last executing test programs:

20m57.593879003s ago: executing program 32 (id=382):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x58, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @local}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x58}}, 0x0)

19m37.050607899s ago: executing program 33 (id=1104):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
copy_file_range(r0, &(0x7f0000000080)=0x3, r0, &(0x7f0000000100)=0x3e, 0x1, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x7c7, 0x7ff, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x80, 0x4, 0x0, @loopback, @rand_addr=0x64010101}}}})
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r0, 0x89f3, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000040)={'ip_vti0\x00', 0x0, 0x0, 0x700, 0x4000000, 0x2, {{0x5, 0x4, 0x0, 0x16, 0x14, 0xfffd, 0x0, 0x1, 0x4, 0x0, @loopback, @rand_addr=0x64010100}}}})

19m1.775282848s ago: executing program 34 (id=1437):
syz_mount_image$exfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000200)={[{@utf8}, {@iocharset={'iocharset', 0x3d, 'iso8859-4'}}, {@sys_tz}, {@zero_size_dir}, {@fmask={'fmask', 0x3d, 0x6}}, {@sys_tz}, {@keep_last_dots}, {@fmask={'fmask', 0x3d, 0x3c}}, {@gid}, {@sys_tz}]}, 0x1, 0x1541, &(0x7f00000034c0)="$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")
munmap(&(0x7f0000002000/0x2000)=nil, 0x2000)
r0 = open(&(0x7f00000000c0)='.\x00', 0x800, 0x50)
getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8)

18m58.583806932s ago: executing program 35 (id=1451):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=@delchain={0x2c, 0x65, 0x7da43c62733c9955, 0x0, 0x0, {}, [@TCA_RATE={0x6, 0x8}]}, 0x2c}}, 0x0)

16m46.240284801s ago: executing program 36 (id=2754):
syz_emit_ethernet(0x86, &(0x7f0000000040)={@broadcast, @random, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @loopback, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x7, 0x0, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@rand_addr=0x64010101}, {@private}, {@multicast1}, {@remote}, {@multicast2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x80}, {@private}]}]}}}}}}}, 0x0)

14m23.062510399s ago: executing program 37 (id=4154):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e00000004000000080000000b"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='contention_end\x00', r1, 0xe4}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000000)=ANY=[@ANYBLOB="1802"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r2)
r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6)
ioctl$TUNGETVNETLE(r2, 0x4010744d, &(0x7f0000000180))

14m20.649600718s ago: executing program 38 (id=4055):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000))
ioctl$SIOCSIFHWADDR(r1, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x308)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0)
close(r2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})

14m10.34519795s ago: executing program 39 (id=4272):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10)
setsockopt$sock_int(r0, 0x1, 0x35, &(0x7f0000000040)=0x1, 0x4)

13m57.325625487s ago: executing program 40 (id=4393):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000000306010200000000000000000a00000405000100"], 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x840)

13m30.973419031s ago: executing program 41 (id=4625):
syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="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", @ANYRES64], 0x1, 0x162, &(0x7f0000000200)="$eJzs20GrElEUB/DjPHu+avPW0WKgTSupVi2LeEE0UBQualXwaqMh5GZq5UfpCwbhyt2NHNMSRYLmjTi/38aDf5Rz0ZnDHbjvbn8aXo4nH8cvZ3HW6UT3UeQxjziPLE6iMg0A4JjMU4ofqbeY8te/RUqp6Y4AgLpV8z+l1DP/AaAt9s7/hw01BgDUxv4fANrn9Zu3zx8XxcWrPD+L+D4tB+Wgeq3yp8+Ki3v5wvn6U7OyHJys8vtVnv+dX4sby/zB1vw07t6p8l/ZkxfFRn4zLutfPgAAALRCP1/Zur/v93flVfXH84GN/Xs3bnWvbBkAwD+YfPk6fD8affisOPYi2/dz95b/ieZbXRfZYbTRwqLhGxNQu/VF33QnAAAAAAAAAAAAAADALv/nzNDp8tt+v9OJyJwsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4HD9DAAA///le0TQ")
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0)

12m3.471526132s ago: executing program 42 (id=5597):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x48a, &(0x7f0000000000)={[{@jqfmt_vfsold}, {@grpjquota, 0x22}, {@errors_continue}, {@noload}, {@nombcache}, {@usrjquota, 0x22}, {@errors_continue}, {@errors_remount}, {@barrier}]}, 0x1, 0x455, &(0x7f0000000d80)="$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")
mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, &(0x7f0000000000))

11m52.879844678s ago: executing program 43 (id=5701):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0xb5, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x28}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80)

10m54.468657634s ago: executing program 44 (id=6330):
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f00000002c0)={0x0, 0x0, "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"})
ioctl$USBDEVFS_SUBMITURB(r0, 0x802c550a, &(0x7f0000000280)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

10m53.329898346s ago: executing program 45 (id=6338):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x24}}, 0x0)

10m25.794046162s ago: executing program 6 (id=6667):
prctl$PR_SCHED_CORE(0x4d, 0x40003, 0x0, 0x0, 0x0)

10m25.793800698s ago: executing program 6 (id=6668):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000002fc0)=@newtaction={0xac, 0x30, 0x1, 0x70bd2d, 0x0, {}, [{0x98, 0x1, [@m_bpf={0x44, 0x2, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x3ff, 0xf, 0x401, 0x6}}]}, {0x4}, {0xc}, {0xc}}}, @m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x9}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x4040000}, 0x40c0)

10m25.707162885s ago: executing program 6 (id=6669):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000200)=0x8)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000001c0)=0xa3)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000280)=0x15)

10m25.657309505s ago: executing program 6 (id=6670):
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(0x0, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x80000, 0x0)

10m25.6039278s ago: executing program 6 (id=6671):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
close(0x3)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @private=0xa010100}, 0x10)
sendmmsg$inet_sctp(r1, &(0x7f0000001f00)=[{&(0x7f0000000000)=@in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000040)="ca", 0x1}], 0x1, 0x0, 0x0, 0x4000414}], 0x1, 0x10)
setsockopt(r0, 0x84, 0x7f, &(0x7f0000000080)="010000000d80ffff", 0x8)

10m25.336228228s ago: executing program 6 (id=6672):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_all\x00', 0x275a, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)

10m25.091237749s ago: executing program 46 (id=6672):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_all\x00', 0x275a, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="5c00000000010104000000000000000002001000240002801400018008000100e000000108000200e00000010c00028005000100000000001c0010800800014000000000d97405010000000008000240000000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000)

10m8.721550843s ago: executing program 8 (id=6888):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000280)={[{@iocharset={'iocharset', 0x3d, 'macgreek'}}, {@discard}, {@time_offset={'time_offset', 0x3d, 0x2}}, {@errors_remount}, {@utf8}, {@allow_utime={'allow_utime', 0x3d, 0x10}}, {@iocharset={'iocharset', 0x3d, 'macceltic'}}, {@sys_tz}, {@umask={'umask', 0x3d, 0x3ff}}, {@zero_size_dir}]}, 0x1, 0x1532, &(0x7f0000000380)="$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")
rename(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00')

10m8.578688399s ago: executing program 8 (id=6891):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)={0x70, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SYNPROXY={0x4}, @CTA_PROTOINFO={0x8, 0x4, 0x0, 0x1, @CTA_PROTOINFO_SCTP={0x4}}]}, 0x70}}, 0x0)

10m8.57820273s ago: executing program 8 (id=6893):
r0 = syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x0)
ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000940))

10m8.494979676s ago: executing program 8 (id=6894):
syz_mount_image$udf(&(0x7f0000000280), &(0x7f00000001c0)='./file0\x00', 0x10004d0, &(0x7f0000000340)=ANY=[@ANYBLOB="73686f72746164000000006d653d3030303030303030303030303030303030b030342c6e6f6164696e6963622c7569643d00", @ANYRES8, @ANYRESHEX], 0x2, 0xa1b, &(0x7f0000001f80)="$eJzs209sm+d9B/Dfw1eyaadrFbd1kzbLWLQIPKUN5P9KvAH2rApt5iZGZWXzZTBlyQ4R/askF043tB42oAjQg1FgPWzAkMsOA3bwDrvsFOwwDBg2GDsMxYp2Wrpm6Y3BBuS0aXhfPpQoWY7VOLZk+/Mx7C/58veSzx+afMmHbwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEb/1lVNDB9N2twIAuJ9eGvvG0GHv/wDwSDnn8z8AAAAAAAAAAAAAAOx0KYr4s0jx6k/a6UJ1vaN+pjV75er4yOjmu+1JkaIWRVVf/q0fPHT4yNFjx4e7+cH7f9SejJfHzp1qnJ6bmV+YWlycmmyMz7Yuzk1Obfke7nb/jQarAWjMvHZl8tKlxcah5w6vu/nqwDu7H9s/cOL4i+f3dWvHR0ZHx3pq+vo/9KPf4nZneOyKIn4WKerfezc1I6IWdz8Wd3ju3Gt7qk4MVp0YHxmtOjLdas4ulTemWq6qRQz07HSyO0b3YS7uSiPiWtn8ssGDZffG5psLzYnpqcbZ5sJSa6k1N5tqndaW/RmIWgyniPmIaBe33l1/FPHvkeL777fTREQU3XF4tjox+M7tqd2DPm5BX9m3IuJmPABztoPtjiLeiBQ/OD8UF/O4VsP2TMTXy3w64ptlLkdcz9dT+QR5KuK9TZ5PPFj6ooh/ihRzqZ0mu3Nfva6ceaXxtdlLcz213deVB/794X7a4a9N9ShionrFb6cPf7ADAAAAAMDOU8TfRoobMwfSfPSuKbZmLzfONSemO98Kd7/7b+S9VlZWVgZSJxs5h3KezHk254Wc8zmv5bye882cN3K+lfNmzuWc7ZxRy4+fs5FzKOfJnGdzXsg5n/Nazus538x5I+dbOW/mXM7ZzhnWvQAAAAAAAADYYfZEET+OFF/4m29V5xVHdV76J04MH/jqF3vPGf/MHe6nrH0uIm7E1s7J7c+nDqda+eej7xdbU48ivpPP//vD7W4MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwrWpRxGcixQ/faKdIEdGIuBCdXC62u3UAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAh1FPRZyOFL/4Sr26fjMiPhsR/7dS/omI5ZUNtrvFAAAAAAAAAMAtUhFDkeLxJ9tpICKuDryz+7H9AyeOv3h+XxFFpLKkt/7lsXOnGqfnZuYXphYXpyYb47Oti3OTU1t9uPqZ1uyVq+Mjo/ekM3e05x63f0/99Nz86wuty68ubXr73vqpicWlhebFzW+OPVGLGOrdMlg1eHxktGr0dKs5W+2aardpYC2isdXOAAAAAAAAAPDQ2JuKOBopXm0dSd11477Omv+vdK4Vq7V/8QdrvwWY3pBdvb8f2MrltNWGDlYL743xkdHRsZ7Nff23lpZtSqmIv44Un/vdJ6r18BR7N10bL+t2RYpj3zqS6wY+V9adXFdVHxwfGW28NDf75VPT03MXm0vNiempxth88+KWfzgAAAAAAAAAAPfQ3lTEn0eK3xu6mbrnnef1/77OtZ71/9+oltAr9bQ+V1Vr+x+v1vY7lz9xYrgx+mu3234v1v/LNqVUxL9Fisd//4nqfPru+v/Qhtqy7r8jxb/+41O5rrarrDvY7U7nHi+1pqeGUh6rzz/brY2q9niu/eRa7cGy9vOR4i+fWV87nGs/tVZ7qKz940jxv0c3r/30Wu3hsvaPIsVvv93o1u4ta8/k2v1rtc9dnJuevNOwlvP/d5Hi7C++mrp9vu389/z+49qGXHXLnH/w5Y9q/gd6tl3L8/rjPP8H7zD/fx8p/uSnT+W6ztgfyrc/Xv27Nv+/Eyn+61fX1x7LtfvWag9utVvbrZz/L0WKEz/60Wqf8/znkV2bod75/2zf+lx9lmzT/D/es20gt+vwLzkWj6LF17/9WnN6emrBBRdccGH1wna/MnE/lO///xwpXjhTS93jmPz+/7HOtbXjv/e/s/b+/8KGXLVN7//7era9kI9a+vsi6ksz8/37I+qLr3/7y62Z5uWpy1Ozw8eOHnl++Nix5/t3dY/t1i5teegeCuX8n4kUr/z0X1Y/x6w//tv8+H/vhly1TfP/yd4+rTuu2fJQPJLK+b8eKb779rurnzc/6Pi/+/n/wBfW5+r/v22a/0/1bKt+4//xiOd7th34dMSprT4WAAAAPGT25nXyP/31f1g953395//4Yre29/uf29kJ5/8DAAAAAMCjbm8q4q8ixf8MfSl1zyHbyu8/Jzfkqm36/d/+nm2T9+m8li0PMgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADADpSiiKcjxas/aaflorzeUT/Tmr1ydXxkdPPd9qRIUYuiqi//1g8eOnzk6LHjw9384P0/ak/Gy2PnTjVOz83ML0wtLk5NNsZnWxfnJqe2fA93u/9Gg9UANGZeuzJ56dJi49Bzh9fdfHXgnd2P7R84cfzF8/u6teMjo6NjPTV9/R/60W+RbrN9VxRxKVLUv/du+o8iohZ3PxZ3eO7ca3uqTgxWnRgfGa06Mt1qzi6VN6ZarqpFDPTsdLI7RvdhLu5KI+Ja2fyywYNl98bmmwvNiempxtnmwlJrqTU3m2qd1pb9GYhaDKeI+YhoF7feXX8UMREpvv9+O71dRBTdcXj2pbFvDB2+c3tq96CPvVa+u+nmvrJvRcTNeADmbAfbHUV8LFL84PxQ/KzojGs1bM9EfL3MpyO+WeZyxPV8PZVPkKci3tvk+cSDpS+KOBsp5lI7/WeR5756XTnzSuNrs5fmemq7rysP/PvD/bTDX5vqUcTPq1f8dvq5/88AAAAAAA+RIn4zUtyYOZCq9cHVNcXW7OXGuebEdOdr/e53/42818rKyspA6mQj51DOkznP5ryQcz7ntZzXc76Z80bOt3LezLmcs50zavnxczZyDuU8mfNszgs553Ney3k955s5b+R8K+fNnMs52znD9+QAAAAAAADADlSLIp6IFD98o51Wis4C74Xo5LJ1zofe/wcAAP//Vsw/Lg==")
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x6000)
io_setup(0x202, &(0x7f0000000200)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000240)={0x25, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="135bd94a01f90605ee1a7b", 0xb, 0x3018}])

10m8.401251928s ago: executing program 8 (id=6896):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10)
sendmmsg$inet(r0, &(0x7f0000003cc0)=[{{&(0x7f0000000140)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="140000000000000000000000070000009404"], 0x18}}], 0x1, 0x44008004)
write$binfmt_misc(r0, &(0x7f0000000300), 0xfdef)

10m8.164449652s ago: executing program 8 (id=6900):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1, 0x0, 0x4000}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_bond\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x5c, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x30, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c}]}]}], {0x14, 0x10}}, 0xfc}}, 0x0)

10m7.902059976s ago: executing program 47 (id=6900):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1, 0x0, 0x4000}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_bond\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x5c, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x30, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c}]}]}], {0x14, 0x10}}, 0xfc}}, 0x0)

8m40.122064201s ago: executing program 7 (id=8010):
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)

8m40.055568299s ago: executing program 7 (id=8012):
syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f0000000240)={[{@check_relaxed}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {@check_relaxed}, {@iocharset={'iocharset', 0x3d, 'cp869'}}, {@overriderock}, {@session={'session', 0x3d, 0x52}}, {@check_strict}, {}, {@block={'block', 0x3d, 0x400}}, {@cruft}, {@check_relaxed}, {@uid}]}, 0x1, 0xa00, &(0x7f00000003c0)="$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")
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000022"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000140)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="201104060000000101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

8m37.160648553s ago: executing program 7 (id=8051):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000058000000160a01000000000000000000010000000900010073797a30000000000900020073797a32000000002c0003800800014000000000180003801400010076657468315f00005f626f6e64000000080002400000000064000000160a0101000b000000000000010000000900020073797a32000000000900010073797a3000000000300003802c0003801400010067656e657665300000000000000000001400010076657468315f746f5f626f6e640000000800074000000003"], 0x104}}, 0x0)

8m37.060252656s ago: executing program 7 (id=8053):
syz_mount_image$erofs(&(0x7f0000000340), &(0x7f0000000180)='./file2\x00', 0x402, &(0x7f00000001c0)=ANY=[], 0x1, 0x242, &(0x7f0000000380)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f})
link(&(0x7f0000000040)='./file0/file0\x00', 0x0)

8m36.983799512s ago: executing program 7 (id=8056):
r0 = socket(0x2, 0x3, 0xff)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0x7db7, 0x4)
sendto$inet(r0, &(0x7f00000002c0)="b401fcc8cd1bb8b66f2e1c301f4c43f5996bbd0f", 0x14, 0xb00, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10)

8m36.574473348s ago: executing program 7 (id=8065):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="180200000000000000000000cfffffff850000001700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth0_to_bond\x00', <r2=>0x0})
r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r0, r2, 0x25, 0x4, @val=@tracing={0x0, 0x20000000}}, 0x1c)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000000000000000000000000001800000008000000000000006e14000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe9}, 0x94)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000140)={r3, r4}, 0x5)

8m36.343646167s ago: executing program 48 (id=8065):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="180200000000000000000000cfffffff850000001700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth0_to_bond\x00', <r2=>0x0})
r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r0, r2, 0x25, 0x4, @val=@tracing={0x0, 0x20000000}}, 0x1c)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000000000000000000000000001800000008000000000000006e14000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe9}, 0x94)
bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000140)={r3, r4}, 0x5)

8m29.052905385s ago: executing program 2 (id=8118):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000003e000701feffffff00000000047c000008004280040008000c000180060006"], 0x30}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000)

8m29.052528387s ago: executing program 2 (id=8119):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00'}, 0x10)
r3 = open(&(0x7f0000000080)='./bus\x00', 0x400040042, 0x129)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x13, r3, 0x0)
getrandom(0x0, 0x0, 0x0)
r4 = inotify_init()
inotify_add_watch(r4, &(0x7f0000000000)='.\x00', 0x400017e)
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
r6 = fanotify_init(0x200, 0x40800)
fanotify_mark(r6, 0x2, 0x4800003e, r5, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000280)={'ip6tnl0\x00', &(0x7f0000000200)={'syztnl2\x00', 0x0, 0x4, 0x4, 0x99, 0x80, 0xe, @ipv4={'\x00', '\xff\xff', @remote}, @mcast2, 0x80, 0x7800, 0x5268, 0x7}})

8m28.092925447s ago: executing program 2 (id=8127):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x79, 0x11, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x5, {[@local=@item_4={0x3, 0x2, 0x0, "7407bd59"}]}}, 0x0}, 0x0)

8m26.466658166s ago: executing program 2 (id=8141):
syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x2bc3c1f, 0xffffffffffffffff, 0x7, 0x0, 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r0, &(0x7f0000000f00)={0x2020}, 0x2020)

8m26.404912863s ago: executing program 2 (id=8142):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_int(r0, 0x29, 0x8, 0x0, 0x0)

8m25.608154618s ago: executing program 2 (id=8155):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d00000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r0}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000001300)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94)

8m25.028342115s ago: executing program 49 (id=8155):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d00000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r0}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000001300)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94)

7m25.015513646s ago: executing program 9 (id=8877):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x1000c16, &(0x7f0000000500), 0xff, 0x260, &(0x7f0000000980)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x174)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x48041, 0x0)
pwrite64(r1, &(0x7f0000000000)="f6", 0x1, 0x8001)
ioctl$EXT4_IOC_MIGRATE(r0, 0x6609)

7m24.834926425s ago: executing program 9 (id=8880):
r0 = syz_io_uring_setup(0x315b, &(0x7f0000000080)={0x0, 0xcfca, 0x1040, 0x0, 0x3d5}, &(0x7f0000000100), &(0x7f0000000040))
io_uring_register$IORING_REGISTER_RESTRICTIONS(r0, 0xb, &(0x7f0000000440), 0x0)
io_uring_register$IORING_REGISTER_ENABLE_RINGS(r0, 0xc, 0x0, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r0, 0x10, 0x0, 0x0)

7m24.644605713s ago: executing program 9 (id=8883):
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x802053, 0x0, 0x0, 0x0, &(0x7f00000000c0))

7m24.577631208s ago: executing program 9 (id=8885):
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0x101091, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262)

7m24.520086488s ago: executing program 9 (id=8886):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x140, 0x195)
r1 = syz_io_uring_setup(0x2421, &(0x7f0000000380)={0x0, 0x0, 0x13090}, &(0x7f0000000100), &(0x7f0000000080))
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000640)={0x1, &(0x7f0000000300)=[{0x6, 0x10, 0x0, 0xfff}]})
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x20, 0x0, 0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

7m24.23348343s ago: executing program 9 (id=8888):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x9, 0x9, 0x1ff, 0x8000, 0x3, 0x2, 0x7]}}]}]}]}, 0x38}}, 0x0)

7m24.080291747s ago: executing program 50 (id=8888):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x9, 0x9, 0x1ff, 0x8000, 0x3, 0x2, 0x7]}}]}]}]}, 0x38}}, 0x0)

6m37.832408478s ago: executing program 4 (id=9528):
r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0xff, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000000)={0x12, 0x1, 0x1, "6106007722366ccef4ba566c4acd3d00e7bfeb8cace586d84a500000000800", 0x55595659})

6m37.832027468s ago: executing program 4 (id=9530):
mkdirat(0xffffffffffffff9c, &(0x7f00000021c0)='./file0\x00', 0x3a)
mount$tmpfs(0x0, &(0x7f0000002040)='./file0\x00', &(0x7f0000002200), 0x1000000, &(0x7f0000000000)={[{@noswap}]})
mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2a00a9, &(0x7f0000000040)={[{@huge_within_size}, {@noswap}]})

6m37.756610916s ago: executing program 4 (id=9532):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f0000000000)=0xfffffffb, 0x4)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f00000000c0)=0x1, 0x4)

6m37.75630143s ago: executing program 4 (id=9533):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x804810, &(0x7f0000000a40), 0x26, 0x75c, &(0x7f0000000b00)="$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")
chdir(&(0x7f0000000440)='./file0\x00')
creat(&(0x7f0000000380)='./bus\x00', 0x0)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]})
chdir(0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)

6m37.528442903s ago: executing program 4 (id=9537):
syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f0000000780)='./file0\x00', 0x0, &(0x7f00000007c0), 0x1, 0x73a, &(0x7f0000000800)="$eJzs3E9rXOUaAPDnnCZtb5t7Jxfu4uJKqFih9iRN1a6EiOtCoR+ghslJCDnJhMykNjFg68KFIKgI/ulGv4EbRXBT+h0UwZ2CC0FrGheCi8iZzEx1OpOObdKR+vvBmfO875kzz/vMHF7mwLwTwD/W4+VDEjEWERciotLqTyPicDM6GnF193m3tzar21ub1SR2di7eSsrTmn3t10pa++PRPCX+HxE3RyNOvXZ33vr6xuJMUeSrrfZEY2llor6+cXphaWY+n8+XpyYnz559burZZyb3rdY3X/nkpzc+f/HLD88t/fb8radnk5hu1h1ddeyn3fdkNKa7+pcPItkQJcMeAAAAAym/5x+KiJHmt9RKHGpGAAAAwKNk58gOAAAA8MhLYtgjAAAAAA5W+3cAt7c2q+3tYf7+4McXImL8ztri7U7+keYa4oijMRoRx7aTP61MSHZPgwdy9VpE3Jjucf0nrevv/nWvXLdG+u/nRjn/TPea/9LO/BM95p+R9n8nPKD2/Ld91/x3J/+hPvPfhQFzHFk9+VXf/NciHhvplT/p5E/65H9pwPyfjn3zbb9jOx9HnIze+f+Ya4//h5iYWyjy1mPPHCc+e/XUXvUf65c/2bv+lQHr/+761Hy/uaTM/9SJvT//XvnLa+Kt1jjSiHi7tS/b73TlePLm5Ad71T/bp/57ff4fDVj/F69vfD/gUwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKApjYixSNKsE6dplkUcj4j/xbG0qNUbp+Zqa8uz5bGI8RhN5xaKfDIiKrvtpGyfacZ32lNd7bMR8d+IeLfyr2Y7q9aK2WEXDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQMfxiBiLJM0iIo2IXyppmmXDHhUAAACw78aHPQAAAADgwLn/BwAAgEef+38AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgIbhw/ny57WxvbVbL9uzl9bXF2uXTs3l9MVtaq2bV2upKNl+rzRd5Vq0t3ev1ilpt5Vwsr12ZaOT1xkR9fePSUm1tuXFpYWlmPr+Ujz6UqgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPirxppbkmYRkTbjNM2yiH9HxHiMJnMLRT4ZEf+JiK8ro0fK9plhDxoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB9V1/fWJwpinxVIBAIOsGwZyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIahvr6xOFMU+Wp92CMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABguNIfkogot5OVJ8a6jx5Ofq009xHx8vWL712ZaTRWz5T9P3f6G++3+qeGMX4AAACgW/s+vX0fDwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMKj6+sbiTFHkqwcYDLtGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg/vweAAD//4rSy1s=")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file2\x00', 0x282, 0x140)

6m37.195187601s ago: executing program 4 (id=9545):
ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, 0x0)
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000600), 0x1, 0x555, &(0x7f0000000640)="$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")
setxattr$trusted_overlay_origin(&(0x7f0000000180)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380), 0x64, 0x1)
setxattr$trusted_overlay_origin(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040), &(0x7f0000000080), 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
syz_open_dev$MSR(0x0, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x4020bc10, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r0, 0x0, 0x20000001)

6m36.949556151s ago: executing program 51 (id=9545):
ioctl$vim2m_VIDIOC_STREAMOFF(0xffffffffffffffff, 0x40045612, 0x0)
syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000600), 0x1, 0x555, &(0x7f0000000640)="$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")
setxattr$trusted_overlay_origin(&(0x7f0000000180)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380), 0x64, 0x1)
setxattr$trusted_overlay_origin(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040), &(0x7f0000000080), 0x2, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
syz_open_dev$MSR(0x0, 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x4020bc10, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$kcm(0xa, 0x1, 0x106)
sendmsg$kcm(r0, 0x0, 0x20000001)

3m40.956305037s ago: executing program 3 (id=11990):
r0 = socket$kcm(0x21, 0x2, 0xa)
sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[{0x18, 0x110, 0xa, "b9"}], 0x18}, 0xfc00)

3m40.90876789s ago: executing program 3 (id=11991):
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000180)=ANY=[@ANYBLOB="1500000065ffff097b0000080039"], 0x15)
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x804810, &(0x7f0000000a40), 0x26, 0x75c, &(0x7f0000000b00)="$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")
r0 = open(&(0x7f0000000480)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000100)=ANY=[@ANYBLOB="000000004c9002000000000003000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff010000000000000000000000030000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000ffffffff"])

3m40.823129148s ago: executing program 3 (id=11992):
r0 = io_uring_setup(0x67bb, &(0x7f00000000c0)={0x0, 0x0, 0x3000})
io_uring_enter(r0, 0x0, 0xcbffffff, 0x7, &(0x7f0000000000)={[0xfffffffffffffffc]}, 0x8)

3m40.756802534s ago: executing program 3 (id=11993):
r0 = landlock_create_ruleset(&(0x7f0000000500)={0x21c1, 0x3, 0x3}, 0x18, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x9801}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6, 0x1, 0x3}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x8000)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r2, &(0x7f0000006300)={0x2020, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x20000000, 0x4041}}, 0x50)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0x24, 0x0, 0x0)
syz_fuse_handle_req(r2, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0)
r6 = syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x2080)
ioctl$LOOP_SET_FD(r6, 0x4c00, r5)
ioctl$LOOP_SET_FD(r6, 0x4c00, r6)
dup2(r5, r2)
r7 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x33, &(0x7f0000000000)={0x0, 0x0}, 0x8)
r8 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x28241, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x1, 0x40, 0x40}, 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0)
write$dsp(r8, &(0x7f00000001c0)="5cba91", 0x3)
ioctl$SNDCTL_DSP_SUBDIVIDE(r8, 0xc0045009, &(0x7f0000000100)=0xfffffff7)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)
sendmsg$nl_xfrm(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@getspdinfo={0x14, 0x25, 0x1, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000)
timer_create(0x1, &(0x7f00000004c0)={0x0, 0x30, 0x1}, &(0x7f0000000500)=<r9=>0x0)
timer_settime(r9, 0x0, &(0x7f0000000580), &(0x7f00000005c0))
landlock_restrict_self(r0, 0x0)
socket$unix(0x1, 0x1, 0x0)

3m39.952573357s ago: executing program 3 (id=11999):
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000200)={[{@jqfmt_vfsold}, {@max_batch_time={'max_batch_time', 0x3d, 0x1}}, {@debug}, {@noload}, {@jqfmt_vfsv1}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}, {@usrjquota}]}, 0xfe, 0x46c, &(0x7f0000000940)="$eJzs3M1vFOUfAPDvTF94+/FrRXwBQapoJL60tLzIwYtGEw6amOgB46m2hVQWamhNhBCtHvBoSLwb/wvjSS9GvWjiVe+GhBguoF7WzM4MLMtu2aXbLrCfTzLd55l5us/znZln95l5djeAvjWW/Uki/hcRv0fESJ69ucBY/nDtyvmZv6+cn0miWn3rr6RW7uqV8zNl0fL/tuSZarXIb2hS74V3I6YrlbkzRX5i6dQHE4tnz70wf2r6xNyJudNTR44cPLB7+PDUoa7EmcV1defHC7t2HH3n4hszxy6+91OSRh53NMTRLWP53m3q6W5X1mNb69LJYP2WPb/cSDc7E+ilgYjIDtdQrf+PxEBsur5tJF77rKeNA9ZUtVqtrvCqvFwF7mNJ9LoFQG+Ub/TZ9W+5rNPQ465w+eX8AiiL+1qx5FsGI80Te4Yarm+7aSwiji3/81W2xBrdhwAAqPddNv55vtn4L42H88Rw9uf/xRzKaEQ8EBHbIuLBiNgeEQ9F1Mo+EhGPdlh/4wzJreOf9NIdB9eGbPz3UjG3dfP4Ly2LjA4Uua21+IeS4/OVuf3FPtkXQxuOzydzkyvU8f2rv33Ralv9+C9bsvrLsWDRjkuDDTfoZqeXplcTc73Ln0bsHGwWfxLlNE4SETsiYucd1jH/7GDLbbePfwWtn7Zt1a8jnsmP/3I0xF9KWs5PTr54eOrQxMaozO2fKM+KW/3864U3W9W/qvi7IDv+m5ue/9fjH002RiyePXeyNl+72HkdF/74vOU1TYfn/9Gtxfk/nLxdWzFcbPhoemnpzGTEcPL6reunbjxbmS/LZ/Hv29u8/2+LG3visYjYFRG7I+Lx7KKwaPsTEfFkROxdIf4fX3nq/c7jX5+50iz+2dsd/6g//p0nBk7+8O3t498YEa2O/8Faal+xpp3Xv3YbuJp9BwAAAPeK/DPwSTp+PZ2m4+P5Z/i3x+a0srC49NzxhQ9Pz+aflR+NobS80zVSdz90srg3XOanGvIHivvGXw5squXHZxYqs70OHvrclhb9P/PnQK9bB6y5LsyjAfco/R/6l/4P/SnR/6Gv6f/Qv5r1/09alh7/Zk0bA6wr7//Qv9ro/8v5Q+tRAXBv8v4P/Uv/h77U8rvx6aq+8r/uiX+L3zO8W9pz/ycivSuacf8nBtv+MYsOEtWRvP9nazY0LdPrVyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDu+C8AAP//F0nluw==")
chdir(&(0x7f0000000040)='./file0\x00')
syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90)
getdents(r0, 0x0, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000)

3m39.659270727s ago: executing program 3 (id=12000):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_ACTION={0x6, 0x3, 0x38}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x0)

3m39.399574888s ago: executing program 52 (id=12000):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_ct={0x4c, 0x1, 0x0, 0x0, {{0x7}, {0x24, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_ACTION={0x6, 0x3, 0x38}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x0)

1.943072784s ago: executing program 0 (id=14830):
syz_mount_image$xfs(&(0x7f00000001c0), &(0x7f0000009640)='./file1\x00', 0x10040, &(0x7f0000000200)={[{@sysvgroups}, {@attr2}, {@inode32}, {@sysvgroups}, {@grpquota}, {@bsdgroups}, {@largeio}]}, 0x4, 0x968d, &(0x7f000001c300)="$eJzs3Am4pnMBuP/3DGOXMVRSaiqiRdYsUWYGMxSSJdqRJWUpqdCmRUoqItqzb9nKEsrWSrK3UEKoZIm02Ib5X2fmDGPcpF+//+VX931f1znv+z7v8zzn+34/z3KO5mrzSRtPHAzmGkxv3GDWzr1m8pQxV21w+5FbLXjMcqfcvf8jV1x8/MjjhJHHiYPBYNTI20PTl40dnHraqMHs05Y/3LxzzzM0/2Cw/MjLkf0MVp7+MP/lM9abOkuzDnTo4W/7TP+a1gLDP2L4yWH773X4YDAYM9P2Q4PB0J6P+qDSNp8wedLDVg+5DVuNHnk+89cc07/mv2gwmP+MAR8fM6879CR8pOGfueeLzhm9wZPws//r2nzC5HVn8R8+F2cbWbby8Dk+6zlobNbj/NYltlh1ZAqnHW+DwfAl7hHnyn9Fm0+YtN7gsa/zgyNXu2CfqdOvm3MOpt8o5h4MBvOMXF/ne7Jd6j9rwsQVpt2zZ7weYZ9xLO9Jx8XxbznpweGb9GAwWGgwGLvOjHtBVVVV/Xc0YeIKa8L9f67Hu/+ffPKiZ3T/r6qq+u9t3QkTVxi+189y/5/v8e7/uyx64cem/7f/8StP3+rBJ/dDVFVV1b/VpHXx/j/m8e7/K6956Xrd/6uqqv5722j9aff/+Wa5/y/8ePf/N5602mIj6834veGBmXY5NNP/nnD/TMtnm2n5fTMtHz3TfmZef46Zlt8z0/I5h9+D9ccNBmNn/HvBKQ8vHjtu+L2R5ffOtHz8w/9OZ/G1Zlo+Yablk2ZaPnFkrMPLJ8+0fPJM66/zOFNdVVX1/0wbrTBpzcFM/85+ZPEiM96n+//5Z1679JM13qqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqvrv7MHbzzpnMBgMDQaDUYPBlMHI85kfB1OnTp06/Prk8y677Ekb6P8bDZ17zeQpY67a4PYjt1rwmOVOuXv/h2fpv7b//k9Q/0nD/nMdN24w2GnTJ3so9STU+e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7iHrz9rHNGjoFRg8GUwcjzPWc8nrnfG940suqqm51y50EPb7n4+O1Hnp17zeQp2z8JY38SGhr+rGOu2uD2I7da8JjlTrl7//+Bs+e//xPUf9I0/+2HBoOR83vM8Lm8wYSNNllqMBgcdOcpm600eOi9VYbfW23sbIPZpm261LTvay/OO95znemP44e/LfzQPk6etv91px4629Asg5ipV5x7w5Fv3/zuFWd9XPKxP8eoGU8Ov+70u6ZOnTr1EQtHmusxNp6x/xmfZdbzfGTsSw2PfZldd3zXMu/ZfY+lt99xy+222W6bnZZbYZUVV1p+uZVWfdky226/wzbLTv/+GHM2btr3NZ/InM0365zdPmHmOZv1sz3WnI17/DmbtscpewxtMmPOZv8352zNx5+zcduP/KDFx48ebDFtaoYGg8XXGj3YbfjFcnMOBouvPbLuIsPrrj521GCw38MfdPjZnA8dg0N7Dq+z+aSNJz48skd/wkddpx+x4uLjRx4njDxOnD7EcYOHD8Wxg1NPGzU8F4+Y5nnnnmdo/sFg+ZGXI/sZrDry7iEz1ps6S7MOdOjhb/tM/5rWAsM7GX7yjmXPunr4XJxl+/8/+j+6/j/Ka5WhhyZqaORrZJ3pXhMmr/vwz5o2DcNzN9vIspWHTWads/+bPWq842YfjHmc8U5ad+IKw4tnmf8Zm+DxdccSF3xg+rE1fuXpWz34f4xC453vcca77gQc73yPN97jPnjJadN39X9tvLNc69ab9n38E7nWDR7/Wjcb7WCbixeb9Vr36sce4iPO4xlzNOcsKz3WtW63g5ffc3j/4x//Wrfe8NhHP+JaN2owWHzNGde64QvfpNGD/YZfLD/8YvLowTHDL1aY9mLuwXnDL176tp132Hp4wToz5mTZ4f2OHzs0zf2ClW9ZcuoBU6euNTKW8WMfOdaR42PczPfzCWOnT+aMbWfsd3jVGfu9+enT35s0st8J/8Z+Z2xL471zgenvTR7Z78RZ9jv6cfY7Y9tHnQ9LDT104XqM682kWa43I3/jzPhxj/iaY/rX/BcNBvOfQb6zrPsvr5l0/s71OOOdMHGFNYfHN8v5+9DhSOfvJZOvGr5XzD8YDBYaDMauM2Ps/2ZDjzXe2R9/vBNhvLM/3nivOHbH9f8vjHcw03gfcZxtvtH0Y2WdkeNs8r9x/M7Ydtbr2Ohp706/7K/zRK5j4x51HfvobKNmmeyZeqzf2baG9ac/X+Th33OvOfHoGXM/epb9/qvf2Wb6LENwHRszy9/zo9a5fjBEc77ncatfOnTg48/56MEj/7aYMecztn28OZ/8ROb8WY8/50/09+Slnj/9/dGzjH/mOd9w32d+ZsaczzHLfv/VnE9+/HvHo+d8/GA0zfmy902ft8e7nj7WnM/YdsacD3/E1cbOPlh7+J41MueTnsicL/J/5zifB9af/nybhxadfeQpr5sx57PO8b+a80n/7pyPe+g4X3zae88bNZhjjsFuW+666y7LTf8+4+Xy07/zteiea6bP8+PdSx/LaMa2j3derPVEjMY8IaOhf2W06OyPZfTwqXXEzrs87f/0WrTWv2s04GvRVUdPn7fH+73oseZ8xrZ0H1x4pu1n/Tt0o/Wn/d493yz3wRmb4H3w7DPX23vGLkc2e2CWYc64r94/0/LZZlp+30zLR8+0n5nXn2Om5ffMtHz4I8wx0/ozWMcN/807snzKw6uPHf7ladzI8ntnWj7+4W0XX2um5RNmWj5ppuUTHz40Fp880/LJM62/zuDfbMZ/k95+1ot8PdH677/u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zFPXj7WeeMHAOjBoMpg+nPh0YeB3sObXjbGsOPg8Fg9MonTN3wyR7vk9zQuddMnjLmqg1uP3KrBY9Z7pS79/8fOHv++z9B/SdN899+aDAYOb/HbD8YDDaYsNEmSw0Ggw2nnrDyqMFD7y0y/N7qY0cNBvsNPWIHcz60ztCew+tsPmnjiYPBXCNrjHvUD33UefSIFRcfP/I4YeRx4vTr07jBw8fr2MGpp40azD5t+cPNO/c8Q/MPBsuPvBzZz2Dl6Q/zXz5jvamzNOtAhx7+ts/0r2ktMPwjhp/stt3kZw/P1Szb/z/TjGv19qP+5aqd/+7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93/55/R8v/Wom6y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u3/ff+7/X8ZRT06d/+7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8tf3IO3n3XOyDEwajCYMpj+fGjPkcfB0EmnvnDkEBm9+5VHHfpkj/dJbujcayZPGXPVBrcfudWCxyx3yt37/w+cPf/9n6D+k6b5bz80GIyc32O2HwwGG0zYaJOlBoPBoUddufuowUPvLTL83upjRw0G+w09YgdzPrTO0J7D62w+aeOJg8FcI2uMe9QPfdR59IgVFx8/8jhh5HHi9OvTuMHDx+vYwamnjRrMPm35w8079zxD8w8Gy4+8HNnPYOXpD/NfPmO9qbM060CHHv62z/SvaS0w/COGn+w13zUnDc/VLNv/P9OMa/X2o/7lqp3/7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3lL+7B2886Z+QYGDUYTBlMfz5q5HFoz5tu/PAmw4/DrxdcZ+9rnuzxPskNnXvN5Cljrtrg9iO3WvCY5U65e///gbPnv/8T1H/SsP9cx40bDHba9MkeSj0Jdf67y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/uAdvP+uckaejHl46as+OC2zo3GsmTxlz1Qa3H7nVgscsd8rd+z/ZA/pPewz/j+aPWfw/lj9m8f94/pjF/xP5Yxb/vfLHLP6fzB+z+O+dP2bx/1T+mMX/0/ljFv998scs/p/JH7P475s/ZvH/bP6Yxf9z+WMW/8/nj1n898sfs/jvnz9m8f9C/pjF/4D8MYv/gfljFv8v5o9Z/A/KH7P4H5w/ZvH/Uv6Yxf/L+WMW/6/kj1n8v5o/ZvH/Wv6Yxf/r+WMW/2/kj1n8v5k/ZvE/JH/M4n9o/pjF/7D8MYv/4fljFv8j8scs/kfmj1n8j8ofs/gfnT9m8T8mf8zif2z+mMX/uPwxi/+38scs/sfnj1n8T8gfs/ifmD9m8T8pf8zif3L+mMX/2/ljFv/v5I9Z/E/JH7P4n5o/ZvE/LX/M4n96/pjF/7v5Yxb/M/LHLP5n5o9Z/M/KH7P4fy9/zOL//fwxi//Z+WMW/3Pyxyz+5+aPWfzPyx+z+J+fP2bx/0H+mMX/h/ljFv8f5Y9Z/H+cP2bx/0n+mMX/p/ljFv8L8scs/hfmj1n8f5Y/ZvG/KH/M4v/z/DGL/8X5Yxb/S/LHLP6X5o9Z/C/LH7P4X54/ZvG/In/M4n9l/pjF/xf5Yxb/X+aPWfx/lT9m8f91/pjF/6r8MYv/1fljFv/f5I9Z/H+bP2bxvyZ/zOL/u/wxi/+1+WMW/+vyxyz+1+ePWfx/nz9m8b8hf8zif2P+mMX/pvwxi/8f8scs/n/MH7P4/yl/zOJ/c/6Yxf/P+WMW/1vyxyz+t+aPWfxvyx+z+N+eP2bx/0v+mMX/jvwxi/+d+WMW/7/mj1n878ofs/j/LX/M4v/3/DGL/z/yxyz+/8wfs/jfnT9m8b8nf8zif2/+mMX/vvwxi//9+WMW/yn5Yxb/B/LHLP4P5o9Z/Kfmj0n8Zxvkj1n8h/LHLP6j8scs/rPlj1n8Z88fs/iPzh+z+M+RP2bxnzN/zOI/V/6YxX/u/DGL/zz5Yxb/efPHLP7z5Y9Z/OfPH7P4PyV/zOK/QP6YxX9M/pjFf8H8MYv/2Pwxi/9C+WMW/4Xzxyz+T80fs/g/LX/M4v/0/DGL/yL5Yxb/Z+SPWfwXzR+z+D8zf8zi/6z8MYv/YvljFv9n549Z/J+TP2bxH5c/ZvF/bv6Yxf95+T+q2UceDf7Pzx+znP+L549Z/JfIH7P4vyB/zOK/ZP6YxX+p/DGL/wvzxyz+L8ofs/i/OH/M4v+S/DGL/9L5Yxb/l+aPWfyXyR+z+C+bP2bxXy5/zOK/fP6YxX+F/DGL/4r5Yxb/l+WPWfxXyh+z+K+cP2bxXyV/zOK/av6Yxf/l+WMW/9Xyxyz+q+ePWfxfkT9m8X9l/pjFf438MYv/+Pwxi/+E/DGL/8T8MYv/mvljFv+18scs/mvnj1n8J+WPWfwnq/xne8JrWvzXUfk/8Sz+6+aPWfxflT9m8X91/pjFf738MYv/+vljFv8N8scs/q/JH7P4b5g/ZvF/bf6YxX+j/DGL/8b5Yxb/TfLHLP6b5o9Z/F+XP2bx3yx/zOK/ef6Yxf/1+WMW/zfkj1n835g/ZvF/U/6Yxf/N+WMW/7fkj1n835o/ZvHfIn/M4r9l/pjFf6v8MYv/2/LHLP5b549Z/LfJH7P4b5s/ZvHfLn/M4v/2/DGL//b5Yxb/d+SPWfzfmT9m8d8hf8ziv2P+mMV/p/wxi//O+WMW/3flj1n8350/ZvHfJX/M4v+e/DGL/675Yxb/9+aPWfzflz9m8X9//pjFf7f8MYv/7vljFv898scs/h/IH7P4fzB/zOL/ofwxi/+H88cs/h/JH7P475k/ZvH/aP6Yxf9j+WMW/4/nj1n8P5E/ZvHfK3/M4v/J/DGL/975Yxb/T+WPWfw/nT9m8d8nf8zi/5n8MYv/vvljFv/P5o9Z/D+XP2bx/3z+mMV/v/wxi//++WMW/y/kj1n8D8gfs/gfmD9m8f9i/pjF/6D8MYv/wfljFv8v5Y9Z/L+cP2bx/0r+mMX/q/ljFv+v5Y9Z/L+eP2bx/0b+mMX/m/ljFv9D8scs/ofmj1n8D8sfs/gfnj9m8T8if8zif2T+mMX/qPwxi//R+WMW/2Pyxyz+x+aPWfyPyx+z+H8rf8zif3z+mMX/hPwxi/+J+WMW/5Pyxyz+J+ePWfy/nT9m8f9O/pjF/5T8MYv/qfljFv/T8scs/qfnj1n8v5s/ZvE/I3/M4n9m/pjF/6z8MYv/9/LHLP7fzx+z+J+dP2bxPyf/aR042yNfW/zPzR+z+J+XP2bxPz9/zOL/g/wxi/8P88cs/j/KH7P4/zh/zOL/k/wxi/9P88cs/hfkj1n8L8wfs/j/LH/M4n9R/pjF/+f5Yxb/i/PHLP6X5I9Z/C/NH7P4X5Y/ZvG/PH/M4n9F/pjF/8r8MYv/L/LHLP6/zB+z+P8qf8zi/+v8MYv/VfljFv+r88cs/r/JH7P4/zZ/zOJ/Tf6Yxf93+WMW/2vzxyz+1+WPWfyvzx+z+P8+f8zif0P+mMX/xvwxi/9N+WMW/z/kj1n8/5g/ZvH/U/6Yxf/m/DGL/5/zxyz+t+SPWfxvzR+z+N+WP2bxvz1/zOL/l/wxi/8d+WMW/zvzxyz+f80fs/jflT9m8f9b/pjF/+/5Yxb/f+SPWfz/mT9m8b87f8zif0/+mMX/3vwxi/99+WMW//vzxyz+U/LHLP4P5I9Z/B/MH7P4T80fk/jPPsgfs/gP5Y9Z/Eflj1n8Z8sfs/jPnj9m8R+dP2bxnyN/zOI/Z/6YxX+u/DGL/9z5Yxb/efLHLP7z5o9Z/OfLH7P4z58/ZvF/Sv6YxX+B/DGL/5j8MYv/gvljFv+x+WMW/4Xyxyz+C+ePWfyfmj9m8X9a/pjF/+n5Yxb/RfLHLP7PyB+z+C+aP2bxf2b+mMX/WfljFv/F8scs/s/OH7P4Pyd/zOI/Ln/M4v/c/DGL//Pyxyz+z88fs/gvnj9m8V8if8zi/4L8MYv/kvljFv+l8scs/i/MH7P4vyh/zOL/4vwxi/9L8scs/kvnj1n8X5o/ZvFfJn/M4r9s/pjFf7n8MYv/8vljFv8V8scs/ivmj1n8X5Y/ZvFfKX/M4r9y/pjFf5X8MYv/qvljFv+X549Z/FfLH7P4r54/ZvF/Rf6Yxf+V+WMW/zXyxyz+4/PHLP4T8scs/hPzxyz+a+aPWfzXyh+z+K+dP2bxn5Q/ZvGfnD9m8V8nf8ziv27+mMX/VfljFv9X549Z/NcT+q/xBNax+K8v9H8iWfw3yB+z+L8mf8ziv2H+mMX/tYPL8ocs/ht1/mMW/43zxyz+m+SPWfw3zR+z+L8uf8ziv1n+mMV/8/wxi//r88cs/m/IH7P4vzF/zOL/pvwxi/+b88cs/m/JH7P4vzV/zOK/Rf6YxX/L/DGL/1b5Yxb/t+WPWfy3zh+z+G+TP2bx3zZ/zOK/Xf6Yxf/t+WMW/+3zxyz+78gfs/i/M3/M4r9D/pjFf8f8MYv/TvljFv+d88cs/u/KH7P4vzt/zOK/S/6Yxf89+WMW/13zxyz+780fs/i/L3/M4v/+/DGL/275Yxb/3fPHLP575I9Z/D+QP2bx/2D+mMX/Q/ljFv8P549Z/D+SP2bx3zN/zOL/0fwxi//H8scs/h/PH7P4fyJ/zOK/V/6Yxf+T+WMW/73zxyz+n8ofs/h/On/M4r9P/pjF/zP5Yxb/ffPHLP6fzR+z+H8uf8zi//n8MYv/fvljFv/988cs/l/IH7P4H5A/ZvE/MH/M4v/F/DGL/0H5Yxb/g/PHLP5fyh+z+H85f8zi/5X8MYv/V/PHLP5fyx+z+H89f8zi/438MYv/N/PHLP6H5I9Z/A/NH7P4H5Y/ZvE/PH/M4n9E/pjF/8j8MYv/UfljFv+j88cs/sfkj1n8j80fs/gflz9m8f9W/pjF//j8MYv/CfljFv8T88cs/iflj1n8T84fs/h/O3/M4v+d/DGL/yn5Yxb/U/PHLP6n5Y9Z/E/PH7P4fzd/zOJ/Rv6Yxf/M/DGL/1n5Yxb/7+WPWfy/nz9m8T87f8zif07+mMX/3Pwxi/95+WMW//Pzxyz+P8gfs/j/MH/M4v+j/DGL/4/zxyz+P8kfs/j/NH/M4n9B/pjF/8L8MYv/z/LHLP4X5Y9Z/H+eP2bxvzh/zOJ/Sf6Yxf/S/DGL/2X5Yxb/y/PHLP5X5I9Z/K/MH7P4/yJ/zOL/y/wxi/+v8scs/r/OH7P4X5U/ZvG/On/M4v+b/DGL/2/zxyz+1+SPWfx/lz9m8b82f8zif13+mMX/+vwxi//v88cs/jfkj1n8b8wfs/jflD9m8f9D/pjF/4/5Yxb/P+WPWfxvzh+z+P85f8zif0v+mMX/1vwxi/9t+WMW/9vzxyz+f8kfs/jfkT9m8b8zf8zi/9f8MYv/XfljFv+/5Y9Z/P+eP2bx/0f+mMX/n/ljFv+788cs/vfkj1n8780fs/jflz9m8b8/f8ziPyV/zOL/QP6Yxf/B/DGL/9T8MYn/6EH+mMV/KH/M4j8qf8ziP1v+mMV/9vwxi//o/DGL/xz5Yxb/OfPHLP5z5Y9Z/OfOH7P4z5M/ZvGfN3/M4j9f/pjFf/78MYv/U/LHLP4L5I9Z/Mfkj1n8F8wfs/iPzR+z+C+UP2bxXzh/zOL/1Pwxi//T8scs/k/PH7P4L5I/ZvF/Rv6YxX/R/DGL/zPzxyz+z8ofs/gvlj9m8X92/pjF/zn5Yxb/cfljFv/n5o9Z/J+XP2bxf37+mMV/8fwxi/8S+WMW/xfkj1n8l8wfs/gvlT9m8X9h/pjF/0X5Yxb/F+ePWfxfkj9m8V86f8zi/9L8MYv/MvljFv9l88cs/svlj1n8l88fs/ivkD9m8V8xf8zi/7L8MYv/SvljFv+V88cs/qvkj1n8V80fs/i/PH/M4r9a/pjFf/X8MYv/K/LHLP6vzB+z+K+RP2bxH58/ZvGfkD9m8Z+YP2bxXzN/zOK/Vv6YxX/t/DGL/6T8MYv/5Pwxi/86+WMW/3Xzxyz+r8ofs/i/On/M4r9e/pjFf/38MYv/BvljFv/X5I9Z/DfMH7P4vzZ/zOK/Uf6YxX/j/DGL/yb5Yxb/TfPHLP6vyx+z+G+WP2bx3zx/zOL/+vwxi/8b8scs/m/MH7P4vyl/zOL/5vwxi/9b8scs/m/NH7P4b5E/ZvHfMn/M4r9V/pjF/235Yxb/rfPHLP7b5I9Z/LfNH7P4b5c/ZvF/e/6YxX/7/DGL/zvyxyz+78wfs/jvkD9m8d8xf8ziv1P+mMV/5/wxi/+78scs/u/OH7P475I/ZvF/T/6YxX/X/DGL/3vzxyz+78sfs/i/P3/M4r9b/pjFf/f8MYv/HvljFv8P5I9Z/D+YP2bx/1D+mMX/w/ljFv+P5I9Z/PfMH7P4fzR/zOL/sfwxi//H88cs/p/IH7P475U/ZvH/ZP6YxX/v/DGL/6fyxyz+n84fs/jvkz9m8f9M/pjFf9/8MYv/Z/PHLP6fyx+z+H8+f8ziv1/+mMV///wxi/8X8scs/gfkj1n8D8wfs/h/MX/M4n9Q/pjF/+D8MYv/l/LHLP5fzh+z+H8lf8zi/9X8MYv/1/LHLP5fzx+z+H8jf8zi/838MYv/IfljFv9D88cs/oflj1n8D88fs/gfkT9m8T8yf8zif1T+mMX/6Pwxi/8x+WMW/2Pzxyz+x+WPWfy/lT9m8T8+f8zif0L+mMX/xPwxi/9J+WMW/5Pzxyz+384fs/h/J3/M4n9K/pjF/9T8MYv/afljFv/T88cs/t/NH7P4n5E/ZvE/M3/M4n9W/pjF/3v5Yxb/7+ePWfzPzh+z+J+TP2bxPzd/zOJ/Xv6Yxf/8/DGL/w/yxyz+P8wfs/j/KH/M4v/j/DGL/0/yxyz+P80fs/hfkD9m8b8wf8zi/7P8MYv/RfljFv+f549Z/C/OH7P4X5I/ZvG/NH/M4n9Z/pjF//L8MYv/FfljFv8r88cs/r/IH7P4/zJ/zOL/q/wxi/+v88cs/lflj1n8r84fs/j/Jn/M4v/b/DGL/zX5Yxb/3+WPWfyvzR+z+F+XP2bxvz5/zOL/+/wxi/8N+WMW/xvzxyz+N+WPWfz/kD9m8f9j/pjF/0/5Yxb/m/PHLP5/zh+z+N+SP2bxvzV/zOJ/W/6Yxf/2/DGL/1/yxyz+d+SPWfzvzB+z+P81f8zif1f+mMX/b/ljFv+/549Z/P+RP2bx/2f+mMX/7vwxi/89+WMW/3vzxyz+9+WPWfzvzx+z+E/JH7P4P5A/ZvF/MH/M4j81f0ziP8cgf8ziP5Q/ZvEflT9m8Z8tf8ziP3v+mMV/dP6YxX+O/DGL/5z5Yxb/ufLHLP5z549Z/OfJH7P4z5s/ZvGfL3/M4j9//pjF/yn5Yxb/BfLHLP5j8scs/gvmj1n8x+aPWfwXyh+z+C+cP2bxf2r+mMX/afljFv+n549Z/BfJH7P4PyN/zOK/aP6Yxf+Z+WMW/2flj1n8F8sfs/g/O3/M4v+c/DGL/7j8MYv/c/PHLP7Pyx+z+D8/f8ziv3j+mMV/ifwxi/8L8scs/kvmj1n8l8ofs/i/MH/M4v+i/DGL/4vzxyz+L8kfs/gvnT9m8X9p/pjFf5n8MYv/svljFv/l8scs/svnj1n8V8gfs/ivmD9m8X9Z/pjFf6X8MYv/yvljFv9V8scs/qvmj1n8X54/ZvFfLX/M4r96/pjF/xX5Yxb/V+aPWfzXyB+z+I/PH7P4T8gfs/hPzB+z+K+ZP2bxXyt/zOK/dv6YxX9S/pjFf3L+mMV/nfwxi/+6+WMW/1flj1n8X50/ZvFfL3/M4r9+/pjFf4P8MYv/a/LHLP4b5o9Z/F+bP2bx3yh/zOK/cf6YxX+T/DGL/6b5Yxb/1+WPWfw3yx+z+G+eP2bxf33+mMX/DfljFv835o9Z/N+UP2bxf3P+mMX/LfljFv+35o9Z/LfIH7P4b5k/ZvHfKn/M4v+2/DGL/9b5Yxb/bfLHLP7b5o9Z/LfLH7P4vz1/zOK/ff6Yxf8d+WMW/3fmj1n8d8gfs/jvmD9m8d8pf8ziv3P+mMX/XfljFv93549Z/HfJH7P4vyd/zOK/a/6Yxf+9+WMW//flj1n8358/ZvHfLX/M4r97/pjFf4/8MYv/B/LHLP4fzB+z+H8of8zi/+H8MYv/R/LHLP575o9Z/D+aP2bx/1j+mMX/4/ljFv9P5I9Z/PfKH7P4fzJ/zOK/d/6Yxf9T+WMW/0/nj1n898kfs/h/Jn/M4r9v/pjF/7P5Yxb/z+WPWfw/nz9m8d8vf8ziv3/+mMX/C/ljFv8D8scs/gfmj1n8v5g/ZvE/KH/M4n9w/pjF/0v5Yxb/L+ePWfy/kj9m8f9q/pjF/2v5Yxb/r+ePWfy/kT9m8f9m/pjF/5D8MYv/ofljFv/D8scs/ofnj1n8j8gfs/gfmT9m8T8qf8zif3T+mMX/mPwxi/+x+WMW/+Pyxyz+38ofs/gfnz9m8T8hf8zif2L+mMX/pPwxi//J+WMW/2/nj1n8v5M/ZvE/JX/M4n9q/pjF/7T8MYv/6fljFv/v5o9Z/M/IH7P4n5k/ZvE/K3/M4v+9/DGL//fzxyz+Z+ePWfzPyR+z+J+bP2bxPy9/zOJ/fv6Yxf8H+WMW/x/mj1n8f5Q/ZvH/cf6Yxf8n+WMW/5/mj1n8L8gfs/hfmD9m8f9Z/pjF/6L8MYv/z/PHLP4X549Z/C/JH7P4X5o/ZvG/LH/M4n95/pjF/4r8MYv/lfljFv9f5I9Z/H+ZP2bx/1X+mMX/1/ljFv+r8scs/lfnj1n8f5M/ZvH/bf6Yxf+a/DGL/+/yxyz+1+aPWfyvyx+z+F+fP2bx/33+mMX/hvwxi/+N+WMW/5vyxyz+f8gfs/j/MX/M4v+n/DGL/835Yxb/P+ePWfxvyR+z+N+aP2bxvy1/zOJ/e/6Yxf8v+WMW/zvyxyz+d1r95378ty3+f7X6/4ss/nflj1n8/5Y/ZvH/e/6Yxf8f+WMW/3/mj1n8784fs/jfkz9m8b83f8zif1/+mMX//vwxi/+U/DGL/wP5Yxb/B/PHLP5T88ck/nMO8scs/kP5Yxb/UfljFv/Z8scs/rPnj1n8R+ePWfznyB+z+M+ZP2bxnyt/zOI/d/6YxX+e/DGL/7z5Yxb/+fLHLP7z549Z/J+SP2bxXyB/zOI/Jn/M4r9g/pjFf2z+mMV/ofwxi//C+WMW/6fmj1n8n5Y/ZvF/ev6YxX+R/DGL/zPyxyz+i+aPWfyfmT9m8X9W/pjFf7H8MYv/s/PHLP7PyR+z+I/LH7P4Pzd/zOL/vPwxi//z88cs/ovnj1n8l8gfs/i/IH/M4r9k/pjFf6n8MYv/C/PHLP4vyh+z+L84f8zi/5L8MYv/0vljFv+X5o9Z/JfJH7P4L5s/ZvFfLn/M4r98/pjFf4X8MYv/ivljFv+X5Y9Z/FfKH7P4r5w/ZvFfJX/M4r9q/pjF/+X5Yxb/1fLHLP6r549Z/F+RP2bxf2X+mMV/jfwxi//4/DGL/4T8MYv/xPwxi/+a+WMW/7Xyxyz+a+ePWfwn5Y9Z/Cfnj1n818kfs/ivmz9m8X9V/pjF/9X5Yxb/9fLHLP7r549Z/DfIH7P4vyZ/zOK/Yf6Yxf+1+WMW/43yxyz+G+ePWfw3yR+z+G+aP2bxf13+mMV/s/wxi//m+WMW/9fnj1n835A/ZvF/Y/6Yxf9N+WMW/zfnj1n835I/ZvF/a/6YxX+L/DGL/5b5Yxb/rfLHLP5vyx+z+G+dP2bx3yZ/zOK/bf6YxX+7/DGL/9vzxyz+2+ePWfzfkT9m8X9n/pjFf4f8MYv/jvljFv+d8scs/jvnj1n835U/ZvF/d/6YxX+X/DGL/3vyxyz+u+aPWfzfmz9m8X9f/pjF//35Yxb/3fLHLP67549Z/PfIH7P4fyB/zOL/wfwxi/+H8scs/h/OH7P4fyR/zOK/Z/6Yxf+j+WMW/4/lj1n8P54/ZvH/RP6YxX+v/DGL/yfzxyz+e+ePWfw/lT9m8f90/pjFf5/8MYv/Z/LHLP775o9Z/D+bP2bx/1z+mMX/8/ljFv/98scs/vvnj1n8v5A/ZvE/IH/M4n9g/pjF/4v5Yxb/g/LHLP4H549Z/L+UP2bx/3L+mMX/K/ljFv+v5o9Z/L+WP2bx/3r+mMX/G/ljFv9v5o9Z/A/JH7P4H5o/ZvE/LH/M4n94/pjF/4j8MYv/kfljFv+j8scs/kfnj1n8j8kfs/gfmz9m8T8uf8zi/638MYv/8fljFv8T8scs/ifmj1n8T8ofs/ifnD9m8f92/pjF/zv5Yxb/U/LHLP6n5o9Z/E/LH7P4n54/ZvH/bv6Yxf+M/DGL/5n5Yxb/s/LHLP7fyx+z+H8/f8zif3b+mMX/nPwxi/+5+WMW//Pyxyz+5+ePWfx/kD9m8f9h/pjF/0f5Yxb/H+ePWfx/kj9m8f9p/pjF/4L8MYv/hfljFv+f5Y9Z/C/KH7P4/zx/zOJ/cf6Yxf+S/DGL/6X5Yxb/y/LHLP6X549Z/K/IH7P4X5k/ZvH/Rf6Yxf+X+WMW/1/lj1n8f50/ZvG/Kn/M4n91/pjF/zf5Yxb/3+aPWfyvyR+z+P8uf8zif23+mMX/uvwxi//1+WMW/9/nj1n8b8gfs/jfmD9m8b8pf8zi/4f8MYv/H/PHLP5/yh+z+N+cP2bx/3P+mMX/lvwxi/+t+WMW/9vyxyz+t+ePWfz/kj9m8b8jf8zif2f+mMX/r/ljFv+78scs/n/LH7P4/z1/zOL/j/wxi/8/88cs/nfnj1n878kfs/jfmz9m8b8vf8zif3/+mMV/Sv6Yxf+B/DGL/4P5Yxb/qfljEv+5BvljFv+h/DGL/6j8MYv/bPljFv/Z88cs/qPzxyz+c+SPWfznzB+z+M+VP2bxnzt/zOI/T/6YxX/e/DGL/3z5Yxb/+fPHLP5PyR+z+C+QP2bxH5M/ZvFfMH/M4j82f8ziv1D+mMV/4fwxi/9T88cs/k/LH7P4Pz1/zOK/SP6Yxf8Z+WMW/0Xzxyz+z8wfs/g/K3/M4r9Y/pjF/9n5Yxb/5+SPWfzH5Y9Z/J+bP2bxf17+mMX/+fljFv/F88cs/kvkj1n8X5A/ZvFfMn/M4r9U/pjF/4X5Yxb/F+WPWfxfnD9m8X9J/pjFf+n8MYv/S/PHLP7L5I9Z/JfNH7P4L5c/ZvFfPn/M4r9C/pjFf8X8MYv/y/LHLP4r5Y9Z/FfOH7P4r5I/ZvFfNX/M4v/y/DGL/2r5Yxb/1fPHLP6vyB+z+L8yf8ziv0b+mMV/fP6YxX9C/pjFf2L+mMV/zfwxi/9a+WMW/7Xzxyz+k/LHLP6T88cs/uvkj1n8180fs/i/Kn/M4v/q/DGL/3r5Yxb/9fPHLP4b5I9Z/F+TP2bx3zB/zOL/2vwxi/9G+WMW/43zxyz+m+SPWfw3zR+z+L8uf8ziv1n+mMV/8/wxi//r88cs/m/IH7P4vzF/zOL/pvwxi/+b88cs/m/JH7P4vzV/zOK/Rf6YxX/L/DGL/1b5Yxb/t+WPWfy3zh+z+G+TP2bx3zZ/zOK/Xf6Yxf/t+WMW/+3zxyz+78gfs/i/M3/M4r9D/pjFf8f8MYv/TvljFv+d88cs/u/KH7P4vzt/zOK/S/6Yxf89+WMW/13zxyz+780fs/i/L3/M4v/+/DGL/275Yxb/3fPHLP575I9Z/D+QP2bx/2D+mMX/Q/ljFv8P549Z/D+SP2bx3zN/zOL/0fwxi//H8scs/h/PH7P4fyJ/zOK/V/6Yxf+T+WMW/73zxyz+n8ofs/h/On/M4r9P/pjF/zP5Yxb/ffPHLP6fzR+z+H8uf8zi//n8MYv/fvljFv/988cs/l/IH7P4H5A/ZvE/MH/M4v/F/DGL/0H5Yxb/g/PHLP5fyh+z+H85f8zi/5X8MYv/V/PHLP5fyx+z+H89f8zi/438MYv/N/PHLP6H5I9Z/A/NH7P4H5Y/ZvE/PH/M4n9E/pjF/8j8MYv/UfljFv+j88cs/sfkj1n8j80fs/gflz9m8f9W/pjF//j8MYv/CfljFv8T88cs/iflj1n8T84fs/h/O3/M4v+d/DGL/yn5Yxb/U/PHLP6n5Y9Z/E/PH7P4fzd/zOJ/Rv6Yxf/M/DGL/1n5Yxb/7+WPWfy/nz9m8T87f8zif07+mMX/3Pwxi/95+WMW//Pzxyz+P8gfs/j/MH/M4v+j/DGL/4/zxyz+P8kfs/j/NH/M4n9B/pjF/8L8MYv/z/LHLP4X5Y9Z/H+eP2bxvzh/zOJ/Sf6Yxf/S/DGL/2X5Yxb/y/PHLP5X5I9Z/K/MH7P4/yJ/zOL/y/wxi/+v8scs/r/OH7P4X5U/ZvG/On/M4v+b/DGL/2/zxyz+1+SPWfx/lz9m8b82f8zif13+mMX/+vwxi//v88cs/jfkj1n8b8wfs/jflD9m8f9D/pjF/4/5Yxb/P+WPWfxvzh+z+P85f8zif0v+mMX/1vwxi/9t+WMW/9vzxyz+f8kfs/jfkT9m8b8zf8zi/9f8MYv/XfljFv+/5Y9Z/P+eP2bx/0f+mMX/n/ljFv+788cs/vfkj1n8780fs/jflz9m8b8/f8ziPyV/zOL/QP6Yxf/B/DGL/9T8MYn/3IP8MYv/UP6YxX9U/pjFf7b8MYv/7PljFv/R+WMW/znyxyz+c+aPWfznyh+z+M+dP2bxnyd/zOI/b/6YxX++/DGL//z5Yxb/p+SPWfwXyB+z+I/JH7P4L5g/ZvEfmz9m8V8of8ziv3D+mMX/qfljFv+n5Y9Z/J+eP2bxXyR/zOL/jPwxi/+i+WMW/2fmj1n8n5U/ZvFfLH/M4v/s/DGL/3Pyxyz+4/LHLP7PzR+z+D8vf8zi//z8MYv/4vljFv8l8scs/i/IH7P4L5k/ZvFfKn/M4v/C/DGL/4vyxyz+L84fs/i/JH/M4r90/pjF/6X5Yxb/ZfLHLP7L5o9Z/JfLH7P4L58/ZvFfIX/M4r9i/pjF/2X5Yxb/lfLHLP4r549Z/FfJH7P4r5o/ZvF/ef6YxX+1/DGL/+r5Yxb/V+SPWfxfmT9m8V8jf8ziPz5/zOI/IX/M4j8xf8ziv2b+mMV/rfwxi//a+WMW/0n5Yxb/yfljFv918scs/uvmj1n8X5U/ZvF/df6YxX+9/DGL//r5Yxb/DfLHLP6vyR+z+G+YP2bxf23+mMV/o/wxi//G+WMW/03yxyz+m+aPWfxflz9m8d8sf8ziv3n+mMX/9fljFv835I9Z/N+YP2bxf1P+mMX/zfljFv+35I9Z/N+aP2bx3yJ/zOK/Zf6YxX+r/DGL/9vyxyz+W+ePWfy3yR+z+G+bP2bx3y5/zOL/9vwxi//2+WMW/3fkj1n835k/ZvHfIX/M4r9j/pjFf6f8MYv/zvljFv935Y9Z/N+dP2bx3yV/zOL/nvwxi/+u+WMW//fmj1n835c/ZvF/f/6YxX+3/DGL/+75Yxb/PfLHLP4fyB+z+H8wf8zi/6H8MYv/h/PHLP4fyR+z+O+ZP2bx/2j+mMX/Y/ljFv+P549Z/D+RP2bx3yt/zOL/yfwxi//e+WMW/0/lj1n8P50/ZvHfJ3/M4v+Z/DGL/775Yxb/z+aPWfw/lz9m8f98/pjFf7/8MYv//vljFv8v5I9Z/A/IH7P4H5g/ZvH/Yv6Yxf+g/DGL/8H5Yxb/L+WPWfy/nD9m8f9K/pjF/6v5Yxb/r+WPWfy/nj9m8f9G/pjF/5v5Yxb/Q/LHLP6H5o9Z/A/LH7P4H54/ZvE/In/M4n9k/pjF/6j8MYv/0fljFv9j8scs/sfmj1n8j8sfs/h/K3/M4n98/pjF/4T8MYv/ifljFv+T8scs/ifnj1n8v50/ZvH/Tv6Yxf+U/DGL/6n5Yxb/0/LHLP6n549Z/L+bP2bxPyN/zOJ/Zv6Yxf+s/DGL//fyxyz+388fs/ifnT9m8T8nf8zif27+mMX/vPwxi//5+WMW/x/kj1n8f5g/ZvH/Uf6Yxf/H+WMW/5/kj1n8f5o/ZvG/IH/M4n9h/pjF/2f5Yxb/i/LHLP4/zx+z+F+cP2bxvyR/zOJ/af6Yxf+y/DGL/+X5Yxb/K/LHLP5X5o9Z/H+RP2bx/2X+mMX/V/ljFv9f549Z/K/KH7P4X50/ZvH/Tf6Yxf+3+WMW/2vyxyz+v8sfe6T/6Cd7OP95j+F/bf6Y5fy/Ln/M4n99/pjF//f5Yxb/G/LHLP435o9Z/G/KH7P4/yF/zOL/x/wxi/+f8scs/jfnj1n8/5w/ZvG/JX/M4n9r/pjF/7b8MYv/7fljFv+/5I9Z/O/IH7P435k/ZvH/a/6Yxf+u/DGL/9/yxyz+f88fs/j/I3/M4v/P/DGL/935Yxb/e/LHLP735o9Z/O/LH7P4358/ZvGfkj9m8X8gf8zi/2D+mMV/av6YxH+eQf6YxX8of8ziPyp/zOI/W/6YxX/2/DGL/+j8MYv/HPljFv8588cs/nPlj1n8584fs/jPkz/2v+8/10Nv5f/o/vf9pzXPfPljFv/588cs/k/JH7P4L5A/ZvEfkz9m8V8wf8ziPzZ/zOK/UP6YxX/h/DGL/1Pzxyz+T8sfs/g/PX/M4r9I/pjF/xn5Yxb/RfPHLP7PzB+z+D8rf8ziv1j+mMX/2fljFv/n5I9Z/Mflj1n8n5s/ZvF/Xv6Yxf/5+WMW/8Xzxyz+S+SPWfxfkD9m8V8yf8ziv1T+mMX/hfljFv8X5Y9Z/F+cP2bxf0n+mMV/6fwxi/9L88cs/svkj1n8l80fs/gvlz9m8V8+f8ziv0L+mMV/xfwxi//L8scs/isp/ad+5F+tYfFfWen/r7P4r5I/ZvFfNX/M4v/y/DGL/2r5Yxb/1fPHLP6vyB+z+L8yf8ziv0b+mMV/fP6YxX9C/pjFf2L+mMV/zfwxi/9a+WMW/7Xzxyz+k/LHLP6T88cs/uvkj1n8180fs/i/Kn/M4v/q/DGL/3r5Yxb/9fPHLP4b5I9Z/F+TP2bx3zB/zOL/2vwxi/9G+WMW/43zxyz+m+SPWfw3zR+z+L8uf8ziv1n+mMV/8/wxi//r88cs/m/IH7P4vzF/zOL/pvwxi/+b88cs/m/JH7P4vzV/zOK/Rf6YxX/L/DGL/1b5Yxb/t+WPWfy3zh+z+G+TP2bx3zZ/zOK/Xf6Yxf/t+WMW/+3zxyz+78gfs/i/M3/M4r9D/pjFf8f8MYv/TvljFv+d88cs/u/KH7P4vzt/zOK/S/6Yxf89+WMW/13zxyz+780fs/i/L3/M4v/+/DGL/275Yxb/3fPHLP575I9Z/D+QP2bx/2D+mMX/Q/ljFv8P549Z/D+SP2bx3zN/zOL/0fwxi//H8scs/h/PH7P4fyJ/zOK/V/6Yxf+T+WMW/73zxyz+n8ofs/h/On/M4r9P/pjF/zP5Yxb/ffPHLP6fzR+z+H8uf8zi//n8MYv/fvljFv/988cs/l/IH7P4H5A/ZvE/MH/M4v/F/DGL/0H5Yxb/g/PHLP5fyh+z+H85f8zi/5X8MYv/V/PHLP5fyx+z+H89f8zi/438MYv/N/PHLP6H5I9Z/A/NH7P4H5Y/ZvE/PH/M4n9E/pjF/8j8MYv/UfljFv+j88cs/sfkj1n8j80fs/gflz9m8f9W/pjF//j8MYv/CfljFv8T88cs/iflj1n8T84fs/h/O3/M4v+d/DGL/yn5Yxb/U/PHLP6n5Y9Z/E/PH7P4fzd/zOJ/Rv6Yxf/M/DGL/1n5Yxb/7+WPWfy/nz9m8T87f8zif07+mMX/3Pwxi/95+WMW//Pzxyz+P8gfs/j/MH/M4v+j/DGL/4/zxyz+P8kfs/j/NH/M4n9B/pjF/8L8MYv/z/LHLP4X5Y9Z/H+eP2bxvzh/zOJ/Sf6Yxf/S/DGL/2X5Yxb/y/PHLP5X5I9Z/K/MH7P4/yJ/zOL/y/wxi/+v8scs/r/OH7P4X5U/ZvG/On/M4v+bmf2HOhhmZPH/beSYxf+a/DGL/+/yxyz+1+aPWfyvyx+z+F+fP2bx/33+mMX/hvwxi/+N+WMW/5vyxyz+f8gfs/j/MX/M4v+n/DGL/835Yxb/P+ePWfxvyR+z+N+aP2bxvy1/zOJ/e/6Yxf8v+WMW/zvyxyz+d+aPWfz/mj9m8b8rf8zi/7f8MYv/3/PHLP7/yB+z+P8zf8zif3f+mMX/nvwxi/+9+WMW//vyxyz+9+ePWfyn5I9Z/B/IH7P4P5g/ZvGfmj8m8Z93kD9m8e//8o2z+I/KH7P4z5Y/ZvGfPX/M4j86f8ziP0f+mMV/zvwxi/9c+WMW/7nzxyz+8+SPWfznzR+z+M+XP2bxnz9/zOL/lPwxi/8C+WMW/zH5Yxb/BfPHLP5j88cs/gvlj1n8F84fs/g/NX/M4v+0/DGL/9Pzxyz+i+SPWfyfkT9m8V80f8zi/8z8MYv/s/LHLP6L5Y9Z/J+dP2bxf07+mMV/XP6Yxf+5+WMW/+flj1n8n58/ZvFfPH/M4r9E/pjF/wX5Yxb/JfPHLP5L5Y9Z/F+YP2bxf1H+mMX/xfljFv+X5I9Z/JfOH7P4vzR/zOK/TP6YxX/Z/DGL/3L5Yxb/5fPHLP4r5I9Z/FfMH7P4vyx/zOK/Uv6YxX/l/DGL/yr5Yxb/VfPHLP4vzx+z+K+WP2bxXz1/zOL/ivwxi/8r88cs/mvkj1n8x+ePWfwn5I9Z/Cfmj1n818wfs/ivlT9m8V87f8ziPyl/zOI/OX/M4r9O/pjFf938MYv/q/LHLP6vzh+z+K+XP2bxXz9/zOK/Qf6Yxf81+WMW/w3zxyz+r80fs/hvlD9m8d84f8ziv0n+mMV/0/yx/2X/qR95aOm8r8sf+1/2n/n83yx/zOK/ef6Yxf/1+WMW/zfkj1n835g/ZvF/U/6Yxf/N+WMW/7fkj1n835o/ZvHfIn/M4r9l/pjFf6v8MYv/2/LHLP5b549Z/LfJH7P4b5s/ZvHfLn/M4v/2/DGL//b5Yxb/d+SPWfzfmT9m8d8hf8ziv2P+mMV/p/wxi//O+WMW/3flj1n8350/ZvHfJX/M4v+e/DGL/675Yxb/9+aPWfzflz9m8X9//pjFf7f8MYv/7vljFv898scs/h/IH7P4fzB/zOL/ofwxi/+H88cs/h/JH7P475k/ZvH/aP6Yxf9j+WMW/4/nj1n8P5E/ZvHfK3/M4v/J/DGL/975Yxb/T+WPWfw/nT9m8d8nf8zi/5n8MYv/vvljFv/P5o9Z/D+XP2bx/3z+mMV/v/wxi//++WMW/y/kj1n8D8gfs/gfmD9m8f9i/pjF/6D8MYv/wfljFv8v5Y9Z/L+cP2bx/0r+mMX/q/ljFv+v5Y9Z/L+eP2bx/0b+mMX/m/ljFv9D8scs/ofmj1n8D8sfs/gfnj9m8T8if8zif2T+mMX/qPwxi//R+WMW/2Pyxyz+x+aPWfyPyx+z+H8rf8zif3z+mMX/hPwxi/+J+WMW/5Pyxyz+J+ePWfy/nT9m8f9O/pjF/5T8MYv/qfljFv/T8scs/qfnj1n8v5s/ZvE/I3/M4n9m/pjF/6z8MYv/9/LHLP7fzx+z+J+dP2bxPyd/zOJ/bv6Yxf+8/DGL//n5Yxb/H+SPWfx/mD9m8f9R/pjF/8f5Yxb/n+SPWfx/mj9m8b8gf8zif2H+mMX/Z/ljFv+L8scs/j/PH7P4X5w/ZvG/JH/M4n9p/pjF/zKf/9xPZCWL/+U+/yeUxf+K/DGL/5X5Yxb/X+SPWfx/mT9m8f9V/pjF/9f5Yxb/q/LHLP5X549Z/H+TP2bx/23+mMX/mvwxi//v8scs/tfmj1n8r8sfs/hfnz9m8f99/pjF/4b8MYv/jfljFv+b8scs/n/IH7P4/zF/zOL/p/wxi//N+WMW/z/nj1n8b8kfs/jfmj9m8b8tf8zif3v+mMX/L/ljFv878scs/nfmj1n8/5o/ZvG/K3/M4v+3/DGL/9/zxyz+/8gfs/j/M3/M4n93/pjF/578MYv/vfljFv/78scs/vfnj1n8p+SPWfwfyB+z+D+YP2bxn5o/JvGfb5A/ZvEfyh+z+I/KH7P4z5Y/ZvGfPX/M4j86f8ziP0f+mMV/zvwxi/9c+WMW/7nzxyz+8+SPWfznzR+z+M+XP2bxnz9/zOL/lPwxi/8C+WMW/zH5Yxb/BfPHLP5j88cs/gvlj1n8F84fs/g/NX/M4v+0/DGL/9Pzxyz+i+SPWfyfkT9m8V80f8zi/8z8MYv/s/LHLP6L5Y9Z/J+dP2bxf07+mMV/XP6Yxf+5+WMW/+flj1n8n58/ZvFfPH/M4r9E/pjF/wX5Yxb/JfPHLP5L5Y9Z/F+YP2bxf1H+mMX/xfljFv+X5I9Z/JfOH7P4vzR/zOK/TP6YxX/Z/DGL/3L5Yxb/5fPHLP4r5I9Z/FfMH7P4vyx/zOK/Uv6YxX/l/DGL/yr5Yxb/VfPHLP4vzx+z+K+WP2bxXz1/zOL/ivwxi/8r88cs/mvkj1n8x+ePWfwn5I9Z/Cfmj1n818wfs/ivlT9m8V87f8ziPyl/zOI/OX/M4r9O/pjFf938MYv/q/LHLP6vzh+z+K+XP2bxXz9/zOK/Qf6Yxf81+WMW/w3zxyz+r80fs/hvlD9m8d84f8ziv0n+mMV/0/wxi//r8scs/pvlj1n8N88fs/i/Pn/M4v+G/DGL/xvzxyz+b8ofs/i/OX/M4v+W/DGL/1vzxyz+W+SPWfy3zB+z+G+VP2bxf1v+mMV/6/wxi/82+WMW/23zxyz+2+WPWfzfnj9m8d8+f8zi/478MYv/O/PHLP475I9Z/HfMH7P475Q/ZvHfOX/sIf9tT/qf9n9X/pjl/H93/pjFf5f8MYv/e/LHLP675o9Z/N+bP2bxf1/+mMX//fljFv/d8scs/rvnj1n898gfs/h/IH/M4v/B/DGL/4fyxyz+H84fs/h/JH/M4r9n/pjF/6P5Yxb/j+WPWfw/nj9m8f9E/pjFf6/8MYv/J/PHLP57549Z/D+VP2bx/3T+mMV/n/wxi/9n8scs/vvmj1n8P5s/ZvH/XP6Yxf/z+WMW//3yxyz+++ePWfy/kD9m8T8gf8zif2D+mMX/i/ljFv+D8scs/gfnj1n8v5Q/ZvH/cv6Yxf8r+WMW/6/mj1n8v5Y/ZvH/ev6Yxf8b+WMW/2/mj1n8D8kfs/gfmj9m8T8sf8zif3j+mMX/iPwxi/+R+WMW/6Pyxyz+R+ePWfyPyR+z+B+bP2bxPy5/zOL/rfwxi//x+WMW/xPyxyz+J+aPWfxPyh+z+J+cP2bx/3b+mMX/O/ljFv9T8scs/qfmj1n8T8sfs/ifnj9m8f9u/pjF/4z8MYv/mfljFv+z8scs/t/LH7P4fz9/zOJ/dv6Yxf+c/DGL/7n5Yxb/8/LHLP7n549Z/H+QP2bx/2H+mMX/R/ljFv8f549Z/H+SP2bx/2n+mMX/gvwxi/+F+WMW/5/lj1n8L8ofs/j/PH/M4n9x/pjF/5L8MYv/pfljFv/L8scs/pfnj1n8r8gfs/hfmT9m8f9F/pjF/5f5Yxb/X+WPWfx/nT9m8b8qf8zif3X+mMX/N/ljFv/f5o9Z/K/JH7P4/y5/zOJ/bf6Yxf+6/DGL//X5Yxb/3+ePWfxvyB+z+N+YP2bxvyl/zOL/h/wxi/8f88cs/n/KH7P435w/ZvH/c/6Yxf+W/DGL/635Yxb/2/LHLP63549Z/P+SP2bxvyN/zOJ/Z/6Yxf+v+WMW/7vyxyz+f8sfs/j/PX/M4v+P/DGL/z/zxyz+d+ePWfzvyR+z+N+bP2bxvy9/zOJ/f/6YxX9K/pjF/4H8MYv/g/ljFv+p+WMS//kH+WMW/6H8MYv/qPwxi/9s+WMW/9nzxyz+o/PHLP5z5I9Z/OfMH7P4z5U/ZvGfO3/M4j9P/pjFf978MYv/fPljFv/588cs/k/JH7P4L5A/ZvEfkz9m8V8wf8ziPzZ/zOK/UP6YxX/h/DGL/1Pzxyz+T8sfs/g/PX/M4r9I/pjF/xn5Yxb/RfPHLP7PzB+z+D8rf8ziv1j+mMX/2fljFv/n5I9Z/Mflj1n8n5s/ZvF/Xv6Yxf/5+WMW/8Xzxyz+S+SPWfxfkD9m8V8yf8ziv1T+mMX/hfljFv8X5Y9Z/F+cP2bxf0n+mMV/6fwxi/9L88cs/svkj1n8l80fs/gvlz9m8V8+f8ziv0L+mMV/xfwxi//L8scs/ivlj1n8V84fs/ivkj9m8V81f8zi//L8MYv/avljFv/V88cs/q/IH7P4vzJ/zOK/Rv6YxX98/pjFf0L+mMV/Yv6YxX/N/DGL/1r5Yxb/tfPHLP6T8scs/pPzxyz+6+SPWfzXzR+z+L8qf8zi/+r8MYv/evljFv/188cs/hvkj1n8X5M/ZvHfMH/M4v/a/DGL/0b5Yxb/jfPHLP6b5I9Z/DfNH7P4vy5/zOK/Wf6YxX/z/DGL/+vzxyz+b8gfs/i/MX/M4v+m/DGL/5vzxyz+b8kfs/i/NX/M4r9F/pjFf8v8MYv/VvljFv+35Y9Z/LfOH7P4b5M/ZvHfNn/M4r9d/pjF/+35Yxb/7fPHLP7vyB+z+L8zf8ziv0P+mMV/x/wxi/9O+WMW/53zxyz+78ofs/i/O3/M4r9L/pjF/z35Yxb/XfPHLP7vzR+z+L8vf8zi//78MYv/bvljFv/d88cs/nvkj1n8P5A/ZvH/YP6Yxf9D+WMW/w/nj1n8P5I/ZvHfM3/M4v/R/DGL/8fyxyz+H88fs/h/In/M4r9X/pjF/5P5Yxb/vfPHLP6fyh+z+H86f8ziv0/+mMX/M/ljFv9988cs/p/NH7P4fy5/zOL/+fwxi/9++WMW//3zxyz+X8gfs/gfkD9m8T8wf8zi/8X8MYv/QfljFv+D88cs/l/KH7P4fzl/zOL/lfwxi/9X88cs/l/LH7P4fz1/zOL/jfwxi/8388cs/ofkj1n8D80fs/gflj9m8T88f8zif0T+mMX/yPwxi/9R+WMW/6Pzxyz+x+SPWfyPzR+z+B+XP2bx/1b+mMX/+Pwxi/8J+WMW/xPzxyz+J+WPWfxPzh+z+H87f8zi/538MYv/KfljFv9T88cs/qflj1n8T88fs/h/N3/M4n9G/pjF/8z8MYv/WfljFv/v5Y9Z/L+fP2bxPzt/zOJ/Tv6Yxf/c/DGL/3n5Yxb/8/PHLP4/yB+z+P8wf8zi/6P8MYv/j/PHLP4/yR+z+P80f8zif0H+mMX/wvwxi//P8scs/hflj1n8f54/ZvG/OH/M4n9J/pjF/9L8MYv/ZfljFv/L88cs/lfkj1n8r8wfs/j/In/M4v/L/DGL/6/yxyz+v84fs/hflT9m8b86f8zi/5v8MYv/b/PHLP7X5I9Z/H+XP2bxvzZ/zOJ/Xf6Yxf/6/DGL/+/zxyz+N+SPWfxvzB+z+N+UP2bx/0P+mMX/j/ljFv8/5Y9Z/G/OH7P4/zl/zOJ/S/6Yxf/W/DGL/235Yxb/2/PHLP5/yR+z+N+RP2bxvzN/zOL/1/wxi/9d+WMW/7/lj1n8/54/ZvH/R/6Yxf+f+WMW/7vzxyz+9+SPWfzvzR+z+N+XP2bxvz9/zOI/JX/M4v9A/pjF/8H8MYv/1Pwxif9TBvljFv+h/DGL/6j8MYv/bPljFv/Z88cs/qPzxyz+c+SPWfznzB+z+M+VP2bxnzt/zOI/T/6YxX/e/DGL/3z5Yxb/+fPHLP5PyR+z+C+QP2bxH5M/ZvFfMH/M4j82f8ziv1D+mMV/4fwxi/9T88cs/k/LH7P4Pz1/zOK/SP6Yxf8Z+WMW/0Xzxyz+z8wfs/g/K3/M4r9Y/pjF/9n5Yxb/5+SPWfzH5Y9Z/J+bP2bxf17+mMX/+fljFv/F88cs/kvkj1n8X5A/ZvFfMn/M4r9U/pjF/4X5Yxb/F+WPWfxfnD9m8X9J/pjFf+n8MYv/S/PHLP7L5I9Z/JfNH7P4L5c/ZvFfPn/M4r9C/pjFf8X8MYv/y/LHLP4r5Y9Z/FfOH7P4r5I/ZvFfNX/M4v/y/DGL/2r5Yxb/1fPHLP6vyB+z+L8yf8ziv0b+mMV/fP6YxX9C/pjFf2L+mMV/zfwxi/9aIv+5/o11Lf5ri/z/nSz+k/LHLP6T88cs/uvkj1n8180fs/i/Kn/M4v/q/DGL/3r5Yxb/9fPHLP4b5I9Z/F+TP2bx3zB/zOL/2vwxi/9G+WMW/43zxyz+m+SPWfw3zR+z+L8uf8ziv1n+mMV/8/wxi//r88cs/m/IH7P4vzF/zOL/pvwxi/+b88cs/m/JH7P4vzV/zOK/Rf6YxX/L/DGL/1b5Yxb/t+WPWfy3zh+z+G+TP2bx3zZ/zOK/Xf6Yxf/t+WMW/+3zxyz+78gfs/i/M3/M4r9D/pjFf8f8MYv/TvljFv+d88cs/u/KH7P4vzt/zOK/S/6Yxf89+WMW/13zxyz+780fs/i/L3/M4v/+/DGL/275Yxb/3fPHLP575I9Z/D+QP2bx/2D+mMX/Q/ljFv8P549Z/D+SP2bx3zN/zOL/0fwxi//H8scs/h/PH7P4fyJ/zOK/V/6Yxf+T+WMW/73zxyz+n8ofs/h/On/M4r9P/pjF/zP5Yxb/ffPHLP6fzR+z+H8uf8zi//n8MYv/fvljFv/988cs/l/IH7P4H5A/ZvE/MH/M4v/F/DGL/0H5Yxb/g/PHLP5fyh+z+H85f8zi/5X8MYv/V/PHLP5fyx+z+H89f8zi/438MYv/N/PHLP6H5I9Z/A/NH7P4H5Y/ZvE/PH/M4n9E/pjF/8j8MYv/UfljFv+j88cs/sfkj1n8j80fs/gflz9m8f9W/pjF//j8MYv/CfljFv8T88cs/iflj1n8T84fs/h/O3/M4v+d/DGL/yn5Yxb/U/PHLP6n5Y9Z/E/PH7P4fzd/zOJ/Rv6Yxf/M/DGL/1n5Yxb/7+WPWfy/nz9m8T87f8zif07+mMX/3Pwxi/95+WMW//Pzxyz+P8gfs/j/MH/M4v+j/DGL/4/zxyz+P8kfs/j/NH/M4n9B/pjF/8L8MYv/z/LHLP4X5Y9Z/H+eP2bxvzh/zOJ/Sf6Yxf/S/DGL/2X5Yxb/y/PHLP5X5I9Z/K/MH7P4/yJ/zOL/y/wxi/+v8scs/r/OH7P4X5U/ZvG/On/M4v+b/DGL/2/zxyz+1+SPWfx/lz9m8b82f8zif13+mMX/+vwxi//v88cs/jfkj1n8b8wfs/jflD9m8f9D/pjF/4/5Yxb/P+WPWfxvzh+z+P85f8zif0v+mMX/1vwxi/9t+WMW/9vzxyz+f8kfs/jfkT9m8b8zf8zi/9f8MYv/XfljFv+/5Y9Z/P+eP2bx/0f+mMX/n/ljFv+788cs/vfkj1n8780fs/jflz9m8b8/f8ziPyV/zOL/QP6Yxf/B/DGL/9T8MYn/AoP8MYv/UP6YxX9U/pjFf7b8MYv/7Pk/otlGHi3+o/PHLP5z5I9Z/OfMH7P4z5U/ZvGfO3/M4j9P/pjFf978MYv/fPljFv/588cs/k/JH7P4L5A/ZvEfkz9m8V8wf8ziPzZ/zOK/UP6YxX/h/DGL/1Pzxyz+T8sfs/g/PX/M4r9I/pjF/xn5Yxb/RfPHLP7PzB+z+D8rf8ziv1j+mMX/2fljFv/n5I9Z/Mflj1n8n5s/ZvF/Xv6Yxf/5+WMW/8Xzxyz+S+SPWfxfkD9m8V8yf8ziv1T+mMX/hfljFv8X5Y9Z/F+cP2bxf0n+mMV/6fwxi/9L88cs/svkj1n8l80fs/gvlz9m8V8+f8ziv0L+mMV/xfwxi//L8scs/ivlj1n8V84fs/ivkj9m8V81f8zi//L8MYv/avljFv/V88cs/q/IH7P4vzJ/zOK/Rv6YxX98/pjFf0L+mMV/Yv6YxX/N/DGL/1r5Yxb/tfPHLP6T8scs/pPzxyz+6+SPWfzXzR+z+L8qf8zi/+r8MYv/evljFv/188cs/hvkj1n8X5M/ZvHfMH/M4v/a/DGL/0b5Yxb/jfPHLP6b5I9Z/DfNH7P4vy5/zOK/Wf6YxX/z/DGL/+vzxyz+b8gfs/i/MX/M4v+m/DGL/5vzxyz+b8kfs/i/NX/M4r9F/pjFf8v8MYv/VvljFv+35Y9Z/LfOH7P4b5M/ZvHfNn/M4r9d/pjF/+35Yxb/7fPHLP7vyB+z+L8zf8ziv0P+mMV/x/wxi/9O+WMW/53zxyz+78ofs/i/O3/M4r9L/pjF/z35Yxb/XfPHLP7vzR+z+L8vf8zi//78MYv/bvljFv/d88cs/nvkj1n8P5A/ZvH/YP6Yxf9D+WMW/w/nj/1/7NGzFiCGAkXRZ79kYtu2bdu2bWdi27Zt27Zt254UqbLW/YLcvbtTn5b/A/2PWv7v5n/U8n93/6OW/3v4H7X839P/qOX/Xv5HLf/39j9q+b+P/1HL/339j1r+7+d/1PJ/f/+jlv8H+B+1/D/Q/6jl/0H+Ry3/D/Y/avl/iP9Ry/9D/Y9a/h/mf9Ty/3D/o5b/R/gftfw/0v+o5f9R/kct/4/2P2r5f4z/Ucv/Y/2PWv4f53/U8v94/6OW/yf4H7X8P9H/qOX/Sf5HLf9P9j9q+X+K/1HL/1P9j1r+n+Z/1PL/dP+jlv9n+B+1/D/T/6jl/1n+Ry3/z/Y/avl/jv9Ry/9z/Y9a/p/nf9Ty/3z/o5b/F/gftfy/0P+o5f9F/kct/y/2P2r5f4n/Ucv/S/2PWv5f5n/U8v9y/6OW/1f4H7X8v9L/qOX/Vf5HLf+v9j9q+X+N/1HL/2v9j1r+X+d/1PL/ev+jlv83+B+1/L/R/6jl/03+Ry3/b/Y/avl/i/9Ry/9b/Y9a/t/mf9Ty/3b/o5b/d/gftfy/0/+o5f9d/kct/+/2P2r5f4//Ucv/e/2PWv7f53/U8v9+/6OW/w/4H7X8f9D/qOX/Q/5HLf8f9j9q+f+I/1HL/0f9j1r+P+Z/1PL/cf+jlv9P+B+1/H/S/6jl/1P+Ry3/n/Y/avn/jP9Ry/9n/Y9a/j/nf9Ty/3n/o5b/L/gftfx/0f+o5f9L/kct/1/2P2r5/4r/Ucv/V/2PWv6/5n/U8v91/6OW/2/4H7X8f9P/qOX/W/5HLf/f9j9q+f+O/1HL/3f9j1r+v+d/1PL/ff+jlv8f+B+1/P/Q/6jl/0f+Ry3/P/Y/avn/if9Ry/9P/Y9a/n/mf9Ty/3P/o5b/X/gftfz/0v+o5f9X/kct/7/2P2r5/43/Ucv/b/2PWv5/53/U8v97/6OW/z/4H7X8/9H/qOX/T/5HLf9/9j9q+f+L/1HL/0H+RyX/B/zJ/6jl/5/9j1r+/8X/qOX/X/2PWv7/zf+o5f/f/Y9a/v/D/6jl/z/9j1r+/8v/qOX/v/2PWv7/x/+o5f9//Y9a/v/P/6jl///9j1r+D+Z/1PJ/cP+jlv8D/I9a/g/hf9Tyf0j/o5b/Q/kftfwf2v+o5f8w/kct/4f1P2r5P5z/Ucv/4f2PWv6P4H/U8n9E/6OW/yP5H7X8H9n/qOX/KP5HLf9H9T9q+T+a/1HL/9H9j1r+j+F/1PJ/TP+jlv9j+R+1/B/b/6jl/zj+Ry3/x/U/avk/nv9Ry//x/Y9a/k/gf9Tyf0L/o5b/E/kftfyf2P+o5f8k/kct/yf1P2r5P5n/Ucv/yf2PWv5P4X/U8n9K/6OW/1P5H7X8n9r/qOX/NP5HLf+n9T9q+T+d/1HL/+n9j1r+z+B/1PJ/Rv+jlv8z+R+1/J/Z/6jl/yz+Ry3/Z/U/avk/m/9Ry//Z/Y9a/s/hf9Tyf07/o5b/c/kftfyf2/+o5f88/kct/+f1P2r5P5//Ucv/+f2PWv4v4H/U8n9B/6OW/wv5H7X8X9j/qOX/Iv5HLf8X9T9q+b+Y/1HL/8X9j1r+L+F/1PJ/Sf+jlv9L+R+1/F/a/6jl/zL+Ry3/l/U/avm/nP9Ry//l/Y9a/q/gf9Tyf0X/o5b/K/kftfxf2f+o5f8q/kct/1f1P2r5v5r/Ucv/1f2PWv6v4X/U8n9N/6OW/2v5H7X8X9v/qOX/Ov5HLf/X9T9q+b+e/1HL//X9j1r+b+B/1PJ/Q/+jlv8b+R+1/N/Y/6jl/yb+/2bQ77Pl/6b+Ry3/N/M/avm/uf9Ry/8t/I9a/m/pf9Tyfyv/o5b/W/sftfzfxv+o5f+2/kct/7fzP2r5v73/Ucv/HfyPWv7v6H/U8n8n/6OW/zv7H7X838X/qOX/rv5HLf8H+h/94f4DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/Mq+/cd4XRdwHP8ccIBkGy5mDGuDfFu6pXTHj+EfTkgELvTA34gaAncgeAd0HHacGj/+IJfOH7mRYytXwrCctHnLNZ1dmlmzWLXV7IeapStrkeks2GJd+95977z7dtz6vs/3m5WPxx/3/X4+X14f4LYnnw9TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgP9dDY0LjoytGXJq7OCDDx9u7n2dfXTFTQd+331B/2v546XDXHLM4IOenp6e2c/O2lE+nFAUReln21k+nlg5Ll1/Z/2XOvqOwvzuFxcfn/zLxiMH1pz2cF3X0ftqe8/WFjeu29DS/IkxRREuqi06Sgd1NUURFtUW95YO6ksHi2uLh0sHs3oPTim+Wzo4b+3mlqbSiSXR3zP4f9HQuLMYO6TYYsifBoP731n/nTv6X0e4ZP/VxhXl/i/v/OGbFZ/1O0H//dcPCyr7r/o3CJxQdf0/P7//dYRL/sf9f9KTK18e7rMT999//fBJ/UM6wzz/D2m08rm/4vl/+jCXHNhfWdN5vNT/Jbc+M6N8atx/8/z/zvXDRZX9jxny/F96jl/Y//w/oSjCxaP8dsB7SkPjriMj3f9H7n/ctIpNzeD+T2/bvL/U/2OLf/B4+VRtlf0vHOH+P2ZJxa8VqE5D41d7Ku7/VfRffGyYSw70/9bjv32o1P+jf7z/jEGfVdP/xZX9z2xv3TJz6/bOcze0rl7fvL55U92sebPn1tfNPX/OzN5Hgr6vo/yuwHvD6O7/xaSKTU1RNA/sr+468FSp/zkPPDC7fGpilf0vGvH+P939H4b1kTHF+PFFx+r29ra6vq/9h/V9X/t+2DD9V/H3/zPPLv+w2vJrTVFMHdjfecZdy0v9v33omd3lU+Or7H/xiP3PH/h5gQijvP83VWyG9H/w0Iu9z/9L7zl4evlUtX//XzJi/6+4/8NoNDRW/A8/77JS/7uKSyM7DQ3++x+kk6P/R9++vjtuHT6lf0gnR/9/+MLRc+LWYan+IZ0c/Y/beP9zcetwif4hnRz9L5syb3ncOlyqf0gnR/9rXznnr3Hr0Kh/SCdH/2d/ZXdH3Dos0z+kk6P/B9tmb4tbh+X6h3Ry9P/zUx98NW4dLtM/pJOj/2PH7r4hbh0u1z+kk6P/rj1n/ShuHa7QP6STo//L1i0Icetwpf4hnRz9T5v658fi1uEq/UM6Ofqf+5d/nhq3DlfrH9LJ0f/tX1y+L24drtE/pJOj/7HXvfxC3Dqs0D+kk6P/JWdtWxC3DtfqH9LJ0X/Tz5p64tZhZbn/CYX+4V2Xo/+Z3/zJhrh1uM79H9LJ0f/hZY/siVuH6/UP6eTof09dMTluHW7QP6STo/9vfP+0Q3Hr8Gn9Qzo5+v/dk0/Mi1uHVfqHdHL0/+yHbvtW3DrcqH9IJ0f/96x54cy4dVitf0gnR/8P7X3uy3HrsEb/kE6O/l9/vfV9ceuwVv+QTo7+J0085bW4dWjSP6STo/8Ft3ytLW4dmvUP6eTov3V314/j1mGd/iGdHP1/9PjUlXHrsF7/kE6O/lfM2fvBuHW4Sf+QTo7+P7D0gl1x67BB/5BOjv4v7P74hXHrsFH/kE6O/tuf/vzX49bhZv1DOjn63zvj1UVx69Cif0gnR/8vrVry07h1aNU/pJOj/zcfuXZT3Dps0j+kk6P/J37x1rG4ddisf0gnR//vP3/h3+PWYYv+IZ0c/S9a/MbauHX4jP4hnRz9b+z610tx69Cmf0gnR/8zDl+1NG4dtuof0snR//fOrdsftw7t+od0cvR/xxX76uPWYZv+IZ0c/e8/eOddcetwi/4hnRz9v/Gr6dPi1uGz+od0cvR/3+RD18StQ4f+IZ0c/f96U+3TceuwXf+QTo7+/7Fvyo64dejUP6STo/+nXuv+U9w63Kp/SCdH/6vG/WZ83Drcpn9IJ0f/Uzq33Bu3DrfrH9LJ0f+8u1efF7cOn9M/pJOj/61/e/7bceuwQ/+QztbtnTevbmlpbvPGG2+8GXhzsv9kAlJ7J/qT/SsBAAAAAAAAAAAAAABOJMc/JzrZv0cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg3+zAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhB44FAAAAAIT5WwfRuwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBXAAAA//9O+OOp")
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40), 0x24, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x163042, 0xa1)
creat(&(0x7f0000000280)='./bus\x00', 0x2)

1.942500675s ago: executing program 1 (id=14831):
syz_mount_image$iso9660(&(0x7f0000000200), &(0x7f0000000540)='./file0\x00', 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0xfc, 0x55a, &(0x7f0000000f40)="$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")
stat(&(0x7f0000000980)='./file0/../file0\x00', &(0x7f00000014c0))

1.8413013s ago: executing program 1 (id=14832):
prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1)
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f0000000140)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x7fff0000}]})

1.840906788s ago: executing program 1 (id=14833):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x410, &(0x7f0000000140)=ANY=[], 0x1, 0x346, &(0x7f0000000480)="$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")
truncate(&(0x7f0000000240)='./file0/file0\x00', 0x2e0a)

1.745996276s ago: executing program 1 (id=14835):
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, 0x0)
r0 = fsmount(0xffffffffffffffff, 0x0, 0x2)
io_uring_register$IORING_REGISTER_EVENTFD(0xffffffffffffffff, 0x4, &(0x7f0000000080)=r0, 0x1)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x88, 0x30, 0x1, 0x70bd2b, 0x0, {}, [{0x74, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7b, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r1, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = syz_open_dev$cec(&(0x7f0000000400), 0x0, 0x80200)
ioctl$CEC_ADAP_S_LOG_ADDRS(r4, 0xc05c6104, &(0x7f00000001c0)={"f2efe21e", 0x0, 0x5, 0x4a, 0x0, 0x1ff, "2179d46fd08e3c0ced34c7d0c7e6d7", "7ca24a13", "0400", "a2d1d4a2", ["1af0b1ba1cb8fd54c9c9b587", "bed0f3d6ce7a5f7389827f04", "33af343c60abc64f2fdc9ddf", "9b3842fc63849f62b6eb1c3c"]})
r5 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0)
ioctl$CEC_TRANSMIT(r5, 0xc0386105, &(0x7f0000000d40)={0x2, 0x3, 0x3, 0xfffffffc, 0x0, 0x4063, "57c1169b6664ea61326ac71ae7213059", 0x0, 0x0, 0x0, 0xfd, 0x5, 0x1})
socket$nl_netfilter(0x10, 0x3, 0xc)
r6 = add_key(&(0x7f0000000240)='cifs.spnego\x00', &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd)
setreuid(0xffffffffffffffff, 0xee00)
keyctl$setperm(0x5, r6, 0x220c)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x41100, 0x90, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x31a}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94)
socket$inet(0x2, 0x2, 0x1)

1.327415623s ago: executing program 1 (id=14838):
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000840)='./file1\x00', 0xc0ed000e, &(0x7f0000000200)={[{@orlov}, {@max_batch_time={'max_batch_time', 0x3d, 0x1}}, {@debug}, {@noload}, {@nombcache}, {@bh}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x784d800}}]}, 0xfe, 0x487, &(0x7f0000000f00)="$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")
socket(0x2, 0x80805, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x5, 0x7}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x80)
r3 = syz_open_dev$vim2m(0x0, 0x6, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f00000000c0)={0x2, 0x1, 0x1})
ioctl$vim2m_VIDIOC_STREAMOFF(r3, 0x40045612, 0x0)
semctl$GETALL(0x0, 0x0, 0xd, 0x0)
syz_init_net_socket$ax25(0x3, 0x3, 0xc3)
mlockall(0x7)
mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000)
getsockopt(0xffffffffffffffff, 0x200000000114, 0x2715, 0x0, 0x0)

1.327078311s ago: executing program 0 (id=14839):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_TYPE={0x5, 0x2, 0x17}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x18}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0)

1.269696173s ago: executing program 0 (id=14840):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = socket(0x11, 0x3, 0x0)
syz_usb_connect(0x5, 0x24, 0x0, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000000)={'team0\x00', <r3=>0x0})
bind$packet(r0, &(0x7f0000000200)={0x11, 0xf6, r3, 0x1, 0x55, 0x6, @multicast}, 0x14)
sendmsg$kcm(r1, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x4)
r4 = openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0)
writev(r4, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000140)={0x0, 0x401, 0x4f5, 0x4, 0x4}, &(0x7f0000000180)=0x14)
bind$packet(r1, &(0x7f0000000080)={0x11, 0xf7, r3, 0x1, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}}, 0x14)
socket$can_bcm(0x1d, 0x2, 0x2)
r5 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0)

1.269392658s ago: executing program 5 (id=14841):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd2c, 0x25dfdbff, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x16, 0x32}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0)

1.212736307s ago: executing program 5 (id=14842):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x301, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x4}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x4}]}], {0x14}}, 0x80}}, 0x4)

1.212144691s ago: executing program 5 (id=14843):
syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000200)='./file0\x00', 0x10, &(0x7f0000000480)=ANY=[], 0x5, 0xa5a, &(0x7f0000001b40)="$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")
sendmsg$802154_raw(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)}, 0x1, 0x0, 0x0, 0x2408c0d0}, 0x80)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(r0, 0xc0186e86, &(0x7f0000000800)={@id={0x20000000, 0x0, @auto="0600000020000000000000000700"}})

708.084831ms ago: executing program 5 (id=14844):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a98000000060a0b04f300000000000000020000006c000480680001800b00010074617267657400005800028040000300cd4b6abe42031763d02899c77f963d140d7a9d3ac869f3a860917523669abf4579f9cd6564e6400f00000045bfe585ab6933a6f6094a0eebad4e35370a000100484d41524b00000008000240000000000900010073797a30000000000900020073797a32"], 0xc0}, 0x1, 0x0, 0x0, 0x10}, 0x0)

667.859007ms ago: executing program 5 (id=14845):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1, 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="91106d000000000095"], &(0x7f00000000c0)='GPL\x00'}, 0x94)

603.115718ms ago: executing program 5 (id=14846):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4e27, 0xffffffff, @mcast2, 0x5}, 0x1c)
sendmmsg$inet6(r3, &(0x7f0000002880)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=[@hoplimit_2292={{0x14}}], 0x18}}], 0x1, 0x24001c00)

307.097781ms ago: executing program 0 (id=14847):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000001c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha512)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="fccba0d50b90deb92d2778a481774525f9deb562396c8b2ca2cf0e6422e58c7f21cedf6b843b1546e1b47fef24f45084ee98cfbfa4e5977b544b6eb0bc1602b7281a9eb7c40c097b9fbfc4de1846b922cbfe15accd9c2a6eb5888c78deccf02d78f5db0559ca6978e5a349174f9762d8423ad42042f36babb248831a6a563b900a", 0x81)

192.583219ms ago: executing program 0 (id=14848):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_ro(r0, &(0x7f0000000400)='cgroup.stat\x00', 0x275a, 0x0)
preadv(r1, &(0x7f00000001c0)=[{&(0x7f0000000d40)=""/53, 0x35}], 0x1, 0x0, 0x8bd7)

89.470801ms ago: executing program 0 (id=14849):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
r3 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r3, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}}], 0x1c)

0s ago: executing program 1 (id=14850):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0xffffffffffffffff, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newsa={0x144, 0x10, 0x1, 0x0, 0x0, {{@in6=@private1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {@in=@local, 0x0, 0x6c}, @in=@loopback, {}, {}, {}, 0x0, 0x0, 0x2}, [@sec_ctx={0xc, 0x8, {0x8}}, @algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x144}}, 0x0)

kernel console output (not intermixed with test programs):

tem using the ext4 subsystem
[ 1159.430297][ T3599] EXT4-fs error (device loop5): ext4_get_journal_inode:5796: comm syz.5.12137: inode #1661: comm syz.5.12137: iget: illegal inode #
[ 1159.441997][ T3599] EXT4-fs (loop5): no journal found
[ 1159.443913][ T3599] EXT4-fs (loop5): can't get journal size
[ 1159.448758][ T3599] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended
[ 1159.452288][ T3599] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8056c118, mo2=0002]
[ 1159.506282][ T3599] EXT4-fs (loop5): Errors on filesystem, clearing orphan list.
[ 1159.556209][ T3599] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1159.764952][ T3260] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1160.874509][T17810] Bluetooth: hci3: Frame reassembly failed (-90)
[ 1160.960275][T26724] usb 1-1: new high-speed USB device number 119 using dummy_hcd
[ 1161.122253][T26724] usb 1-1: Using ep0 maxpacket: 32
[ 1161.133566][T26724] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1161.137943][T26724] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1161.149327][T26724] usb 1-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00
[ 1161.153367][T26724] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1161.159826][T26724] usb 1-1: config 0 descriptor??
[ 1161.554058][T26724] saitek 0003:06A3:0621.002D: hidraw0: USB HID v0.00 Device [HID 06a3:0621] on usb-dummy_hcd.0-1/input0
[ 1161.743109][ T6012] usb 1-1: USB disconnect, device number 119
[ 1162.265498][ T3644] netlink: 'syz.0.12157': attribute type 3 has an invalid length.
[ 1162.269134][ T3644] netlink: 'syz.0.12157': attribute type 3 has an invalid length.
[ 1162.661167][ T3655] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12162'.
[ 1162.798070][ T5965] Bluetooth: hci3: Opcode 0x1003 failed: -110
[ 1163.107586][ T3674] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12171'.
[ 1163.142901][ T3676] loop5: detected capacity change from 0 to 1024
[ 1163.675730][ T3695] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12180'.
[ 1163.947673][ T3702] vivid-000: disconnect
[ 1163.949911][ T3701] vivid-000: reconnect
[ 1164.301047][ T3708] netlink: 'syz.5.12185': attribute type 2 has an invalid length.
[ 1164.354544][ T3711] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12186'.
[ 1164.546838][ T3714] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1164.726563][ T3717] loop5: detected capacity change from 0 to 1024
[ 1164.787405][ T3717] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1164.876783][ T3717] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4183: comm syz.5.12189: Allocating blocks 497-513 which overlap fs metadata
[ 1164.886791][ T3717] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 2 with max blocks 3 with error 117
[ 1164.891068][ T3717] EXT4-fs (loop5): This should not happen!! Data will be lost
[ 1164.891068][ T3717] 
[ 1164.937989][ T3260] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1165.449378][ T3731] loop5: detected capacity change from 0 to 4096
[ 1166.120676][ T3760] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12205'.
[ 1166.138528][ T3760] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12205'.
[ 1166.216911][ T3766] netlink: 'syz.1.12207': attribute type 7 has an invalid length.
[ 1166.222013][ T3766] netlink: 'syz.1.12207': attribute type 5 has an invalid length.
[ 1166.244034][ T3766] netlink: 17 bytes leftover after parsing attributes in process `syz.1.12207'.
[ 1166.390998][ T3782] loop5: detected capacity change from 0 to 256
[ 1166.413417][ T3782] exFAT-fs (loop5): failed to load upcase table (idx : 0x00011d5f, chksum : 0x09863542, utbl_chksum : 0x000cd30d)
[ 1166.426550][   T33] audit: type=1800 audit(2000000157.652:940): pid=3782 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.12215" name="file2" dev="loop5" ino=1048901 res=0 errno=0
[ 1166.579570][ T3789] netlink: 32 bytes leftover after parsing attributes in process `syz.1.12218'.
[ 1166.632132][ T3793] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12220'.
[ 1166.632156][ T3793] netlink: 'syz.1.12220': attribute type 6 has an invalid length.
[ 1166.819346][ T3799] loop5: detected capacity change from 0 to 64
[ 1166.820522][ T3801] netlink: 'syz.1.12224': attribute type 10 has an invalid length.
[ 1166.841681][ T3801] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12224'.
[ 1166.886383][ T3799] syz.5.12223: attempt to access beyond end of device
[ 1166.886383][ T3799] loop5: rw=0, sector=234881062, nr_sectors = 2 limit=64
[ 1166.892873][ T3799] Buffer I/O error on dev loop5, logical block 117440531, async page read
[ 1166.901724][ T3799] syz.5.12223: attempt to access beyond end of device
[ 1166.901724][ T3799] loop5: rw=0, sector=8548515840, nr_sectors = 2 limit=64
[ 1166.907628][ T3799] Buffer I/O error on dev loop5, logical block 4274257920, async page read
[ 1166.917673][ T3799] syz.5.12223: attempt to access beyond end of device
[ 1166.917673][ T3799] loop5: rw=0, sector=301989888, nr_sectors = 2 limit=64
[ 1166.922119][ T3799] Buffer I/O error on dev loop5, logical block 150994944, async page read
[ 1166.929364][ T3801] bond0: (slave bridge0): Releasing backup interface
[ 1166.929460][ T3799] syz.5.12223: attempt to access beyond end of device
[ 1166.929460][ T3799] loop5: rw=0, sector=234881062, nr_sectors = 2 limit=64
[ 1166.937106][ T3799] Buffer I/O error on dev loop5, logical block 117440531, async page read
[ 1166.976754][   T33] audit: type=1800 audit(2000000158.188:941): pid=3799 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.12223" name="file2" dev="loop5" ino=6 res=0 errno=0
[ 1167.188788][   T33] audit: type=1326 audit(2000000158.450:942): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3808 comm="syz.5.12227" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f674a18ebe9 code=0x0
[ 1167.933101][ T3843] __nla_validate_parse: 1 callbacks suppressed
[ 1167.933123][ T3843] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12243'.
[ 1167.941391][ T3843] netlink: 60 bytes leftover after parsing attributes in process `syz.1.12243'.
[ 1167.944205][ T3843] netlink: 12 bytes leftover after parsing attributes in process `syz.1.12243'.
[ 1167.947418][ T3843] netlink: 60 bytes leftover after parsing attributes in process `syz.1.12243'.
[ 1167.951070][ T3843] netlink: 104 bytes leftover after parsing attributes in process `syz.1.12243'.
[ 1168.514351][ T3867] netlink: 104 bytes leftover after parsing attributes in process `syz.0.12255'.
[ 1168.680702][ T3881] netlink: 220 bytes leftover after parsing attributes in process `syz.1.12261'.
[ 1168.989627][T26724] usb 1-1: new high-speed USB device number 120 using dummy_hcd
[ 1169.124222][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[ 1169.131665][T26724] usb 1-1: Using ep0 maxpacket: 32
[ 1169.136298][T26724] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[ 1169.140193][T26724] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1169.146510][T26724] usb 1-1: config 0 descriptor??
[ 1169.344209][T26724] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[ 1169.348422][T26724] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1169.352426][T26724] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[ 1169.355138][T26724] usb 1-1: media controller created
[ 1169.367651][T26724] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1169.536485][T26724] az6027: usb out operation failed. (-71)
[ 1169.538596][T26724] az6027: usb out operation failed. (-71)
[ 1169.540951][T26724] stb0899_attach: Driver disabled by Kconfig
[ 1169.543428][T26724] az6027: no front-end attached
[ 1169.543428][T26724] 
[ 1169.546348][T26724] az6027: usb out operation failed. (-71)
[ 1169.548556][T26724] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[ 1169.552428][T26724] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input64
[ 1169.557032][T26724] dvb-usb: schedule remote query interval to 400 msecs.
[ 1169.559224][T26724] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[ 1169.563476][T26724] usb 1-1: USB disconnect, device number 120
[ 1169.591501][T26724] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[ 1170.237692][ T3931] netlink: 180 bytes leftover after parsing attributes in process `syz.1.12282'.
[ 1170.242169][ T3929] netlink: 180 bytes leftover after parsing attributes in process `syz.1.12282'.
[ 1170.258237][ T3929] netlink: 180 bytes leftover after parsing attributes in process `syz.1.12282'.
[ 1171.689521][ T3981] loop5: detected capacity change from 0 to 1024
[ 1171.729513][ T3981] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1171.794491][ T3981] EXT4-fs error (device loop5): ext4_xattr_inode_iget:437: comm syz.5.12304: inode #218: comm syz.5.12304: iget: illegal inode #
[ 1171.811546][ T3981] EXT4-fs error (device loop5): ext4_xattr_inode_iget:442: comm syz.5.12304: error while reading EA inode 218 err=-117
[ 1171.882659][ T3260] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1171.967282][ T3990] block device autoloading is deprecated and will be removed.
[ 1171.979990][ T3990] syz.0.12307: attempt to access beyond end of device
[ 1171.979990][ T3990] md0: rw=2048, sector=0, nr_sectors = 8 limit=0
[ 1172.273871][ T3994] could not allocate digest TFM handle cryptd(blake2b-160)
[ 1172.660318][ T4024] loop5: detected capacity change from 0 to 256
[ 1172.788967][ T4027] Invalid source name
[ 1172.791219][ T4027] UBIFS error (pid: 4027): cannot open "ubifs", error -22
[ 1173.452890][ T4030] loop5: detected capacity change from 0 to 32768
[ 1173.697504][ T4030] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1173.732488][ T4030] XFS (loop5): Ending clean mount
[ 1173.741422][ T4030] XFS (loop5): Quotacheck needed: Please wait.
[ 1173.833097][ T4030] XFS (loop5): Quotacheck: Done.
[ 1173.867188][ T3260] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1174.301743][ T4075] sit1: entered promiscuous mode
[ 1174.304337][ T4075] sit1: entered allmulticast mode
[ 1174.457902][T22392] usb 1-1: new high-speed USB device number 121 using dummy_hcd
[ 1174.622629][T22392] usb 1-1: Using ep0 maxpacket: 16
[ 1174.631528][T22392] usb 1-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config
[ 1174.637437][T22392] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1174.643828][T22392] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1174.649504][T22392] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1174.654275][T22392] usb 1-1: Product: syz
[ 1174.657228][T22392] usb 1-1: Manufacturer: syz
[ 1174.659486][T22392] usb 1-1: SerialNumber: syz
[ 1174.871251][ T4096] netlink: 'syz.1.12345': attribute type 10 has an invalid length.
[ 1174.874749][ T4096] __nla_validate_parse: 2 callbacks suppressed
[ 1174.874763][ T4096] netlink: 1948 bytes leftover after parsing attributes in process `syz.1.12345'.
[ 1174.881212][ T4096] netlink: 24 bytes leftover after parsing attributes in process `syz.1.12345'.
[ 1175.052901][T22392] usb 1-1: 0:2 : does not exist
[ 1175.220218][ T4098] loop5: detected capacity change from 0 to 512
[ 1175.223729][ T4098] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 1175.231986][ T4098] EXT4-fs: Mount option(s) incompatible with ext3
[ 1175.245371][ T4098] gfs2: Unexpected value for 'barrier'
[ 1175.381053][    C0] vxcan1: j1939_tp_rxtimer: 0xffff88801f9cdc00: rx timeout, send abort
[ 1175.388060][ T4104] netlink: 116 bytes leftover after parsing attributes in process `syz.5.12349'.
[ 1175.394712][ T4104] netlink: 116 bytes leftover after parsing attributes in process `syz.5.12349'.
[ 1175.449874][T22392] usb 1-1: 5:0: failed to get current value for ch 0 (-22)
[ 1175.473787][T22392] usb 1-1: USB disconnect, device number 121
[ 1175.480911][   T33] audit: type=1326 audit(2000000167.165:943): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4107 comm="syz.5.12351" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f674a18ebe9 code=0x0
[ 1175.860897][    C0] vxcan1: j1939_tp_rxtimer: 0xffff88801f9cdc00: abort rx timeout. Force session deactivation
[ 1176.188560][T22392] usb 1-1: new high-speed USB device number 122 using dummy_hcd
[ 1176.351137][T22392] usb 1-1: Using ep0 maxpacket: 8
[ 1176.355726][T22392] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1176.360953][T22392] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 3
[ 1176.364956][T22392] usb 1-1: New USB device found, idVendor=05c6, idProduct=9215, bcdDevice=29.ac
[ 1176.368789][T22392] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1176.375105][T22392] usb 1-1: config 0 descriptor??
[ 1176.380703][T22392] qmi_wwan 1-1:0.0: probe with driver qmi_wwan failed with error -22
[ 1176.574655][ T6012] usb 1-1: USB disconnect, device number 122
[ 1178.363247][T26724] usb 1-1: new full-speed USB device number 123 using dummy_hcd
[ 1178.505689][T26724] usb 1-1: config index 0 descriptor too short (expected 69, got 36)
[ 1178.509540][T26724] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1178.520601][T26724] usb 1-1: New USB device found, idVendor=093a, idProduct=2622, bcdDevice=b7.89
[ 1178.525863][T26724] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1178.529604][T26724] usb 1-1: Product: syz
[ 1178.531764][T26724] usb 1-1: Manufacturer: syz
[ 1178.534403][T26724] usb 1-1: SerialNumber: syz
[ 1178.539332][T26724] usb 1-1: config 0 descriptor??
[ 1178.558464][T26724] gspca_main: gspca_pac7302-2.14.0 probing 093a:2622
[ 1178.658696][ T4153] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12370'.
[ 1178.817168][ T4158] loop5: detected capacity change from 0 to 16
[ 1178.822810][ T4158] erofs: Unknown parameter './bus'
[ 1179.217482][ T4169] loop7: detected capacity change from 16 to 0
[ 1179.339503][T26724] gspca_pac7302: reg_w() failed i: 78 v: 40 error -71
[ 1179.342499][T26724] gspca_pac7302 1-1:0.0: probe with driver gspca_pac7302 failed with error -71
[ 1179.347507][T26724] usb 1-1: USB disconnect, device number 123
[ 1180.449218][ T4229] loop5: detected capacity change from 0 to 512
[ 1180.453603][ T4229] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[ 1180.471520][ T4229] EXT4-fs error (device loop5): ext4_get_branch:178: inode #11: block 4294967295: comm syz.5.12406: invalid block
[ 1180.479787][ T4229] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.12406: invalid indirect mapped block 4294967295 (level 1)
[ 1180.492744][ T4229] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.12406: invalid indirect mapped block 4294967295 (level 1)
[ 1180.501618][ T4229] EXT4-fs (loop5): 2 truncates cleaned up
[ 1180.505353][ T4229] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1180.513760][ T4229] EXT4-fs (loop5): shut down requested (2)
[ 1180.534626][ T3260] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1180.590322][   T54] Bluetooth: hci1: unexpected event for opcode 0x2062
[ 1181.382387][ T4235] loop5: detected capacity change from 0 to 32768
[ 1181.403150][ T4235] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 1181.424748][ T4235] XFS (loop5): Ending clean mount
[ 1181.492903][ T3260] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 1181.624193][ T4256] Page cache invalidation failure on direct I/O.  Possible data corruption due to collision with buffered I/O!
[ 1181.629682][ T4256] File: /dev/nullb0 PID: 4256 Comm: syz.0.12414
[ 1182.275419][ T4262] loop5: detected capacity change from 0 to 128
[ 1182.317409][ T4262] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1182.324154][ T4262] ext4 filesystem being mounted at /109/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[ 1182.709102][ T3260] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1182.758749][ T4266] netlink: 'syz.1.12419': attribute type 1 has an invalid length.
[ 1182.767871][ T4266] netlink: 56 bytes leftover after parsing attributes in process `syz.1.12419'.
[ 1183.722223][T26724] usb 1-1: new high-speed USB device number 124 using dummy_hcd
[ 1183.867556][T26724] usb 1-1: config 0 has an invalid interface number: 219 but max is 0
[ 1183.871064][T26724] usb 1-1: config 0 has no interface number 0
[ 1183.873523][T26724] usb 1-1: config 0 interface 219 altsetting 0 endpoint 0xF has invalid maxpacket 1479, setting to 64
[ 1183.878209][T26724] usb 1-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=65.bf
[ 1183.881901][T26724] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1183.888280][T26724] usb 1-1: config 0 descriptor??
[ 1183.892887][T26724] rndis_host 1-1:0.219: invalid descriptor buffer length
[ 1183.896056][T26724] usb 1-1: bad CDC descriptors
[ 1183.898777][T26724] cdc_acm 1-1:0.219: invalid descriptor buffer length
[ 1184.095072][T22392] usb 1-1: USB disconnect, device number 124
[ 1184.505806][ T5965] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[ 1184.512646][ T5965] Bluetooth: hci1: Injecting HCI hardware error event
[ 1184.519958][ T5965] Bluetooth: hci1: hardware error 0x00
[ 1185.430533][ T4341] comedi comedi1: bad chanlist[0]=0x00000004 chan=4 range length=1
[ 1185.730103][ T4365] ip6tnl1: entered promiscuous mode
[ 1185.732924][ T4365] ip6tnl1: entered allmulticast mode
[ 1186.046166][ T6012] usb 1-1: new high-speed USB device number 125 using dummy_hcd
[ 1186.225397][ T6012] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1186.230260][ T6012] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1186.246520][ T6012] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 1186.250765][ T6012] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 1186.253973][ T6012] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1186.261584][ T6012] usb 1-1: config 0 descriptor??
[ 1186.272148][ T4411] loop5: detected capacity change from 0 to 2048
[ 1186.279185][ T4411] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1186.335122][ T4414] netlink: 'syz.5.12485': attribute type 1 has an invalid length.
[ 1186.484911][ T5965] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[ 1187.331772][ T6012] plantronics 0003:047F:FFFF.002E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[ 1187.339515][ T6012] usb 1-1: USB disconnect, device number 125
[ 1188.156483][T29840] tipc: Subscription rejected, illegal request
[ 1188.316286][ T4416] Set syz1 is full, maxelem 65536 reached
[ 1188.597022][ T4478] vcan0: MTU too low for tipc bearer
[ 1188.599676][ T4478] tipc: Enabling of bearer <eth:vcan0> rejected, failed to enable media
[ 1189.523746][ T4531] syzkaller1: entered promiscuous mode
[ 1189.534352][ T4531] syzkaller1: entered allmulticast mode
[ 1189.899037][ T4534] netdevsim netdevsim0: Firmware load for '../file0/../file0/../file0' refused, path contains '..' component
[ 1190.197313][ T4544] netlink: 6032 bytes leftover after parsing attributes in process `syz.0.12544'.
[ 1191.030307][ T4566] syz.1.12555 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[ 1191.112273][ T4559] loop5: detected capacity change from 0 to 32768
[ 1191.125094][ T4559] JBD2: Ignoring recovery information on journal
[ 1191.154724][ T4559] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[ 1191.192128][ T3260] ocfs2: Unmounting device (7,5) on (node local)
[ 1191.360002][   T33] audit: type=1326 audit(2000000183.828:944): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4580 comm="syz.5.12558" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f674a18ebe9 code=0x7ffc0000
[ 1191.378948][   T33] audit: type=1326 audit(2000000183.828:945): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4580 comm="syz.5.12558" exe="/syz-executor" sig=0 arch=c000003e syscall=327 compat=0 ip=0x7f674a18ebe9 code=0x7ffc0000
[ 1191.387386][   T33] audit: type=1326 audit(2000000183.828:946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4580 comm="syz.5.12558" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f674a18ebe9 code=0x7ffc0000
[ 1191.412781][   T33] audit: type=1326 audit(2000000183.828:947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4580 comm="syz.5.12558" exe="/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f674a18ebe9 code=0x7ffc0000
[ 1191.436949][   T33] audit: type=1326 audit(2000000183.828:948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4580 comm="syz.5.12558" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f674a18ebe9 code=0x7ffc0000
[ 1191.500884][ T4589] netlink: 248 bytes leftover after parsing attributes in process `syz.5.12564'.
[ 1192.353024][ T4602] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12570'.
[ 1192.355843][ T4602] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12570'.
[ 1192.506395][ T4611] netlink: 'syz.0.12574': attribute type 1 has an invalid length.
[ 1192.532797][ T4611] 8021q: adding VLAN 0 to HW filter on device bond6
[ 1192.545355][ T4611] gretap2: entered promiscuous mode
[ 1192.552382][ T4611] bond6: (slave gretap2): making interface the new active one
[ 1192.555573][ T4611] bond6: (slave gretap2): Enslaving as an active interface with an up link
[ 1193.559220][ T4634] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12584'.
[ 1194.446972][T26724] usb 1-1: new full-speed USB device number 126 using dummy_hcd
[ 1194.528669][ T4659] netlink: 36 bytes leftover after parsing attributes in process `syz.1.12596'.
[ 1194.540226][ T4661] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12597'.
[ 1194.595418][T26724] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1194.607766][T26724] usb 1-1: New USB device found, idVendor=056a, idProduct=032b, bcdDevice= 0.00
[ 1194.612769][T26724] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1194.619651][T26724] usb 1-1: config 0 descriptor??
[ 1194.654860][ T4669] No source specified
[ 1195.222894][T22392] usb 1-1: USB disconnect, device number 126
[ 1195.889404][ T4685] netlink: 8 bytes leftover after parsing attributes in process `syz.5.12607'.
[ 1195.985868][ T4693] netlink: 'syz.0.12611': attribute type 32 has an invalid length.
[ 1196.760203][ T4734] overlayfs: failed to clone upperpath
[ 1197.093977][  T972] usb 1-1: new high-speed USB device number 127 using dummy_hcd
[ 1197.236759][  T972] usb 1-1: Using ep0 maxpacket: 16
[ 1197.240818][  T972] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[ 1197.244961][  T972] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1197.249132][  T972] usb 1-1: New USB device found, idVendor=0458, idProduct=500f, bcdDevice= 0.00
[ 1197.252555][  T972] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1197.258082][  T972] usb 1-1: config 0 descriptor??
[ 1197.651226][  T972] kye 0003:0458:500F.0030: tablet report size too small, or kye_tablet_rdesc unexpectedly large
[ 1197.659998][  T972] kye 0003:0458:500F.0030: hidraw0: USB HID v0.09 Device [HID 0458:500f] on usb-dummy_hcd.0-1/input0
[ 1197.664312][  T972] kye 0003:0458:500F.0030: tablet-enabling feature report not found
[ 1197.668341][  T972] kye 0003:0458:500F.0030: tablet enabling failed
[ 1197.736046][ T4758] loop5: detected capacity change from 0 to 1024
[ 1197.754617][ T4758] hfsplus: unable to load nls mapping ""
[ 1197.756514][ T4761] netlink: 140 bytes leftover after parsing attributes in process `syz.1.12637'.
[ 1197.832421][ T4767] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1197.846605][  T972] usb 1-1: USB disconnect, device number 127
[ 1197.869670][ T4769] loop5: detected capacity change from 0 to 128
[ 1197.874586][ T4769] FAT-fs (loop5): Directory bread(block 414) failed
[ 1197.877644][ T4769] FAT-fs (loop5): Directory bread(block 415) failed
[ 1197.880236][ T4769] FAT-fs (loop5): Directory bread(block 416) failed
[ 1197.882840][ T4769] FAT-fs (loop5): Directory bread(block 417) failed
[ 1197.885489][ T4769] FAT-fs (loop5): Directory bread(block 418) failed
[ 1197.888116][ T4769] FAT-fs (loop5): Directory bread(block 419) failed
[ 1197.890737][ T4769] FAT-fs (loop5): Directory bread(block 420) failed
[ 1197.893290][ T4769] FAT-fs (loop5): Directory bread(block 421) failed
[ 1197.904187][ T4769] FAT-fs (loop5): Directory bread(block 414) failed
[ 1197.906878][ T4769] FAT-fs (loop5): Directory bread(block 415) failed
[ 1197.909916][ T4769] syz.5.12641: attempt to access beyond end of device
[ 1197.909916][ T4769] loop5: rw=3, sector=478, nr_sectors = 2 limit=128
[ 1197.917693][ T4769] syz.5.12641: attempt to access beyond end of device
[ 1197.917693][ T4769] loop5: rw=2051, sector=480, nr_sectors = 6 limit=128
[ 1199.623896][ T4804] CIFS: VFS: Malformed UNC in devname
[ 1199.861399][ T4813] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12660'.
[ 1199.864787][ T4813] netlink: 'syz.1.12660': attribute type 7 has an invalid length.
[ 1199.873744][ T4813] netlink: 'syz.1.12660': attribute type 8 has an invalid length.
[ 1199.878810][ T4813] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12660'.
[ 1200.275218][ T5992] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[ 1200.420697][ T5992] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1200.427623][ T5992] usb 1-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00
[ 1200.442321][ T5992] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1200.477246][ T5992] usb 1-1: config 0 descriptor??
[ 1200.896759][ T5992] waltop 0003:172F:0501.0031: item fetching failed at offset 5/7
[ 1200.904125][ T5992] waltop 0003:172F:0501.0031: probe with driver waltop failed with error -22
[ 1201.095994][T22392] usb 1-1: USB disconnect, device number 2
[ 1201.898456][ T4833] sg_write: data in/out 512/1 bytes for SCSI command 0xb7-- guessing data in;
[ 1201.898456][ T4833]    program syz.0.12670 not setting count and/or reply_len properly
[ 1201.942098][   T33] audit: type=1326 audit(2000000194.947:949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4834 comm="syz.0.12671" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d2df8ebe9 code=0x7ffc0000
[ 1201.959456][   T33] audit: type=1326 audit(2000000194.947:950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4834 comm="syz.0.12671" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d2df8ebe9 code=0x7ffc0000
[ 1201.979152][   T33] audit: type=1326 audit(2000000194.947:951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4834 comm="syz.0.12671" exe="/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f7d2df8ebe9 code=0x7ffc0000
[ 1201.991977][   T33] audit: type=1326 audit(2000000194.957:952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4836 comm="syz.0.12671" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7d2dfc14a5 code=0x7ffc0000
[ 1201.999727][   T33] audit: type=1326 audit(2000000194.957:953): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4834 comm="syz.0.12671" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d2df8ebe9 code=0x7ffc0000
[ 1202.007055][   T33] audit: type=1326 audit(2000000194.978:954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4834 comm="syz.0.12671" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d2df8ebe9 code=0x7ffc0000
[ 1202.016428][   T33] audit: type=1326 audit(2000000194.999:955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4834 comm="syz.0.12671" exe="/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f7d2df8d84a code=0x7ffc0000
[ 1202.024551][   T33] audit: type=1326 audit(2000000194.999:956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4834 comm="syz.0.12671" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7d2dfc14a5 code=0x7ffc0000
[ 1202.102435][   T33] audit: type=1326 audit(2000000195.115:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4836 comm="syz.0.12671" exe="/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f7d2df8ebe9 code=0x7ffc0000
[ 1202.181079][   T33] audit: type=1326 audit(2000000195.199:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4834 comm="syz.0.12671" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d2df8ebe9 code=0x7ffc0000
[ 1202.445714][ T4842] overlayfs: missing 'lowerdir'
[ 1203.653614][ T4876] binder: 4867:4876 ioctl c0306201 2000000003c0 returned -14
[ 1203.962651][ T4883] netlink: 'syz.1.12692': attribute type 16 has an invalid length.
[ 1203.965287][ T4883] netlink: 'syz.1.12692': attribute type 17 has an invalid length.
[ 1204.001042][T26724] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[ 1204.323708][T26724] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[ 1205.288326][ T4960] netlink: 4 bytes leftover after parsing attributes in process `syz.5.12727'.
[ 1206.436639][ T4987] netlink: 144 bytes leftover after parsing attributes in process `syz.1.12738'.
[ 1206.494256][ T4993] netlink: 24 bytes leftover after parsing attributes in process `syz.5.12740'.
[ 1207.107468][ T5018] netlink: 'syz.1.12752': attribute type 1 has an invalid length.
[ 1207.458208][ T5022] loop5: detected capacity change from 0 to 32768
[ 1207.527421][ T5034] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[ 1207.534165][ T5022] ERROR: (device loop5): dbAlloc: the hint is outside the map
[ 1207.534165][ T5022] 
[ 1207.538050][ T5022] ERROR: (device loop5): remounting filesystem as read-only
[ 1207.540316][ T5022] ialloc: diAlloc returned -5!
[ 1207.780134][  T972] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[ 1207.925838][  T972] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[ 1207.931019][  T972] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1207.943183][  T972] usb 1-1: config 0 descriptor??
[ 1207.947327][  T972] cp210x 1-1:0.0: cp210x converter detected
[ 1207.964435][ T5043] loop5: detected capacity change from 0 to 2048
[ 1207.967917][ T5043] EXT4-fs: inline encryption not supported
[ 1207.970584][ T5043] EXT4-fs: Ignoring removed oldalloc option
[ 1207.973344][ T5043] ext4: Unknown parameter 'appraise_type'
[ 1208.456884][  T972] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32
[ 1208.583967][ T5056] netlink: 8 bytes leftover after parsing attributes in process `syz.1.12769'.
[ 1208.655378][  T972] usb 1-1: cp210x converter now attached to ttyUSB0
[ 1208.861217][  T972] usb 1-1: USB disconnect, device number 3
[ 1208.876867][  T972] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[ 1208.881873][  T972] cp210x 1-1:0.0: device disconnected
[ 1208.950025][ T5080] netlink: 16 bytes leftover after parsing attributes in process `syz.5.12780'.
[ 1208.956699][ T5080] netlink: 16 bytes leftover after parsing attributes in process `syz.5.12780'.
[ 1209.097868][ T5093] usb usb1: check_ctrlrecip: process 5093 (syz.5.12786) requesting ep 01 but needs 81
[ 1209.700438][   T33] kauditd_printk_skb: 20 callbacks suppressed
[ 1209.700453][   T33] audit: type=1326 audit(2000000203.095:979): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5112 comm="syz.0.12795" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d2df8ebe9 code=0x7ffc0000
[ 1209.713285][   T33] audit: type=1326 audit(2000000203.095:980): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5112 comm="syz.0.12795" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d2df8ebe9 code=0x7ffc0000
[ 1209.724868][   T33] audit: type=1326 audit(2000000203.095:981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5112 comm="syz.0.12795" exe="/syz-executor" sig=0 arch=c000003e syscall=154 compat=0 ip=0x7f7d2df8ebe9 code=0x7ffc0000
[ 1209.735378][   T33] audit: type=1326 audit(2000000203.095:982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5112 comm="syz.0.12795" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d2df8ebe9 code=0x7ffc0000
[ 1209.744608][   T33] audit: type=1326 audit(2000000203.095:983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5112 comm="syz.0.12795" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7d2df8ebe9 code=0x7ffc0000
[ 1209.789093][ T5117] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12797'.
[ 1211.211468][ T5193] netlink: 'syz.0.12831': attribute type 33 has an invalid length.
[ 1211.216776][ T5193] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[ 1211.295596][   T33] audit: type=1400 audit(2000000204.764:984): apparmor="DENIED" operation="stack" class="file" info="label not found" error=-22 profile="unconfined" name="&" pid=5199 comm="syz.0.12836"
[ 1211.626192][ T5204] loop5: detected capacity change from 0 to 32768
[ 1212.174828][ T5262] overlayfs: failed to clone upperpath
[ 1212.245550][ T5264] loop5: detected capacity change from 0 to 512
[ 1212.261549][ T5264] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1213.651762][ T3260] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1214.230691][ T5318] 8021q: adding VLAN 0 to HW filter on device bond1
[ 1214.240475][ T5318] bond0: (slave bond1): Enslaving as an active interface with an up link
[ 1214.449147][   T33] audit: type=1326 audit(2000000208.082:985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5310 comm="syz.1.12879" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f57abb8ebe9 code=0x0
[ 1214.611168][ T5331] (unnamed net_device) (uninitialized): up delay (7) is not a multiple of miimon (3), value rounded to 6 ms
[ 1214.614738][ T5331] (unnamed net_device) (uninitialized): down delay (7) is not a multiple of miimon (3), value rounded to 6 ms
[ 1214.635376][ T5331] 8021q: adding VLAN 0 to HW filter on device bond2
[ 1214.727492][ T5339] netlink: 'syz.5.12889': attribute type 10 has an invalid length.
[ 1214.741595][ T5339] team0: Port device syz_tun added
[ 1214.852988][ T5342] ALSA: mixer_oss: invalid OSS volume 'DI'
[ 1216.078149][T26724] libceph: connect (1)[c::]:6789 error -22
[ 1216.080822][T26724] libceph: mon0 (1)[c::]:6789 connect error
[ 1216.338009][T26724] libceph: connect (1)[c::]:6789 error -22
[ 1216.340303][T26724] libceph: mon0 (1)[c::]:6789 connect error
[ 1216.833157][T26724] libceph: connect (1)[c::]:6789 error -22
[ 1216.836930][T26724] libceph: mon0 (1)[c::]:6789 connect error
[ 1216.858273][ T5371] ceph: No mds server is up or the cluster is laggy
[ 1217.168799][ T5389] netlink: 'syz.1.12910': attribute type 1 has an invalid length.
[ 1217.202575][ T5389] 8021q: adding VLAN 0 to HW filter on device bond8
[ 1217.235059][ T5389] bond8: (slave veth7): Enslaving as an active interface with a down link
[ 1217.258641][ T5389] 8021q: adding VLAN 0 to HW filter on device batadv1
[ 1217.261640][ T5389] bond8: (slave batadv1): dev_set_mac_address on slave failed! ALB mode requires that the base driver support setting the hw address also when the network device's interface is open
[ 1218.841013][ T5421] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode balance-tlb(5)
[ 1219.941963][   T33] audit: type=1326 audit(2000000726.843:986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5456 comm="syz.0.12940" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7d2df8ebe9 code=0x0
[ 1220.051065][ T5466] netlink: 'syz.1.12944': attribute type 5 has an invalid length.
[ 1220.085323][ T5468] loop5: detected capacity change from 0 to 1024
[ 1220.102678][ T5468] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[ 1220.109551][ T5468] ext4 filesystem being mounted at /240/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1220.142276][ T5468] EXT4-fs error (device loop5): ext4_map_blocks:814: inode #15: block 3: comm syz.5.12943: lblock 3 mapped to illegal pblock 3 (length 3)
[ 1220.159281][ T5468] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[ 1220.168107][ T5468] EXT4-fs (loop5): This should not happen!! Data will be lost
[ 1220.168107][ T5468] 
[ 1220.214582][ T9676] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[ 1220.226350][ T9676] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 36 with error 28
[ 1220.232060][ T9676] EXT4-fs (loop5): This should not happen!! Data will be lost
[ 1220.232060][ T9676] 
[ 1220.239518][ T9676] EXT4-fs (loop5): Total free blocks count 0
[ 1220.241921][ T9676] EXT4-fs (loop5): Free/Dirty block details
[ 1220.244233][ T9676] EXT4-fs (loop5): free_blocks=4293918720
[ 1220.246660][ T9676] EXT4-fs (loop5): dirty_blocks=48
[ 1220.250083][ T9676] EXT4-fs (loop5): Block reservation details
[ 1220.389992][ T5483] netlink: 12 bytes leftover after parsing attributes in process `syz.5.12949'.
[ 1220.446789][T26724] hid_parser_main: 74 callbacks suppressed
[ 1220.446814][T26724] hid-generic 0000:0000:0000.0032: unknown main item tag 0x0
[ 1220.464633][T26724] hid-generic 0000:0000:0000.0032: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[ 1220.940877][ T5496] netlink: 'syz.5.12955': attribute type 10 has an invalid length.
[ 1220.944427][ T5496] team0: Device dummy0 is up. Set it down before adding it as a team port
[ 1221.113483][ T5507] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.12958'.
[ 1221.119849][ T5502] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.12958'.
[ 1221.145682][ T5508] netlink: 16 bytes leftover after parsing attributes in process `syz.5.12959'.
[ 1222.052381][ T5524] syz.0.12965(5524): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored.
[ 1224.633734][ T5610] 9pnet: Could not find request transport: f0xffffffffffffffff0xffffffffffffffffWN%/`ְfp7.O3̒0͹:xޙS
[ 1225.313921][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1225.408291][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1226.249594][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1226.408783][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1227.330764][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1227.394954][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1227.445093][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1227.643103][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[ 1227.663681][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1227.869862][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1227.934706][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1229.348667][ T5640] batadv0: entered allmulticast mode
[ 1229.433283][ T5647] netlink: 'syz.1.13022': attribute type 2 has an invalid length.
[ 1229.587598][ T5662] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13028'.
[ 1229.603024][ T5664] netlink: 10 bytes leftover after parsing attributes in process `syz.5.13029'.
[ 1229.768436][ T5680] loop5: detected capacity change from 0 to 2048
[ 1229.813118][ T5680]  loop5: p2 < > p3 < p5 > p4
[ 1229.815091][ T5680] loop5: partition table partially beyond EOD, truncated
[ 1229.817969][ T5680] loop5: p2 start 4278190080 is beyond EOD, truncated
[ 1229.830667][ T5680] loop5: p4 size 8192 extends beyond EOD, truncated
[ 1229.834120][ T5680] loop5: p5 size 8192 extends beyond EOD, truncated
[ 1231.221619][ T5709] loop5: detected capacity change from 0 to 32768
[ 1231.226429][ T5709] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.13048 (5709)
[ 1231.236784][ T5709] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1231.240906][ T5709] BTRFS info (device loop5): using crc32c (crc32c-lib) checksum algorithm
[ 1231.244936][ T5709] BTRFS info (device loop5): disk space caching is enabled
[ 1231.247827][ T5709] BTRFS warning (device loop5): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[ 1231.283654][ T5709] BTRFS info (device loop5): rebuilding free space tree
[ 1231.301042][ T5709] BTRFS info (device loop5): disabling free space tree
[ 1231.304953][ T5709] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[ 1231.309990][ T5709] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[ 1231.345563][   T33] audit: type=1800 audit(2000000738.800:987): pid=5709 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.13048" name="file1" dev="loop5" ino=264 res=0 errno=0
[ 1231.899373][ T3260] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1232.283650][ T5772] macvtap1: entered promiscuous mode
[ 1232.286739][ T5772] 8021q: adding VLAN 0 to HW filter on device macvtap1
[ 1232.419359][ T5779] sctp: [Deprecated]: syz.5.13070 (pid 5779) Use of int in max_burst socket option.
[ 1232.419359][ T5779] Use struct sctp_assoc_value instead
[ 1232.515872][ T5786] syz.1.13073: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[ 1232.524891][ T5786] CPU: 1 UID: 0 PID: 5786 Comm: syz.1.13073 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[ 1232.524914][ T5786] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1232.524925][ T5786] Call Trace:
[ 1232.524933][ T5786]  <TASK>
[ 1232.524941][ T5786]  dump_stack_lvl+0x189/0x250
[ 1232.524969][ T5786]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1232.524990][ T5786]  ? __pfx__printk+0x10/0x10
[ 1232.525009][ T5786]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[ 1232.525027][ T5786]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[ 1232.525046][ T5786]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[ 1232.525065][ T5786]  warn_alloc+0x214/0x310
[ 1232.525087][ T5786]  ? stack_depot_save_flags+0x40/0x860
[ 1232.525108][ T5786]  ? __pfx_warn_alloc+0x10/0x10
[ 1232.525132][ T5786]  ? kasan_save_track+0x4f/0x80
[ 1232.525150][ T5786]  ? xskq_create+0x56/0x170
[ 1232.525167][ T5786]  ? xsk_init_queue+0xb0/0x110
[ 1232.525186][ T5786]  ? xsk_setsockopt+0x4dc/0x8d0
[ 1232.525200][ T5786]  ? do_sock_setsockopt+0x17c/0x1b0
[ 1232.525220][ T5786]  ? __x64_sys_setsockopt+0x13f/0x1b0
[ 1232.525234][ T5786]  ? do_syscall_64+0xfa/0x3b0
[ 1232.525254][ T5786]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1232.525276][ T5786]  __vmalloc_node_range_noprof+0x125/0x12f0
[ 1232.525319][ T5786]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[ 1232.525344][ T5786]  ? __kasan_kmalloc+0x93/0xb0
[ 1232.525364][ T5786]  vmalloc_user_noprof+0xad/0xf0
[ 1232.525385][ T5786]  ? xskq_create+0xbf/0x170
[ 1232.525403][ T5786]  xskq_create+0xbf/0x170
[ 1232.525423][ T5786]  xsk_init_queue+0xb0/0x110
[ 1232.525443][ T5786]  xsk_setsockopt+0x4dc/0x8d0
[ 1232.525462][ T5786]  ? __pfx_xsk_setsockopt+0x10/0x10
[ 1232.525479][ T5786]  ? __pfx_aa_sk_perm+0x10/0x10
[ 1232.525502][ T5786]  ? aa_sock_opt_perm+0xff/0x1b0
[ 1232.525517][ T5786]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[ 1232.525532][ T5786]  ? __pfx_xsk_setsockopt+0x10/0x10
[ 1232.525550][ T5786]  do_sock_setsockopt+0x17c/0x1b0
[ 1232.525575][ T5786]  __x64_sys_setsockopt+0x13f/0x1b0
[ 1232.525593][ T5786]  do_syscall_64+0xfa/0x3b0
[ 1232.525643][ T5786]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1232.525662][ T5786]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1232.525676][ T5786]  ? exc_page_fault+0x9f/0xf0
[ 1232.525695][ T5786]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1232.525709][ T5786] RIP: 0033:0x7f57abb8ebe9
[ 1232.525725][ T5786] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1232.525738][ T5786] RSP: 002b:00007f57aca22038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[ 1232.525753][ T5786] RAX: ffffffffffffffda RBX: 00007f57abdb5fa0 RCX: 00007f57abb8ebe9
[ 1232.525765][ T5786] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003
[ 1232.525774][ T5786] RBP: 00007f57abc11e19 R08: 0000000000000004 R09: 0000000000000000
[ 1232.525783][ T5786] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1232.525793][ T5786] R13: 00007f57abdb6038 R14: 00007f57abdb5fa0 R15: 00007fff20585b38
[ 1232.525825][ T5786]  </TASK>
[ 1232.525833][ T5786] Mem-Info:
[ 1232.655495][ T5786] active_anon:13360 inactive_anon:21783 isolated_anon:0
[ 1232.655495][ T5786]  active_file:11404 inactive_file:39668 isolated_file:0
[ 1232.655495][ T5786]  unevictable:18625 dirty:407 writeback:0
[ 1232.655495][ T5786]  slab_reclaimable:6762 slab_unreclaimable:66091
[ 1232.655495][ T5786]  mapped:18578 shmem:32099 pagetables:1310
[ 1232.655495][ T5786]  sec_pagetables:0 bounce:0
[ 1232.655495][ T5786]  kernel_misc_reclaimable:0
[ 1232.655495][ T5786]  free:207605 free_pcp:20023 free_cma:0
[ 1232.672872][ T5786] Node 0 active_anon:35156kB inactive_anon:66508kB active_file:6944kB inactive_file:27396kB unevictable:59476kB isolated(anon):0kB isolated(file):0kB mapped:61864kB dirty:1144kB writeback:0kB shmem:91504kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8152kB pagetables:3072kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[ 1232.683637][ T5786] Node 1 active_anon:18284kB inactive_anon:20624kB active_file:38672kB inactive_file:131276kB unevictable:15024kB isolated(anon):0kB isolated(file):0kB mapped:12448kB dirty:484kB writeback:0kB shmem:36892kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5256kB pagetables:2168kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[ 1232.695567][ T5786] Node 0 DMA free:15052kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:308kB local_pcp:308kB free_cma:0kB
[ 1232.705534][ T5786] lowmem_reserve[]: 0 811 811 811 811
[ 1232.707395][ T5786] Node 0 DMA32 free:121380kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:35156kB inactive_anon:66508kB active_file:6944kB inactive_file:27396kB unevictable:59476kB writepending:1144kB present:1556484kB managed:830956kB mlocked:0kB bounce:0kB free_pcp:32420kB local_pcp:17580kB free_cma:0kB
[ 1232.719052][ T5786] lowmem_reserve[]: 0 0 0 0 0
[ 1232.720742][ T5786] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB
[ 1232.730492][ T5786] lowmem_reserve[]: 0 0 854 854 854
[ 1232.732343][ T5786] Node 1 Normal free:235496kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:18284kB inactive_anon:20624kB active_file:38672kB inactive_file:131276kB unevictable:15024kB writepending:484kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:47800kB local_pcp:22320kB free_cma:0kB
[ 1232.743140][ T5786] lowmem_reserve[]: 0 0 0 0 0
[ 1232.745288][ T5786] Node 0 DMA: 1*4kB (M) 1*8kB (M) 0*16kB 2*32kB (ME) 2*64kB (ME) 2*128kB (ME) 1*256kB (E) 2*512kB (ME) 3*1024kB (UME) 3*2048kB (M) 1*4096kB (M) = 15052kB
[ 1232.751064][ T5786] Node 0 DMA32: 2067*4kB (UME) 837*8kB (UME) 1061*16kB (UME) 313*32kB (UME) 127*64kB (UME) 73*128kB (UME) 46*256kB (UME) 28*512kB (UM) 15*1024kB (M) 6*2048kB (UM) 2*4096kB (UM) = 121380kB
[ 1232.757107][ T5786] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[ 1232.762561][ T5786] Node 1 Normal: 84*4kB (UME) 293*8kB (UME) 171*16kB (UE) 218*32kB (UE) 132*64kB (UM) 177*128kB (UME) 106*256kB (UME) 46*512kB (UM) 22*1024kB (UME) 10*2048kB (UM) 24*4096kB (UM) = 235496kB
[ 1232.769255][ T5786] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB
[ 1232.772535][ T5786] Node 1 hugepages_total=1 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 1232.775571][ T5786] 99925 total pagecache pages
[ 1232.777918][ T5786] 0 pages in swap cache
[ 1232.779501][ T5786] Free swap  = 119532kB
[ 1232.781475][ T5786] Total swap = 124996kB
[ 1232.783151][ T5786] 786301 pages RAM
[ 1232.784620][ T5786] 0 pages HighMem/MovableOnly
[ 1232.787274][ T5786] 241330 pages reserved
[ 1232.788921][ T5786] 0 pages cma reserved
[ 1232.946016][ T5792] bridge_slave_0: invalid flags given to default FDB implementation
[ 1233.629633][ T5850] loop5: detected capacity change from 0 to 4096
[ 1233.637325][ T5850] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[ 1233.647758][ T5850] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1233.661956][ T5850] EXT4-fs (loop5): shut down requested (2)
[ 1233.688452][ T3260] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1234.005421][ T5858] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[ 1234.072993][ T5856] loop5: detected capacity change from 0 to 32768
[ 1234.094928][ T5856] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1234.126791][ T5856] XFS (loop5): Ending clean mount
[ 1234.146035][ T5856] XFS (loop5): Quotacheck needed: Please wait.
[ 1234.204293][ T5872] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13109'.
[ 1234.220535][ T5856] XFS (loop5): Quotacheck: Done.
[ 1234.269969][ T3260] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1235.747301][ T5920] netlink: 28 bytes leftover after parsing attributes in process `syz.5.13128'.
[ 1235.751510][ T5920] netlink: 'syz.5.13128': attribute type 7 has an invalid length.
[ 1235.754645][ T5920] netlink: 'syz.5.13128': attribute type 8 has an invalid length.
[ 1235.757930][ T5920] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13128'.
[ 1235.768781][ T5920] gretap0: entered promiscuous mode
[ 1235.774406][ T5920] batadv_slave_1: entered promiscuous mode
[ 1235.777605][ T5920] erspan0: entered promiscuous mode
[ 1236.048831][ T5936] netlink: 28 bytes leftover after parsing attributes in process `syz.5.13136'.
[ 1236.051948][ T5936] netlink: 28 bytes leftover after parsing attributes in process `syz.5.13136'.
[ 1236.055730][ T5936] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13136'.
[ 1236.241612][ T5943] rtc_cmos 00:04: Alarms can be up to one day in the future
[ 1237.207245][ T5952] macsec4: entered promiscuous mode
[ 1237.577296][ T5962] netlink: 40 bytes leftover after parsing attributes in process `syz.0.13146'.
[ 1238.826496][   T33] audit: type=1326 audit(2000000746.657:988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5983 comm="syz.1.13155" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f57abb8ebe9 code=0x0
[ 1239.508929][ T5993] loop5: detected capacity change from 0 to 16
[ 1239.512698][ T5993] MTD: Attempt to mount non-MTD device "/dev/loop5"
[ 1239.744040][ T6003] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13163'.
[ 1239.868023][ T5997] loop5: detected capacity change from 0 to 32768
[ 1239.871937][ T5997] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.13160 (5997)
[ 1239.878463][ T5997] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1239.883701][ T5997] BTRFS info (device loop5): using crc32c (crc32c-lib) checksum algorithm
[ 1239.886583][ T5997] BTRFS info (device loop5): using free-space-tree
[ 1239.936701][ T5997] BTRFS info (device loop5): rebuilding free space tree
[ 1240.022628][ T3260] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1240.897343][ T6031] loop5: detected capacity change from 0 to 40427
[ 1240.903846][ T6031] F2FS-fs (loop5): invalid crc value
[ 1240.982308][ T6031] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[ 1240.991333][ T6031] F2FS-fs (loop5): Start checkpoint disabled!
[ 1241.006626][ T6031] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[ 1241.040015][ T9676] kworker/u10:51: attempt to access beyond end of device
[ 1241.040015][ T9676] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[ 1241.048013][ T9676] CPU: 1 UID: 0 PID: 9676 Comm: kworker/u10:51 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[ 1241.048039][ T9676] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1241.048050][ T9676] Workqueue: writeback wb_workfn (flush-7:5)
[ 1241.048076][ T9676] Call Trace:
[ 1241.048084][ T9676]  <TASK>
[ 1241.048092][ T9676]  dump_stack_lvl+0x189/0x250
[ 1241.048117][ T9676]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1241.048134][ T9676]  ? __pfx_queue_work_on+0x10/0x10
[ 1241.048149][ T9676]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[ 1241.048168][ T9676]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 1241.048202][ T9676]  f2fs_handle_critical_error+0x37c/0x540
[ 1241.048230][ T9676]  f2fs_write_end_io+0x886/0xb60
[ 1241.048260][ T9676]  __submit_merged_bio+0x27a/0x6a0
[ 1241.048287][ T9676]  __submit_merged_write_cond+0x255/0x530
[ 1241.048311][ T9676]  f2fs_write_data_pages+0x261d/0x3000
[ 1241.048358][ T9676]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[ 1241.048387][ T9676]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[ 1241.048434][ T9676]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[ 1241.048453][ T9676]  ? look_up_lock_class+0x74/0x170
[ 1241.048477][ T9676]  ? trace_f2fs_writepages+0x7f/0x200
[ 1241.048495][ T9676]  ? f2fs_write_node_pages+0x478/0x6e0
[ 1241.048518][ T9676]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[ 1241.048547][ T9676]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[ 1241.048568][ T9676]  do_writepages+0x32e/0x550
[ 1241.048591][ T9676]  ? reacquire_held_locks+0x127/0x1d0
[ 1241.048604][ T9676]  ? writeback_sb_inodes+0x384/0x1010
[ 1241.048628][ T9676]  __writeback_single_inode+0x145/0xff0
[ 1241.048644][ T9676]  ? do_raw_spin_unlock+0x4d/0x240
[ 1241.048662][ T9676]  writeback_sb_inodes+0x6c7/0x1010
[ 1241.048699][ T9676]  ? __pfx_writeback_sb_inodes+0x10/0x10
[ 1241.048746][ T9676]  ? rcu_is_watching+0x15/0xb0
[ 1241.048769][ T9676]  wb_writeback+0x43b/0xaf0
[ 1241.048791][ T9676]  ? queue_io+0x341/0x590
[ 1241.048810][ T9676]  ? __pfx_wb_writeback+0x10/0x10
[ 1241.048833][ T9676]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1241.048851][ T9676]  wb_workfn+0x409/0xef0
[ 1241.048878][ T9676]  ? __pfx_wb_workfn+0x10/0x10
[ 1241.048925][ T9676]  ? __lock_acquire+0xab9/0xd20
[ 1241.048953][ T9676]  ? process_scheduled_works+0x9ef/0x17b0
[ 1241.048971][ T9676]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1241.048983][ T9676]  ? process_scheduled_works+0x9ef/0x17b0
[ 1241.048996][ T9676]  ? process_scheduled_works+0x9ef/0x17b0
[ 1241.049009][ T9676]  process_scheduled_works+0xae1/0x17b0
[ 1241.049046][ T9676]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1241.049068][ T9676]  worker_thread+0x8a0/0xda0
[ 1241.049092][ T9676]  kthread+0x711/0x8a0
[ 1241.049105][ T9676]  ? __pfx_worker_thread+0x10/0x10
[ 1241.049113][ T9676]  ? __pfx_kthread+0x10/0x10
[ 1241.049123][ T9676]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1241.049132][ T9676]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1241.049143][ T9676]  ? __pfx_kthread+0x10/0x10
[ 1241.049153][ T9676]  ret_from_fork+0x3fc/0x770
[ 1241.049164][ T9676]  ? __pfx_ret_from_fork+0x10/0x10
[ 1241.049182][ T9676]  ? __switch_to_asm+0x39/0x70
[ 1241.049193][ T9676]  ? __switch_to_asm+0x33/0x70
[ 1241.049202][ T9676]  ? __pfx_kthread+0x10/0x10
[ 1241.049212][ T9676]  ret_from_fork_asm+0x1a/0x30
[ 1241.049231][ T9676]  </TASK>
[ 1241.049236][ T9676] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[ 1241.387847][ T6052] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1242.278919][ T6089] netlink: 'syz.0.13191': attribute type 17 has an invalid length.
[ 1242.531847][ T6105] syz.0.13199: attempt to access beyond end of device
[ 1242.531847][ T6105] loop1: rw=2048, sector=0, nr_sectors = 8 limit=0
[ 1242.537680][ T6105] SQUASHFS error: Failed to read block 0x0: -5
[ 1242.660634][ T6114] netlink: 'syz.0.13201': attribute type 9 has an invalid length.
[ 1242.858667][ T6137] netlink: 16 bytes leftover after parsing attributes in process `syz.0.13214'.
[ 1242.903357][ T6142] netlink: 'syz.1.13213': attribute type 11 has an invalid length.
[ 1242.906120][ T6142] netlink: 36 bytes leftover after parsing attributes in process `syz.1.13213'.
[ 1242.970473][   T33] audit: type=1400 audit(2000000750.989:989): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=2626200DFFFFFFFFFFFFFF7FA6 pid=6148 comm="syz.5.13219"
[ 1243.118341][ T6161] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1243.195029][ T6170] netlink: 248 bytes leftover after parsing attributes in process `syz.5.13229'.
[ 1243.260703][ T6179] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13234'.
[ 1243.269174][ T6179] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13234'.
[ 1243.372407][ T6191] netlink: 28 bytes leftover after parsing attributes in process `syz.5.13239'.
[ 1243.375275][ T6191] netlink: 28 bytes leftover after parsing attributes in process `syz.5.13239'.
[ 1243.384810][ T6191] ip6gretap0: entered promiscuous mode
[ 1243.398339][ T6191] syz_tun: entered promiscuous mode
[ 1243.401140][ T6191] syz_tun: left promiscuous mode
[ 1243.403903][ T6191] ip6gretap0: left promiscuous mode
[ 1246.288424][ T6252] loop5: detected capacity change from 0 to 2048
[ 1246.296766][ T6252] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1246.351938][ T6257] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1246.653564][ T6273] delete_channel: no stack
[ 1246.756049][ T6279] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[ 1246.974157][ T6294] netlink: zone id is out of range
[ 1246.975937][ T6294] netlink: zone id is out of range
[ 1246.977624][ T6294] netlink: zone id is out of range
[ 1246.979724][ T6294] netlink: zone id is out of range
[ 1246.985489][ T6294] netlink: zone id is out of range
[ 1246.987550][ T6294] netlink: zone id is out of range
[ 1246.989200][ T6294] netlink: zone id is out of range
[ 1246.991604][ T6294] netlink: zone id is out of range
[ 1246.994191][ T6294] netlink: zone id is out of range
[ 1247.853752][   T33] audit: type=1326 audit(2000000756.118:990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6312 comm="syz.0.13289" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7d2df8ebe9 code=0x0
[ 1248.356390][ T6322] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13292'.
[ 1249.796776][   T33] audit: type=1326 audit(2000000758.163:991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6360 comm="syz.5.13309" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f674a18ebe9 code=0x7ffc0000
[ 1249.829731][   T33] audit: type=1326 audit(2000000758.163:992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6360 comm="syz.5.13309" exe="/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f674a18ebe9 code=0x7ffc0000
[ 1249.844416][   T33] audit: type=1326 audit(2000000758.163:993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6360 comm="syz.5.13309" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f674a18ebe9 code=0x7ffc0000
[ 1249.857278][   T33] audit: type=1326 audit(2000000758.163:994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6360 comm="syz.5.13309" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f674a18ebe9 code=0x7ffc0000
[ 1249.870886][   T33] audit: type=1326 audit(2000000758.163:995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6360 comm="syz.5.13309" exe="/syz-executor" sig=0 arch=c000003e syscall=269 compat=0 ip=0x7f674a18ebe9 code=0x7ffc0000
[ 1249.879559][   T33] audit: type=1326 audit(2000000758.163:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6360 comm="syz.5.13309" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f674a18ebe9 code=0x7ffc0000
[ 1249.904478][   T33] audit: type=1326 audit(2000000758.163:997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6360 comm="syz.5.13309" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f674a18ebe9 code=0x7ffc0000
[ 1250.109890][ T6392] CIFS mount error: No usable UNC path provided in device string!
[ 1250.109890][ T6392] 
[ 1250.113276][ T6392] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[ 1250.714361][ T6403] loop5: detected capacity change from 0 to 32768
[ 1250.729178][ T6403] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.13329 (6403)
[ 1250.758771][ T6403] BTRFS info (device loop5): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[ 1250.762922][ T6403] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm
[ 1250.768805][ T6403] BTRFS info (device loop5): using free-space-tree
[ 1251.353457][ T3260] BTRFS info (device loop5): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[ 1251.920855][ T6422] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1252.124434][ T6422] hsr0: left allmulticast mode
[ 1252.126349][ T6422] hsr_slave_0: left allmulticast mode
[ 1252.128402][ T6422] hsr_slave_1: left allmulticast mode
[ 1252.144032][ T6422] team0: left promiscuous mode
[ 1252.145906][ T6422] team_slave_0: left promiscuous mode
[ 1252.148124][ T6422] team_slave_1: left promiscuous mode
[ 1252.157960][ T6422] batman_adv: batadv0: Interface deactivated: gretap1
[ 1252.191327][ T9946] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1252.195435][ T9946] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1252.214013][ T9946] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1252.217905][ T9946] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1252.230035][ T9946] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1252.233424][ T9946] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1252.241369][ T9946] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1252.247014][ T9946] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1252.305136][ T6456] trusted_key: encrypted_key: keylen parameter is missing
[ 1252.469870][ T6471] netlink: 'syz.1.13352': attribute type 3 has an invalid length.
[ 1253.185723][ T6484] overlayfs: failed to resolve './file0/../file0': -2
[ 1253.193506][ T6486] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13360'.
[ 1253.198729][ T6486] net_ratelimit: 3 callbacks suppressed
[ 1253.198747][ T6486] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1254.252401][ T6525] netlink: 72 bytes leftover after parsing attributes in process `syz.1.13376'.
[ 1254.257917][ T6525] netlink: 72 bytes leftover after parsing attributes in process `syz.1.13376'.
[ 1254.366054][ T6529] overlayfs: conflicting options: userxattr,redirect_dir=follow
[ 1255.501783][ T6571] dvmrp0: entered allmulticast mode
[ 1257.494202][ T6595] netlink: 3176 bytes leftover after parsing attributes in process `syz.1.13409'.
[ 1258.116738][ T6609] netlink: 'syz.0.13415': attribute type 4 has an invalid length.
[ 1259.106985][ T6624] netlink: 168 bytes leftover after parsing attributes in process `syz.5.13422'.
[ 1259.677117][ T6632] loop5: detected capacity change from 0 to 40427
[ 1259.750876][ T6632] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1259.755749][ T6632] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[ 1259.771810][ T6632] F2FS-fs (loop5): Stopped filesystem due to reason: 0
[ 1263.993054][ T6747] loop5: detected capacity change from 0 to 4096
[ 1264.005906][ T6748] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1264.020637][ T6747] NILFS error (device loop5): nilfs_check_folio: bad entry in directory #2: rec_len is too small for name_len - offset=0, inode=2, rec_len=16, name_len=11
[ 1264.038256][ T6747] NILFS error (device loop5): nilfs_check_folio: bad entry in directory #2: rec_len is too small for name_len - offset=0, inode=2, rec_len=16, name_len=11
[ 1264.187303][ T6756] netlink: 168 bytes leftover after parsing attributes in process `syz.5.13483'.
[ 1265.462183][   T33] audit: type=1326 audit(2000000774.590:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6808 comm="syz.0.13507" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7d2df8ebe9 code=0x0
[ 1265.721129][ T6818] netlink: 'syz.1.13511': attribute type 29 has an invalid length.
[ 1265.727264][ T6818] netlink: 'syz.1.13511': attribute type 29 has an invalid length.
[ 1266.280576][ T6843] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13522'.
[ 1266.284430][ T6843] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13522'.
[ 1266.288274][ T6843] netlink: 'syz.1.13522': attribute type 6 has an invalid length.
[ 1266.291398][ T6843] netlink: 'syz.1.13522': attribute type 5 has an invalid length.
[ 1267.923271][ T6892] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13545'.
[ 1268.910797][ T6912] netlink: 60 bytes leftover after parsing attributes in process `syz.1.13555'.
[ 1268.914356][ T6912] netlink: 60 bytes leftover after parsing attributes in process `syz.1.13555'.
[ 1269.826775][ T6936] netlink: 'syz.1.13567': attribute type 29 has an invalid length.
[ 1269.830236][ T6936] netlink: 'syz.1.13567': attribute type 29 has an invalid length.
[ 1269.836311][ T6936] netlink: 500 bytes leftover after parsing attributes in process `syz.1.13567'.
[ 1270.809614][ T6946] loop5: detected capacity change from 0 to 32768
[ 1270.847597][ T6946] XFS (loop5): DAX unsupported by block device. Turning off DAX.
[ 1270.852070][ T6946] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1270.878401][ T6946] XFS (loop5): Ending clean mount
[ 1270.883917][ T6946] XFS (loop5): Quotacheck needed: Please wait.
[ 1270.963586][ T6946] XFS (loop5): Quotacheck: Done.
[ 1271.000064][ T3260] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1271.628574][ T6974] netfs: Couldn't get user pages (rc=-14)
[ 1272.701414][ T7023] bond9: entered allmulticast mode
[ 1272.703637][ T7023] 8021q: adding VLAN 0 to HW filter on device bond9
[ 1272.938950][ T7024] loop5: detected capacity change from 0 to 32768
[ 1272.957124][ T7024] XFS (loop5): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4
[ 1272.985452][ T7024] XFS (loop5): Ending clean mount
[ 1273.034986][ T7024] loop5: detected capacity change from 32768 to 64
[ 1273.043149][ T7024] XFS (loop5): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4
[ 1273.049787][ T7024] syz.5.13603: attempt to access beyond end of device
[ 1273.049787][ T7024] loop5: rw=432129, sector=384, nr_sectors = 64 limit=64
[ 1273.055942][   T60] XFS (loop5): log I/O error -5
[ 1273.060979][   T60] XFS (loop5): Filesystem has been shut down due to log error (0x2).
[ 1273.066780][   T60] XFS (loop5): Please unmount the filesystem and rectify the problem(s).
[ 1273.427442][ T7049] debugfs: 'hsr1' already exists in 'hsr'
[ 1273.429717][ T7049] Cannot create hsr debugfs directory
[ 1273.431738][ T7049] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[ 1273.441590][ T7049] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[ 1273.446477][ T7049] hsr1: entered allmulticast mode
[ 1273.448446][ T7049] bond0: entered allmulticast mode
[ 1273.454734][ T7049] 8021q: adding VLAN 0 to HW filter on device hsr1
[ 1273.564295][ T7059] IPVS: sed: SCTP 172.20.20.187:0 - no destination available
[ 1273.660841][ T7065] sp0: Synchronizing with TNC
[ 1273.771267][ T7073] loop5: detected capacity change from 0 to 1764
[ 1273.789269][ T7073] iso9660: Corrupted directory entry in block 2 of inode 1920
[ 1275.097698][ T7109] dlm: Unknown command passed to DLM device : 11
[ 1275.097698][ T7109] 
[ 1275.713818][ T7139] loop5: detected capacity change from 0 to 32768
[ 1275.718373][ T7139] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.13653 (7139)
[ 1275.727194][ T7139] BTRFS info (device loop5): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[ 1275.732890][ T7139] BTRFS info (device loop5): using xxhash64 (xxhash64-generic) checksum algorithm
[ 1275.737307][ T7139] BTRFS info (device loop5): using free-space-tree
[ 1275.798089][ T3260] BTRFS info (device loop5): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[ 1276.016508][ T7170] netlink: 'syz.5.13661': attribute type 12 has an invalid length.
[ 1276.372680][ T7186] loop5: detected capacity change from 0 to 16
[ 1276.376713][ T7186] erofs (device loop5): mounted with root inode @ nid 36.
[ 1276.383659][ T7186] erofs (device loop5): bogus dirent @ nid 36
[ 1276.386165][ T7186] erofs (device loop5): bogus dirent @ nid 36
[ 1276.696377][ T7209] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1277.421822][ T7243] netlink: 8 bytes leftover after parsing attributes in process `syz.1.13696'.
[ 1277.437066][ T7243] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13696'.
[ 1277.577488][ T6448] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[ 1277.744016][ T7263] netlink: 52 bytes leftover after parsing attributes in process `syz.5.13706'.
[ 1277.994399][ T7279] loop5: detected capacity change from 0 to 1024
[ 1277.997494][ T7279] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 1278.000966][ T7279] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[ 1278.004652][ T7279] EXT4-fs (loop5): stripe (3675) is not aligned with cluster size (16), stripe is disabled
[ 1278.017518][ T7279] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[ 1278.048605][ T3260] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1278.104061][   T13] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[ 1278.196236][ T6012] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[ 1278.325314][ T7295] loop5: detected capacity change from 0 to 512
[ 1278.336171][ T7297] syz_tun: entered allmulticast mode
[ 1278.341778][ T7296] syz_tun: left allmulticast mode
[ 1278.362260][ T7295] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1278.367403][ T7295] ext4 filesystem being mounted at /465/bus supports timestamps until 2038-01-19 (0x7fffffff)
[ 1278.461798][ T3260] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1279.739639][ T7361] netlink: 'syz.0.13749': attribute type 11 has an invalid length.
[ 1280.001288][ T7365] dvmrp0: tun_chr_ioctl cmd 1074025677
[ 1280.003994][ T7365] dvmrp0: linktype set to 768
[ 1280.610205][ T7374] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(8)
[ 1280.612766][ T7374] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[ 1280.632239][ T7374] vhci_hcd vhci_hcd.0: Device attached
[ 1280.882065][ T6012] usb 33-1: new high-speed USB device number 3 using vhci_hcd
[ 1281.369133][ T7375] vhci_hcd: connection reset by peer
[ 1281.385981][ T5975] vhci_hcd: stop threads
[ 1281.393171][ T5975] vhci_hcd: release socket
[ 1281.403131][ T5975] vhci_hcd: disconnect device
[ 1282.014837][ T7420] bridge_slave_0: entered promiscuous mode
[ 1282.019478][ T7420] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[ 1282.143041][   T33] audit: type=1804 audit(2000003368.072:999): pid=7427 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.13777" name="/newroot/473/bus" dev="tmpfs" ino=2475 res=1 errno=0
[ 1282.286327][ T7437] loop5: detected capacity change from 0 to 256
[ 1282.293961][ T7437] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[ 1282.482371][ T7441] loop5: detected capacity change from 0 to 32768
[ 1282.529830][ T7441] bcachefs (loop5): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[ 1282.529848][ T7441]   allowing incompatible features above 0.0: (unknown version)
[ 1282.529855][ T7441]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[ 1282.545951][ T7441] bcachefs (loop5): Using encoding defined by superblock: utf8-12.1.0
[ 1282.549372][ T7441] bcachefs (loop5): initializing new filesystem
[ 1282.565092][ T7441] bcachefs (loop5): going read-write
[ 1282.572971][ T7441] bcachefs (loop5): marking superblocks
[ 1282.611956][ T7441] bcachefs (loop5): initializing freespace
[ 1282.630376][ T7441] bcachefs (loop5): done initializing freespace
[ 1282.646227][ T7441] bcachefs (loop5): reading snapshots table
[ 1282.648355][ T7441] bcachefs (loop5): reading snapshots done
[ 1282.706747][ T7441] bcachefs (loop5): done starting filesystem
[ 1282.764428][ T3260] bcachefs (loop5): shutting down
[ 1282.770295][ T3260] bcachefs (loop5): going read-only
[ 1282.772425][ T3260] bcachefs (loop5): finished waiting for writes to stop
[ 1282.783307][ T3260] bcachefs (loop5): flushing journal and stopping allocators, journal seq 3
[ 1282.838333][ T3260] bcachefs (loop5): flushing journal and stopping allocators complete, journal seq 3
[ 1282.842665][ T3260] bcachefs (loop5): clean shutdown complete, journal seq 4
[ 1282.847702][ T3260] bcachefs (loop5): marking filesystem clean
[ 1282.859765][ T3260] bcachefs (loop5): shutdown complete
[ 1284.550871][ T7476] netlink: 28 bytes leftover after parsing attributes in process `syz.5.13793'.
[ 1284.554154][ T7476] netlink: 32 bytes leftover after parsing attributes in process `syz.5.13793'.
[ 1284.557230][ T7476] netlink: 28 bytes leftover after parsing attributes in process `syz.5.13793'.
[ 1284.562971][ T7476] netlink: 32 bytes leftover after parsing attributes in process `syz.5.13793'.
[ 1285.164289][ T7497] loop5: detected capacity change from 0 to 64
[ 1285.208905][ T7500] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13804'.
[ 1285.354930][ T7514] netlink: 4 bytes leftover after parsing attributes in process `syz.1.13810'.
[ 1285.729645][ T6012] vhci_hcd: vhci_device speed not set
[ 1286.096216][ T7542] loop5: detected capacity change from 0 to 256
[ 1286.140708][ T7542] FAT-fs (loop5): Directory bread(block 64) failed
[ 1286.143297][ T7542] FAT-fs (loop5): Directory bread(block 65) failed
[ 1286.152232][ T7542] FAT-fs (loop5): Directory bread(block 66) failed
[ 1286.154749][ T7542] FAT-fs (loop5): Directory bread(block 67) failed
[ 1286.164282][ T7542] FAT-fs (loop5): Directory bread(block 68) failed
[ 1286.170323][ T7542] FAT-fs (loop5): Directory bread(block 69) failed
[ 1286.177422][ T7542] FAT-fs (loop5): Directory bread(block 70) failed
[ 1286.179936][ T7542] FAT-fs (loop5): Directory bread(block 71) failed
[ 1286.182497][ T7542] FAT-fs (loop5): Directory bread(block 72) failed
[ 1286.185103][ T7542] FAT-fs (loop5): Directory bread(block 73) failed
[ 1286.200923][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[ 1287.898613][ T7585] 9pnet_fd: Insufficient options for proto=fd
[ 1288.996431][ T7585] loop5: detected capacity change from 0 to 40427
[ 1289.037049][ T7585] F2FS-fs (loop5): invalid crc value
[ 1289.199502][ T7585] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[ 1289.205530][ T7585] F2FS-fs (loop5): Start checkpoint disabled!
[ 1289.209718][ T7585] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[ 1289.342226][ T7615] tmpfs: Group quota block hardlimit too large.
[ 1290.836736][ T7684] syz.1.13886: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[ 1290.843785][ T7684] CPU: 0 UID: 0 PID: 7684 Comm: syz.1.13886 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[ 1290.843861][ T7684] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1290.843875][ T7684] Call Trace:
[ 1290.843884][ T7684]  <TASK>
[ 1290.843893][ T7684]  dump_stack_lvl+0x189/0x250
[ 1290.843923][ T7684]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1290.843941][ T7684]  ? __pfx__printk+0x10/0x10
[ 1290.843961][ T7684]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[ 1290.843980][ T7684]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[ 1290.843999][ T7684]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[ 1290.844019][ T7684]  warn_alloc+0x214/0x310
[ 1290.844044][ T7684]  ? stack_depot_save_flags+0x40/0x860
[ 1290.844067][ T7684]  ? __pfx_warn_alloc+0x10/0x10
[ 1290.844091][ T7684]  ? kasan_save_track+0x4f/0x80
[ 1290.844109][ T7684]  ? xskq_create+0x56/0x170
[ 1290.844127][ T7684]  ? xsk_init_queue+0xb0/0x110
[ 1290.844143][ T7684]  ? xsk_setsockopt+0x4dc/0x8d0
[ 1290.844158][ T7684]  ? do_sock_setsockopt+0x17c/0x1b0
[ 1290.844179][ T7684]  ? __x64_sys_setsockopt+0x13f/0x1b0
[ 1290.844192][ T7684]  ? do_syscall_64+0xfa/0x3b0
[ 1290.844210][ T7684]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1290.844230][ T7684]  __vmalloc_node_range_noprof+0x125/0x12f0
[ 1290.844275][ T7684]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[ 1290.844298][ T7684]  ? __kasan_kmalloc+0x93/0xb0
[ 1290.844319][ T7684]  vmalloc_user_noprof+0xad/0xf0
[ 1290.844337][ T7684]  ? xskq_create+0xbf/0x170
[ 1290.844355][ T7684]  xskq_create+0xbf/0x170
[ 1290.844375][ T7684]  xsk_init_queue+0xb0/0x110
[ 1290.844394][ T7684]  xsk_setsockopt+0x4dc/0x8d0
[ 1290.844412][ T7684]  ? __pfx_xsk_setsockopt+0x10/0x10
[ 1290.844429][ T7684]  ? __pfx_aa_sk_perm+0x10/0x10
[ 1290.844453][ T7684]  ? aa_sock_opt_perm+0xff/0x1b0
[ 1290.844470][ T7684]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[ 1290.844485][ T7684]  ? __pfx_xsk_setsockopt+0x10/0x10
[ 1290.844499][ T7684]  do_sock_setsockopt+0x17c/0x1b0
[ 1290.844522][ T7684]  __x64_sys_setsockopt+0x13f/0x1b0
[ 1290.844540][ T7684]  do_syscall_64+0xfa/0x3b0
[ 1290.844561][ T7684]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1290.844581][ T7684]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1290.844593][ T7684]  ? exc_page_fault+0x9f/0xf0
[ 1290.844613][ T7684]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1290.844628][ T7684] RIP: 0033:0x7f57abb8ebe9
[ 1290.844643][ T7684] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1290.844657][ T7684] RSP: 002b:00007f57aca22038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[ 1290.844675][ T7684] RAX: ffffffffffffffda RBX: 00007f57abdb5fa0 RCX: 00007f57abb8ebe9
[ 1290.844687][ T7684] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005
[ 1290.844696][ T7684] RBP: 00007f57abc11e19 R08: 0000000000000004 R09: 0000000000000000
[ 1290.844705][ T7684] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1290.844714][ T7684] R13: 00007f57abdb6038 R14: 00007f57abdb5fa0 R15: 00007fff20585b38
[ 1290.844737][ T7684]  </TASK>
[ 1290.964385][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1290.969355][ T7684] Mem-Info:
[ 1290.970858][ T7684] active_anon:13444 inactive_anon:21782 isolated_anon:0
[ 1290.970858][ T7684]  active_file:11404 inactive_file:39696 isolated_file:0
[ 1290.970858][ T7684]  unevictable:18625 dirty:348 writeback:0
[ 1290.970858][ T7684]  slab_reclaimable:6865 slab_unreclaimable:66086
[ 1290.970858][ T7684]  mapped:18575 shmem:32122 pagetables:1338
[ 1290.970858][ T7684]  sec_pagetables:0 bounce:0
[ 1290.970858][ T7684]  kernel_misc_reclaimable:0
[ 1290.970858][ T7684]  free:209726 free_pcp:22833 free_cma:0
[ 1290.990360][ T7684] Node 0 active_anon:35352kB inactive_anon:66504kB active_file:6944kB inactive_file:27396kB unevictable:59476kB isolated(anon):0kB isolated(file):0kB mapped:61860kB dirty:1052kB writeback:0kB shmem:91544kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:8140kB pagetables:3132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[ 1291.003311][ T7684] Node 1 active_anon:18424kB inactive_anon:20624kB active_file:38672kB inactive_file:131388kB unevictable:15024kB isolated(anon):0kB isolated(file):0kB mapped:12440kB dirty:340kB writeback:0kB shmem:36944kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5400kB pagetables:2220kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[ 1291.016451][ T7684] Node 0 DMA free:15052kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:308kB local_pcp:0kB free_cma:0kB
[ 1291.028258][ T7684] lowmem_reserve[]: 0 811 811 811 811
[ 1291.030812][ T7684] Node 0 DMA32 free:124920kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:35352kB inactive_anon:66436kB active_file:6944kB inactive_file:27396kB unevictable:59476kB writepending:1052kB present:1556484kB managed:830956kB mlocked:0kB bounce:0kB free_pcp:47604kB local_pcp:17800kB free_cma:0kB
[ 1291.044558][ T7684] lowmem_reserve[]: 0 0 0 0 0
[ 1291.046686][ T7684] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:116kB free_cma:0kB
[ 1291.059491][ T7684] lowmem_reserve[]: 0 0 854 854 854
[ 1291.061804][ T7684] Node 1 Normal free:240440kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:18356kB inactive_anon:20624kB active_file:38672kB inactive_file:131388kB unevictable:15024kB writepending:340kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:43492kB local_pcp:24140kB free_cma:0kB
[ 1291.075444][ T7684] lowmem_reserve[]: 0 0 0 0 0
[ 1291.077543][ T7684] Node 0 DMA: 1*4kB (M) 1*8kB (M) 0*16kB 2*32kB (ME) 2*64kB (ME) 2*128kB (ME) 1*256kB (E) 2*512kB (ME) 3*1024kB (UME) 3*2048kB (M) 1*4096kB (M) = 15052kB
[ 1291.084214][ T7684] Node 0 DMA32: 664*4kB (UME) 1131*8kB (UME) 1244*16kB (UME) 482*32kB (UME) 201*64kB (UME) 68*128kB (UME) 38*256kB (UME) 9*512kB (U) 15*1024kB (UM) 11*2048kB (UM) 1*4096kB (U) = 124920kB
[ 1291.092054][ T7684] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[ 1291.098952][ T7684] Node 1 Normal: 1194*4kB (UME) 936*8kB (UME) 193*16kB (UME) 80*32kB (UME) 234*64kB (UM) 215*128kB (UME) 107*256kB (UME) 50*512kB (UM) 22*1024kB (UME) 3*2048kB (UM) 24*4096kB (UM) = 240376kB
[ 1291.106855][ T7684] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB
[ 1291.110892][ T7684] Node 1 hugepages_total=1 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[ 1291.114827][ T7684] 99938 total pagecache pages
[ 1291.116816][ T7684] 0 pages in swap cache
[ 1291.118496][ T7684] Free swap  = 119532kB
[ 1291.120212][ T7684] Total swap = 124996kB
[ 1291.122256][ T7684] 786301 pages RAM
[ 1291.123884][ T7684] 0 pages HighMem/MovableOnly
[ 1291.125870][ T7684] 241330 pages reserved
[ 1291.127822][ T7684] 0 pages cma reserved
[ 1291.954041][ T7705] loop5: detected capacity change from 0 to 8192
[ 1291.970857][ T7705] syz.5.13895: attempt to access beyond end of device
[ 1291.970857][ T7705] loop5: rw=0, sector=57847, nr_sectors = 1 limit=8192
[ 1291.976980][ T7705] Buffer I/O error on dev loop5, logical block 57847, async page read
[ 1291.981420][ T7705] syz.5.13895: attempt to access beyond end of device
[ 1291.981420][ T7705] loop5: rw=0, sector=57847, nr_sectors = 1 limit=8192
[ 1291.986957][ T7705] Buffer I/O error on dev loop5, logical block 57847, async page read
[ 1291.991172][   T33] audit: type=1800 audit(2000003378.446:1000): pid=7705 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.13895" name="file2" dev="loop5" ino=1048923 res=0 errno=0
[ 1292.274725][ T7715] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13900'.
[ 1292.278392][ T7715] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1292.340476][ T7715] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1292.344434][ T7715] batadv_slave_1 (unregistering): left promiscuous mode
[ 1292.455104][ T7717] netlink: 'syz.1.13901': attribute type 4 has an invalid length.
[ 1292.458338][ T7717] netlink: 17 bytes leftover after parsing attributes in process `syz.1.13901'.
[ 1292.686874][ T7735] loop5: detected capacity change from 0 to 1024
[ 1292.690150][ T7735] EXT4-fs: Ignoring removed orlov option
[ 1292.697633][ T7735] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled
[ 1292.726397][ T7735] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1292.743246][   T33] audit: type=1800 audit(2000003379.233:1001): pid=7735 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.13910" name="file1" dev="loop5" ino=15 res=0 errno=0
[ 1292.798657][ T3260] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1294.898894][ T7803] netlink: 6 bytes leftover after parsing attributes in process `syz.0.13941'.
[ 1296.162092][ T7845] vivid-007: =================  START STATUS  =================
[ 1296.170689][ T7845] vivid-007: Generate PTS: true
[ 1296.173628][ T7845] vivid-007: Generate SCR: true
[ 1296.182814][ T7845] tpg source WxH: 320x240 (Y'CbCr)
[ 1296.184974][ T7845] tpg field: 1
[ 1296.191331][ T7845] tpg crop: (0,0)/320x240
[ 1296.201414][ T7845] tpg compose: (0,0)/320x240
[ 1296.203329][ T7845] tpg colorspace: 8
[ 1296.208853][ T7845] tpg transfer function: 0/0
[ 1296.218966][ T7845] tpg Y'CbCr encoding: 0/0
[ 1296.220827][ T7845] tpg quantization: 0/0
[ 1296.222487][ T7845] tpg RGB range: 0/2
[ 1296.224076][ T7845] vivid-007: ==================  END STATUS  ==================
[ 1296.267069][ T7850] : renamed from bond_slave_0
[ 1296.272253][ T7848] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(11)
[ 1296.274942][ T7848] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[ 1296.290697][ T7848] vhci_hcd vhci_hcd.0: Device attached
[ 1297.351111][ T5316] usb 43-1: new high-speed USB device number 2 using vhci_hcd
[ 1297.390157][ T7851] vhci_hcd: connection reset by peer
[ 1297.392368][ T5679] vhci_hcd: stop threads
[ 1297.394047][ T5679] vhci_hcd: release socket
[ 1297.396710][ T5679] vhci_hcd: disconnect device
[ 1298.593639][ T7893] netlink: 'syz.1.13981': attribute type 21 has an invalid length.
[ 1298.596958][ T7893] netlink: 'syz.1.13981': attribute type 1 has an invalid length.
[ 1298.600013][ T7893] netlink: 100 bytes leftover after parsing attributes in process `syz.1.13981'.
[ 1299.386329][ T7914] netlink: 'syz.1.13989': attribute type 1 has an invalid length.
[ 1299.433458][ T7914] 8021q: adding VLAN 0 to HW filter on device bond11
[ 1299.451910][ T7920] vlan0: entered allmulticast mode
[ 1299.463677][ T7920] veth1: entered allmulticast mode
[ 1299.468823][ T7920] bond11: (slave vlan0): making interface the new active one
[ 1299.472765][ T7920] bond11: (slave vlan0): Enslaving as an active interface with an up link
[ 1299.495456][ T7922] netlink: 60 bytes leftover after parsing attributes in process `syz.0.13992'.
[ 1299.499230][ T7922] netlink: 60 bytes leftover after parsing attributes in process `syz.0.13992'.
[ 1299.660217][ T7930] fuse: Bad value for 'fd'
[ 1300.791137][ T7947] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1300.821452][   T33] audit: type=1326 audit(2000003387.717:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7948 comm="syz.1.14004" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57abb8ebe9 code=0x7ffc0000
[ 1300.829325][ T7951] netlink: 'syz.0.14005': attribute type 1 has an invalid length.
[ 1300.833185][ T7951] netlink: 'syz.0.14005': attribute type 1 has an invalid length.
[ 1300.839508][ T7951] netlink: 216 bytes leftover after parsing attributes in process `syz.0.14005'.
[ 1300.848625][   T33] audit: type=1326 audit(2000003387.717:1003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7948 comm="syz.1.14004" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57abb8ebe9 code=0x7ffc0000
[ 1300.862556][   T33] audit: type=1326 audit(2000003387.717:1004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7948 comm="syz.1.14004" exe="/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f57abb8ebe9 code=0x7ffc0000
[ 1300.876150][   T33] audit: type=1326 audit(2000003387.717:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7948 comm="syz.1.14004" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57abb8ebe9 code=0x7ffc0000
[ 1300.885262][   T33] audit: type=1326 audit(2000003387.717:1006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7948 comm="syz.1.14004" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57abb8ebe9 code=0x7ffc0000
[ 1300.898483][   T33] audit: type=1326 audit(2000003387.717:1007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7948 comm="syz.1.14004" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f57abb8ebe9 code=0x7ffc0000
[ 1300.915476][   T33] audit: type=1326 audit(2000003387.717:1008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7948 comm="syz.1.14004" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57abb8ebe9 code=0x7ffc0000
[ 1300.924543][   T33] audit: type=1326 audit(2000003387.717:1009): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7948 comm="syz.1.14004" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57abb8ebe9 code=0x7ffc0000
[ 1302.325758][ T8011] netlink: 4280 bytes leftover after parsing attributes in process `syz.0.14031'.
[ 1302.620695][ T5316] vhci_hcd: vhci_device speed not set
[ 1302.675170][ T8016] netlink: 348 bytes leftover after parsing attributes in process `syz.5.14033'.
[ 1302.752543][ T8017] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1303.628770][ T8065] loop5: detected capacity change from 0 to 2048
[ 1303.632020][ T8065] EXT4-fs: Ignoring removed bh option
[ 1303.665333][ T8065] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1303.689613][ T3260] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1303.915515][ T5316] IPVS: starting estimator thread 0...
[ 1304.682232][ T8083] loop5: detected capacity change from 0 to 40427
[ 1304.690248][ T8083] F2FS-fs (loop5): invalid crc value
[ 1304.732762][ T8083] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[ 1304.736126][ T8083] F2FS-fs (loop5): Start checkpoint disabled!
[ 1304.739073][ T8083] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[ 1304.778181][ T8081] IPVS: using max 60 ests per chain, 144000 per kthread
[ 1304.809201][T17810] kworker/u10:0: attempt to access beyond end of device
[ 1304.809201][T17810] loop5: rw=1, sector=45096, nr_sectors = 8 limit=40427
[ 1304.815487][T17810] kworker/u10:0: attempt to access beyond end of device
[ 1304.815487][T17810] loop5: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[ 1304.823448][T17810] CPU: 1 UID: 0 PID: 17810 Comm: kworker/u10:0 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[ 1304.823471][T17810] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1304.823481][T17810] Workqueue: writeback wb_workfn (flush-7:5)
[ 1304.823506][T17810] Call Trace:
[ 1304.823513][T17810]  <TASK>
[ 1304.823521][T17810]  dump_stack_lvl+0x189/0x250
[ 1304.823555][T17810]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1304.823572][T17810]  ? __pfx_queue_work_on+0x10/0x10
[ 1304.823587][T17810]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[ 1304.823608][T17810]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 1304.823636][T17810]  f2fs_handle_critical_error+0x37c/0x540
[ 1304.823697][T17810]  f2fs_write_end_io+0x886/0xb60
[ 1304.823729][T17810]  __submit_merged_bio+0x27a/0x6a0
[ 1304.823754][T17810]  __submit_merged_write_cond+0x255/0x530
[ 1304.823781][T17810]  f2fs_write_data_pages+0x261d/0x3000
[ 1304.823831][T17810]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[ 1304.823865][T17810]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[ 1304.823913][T17810]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[ 1304.823944][T17810]  ? trace_f2fs_writepages+0x7f/0x200
[ 1304.823965][T17810]  ? f2fs_write_node_pages+0x478/0x6e0
[ 1304.823989][T17810]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[ 1304.824020][T17810]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[ 1304.824042][T17810]  do_writepages+0x32e/0x550
[ 1304.824067][T17810]  ? reacquire_held_locks+0x127/0x1d0
[ 1304.824082][T17810]  ? writeback_sb_inodes+0x384/0x1010
[ 1304.824108][T17810]  __writeback_single_inode+0x145/0xff0
[ 1304.824126][T17810]  ? do_raw_spin_unlock+0x4d/0x240
[ 1304.824148][T17810]  writeback_sb_inodes+0x6c7/0x1010
[ 1304.824167][T17810]  ? unwind_next_frame+0xa5/0x2390
[ 1304.824186][T17810]  ? unwind_next_frame+0xa5/0x2390
[ 1304.824218][T17810]  ? __pfx_writeback_sb_inodes+0x10/0x10
[ 1304.824275][T17810]  ? rcu_is_watching+0x15/0xb0
[ 1304.824300][T17810]  wb_writeback+0x43b/0xaf0
[ 1304.824325][T17810]  ? queue_io+0x341/0x590
[ 1304.824345][T17810]  ? __pfx_wb_writeback+0x10/0x10
[ 1304.824371][T17810]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1304.824393][T17810]  wb_workfn+0x409/0xef0
[ 1304.824424][T17810]  ? __pfx_wb_workfn+0x10/0x10
[ 1304.824444][T17810]  ? __lock_acquire+0xab9/0xd20
[ 1304.824467][T17810]  ? process_scheduled_works+0x9ef/0x17b0
[ 1304.824479][T17810]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1304.824487][T17810]  ? process_scheduled_works+0x9ef/0x17b0
[ 1304.824494][T17810]  ? process_scheduled_works+0x9ef/0x17b0
[ 1304.824503][T17810]  process_scheduled_works+0xae1/0x17b0
[ 1304.824527][T17810]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1304.824550][T17810]  worker_thread+0x8a0/0xda0
[ 1304.824561][T17810]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 1304.824575][T17810]  ? __kthread_parkme+0x7b/0x200
[ 1304.824591][T17810]  kthread+0x711/0x8a0
[ 1304.824603][T17810]  ? __pfx_worker_thread+0x10/0x10
[ 1304.824610][T17810]  ? __pfx_kthread+0x10/0x10
[ 1304.824621][T17810]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1304.824630][T17810]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1304.824664][T17810]  ? __pfx_kthread+0x10/0x10
[ 1304.824675][T17810]  ret_from_fork+0x3fc/0x770
[ 1304.824687][T17810]  ? __pfx_ret_from_fork+0x10/0x10
[ 1304.824699][T17810]  ? __switch_to_asm+0x39/0x70
[ 1304.824709][T17810]  ? __switch_to_asm+0x33/0x70
[ 1304.824718][T17810]  ? __pfx_kthread+0x10/0x10
[ 1304.824728][T17810]  ret_from_fork_asm+0x1a/0x30
[ 1304.824747][T17810]  </TASK>
[ 1304.824752][T17810] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[ 1306.020962][ T8119] netlink: 'syz.5.14080': attribute type 2 has an invalid length.
[ 1306.023496][ T8119] netlink: 132 bytes leftover after parsing attributes in process `syz.5.14080'.
[ 1306.411316][ T8128] tipc: Enabling of bearer <udp:syz2> rejected, already enabled
[ 1306.736376][ T8146] bond0: Unable to set up delay as MII monitoring is disabled
[ 1307.182578][   T33] audit: type=1326 audit(2000003394.395:1010): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8156 comm="syz.1.14098" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f57abb8ebe9 code=0x0
[ 1307.778060][ T8175] batadv_slave_1: entered allmulticast mode
[ 1308.002518][ T8189] netlink: zone id is out of range
[ 1308.047445][ T8189] netlink: set zone limit has 4 unknown bytes
[ 1308.079252][ T8189] netlink: del zone limit has 4 unknown bytes
[ 1310.231016][ T8256] openvswitch: netlink: Either Ethernet header or EtherType is required.
[ 1312.098782][ T8321] overlayfs: failed to verify upper (2374/file0, ino=12290, err=-116)
[ 1312.102763][ T8321] overlayfs: failed to verify index dir 'upper' xattr
[ 1312.105596][ T8321] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index.
[ 1313.099781][ T8346] IPv6: addrconf: prefix option has invalid lifetime
[ 1313.380665][ T8373] loop5: detected capacity change from 0 to 2048
[ 1313.384686][ T8373] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1313.396409][ T8374] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1313.427436][ T8373] syz.5.14197: attempt to access beyond end of device
[ 1313.427436][ T8373] loop5: rw=0, sector=262216, nr_sectors = 2 limit=2048
[ 1313.432593][ T8373] NILFS (loop5): I/O error reading meta-data file (ino=6, block-offset=1)
[ 1313.538445][ T8385] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1313.547408][ T8386] netlink: 104 bytes leftover after parsing attributes in process `syz.0.14202'.
[ 1313.552663][ T8385] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 1316.156664][ T8415] ptrace attach of "/syz-executor exec"[16957] was attempted by "ߖ鷴)Qo  \x0dvҢ9T{-92\x0ap_3j nޭOa)bkߟ.\x0aK~򜛱تKOkF^3B3){\x5crHBd,X\x09\x0b3c\x22&W\x22\x1bTL'\x09!_Nhٹ=n>a (G6茷A+&ϋЈUߍa{@{\x0b[ɸYacAzÂGl:d<]u~v!9,?Ŵ>\x22ar\x1blKڬY*VS8ȁ6]kK.=`#\x07x!gMDR*OLK\x0c}oKbA>{@aMdnQj̖5)];r,L\x0c=\x0dWAE n`>Ɵs-3`yfeH^/$L1&NP\x0d1D<\x07cPd(EdtaE!ҭ \x09@ݞHG~H<D$\x0crX`-ͪ/IFEtI;{*W\x0c\x0a:ÈV'\x0c8sejke~ɫRLB*\x0b-r@\x07VMšv%OymWGܕ|ʤ=tU?hK0uӣٜ0G 'b,\x22ߊ;2Ո'G/޳7Wd\x5c!w%xg\x22x[4!NlQ(\x0a@[+ ؐǬ[[zN sB&X>%3{- ^Qǚ4e3\x0b>sF̗H]+\x
[ 1316.557416][ T8417] loop5: detected capacity change from 0 to 128
[ 1316.615102][ T8417] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1316.620268][ T8417] ext4 filesystem being mounted at /584/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 1316.664339][ T3260] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1316.718837][ T8423] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1316.775246][ T8431] netlink: 20 bytes leftover after parsing attributes in process `syz.0.14223'.
[ 1316.948250][ T8441] openvswitch: netlink: Missing key (keys=40, expected=2000)
[ 1318.136949][ T8492] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14252'.
[ 1318.682746][ T8528] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14270'.
[ 1319.741350][ T8546] o2cb: This node has not been configured.
[ 1319.746524][ T8546] o2cb: Cluster check failed. Fix errors before retrying.
[ 1319.749042][ T8546] (syz.5.14278,8546,1):user_dlm_register:674 ERROR: status = -22
[ 1319.752745][ T8546] (syz.5.14278,8546,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "bus"
[ 1321.119768][ T8563] loop5: detected capacity change from 0 to 32768
[ 1321.157821][ T8563] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1321.305979][ T8563] XFS (loop5): Ending clean mount
[ 1321.380706][ T8563] XFS (loop5): Quotacheck needed: Please wait.
[ 1321.537473][ T8563] XFS (loop5): Quotacheck: Done.
[ 1321.713620][ T3260] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1322.825429][ T8629] netlink: 'syz.0.14311': attribute type 30 has an invalid length.
[ 1322.831773][ T8629] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14311'.
[ 1322.837671][ T8629] (unnamed net_device) (uninitialized): option arp_missed_max: mode dependency failed, not supported in mode 802.3ad(4)
[ 1322.867316][ T8631] netlink: 8 bytes leftover after parsing attributes in process `syz.1.14312'.
[ 1322.871090][ T8631] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14312'.
[ 1323.906894][ T8669] netlink: 'syz.0.14329': attribute type 27 has an invalid length.
[ 1325.608348][ T8720] loop5: detected capacity change from 0 to 32768
[ 1325.624772][ T8720] jfs_lookup: iget failed on inum 4
[ 1325.626803][ T8720] jfs_lookup: iget failed on inum 4
[ 1326.015169][ T8766] binder_alloc: 8764: binder_alloc_buf, no vma
[ 1326.217526][ T8775] loop5: detected capacity change from 0 to 256
[ 1326.471826][ T8784] openvswitch: netlink: Unknown key attributes 2
[ 1326.526314][ T8786] loop5: detected capacity change from 0 to 128
[ 1326.539022][ T8786] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1326.544555][ T8786] ext4 filesystem being mounted at /609/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 1326.573562][ T3260] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1328.756290][ T8821] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14397'.
[ 1329.018904][ T8831] netlink: 'syz.5.14402': attribute type 1 has an invalid length.
[ 1329.026120][ T8831] netlink: 224 bytes leftover after parsing attributes in process `syz.5.14402'.
[ 1329.273995][ T8839] affs: No valid root block on device nullb0
[ 1330.346948][ T8845] loop5: detected capacity change from 0 to 32768
[ 1330.373312][ T8845] ocfs2: Mounting device (7,5) on (node local, slot 0) with writeback data mode.
[ 1330.463558][ T3260] ocfs2: Unmounting device (7,5) on (node local)
[ 1330.873968][ T8861] netlink: 52 bytes leftover after parsing attributes in process `syz.5.14412'.
[ 1332.691701][ T8906] loop5: detected capacity change from 0 to 4096
[ 1332.976405][ T8913] loop5: detected capacity change from 0 to 256
[ 1333.280855][ T8913] FAT-fs (loop5): Directory bread(block 64) failed
[ 1333.283396][ T8913] FAT-fs (loop5): Directory bread(block 65) failed
[ 1333.286190][ T8913] FAT-fs (loop5): Directory bread(block 66) failed
[ 1333.292930][ T8913] FAT-fs (loop5): Directory bread(block 67) failed
[ 1333.295778][ T8913] FAT-fs (loop5): Directory bread(block 68) failed
[ 1333.299178][ T8913] FAT-fs (loop5): Directory bread(block 69) failed
[ 1333.301973][ T8913] FAT-fs (loop5): Directory bread(block 70) failed
[ 1333.304843][ T8913] FAT-fs (loop5): Directory bread(block 71) failed
[ 1333.311246][ T8913] FAT-fs (loop5): Directory bread(block 72) failed
[ 1333.314620][ T8913] FAT-fs (loop5): Directory bread(block 73) failed
[ 1334.220945][   T33] audit: type=1326 audit(2000003678.776:1011): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8917 comm="syz.5.14437" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f674a18ebe9 code=0x7fc00000
[ 1334.545887][ T8952] netlink: 12 bytes leftover after parsing attributes in process `syz.5.14450'.
[ 1334.614405][ T8954] GUP no longer grows the stack in syz.1.14451 (8954): 200000005000-200000008000 (200000004000)
[ 1334.621981][ T8954] CPU: 1 UID: 0 PID: 8954 Comm: syz.1.14451 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[ 1334.622005][ T8954] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1334.622014][ T8954] Call Trace:
[ 1334.622021][ T8954]  <TASK>
[ 1334.622029][ T8954]  dump_stack_lvl+0x189/0x250
[ 1334.622056][ T8954]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1334.622074][ T8954]  ? __pfx__printk+0x10/0x10
[ 1334.622093][ T8954]  ? find_vma+0xe7/0x160
[ 1334.622123][ T8954]  fixup_user_fault+0x661/0x720
[ 1334.622148][ T8954]  fault_in_user_writeable+0x72/0xe0
[ 1334.622226][ T8954]  futex_lock_pi+0x773/0xa90
[ 1334.622257][ T8954]  ? __pfx_futex_lock_pi+0x10/0x10
[ 1334.622302][ T8954]  ? __pfx_futex_wake_mark+0x10/0x10
[ 1334.622336][ T8954]  ? __pfx_userfaultfd_unmap_complete+0x10/0x10
[ 1334.622363][ T8954]  do_futex+0x292/0x420
[ 1334.622386][ T8954]  ? __pfx_do_futex+0x10/0x10
[ 1334.622404][ T8954]  ? __vm_munmap+0x301/0x3d0
[ 1334.622426][ T8954]  __se_sys_futex+0x36f/0x400
[ 1334.622451][ T8954]  ? __pfx___se_sys_futex+0x10/0x10
[ 1334.622469][ T8954]  ? rcu_is_watching+0x15/0xb0
[ 1334.622487][ T8954]  ? __x64_sys_futex+0x21/0xf0
[ 1334.622505][ T8954]  do_syscall_64+0xfa/0x3b0
[ 1334.622522][ T8954]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1334.622540][ T8954]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1334.622553][ T8954]  ? exc_page_fault+0x9f/0xf0
[ 1334.622574][ T8954]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1334.622585][ T8954] RIP: 0033:0x7f57abb8ebe9
[ 1334.622599][ T8954] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1334.622614][ T8954] RSP: 002b:00007f57aca22038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 1334.622630][ T8954] RAX: ffffffffffffffda RBX: 00007f57abdb5fa0 RCX: 00007f57abb8ebe9
[ 1334.622640][ T8954] RDX: 00000000fffffffd RSI: 000000000000008d RDI: 0000200000004000
[ 1334.622649][ T8954] RBP: 00007f57abc11e19 R08: 0000000000000000 R09: 0000000000000000
[ 1334.622657][ T8954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1334.622664][ T8954] R13: 00007f57abdb6038 R14: 00007f57abdb5fa0 R15: 00007fff20585b38
[ 1334.622687][ T8954]  </TASK>
[ 1335.028276][ T8965] netlink: 16 bytes leftover after parsing attributes in process `syz.1.14453'.
[ 1335.256600][ T8969] netlink: 182 bytes leftover after parsing attributes in process `syz.5.14457'.
[ 1335.995998][ T8982] netlink: 'syz.1.14463': attribute type 23 has an invalid length.
[ 1336.660420][ T8996] netlink: 165 bytes leftover after parsing attributes in process `syz.1.14469'.
[ 1337.399092][ T9026] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14483'.
[ 1337.421021][ T9026] macvtap1: entered promiscuous mode
[ 1337.431222][ T9026] erspan0: entered promiscuous mode
[ 1337.433222][ T9026] macvtap1: entered allmulticast mode
[ 1337.435147][ T9026] erspan0: entered allmulticast mode
[ 1337.470394][ T9026] erspan0: left allmulticast mode
[ 1337.472540][ T9026] erspan0: left promiscuous mode
[ 1337.711991][ T9040] loop5: detected capacity change from 0 to 512
[ 1337.721631][ T9040] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #15: comm syz.5.14490: casefold flag without casefold feature
[ 1337.731325][ T9040] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.14490: couldn't read orphan inode 15 (err -117)
[ 1337.743264][ T9040] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1337.825106][ T9048] syz.1.14493: attempt to access beyond end of device
[ 1337.825106][ T9048] loop3: rw=4096, sector=2, nr_sectors = 2 limit=0
[ 1337.830490][ T9048] EXT4-fs (loop3): unable to read superblock
[ 1337.895432][ T3260] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1338.833571][ T9062] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[ 1338.836811][ T9062] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[ 1338.875324][ T9066] loop5: detected capacity change from 0 to 512
[ 1338.895090][ T9066] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1338.902063][ T9066] ext4 filesystem being mounted at /650/bus supports timestamps until 2038-01-19 (0x7fffffff)
[ 1338.914342][ T9066] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #2: comm syz.5.14501: corrupted inode contents
[ 1338.919677][ T9066] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #2: comm syz.5.14501: mark_inode_dirty error
[ 1338.931469][ T9066] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #2: comm syz.5.14501: corrupted inode contents
[ 1338.947900][ T9066] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #2: comm syz.5.14501: corrupted inode contents
[ 1338.952784][ T9066] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #2: comm syz.5.14501: mark_inode_dirty error
[ 1338.958639][ T9066] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #2: comm syz.5.14501: corrupted inode contents
[ 1338.963380][ T9066] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #2: comm syz.5.14501: mark_inode_dirty error
[ 1338.968981][ T9066] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #2: comm syz.5.14501: corrupted inode contents
[ 1338.973748][ T9066] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #2: comm syz.5.14501: mark_inode_dirty error
[ 1338.981031][ T9066] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #2: comm syz.5.14501: corrupted inode contents
[ 1339.005914][ T3260] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1339.202136][ T9090] loop5: detected capacity change from 0 to 256
[ 1340.653822][ T9108] netlink: 64 bytes leftover after parsing attributes in process `syz.0.14518'.
[ 1341.213648][ T5965] Bluetooth: hci3: Opcode 0x1003 failed: -110
[ 1341.620075][ T9158] netlink: 'syz.1.14542': attribute type 11 has an invalid length.
[ 1341.661456][ T9160] overlay: ./cgroup is not a directory
[ 1341.697698][ T9162] netlink: zone id is out of range
[ 1342.393732][ T9179] loop5: detected capacity change from 0 to 8
[ 1342.434810][ T9179] SQUASHFS error: Failed to read block 0x33c: -5
[ 1342.438335][ T9179] SQUASHFS error: Unable to read metadata cache entry [33a]
[ 1342.442382][ T9179] SQUASHFS error: Unable to read inode 0xa7
[ 1344.722119][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[ 1347.423263][ T9275] netlink: 12 bytes leftover after parsing attributes in process `syz.5.14596'.
[ 1348.648309][ T9306] trusted_key: encrypted_key: keylen for the ecryptfs format must be equal to 64 bytes
[ 1349.174039][ T9321] openvswitch: netlink: IP tunnel TTL not specified.
[ 1351.158727][ T9370] loop5: detected capacity change from 0 to 40427
[ 1351.164362][ T9370] F2FS-fs (loop5): invalid crc value
[ 1351.220878][ T9370] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1351.225894][ T9370] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4
[ 1352.566193][ T9409] loop5: detected capacity change from 0 to 512
[ 1352.583452][ T9409] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1352.589926][ T9409] ext4 filesystem being mounted at /694/bus supports timestamps until 2038-01-19 (0x7fffffff)
[ 1352.605690][ T9409] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #2: comm syz.5.14657: corrupted inode contents
[ 1352.611115][ T9409] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #2: comm syz.5.14657: mark_inode_dirty error
[ 1352.617645][ T9409] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #2: comm syz.5.14657: corrupted inode contents
[ 1352.631613][ T9409] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #2: comm syz.5.14657: corrupted inode contents
[ 1352.637548][ T9409] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #2: comm syz.5.14657: mark_inode_dirty error
[ 1352.645412][ T9409] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #2: comm syz.5.14657: corrupted inode contents
[ 1352.650768][ T9409] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #2: comm syz.5.14657: mark_inode_dirty error
[ 1352.656305][ T9409] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #2: comm syz.5.14657: corrupted inode contents
[ 1352.672491][ T9409] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #2: comm syz.5.14657: mark_inode_dirty error
[ 1352.734603][ T3260] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1352.822759][   T33] audit: type=1326 audit(2000003698.302:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9419 comm="syz.5.14659" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f674a18ebe9 code=0x7ffc0000
[ 1352.834165][   T33] audit: type=1326 audit(2000003698.302:1013): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9419 comm="syz.5.14659" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f674a18ebe9 code=0x7ffc0000
[ 1352.844430][   T33] audit: type=1326 audit(2000003698.323:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9419 comm="syz.5.14659" exe="/syz-executor" sig=0 arch=c000003e syscall=453 compat=0 ip=0x7f674a18ebe9 code=0x7ffc0000
[ 1352.854106][   T33] audit: type=1326 audit(2000003698.323:1015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9419 comm="syz.5.14659" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f674a18ebe9 code=0x7ffc0000
[ 1352.863576][   T33] audit: type=1326 audit(2000003698.323:1016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9419 comm="syz.5.14659" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f674a18ebe9 code=0x7ffc0000
[ 1353.176115][ T9446] netlink: 'syz.5.14671': attribute type 1 has an invalid length.
[ 1353.221239][ T9446] 8021q: adding VLAN 0 to HW filter on device bond4
[ 1353.835087][ T9446] bond4 (unregistering): Released all slaves
[ 1353.903250][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1354.686945][ T9478] netlink: 'syz.1.14687': attribute type 2 has an invalid length.
[ 1355.085294][ T9485] netlink: 24 bytes leftover after parsing attributes in process `syz.1.14689'.
[ 1355.376208][ T9494] bond0 (unregistering): Released all slaves
[ 1355.457031][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1355.489317][ T9502] block nbd5: NBD_DISCONNECT
[ 1355.856636][ T9513] netlink: 'syz.5.14701': attribute type 1 has an invalid length.
[ 1355.860341][ T9513] netlink: 'syz.5.14701': attribute type 1 has an invalid length.
[ 1356.152933][ T9515] loop5: detected capacity change from 0 to 40427
[ 1356.156979][ T9515] F2FS-fs: heap/no_heap options were deprecated
[ 1356.161337][ T9515] F2FS-fs (loop5): build fault injection rate: 19
[ 1356.164477][ T9515] F2FS-fs (loop5): build fault injection type: 0x77e8c
[ 1356.179794][ T9515] F2FS-fs (loop5): invalid crc value
[ 1356.195913][ T9515] F2FS-fs (loop5): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_ra_meta_pages+0x1cb/0x970
[ 1356.208899][ T9515] F2FS-fs (loop5): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_page_bio+0x18f/0xaa0
[ 1356.215167][    C0] F2FS-fs (loop5): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[ 1356.263086][ T9515] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1356.267782][ T9515] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[ 1356.288585][ T9515] F2FS-fs (loop5): inject page alloc in f2fs_grab_cache_folio of f2fs_new_node_folio+0x131/0xa40
[ 1356.298864][ T9515] F2FS-fs (loop5): inject dquot initialize in f2fs_dquot_initialize of f2fs_new_inode+0x509/0x1050
[ 1356.315792][   T33] audit: type=1800 audit(2000003701.966:1017): pid=9515 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.14702" name="file1" dev="loop5" ino=17 res=0 errno=0
[ 1356.343975][ T3260] F2FS-fs (loop5): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_page_write+0x585/0x21b0
[ 1356.350395][ T3260] F2FS-fs (loop5): invalid blkaddr: 5637, type: 7, run fsck to fix.
[ 1356.353864][ T3260] syz-executor: attempt to access beyond end of device
[ 1356.353864][ T3260] loop5: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[ 1356.361129][ T3260] CPU: 0 UID: 0 PID: 3260 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[ 1356.361151][ T3260] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1356.361160][ T3260] Call Trace:
[ 1356.361166][ T3260]  <TASK>
[ 1356.361173][ T3260]  dump_stack_lvl+0x189/0x250
[ 1356.361200][ T3260]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1356.361217][ T3260]  ? __pfx_queue_work_on+0x10/0x10
[ 1356.361231][ T3260]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[ 1356.361250][ T3260]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 1356.361278][ T3260]  f2fs_handle_critical_error+0x37c/0x540
[ 1356.361305][ T3260]  f2fs_write_end_io+0x886/0xb60
[ 1356.361337][ T3260]  __submit_merged_bio+0x27a/0x6a0
[ 1356.361363][ T3260]  __submit_merged_write_cond+0x255/0x530
[ 1356.361389][ T3260]  f2fs_write_data_pages+0x261d/0x3000
[ 1356.361475][ T3260]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[ 1356.361538][ T3260]  ? __mod_zone_page_state+0xd7/0x140
[ 1356.361568][ T3260]  ? folios_put_refs+0x560/0x640
[ 1356.361596][ T3260]  ? __lock_acquire+0xab9/0xd20
[ 1356.361631][ T3260]  ? do_raw_spin_lock+0x121/0x290
[ 1356.361659][ T3260]  ? do_raw_spin_unlock+0x4d/0x240
[ 1356.361676][ T3260]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[ 1356.361698][ T3260]  do_writepages+0x32e/0x550
[ 1356.361728][ T3260]  ? do_raw_spin_unlock+0x4d/0x240
[ 1356.361749][ T3260]  filemap_fdatawrite+0x199/0x240
[ 1356.361769][ T3260]  ? __pfx_filemap_fdatawrite+0x10/0x10
[ 1356.361833][ T3260]  ? do_raw_spin_unlock+0x4d/0x240
[ 1356.361855][ T3260]  f2fs_sync_dirty_inodes+0x31f/0x830
[ 1356.361884][ T3260]  f2fs_write_checkpoint+0x95a/0x1df0
[ 1356.361921][ T3260]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[ 1356.361981][ T3260]  ? kill_f2fs_super+0x298/0x6c0
[ 1356.362001][ T3260]  kill_f2fs_super+0x2c3/0x6c0
[ 1356.362021][ T3260]  ? __pfx_kill_f2fs_super+0x10/0x10
[ 1356.362033][ T3260]  ? radix_tree_delete_item+0x2b6/0x400
[ 1356.362059][ T3260]  ? shrinker_free+0x2ce/0x3e0
[ 1356.362076][ T3260]  deactivate_locked_super+0xbc/0x130
[ 1356.362097][ T3260]  cleanup_mnt+0x425/0x4c0
[ 1356.362113][ T3260]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1356.362134][ T3260]  task_work_run+0x1d4/0x260
[ 1356.362156][ T3260]  ? __pfx_task_work_run+0x10/0x10
[ 1356.362172][ T3260]  ? __x64_sys_umount+0x122/0x160
[ 1356.362196][ T3260]  ? exit_to_user_mode_loop+0x40/0x110
[ 1356.362219][ T3260]  exit_to_user_mode_loop+0xec/0x110
[ 1356.362239][ T3260]  do_syscall_64+0x2bd/0x3b0
[ 1356.362257][ T3260]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1356.362275][ T3260]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1356.362289][ T3260]  ? exc_page_fault+0x9f/0xf0
[ 1356.362317][ T3260]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1356.362331][ T3260] RIP: 0033:0x7f674a18ff17
[ 1356.362345][ T3260] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[ 1356.362356][ T3260] RSP: 002b:00007ffd2d7dd1e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 1356.362371][ T3260] RAX: 0000000000000000 RBX: 00007f674a211c05 RCX: 00007f674a18ff17
[ 1356.362381][ T3260] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd2d7dd2a0
[ 1356.362390][ T3260] RBP: 00007ffd2d7dd2a0 R08: 0000000000000000 R09: 0000000000000000
[ 1356.362398][ T3260] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd2d7de330
[ 1356.362434][ T3260] R13: 00007f674a211c05 R14: 000000000014f50e R15: 00007ffd2d7de370
[ 1356.362461][ T3260]  </TASK>
[ 1356.362468][ T3260] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[ 1356.513424][ T3260] CPU: 1 UID: 0 PID: 3260 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[ 1356.513444][ T3260] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1356.513450][ T3260] Call Trace:
[ 1356.513454][ T3260]  <TASK>
[ 1356.513459][ T3260]  dump_stack_lvl+0x189/0x250
[ 1356.513479][ T3260]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1356.513489][ T3260]  ? __pfx_queue_work_on+0x10/0x10
[ 1356.513499][ T3260]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[ 1356.513511][ T3260]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 1356.513526][ T3260]  f2fs_handle_critical_error+0x37c/0x540
[ 1356.513542][ T3260]  f2fs_write_end_io+0x886/0xb60
[ 1356.513560][ T3260]  __submit_merged_bio+0x27a/0x6a0
[ 1356.513575][ T3260]  __submit_merged_write_cond+0x255/0x530
[ 1356.513589][ T3260]  f2fs_write_data_pages+0x261d/0x3000
[ 1356.513616][ T3260]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[ 1356.513647][ T3260]  ? __mod_zone_page_state+0xd7/0x140
[ 1356.513663][ T3260]  ? folios_put_refs+0x560/0x640
[ 1356.513679][ T3260]  ? __lock_acquire+0xab9/0xd20
[ 1356.513695][ T3260]  ? do_raw_spin_lock+0x121/0x290
[ 1356.513710][ T3260]  ? do_raw_spin_unlock+0x4d/0x240
[ 1356.513719][ T3260]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[ 1356.513736][ T3260]  do_writepages+0x32e/0x550
[ 1356.513753][ T3260]  ? do_raw_spin_unlock+0x4d/0x240
[ 1356.513764][ T3260]  filemap_fdatawrite+0x199/0x240
[ 1356.513776][ T3260]  ? __pfx_filemap_fdatawrite+0x10/0x10
[ 1356.513808][ T3260]  ? do_raw_spin_unlock+0x4d/0x240
[ 1356.513819][ T3260]  f2fs_sync_dirty_inodes+0x31f/0x830
[ 1356.513834][ T3260]  f2fs_write_checkpoint+0x95a/0x1df0
[ 1356.513854][ T3260]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[ 1356.513884][ T3260]  ? kill_f2fs_super+0x298/0x6c0
[ 1356.513896][ T3260]  kill_f2fs_super+0x2c3/0x6c0
[ 1356.513906][ T3260]  ? __pfx_kill_f2fs_super+0x10/0x10
[ 1356.513913][ T3260]  ? radix_tree_delete_item+0x2b6/0x400
[ 1356.513927][ T3260]  ? shrinker_free+0x2ce/0x3e0
[ 1356.513938][ T3260]  deactivate_locked_super+0xbc/0x130
[ 1356.513950][ T3260]  cleanup_mnt+0x425/0x4c0
[ 1356.513960][ T3260]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1356.513973][ T3260]  task_work_run+0x1d4/0x260
[ 1356.513986][ T3260]  ? __pfx_task_work_run+0x10/0x10
[ 1356.513995][ T3260]  ? __x64_sys_umount+0x122/0x160
[ 1356.514008][ T3260]  ? exit_to_user_mode_loop+0x40/0x110
[ 1356.514021][ T3260]  exit_to_user_mode_loop+0xec/0x110
[ 1356.514032][ T3260]  do_syscall_64+0x2bd/0x3b0
[ 1356.514042][ T3260]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1356.514052][ T3260]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1356.514060][ T3260]  ? exc_page_fault+0x9f/0xf0
[ 1356.514070][ T3260]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1356.514078][ T3260] RIP: 0033:0x7f674a18ff17
[ 1356.514088][ T3260] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[ 1356.514096][ T3260] RSP: 002b:00007ffd2d7dd1e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 1356.514106][ T3260] RAX: 0000000000000000 RBX: 00007f674a211c05 RCX: 00007f674a18ff17
[ 1356.514112][ T3260] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd2d7dd2a0
[ 1356.514117][ T3260] RBP: 00007ffd2d7dd2a0 R08: 0000000000000000 R09: 0000000000000000
[ 1356.514122][ T3260] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd2d7de330
[ 1356.514128][ T3260] R13: 00007f674a211c05 R14: 000000000014f50e R15: 00007ffd2d7de370
[ 1356.514142][ T3260]  </TASK>
[ 1356.514146][ T3260] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[ 1357.140369][ T9535] overlayfs: failed to clone upperpath
[ 1357.386875][   T33] audit: type=1800 audit(2000003703.089:1018): pid=9550 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.14715" name="SYSV00000000" dev="hugetlbfs" ino=1 res=0 errno=0
[ 1357.468235][ T9554] loop5: detected capacity change from 0 to 64
[ 1358.982878][ T9611] netlink: 16 bytes leftover after parsing attributes in process `syz.1.14733'.
[ 1360.780348][ T9640] overlayfs: missing 'lowerdir'
[ 1361.358303][ T9665] openvswitch: netlink: Message has 1 unknown bytes.
[ 1361.361296][ T9665] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1361.986647][ T9699] nftables ruleset with unbound set
[ 1362.413852][ T9714] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14777'.
[ 1364.328176][ T9773] loop5: detected capacity change from 0 to 1024
[ 1364.844482][T19548] hfsplus: b-tree write err: -5, ino 4
[ 1364.883324][ T9775] netlink: 22 bytes leftover after parsing attributes in process `syz.5.14803'.
[ 1365.456418][ T9800] netlink: 52 bytes leftover after parsing attributes in process `syz.5.14815'.
[ 1365.838563][ T9804] loop5: detected capacity change from 0 to 40427
[ 1365.843078][ T9804] F2FS-fs (loop5): build fault injection rate: 25
[ 1365.845340][ T9804] F2FS-fs (loop5): build fault injection type: 0x7698c
[ 1365.849225][ T9804] F2FS-fs (loop5): invalid crc value
[ 1365.857299][ T9804] F2FS-fs (loop5): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_ra_meta_pages+0x1cb/0x970
[ 1365.866895][ T9804] F2FS-fs (loop5): inject page alloc in f2fs_grab_cache_folio of f2fs_ra_meta_pages+0x615/0x970
[ 1365.901141][ T9804] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1365.908668][ T9804] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[ 1365.919137][ T9804] F2FS-fs (loop5): inject too big dir depth in f2fs_add_regular_entry of f2fs_add_dentry+0xda/0x1d0
[ 1365.962103][ T3260] F2FS-fs (loop5): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_page_write+0x585/0x21b0
[ 1365.966770][ T3260] F2FS-fs (loop5): invalid blkaddr: 513, type: 10, run fsck to fix.
[ 1366.002215][ T9825] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14827'.
[ 1366.005518][ T9825] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14827'.
[ 1366.209822][ T9839] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14826'.
[ 1366.538682][ T9846] loop5: detected capacity change from 0 to 4096
[ 1366.555611][ T9846] ntfs3(loop5): Different NTFS sector size (2048) and media sector size (512).
[ 1366.562660][ T9846] ntfs3(loop5): Failed to load $MFT.
[ 1366.721943][ T9855] netlink: 'syz.0.14840': attribute type 10 has an invalid length.
[ 1366.877535][ T9861] loop5: detected capacity change from 0 to 2048
[ 1366.882054][ T9861] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024)
[ 1366.892242][ T9862] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1368.080007][ T9882] ==================================================================
[ 1368.082387][ T9882] BUG: KASAN: slab-use-after-free in __xfrm_state_lookup+0x6ad/0x8d0
[ 1368.084843][ T9882] Read of size 2 at addr ffff88801eef0ec2 by task syz.1.14850/9882
[ 1368.087403][ T9882] 
[ 1368.089208][ T9882] CPU: 1 UID: 0 PID: 9882 Comm: syz.1.14850 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[ 1368.089224][ T9882] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1368.089231][ T9882] Call Trace:
[ 1368.089237][ T9882]  <TASK>
[ 1368.089244][ T9882]  dump_stack_lvl+0x189/0x250
[ 1368.089259][ T9882]  ? __kasan_check_byte+0x12/0x40
[ 1368.089275][ T9882]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1368.089285][ T9882]  ? lock_release+0x4b/0x3e0
[ 1368.089300][ T9882]  ? __virt_addr_valid+0x4a5/0x5c0
[ 1368.089313][ T9882]  print_report+0xca/0x240
[ 1368.089322][ T9882]  ? __xfrm_state_lookup+0x6ad/0x8d0
[ 1368.089334][ T9882]  kasan_report+0x118/0x150
[ 1368.089346][ T9882]  ? __xfrm_state_lookup+0x6ad/0x8d0
[ 1368.089360][ T9882]  __xfrm_state_lookup+0x6ad/0x8d0
[ 1368.089376][ T9882]  ? __pfx___xfrm_state_lookup+0x10/0x10
[ 1368.089399][ T9882]  xfrm_state_add+0x27d/0xc40
[ 1368.089410][ T9882]  xfrm_add_sa+0x35a1/0x4070
[ 1368.089423][ T9882]  ? __pfx_xfrm_add_sa+0x10/0x10
[ 1368.089432][ T9882]  ? apparmor_capable+0x137/0x1b0
[ 1368.089468][ T9882]  ? __nla_parse+0x40/0x60
[ 1368.089483][ T9882]  xfrm_user_rcv_msg+0x7a3/0xab0
[ 1368.089494][ T9882]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[ 1368.089510][ T9882]  ? __pfx___mutex_trylock_common+0x10/0x10
[ 1368.089520][ T9882]  ? preempt_schedule_thunk+0x16/0x30
[ 1368.089534][ T9882]  ? __mutex_lock+0x349/0x1360
[ 1368.089547][ T9882]  netlink_rcv_skb+0x208/0x470
[ 1368.089559][ T9882]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[ 1368.089568][ T9882]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1368.089581][ T9882]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1368.089592][ T9882]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1368.089604][ T9882]  xfrm_netlink_rcv+0x79/0x90
[ 1368.089613][ T9882]  netlink_unicast+0x82f/0x9e0
[ 1368.089626][ T9882]  ? __pfx_netlink_unicast+0x10/0x10
[ 1368.089638][ T9882]  ? netlink_sendmsg+0x642/0xb30
[ 1368.089649][ T9882]  ? skb_put+0x11b/0x210
[ 1368.089658][ T9882]  netlink_sendmsg+0x805/0xb30
[ 1368.089670][ T9882]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1368.089681][ T9882]  ? aa_sock_msg_perm+0xf1/0x1d0
[ 1368.089693][ T9882]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1368.089702][ T9882]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1368.089713][ T9882]  __sock_sendmsg+0x21c/0x270
[ 1368.089724][ T9882]  ____sys_sendmsg+0x505/0x830
[ 1368.089732][ T9882]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1368.089742][ T9882]  ? import_iovec+0x74/0xa0
[ 1368.089752][ T9882]  ___sys_sendmsg+0x21f/0x2a0
[ 1368.089760][ T9882]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1368.089775][ T9882]  ? __fget_files+0x2a/0x420
[ 1368.089782][ T9882]  ? __fget_files+0x3a0/0x420
[ 1368.089791][ T9882]  __x64_sys_sendmsg+0x19b/0x260
[ 1368.089799][ T9882]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1368.089809][ T9882]  ? rcu_is_watching+0x15/0xb0
[ 1368.089818][ T9882]  ? do_syscall_64+0xbe/0x3b0
[ 1368.089831][ T9882]  do_syscall_64+0xfa/0x3b0
[ 1368.089841][ T9882]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1368.089854][ T9882]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1368.089870][ T9882]  ? exc_page_fault+0x9f/0xf0
[ 1368.089890][ T9882]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1368.089906][ T9882] RIP: 0033:0x7f57abb8ebe9
[ 1368.090167][ T9882] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1368.090179][ T9882] RSP: 002b:00007f57aca22038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1368.090189][ T9882] RAX: ffffffffffffffda RBX: 00007f57abdb5fa0 RCX: 00007f57abb8ebe9
[ 1368.090197][ T9882] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003
[ 1368.090203][ T9882] RBP: 00007f57abc11e19 R08: 0000000000000000 R09: 0000000000000000
[ 1368.090209][ T9882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1368.090215][ T9882] R13: 00007f57abdb6038 R14: 00007f57abdb5fa0 R15: 00007fff20585b38
[ 1368.090226][ T9882]  </TASK>
[ 1368.090230][ T9882] 
[ 1368.226232][ T9882] Allocated by task 9581:
[ 1368.227839][ T9882]  kasan_save_track+0x3e/0x80
[ 1368.229575][ T9882]  __kasan_slab_alloc+0x6c/0x80
[ 1368.231335][ T9882]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[ 1368.233346][ T9882]  xfrm_state_alloc+0x24/0x2f0
[ 1368.235114][ T9882]  xfrm_state_find+0x37d4/0x5400
[ 1368.236945][ T9882]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[ 1368.239163][ T9882]  xfrm_lookup_with_ifid+0x2a7/0x1a70
[ 1368.241044][ T9882]  xfrm_lookup_route+0x3c/0x1c0
[ 1368.242833][ T9882]  udp_sendmsg+0x142e/0x2170
[ 1368.244530][ T9882]  __sock_sendmsg+0x19c/0x270
[ 1368.246252][ T9882]  ____sys_sendmsg+0x52d/0x830
[ 1368.247973][ T9882]  ___sys_sendmsg+0x21f/0x2a0
[ 1368.249701][ T9882]  __sys_sendmmsg+0x227/0x430
[ 1368.251345][ T9882]  __x64_sys_sendmmsg+0xa0/0xc0
[ 1368.253109][ T9882]  do_syscall_64+0xfa/0x3b0
[ 1368.254746][ T9882]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1368.256889][ T9882] 
[ 1368.257774][ T9882] Freed by task 6448:
[ 1368.259224][ T9882]  kasan_save_track+0x3e/0x80
[ 1368.260964][ T9882]  kasan_save_free_info+0x46/0x50
[ 1368.262838][ T9882]  __kasan_slab_free+0x5b/0x80
[ 1368.264600][ T9882]  kmem_cache_free+0x18f/0x400
[ 1368.266265][ T9882]  xfrm_state_gc_task+0x52d/0x6b0
[ 1368.268455][ T9882]  process_scheduled_works+0xae1/0x17b0
[ 1368.270461][ T9882]  worker_thread+0x8a0/0xda0
[ 1368.272083][ T9882]  kthread+0x711/0x8a0
[ 1368.273594][ T9882]  ret_from_fork+0x3fc/0x770
[ 1368.275269][ T9882]  ret_from_fork_asm+0x1a/0x30
[ 1368.277051][ T9882] 
[ 1368.277928][ T9882] The buggy address belongs to the object at ffff88801eef0d80
[ 1368.277928][ T9882]  which belongs to the cache xfrm_state of size 928
[ 1368.282815][ T9882] The buggy address is located 322 bytes inside of
[ 1368.282815][ T9882]  freed 928-byte region [ffff88801eef0d80, ffff88801eef1120)
[ 1368.287715][ T9882] 
[ 1368.288634][ T9882] The buggy address belongs to the physical page:
[ 1368.290952][ T9882] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88801eef0900 pfn:0x1eef0
[ 1368.294594][ T9882] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 1368.297550][ T9882] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff)
[ 1368.300549][ T9882] page_type: f5(slab)
[ 1368.302011][ T9882] raw: 00fff00000000240 ffff88801c742b40 ffff88801c743708 ffffea0000e10e10
[ 1368.305017][ T9882] raw: ffff88801eef0900 00000000000e0005 00000000f5000000 0000000000000000
[ 1368.308066][ T9882] head: 00fff00000000240 ffff88801c742b40 ffff88801c743708 ffffea0000e10e10
[ 1368.311066][ T9882] head: ffff88801eef0900 00000000000e0005 00000000f5000000 0000000000000000
[ 1368.314108][ T9882] head: 00fff00000000002 ffffea00007bbc01 00000000ffffffff 00000000ffffffff
[ 1368.317191][ T9882] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[ 1368.320387][ T9882] page dumped because: kasan: bad access detected
[ 1368.322734][ T9882] page_owner tracks the page as allocated
[ 1368.324837][ T9882] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6037, tgid 6036 (syz.1.106), ts 79208448565, free_ts 79110573054
[ 1368.331652][ T9882]  post_alloc_hook+0x240/0x2a0
[ 1368.333451][ T9882]  get_page_from_freelist+0x21e4/0x22c0
[ 1368.335525][ T9882]  __alloc_frozen_pages_noprof+0x181/0x370
[ 1368.337656][ T9882]  alloc_pages_mpol+0x232/0x4a0
[ 1368.339493][ T9882]  allocate_slab+0x8a/0x370
[ 1368.341139][ T9882]  ___slab_alloc+0xbeb/0x1410
[ 1368.342973][ T9882]  kmem_cache_alloc_noprof+0x283/0x3c0
[ 1368.345015][ T9882]  xfrm_state_alloc+0x24/0x2f0
[ 1368.346845][ T9882]  xfrm_add_acquire+0xf7/0xb20
[ 1368.348673][ T9882]  xfrm_user_rcv_msg+0x7a3/0xab0
[ 1368.350598][ T9882]  netlink_rcv_skb+0x208/0x470
[ 1368.352364][ T9882]  xfrm_netlink_rcv+0x79/0x90
[ 1368.354201][ T9882]  netlink_unicast+0x82f/0x9e0
[ 1368.355976][ T9882]  netlink_sendmsg+0x805/0xb30
[ 1368.357816][ T9882]  __sock_sendmsg+0x21c/0x270
[ 1368.359637][ T9882]  ____sys_sendmsg+0x505/0x830
[ 1368.361500][ T9882] page last free pid 5961 tgid 5961 stack trace:
[ 1368.363936][ T9882]  __free_frozen_pages+0xbc4/0xd30
[ 1368.365938][ T9882]  __slab_free+0x303/0x3c0
[ 1368.367659][ T9882]  qlist_free_all+0x97/0x140
[ 1368.369454][ T9882]  kasan_quarantine_reduce+0x148/0x160
[ 1368.371552][ T9882]  __kasan_slab_alloc+0x22/0x80
[ 1368.373453][ T9882]  __kmalloc_noprof+0x224/0x4f0
[ 1368.375353][ T9882]  __register_sysctl_table+0xba1/0x1340
[ 1368.377521][ T9882]  neigh_sysctl_register+0x9a2/0xa80
[ 1368.379571][ T9882]  addrconf_sysctl_register+0xb3/0x1c0
[ 1368.381675][ T9882]  ipv6_add_dev+0xd46/0x1370
[ 1368.383452][ T9882]  addrconf_notify+0x794/0x1010
[ 1368.385308][ T9882]  notifier_call_chain+0x1b6/0x3e0
[ 1368.387300][ T9882]  register_netdevice+0x1608/0x1ae0
[ 1368.389355][ T9882]  cfg80211_register_netdevice+0x150/0x2f0
[ 1368.391633][ T9882]  ieee80211_if_add+0xe60/0x1390
[ 1368.393538][ T9882]  ieee80211_register_hw+0x3551/0x4080
[ 1368.395680][ T9882] 
[ 1368.396652][ T9882] Memory state around the buggy address:
[ 1368.398774][ T9882]  ffff88801eef0d80: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1368.401730][ T9882]  ffff88801eef0e00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1368.404792][ T9882] >ffff88801eef0e80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1368.407874][ T9882]                                            ^
[ 1368.410220][ T9882]  ffff88801eef0f00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1368.413255][ T9882]  ffff88801eef0f80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 1368.416166][ T9882] ==================================================================
[ 1368.419692][ T9882] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 1368.422468][ T9882] CPU: 1 UID: 0 PID: 9882 Comm: syz.1.14850 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[ 1368.427129][ T9882] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1368.430956][ T9882] Call Trace:
[ 1368.432241][ T9882]  <TASK>
[ 1368.433396][ T9882]  dump_stack_lvl+0x99/0x250
[ 1368.435182][ T9882]  ? __asan_memcpy+0x40/0x70
[ 1368.436920][ T9882]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1368.438948][ T9882]  ? __pfx__printk+0x10/0x10
[ 1368.440769][ T9882]  vpanic+0x281/0x750
[ 1368.442318][ T9882]  ? __pfx_vpanic+0x10/0x10
[ 1368.444112][ T9882]  ? irqentry_exit+0x74/0x90
[ 1368.445967][ T9882]  panic+0xb9/0xc0
[ 1368.447469][ T9882]  ? __pfx_panic+0x10/0x10
[ 1368.449200][ T9882]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[ 1368.451526][ T9882]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[ 1368.453842][ T9882]  ? __xfrm_state_lookup+0x6ad/0x8d0
[ 1368.455847][ T9882]  check_panic_on_warn+0x89/0xb0
[ 1368.457772][ T9882]  ? __xfrm_state_lookup+0x6ad/0x8d0
[ 1368.459839][ T9882]  end_report+0x78/0x160
[ 1368.461543][ T9882]  kasan_report+0x129/0x150
[ 1368.463306][ T9882]  ? __xfrm_state_lookup+0x6ad/0x8d0
[ 1368.465359][ T9882]  __xfrm_state_lookup+0x6ad/0x8d0
[ 1368.467368][ T9882]  ? __pfx___xfrm_state_lookup+0x10/0x10
[ 1368.469536][ T9882]  xfrm_state_add+0x27d/0xc40
[ 1368.471348][ T9882]  xfrm_add_sa+0x35a1/0x4070
[ 1368.473129][ T9882]  ? __pfx_xfrm_add_sa+0x10/0x10
[ 1368.475016][ T9882]  ? apparmor_capable+0x137/0x1b0
[ 1368.476962][ T9882]  ? __nla_parse+0x40/0x60
[ 1368.478647][ T9882]  xfrm_user_rcv_msg+0x7a3/0xab0
[ 1368.480571][ T9882]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[ 1368.482672][ T9882]  ? __pfx___mutex_trylock_common+0x10/0x10
[ 1368.484960][ T9882]  ? preempt_schedule_thunk+0x16/0x30
[ 1368.487058][ T9882]  ? __mutex_lock+0x349/0x1360
[ 1368.488931][ T9882]  netlink_rcv_skb+0x208/0x470
[ 1368.490784][ T9882]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[ 1368.492867][ T9882]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1368.494912][ T9882]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1368.496973][ T9882]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1368.499035][ T9882]  xfrm_netlink_rcv+0x79/0x90
[ 1368.500902][ T9882]  netlink_unicast+0x82f/0x9e0
[ 1368.502809][ T9882]  ? __pfx_netlink_unicast+0x10/0x10
[ 1368.504870][ T9882]  ? netlink_sendmsg+0x642/0xb30
[ 1368.506809][ T9882]  ? skb_put+0x11b/0x210
[ 1368.508462][ T9882]  netlink_sendmsg+0x805/0xb30
[ 1368.510311][ T9882]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1368.512341][ T9882]  ? aa_sock_msg_perm+0xf1/0x1d0
[ 1368.514276][ T9882]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1368.516317][ T9882]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1368.518347][ T9882]  __sock_sendmsg+0x21c/0x270
[ 1368.520205][ T9882]  ____sys_sendmsg+0x505/0x830
[ 1368.522086][ T9882]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1368.524146][ T9882]  ? import_iovec+0x74/0xa0
[ 1368.525933][ T9882]  ___sys_sendmsg+0x21f/0x2a0
[ 1368.527774][ T9882]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1368.529774][ T9882]  ? __fget_files+0x2a/0x420
[ 1368.531579][ T9882]  ? __fget_files+0x3a0/0x420
[ 1368.533370][ T9882]  __x64_sys_sendmsg+0x19b/0x260
[ 1368.535259][ T9882]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1368.537321][ T9882]  ? rcu_is_watching+0x15/0xb0
[ 1368.539172][ T9882]  ? do_syscall_64+0xbe/0x3b0
[ 1368.541006][ T9882]  do_syscall_64+0xfa/0x3b0
[ 1368.542774][ T9882]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1368.544742][ T9882]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1368.547059][ T9882]  ? exc_page_fault+0x9f/0xf0
[ 1368.548888][ T9882]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1368.551150][ T9882] RIP: 0033:0x7f57abb8ebe9
[ 1368.552897][ T9882] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1368.560176][ T9882] RSP: 002b:00007f57aca22038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1368.563326][ T9882] RAX: ffffffffffffffda RBX: 00007f57abdb5fa0 RCX: 00007f57abb8ebe9
[ 1368.566396][ T9882] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000003
[ 1368.569398][ T9882] RBP: 00007f57abc11e19 R08: 0000000000000000 R09: 0000000000000000
[ 1368.572460][ T9882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1368.575500][ T9882] R13: 00007f57abdb6038 R14: 00007f57abdb5fa0 R15: 00007fff20585b38
[ 1368.578501][ T9882]  </TASK>
[ 1368.580444][ T9882] Kernel Offset: disabled
[ 1368.582104][ T9882] Rebooting in 86400 seconds..

VM DIAGNOSIS:
13:29:18  Registers:
info registers vcpu 0

CPU#0
RAX=72ae57523c8e5600 RBX=ffffffff81968308 RCX=72ae57523c8e5600 RDX=0000000000000001
RSI=ffffffff8d9b6dc6 RDI=ffffffff8be33400 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa37e30 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a20
RIP=ffffffff8b7943f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f57ac8e56c0 CR3=0000000111c88000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f674a387498 00007f674a387470 XMM03=00007f674a3874a8 00007f674a3874a0
XMM04=00007f674aeed100 00007f674a387460 XMM05=00007f674a387478 00007f674a3874c0
XMM06=00007f674a3874b8 00007f674a3874b0 XMM07=00007f674a3874a8 00007f674a3874a0
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007f674a212fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=1ffff11007fe1d87 RBX=ffff88803ff0ec38 RCX=ffff888120cdd640 RDX=0000000000000002
RSI=00007f57abb8ebbf RDI=00007f57abb8ebff RBP=ffffc90003936d01 RSP=ffffc90003936cb0
R8 =ffff888136624253 R9 =1ffff11026cc484a R10=dffffc0000000000 R11=ffffed1026cc484b
R12=dffffc0000000000 R13=00007ffffffff000 R14=ffff88803ff0eb80 R15=ffff88803ff0eb80
RIP=ffffffff8174d943 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f57aca226c0 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000000140 CR3=00000000208ac000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=7712c53e93b9f1e8 728370bf3cb3486e
XMM06=63e772d7f3a22482 dabb339f3c035440 XMM07=bd0dad416e16bee6 46815929601aad29
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007f57abc12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
