPage+0x12c6/0x3b20
[  140.793740][ T7587]  dtSplitPage+0x12c6/0x3b20
[  140.793772][ T7587]  ? __kmalloc_cache_noprof+0x3e2/0x700
[  140.793793][ T7587]  dtInsert+0x109b/0x5f40
[  140.793812][ T7587]  ? txLockAlloc+0x239/0x380
[  140.793824][ T7587]  ? __pfx_txLockAlloc+0x10/0x10
[  140.793839][ T7587]  ? do_raw_spin_unlock+0x4d/0x240
[  140.793853][ T7587]  ? __pfx_dtInsert+0x10/0x10
[  140.793867][ T7587]  ? txLock+0xfe0/0x1cb0
[  140.793882][ T7587]  ? __pfx_txLock+0x10/0x10
[  140.793899][ T7587]  jfs_create+0x6c8/0xa80
[  140.793920][ T7587]  ? __pfx_jfs_create+0x10/0x10
[  140.793935][ T7587]  ? __pfx_jfs_lookup+0x10/0x10
[  140.793958][ T7587]  ? generic_permission+0x2e5/0x690
[  140.793973][ T7587]  ? inode_permission+0x149/0x470
[  140.793984][ T7587]  ? bpf_lsm_path_mknod+0x9/0x20
[  140.794001][ T7587]  ? bpf_lsm_inode_create+0x9/0x20
[  140.794011][ T7587]  ? __pfx_jfs_create+0x10/0x10
[  140.794026][ T7587]  path_openat+0x14f4/0x3830
[  140.794051][ T7587]  ? __pfx_path_openat+0x10/0x10
[  140.794071][ T7587]  do_filp_open+0x1fa/0x410
[  140.794085][ T7587]  ? __lock_acquire+0xab9/0xd20
[  140.794095][ T7587]  ? __pfx_do_filp_open+0x10/0x10
[  140.794393][ T7587]  ? _raw_spin_unlock+0x28/0x50
[  140.794410][ T7587]  ? alloc_fd+0x64c/0x6c0
[  140.794451][ T7587]  do_sys_openat2+0x121/0x1c0
[  140.794468][ T7587]  ? __se_sys_futex+0x36f/0x400
[  140.794487][ T7587]  ? __pfx_do_sys_openat2+0x10/0x10
[  140.794504][ T7587]  __x64_sys_open+0x11e/0x150
[  140.794519][ T7587]  do_syscall_64+0xfa/0xfa0
[  140.794537][ T7587]  ? lockdep_hardirqs_on+0x9c/0x150
[  140.794553][ T7587]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  140.794565][ T7587]  ? exc_page_fault+0xab/0x100
[  140.794581][ T7587]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  140.794592][ T7587] RIP: 0033:0x7f2927d8f749
[  140.794606][ T7587] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  140.794617][ T7587] RSP: 002b:00007f2928b78038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[  140.794632][ T7587] RAX: ffffffffffffffda RBX: 00007f2927fe6090 RCX: 00007f2927d8f749
[  140.794641][ T7587] RDX: 00000000000000cc RSI: 0000000000062142 RDI: 0000200000000040
[  140.794650][ T7587] RBP: 00007f2927e13f91 R08: 0000000000000000 R09: 0000000000000000
[  140.794658][ T7587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  140.794665][ T7587] R13: 00007f2927fe6128 R14: 00007f2927fe6090 R15: 00007ffe12379158
[  140.794679][ T7587]  </TASK>
[  140.794684][ T7587] 
[  140.918896][ T7587] Allocated by task 7587:
[  140.920578][ T7587]  kasan_save_track+0x3e/0x80
[  140.922452][ T7587]  __kasan_slab_alloc+0x6c/0x80
[  140.924347][ T7587]  kmem_cache_alloc_lru_noprof+0x36c/0x6e0
[  140.926586][ T7587]  jfs_alloc_inode+0x28/0x70
[  140.928405][ T7587]  alloc_inode+0x6a/0x1b0
[  140.930076][ T7587]  iget_locked+0x106/0x580
[  140.931805][ T7587]  jfs_iget+0x24/0x470
[  140.933375][ T7587]  jfs_lookup+0x1c5/0x380
[  140.935065][ T7587]  __lookup_slow+0x297/0x3d0
[  140.936836][ T7587]  lookup_slow+0x53/0x70
[  140.938576][ T7587]  walk_component+0x2d2/0x400
[  140.940352][ T7587]  path_lookupat+0x163/0x430
[  140.942139][ T7587]  filename_lookup+0x212/0x570
[  140.944011][ T7587]  user_path_at+0x3a/0x60
[  140.945731][ T7587]  __se_sys_chdir+0x91/0x280
[  140.947511][ T7587]  do_syscall_64+0xfa/0xfa0
[  140.949217][ T7587]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  140.951448][ T7587] 
[  140.952356][ T7587] The buggy address belongs to the object at ffff88811b060000
[  140.952356][ T7587]  which belongs to the cache jfs_ip of size 2216
[  140.957433][ T7587] The buggy address is located 13 bytes to the right of
[  140.957433][ T7587]  allocated 2216-byte region [ffff88811b060000, ffff88811b0608a8)
[  140.962892][ T7587] 
[  140.963834][ T7587] The buggy address belongs to the physical page:
[  140.966288][ T7587] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88811b061250 pfn:0x11b060
[  140.970118][ T7587] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  140.973329][ T7587] memcg:ffff88811c77fe01
[  140.974983][ T7587] flags: 0x17ff00000000040(head|node=0|zone=2|lastcpupid=0x7ff)
[  140.977858][ T7587] page_type: f5(slab)
[  140.979367][ T7587] raw: 017ff00000000040 ffff88816044a640 dead000000000122 0000000000000000
[  140.982687][ T7587] raw: ffff88811b061250 00000000800d000b 00000000f5000000 ffff88811c77fe01
[  140.985965][ T7587] head: 017ff00000000040 ffff88816044a640 dead000000000122 0000000000000000
[  140.989301][ T7587] head: ffff88811b061250 00000000800d000b 00000000f5000000 ffff88811c77fe01
[  140.992586][ T7587] head: 017ff00000000003 ffffea00046c1801 00000000ffffffff 00000000ffffffff
[  140.995897][ T7587] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  140.999283][ T7587] page dumped because: kasan: bad access detected
[  141.001759][ T7587] page_owner tracks the page as allocated
[  141.003960][ T7587] page last allocated via order 3, migratetype Reclaimable, gfp_mask 0xd2050(__GFP_RECLAIMABLE|__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 7208, tgid 7206 (syz.3.255), ts 120017520498, free_ts 92210999481
[  141.012315][ T7587]  post_alloc_hook+0x234/0x290
[  141.014146][ T7587]  get_page_from_freelist+0x2479/0x2550
[  141.016161][ T7587]  __alloc_frozen_pages_noprof+0x181/0x370
[  141.018380][ T7587]  alloc_pages_mpol+0x232/0x4a0
[  141.020337][ T7587]  allocate_slab+0x96/0x350
[  141.022105][ T7587]  ___slab_alloc+0xf56/0x1990
[  141.023953][ T7587]  __slab_alloc+0x65/0x100
[  141.025681][ T7587]  kmem_cache_alloc_lru_noprof+0x3fe/0x6e0
[  141.027970][ T7587]  jfs_alloc_inode+0x28/0x70
[  141.029755][ T7587]  alloc_inode+0x6a/0x1b0
[  141.031431][ T7587]  iget_locked+0x106/0x580
[  141.033183][ T7587]  jfs_iget+0x24/0x470
[  141.034810][ T7587]  jfs_lookup+0x1c5/0x380
[  141.036531][ T7587]  __lookup_slow+0x297/0x3d0
[  141.038335][ T7587]  lookup_slow+0x53/0x70
[  141.039981][ T7587]  walk_component+0x2d2/0x400
[  141.041793][ T7587] page last free pid 6278 tgid 6278 stack trace:
[  141.044184][ T7587]  __free_pages_ok+0xa83/0xbe0
[  141.046043][ T7587]  zstd_free_workspace_manager+0x2a3/0x360
[  141.048331][ T7587]  btrfs_free_fs_info+0x5e/0x3c0
[  141.050273][ T7587]  deactivate_locked_super+0xbc/0x130
[  141.052358][ T7587]  cleanup_mnt+0x425/0x4c0
[  141.054090][ T7587]  task_work_run+0x1d4/0x260
[  141.055928][ T7587]  exit_to_user_mode_loop+0xe9/0x130
[  141.057971][ T7587]  do_syscall_64+0x2bd/0xfa0
[  141.059727][ T7587]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  141.061991][ T7587] 
[  141.062940][ T7587] Memory state around the buggy address:
[  141.065069][ T7587]  ffff88811b060780: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  141.068186][ T7587]  ffff88811b060800: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  141.071271][ T7587] >ffff88811b060880: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc
[  141.074361][ T7587]                                      ^
[  141.076609][ T7587]  ffff88811b060900: fc fc fc fc fc fa fb fb fb fb fb fb fb fb fb fb
[  141.079705][ T7587]  ffff88811b060980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  141.082750][ T7587] ==================================================================
[  141.086683][ T7587] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  141.089550][ T7587] CPU: 0 UID: 0 PID: 7587 Comm: syz.3.331 Not tainted syzkaller #0 PREEMPT(full) 
[  141.093047][ T7587] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  141.096859][ T7587] Call Trace:
[  141.098172][ T7587]  <TASK>
[  141.099319][ T7587]  dump_stack_lvl+0x99/0x250
[  141.101160][ T7587]  ? __asan_memcpy+0x40/0x70
[  141.102990][ T7587]  ? __pfx_dump_stack_lvl+0x10/0x10
[  141.104970][ T7587]  ? __pfx__printk+0x10/0x10
[  141.106770][ T7587]  vpanic+0x237/0x6d0
[  141.108348][ T7587]  ? __pfx_vpanic+0x10/0x10
[  141.110123][ T7587]  ? preempt_schedule+0xae/0xc0
[  141.111997][ T7587]  ? __pfx_preempt_schedule+0x10/0x10
[  141.114043][ T7587]  panic+0xb9/0xc0
[  141.115548][ T7587]  ? __pfx_panic+0x10/0x10
[  141.117317][ T7587]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  141.119642][ T7587]  ? is_module_address+0x17/0xf0
[  141.121592][ T7587]  ? dtSplitPage+0x12c6/0x3b20
[  141.123560][ T7587]  check_panic_on_warn+0x89/0xb0
[  141.125527][ T7587]  ? dtSplitPage+0x12c6/0x3b20
[  141.127309][ T7587]  end_report+0x78/0x160
[  141.129063][ T7587]  kasan_report+0x129/0x150
[  141.130852][ T7587]  ? dtSplitPage+0x12c6/0x3b20
[  141.132713][ T7587]  dtSplitPage+0x12c6/0x3b20
[  141.134472][ T7587]  ? __kmalloc_cache_noprof+0x3e2/0x700
[  141.136638][ T7587]  dtInsert+0x109b/0x5f40
[  141.138321][ T7587]  ? txLockAlloc+0x239/0x380
[  141.140147][ T7587]  ? __pfx_txLockAlloc+0x10/0x10
[  141.142087][ T7587]  ? do_raw_spin_unlock+0x4d/0x240
[  141.144083][ T7587]  ? __pfx_dtInsert+0x10/0x10
[  141.145903][ T7587]  ? txLock+0xfe0/0x1cb0
[  141.147596][ T7587]  ? __pfx_txLock+0x10/0x10
[  141.149379][ T7587]  jfs_create+0x6c8/0xa80
[  141.151113][ T7587]  ? __pfx_jfs_create+0x10/0x10
[  141.152971][ T7587]  ? __pfx_jfs_lookup+0x10/0x10
[  141.154921][ T7587]  ? generic_permission+0x2e5/0x690
[  141.156941][ T7587]  ? inode_permission+0x149/0x470
[  141.158868][ T7587]  ? bpf_lsm_path_mknod+0x9/0x20
[  141.160674][ T7587]  ? bpf_lsm_inode_create+0x9/0x20
[  141.162520][ T7587]  ? __pfx_jfs_create+0x10/0x10
[  141.164353][ T7587]  path_openat+0x14f4/0x3830
[  141.165983][ T7587]  ? __pfx_path_openat+0x10/0x10
[  141.167870][ T7587]  do_filp_open+0x1fa/0x410
[  141.169684][ T7587]  ? __lock_acquire+0xab9/0xd20
[  141.171579][ T7587]  ? __pfx_do_filp_open+0x10/0x10
[  141.173579][ T7587]  ? _raw_spin_unlock+0x28/0x50
[  141.175477][ T7587]  ? alloc_fd+0x64c/0x6c0
[  141.177159][ T7587]  do_sys_openat2+0x121/0x1c0
[  141.179025][ T7587]  ? __se_sys_futex+0x36f/0x400
[  141.180914][ T7587]  ? __pfx_do_sys_openat2+0x10/0x10
[  141.182925][ T7587]  __x64_sys_open+0x11e/0x150
[  141.184733][ T7587]  do_syscall_64+0xfa/0xfa0
[  141.186451][ T7587]  ? lockdep_hardirqs_on+0x9c/0x150
[  141.188383][ T7587]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  141.190791][ T7587]  ? exc_page_fault+0xab/0x100
[  141.192601][ T7587]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  141.194898][ T7587] RIP: 0033:0x7f2927d8f749
[  141.196724][ T7587] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  141.203789][ T7587] RSP: 002b:00007f2928b78038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002
[  141.206963][ T7587] RAX: ffffffffffffffda RBX: 00007f2927fe6090 RCX: 00007f2927d8f749
[  141.210016][ T7587] RDX: 00000000000000cc RSI: 0000000000062142 RDI: 0000200000000040
[  141.213078][ T7587] RBP: 00007f2927e13f91 R08: 0000000000000000 R09: 0000000000000000
[  141.216120][ T7587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  141.219186][ T7587] R13: 00007f2927fe6128 R14: 00007f2927fe6090 R15: 00007ffe12379158
[  141.222248][ T7587]  </TASK>
[  141.224226][ T7587] Kernel Offset: disabled
[  141.225980][ T7587] Rebooting in 86400 seconds..

VM DIAGNOSIS:
07:24:33  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff8b43a16f RBX=0000000000000030 RCX=ffff88816a8a8000 RDX=ffffc900212e1000
RSI=000000000000dd38 RDI=000000000000dd39 RBP=ffffc900093de1e0 RSP=ffffc900093de0b8
R8 =ffffc900093de157 R9 =0000000000000000 R10=ffffc900093de140 R11=fffff5200127bc2b
R12=ffffc900093de51b R13=dffffc0000000000 R14=ffffc900093de51b R15=0000000000000000
RIP=ffffffff81c019aa RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f2928b786c0 ffffffff 00c00000
GS =0000 ffff88818eb36000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f291da1f000 CR3=00000001138ea000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=00007f2928b775a0 00007f2928b77580
XMM02=00007f2928b776e0 00007f2928b77560 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00007f2928b775a0 XMM05=0000000000000000 00007f2928b776e0
XMM06=00007f2928b776e0 00007f2928b77560 XMM07=00007f2928b775a0 00007f2928b77580
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007f2927e151cf
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff81b4a83b RBX=1ffff11024248441 RCX=ffff888112a80000 RDX=0000000000000000
RSI=0000000000000001 RDI=0000000000000000 RBP=ffffc900211bf7c0 RSP=ffffc900211bf638
R8 =ffffffff8f7cf877 R9 =1ffffffff1ef9f0e R10=dffffc0000000000 R11=fffffbfff1ef9f0f
R12=ffff888121242208 R13=dffffc0000000000 R14=ffff88823c63b240 R15=0000000000000000
RIP=ffffffff81c019bd RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8882a9f36000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c403e6a CR3=000000000dd38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffff000000 0000000000000000
XMM02=00007f6fee1ba498 00007f6fee1ba470 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=00007f6fee1ba478 00007f6fee1ba4c0
XMM06=00007f6fee1ba4b8 00007f6fee1ba4b0 XMM07=00007f6fee1ba4a8 00007f6fee1ba4a0
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007f6fee0151cf
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
