last executing test programs:

9m1.396330139s ago: executing program 0 (id=794):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x5c, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_REKEY_DATA={0x40, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "3915515ca1431aab"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="e4f437c475ab08d784755838aa14c33b5190972a86892fc4"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="d9eed50475a276381a284ca1348b5ad0"}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4070}, 0x4000080)

9m1.272150536s ago: executing program 0 (id=796):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}]}, @NFT_MSG_NEWSETELEM={0x4c, 0xc, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x24, 0x3, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x8}, @NFTA_SET_ELEM_EXPRESSIONS={0x18, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @counter={{0x10}, @val={0x4}}}]}]}]}]}], {0x14, 0x10}}, 0xd0}}, 0x0)

9m1.213559231s ago: executing program 0 (id=798):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000480)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
mkdirat(0xffffffffffffffff, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000180)='map_files\x00')
fchdir(r1)
sendmmsg$unix(r0, &(0x7f0000000d40)=[{{&(0x7f0000000080)=@abs={0x1, 0x30, 0x430}, 0x6e, 0x0}}], 0x1, 0x0)

9m1.154092362s ago: executing program 0 (id=800):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x81}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000e00)={0xc, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f00000014c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94)

9m1.042165056s ago: executing program 0 (id=802):
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)
ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000001c0)={0x7, 0x8, 0x0, "b75c89e7a20c8eac82ad0416bb1844038d2cd97c945462f31638b5394c00", 0x32315258})

8m31.421732376s ago: executing program 0 (id=803):
r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000900), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x44, r0, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4005}, 0x0)

8m18.176637429s ago: executing program 32 (id=757):
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1000000201005)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000000300)=""/102392, 0x18ff8)
ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000380))
sendmsg$inet(0xffffffffffffffff, 0x0, 0x7e8166965e22236a)
ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020660b, &(0x7f00000001c0)={0x1, 0xb5c, 0x0, 0x401})
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
gettid()
timer_create(0x0, 0x0, &(0x7f0000bbdffc))
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)

6m48.537109592s ago: executing program 33 (id=801):
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
connect$rose(r0, &(0x7f0000000000)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x2000002, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @default, @default]}, 0x40)

6m22.980272393s ago: executing program 34 (id=803):
r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000900), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f00000009c0)={0x44, r0, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4005}, 0x0)

6m0.713417712s ago: executing program 3 (id=852):
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x8005, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x33424752, 0x2, @stepwise={0x7fffffff, 0x1, 0x5, 0x7, 0x6, 0x80000000}})

6m0.506143065s ago: executing program 3 (id=853):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
syz_emit_ethernet(0x2e, &(0x7f0000000600)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x3, 0x0, 0x20, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr, @broadcast}, {0x0, 0x883e, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x7, 0x0, @void}}}}}}}, 0x0)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
fanotify_init(0x8, 0x80000)
mkdir(&(0x7f0000000100)='./file1\x00', 0x13b)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
r2 = open(&(0x7f0000000580)='./file1\x00', 0x80342, 0x1df2a23c5997fa5f)
write$FUSE_CREATE_OPEN(r2, &(0x7f0000000180)={0xa0, 0xffffffffffffffda, 0x0, {{0x8, 0x1000000000003, 0x5, 0x8, 0x3, 0x1, {0x5, 0x17f, 0x20ff, 0x5, 0x89, 0xd615, 0xb, 0x7fffffff, 0xfffffffe, 0x8000, 0x0, 0x0, 0x0, 0x3ff, 0x1}}, {0x0, 0x13}}}, 0xa0)
sendfile(r2, r2, &(0x7f0000000080), 0x7f03)
setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000000)=ANY=[@ANYBLOB="0300000001", @ANYRES16=r0], 0xa)

6m0.014037546s ago: executing program 4 (id=855):
syz_mount_image$ocfs2(&(0x7f00000026c0), &(0x7f0000004780)='./file0\x00', 0x200000, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x4703, &(0x7f0000004800)="$eJzs212IXFcBB/BzZ1ezmybb/UibpOnHJBFctCybPlXrQ1yrNpo2H9pWU2Wd3Ww3q7M76+6MFgxSgyAKghIEFT+oCqUvtSAG+lKLUPADaRVKRdH6IlKogg8GbaArM3Nvdu6d2d7JTtLS9veDdvaee8+5Z/a/99w590wKseqphdXiwmqxtFSszN6/ekvxc5VybXEuFF4lr/X56c6VyEn2r50j7/vAR+65JYQ/HPvah9bW1tZC3XDo6EDLz+f/fXq29TVRyNSpt9u5taY/1h556edveaUj8pwIIexo61ddXwjhY78IYUsIYSQuG41fB0MI20IIUQjh0d/868cDvXShxdl7X3ju2JnD+85MPf7YMxfmj254YBTCd8u7b55ffHF/323Pv+MynR4AAF7RB48fufvo5IHwZBSGzvW3f17fGb8mn4/vfNun7nq4f33/Gt3pexVDBQAAgIz1+f9w9HKH9bpkZS1ZEnzigRN3PxWt7zexfX07dNeR298/eSBe/43a9t8aF/3zvX2NNdTsum92/XckU7/z+u/6eR7+6rO/XHrr5vuf9C8573CIChOp7UJhYiKEY1PN7V3R1kK5slp95/2V2tLJzZ/3jSKdf3b1fn1Bv9v8RzPV89b/d3/i8z8b7O/lHYyF7F9tfbvY/qdMB+n8Nx7Lf/KlqKv8xzL18vK/4+nt53+1pZd3kD0jlyKdf/NC3Nd6QLE5ANTz/2Z/fv47Mu3n5f/9qXOPntjE93/q48xwVO/rQGoEeDku3+ArTGSk828GkRo641/kRtf//zL5X5NpPy//Oyv/+N3ferj/bzT+j0/10uabRzr/ZhDF1BHr1/9IIf/6vzbTfl7+vz3152c/2dO9uj3/ev/H3f+7ks4/vhGnB8/Gb7Lb8X9npv28/HeN3ffQwib6/eHBuJ9DURhr+dbpufotbGh9vboxpanvXt7ESd4E0vk3f2upS2eo+dK4/ofzx/9dmfbz8n9oz9ffc7qn7/92Hv8njf9dSec/2Ci7lPxfyuS/O9N+Xv4/PP33v9x3mcf/+vZB+Xclnf/Wtv3rz38KXc3/rsvUz3v+s2/0qUf+2sP8P+lfct7k+U/yHGI8aj7/obN0/ldteFy39/89mXp51/+3/vP80/t7Gf+jAU8AepDOf1uzsMMEsNv8r8+0n5f/F+758sf/tIn5X+MT30CSf8v8f0uz/Kjxvyvp/Lc3C1P/GOrBxv8b9/+oPff/ZvK/IdN+Xv4XDk30f+Uy3//r/R/v8Cibdun8hzY8rp7/77u4/9+YqZeX/xf3/vTFm3v6/B/CpLn+pqXzv3rD4xrX/0B+/jdl6uXl/51v/PqJB3vo/9t7qEs2/+a9PnU5xZ/Nu53/FzPt5+X/o/HzZ/dfgfnfre7/XUnn31w1v5T8s/P/vZn28/L/3pEfrPRfgec/d8gfAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgU0bj1+EQFSZS24XCxEQIY/H2rrA1mimdnJ4pV2Y/sxrCjri8GEaj+XJlplSeXliqnJybLpXLldkQron37wgD0Wq5Up1eLC1fe7GtwejUXGmlOjNXqoYQdsbl14ftSVszC9XF0nLj2KTOVVHps7VKtTRRW51bCbsvlm9LyudXKrXl6y62dXWhsrJ8qrQ0fXJh5d2Tk5OTYc/FPo9Ecw9U55aqzd4299brJHWHo5Y309h9Q8v5Pl2prSyVyo3yG1vqlCuzpXJLnZtazlddqS3Nlqpz0+XKfHK+YkvdlvfW2L033jceRlLvL6mbdTB+vf3Q8Y8eP3ygbX8xSue9VFucm9ze+W8CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgDeuJ29717dDCH3NrUII4WDyQxT/l3L23heeO3bm8L4zU48/9syF+aOdjgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg/+zAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVh535equjiOACfGd/7WiCltBFyGRgiojsJC/pFJJXXyJZtWge1SsigKDCMaFkQBEHtooKgVVD5F0QtXLaqNrVoYRBBxehMXu4IN7zQMed5YDgzzL1nvjBw78z5HA4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD6cXbHYlfWXtq1eWnr7g+hMz/3fwhhNFne/7y3I/SEEL5+mTkdVmkLPU39v5mcGy9fNfm9t3/84fXRZO31F98trtsdknSo4XhnkqZDQ2vvf6O6M/hsejAJIY1dCFEsjD05UwshdMQuhCh+fpy/mP2+/xe7EKLo/3C3K7v/tdiFEMXW3Z/6avkzHtVzvn5hsPG/v9UjeBuP6KxDb09eeZe6qZX3Mn//T/LN+2A1zJ448v557CKIZnZu6mjsGgAAgL/rXIv8P2xZ3r9/OQk93eXc/1tT/t/b1P/q+f+Ke9tvjM20FUJsK41NZsfD+9rpc+M7NXD19uua8Z6qkv9Xm/y/2uT/1Sb/rzb5f7XJ/8m8kv9X0uObexZfxC6CaOT/AABQPYeOT0zVh0eyl/9NPzrLeX1f3tbzPP3BremBRw3jRvLDf9vhYxMHDg6P5Pe9PCC4sv5DunT2ez7fo7ktTDbNu2i1/kPv04X5a53lT9T/cP5GUV9xXes/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC/2J17GgbBKAyj321F1EarogkLPwk+0MCIAKQwowEdTBiAgRBQwEDOWe5NnuUFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnu9f5XXx/aUx0muNSFPZZdf+OZ5mP3PfDsv77HHjVgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANjYgQMZAAAAAGH+1nm0HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgKcCAAD//wTsyzo=")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
r1 = fanotify_init(0xf00, 0x0)
fanotify_mark(r1, 0x105, 0x5000003a, r0, 0x0)
creat(&(0x7f0000000200)='./file5\x00', 0x10)
mknod(0x0, 0x8001420, 0x0)
creat(0x0, 0x4d)

5m58.631028796s ago: executing program 4 (id=858):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), r0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)={0x14, r1, 0x917}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4000)

5m58.529392505s ago: executing program 3 (id=859):
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000000040)={[{@noacl}]}, 0x1, 0x5599, &(0x7f0000005680)="$eJzs3X1oVecdB/BzTaKhFpPV1alY6RSqdGVTW5DNUeNLZjvfkhq0NTXGaWudrViZW9qJCwliOi2NSh2jrjhkRVtWApO+iFPXoUM2psikszLnim44ahZ1gh2Tjdx7n+u955rk1nVNXz6fknvuc3/nec5zD+eP+731OTcCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAKIoSm289OevImvqxM8fNeeA/j7y669ljk5aNPnL25/N3TCuqWv1U3fSGlrq5UzqaKxfPP3p1/aEoSqT6pfsvnHzfA4/OWTizNAxYX53alpd3ecjk4+lUo2/Oi539cv8WRVFUEhugKL2tLMpqJ+IHiFblD9it6k1X3lxWM/XtxssXJg6vHbU3/63TqbS3J9Bb0tfVmWvXUkXysU9sj0w769JL5Fyiqf7xC+4jeRMAwAcypiq5yXwcTX/EzbQb4/VYuyLWbo21wyeE1uzGjUiN27ered4er/fSPCtSUaFfl/OM1dPnP9OuivePtWNR4wPMM3fXdKQp7WqeK2P13ponAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMfJu5PmXZgy/cXLfSfV7hiy4a+z+mxcv+9UbfVLd+2sPrHujf61ddMbWurmTulorlw8/+jV9YeiqDzZL5Hqnnhj08Kn+tbNfHDzQ2srZ0w49FpRetywLc7aOfpjePLVsij6VlblTBj23IAoqsotJJvRj/MLy5JP7g8FAAAAPk2GJB/7ZNqpOFiS004k02Qi+V+QCovVm668uaxm6tuNly9MHF47au+Nj1fVxXgV1x0v0y6/9pfICsYh/sbHu1YPu67KG6d78RHjef7YtHdmnBlRf27rlfNNTWsv7h534K73tkw93/zNd/av6Hf/cyPy8n959/k/nDn5HwAAgP+F/B8fp3s95f+3ZlfOaPvDvT/6/biv/31o9cZ3m/YmVg09vmLkd+ZNPPXa869fzcv/t+ccMi//hxmH/N8nurH8DwAAAB9n/+/8X5E3Tvd6yv/PHDwxdM+ogzWN0furyv6VOLhk36nnvtZ8ec29216oPDvrsf55+X9MYfm/OHva4cXfhQkvL4uiMYWfVAAAACBH+P/u175aCHk99c1BPK+/PP7FnRdLZxYvKf7yrl3bnl5TevcdA5fWLn5l9EtDnjg8/9nVefm/orD8X/LRvF0AAACgAIs23L100D/mjd+2pH32rVePVg66Z/vRO25un7G6Zv2kFbec/kpe/q8qLP/36523AwAAAFzHsfmPLFrxt9071v16xOQxpe9PGTn7e3WX9hwe++9RNR0vjP/GW3n5v76w/H9Tepte+ZDqdCj8K4QtZVFU2vlkZarwm6h1YqYAAAAAfEhCTm/44eylDZuf2fbPizV3vtJ8y8utf374C+V3bpz2s+9vOT63adO+vPy/svv7/4c7HYT1/zn3/8tb/59VSN31b4IbAwAAAPBZlL+eP9weP/XLBV39/n6h6/8fe3r4o1u/+5Olv7itfHfitpNPfumJ5ocrfzpwYHvL6JHNRYNL8vJ/Y2H5vyh7+2H+/h8AAADcgE/a7/89lDdO93q6//+0BesOL2gf+/kDLe3Pjxn02znFDy7Y+af2m/c/Oax9/7nzLcPy8n9rYfk/bPtnv70D4fw0l0XR4M4n6bsJ7grTXR4rtJVkFVInPtZjTuiRLrT1yyokrYz1GFcWRV/sfNIYK3wuFFpjhY4B6cL2WOFIKKSvh0zh1VjhQLjStg5ITzdeeD0U0gss2sIKiv6ZJRGxHpe66tFZuG6Pk5mDAwAAfKaE8JzOsiW5zSgeZdsSPe1wU0879Olph6KediiO7RDfsavXo/rcQnj9L6dXv/f48l/WTmi4Z+7kPcOOP37f2bE/+PbaX83uv6XxxKUpTXn5f3th+T+cir6pTVfr/6Ow/j/9u4aZ9f/1oVAeK7SFQlX8jgFV4RipsLshHKO8Kt2jY3CmAAAAAJ9q4XuBol6eBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBf9u49Sq6qThTw7nd30uk0OI6AykSdJEZMdydBlICLPERUjHQYZFTGPEg65NEkIQ8kwYWBsBwUdQLBxDvDXQS4WYCixDgEERgSlcC9RHnNMAzyFLiBUSFc3nCZ3NV9aleqzulKV0wa0tzv+6NrV/3289Sja59zah8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPj/w+BDv7LgilOeuWnkC3936imNC59+bsxlB3/kiPqb5h48/PUtd8+6fcrxZ10w5eSJO1YeO+Mrd7/591tDaO8uV5EUr/j5RVOX1U6Z9KWLv3zOsZ8/auum2ly9uXgY2PWnMnfn/Njqk4NCuKEihOp0YGRjEqjJ3W+M9b2vMYQDwq5AvkTHgKREuuFwW0MI68KuQL6qGxtCaCwInHTvL2/9blfikoYQhoYQ6tJtPFyXtNGQDgyrTQID0oEF1UnglZ2JfODnlUkA9lp8M+Rf9BvaizM091yuxOuvZp917O2VHl5VTDSXzven8X3cqQK16Qfa9+ppy1RHn8i8PTZ7t/WDd1tmO6/ytBV+kcp9Q9m5K1QXKmd2zJq+tHNJfKQytLRUlaqpj57nh5//+ow9Sfeb12HsQPM+eR1W7dh+59mNn7pu9aD1r64ce+WWve3mQwWbtDDd1+pC7jXXb57HaJzPk37w9st8SxriS1cI4V9vqNv26hcuf/nTa7ZcPem8v13zzIjTW9veuO+F6yctWLXg+v/+i8z8v3n38//4co63lUW5Y6tvNCVz8/hIY0w815TMzQEAAKDf6A97Tac+NOvF4b/5xD9PvvHR7YOO/5tFqw/+de2Wdz34VOX4Z285ecT81zLz/yHlHf+Ph/wbC0e7OYRx3YmVg0M4qPvxJHBN7M6pg0P4QHeqvTgwPhXYHMLB3YkR+apSJepjiSGpwPamXGBcKrA1BtpTgfUxsCoVOD8GNqQCM2JgcyowIQbCnOJxfKQpN46yAw0xMC3ZiBviWQgvNMXWUtvqd/mqAAAA9pHc7LCm+G7BuQ57myFOLzc09JYhnoFdMkNdqob0DDY/rSpZQ3VvNVT2VkN+3Ct2P/xMzRW91Zw5DaOiOMPSb/7h/rFfXDW3euj22sNemnfczN8d8/41O1s++uPanT8cd9fahsz8v2338/+6HjpSkTn+H8Lk7r8xd2Uu0pmPT2svygAAAADshdETP/ZPl733l9fdcuLnfzv4jiOv2PjDqbVjv/XK0nt+uGLCudt+dEFm/j+uvPP/4z6RqoLMYVvcDTFvcAhtxYGk2qOygeSo98BcAAAAAPqD/PH4/LHwObnb5BTt9Hw6m799D/PHA//jesw//pC/fmzDf8z99k8nTjli7TmPzd9+1+EfrWn7m+cf/tIF86Z947JvZub/7eWd/z+g+DbpxNbYi9WDQ6gvCNwee9kV6DYkBh47pjiQG//WuAEujFXlTkzIV3VhLDEtBtpSgXWlStydL3FQcSD3ZOUbX5kfx5xciYIAAAAAvOXi7oB4XD6e/3/fgg/PPmpb3aG3rKr46V/uuKZz4vVtNc+M/VXT61/4whNff63xzMz8f9qenf/fPQ/OnN7fOTCE1uoQqtI/DNg2IFkYMAYaK3KJWwYkdVWlqzp3QAhHdw0sXdXjufX/q9NrDN7bkFQVAwd98Ornh3UlrmwIobUwcP8pl3+sK7EkFcg3/sWGEP6qa7Tpxq+vTxqvSTe+tj6EQwsC+apOrQ+hq7HadFW/rMtdxyBd1XV1IbyrIJCv6oi6EJYFAPqp+K90ZuGDi5ctnze9s7NjUR8m4j78hjBrTmdHy4wFnTPrSvRpZqrPRcsYnZsdU8nlkFLiEkWr7lk7tJx0/neCbYV9ye3Hz5w4mLsfvwvVdI9zdE3R3THpIX/4Q9kmQsE3qbdryAMKK9n1JGbqj/lrw8BQv3Rxx6KWs6YvWbJoVPK33Oyjk79xUMm2GpXeVgN66tt+8PIYXlhJ65LTF7YuXrZ85JzTp5/WcVrH/NFtYw5vO3LMqCM+3to1qrbkby9DHd5T1amh7rz8rR/qIdUFlbwVnxoSEhL9LfE/zjj95DuOnPOpE+5d+oGj1oybcPaNh89qXXPb9ZPWT3ts8I9GXZKZ/y/c/fw/furET/7c+gyljv83x8P8yeO7DvNPi4F15R7/by51ND9/YsCQVGBFDKxwmB8AAIB3hrg7Mu52jHutH6q74qrDL3329C2jJn7tzOaRv57wwXEHfvqML99x3H/+3/d/7xN//N+Z+f+K8n7/v4/W/88vXf+5Usv8j4gl2kqt/59e5j+//v+KUuv/p5f5z6//v+5tWP9/aT6Q2iQvWP8fAAB4J3jr1v/vdXn/9AUCMhl6Xd4/fYGATIZel/Ev9wIBe7z+/5PHXPv0B97/TPvPrr/j8ekXn3HOx9fUD9uxrL7l9m//+y9u/MqpgzLz/1Xlzf8t3A8AAAD7j2uPffLfjr3q+7ec3Pjsj2sWzT7/5vNuahz2WsWsjfMnDJh8zez/ysz/15U3/3/r1/8Lpc7/H1Iq0F5qYUDr/wEAANBPlVr/b/tP6i+9sHHHuk0bXv/ske9+/Tt3fOdrry34wQ8+89H3zV48adyEmzPz/w3lzf/jaReVRbljb95oSta0C+k17Z5ryv9kAAAAAPqHytDSUlNm3qKVUcf/+W3GpUB3ly504nE//WT70HffPufaKa3/cN99Ha2H3NnUsH7+zi+d8PTyp05YeWVm/r+5vPl/0e8yqnZsv/Psxk9d98bqQetfXTn2yi27jv8DAAAAfafc/RIAAAAAAAAAAAAAAMDb770Lxoy/t+Xxd1+0evn5zdddcfmbm1q3fPUfL6na/uHZf7hg7uiGzO//w+TucqV+/x+v+xd/X/AXRbljq72v/5e7f9LxP1nWvWThtqYQPlQYmHfevANC7tr8wwsDt351xHu6EuelS9z8yISnuhJT04HPjDzw5a7E0anAtLhI4sHpQLyq4suDUoG4vOJ96UDcHhvSgdpc4FuDknFUpLfVM43JtqpIb6sHG0MYXBDIb6sbGpM2KtIDvCQVyA/wjHQgDvALuUBlulc/GZj0KgYaY9HLBia9AgBgvxW/BdaEWXM6O9riV/h4e0h18W1UtGTZudlqq8psPi5NtuqetUPLSVelv4vuutZ4TajrGsKozNfVwiwV3aPcN7X0sun+osSQe1vtra82XW3pETUkI2qZsaBzZk2vAx/Te5bR1b1mGZWZ7BRmqezepGXUUkZfyhhRmdumjC7H+5WhpaUqlWtsDDaHIr29Isr9vX5Pa/6VekV0+cSXb/rD41ubPn3Ye9pPO/+eyvff+6sDr3jxQ688dN1hm/7bR9b++urM/L+5vPl/XeG4Xs5dDGBFvLLeUYNDmFbmiAAAAOCdb/b8Ry6+4FcXbX+sfdhTC1ovuvWBZT9YXt10zfnHPnjzmS+d8r2pexu/9skTfvvAb3+0cdj4WxaOGfDEWVdedtw9d92xetvxb95w2P8ZOePRzPx/SHnz/7hjLHcoONnbsTle/3/l4BC6L63fnASuicM9dXAIH+hOtccSyQX1PxdLtCWBa+IOkxGxxLT24qrqY2BDKrC9KRfYnApsjYHcXoqrQ25XzkVNIXysOzW5uMTCWKI5FTghBoakAi0x0JYKDIqBcanAHwflAu2pwJ0xEOYUb6ufDcptKwAAgD2Rm2fVFN8N6XnehureMlT0lmFAbxkqe8tQ11uGUqOI9zfGDDWFx+NzGeJDNelaG1K1ZDLEi+Hvcb8yGcLdxTnTBTNN588kaS7OGTN8+x8f/OT0lx6+YemP3hh+4rmf/PH3tm16be4Tp40cPO3VsfNGfPuPmfl/W3nz/wHFt0nrW+P8f9f1/5LA7bF7q+Op40Ni4LFjigO5HQNb42T3wnxV7bkSuUn7hbHEuBgYkgosjIFxqcC0ybnAuvcUB3Iz7XzjK/ONz8mVKAgAAADAWy7uIIi7aeL8/9K/mz353O+0dqyc9dWnps0Y+ukDL33fpcfcNOk3c9cedOCpd14zLzP/H1fe/D+2N7CwsfNjb54cFMINFbt6kw+MbEwCcT9GY/x5/PsaQzigYAdHvkTHgKREbarhcFtD8gv12nRVNzYkawzE+yfd+8tbv9uVuKQhhKEFe1/ybTxcl7TRkA4Mq00CA9KBBdVJIO75yQd+XpkEYK/l9wrGF1TuVJe85p7LlXj9vVOuCZoeXmYfaA/5evrNVV+pSz+Q26eat2dPW6Y6+kTm7bHZu60/vtuavdsKv0jlvqHs3BWqC5UzO2ZNX9q5JD5S+EvWjD56nnv6Jevu0vvgdbjiz+9t7+rSHWhLfXy09Vyu59dhRayuasf2O89u/NR1qwetf3Xl2Cu3lN2NEuIm/cuvjR/2UMHm7Wt1Ifea63efJ+0+T/rjv4EhnrYQwqbnvlF/5okn/tsB/7Rw0/cf/a/mV7/1zTs2blzW1HJz1ZpJF3722sz8v728+X916rbba3FjLh4cwocLNu62uPknDk4+BwsCyafku7KB5JD7E00lPzkBAABgX8vv7sjvL5iTu01OCE/Pk7P52/cwf9xfMa7H/OX2+4TP3/0vf7vid6u/uGX9AxW/+f3GK04YM3XhYwvvu3jiP/+v31/16I2Z+f+03c//61PddPzf8X/6iOP/Pdrfd0XXpx9YsVe7ojPV0Scc/+/R/v5uc/y/R47/O/7fE8f/e+H4f4/296ct8y1poS9dIYSnn/2XC//hgmUnPfTqu4+4+IE/PTjx7IobOv9j+kPPdLzx0Vdm3XpoZv6/sLz5v/X/el60L7/+37RS6/8tLLX+3wrr/wEAAH2qxEJz6XleZvW+TIb06n2ZDL0uENjrEoPW/9vj9f82nFz9+1/P/ffvf+6+pw+vnHr/f46eP++m4UcdM+KqNU+t+NcX2lsy8/8V5c3/48thYGHr/WX9vyGTS1S1KgYWWhgQAACA/VGpHQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC8vcaceedL33lh+2G3Lrlt5cnj/3r1qV//7NEH/+zKnZ/YHL7x4vKX7ply/FkXTDl54o6Vx874yt1v/v3WEOZ0l6tIilf8/KKpy2qnTPrSxV8+59jPH7V1U12u3prc7XuLcsdW32gKYV3BI40x8VxT151dgZOO/8my6q7EtqYQPlQYmHfevAO6EuubQhheGLj1qyPe05U4L13i5kcmPNWVmJoOfGbkgS93JY7OBSrS3b10UNLdinR3vzsohMEFgXx35w4qrirfxnG5QGW6jasakzZioDEW/UFj0kYMdMYSc+pDaK0OoSpd1f+sS6qqSlf1i7qkqqp0VefUhXB0CKE6XdUjtUlV1emR31WbVBUDB33w6ueHdSXW1YbQWhi4/5TLP9aVOCMVyDd+Ym0If9X1kkk3vrEmabwm3fglNSEcGkKoTZd4sTopUZsu8Xh1CO8qCOQbn10dwrLAO0L88JlZ+ODiZcvnTe/s7FjUh4naXFsNYdaczo6WGQs6Z9al+lRKRUF657nZeGWZY3/4+a/P6Lpddc/aoeWkq3Plarq7PLqm6O6YfdX7ij7qfezXgMJKdj0fmfpj/towMNQvXdyxqOWs6UuWLBqV/C03++jkb1UummyrUftqW5Xrz91WwwsraV1y+sLWxcuWj5xz+vTTOk7rmD+6bczhbUeOGXXEx1u7RtWW/N0XQ708G6/q46EeUl1QyVvxASAhIdHfEpVFn25t+/u/7MwX/V0drQl13R/QmWlFYZaK7lHui0GP3318Xw46MyXJjGhUZuKQyTK69yxjMpOJXVkakizd3+syk8PCmiq7N2m8XxlaWkr+p2suvlu4+f7Uw+YtV9x05aYBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+H/swIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCwAAAAAIMzfOoyeDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuBQAAP//CAsM0g==")
fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffebb)

5m58.375443636s ago: executing program 4 (id=860):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x20200, 0x0)
tee(r0, r1, 0x33, 0x5)

5m58.271950252s ago: executing program 4 (id=861):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0), 0x101a02, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080))
writev(r0, &(0x7f0000000300)=[{&(0x7f0000000140)="3751f02b82f73ccfc7c431617753f5732f765c975ebce8947e5388c4ff26fa3893119fd147a1576d9456136ab5f15493d175754e4b666e989869d01d418adc376ca22d8077c1b54bea92b5977a41d70ebcc4735ce6c012a5fe5ab7fef98e864216699a235d615ded3292397894b34a794bc14a2edfdc6978c0c97bcb02de69264d", 0x81}, {&(0x7f0000002600)="6fd8f2937fedf4884807ea89ca30f6f399d2ee10d72680b136744b49d925faef1e138defcc894937b60d6035b2ce015d7a807bf42ad43670b859682e1f06e3", 0x3f}, {&(0x7f0000000240)="38f2f1", 0x3}], 0x3)

5m58.033877467s ago: executing program 4 (id=862):
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
bind$llc(r0, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54}, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a)
sendfile(r0, r1, 0x0, 0xffffffff000)
bind$llc(r0, 0x0, 0x0)

5m57.682308338s ago: executing program 5 (id=863):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000001000), 0x48882, 0x0)
fallocate(r0, 0x40, 0x1000002000003, 0x3)

5m57.439082301s ago: executing program 5 (id=864):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000040), r0)
sendmsg$FOU_CMD_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, r1, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@FOU_ATTR_IPPROTO={0x5, 0x3, 0x1d}, @FOU_ATTR_TYPE={0x5}]}, 0x24}}, 0x20000000)

5m57.283602805s ago: executing program 5 (id=865):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000080)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000100)={0x28, 0x3, r1, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f00000000c0)={0x28, 0x2, r1, 0x0, &(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x5})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0x5, r1, 0x0, <r2=>0xffffffffffffffff})
ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f0000000300)={0x48, 0x8, r2, 0x0, 0x2fff, 0x2, &(0x7f0000000180)='zr', 0x1})

5m57.194038902s ago: executing program 3 (id=866):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e20, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xc}, 0x1c)

5m57.094022113s ago: executing program 5 (id=867):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000300)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={@cgroup=r1, 0x1d, 0x1, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)

5m56.953857654s ago: executing program 5 (id=868):
syz_mount_image$hfsplus(&(0x7f00000003c0), &(0x7f0000000100)='./file0\x00', 0x201048c, &(0x7f0000000300)=ANY=[], 0xfd, 0x644, &(0x7f0000000cc0)="$eJzs3c1vHGcdB/DvrNdONpTUTZM2oEq1GgkQFolf5IK5EBBCPlSoKgfOVuI0VjZpsV3kVogu79ce+geUg2+ckLhHKhcucOvVRyQkLlwwp0U7O7ve+K126ng37ecTzT7Ps8/MM7/nNzO73l1FE+ALa2k69YcpsjT92manvb0139zemr/fqyc5l6SV1JPUkhT/bbfbHyc3k6I/TLGn3OfD1cU3PvnP9j+7rXq1pChHP2K742lVS6aSjFXlaY136zOPV/RneDPJtaqEoRtP0n7Ez/72TL9nQOOgrc+fSYzAk1V03zf3mUwuVBd6+U7d6j5dO9voTl9r2AEAAADAGXh2JzvZLC4OOw4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4WrR27/9fVcv7+xdFK5lK0bv//0TVl6o+Wl4+2eoPn1QcAAAAAAAAAHCGXt7JTjZzsdduF+Vv/q+Ujcvl45fyTtazkrVcz2aWs5GNrGU2yeTAQBObyxsba7PH2HLuwC3nPiXQc1XZOJ15AwAAAAAAAMDnzK+ztPv7PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAjIIiGesW5XK5V59MrZ7kfJKJznqt5B+9+tPs4bADAAAAgDPw7E52spmLvXa7KD/zv1B+7j+fd/IgG1nNRppZye3yu4Dup/7a9tZ8c3tr/n5n2T/u9/99ojDKEdP97uHgPV8t12jkTlbLZ67nVt5KM7dTK7fsuFrF0xt1T1y/6sRUfK9yzMhuV2Vn5h9U5T7vn2iyhznhlymTZUbG+xmZqWLrZOO53pE5+Aid8Ojs3dNsav1gL+/Z055JPFbOL5SP4+V8fn9YzodibybmBs6+F47OefL1v/zpp3ebD+7dvbM+PTpTOp6xqmyXj439mZgfyMSLn+dM7DNTZuJKv72UH+Unmc5UXs9aVvPzLGcjK5nKD8vacnU+FwOX/CGZuvlI6/VPi2SiOkO7B+tkMb1Sbnsxq/lx3srtrOTV8t9cZvPtLGQhiwNH+MrRR7i86muHXPXtLx8Y/LVvVJVGkj9U5Wjo5PW5gbwOvuZOln2Dz+xm6dIxsnTC18b6V6tKZx+/qcrRsDcTswOZeP7oTPyxfFlZbz64t3Z3+e3j7e7SB1Wlcx39bqTeJTrny6XOwSpbj54dnb7nD+ybLfsu9/tq+/qu9Pu6V2rr0Ct1ovobbv9Ic2Xfiwf2zZd9Vwf6Dvp7C4CRd+GbFyYa/2r8vfFR47eNu43Xzv/g3HfOvTSR8b+Of7c+M/a12kvFn/NRfrn7+R8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHh86+++d2+52VxZ21Npt9vvH9L1NFd6tzM7w51+5ZlkJOY+1Mr/2u129UwxCvEcXWlXHmPzZNjBn1JlyC9MwBN3Y+P+2zfW333vW6v3l99ceXPlweLCwuLM4sKr8zfurDZXZrqPw44SeBJ23/TL5glvRQ0AAAAAAAAAAAAMw1n8d4JhzxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4ui1Np/4wRWZnrs902ttb883O0qvvrllPUktS/CIpPk5uprtkcmC44rD9fLi6+MYnk4Nj1Xvr147a7nha1ZKpJGNVeVrj3frM4xX9GXYSdi31buJg2P4fAAD//828DHo=")
setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000140)=ANY=[], 0x841, 0x1)

5m56.500107149s ago: executing program 5 (id=869):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002000090002000000ffdbdf250400000008000800", @ANYRES32=r5], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000)

5m56.314137256s ago: executing program 3 (id=870):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x500, 0x61, 0x10, 0x75}, [@ldst={0x6, 0x0, 0x3, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48)

5m56.311436192s ago: executing program 3 (id=871):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp6\x00')
pread64(r3, &(0x7f0000000800)=""/254, 0xfe, 0xffffffff)

5m52.631328871s ago: executing program 4 (id=872):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f00000001c0), 0x4000, &(0x7f0000000600)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
statfs(&(0x7f0000000040)='./file0\x00', 0x0)
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r1}, 0x50)
syz_fuse_handle_req(r0, &(0x7f0000004280)="a8698fe7c840998ff296b8001083e08d47cea0b5f5f1d62a6ba00c56a0c7171b20205ff3584fc355d27b14eecab7f12ad31242e982fb39b2743e97a2fc6ef560628457aa60837cb3a82d524d5caf117589c672270bf81f62c59472b483f2611fccddc7e33bf672b042e6709191976c6e9b5e972b810283e6b0fc9397d6cfecc0a8d185070efa26b5f303e6d6f044724e6e8a06649fbc5386996890d81987967aee5b6d6c44b4227237dea6b294a61de053bc506515a72c42bc4f94d0dd6bc3ab26864e5a4bbff035d710fc1577fb49f54030f1b53ac978447740c20a124afe33a0bbe2453a3a7f8eeb6ae566d1ebb17181e275c76f687b003d5237d5005ce73c184233ca8a9602d6636302cf562104a968be14bb18a1b4a2e218af0f2ea71a14bfae6ddbed7aa920110602bfd51a5cb2250c54ca9b14e40dbea16326b331e33d4eba3553405901cedcbbc1fdb615359eba07771e56ef6acc517728df5f84c3d014fd273e9d89df12869cd21dc1d1515c064ff3dba3b6c8440b78c3c4dad9eb09333ba216b3d6d8babdc59d347e09d25cba13b1a691921a756d4e0f935a216293214b50339552a8a2fc4ef5b5513916c152004a2219f6052a74263b8d216c6cd2c84cff6d3e5ab8a2f0f2800c6974f31bd1dbbcfc3d014f31a7f9846c43521c23b96d6e2c7cc2bd5dc1749dd004ce2ee9c4e2638b0b5033a9e188f537b0c26a82612504b2af4e26ea39c743ef3a459162e4fddfaad79b85044d88d94774a50963114ab30d22ddda2b47ea713157bd770f4bdd0f9b829e6d44637b5a417c8880b62cfa51ade109a13e4906d86619252724f0bd8ba90f02154725470f144e3942de0749ee3f5eef7f5d63097739623f110a9eb4b21d2f74b34bb392f373e4d8ec727d65424b2b660c9abf1f668d7ccb04be1b76242412ed884df954679aa3746a34e011bd122a0d46c3a3bf9b6b436c96eb5993735b2cb4b56d376f0278a7b259e29f19e385198ba64810e5b8cc258edb07306077806fc261699f838a57db56359cec57e2cbf664b642348ecf74b0b5a08badc0d10ee9d04857c5524cb6589b481c44324ea73f2dc26a87883b89decea3bd3fb28a1959db90e239cd98215bfdf0b7e932582a6ac7d15c154a9e5143be9a499402ffeed79b21516c09f5837b55f118ca2d224ad6022c58af48e12c2d2dfa0299a2c2c0165d09de9180dbd9c201623f672387154011d878ab2817663553e3ab9c1c0507e0129261751318a6e07d54d1b90c90a097d994c551b552c88d418b127ed130de600f74ca3c23451abf5f09537851ca657e14bc6409bb511eafd812253b582f130294da973acb9e00700000aae980d211e40bc73c0a098cc349f90e5f3292f4873ce1cfb1c0d3aa92a510970f43d2772b57487cfe2e3cb70861aeb3efaf9efe735d10d9249043212a961348c1d7fdf36660927245a5bb079def6e5c9a1d8f54689e45573790c2155df64aa06c093e1fc974127e80d5b9da02954e18c292a52f962bb9f8785599b7e1a35fe153b6022f7bb195f8e3c609dafa52aa3eb6fb2eb82d9a09ab0de0a47f92ee97b05b279e55720e3c4743a6d56f151e5363473d46ce5fb1c5162601856f8c0b3eb7f4f5502928e4bb3ed94ce7446f64578c9faec8a8133e041df740acf6ce510ef7b70dcf7f12e7024ebdd115895f40e684f91003fad967935be2ac19cfa057f2b61a6e2a988e0381f23ea1b204013b0111db5f9b9d018598577acefd7c719b366b8bc575de20ee497c8ed02760275ea9ceb38568f78919df95765296d75a7ccce394016cb02881a3d37de32caf64972cfea2554a591f1b1600a9b5a834af504851fcb400156df3448d671c488e3aebd152d0cc81bf8e8bb57b1d045f11b558cbea0519757025fae2fc2d06250e689743eb8f138711194bfaecbe3512bf32959bc683e84ad6f85b5d7333961c2e5d609255ef0db2b8af4d9f1f80103ff6cb130e0b4d7a9570382683222b709fd6b34aa5884bf7f43e00c4060daae2426bc0c5557057ccd1127e156b5dcd4022d823fc4b10905ad08f956ff0e1e03eadee4b60a325ec1d97193beb3f0c060ac37f05f33a9d5336743178a195e36751b959e47e8fd3cbe8ef3b35da1a5da92f21c50ab22649e95df6533f306314b8b216421f8767fd460550cd759dd6449e31a4b587338ff11eec3080b2bd5c3b0e4882289f6bd4d6e722275c3e2be2520ab3416c7ea85fa8838fa988524fc2f64e3ac7db344b83e095a343ad16d607b4aa5abc687264ce36d4068d712850a47be005c28c07ee71abbe40927a3db0afa1f235e3133cb2743db39404f6ab7925a800fe5e2e2d7b2cc1cb20f53aeb418c1a2cd19ef2a92b9cf21ffb78c5278179132cf93e4e266fef95bce9d3b4bd3cbd6a030b6b8684fead87c1793e72c0b4c7baaca7372faf429ed2b73387b5aec20d9fc4ea6232ebf6cb0101660d8c7a4f8b44aa2f92a3609c1634df6e304e9629bd3c0b2e829490037a3af8129e5526ef1618aade56b9dc083a417f21e5ce3b7582060b610d4a002a3508f9b8f0b700440c79eaaa604984bf8334af9adcc04d8463a17db03683c029e1d6835d210730b308b413eb6ef86dc9769bcb51c6769bee39de193666fd9acdc7f66b7d07403117e43f47a0bc06544069720951eaba218ce8d07a825b0ce5270988ab67f53aaeec00f8f3eeeae428aaa5b8cb1bb14c85e664f7fad1cbe0edbb06e23ce924554ba09a570531ea1363cf257eee4c029ed38f18bdfebb0cc65f40bbe9827b1fe573efd1583187f3b55c7c5a0afbf40f5aa01e145a109bb5e9e75e8f3df23744c6ac79d61baa1164f8a3241d4e232dd6ad622d9a31ccf52686e261601c41895172b957ee12ac62fb53a70e18e597c553c02e49eb62283b39264971782b225f5f92bd87d6252bf87ea5643b167414ffc3b437053747163de0d47bfd60181817ec961a3202f374489826bff503fc342c8c42cd3a662efefd48644cacf9d9af8403ddb8bb75a1db603bb7cb106a9d3a0aafabf5b94a7430658ded8606fdc5ad179a6de2c0f8bca762a482682353ecdbb61b37a62c955fa0767d936d7af967ae19557827b931e7d78f740f8e04920e97e644e0bdbe04a6129fd502fc3105f9847bbe2aee780bf8c2c04814b5d1eb7a2914f55d962391c48e159a3068d0ba0d9fffeabbd3c5c614586fcae265131f5b5ee7722f08389402ed49030e233f163c4a9bf2fe2edb40c62a0b444df6d1f71d06143d0eaf77c2f21e18e87f515496d95ed5371375f5049809606ae868e8432f5faa150d55ca279a108e2a699c2f3c17da228c3d04c249e176a9e1417191313f87486683bfd76e0d22f6dc28293a2ffc0ed382b232e452100d54b7246c86ee78fa94523f523ac18102e9ab3be1001863552bc2aff00232341e90af12ac093bad608ad8e7f14662756cdde565ab4afad649fdbe4beaaee1a84b0e6feb5ce315c5b9758ff16660984b1e3e8d0fdc55fafd8c9e2776f8a2fd4b47cea52a4266a40e4a6f35dfb7d648857a1dcd2d3bbf5a97e11f4ea34a961b84b278fac3db0d898528514b6fa237bcc0e6244fb79d6bf65c45833cbed0a2909934d85c67dd48be04894c39c58e46993f8237d1a48db2bb799826fab1fe81cff37a11ce45fcac5f91ce6d2fd83189501434be495147f8263566a471c2872be6d1ab7587cd8db97e5f45b1cfee6a9ef315d79d30c3a2d2ae72c9d9bb20daaeea1b701d4a8437411fc6c26193b0fc1e477b4c467b0096e5b210d85a270fc72860ed79808e0f77f7742d6318dff9b4274a4972ff652a0f0c22533f00000019f339d7be0503a55aaf462e02d63f8b8651dddfa69373bb9856bdc549bc5248acdc0274ab5af5582047f235083b4a1d2f42162eb1d4bb2b31402c5126e4dc18a0af93f0e71fa036518eab354dfd56f5d0dff6bcfb300b673dd575389f7ec97329d31f94505a34ddbc307a8d428963f97cd548a2380ada5998e24243804777283d993f5bffca4b8775782ce58d8e8390d590455d0914413616b7b9fe90b929029ef89ea983fea1af656653841dd8d479fa1b2ed31baf83aa0da4f6c8fb37affecaab651d211cea279599f0b58707e86a979da10833079d9bd8cd1b7e9cfa7509a600b650dbb62fe3e8d91411baee677dd9eec3707ca3ea2a3fb30f4f4fef55e3bbfe09c0f25340d7bc414ca99b2bcfdfca87015cce9b2e2cdf8aab550185897270d862eb345db7df4286cfb85a9cfba5826d5d045d5696d75838ab4760caea3a20617734bf61e667356cee8cdbfecccd5f022500cecc844b804b65f5320b4841a4b18841cb6a1c684b539a2eae2f6f30d4c21f3dd3de6a1032b62d062c6a005c9b7a218f70de341dbf3cf18cb2b6262eff861eb979ccf88746cf100e04dc31cd26f115f8d504d71c43a03ce250dc29cb3a5bb984cdd3b63e1b5bc399075997a41b8bb463ab781661f2cba9801534fd3e4563eae755f2c077da501289dc81b9e6ec66911b1a019e9a48385feaebcbd2a792f615ea0f250876dc0e0f7bb62bb0eea9bfbf6fe5037178e4bd1354011edec082ae14e15e23174baa8eb4a27179181f656efe516db695358690b754ae31af5e4dc5f497a81281abc3cee25ad685ec660dcecd650f603fc39f626aabea34248cf67457bfb3d9fbf1e5c199dae306d272dffbc77a68cc7297cf9282912ed53e26b5bf0918e4eb01771c0cd637ca97c9368a5825ec364277872f9eb2a9d3642b09655eeb8e17718fcfc6de927705d919024916f2055e0b5ad201ac1dad1029e16b15f2b9d8dc60194f539f5af00adf01b1726e95e906226b53137a642ded6d86d1af43340e2ac88c5d3bd784beeab2a07a36f00736a01760118f7731c49a305b37b5510137efa315ce719f319f99e8b0d46ddc30922c548aa4ab0ad793da1e69ad7f1cda860e8bb11da86ce7cc35fe484aad7c9a213b1d6ac1e3472fbdd6ca17b4f8338a7ced68c257af1b46082f6561924727d90651967aff85b19153d67a6f16a6c1de1db5ffb6237f9d6c2b9d3e74fb4837c0015bdfa8dbbb6dc2f5a87e34ff5169a61c7ced56e508a7f46dc58c8c1d683c8ec27380e7a6fa896ada95212da08fc3036c4c002cb1a89116e668344a933fd14c786a163d5d2ec9039345d25d6583957be83869549b76b3355e787b4649b7698ce7870cd04a2315be98c3e84a12e4299c9c167022c7ee8e9bf49ecba1a490ec35c1c1e0eeba5cc2f53e38b6aa28c00501153a7c492d38808c2a999e07787b558ee387cccce009cc59b56d6c9eefefc9a0c99a86eb2ec036bf3a3e5335caa04ac55b9b4389ef620c57ce2128bec024fe8f23fdbcd751ae49d84bd7d769b1fc30927468b93ad331d29c3118546dd76f553754bc7c4669a845700038daece7fb64d4321ed4dd77a52eb14e89c05557a5b4ebd683b22a536a7010336fc19e9a6e50ba14d31222dc75c0fba29f74eadae35dd337d4f52caa75dce4405f81883b6f5c2912cd8cc4cc14123c001a8cc043a740250c78d369231ec7a3e79918453c604a10e3b5ab01232ef9446333b6a2fb08c18170d78883ec57f94c892f8d1fd56b0915d3de8df85266a0386e58cad506027c7b4c3350b0b598ef39fb1751b9f43eb30b5f218a4e4bda562d9d537b0a1d6a342e6a44a11b207f64bc63956f1d115e84b3a6ec05d9ffa92463aca8c524e50ed559f02327a1c4c6e6cb4181c2a2f4b02b342f3a5dce66c9df0e737b330f1e02fe6782187e88ab7362723519c828dab49fe864a84621f17380d84b1fa1876b04d5eae3becff186e38dfbe64cd10b02d43fd526f4ee740d9a9a2de6fe867596cdf8cda87dffb1ff63bcc82b0700073102bc6424cd4ff4b25b0730bbbacf982efc4d7ade1283b04469813dd93f8f880978c897eddff942c391e1bc4b66ce1796a507668dd00b900acb226709f0c0d40b379783f4f1ba2f7d76c1d4e2aa5d2daf986f7562d40b3fa0e37c87a0a3a35d14d84ff4e56371adde7f9c827fce74b63c8aba9b44c97631c5fe0fb4a51999c4c286f71cb57614eb3f353dfc7f4cdf82013afb20c9160fccc88e441902784969b5d243971ad012e2fd86bc2503f82beb63fab1416fab838b07e6550a90e2ee4ee55e9178cc18dfa1b8b818a4546882eb9375e12832bb179f556b28b6ca30852747be53923a5c1d0e0a9230006462d2e3cb40225773e504be673772c6606c3661b7d2e3d200ede07f75d776873a1120a114b89df7cc086895a7b69392d18098b2effa55721bcfc79a95e72dbd639f1b9f0a4dac34a1152b0c046885e7601c39a0f3e806cac7c4067ddb9bb7680acf58ea1d64a55a5b01346333999d0cc28243ee99d753b21f7da22d64e565ab6a4f454b6b95cba622831c9713b116869b9e50efca995fbe4373e85cbb95cd830868ef3efa01423982c62c0d6cb4ed0a50ceff560e613369c6b372cc4e506b314e8fca6a81c77aecbfb83c54b1202a1606116305face655d14f35d231ca016bfa2fa268f6a05def53430ad4fbfc9169d57fa5588c4931e068cdf63ddc33bfd0fba54adc80c853a5e7cdde0b1ff435c35939c2fb132090265e66138cd8639702ee285b4e9634545443607a9a84f8c15709eb967c2062b1dd01827091d12bb697db53f68a375dee36e021c99a698bc6d928a930a1418e74662c613b2829a367eb408993851f24cc393f2cc07840c9e73cd2f9ca7ded0bfac8a17bc03fc6195eb86a094c69edd41d5f0f9bd31b56d5d2e43572f3f8d2f26ad626ee9eaafaa571ded286e5c80d56581254c64a930c6cd6506fd59aa6e7878040d6471893a1b4d5c80b2a20a95af45b0f0665616296229bb2633f33c185f47176e3f86b10aedaae4b24adad936c0cc7512b90cf7e7de270edb58713b7ba93a1cf2b47d8cd1c00411bd201064558d21631f8e57ad46780ebd942a8b668fc692415f617408cb14faf49ea43f20bbb8185f0c0df8e4e457faca531d316a127bdc125e24d8c061c0f4e07ef38a4ddca42e5ed9e8b77d7545c8859a02dd8726f708183f8b11272bd79920cf646d5f4b37705b2c67467be9f46096eaea79510b34c54db1747241dffb94d984edd0b1607bc88cb4f3ad63ba90f4676c1e5383c1f4505da4b7945219e32ac1cd5ef7398c3a63c8c28e7bed523491b83a27c86245879f2c462cca3f45e82fd8345ee7770e13d3d30641c8a523d8270fdec3a03be1e962642d9394bafb8f0e930a6b7f5ed1e405699b8ad69a6221744582033aa473967e10e9fa16c78db5612f76cb966b3dbee2bde31ec1e941becb54e0bd771fc688f6e716925aa5fdb2aa5c4d5f950c2e0ab252fa9cb52528f52a000501a93aee20152c526a301585fb169cc57aac9b6ff17110420b73978a785d4bdad47b4ee0fbaabb3e3cc57ab9ef43d740eeafa693ab3266941c6bc2266e33ceb46c941e92543ad5428d9f140223658f796f9e53b5507a0983b81d1a916b1104783e5493b78c9999a4dcfdca7675f9711cab87f7f99fd7be5fc1513bead550bd4c61690b527481c650d540fe8888b245c0d35f1a55914a321f13344f4be45cfc07d106c547cec05debc344c506b8c3adb0728a3f1923be535eeac5492758bd51ea3aab0d8df79168d885748644ba3f616ef15fba79d818a45c4da4478e5a1a682cd07505e3b5c2ef2255a8fc058e1a4c0683c70ccf0b38e74e6ca88408266dd090409bad6c75212192804dc013d3dadc4ae0dae0fabb9627e65f6218f3ad09f2f436b52844aa0d63c5bf9845588e8a1b6ceb38d0dc025eca4995e90cf3c7acd801cc543f6c26ed92c8082537d72063d173f48c4fd7aab447e33a72836bfcedb8acaadab1ce9162d82e5b797fda854c90f7028c3137e6ea72815b5a73103efb913ad9b5185ebbd0174a71e87c1283f52021b9c1b443c2d0ad2d97512af2e91e9d302a246b4f1adefba69155144ae0bde1ead8826641105b74519826fe55fb2030cc04f64c336980620bf23dde2d521a8ab0e1743848f1bf53f75373c7bbd57279893754a44119055fd1278cea2fbd324ec614488419b789c931ebfacbd42c9ef910a7bfa9f53170667ae227a31316b9783c109e6d9172debdac681bb0e287185ddf85854d7679cb8022fd26efcd55dc80be8ba2f3e62668f18186a9d90324e36ad8e30bff59d2e9745ca43be7be9e24fa3896d883491f79e72e7e2e4e2d012169d21c2e7b70edd707b1144ff87e8299b232594549a340a1a5e4a2f302f738d1266473516d2ce1a128af47d6136254163c8224a0c65921684d33b6330eea4551aa8cb6d853097d98123accab534d5878970dcf7dd9bbc92461b4c4ace67f5ce435203e6b39f2dba9ff504e639d744e6c3ddb53fcefec0b28df235c2e27b37d0f66ec19edc6acc9b710293851fb4f6d1b324de851aa368c4c25720676d8cf8cba3a1fcdda9053d915758c76b0018398da4f6c9ae6d8ccb384ce51402b4ffcd168a4b2e81e2c6423dbb74221ee5f6a21e9874f3f0000268e1e28cec744b449e8bd0951349186a9a9168a462982ae681e70eaed9ff0da0a91ba37e10428440e2b6fb53ad34445f86b400b687c3e412107de6c49adfd29370714be66132c43a588748ee9e88189f4b1a366657ce74b9281533e129d432d6f8aaceabe9953cadb0f2c1808d7630dec47b4305559ed0a2f4e17c49e1906b0febec47b4dad5017503b112441e8804c6b1ea252bd2d44876ccbecdc37ac70a21fdc4d2a5baac174db70e3e1370e01ebf1a42272500cd840aaa99d3120adcd30897d76e4a77a6244e46e0b4b5d7153a0c4148716b8c71ac1b88c6da412a2331ba0ae4d660db37505fca4c8a75362e71a424c168fc18e1e58a1175b18852620661d2476d20ab5e8a935dd9b72bea4e481182ceef04f5ab274727c37841d99b8aa3d3272487540f457db07178091ad49e50b7bf8351909a83c5bc8a3abc5d941d6b8d628ed74832c21c93a65bef1cefb74a2038737bb8d03fa998208331a8cdb67b05ca225ed0e56eb6f76ec2c221d9c9d0059ff098efa801168000964aee15aac2c652fe2ae84a71a0c51b7eae1cc95779dd5c564909ca5ce99e9ee437d8732238c0dc386f5b0313bbf3ef2504f881a9c84c005fc7232be24c8f1ac6505d8d45f0d5af15628841bc385fc532ae8f900d7ae218fb1b152cdaf9d5c06191ada4b0f6ae9763cb763ae991d9dc28de27edb25f649ae9eb57150e95469e1a4fb4f52d3266a2c3aecefb5d2d6b17d483172edcd2fd5349f0b5cb038175110e85b0f4e1a0e645160f6c63381002cb75751f7290c8452a7febf264278f0b556831b78851598904a49754558a40dc36c5594e305a5f9938e6a0e63e39742b3c1b4fe30cd2102c12c55fe00424de2568b5a67ab138411c7e7e94f70bdbf09df60dacc12f7a72eba90e10eb73f8f3cd7b54438f32653186c71975fedc5c822ebbd0197dff5cc7eb2942c8abde04b570e77d72cfe1126d430732903dcfcc4bd137c05ee93b58a2730abc496c6fc9a34f509b43d69e5c1a3c18b47af168f4a129dc1f243eea9fe95739ddc5e02691eebae8147019b27b72e0c3b3469fcea1a65097af93a5220fa024474094976e52b5a374a18b2fc3b437748dd7c46c42f607c74e39ef5ffa3764aa6badc1a6da195a6239c6d5aafb0122f955708281087ec0d6ed0caf98413cabbd2b9b5b1342b3e1cb85caae60292c861af200bd7939efabb69dbf27cb44a23ca6f669820f70d1975de267f58e2b2e64ef0b17bb0b074b5c91adba8f3205650b783105d2a43c798c72160f28715f7032226efaaeab6f39a57e0837a1d7ac9df2a4059e51b8b0e8f0387aaaecf925398d006e94fb98db879cd5f4192640866c283775561375ac76b3aaa3f9e228b30b6e327393abe17d7659a3d5ab89598161127d2a43acb57319c9cc987a2bed86546d45be92d7904d10307d9f2fecf33bfb3c4f29331e49b38a959585ac98254efa4bb0841e63b079bae1d069d50f08758489e699f06016188b55ccf9ecb97f6d75198d9576c2ee81d3ef1ac3db748a6bf1afba6d10f6bd6a9a589cffbb348d4aa091369706e26011e80a8fd5d57fa38d6b8328de98b3f748a54f21a7d0d646a8179f9ff0f71f5d030246a85c6828fa7fdc04a9f51a742e33175e181712da01d2cdba35f82cf836cbcb84e1da57b6a0c2a90946c7065f0425b015ec436175e2220c273b8aa6848fe235142c43ca8df9db45659fc5ce84ffcda9ad058b9a83e778d77896a60a4d1f51ad14b9b840cb11a325e70740847f1fea6143d4f8193abbceb2e7d986900000100538759ca1e81b4a5e4f8688774eb594f28117fb11efde05a94e4371b960ee05ff5bdd55d485c38de17d566ccd7ac38a1cfa427badbb9d648fb0a29b04f1d90ac9a521dc1e1ba40f46cc436b6b66e980608ed73f43e536f5ded2637da3b0b56f00faf03c9350669cfac4e8873b9e50c2d78b7f3160f54367c4e01100a30d12beee2e98fd8a70d07e1cc20b3db2adf9766d74806f320313fb92c56a2a879b7c9d03fe3b24b6ab1b3e8e8ad5c153303afabd871aac88b7efdd48c3fb47848f98e3d176a3ab6b3cca846ea32d950cb605517982f6844958b928302470a780d98c4b1a4b5ab01adc895c844fb9ac78ae8998de1f2ab8d0b21a81e5585601ef2fee598fef5c0ca9f0d749c156ed77d858f372023db32079ab1d44d75eae1b74101a3d31c885211152664a2dd0b3a9952f1d64c9a9ffd7480d48ceec13e0fa18bee849e3b0dffe05073cfe76fcdae647ca64e2c4864d9c080ba1f86c9c7ae632fbb3f9c0de1df72c372122321dfb969bed743ff4a6809cd4b8af60d8bb48f6fafc080bb4a7e55430796ad7e1ab7a0170b9259e14ab2875a6f9de4597aa5781f0a12fcd6588485be3bc6f15ab5d228b1144f616f5a0fde66943e5cbdfb511dca3c35222f53d6ce02c3c354b5071929c174d65f03e9501c481b1e4d223fe9424b469b907a821ef6ead43c8852cea298b1baf1ca39932526d9a1cbf5706ba47d694bf6a451dbff9727f8184c38b3c2f6c50f3459e6f7c32bd829c12d370fcd1940c583b28863e718dbe737662aa67147c9073ddb3ea47442fb4f8cb3db2c486cde6a480ba798362309269b06eb5f36465692899599db8b8f928b0d5ffd650737b18c0dc6a2b4a22ff842355f047f314f224e890a67ad8d92fe6fa4cca60859fa50779f3639bd20c6522a84680de3f181671ce762505f723930fddddea9884468f0349c3ef43468746914af91511db05b2e8ea31804c3cb78c411ab23df80edac64bd6a40711e5ed9146dfd0e090c84c4d6af48629ae746eddd57f93fa2b718245992a0c441ed7828c35522ff1943f2c46c2ade0267c2c811171c13f6b5a9704b126884c10a1c4671908b55b3dd1dc8b9b16dfaa17dc286c723a5f5edd878673b3ebe9d7170513179dea4d1081869e81ee4a01a9b4bb8cb2cae6679bb6871b1e95462cbef80f35076efc3e554f8d7c60ff6c704d5ec9a44c42f2bceb95c71bf5538557722948e9b552ea000a9756c3d84bc40c32ee97de6a9c900", 0x2000, &(0x7f0000004200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x60, 0x0, 0x0, {{0x0, 0xdc5, 0x0, 0x0, 0x0, 0x0, 0x7, 0x40000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

5m4.588311208s ago: executing program 35 (id=869):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0)
r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000002000090002000000ffdbdf250400000008000800", @ANYRES32=r5], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000)

4m13.89124887s ago: executing program 36 (id=871):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp6\x00')
pread64(r3, &(0x7f0000000800)=""/254, 0xfe, 0xffffffff)

4m12.930691126s ago: executing program 37 (id=872):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f00000001c0), 0x4000, &(0x7f0000000600)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
statfs(&(0x7f0000000040)='./file0\x00', 0x0)
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r1}, 0x50)
syz_fuse_handle_req(r0, &(0x7f0000004280)="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", 0x2000, &(0x7f0000004200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x60, 0x0, 0x0, {{0x0, 0xdc5, 0x0, 0x0, 0x0, 0x0, 0x7, 0x40000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

2m31.851088212s ago: executing program 7 (id=1702):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000000000070000000900010073797a300000000054000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000c080003"], 0xd8}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0)

2m31.799205713s ago: executing program 7 (id=1703):
syz_mount_image$xfs(&(0x7f0000009680), &(0x7f00000096c0)='./file0\x00', 0x0, &(0x7f00000000c0), 0x1, 0x96a4, &(0x7f0000012d80)="$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")
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804071, 0x0, 0x0, 0x0, &(0x7f0000000140))
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.numa_stat\x00', 0x275a, 0x0)
fallocate(r0, 0x10, 0x17e, 0x1000f)
creat(&(0x7f0000000d80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)

2m31.183324076s ago: executing program 7 (id=1704):
r0 = syz_io_uring_setup(0x49f, &(0x7f0000000400)={0x0, 0xe7a8, 0x400, 0x7ffe, 0x40024e}, &(0x7f0000000340), &(0x7f0000000040))
r1 = eventfd2(0xff, 0x80001)
io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, &(0x7f0000000300)=r1, 0x1)
io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x4, 0x0, 0x1)

2m30.951607437s ago: executing program 7 (id=1705):
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=ANY=[], 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = getpid()
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, 0x0, 0x0)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r2}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x10}}, 0x0)
bind$netlink(0xffffffffffffffff, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc)
r7 = socket$inet6(0xa, 0x3, 0x2f)
connect$inet6(r7, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c)
syz_pidfd_open(r0, 0x0)
getpid()
syz_emit_vhci(&(0x7f0000000080)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x0, 0x407}}}, 0x7)

2m30.047127048s ago: executing program 7 (id=1712):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
mkdir(&(0x7f0000000180)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, &(0x7f0000000180))

2m29.160084538s ago: executing program 7 (id=1716):
r0 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10)
r1 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10)
r2 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10)
r3 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10)
r4 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x2}, 0x1be)
sendmsg$tipc(r4, &(0x7f0000000180)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10, 0x0}, 0x0)

2m14.064923897s ago: executing program 38 (id=1716):
r0 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10)
r1 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10)
r2 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10)
r3 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000280)={0x41, 0x0, 0x2}, 0x10)
r4 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000100)={0x41, 0x0, 0x2}, 0x1be)
sendmsg$tipc(r4, &(0x7f0000000180)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10, 0x0}, 0x0)

1m25.600305881s ago: executing program 9 (id=2044):
syz_usb_connect(0x0, 0x36, &(0x7f00000002c0)={{0x12, 0x1, 0x0, 0x5f, 0xf4, 0x8a, 0x40, 0x5ac, 0x219, 0x8b0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0xc, 0x1, 0x0, 0x6, [{{0x9, 0x4, 0x68, 0x5, 0x2, 0x3, 0x93, 0x2, 0x9, [], [{{0x9, 0x5, 0x9, 0x4, 0x8, 0x0, 0x2, 0x1}}, {{0x9, 0x5, 0x6, 0x3, 0x3ff, 0x9, 0x2, 0xf}}]}}]}}]}}, 0x0)

1m23.320910005s ago: executing program 9 (id=2048):
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x1})
r0 = syz_open_dev$sg(&(0x7f0000007700), 0x0, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f0000000040)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0xf5ff, 0x0}, &(0x7f0000000000)="a2b2536b0513", 0x0, 0x0, 0x0, 0x0, 0x0})

1m23.197891721s ago: executing program 9 (id=2050):
socket$inet6_tcp(0xa, 0x1, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder1\x00', 0x0, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000800), 0x161200, 0x0)
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000, 0x2}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000a0000000c0000800800", @ANYRES16=r0], 0x20}, 0x1, 0x0, 0x0, 0x200c0801}, 0x0)

1m23.110999723s ago: executing program 9 (id=2051):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x1000001, &(0x7f0000000180)={[{@resuid}, {@init_itable}, {@stripe={'stripe', 0x3d, 0xd40}}, {@noblock_validity}]}, 0x7, 0x453, &(0x7f00000009c0)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount(0x0, &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x20, 0x0)

1m22.958593633s ago: executing program 9 (id=2052):
syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000c80)='./file1\x00', 0x80, &(0x7f0000000180)=ANY=[], 0x3, 0xc6b, &(0x7f0000004180)="$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")
r0 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
ftruncate(r0, 0x6)

1m22.5507847s ago: executing program 9 (id=2054):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000180), 0x1, 0x553, &(0x7f0000001080)="$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")
r0 = open(&(0x7f00000001c0)='./file1\x00', 0x20042, 0x45)
r1 = open(&(0x7f0000000200)='./file2\x00', 0x100, 0x123)
copy_file_range(r1, 0x0, r0, 0x0, 0x3df1, 0x0)
r2 = open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x169)
pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x1}], 0x1, 0x2, 0x0, 0x2)

1m22.414447986s ago: executing program 39 (id=2054):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000180), 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==")
r0 = open(&(0x7f00000001c0)='./file1\x00', 0x20042, 0x45)
r1 = open(&(0x7f0000000200)='./file2\x00', 0x100, 0x123)
copy_file_range(r1, 0x0, r0, 0x0, 0x3df1, 0x0)
r2 = open(&(0x7f0000000140)='./file1\x00', 0x64042, 0x169)
pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x1}], 0x1, 0x2, 0x0, 0x2)

54.798246678s ago: executing program 6 (id=1536):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x21018}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve0\x00'}]}, 0x50}}, 0x80)

45.665682837s ago: executing program 6 (id=1536):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x21018}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve0\x00'}]}, 0x50}}, 0x80)

37.885119534s ago: executing program 6 (id=1536):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x21018}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve0\x00'}]}, 0x50}}, 0x80)

32.283591952s ago: executing program 1 (id=2314):
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x10002, 0x1, 0x1})
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
ioctl$vim2m_VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f0000000100)={0x2, 0xcc, 0x3, {0x3, @vbi={0xffffffff, 0x6, 0x9, 0x32344d59, [0x0, 0x8ad3], [0x81, 0x5], 0x13a}}, 0x1})
timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)

30.358197341s ago: executing program 1 (id=2319):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x8848, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000100081044e81f782db44b904021d080c43000000e8fe55a1190015000600142603600e1209001b0000000401a80016000a0003402f080000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0)

30.287383944s ago: executing program 1 (id=2320):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000040)='cpu.max\x00', 0x2, 0x0)
sendfile(r1, r1, 0x0, 0x40000000000004)

30.169624067s ago: executing program 1 (id=2323):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x2000008, &(0x7f0000000080), 0x0, 0x52e, &(0x7f0000000f00)="$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")
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000240)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r0, &(0x7f0000000340)={0x2020}, 0xcb0a)

29.948086121s ago: executing program 1 (id=2326):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
getsockopt$inet_tcp_int(r0, 0x6, 0x1, &(0x7f0000000100), &(0x7f0000000240)=0xffffffffffffff16)

29.767969844s ago: executing program 1 (id=2327):
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x5, 0x4, 0x2}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002500)={{r1}, &(0x7f0000002480), &(0x7f00000024c0)=r0}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r1, &(0x7f0000000180), &(0x7f0000000040)=@udp6=r0, 0x2}, 0x20)

29.372510833s ago: executing program 40 (id=2327):
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x5, 0x4, 0x2}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000002500)={{r1}, &(0x7f0000002480), &(0x7f00000024c0)=r0}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000240)={r1, &(0x7f0000000180), &(0x7f0000000040)=@udp6=r0, 0x2}, 0x20)

28.016497478s ago: executing program 6 (id=1536):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x21018}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve0\x00'}]}, 0x50}}, 0x80)

18.8020645s ago: executing program 6 (id=1536):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x21018}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve0\x00'}]}, 0x50}}, 0x80)

8.517403694s ago: executing program 6 (id=1536):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x44b, 0x0, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x0, 0x21018}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve0\x00'}]}, 0x50}}, 0x80)

767.253586ms ago: executing program 2 (id=2464):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000500)='/sys/kernel/kexec_crash_size', 0x202, 0x5a)
sendfile(r0, r0, 0x0, 0x6)

767.037819ms ago: executing program 8 (id=2465):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000480)='./file7\x00', 0x1000000, &(0x7f0000000000)={[{@noblock_validity}]}, 0x1, 0x49a, &(0x7f0000000cc0)="$eJzs3c1vFOUfAPDvzPaF9/bHD194UapobERbWlE5eFCjCRcTEz3osZZKkAKG1kQIETQGj8a/QD2a+Bd4wotRTxqvejcmxHABPZg1MztTtt1t6W67bOt+PskuzzM7s8/znWce5pl5pm0APWske0sidkTErxExVMsuXmGk9s+tG5em/7pxaTqJavW1P5N8vZs3Lk2Xq5bbbS8yo2lE+nES+5uUuzUipmZnZ84X+fH5M++Oz124+OSpM1MnZ07OnJ08duzoUxPPPjP59LrEmcV1c98H5w7sPf7mZ69MV+OtH77O6ruj+Lw+jprhNZc5EiNRrVar6aKlA/n7o2v+9o1lZ1066etiRWhJJSKy5urP+/9QVOJ24w3Fyx91tXJAR2Xnp8GGpZX8PSk+B/6rEn0celR5xs+uf8vX3R2BdNf1F7L3mTz+W8Wr9klfZNftyXDtir3SofJ3RBJvXPn78+wVTe9DAACsr2vZ+OeJZuO/NO6tW29XMYcyHBGHI2J3RPw/IvZExD0R+br3RcT9LZY/siTfOP75eWtbga1SNv57rpjbWjz+W5i1Ga4UuZ15/P3J26dmZ44U+2Q0+gez/MQKZXz70i+fFlNeDbL4y/Ff9srKL8eCRT3+6Ftyg+7E1PzUWuMuXf8wYl9fs/iThZmAJCL2RsS+Nr4/22enHv/qQJbetb3x8/r4+4p2WBz/Sq60UaPFql9GPFYr90osib+U1KZIlpufHN8SszNHxsujotGPP119tT7fX5e+c/t3Vtb+25oe/0X8ZTe4cPF0Pl8713oZV3/7ZNlrmnaO/8GYnxpIXs/TA8Wy96fm589PRAwUCxYtn7y9bZkv18/iHz3UvP/vjvjni2K7/RGRHcQPRMSDEXGwqPtDEfFwRBxaIf7vX3zknZX3UCvtv76Tq1n8J1Zq/4jhLDW30P6tJyqnv/tmufLv0P7Xkrz9j+aZ0WLhav7/W20F17j7AAAAYFNIa3PQ6dhCOk3HxmrP8O+Jbensubn5wyPx3tkTtWflh6M/Le90DdXdD50o7g2X+ckl+S0R8b/8SaOteX5s+tzszm4HDz1u+zL9P/N7px56ATaOlqYUks7VA7j7Wur/S5/YADa1vnV/rADYLGp9//luVwPoAud+6F3N+v/liFtdqApwlzn/Q+/S/6F36f/Qu/R/6EmNPxJf/pqSdn7S/3Zi9/E1bd5DiUqHvjnqf2lHBxKRdn3XtZ9IN0I1DhaJwfJvYaxiq8sdbdOlxw8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMDm928AAAD//9/P4G0=")
newfstatat(0xffffffffffffff9c, &(0x7f0000007d40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x4000)

699.63078ms ago: executing program 2 (id=2466):
r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0)
ioctl$I2C_PEC(r0, 0x708, 0x40)
ioctl$I2C_SMBUS(r0, 0x720, &(0x7f0000000240)={0x0, 0x6, 0x2, &(0x7f0000000040)={0xe, "6a6ea751434fff0100000400004182e7ba0300"}})

547.898374ms ago: executing program 8 (id=2467):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000001280)="$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")
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2029c1b, 0x0, 0x1, 0x0, &(0x7f00000007c0))
syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./bus/file0\x00', 0x80000, 0x0, 0x1, 0x0, &(0x7f0000000000))
rename(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./bus/file0\x00')

547.722642ms ago: executing program 2 (id=2468):
r0 = socket(0x10, 0x3, 0x0)
sendto$inet6(r0, &(0x7f0000000000)="7800000018002507b9409b14ffff00000202be04020506056403040c5c0009003f0020010a0000000d0085a168216b46d32345653600648d27000b000a00080049935ade4a460c89b6ec0cff3959547f509058ba86c902007a00004a32000402160008200800000000000000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0)

468.620562ms ago: executing program 2 (id=2469):
r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000100)=0x3)
ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0xa01, 0x63c, 0x1, 0x2, 0xd59f86, 0x2ea, 0x3f, 0x19ef, 0x0, 0x4, 0x2800, 0x2801, 0x2, 0xba2, 0x0, 0x38, {0x8, 0xffffffff}, 0xe, 0x9}})

387.445268ms ago: executing program 2 (id=2470):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000f40)=ANY=[@ANYBLOB="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", @ANYRES8], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x16, 0x0, 0xffffffffffffffff, 0xffffffffffffffc9}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="06ff03076844babeb89e14f00800", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

277.809114ms ago: executing program 8 (id=2471):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtaction={0x9c, 0x30, 0x48b, 0x0, 0x0, {}, [{0x88, 0x1, [@m_ctinfo={0x30, 0x2, 0x0, 0x0, {{0xb}, {0x4, 0x20}, {0x4}, {0xc}, {0xc}}}, @m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xfffffffb}, @multicast2, @remote}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20008000}, 0x50)

277.541386ms ago: executing program 2 (id=2472):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="12010000b1bd2f087d0403508c2f010203010902120001000000000904"], 0x0)
syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000000)=ANY=[], 0x0}, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)

178.010774ms ago: executing program 8 (id=2473):
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000200), 0x1, 0x173, &(0x7f0000000240)="$eJzs201O6mAUxvGnfN7LvX7rxJGJA51IFUiUIQtwA84IVEIsasQJxERdijtxJ24AEt2ANbSNCnFQ28Br5P9LgDN5+p4mHDgMEIC5tew/W7KU9SvP8263JJ0cS3dpw80BmCpPrx6AeZV+Nt0BADOGtWDJf7Skp5ebxiB8ZCPuD8NaKigsafApn4uav7f8183MeD4v6U+U/eUhyO9oPP/3m+cXJvKFyPng/ne3x/P/JP2XtCBpUdJS+FtrRdLqF+c3J87fiHg+kMTo3VdMmk9wgdH0nLZdZz9mPhvmD2Lmc2G+lDBfjpnPh/li48JtxrwGEFfK8PynE85/JuH8A/Os2+uf1V3XuaKgoKB4L0x/MgGYNvu6c2l3e/29dqfeclrOealSPaqUS5XDqu3v5XaS7RzAT/bxpW+6EwAAAAAAAAAAAAAAENeapHXTTQAAAACYiVn8ncj0PQIAAAAAAAAAAAAAAAAAAAC/xVsAAAD//8j7UUo=")

119.239053ms ago: executing program 8 (id=2474):
r0 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$sock_bt_hidp_HIDPCONNADD(r0, 0x400448c8, &(0x7f0000000340)={r1, r1, 0x1, 0x1, &(0x7f00000009c0)="16", 0x31, 0x1, 0x10cf, 0x5df, 0x8b, 0x2, 0x3, 'syz0\x00'})
ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, &(0x7f0000000c80)={0x1, &(0x7f0000001040)=[{@fixed}]})

0s ago: executing program 8 (id=2475):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='tlb_flush\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x19, 0x4, 0x4, 0xc}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000900000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

dding VLAN 0 to HW filter on device bond0
[  587.047190][T19463] 8021q: adding VLAN 0 to HW filter on device team0
[  587.093758][ T8292] bridge0: port 1(bridge_slave_0) entered blocking state
[  587.096800][ T8292] bridge0: port 1(bridge_slave_0) entered forwarding state
[  587.100888][ T8292] bridge0: port 2(bridge_slave_1) entered blocking state
[  587.103571][ T8292] bridge0: port 2(bridge_slave_1) entered forwarding state
[  587.151789][T19463] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  587.156899][T19463] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  587.228252][T19308] veth0_vlan: entered promiscuous mode
[  587.251037][T19308] veth1_vlan: entered promiscuous mode
[  587.320316][T19463] 8021q: adding VLAN 0 to HW filter on device batadv0
[  587.345282][T19308] veth0_macvtap: entered promiscuous mode
[  587.369594][T19308] veth1_macvtap: entered promiscuous mode
[  587.392809][T19308] batman_adv: batadv0: Interface activated: batadv_slave_0
[  587.420542][T19308] batman_adv: batadv0: Interface activated: batadv_slave_1
[  587.428684][T19308] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  587.432208][T19308] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  587.448942][T19308] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  587.451924][T19308] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  587.562537][T19463] veth0_vlan: entered promiscuous mode
[  587.617813][T19463] veth1_vlan: entered promiscuous mode
[  587.621167][   T29] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  587.629901][   T29] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  587.654616][T20354] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2095'.
[  587.658285][T20354] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2095'.
[  587.675888][T19463] veth0_macvtap: entered promiscuous mode
[  587.720743][T19463] veth1_macvtap: entered promiscuous mode
[  587.731008][   T29] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  587.742335][   T29] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  587.752030][T19463] batman_adv: batadv0: Interface activated: batadv_slave_0
[  587.766739][T19463] batman_adv: batadv0: Interface activated: batadv_slave_1
[  587.775200][T19463] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  587.778035][T19463] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  587.780926][T19463] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  587.803476][T19463] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  588.067954][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  588.071244][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  588.118784][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  588.122146][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  588.282505][T20403] loop1: detected capacity change from 0 to 4096
[  588.409755][   T33] audit: type=1800 audit(1751869601.458:69): pid=20403 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2055" name="file1" dev="loop1" ino=33 res=0 errno=0
[  588.784296][ T5863] usb 9-1: new high-speed USB device number 28 using dummy_hcd
[  588.801217][ T5843] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  588.954115][ T5863] usb 9-1: Using ep0 maxpacket: 16
[  588.961156][ T5863] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  588.966202][ T5863] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  588.971443][ T5863] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  588.974687][ T5863] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  588.977274][ T5863] usb 9-1: Product: syz
[  588.978626][ T5863] usb 9-1: Manufacturer: syz
[  588.980120][ T5863] usb 9-1: SerialNumber: syz
[  588.987365][ T5863] usb 9-1: selecting invalid altsetting 1
[  589.419562][ T5843] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  589.613392][ T5863] usb 9-1: selecting invalid altsetting 1
[  589.615398][ T5863] cdc_ncm 9-1:1.0: bind() failure
[  589.810082][ T5822] usb 9-1: USB disconnect, device number 28
[  589.816801][ T5843] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  589.884813][ T5843] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  590.005578][ T5843] bridge_slave_1: left allmulticast mode
[  590.007546][ T5843] bridge_slave_1: left promiscuous mode
[  590.009525][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state
[  590.019623][ T5843] bridge_slave_0: left allmulticast mode
[  590.021449][ T5843] bridge_slave_0: left promiscuous mode
[  590.025065][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state
[  590.388179][T20530] loop8: detected capacity change from 0 to 8
[  590.436494][ T7846] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  590.439928][ T7846] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  590.444290][ T7846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  590.448915][ T7846] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  590.454890][ T7846] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  590.570644][ T5843] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  590.579644][ T5843] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  590.586111][ T5843] bond0 (unregistering): Released all slaves
[  590.598171][T20527] bond0: entered promiscuous mode
[  590.599895][T20527] bond_slave_0: entered promiscuous mode
[  590.601868][T20527] bond_slave_1: entered promiscuous mode
[  590.787769][ T5822] usb 9-1: new high-speed USB device number 29 using dummy_hcd
[  590.809386][T20533] chnl_net:caif_netlink_parms(): no params data found
[  590.915852][ T8810] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  590.947781][ T5843] hsr_slave_0: left promiscuous mode
[  590.950084][ T5843] hsr_slave_1: left promiscuous mode
[  590.952177][ T5843] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  590.953474][ T5822] usb 9-1: Using ep0 maxpacket: 16
[  590.957492][ T5843] batman_adv: batadv0: Removing interface: batadv_slave_0
[  590.958233][ T5822] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  590.964563][ T5822] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  590.965144][ T5843] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  590.968067][ T5822] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  590.970660][ T5843] batman_adv: batadv0: Removing interface: batadv_slave_1
[  590.973913][ T5822] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  590.979672][ T5822] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  590.985754][ T5822] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  590.988302][ T5843] veth1_macvtap: left promiscuous mode
[  590.988616][ T5822] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  590.990409][ T5843] veth0_macvtap: left promiscuous mode
[  590.993486][ T5822] usb 9-1: Manufacturer: syz
[  590.995945][ T5843] veth1_vlan: left promiscuous mode
[  590.998272][ T5843] veth0_vlan: left promiscuous mode
[  591.000685][ T5822] usb 9-1: config 0 descriptor??
[  591.073451][ T8810] usb 2-1: Using ep0 maxpacket: 32
[  591.076735][ T8810] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  591.090222][ T8810] usb 2-1: config 0 has no interface number 0
[  591.094535][ T8810] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8
[  591.097509][ T8810] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  591.100107][ T8810] usb 2-1: Product: syz
[  591.101439][ T8810] usb 2-1: Manufacturer: syz
[  591.104777][ T8810] usb 2-1: SerialNumber: syz
[  591.109293][ T8810] usb 2-1: config 0 descriptor??
[  591.115372][ T8810] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  591.118775][ T8810] usb 2-1: selecting invalid altsetting 1
[  591.120959][ T8810] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  591.138504][ T8810] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  591.142324][ T8810] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  591.148006][ T8810] usb 2-1: media controller created
[  591.158643][ T8810] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  591.215095][T20543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  591.220316][T20543] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  591.301896][ T5822] rc_core: IR keymap rc-hauppauge not found
[  591.304725][ T5822] Registered IR keymap rc-empty
[  591.306937][ T5822] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  591.317664][ T8810] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71
[  591.323754][ T5822] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  591.331040][ T8810] zl10353_read_register: readreg error (reg=127, ret==-71)
[  591.334243][ T8810] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[  591.345699][ T5822] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0
[  591.371554][ T8810] usb 2-1: USB disconnect, device number 10
[  591.372409][ T5822] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input19
[  591.410034][ T5822] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  591.427743][ T5822] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  591.451333][ T5822] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  591.478067][ T5822] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  591.495668][ T5822] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  591.516661][ T5822] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  591.539748][ T5822] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  591.553870][ T5822] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  591.579130][ T5822] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  591.596317][ T5822] mceusb 9-1:0.0: Error: mce write submit urb error = -90
[  591.620797][ T5822] mceusb 9-1:0.0: Registered  with mce emulator interface version 1
[  591.623544][ T5822] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  591.650414][ T5843] team0 (unregistering): Port device team_slave_1 removed
[  591.701748][ T5843] team0 (unregistering): Port device team_slave_0 removed
[  591.799971][ T5822] usb 9-1: USB disconnect, device number 29
[  592.158197][T20533] bridge0: port 1(bridge_slave_0) entered blocking state
[  592.163942][T20533] bridge0: port 1(bridge_slave_0) entered disabled state
[  592.170483][T20533] bridge_slave_0: entered allmulticast mode
[  592.175640][T20533] bridge_slave_0: entered promiscuous mode
[  592.184079][T20533] bridge0: port 2(bridge_slave_1) entered blocking state
[  592.186885][T20533] bridge0: port 2(bridge_slave_1) entered disabled state
[  592.189324][T20533] bridge_slave_1: entered allmulticast mode
[  592.198412][T20533] bridge_slave_1: entered promiscuous mode
[  592.298330][T20533] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  592.303732][T20533] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  592.438298][T20533] team0: Port device team_slave_0 added
[  592.456223][T20533] team0: Port device team_slave_1 added
[  592.527732][ T5207] Bluetooth: hci1: command tx timeout
[  592.563065][ T8410] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  592.584961][T20533] batman_adv: batadv0: Adding interface: batadv_slave_0
[  592.587940][T20533] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  592.617771][T20533] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  592.626499][T20533] batman_adv: batadv0: Adding interface: batadv_slave_1
[  592.629448][T20533] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  592.640778][T20533] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  592.715648][ T8410] usb 2-1: config 220 has an invalid interface number: 76 but max is 2
[  592.720156][ T8410] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  592.737307][ T8410] usb 2-1: config 220 has no interface number 2
[  592.739980][ T8410] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  592.747348][T20533] hsr_slave_0: entered promiscuous mode
[  592.749867][T20533] hsr_slave_1: entered promiscuous mode
[  592.754921][ T8410] usb 2-1: config 220 interface 0 has no altsetting 0
[  592.757620][ T8410] usb 2-1: config 220 interface 76 has no altsetting 0
[  592.760322][ T8410] usb 2-1: config 220 interface 1 has no altsetting 0
[  592.783836][T20856] loop8: detected capacity change from 0 to 32768
[  592.786111][ T8410] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  592.786134][ T8410] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  592.822856][ T8410] usb 2-1: Product: syz
[  592.829515][ T8410] usb 2-1: Manufacturer: syz
[  592.843506][ T8410] usb 2-1: SerialNumber: syz
[  593.074285][ T8410] usb 2-1: selecting invalid altsetting 0
[  593.076990][ T8410] usb 2-1: Found UVC 7.01 device syz (8086:0b07)
[  593.079097][ T8410] usb 2-1: No valid video chain found.
[  593.106392][ T8410] usb 2-1: selecting invalid altsetting 0
[  593.109033][ T8410] usbtest 2-1:220.1: probe with driver usbtest failed with error -22
[  593.118978][ T8410] usb 2-1: USB disconnect, device number 11
[  593.388237][T20533] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  593.415422][T20533] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  593.436208][T20533] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  593.446803][T20533] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  593.584191][T20533] 8021q: adding VLAN 0 to HW filter on device bond0
[  593.615462][T20533] 8021q: adding VLAN 0 to HW filter on device team0
[  593.669595][ T7845] bridge0: port 1(bridge_slave_0) entered blocking state
[  593.672619][ T7845] bridge0: port 1(bridge_slave_0) entered forwarding state
[  593.688275][ T7845] bridge0: port 2(bridge_slave_1) entered blocking state
[  593.691414][ T7845] bridge0: port 2(bridge_slave_1) entered forwarding state
[  593.819081][T20533] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  593.825160][T20533] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  593.848200][T21037] loop8: detected capacity change from 0 to 1024
[  593.908738][T21037] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  593.942388][T21037] ext4 filesystem being mounted at /566/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  594.069491][T20533] 8021q: adding VLAN 0 to HW filter on device batadv0
[  594.096744][ T8305] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  594.466946][T20533] veth0_vlan: entered promiscuous mode
[  594.624992][ T5207] Bluetooth: hci1: command tx timeout
[  595.009713][T21081] loop8: detected capacity change from 0 to 131072
[  595.016459][T21081] F2FS-fs (loop8): Wrong CP boundary, start(512) end(1536) blocks(0)
[  595.019311][T21081] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock
[  595.026232][T20533] veth1_vlan: entered promiscuous mode
[  595.038635][T21081] F2FS-fs (loop8): invalid crc value
[  595.105717][T21081] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0
[  595.108823][T21081] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e4
[  595.118879][T21081] F2FS-fs (loop8): Stopped filesystem due to reason: 0
[  595.128433][T20533] veth0_macvtap: entered promiscuous mode
[  595.177646][T20533] veth1_macvtap: entered promiscuous mode
[  595.221170][T20533] batman_adv: batadv0: Interface activated: batadv_slave_0
[  595.232691][T20533] batman_adv: batadv0: Interface activated: batadv_slave_1
[  595.252709][T20533] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  595.267005][T20533] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  595.287691][T20533] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  595.290767][T20533] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  595.362253][T21081] F2FS-fs (loop8): Start checkpoint disabled!
[  595.481829][T16124] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  595.500761][T16124] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  595.537398][T16124] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  595.549940][T16124] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  596.960441][T21198] loop8: detected capacity change from 0 to 1024
[  596.998541][T21198] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  597.009971][T21198] ext4 filesystem being mounted at /574/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  597.081741][ T8305] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  597.240370][T21211] vlan3: entered promiscuous mode
[  597.242187][T21211] bond0: entered promiscuous mode
[  597.253075][T21211] bond_slave_0: entered promiscuous mode
[  597.255232][T21211] bond_slave_1: entered promiscuous mode
[  597.684394][T21237] loop1: detected capacity change from 0 to 2048
[  597.752383][T21237] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  598.120399][T21253] loop8: detected capacity change from 0 to 1024
[  598.172178][T21253] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  598.177072][T21253] ext4 filesystem being mounted at /576/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  598.189675][T21253] EXT4-fs error (device loop8): ext4_readdir:264: inode #2: block 16: comm syz.8.2141: path /576/file1: bad entry in directory: rec_len is smaller than minimal - offset=876, inode=0, rec_len=0, size=1024 fake=0
[  598.209789][T21253] EXT4-fs (loop8): Remounting filesystem read-only
[  598.254248][ T8305] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  598.305712][ T5843] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  598.873863][ T5843] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  598.972872][ T5843] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  599.049535][ T5843] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  599.174099][ T5843] bridge_slave_1: left allmulticast mode
[  599.175976][ T5843] bridge_slave_1: left promiscuous mode
[  599.177802][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state
[  599.181559][ T5843] bridge_slave_0: left allmulticast mode
[  599.184744][ T5843] bridge_slave_0: left promiscuous mode
[  599.186640][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state
[  599.486842][ T5843] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  599.490957][ T5843] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  599.496199][ T5843] bond0 (unregistering): Released all slaves
[  599.890941][ T5843] hsr_slave_0: left promiscuous mode
[  599.899507][ T5843] hsr_slave_1: left promiscuous mode
[  599.902566][ T5843] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  599.908959][ T5843] batman_adv: batadv0: Removing interface: batadv_slave_0
[  599.919708][ T5843] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  599.923895][ T5843] batman_adv: batadv0: Removing interface: batadv_slave_1
[  599.960486][ T5843] veth1_macvtap: left promiscuous mode
[  599.963216][ T5843] veth0_macvtap: left promiscuous mode
[  599.965616][ T5843] veth1_vlan: left promiscuous mode
[  599.967951][ T5843] veth0_vlan: left promiscuous mode
[  600.067999][ T7846] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  600.073412][ T5863] usb 9-1: new high-speed USB device number 30 using dummy_hcd
[  600.073937][ T7846] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  600.081087][ T7846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  600.086219][ T7846] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  600.114259][ T7846] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  600.227964][ T5863] usb 9-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  600.231855][ T5863] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  600.252858][ T5863] usb 9-1: config 0 descriptor??
[  600.263624][ T5863] cp210x 9-1:0.0: cp210x converter detected
[  600.564355][ T5843] team0 (unregistering): Port device team_slave_1 removed
[  600.609381][ T5843] team0 (unregistering): Port device team_slave_0 removed
[  600.673344][ T5863] cp210x 9-1:0.0: failed to get vendor val 0x000e size 3: -32
[  600.703611][ T5863] usb 9-1: cp210x converter now attached to ttyUSB0
[  600.879921][ T5863] usb 9-1: USB disconnect, device number 30
[  600.894590][ T5863] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  600.925750][ T5863] cp210x 9-1:0.0: device disconnected
[  601.488065][ T5863] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  601.520923][T21329] chnl_net:caif_netlink_parms(): no params data found
[  601.589948][T21490] netlink: 96 bytes leftover after parsing attributes in process `syz.8.2147'.
[  601.668528][ T5863] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  601.672805][ T5863] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2
[  601.687027][ T5863] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  601.702301][ T5863] usb 2-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5
[  601.714200][ T5863] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  601.717563][ T5863] usb 2-1: Product: syz
[  601.719339][ T5863] usb 2-1: Manufacturer: syz
[  601.721309][ T5863] usb 2-1: SerialNumber: syz
[  601.728182][ T5863] usb 2-1: config 0 descriptor??
[  601.740792][ T5863] usb 2-1: Found UVC 34.00 device syz (8086:0b5b)
[  601.744722][ T5863] usb 2-1: No valid video chain found.
[  601.830867][T21329] bridge0: port 1(bridge_slave_0) entered blocking state
[  601.840150][T21329] bridge0: port 1(bridge_slave_0) entered disabled state
[  601.842483][T21329] bridge_slave_0: entered allmulticast mode
[  601.849540][T21329] bridge_slave_0: entered promiscuous mode
[  601.859047][T21329] bridge0: port 2(bridge_slave_1) entered blocking state
[  601.862187][T21329] bridge0: port 2(bridge_slave_1) entered disabled state
[  601.871119][T21329] bridge_slave_1: entered allmulticast mode
[  601.876836][T21329] bridge_slave_1: entered promiscuous mode
[  601.931557][T21577] netlink: 'syz.8.2151': attribute type 32 has an invalid length.
[  601.946578][ T8810] usb 2-1: USB disconnect, device number 12
[  601.947817][T21329] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  601.961360][T21329] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  602.071521][T21329] team0: Port device team_slave_0 added
[  602.082811][T21329] team0: Port device team_slave_1 added
[  602.125828][T21329] batman_adv: batadv0: Adding interface: batadv_slave_0
[  602.128089][T21329] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  602.138717][T21329] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  602.145549][T21329] batman_adv: batadv0: Adding interface: batadv_slave_1
[  602.147850][T21329] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  602.156878][T21329] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  602.209521][T21329] hsr_slave_0: entered promiscuous mode
[  602.216192][ T5207] Bluetooth: hci1: command tx timeout
[  602.219416][T21329] hsr_slave_1: entered promiscuous mode
[  602.543229][ T5863] usb 9-1: new full-speed USB device number 31 using dummy_hcd
[  602.564886][T21772] syzkaller1: entered promiscuous mode
[  602.566697][T21772] syzkaller1: entered allmulticast mode
[  602.714611][ T5863] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  602.719738][ T5863] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3
[  602.738830][ T5863] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00
[  602.743294][ T5863] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  602.756877][ T5863] usb 9-1: SerialNumber: syz
[  602.776498][ T5863] usb 9-1: 0:2 : does not exist
[  603.109166][T21329] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  603.118313][T21329] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  603.135825][T21329] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  603.141801][T21329] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  603.198022][ T5876] usb 9-1: USB disconnect, device number 31
[  603.278846][T21329] 8021q: adding VLAN 0 to HW filter on device bond0
[  603.302863][T21329] 8021q: adding VLAN 0 to HW filter on device team0
[  603.311427][ T8292] bridge0: port 1(bridge_slave_0) entered blocking state
[  603.314666][ T8292] bridge0: port 1(bridge_slave_0) entered forwarding state
[  603.341238][ T8292] bridge0: port 2(bridge_slave_1) entered blocking state
[  603.343963][ T8292] bridge0: port 2(bridge_slave_1) entered forwarding state
[  603.393985][T21868] loop1: detected capacity change from 0 to 512
[  603.398246][T21868] EXT4-fs: Ignoring removed nobh option
[  603.415720][T21868] fscrypt (loop1, inode 2): Error -61 getting encryption context
[  603.419112][T21868] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -61
[  603.422472][T21868] EXT4-fs error (device loop1): ext4_orphan_get:1393: inode #13: comm syz.1.2165: casefold flag without casefold feature
[  603.427926][T21868] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.2165: couldn't read orphan inode 13 (err -117)
[  603.433184][T21868] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  603.488741][T19463] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  603.558374][T21329] 8021q: adding VLAN 0 to HW filter on device batadv0
[  603.629578][T21887] loop1: detected capacity change from 0 to 4096
[  603.668495][T21887] ntfs3(loop1): ino=9, attr_set_size
[  603.806677][T21902] loop8: detected capacity change from 0 to 512
[  603.835191][T21902] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  603.839586][T21902] ext4 filesystem being mounted at /590/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  603.872196][ T8305] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  603.895873][T21329] veth0_vlan: entered promiscuous mode
[  603.918672][T21329] veth1_vlan: entered promiscuous mode
[  603.977470][T21329] veth0_macvtap: entered promiscuous mode
[  603.990291][T21918] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2170'.
[  604.028098][T21918] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2170'.
[  604.044182][ T5207] Bluetooth: hci2: command 0x0406 tx timeout
[  604.081556][T21329] veth1_macvtap: entered promiscuous mode
[  604.109852][T21329] batman_adv: batadv0: Interface activated: batadv_slave_0
[  604.124988][T21329] batman_adv: batadv0: Interface activated: batadv_slave_1
[  604.139483][T21329] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  604.149362][T21329] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  604.152337][T21329] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  604.166385][T21329] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  604.270471][ T1147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  604.279330][ T1147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  604.284186][ T7846] Bluetooth: hci1: command tx timeout
[  604.324788][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  604.330017][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  604.417237][T21969] bond3: entered promiscuous mode
[  604.419142][T21969] bond3: entered allmulticast mode
[  604.432554][T21969] 8021q: adding VLAN 0 to HW filter on device bond3
[  604.595408][T22014] loop8: detected capacity change from 0 to 32768
[  604.857201][T22037] usb usb1: check_ctrlrecip: process 22037 (syz.8.2179) requesting ep 01 but needs 81
[  604.860416][T22037] usb usb1: usbfs: process 22037 (syz.8.2179) did not claim interface 0 before use
[  604.899035][T22040] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2180'.
[  604.908407][T22040] netlink: 'syz.8.2180': attribute type 1 has an invalid length.
[  604.911410][T22040] netlink: 'syz.8.2180': attribute type 2 has an invalid length.
[  605.128101][T22058] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2186'.
[  605.419761][T22064] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  605.603304][T22062] loop1: detected capacity change from 0 to 4096
[  606.115619][ T7950] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  607.608263][ T7950] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  607.693348][ T7950] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  607.765117][ T7950] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  607.799858][T22104] loop1: detected capacity change from 0 to 2048
[  607.836051][T22104] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found!
[  607.925091][ T5207] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  607.929485][ T5207] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  607.934791][ T5207] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  607.949510][ T5207] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  607.961425][ T5207] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  608.149495][ T7950] bridge_slave_1: left allmulticast mode
[  608.151741][ T7950] bridge_slave_1: left promiscuous mode
[  608.166825][ T7950] bridge0: port 2(bridge_slave_1) entered disabled state
[  608.179863][ T7950] bridge_slave_0: left allmulticast mode
[  608.182165][ T7950] bridge_slave_0: left promiscuous mode
[  608.189657][ T7950] bridge0: port 1(bridge_slave_0) entered disabled state
[  609.013127][ T7950] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  609.065283][ T7950] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  609.079310][ T7950] bond0 (unregistering): Released all slaves
[  609.424385][T22109] chnl_net:caif_netlink_parms(): no params data found
[  609.649668][T22177] loop1: detected capacity change from 0 to 32768
[  609.676153][T22177] ocfs2: Slot 0 on device (7,1) was already allocated to this node!
[  609.686218][T22177] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  609.789777][T19463] ocfs2: Unmounting device (7,1) on (node local)
[  609.842782][ T7950] hsr_slave_0: left promiscuous mode
[  609.874600][ T7950] hsr_slave_1: left promiscuous mode
[  609.885583][ T7950] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  609.888045][ T7950] batman_adv: batadv0: Removing interface: batadv_slave_0
[  609.906565][ T7950] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  609.909839][ T7950] batman_adv: batadv0: Removing interface: batadv_slave_1
[  609.971569][ T7950] veth1_macvtap: left promiscuous mode
[  609.980930][ T7950] veth0_macvtap: left promiscuous mode
[  609.984259][ T7950] veth1_vlan: left promiscuous mode
[  609.991216][ T7950] veth0_vlan: left promiscuous mode
[  610.043414][ T7846] Bluetooth: hci1: command tx timeout
[  610.225337][T22333] loop8: detected capacity change from 0 to 32768
[  610.288230][T22333] XFS (loop8): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  610.314624][T22333] XFS (loop8): Ending clean mount
[  610.391210][ T8305] XFS (loop8): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  610.629808][ T7950] team0 (unregistering): Port device team_slave_1 removed
[  610.668876][ T7950] team0 (unregistering): Port device team_slave_0 removed
[  611.135568][T22109] bridge0: port 1(bridge_slave_0) entered blocking state
[  611.138379][T22109] bridge0: port 1(bridge_slave_0) entered disabled state
[  611.142070][T22109] bridge_slave_0: entered allmulticast mode
[  611.156814][T22109] bridge_slave_0: entered promiscuous mode
[  611.173064][T22109] bridge0: port 2(bridge_slave_1) entered blocking state
[  611.193053][T22109] bridge0: port 2(bridge_slave_1) entered disabled state
[  611.195979][T22109] bridge_slave_1: entered allmulticast mode
[  611.200309][T22109] bridge_slave_1: entered promiscuous mode
[  611.278317][T22109] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  611.302446][T22109] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  611.455083][T22109] team0: Port device team_slave_0 added
[  611.486376][T22109] team0: Port device team_slave_1 added
[  611.554973][T22458] loop1: detected capacity change from 0 to 128
[  611.586643][T22458] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  611.615670][T22458] ext4 filesystem being mounted at /61/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  611.628236][T22461] mac80211_hwsim hwsim19 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33)
[  611.638894][T22109] batman_adv: batadv0: Adding interface: batadv_slave_0
[  611.641111][T22109] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  611.652276][T22458] EXT4-fs warning (device loop1): __ext4_ioctl:1259: Setting inode version is not supported with metadata_csum enabled.
[  611.683125][T22109] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  611.689561][T22109] batman_adv: batadv0: Adding interface: batadv_slave_1
[  611.692753][T22109] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  611.705808][T22109] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  611.746207][T19463] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  611.771800][T22109] hsr_slave_0: entered promiscuous mode
[  611.781768][T22109] hsr_slave_1: entered promiscuous mode
[  611.861112][T22519] loop1: detected capacity change from 0 to 4096
[  611.873086][T22519] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512).
[  611.907108][T22519] ntfs3(loop1): $Secure::$SII is corrupted.
[  611.909210][T22519] ntfs3(loop1): Failed to initialize $Secure (-22).
[  612.088136][T22531] loop8: detected capacity change from 0 to 32768
[  612.121609][   T33] audit: type=1800 audit(1751869625.178:70): pid=22531 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2220" name="file2" dev="loop8" ino=5 res=0 errno=0
[  612.128853][ T7846] Bluetooth: hci1: command tx timeout
[  612.253059][  T790] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  612.380081][T22109] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  612.385068][T22109] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  612.389410][T22109] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  612.394963][T22109] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  612.417290][  T790] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  612.420102][  T790] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  612.428303][  T790] usb 2-1: config 0 descriptor??
[  612.438280][  T790] cp210x 2-1:0.0: cp210x converter detected
[  612.498955][T22109] 8021q: adding VLAN 0 to HW filter on device bond0
[  612.520487][T22109] 8021q: adding VLAN 0 to HW filter on device team0
[  612.536220][ T8296] bridge0: port 1(bridge_slave_0) entered blocking state
[  612.538934][ T8296] bridge0: port 1(bridge_slave_0) entered forwarding state
[  612.559080][ T8296] bridge0: port 2(bridge_slave_1) entered blocking state
[  612.561714][ T8296] bridge0: port 2(bridge_slave_1) entered forwarding state
[  612.841593][  T790] cp210x 2-1:0.0: failed to get vendor val 0x370c size 13: -71
[  612.845529][  T790] cp210x 2-1:0.0: GPIO initialisation failed: -71
[  612.857627][T22109] 8021q: adding VLAN 0 to HW filter on device batadv0
[  612.863867][  T790] usb 2-1: cp210x converter now attached to ttyUSB0
[  612.886454][  T790] usb 2-1: USB disconnect, device number 13
[  612.890622][  T790] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  612.899201][  T790] cp210x 2-1:0.0: device disconnected
[  613.075334][T22707] loop8: detected capacity change from 0 to 512
[  613.099065][T22707] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  613.165250][T22707] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  613.176671][T22109] veth0_vlan: entered promiscuous mode
[  613.187867][T22707] ext4 filesystem being mounted at /620/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  613.191025][T22109] veth1_vlan: entered promiscuous mode
[  613.227464][T22109] veth0_macvtap: entered promiscuous mode
[  613.231645][T22109] veth1_macvtap: entered promiscuous mode
[  613.241912][T22109] batman_adv: batadv0: Interface activated: batadv_slave_0
[  613.252415][T22109] batman_adv: batadv0: Interface activated: batadv_slave_1
[  613.262418][ T8305] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  613.269643][T22109] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  613.272726][T22109] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  613.285622][T22109] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  613.289200][T22109] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  613.384091][ T8296] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  613.391962][ T8296] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  613.418048][ T8292] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  613.421182][ T8292] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  613.490025][T22740] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2232'.
[  613.506013][T22740] netlink: 68 bytes leftover after parsing attributes in process `syz.1.2232'.
[  613.509445][T22740] netlink: 10 bytes leftover after parsing attributes in process `syz.1.2232'.
[  613.612115][T22754] loop8: detected capacity change from 0 to 1764
[  614.029943][T22774] loop8: detected capacity change from 0 to 32768
[  614.037840][T22774] XFS: noikeep mount option is deprecated.
[  614.061370][T22774] XFS (loop8): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  614.087022][T22771] loop1: detected capacity change from 0 to 40427
[  614.101409][T22771] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  614.105714][T22774] XFS (loop8): Ending clean mount
[  614.108473][T22771] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  614.115250][T22774] XFS (loop8): Quotacheck needed: Please wait.
[  614.131279][T22771] F2FS-fs (loop1): invalid crc value
[  614.152051][T22774] XFS (loop8): Quotacheck: Done.
[  614.233507][T22771] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  614.250999][T22771] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  614.252526][ T8305] XFS (loop8): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  614.319725][   T33] audit: type=1800 audit(1751869627.368:71): pid=22771 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2237" name="file1" dev="loop1" ino=10 res=0 errno=0
[  614.330912][T22771] syz.1.2237: attempt to access beyond end of device
[  614.330912][T22771] loop1: rw=34817, sector=77824, nr_sectors = 8 limit=40427
[  614.356510][T22771] syz.1.2237: attempt to access beyond end of device
[  614.356510][T22771] loop1: rw=0, sector=77824, nr_sectors = 8 limit=40427
[  614.371080][T22771] syz.1.2237: attempt to access beyond end of device
[  614.371080][T22771] loop1: rw=0, sector=77824, nr_sectors = 8 limit=40427
[  614.832774][T22823] loop8: detected capacity change from 0 to 512
[  614.846359][T22823] EXT4-fs: Ignoring removed orlov option
[  614.849522][T22823] EXT4-fs (loop8): Test dummy encryption mode enabled
[  614.852260][T22823] EXT4-fs (loop8): bad geometry: first data block is 0 with a 1k block and cluster size
[  615.167336][ T5842] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  615.431566][T22845] loop8: detected capacity change from 0 to 40427
[  615.443804][T22845] F2FS-fs (loop8): invalid crc value
[  615.489594][   T52] wlan1: Trigger new scan to find an IBSS to join
[  615.495177][T22845] F2FS-fs (loop8): Start checkpoint disabled!
[  615.498631][T22845] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6
[  615.518263][   T33] audit: type=1800 audit(1751869628.578:72): pid=22845 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2252" name="file1" dev="loop8" ino=10 res=0 errno=0
[  615.531493][ T1089] kworker/u10:5: attempt to access beyond end of device
[  615.531493][ T1089] loop8: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  615.537291][ T1089] CPU: 1 UID: 0 PID: 1089 Comm: kworker/u10:5 Not tainted 6.16.0-rc4-syzkaller-00286-gc435a4f487e8-dirty #0 PREEMPT(full) 
[  615.537303][ T1089] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  615.537307][ T1089] Workqueue: writeback wb_workfn (flush-7:8)
[  615.537324][ T1089] Call Trace:
[  615.537328][ T1089]  <TASK>
[  615.537331][ T1089]  dump_stack_lvl+0x189/0x250
[  615.537346][ T1089]  ? __pfx_dump_stack_lvl+0x10/0x10
[  615.537355][ T1089]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  615.537374][ T1089]  ? __pfx_queue_work_on+0x10/0x10
[  615.537382][ T1089]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  615.537390][ T1089]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  615.537400][ T1089]  ? f2fs_hw_is_readonly+0x39b/0x470
[  615.537412][ T1089]  f2fs_handle_critical_error+0x37c/0x540
[  615.537422][ T1089]  f2fs_write_end_io+0x495/0x810
[  615.537431][ T1089]  ? blkg_put+0x22/0x240
[  615.537445][ T1089]  __submit_merged_bio+0x27a/0x6a0
[  615.537452][ T1089]  ? up_write+0x1c4/0x420
[  615.537462][ T1089]  __submit_merged_write_cond+0x44c/0x530
[  615.537473][ T1089]  f2fs_sync_node_pages+0x1869/0x1a00
[  615.537491][ T1089]  ? __pfx_f2fs_sync_node_pages+0x10/0x10
[  615.537499][ T1089]  ? __percpu_counter_sum+0x1c2/0x1e0
[  615.537520][ T1089]  ? do_raw_spin_lock+0x121/0x290
[  615.537529][ T1089]  ? rcu_is_watching+0x15/0xb0
[  615.537540][ T1089]  ? blk_start_plug+0x52/0x1b0
[  615.537551][ T1089]  f2fs_write_node_pages+0x303/0x6e0
[  615.537561][ T1089]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  615.537576][ T1089]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  615.537584][ T1089]  do_writepages+0x32e/0x550
[  615.537597][ T1089]  ? reacquire_held_locks+0x127/0x1d0
[  615.537603][ T1089]  ? writeback_sb_inodes+0x372/0x1000
[  615.537619][ T1089]  __writeback_single_inode+0x145/0xff0
[  615.537629][ T1089]  ? do_raw_spin_unlock+0x4d/0x240
[  615.537639][ T1089]  writeback_sb_inodes+0x6b5/0x1000
[  615.537660][ T1089]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  615.537689][ T1089]  ? rcu_is_watching+0x15/0xb0
[  615.537703][ T1089]  wb_writeback+0x43b/0xaf0
[  615.537717][ T1089]  ? queue_io+0x351/0x590
[  615.537728][ T1089]  ? __pfx_wb_writeback+0x10/0x10
[  615.537741][ T1089]  ? _raw_spin_unlock_irq+0x23/0x50
[  615.537753][ T1089]  wb_workfn+0x409/0xef0
[  615.537768][ T1089]  ? __pfx_wb_workfn+0x10/0x10
[  615.537779][ T1089]  ? __lock_acquire+0xab9/0xd20
[  615.537793][ T1089]  ? process_scheduled_works+0x9ef/0x17b0
[  615.537805][ T1089]  ? _raw_spin_unlock_irq+0x23/0x50
[  615.537813][ T1089]  ? process_scheduled_works+0x9ef/0x17b0
[  615.537822][ T1089]  ? process_scheduled_works+0x9ef/0x17b0
[  615.537832][ T1089]  process_scheduled_works+0xae1/0x17b0
[  615.537856][ T1089]  ? __pfx_process_scheduled_works+0x10/0x10
[  615.537873][ T1089]  worker_thread+0x8a0/0xda0
[  615.537895][ T1089]  kthread+0x711/0x8a0
[  615.537905][ T1089]  ? __pfx_worker_thread+0x10/0x10
[  615.537914][ T1089]  ? __pfx_kthread+0x10/0x10
[  615.537923][ T1089]  ? _raw_spin_unlock_irq+0x23/0x50
[  615.537931][ T1089]  ? lockdep_hardirqs_on+0x9c/0x150
[  615.537940][ T1089]  ? __pfx_kthread+0x10/0x10
[  615.537948][ T1089]  ret_from_fork+0x3fc/0x770
[  615.537959][ T1089]  ? __pfx_ret_from_fork+0x10/0x10
[  615.537971][ T1089]  ? __switch_to_asm+0x39/0x70
[  615.537977][ T1089]  ? __switch_to_asm+0x33/0x70
[  615.537983][ T1089]  ? __pfx_kthread+0x10/0x10
[  615.537991][ T1089]  ret_from_fork_asm+0x1a/0x30
[  615.538006][ T1089]  </TASK>
[  615.538009][ T1089] F2FS-fs (loop8): Stopped filesystem due to reason: 3
[  615.676467][ T1089] CPU: 1 UID: 0 PID: 1089 Comm: kworker/u10:5 Not tainted 6.16.0-rc4-syzkaller-00286-gc435a4f487e8-dirty #0 PREEMPT(full) 
[  615.676485][ T1089] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  615.676492][ T1089] Workqueue: writeback wb_workfn (flush-7:8)
[  615.676513][ T1089] Call Trace:
[  615.676518][ T1089]  <TASK>
[  615.676524][ T1089]  dump_stack_lvl+0x189/0x250
[  615.676543][ T1089]  ? __pfx_dump_stack_lvl+0x10/0x10
[  615.676556][ T1089]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  615.676570][ T1089]  ? __pfx_queue_work_on+0x10/0x10
[  615.676582][ T1089]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  615.676596][ T1089]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  615.676611][ T1089]  ? f2fs_hw_is_readonly+0x39b/0x470
[  615.676629][ T1089]  f2fs_handle_critical_error+0x37c/0x540
[  615.676643][ T1089]  f2fs_write_end_io+0x495/0x810
[  615.676668][ T1089]  __submit_merged_bio+0x27a/0x6a0
[  615.676679][ T1089]  ? up_write+0x1c4/0x420
[  615.676695][ T1089]  __submit_merged_write_cond+0x44c/0x530
[  615.676713][ T1089]  f2fs_sync_node_pages+0x1869/0x1a00
[  615.676744][ T1089]  ? __pfx_f2fs_sync_node_pages+0x10/0x10
[  615.676756][ T1089]  ? __percpu_counter_sum+0x1c2/0x1e0
[  615.676790][ T1089]  ? do_raw_spin_lock+0x121/0x290
[  615.676805][ T1089]  ? rcu_is_watching+0x15/0xb0
[  615.676821][ T1089]  ? blk_start_plug+0x52/0x1b0
[  615.676838][ T1089]  f2fs_write_node_pages+0x303/0x6e0
[  615.676854][ T1089]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  615.676874][ T1089]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  615.676886][ T1089]  do_writepages+0x32e/0x550
[  615.676907][ T1089]  ? reacquire_held_locks+0x127/0x1d0
[  615.676916][ T1089]  ? writeback_sb_inodes+0x372/0x1000
[  615.676938][ T1089]  __writeback_single_inode+0x145/0xff0
[  615.676953][ T1089]  ? do_raw_spin_unlock+0x4d/0x240
[  615.676969][ T1089]  writeback_sb_inodes+0x6b5/0x1000
[  615.676998][ T1089]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  615.677048][ T1089]  ? rcu_is_watching+0x15/0xb0
[  615.677069][ T1089]  wb_writeback+0x43b/0xaf0
[  615.677091][ T1089]  ? queue_io+0x351/0x590
[  615.677110][ T1089]  ? __pfx_wb_writeback+0x10/0x10
[  615.677162][ T1089]  ? _raw_spin_unlock_irq+0x23/0x50
[  615.677181][ T1089]  wb_workfn+0x409/0xef0
[  615.677206][ T1089]  ? __pfx_wb_workfn+0x10/0x10
[  615.677224][ T1089]  ? __lock_acquire+0xab9/0xd20
[  615.677248][ T1089]  ? process_scheduled_works+0x9ef/0x17b0
[  615.677264][ T1089]  ? _raw_spin_unlock_irq+0x23/0x50
[  615.677276][ T1089]  ? process_scheduled_works+0x9ef/0x17b0
[  615.677289][ T1089]  ? process_scheduled_works+0x9ef/0x17b0
[  615.677305][ T1089]  process_scheduled_works+0xae1/0x17b0
[  615.677344][ T1089]  ? __pfx_process_scheduled_works+0x10/0x10
[  615.677381][ T1089]  worker_thread+0x8a0/0xda0
[  615.677413][ T1089]  kthread+0x711/0x8a0
[  615.677428][ T1089]  ? __pfx_worker_thread+0x10/0x10
[  615.677443][ T1089]  ? __pfx_kthread+0x10/0x10
[  615.677456][ T1089]  ? _raw_spin_unlock_irq+0x23/0x50
[  615.677469][ T1089]  ? lockdep_hardirqs_on+0x9c/0x150
[  615.677483][ T1089]  ? __pfx_kthread+0x10/0x10
[  615.677493][ T1089]  ret_from_fork+0x3fc/0x770
[  615.677509][ T1089]  ? __pfx_ret_from_fork+0x10/0x10
[  615.677528][ T1089]  ? __switch_to_asm+0x39/0x70
[  615.677538][ T1089]  ? __switch_to_asm+0x33/0x70
[  615.677548][ T1089]  ? __pfx_kthread+0x10/0x10
[  615.677561][ T1089]  ret_from_fork_asm+0x1a/0x30
[  615.677586][ T1089]  </TASK>
[  615.677590][ T1089] F2FS-fs (loop8): Stopped filesystem due to reason: 3
[  616.611288][ T5842] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  616.664782][ T5842] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  616.721729][ T5842] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  616.856885][ T5842] bridge_slave_1: left allmulticast mode
[  616.858681][ T5842] bridge_slave_1: left promiscuous mode
[  616.860594][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state
[  616.865033][ T5842] bridge_slave_0: left allmulticast mode
[  616.867006][ T5842] bridge_slave_0: left promiscuous mode
[  616.869099][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state
[  617.309299][ T5207] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  617.314555][ T5207] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  617.329139][ T5207] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  617.334393][ T5207] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  617.336971][ T5207] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  617.511221][ T5842] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  617.518873][ T5842] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  617.526771][ T5842] bond0 (unregistering): Released all slaves
[  618.001486][ T5842] hsr_slave_0: left promiscuous mode
[  618.004187][ T5842] hsr_slave_1: left promiscuous mode
[  618.010037][ T5842] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  618.024189][ T5842] batman_adv: batadv0: Removing interface: batadv_slave_0
[  618.030270][ T5842] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  618.033937][ T5842] batman_adv: batadv0: Removing interface: batadv_slave_1
[  618.066882][ T5842] veth1_macvtap: left promiscuous mode
[  618.069357][ T5842] veth0_macvtap: left promiscuous mode
[  618.072188][ T5842] veth1_vlan: left promiscuous mode
[  618.075423][ T5842] veth0_vlan: left promiscuous mode
[  618.190309][T23026] loop1: detected capacity change from 0 to 32768
[  618.216333][T23026] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  618.259569][T23026] XFS (loop1): Ending clean mount
[  618.309665][T19463] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  618.523303][   T52] wlan1: Trigger new scan to find an IBSS to join
[  618.700255][T23050] loop1: detected capacity change from 0 to 1024
[  618.836841][ T5842] team0 (unregistering): Port device team_slave_1 removed
[  618.876893][ T5842] team0 (unregistering): Port device team_slave_0 removed
[  618.921219][T23056] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2266'.
[  619.403020][ T7846] Bluetooth: hci1: command tx timeout
[  619.427737][T22892] chnl_net:caif_netlink_parms(): no params data found
[  619.446714][   T27] wlan1: Creating new IBSS network, BSSID 66:9d:7f:2f:b0:b9
[  619.500101][    T9] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  619.636131][T22892] bridge0: port 1(bridge_slave_0) entered blocking state
[  619.639042][T22892] bridge0: port 1(bridge_slave_0) entered disabled state
[  619.641431][T22892] bridge_slave_0: entered allmulticast mode
[  619.645220][T22892] bridge_slave_0: entered promiscuous mode
[  619.648951][T22892] bridge0: port 2(bridge_slave_1) entered blocking state
[  619.651306][T22892] bridge0: port 2(bridge_slave_1) entered disabled state
[  619.655604][T22892] bridge_slave_1: entered allmulticast mode
[  619.658225][T22892] bridge_slave_1: entered promiscuous mode
[  619.672999][    T9] usb 2-1: Using ep0 maxpacket: 8
[  619.684164][T22892] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  619.684903][ T5822] usb 9-1: new high-speed USB device number 32 using dummy_hcd
[  619.707476][    T9] usb 2-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d
[  619.712454][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  619.725464][    T9] usb 2-1: Product: syz
[  619.727249][    T9] usb 2-1: Manufacturer: syz
[  619.730662][    T9] usb 2-1: SerialNumber: syz
[  619.731338][T22892] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  619.741742][    T9] usb 2-1: config 0 descriptor??
[  619.750433][    T9] gspca_main: sonixj-2.14.0 probing 0c45:613a
[  619.789904][T22892] team0: Port device team_slave_0 added
[  619.796112][T22892] team0: Port device team_slave_1 added
[  619.822449][T22892] batman_adv: batadv0: Adding interface: batadv_slave_0
[  619.825968][T22892] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  619.835568][T22892] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  619.840171][T22892] batman_adv: batadv0: Adding interface: batadv_slave_1
[  619.843174][T22892] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  619.855500][T22892] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  619.869407][ T5822] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  619.881261][ T5822] usb 9-1: New USB device found, idVendor=1bc7, idProduct=9010, bcdDevice=36.53
[  619.889786][ T5822] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  619.905648][ T5822] usb 9-1: config 0 descriptor??
[  619.908580][T22892] hsr_slave_0: entered promiscuous mode
[  619.911368][T22892] hsr_slave_1: entered promiscuous mode
[  619.922146][ T5822] option 9-1:0.0: GSM modem (1-port) converter detected
[  620.143032][ T5822] usb 9-1: USB disconnect, device number 32
[  620.158058][ T5822] option 9-1:0.0: device disconnected
[  620.609143][T22892] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  620.619055][T22892] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  620.627012][T22892] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  620.635944][T22892] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  620.736190][T22892] 8021q: adding VLAN 0 to HW filter on device bond0
[  620.748503][T22892] 8021q: adding VLAN 0 to HW filter on device team0
[  620.764768][ T1147] bridge0: port 1(bridge_slave_0) entered blocking state
[  620.767398][ T1147] bridge0: port 1(bridge_slave_0) entered forwarding state
[  620.771467][ T1147] bridge0: port 2(bridge_slave_1) entered blocking state
[  620.774270][ T1147] bridge0: port 2(bridge_slave_1) entered forwarding state
[  620.797566][T22892] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  620.950614][T22892] 8021q: adding VLAN 0 to HW filter on device batadv0
[  621.166218][T22892] veth0_vlan: entered promiscuous mode
[  621.178154][T22892] veth1_vlan: entered promiscuous mode
[  621.201164][T22892] veth0_macvtap: entered promiscuous mode
[  621.207459][T22892] veth1_macvtap: entered promiscuous mode
[  621.221812][T22892] batman_adv: batadv0: Interface activated: batadv_slave_0
[  621.238896][T22892] batman_adv: batadv0: Interface activated: batadv_slave_1
[  621.248284][T22892] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  621.251910][T22892] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  621.256958][T22892] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  621.260358][T22892] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  621.283153][ T8810] usb 9-1: new high-speed USB device number 33 using dummy_hcd
[  621.340451][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  621.347497][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  621.377111][ T1147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  621.380018][ T1147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  621.453014][ T8810] usb 9-1: unable to get BOS descriptor or descriptor too short
[  621.457409][ T8810] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 2
[  621.464995][ T8810] usb 9-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  621.470210][ T8810] usb 9-1: config 1 interface 0 has no altsetting 0
[  621.481002][ T8810] usb 9-1: config 1 interface 0 has no altsetting 1
[  621.487904][ T8810] usb 9-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75
[  621.493789][ T8810] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  621.497103][ T8810] usb 9-1: Product: syz
[  621.498842][ T8810] usb 9-1: Manufacturer: syz
[  621.500785][ T8810] usb 9-1: SerialNumber: syz
[  621.721096][ T8810] smsusb:smsusb_probe: board id=8, interface number 0
[  621.736491][ T8810] usb 9-1: selecting invalid altsetting 0
[  621.738807][ T8810] smsusb:smsusb_probe: usb_set_interface failed, rc -22
[  621.741564][ T8810] smsusb 9-1:1.0: probe with driver smsusb failed with error -22
[  621.750420][ T8810] usb 9-1: USB disconnect, device number 33
[  622.461688][T23471] loop8: detected capacity change from 0 to 32768
[  622.473875][T23471] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.2274 (23471)
[  622.490943][T23471] BTRFS info (device loop8): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  622.495332][T23471] BTRFS info (device loop8): using crc32c (crc32c-generic) checksum algorithm
[  622.498955][T23471] BTRFS info (device loop8): using free-space-tree
[  622.591812][ T8305] BTRFS info (device loop8): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  622.800633][T23497] program syz.8.2276 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  622.947839][ T5843] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  623.201275][    T9] gspca_sonixj: reg_w1 err -71
[  623.206261][    T9] sonixj 2-1:0.0: probe with driver sonixj failed with error -71
[  623.210571][    T9] usb 2-1: USB disconnect, device number 14
[  623.967811][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  623.970299][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  624.208210][ T5843] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  624.397084][ T5843] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  624.441945][ T5843] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  624.531717][ T5843] bridge_slave_1: left allmulticast mode
[  624.534566][ T5843] bridge_slave_1: left promiscuous mode
[  624.536622][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state
[  624.540747][ T5843] bridge_slave_0: left allmulticast mode
[  624.543988][ T5843] bridge_slave_0: left promiscuous mode
[  624.545968][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state
[  624.898171][T23530] loop8: detected capacity change from 0 to 4096
[  624.936448][T23530] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  624.963694][T23530] Quota error (device loop8): find_block_dqentry: Quota for id 0 referenced but not present
[  624.970907][T23530] Quota error (device loop8): qtree_read_dquot: Can't read quota structure for id 0
[  624.977531][T23530] EXT4-fs error (device loop8): ext4_acquire_dquot:6933: comm syz.8.2280: Failed to acquire dquot type 1
[  625.055696][ T5207] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  625.056404][ T8305] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  625.073709][ T5207] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  625.080817][ T5207] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  625.102350][ T5207] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  625.105461][ T5207] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  625.165652][ T5843] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  625.180147][ T5843] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  625.193844][ T5843] bond0 (unregistering): Released all slaves
[  625.429079][T23577] netlink: 'syz.1.2284': attribute type 1 has an invalid length.
[  625.888295][ T5843] hsr_slave_0: left promiscuous mode
[  625.891346][ T5843] hsr_slave_1: left promiscuous mode
[  625.897618][ T5843] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  625.900791][ T5843] batman_adv: batadv0: Removing interface: batadv_slave_0
[  625.925041][ T5843] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  625.928290][ T5843] batman_adv: batadv0: Removing interface: batadv_slave_1
[  625.961991][ T5843] veth1_macvtap: left promiscuous mode
[  625.974458][ T5843] veth0_macvtap: left promiscuous mode
[  625.983607][ T5843] veth1_vlan: left promiscuous mode
[  625.985976][ T5843] veth0_vlan: left promiscuous mode
[  626.184550][T23697] loop8: detected capacity change from 0 to 32768
[  626.225281][T23697] (syz.8.2293,23697,0):ocfs2_journal_init:961 ERROR: Journal file size (0) is too small!
[  626.229350][T23697] (syz.8.2293,23697,0):ocfs2_check_volume:2347 ERROR: Could not initialize journal!
[  626.236895][T23697] (syz.8.2293,23697,0):ocfs2_check_volume:2432 ERROR: status = -22
[  626.239452][T23697] (syz.8.2293,23697,0):ocfs2_mount_volume:1764 ERROR: status = -22
[  626.268981][T23697] (syz.8.2293,23697,0):ocfs2_fill_super:1177 ERROR: status = -22
[  626.393097][T23712] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2295'.
[  626.552097][T23718] loop8: detected capacity change from 0 to 128
[  626.561414][T23718] UDF-fs: error (device loop8): udf_read_tagged: read failed, block=256, location=256
[  626.582317][T23718] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  626.624641][T23710] loop1: detected capacity change from 0 to 32768
[  626.646164][T23710] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2296 (23710)
[  626.678123][T23710] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  626.695777][T23710] BTRFS info (device loop1): using sha256 (sha256-x86_64) checksum algorithm
[  626.698648][T23710] BTRFS info (device loop1): using free-space-tree
[  626.886348][T23753] loop8: detected capacity change from 0 to 8
[  626.956582][T19463] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  627.188028][ T5207] Bluetooth: hci1: command tx timeout
[  627.437359][ T5843] team0 (unregistering): Port device team_slave_1 removed
[  627.444185][T23775] syz.1.2307: attempt to access beyond end of device
[  627.444185][T23775] nbd1: rw=0, sector=6, nr_sectors = 2 limit=0
[  627.457644][T23775] ADFS-fs (nbd1): error: unable to read block 3, try 0
[  627.506377][ T5843] team0 (unregistering): Port device team_slave_0 removed
[  628.122340][T23534] chnl_net:caif_netlink_parms(): no params data found
[  628.149594][T23760] netdevsim netdevsim8: loading /lib/firmware/. failed with error -22
[  628.173128][T23760] netdevsim netdevsim8: Direct firmware load for . failed with error -22
[  628.186245][T23760] netdevsim netdevsim8: Falling back to sysfs fallback for: .
[  628.362787][T23534] bridge0: port 1(bridge_slave_0) entered blocking state
[  628.368961][T23534] bridge0: port 1(bridge_slave_0) entered disabled state
[  628.371443][T23534] bridge_slave_0: entered allmulticast mode
[  628.375385][T23534] bridge_slave_0: entered promiscuous mode
[  628.376131][T23847] loop8: detected capacity change from 0 to 1024
[  628.398182][T23534] bridge0: port 2(bridge_slave_1) entered blocking state
[  628.399710][T23847] EXT4-fs (loop8): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869)
[  628.412147][T23534] bridge0: port 2(bridge_slave_1) entered disabled state
[  628.413773][T23847] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  628.418914][T23534] bridge_slave_1: entered allmulticast mode
[  628.424085][T23534] bridge_slave_1: entered promiscuous mode
[  628.443378][T23847] EXT4-fs (loop8): invalid journal inode
[  628.446575][T23847] EXT4-fs (loop8): can't get journal size
[  628.474400][T23847] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  628.508000][T23534] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  628.524862][T23534] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  628.672187][T23534] team0: Port device team_slave_0 added
[  628.678278][ T8305] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  628.710385][T23534] team0: Port device team_slave_1 added
[  628.801101][T23534] batman_adv: batadv0: Adding interface: batadv_slave_0
[  628.804285][T23534] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  628.815188][T23534] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  628.821005][T23534] batman_adv: batadv0: Adding interface: batadv_slave_1
[  628.827696][T23534] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  628.839695][T23534] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  628.921395][T23534] hsr_slave_0: entered promiscuous mode
[  628.924719][T23534] hsr_slave_1: entered promiscuous mode
[  629.244859][ T7846] Bluetooth: hci1: command tx timeout
[  629.393057][    T9] usb 9-1: new full-speed USB device number 34 using dummy_hcd
[  629.404656][T23882] warn_alloc: 230 callbacks suppressed
[  629.404671][T23882] syz.1.2314: vmalloc error: size 2768896, failed to allocated page array size 5408, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  629.414603][T23882] CPU: 1 UID: 0 PID: 23882 Comm: syz.1.2314 Not tainted 6.16.0-rc4-syzkaller-00286-gc435a4f487e8-dirty #0 PREEMPT(full) 
[  629.414620][T23882] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  629.414628][T23882] Call Trace:
[  629.414633][T23882]  <TASK>
[  629.414639][T23882]  dump_stack_lvl+0x189/0x250
[  629.414664][T23882]  ? __pfx_dump_stack_lvl+0x10/0x10
[  629.414682][T23882]  ? __pfx__printk+0x10/0x10
[  629.414695][T23882]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  629.414709][T23882]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  629.414723][T23882]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  629.414738][T23882]  warn_alloc+0x214/0x310
[  629.414757][T23882]  ? __pfx_warn_alloc+0x10/0x10
[  629.414777][T23882]  ? __get_vm_area_node+0x28f/0x300
[  629.414790][T23882]  ? vb2_vmalloc_alloc+0xef/0x340
[  629.414806][T23882]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  629.414841][T23882]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  629.414854][T23882]  ? vb2_vmalloc_alloc+0xb2/0x340
[  629.414867][T23882]  ? __kasan_kmalloc+0x93/0xb0
[  629.414882][T23882]  vmalloc_user_noprof+0xad/0xf0
[  629.414894][T23882]  ? vb2_vmalloc_alloc+0xef/0x340
[  629.414907][T23882]  vb2_vmalloc_alloc+0xef/0x340
[  629.414918][T23882]  ? __pfx_vb2_vmalloc_alloc+0x10/0x10
[  629.414932][T23882]  __vb2_queue_alloc+0x9c2/0x15a0
[  629.414998][T23882]  vb2_core_reqbufs+0xc31/0x1420
[  629.415031][T23882]  ? __pfx_vb2_core_reqbufs+0x10/0x10
[  629.415048][T23882]  ? vb2_verify_memory_type+0x1fc/0x570
[  629.415067][T23882]  ? vb2_reqbufs+0x3a9/0x630
[  629.415091][T23882]  v4l2_m2m_ioctl_reqbufs+0x10d/0x200
[  629.415108][T23882]  __video_do_ioctl+0xc9b/0xdb0
[  629.415128][T23882]  ? __pfx___video_do_ioctl+0x10/0x10
[  629.415151][T23882]  video_usercopy+0x871/0x14f0
[  629.415170][T23882]  ? __pfx___video_do_ioctl+0x10/0x10
[  629.415181][T23882]  ? __pfx_video_usercopy+0x10/0x10
[  629.415201][T23882]  ? __fget_files+0x2a/0x420
[  629.415217][T23882]  ? __fget_files+0x2a/0x420
[  629.415228][T23882]  ? __fget_files+0x3a0/0x420
[  629.415243][T23882]  v4l2_ioctl+0x18d/0x1e0
[  629.415255][T23882]  ? __pfx_v4l2_ioctl+0x10/0x10
[  629.415266][T23882]  __se_sys_ioctl+0xfc/0x170
[  629.415285][T23882]  do_syscall_64+0xfa/0x3b0
[  629.415295][T23882]  ? lockdep_hardirqs_on+0x9c/0x150
[  629.415311][T23882]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  629.415323][T23882]  ? exc_page_fault+0x9f/0xf0
[  629.415341][T23882]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  629.415352][T23882] RIP: 0033:0x7f3cc978e929
[  629.415364][T23882] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  629.415374][T23882] RSP: 002b:00007f3cca56c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  629.415387][T23882] RAX: ffffffffffffffda RBX: 00007f3cc99b5fa0 RCX: 00007f3cc978e929
[  629.415396][T23882] RDX: 00002000000000c0 RSI: 00000000c0145608 RDI: 0000000000000003
[  629.415404][T23882] RBP: 00007f3cc9810b39 R08: 0000000000000000 R09: 0000000000000000
[  629.415411][T23882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  629.415418][T23882] R13: 0000000000000000 R14: 00007f3cc99b5fa0 R15: 00007ffccb502218
[  629.415444][T23882]  </TASK>
[  629.415449][T23882] Mem-Info:
[  629.552705][T23882] active_anon:10689 inactive_anon:461 isolated_anon:0
[  629.552705][T23882]  active_file:3783 inactive_file:17889 isolated_file:0
[  629.552705][T23882]  unevictable:1768 dirty:314 writeback:0
[  629.552705][T23882]  slab_reclaimable:6329 slab_unreclaimable:58604
[  629.552705][T23882]  mapped:19341 shmem:2604 pagetables:2051
[  629.552705][T23882]  sec_pagetables:0 bounce:0
[  629.552705][T23882]  kernel_misc_reclaimable:0
[  629.552705][T23882]  free:269095 free_pcp:19797 free_cma:0
[  629.576159][T23882] Node 0 active_anon:26568kB inactive_anon:1844kB active_file:11276kB inactive_file:47868kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:72920kB dirty:1140kB writeback:0kB shmem:5148kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:6140kB pagetables:5472kB sec_pagetables:0kB all_unreclaimable? yes Balloon:0kB
[  629.591189][T23882] Node 1 active_anon:16324kB inactive_anon:0kB active_file:3856kB inactive_file:23688kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:4512kB dirty:116kB writeback:0kB shmem:5268kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:8000kB pagetables:2800kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  629.605326][T23882] Node 0 DMA free:14652kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:656kB local_pcp:272kB free_cma:0kB
[  629.631295][    T9] usb 9-1: config 0 has an invalid interface number: 138 but max is 0
[  629.639279][T23882] lowmem_reserve[]: 0 815 815 815 815
[  629.641706][T23882] Node 0 DMA32 free:159636kB boost:75856kB min:109572kB low:118000kB high:126428kB reserved_highatomic:4096KB free_highatomic:3848KB active_anon:26432kB inactive_anon:1844kB active_file:11276kB inactive_file:47868kB unevictable:3536kB writepending:1140kB present:1556484kB managed:834720kB mlocked:0kB bounce:0kB free_pcp:30624kB local_pcp:20172kB free_cma:0kB
[  629.655387][    T9] usb 9-1: config 0 has no interface number 0
[  629.655435][    T9] usb 9-1: config 0 interface 138 altsetting 0 has an endpoint descriptor with address 0x61, changing to 0x1
[  629.655455][    T9] usb 9-1: config 0 interface 138 altsetting 0 has an endpoint descriptor with address 0x97, changing to 0x87
[  629.655472][    T9] usb 9-1: config 0 interface 138 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0
[  629.655502][    T9] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= f.66
[  629.655517][    T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  629.680208][    T9] usb 9-1: config 0 descriptor??
[  629.684023][T23882] lowmem_reserve[]: 0 0 0 0 0
[  629.700749][T23882] Node 1 DMA32 free:457956kB boost:0kB min:19168kB low:23960kB high:28752kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:8kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:112kB local_pcp:8kB free_cma:0kB
[  629.715252][T23882] lowmem_reserve[]: 0 0 854 854 854
[  629.717479][T23882] Node 1 Normal free:443740kB boost:0kB min:36576kB low:45720kB high:54864kB reserved_highatomic:2048KB free_highatomic:1988KB active_anon:16256kB inactive_anon:0kB active_file:3856kB inactive_file:23680kB unevictable:3536kB writepending:116kB present:1048576kB managed:875016kB mlocked:0kB bounce:0kB free_pcp:48372kB local_pcp:27308kB free_cma:0kB
[  629.729174][T23882] lowmem_reserve[]: 0 0 0 0 0
[  629.736164][T23882] Node 0 DMA: 7*4kB (UM) 8*8kB (U) 8*16kB (U) 7*32kB (U) 4*64kB (UM) 5*128kB (UM) 6*256kB (UM) 3*512kB (UM) 4*1024kB (UM) 3*2048kB (UM) 0*4096kB = 14652kB
[  629.749471][T23882] Node 0 DMA32: 333*4kB (MEH) 230*8kB (UMEH) 180*16kB (MEH) 76*32kB (UMEH) 39*64kB (UMEH) 265*128kB (UMH) 234*256kB (UMH) 71*512kB (UMEH) 10*1024kB (MH) 2*2048kB (UM) 1*4096kB (M) = 159588kB
[  629.762456][T23882] Node 1 DMA32: 11*4kB (UM) 15*8kB (UM) 24*16kB (UM) 38*32kB (UME) 36*64kB (UME) 36*128kB (UME) 35*256kB (UME) 34*512kB (UME) 27*1024kB (UME) 27*2048kB (UME) 83*4096kB (UM) = 457956kB
[  629.781076][T23882] Node 1 Normal: 383*4kB (UMEH) 1310*8kB (UMEH) 1231*16kB (UEH) 764*32kB (UEH) 744*64kB (UMEH) 614*128kB (UMEH) 394*256kB (UMH) 181*512kB (UMEH) 52*1024kB (UME) 7*2048kB (U) 0*4096kB = 443484kB
[  629.791428][T23882] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  629.801564][T23882] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  629.808534][T23882] 24228 total pagecache pages
[  629.811133][T23882] 8 pages in swap cache
[  629.812587][T23882] Free swap  = 124272kB
[  629.815776][T23882] Total swap = 124996kB
[  629.817488][T23882] 786301 pages RAM
[  629.818830][T23882] 0 pages HighMem/MovableOnly
[  629.820402][T23882] 240373 pages reserved
[  629.821795][T23882] 0 pages cma reserved
[  629.917655][    T9] usb 9-1: string descriptor 0 read error: -71
[  629.932258][    T9] usbtest 9-1:0.138: couldn't get endpoints, -22
[  629.944194][    T9] usbtest 9-1:0.138: probe with driver usbtest failed with error -22
[  629.966756][    T9] usb 9-1: USB disconnect, device number 34
[  629.984248][T23534] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  629.996055][T23534] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  630.008695][T23534] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  630.018836][T23534] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  630.127346][T23534] 8021q: adding VLAN 0 to HW filter on device bond0
[  630.154314][T23534] 8021q: adding VLAN 0 to HW filter on device team0
[  630.170394][T16124] bridge0: port 1(bridge_slave_0) entered blocking state
[  630.173110][T16124] bridge0: port 1(bridge_slave_0) entered forwarding state
[  630.194178][T16124] bridge0: port 2(bridge_slave_1) entered blocking state
[  630.196929][T16124] bridge0: port 2(bridge_slave_1) entered forwarding state
[  630.390288][T24143] netlink: 'syz.1.2319': attribute type 27 has an invalid length.
[  630.407731][T24143] netlink: 152 bytes leftover after parsing attributes in process `syz.1.2319'.
[  630.416301][T23534] 8021q: adding VLAN 0 to HW filter on device batadv0
[  630.419269][T24143] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  630.619374][T24163] loop1: detected capacity change from 0 to 512
[  630.680094][T24163] Quota error (device loop1): find_tree_dqentry: Cycle in quota tree detected: block 3 index 0
[  630.697463][T24163] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0
[  630.701311][T24163] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.2323: Failed to acquire dquot type 1
[  630.728241][T24163] EXT4-fs (loop1): 1 truncate cleaned up
[  630.733933][T24163] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  630.739488][T23534] veth0_vlan: entered promiscuous mode
[  630.755519][T24163] ext4 filesystem being mounted at /102/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  630.763853][T23534] veth1_vlan: entered promiscuous mode
[  630.798535][T23534] veth0_macvtap: entered promiscuous mode
[  630.802604][T23534] veth1_macvtap: entered promiscuous mode
[  630.833123][T23534] batman_adv: batadv0: Interface activated: batadv_slave_0
[  630.847299][T23534] batman_adv: batadv0: Interface activated: batadv_slave_1
[  630.856771][T19463] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  630.871058][T23534] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  630.886976][T23534] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  630.914840][T23534] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  630.933570][T23534] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  631.147912][ T5843] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  631.297566][ T5843] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  631.324191][ T7846] Bluetooth: hci1: command tx timeout
[  631.405640][ T5843] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  631.426342][ T8292] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  631.430091][ T8292] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  631.450836][   T29] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  631.454614][   T29] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  631.497725][ T5843] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  631.697450][ T5207] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  631.706555][ T5207] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  631.717866][ T5207] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  631.723717][ T5207] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  631.728167][ T5207] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  631.742673][T24212] loop8: detected capacity change from 0 to 8192
[  631.913295][ T5843] bridge_slave_1: left allmulticast mode
[  631.915660][ T5843] bridge_slave_1: left promiscuous mode
[  631.921151][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state
[  631.938747][ T5843] bridge_slave_0: left allmulticast mode
[  631.941289][ T5843] bridge_slave_0: left promiscuous mode
[  631.954800][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state
[  631.979848][T24247] loop8: detected capacity change from 0 to 512
[  632.058043][T24247] Quota error (device loop8): write_blk: dquota write failed
[  632.060932][T24247] Quota error (device loop8): qtree_write_dquot: Error -28 occurred while creating quota
[  632.065847][T24247] EXT4-fs error (device loop8): ext4_acquire_dquot:6933: comm syz.8.2330: Failed to acquire dquot type 1
[  632.080020][T24247] EXT4-fs (loop8): 1 truncate cleaned up
[  632.082856][T24247] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  632.090138][T24247] ext4 filesystem being mounted at /681/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  632.118233][ T8305] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  632.447010][ T5843] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  632.451057][ T5843] bond_slave_0: left promiscuous mode
[  632.454592][ T5843] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  632.457532][ T5843] bond_slave_1: left promiscuous mode
[  632.460014][ T5843] bond0 (unregistering): Released all slaves
[  632.891209][ T5843] hsr_slave_0: left promiscuous mode
[  632.893630][ T5843] hsr_slave_1: left promiscuous mode
[  632.895630][ T5843] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  632.897979][ T5843] batman_adv: batadv0: Removing interface: batadv_slave_0
[  632.900770][ T5843] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  632.904543][ T5843] batman_adv: batadv0: Removing interface: batadv_slave_1
[  632.922655][ T5843] veth1_macvtap: left promiscuous mode
[  632.928611][ T5843] veth0_macvtap: left promiscuous mode
[  632.930660][ T5843] veth1_vlan: left promiscuous mode
[  632.932436][ T5843] veth0_vlan: left promiscuous mode
[  633.315390][ T5843] team0 (unregistering): Port device team_slave_1 removed
[  633.355811][ T5843] team0 (unregistering): Port device team_slave_0 removed
[  633.806101][ T7846] Bluetooth: hci0: command tx timeout
[  633.882398][T24210] chnl_net:caif_netlink_parms(): no params data found
[  634.020701][T24210] bridge0: port 1(bridge_slave_0) entered blocking state
[  634.027994][T24210] bridge0: port 1(bridge_slave_0) entered disabled state
[  634.031087][T24210] bridge_slave_0: entered allmulticast mode
[  634.035986][T24210] bridge_slave_0: entered promiscuous mode
[  634.040901][T24210] bridge0: port 2(bridge_slave_1) entered blocking state
[  634.045702][T24210] bridge0: port 2(bridge_slave_1) entered disabled state
[  634.048802][T24210] bridge_slave_1: entered allmulticast mode
[  634.052633][T24210] bridge_slave_1: entered promiscuous mode
[  634.105612][T24210] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  634.111949][T24210] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  634.171003][T24210] team0: Port device team_slave_0 added
[  634.185643][T24210] team0: Port device team_slave_1 added
[  634.249961][T24210] batman_adv: batadv0: Adding interface: batadv_slave_0
[  634.252311][T24210] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  634.263049][T24210] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  634.268004][T24210] batman_adv: batadv0: Adding interface: batadv_slave_1
[  634.270508][T24210] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  634.281596][T24210] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  634.324332][ T5843] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  634.381159][T24210] hsr_slave_0: entered promiscuous mode
[  634.384499][T24210] hsr_slave_1: entered promiscuous mode
[  634.387513][T24210] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  634.390813][T24210] Cannot create hsr debugfs directory
[  634.419838][ T5843] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  634.500017][ T5843] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  634.577047][ T5843] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  635.043609][ T5843] bridge_slave_1: left allmulticast mode
[  635.046098][ T5843] bridge_slave_1: left promiscuous mode
[  635.048621][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state
[  635.055296][ T5843] bridge_slave_0: left allmulticast mode
[  635.057809][ T5843] bridge_slave_0: left promiscuous mode
[  635.060291][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state
[  635.087677][ T5207] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  635.092131][ T5207] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  635.098535][ T5207] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  635.106126][ T5207] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  635.111153][ T5207] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  635.173140][ T5822] usb 9-1: new high-speed USB device number 35 using dummy_hcd
[  635.357863][ T5822] usb 9-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  635.360777][ T5822] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  635.363420][ T5822] usb 9-1: Product: syz
[  635.365035][ T5822] usb 9-1: Manufacturer: syz
[  635.367190][ T5822] usb 9-1: SerialNumber: syz
[  635.379364][ T5822] usb 9-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  635.529053][ T5843] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  635.530432][ T8544] usb 9-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  635.538651][ T5843] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  635.547333][ T5843] bond0 (unregistering): Released all slaves
[  635.883370][ T5207] Bluetooth: hci0: command tx timeout
[  635.957663][ T8810] usb 9-1: USB disconnect, device number 35
[  635.998332][ T5843] hsr_slave_0: left promiscuous mode
[  636.000715][ T5843] hsr_slave_1: left promiscuous mode
[  636.003188][ T5843] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  636.006311][ T5843] batman_adv: batadv0: Removing interface: batadv_slave_0
[  636.010004][ T5843] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  636.018295][ T5843] batman_adv: batadv0: Removing interface: batadv_slave_1
[  636.034825][ T5843] veth1_macvtap: left promiscuous mode
[  636.037325][ T5843] veth0_macvtap: left promiscuous mode
[  636.039778][ T5843] veth1_vlan: left promiscuous mode
[  636.042127][ T5843] veth0_vlan: left promiscuous mode
[  636.494812][ T5843] team0 (unregistering): Port device team_slave_1 removed
[  636.553808][ T5843] team0 (unregistering): Port device team_slave_0 removed
[  636.613023][ T8544] ath9k_htc 9-1:1.0: ath9k_htc: Target is unresponsive
[  636.621649][ T8544] ath9k_htc: Failed to initialize the device
[  636.625161][ T8810] usb 9-1: ath9k_htc: USB layer deinitialized
[  636.957963][ T8810] usb 9-1: new high-speed USB device number 36 using dummy_hcd
[  637.105610][ T8810] usb 9-1: Using ep0 maxpacket: 8
[  637.112254][ T8810] usb 9-1: New USB device found, idVendor=0545, idProduct=800c, bcdDevice= 3.0a
[  637.113038][T24652] chnl_net:caif_netlink_parms(): no params data found
[  637.123077][ T8810] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  637.125598][ T8810] usb 9-1: Product: syz
[  637.126948][ T8810] usb 9-1: Manufacturer: syz
[  637.133099][ T8810] usb 9-1: SerialNumber: syz
[  637.141221][ T8810] usb 9-1: config 0 descriptor??
[  637.147350][ T8810] gspca_main: xirlink-cit-2.14.0 probing 0545:800c
[  637.151960][ T8810] input: xirlink-cit as /devices/platform/dummy_hcd.8/usb9/9-1/input/input20
[  637.163596][ T5207] Bluetooth: hci1: command tx timeout
[  637.360985][T24652] bridge0: port 1(bridge_slave_0) entered blocking state
[  637.387658][T24652] bridge0: port 1(bridge_slave_0) entered disabled state
[  637.390690][T24652] bridge_slave_0: entered allmulticast mode
[  637.394737][ T5822] usb 9-1: USB disconnect, device number 36
[  637.410687][T24652] bridge_slave_0: entered promiscuous mode
[  637.419690][T24652] bridge0: port 2(bridge_slave_1) entered blocking state
[  637.422711][T24652] bridge0: port 2(bridge_slave_1) entered disabled state
[  637.440684][T24652] bridge_slave_1: entered allmulticast mode
[  637.457594][T24652] bridge_slave_1: entered promiscuous mode
[  637.606033][T24652] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  637.615427][T24652] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  637.748047][T24652] team0: Port device team_slave_0 added
[  637.757708][T24652] team0: Port device team_slave_1 added
[  637.813498][T24652] batman_adv: batadv0: Adding interface: batadv_slave_0
[  637.816394][T24652] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  637.830202][T24652] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  637.838750][T24652] batman_adv: batadv0: Adding interface: batadv_slave_1
[  637.841736][T24652] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  637.856000][T24652] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  637.963055][ T5207] Bluetooth: hci0: command tx timeout
[  638.007004][T24652] hsr_slave_0: entered promiscuous mode
[  638.010111][T24652] hsr_slave_1: entered promiscuous mode
[  638.250288][T24210] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  638.312789][T24210] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  638.319999][T24210] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  638.325934][T24210] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  638.434304][T24210] 8021q: adding VLAN 0 to HW filter on device bond0
[  638.447228][T24210] 8021q: adding VLAN 0 to HW filter on device team0
[  638.474522][T25043] loop8: detected capacity change from 0 to 32768
[  638.476623][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[  638.480023][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[  638.492629][T25043] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode.
[  638.505295][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[  638.507783][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[  638.515116][T25043] OCFS2: ERROR (device loop8): int ocfs2_validate_gd_parent(struct super_block *, struct ocfs2_dinode *, struct buffer_head *, int): Group descriptor #32 has bad chain 3966
[  638.521927][T25043] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  638.527696][T25043] OCFS2: File system is now read-only.
[  638.529593][T25043] (syz.8.2339,25043,1):ocfs2_search_chain:1817 ERROR: status = -30
[  638.532845][T25043] (syz.8.2339,25043,1):ocfs2_search_chain:1940 ERROR: status = -30
[  638.536137][T25043] (syz.8.2339,25043,1):ocfs2_claim_suballoc_bits:2010 ERROR: status = -30
[  638.539501][T25043] (syz.8.2339,25043,1):ocfs2_claim_suballoc_bits:2063 ERROR: status = -30
[  638.542842][T25043] (syz.8.2339,25043,1):__ocfs2_claim_clusters:2438 ERROR: status = -30
[  638.545761][T25043] (syz.8.2339,25043,1):__ocfs2_claim_clusters:2446 ERROR: status = -30
[  638.548407][T25043] (syz.8.2339,25043,1):ocfs2_block_group_alloc_contig:437 ERROR: status = -30
[  638.551283][T25043] (syz.8.2339,25043,1):ocfs2_block_group_alloc:711 ERROR: status = -30
[  638.554101][T25043] (syz.8.2339,25043,1):ocfs2_block_group_alloc:764 ERROR: status = -30
[  638.557093][T25043] (syz.8.2339,25043,1):ocfs2_reserve_suballoc_bits:839 ERROR: status = -30
[  638.559912][T25043] (syz.8.2339,25043,1):ocfs2_reserve_suballoc_bits:856 ERROR: status = -30
[  638.562798][T25043] (syz.8.2339,25043,1):ocfs2_reserve_new_metadata_blocks:996 ERROR: status = -30
[  638.566013][T25043] (syz.8.2339,25043,1):ocfs2_reserve_new_metadata_blocks:1019 ERROR: status = -30
[  638.569295][T25043] (syz.8.2339,25043,1):ocfs2_expand_inline_dir:2839 ERROR: status = -30
[  638.572014][T25043] (syz.8.2339,25043,1):ocfs2_extend_dir:3203 ERROR: status = -30
[  638.574628][T25043] (syz.8.2339,25043,1):ocfs2_prepare_dir_for_insert:4308 ERROR: status = -30
[  638.577414][T25043] (syz.8.2339,25043,1):ocfs2_mknod:298 ERROR: status = -30
[  638.579859][T25043] (syz.8.2339,25043,1):ocfs2_mknod:502 ERROR: status = -30
[  638.582749][T25043] (syz.8.2339,25043,1):ocfs2_mkdir:658 ERROR: status = -30
[  638.627344][ T8305] ocfs2: Unmounting device (7,8) on (node local)
[  638.961682][T24210] 8021q: adding VLAN 0 to HW filter on device batadv0
[  639.005369][T24210] veth0_vlan: entered promiscuous mode
[  639.011128][T24210] veth1_vlan: entered promiscuous mode
[  639.027275][T24210] veth0_macvtap: entered promiscuous mode
[  639.031003][T24210] veth1_macvtap: entered promiscuous mode
[  639.066586][T24210] batman_adv: batadv0: Interface activated: batadv_slave_0
[  639.072813][T24210] batman_adv: batadv0: Interface activated: batadv_slave_1
[  639.079997][T24210] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  639.082823][T24210] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  639.086964][T24210] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  639.092807][T24210] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  639.210891][ T8292] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  639.216846][ T8292] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  639.245430][ T5207] Bluetooth: hci1: command tx timeout
[  639.259622][ T7849] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  639.279541][ T7849] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  639.351997][T24652] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  639.376757][T24652] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  639.388376][T24652] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  639.403831][T24652] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  639.552311][T24652] 8021q: adding VLAN 0 to HW filter on device bond0
[  639.589072][T25118] loop8: detected capacity change from 0 to 32768
[  639.594339][T24652] 8021q: adding VLAN 0 to HW filter on device team0
[  639.601566][   T29] bridge0: port 1(bridge_slave_0) entered blocking state
[  639.604604][   T29] bridge0: port 1(bridge_slave_0) entered forwarding state
[  639.647048][T25118] XFS (loop8): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  639.655497][   T29] bridge0: port 2(bridge_slave_1) entered blocking state
[  639.658432][   T29] bridge0: port 2(bridge_slave_1) entered forwarding state
[  639.691197][T25118] XFS (loop8): Ending clean mount
[  639.696054][T25118] XFS (loop8): Quotacheck needed: Please wait.
[  639.777194][T25118] XFS (loop8): Quotacheck: Done.
[  639.849387][ T8305] XFS (loop8): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  640.016401][T24652] 8021q: adding VLAN 0 to HW filter on device batadv0
[  640.045962][ T5207] Bluetooth: hci0: command tx timeout
[  640.219309][T24652] veth0_vlan: entered promiscuous mode
[  640.227313][T24652] veth1_vlan: entered promiscuous mode
[  640.278538][T24652] veth0_macvtap: entered promiscuous mode
[  640.282314][T24652] veth1_macvtap: entered promiscuous mode
[  640.305623][T24652] batman_adv: batadv0: Interface activated: batadv_slave_0
[  640.311927][T24652] batman_adv: batadv0: Interface activated: batadv_slave_1
[  640.316955][T24652] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  640.320389][T24652] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  640.330386][T24652] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  640.341254][T24652] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  640.460596][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  640.470814][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  640.496183][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  640.499249][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  640.699360][T25248] netlink: 'syz.2.2352': attribute type 2 has an invalid length.
[  640.761181][T25255] loop8: detected capacity change from 0 to 8
[  640.805988][T25255] SQUASHFS error: zlib decompression failed, data probably corrupt
[  640.808823][T25255] SQUASHFS error: Failed to read block 0x9b: -5
[  640.811148][T25255] SQUASHFS error: Unable to read metadata cache entry [99]
[  640.827261][T25255] SQUASHFS error: Unable to read inode 0x127
[  641.197064][T25272] loop8: detected capacity change from 0 to 32768
[  641.241163][T25272] XFS (loop8): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  641.278959][T25272] XFS (loop8): Ending clean mount
[  641.290289][T25272] XFS (loop8): Quotacheck needed: Please wait.
[  641.349611][T25272] XFS (loop8): Quotacheck: Done.
[  641.405726][ T8305] XFS (loop8): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  641.663082][ T5876] usb 3-1: new full-speed USB device number 15 using dummy_hcd
[  641.831408][ T5876] usb 3-1: config 0 has an invalid interface number: 30 but max is 0
[  641.843264][ T5876] usb 3-1: config 0 has no interface number 0
[  641.848132][ T5876] usb 3-1: New USB device found, idVendor=0572, idProduct=d811, bcdDevice=94.e2
[  641.851604][ T5876] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  641.859030][ T5876] usb 3-1: config 0 descriptor??
[  641.870262][ T5876] dvb-usb: found a 'Mygica D689 DMB-TH' in warm state.
[  641.880528][ T5876] usb 3-1: setting power ON
[  641.887153][ T5876] dvb-usb: bulk message failed: -22 (2/0)
[  642.012086][ T5843] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  642.023317][ T5876] dvb-usb: bulk message failed: -22 (1/0)
[  642.148049][ T5876] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  642.179030][ T5876] dvb-usb: Mygica D689 DMB-TH error while loading driver (-19)
[  642.181595][ T5876] dvb_usb_cxusb 3-1:0.30: probe with driver dvb_usb_cxusb failed with error -22
[  642.191420][ T5876] usb 3-1: USB disconnect, device number 15
[  643.376383][ T5843] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  643.624052][ T5843] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  643.692087][ T5843] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  643.856523][ T5843] bridge_slave_1: left allmulticast mode
[  643.858908][ T5843] bridge_slave_1: left promiscuous mode
[  643.861343][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state
[  643.868660][ T5843] bridge_slave_0: left allmulticast mode
[  643.871072][ T5843] bridge_slave_0: left promiscuous mode
[  643.875696][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state
[  644.270996][T25451] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem
[  644.293992][ T7848] kernel read not supported for file /vga_arbiter (pid: 7848 comm: kworker/1:7)
[  644.535166][ T7846] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  644.541684][ T7846] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  644.558338][ T7846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  644.570608][ T7846] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  644.575558][ T7846] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  644.668684][ T5843] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  644.677959][ T5843] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  644.684280][ T5843] bond0 (unregistering): Released all slaves
[  644.772979][   T33] audit: type=1804 audit(1751869657.828:73): pid=25472 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2376" name="/newroot/22/bus/bus" dev="overlay" ino=139 res=1 errno=0
[  644.876431][T25472] Invalid ELF header magic: != ELF
[  645.153056][ T9904] usb 9-1: new high-speed USB device number 37 using dummy_hcd
[  645.305325][ T5843] hsr_slave_0: left promiscuous mode
[  645.309160][ T5843] hsr_slave_1: left promiscuous mode
[  645.312533][ T5843] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  645.316665][ T5843] batman_adv: batadv0: Removing interface: batadv_slave_0
[  645.320073][ T5843] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  645.322582][ T5843] batman_adv: batadv0: Removing interface: batadv_slave_1
[  645.324665][ T9904] usb 9-1: Using ep0 maxpacket: 8
[  645.343903][ T9904] usb 9-1: config 0 has an invalid interface number: 250 but max is 0
[  645.352332][ T9904] usb 9-1: config 0 has no interface number 0
[  645.359399][ T5843] veth1_macvtap: left promiscuous mode
[  645.360189][ T9904] usb 9-1: New USB device found, idVendor=a168, idProduct=0614, bcdDevice=1b.10
[  645.365339][ T5843] veth0_macvtap: left promiscuous mode
[  645.367912][ T9904] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  645.371595][ T9904] usb 9-1: Product: syz
[  645.373590][ T5843] veth1_vlan: left promiscuous mode
[  645.373687][ T5843] veth0_vlan: left promiscuous mode
[  645.386367][ T9904] usb 9-1: Manufacturer: syz
[  645.388216][ T9904] usb 9-1: SerialNumber: syz
[  645.405897][ T9904] usb 9-1: config 0 descriptor??
[  645.420211][ T9904] gspca_main: gspca_sn9c20x-2.14.0 probing a168:0614
[  645.643048][ T9904] gspca_sn9c20x: Write register 1000 failed -71
[  645.645521][ T9904] gspca_sn9c20x: Device initialization failed
[  645.647981][ T9904] gspca_sn9c20x 9-1:0.250: probe with driver gspca_sn9c20x failed with error -71
[  645.670945][ T9904] usb 9-1: USB disconnect, device number 37
[  646.422518][ T5843] team0 (unregistering): Port device team_slave_1 removed
[  646.429842][T25524] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2380'.
[  646.520175][ T5843] team0 (unregistering): Port device team_slave_0 removed
[  646.613058][ T5207] Bluetooth: hci1: command tx timeout
[  646.677068][T25529] loop8: detected capacity change from 0 to 32768
[  646.695350][T25529] ERROR: (device loop8): diAllocAG: nfreeinos = 0, but iag on freelist
[  646.695350][T25529] 
[  646.714181][T25529] ERROR: (device loop8): remounting filesystem as read-only
[  646.717246][T25529] ialloc: diAlloc returned -5!
[  647.063129][T22373] usb 9-1: new high-speed USB device number 38 using dummy_hcd
[  647.213382][T22373] usb 9-1: Using ep0 maxpacket: 8
[  647.221611][T22373] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 15
[  647.228938][T25595] loop2: detected capacity change from 0 to 2048
[  647.234619][T22373] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  647.237652][T25595] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  647.238218][T22373] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  647.284100][T22373] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  647.298008][T22373] usb 9-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8
[  647.301066][T22373] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  647.314052][T22373] usb 9-1: Product: syz
[  647.320422][T22373] usb 9-1: Manufacturer: syz
[  647.322026][T22373] usb 9-1: SerialNumber: syz
[  647.327983][T25461] chnl_net:caif_netlink_parms(): no params data found
[  647.336031][T22373] usb 9-1: config 0 descriptor??
[  647.341356][T25536] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  647.578357][T22373] powermate: Expected payload of 3--6 bytes, found 1024 bytes!
[  647.584221][T22373] input: Griffin SoundKnob as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input21
[  647.619487][T25701] loop2: detected capacity change from 0 to 8
[  647.643840][T25701] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  647.654924][T25461] bridge0: port 1(bridge_slave_0) entered blocking state
[  647.657633][T25461] bridge0: port 1(bridge_slave_0) entered disabled state
[  647.660052][T25461] bridge_slave_0: entered allmulticast mode
[  647.675919][T25461] bridge_slave_0: entered promiscuous mode
[  647.693307][T25461] bridge0: port 2(bridge_slave_1) entered blocking state
[  647.695818][T25461] bridge0: port 2(bridge_slave_1) entered disabled state
[  647.698399][T25461] bridge_slave_1: entered allmulticast mode
[  647.701948][T25461] bridge_slave_1: entered promiscuous mode
[  648.147924][    C0] powermate: config urb returned -71
[  648.148349][ T9904] usb 9-1: USB disconnect, device number 38
[  648.150274][    C0] powermate: usb_submit_urb(config) failed
[  648.150349][    C0] powermate 9-1:0.0: powermate_irq - usb_submit_urb failed with result: -19
[  648.412622][T25461] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  648.420456][T25461] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  648.482407][T25461] team0: Port device team_slave_0 added
[  648.487356][T25461] team0: Port device team_slave_1 added
[  648.567447][T25461] batman_adv: batadv0: Adding interface: batadv_slave_0
[  648.577805][T25461] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  648.588512][T25461] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  648.617558][T25461] batman_adv: batadv0: Adding interface: batadv_slave_1
[  648.626090][T25461] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  648.639006][T25461] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  648.683437][T25461] hsr_slave_0: entered promiscuous mode
[  648.686360][T25461] hsr_slave_1: entered promiscuous mode
[  648.693433][ T5207] Bluetooth: hci1: command tx timeout
[  648.883402][ T9904] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  649.044717][ T9904] usb 3-1: Using ep0 maxpacket: 32
[  649.052220][ T9904] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  649.067212][ T9904] usb 3-1: config 1 interface 0 altsetting 12 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  649.073281][ T5879] usb 9-1: new high-speed USB device number 39 using dummy_hcd
[  649.096923][ T9904] usb 3-1: config 1 interface 0 has no altsetting 0
[  649.106572][ T9904] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  649.110441][ T9904] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  649.116265][ T9904] usb 3-1: Product: syz
[  649.117688][ T9904] usb 3-1: Manufacturer: 톲폻稀뢇
[  649.119556][ T9904] usb 3-1: SerialNumber: syz
[  649.233249][ T5879] usb 9-1: Using ep0 maxpacket: 32
[  649.238708][ T5879] usb 9-1: config 0 has an invalid interface number: 67 but max is 0
[  649.243743][ T5879] usb 9-1: config 0 has no interface number 0
[  649.248625][ T5879] usb 9-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  649.251925][ T5879] usb 9-1: New USB device strings: Mfr=1, Product=3, SerialNumber=3
[  649.258295][ T5879] usb 9-1: Product: syz
[  649.260035][ T5879] usb 9-1: Manufacturer: syz
[  649.261871][ T5879] usb 9-1: SerialNumber: syz
[  649.266477][ T5879] usb 9-1: config 0 descriptor??
[  649.273839][ T5879] smsc95xx v2.0.0
[  649.308486][T25461] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  649.315697][T25461] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  649.321628][T25461] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  649.327203][T25461] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  649.348943][ T9904] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22
[  649.359115][ T9904] usb 3-1: USB disconnect, device number 16
[  649.441230][T25461] 8021q: adding VLAN 0 to HW filter on device bond0
[  649.446121][ T8292] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  649.481106][T25461] 8021q: adding VLAN 0 to HW filter on device team0
[  649.499024][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[  649.502157][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[  649.517473][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[  649.520459][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[  649.681001][ T5879] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  649.688718][ T5879] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  649.788488][T25461] 8021q: adding VLAN 0 to HW filter on device batadv0
[  650.099830][ T5879] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000108: -71
[  650.126631][ T5879] smsc95xx 9-1:0.67: probe with driver smsc95xx failed with error -71
[  650.135097][ T5879] usb 9-1: USB disconnect, device number 39
[  650.175035][T25461] veth0_vlan: entered promiscuous mode
[  650.190029][T25461] veth1_vlan: entered promiscuous mode
[  650.216167][T25461] veth0_macvtap: entered promiscuous mode
[  650.221634][T25461] veth1_macvtap: entered promiscuous mode
[  650.255788][T25461] batman_adv: batadv0: Interface activated: batadv_slave_0
[  650.268455][T25461] batman_adv: batadv0: Interface activated: batadv_slave_1
[  650.281921][T25461] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  650.288267][T25461] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  650.292398][T25461] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  650.300535][T25461] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  650.430331][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  650.432729][T26044] loop2: detected capacity change from 0 to 512
[  650.439678][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  650.474631][T26044] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  650.479627][T26044] ext4 filesystem being mounted at /35/bus/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  650.524238][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  650.527559][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  650.594529][T24210] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  650.790366][ T5207] Bluetooth: hci2: ACL packet for unknown connection handle 201
[  650.807865][ T5207] Bluetooth: hci2: ACL packet for unknown connection handle 200
[  651.630210][T26119] input: syz0 as /devices/virtual/input/input22
[  651.953171][ T8410] usb 9-1: new high-speed USB device number 40 using dummy_hcd
[  652.113197][ T8410] usb 9-1: Using ep0 maxpacket: 16
[  652.118007][ T8410] usb 9-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00
[  652.121755][ T8410] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  652.129569][ T8410] usb 9-1: config 0 descriptor??
[  652.135198][ T8410] ftdi_sio 9-1:0.0: FTDI USB Serial Device converter detected
[  652.301580][ T7950] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  652.347059][ T8410] usb 9-1: Detected FT232A
[  652.363335][ T8410] usb 9-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  652.377284][ T8410] usb 9-1: USB disconnect, device number 40
[  652.383823][ T8410] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  652.391764][ T8410] ftdi_sio 9-1:0.0: device disconnected
[  653.844062][ T7950] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  653.915006][ T7950] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  653.980780][ T7950] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  654.114589][ T7950] bridge_slave_1: left allmulticast mode
[  654.116973][ T7950] bridge_slave_1: left promiscuous mode
[  654.119374][ T7950] bridge0: port 2(bridge_slave_1) entered disabled state
[  654.127781][ T7950] bridge_slave_0: left allmulticast mode
[  654.130270][ T7950] bridge_slave_0: left promiscuous mode
[  654.132847][ T7950] bridge0: port 1(bridge_slave_0) entered disabled state
[  654.552154][ T7950] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  654.560149][ T7950] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  654.566612][ T7950] bond0 (unregistering): Released all slaves
[  655.027056][ T7846] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  655.033448][ T7846] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  655.038707][ T7846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  655.065012][ T7846] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  655.225413][ T7846] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  655.299064][T26214] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2422'.
[  655.305937][T26214] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check.
[  655.406360][ T7950] hsr_slave_0: left promiscuous mode
[  655.410883][ T7950] hsr_slave_1: left promiscuous mode
[  655.415323][ T7950] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  655.419936][ T7950] batman_adv: batadv0: Removing interface: batadv_slave_0
[  655.437901][ T7950] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  655.443403][ T7950] batman_adv: batadv0: Removing interface: batadv_slave_1
[  655.464887][ T7950] veth1_macvtap: left promiscuous mode
[  655.468609][ T7950] veth0_macvtap: left promiscuous mode
[  655.561599][ T7950] veth1_vlan: left promiscuous mode
[  655.563492][ T7950] veth0_vlan: left promiscuous mode
[  656.082459][T26261] tmpfs: Bad value for 'size'
[  656.423432][T26283] loop8: detected capacity change from 0 to 64
[  656.723057][ T5879] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  656.736802][ T7950] team0 (unregistering): Port device team_slave_1 removed
[  656.785126][ T7950] team0 (unregistering): Port device team_slave_0 removed
[  656.840728][T26310] loop8: detected capacity change from 0 to 32768
[  656.884084][ T5879] usb 3-1: Using ep0 maxpacket: 32
[  656.890603][ T5879] usb 3-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  656.894767][ T5879] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83
[  656.898430][ T5879] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024
[  656.909495][ T5879] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024
[  656.921798][ T5879] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  656.933239][ T5879] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0
[  656.937555][ T5879] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  656.941635][ T5879] usb 3-1: config 0 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  656.979697][ T5879] usb 3-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice=3f.bf
[  656.994809][ T5879] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  656.999743][ T5879] usb 3-1: Product: syz
[  657.001541][ T5879] usb 3-1: Manufacturer: syz
[  657.010993][ T5879] usb 3-1: SerialNumber: syz
[  657.031802][ T5879] usb 3-1: config 0 descriptor??
[  657.043686][T26290] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  657.048163][ T5879] usb 3-1: NFC: Reader power on cmd error -90
[  657.050694][ T5879] pn533_usb 3-1:0.0: NFC: Couldn't poweron the reader (error -90)
[  657.061011][ T5879] pn533_usb 3-1:0.0: probe with driver pn533_usb failed with error -90
[  657.257402][ T9904] usb 3-1: USB disconnect, device number 17
[  657.335141][ T7846] Bluetooth: hci1: command tx timeout
[  657.778317][T26217] chnl_net:caif_netlink_parms(): no params data found
[  657.923070][T26217] bridge0: port 1(bridge_slave_0) entered blocking state
[  657.926143][T26217] bridge0: port 1(bridge_slave_0) entered disabled state
[  657.929027][T26217] bridge_slave_0: entered allmulticast mode
[  657.943048][T26217] bridge_slave_0: entered promiscuous mode
[  657.948217][T26217] bridge0: port 2(bridge_slave_1) entered blocking state
[  657.951574][T26217] bridge0: port 2(bridge_slave_1) entered disabled state
[  657.963099][T26217] bridge_slave_1: entered allmulticast mode
[  657.966194][T26217] bridge_slave_1: entered promiscuous mode
[  658.000275][T26503] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  658.007286][ T9904] IPVS: starting estimator thread 0...
[  658.059391][T26217] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  658.075018][T26217] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  658.113416][T26516] IPVS: using max 50 ests per chain, 120000 per kthread
[  658.144438][T26466] loop2: detected capacity change from 0 to 32768
[  658.150591][T26466] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2446 (26466)
[  658.165895][T26466] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  658.178461][T26466] BTRFS info (device loop2): using sha256 (sha256-x86_64) checksum algorithm
[  658.181758][T26466] BTRFS info (device loop2): using free-space-tree
[  658.184611][T26217] team0: Port device team_slave_0 added
[  658.197448][T26217] team0: Port device team_slave_1 added
[  658.254534][T26217] batman_adv: batadv0: Adding interface: batadv_slave_0
[  658.259294][T26217] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  658.286294][T26217] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  658.298007][T26217] batman_adv: batadv0: Adding interface: batadv_slave_1
[  658.308377][T26217] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  658.333133][T26217] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  658.361984][T24210] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  658.494687][T26217] hsr_slave_0: entered promiscuous mode
[  658.501412][T26217] hsr_slave_1: entered promiscuous mode
[  658.703029][ T9904] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  658.863316][ T9904] usb 3-1: Using ep0 maxpacket: 16
[  658.880373][ T9904] usb 3-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35
[  658.884683][ T9904] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  658.889679][ T9904] usb 3-1: Product: syz
[  658.891409][ T9904] usb 3-1: Manufacturer: syz
[  658.899227][ T9904] usb 3-1: SerialNumber: syz
[  658.906752][ T9904] usb 3-1: config 0 descriptor??
[  658.925432][ T9904] as10x_usb: device has been detected
[  658.939328][ T9904] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led))
[  658.962010][ T9904] usb 3-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))...
[  658.998075][ T9904] as10x_usb: error during firmware upload part1
[  659.001372][ T9904] Registered device Sky IT Digital Key (green led)
[  659.141669][ T9904] usb 3-1: USB disconnect, device number 18
[  659.199515][ T9904] Unregistered device Sky IT Digital Key (green led)
[  659.203787][ T9904] as10x_usb: device has been disconnected
[  659.406091][ T7846] Bluetooth: hci1: command tx timeout
[  659.454960][ T7846] Bluetooth: hci2: unexpected event for opcode 0x0809
[  659.565689][T26217] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  659.571683][T26217] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  659.577868][T26217] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  659.584755][T26217] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  659.646975][T26217] 8021q: adding VLAN 0 to HW filter on device bond0
[  659.657543][T26217] 8021q: adding VLAN 0 to HW filter on device team0
[  659.667019][ T1147] bridge0: port 1(bridge_slave_0) entered blocking state
[  659.669304][ T1147] bridge0: port 1(bridge_slave_0) entered forwarding state
[  659.675720][ T1147] bridge0: port 2(bridge_slave_1) entered blocking state
[  659.678015][ T1147] bridge0: port 2(bridge_slave_1) entered forwarding state
[  659.725436][T26217] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  659.831426][T26823] loop2: detected capacity change from 0 to 64
[  659.924044][T26217] 8021q: adding VLAN 0 to HW filter on device batadv0
[  660.015551][T26843] loop8: detected capacity change from 0 to 512
[  660.042876][T26843] EXT4-fs error (device loop8): ext4_iget_extra_inode:5062: inode #15: comm syz.8.2465: corrupted in-inode xattr: bad e_name length
[  660.053152][T26843] EXT4-fs error (device loop8): ext4_orphan_get:1398: comm syz.8.2465: couldn't read orphan inode 15 (err -117)
[  660.067531][T26843] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  660.098303][T26843] EXT4-fs warning (device loop8): dx_probe:861: inode #2: comm syz.8.2465: dx entry: limit 0 != root limit 125
[  660.123473][T26843] EXT4-fs warning (device loop8): dx_probe:934: inode #2: comm syz.8.2465: Corrupt directory, running e2fsck is recommended
[  660.182038][ T8305] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  660.265684][T26217] veth0_vlan: entered promiscuous mode
[  660.287415][T26217] veth1_vlan: entered promiscuous mode
[  660.329450][T26867] loop8: detected capacity change from 0 to 8192
[  660.339805][T26217] veth0_macvtap: entered promiscuous mode
[  660.349445][T26217] veth1_macvtap: entered promiscuous mode
[  660.395914][T26217] batman_adv: batadv0: Interface activated: batadv_slave_0
[  660.424646][T26217] batman_adv: batadv0: Interface activated: batadv_slave_1
[  660.436089][T26217] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  660.445077][T26217] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  660.448692][T26217] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  660.463095][T26217] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  660.558777][T26892] loop8: detected capacity change from 0 to 64
[  660.649577][ T8296] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  660.657347][ T8296] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  660.678019][ T9906] hid-generic 0005:10CF:05DF.0012: item fetching failed at offset 0/1
[  660.682031][ T9906] hid-generic 0005:10CF:05DF.0012: probe with driver hid-generic failed with error -22
[  660.703502][ T5879] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  660.759916][ T8292] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  660.767228][ T8292] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  660.853663][ T5879] usb 3-1: Using ep0 maxpacket: 8
[  660.867068][ T5879] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  660.870290][ T5879] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  660.903081][ T5879] usb 3-1: Product: syz
[  660.904785][ T5879] usb 3-1: Manufacturer: syz
[  660.911130][ T5879] usb 3-1: SerialNumber: syz
[  660.934932][ T5879] usb 3-1: config 0 descriptor??
[  660.979835][T26905] ==================================================================
[  660.983175][T26905] BUG: KASAN: slab-use-after-free in __mutex_lock+0x738/0xe80
[  660.986358][T26905] Read of size 8 at addr ffff88810caf00a0 by task khidpd_10cf05df/26905
[  660.990741][T26905] 
[  660.991777][T26905] CPU: 1 UID: 0 PID: 26905 Comm: khidpd_10cf05df Not tainted 6.16.0-rc4-syzkaller-00286-gc435a4f487e8-dirty #0 PREEMPT(full) 
[  660.991791][T26905] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  660.991797][T26905] Call Trace:
[  660.991803][T26905]  <TASK>
[  660.991809][T26905]  dump_stack_lvl+0x189/0x250
[  660.991828][T26905]  ? __virt_addr_valid+0x1c8/0x5c0
[  660.991838][T26905]  ? rcu_is_watching+0x15/0xb0
[  660.991851][T26905]  ? __kasan_check_byte+0x12/0x40
[  660.991861][T26905]  ? __pfx_dump_stack_lvl+0x10/0x10
[  660.991874][T26905]  ? rcu_is_watching+0x15/0xb0
[  660.991889][T26905]  ? lock_release+0x4b/0x3e0
[  660.991903][T26905]  ? __virt_addr_valid+0x1c8/0x5c0
[  660.991914][T26905]  ? __virt_addr_valid+0x4a5/0x5c0
[  660.991924][T26905]  print_report+0xd2/0x2b0
[  660.991936][T26905]  ? __mutex_lock+0x738/0xe80
[  660.991951][T26905]  kasan_report+0x118/0x150
[  660.991963][T26905]  ? __mutex_lock+0x738/0xe80
[  660.991978][T26905]  __mutex_lock+0x738/0xe80
[  660.991993][T26905]  ? __mutex_lock+0x51b/0xe80
[  660.992007][T26905]  ? l2cap_unregister_user+0x6a/0x1b0
[  660.992023][T26905]  ? __pfx___mutex_lock+0x10/0x10
[  660.992040][T26905]  ? __pfx___timer_delete_sync+0x10/0x10
[  660.992056][T26905]  l2cap_unregister_user+0x6a/0x1b0
[  660.992079][T26905]  hidp_session_thread+0x3c9/0x410
[  660.992096][T26905]  ? __pfx_hidp_session_thread+0x10/0x10
[  660.992110][T26905]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  660.992124][T26905]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  660.992141][T26905]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  660.992156][T26905]  ? __kthread_parkme+0x7b/0x200
[  660.992166][T26905]  ? __kthread_parkme+0x1a1/0x200
[  660.992177][T26905]  kthread+0x711/0x8a0
[  660.992190][T26905]  ? __pfx_hidp_session_thread+0x10/0x10
[  660.992205][T26905]  ? __pfx_kthread+0x10/0x10
[  660.992218][T26905]  ? _raw_spin_unlock_irq+0x23/0x50
[  660.992230][T26905]  ? lockdep_hardirqs_on+0x9c/0x150
[  660.992245][T26905]  ? __pfx_kthread+0x10/0x10
[  660.992257][T26905]  ret_from_fork+0x3fc/0x770
[  660.992272][T26905]  ? __pfx_ret_from_fork+0x10/0x10
[  660.992288][T26905]  ? __switch_to_asm+0x39/0x70
[  660.992299][T26905]  ? __switch_to_asm+0x33/0x70
[  660.992310][T26905]  ? __pfx_kthread+0x10/0x10
[  660.992322][T26905]  ret_from_fork_asm+0x1a/0x30
[  660.992337][T26905]  </TASK>
[  660.992342][T26905] 
[  661.077774][T26905] Allocated by task 26217:
[  661.079445][T26905]  kasan_save_track+0x3e/0x80
[  661.081118][T26905]  __kasan_kmalloc+0x93/0xb0
[  661.082593][T26905]  __kmalloc_noprof+0x27a/0x4f0
[  661.084192][T26905]  hci_alloc_dev_priv+0x28/0x2040
[  661.085837][T26905]  vhci_create_device+0x120/0x6e0
[  661.087987][T26905]  vhci_write+0x3ce/0x4a0
[  661.089820][T26905]  vfs_write+0x54b/0xa90
[  661.091218][T26905]  ksys_write+0x145/0x250
[  661.092604][T26905]  do_syscall_64+0xfa/0x3b0
[  661.094348][T26905]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  661.096705][T26905] 
[  661.097724][T26905] Freed by task 26217:
[  661.099437][T26905]  kasan_save_track+0x3e/0x80
[  661.101418][T26905]  kasan_save_free_info+0x46/0x50
[  661.103398][T26905]  __kasan_slab_free+0x62/0x70
[  661.105408][T26905]  kfree+0x18e/0x440
[  661.107103][T26905]  bt_host_release+0x82/0x90
[  661.109052][T26905]  device_release+0x9c/0x1c0
[  661.110979][T26905]  kobject_put+0x22b/0x480
[  661.112851][T26905]  vhci_release+0x88/0xd0
[  661.114664][T26905]  __fput+0x44c/0xa70
[  661.116291][T26905]  task_work_run+0x1d4/0x260
[  661.118187][T26905]  do_exit+0x6b5/0x22e0
[  661.119855][T26905]  do_group_exit+0x21c/0x2d0
[  661.121849][T26905]  __x64_sys_exit_group+0x3f/0x40
[  661.123904][T26905]  x64_sys_call+0x21ba/0x21c0
[  661.125875][T26905]  do_syscall_64+0xfa/0x3b0
[  661.127759][T26905]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  661.130187][T26905] 
[  661.131180][T26905] Last potentially related work creation:
[  661.133463][T26905]  kasan_save_stack+0x3e/0x60
[  661.135405][T26905]  kasan_record_aux_stack+0xbd/0xd0
[  661.137578][T26905]  insert_work+0x3d/0x330
[  661.139405][T26905]  __queue_work+0xbd9/0xfe0
[  661.141279][T26905]  queue_work_on+0x181/0x270
[  661.143210][T26905]  process_scheduled_works+0xae1/0x17b0
[  661.145405][T26905]  worker_thread+0x8a0/0xda0
[  661.147359][T26905]  kthread+0x711/0x8a0
[  661.149027][T26905]  ret_from_fork+0x3fc/0x770
[  661.150926][T26905]  ret_from_fork_asm+0x1a/0x30
[  661.152942][T26905] 
[  661.153970][T26905] Second to last potentially related work creation:
[  661.156757][T26905]  kasan_save_stack+0x3e/0x60
[  661.158707][T26905]  kasan_record_aux_stack+0xbd/0xd0
[  661.160842][T26905]  insert_work+0x3d/0x330
[  661.162638][T26905]  __queue_work+0xcfc/0xfe0
[  661.164423][T26905]  call_timer_fn+0x17e/0x5f0
[  661.166335][T26905]  __run_timer_base+0x646/0x860
[  661.168361][T26905]  run_timer_softirq+0xb7/0x180
[  661.170352][T26905]  handle_softirqs+0x286/0x870
[  661.172310][T26905]  __irq_exit_rcu+0xca/0x1f0
[  661.174007][T26905]  irq_exit_rcu+0x9/0x30
[  661.175662][T26905]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  661.177966][T26905]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  661.180340][T26905] 
[  661.181380][T26905] The buggy address belongs to the object at ffff88810caf0000
[  661.181380][T26905]  which belongs to the cache kmalloc-8k of size 8192
[  661.186978][T26905] The buggy address is located 160 bytes inside of
[  661.186978][T26905]  freed 8192-byte region [ffff88810caf0000, ffff88810caf2000)
[  661.192439][T26905] 
[  661.193465][T26905] The buggy address belongs to the physical page:
[  661.196085][T26905] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10caf0
[  661.199645][T26905] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  661.203124][T26905] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  661.206323][T26905] page_type: f5(slab)
[  661.208024][T26905] raw: 057ff00000000040 ffff88801a442280 dead000000000100 dead000000000122
[  661.211526][T26905] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000
[  661.214999][T26905] head: 057ff00000000040 ffff88801a442280 dead000000000100 dead000000000122
[  661.217738][T26905] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000
[  661.220993][T26905] head: 057ff00000000003 ffffea000432bc01 00000000ffffffff 00000000ffffffff
[  661.224516][T26905] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[  661.228083][T26905] page dumped because: kasan: bad access detected
[  661.230734][T26905] page_owner tracks the page as allocated
[  661.233065][T26905] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd28c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5561, tgid 5561 (dhcpcd), ts 637878295808, free_ts 637875009326
[  661.241448][T26905]  post_alloc_hook+0x240/0x2a0
[  661.243431][T26905]  get_page_from_freelist+0x21e4/0x22c0
[  661.245702][T26905]  __alloc_frozen_pages_noprof+0x181/0x370
[  661.248154][T26905]  alloc_pages_mpol+0x232/0x4a0
[  661.250240][T26905]  allocate_slab+0x8a/0x3b0
[  661.252174][T26905]  ___slab_alloc+0xbfc/0x1480
[  661.254157][T26905]  __kmalloc_node_track_caller_noprof+0x2f8/0x4e0
[  661.256824][T26905]  kmalloc_reserve+0x136/0x290
[  661.258885][T26905]  __alloc_skb+0x142/0x2d0
[  661.260431][T26905]  netlink_dump+0x1c7/0xe20
[  661.261908][T26905]  netlink_recvmsg+0x676/0xa30
[  661.263402][T26905]  sock_recvmsg+0x22c/0x270
[  661.264826][T26905]  ____sys_recvmsg+0x1c9/0x460
[  661.266329][T26905]  ___sys_recvmsg+0x1b5/0x510
[  661.267795][T26905]  __x64_sys_recvmsg+0x198/0x260
[  661.269462][T26905]  do_syscall_64+0xfa/0x3b0
[  661.271333][T26905] page last free pid 5561 tgid 5561 stack trace:
[  661.273849][T26905]  __free_frozen_pages+0xc71/0xe70
[  661.275911][T26905]  __slab_free+0x326/0x400
[  661.277701][T26905]  qlist_free_all+0x97/0x140
[  661.279546][T26905]  kasan_quarantine_reduce+0x148/0x160
[  661.281512][T26905]  __kasan_slab_alloc+0x22/0x80
[  661.283334][T26905]  kmem_cache_alloc_node_noprof+0x1bb/0x3c0
[  661.285678][T26905]  __alloc_skb+0x112/0x2d0
[  661.287488][T26905]  netlink_sendmsg+0x5c6/0xb30
[  661.289395][T26905]  __sock_sendmsg+0x21c/0x270
[  661.291266][T26905]  __sys_sendto+0x3bd/0x520
[  661.293097][T26905]  __x64_sys_sendto+0xde/0x100
[  661.295034][T26905]  do_syscall_64+0xfa/0x3b0
[  661.296961][T26905]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  661.299301][T26905] 
[  661.300347][T26905] Memory state around the buggy address:
[  661.302677][T26905]  ffff88810caeff80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  661.306053][T26905]  ffff88810caf0000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  661.309277][T26905] >ffff88810caf0080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  661.312551][T26905]                                ^
[  661.314774][T26905]  ffff88810caf0100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  661.317992][T26905]  ffff88810caf0180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  661.321327][T26905] ==================================================================
[  661.325635][T26905] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  661.328141][T26905] CPU: 1 UID: 0 PID: 26905 Comm: khidpd_10cf05df Not tainted 6.16.0-rc4-syzkaller-00286-gc435a4f487e8-dirty #0 PREEMPT(full) 
[  661.332134][T26905] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  661.335198][T26905] Call Trace:
[  661.336278][T26905]  <TASK>
[  661.337221][T26905]  dump_stack_lvl+0x99/0x250
[  661.338663][T26905]  ? __asan_memcpy+0x40/0x70
[  661.340092][T26905]  ? __pfx_dump_stack_lvl+0x10/0x10
[  661.341735][T26905]  ? __pfx__printk+0x10/0x10
[  661.343189][T26905]  panic+0x2db/0x790
[  661.344424][T26905]  ? __pfx_panic+0x10/0x10
[  661.345827][T26905]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  661.347660][T26905]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  661.349463][T26905]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  661.351477][T26905]  ? print_memory_metadata+0x314/0x400
[  661.353304][T26905]  ? __mutex_lock+0x738/0xe80
[  661.354872][T26905]  check_panic_on_warn+0x89/0xb0
[  661.356734][T26905]  ? __mutex_lock+0x738/0xe80
[  661.358367][T26905]  end_report+0x78/0x160
[  661.359952][T26905]  kasan_report+0x129/0x150
[  661.361373][T26905]  ? __mutex_lock+0x738/0xe80
[  661.362846][T26905]  __mutex_lock+0x738/0xe80
[  661.364286][T26905]  ? __mutex_lock+0x51b/0xe80
[  661.365754][T26905]  ? l2cap_unregister_user+0x6a/0x1b0
[  661.367416][T26905]  ? __pfx___mutex_lock+0x10/0x10
[  661.369093][T26905]  ? __pfx___timer_delete_sync+0x10/0x10
[  661.370895][T26905]  l2cap_unregister_user+0x6a/0x1b0
[  661.372564][T26905]  hidp_session_thread+0x3c9/0x410
[  661.374174][T26905]  ? __pfx_hidp_session_thread+0x10/0x10
[  661.375967][T26905]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  661.377873][T26905]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  661.379838][T26905]  ? __pfx_hidp_session_wake_function+0x10/0x10
[  661.381821][T26905]  ? __kthread_parkme+0x7b/0x200
[  661.383398][T26905]  ? __kthread_parkme+0x1a1/0x200
[  661.385015][T26905]  kthread+0x711/0x8a0
[  661.386340][T26905]  ? __pfx_hidp_session_thread+0x10/0x10
[  661.388288][T26905]  ? __pfx_kthread+0x10/0x10
[  661.389797][T26905]  ? _raw_spin_unlock_irq+0x23/0x50
[  661.391450][T26905]  ? lockdep_hardirqs_on+0x9c/0x150
[  661.393086][T26905]  ? __pfx_kthread+0x10/0x10
[  661.394587][T26905]  ret_from_fork+0x3fc/0x770
[  661.396114][T26905]  ? __pfx_ret_from_fork+0x10/0x10
[  661.397896][T26905]  ? __switch_to_asm+0x39/0x70
[  661.399569][T26905]  ? __switch_to_asm+0x33/0x70
[  661.401113][T26905]  ? __pfx_kthread+0x10/0x10
[  661.402643][T26905]  ret_from_fork_asm+0x1a/0x30
[  661.404312][T26905]  </TASK>
[  661.405968][T26905] Kernel Offset: disabled
[  661.407347][T26905] Rebooting in 86400 seconds..

VM DIAGNOSIS:
06:27:54  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff81b4d950 RBX=ffff88804b03b1c0 RCX=ffff888107b83980 RDX=0000000000000000
RSI=0000000000000001 RDI=0000000000000000 RBP=ffffc900032af2e0 RSP=ffffc900032af180
R8 =ffffffff8fa115f7 R9 =1ffffffff1f422be R10=dffffc0000000000 R11=fffffbfff1f422bf
R12=1ffff11026cc7f5d R13=dffffc0000000000 R14=0000000000000001 R15=ffff88813663fae8
RIP=ffffffff81b4d939 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fd9b888f800 ffffffff 00c00000
GS =0000 ffff8880b864d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fd9b7cc7000 CR3=000000010a056000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000030 RBX=0000000000000030 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90004aef370
R8 =ffff888020ef8237 R9 =1ffff110041df046 R10=dffffc0000000000 R11=ffffffff8547a1b0
R12=dffffc0000000000 R13=ffffffff99ac78fb R14=ffffffff99dcc720 R15=0000000000000000
RIP=ffffffff8547a22c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c4d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fd9b7c52000 CR3=000000000df38000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=ffffffffffff0000 0000000000000000 XMM05=000000000000018c 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffff0000 ffffffffffffffff XMM09=00000000000001e1 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
