last executing test programs:

1.001163089s ago: executing program 1 (id=257):
r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0)
mmap$dsp(&(0x7f0000ff9000/0x2000)=nil, 0x2000, 0x0, 0x13, r0, 0x0)

873.648185ms ago: executing program 1 (id=259):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/comedi4\x00', 0x181001, 0x0)
ioctl$COMEDI_INSNLIST(r0, 0x8010640b, &(0x7f0000000000)={0xfffffffffffffcd9, 0x0})

812.95408ms ago: executing program 1 (id=262):
r0 = socket$inet6(0xa, 0x3, 0x7)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'gre0\x00', &(0x7f0000000040)=@ethtool_modinfo={0x42, 0x7, 0x4}})

753.496126ms ago: executing program 1 (id=264):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000040)={{r0, <r1=>0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000000)='%pS    \x00'}, 0x20)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r1}, 0x4)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000840)="b9ff03076003008cb89e08f086dd", 0x0, 0xf66, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)

637.234134ms ago: executing program 1 (id=266):
r0 = socket$inet6(0xa, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="040000000400000004"], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$key(0xf, 0x3, 0x2)
r1 = msgget$private(0x0, 0x193)
msgsnd(r1, &(0x7f0000000040)={0x1}, 0x8, 0x0)
msgsnd(r1, 0x0, 0x3f9, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002080)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
r3 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
r4 = dup2(r3, r2)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1f, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES64=r4], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
waitid(0x0, 0x0, 0x0, 0x8, 0x0)
mbind(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1, 0x0, 0x779a, 0x3)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x40800}, 0x0)
sendmmsg$inet6(r0, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)="1ce02c7a", 0xfe60}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000), 0x1}}], 0x3, 0x1c000)

636.903143ms ago: executing program 2 (id=267):
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0)
ioctl$RTC_UIE_ON(r0, 0x7003)
ioctl$RTC_AIE_ON(r0, 0x7001)

573.685822ms ago: executing program 2 (id=268):
r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x4000000000000103, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000001c0)={0x20, 0x2, 0x4})
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000300)={0x2, @pix_mp})

513.136162ms ago: executing program 2 (id=270):
r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$VIDIOC_G_SELECTION(r0, 0xc040565e, &(0x7f0000000380)={0x1, 0x100, 0x4, {0x4, 0x7, 0x780000, 0xfcad}})

512.663156ms ago: executing program 1 (id=271):
syz_mount_image$jfs(&(0x7f0000000100), &(0x7f00000000c0)='./file1\x00', 0x1010006, &(0x7f00000002c0)={[{@quota}, {@noquota}, {@nointegrity}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'cp863'}}, {@noquota}, {@gid}, {@iocharset={'iocharset', 0x3d, 'koi8-u'}}, {@uid={'uid', 0x3d, 0xee01}}]}, 0x24, 0x61b6, &(0x7f00000075c0)="$eJzs3cuOHFcZB/Cv+jYXE8fKIgoWQpPEXEKIr8EYAiRZwIINC+QtsjWZRBYOINsgJ7LwRLNhwUOAkFgixJIVD5AFW3Y8AJZsJFAWKIVq5pxxTaV7esb2dHW7fj9pXPX1qZo+5X9XX6aq+gQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAED/8wY/PFRFx5VfphhMRn4t+RC9iparXImJl7UR9nRdiuzmej4jhUkS1/vY/z0a8HhEfH4+4/+DOenXz+QP24/t//scffnLsR3//0/DMf/9yq//GpOVu3/7tf/5699G3FwAAALqoLMuySB/zT0bEIH22BwCefvn1v0zy7eq5qzfnrD9qtVqtXsC6rhzvbr2IiM36OtV7BofjAWDBbMYnbXeBFsm/0wYRcaztTgBzrWi7AxyJ+w/urBcp36L+erC2057PBdmT/2axe33HpOk0zXNMZvX42op+PDehPysz6sM8yfn3mvlf2WkfpeWOOv9ZmZT/aOfSp87J+feb+Tc8Pfn3xubfVTn/waHy78sfAAAAAADmWP77/4mWj/8uPf6mHMh+x3/XZtQHAAAAAAAAAHjSDjv+36Ax/t8u4/8BAADA3Ko+q1d+d/zhbZO+i626/XIR8UxjeaBj0sUyq233AwAAAAAAAAAAAAC6ZLBzDu/lImIYEc+srpZlWf3UNevDetz1F13Xtx+6rO0neQAA2PHx8ca1/EXEckRcTt/1N1xdXS3L5ZXVcrVcWcrvZ0dLy+VK7XNtnla3LY0O8IZ4MCqrX7ZcW69u2uflae3N31fd16jsH6Bjs9Fi4AAQETuvRvcnvSL9z+vVYirLZ6PlNzksiH32fxaU/Z+DaPtxCgAAABy9sizLIn2d98l0zL/XdqcAgJnIr//N4wJqtVqtVqufvrquHO9uvYiIzfo61XsGw/EDwILZjE/a7gItkn+nDSLihbY7Acy1ou0OcCTuP7izXqR8i/rrQRrfPZ8Lsif/zWJ7vbz+uOk0zXNMZvX42op+PDehP8/PqA/zJOffa+Z/Zad9lJZ7/PzLPX8mbOsco0n5V9t5ooX+tC3n32/m33DU+/+sbEVvbP5dlfMfHCr/vvwBAAAAAGCO5b//n5ir47+jR92cqfY7/rs2do2j6wsAAAAAAAAAPCn3H9xZz9e95uP/XxiznOs/n045/0L+nZTz7zXy/2pjuX5t/t7bD/P/94M763+89a/P5+lB81/KM0V6ZBXpEVGkeyoGafo4W/dZW8P+qLqnYdHrD9I5P+Xw3bgW12Mjzu5Ztpf+Px62n9vTXvV0uN1e9nfaz+9pH+y25/Uv7GkfprOLypXcfjrW4+dxPd7Zbq/alqZs//KU9nJKe86/b//vpJz/oPZT5b+a2ovGtHLvo95n9vv6dNz9vHXti785e/SbM9VW9He3ra7avpda6M/2/8mxUfzy5saN07ev3rp141ykyZ5bz0eaPGE5/2H62X3+f3mnPT/v1/fXex+NDp3/vNiKwcT8X67NV9v7yoz71oac/yj95PzfSe3j9/9Fzn/y/v9qC/0BAAAAAAAAAAAAAACA/ZRluX2J6FsRcTFd/9PWtZkAwGzl1/8yybfPqu7P+P7U6gWviznrz0zrT8v56o9avYh1XTnem/UiIv5WX6d6z/Drcb8MAJhnn0bEP9vuBK2Rf4fl7/urpqfa7gwwUzc/+PCnV69f37hxs+2eAAAAAAAAAACPKo//uVYb//lUWZZ3G8vtGf/17Vh73PE/B3lmd4DRCQNV9w+/TfvZ6o36vdpw4y/GpPG/h7tz+43/PZhyf8Mp7aMp7UtT2pentI+90KMm5/9ibbzzUxFxsjH8ehfGf22Oed8FOf+Xao/nKv+vNJar51/+fpHz7+3J/8yt939x5uYHH7527f2r7228t/GzC+fOnb1w8eKlS5fOvHvt+sbZnX9b7PHRyvnnsa+dB9otOf+cufy7Jef/pVTLv1ty/l9Otfy7Jeef3+/Jv1ty/vmzj/y7Jef/Sqrl3y05/6+lWv7dkvN/NdXy75ac/9dTLf9uyfm/lmr5d0vO/3Sq5d8tOf8zqT5g/itH3S9mI+efj3DZ/7sl55/PbJB/t+T8z6da/t2S87+Qavl3S87/9VTLv1ty/t9Itfy7Jed/MdXy75ac/zdTLf9uyflfSrX8uyXn/61Uy79bcv7fTrX8uyXn/0aq5d8tOf/vpFr+3ZLz/26q5d8tOf/vpVr+3ZLzfzPV8u+Wh9//b8aMGTN5pu1nJgAAAAAAAAAAAACgaRanE7e9jQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA/9mBAwEAAAAAIP/XRqiqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrCDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFfbuLkaus74f+Jl989qBxEDI38nfwMYxISSb7NpO/EKbYsJrw1sJhEJfsF3v2iz4Da9dAo1k00CJhFFRRdtw0RYQanNTkQsuaAUoF6gVUiVoL+gNokLlIqoCCkiVaAXZas55nmdnZmdndu3x+sw5n4+U/LIzZ+acOXPm7H53850BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoNWtr5//dCPLsuY/+b+2ZtkLmv+9eWprftlrrvUWAgAAAFfqV/m/n7shXXBwDTdqWeafX/7dry0tLS1l7xv98/HPLy2lK6aybHxTluXXRU/96P2N1mWCx7LJxkjL1yN9Vj/a5/qxPteP97l+os/1m/pcP9nn+hU7YIXNxe9j8jvbmf/n1mKXZjdm4/l1O7vc6rHGppGR+LucXCO/zdL4sWwhO5HNZ7NtyxfLNvLlv3Frc11vyeK6RlrWtb15hPzs0aNxGxphH+9sW9fyfUY/eV029fOfPXr0b889e3O32Xc3tN1fsZ137Ghu5yfDJcW2NrJNaZ/E7Rxp2c7tXZ6T0bbtbOS3a/5353Y+t8btHF3ezA3V+ZxPZiP5f38v309jrb/WS/tpe7jsF7dlWXZxebM7l1mxrmwk29J2ycjy8zNZHJHN+2geSi/OxtZ1nN66huO0Oed2th+nna+J+PzfGm43tso2tD5NP/nERMvz/sulyzlOo+ajXu210nkMDvq1UpZjMB4X38sf9ONdj8Gd4fE/evvqx2DXY6fLMZged8sxuKPfMTgyMZpvc3oSGvltlo/BXW3Lj+ZrauTzmdt7H4Mz506emVn82MfvXjh55Pj88flTe3btmt2zd+/+/ftnji2cmJ8t/n2Ze7v8tmQj6TWwI+y7+Bp4VceyrYfq0pcmVpx/L/d1ONnjdbi1Y9lBvw7HOh9cY2NekCuP6eK18Z7mTp+8NJKt8hrLn587r/x1mB53y+twrOV12PV7SpfX4dgaXofNZc7cubafWcZa/um2Dat/L7iyY3BryzHY+fNI5zE46J9HynIMTobj4gd3rv69YHvY3sen1/vzyOiKYzA93HDuaV6Sft6f3J+PbsflLc0rrpvIzi/On73nkSPnzp3dlYWxIV7Scqx0Hq9bWh5TtuJ4HVn38Xpw4eWP39Ll8q1hX03e3fzX5KrPVXOZe+/p/Vzl392678+2S3dnYQzYRu/Pbt/Nm/tzIsu+8O1PPPTNR7/w+lX3ZzNvfnLmyn8WT7m05fw7vsr5N+b+54v1pbt6bHR8rHj9jqa9M952Pm5/qsbyc1cjX/dzM2s7H4+Hfzb6fHxjj/Pxto5lB30+Hu98cPF83Oj3244r0/l8Tobj5MRs7/Nxc5ltu9d7TI71PB/fFmYj7P9Xh6SQclHLsbPacZvWNTY2Hh7XWFxD+3G6p2358ZDNmut6cnf4oTBt5dqO0ztuK5YfbbldtFHH6VTHsoM+TtPvvlY7Thv9fvt2eTqfz8lwXNy4p/dx2lzm6Xuv/Ny5Of5ny7lzot8xOD460dzm8XQQ5uf7bGlzPAbvyY5mp7MT2Vx+7UR+PDXydU3ft7Zz5UT4Z6PPldt6HIN3dCw76GMwfR9b7dhrjK188APQ+XxOhuPiift6H4PNZd6wb7A/u94RLknLtPzs2vn7tdV+53VLx266WsfKWNjOb+/r/bvZ5jIn9q83Z/beT3eFS67rsp86X7+rvabmso3ZT9vCdj67f/X91Nye5jKfP7DG4+lglmUXPvJA/vve8PeVC+e//7W2v7t0+5vOhY888NMXHvun9Ww/AMPv+WJsKb7Xtfxlai1//wcAAACGQsz9I2Em8j8AAABURsz98f8KT+R/AAAAqIyY+8fCTKqQ//+4/yLb3vDswvMXstTMXwri9Wk3PFgsFzuus+HrqaVlzcsf+Mr8f//jhbVt3kiWZb988I+6Lr/twbhdhamwnU+9sf3yFb5295rWffjhC2m9rf31L4b7j49nrYdBtwrubJZl37jhs/l6pt5/KZ9PP3g4nw9dfPyx5jLPHSi+jrd/5iXF8n8Vyr8Hjx1pu/0zYT/8OMzZt3bfH/F2X7306u373ru8vni7xo7r84f9xAeK+43vk/O5x4rl435ebfu/+Zknv9pc/pFXdt/+CyPdt//JcL9fCfN/XlYs3/ocNL+Ot/tU2P64vni7e778ra7b/9Sni+XPvKlY7nCYcf13hK93vunZhdb99UjjSNvjyt5cLBfXP/v9P82vj/cX779z+ycPXWrbH53Hx9P/VtzPTMfy8fK4nugfOtbfvJ/W4zOu/8k/Ody2n/ut/6mHnnlZ8347139Xx3JnPnJnvv7l+2t/x6a//tRnu64vbs/Bvz/T9ngOviu8jsP6n/hAOB7D9f/7VHF/ne+ucPhd7eefuPwXt15oezzRW35erP+p1x7P56bJzVuue8ELr7/4iua+y7LvbSrur9/6j//N6bbt/9JNxf6I18eOfuf6VxPXf/aj06dOL55fmEt79dEb8vfOeVuxPXF7bwjn1s6vD50+98H5s1OzU7NZNlXdt9C7bF8O86fFuNh76aUVZ9A7Hw7P5y1/+Y0tt//rZ+Ll//6e4vJLby2+b70qLPe5cPnW8Pytb/0rPXHrTfnru/F02MKlle8XfCW27/yv/WtaMDz+zp8L4vF+5qUfzPdD87r8+0Z8XV/h9v9wrrifr4f9uhTemXnHTcvra10+vjfCpXcXr/cr3n/hNBef178Lz/fbf1zcf9yu+Hh/GH6O+da29vNdPD6+fmGk8/7zd/G4GM4n2cXi+rhU3N+Xnrup6+bF9yHJLt6cf/1n6X5uXtfDXM3ixxZnTiycOv/IzLn5xXMzix/7+KGTp8+fOncofy/PQx/qd/vl89OW/Pw0N7/33iw/W50uxlV2rbf/zMNH5/bN3j43f+zI+WPnHj4zf/b40cXFo/Nzi7cfOXZs/qP9br8wd/+u3Qf27Ns9fXxh7v79Bw7sOTC9cOp0czOKjepj7+yHp0+dPZTfZPH+ew/suu++e2enT56em79/3+zs9Pl+t8+/N003b/2H02fnTxw5t3Byfnpx4ePz9+86sHfv7r7vBnjyzLHFqZmz50/NnF+cPztTPJapc/nFze99/W5PNS3+R/HzbKdG8UZ82Tvv2pven7XpK59Y9a6KRTreQPTZ8F4033nRmf1r+Trm/vEwkyrkfwAAACAXc/9EmIn8DwAAAJURc/+mMBP5HwAAACoj5v7JMNP/ElCT/F+5/v+2C2tav/6//n/r/tL/r1n//91l6/8X5wv9/8G40v69/n+g/6//r/+v/6//zwCUrf8fc//mLPP3fwAAAKiomPu3hJnI/wAAAFAZMfdfF2Yi/wMAAEBlxNz/gjCTmuR//X/9f/1//X/9/+7r1/8fTvr/ven/96H/P5PVq/9/cZDbfw36/5tbv9D/p4zK1v+Puf+FYSY1yf8AAABQBzH3Xx9mIv8DAABAZcTcf0OYifwPAAAAlRFz/9Ywk5rkf/3/K+r/p86V/n/79uv/t9P/D8eD/r/+/wbQ/+9N/78P/X+f/z9c/f82+v+UUdn6/zH3vyjMpCb5HwAAAOog5v4Xh5nI/wAAAFA+Y5d3s5j7XxJmsiL/X+YKAAAAgGsu5v4bs44ieE3+/q//7/P/9f/1//X/u69/7f3/0Uz/vzz0/3vT/+9D/1//X/9f/5+BKlv/P8/92WT20jCTmuR/AAAAqIOY+28KM5H/AQAAoDJi7v9/YSbyPwAAAFRGzP3bwkxqkv/1/yvT//9F61On/6//32v9+v8+/7/K9P970//vQ/9f/1//X/+fgSpb/z/m/pvDTGqS/wEAAKAOYu6/JcxE/gcAAIDKiLn//4eZyP8AAABQGTH3bw8zqUn+1/8vef8/Nkd9/r/+v/5/Kfv/k/r/paP/35v+fx/6//r/+v/6/wxU2fr/Mfe/LMykJvkfAAAA6iDm/peHmcj/AAAAUBkx978izET+BwAAgMqIuX8qzKQm+X89/f/GRf3/1Vzlz/+fWMPn/7fR/9f/77V+/X+f/19l+v+96f/3of+v/6//r//PQJWt/x9z/61hJjXJ/wAAAFAHMffvCDOR/wEAAKAyYu6/LcxE/gcAAIDKiLl/Z5hJTfK/z/8fiv5/pv+v/6//r/+v/782+v+96f/3of+v/6//r//PQJWt/x9z/yvDTGqS/wEAAKAOYu6/PcxE/gcAAIDKiLn/VWEm8j8AAABURsz9d4SZ1CT/6//r/+v/6//r/3dfv/7/cNL/703/vw/9f/1//X/9fwaqbP3/mPtfHWZSk/wPAAAAdRBz/51hJvI/AAAAVEbM/XeFmcj/AAAAUBkx90+HmdQk/+v/6//r/+v/6/93X7/+/3DS/+9N/78P/X/9f/1//X8Gqmz9/5j77w4zqUn+BwAAgDqIuf+eMBP5HwAAACoj5v6ZMBP5HwAAACoj5v7ZMJOa5H/9f/1//X/9/3X1/1+xfL/6/wX9/3LR/+9N/78P/X/9/2ve/x/X/6dSytb/j7l/V5hJTfI/AAAA1EHM/bvDTOR/AAAAqIyY+/eEmcj/AAAAUBkx998bZlKT/K//r/+v/6//7/P/u69f/3846f/3Nvj+f3yI+v/6//r/Pv9f/5+Vytb/j7n/vjCTmuR/AAAAqIOY+/eGmcj/AAAAUBkx9+8LM5H/AQAAoDJi7t8fZlKT/K//r/+v/6//r//fff36/8NJ/783n//fh/6//v8Q9/+bx5b+P2VTtv5/zP0Hwkxqkv8BAACgDmLuf02YifwPAAAAlRFz/6+Fmcj/AAAAUBkx9/96mElN8r/+v/6//r/+f9n7/xP6//r/66D/35v+fx/6//r/Q9z/9/n/lFHZ+v8x998fZlKT/A8AAAB1EHP/b4SZyP8AAABQGTH3vzbMRP4HAACAyoi5/2CYSU3yv/7/BvX/44X6//r/+v8+/1///6rS/+9N/78P/X/9f/1//X8Gqmz9/5j7XxdmUpP8DwAAAHUQc/8DYSbyPwAAAFRGzP2vDzOR/wEAAKAyYu5/Q5hJTfK//r/P/7/2/f/xtm3X/1++nf5/Qf9f/3899P970//vQ/9f/1//X/+fgSpb/z/m/jeGmdQk/wMAAEAdxNz/pjAT+R8AAAAqI+b+N4eZyP8AAABQGTH3vyXMpCb5X/9f///a9/99/r/+f0H/X/9/EPT/e9P/70P/X/9f/1//n4EqW/8/5v7fDDOpSf4HAACAOoi5/8EwE/kfAAAAKiPm/reGmcj/AAAAUBkx978tzKQm+V//X/9f/1//X/+/+/r1/4eT/n9vQ9b//9X14XL9/4L+f7m3f739/7GOr69K//9Hq/X/lzZ13l7/n6uhbP3/mPvfHmZSk/wPAAAAdRBz/zvCTOR/AAAAqIyY+98ZZiL/AwAAQGXE3P9bYSY1yf/6/83tWG4v6//r/+cX6P/r/+v/Dy39/96GrP/v8/876P+Xe/t9/r/+PyuVrf8fc/+7wkxqkv8BAACgDmLufyjMRP4HAACAyoi5/91hJvI/AAAAVEbM/e8JM6lJ/tf/9/n/+v/6//r/3dev/z+c9P970//vQ/9f/79s/f//1P9nuJWt/x9z/8NhJjXJ/wAAAFAHMfe/N8xE/gcAAIDKiLn/t8NM5H8AAACojJj73xdmUpP8r/8/LP3/Kf3/dfb/J8Jl+v/6//r/9aL/35v+fx/6//r/Zev/+/x/hlzZ+v8x978/zGTt+X9yzUsCAAAA10TM/b8TZlKTv/8DAABAHcTc/7thJvI/AAAAVEbM/b8XZlKT/K//Pyz9f5//n/n8f/3/jsej/6//383G9f/jmUf/X/9f/z/S/9f/1/+nU9n6/zH3/36YSU3yPwAAANRBzP0fCDOR/wEAAGAodPt/sjvF3H8ozET+BwAAgMqIuf9wmElN8r/+v/6//n9J+/9/seNffvDddxzepf+v/6//vy4b+vn/zRe/z//X/9f/T/T/9f/1/+lUtv5/zP1HwkyWg9/bfMA/AAAADLeY+/8gzKQmf/8HAACAOoi5/2iYifwPAAAAlRFz/1yYSU3yv/6//r/+f0n7/0P8+f9xfwxT/3960xD1/+NJV/+/qw3t/793uSeu/7/e/v9E10s7+/8N/f82+v/r3v7vZFmm/6//zzVUtv5/zP3zYSY1yf8AAABQByH3jxwr5vIV8j8AAABURsz9x8NM5H8AAACojJj7PxhmUpP8r/+v/6//r//v8/+7r7+0/X+f/9+T/n9v5en/d+fz//X/h3n79f/1/1mpbP3/mPsXwkxqkv8BAACgDmLu/1CYifwPAAAAlRFz/4fDTOR/AAAAqIyY+0+EmdQk/+v/6//r/+v/6/93X7/+/3DS/+9N/78P/X/9f/1//X8Gqmz9/5j7T4aZ1CT/AwAAQB3E3H8qzOT/2LuPJsvq847jt3FTzBQb77zwwt77JbAwa/sFeMHGC7vK5YWxjXNicI4454BtJRRQAAmhhHICJSSUhSSUc0AZSTUqmOd5Znr69LndM7e7z/0/n89CDzSMzkU1BfrRfDn2PwAAAAwjd//NcYv9DwAAAMPI3f/LcUuT/a//1/8P2///pP7/oOfr//X/I9P/z9P/r6H/1//r//X/bNTS+v/c/b8StzTZ/wAAANBB7v5fjVvsfwAAABhG7v5b4hb7HwAAAIaRu//X4pYm+/+y/n9n1bP/z4xX/z9S/+/9/wc+X/+v/x/Zyfb/tz3xZz79v/5f/x/0//p//T+XW1r/n7v/1+OWJvsfAAAAOsjd/xtxi/0PAAAAw8jd/5txi/0PAAAAw8jd/1txS5P97/3/3v+v/9f/6/+nn6//307e/z+vU/9/y8PX/9Jj9/7ofUd5vv5f/6//1/+zWUvr/3P3/3bc0mT/AwAAQAe5+38nbrH/AQAAYBi5+383brH/AQAAYAudnfxq7v7fi1ua7H/9v/5f/x/9/xn9v/5f/z8C/f+8Tv3/lTxf/6//1//r/9mspfX/uft/P25psv8BAACgg9z9fxC32P8AAACwXFP/IPaM3P23xi32PwAAAAwjd/+5uKXJ/tf/H3///339/3b0/97/r//X/w9B/z9P/7+G/l//r//X/7NRS+v/c/ffFrc02f8AAADQQe7+P4xb7H8AAAAYRu7+P4pb7H8AAAAYRu7+P45bmux//b/3/+v/9f/6/+nn6/+3k/5/nv5/Df3/1fbz1+r/9f/6fy51xP7/8Zk/bW+k/8/d/ydxS5P9DwAAAB3k7v/TuMX+BwAAgGHk7v+zuMX+BwAAgGHk7v/zuKXJ/tf/6//1//r/K+7/9//Ue5L+f5r+/2To/+ctpv/f2Z38sv5/6/t/7//X/+v/2WNp7//P3f8XcUuT/Q8AAAAd5O7/y7hlZv8f+W/mAwAAAKcqd/9fxS2+/w8AAABbL6uz3P1/Hbc02f/6f/2//l//7/3/08+f6//vu+Tz6f+XRf8/bzH9/wH0//r/bf78+n/9P/strf/P3f83cUuT/Q8AAAAd5O6/PW6x/wEAAGAYufv/Nm6x/wEAAGAYufv/Lm5psv+n+/+Lv13/fzj6/72fX/8//fNjU/1//jfq/2f7/xu9/78n/f88/f8a+n/9v/7/oP7/7Lofr/9nytL6/9z9fx+3NNn/AAAA0EHu/n+IW+x/AAAAGEbu/n+MW+x/AAAAGEbu/n+KW5rsf+//1//r/7ev//f+/wtO8/3/qxPv/3f1/4ek/5+n/19D/6//1//Pv/9/5t8CoP9nytL6/9z9/xy3NNn/AAAA0EHu/n+JW+x/AAAA2A6X/rMDl/8DpSF3/7/GLfY/AAAADCN3/7/FLePs/9l3der/9f/6f/2//n/6+cvq/73//7D0//P0/2vo/4+jn98drP+/46Afv4T+/9bj7v9n6P+Zsqf/v//i10+r/8/d/+9xyzj7HwAAANrL3f8fcYv9DwAAAMPI3f+fcYv9DwAAAMPI3f9fcUuT/X/s/f/Mv31A/6//1//r//X/+v9N0//P0/+vof/3/n/v/9f/s1F7+v9LnFb/n7v/v+OWJvsfAAAAOsjd/z9xi/0PAAAAw8jdf0fcYv8DAADAMHL3/2/c0mT/e/+//l//r//X/08/X/+/na6qv79G/1/0//p//b/+X//PBiyt/8/d/39xS5P9DwAAAB3k7v//uMX+BwAAgGHk7n9K3GL/AwAAwDBy9z81bmmy//X/x9v/59f1//r/lf5f/6//PxFt3/+/M/VXov0O6P8f/IVzP733K/p//b/+X/+v/+eQfnjmty2i/z9/8f9d5u5/WtzSZP8DAABAB7n7nx632P8AAAAwjNz9z4hb7H8AAAAYRu7+O+OWI+7/ueZhyfT/3v+v/9f/6/+nn6//305t+/9D8v7/NfT/+n/9v/6fjVpE/3/Jr+fuf2bc4vv/AAAAMIzc/c+KW+x/AAAAGEbu/mfHLfY/AAAADCN3/3Pilib7X/+v/9f/6//1/9PP1/9vJ/3/PP3/GtvU/995Ff3/7vSXT7ufv1qn/fn1//p/9lta/5+7/664pcn+BwAAgA5y9z83brH/AQAAYBi5+58Xt9j/AAAAMIzc/c+PW5rsf/2//l//r//X/08/X/+/nfT/8/T/q9Xq7pkPMNX/n79umf2/9/8v7vPr//X/7Le0/j93/wvilib7HwAAADrI3X933GL/AwAAwDBy998Tt9j/AAAAMIzc/S+MW5rsf/2//l//r//X/08/X/+/nfT/8/T/a2zT+//1/4v7/Pp//T/7La3/z93/orilyf4HAACADnL33xu32P8AAAAwjNz9L45b7H8AAAAYRu7+++KWJvtf/6//1//r//X/08/X/2+n4+v/V/p//b/+fw39v/5f/8/lltb/5+5/SdzSZP8DAABAB7n7Xxq32P8AAAAwjNz9L4tb7H8AAAAYRu7+l8ctTfa//l//r//X/+v/p5+v/99O3v8/T/+/hv5f/6//1/+zUdP9/62n1v/n7n9F3NJk/wMAAEAHufvvj1vsfwAAABhG7v5Xxi32PwAAAAwjd/+r4pYm+1//r//f2/+vVvp//b/+/4IT6P/PrPT/G6f/n6f/X0P/P2b/f81qoP7/7IE/Xv/PEi3t/f+5+18dtzTZ/wAAANBB7v7XxC32PwAAAAwjd/9r4xb7HwAAAIaRu/91cUuT/a//1/97/7/+X/8//Xzv/99O+v95+v819P9j9v/e/6//59Qsrf/P3f/6uKXJ/gcAAIAOcve/IW6x/wEAAGAYufvfGLfY/wAAADCM3P1vilua7H/9v/5f/6//1/9PP1//v530//P0/2vo//X/+n/9Pxu1tP4/d/+b45Ym+x8AAAA6yN3/QNxi/wMAAMAwcvc/GLfY/wAAADCM3P1viVua7H/9v/5f/7+d/f8Z/b/+X/8/aSn9/w03/NRD+n/9v/5f/6//1/93t7T+P3f/W+OWJvsfAAAAOsjd/7a4xf4HAACAYeTuf3vcYv8DAADAMHL3vyNuabL/9/f/164uFKoXTPX/0ajp/y+h/9/7+fX/0z8/vP9f/6//P35L6f+9///KPr/+X/+/zZ//SP3/j+//8fp/RrS0/j93/0NxS5P9DwAAAB3k7n9n3GL/AwAAwDBy978rbrH/AQAAYBi5+x+OW5rsf+//1//r//X/+v/p5+v/t5P+f57+fw39v/7f+/9v/rkf0v+zOUvr/3P3vztuabL/AQAAoIPc/e+JW+x/AAAAGEbu/vfGLfY/AAAADCN3//vilib7X/+v/9f/6//1/9PP1/9vJ/3/PP1/ufwP7YI+/f+ZqS+edj9/tU778w/T/3v/Pxu0tP4/d//745Ym+x8AAAA6yN3/gbjF/gcAAIBh5O7/YNxi/wMAAMAwcvd/KG5psv/1//r/8fv/n9X/X/Z8/b/+f2T6//wr+jT9/xp9+v9Jp93Pb/vn1//r/9lvaf1/7v5H4pYm+x8AAAA6yN3/4bjF/gcAAIBh5O7/SNxi/wMAAMAwcvd/NG5psv/1/736/51Vx/7f+//1//r/TvT/8/T/a+j/9f/6f/0/G7W0/j93/6M7uy33PwAAAGyrn/mJX3zksL/vo0/+55nVx+KWG1fnD/ltbAAAAGDhntj9O7ur1cef/DXf/wcAAIAR5e7/RNzSZP/r/3v1/z3f/6//1//r/zvR/8/T/6+h/9f/6//1/2zU0vr/3P2fjFsuGX67R/6jBAAAAJYkd/+n4pYm3/8HAACADnL3fzpu2bf//esAAQAAYFvl7v9M3NLk+//6/4X3/6tj6v/j99P/X6D/1/9PPV//v530//Ousv8/v6P/1//P0P/r//X/XG5p/X/u/s/GLU32PwAAAAxqz99RyN3/ubjF/gcAAIBh5O7/fNxi/wMAAMAwcvd/IW5psv/1/yfe/2eqfozv/z9bv+T9/837/9vPTD5f/6//H5n+f573/6+h/x+l/79O/6//ZxmW1v/n7v9i3NJk/wMAAEAHufu/FLfY/wAAADCM3P1fjlvsfwAAABhG7v6vxC1N9r/+f+Hv/7+i/v8Q7//X//fo/w94/jj9/49cf+6Bm37+nrv0/1x0kv1//lzQ/+v/9f8XLKj/9/5//T8Lsfn+f3fPF4/a/+fu/2rc0mT/AwAAQAe5+x+LW+x/AAAAGEbu/q/FLfY/AAAADCN3/9fjlib7X/+v/19K/5//W59C/3/uivv/s6vV6lT6/2yKu/f/3v+v/9/P+//n6f/X0P/r//X/+n82avP9/94vHrX/z93/jbilyf4HAACADnL3fzNuyf2/c+S/dQ8AAAAsTO7+b8Utvv8PAAAAw8jd/+24pcn+1//r/5fS/yfv/7/448Z6//9NFaf27P9/rH5J/3+89P/z9P9r6P/1//p//T8btbT+P3f/d+KWJvsfAAAAOsjd/3jcYv8DAADAMHL3fzdusf8BAABgGLn7vxe3NNn/+v9R+/8s4vX/+v+l9P/e/+/9/ydD/z9P/7+G/l//r//X/7NRS+v/c/f/IAAA//9GqnSo")
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000280)='./bus\x00', 0x810408, 0x0, 0xff, 0x0, &(0x7f00000007c0))
rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000a00)='./bus/file0\x00')

463.534439ms ago: executing program 2 (id=272):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001a00)=ANY=[@ANYBLOB="14000000040a0107"], 0x14}, 0x1, 0x0, 0x0, 0x40080}, 0x4000404)
recvmmsg(r0, &(0x7f0000001980)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x2120, 0x0)

403.893731ms ago: executing program 2 (id=274):
r0 = socket$packet(0x11, 0x3, 0x300)
r1 = dup(r0)
setsockopt$packet_int(r1, 0x107, 0x17, 0x0, 0x0)

403.558879ms ago: executing program 0 (id=275):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000098000000060a010400000000000000000100000008000b400000000070000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000380001800c0001006269747769736500280002800800034000000002080001400000001408000240000000120400048008000640000000050900010073797a30"], 0x10c}}, 0x0)

352.69466ms ago: executing program 2 (id=276):
socket$inet(0x2, 0x1, 0x0)
openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0)
sendmsg$inet6(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = syz_io_uring_setup(0xbdc, &(0x7f00000021c0)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=<r3=>0x0, &(0x7f0000002180)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0)

352.48673ms ago: executing program 0 (id=277):
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000)
move_pages(0x0, 0x2, &(0x7f0000000040)=[&(0x7f00001d8000/0x2000)=nil, &(0x7f00001e4000/0x4000)=nil], 0x0, &(0x7f0000000100), 0x2)

282.459464ms ago: executing program 0 (id=278):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0)
ioctl$COMEDI_INSN(r0, 0x8028640c, &(0x7f0000000000)={0xc000003, 0xf, &(0x7f0000000180)=[0x1, 0x9, 0xf909, 0x899d, 0x80, 0x98a, 0x7, 0x1010, 0xfffffe00, 0x1, 0x4, 0x2, 0x6, 0x4, 0x0], 0x1, 0x4000007})

212.83157ms ago: executing program 0 (id=279):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='d'], 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x4008000)
sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x0, 0xc4fc9e906872338b, 0x70bd29, 0x0, {{0x5}, {@val={0x8}, @void}}}, 0x1c}}, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, 0x0, &(0x7f0000000040))

113.663617ms ago: executing program 0 (id=280):
prctl$PR_SET_ENDIAN(0x47, 0x1)

0s ago: executing program 0 (id=281):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000a80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]})
exit(0x5)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000240))

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:7387' (ED25519) to the list of known hosts.
syzkaller login: [   58.214440][ T5832] cgroup: Unknown subsys name 'net'
[   58.322402][ T5832] cgroup: Unknown subsys name 'cpuset'
[   58.329108][ T5832] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   60.388993][ T5832] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   65.992237][ T5234] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   66.010008][ T5851] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   66.014523][ T5851] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   66.018558][ T5851] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   66.020936][ T5851] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   66.023742][ T5851] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   66.027896][ T5859] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   66.031896][ T5859] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   66.034815][ T5859] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   66.038766][ T5859] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   66.058948][ T5859] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   66.064125][ T5860] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   66.070044][ T5860] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   66.073931][ T5851] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   66.079897][ T5851] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   66.406648][ T5856] chnl_net:caif_netlink_parms(): no params data found
[   66.451431][ T5853] chnl_net:caif_netlink_parms(): no params data found
[   66.508882][ T5849] chnl_net:caif_netlink_parms(): no params data found
[   66.619414][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.622078][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.625003][ T5853] bridge_slave_0: entered allmulticast mode
[   66.629180][ T5853] bridge_slave_0: entered promiscuous mode
[   66.647305][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.650271][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.652433][ T5853] bridge_slave_1: entered allmulticast mode
[   66.655083][ T5853] bridge_slave_1: entered promiscuous mode
[   66.680582][ T5856] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.682846][ T5856] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.685066][ T5856] bridge_slave_0: entered allmulticast mode
[   66.689248][ T5856] bridge_slave_0: entered promiscuous mode
[   66.706312][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   66.720240][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.722547][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.724785][ T5849] bridge_slave_0: entered allmulticast mode
[   66.727490][ T5849] bridge_slave_0: entered promiscuous mode
[   66.731055][ T5856] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.733290][ T5856] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.736770][ T5856] bridge_slave_1: entered allmulticast mode
[   66.740311][ T5856] bridge_slave_1: entered promiscuous mode
[   66.744880][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   66.760470][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.763145][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.765912][ T5849] bridge_slave_1: entered allmulticast mode
[   66.769520][ T5849] bridge_slave_1: entered promiscuous mode
[   66.807351][ T5853] team0: Port device team_slave_0 added
[   66.820645][ T5856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   66.825654][ T5853] team0: Port device team_slave_1 added
[   66.847312][ T5856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   66.864745][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   66.881338][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0
[   66.883547][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.892997][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   66.899548][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   66.917229][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1
[   66.919738][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   66.927816][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   66.941290][ T5856] team0: Port device team_slave_0 added
[   66.963015][ T5856] team0: Port device team_slave_1 added
[   66.968520][ T5849] team0: Port device team_slave_0 added
[   67.013418][ T5849] team0: Port device team_slave_1 added
[   67.031221][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_0
[   67.033453][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.042933][ T5856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   67.065334][ T5853] hsr_slave_0: entered promiscuous mode
[   67.069346][ T5853] hsr_slave_1: entered promiscuous mode
[   67.073023][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_1
[   67.075824][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.086624][ T5856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   67.112622][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0
[   67.115410][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.125972][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   67.159949][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1
[   67.162671][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   67.173285][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   67.205405][ T5856] hsr_slave_0: entered promiscuous mode
[   67.209447][ T5856] hsr_slave_1: entered promiscuous mode
[   67.212284][ T5856] debugfs: 'hsr0' already exists in 'hsr'
[   67.214538][ T5856] Cannot create hsr debugfs directory
[   67.302201][ T5849] hsr_slave_0: entered promiscuous mode
[   67.304934][ T5849] hsr_slave_1: entered promiscuous mode
[   67.309045][ T5849] debugfs: 'hsr0' already exists in 'hsr'
[   67.311202][ T5849] Cannot create hsr debugfs directory
[   67.589973][ T5853] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   67.608437][ T5853] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   67.621438][ T5853] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   67.635974][ T5853] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   67.691701][ T5856] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   67.700501][ T5856] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   67.710628][ T5856] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   67.728846][ T5856] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   67.781814][ T5849] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   67.789366][ T5849] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   67.804920][ T5849] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   67.814818][ T5849] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   67.914496][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.964982][ T5853] 8021q: adding VLAN 0 to HW filter on device team0
[   67.985654][ T5856] 8021q: adding VLAN 0 to HW filter on device bond0
[   67.995108][  T708] bridge0: port 1(bridge_slave_0) entered blocking state
[   67.998293][  T708] bridge0: port 1(bridge_slave_0) entered forwarding state
[   68.008895][  T708] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.011777][  T708] bridge0: port 2(bridge_slave_1) entered forwarding state
[   68.055260][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0
[   68.075021][ T5856] 8021q: adding VLAN 0 to HW filter on device team0
[   68.082886][ T5234] Bluetooth: hci2: command tx timeout
[   68.102029][  T708] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.104925][  T708] bridge0: port 1(bridge_slave_0) entered forwarding state
[   68.127131][ T5849] 8021q: adding VLAN 0 to HW filter on device team0
[   68.132491][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.135347][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   68.161461][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.164326][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[   68.168729][ T5234] Bluetooth: hci0: command tx timeout
[   68.170385][ T5851] Bluetooth: hci1: command tx timeout
[   68.191812][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.194723][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[   68.272905][ T5849] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   68.305577][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0
[   68.364204][ T5853] veth0_vlan: entered promiscuous mode
[   68.374612][ T5853] veth1_vlan: entered promiscuous mode
[   68.399643][ T5853] veth0_macvtap: entered promiscuous mode
[   68.411146][ T5853] veth1_macvtap: entered promiscuous mode
[   68.442381][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0
[   68.448937][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0
[   68.467644][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1
[   68.486922][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.494882][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.502094][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.510576][ T5856] 8021q: adding VLAN 0 to HW filter on device batadv0
[   68.523255][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.605215][ T5849] veth0_vlan: entered promiscuous mode
[   68.622971][ T5849] veth1_vlan: entered promiscuous mode
[   68.625318][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.629201][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.634352][ T5856] veth0_vlan: entered promiscuous mode
[   68.657383][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.662155][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   68.663444][ T5856] veth1_vlan: entered promiscuous mode
[   68.711904][ T5856] veth0_macvtap: entered promiscuous mode
[   68.720174][ T5849] veth0_macvtap: entered promiscuous mode
[   68.729849][ T5849] veth1_macvtap: entered promiscuous mode
[   68.742889][ T5853] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   68.749851][ T5856] veth1_macvtap: entered promiscuous mode
[   68.771073][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0
[   68.779429][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1
[   68.816685][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_0
[   68.821151][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.850114][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.868783][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_1
[   68.871726][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.875305][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.882898][ T5919] netlink: 'syz.1.4': attribute type 1 has an invalid length.
[   68.903312][   T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   68.909388][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   68.912092][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   68.914781][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   68.966507][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   68.969213][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.051830][ T5925] usb usb8: usbfs: process 5925 (syz.1.7) did not claim interface 0 before use
[   69.053851][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.059743][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.148190][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.154185][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.216919][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   69.229840][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   69.305408][ T5938] syz.0.11 uses obsolete (PF_INET,SOCK_PACKET)
[   69.331527][ T5940] loop2: detected capacity change from 0 to 2048
[   69.361268][ T5941] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   69.391597][   T33] audit: type=1800 audit(1756524355.024:2): pid=5940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3" name="file1" dev="loop2" ino=15 res=0 errno=0
[   69.440136][   T33] audit: type=1800 audit(1756524355.084:3): pid=5942 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3" name="file2" dev="loop2" ino=16 res=0 errno=0
[   69.807851][ T5942] NILFS (loop2): writing node/leaf block does not appear in b-tree (ino=16) at key=5, level=0
[   69.819900][ T5942] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=16)
[   69.826536][ T5942] Remounting filesystem read-only
[   69.881212][ T5856] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer
[   70.161062][ T5851] Bluetooth: hci2: command tx timeout
[   70.241615][ T5851] Bluetooth: hci1: command tx timeout
[   70.241665][ T5234] Bluetooth: hci0: command tx timeout
[   70.514917][ T5978] input: syz1 as /devices/virtual/input/input4
[   70.679118][ T5889] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   70.998620][ T5988] netlink: 68 bytes leftover after parsing attributes in process `syz.2.30'.
[   71.073308][ T5889] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 52, changing to 7
[   71.079872][ T5889] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 9272, setting to 1024
[   71.084447][ T5889] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[   71.096277][ T5889] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   71.106657][ T5889] usb 2-1: config 0 descriptor??
[   71.126403][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   71.129047][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   71.155982][ T5990] netlink: 'syz.2.31': attribute type 2 has an invalid length.
[   71.407082][ T5889] ath6kl: Failed to submit usb control message: -71
[   71.410882][ T5889] ath6kl: unable to send the bmi data to the device: -71
[   71.413624][ T5889] ath6kl: Unable to send get target info: -71
[   71.422129][ T5889] ath6kl: Failed to init ath6kl core: -71
[   71.424978][ T5889] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71
[   71.436608][ T5889] usb 2-1: USB disconnect, device number 2
[   71.496803][ T5997] loop0: detected capacity change from 0 to 512
[   71.536430][ T5997] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2
[   71.544305][ T5997] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2
[   71.587625][ T5997] EXT4-fs (loop0): 1 truncate cleaned up
[   71.609829][ T5997] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   71.629982][ T5997] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000.
[   71.678635][ T6003] netlink: 'syz.2.35': attribute type 2 has an invalid length.
[   71.703917][ T5849] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   71.801607][ T6005] capability: warning: `syz.2.37' uses 32-bit capabilities (legacy support in use)
[   71.826509][ T6007] loop0: detected capacity change from 0 to 4096
[   71.833716][ T6007] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512).
[   71.841356][ T6007] ntfs3(loop0): ino=2, mi_enum_attr
[   71.843669][ T6007] ntfs3(loop0): Failed to load $LogFile (-22).
[   71.945740][ T6011] loop2: detected capacity change from 0 to 1764
[   72.199431][ T6019] netlink: 12 bytes leftover after parsing attributes in process `syz.1.43'.
[   72.213327][ T6019] netlink: 12 bytes leftover after parsing attributes in process `syz.1.43'.
[   72.217222][ T6019] Zero length message leads to an empty skb
[   72.244864][ T5234] Bluetooth: hci2: command tx timeout
[   72.317850][ T5851] Bluetooth: hci0: command tx timeout
[   72.319513][ T5896] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   72.321994][ T5234] Bluetooth: hci1: command tx timeout
[   72.328639][ T5896] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   72.332730][ T5896] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   72.336227][ T5896] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   73.533636][ T6047] loop0: detected capacity change from 0 to 2048
[   73.539573][ T6047] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[   73.542735][ T6047] NILFS (loop0): mounting unchecked fs
[   73.546884][ T5852] udevd[5852]: incorrect nilfs2 checksum on /dev/loop0
[   73.552599][ T6048] netlink: 4 bytes leftover after parsing attributes in process `syz.1.53'.
[   73.571739][ T6048] netlink: 'syz.1.53': attribute type 15 has an invalid length.
[   73.574947][ T6047] NILFS (loop0): recovery complete
[   73.577315][ T6048] netlink: 'syz.1.53': attribute type 18 has an invalid length.
[   73.589428][ T6049] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   73.763372][ T6034] loop2: detected capacity change from 0 to 65536
[   73.825768][ T6034] XFS (loop2): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[   73.863870][ T6034] XFS (loop2): Ending clean mount
[   74.095642][   T33] audit: type=1800 audit(1756524359.544:4): pid=6034 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.48" name="file2" dev="loop2" ino=42 res=0 errno=0
[   74.332237][ T5234] Bluetooth: hci2: command tx timeout
[   74.403218][ T5234] Bluetooth: hci0: command tx timeout
[   74.403284][ T5851] Bluetooth: hci1: command tx timeout
[   76.254430][ T6064] bfs: Unknown parameter 'ip6_vti0'
[   76.616494][ T6074] can0: slcan on ttynull.
[   76.683302][ T5856] XFS (loop2): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[   76.715747][ T6073] can0 (unregistered): slcan off ttynull.
[   76.936081][ T6086] loop1: detected capacity change from 0 to 1024
[   76.973735][ T6086] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   77.031123][ T5853] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   77.443318][ T6089] loop0: detected capacity change from 0 to 32768
[   77.449431][ T6089] =======================================================
[   77.449431][ T6089] WARNING: The mand mount option has been deprecated and
[   77.449431][ T6089]          and is ignored by this kernel. Remove the mand
[   77.449431][ T6089]          option from the mount to silence this warning.
[   77.449431][ T6089] =======================================================
[   77.473166][ T6089] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.66 (6089)
[   77.503802][ T6089] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   77.509993][ T6089] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm
[   77.513429][ T6089] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[   77.537956][ T5927] usb 2-1: new full-speed USB device number 3 using dummy_hcd
[   77.568841][ T6089] BTRFS info (device loop0): rebuilding free space tree
[   77.586145][ T6089] BTRFS info (device loop0): disabling free space tree
[   77.589196][ T6089] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   77.592743][ T6089] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   77.604155][ T6089] BTRFS info (device loop0): setting nodatasum
[   77.606622][ T6089] BTRFS info (device loop0): setting nodatacow
[   77.610355][ T6089] BTRFS info (device loop0): enabling ssd optimizations
[   77.612884][ T6089] BTRFS info (device loop0): enabling disk space caching
[   77.615716][ T6089] BTRFS info (device loop0): force clearing of disk cache
[   77.618660][ T6089] BTRFS info (device loop0): doing ref verification
[   77.628182][    T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   77.691002][ T5927] usb 2-1: config 0 has an invalid interface number: 11 but max is 0
[   77.693688][ T5927] usb 2-1: config 0 has no interface number 0
[   77.696138][ T5927] usb 2-1: config 0 interface 11 altsetting 253 endpoint 0x7 has invalid maxpacket 1024, setting to 64
[   77.704267][ T5927] usb 2-1: config 0 interface 11 has no altsetting 0
[   77.707069][ T5927] usb 2-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b
[   77.712204][ T5927] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   77.721700][ T5927] usb 2-1: config 0 descriptor??
[   77.725664][ T6102] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   77.729247][ T6102] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   77.734760][ T5927] keyspan 2-1:0.11: Keyspan 2 port adapter converter detected
[   77.750245][ T5927] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 81
[   77.755185][ T5927] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 82
[   77.760810][ T5927] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 1
[   77.763528][ T5927] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 2
[   77.766567][ T5927] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 85
[   77.772549][   T12] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared)
[   77.776216][ T5927] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 5
[   77.781840][ T5927] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[   77.791314][    T9] usb 3-1: Using ep0 maxpacket: 16
[   77.792825][ T5927] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 83
[   77.796880][ T5927] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 84
[   77.801190][    T9] usb 3-1: config 0 interface 0 has no altsetting 0
[   77.803891][    T9] usb 3-1: New USB device found, idVendor=0566, idProduct=3004, bcdDevice= 0.00
[   77.815242][ T5927] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 3
[   77.819202][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   77.820517][ T5927] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 4
[   77.827113][ T5927] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 86
[   77.832774][ T5927] keyspan 2-1:0.11: found no endpoint descriptor for endpoint 6
[   77.857318][ T5849] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   77.867901][    T9] usb 3-1: config 0 descriptor??
[   77.870387][ T5927] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[   77.972085][ T5927] usb 2-1: USB disconnect, device number 3
[   78.029399][ T5927] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[   78.056522][ T5927] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[   78.063892][ T5927] keyspan 2-1:0.11: device disconnected
[   78.302630][    T9] monterey 0003:0566:3004.0001: unknown main item tag 0x0
[   78.305912][    T9] monterey 0003:0566:3004.0001: unknown main item tag 0x0
[   78.309528][    T9] monterey 0003:0566:3004.0001: unknown main item tag 0x0
[   78.311855][    T9] monterey 0003:0566:3004.0001: unknown main item tag 0x0
[   78.314133][    T9] monterey 0003:0566:3004.0001: unknown main item tag 0x0
[   78.316515][    T9] monterey 0003:0566:3004.0001: unknown main item tag 0x0
[   78.320773][    T9] monterey 0003:0566:3004.0001: unknown main item tag 0x0
[   78.321291][ T6133] loop0: detected capacity change from 0 to 4096
[   78.322994][    T9] monterey 0003:0566:3004.0001: unknown main item tag 0x0
[   78.331268][ T6133] ntfs3(loop0): Primary boot: invalid bytes per sector 0.
[   78.334437][ T6133] ntfs3(loop0): try to read out of volume at offset 0x1ffe00
[   78.348225][    T9] monterey 0003:0566:3004.0001: unknown main item tag 0x0
[   78.352803][    T9] monterey 0003:0566:3004.0001: unknown main item tag 0x0
[   78.391776][    T9] monterey 0003:0566:3004.0001: hidraw0: USB HID v0.00 Device [HID 0566:3004] on usb-dummy_hcd.2-1/input0
[   78.441620][ T6135] loop0: detected capacity change from 0 to 4096
[   78.504270][ T5927] usb 3-1: USB disconnect, device number 2
[   78.654909][ T6141] fuse: Invalid rootmode
[   78.863270][ T6158] loop0: detected capacity change from 0 to 64
[   79.084817][ T6166] loop2: detected capacity change from 0 to 1024
[   79.113751][ T6166] hfsplus: bad catalog entry type
[   79.143131][  T708] hfsplus: b-tree write err: -5, ino 4
[   79.416058][ T6180] sctp: [Deprecated]: syz.1.96 (pid 6180) Use of struct sctp_assoc_value in delayed_ack socket option.
[   79.416058][ T6180] Use struct sctp_sack_info instead
[   79.470514][ T6170] loop2: detected capacity change from 0 to 32768
[   79.490099][ T6170] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.90 (6170)
[   79.510492][ T6170] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   79.513714][ T6170] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm
[   79.579328][ T6193] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3)
[   79.581735][ T6193] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[   79.604235][ T6193] vhci_hcd vhci_hcd.0: Device attached
[   79.616885][ T6193] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   79.623103][ T6195] vhci_hcd: connection closed
[   79.624565][   T12] vhci_hcd: stop threads
[   79.633469][   T12] vhci_hcd: release socket
[   79.633602][ T6170] BTRFS info (device loop2): enabling ssd optimizations
[   79.634977][   T12] vhci_hcd: disconnect device
[   79.637046][ T6170] BTRFS info (device loop2): enabling free space tree
[   79.691299][   T33] audit: type=1800 audit(1756524365.334:5): pid=6170 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.90" name="file1" dev="loop2" ino=260 res=0 errno=0
[   79.789459][ T6170] BTRFS info (device loop2): balance: start -sconvert=raid0,soft
[   79.812420][ T6170] BTRFS info (device loop2): balance: ended with status: 0
[   79.911160][ T5856] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   80.214717][ T6208] loop1: detected capacity change from 0 to 32768
[   80.242194][ T6208] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.101 (6208)
[   80.306215][ T6208] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   80.317809][ T6208] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm
[   80.402097][ T6208] BTRFS info (device loop1): enabling ssd optimizations
[   80.411409][ T6208] BTRFS info (device loop1): enabling free space tree
[   80.482495][ T5853] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   80.624621][ T6211] loop2: detected capacity change from 0 to 32768
[   80.705938][ T6211] jfs_create: dtSearch returned -5
[   81.257930][ T5927] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   81.297854][ T5312] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   81.407806][ T5927] usb 2-1: Using ep0 maxpacket: 32
[   81.420044][ T5927] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   81.430502][ T5927] usb 2-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[   81.434119][ T5927] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   81.437180][ T5927] usb 2-1: Product: syz
[   81.448319][ T5927] usb 2-1: Manufacturer: syz
[   81.450706][ T5927] usb 2-1: SerialNumber: syz
[   81.461833][ T5927] usb 2-1: config 0 descriptor??
[   81.467788][ T5312] usb 1-1: Using ep0 maxpacket: 16
[   81.472365][ T5312] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 8
[   81.479119][ T5312] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00
[   81.482610][ T5312] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   81.485670][ T5312] usb 1-1: Product: syz
[   81.487458][ T5312] usb 1-1: Manufacturer: syz
[   81.492566][ T5312] usb 1-1: SerialNumber: syz
[   81.498992][ T5312] usb 1-1: config 0 descriptor??
[   81.505095][ T5312] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected
[   81.509546][ T5312] usb 1-1: Detected FT232R
[   81.678640][ T5927] usb 2-1: USB disconnect, device number 4
[   81.707874][ T5881] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   81.715607][ T5312] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[   81.859842][ T5881] usb 3-1: config index 0 descriptor too short (expected 65069, got 45)
[   81.863204][ T5881] usb 3-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0
[   81.870200][ T5881] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   81.874244][ T5881] usb 3-1: config 0 has no interfaces?
[   81.876505][ T5881] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00
[   81.881498][ T5881] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   81.886462][ T5881] usb 3-1: config 0 descriptor??
[   81.925291][ T5312] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0
[   82.094708][    T9] usb 3-1: USB disconnect, device number 3
[   82.126303][ T5928] usb 1-1: USB disconnect, device number 2
[   82.141085][ T5928] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[   82.144828][ T5928] ftdi_sio 1-1:0.0: device disconnected
[   82.240380][ T6253] loop1: detected capacity change from 0 to 128
[   82.249258][ T6253] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   82.253586][ T6253] ext4 filesystem being mounted at /42/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   82.264881][ T6253] fscrypt (loop1, inode 12): Unsupported encryption flags (0x80)
[   82.284790][ T5853] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   82.553601][ T6269] loop1: detected capacity change from 0 to 8
[   82.576458][ T6269] squashfs image failed sanity check
[   82.658718][ T6271] netlink: 4 bytes leftover after parsing attributes in process `syz.1.122'.
[   82.695156][ T6273] netlink: 248 bytes leftover after parsing attributes in process `syz.2.123'.
[   82.732935][ T6275] loop0: detected capacity change from 0 to 512
[   82.757203][ T6275] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   82.794703][ T6275] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002]
[   82.801428][ T6275] System zones: 0-2, 18-18, 34-34
[   82.809819][ T6275] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   82.827380][ T6275] ext4 filesystem being mounted at /48/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   82.947061][ T5849] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   83.413948][ T6313] loop2: detected capacity change from 0 to 32768
[   83.566437][ T6313] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[   83.566453][ T6313]   allowing incompatible features above 0.0: (unknown version)
[   83.566458][ T6313]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[   83.582188][ T6313] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0
[   83.585231][ T6313] bcachefs (loop2): initializing new filesystem
[   83.596377][ T6313] bcachefs (loop2): going read-write
[   83.623106][ T6313] bcachefs (loop2): marking superblocks
[   83.634598][ T6313] bcachefs (loop2): initializing freespace
[   83.640091][ T6313] bcachefs (loop2): done initializing freespace
[   83.644512][ T6313] bcachefs (loop2): reading snapshots table
[   83.646703][ T6313] bcachefs (loop2): reading snapshots done
[   83.668999][ T6313] bcachefs (loop2): done starting filesystem
[   84.837940][ T5312] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   84.973773][ T6367] comedi comedi3: 8255: I/O port conflict (0x40404f26,4)
[   84.976252][ T6367] comedi comedi3: 8255: I/O port conflict (0x5,4)
[   84.984942][ T6367] comedi comedi3: 8255: I/O port conflict (0x2,4)
[   84.987098][ T6367] comedi comedi3: 8255: I/O port conflict (0xc,4)
[   84.990547][ T6367] comedi comedi3: 8255: I/O port conflict (0x9,4)
[   84.992843][ T6367] comedi comedi3: 8255: I/O port conflict (0x5c95239c,4)
[   84.995825][ T6367] comedi comedi3: 8255: I/O port conflict (0x5,4)
[   85.001252][ T6367] comedi comedi3: 8255: I/O port conflict (0x3bf,4)
[   85.005826][ T5312] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[   85.008926][ T6367] comedi comedi3: 8255: I/O port conflict (0x1,4)
[   85.011546][ T5312] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[   85.014926][ T6367] comedi comedi3: 8255: I/O port conflict (0x20000001,4)
[   85.017567][ T5312] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[   85.018444][ T6367] comedi comedi3: 8255: I/O port conflict (0x9,4)
[   85.021591][ T5312] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0
[   85.023914][ T6367] comedi comedi3: 8255: I/O port conflict (0x6,4)
[   85.028120][ T5312] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[   85.033518][ T6367] comedi comedi3: 8255: I/O port conflict (0x400,4)
[   85.033668][ T5312] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   85.036256][ T6367] comedi comedi3: 8255: I/O port conflict (0x6,4)
[   85.060479][ T5312] usb 2-1: config 0 descriptor??
[   85.278543][ T6313] syz.2.135 (6313) used greatest stack depth: 16760 bytes left
[   85.282273][ T5312] hdpvr 2-1:0.0: firmware version 0x8 dated )˟=J+noKܐo5foɠObL
[   85.315876][ T5856] bcachefs (loop2): shutting down
[   85.318752][ T5856] bcachefs (loop2): going read-only
[   85.321206][ T5856] bcachefs (loop2): finished waiting for writes to stop
[   85.330168][ T5856] bcachefs (loop2): flushing journal and stopping allocators, journal seq 3
[   85.353018][ T6374] netlink: 4 bytes leftover after parsing attributes in process `syz.0.152'.
[   85.354073][ T5856] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 4
[   85.366019][ T5896] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   85.366140][ T6374] netlink: 4 bytes leftover after parsing attributes in process `syz.0.152'.
[   85.373398][ T5896] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   85.377152][ T5856] bcachefs (loop2): clean shutdown complete, journal seq 5
[   85.384655][ T5856] bcachefs (loop2): marking filesystem clean
[   85.385020][ T5896] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   85.404012][ T5896] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   85.415327][ T5856] bcachefs (loop2): shutdown complete
[   85.486405][ T5312] hdpvr 2-1:0.0: device init failed
[   85.493946][ T5312] hdpvr 2-1:0.0: probe with driver hdpvr failed with error -12
[   85.509887][ T5312] usb 2-1: USB disconnect, device number 5
[   86.395072][ T6396] netlink: 8 bytes leftover after parsing attributes in process `syz.1.162'.
[   86.484089][  T793] cfg80211: failed to load regulatory.db
[   86.544107][ T6402] iommufd_mock iommufd_mock0: Adding to iommu group 0
[   87.077351][ T6424] Set syz0 is full, maxelem 0 reached
[   87.145301][ T6428] loop2: detected capacity change from 0 to 256
[   87.249281][ T6426] loop0: detected capacity change from 0 to 32768
[   87.312087][ T6426] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[   87.312105][ T6426]   allowing incompatible features above 0.0: (unknown version)
[   87.312110][ T6426]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[   87.328350][ T6426] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0
[   87.331420][ T6426] bcachefs (loop0): initializing new filesystem
[   87.341328][ T6426] bcachefs (loop0): going read-write
[   87.349365][ T6426] bcachefs (loop0): marking superblocks
[   87.350760][ T6440] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   87.357335][ T6426] bcachefs (loop0): initializing freespace
[   87.364219][ T6426] bcachefs (loop0): done initializing freespace
[   87.368896][ T6426] bcachefs (loop0): reading snapshots table
[   87.371276][ T6426] bcachefs (loop0): reading snapshots done
[   87.398433][ T6426] bcachefs (loop0): done starting filesystem
[   87.443981][ T6442] syz_tun: entered allmulticast mode
[   87.460302][ T6442] dvmrp1: entered allmulticast mode
[   87.494777][ T6441] syz_tun: left allmulticast mode
[   87.514789][ T5849] bcachefs (loop0): shutting down
[   87.516785][ T5849] bcachefs (loop0): going read-only
[   87.521973][ T5849] bcachefs (loop0): finished waiting for writes to stop
[   87.533638][ T5849] bcachefs (loop0): flushing journal and stopping allocators, journal seq 2
[   87.575872][ T5312] libceph: connect (1)[c::]:6789 error -101
[   87.579303][ T5312] libceph: mon0 (1)[c::]:6789 connect error
[   87.613980][ T6444] ceph: No mds server is up or the cluster is laggy
[   87.640340][ T5849] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 3
[   87.656233][ T5849] bcachefs (loop0): clean shutdown complete, journal seq 4
[   87.678257][ T5849] bcachefs (loop0): marking filesystem clean
[   87.744965][ T6444] loop1: detected capacity change from 0 to 2048
[   87.802785][ T5849] bcachefs (loop0): shutdown complete
[   87.832885][ T6444] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   87.899658][ T5853] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   88.265826][ T6470] loop1: detected capacity change from 0 to 8192
[   88.284326][ T6470] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000e1b1)
[   88.287513][ T6470] FAT-fs (loop1): Filesystem has been set read-only
[   88.493983][ T5312] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   88.650514][ T5312] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   88.654455][ T5312] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 18
[   88.662432][ T5312] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   88.666009][ T5312] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[   88.671281][ T5312] usb 3-1: SerialNumber: syz
[   88.817958][  T793] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[   88.891382][ T5312] cdc_ether 3-1:1.0: skipping garbage
[   88.893618][ T5312] cdc_ether 3-1:1.0: invalid descriptor buffer length
[   88.896308][ T5312] usb 3-1: bad CDC descriptors
[   88.911082][ T5312] usb 3-1: USB disconnect, device number 4
[   88.982136][  T793] usb 2-1: Using ep0 maxpacket: 32
[   88.987164][  T793] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   88.995811][  T793] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   89.000290][  T793] usb 2-1: New USB device found, idVendor=044e, idProduct=1215, bcdDevice= 0.00
[   89.003732][  T793] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   89.009735][  T793] usb 2-1: config 0 descriptor??
[   89.435650][  T793] hid-alps 0003:044E:1215.0002: item fetching failed at offset 3/7
[   89.448103][  T793] hid-alps 0003:044E:1215.0002: parse failed
[   89.448642][ T6491] loop0: detected capacity change from 0 to 32768
[   89.450667][  T793] hid-alps 0003:044E:1215.0002: probe with driver hid-alps failed with error -22
[   89.497924][ T6491] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   89.544612][ T6491] XFS (loop0): Ending clean mount
[   89.552453][ T6491] XFS (loop0): Quotacheck needed: Please wait.
[   89.588224][ T6491] XFS (loop0): Quotacheck: Done.
[   89.626073][ T5849] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   89.631037][ T5312] usb 2-1: USB disconnect, device number 6
[   89.675319][ T6507] @: renamed from vlan0 (while UP)
[   89.805227][ T6509] loop0: detected capacity change from 0 to 16
[   89.850720][ T6509] erofs (device loop0): mounted with root inode @ nid 36.
[   90.224752][ T6523] loop1: detected capacity change from 0 to 1764
[   91.363084][ T6531] netlink: 830 bytes leftover after parsing attributes in process `syz.0.213'.
[   91.370043][ T6529] loop1: detected capacity change from 0 to 32768
[   91.421074][ T6529] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode.
[   91.436906][   T12] (kworker/u8:0,12,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len is smaller than minimal - offset=0, inode=348545186005064, rec_len=0, name_len=1
[   91.461606][ T6529] ocfs2: Unmounting device (7,1) on (node local)
[   91.870245][ T6547] netlink: 4 bytes leftover after parsing attributes in process `syz.0.218'.
[   91.998162][ T5851] Bluetooth: hci3: Opcode 0x1003 failed: -110
[   92.003855][ T5234] Bluetooth: hci3: command 0x1003 tx timeout
[   92.200808][ T6559] loop1: detected capacity change from 0 to 4096
[   92.316758][ T6564] netfs: Couldn't get user pages (rc=-14)
[   92.416979][ T6568] netlink: 16 bytes leftover after parsing attributes in process `syz.2.229'.
[   93.336292][ T6585] loop0: detected capacity change from 0 to 40427
[   93.406044][ T6585] F2FS-fs (loop0): invalid crc value
[   93.516677][ T6585] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[   93.536312][ T6585] F2FS-fs (loop0): Start checkpoint disabled!
[   93.563446][ T6585] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[   93.671694][   T40] kworker/u10:2: attempt to access beyond end of device
[   93.671694][   T40] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   93.698061][   T40] CPU: 1 UID: 0 PID: 40 Comm: kworker/u10:2 Not tainted syzkaller #0 PREEMPT(full) 
[   93.698084][   T40] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   93.698092][   T40] Workqueue: writeback wb_workfn (flush-7:0)
[   93.698116][   T40] Call Trace:
[   93.698131][   T40]  <TASK>
[   93.698138][   T40]  dump_stack_lvl+0x189/0x250
[   93.698160][   T40]  ? __pfx_dump_stack_lvl+0x10/0x10
[   93.698174][   T40]  ? __pfx_queue_work_on+0x10/0x10
[   93.698188][   T40]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   93.698205][   T40]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   93.698229][   T40]  f2fs_handle_critical_error+0x37c/0x540
[   93.698253][   T40]  f2fs_write_end_io+0x886/0xb60
[   93.698279][   T40]  __submit_merged_bio+0x27a/0x6a0
[   93.698301][   T40]  __submit_merged_write_cond+0x255/0x530
[   93.698329][   T40]  f2fs_write_data_pages+0x261d/0x3000
[   93.698372][   T40]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   93.698427][   T40]  ? ktime_get+0x3e/0x1f0
[   93.698441][   T40]  ? ktime_get+0x3e/0x1f0
[   93.698473][   T40]  ? __resched_curr+0x202/0x3e0
[   93.698496][   T40]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   93.698514][   T40]  do_writepages+0x32e/0x550
[   93.698536][   T40]  ? reacquire_held_locks+0x127/0x1d0
[   93.698549][   T40]  ? writeback_sb_inodes+0x384/0x1010
[   93.698571][   T40]  __writeback_single_inode+0x145/0xff0
[   93.698615][   T40]  ? do_raw_spin_unlock+0x4d/0x240
[   93.698634][   T40]  writeback_sb_inodes+0x6c7/0x1010
[   93.698650][   T40]  ? __lock_acquire+0xab9/0xd20
[   93.698684][   T40]  ? __pfx_writeback_sb_inodes+0x10/0x10
[   93.698729][   T40]  ? rcu_is_watching+0x15/0xb0
[   93.698749][   T40]  wb_writeback+0x43b/0xaf0
[   93.698771][   T40]  ? queue_io+0x3a1/0x590
[   93.698788][   T40]  ? __pfx_wb_writeback+0x10/0x10
[   93.698809][   T40]  ? _raw_spin_unlock_irq+0x23/0x50
[   93.698827][   T40]  wb_workfn+0x409/0xef0
[   93.698852][   T40]  ? __pfx_wb_workfn+0x10/0x10
[   93.698868][   T40]  ? __lock_acquire+0xab9/0xd20
[   93.698893][   T40]  ? process_scheduled_works+0x9ef/0x17b0
[   93.698911][   T40]  ? _raw_spin_unlock_irq+0x23/0x50
[   93.698924][   T40]  ? process_scheduled_works+0x9ef/0x17b0
[   93.698935][   T40]  ? process_scheduled_works+0x9ef/0x17b0
[   93.698948][   T40]  process_scheduled_works+0xae1/0x17b0
[   93.698982][   T40]  ? __pfx_process_scheduled_works+0x10/0x10
[   93.699007][   T40]  worker_thread+0x8a0/0xda0
[   93.699040][   T40]  kthread+0x711/0x8a0
[   93.699059][   T40]  ? __pfx_worker_thread+0x10/0x10
[   93.699070][   T40]  ? __pfx_kthread+0x10/0x10
[   93.699086][   T40]  ? _raw_spin_unlock_irq+0x23/0x50
[   93.699101][   T40]  ? lockdep_hardirqs_on+0x9c/0x150
[   93.699117][   T40]  ? __pfx_kthread+0x10/0x10
[   93.699132][   T40]  ret_from_fork+0x3fc/0x770
[   93.699149][   T40]  ? __pfx_ret_from_fork+0x10/0x10
[   93.699166][   T40]  ? __switch_to_asm+0x39/0x70
[   93.699181][   T40]  ? __switch_to_asm+0x33/0x70
[   93.699194][   T40]  ? __pfx_kthread+0x10/0x10
[   93.699209][   T40]  ret_from_fork_asm+0x1a/0x30
[   93.699236][   T40]  </TASK>
[   93.699243][   T40] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[   93.917474][ T6620] loop2: detected capacity change from 0 to 1024
[   93.924276][ T6620] EXT4-fs: Ignoring removed bh option
[   93.929514][ T6620] EXT4-fs: inline encryption not supported
[   93.940068][ T6620] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   93.980124][ T6620] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 2: comm syz.2.252: lblock 2 mapped to illegal pblock 2 (length 1)
[   93.996176][ T6620] Quota error (device loop2): qtree_write_dquot: dquota write failed
[   94.004818][ T6620] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.252: lblock 0 mapped to illegal pblock 48 (length 1)
[   94.011480][ T6620] Quota error (device loop2): v2_write_file_info: Can't write info structure
[   94.015284][ T6620] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.252: Failed to acquire dquot type 0
[   94.023528][ T6620] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Corrupt filesystem
[   94.031048][ T6620] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.252: mark_inode_dirty error
[   94.035863][ T6620] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[   94.047411][ T6620] EXT4-fs (loop2): 1 orphan inode deleted
[   94.052233][ T6620] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   94.058258][ T3548] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u9:4: lblock 1 mapped to illegal pblock 1 (length 1)
[   94.080739][ T3548] Quota error (device loop2): remove_tree: Can't read quota data block 1
[   94.084255][ T3548] EXT4-fs error (device loop2): ext4_release_dquot:6973: comm kworker/u9:4: Failed to release dquot type 0
[   94.095882][ T6625] loop0: detected capacity change from 0 to 4096
[   94.124622][ T6626] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   94.143605][ T5856] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   94.155218][ T5856] EXT4-fs error (device loop2): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0
[   94.165265][ T5856] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6334: Corrupt filesystem
[   94.171104][ T5856] EXT4-fs error (device loop2): ext4_quota_off:7221: inode #3: comm syz-executor: mark_inode_dirty error
[   94.256433][ T6628] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[   94.799300][ T6641] netlink: 12 bytes leftover after parsing attributes in process `syz.2.258'.
[   95.146731][ T6661] vim2m vim2m.0: vidioc_s_fmt queue busy
[   95.673003][ T6667] loop1: detected capacity change from 0 to 32768
[   95.764979][ T6667] read_mapping_page failed!
[   95.767883][ T6667] ERROR: (device loop1): txCommit: 
[   95.767883][ T6667] 
[   95.821050][  T115] BUG at fs/jfs/jfs_txnmgr.c:931 assert(mp->nohomeok > 0)
[   95.824118][  T115] ------------[ cut here ]------------
[   95.826309][  T115] kernel BUG at fs/jfs/jfs_txnmgr.c:931!
[   95.844963][  T115] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI
[   95.847577][  T115] CPU: 1 UID: 0 PID: 115 Comm: jfsCommit Not tainted syzkaller #0 PREEMPT(full) 
[   95.851154][  T115] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   95.855085][  T115] RIP: 0010:txUnlock+0xdaf/0xdf0
[   95.857115][  T115] Code: e5 fd 90 0f 0b e8 f1 28 7d fe 48 c7 c7 20 1b c4 8b 48 c7 c6 19 17 c4 8b ba a3 03 00 00 48 c7 c1 20 28 c4 8b e8 e2 1c e5 fd 90 <0f> 0b e8 ca 28 7d fe 48 c7 c7 20 1b c4 8b 48 c7 c6 19 17 c4 8b ba
[   95.864985][  T115] RSP: 0018:ffffc900023dfbc8 EFLAGS: 00010246
[   95.867546][  T115] RAX: 0000000000000037 RBX: 0000000000001000 RCX: c2a852def8ad3e00
[   95.870247][  T115] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
[   95.872780][  T115] RBP: ffffc90001f52048 R08: ffffc900023df8e7 R09: 1ffff9200047bf1c
[   95.875313][  T115] R10: dffffc0000000000 R11: fffff5200047bf1d R12: dffffc0000000000
[   95.878173][  T115] R13: 1ffff11004f5e189 R14: ffff888027af0c48 R15: 0000000000000000
[   95.881244][  T115] FS:  0000000000000000(0000) GS:ffff8881a3c1b000(0000) knlGS:0000000000000000
[   95.884386][  T115] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   95.886417][  T115] CR2: 00005568b005e7e8 CR3: 000000002834c000 CR4: 00000000000006f0
[   95.888927][  T115] Call Trace:
[   95.889982][  T115]  <TASK>
[   95.890855][  T115]  ? lockdep_hardirqs_on+0x9c/0x150
[   95.892650][  T115]  jfs_lazycommit+0x584/0xa90
[   95.894203][  T115]  ? __pfx_jfs_lazycommit+0x10/0x10
[   95.895959][  T115]  ? __pfx_default_wake_function+0x10/0x10
[   95.897824][  T115]  ? __kthread_parkme+0x7b/0x200
[   95.899789][  T115]  ? __kthread_parkme+0x1a1/0x200
[   95.901818][  T115]  kthread+0x711/0x8a0
[   95.903430][  T115]  ? __pfx_jfs_lazycommit+0x10/0x10
[   95.905155][  T115]  ? __pfx_kthread+0x10/0x10
[   95.906620][  T115]  ? _raw_spin_unlock_irq+0x23/0x50
[   95.908252][  T115]  ? lockdep_hardirqs_on+0x9c/0x150
[   95.910042][  T115]  ? __pfx_kthread+0x10/0x10
[   95.911503][  T115]  ret_from_fork+0x3fc/0x770
[   95.912931][  T115]  ? __pfx_ret_from_fork+0x10/0x10
[   95.914519][  T115]  ? __switch_to_asm+0x39/0x70
[   95.916260][  T115]  ? __switch_to_asm+0x33/0x70
[   95.917884][  T115]  ? __pfx_kthread+0x10/0x10
[   95.919320][  T115]  ret_from_fork_asm+0x1a/0x30
[   95.920832][  T115]  </TASK>
[   95.921803][  T115] Modules linked in:
[   95.923420][  T115] ---[ end trace 0000000000000000 ]---
[   95.926297][  T115] RIP: 0010:txUnlock+0xdaf/0xdf0
[   95.928197][  T115] Code: e5 fd 90 0f 0b e8 f1 28 7d fe 48 c7 c7 20 1b c4 8b 48 c7 c6 19 17 c4 8b ba a3 03 00 00 48 c7 c1 20 28 c4 8b e8 e2 1c e5 fd 90 <0f> 0b e8 ca 28 7d fe 48 c7 c7 20 1b c4 8b 48 c7 c6 19 17 c4 8b ba
[   95.934950][  T115] RSP: 0018:ffffc900023dfbc8 EFLAGS: 00010246
[   95.937335][  T115] RAX: 0000000000000037 RBX: 0000000000001000 RCX: c2a852def8ad3e00
[   95.941460][  T115] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
[   95.944717][  T115] RBP: ffffc90001f52048 R08: ffffc900023df8e7 R09: 1ffff9200047bf1c
[   95.948720][  T115] R10: dffffc0000000000 R11: fffff5200047bf1d R12: dffffc0000000000
[   95.951862][  T115] R13: 1ffff11004f5e189 R14: ffff888027af0c48 R15: 0000000000000000
[   95.955300][  T115] FS:  0000000000000000(0000) GS:ffff8881a3c1b000(0000) knlGS:0000000000000000
[   95.959005][  T115] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   95.961144][  T115] CR2: 00005568b005e7e8 CR3: 000000000df36000 CR4: 00000000000006f0
[   95.963707][  T115] Kernel panic - not syncing: Fatal exception
[   95.966434][  T115] Kernel Offset: disabled
[   95.968156][  T115] Rebooting in 86400 seconds..

VM DIAGNOSIS:
03:26:21  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000026 RBX=000000000000000a RCX=ffff888105f88000 RDX=0000000000010000
RSI=0000000000000004 RDI=000000000000000a RBP=000000000000000a RSP=ffffc90000007bc8
R8 =0000000000000003 R9 =0000000000000004 R10=dffffc0000000000 R11=fffff52000000f58
R12=0000000000000802 R13=0000000000000021 R14=0000000000000000 R15=0000000000000000
RIP=ffffffff8167d7a2 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fc03407f6c0 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c3a7420 CR3=0000000027ed2000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fc033397498 00007fc033397470 XMM03=00007fc0333974a8 00007fc0333974a0
XMM04=00007fc033efd100 00007fc033397460 XMM05=00007fc033397478 00007fc0333974c0
XMM06=00007fc0333974b8 00007fc0333974b0 XMM07=00007fc0333974a8 00007fc0333974a0
XMM08=0000000000000000 00007fc033212ee7 XMM09=0000000000000000 00007fc033212fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=a51f2c5df646b000 RBX=0000000000000006 RCX=ffff888100783980 RDX=0000000000000000
RSI=0000000000000000 RDI=0000000000000000 RBP=ffffc900006af830 RSP=ffffc900006af810
R8 =ffffffff8fa38a37 R9 =1ffffffff1f47146 R10=dffffc0000000000 R11=fffffbfff1f47147
R12=dffffc0000000000 R13=ffff888136636310 R14=0000000000000200 R15=ffff888136636360
RIP=ffffffff8552723c RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000020000015f030 CR3=000000010dfa8000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000000ff XMM01=0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
