last executing test programs:

4m46.307860653s ago: executing program 32 (id=359):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ip6tnl0\x00', <r1=>0x0})
sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09103328", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14)

3m41.488020717s ago: executing program 3 (id=1131):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r3)
memfd_secret(0x0)
ptrace(0x8, r3)
r4 = syz_pidfd_open(r3, 0x0)
process_mrelease(r4, 0x700000000000000)

3m40.57467595s ago: executing program 3 (id=1135):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x10}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_NAT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x4000)

3m40.574382767s ago: executing program 3 (id=1136):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000000)={0x6, 'veth0_vlan\x00', {0x1}, 0x101})
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000040)={0x0, 'macsec0\x00', {0x1}, 0x2b1})

3m40.495663586s ago: executing program 3 (id=1137):
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x845, &(0x7f00000004c0)=ANY=[@ANYBLOB="73686f72746e616d653d77696e6e742c756e695f786c6174653d302c73686f72746e616d653d6c6f7765722c73686f72746e616d653d77696e6e742c73686f72746e616d653d77696e6e742c646973636172642c636865636b3d7374726963742c73686f72746e616d653d6d697865642c73686f72746e616d653d77696e6e742c726f6469722c73686f72746e616d653d77696e39352c757365667265652c757466383d312c00f919a0fcc7601e2839a4cdeb811f202b12b52250986b6c58733273d7bcd7421b35fcf85c4503caace91f7a52eacc7502"], 0x0, 0x274, &(0x7f0000000780)="$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")
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)
umount2(&(0x7f0000000080)='./file0/file0\x00', 0x9)

3m40.495235155s ago: executing program 3 (id=1138):
syz_mount_image$squashfs(&(0x7f0000000100), &(0x7f0000000240)='./file0\x00', 0x400, &(0x7f0000000080)=ANY=[], 0x80, 0x1d6, &(0x7f0000000280)="$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")
syz_usb_connect(0x2, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="1201410127c0de206a0803003ff0010203010902240001000010000904020202f3bff50009050602000202000a0905"], 0x0)

3m40.25900531s ago: executing program 3 (id=1139):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@ipv6_getroute={0x24, 0x1a, 0x101, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x5, 0x800}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0)

3m40.112544364s ago: executing program 33 (id=1139):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x5}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@ipv6_getroute={0x24, 0x1a, 0x101, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x5, 0x800}, [@RTA_OIF={0x8}]}, 0x24}}, 0x0)

3m4.476043574s ago: executing program 4 (id=1649):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_tunnel_key={0x58, 0x1, 0x0, 0x0, {{0xf}, {0x28, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0xd, @empty=0x1000000}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x70}}, 0x0)

3m4.392486686s ago: executing program 4 (id=1651):
syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000e00)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="0093d84f10fc3e1ec648b776cb7f8081d09ad0cc63a23840b824f920b21981285520a35f491e6934193661e8f46d"], 0x1, 0xd99, &(0x7f0000000e80)="$eJzs3UtvXNUdAPBzx544LxqHmMZN09glpbiP2CRYpbsaKV2gSqgSnwClgYYa+ghdgIKUsOi2kRAfoIh9F31mgRSxSsWmVb8AYtVNipBoG1UCI9vnjMf/zOjOOLbH4/n9pDtn7v2fe88587hz575OAkZWY+1xcXG6SuntW29dvDcz/r/VKTOtHLNrj+N5bCml1GzNl9JkWN7SxHr62SfXLrWnn+e0ShdSlarW9PTs3da8R1JK19Nsup0m03Mfn7z50gfPLL934saJi2/M3dmZ1gMAwGi596N3f/m3x3947fj/f39mKU20ppft86U8fjRv9y9V6+M5af0PqNrSqm28OBDyjeehEfKNdcjXXk4z5BvvUv6BsNxml3wTNeWPtU3r1G4YZhv/46vG/KbxRmN+fv0/+aoPxw5U869cWX7h6oAqCmy7T2fyLj6DwTByw8qxQa+BANbF44b3uR73LDyY1tLGeyv/7tONzvPDNtjtz7/yh6v8d29Y47B99uunqbSrfI+O5vF4HGE8zNfv978sLx6PaPZYz27HEYbl+EK3eo7tcj22qlv94+div/paTsvrcCbE278/8T0dlvcY6Oye/f8Gw8gOK4NeAQF7VjxvbiUr8XheX4xP1MQP1sQP1cQP18SP1MRhlP3h1d+mm9XG//z4n77f/WFlP9tDOf1Sn/WJ+yP7LT+e99uvBy0/nk8Me9rcf09/+uvbf4/n/38ezv8/m39LJ/MKouwvjPvVW+f+hwuDG13yPRyq81CH/GvPpzbnq6Y2lpPa1jP31WN683zHuuU7vTnfZMh3OG+LHAz1jdsnh8N8ZfujrFfL6zUe2tsM7TgQ6lHemeM5PRjac7xbu8KO7AMhXzMPJ0K7pkK7HgnzfTm0q5re3K64/7zU52SYHo+TlHzhbbvvdym+F/G6jEdz+mZO38np+zn9qEO5o6h8Hrud/18+n9OpWb1wZfnyE3m8fE7vjDUnVqef3+V6Aw+u1+t/ptPm63+OtqY3G+3rhWMb06v29cJkmH6hy/Qn83j5Pfvp2KG16fOXfr78k+1uPIy4q6+9/rPnl5cv/8oTTzzxpPVk0GsmYKctvPryLxauvvb6uSsvP//i5Rcvv3L+ie9/78mnnlpcWNuqX2jftgf2l40f/UHXBAAAAAAAAAAAAOhZdajz5JzW3d+2XE9erk+P18czHMr7Vj4N5T4G5frPbvd1KddvHt+FOrL9duNyokG3Eejs3+7/azCM7LCy4i7+wN4w6P7/yn0PS3r03D+Prw4l292nN68v4/0L4UHs9f7nlL+/+v9r9X/V8/ov9Jg1ubVy/3jv0D/aik2nei0/tr/cB3aqv/L/lMsvrXks9Vb+yu9C+fFGpT36cyj/cI/l39f+01sr/y+5/PKyzZ3ttfz1GleNzfWI+43LfQDjfuPir6H95d5+fbd/ix213crlwygbln4m+zUs/X92U5Zb1oN59dw6Tlfuvx37O+i3/uW+3+V34JGw/Krm903/n8Otrv/P8vlb0P8n7DsfOv5nMIzssLKyMtCuT0a135W9YtCv/6C3IQdd/qBf/zqx/8/4fyn2/xnjsf/PGI/9f8Z47F8rxmP/n/H1jP1/xvjJsNzYP+h0TfwrNfFTNfGv1sRP18Tj/7cYn62Jn6mJz9TEH66JP1oTP1sT/0ZN/LGa+OM18bma+H739ZyOavthlMV+I33/YXSU4z/dvv9TNXFgeMV+neP3+5s1cWB4lfM8fL9hBFWd79gR97eX/bhv5vSdnL6f0492rILshm/l9Ns5/U5Ov5vTczmdz+lCTvUNOdx+869TZ25WG+f5HQvxXs8njdcDxPvEnO+xPvH4XL/ns57ssZydKn+Ll4MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADI3G2uPi4nSV0tu33rr4n6kf/Hh1ykwrx+za43geW0opNVNKVR4fD8u7PrGefvbJtUud0ipdWHss4+nZu615j6zOn2bT7TSZnvv45M2XPnhm+b0TN05cfGPuzs60HgAAAEbDFwEAAP//ManlwQ==")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1ff)
ioctl$FITRIM(r0, 0x81009431, &(0x7f00000000c0)={0x1ffffd, 0xfffffffffffffff7, 0x1})

3m4.234511082s ago: executing program 4 (id=1653):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@ipv6_delrule={0x38, 0x21, 0x1, 0x70bd2c, 0x25dfdbfd, {0xa, 0x10, 0x0, 0x4, 0xff, 0x0, 0x0, 0x0, 0x10004}, [@FRA_DST={0x14, 0x1, @local}, @FIB_RULE_POLICY=@FRA_PROTOCOL={0x5, 0x15, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000841}, 0x20040000)

3m4.108965523s ago: executing program 4 (id=1656):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x0, &(0x7f0000000140), 0x3, 0x4cd, &(0x7f0000000c80)="$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")
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x60)
getdents64(r0, 0x0, 0x22)

3m3.988887751s ago: executing program 4 (id=1659):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000003540)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48)

3m3.73893093s ago: executing program 4 (id=1670):
r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000007080), 0x40040, 0x0)
lseek(r0, 0xffff, 0x1)

3m3.375242762s ago: executing program 34 (id=1670):
r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000007080), 0x40040, 0x0)
lseek(r0, 0xffff, 0x1)

2m43.153365761s ago: executing program 1 (id=1903):
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x201, 0xa, 0x2})
ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f0000000500)=@multiplanar_userptr={0x9, 0xa, 0x4, 0x800, 0x4, {0x0, 0xea60}, {0x1, 0xc, 0x7, 0x82, 0xe, 0x0, "bc9feb13"}, 0x8, 0x2, {0x0}})

2m43.076886456s ago: executing program 1 (id=1904):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x4f27, 0x0, 0x2, 0x401, 0x1, 0xcc7, 0xfff, 0x5c952399, 0x5, 0x3ff, 0x802, 0x1600, 0xfffffffe, 0x1, 0x9, 0xe1cb, 0x6, 0x4, 0x3, 0x396, 0x80000089, 0xfffffffd, 0x0, 0xfffffff5, 0xffffeadb, 0x3, 0x3c, 0x8, 0x4, 0x8000000, 0xdffffffa]})

2m43.076781067s ago: executing program 1 (id=1905):
r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f0000000080)={0x7, 0x6, 0x0, 0x10, '\x00', '\x00', '\x00', 0x0, 0x0, 0x0, 0x1, "57d4915b52cdfd4e8ea56ed6c1ca719a"})

2m42.996066557s ago: executing program 1 (id=1906):
syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f00000002c0)={[{@journal_async_commit}, {@heartbeat_none}, {@usrquota}, {@barrier={'barrier', 0x3d, 0x7}}, {@heartbeat_none}, {@inode64}]}, 0x1, 0x4703, &(0x7f0000004800)="$eJzs212IXFcBB/BzJ6vZpMl2P9ImafoxSQQXLcumT9X6ENeqjabNh7bVVFlnN9vN6uzMujujBYPUIIiCoARBxQ+qQulLLYiBvtQiFPxAWoVSUbS+iBSq4INBG+jKzNybnXtntneyk7S0/f2gnb3n3nPumf3vPXfOPZNCrHZqYaW4sFIsVYrV2ftXbil+rlquL86FwqvktT4/vbkSOcn+tXPkfR/4yD23hPCHY1/70Orq6mpoGA5dHWj7+fy/T8+2vyYKmTqNdru31vLH+iMv/fwtr3REnhMhhB0d/WrYFEL42C9C2BxCGInLRuPXLSGEbSGEKITw6G/+9ePBfrrQ5uy9Lzx37MzhfWemHn/smQvzR9c9MArhu+XdN88vvrh/023Pv+MynR4AAF7RB48fufvo5IHwZBSGzg10fl7fGb8mn4/vfNun7np4YG3/Kr3Z9CqGCgAAABlr8//h6OUu63XJylqyJPjEAyfufipa229i+/p26K4jt79/8kC8/ht17L81Lvrnezc111Cz677Z9d+RTP3u679r53n4q8/+svLWjfc/6V9y3uEQFSZS24XCxEQIx6Za27uirYVydaX2zvur9crJjZ/3jSKdf3b1fm1Bv9f8RzPV89b/d3/i8z/bMtDPOxgL2b/axnax80+ZLtL5rz+W/+RLUU/5j2Xq5eV/x9Pbz/9qcz/vIHtGLkU6/9aFuK/9gGJrAGjk/82B/Px3ZNrPy//7U+cePbGB7/80xpnhqNHXwdQI8HJcvs5XmMhI598KIjV0xr/I9a7//2XyvybTfl7+d1b/8bu/9XH/X2/8H5/qp803j3T+rSCKqSPWrv+RQv71f22m/bz8f3vqz89+sq97dWf+jf6Pu//3JJ1/fCNOD57N32Sv4//OTPt5+e8au++hhQ30+8Nb4n4ORWGs7Vun5xq3sKG19ermlKaxe2kDJ3kTSOff+q2lLp2h1kvz+h/OH/93ZdrPy/+hPV9/z+m+vv/bffyfNP73JJ3/lmbZpeT/Uib/3Zn28/L/4em//+W+yzz+N7YPyr8n6fy3duxfe/5T6Gn+d12mft7zn32jTz3y1z7m/0n/kvMmz3+S5xDjUev5D92l879q3eN6vf/vydTLu/6/9Z/nn97fz/gfDXoC0Id0/ttahV0mgL3mf32m/bz8v3DPlz/+pw3M/5qf+AaT/Nvm/5tb5UeN/z1J57+9VZj6x1APNv/fvP9Hnbn/N5P/DZn28/K/cGhi4CuX+f7f6P94l0fZdErnP7TucY38f9/D/f/GTL28/L+496cv3tzX5/8QJs31Nyyd/9XrHte8/gfz878pUy8v/+9849dPPNhH/9/eR12y+bfu9anLKf5s3uv8v5hpPy//H42fP7v/Csz/bnX/70k6/9aq+aXkn53/7820n5f/9478YHngCjz/uUP+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGzIavw6HqDCR2i4UJiZCGIu3d4Wt0Uzp5PRMuTr7mZUQdsTlxTAazZerM6Xy9EKlenJuulQuV2dDuCbevyMMRivlam16sbR07cW2tkSn5krLtZm5Ui2EsDMuvz5sT9qaWagtlpaaxyZ1ropKn61Xa6WJ+srccth9sXxbUj6/XK0vXXexrasL1eWlU6XK9MmF5XdPTk5Ohj0X+zwSzT1Qm6vUWr1t7W3USeoOR21vprn7hrbzfbpaX66Uys3yG9vqlKuzpXJbnZvazldbrldmS7W56XJ1Pjlfsa1u23tr7t4b7xsPI6n3l9TNOhi/3n7o+EePHz7Qsb8YpfOu1BfnJrd3/5sAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4I3rydve9e0QwkBrqxBCOJj8EMX/pZy994Xnjp05vO/M1OOPPXNh/mi3YwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4PztwIAAAAAAA5P/aCFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVXYuZ+XKro4DsBnxve+FkgpbYRcBoaI6E7Cgn4RSeU1smWb1kGtEjIoCgwjWhYEQVC7qCBoFVT+BVELl62qTS1aGERQMTqTlzvCDS90zHkeGM4Mc++ZLwzcO3M+hwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALB+nN2x2JW1l3ZtXtq6+0PozM/9H0IYTZb3P+/tCD0hhK9fZk6HVdpCT1P/bybnxstXTX7v7R9/eH00WXv9xXeL63aHJB1qON6ZpOnQ0Nr736juDD6bHkxCSGMXQhQLY0/O1EIIHbELIYqfH+cvZr/v/8UuhCj6P9ztyu5/LXYhRLF196e+Wv6MR/Wcr18YbPzvb/UI3sYjOuvQ25NX3qVuauW9zN//k3zzPlgNsyeOvH8euwiimZ2bOhq7BgAA4O861yL/D1uW9+9fTkJPdzn3/9aU//c29b96/r/i3vYbYzNthRDbSmOT2fHwvnb63PhODVy9/bpmvKeq5P/VJv+vNvl/tcn/q03+X23yfzKv5P+V9PjmnsUXsYsgGvk/AABUz6HjE1P14ZHs5X/Tj85yXt+Xt/U8T39wa3rgUcO4kfzw33b42MSBg8Mj+X0vDwiurP+QLp39ns/3aG4Lk03zLlqt/9D7dGH+Wmf5E/U/nL9R1Fdc1/oPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAvdueehkEwCsPod1sRtdGqaMLCT4IPNDAiACnMaEAHEwZgIAQUMJBzlnuTZ3kBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA5/tXeV18f2mM9Foj0lR22bV/jqfZz9y3w/I+e9y4FQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADZ24EAGAAAAQJi/dR7tBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4KkAAAD//8Oayzs=")
quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000240)=@loop={'/dev/loop', 0x0}, 0xee00, &(0x7f0000000f00)={0x7, 0x0, 0x2, 0x1, 0x1, 0x0, 0x0, 0x200000000009, 0xbe6})

2m42.635340148s ago: executing program 1 (id=1912):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4)
sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000)

2m42.458491528s ago: executing program 1 (id=1914):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)={0x24, 0x1, 0x4, 0x301, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x5c918b139101e643}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000080}, 0x800)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x94, 0xba, 0x78, 0x8, 0x84e, 0x1001, 0xedae, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x43, 0x7b, 0x6a}}]}}]}}, 0x0)
r1 = socket$phonet_pipe(0x23, 0x5, 0x2)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x2808080, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x7f, 0x2bd, &(0x7f0000000580)="$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")
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_open_dev$ndb(&(0x7f00000002c0), 0x0, 0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$NBD_CMD_RECONFIGURE(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x1c, r7, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r8 = socket$inet(0x2b, 0x801, 0x0)
sendmsg$NLBL_MGMT_C_REMOVE(r6, &(0x7f0000000980)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x70, 0x0, 0x400, 0x6, 0x25dfdbfd, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x23}, @NLBL_MGMT_A_IPV6MASK={0x10, 0x6, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @NLBL_MGMT_A_DOMAIN={0xf, 0x1, 'inlinecrypt'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4084}, 0x4011)
listen(r8, 0x9)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x40083}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x7}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x4040)
setsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f0000000180)=0x800, 0x4)
creat(&(0x7f0000000080)='./file0\x00', 0x248)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0xc100c6, &(0x7f0000000b00)={[{@nodioread_nolock}, {@abort}, {@bh}, {@lazytime}, {@debug}, {@inlinecrypt}], [{@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@uid_gt}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}, 0x6, 0x605, &(0x7f0000000240)="$eJzs3c9rHFUcAPDvzCYxaaNpRcQWxYCHFqRpUotVL7b1YA8FC/Yg4qGhSWro9gdNCrYWTMGDgoKIV5Fe/Ae8S+/eRFBv/gNVpKKg0pXZnW03yU66ptndNPP5wGTnvZnd9747eXlvdvJ2Aiit8exHGrEr4s6pJGKsZdtoNDaO5/vd/v3a6WxJolZ787ckkjyvuX+SP27PE8MR8f3RiMcrq8tduHL17HS11vBBxP7Fcxf3L1y5um/+3PSZ2TOz56cOvHTw0OTLUwenNiTO7fnjseNvPP3ph+++OPdDdV8Sh+Pk4PszsSKOjTIe43EnD7E1fyAiDmUrbd6Xh80WCKHUKvnv42BEPBljUamnGsZi/pO+Vg7oqlologaUVKL9Q0k1xwHNc/vOzoNPdnlU0ju3jjROgFbHPxDjESMRw/Vzo223k5Yzo8ZnGzs2oPzxiPj32u4vsyWWfQ7x192jM7AB5RRZuh4RT7WLP6nXbUc90iz+dFk9koiYjIihvH6vPUAdkpb1bnwOs5b1xp9GxOH8Mcs/us7yx1ekex0/AOV080jekS9lqXv9Xzb2aPRNzf5v+fhntE3ftR797v+Kx3/N/n64/hl5umIclo1ZTrR/ycGVGb98fOzzovJbx3/ZkpXfHAv2wq3rEbtXxP9RFmw+/sniT9oc/2yXU4c7K+P1H389VrSt3/HXbkTsaXv+c29Umq2tcX1y/9x8dXay8bNtGd9+987XReX3O/7s+G8riL/l+Kcrn5e9Jxc7LOObEzfOFW0bvU/8wy37DuWP700vLl6aihhKjjcy0pb8A2vXpblP8zWy+Pc+1779L/v9v778dUaafzI7cPGts7eLtq3n+LdcTL5T67AORbL4Z+5//Fe1/yzvsw7L+PPty88UbVsr/pEHCQwAAAAAAABKKK1fg03SibvraTox0Zgv+0RsS6sXFhafn7tw+fxMxN76/0MOps0r3WONdJKlp/L/h22mD6xIvxAROyPii8pIPT1x+kJ1pt/BAwAAAAAAAAAAAAAAAAAAwCaxPZ//37xP9R+Vxvx/oCS6eYM5YHPT/qG86u1/1S2egDLQ/0N5af9QXto/lJf2D+Wl/UN5Fbf/wZ7WA+g9/T+Ul/YPAAAAAFvSzmdv/pxExNIrI/UlM5RvMyMItjYX+KG8Kv2uANA3dy/9G+xD6XQ0/v87/3LA7lcH6IOkXWZ9cFBbu/HfbPtMAAAAAAAAAAAAAKAL9uwqnv9vbjBsbab9QXk9wPx/Xx0AD7mir/7PZ/Ut9bIuQG85xwfuN4t/uGiD+f8AAAAAAAAAAAAA0DOj9SVJJ/K5wKORphMTEY9GxI4YTObmq7OTEfFYRPxUGXwkS0/1u9IAAAAAAAAAAAAAAAAAAACwxSxcuXp2ulqdvdS68s+qnK290rwLag/KejX+57Mi6f3bMhIRfT8oXVsZaMlJ8lvcboqKXVqIzVGN+kqf/zABAAAAAAAAAAAAAAAAAEAJtcw9bm/3Vz2uEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD03r37/3dvpd8xAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPp/8CAAD//3lGP3w=")

2m27.391481814s ago: executing program 35 (id=1914):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000600)={0x24, 0x1, 0x4, 0x301, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFULA_CFG_CMD={0x5, 0x1, 0x2}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x5c918b139101e643}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000080}, 0x800)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x94, 0xba, 0x78, 0x8, 0x84e, 0x1001, 0xedae, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x43, 0x7b, 0x6a}}]}}]}}, 0x0)
r1 = socket$phonet_pipe(0x23, 0x5, 0x2)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000040)='./file0\x00', 0x2808080, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x7f, 0x2bd, &(0x7f0000000580)="$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")
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
syz_open_dev$ndb(&(0x7f00000002c0), 0x0, 0x0)
r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000880), 0xffffffffffffffff)
sendmsg$NBD_CMD_RECONFIGURE(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x1c, r7, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r8 = socket$inet(0x2b, 0x801, 0x0)
sendmsg$NLBL_MGMT_C_REMOVE(r6, &(0x7f0000000980)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x70, 0x0, 0x400, 0x6, 0x25dfdbfd, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x23}, @NLBL_MGMT_A_IPV6MASK={0x10, 0x6, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, @NLBL_MGMT_A_DOMAIN={0xf, 0x1, 'inlinecrypt'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4084}, 0x4011)
listen(r8, 0x9)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x439, 0x70bd2c, 0xffffffea, {0x0, 0x0, 0xe403, 0x0, 0x40083}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x7}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x4040)
setsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, &(0x7f0000000180)=0x800, 0x4)
creat(&(0x7f0000000080)='./file0\x00', 0x248)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0xc100c6, &(0x7f0000000b00)={[{@nodioread_nolock}, {@abort}, {@bh}, {@lazytime}, {@debug}, {@inlinecrypt}], [{@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@uid_gt}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@mask={'mask', 0x3d, 'MAY_APPEND'}}]}, 0x6, 0x605, &(0x7f0000000240)="$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")

2m23.526809408s ago: executing program 6 (id=2141):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file0\x00', 0x8c0, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x1, 0x443b, &(0x7f0000009e40)="$eJzs3U9sFFUcAOA30yotAhbkgImJm0iiUdO0nNCSWEqhtFAxKMR4WbbtAtVtl7Rb44FDvZF4MvFgPBBNPNkT6cErHj168YgnDyR68GJiQqzZ3WnpzO6mC+m2Qr4vobPz/re/nTdvDsOLE5Xrs4u52cVcYT5Xnr66eCz3abm0NFcM8Q7Z7f5pTyfiJPa758KpM+9fPhbCTzO/3l9bW1sLVd2hqcFNn//+6+b05uO6OFOn2m7z1rbLRyGEww3jquoKIXz4YwhRCOFkkjaSHHtDCAdCPe/yzS+u5LZpNHfuFU/kH0zeWh06OrFye7Xxd19LRCF8U3rxzWtzf7zSNfTb69vUPQAAAAAAAAAAAAAAAAAAT7ixixcuvTcwGO5GoXslanxfdyw5tno/dm3bvNz5XxYAAAAAAAAAAAAAAAAAAAD+px6+/5+LDjV5/380OQ63qL/2TufHSOeMv3th9PTAYLL/e9SQP5wk/XmyKxxssu97dv/3k5n6zfd/b+zncR2P0v32hSjuT53HcX9/CN8lG78fifbGpfJi5Y2r5aX5mW0bxhMrHf/67v2p6CQb+m8V/99/rpcbybTf+f3/X2j4NlXPr2zfV+yplo5/VzZ7z/qH7z+P2rr+T2Ua2In48/jS8e+upfVuLjBcnwCq8f+ye+v4j2ba71T8D4QQclF1rLnUDFBdw1TTW61XSEvH/5laWmrqTP6Qra7/fzLxP51pf7fm/+XsjYim0vF/tpbWkyoRh3AziX+89fV/JtP+bsS/Ov5l9/+2pOOf3O67U0Vqf8mH8389sVX8xzLtdyr+l+JknAei1DdgJaqnt/r/6khLx7+nIf/4xvNf3Nb672ym/k49/633u/78tz79vxbVn/9oLh3/3kzuw+9Du+u/8UwLnZ7/h8MP2SmHR5CO/95aWnrt3Ff72W78JzLtb1/8G1YltaThzPr/3z319G+t/9qSjv9z9cR4c4nl2s/a+i/aev1/LtP+bqz/quNfjjvb69MiHf99LctV4/9LG/f/85l6nY9/42qiu9MdPkXS8d/fslzt+u/ZOv6TmXqdjv+rnWwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Akwkhz7QhT3p87juL8/hFPJ+ZGwN5oqzOSnSuXpTxZDGE3Sc+FQdK1UniqU8rPz5ZlivlAqladDOJ3kHw490WKpXMnPFW6c2WirN7peLCxUpoqFSghhLEl/Kexfb2tqtjJXuBFCOLuR93xcXrhxvTCfn5ldeHtgYGAgjG+M4WBU/KxSnK/Ue6/nhjCxUbcv2jS4Wva5jbHsiz4uLy3MF0q19POb6pTK04XSpjqTSd5X4WBUWViany5UivlS+dp6f7tpODmOjl/84OL5wYb8K1H9OLKzwwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgEd0deuvrEEJ3/SwOIeSi5EOU/Eu5c694Iv9g8tbq0NGJldur95uVAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4D924EAAAAAAAMj/tRGqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsEvHKBEDURiA34yFlh7DKiSdbUQRLYwInsDUnsDDaOM9cgnvYGFhayHLkgSWkLBpdqvva97AY2b+4gcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABY7/apeX4sq4gUZ/+nEV379b27vx/m+9X8/ZMjZORw7h6a65uyiq79fJ3bX6Z+/tQ5tse/37eXmJmjj0lPpn3qpb25lvq2lG/89zxSLiKiHvYXKeeiWPcWAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACwYQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCwAAAAAIMzfOoq+DQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfgUAAP//wL8omg==")
mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)

2m23.165064223s ago: executing program 6 (id=2146):
syz_mount_image$jfs(&(0x7f0000005d40), &(0x7f0000005d80)='./file0\x00', 0x0, &(0x7f0000005dc0), 0x1, 0x5d0c, &(0x7f0000005e00)="$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")

2m22.728316679s ago: executing program 6 (id=2156):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000980)={0x16, 0x98, 0xfa00, {0x0, 0x2, 0xffffffffffffffff, 0x30, 0x0, @ib={0x1b, 0x1, 0x1, {"c6b7b7e198082124066b72a4ca8bf843"}, 0x7, 0x7, 0x3}}}, 0xa0)

2m22.37793233s ago: executing program 6 (id=2157):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='iocharset=cp865,uid=', @ANYRESHEX=0x0, @ANYBLOB=',namecase=1,uid=', @ANYRESHEX=0x0, @ANYBLOB="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"], 0x1, 0x1545, &(0x7f0000001a00)="$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")
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x800400, &(0x7f0000000100))

2m22.30846155s ago: executing program 6 (id=2158):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xe8001, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2})
ioctl$TUNSETLINK(r0, 0x400454cd, 0x305)

2m20.338103531s ago: executing program 6 (id=2187):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f800000016008502000000000000000020010000000000000000000000000002a600000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032"], 0xf8}}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0)

2m20.152139518s ago: executing program 36 (id=2187):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f800000016008502000000000000000020010000000000000000000000000002a600000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032"], 0xf8}}, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0)

1m17.628668165s ago: executing program 7 (id=3093):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x1c, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0x6, 0x1, 0x0, 0x0, @str='\x15\x00'}]}, 0x1c}}, 0x0)

1m17.426391017s ago: executing program 7 (id=3096):
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_STATX={0x15, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f00000000c0)='./file0\x00', 0x200})
io_uring_enter(r1, 0x627, 0x4c1, 0x43, 0x0, 0x0)

1m16.083986008s ago: executing program 7 (id=3099):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x40, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_LABELS={0x4}, @CTA_LABELS_MASK={0x4}]}, 0x40}}, 0x0)

1m15.950925977s ago: executing program 7 (id=3102):
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x1008a, &(0x7f00000000c0)={[{@nomblk_io_submit}, {@usrjquota, 0x22}, {@errors_continue}, {@noload}, {@dax_always}, {@grpjquota, 0x22}, {@errors_continue}, {@errors_remount}, {@jqfmt_vfsv1}]}, 0xfe, 0x455, &(0x7f0000000fc0)="$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")
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0)
mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101017, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000040)='.\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x40)
umount2(&(0x7f00000003c0)='./file0\x00', 0xa)

1m15.825160967s ago: executing program 7 (id=3105):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000100)=@framed={{0x18, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @initr0, @generic={0x65}, @initr0, @exit, @alu={0x4, 0x0, 0x7, 0x3}]}, &(0x7f0000000000)='GPL\x00'}, 0x94)

1m15.585524796s ago: executing program 7 (id=3112):
r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0x75, 0x4, 0xfffffffd})

1m15.454539504s ago: executing program 37 (id=3112):
r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000003c0)={0x75, 0x4, 0xfffffffd})

48.442220945s ago: executing program 5 (id=3429):
set_mempolicy(0x2, 0x0, 0xf5)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0)
syz_open_procfs(0x0, &(0x7f0000000040)='net/route\x00')
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019100))
r2 = timerfd_create(0x0, 0x0)
readv(r2, &(0x7f0000000000)=[{0x0}], 0x1)
r3 = getpid()
syz_pidfd_open(r3, 0x0)
tkill(0x0, 0x39)
syz_clone3(&(0x7f00000004c0)={0x80000, 0x0, 0x0, &(0x7f0000000300), {0x15}, 0x0, 0x0, 0x0, &(0x7f0000000480)}, 0x58)
r4 = socket$igmp6(0xa, 0x3, 0x2)
r5 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r6=>0x0})
ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f00000005c0)={@dev={0xfe, 0x80, '\x00', 0x40}, @remote, @remote, 0x3, 0x2, 0x5, 0x400, 0xb7, 0xc20022, r6})
syz_emit_ethernet(0x82, &(0x7f0000000040)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x80}, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x48, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, '\x00', 0x0, 0x0, 0x0, @private1, @private2, [@hopopts={0x3a, 0x1, '\x00', [@calipso={0x7, 0x8, {0x0, 0x0, 0x0, 0x80}}]}]}}}}}}}, 0x0)
syz_emit_ethernet(0x5e, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd603000bb00282b00fc020000000000000000000000000000fe8000000000000000000000000000aa"], 0x0)

48.320104755s ago: executing program 5 (id=3432):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28)
writev(r0, &(0x7f0000000740)=[{&(0x7f0000000280)="581a17919cc77431510e7fc4ed9fb860505f1495ff92f16a44f8a13d58751d926def1f80b315bdc726cdd8b5d1a91f485854af8fc854b0da7a02522fe7b2c21db7a46c48473099d4a4654cfd97a67c9e79afc0d444e6c78b0216d2201b128df9d4ed5b4dbe676fe56a6354f819d997a6acb8595633cff6f77473b2b3abcc65b51cb3d3a30bf9b0b2ce59d568d3a89b49331904da2a37c89ea236f5d5640c32c3ac74e4bde1a62c560cb63836552f881c8a8305d2a13d838a5160a6c06c63decc865a92e9539f3513af3a1e6f78608890f912f087214dac06387a94d5e1b31c35be117ee540dc4560aa500269b81a0bbc", 0xf0}, {&(0x7f0000000100)="1d4ac370cf8c47025bd7a6546c8bd20f3991596dfcd1abdb72276d5f80b1d38cedd7d704de6ec72fa6961cd700b4f8c0f594861c0296ca92cb6c2ef9", 0x3c}, {&(0x7f0000000380)="88e584aac45d6d83e6c2e7857149eb55d2c259a747dbdfc0787e87150d7e40953e657417f2c201284dd4714eb14ce94fb9be03e73d06a982f5502b3ae3a800c03902057e1ec6", 0x46}, {&(0x7f0000000400)="83c0b58e5bcffe6c14ab199d81f63d9e77512d040c3f3a7b41a3a1ed6cf40450443e4e377139b523eb3dd725f87a1ed946e28c6b19e1fc6ea21fe2eef736ec85289f34830b89c7169369862871b9608f2e976924a41f64f236a395563ddb3b994b4d9cf9f465dea2adad06013851713e9d30f195383be99db35611dd11a69721e423fcf5904c2af8ca4b1774bc6438d1c6218a2ada56c8b5b289274c2d116ecd4aafbd01536f931c84ec7f95ce8c6d118d1dec3bfa645c3e72018e9c154a80fd84b6e0233520ee1dc56ec6247282000000000000000000", 0xd7}, {&(0x7f0000004480)="d21e96a9f6be3d72e3f91fa2db455d6b88df49377d7988389bd1ecc97042b565d013ec3fcee93a43afdf71b3751d0f53e4ca87fd4b71713fcc3b729c601778385e68ae4e55370c965ca8189dcf4f4e8c70fc343965f9c540163a19215f1d988f1bf6b6f57ce74575d0a1223da74c72adeed27d968bfdcd14597ebe90fc5167cbc1f5856d6b387bc5c419db52f682bcf13ce9e1d6110291bce66848b7392445ffb232c6b70bff2783564b2a62fa6cf3783f6cf6e84c90162b7cbf0192971f05c597dc20b3c879bd342e9e29e93c8240e8dbb137d3d8fcc8f49b37938a52ef12f7d963ff76b91f1473369d06d500d9b88c4f0e0b0ca9049d6b2f3c1886ff41404fab2855eaf1310fa65425a3e9513e33cee970a08de795368e9fe8055fdc5786010c764b3d3ccebec687d242267e932df33cf50c665ea82f1dcf1af952b0e4bf2e35d3c1bdead12e22b371543769fc19a0d893ebb9d71c4da000e2d18a572fdf7c23d921d959caebfbe3ab9157fc9ab6e3dcb88eaa5a5a8af223d7a25a8f198b10dedf68b6d2759a806b6a5bcf3693734ceebeea16b995304511db8d97b62f548213c614bc2dd9b843450eb575c8a8f290af70331a269f1cab6fd6e1f9ef687d80952ba7f14da8cf892d0a5b16dd181d8a7b780055d3b79782a2f4c29c6b9c64bdcde1175ef26c75d0bca19e2be27acb3fdf22a7cff8a659899de59fb2d3e4920881a0900958685263b3fb8dafa6402f5812f16de9e53eda3c86520d5267df729d2add8724d7541b60a3e9a4b70b5f1af83e81071d7e3eb6a9817383632008fbfff89f1c1ab39d9d898d555a0190fa11c8bdfd2d1b49d06fc56acdc426568ccbebbf6f3ce278148f319a1f84adcfb49a675c6d119f52e10386cdd0740199b20087f7c8f75d93959e39d2948a17789f6c6fda65dcb42743b466bcdd06bbe7afccd2b59c0c3f4dc62b8cee2a785ce704bbc47f480079b5f21ace7e5f2f149360370e866565af026b14ec4d9214884661156b5313c233ef1abd2807eb9b586845e3df8001e56b8d4f7c5c9b7e46b81e278ea0a7afb8286183285c390558d750277a7d72a6dab2cf1f29b0d4c847991ec65dd1757889dc9a6e94ce22b58e25cfac06c73532a53663a27208daaf3b4ad5a8c74e4e62b160219f49b6983674f7a71e56f45c3df8c13c93b2ed468749843dd8954a0d03acc61e5008ccc5a5db5a42d04abdf112e71e4d5876c3ea0db715648a5bb55b5ffd2377aea32f19a07e610456b5a6dda7ab4e6d11a88a5910f7f394c7a53d7c032e5506c3b26d54cbe73bfb37cda2439b23c785566668d8111570b7004fa565a156e45c9b672c6ebfb4d08bc681de9ea0215a43a1eefe7a0fb72caf494414c61510c00a8c5e37c4efeca3a1d171f44abbca94a9899b299363bbd1ecdc91d19d6a179f00bd958e372916fde873aaa167bb6be50219c76e6bee7a207f43b729eea5c00052eccb9986b6c137019c47f3fc1d69d68569f8c1d97ecc6b3dec37813f358778edfa2515fd9c4ca7e73966942f65c1a3cc9770065836625671725e3617030df067961c50d2e53a1c69d0e116eb9e0c052e71b3bcc85354829b71295cae5ffbcd5c2794fd16f8601ff5d7278693e384d477920e4619be578ac11f4ef327e5c5298d24ba29fddc7317fc90c69ddc991ee2f3a34c40c2afcd77350c008b9f70b76c97f51bd1359d376cfc83ec0f14a183cef8eccc014bf36d8384262edd4bb03f743c4628bccfef1050deafd13bdcbd73a356a8c630cc4f0665420d414c59276ff1d85ef058069a1ea280b9ae476ea9aa64652c4a83b9b086fd02a3372ae9683521d81ce846ce9b030e81b7523e8f5355c26c66d9182b9b3e089917089a07bf5159f1439200ad74d735b020ccb78225a015c76a57c19344556bce75da0d44e88e2227f5f4a90bb00eb27decf0d0dcf1b6dd0f9146f0191a7f58e3c6a1568e747ba674c33fd6715678232ea1385e8e54955e70ce306fad514235c8bc2576e84444a674c149a67d8db5fea81813aa311fa701bc401101b14661b0f091dad3a1895f3d32fc7012e59e090f487fc9f19e878e04c40eb906deedb29cf65839486f11c4fb7d9c1be6a1c95471d939cc0c85f6fead85e4d081ccc6e2a51784ec4d3f0b13796609161bfcb38a029c10b084e87ceff5483ec6c9691b0ad6a3d05e13e8c48d0700cc58b9436d8011c48381d6ca0ac279c3c71a625585c8b257c54fcb9e9d07183ee0d90b0b5255d153fae38c6c25636846c31142f269229ac4a1d35df88eeaa9413dde791642c9b0ce903cef64609886d18df63515de769df208c9db2acda7db5181f52bb99e74f84b01106c8419543ec2b5106623789316cd825995e42d0cf9f8296f2e5155dbaae8113de5c7a1dddfe42770064e2aae3f100f97d890e3e7eb63ca80d1a8c672ae8e8eaee5b838653a20a58171dc78509a55ea2c590bcffe3f0ca7731edecc2cf3e63c8e8ce335a4f9541691282df4f24a208cd1400dce5e40ddde35dd22c9e75ded061cb349d8cbc92bc00f9c9c4ff49fe887ea630ffc66a087065a90e072b56c9386f3cccda4acb0f10538f361cd860a7efec0eb83ea5165d6a6612800a8d6c7426b0916fc6aec0e7d81ee1a57657ac5c32b58d4e573bf820bc67cc0896012ccff2ace1de0b13f70a744e116a300aaffd1a6ad24513532fb9b9452454874a432cb5f5f6fa2f35668e6e3eb98fdc5c15dc5513c44a26d318d2b7372d6dc1da69d342b95ecb05777716264c79f4a3b953d6acc1006318fd352eb92621360d62b1c651c1fa0dec9a9fe674347902228373bed540251eebb2a8ede5e4f47bacf6acde6f8c5b95dc8b8214175d5649994c710709a5bfdd73360c35af7fc2ea4d35f14994bdccce242be14bff1ce7010b1c353479a1f038dc52e76d5d97340d98e3ad783a4ad95a469eee9193c7e5f93d84f847a6710230fb26f6e0122cb3f0400e7c485b704e3916c4fb0340bed2b4e7640b3ea40a9741f32f81e761119919e9e3fe16aba0b691e9d4e8fc959ae97dad37225a0d3fff627d6241fc0826cc863ec6e0a6c78956dc8878bb8c34dec173161c844462baf2a0d40fb6ea7c6bcf6a4501b92b1bf35c9b1c7d09ad3ee84b5c846404062d6fef2e53f4121b3a04341b58c05460bfa09ff6b92275923798897293e4cc80e6ee6facbab718550e838724ac19c2f86ee656fd607106951936eb56a3263819a69525b9d8bd4b1196ae503b6ee7071f881d740c5781040a78168037ccf819e24a9e3b55dc629aa788972a018d72371e2d64905bcc52b68977a5be41c52dfd42c6dd106a073682ef6c1b09c3d6004436bb6f59c06445768c217b3f36cf8f231e5128944f15fca908e1340cb4d175e9da1f15d5cbdf8fdc2493620b62dee93dfcaf1a56f781b04ef16d0b33e774d89deb827c6ccc4cb83d510c5ba6029317379896b3880f1b2d9f08e6aaf1518b9378f87b135c526782c09eb28b5d74d09cae156dc1809ae258753a59a6b453f28580c3f8ca41cd2977fb2c8f78159e5b5360417b2a72e359e8dc3ee76bed00cce7018286ddd88ee211457683b8136380c1f6281c23308dc08943bdcc36a4bd310d097ac2f5603b214fc3616e1092f3f4c2cda3e098709cf98cbfbd20995c8daa7ece6bb4349c17f07c591eebf1a94c94f1211c6e52837c1e75409c7e7c115b3871fc5cdf1262ece5894a9a4cb264931047074ddc6b4cccf6707b160be4558c6cc0d8c7dc2de6b86af7489815c84517d106ba538c1f4ea22ec6fd29cbc76f94467c51684778649d867041e2c952f4717c6d20345c94ad67f343985f7db04bf6010f6f9308d4ec9ed41620efc7c95fd8c596d22d0302654f81f96a31a05b954768deb359c624537a6fdb450ad54324618b14df9e03f82cbf3f7b73f3535bfe44553c0a37dad2070b5c0565111da8ecf31d412b744d897ebc8e98fbb1e25312686539fd021b68ce5cfada2682a617932911350326eab213b43f436b0d65922bfbc459238d54708f39bdff1ee745aa1bf072670fa55a13e146df08c157927326556667f98002b54fe3ed150a59d359c2b481708b92e204dc3b9a30aae1489cfdc37a17669f5b5077945e0a8ae33c8c1c228486a313560773b32b05aec13f3fd9c42a1824d7c82c7b0b04d55064cf7a0924b243cf184567d26bd4095fbe0dc326ca71b0a3dba3b66511ad69cfb9dabcf71b85342db0bb9d23f29b7d1f1213d48e215eaf70e132e8ce34cf5e2dfd93bbbe7420a6db52641d1be52abeccb216193a993a18f0620a70b479776ccc705f095e915b9cc4a0fb62d11228fb1e5bcc0efa78969639969799dbe63f5f27be3d3fd7f2f5134f5ac3abf3a0a5601480296a6b85bea2090bf13c8f3d3c3a7ffa858b20775f249aaea7d753e9129bae065332bad8d783f9967322a2c358147f450fb5d6a7176c8015b33333106d30d2c690781703c18afb5e88423ffd8b6da20901db90e28647cb4727dbed71210db7ab7c9909b6a142e26757f22f742f84148ac2d88c6ec3bb24832a4b9889705571ced0e0d541a6ae909e3aa854c7f52e939c7062563711890e7046f0736b92188fdbae304953dc5e0bf9de92558ef9d41524ea68ec5f380902fd00719afd0bbc77e9b5034004f0820f22cac8ba92557c9186050a8aa7065a5d5d06b7d8b7bd0fcc4a30aaff5fa0bb2fdd85e801b53859dad6151be7c00f68c34ca8fcd96ddf9980d809d28730d1a86d057f2716637bea7ae9c34dcbf69a9e400cf42dfbbea8b03dc34683df85b3696c7570bed2bfee77bcbbaf3035d81a0308371ff1df315c53c66198221e3be1046eab7e71903dea93c388de23a13848d4b1d6109c067f40f67b17ab3dd7554ba9c51fc7b715acf04ff50d5588898c2db0f83c7b3948fe7ce0dbb6fde93de2d6bd3b27487a3f85ae7aa000000000000", 0xda9}, {&(0x7f0000000500)="f4f6ec3f1f6e4804195e1668ee6a8b994dcc5f47b255f609e705d9fbea0869812c0c3a096c7999643abde2e9c01404f75059df685d52a7b5d59f75dab6f01434874daf57b46d0151c0214ee1d955d8a24b8ce42aa8461222202c0b7e67b10f14040bd14ce1d9b5c123024c0aa559191474c1b44eebe0a40750feb6b9f872bd5f100d8f15dac14e66ca4b6e8bc168f9c7677432cbc268bf49e7b09d1a18cd49ad8bf344bbfde550052881cb7979129c65fc61fbbd6a99f24251b060090a04935c7f7a6f7862714aa4401ec436ba3a6460", 0xd0}, {&(0x7f0000002480)="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", 0xffb}, {&(0x7f0000005240)="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", 0xf26}], 0x8)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28)
readv(r0, &(0x7f0000000e40)=[{&(0x7f0000000f40)=""/250, 0xff1}], 0x1)

48.228792452s ago: executing program 5 (id=3433):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
close_range(r0, 0xffffffffffffffff, 0x0)
r1 = io_uring_setup(0x868, &(0x7f00000000c0)={0x0, 0x2bad, 0x2, 0x1, 0x13b})
io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r1, 0x14, &(0x7f0000001900)=[0xffffffff], 0x2)
io_uring_enter(r1, 0x5490, 0xd74c, 0x1b, 0x0, 0x28)

48.050946648s ago: executing program 5 (id=3434):
syz_mount_image$iso9660(&(0x7f0000000fc0), &(0x7f0000000000)='./file1\x00', 0x204440, &(0x7f0000000100)=ANY=[], 0x23, 0x7e2, &(0x7f0000001000)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0)
getdents(r0, 0x0, 0x54)

47.98068907s ago: executing program 5 (id=3435):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000100)=0x6, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000140)=[@in6={0xa, 0x4e22, 0x81, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x80d}], 0x1c)

47.980549213s ago: executing program 5 (id=3436):
rseq(&(0x7f0000000400), 0x20, 0x0, 0x0)
sync()

45.880751822s ago: executing program 8 (id=3458):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000000076000d0b0040000000000000030704000000000008000a"], 0x20}}, 0x0)

45.88060296s ago: executing program 8 (id=3459):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000140)={0x0, 0x63, &(0x7f0000000100)={&(0x7f0000001200)={0x20, 0x1418, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x0, 0x3e, 0x3}]}, 0x20}, 0x1, 0xf00, 0x0, 0x4884d}, 0x10)

45.88020385s ago: executing program 8 (id=3461):
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0)
bind$rose(r0, &(0x7f00000002c0)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x3, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null]}, 0x40)

45.810736931s ago: executing program 8 (id=3462):
arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0xce5)

45.810480636s ago: executing program 8 (id=3463):
syz_mount_image$bcachefs(&(0x7f00000058c0), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="7374725f686173683d6372633332632c6d657461646174615f636865636b73756d3d63726336342c636f6d7072657373696f6e3d6c7a342c7374725f68617b683d736970686173682c646174615f636865636b73756d3d6e6f6e652c6d657461646174615f636865636b73756d3d7878686173682c6e6f636f772c6d657461646174615f636865636b73756d3d6e6f6e652c0011ca296b6392dbd757750882e42bf8eea30abe7d150286b7c20c54646238fae76495b8a0f84cdec2ea62417a9dae8210305e9ef27890f565c66684062785bec9bc9d797a1900e0fe763795e5e2"], 0x5, 0x5945, &(0x7f0000032680)="$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")

45.550447086s ago: executing program 8 (id=3469):
syz_mount_image$minix(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000100)=ANY=[], 0xa, 0x234, &(0x7f0000000900)="$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")
sync()
truncate(&(0x7f0000000040)='./file1\x00', 0x6)

32.890885484s ago: executing program 38 (id=3436):
rseq(&(0x7f0000000400), 0x20, 0x0, 0x0)
sync()

30.513861728s ago: executing program 39 (id=3469):
syz_mount_image$minix(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000100)=ANY=[], 0xa, 0x234, &(0x7f0000000900)="$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")
sync()
truncate(&(0x7f0000000040)='./file1\x00', 0x6)

11.132427607s ago: executing program 2 (id=3816):
madvise(&(0x7f0000492000/0x2000)=nil, 0x2000, 0x12)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
mremap(&(0x7f000028a000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000862000/0x2000)=nil)

11.081750839s ago: executing program 2 (id=3820):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000080)={0x1, &(0x7f0000000200)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]})
fgetxattr(0xffffffffffffffff, 0x0, 0x0, 0x0)

10.99037065s ago: executing program 2 (id=3821):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000080)={'bridge0\x00', 0x0})
r1 = syz_pidfd_open(0x0, 0x0)
setns(r1, 0x20000)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
execve(0x0, &(0x7f0000019480), 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000000300)=""/102392, 0x18ff8)
r3 = socket(0x2, 0x2, 0x80001)
syz_open_dev$ndb(&(0x7f0000000100), 0x0, 0x656142)
ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r3)
r4 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$PIO_UNIMAP(r4, 0x4b67, &(0x7f0000000040)={0x3ffffffffffffe96, &(0x7f0000000000)=[{0x2000, 0x5}]})

9.557526956s ago: executing program 2 (id=3840):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f8ffffff000000008e000000850000007b000000180100006f68177600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fcffffff850000007100000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x40}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

9.557117123s ago: executing program 2 (id=3842):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/anycast6\x00')
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$tipc(r1, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0x64}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="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", 0x1000}, {&(0x7f0000000340)="b768eb20304f2fdc5a9694a4867840d93170ca1a86406f", 0xfffffec0}], 0x4, 0x0, 0x0, 0x8010}, 0x0)
r3 = dup2(r2, r1)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3)
setsockopt$sock_attach_bpf(r2, 0x1, 0x21, &(0x7f0000000040), 0x4)
sendmmsg(r1, &(0x7f0000004b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x5, 0x200040d1)
close_range(r0, 0xffffffffffffffff, 0x0)

9.416603499s ago: executing program 2 (id=3845):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x100004c, &(0x7f0000000100), 0x1, 0x553, &(0x7f0000001080)="$eJzs3d9rW1UcAPDvTdv91nUwhopIYQ9O5tK19ccEH+aj6HCg7zO0d2U0WUaTjrUO3B7ciy8yBBEH4ru++zj8B/wrBjoYMoo++BK56U2XrUmbddnSmc8Hbjkn9ybnfnPv9/TcnBsSwNCayP4UIl6OiG+SiIMRkeTrRiNfObG23er9q7PZkkSj8elfSXO7rN56rdbz9ueVlyLit68ijhc2tltbXlkolcvpYl6frFcuTdaWV05cqJTm0/n04vTMzKm3Z6bfe/edvsX6xtl/vv/k9oenvj66+t0vdw/dTOJ0HMjXtcfxBK61VyZiIn9PxuL0IxtO9aGxnSQZ9A6wLSN5no9F1gccjJE864H/vy8jogEMqUT+w5BqjQNa1/Z9ug5+btz7YO0CaGP8o2ufjcSe5rXRvtXkoSuj7Hp3vA/tZ238+uetm9kS/fscAmBL165HxMnR0Y39X5L3f9t3sodtHm1D/wfPzu1s/PNmp/FPYX38Ex3GP/s75O52bJ3/hbt9aKarbPz3fsfx7/qk1fhIXnuhOeYbS85fKKdZ3/ZiRByLsd1ZfbP5nFOrdxrd1rWP/7Ila781Fsz34+7o7oefM1eql54k5nb3rke80nH8m6wf/6TD8c/ej7M9tnEkvfVat3Vbx/90NX6KeL3j8X8wo5VsPj852TwfJltnxUZ/3zjye7f2Bx1/dvz3bR7/eNI+X1t7/DZ+3PNv2m3dQ/FH7+f/ruSzZnlX/tiVUr2+OBWxK/l44+PTD57bqre2z+I/dnTz/q/T+b83Ij7vMf4bh39+taf4B3T85x7r+D9+4c5HX/zQrf3e+r+3mqVj+SO99H+97uCTvHcAAAAAAACw0xQi4kAkheJ6uVAoFtfu7zgc+wrlaq1+/Hx16eJcNL8rOx5jhdZM98G2+yGm8vthW/XpR+ozEXEoIr4d2dusF2er5blBBw8AAAAAAAAAAAAAAAAAAAA7xP4u3//P/DEy6L0Dnjo/+Q3Da8v878cvPQE7kv//MLzkPwwv+Q/DS/7D8JL/MLzkPwwv+Q/DS/4DAAAAAAAAAAAAAAAAAAAAAAAAAABAX509cyZbGqv3r85m9bnLy0sL1csn5tLaQrGyNFucrS5eKs5Xq/PltDhbrWz1euVq9dLUdCxdmayntfpkbXnlXKW6dLF+7kKlNJ+eS8eeSVQAAAAAAAAAAAAAAAAAAADwfKktryyUyuV0UUFhW4XRnbEbCn0uDLpnAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAH/gsAAP//6AY3sQ==")
r0 = syz_open_procfs(0x0, 0x0)
lseek(r0, 0x10001, 0x0)
setxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f0000002700)=ANY=[], 0x1015, 0x0)
sync()
lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000440)=@known='trusted.overlay.upper\x00', 0x0, 0x4000)

2.972780554s ago: executing program 9 (id=3923):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(md5)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="c38f9ea820612208fa07efedcd644dcd1b6f007c4fd3caa0194f9e5232a7d4a8cb15ef282b38714f22b7610fbe9829c65ab43e64f3ed55508cfb17e543a6cbbe6d", 0x41)

2.972633283s ago: executing program 9 (id=3924):
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0)
mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000)
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r2, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x334e8b})
ioctl$IOMMU_IOAS_UNMAP$ALL(r0, 0x3b86, &(0x7f0000000080)={0x18, r1})

2.882474271s ago: executing program 9 (id=3925):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'ip6tnl0\x00', 0x0, 0x29, 0x9, 0x2, 0x2, 0x2, @local, @loopback, 0x8701, 0x1, 0x80, 0x2}})

2.882281138s ago: executing program 9 (id=3926):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="660a0000070000006111750000000000850000001d00000095"], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x41000}, 0x94)

2.812824399s ago: executing program 9 (id=3928):
r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f00000001c0)={0x40}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000180)={0x20, 0x10}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, 0x0, 0x0, 0x0})

1.185387608s ago: executing program 0 (id=3945):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x2, 0x1, 0xcf}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x20800, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)

1.122823642s ago: executing program 0 (id=3946):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8)
r4 = accept(r3, 0x0, 0x0)
sendmmsg$alg(r4, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)="564004c6852da7a299e4c397614090d1a6e12edf1767f157", 0xfcdc}], 0x1, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
recvmsg(r4, &(0x7f000000b680)={0x0, 0x10400004, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x4}, {&(0x7f000000b500)=""/153, 0xfb59}], 0x2}, 0x0)

200.734115ms ago: executing program 0 (id=3947):
r0 = socket$kcm(0x2, 0xa, 0x2)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x51}})

195.09086ms ago: executing program 9 (id=3948):
r0 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x800801, &(0x7f0000000100)={[{@noautodefrag}]}, 0x0, 0x559e, &(0x7f000000ac40)="$eJzs3X9sVeX9B/BzWwoN+C39jhUYfxAgBoMkyJYtjqB4MQa24eKlgsKcCEQlBivYRDcYqUWSZcaghU4EF5GQaDJjscM/FMywy7CMZfzY5hZjs4JSaZZsAzVrHDG69N77XO49l9tembNOXy/SnvPcz3me+9yT88d9X/qcGwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAURUcSc9+d0f3i0ZE1X77/Hz+e+OjGn4zfvX/roVvu23T/gjMjbto5a1nf+mlN8zdsbDjS/PS+ObdGUSLdL5Htf9u136q/88bbvlsdBly+MLOtrS31lJmuJzON4QUP9vcr/FkRRVFVbIDK7PbV7E5FwQC53cbiAQf0Tuui6O7J8ya1dT01bklyYU/xS6df9VBPYKhkr6ue89dSMv27InZErp136SUKLtFM//gF96m8CADgY5mZSm9yb0ezb3Fz7eZ4PdZOxtotsXZ4h9CS37gYmXGHl5rnpHh9iOaZzESFESXnGatnz3+unYr3j7VjUeNjzLPw0GykqS41z7Wx+lDNEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCzZOzxo2tWtD2y575fdtQceff9OVc+8KWOw22LT4y8eunKHWum/HTWsr7105rmb9jYcKT56X1zbo2i2nS/RKZ74kTL5b9NjZ3fvXfcG427n6vpq8yOG7bD8g6OXg87s0ZH0cq8Sk8Y9q81UZQqLKSb0Y7iwl3pnW+HAgAAAJ8nX0n/rsi1M3GwqqCdSKfJRPpfkAmL77Quiu6ePG9SW9dT45YkF/Zc/HipEuMlLzherl17/ieRF4xD/I2Pd74eDm0sGmdg8RHjef7SMWPefmty/eSvT5v7xA3PjOru+r8nZ2xJ/bGu5oUrru+tf/a6ovxfO3D+D2dO/gcAAOA/If/HxxnYYPn/jqVTt7z+i2Grft3a8MTB+h1/bv3OMzsXneq54Ud9L09N3v7o1UX5f1LBUxbl/zDjkP8roovL/wAAAPBZ9t/O/8micQY2WP5vONM3+wcHX6vr+PucxXt+9dAVi8+e/tv8U7t3DV9zR8v6uoeuLMr/M8vL/8Pypx0e/F2Y8OrRUTSz/JMKAAAAFAj/737+o4WQ1zOfHMTz+rX/vKp5380ffPMbD97zpzff/s2xA7MnrdteN/PgyzfVf1j5ve3dRfk/WV7+r/p0Xi4AAABQhuePrpw773jPucfPvtB18vDu3pMznjyzrqnvdOslLatXbTr2WlH+T5WX/0cMzcsBAAAALuDeO59bsfnVl/oe2H/X2Ck9FVc1XpK4ZduOqU0TPuq8tPfy7VuL8v/y8vL/yOw2u/Ih06kz/BVC6+goqu7fWZspHIparskVAAAAgE9IyOlbP1ixbOzOsb3jj59+rObQG4dn/2Vt55yN13RXdW/uXNZ4WdH9AkJiL3X//3Cng7D+v+D+f0Xr//MKmbv+zXZjAAAAAL6Iitfzh9vjZ765oNT375e7/n9J3cQTiba33lv11XMHzo1ZsP/7129aV9/be8+El37/wz9M/6i6KP83l5f/K/O3n+T3/wEAAMBF+F/7/r+lReMMbLD7/zdV9DWsWrd3+uota7csTCw7UH3qwdV731+w5l9Tb36+qea6A0X5v6W8/B+2o/JfXkc4P5tGR9H4/p3s3QR/Hqa7OlZor8orZE58rMeNoUe20D4ir5C2Ntbja6OjaHL/TnOs8P+h0BIrnK3JFnbFCsdCIXs95Ap7YoWOcKVtq8lON154MRSyCyzawwqKUbklEbEe75Xq0V+4YI+u3JMDAAB8oYTwnM2yVYXNKB5l2xODHTBysAMqBjugcrADhsUOiB9Y6vFoeWEhPH575yMbNjVMSb7y8NzHfvbms40T9j1+WV3v5g9f2XbvxJ3TW6YW5f9d5eX/cCqGZzal1v9HYf1/9nsNc+v/l4dCbazQHgqp+B0DUuE5MmH34fActalsj7PjcwUAAAD4XAufC1QO8TwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/s3evcdJVd0JAj/d9INumqaNE9GMk3TUgGakaWwNw+AoaoxGRZpZddxkNBBoEGmE8FgFURtQZxziZ3ztrJnoCAoiu+qHGFeDwUhcxIw6iWLiA/Cxjq7r+h6VGM2E/XTfOkXVrS67EFDa+X7/6DpVv/O89eg69946FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/xjuPfjlk4YunP0PHzace8nqqqmL/kfH6Mv+cNW3vvjUPy5b9G9h/i9GnLll3kEXHjd/wbR/6Vi++ogzQmjtKleWFC977oqvPtS613HP3jFw48wbb63fUpWpNxMP/Tr/lGfuXBxbfbF/CHeXhVCRDgypSwKVmft1sb5960LYI2wLZEu01SYl0g2HB2pCWBK2BbJVra4JoS4ncMqG+++7vDNxTU0IXwkhVKfbeKY6aaMmHRhUlQRq04HpFUngt1sT2cBPypMA7LD4Zsi+6Fe15mdo6L5ckddf5U7r2KcrPbw+MdFQPN/rR+3iTuWoSj/QukNPW0F17BIFb4+13m294N1WsJ2v8LTlfpHKfEPZui1UHcontk0aP6d9dnykPDQ19SlW0y56np9+e/6E7Un3mtdh7EDDTnkdXvrYiun9lo2+9OrNvxqz4ayaA3a0m0/lbNLc9K5WHTKvuV7zPEajfJ70grdfwbekRl+6Qghbzz17xtfnTDz7iD63PLnu1QcfrNty9pwFvzhz4nmLLj55w7/Pf6lg/t/w0fP/+HKOt+V5uWOrH9Ync/P4SF1MvFmfzM0BAACg1+gNe01Xnv/6X73+/bWtMxed/u23Dj73w71afz3i/gFVB7yxrqn1/I2ff6Vg/t9Y2vH/eMi/Lne0a0MY1ZVYNCCEvbseTwIrY3e+OyCEL3elWvMDR6UCa0PYpytxULaqVIm+sURjKvByfSYwKhVYHwOtqcDyGLgiFbg4BlalAhNiYG0qcHQMhCn54/hqfWYcJQdqYmBcshFXxbMQ3qmPraW21aZsVQAAADtJZnZYmX8351yHHc0Qp5eranrKEM/ALpqhOlVDegabnVYVraGipxrKe6ohO+6Ojx5+Qc1lPdVccBpGWX6GG9f85X2LXjzsC2P3mvj5xUMvmPKz8eGst++uerx5yYtv7XvEzesK5v/NHz3/r+6mI2UFx/9DGNv1N+Yuz0Tas/FxrXkZAAAAgB1w0R//xR61Lw85oGHT+2X3zl/7xKMrfrl5j1NOf3/c8a//8PCaxnsL5v+jSjv/P+4T6ZOTOTwSd0NMHRBCc34gqXZkYSA56t0vEwAAAIDeIHs8PnssfErmNjlFOz2fLszfup3544H/Ud3m//09/7P2jq3/+mLZBd89d0TNgKX/9GrHhBNOPvqW47/1zj4VB/yyvGD+31ra+f+1+bdJJ9bHXlw9IIS+OYEHYy87A10aY+D5I/MDmfGvjxtgcawqc2JCtqrFscS4GGhOBZYUK/FotsTe+YHMk5VtfFF2HFMyJXICAAAA8ImLuwPicfl4/n/LGSNO++vvzfrbha88eN7qCy75q+Ed80eedP/THzbMvXJp2PTmEQXz/3Hbd/5/1zy44PT+9n4hDK0IoU/6hwGP1CYLA8ZAXVkmcW9tUlefdFULa0MY2TmwdFUvZNb/r0ivMfh4TVJVDOy93y1vD+pMLKsJYWhu4IlvLz2sMzEnFcg2flpNCF/qHG268bv6Jo1Xphu/tm8IX8wJZKua0DeEzsaq0lX9r+rMdQzSVa2qDmHPnEC2quHVIcwNAPRW8X/pxNwHZ82dN3V8e3vbzF2YiDvxa8KkKe1tTROmt0+sLtKniak+561jtKBwTKVe+mZTZo2ixSsnV5aSzv5QsDm3rcyO/IIzBzP345ehyq5xHlKZd7clPeQD9y9sIuR8lSo25PJdPOTa3Eq2PYkF9cf8VaFf6DtnVtvMpvPGz549c1jyt9TshyR/43GmZFsNS2+r2u76VsLLo+hyWSkfd1sNyq1k6OxpM4bOmjtvyJRp4ye3TW47p+XQP2sZMXz410YM7RxUc/K3h5EO6q7m1Ei3Li1xWDtxpF+oyKnkk/jQkJCQ6G2J/f7L5odH77n+nOt/9tqPz+/3zdPu3fvImT889KqpD1Xve/ji24ccWDD/n/HR8//4qRM/+DPrMxQ7/t8QD/Mnj287zD8uBpaUevy/odjR/OyJAY2pQEcMdDjMDwAAwGdD3B0Z92bGndKbb1m/buOSlrk/aHin5dY17Utvuum+U39y58ATvjQ47LXhuhM+VzD/7yjt9/87af3/7NL1JxRb5v+gWKK52Pr/6WX+s+v/dxRb/z+9zH92/f8ln8L6/3OygdQmecf6/wAAwGfBJ7f+f4/L+6cvEFCQocfl/dMXCCjI0OMy/qVeIGC71/9f8+Bff6Wq35g7/qTlN/WXvPZ39xzWeuS6zTP/5Etb10+877qxt6wpmP9fUdr838L9AAAAsPv4z5ddU3H02Xff0bJu6sZxbw5+98m3lgzq80HF0Q+3j3xh4Bu3nlcw/19S2vz/k1//LxQ7/7+xWKC12MKA1v8DAACglyq2/t89Q1sa/zCm/x+eHvab5Q/ePPqnj/z898v3+/mJPyvfZ8Gxz8+8bFLB/H9VafP/eNpFeV7u2JsP65M17UJ6Tbs367M/GQAAAIDeoTw0NVWWmDdvYdSjPn6bT2eWAv2odK7vvXLt2ZtfmH7c46ev+7uaEwbvOWHaBasa/2b4gXd+ftQley7ddGrB/H9tafP/vN9lXPrYiun9lo2+9MOrN/9qzIazag7YdvwfAAAA2HVK3S8BAAAAAAAAAAAAAAB8+s7tWHzhI8uOfe+bt//F/kcseXXwbXcd+Lsh/V664qoHJq1648zJXy/4/X8Y21Wu2O//43X/4u8L/igvd2y15/X/MvdPOfH2uV1LFj5SH8L+uYGpC6fuETLX5h+cG7jvjIMGdiYWpkusefbolzoT30kHjh/yuS2dicNTgXFxkcR90oF4VcUt/VOBuLzi4+lA3B6r0oGqTOCy/sk4ytLb6pW6ZFuVpbfVxroQBuQEstvq7rqkjbL0AK9JBbID/F46EAd4ciZQnu7V7f2SXsVAXSx6Q7+kVwAA7Lbit8DKMGlKe1tz/Aofb79QkX8b5S1ZtqCw2rISm9+UWZps8crJlaWk+6S/i2671nhlqO4cwrCCr6u5Wcq6Rrlzaulh0/1RkSH3tNpbeZFyadu76aqKj6gmGVHThOntEyt7HHhLz1kOqegxy7CCyU5ulvKuTVpCLSX0pYQRlbhtSuhyvF8empr6pHL9eQw2hDw9vSJK/b1+7jp/xV4FuXluO/TKt758zE+f++CfP/9E/2+cVnP7rO+/e+KvX7//wEOOuG5C05otBfP/htLm/9W549qSuRhAR7yy3sgBIYwrcUQAAADw2XfbRbfecfr09a9MWlvx5GOPTS0fc3rl1vl3zp93ycZ7Fx9/2cErdjR+2Fm//f5vBu//b89e9dJPR+7zwA03/58nD3v8z3//8I8eeqduZZ+x7xXM/xtLm//HPViZQ8HJ3o618fr/iwaE0HVp/YYksDIO97sDQvhyV6o1lkguqH9CLNGcBFbGHSYHxRLjWvOr6hsDq1KBl+szgbWpwPoYyOyluCVkduVcWR/CYV2psfklZsQSDanAmBhoTAWaYqA5FegfA6NSgdf6ZwKtqcDDMRCm5G+rH/fPbCsAAIDtkZlnVebfDel53qqKnjKU9ZShtqcM5T1lqO4pQ7FRxPt3xAyVqZNXynIyVaZrrUnVUpAhXgx/u/tVkCE8mp8zXbCg6Xj+QfZ8g7L8DFf+4NlT1w+e/tDqzcd8beBt/zhkz4Obp9e9t+CGp3475pzrnv/TQQXz/+bS5v+1+bdJ6+vj/H/b9f+SwIOxe1fHU8cbY+D5I/MDmR0D6+Nkd3G2qtZMicykfXEsMSoGGlOBGTEwKhUYNzYTWDIwP5CZaWcbX5RtfEqmRE4AAAAAPnFxB0HcTRPn/zce9YOr3x8wccuyeTPvH9vyxMmjv3H1XT+6d/9ld767YvCAce99p2D+P6q0+X9sr19uYxfH3rzYP4S7y7b1JhsYUpcE4n6Muvjz+H3rQtgjZwdHtkRbbVKiKtVweKAm+YV6Vbqq1TXJGgPx/ikb7r/v8s7ENTUhfCVn70u2jWeqkzZq0oFBVUmgNh2YXpEE4p6fbOAn5UkAdlh2r2B8QWVOdclq6L5ckdffZ+WaoOnhFewD7SZfd7+52lWq0w9k9qlmbd/TVlAdu0TB22Otd1tvfLc1eLflfpHKfEPZui1UHcontk0aP6d9dnwk95esBXbR85z7K9VS0jvhddjx8Xvbs+p0B5pTHx/N3Zfr/nVYFqu79LEV0/stG33p1Zt/NWbDWTUHlNyNIuIPhX+05X9XPpWzeXe16pB5zfW6z5NWnye98d9Ao6cthHDZ9cfsu+TdX+/33A3Pnbqu7Maxr/7lrHs2Lf+bysNHrXv/yaGjLy+Y/7eWNv+vSN12+V3cmLMGhHBgzsZ9JG7+YwYkn4M5geRTcs/CQHLI/V/ri35yAgAAwM6W3d2R3V8wJXObnBCenicX5m/dzvxxf8WobvOX2u9j121cedLQN6474G8vOPGNv7/28Kceuv6ysnXL//vYD1avuXzxe08UzP/HffT8v2+qm47/O/7PLuL4f7d2913RfdMPdOzQruiC6tglHP/v1u7+bnP8v1uO/zv+3x3H/3vg+H+3dvenreBb0gxfujonwdff+fPfTbzpg7mN+x180lPPHDrxun+6quXuu0555b+de9601761uWD+P6O0+b/1/7pftC+7/t+4Yuv/zSi2/l+H9f8AAIBdqshCc+l5XsHqfQUZ0qv3FWTocYHAHpcYtP7fdq//t3Dkv1904Q+fb7n2nTvHXb5m07Fnvvr0utXPzFpx3Lnnv9V6112tBfP/jtLm//Hl0C+39d6y/l/j2CJVXREDMywMCAAAwO6o2A4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPl2HnvbO+5d8/R/aBv1ixc1/f+v/+7/P1q594JvfuGn4L6f86RllazZcM+LMLfMOuvC4+Qum/UvH8tVHnBHClK5yZUnxsueu+OpDrXsd9+wdAzfOvPHW+i3VmXorM7d/nJc7tvphfQhLch6pi4k36zvvbAuccuLtcys6E4/Uh7B/bmDqwql7dCaW14cwODdw3xkHDexMLEyXWPPs0S91Jr6TDhw/5HNbOhOHZwJl6e5e1z/pblm6u5f3D2FATiDb3bP751eVbeO4TKA83caKuqSNGKiLRa+tS9qIgfZYYkrfEIZWhNAnXdU/VydV9UlXdU91UlWfdFUXVYcwMoRQka7quaqkqor0yB+tSqqKgb33u+XtQZ2JpVUhDM0NPPHtpYd1JmamAtnG/1NVCF/qfMmkG/9xZdJ4Zbrx/1oZwhdDCFXpEu9VJCWq0iVeqAhhz5zAto1YEcLcwGdD/PSZmPvgrLnzpo5vb2+buQsTVZm2asKkKe1tTROmt0+sTvWpmLKc9NYFH3/sm96eP6HzdvHKyZWlpCsy5Sq7unxIZd7dlt2997FftbmVbHs+CuqP+atCv9B3zqy2mU3njZ89e+aw5G+p2Q9J/vbJRJNtNay3bKtBuZUMnT1txtBZc+cNmTJt/OS2yW3ntBz6Zy0jhg//2oihnYNqTv7ujJEu/eRH+oWKnEo+ife/hIREb0uU5326Ne/un+MFX/S3dbQyVHd9QBdMK3KzlHWNcmcM+qiPOeKP8zWlxxENK5g4FGQ5pOcsLQWTiW1ZapIsXV/rCiaHuTWVd23SeL88NDX1KbYdGvLv5m7e13dg8z6d2XSlpgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+P/swIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCwAAAAAIMzfOoyeDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4FAAA//8fSxmR")
ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000001640)={{}, 0x0, 0x8, @unused=[0x10, 0xffffffff92b1a557, 0x100000000101, 0x4], @subvolid=0x8000000001})

82.22472ms ago: executing program 0 (id=3949):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r0, &(0x7f0000000140)={@val={0x8, 0x800}, @val={0x0, 0x4, 0x6, 0x8, 0x0, 0xffff}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1e, 0x78, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010101, @local}, {0x4f20, 0x4e22, 0x64, 0x0, @wg=@response={0x2, 0x2, 0x4, "25081b84b4d1329004f5d610c6a3c5f82f8d46df0c868e4196428a7ba9fe24fd", "f4fd4f74929fbf0d72507c06f0baeb95", {"dd17b88ffce84ac2e1b19ff44df1b75a", "eab7f3207f48ea1eedf7a650eaddae5f"}}}}}, 0x86)

336.751µs ago: executing program 0 (id=3950):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r2=>0x0})
sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x1c, r1, 0x305, 0x0, 0x0, {0x7}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x20000000)

0s ago: executing program 0 (id=3951):
r0 = syz_open_dev$video(&(0x7f0000000000), 0x75, 0x100)
ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000040)={0xfdfd, 0x34343452, 0x140, 0xb4, 0x3, @stepwise={{0x1ff, 0x6}, {0x3, 0x200}, {0x7ff, 0x81}}})

kernel console output (not intermixed with test programs):

sing dummy_hcd
[  253.882868][    T9] usb 8-1: Using ep0 maxpacket: 16
[  253.889009][    T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  253.893724][    T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  253.897703][    T9] usb 8-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00
[  253.901517][    T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  253.907877][    T9] usb 8-1: config 0 descriptor??
[  254.042889][ T8871] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  254.192971][ T8871] usb 6-1: Using ep0 maxpacket: 32
[  254.198595][ T8871] usb 6-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 140, changing to 11
[  254.202267][ T8871] usb 6-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  254.207747][ T8871] usb 6-1: config 0 interface 0 has no altsetting 0
[  254.210092][ T8871] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1b09, bcdDevice= 0.00
[  254.213932][ T8871] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  254.221498][ T8871] usb 6-1: config 0 descriptor??
[  254.327449][    T9] hid-picolcd 0003:04D8:F002.000F: unbalanced collection at end of report description
[  254.332439][    T9] hid-picolcd 0003:04D8:F002.000F: device report parse failed
[  254.336445][    T9] hid-picolcd 0003:04D8:F002.000F: probe with driver hid-picolcd failed with error -22
[  254.525033][   T51] usb 8-1: USB disconnect, device number 3
[  254.644722][ T8871] corsair 0003:1B1C:1B09.0010: hidraw0: USB HID v0.02 Device [HID 1b1c:1b09] on usb-dummy_hcd.5-1/input0
[  254.838267][   T51] usb 6-1: USB disconnect, device number 12
[  255.932290][T12171] netlink: 4388 bytes leftover after parsing attributes in process `syz.5.2412'.
[  255.971681][T12173] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2413'.
[  255.979168][T12173] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[  255.982143][T12173] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  256.035025][T12175] loop5: detected capacity change from 0 to 512
[  256.045188][T12175] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  256.067159][T12175] EXT4-fs (loop5): 1 truncate cleaned up
[  256.070684][T12175] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  256.101750][T10140] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  257.033440][T12194] loop5: detected capacity change from 0 to 4096
[  257.129939][ T2290] IPVS: starting estimator thread 0...
[  257.188602][ T8871] libceph: connect (1)[c::]:6789 error -97
[  257.190953][ T8871] libceph: mon0 (1)[c::]:6789 connect error
[  257.200585][ T8871] libceph: connect (1)[c::]:6789 error -97
[  257.203159][ T8871] libceph: mon0 (1)[c::]:6789 connect error
[  257.355857][T12202] IPVS: using max 81 ests per chain, 194400 per kthread
[  257.651507][ T8871] libceph: connect (1)[c::]:6789 error -97
[  257.654271][ T8871] libceph: mon0 (1)[c::]:6789 connect error
[  257.656717][ T1119] block nbd1: Possible stuck request ffff8880213d8000: control (read@0,1024B). Runtime 90 seconds
[  257.661024][ T1119] block nbd1: Possible stuck request ffff8880213d8200: control (read@1024,1024B). Runtime 90 seconds
[  257.665476][ T1119] block nbd1: Possible stuck request ffff8880213d8400: control (read@2048,1024B). Runtime 90 seconds
[  257.669541][ T1119] block nbd1: Possible stuck request ffff8880213d8600: control (read@3072,1024B). Runtime 90 seconds
[  257.686779][T12208] ceph: No mds server is up or the cluster is laggy
[  257.775142][T12223] loop5: detected capacity change from 0 to 256
[  257.779338][T12223] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  257.788932][T12223] exFAT-fs (loop5): Medium has reported failures. Some data may be lost.
[  257.800076][T12223] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  258.464400][T12247] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2443'.
[  259.283406][   T51] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  259.457386][   T51] usb 6-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac
[  259.461061][   T51] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  259.472486][   T51] usb 6-1: Product: syz
[  259.476840][   T51] usb 6-1: Manufacturer: syz
[  259.478758][   T51] usb 6-1: SerialNumber: syz
[  259.483124][   T51] usb 6-1: config 0 descriptor??
[  259.495358][   T51] gspca_main: sunplus-2.14.0 probing 055f:c230
[  259.705472][   T51] gspca_sunplus: reg_r err -71
[  259.708539][   T51] sunplus 6-1:0.0: probe with driver sunplus failed with error -71
[  259.723632][   T51] usb 6-1: USB disconnect, device number 13
[  259.891261][T12279] loop7: detected capacity change from 0 to 32768
[  259.900445][T12279] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.2457 (12279)
[  259.919613][T12279] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  259.924925][T12279] BTRFS info (device loop7): using crc32c (crc32c-lib) checksum algorithm
[  259.928617][T12279] BTRFS error (device loop7): ignoredatacsums must be used with ro mount option
[  259.933630][T12279] BTRFS error (device loop7): open_ctree failed: -22
[  260.058342][T12288] netlink: 'syz.7.2461': attribute type 21 has an invalid length.
[  260.062422][T12288] netlink: 132 bytes leftover after parsing attributes in process `syz.7.2461'.
[  260.325738][T12292] loop7: detected capacity change from 0 to 32768
[  260.329771][T12292] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.2463 (12292)
[  260.351299][T12292] BTRFS info (device loop7): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  260.354868][T12292] BTRFS info (device loop7): using sha256 (sha256-lib) checksum algorithm
[  260.415095][   T52] BTRFS warning (device loop7): checksum verify failed on logical 5292032 mirror 1 wanted 0xd5bc16bf7502c3940107ef92895f3d2e7f4c766f4585e38c0ad39b0a5d2e0772 found 0xe411c7a0efa54fabafc8c0ad0545277d3e683b146ef1a47775d9ca9aa10535d4 level 0
[  260.434268][T12292] BTRFS warning (device loop7): failed to read root (objectid=9): -5
[  260.502411][T12292] BTRFS error (device loop7): open_ctree failed: -5
[  260.602813][T12323] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2471'.
[  260.722390][T12330] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2474'.
[  261.059107][T12360] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave
[  261.066692][T12360] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  261.219550][T12374] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2496'.
[  261.224938][T12374] netlink: 'syz.0.2496': attribute type 3 has an invalid length.
[  261.393383][T12381] IPv6: NLM_F_REPLACE set, but no existing node found!
[  262.576625][T12411] loop5: detected capacity change from 0 to 2048
[  262.601609][T12400] loop7: detected capacity change from 0 to 32768
[  262.610537][T12411] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  262.617049][T12411] ext4 filesystem being mounted at /234/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  262.633018][T12400] XFS (loop7): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  262.647940][T12400] XFS (loop7): Ending clean mount
[  262.657133][T12400] XFS (loop7): Quotacheck needed: Please wait.
[  262.657459][T12411] overlayfs: conflicting lowerdir path
[  262.690088][T12400] XFS (loop7): Quotacheck: Done.
[  262.698088][T10140] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  262.817806][T11569] XFS (loop7): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  262.933316][T12428] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2516'.
[  263.063618][    T9] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  263.212818][    T9] usb 6-1: Using ep0 maxpacket: 8
[  263.219567][    T9] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 7
[  263.229849][    T9] usb 6-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[  263.233837][    T9] usb 6-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[  263.238338][    T9] usb 6-1: Product: syz
[  263.240225][    T9] usb 6-1: Manufacturer: syz
[  263.242280][    T9] usb 6-1: SerialNumber: syz
[  263.457660][    T9] usb 6-1: Handspring Visor / Palm OS: No valid connect info available
[  263.461431][    T9] usb 6-1: Handspring Visor / Palm OS: port 0, is for Generic use
[  263.466836][    T9] usb 6-1: Handspring Visor / Palm OS: port 0, is for Generic use
[  263.470096][    T9] usb 6-1: Handspring Visor / Palm OS: Number of ports: 2
[  263.664960][    T9] visor 6-1:1.0: Handspring Visor / Palm OS converter detected
[  263.671869][    T9] usb 6-1: Handspring Visor / Palm OS converter now attached to ttyUSB0
[  263.677993][    T9] usb 6-1: Handspring Visor / Palm OS converter now attached to ttyUSB1
[  263.867965][ T2290] usb 6-1: USB disconnect, device number 14
[  263.874119][ T2290] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0
[  263.884652][ T2290] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1
[  263.889419][ T2290] visor 6-1:1.0: device disconnected
[  263.894726][   T33] audit: type=1326 audit(2000000190.550:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12435 comm="syz.7.2519" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd28858ebe9 code=0x7fc00000
[  264.087368][T12451] loop7: detected capacity change from 0 to 1024
[  264.161431][T12451] hfsplus: xattr search failed
[  264.194990][T11569] hfsplus: node 4:3 still has 1 user(s)!
[  264.534995][T12463] loop7: detected capacity change from 0 to 32768
[  264.550035][T12479] loop5: detected capacity change from 0 to 2048
[  264.554098][T12463] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.2530 (12463)
[  264.567158][T12463] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  264.571376][T12463] BTRFS info (device loop7): using crc32c (crc32c-lib) checksum algorithm
[  264.589271][T12479] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024)
[  264.624589][T12487] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  264.697674][T12463] BTRFS info (device loop7): setting nodatasum
[  264.700388][T12463] BTRFS info (device loop7): enabling free space tree
[  264.721952][T12463] BTRFS info (device loop7): use zlib compression, level 3
[  264.744602][T12463] BTRFS info (device loop7): max_inline set to 0
[  264.751696][T12504] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2542'.
[  264.876731][T11569] BTRFS info (device loop7): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  265.500774][T12539] netlink: 'syz.5.2557': attribute type 1 has an invalid length.
[  265.506705][T12539] netlink: 228 bytes leftover after parsing attributes in process `syz.5.2557'.
[  265.562884][   T33] audit: type=1326 audit(2000000192.210:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12540 comm="syz.0.2558" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90af98ebe9 code=0x7ffc0000
[  265.591468][   T33] audit: type=1326 audit(2000000192.210:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12540 comm="syz.0.2558" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90af98ebe9 code=0x7ffc0000
[  265.612864][   T33] audit: type=1326 audit(2000000192.210:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12540 comm="syz.0.2558" exe="/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f90af98ebe9 code=0x7ffc0000
[  265.647530][   T33] audit: type=1326 audit(2000000192.210:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12540 comm="" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90af98ebe9 code=0x7ffc0000
[  265.661880][   T33] audit: type=1326 audit(2000000192.210:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12540 comm="" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90af98ebe9 code=0x7ffc0000
[  265.675248][   T33] audit: type=1326 audit(2000000192.220:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12540 comm="" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f90af98ebe9 code=0x7ffc0000
[  265.684861][   T33] audit: type=1326 audit(2000000192.220:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12540 comm="" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90af98ebe9 code=0x7ffc0000
[  265.696306][   T33] audit: type=1326 audit(2000000192.220:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12540 comm="" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90af98ebe9 code=0x7ffc0000
[  265.788246][   T33] audit: type=1326 audit(2000000192.440:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12564 comm="syz.0.2570" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90af98ebe9 code=0x7ffc0000
[  266.030265][T12581] pimreg: tun_chr_ioctl cmd 1074025677
[  266.033010][T12581] pimreg: linktype set to 803
[  266.157704][T12591] netlink: 260 bytes leftover after parsing attributes in process `syz.5.2581'.
[  267.011338][T12604] loop7: detected capacity change from 0 to 32768
[  267.091147][T12604] bcachefs (loop7): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,erasure_code,degraded=yes,no_splitbrain_check,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,nocow
[  267.091168][T12604]   allowing incompatible features above 0.0: (unknown version)
[  267.091175][T12604]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  267.114524][T12604] bcachefs (loop7): Using encoding defined by superblock: utf8-12.1.0
[  267.117789][T12604] bcachefs (loop7): recovering from clean shutdown, journal seq 10
[  267.121197][T12604] bcachefs (loop7): Version upgrade required:
[  267.121197][T12604] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[  267.121197][T12604] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive
[  267.121197][T12604]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance
[  267.158447][T12604] bcachefs (loop7): dropping and reconstructing all alloc info
[  267.178161][T12604] bcachefs (loop7): accounting_read... done
[  267.184485][T12604] bcachefs (loop7): alloc_read... done
[  267.187449][T12604] bcachefs (loop7): snapshots_read... done
[  267.190731][T12604] bcachefs (loop7): done starting filesystem
[  267.267802][T11569] bcachefs (loop7): shutting down
[  267.298054][T11569] bcachefs (loop7): shutdown complete
[  267.999158][T12634] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  268.437664][T12644] loop5: detected capacity change from 0 to 128
[  269.432927][T12683] loop5: detected capacity change from 0 to 16
[  269.450686][T12683] erofs (device loop5): rootino(nid 36) is not a directory(i_mode 25144)
[  269.480729][T12675] loop7: detected capacity change from 0 to 32768
[  269.532956][T12685] bridge5: entered promiscuous mode
[  269.868031][T12703] ptrace attach of "/syz-executor exec"[10140] was attempted by "\x09                                        0                                           "[12703]
[  270.154584][T12705] loop5: detected capacity change from 0 to 32768
[  270.161590][T12705] ocfs2: Slot 0 on device (7,5) was already allocated to this node!
[  270.184731][T12705] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  270.194863][ T8870] (kworker/u8:5,8870,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=312, inode=13845347915746889, rec_len=25793, name_len=214
[  270.227142][T10140] ocfs2: Unmounting device (7,5) on (node local)
[  270.303597][T12719] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2634'.
[  270.342677][ T2290] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  270.396621][T12725] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2637'.
[  270.403189][T12727] dvmrp8: entered allmulticast mode
[  270.416517][T12727] dvmrp8: left allmulticast mode
[  270.432282][T12729] netlink: 136784 bytes leftover after parsing attributes in process `syz.5.2638'.
[  270.435691][T12729] netlink: zone id is out of range
[  270.437713][T12729] netlink: zone id is out of range
[  270.439597][T12729] netlink: zone id is out of range
[  270.441486][T12729] netlink: zone id is out of range
[  270.443181][T12729] netlink: zone id is out of range
[  270.444919][T12729] netlink: zone id is out of range
[  270.446644][T12729] netlink: zone id is out of range
[  270.448507][T12729] netlink: zone id is out of range
[  270.450209][T12729] netlink: zone id is out of range
[  270.451959][T12729] netlink: zone id is out of range
[  270.494150][ T2290] usb 8-1: Using ep0 maxpacket: 32
[  270.499891][ T2290] usb 8-1: config 0 has an invalid interface number: 1 but max is 0
[  270.507138][ T2290] usb 8-1: config 0 has no interface number 0
[  270.509395][ T2290] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  270.519501][ T2290] usb 8-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  270.523602][ T2290] usb 8-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00
[  270.526818][ T2290] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  270.538309][ T2290] usb 8-1: config 0 descriptor??
[  271.161906][ T2290] input: HID 28bd:0094 as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.1/0003:28BD:0094.0011/input/input16
[  271.243811][ T2290] uclogic 0003:28BD:0094.0011: input,hidraw0: USB HID v0.00 Device [HID 28bd:0094] on usb-dummy_hcd.7-1/input1
[  271.359073][T12760] loop5: detected capacity change from 0 to 32768
[  271.366688][ T2290] usb 8-1: USB disconnect, device number 4
[  271.389036][T12760] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  271.404537][ T8870] (kworker/u8:5,8870,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=312, inode=13845347915746889, rec_len=25793, name_len=214
[  271.421530][T10140] (syz-executor,10140,0):ocfs2_inode_is_valid_to_delete:948 ERROR: Skipping delete of system file 70
[  271.428631][T10140] (syz-executor,10140,0):ocfs2_inode_is_valid_to_delete:948 ERROR: Skipping delete of system file 72
[  271.438855][T10140] ocfs2: Unmounting device (7,5) on (node local)
[  271.491013][T12782] netlink: 'syz.0.2662': attribute type 2 has an invalid length.
[  271.494604][T12782] netlink: 'syz.0.2662': attribute type 8 has an invalid length.
[  271.497479][T12782] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2662'.
[  271.547600][T12786] netlink: 'syz.5.2661': attribute type 32 has an invalid length.
[  271.550352][T12786] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2661'.
[  271.553880][T12786] (unnamed net_device) (uninitialized): Setting coupled_control to off (0)
[  271.845851][T12799] loop5: detected capacity change from 0 to 256
[  271.858930][T12799] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  271.937363][T12803] loop7: detected capacity change from 0 to 128
[  272.184862][T12820] loop5: detected capacity change from 0 to 256
[  272.197926][T12820] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea0b8, utbl_chksum : 0x7319d30d)
[  273.272704][    T9] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  273.432803][    T9] usb 6-1: Using ep0 maxpacket: 16
[  273.442969][    T9] usb 6-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb
[  273.446710][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  273.453373][    T9] usb 6-1: Product: syz
[  273.455198][    T9] usb 6-1: Manufacturer: syz
[  273.457192][    T9] usb 6-1: SerialNumber: syz
[  273.680392][T12843] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  273.687243][T12843] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  273.865750][    T9] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[  273.880784][    T9] snd-usb-audio 6-1:222.0: probe with driver snd-usb-audio failed with error -71
[  273.890732][    T9] usb 6-1: USB disconnect, device number 15
[  273.901601][ T6680] udevd[6680]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:222.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  273.990132][T12892] netlink: 'syz.0.2707': attribute type 1 has an invalid length.
[  274.075233][T12900] loop7: detected capacity change from 0 to 512
[  274.100377][T12900] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  274.154575][T11569] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  274.490586][T12921] netlink: 156 bytes leftover after parsing attributes in process `syz.5.2718'.
[  275.032699][  T792] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  275.059079][T12949] overlayfs: failed to clone upperpath
[  275.062080][T12949] overlayfs: failed to resolve './cgroup': -2
[  275.182669][  T792] usb 6-1: Using ep0 maxpacket: 8
[  275.200756][  T792] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  275.211718][  T792] usb 6-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00
[  275.217468][  T792] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  275.223657][  T792] usb 6-1: config 0 descriptor??
[  275.337815][T12969] netlink: 277 bytes leftover after parsing attributes in process `syz.0.2742'.
[  275.764595][   T33] kauditd_printk_skb: 4 callbacks suppressed
[  275.764881][   T33] audit: type=1107 audit(2000000004.760:117): pid=12978 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='I'
[  275.859760][  T792] kye 0003:0458:5015.0012: tablet report size too small, or kye_tablet_rdesc unexpectedly large
[  275.865535][  T792] kye 0003:0458:5015.0012: item fetching failed at offset 0/2
[  275.869297][  T792] kye 0003:0458:5015.0012: parse failed
[  275.871629][  T792] kye 0003:0458:5015.0012: probe with driver kye failed with error -22
[  275.989261][   T51] usb 6-1: USB disconnect, device number 16
[  276.023957][T12992] loop7: detected capacity change from 0 to 8
[  276.036420][T12992] unable to read xattr id index table
[  276.540088][T13020] loop7: detected capacity change from 0 to 64
[  276.578091][T13020] syz.7.2766: attempt to access beyond end of device
[  276.578091][T13020] loop7: rw=0, sector=128, nr_sectors = 2 limit=64
[  276.585413][T13020] Trying to free block not in datazone
[  276.588954][T13020] Trying to free block not in datazone
[  276.591481][T13020] Trying to free block not in datazone
[  276.602706][T13020] Trying to free block not in datazone
[  276.604535][T13020] Trying to free block not in datazone
[  276.606802][T13020] Trying to free block not in datazone
[  276.608692][T13020] minix_free_block (loop7:6): bit already cleared
[  276.688970][T13029] loop7: detected capacity change from 0 to 256
[  276.715151][T13029] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  276.718955][T13029] exFAT-fs (loop7): Medium has reported failures. Some data may be lost.
[  276.741964][T13029] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  276.933514][T13042] overlayfs: failed to clone lowerpath
[  276.982873][T13038] loop5: detected capacity change from 0 to 32768
[  276.993138][T13038] JBD2: Can't enable checksumming v1 and v2/3 at the same time!
[  276.996280][T13038] (syz.5.2774,13038,0):ocfs2_journal_init:973 ERROR: Linux journal layer error
[  277.001518][T13038] (syz.5.2774,13038,0):ocfs2_check_volume:2347 ERROR: Could not initialize journal!
[  277.005593][T13038] (syz.5.2774,13038,0):ocfs2_check_volume:2432 ERROR: status = -22
[  277.008952][T13038] (syz.5.2774,13038,0):ocfs2_mount_volume:1764 ERROR: status = -22
[  277.013342][T13038] (syz.5.2774,13038,0):ocfs2_fill_super:1177 ERROR: status = -22
[  277.092381][  T792] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[  277.188035][T13053] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2781'.
[  277.242439][  T792] usb 8-1: Using ep0 maxpacket: 8
[  277.246839][  T792] usb 8-1: unable to get BOS descriptor or descriptor too short
[  277.251162][  T792] usb 8-1: config 8 has an invalid interface number: 154 but max is 0
[  277.255918][  T792] usb 8-1: config 8 has no interface number 0
[  277.258458][  T792] usb 8-1: config 8 interface 154 has no altsetting 0
[  277.265525][  T792] usb 8-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice=4f.f6
[  277.269218][  T792] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  277.273844][  T792] usb 8-1: Product: syz
[  277.275738][  T792] usb 8-1: Manufacturer: syz
[  277.277653][  T792] usb 8-1: SerialNumber: syz
[  277.362281][   T51] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  277.495359][  T792] mdc800 8-1:8.154: probe fails -> wrong Interface
[  277.500273][  T792] usb 8-1: USB disconnect, device number 5
[  277.514048][   T51] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  277.518613][   T51] usb 6-1: config 220 has 1 interface, different from the descriptor's value: 3
[  277.521754][   T51] usb 6-1: config 220 interface 0 has no altsetting 0
[  277.527613][   T51] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  277.531240][   T51] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  277.534714][   T51] usb 6-1: Product: syz
[  277.536389][   T51] usb 6-1: Manufacturer: syz
[  277.538299][   T51] usb 6-1: SerialNumber: syz
[  277.750222][   T33] audit: type=1326 audit(2000000006.770:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13048 comm="syz.5.2779" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaa158ebe9 code=0x7ffc0000
[  277.764594][   T33] audit: type=1326 audit(2000000006.770:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13048 comm="syz.5.2779" exe="/syz-executor" sig=0 arch=c000003e syscall=277 compat=0 ip=0x7ffaa158ebe9 code=0x7ffc0000
[  277.777445][   T51] uvcvideo 6-1:220.0: probe with driver uvcvideo failed with error -22
[  277.780847][   T33] audit: type=1326 audit(2000000006.770:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13048 comm="syz.5.2779" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaa158ebe9 code=0x7ffc0000
[  277.784410][   T51] usb 6-1: USB disconnect, device number 17
[  277.796242][   T33] audit: type=1326 audit(2000000006.770:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13048 comm="syz.5.2779" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffaa158ebe9 code=0x7ffc0000
[  278.752480][    T9] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[  278.902437][    T9] usb 6-1: Using ep0 maxpacket: 16
[  278.906302][    T9] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  278.910541][    T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  278.915563][    T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  278.919225][    T9] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  278.924772][    T9] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  278.936573][    T9] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  278.942715][    T9] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  278.946189][    T9] usb 6-1: Manufacturer: syz
[  278.950766][    T9] usb 6-1: config 0 descriptor??
[  279.100820][T13099] : entered promiscuous mode
[  279.214395][    T9] rc_core: IR keymap rc-hauppauge not found
[  279.216376][    T9] Registered IR keymap rc-empty
[  279.218138][    T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  279.232434][    T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  279.253144][    T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0
[  279.259610][    T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input18
[  279.271215][    T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  279.292230][    T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  279.312390][    T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  279.332238][    T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  279.352219][    T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  279.361259][T13101] loop7: detected capacity change from 0 to 32768
[  279.368660][T13101] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.2802 (13101)
[  279.373709][    T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  279.380170][T13101] BTRFS info (device loop7 state S): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  279.385286][T13101] BTRFS info (device loop7 state S): using blake2b (blake2b-256-generic) checksum algorithm
[  279.392253][    T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  279.413779][    T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  279.429201][   T27] BTRFS warning (device loop7 state S): checksum verify failed on logical 5337088 mirror 1 wanted 0x324c5e2d0cac2dc8f61cbfdfc8cd69d9816061b1498b9e1bff7d10a59610160b found 0x752e265ca9724eb47c3236b0e85f876d1222941063a0a0afe40232d9dc9ca6dd level 0, ignored
[  279.432806][    T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  279.442268][   T69] BTRFS warning (device loop7 state CS): checksum verify failed on logical 5328896 mirror 1 wanted 0xe27e479340067083b74b333c1de55c530774f48d9bb4dbb5f2229db663324412 found 0x95f62be744ba79d2c7edda0b7f35c3ed250500c283e6cfbf6ba5d84a2ae65a3d level 1, ignored
[  279.442322][   T69] BTRFS error (device loop7 state CS): level verify failed on logical 5328896 mirror 1 wanted 0 found 1
[  279.471120][T13101] BTRFS info (device loop7 state CS): allowing degraded mounts
[  279.472586][    T9] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[  279.474705][T13101] BTRFS info (device loop7 state CS): enabling ssd optimizations
[  279.474722][T13101] BTRFS info (device loop7 state CS): using spread ssd allocation scheme
[  279.474733][T13101] BTRFS info (device loop7 state CS): disabling log replay at mount time
[  279.474745][T13101] BTRFS info (device loop7 state CS): enabling free space tree
[  279.474757][T13101] BTRFS info (device loop7 state CS): ignoring bad roots
[  279.474766][T13101] BTRFS info (device loop7 state CS): ignoring data csums
[  279.494500][    T9] mceusb 6-1:0.0: Registered  with mce emulator interface version 1
[  279.494518][    T9] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  279.511895][T13101] BTRFS info (device loop7 state CS): ignoring meta csums
[  279.518595][T13101] BTRFS info (device loop7 state CS): ignoring unknown super block flags
[  279.527197][T13101] BTRFS info (device loop7 state CS): force zlib compression, level 3
[  279.581016][T11569] BTRFS info (device loop7 state CS): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  279.620046][ T2290] usb 6-1: USB disconnect, device number 18
[  279.793783][T13126] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2806'.
[  280.007321][T13143] loop7: detected capacity change from 0 to 1024
[  280.029073][T13143] hfsplus: bad catalog entry type
[  280.311413][T13162] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  281.156916][T13172] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2824'.
[  281.680133][T13203] loop7: detected capacity change from 0 to 256
[  281.708328][T13203] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  282.134332][T13216] loop5: detected capacity change from 0 to 32768
[  282.137212][T13216] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.2844 (13216)
[  282.149422][T13216] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  282.153358][T13216] BTRFS info (device loop5): using sha256 (sha256-lib) checksum algorithm
[  282.171146][T13236] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2848'.
[  282.176659][T13236] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2848'.
[  282.200310][T13216] BTRFS info (device loop5): rebuilding free space tree
[  282.213281][T13216] BTRFS info (device loop5): setting nodatasum
[  282.215655][T13216] BTRFS info (device loop5): allowing degraded mounts
[  282.218257][T13216] BTRFS info (device loop5): setting nodatacow
[  282.220524][T13216] BTRFS info (device loop5): enabling ssd optimizations
[  282.230690][T13216] BTRFS info (device loop5): using spread ssd allocation scheme
[  282.233360][T13216] BTRFS info (device loop5): turning off barriers
[  282.236065][T13216] BTRFS info (device loop5): enabling free space tree
[  282.238250][T13216] BTRFS info (device loop5): force clearing of disk cache
[  282.261780][   T33] audit: type=1800 audit(2000000011.280:122): pid=13216 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2844" name="bus" dev="loop5" ino=263 res=0 errno=0
[  282.377101][T10140] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  282.385600][T13244] loop7: detected capacity change from 0 to 4096
[  283.208301][T13265] loop7: detected capacity change from 0 to 32768
[  283.221222][T13265] bcachefs: bch2_fs_parse_param() Error parsing option degraded: option_value
[  283.401781][T13276] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2864'.
[  283.565548][T13288] loop7: detected capacity change from 0 to 2048
[  283.574769][T13288] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  283.627414][T13290] loop7: detected capacity change from 0 to 1764
[  283.681668][T13292] dlm: no locking on control device
[  283.965034][T13303] loop7: detected capacity change from 0 to 256
[  283.994664][T13303] FAT-fs (loop7): Directory bread(block 64) failed
[  283.997281][T13303] FAT-fs (loop7): Directory bread(block 65) failed
[  284.000181][T13303] FAT-fs (loop7): Directory bread(block 66) failed
[  284.004344][T13303] FAT-fs (loop7): Directory bread(block 67) failed
[  284.006988][T13303] FAT-fs (loop7): Directory bread(block 68) failed
[  284.009520][T13303] FAT-fs (loop7): Directory bread(block 69) failed
[  284.015577][T13303] FAT-fs (loop7): Directory bread(block 70) failed
[  284.029953][T13303] FAT-fs (loop7): Directory bread(block 71) failed
[  284.035939][T13303] FAT-fs (loop7): Directory bread(block 72) failed
[  284.039535][T13303] FAT-fs (loop7): Directory bread(block 73) failed
[  284.317932][T13331] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2888'.
[  284.445115][T13341] loop5: detected capacity change from 0 to 4096
[  284.459298][T13341] NILFS (loop5): invalid segment: Checksum error in segment payload
[  284.465306][T13341] NILFS (loop5): trying rollback from an earlier position
[  284.476746][T13341] NILFS (loop5): recovery complete
[  284.481135][T13344] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  284.853286][   T33] audit: type=1326 audit(2000000013.870:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13360 comm="syz.7.2903" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd28858ebe9 code=0x7ffc0000
[  284.874082][   T33] audit: type=1326 audit(2000000013.870:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13360 comm="syz.7.2903" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd28858ebe9 code=0x7ffc0000
[  284.881444][   T33] audit: type=1326 audit(2000000013.870:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13360 comm="syz.7.2903" exe="/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fd28858ebe9 code=0x7ffc0000
[  284.898506][   T33] audit: type=1326 audit(2000000013.870:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13360 comm="syz.7.2903" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd28858ebe9 code=0x7ffc0000
[  284.909537][   T33] audit: type=1326 audit(2000000013.870:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13360 comm="syz.7.2903" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd28858ebe9 code=0x7ffc0000
[  284.919108][   T33] audit: type=1326 audit(2000000013.870:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13360 comm="syz.7.2903" exe="/syz-executor" sig=0 arch=c000003e syscall=198 compat=0 ip=0x7fd28858ebe9 code=0x7ffc0000
[  284.930721][T13368] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2904'.
[  284.935162][   T33] audit: type=1326 audit(2000000013.870:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13360 comm="syz.7.2903" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd28858ebe9 code=0x7ffc0000
[  284.951854][T13368] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2904'.
[  284.955653][T13368] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2904'.
[  284.959389][T13368] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2904'.
[  284.966564][   T33] audit: type=1326 audit(2000000013.870:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13360 comm="syz.7.2903" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd28858ebe9 code=0x7ffc0000
[  285.285031][T13372] overlayfs: failed to resolve './file0': -2
[  285.569104][T13376] loop7: detected capacity change from 0 to 131072
[  285.576665][T13376] F2FS-fs (loop7): Test dummy encryption mode enabled
[  285.580285][T13376] F2FS-fs (loop7): invalid crc value
[  285.610669][T13376] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  285.615210][T13376] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  285.850012][T13398] loop5: detected capacity change from 0 to 1024
[  285.853548][T13398] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[  285.858315][T13398] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869)
[  285.867337][T13398] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  285.873558][T13398] EXT4-fs error (device loop5): ext4_get_journal_inode:5800: inode #32: comm syz.5.2919: iget: special inode unallocated
[  285.878435][T13398] EXT4-fs (loop5): no journal found
[  285.880248][T13398] EXT4-fs (loop5): can't get journal size
[  285.891575][T13398] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  285.903458][T13398] EXT4-fs error (device loop5): ext4_inlinedir_to_tree:1314: inode #12: block 16: comm syz.5.2919: path /332/file0/file0: bad entry in directory: rec_len is too small for name_len - offset=20, inode=13, rec_len=16, size=60 fake=0
[  285.927749][T10140] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  286.089360][T13411] loop7: detected capacity change from 0 to 1024
[  286.108781][T13411] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  286.135667][T11569] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  286.186994][T13417] loop7: detected capacity change from 0 to 128
[  286.192096][T13417] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x00067272 (sector = 1)
[  286.474073][T13429] overlayfs: empty lowerdir
[  287.021467][T13444] loop5: detected capacity change from 0 to 16
[  287.034055][T13444] erofs (device loop5): mounted with root inode @ nid 36.
[  287.048344][T13444] erofs (device loop5): bogus lookback distance 1388 @ lcn 42 of nid 36
[  287.053497][T13444] erofs (device loop5): failed to decompress -46 in[60, 4036] out[1851]
[  287.057298][T13444] erofs (device loop5): read error -117 @ 43 of nid 36
[  287.243788][T13454] kAFS: unable to lookup cell 'syz169@=R'
[  287.252601][T13456] loop5: detected capacity change from 0 to 2048
[  287.285062][T13457] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  287.405228][T13463] loop5: detected capacity change from 0 to 1024
[  287.408807][T13463] hfsplus: Bad value for 'part'
[  287.519250][T13459] loop7: detected capacity change from 0 to 32768
[  287.525281][T13459] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.2945 (13459)
[  287.530763][T13459] BTRFS info (device loop7): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  287.534585][T13459] BTRFS info (device loop7): using xxhash64 (xxhash64-generic) checksum algorithm
[  287.618384][T13459] BTRFS info (device loop7): rebuilding free space tree
[  287.642720][T13459] BTRFS info (device loop7): turning on flush-on-commit
[  287.645845][T13459] BTRFS info (device loop7): enabling free space tree
[  287.648643][T13459] BTRFS info (device loop7): force clearing of disk cache
[  287.651429][T13459] BTRFS info (device loop7): doing ref verification
[  287.671771][T13459] BTRFS info (device loop7): force zlib compression, level 3
[  287.724068][T11569] BTRFS info (device loop7): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  288.010997][T13494] loop5: detected capacity change from 0 to 32768
[  288.076562][T13494] ERROR: (device loop5): dtSearch: DT_GETPAGE: dtree page corrupt
[  288.076562][T13494] 
[  288.080306][T13494] ERROR: (device loop5): remounting filesystem as read-only
[  288.085242][T13494] jfs_lookup: dtSearch returned -5
[  288.099558][  T115] blkno = 8ed2c, nblocks = 1
[  288.101305][  T115] ERROR: (device loop5): dbUpdatePMap: blocks are outside the map
[  288.101305][  T115] 
[  288.106235][  T115] JFS: metapage_get_blocks failed
[  288.108179][  T115] ERROR: (device loop5): release_metapage: metapage_write_one() failed
[  288.108179][  T115] 
[  288.113348][  T115] blkno = 8ed2c, nblocks = 1
[  288.120054][  T115] ERROR: (device loop5): dbUpdatePMap: blocks are outside the map
[  288.120054][  T115] 
[  288.140254][T13515] net_ratelimit: 4057 callbacks suppressed
[  288.140270][T13515] openvswitch: netlink: IP tunnel TTL not specified.
[  288.187518][T13521] loop7: detected capacity change from 0 to 8
[  288.199977][T13521] SQUASHFS error: xz decompression failed, data probably corrupt
[  288.206428][T13521] SQUASHFS error: Failed to read block 0x108: -5
[  288.209351][T13521] SQUASHFS error: Unable to read metadata cache entry [106]
[  288.212138][T13521] SQUASHFS error: Unable to read inode 0x11f
[  288.223289][ T1119] block nbd1: Possible stuck request ffff8880213d8000: control (read@0,1024B). Runtime 120 seconds
[  288.226819][ T1119] block nbd1: Possible stuck request ffff8880213d8200: control (read@1024,1024B). Runtime 120 seconds
[  288.230549][ T1119] block nbd1: Possible stuck request ffff8880213d8400: control (read@2048,1024B). Runtime 120 seconds
[  288.234717][ T1119] block nbd1: Possible stuck request ffff8880213d8600: control (read@3072,1024B). Runtime 120 seconds
[  289.398160][T13568] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2988'.
[  289.455949][T13572] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2990'.
[  289.530265][T13578] overlayfs: failed to clone upperpath
[  289.701999][    T9] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[  289.853572][    T9] usb 8-1: unable to get BOS descriptor or descriptor too short
[  289.858092][    T9] usb 8-1: config 255 has an invalid interface number: 171 but max is 0
[  289.861103][    T9] usb 8-1: config 255 has no interface number 0
[  289.865153][    T9] usb 8-1: config 255 interface 171 has no altsetting 0
[  289.869745][    T9] usb 8-1: New USB device found, idVendor=0c45, idProduct=6240, bcdDevice=35.eb
[  289.873815][    T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  289.877276][    T9] usb 8-1: Product: syz
[  289.879108][    T9] usb 8-1: Manufacturer: syz
[  289.881103][    T9] usb 8-1: SerialNumber: syz
[  290.001941][ T8871] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[  290.098469][    T9] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:6240
[  290.101612][    T9] gspca_sn9c20x: Write register 1000 failed -71
[  290.104332][    T9] gspca_sn9c20x: Device initialization failed
[  290.106441][    T9] gspca_sn9c20x 8-1:255.171: probe with driver gspca_sn9c20x failed with error -71
[  290.110607][    T9] usb 8-1: USB disconnect, device number 6
[  290.164556][ T8871] usb 6-1: Using ep0 maxpacket: 8
[  290.168915][ T8871] usb 6-1: unable to get BOS descriptor or descriptor too short
[  290.173598][ T8871] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  290.177303][ T8871] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  290.180944][ T8871] usb 6-1: config 1 has no interface number 1
[  290.183693][ T8871] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  290.188905][ T8871] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  290.197206][ T8871] usb 6-1: string descriptor 0 read error: -22
[  290.199955][ T8871] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  290.203964][ T8871] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  290.214490][ T8871] usb 6-1: 2:1: invalid format type 0x1002 is detected, processed as PCM
[  290.218122][ T8871] usb 6-1: 2:1 : sample bitwidth 141 in over sample bytes 2
[  290.222220][ T8871] usb 6-1: 2:1 : invalid UAC_FORMAT_TYPE desc
[  290.419931][ T8871] usb 6-1: USB disconnect, device number 19
[  290.795196][T13605] loop7: detected capacity change from 0 to 32768
[  290.800875][T13605] (syz.7.3006,13605,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #66: directory entry too close to end - offset=220, inode=74, rec_len=284, name_len=16
[  290.807718][T13605] (syz.7.3006,13605,1):ocfs2_init_local_system_inodes:496 ERROR: status=-22, sysfile=9, slot=0
[  290.811796][T13605] (syz.7.3006,13605,1):ocfs2_init_local_system_inodes:505 ERROR: status = -22
[  290.815367][T13605] (syz.7.3006,13605,1):ocfs2_mount_volume:1758 ERROR: status = -22
[  290.823406][T13605] (syz.7.3006,13605,1):ocfs2_fill_super:1177 ERROR: status = -22
[  291.005314][T13615] loop5: detected capacity change from 0 to 512
[  291.010450][T13615] EXT4-fs: Ignoring removed i_version option
[  291.020598][T13615] EXT4-fs (loop5): 1 truncate cleaned up
[  291.023771][T13615] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  291.051340][T10140] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  291.314676][T13630] sctp: [Deprecated]: syz.5.3014 (pid 13630) Use of int in max_burst socket option deprecated.
[  291.314676][T13630] Use struct sctp_assoc_value instead
[  291.469550][T13632] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3016'.
[  291.480785][T13634] loop7: detected capacity change from 0 to 128
[  291.510157][T13634] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  291.533162][T13634] ext4 filesystem being mounted at /235/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  291.570205][T13634] netlink: 'syz.7.3017': attribute type 29 has an invalid length.
[  291.576494][T13634] netlink: 'syz.7.3017': attribute type 29 has an invalid length.
[  291.582127][T13634] netlink: 500 bytes leftover after parsing attributes in process `syz.7.3017'.
[  291.641716][T11569] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  292.435093][T13652] fuse: Bad value for 'fd'
[  292.506475][T13657] netlink: set zone limit has 4 unknown bytes
[  294.919028][T13715] loop7: detected capacity change from 0 to 4096
[  294.930489][T13715] ntfs3(loop7): Mark volume as dirty due to NTFS errors
[  294.942398][T13715] ntfs3(loop7): mft corrupted
[  294.944053][T13715] ntfs3(loop7): Failed to load $MFT.
[  295.051448][    T9] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[  295.169845][T13725] loop7: detected capacity change from 0 to 256
[  295.187245][T13725] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d)
[  295.231274][    T9] usb 6-1: Using ep0 maxpacket: 8
[  295.238276][    T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  295.250925][    T9] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  295.254329][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  295.264910][    T9] usb 6-1: config 0 descriptor??
[  296.235282][    T9] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  296.697599][    T9] usb 6-1: USB disconnect, device number 20
[  296.921910][T13750] netlink: 'syz.0.3069': attribute type 5 has an invalid length.
[  297.683493][    T9] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[  297.831208][    T9] usb 8-1: Using ep0 maxpacket: 8
[  297.835638][    T9] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 7
[  297.844420][    T9] usb 8-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[  297.848397][    T9] usb 8-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[  297.852725][    T9] usb 8-1: Product: syz
[  297.854548][    T9] usb 8-1: Manufacturer: syz
[  297.856549][    T9] usb 8-1: SerialNumber: syz
[  297.906261][T13785] loop5: detected capacity change from 0 to 32768
[  297.913966][T13785] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.3084 (13785)
[  297.927068][T13785] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  297.931503][T13785] BTRFS info (device loop5): using crc32c (crc32c-lib) checksum algorithm
[  297.973974][T13785] BTRFS info (device loop5): enabling ssd optimizations
[  297.980035][T13785] BTRFS info (device loop5): enabling free space tree
[  297.982953][T13785] BTRFS info (device loop5): use zlib compression, level 3
[  298.067938][T10140] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  298.135273][    T9] usb 8-1: Invalid connection information received from device
[  298.300758][  T791] usb 8-1: USB disconnect, device number 7
[  298.369638][T13806] netlink: 36 bytes leftover after parsing attributes in process `syz.5.3085'.
[  298.383997][T13806] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3085'.
[  298.628906][T13814] Invalid source name
[  298.630655][T13814] UBIFS error (pid: 13814): cannot open "./file0", error -22
[  300.544632][T13849] loop7: detected capacity change from 0 to 512
[  300.560318][T13849] EXT4-fs: Ignoring removed nomblk_io_submit option
[  300.583219][T13849] EXT4-fs: Mount option(s) incompatible with ext3
[  300.919877][ T6821] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  301.006180][ T6821] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  301.085666][ T6821] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  301.163651][ T6821] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  301.316446][ T5238] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  301.322883][ T5238] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  301.327093][ T5238] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  301.332817][ T5238] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  301.340467][ T5238] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  301.547247][T13873] chnl_net:caif_netlink_parms(): no params data found
[  301.652195][T13873] bridge0: port 1(bridge_slave_0) entered blocking state
[  301.656878][T13873] bridge0: port 1(bridge_slave_0) entered disabled state
[  301.659981][T13873] bridge_slave_0: entered allmulticast mode
[  301.672928][T13873] bridge_slave_0: entered promiscuous mode
[  301.682309][T13873] bridge0: port 2(bridge_slave_1) entered blocking state
[  301.685478][T13873] bridge0: port 2(bridge_slave_1) entered disabled state
[  301.697484][T13873] bridge_slave_1: entered allmulticast mode
[  301.714585][T13873] bridge_slave_1: entered promiscuous mode
[  301.769614][T13873] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  301.793295][T13873] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  301.820161][T13873] team0: Port device team_slave_0 added
[  301.825909][T13873] team0: Port device team_slave_1 added
[  301.864960][T13873] batman_adv: batadv0: Adding interface: batadv_slave_0
[  301.867787][T13873] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  301.887067][T13873] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  301.909933][T13873] batman_adv: batadv0: Adding interface: batadv_slave_1
[  301.918389][T13873] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  301.932015][T13873] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  301.990339][T13873] hsr_slave_0: entered promiscuous mode
[  301.996813][T13873] hsr_slave_1: entered promiscuous mode
[  301.999760][T13873] debugfs: 'hsr0' already exists in 'hsr'
[  302.004540][T13873] Cannot create hsr debugfs directory
[  302.268328][T13873] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  302.276223][T13873] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  302.284420][T13873] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  302.304390][T13873] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  302.417276][T13873] 8021q: adding VLAN 0 to HW filter on device bond0
[  302.498405][T13873] 8021q: adding VLAN 0 to HW filter on device team0
[  302.518720][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[  302.521941][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[  302.554306][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[  302.557288][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[  302.827403][T13873] 8021q: adding VLAN 0 to HW filter on device batadv0
[  302.936918][T13928] loop5: detected capacity change from 0 to 8
[  302.940160][T13928] MTD: Attempt to mount non-MTD device "/dev/loop5"
[  303.039228][T13873] veth0_vlan: entered promiscuous mode
[  303.050638][T13873] veth1_vlan: entered promiscuous mode
[  303.140395][T13873] veth0_macvtap: entered promiscuous mode
[  303.166941][T13873] veth1_macvtap: entered promiscuous mode
[  303.206306][ T6821] bridge_slave_1: left allmulticast mode
[  303.212356][ T6821] bridge_slave_1: left promiscuous mode
[  303.216418][ T6821] bridge0: port 2(bridge_slave_1) entered disabled state
[  303.226616][ T6821] bridge_slave_0: left allmulticast mode
[  303.229173][ T6821] bridge_slave_0: left promiscuous mode
[  303.233145][ T6821] bridge0: port 1(bridge_slave_0) entered disabled state
[  303.433623][ T5238] Bluetooth: hci3: command tx timeout
[  303.633526][T13941] overlayfs: failed to clone upperpath
[  303.687458][ T6821] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  303.695452][ T6821] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  303.701850][ T6821] bond0 (unregistering): Released all slaves
[  303.734493][T13873] batman_adv: batadv0: Interface activated: batadv_slave_0
[  303.770394][T13873] batman_adv: batadv0: Interface activated: batadv_slave_1
[  303.779934][ T6821] : left promiscuous mode
[  303.813158][ T8870] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  303.817026][ T8870] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  303.823734][ T8870] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  303.827221][ T8870] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  304.025447][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  304.032124][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  304.145261][T13954] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3137'.
[  304.290561][ T1210] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  304.293991][ T1210] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  304.316519][ T6821] hsr_slave_0: left promiscuous mode
[  304.319536][ T6821] hsr_slave_1: left promiscuous mode
[  304.322810][ T6821] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  304.326089][ T6821] batman_adv: batadv0: Removing interface: batadv_slave_0
[  304.329917][ T6821] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  304.339904][ T6821] batman_adv: batadv0: Removing interface: batadv_slave_1
[  304.375162][ T6821] veth1_macvtap: left promiscuous mode
[  304.379407][ T6821] veth0_macvtap: left promiscuous mode
[  304.385085][ T6821] veth1_vlan: left promiscuous mode
[  304.387341][ T6821] veth0_vlan: left promiscuous mode
[  304.927892][ T6821] team0 (unregistering): Port device team_slave_1 removed
[  304.974567][ T6821] team0 (unregistering): Port device team_slave_0 removed
[  305.501146][ T5238] Bluetooth: hci3: command tx timeout
[  305.880456][ T2290] usb 9-1: new low-speed USB device number 2 using dummy_hcd
[  305.994146][ T6821] IPVS: stop unused estimator thread 0...
[  306.042712][ T2290] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  306.046039][ T2290] usb 9-1: config 0 has no interfaces?
[  306.048831][ T2290] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  306.053754][ T2290] usb 9-1: config 0 has no interfaces?
[  306.060246][ T2290] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  306.064623][ T2290] usb 9-1: config 0 has no interfaces?
[  306.066082][T13971] loop5: detected capacity change from 0 to 40427
[  306.074368][ T2290] usb 9-1: string descriptor 0 read error: -22
[  306.077937][ T2290] usb 9-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  306.088301][T13971] F2FS-fs (loop5): build fault injection rate: 771
[  306.090864][ T2290] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  306.097411][ T2290] usb 9-1: config 0 descriptor??
[  306.116793][T13971] F2FS-fs (loop5): invalid crc value
[  306.198877][T13971] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  306.207788][T13971] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  306.238747][   T33] audit: type=1800 audit(2000000035.261:131): pid=13971 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3143" name="file0" dev="loop5" ino=10 res=0 errno=0
[  306.239600][T13971] F2FS-fs (loop5): Can't enable fs-verity on inode 10: the verity feature is not enabled on this filesystem
[  306.295136][T10140] syz-executor: attempt to access beyond end of device
[  306.295136][T10140] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  306.317685][T10140] CPU: 0 UID: 0 PID: 10140 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  306.317704][T10140] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  306.317712][T10140] Call Trace:
[  306.317717][T10140]  <TASK>
[  306.317722][T10140]  dump_stack_lvl+0x189/0x250
[  306.317744][T10140]  ? __pfx_dump_stack_lvl+0x10/0x10
[  306.317757][T10140]  ? __pfx_queue_work_on+0x10/0x10
[  306.317769][T10140]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  306.317785][T10140]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  306.317807][T10140]  f2fs_handle_critical_error+0x37c/0x540
[  306.317829][T10140]  f2fs_write_end_io+0x886/0xb60
[  306.317853][T10140]  __submit_merged_bio+0x27a/0x6a0
[  306.317874][T10140]  __submit_merged_write_cond+0x255/0x530
[  306.317895][T10140]  f2fs_write_data_pages+0x261d/0x3000
[  306.317943][T10140]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  306.317995][T10140]  ? folios_put_refs+0x559/0x640
[  306.318017][T10140]  ? __lock_acquire+0xab9/0xd20
[  306.318036][T10140]  ? do_raw_spin_lock+0x121/0x290
[  306.318058][T10140]  ? do_raw_spin_unlock+0x4d/0x240
[  306.318071][T10140]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  306.318089][T10140]  do_writepages+0x32e/0x550
[  306.318112][T10140]  ? do_raw_spin_unlock+0x4d/0x240
[  306.318129][T10140]  filemap_fdatawrite+0x199/0x240
[  306.318146][T10140]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  306.318192][T10140]  ? do_raw_spin_unlock+0x4d/0x240
[  306.318208][T10140]  f2fs_sync_dirty_inodes+0x31f/0x830
[  306.318230][T10140]  f2fs_write_checkpoint+0x95a/0x1df0
[  306.318258][T10140]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  306.318298][T10140]  ? f2fs_stop_gc_thread+0x7f/0xb0
[  306.318309][T10140]  ? kfree+0x18e/0x440
[  306.318324][T10140]  ? kill_f2fs_super+0x298/0x6c0
[  306.318338][T10140]  kill_f2fs_super+0x2c3/0x6c0
[  306.318353][T10140]  ? __pfx_kill_f2fs_super+0x10/0x10
[  306.318363][T10140]  ? radix_tree_delete_item+0x2b6/0x400
[  306.318383][T10140]  ? shrinker_free+0x2ce/0x3e0
[  306.318397][T10140]  deactivate_locked_super+0xbc/0x130
[  306.318413][T10140]  cleanup_mnt+0x425/0x4c0
[  306.318425][T10140]  ? lockdep_hardirqs_on+0x9c/0x150
[  306.318443][T10140]  task_work_run+0x1d4/0x260
[  306.318459][T10140]  ? __pfx_task_work_run+0x10/0x10
[  306.318470][T10140]  ? __x64_sys_umount+0x122/0x160
[  306.318486][T10140]  ? exit_to_user_mode_loop+0x40/0x110
[  306.318526][T10140]  exit_to_user_mode_loop+0xec/0x110
[  306.318542][T10140]  do_syscall_64+0x2bd/0x3b0
[  306.318552][T10140]  ? lockdep_hardirqs_on+0x9c/0x150
[  306.318566][T10140]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  306.318576][T10140]  ? exc_page_fault+0x9f/0xf0
[  306.318592][T10140]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  306.318602][T10140] RIP: 0033:0x7ffaa158ff17
[  306.318613][T10140] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  306.318622][T10140] RSP: 002b:00007ffd07ff9408 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  306.318636][T10140] RAX: 0000000000000000 RBX: 00007ffaa1611c05 RCX: 00007ffaa158ff17
[  306.318671][T10140] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd07ff94c0
[  306.318678][T10140] RBP: 00007ffd07ff94c0 R08: 0000000000000000 R09: 0000000000000000
[  306.318684][T10140] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd07ffa550
[  306.318692][T10140] R13: 00007ffaa1611c05 R14: 000000000004abd5 R15: 00007ffd07ffa590
[  306.318712][T10140]  </TASK>
[  306.318851][T10140] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  306.396181][T13975] loop8: detected capacity change from 0 to 4096
[  306.466477][T13975] ntfs3(loop8): Different NTFS sector size (1024) and media sector size (512).
[  306.488718][T13975] ntfs3(loop8): Failed to initialize $Extend/$Reparse.
[  306.559804][ T2290] usb 9-1: USB disconnect, device number 2
[  306.964536][T14012] loop5: detected capacity change from 0 to 32768
[  306.982671][T14012] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  307.055688][T10140] ocfs2: Unmounting device (7,5) on (node local)
[  307.154328][T14022] loop5: detected capacity change from 0 to 1024
[  307.185904][T14022] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  307.192390][T14022] ext4 filesystem being mounted at /399/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  307.243455][T10140] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  307.293741][T14032] netlink: 'syz.5.3157': attribute type 5 has an invalid length.
[  307.296873][T14032] netlink: 'syz.5.3157': attribute type 7 has an invalid length.
[  307.304428][T14033] loop8: detected capacity change from 0 to 2048
[  307.327242][T14032] : entered promiscuous mode
[  307.334603][T14034] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  307.345768][   T33] audit: type=1800 audit(2000000036.372:132): pid=14033 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3158" name="file1" dev="loop8" ino=15 res=0 errno=0
[  307.410306][   T33] audit: type=1800 audit(2000000036.432:133): pid=14037 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.3158" name="file2" dev="loop8" ino=16 res=0 errno=0
[  307.509147][T14037] NILFS (loop8): writing node/leaf block does not appear in b-tree (ino=16) at key=5, level=0
[  307.514930][T14037] NILFS error (device loop8): nilfs_bmap_propagate: broken bmap (inode number=16)
[  307.527238][T14037] Remounting filesystem read-only
[  307.591054][ T5238] Bluetooth: hci3: command tx timeout
[  308.307218][T14054] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3166'.
[  308.440510][T14049] loop5: detected capacity change from 0 to 32768
[  308.449657][T14049] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.3164 (14049)
[  308.480027][T14049] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  308.485159][T14049] BTRFS info (device loop5): using sha256 (sha256-lib) checksum algorithm
[  308.672514][T14049] BTRFS info (device loop5): enabling ssd optimizations
[  308.675416][T14049] BTRFS info (device loop5): enabling free space tree
[  308.783963][T10140] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  309.033570][T13873] NILFS (loop8): disposed unprocessed dirty file(s) when stopping log writer
[  309.038368][T13873] NILFS (loop8): disposed unprocessed dirty file(s) when detaching log writer
[  309.660944][ T5238] Bluetooth: hci3: command tx timeout
[  309.729447][T14097] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3177'.
[  309.976715][T14105] loop5: detected capacity change from 0 to 4096
[  310.003897][T14105] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512).
[  310.059867][T14105] ntfs3(loop5): ino=1a, mi_enum_attr
[  310.069754][T14105] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  310.075027][T14105] ntfs3(loop5): ino=1a, mi_enum_attr
[  310.077212][T14105] ntfs3(loop5): Failed to initialize $Extend/$Reparse.
[  310.282541][T14119] loop8: detected capacity change from 0 to 40427
[  310.286758][T14119] F2FS-fs (loop8): build fault injection rate: 14
[  310.289367][T14119] F2FS-fs (loop8): build fault injection type: 0x3bfe8c
[  310.293938][T14119] F2FS-fs (loop8): invalid crc value
[  310.297131][    C0] F2FS-fs (loop8): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  310.305489][    C0] F2FS-fs (loop8): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  310.338678][T14119] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  310.341961][T14119] F2FS-fs (loop8): inject page alloc in f2fs_grab_cache_folio of __get_meta_folio+0x157/0x4f0
[  310.347786][T14119] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5
[  310.379659][T14119] F2FS-fs (loop8): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x1d9/0xa40
[  310.385034][T14119] F2FS-fs (loop8): inject dquot initialize in f2fs_dquot_initialize of f2fs_convert_inline_inode+0x677/0x880
[  310.391556][T14119] F2FS-fs (loop8): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x1d9/0xa40
[  310.400807][T14119] F2FS-fs (loop8): inject inconsistent footer in sanity_check_node_footer of f2fs_update_inode_page+0x82/0x190
[  310.405820][T14119] F2FS-fs (loop8): inconsistent node block, node_type:1, nid:17, node_footer[nid:17,ino:17,ofs:0,cpver:0,blkaddr:0]
[  310.420997][T14119] CPU: 0 UID: 0 PID: 14119 Comm: syz.8.3187 Not tainted syzkaller #0 PREEMPT(full) 
[  310.421011][T14119] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  310.421016][T14119] Call Trace:
[  310.421020][T14119]  <TASK>
[  310.421024][T14119]  dump_stack_lvl+0x189/0x250
[  310.421037][T14119]  ? __pfx_dump_stack_lvl+0x10/0x10
[  310.421046][T14119]  ? __pfx_queue_work_on+0x10/0x10
[  310.421054][T14119]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  310.421065][T14119]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  310.421075][T14119]  ? f2fs_hw_is_readonly+0x39b/0x470
[  310.421087][T14119]  f2fs_handle_critical_error+0x37c/0x540
[  310.421099][T14119]  __f2fs_tmpfile+0x210/0x360
[  310.421112][T14119]  f2fs_tmpfile+0x148/0x290
[  310.421126][T14119]  vfs_tmpfile+0x3a0/0x860
[  310.421138][T14119]  do_tmpfile+0xd3/0x240
[  310.421147][T14119]  path_openat+0x30fa/0x3830
[  310.421154][T14119]  ? arch_stack_walk+0xfc/0x150
[  310.421167][T14119]  ? stack_trace_save+0x9c/0xe0
[  310.421176][T14119]  ? stack_depot_save_flags+0x40/0x860
[  310.421185][T14119]  ? __lock_acquire+0xa11/0xd20
[  310.421197][T14119]  ? kasan_save_track+0x4f/0x80
[  310.421204][T14119]  ? kasan_save_track+0x3e/0x80
[  310.421212][T14119]  ? getname_flags+0xb8/0x540
[  310.421217][T14119]  ? __pfx_path_openat+0x10/0x10
[  310.421224][T14119]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  310.421238][T14119]  do_filp_open+0x1fa/0x410
[  310.421245][T14119]  ? __lock_acquire+0xab9/0xd20
[  310.421254][T14119]  ? __pfx_do_filp_open+0x10/0x10
[  310.421270][T14119]  ? _raw_spin_unlock+0x28/0x50
[  310.421278][T14119]  ? alloc_fd+0x64c/0x6c0
[  310.421291][T14119]  do_sys_openat2+0x121/0x1c0
[  310.421299][T14119]  ? __se_sys_futex+0x36f/0x400
[  310.421307][T14119]  ? __pfx_do_sys_openat2+0x10/0x10
[  310.421317][T14119]  ? rcu_is_watching+0x15/0xb0
[  310.421325][T14119]  __x64_sys_openat+0x138/0x170
[  310.421334][T14119]  do_syscall_64+0xfa/0x3b0
[  310.421340][T14119]  ? lockdep_hardirqs_on+0x9c/0x150
[  310.421349][T14119]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  310.421355][T14119]  ? exc_page_fault+0x9f/0xf0
[  310.421365][T14119]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  310.421371][T14119] RIP: 0033:0x7f5c3ef8ebe9
[  310.421378][T14119] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  310.421384][T14119] RSP: 002b:00007f5c3fde1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  310.421393][T14119] RAX: ffffffffffffffda RBX: 00007f5c3f1c5fa0 RCX: 00007f5c3ef8ebe9
[  310.421401][T14119] RDX: 0000000000410281 RSI: 0000200000000000 RDI: ffffffffffffff9c
[  310.421409][T14119] RBP: 00007f5c3f011e19 R08: 0000000000000000 R09: 0000000000000000
[  310.421415][T14119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  310.421421][T14119] R13: 00007f5c3f1c6038 R14: 00007f5c3f1c5fa0 R15: 00007ffcbff65658
[  310.421437][T14119]  </TASK>
[  310.421442][T14119] F2FS-fs (loop8): Stopped filesystem due to reason: 5
[  310.534923][T14118] F2FS-fs (loop8): f2fs_evict_inode: inconsistent node id, ino:17
[  310.639341][T14143] loop5: detected capacity change from 0 to 128
[  310.686826][T14143] FAT-fs (loop5): error, corrupted directory (invalid i_start)
[  310.690062][T14143] FAT-fs (loop5): Filesystem has been set read-only
[  310.938390][T14151] loop5: detected capacity change from 0 to 32768
[  310.948130][T14151] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.3200 (14151)
[  310.955444][T14151] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  310.959219][T14151] BTRFS info (device loop5): using sha256 (sha256-lib) checksum algorithm
[  311.013419][T14151] BTRFS info (device loop5): enabling ssd optimizations
[  311.015852][T14151] BTRFS info (device loop5): enabling free space tree
[  311.086345][T10140] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  311.098011][T14182] ip_vti0: Master is either lo or non-ether device
[  311.389912][T14203] netlink: 'syz.0.3218': attribute type 1 has an invalid length.
[  311.452238][T14201] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3217'.
[  311.456458][T14207] loop8: detected capacity change from 0 to 1024
[  311.457780][T14201] netlink: 'syz.5.3217': attribute type 7 has an invalid length.
[  311.466511][T14201] netlink: 'syz.5.3217': attribute type 8 has an invalid length.
[  311.470132][T14201] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3217'.
[  311.576535][T14219] loop8: detected capacity change from 0 to 512
[  311.594319][T14219] EXT4-fs (loop8): corrupt root inode, run e2fsck
[  311.596820][T14219] EXT4-fs (loop8): mount failed
[  311.684928][T14226] loop8: detected capacity change from 0 to 24
[  311.688166][T14226] MTD: Attempt to mount non-MTD device "/dev/loop8"
[  311.698820][T14226] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  311.708635][T14226] fuse: Unknown parameter '0xffffffffffffffff'
[  311.991262][T14228] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  312.730428][  T792] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[  312.904120][  T792] usb 6-1: config 220 has an invalid interface number: 76 but max is 2
[  312.907041][T14258] tmpfs: Bad value for 'mpol'
[  312.907561][  T792] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  312.907600][  T792] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  312.917942][  T792] usb 6-1: config 220 has no interface number 2
[  312.922628][  T792] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  312.938289][  T792] usb 6-1: config 220 interface 0 has no altsetting 0
[  312.941457][  T792] usb 6-1: config 220 interface 76 has no altsetting 0
[  312.944267][  T792] usb 6-1: config 220 interface 1 has no altsetting 0
[  312.953526][  T792] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  312.956599][  T792] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  312.959515][  T792] usb 6-1: Product: syz
[  312.961764][  T792] usb 6-1: Manufacturer: syz
[  312.963692][  T792] usb 6-1: SerialNumber: syz
[  313.321237][  T792] usb 6-1: Found UVC 7.01 device syz (8086:0b07)
[  313.323201][  T792] usb 6-1: No valid video chain found.
[  313.324929][  T792] usb 6-1: selecting invalid altsetting 0
[  313.343088][  T792] usb 6-1: selecting invalid altsetting 0
[  313.344914][  T792] usbtest 6-1:220.1: probe with driver usbtest failed with error -22
[  313.351101][  T792] usb 6-1: USB disconnect, device number 21
[  313.763692][T14270] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3245'.
[  314.037320][T14278] loop8: detected capacity change from 0 to 32768
[  314.040463][T14278] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.3249 (14278)
[  314.048149][T14278] BTRFS info (device loop8): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  314.052224][T14278] BTRFS info (device loop8): using crc32c (crc32c-lib) checksum algorithm
[  314.105866][T14278] BTRFS info (device loop8): allowing degraded mounts
[  314.108610][T14278] BTRFS info (device loop8): enabling ssd optimizations
[  314.112289][  T792] usb 6-1: new high-speed USB device number 22 using dummy_hcd
[  314.116645][T14278] BTRFS info (device loop8): enabling free space tree
[  314.120512][T14278] BTRFS info (device loop8): force zlib compression, level 3
[  314.140007][T13873] BTRFS info (device loop8): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  314.287801][  T792] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  314.294244][  T792] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  314.305616][  T792] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00
[  314.308877][  T792] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  314.330382][  T792] usb 6-1: config 0 descriptor??
[  314.681623][T14325] trusted_key: syz.0.3265 sent an empty control message without MSG_MORE.
[  314.761001][  T792] kovaplus 0003:1E7D:2D50.0013: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.5-1/input0
[  315.347826][  T792] kovaplus 0003:1E7D:2D50.0013: couldn't init struct kovaplus_device
[  315.351528][  T792] kovaplus 0003:1E7D:2D50.0013: couldn't install mouse
[  315.355455][  T792] kovaplus 0003:1E7D:2D50.0013: probe with driver kovaplus failed with error -71
[  315.368038][  T792] usb 6-1: USB disconnect, device number 22
[  315.379215][T14337] kernel read not supported for file /   (pid: 14337 comm: syz.0.3271)
[  315.383679][   T33] audit: type=1800 audit(2000000044.402:134): pid=14337 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3271" name=200120 dev="mqueue" ino=34611 res=0 errno=0
[  316.036125][T14366] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3282'.
[  316.207200][T14375] loop5: detected capacity change from 0 to 1024
[  316.244254][T14375] hfsplus: xattr searching failed
[  316.319134][T14381] netlink: 'syz.8.3289': attribute type 11 has an invalid length.
[  316.379027][T14385] loop8: detected capacity change from 0 to 256
[  316.398345][T14385] exFAT-fs (loop8): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d)
[  318.303706][ T1119] block nbd1: Possible stuck request ffff8880213d8000: control (read@0,1024B). Runtime 150 seconds
[  318.307764][ T1119] block nbd1: Possible stuck request ffff8880213d8200: control (read@1024,1024B). Runtime 150 seconds
[  318.315319][ T1119] block nbd1: Possible stuck request ffff8880213d8400: control (read@2048,1024B). Runtime 150 seconds
[  318.319455][ T1119] block nbd1: Possible stuck request ffff8880213d8600: control (read@3072,1024B). Runtime 150 seconds
[  318.521176][T14448] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3308'.
[  318.613942][T14454] loop5: detected capacity change from 0 to 1024
[  318.616936][T14454] EXT4-fs: Ignoring removed nomblk_io_submit option
[  318.676999][T14454] EXT4-fs (loop5): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  318.705819][T14435] loop8: detected capacity change from 0 to 32768
[  318.724648][T14435] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.3305 (14435)
[  318.748273][T14435] BTRFS info (device loop8): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  318.758054][T14435] BTRFS info (device loop8): using sha256 (sha256-lib) checksum algorithm
[  318.889972][T14435] BTRFS info (device loop8): enabling ssd optimizations
[  318.905002][T14435] BTRFS info (device loop8): enabling free space tree
[  318.955041][T10140] EXT4-fs (loop5): unmounting filesystem 00000000-0500-0000-0000-000000000000.
[  319.105348][ T5238] Bluetooth: hci1: command 0x0406 tx timeout
[  319.120578][T13873] BTRFS info (device loop8): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  319.388084][T14495] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3315'.
[  319.536068][T14490] loop5: detected capacity change from 0 to 32768
[  319.548878][T14490] JBD2: Ignoring recovery information on journal
[  319.575832][T14490] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  319.612535][T14490] (syz.5.3316,14490,0):ocfs2_group_add:495 ERROR: The disk is too old and small. Force to do offline resize.
[  319.644522][T10140] ocfs2: Unmounting device (7,5) on (node local)
[  319.701193][   T51] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  319.849925][   T51] usb 9-1: Using ep0 maxpacket: 16
[  319.855333][   T51] usb 9-1: config 0 has an invalid interface number: 1 but max is 0
[  319.858466][   T51] usb 9-1: config 0 has no interface number 0
[  319.864208][   T51] usb 9-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  319.867519][   T51] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  319.871125][   T51] usb 9-1: Product: syz
[  319.872517][   T51] usb 9-1: Manufacturer: syz
[  319.874035][   T51] usb 9-1: SerialNumber: syz
[  319.881882][   T51] usb 9-1: config 0 descriptor??
[  319.891889][   T51] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  320.010031][  T791] usb 6-1: new high-speed USB device number 23 using dummy_hcd
[  320.159839][  T791] usb 6-1: Using ep0 maxpacket: 16
[  320.170973][  T791] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 16
[  320.174248][  T791] usb 6-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83
[  320.177948][  T791] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  320.189979][  T791] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  320.201131][  T791] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  320.204194][  T791] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  320.207005][  T791] usb 6-1: SerialNumber: syz
[  320.225651][T14504] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[  320.443534][  T791] usb 6-1: USB disconnect, device number 23
[  320.701178][   T51] gspca_spca1528: reg_w err -71
[  320.719866][   T51] spca1528 9-1:0.1: probe with driver spca1528 failed with error -71
[  320.724071][   T51] usb 9-1: USB disconnect, device number 3
[  320.816252][T14522] ptrace attach of "/syz-executor exec"[5844] was attempted by ""[14522]
[  321.107084][T14540] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode
[  321.114661][T14540] macvtap1: entered allmulticast mode
[  321.116452][T14540] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode
[  321.121632][T14540] mac80211_hwsim hwsim6 wlan0: left allmulticast mode
[  321.124114][T14540] mac80211_hwsim hwsim6 wlan0: left promiscuous mode
[  321.281845][  T792] usb 6-1: new high-speed USB device number 24 using dummy_hcd
[  321.423915][T14557] loop8: detected capacity change from 0 to 1024
[  321.463140][  T792] usb 6-1: Using ep0 maxpacket: 8
[  321.468328][  T792] usb 6-1: config 162 has an invalid interface number: 161 but max is 1
[  321.475664][  T792] usb 6-1: config 162 has an invalid interface number: 187 but max is 1
[  321.479212][  T792] usb 6-1: config 162 has an invalid descriptor of length 0, skipping remainder of the config
[  321.484254][  T792] usb 6-1: config 162 has no interface number 0
[  321.486958][  T792] usb 6-1: config 162 has no interface number 1
[  321.489589][  T792] usb 6-1: config 162 interface 161 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  321.498028][  T792] usb 6-1: config 162 interface 187 altsetting 1 endpoint 0x5 has invalid wMaxPacketSize 0
[  321.503267][   T33] audit: type=1326 audit(2000000050.522:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14560 comm="syz.8.3347" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5c3ef8ebe9 code=0x0
[  321.512055][  T792] usb 6-1: config 162 interface 187 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  321.517549][  T792] usb 6-1: config 162 interface 161 has no altsetting 0
[  321.520599][  T792] usb 6-1: config 162 interface 187 has no altsetting 0
[  321.525733][  T792] usb 6-1: New USB device found, idVendor=13d3, idProduct=3346, bcdDevice=62.b7
[  321.529533][  T792] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  321.533054][  T792] usb 6-1: Product: syz
[  321.534975][  T792] usb 6-1: Manufacturer: syz
[  321.536971][  T792] usb 6-1: SerialNumber: syz
[  321.745582][  T792] usb 6-1: ath9k_htc: Device endpoint numbers are not the expected ones
[  321.754369][  T792] usb 6-1: ath9k_htc: Device endpoint numbers are not the expected ones
[  321.761681][  T792] usb 6-1: USB disconnect, device number 24
[  322.337994][T14584] ip6tnl1: entered promiscuous mode
[  322.345286][T14584] ip6tnl1: entered allmulticast mode
[  322.851568][T14602] loop8: detected capacity change from 0 to 1024
[  323.225497][T14637] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  323.296055][T14641] loop5: detected capacity change from 0 to 2048
[  323.307863][T14641] hpfs: filesystem error: dir band size mismatch: dir_band_start==7b318cc2, dir_band_end==7b318cc3, n_dir_band==00000000; already mounted read-only
[  323.414327][T14656] loop5: detected capacity change from 0 to 256
[  323.421507][T14656] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d)
[  323.899697][ T2290] usb 6-1: new low-speed USB device number 25 using dummy_hcd
[  324.053574][ T2290] usb 6-1: config 0 has no interfaces?
[  324.056106][ T2290] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  324.061151][ T2290] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  324.067065][ T2290] usb 6-1: config 0 descriptor??
[  324.368139][T14664] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  324.372848][T14664] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  324.379912][   T33] audit: type=1800 audit(2000000053.382:136): pid=14664 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3393" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0
[  326.295245][   T33] audit: type=1326 audit(2000000055.313:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14690 comm="syz.0.3406" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f90af98ebe9 code=0x0
[  326.557257][   T51] usb 6-1: USB disconnect, device number 25
[  326.610314][ T2290] usb 9-1: new low-speed USB device number 4 using dummy_hcd
[  326.840152][ T2290] usb 9-1: config 32 has 1 interface, different from the descriptor's value: 2
[  326.845528][ T2290] usb 9-1: config 32 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 10
[  326.850739][ T2290] usb 9-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 255, setting to 8
[  326.856316][ T2290] usb 9-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7
[  326.861928][ T2290] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  327.178308][T14694] raw-gadget.3 gadget.8: fail, usb_ep_enable returned -22
[  327.406324][ T2290] usb 9-1: string descriptor 0 read error: -71
[  327.426318][ T2290] usb 9-1: USB disconnect, device number 4
[  327.659186][T14725] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3421'.
[  328.436570][T14757] loop5: detected capacity change from 0 to 764
[  329.122772][T14773] Attempt to restore checkpoint with obsolete wellknown handles
[  330.295967][T14795] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3452'.
[  330.482945][T14802] loop8: detected capacity change from 0 to 32768
[  330.608880][T14810] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3459'.
[  330.811664][T14821] loop8: detected capacity change from 0 to 32768
[  330.814845][T14821] bcachefs (/dev/loop8): error validating superblock: Invalid superblock section members_v2: device 0: too many buckets (got 4398046511232, max 2147483583)
[  330.814845][T14821] members_v2 (size 152):
[  330.814845][T14821] Device:                        0
[  330.814845][T14821]   Label:                       (none)
[  330.814845][T14821]   UUID:                        7af6772b-00de-4159-84cd-1faead05aceb
[  330.814845][T14821]   Size:                        576460752320200704
[  330.814845][T14821]   read errors:                 0
[  330.814845][T14821]   write errors:                0
[  330.814845][T14821]   checksum errors:             0
[  330.814845][T14821]   seqread iops:                0
[  330.814845][T14821]   seqwrite iops:               0
[  330.814845][T14821]   randread iops:               0
[  330.814845][T14821]   randwrite iops:              0
[  330.814845][T14821]   Bucket size:                 131072
[  330.814845][T14821]   First bucket:                0
[  330.814845][T14821]   Buckets:                     4398046511232
[  330.814845][T14821]   Last mount:                  1714681267
[  330.814845][T14821]   Last superblock write:       42
[  330.814845][T14821]   State:                       rw
[  330.814845][T14821]   Data allowed:                journal,btree,user
[  330.814845][T14821]   Has data:                    (none)
[  330.814845][T14821]   Btree allocated bitmap blocksize:256
[  330.814845][T14821]   Btree allocated bitmap:      0000000000000000000001000010000010011000
[  330.814930][T14821] bcachefs: bch2_fs_get_tree() error: invalid_sb_members
[  330.840067][T14832] netlink: 'syz.0.3468': attribute type 4 has an invalid length.
[  330.860459][    C1] vkms_vblank_simulate: vblank timer overrun
[  330.934830][T14834] loop8: detected capacity change from 0 to 64
[  333.358035][T14859] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3480'.
[  333.361703][T14859] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3480'.
[  337.233852][T14913] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3505'.
[  341.497594][T14970] ksmbd: Unknown IPC event: 3, ignore.
[  343.799363][ T5238] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  343.802849][ T5238] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  343.807096][ T5238] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  343.813634][ T5238] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  343.817127][ T5238] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  343.921663][T15006] chnl_net:caif_netlink_parms(): no params data found
[  343.973654][T15006] bridge0: port 1(bridge_slave_0) entered blocking state
[  343.976648][T15006] bridge0: port 1(bridge_slave_0) entered disabled state
[  343.980202][T15006] bridge_slave_0: entered allmulticast mode
[  343.984241][T15006] bridge_slave_0: entered promiscuous mode
[  343.988942][T15006] bridge0: port 2(bridge_slave_1) entered blocking state
[  343.991935][T15006] bridge0: port 2(bridge_slave_1) entered disabled state
[  343.995370][T15006] bridge_slave_1: entered allmulticast mode
[  344.000043][T15006] bridge_slave_1: entered promiscuous mode
[  344.029031][T15006] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  344.035236][T15006] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  344.068152][T15006] team0: Port device team_slave_0 added
[  344.074544][T15006] team0: Port device team_slave_1 added
[  344.102778][T15006] batman_adv: batadv0: Adding interface: batadv_slave_0
[  344.105585][T15006] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  344.115904][T15006] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  344.121086][T15006] batman_adv: batadv0: Adding interface: batadv_slave_1
[  344.123511][T15006] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  344.133037][T15006] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  344.161494][T15006] hsr_slave_0: entered promiscuous mode
[  344.163890][T15006] hsr_slave_1: entered promiscuous mode
[  344.166101][T15006] debugfs: 'hsr0' already exists in 'hsr'
[  344.167913][T15006] Cannot create hsr debugfs directory
[  344.297491][T15006] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  344.308309][T15006] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  344.314524][T15006] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  344.320133][T15006] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  344.370368][T15006] bridge0: port 2(bridge_slave_1) entered blocking state
[  344.373364][T15006] bridge0: port 2(bridge_slave_1) entered forwarding state
[  344.378267][T15006] bridge0: port 1(bridge_slave_0) entered blocking state
[  344.381256][T15006] bridge0: port 1(bridge_slave_0) entered forwarding state
[  344.446639][T15006] 8021q: adding VLAN 0 to HW filter on device bond0
[  344.462742][ T1210] bridge0: port 1(bridge_slave_0) entered disabled state
[  344.466678][ T1210] bridge0: port 2(bridge_slave_1) entered disabled state
[  344.495676][T15006] 8021q: adding VLAN 0 to HW filter on device team0
[  344.508498][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[  344.511528][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[  344.528250][T15034] netlink: 'syz.0.3552': attribute type 21 has an invalid length.
[  344.531523][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[  344.531625][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[  344.543549][T15034] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3552'.
[  344.576097][T15006] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  344.747567][T15006] 8021q: adding VLAN 0 to HW filter on device batadv0
[  344.910542][T15006] veth0_vlan: entered promiscuous mode
[  344.918227][T15006] veth1_vlan: entered promiscuous mode
[  344.965012][T15006] veth0_macvtap: entered promiscuous mode
[  344.999583][T15006] veth1_macvtap: entered promiscuous mode
[  345.019960][T15006] batman_adv: batadv0: Interface activated: batadv_slave_0
[  345.035057][T15006] batman_adv: batadv0: Interface activated: batadv_slave_1
[  345.044180][   T12] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  345.047784][   T12] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  345.071409][   T12] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  345.075057][   T12] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  345.147652][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  345.150867][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  345.173329][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  345.176397][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  345.487360][T15065] loop9: detected capacity change from 0 to 32768
[  345.524260][T15065] XFS (loop9): DAX unsupported by block device. Turning off DAX.
[  345.582561][T15065] XFS (loop9): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  345.631498][T15065] XFS (loop9): Ending clean mount
[  345.636075][T15065] XFS (loop9): Quotacheck needed: Please wait.
[  345.670740][T15065] XFS (loop9): Quotacheck: Done.
[  345.900604][ T5238] Bluetooth: hci4: command tx timeout
[  345.949647][T15006] XFS (loop9): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  346.206916][ T5849] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[  346.220934][ T5849] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[  346.225154][ T5849] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[  346.231997][ T5849] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[  346.235433][ T5849] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[  346.449809][T15099] RDS: rds_bind could not find a transport for fe88::a, load rds_tcp or rds_rdma?
[  346.502727][T15088] chnl_net:caif_netlink_parms(): no params data found
[  346.573918][T15088] bridge0: port 1(bridge_slave_0) entered blocking state
[  346.578491][T15088] bridge0: port 1(bridge_slave_0) entered disabled state
[  346.582767][T15088] bridge_slave_0: entered allmulticast mode
[  346.586384][T15088] bridge_slave_0: entered promiscuous mode
[  346.590143][T15088] bridge0: port 2(bridge_slave_1) entered blocking state
[  346.592696][T15088] bridge0: port 2(bridge_slave_1) entered disabled state
[  346.595457][T15088] bridge_slave_1: entered allmulticast mode
[  346.601786][T15088] bridge_slave_1: entered promiscuous mode
[  346.644739][T15088] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  346.661871][T15088] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  346.704835][T15088] team0: Port device team_slave_0 added
[  346.708157][T15088] team0: Port device team_slave_1 added
[  346.733599][T15088] batman_adv: batadv0: Adding interface: batadv_slave_0
[  346.736385][T15088] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  346.771847][T15088] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  346.781886][T15088] batman_adv: batadv0: Adding interface: batadv_slave_1
[  346.784771][T15088] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  346.806932][T15112] loop9: detected capacity change from 0 to 32768
[  346.813748][T15088] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  346.873820][T15088] hsr_slave_0: entered promiscuous mode
[  346.876464][T15088] hsr_slave_1: entered promiscuous mode
[  346.881688][T15088] debugfs: 'hsr0' already exists in 'hsr'
[  346.884069][T15088] Cannot create hsr debugfs directory
[  346.895472][T15112] bcachefs (loop9): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names
[  346.895488][T15112]   allowing incompatible features above 0.0: (unknown version)
[  346.895496][T15112]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  346.932161][T15112] bcachefs (loop9): Using encoding defined by superblock: utf8-12.1.0
[  346.935548][T15112] bcachefs (loop9): initializing new filesystem
[  346.955872][T15112] bcachefs (loop9): going read-write
[  346.987848][T15112] bcachefs (loop9): marking superblocks
[  347.009636][T15112] bcachefs (loop9): initializing freespace
[  347.030896][T15112] bcachefs (loop9): done initializing freespace
[  347.046544][T15112] bcachefs (loop9): reading snapshots table
[  347.049841][T15112] bcachefs (loop9): reading snapshots done
[  347.121559][T15112] bcachefs (loop9): done starting filesystem
[  347.331996][T15006] bcachefs (loop9): shutting down
[  347.338109][T15006] bcachefs (loop9): going read-only
[  347.343196][T15006] bcachefs (loop9): finished waiting for writes to stop
[  347.351111][T15006] bcachefs (loop9): flushing journal and stopping allocators, journal seq 2
[  347.397939][T15006] bcachefs (loop9): flushing journal and stopping allocators complete, journal seq 3
[  347.406113][T15006] bcachefs (loop9): clean shutdown complete, journal seq 4
[  347.409519][T15006] bcachefs (loop9): marking filesystem clean
[  347.441611][T15006] bcachefs (loop9): shutdown complete
[  347.686815][T15088] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  347.698553][T15088] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  347.706382][T15088] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  347.712473][T15088] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  347.805726][T15088] 8021q: adding VLAN 0 to HW filter on device bond0
[  347.841977][T15088] 8021q: adding VLAN 0 to HW filter on device team0
[  347.852950][ T6266] bridge0: port 1(bridge_slave_0) entered blocking state
[  347.855880][ T6266] bridge0: port 1(bridge_slave_0) entered forwarding state
[  347.895433][ T6266] bridge0: port 2(bridge_slave_1) entered blocking state
[  347.898306][ T6266] bridge0: port 2(bridge_slave_1) entered forwarding state
[  347.954348][T15088] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  347.979683][ T5849] Bluetooth: hci4: command tx timeout
[  348.131120][T15088] 8021q: adding VLAN 0 to HW filter on device batadv0
[  348.204630][T15088] veth0_vlan: entered promiscuous mode
[  348.227985][T15088] veth1_vlan: entered promiscuous mode
[  348.266775][T15088] veth0_macvtap: entered promiscuous mode
[  348.284506][T15088] veth1_macvtap: entered promiscuous mode
[  348.298769][ T5849] Bluetooth: hci5: command tx timeout
[  348.316936][T15088] batman_adv: batadv0: Interface activated: batadv_slave_0
[  348.338850][T15088] batman_adv: batadv0: Interface activated: batadv_slave_1
[  348.353251][ T5678] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  348.357180][ T5678] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  348.366981][ T5678] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  348.370735][ T5678] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  348.385767][ T1119] block nbd1: Possible stuck request ffff8880213d8000: control (read@0,1024B). Runtime 180 seconds
[  348.390743][ T1119] block nbd1: Possible stuck request ffff8880213d8200: control (read@1024,1024B). Runtime 180 seconds
[  348.395079][ T1119] block nbd1: Possible stuck request ffff8880213d8400: control (read@2048,1024B). Runtime 180 seconds
[  348.399418][ T1119] block nbd1: Possible stuck request ffff8880213d8600: control (read@3072,1024B). Runtime 180 seconds
[  348.566380][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  348.571150][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  348.675095][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  348.677755][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  348.833998][T15202] loop9: detected capacity change from 0 to 736
[  348.954825][T15211] input: syz1 as /devices/virtual/input/input19
[  349.343441][T15223] sg_write: data in/out 41084/1 bytes for SCSI command 0x1c-- guessing data in;
[  349.343441][T15223]    program syz.9.3592 not setting count and/or reply_len properly
[  349.387681][T15228] netlink: 'syz.9.3594': attribute type 5 has an invalid length.
[  349.949788][T15247] loop2: detected capacity change from 0 to 32768
[  349.957028][T15247] OCFS2: ERROR (device loop2): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Invalid dinode #74: fs_generation is 16737473
[  349.962056][T15247] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  349.965246][T15247] (syz.2.3598,15247,1):ocfs2_read_locked_inode:597 ERROR: status = -30
[  349.967956][T15247] (syz.2.3598,15247,1):_ocfs2_get_system_file_inode:144 ERROR: status = -30
[  349.970955][T15247] (syz.2.3598,15247,1):ocfs2_init_local_system_inodes:496 ERROR: status=-30, sysfile=9, slot=0
[  349.974329][T15247] (syz.2.3598,15247,1):ocfs2_init_local_system_inodes:505 ERROR: status = -30
[  349.977108][T15247] (syz.2.3598,15247,1):ocfs2_mount_volume:1758 ERROR: status = -30
[  349.981764][T15247] (syz.2.3598,15247,1):ocfs2_fill_super:1177 ERROR: status = -30
[  350.059509][ T5849] Bluetooth: hci4: command tx timeout
[  350.201031][T15266] netlink: 212368 bytes leftover after parsing attributes in process `syz.9.3606'.
[  350.204781][T15266] openvswitch: netlink: Port -8 exceeds max allowable 65535
[  350.385722][ T5849] Bluetooth: hci5: command tx timeout
[  350.547444][T15287] netem: change failed
[  350.673330][   T33] audit: type=1326 audit(2000000079.694:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15289 comm="syz.0.3617" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f90af98ebe9 code=0x0
[  350.742916][T15296] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3620'.
[  350.746052][T15296] openvswitch: netlink: nsh attribute has 65520 unknown bytes.
[  350.748953][T15296] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  351.299379][T15314] loop2: detected capacity change from 0 to 256
[  351.306299][T15314] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  351.496911][T15322] netlink: 56 bytes leftover after parsing attributes in process `syz.0.3632'.
[  351.628241][   T51] usb 3-1: new full-speed USB device number 7 using dummy_hcd
[  351.751508][T15338] loop9: detected capacity change from 0 to 2048
[  351.757979][T15338] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  351.779964][   T51] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  351.783930][   T51] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  351.792422][   T51] usb 3-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47
[  351.796219][   T51] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  351.807185][   T51] usb 3-1: config 0 descriptor??
[  351.815290][   T51] qmi_wwan 3-1:0.0: bogus CDC Union: master=3, slave=0
[  351.819039][   T51] qmi_wwan 3-1:0.0: probe with driver qmi_wwan failed with error -22
[  352.013759][   T51] usb 3-1: USB disconnect, device number 7
[  352.206991][  T792] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  352.228181][ T5849] Bluetooth: hci4: command tx timeout
[  352.378058][  T792] usb 10-1: Using ep0 maxpacket: 16
[  352.384233][  T792] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  352.388722][  T792] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  352.392168][  T792] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  352.395229][  T792] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  352.398745][  T792] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  352.404492][  T792] usb 10-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  352.407448][  T792] usb 10-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  352.410418][  T792] usb 10-1: Manufacturer: syz
[  352.413354][  T792] usb 10-1: config 0 descriptor??
[  352.468215][ T5849] Bluetooth: hci5: command tx timeout
[  352.688999][  T792] rc_core: IR keymap rc-hauppauge not found
[  352.692248][  T792] Registered IR keymap rc-empty
[  352.694527][  T792] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[  352.719043][  T792] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[  352.813987][  T792] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0
[  352.826706][  T792] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:0.0/rc/rc0/input20
[  352.846481][T15344] loop9: detected capacity change from 0 to 1764
[  352.862351][  T792] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[  352.888252][  T792] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[  352.918237][  T792] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[  352.927882][T15365] loop2: detected capacity change from 0 to 4096
[  352.935390][T15365] ntfs3: Invalid value for umask.
[  352.941066][  T792] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[  352.979520][  T792] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[  352.998447][  T792] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[  353.028150][  T792] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[  353.058168][  T792] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[  353.091251][  T792] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[  353.108157][  T792] mceusb 10-1:0.0: Error: mce write submit urb error = -90
[  353.138825][  T792] mceusb 10-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  353.141670][  T792] mceusb 10-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  353.148522][  T792] usb 10-1: USB disconnect, device number 2
acpid: input device has been disconnected, fd 9
[  353.242143][T15383] CUSE: DEVNAME unspecified
[  353.568004][   T51] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  353.719471][   T51] usb 3-1: Using ep0 maxpacket: 32
[  353.723468][   T51] usb 3-1: config 8 has an invalid interface number: 203 but max is 0
[  353.727023][   T51] usb 3-1: config 8 has no interface number 0
[  353.732278][   T51] usb 3-1: config 8 interface 203 has no altsetting 0
[  353.739316][   T51] usb 3-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=eb.7a
[  353.742940][   T51] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  353.746139][   T51] usb 3-1: Product: syz
[  353.747562][   T51] usb 3-1: Manufacturer: syz
[  353.750276][   T51] usb 3-1: SerialNumber: syz
[  354.215599][T15416] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3672'.
[  354.579898][ T5849] Bluetooth: hci5: command tx timeout
[  354.984832][T15400] loop9: detected capacity change from 0 to 262144
[  355.114702][T15400] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.3664 (15400)
[  355.190392][   T51] port100 3-1:8.203: NFC: Could not find bulk-in or bulk-out endpoint
[  355.201101][   T51] usb 3-1: USB disconnect, device number 8
[  355.206925][T15400] BTRFS info (device loop9): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53
[  355.211411][T15400] BTRFS info (device loop9): using xxhash64 (xxhash64-generic) checksum algorithm
[  355.265260][ T3393] BTRFS warning (device loop9): checksum verify failed on logical 22036480 mirror 1 wanted 0x23e101be1e001a29 found 0x09049c5cc74d15fb level 0
[  355.279651][T15400] BTRFS info (device loop9): read error corrected: ino 0 off 22036480 (dev /dev/loop9 sector 43040)
[  355.284002][T15400] BTRFS info (device loop9): read error corrected: ino 0 off 22040576 (dev /dev/loop9 sector 43048)
[  355.288430][T15400] BTRFS info (device loop9): read error corrected: ino 0 off 22044672 (dev /dev/loop9 sector 43056)
[  355.292672][T15400] BTRFS info (device loop9): read error corrected: ino 0 off 22048768 (dev /dev/loop9 sector 43064)
[  355.311648][T15400] BTRFS info (device loop9): enabling ssd optimizations
[  355.314709][T15400] BTRFS info (device loop9): enabling free space tree
[  355.399217][T15400] BTRFS info (device loop9): balance: start -d -mdevid=17179869184,vrange=1048640..0 -sdevid=17179869184,vrange=1048640..0
[  355.412368][T15400] BTRFS info (device loop9): relocating block group 22020096 flags system|dup
[  355.442882][T15400] BTRFS info (device loop9): relocating block group 13631488 flags data
[  355.485479][T15462] ALSA: mixer_oss: invalid OSS volume ''
[  355.488914][T15400] BTRFS info (device loop9): found 1 extents, stage: move data extents
[  355.519696][T15400] BTRFS info (device loop9): found 1 extents, stage: update data pointers
[  355.537771][T15400] BTRFS info (device loop9): balance: ended with status: 0
[  355.588404][T15006] BTRFS info (device loop9): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53
[  355.837898][   T51] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  355.994064][   T51] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 129, changing to 11
[  355.999039][   T51] usb 3-1: New USB device found, idVendor=046d, idProduct=ca03, bcdDevice= 0.00
[  356.002538][   T51] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  356.007190][   T51] usb 3-1: config 0 descriptor??
[  356.236833][T15487] mmap: syz.0.3698 (15487): VmData 37470208 exceed data ulimit 33554432. Update limits or use boot option ignore_rlimit_data.
[  356.318453][ T5874] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[  356.416892][   T51] logitech 0003:046D:CA03.0014: unbalanced delimiter at end of report description
[  356.420724][   T51] logitech 0003:046D:CA03.0014: parse failed
[  356.422987][   T51] logitech 0003:046D:CA03.0014: probe with driver logitech failed with error -22
[  356.474366][ T5874] usb 10-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  356.479450][ T5874] usb 10-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  356.484158][ T5874] usb 10-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  356.489779][ T5874] usb 10-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[  356.493627][ T5874] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  356.504936][T15479] raw-gadget.2 gadget.9: fail, usb_ep_enable returned -22
[  356.621589][  T792] usb 3-1: USB disconnect, device number 9
[  356.913630][ T5874] aiptek 10-1:17.0: Aiptek using 400 ms programming speed
[  356.919316][ T5874] input: Aiptek as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:17.0/input/input21
[  356.944554][ T5874] usb 10-1: USB disconnect, device number 3
[  356.944655][    C1] aiptek 10-1:17.0: aiptek_irq - usb_submit_urb failed with result -19
acpid: input device has been disconnected, fd 3
[  357.272157][T15519] loop2: detected capacity change from 0 to 512
[  357.285174][T15519] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2
[  357.290755][T15519] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2
[  357.308189][T15519] EXT4-fs (loop2): 1 truncate cleaned up
[  357.311856][T15519] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  357.355225][T15088] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  357.529301][T15529] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  357.856518][T15544] loop2: detected capacity change from 0 to 512
[  357.860174][T15544] EXT4-fs: Ignoring removed oldalloc option
[  357.862755][T15544] EXT4-fs: Ignoring removed mblk_io_submit option
[  357.866376][T15544] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  357.887031][T15544] EXT4-fs (loop2): orphan cleanup on readonly fs
[  357.895378][T15544] Quota error (device loop2): do_check_range: Getting block 196613 out of range 1-5
[  357.903209][T15544] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0
[  357.904719][T15549] netlink: 212376 bytes leftover after parsing attributes in process `syz.9.3726'.
[  357.907133][T15544] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.3724: Failed to acquire dquot type 1
[  357.916627][T15544] EXT4-fs (loop2): 1 truncate cleaned up
[  357.928970][T15544] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  357.964151][T15544] EXT4-fs: Ignoring removed orlov option
[  357.965991][T15544] EXT4-fs: Remounting file system with no journal so ignoring journalled data option
[  357.971813][T15544] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  357.981742][T15544] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended
[  358.006524][T15544] EXT4-fs error (device loop2): __ext4_remount:6740: comm syz.2.3724: Abort forced by user
[  358.015501][T15544] EXT4-fs (loop2): Remounting filesystem read-only
[  358.017492][T15544] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  358.023725][T15544] ext4 filesystem being remounted at /44/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  358.094862][T15088] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  359.886601][T15628] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  360.214487][T15644] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3770'.
[  360.222215][T15644] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3770'.
[  360.276791][T15646] loop2: detected capacity change from 0 to 128
[  360.283357][T15646] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  360.292494][T15646] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  360.422134][T15650] loop2: detected capacity change from 0 to 2048
[  360.432353][T15650] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  360.514010][T15610] loop9: detected capacity change from 0 to 262144
[  360.518893][T15610] F2FS-fs (loop9): invalid crc value
[  360.562488][T15610] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  360.570008][T15610] F2FS-fs (loop9): Start checkpoint disabled!
[  360.583490][T15610] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5
[  360.643138][T15659] loop2: detected capacity change from 0 to 16
[  360.652707][T15659] erofs (device loop2): mounted with root inode @ nid 36.
[  362.852710][T15701] overlayfs: failed to clone upperpath
[  363.263563][T15722] loop2: detected capacity change from 0 to 2048
[  363.273842][T15722] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  363.325354][T15724] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  365.146762][T15743] loop2: detected capacity change from 0 to 32768
[  365.153993][T15743] jfs_mount: Mount Failure: superblock is corrupt!
[  365.157559][T15743] Mount JFS Failure: -22
[  365.159456][T15743] jfs_mount failed w/return code = -22
[  365.332208][T15753] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3815'.
[  365.440792][   T33] audit: type=1326 audit(2000000094.465:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15762 comm="syz.2.3820" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61dad8ebe9 code=0x7ffc0000
[  365.451101][   T33] audit: type=1326 audit(2000000094.465:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15762 comm="syz.2.3820" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61dad8ebe9 code=0x7ffc0000
[  365.471338][   T33] audit: type=1326 audit(2000000094.465:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15762 comm="syz.2.3820" exe="/syz-executor" sig=0 arch=c000003e syscall=193 compat=0 ip=0x7f61dad8ebe9 code=0x7ffc0000
[  365.486339][   T33] audit: type=1326 audit(2000000094.465:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15762 comm="syz.2.3820" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61dad8ebe9 code=0x7ffc0000
[  365.494942][   T33] audit: type=1326 audit(2000000094.465:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15762 comm="syz.2.3820" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61dad8ebe9 code=0x7ffc0000
[  365.716778][T15772] 9pnet_fd: Insufficient options for proto=fd
[  365.772884][T15774] netlink: 'syz.9.3824': attribute type 15 has an invalid length.
[  365.898415][T15779] netlink: 88 bytes leftover after parsing attributes in process `syz.0.3826'.
[  366.337448][ T2290] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[  366.490431][ T2290] usb 10-1: config 0 has an invalid interface number: 182 but max is 1
[  366.493981][ T2290] usb 10-1: config 0 has no interface number 1
[  366.503488][ T2290] usb 10-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=9c.af
[  366.516359][ T2290] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  366.541014][ T2290] usb 10-1: config 0 descriptor??
[  366.629685][T15798] unknown channel width for channel at 909000KHz?
[  366.632163][T15798] unknown channel width for channel at 909000KHz?
[  366.635876][T15798] unknown channel width for channel at 909000KHz?
[  366.776398][ T2290] usb 10-1: USB disconnect, device number 4
[  366.981154][T15812] 9pnet_fd: Insufficient options for proto=fd
[  367.058103][T15817] loop2: detected capacity change from 0 to 1024
[  367.086812][T15817] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  367.596438][T15849] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3857'.
[  367.677721][  T792] usb 10-1: new high-speed USB device number 5 using dummy_hcd
[  367.827257][  T792] usb 10-1: Using ep0 maxpacket: 16
[  367.832070][  T792] usb 10-1: config 0 interface 0 has no altsetting 0
[  367.959976][  T792] usb 10-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=29.82
[  367.964182][  T792] usb 10-1: New USB device strings: Mfr=83, Product=5, SerialNumber=10
[  367.967746][  T792] usb 10-1: Product: syz
[  367.969726][  T792] usb 10-1: Manufacturer: syz
[  367.971904][  T792] usb 10-1: SerialNumber: syz
[  367.976127][  T792] usb 10-1: config 0 descriptor??
[  368.212421][  T792] snd-usb-audio 10-1:0.0: probe with driver snd-usb-audio failed with error -22
[  368.225983][  T792] usb 10-1: USB disconnect, device number 5
[  368.264491][T15862] cgroup: noprefix used incorrectly
[  368.450308][   T33] audit: type=1326 audit(2000000097.475:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15873 comm="syz.0.3869" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90af98ebe9 code=0x7ffc0000
[  368.464971][   T33] audit: type=1326 audit(2000000097.475:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15873 comm="syz.0.3869" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90af98ebe9 code=0x7ffc0000
[  368.475887][   T33] audit: type=1326 audit(2000000097.485:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15873 comm="syz.0.3869" exe="/syz-executor" sig=0 arch=c000003e syscall=460 compat=0 ip=0x7f90af98ebe9 code=0x7ffc0000
[  368.491069][   T33] audit: type=1326 audit(2000000097.485:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15873 comm="syz.0.3869" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90af98ebe9 code=0x7ffc0000
[  368.500634][   T33] audit: type=1326 audit(2000000097.485:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15873 comm="syz.0.3869" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f90af98ebe9 code=0x7ffc0000
[  368.746337][T15882] loop9: detected capacity change from 0 to 256
[  368.749888][T15882] exfat: Deprecated parameter 'namecase'
[  368.752442][T15882] exfat: Deprecated parameter 'utf8'
[  368.760558][T15882] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d)
[  369.735708][ T2290] libceph: connect (1)[c::]:6789 error -101
[  369.739517][ T2290] libceph: mon0 (1)[c::]:6789 connect error
[  369.742384][T15900] ceph: No mds server is up or the cluster is laggy
[  369.993667][T15915] block nbd9: Attempted send on invalid socket
[  369.996748][T15915] I/O error, dev nbd9, sector 2 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2
[  371.367015][  T792] usb 10-1: new high-speed USB device number 6 using dummy_hcd
[  371.527195][  T792] usb 10-1: Using ep0 maxpacket: 32
[  371.535929][  T792] usb 10-1: config 0 has an invalid interface number: 136 but max is 0
[  371.539540][  T792] usb 10-1: config 0 has no interface number 0
[  371.548859][  T792] usb 10-1: New USB device found, idVendor=1a0a, idProduct=0101, bcdDevice=ee.df
[  371.552114][  T792] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  371.554804][  T792] usb 10-1: Product: syz
[  371.561476][  T792] usb 10-1: Manufacturer: syz
[  371.563442][  T792] usb 10-1: SerialNumber: syz
[  371.567510][  T792] usb 10-1: config 0 descriptor??
[  371.580750][  T792] usb_ehset_test 10-1:0.136: probe with driver usb_ehset_test failed with error -32
[  371.780975][   T10] usb 10-1: USB disconnect, device number 6
[  372.577008][   T10] usb 10-1: new high-speed USB device number 7 using dummy_hcd
[  372.733795][   T10] usb 10-1: config 0 has an invalid interface number: 112 but max is 0
[  372.737457][   T10] usb 10-1: config 0 has no interface number 0
[  372.740094][   T10] usb 10-1: config 0 interface 112 altsetting 0 endpoint 0xF has invalid maxpacket 1007, setting to 64
[  372.744530][   T10] usb 10-1: New USB device found, idVendor=3154, idProduct=721e, bcdDevice= 9.c6
[  372.749201][   T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  372.757127][   T10] usb 10-1: config 0 descriptor??
[  372.761434][   T10] usb-storage 10-1:0.112: USB Mass Storage device detected
[  372.964559][   T10] usb 10-1: USB disconnect, device number 7
[  373.670318][T16000] erspan1: entered promiscuous mode
[  373.673623][T16000] erspan1: entered allmulticast mode
[  373.710532][T16004] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3929'.
[  373.908379][  T791] usb 10-1: new full-speed USB device number 8 using dummy_hcd
[  374.062340][  T791] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  374.066889][  T791] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  374.070328][  T791] usb 10-1: Product: syz
[  374.072180][  T791] usb 10-1: Manufacturer: syz
[  374.074138][  T791] usb 10-1: SerialNumber: syz
[  374.083854][  T791] usb 10-1: config 0 descriptor??
[  374.297957][  T791] usb 10-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  375.320215][  T791] dvb_usb_rtl28xxu 10-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[  375.771995][   T10] usb 10-1: USB disconnect, device number 8
[  376.538729][   T34] INFO: task syz.1.1914:10885 blocked for more than 143 seconds.
[  376.546757][   T34]       Not tainted syzkaller #0
[  376.551303][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  376.559037][   T34] task:syz.1.1914      state:D stack:26728 pid:10885 tgid:10864 ppid:5854   task_flags:0x400040 flags:0x00004004
[  376.565055][T16046] loop9: detected capacity change from 0 to 32768
[  376.568638][T16046] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.3948 (16046)
[  376.570078][   T34] Call Trace:
[  376.577440][   T34]  <TASK>
[  376.578980][   T34]  __schedule+0x1798/0x4cc0
[  376.581041][   T34]  ? __lock_acquire+0xab9/0xd20
[  376.583602][T16046] BTRFS info (device loop9): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  376.584364][   T34]  ? __lock_acquire+0xab9/0xd20
[  376.587608][T16046] BTRFS info (device loop9): using sha256 (sha256-lib) checksum algorithm
[  376.593625][   T34]  ? __pfx___schedule+0x10/0x10
[  376.595804][   T34]  ? schedule+0x91/0x360
[  376.597894][   T34]  schedule+0x165/0x360
[  376.599921][   T34]  schedule_preempt_disabled+0x13/0x30
[  376.605420][   T34]  __mutex_lock+0x7e6/0x1350
[  376.607598][   T34]  ? __mutex_lock+0x5bb/0x1350
[  376.609820][   T34]  ? bdev_open+0xe0/0xd30
[  376.611869][   T34]  ? __pfx___mutex_lock+0x10/0x10
[  376.614195][   T34]  ? wait_on_inode+0xc0/0x230
[  376.616395][   T34]  ? kobject_get_unless_zero+0x161/0x1f0
[  376.621573][   T34]  ? disk_block_events+0xab/0x120
[  376.623696][T16046] BTRFS info (device loop9): enabling ssd optimizations
[  376.623952][   T34]  ? bdev_open+0xaf/0xd30
[  376.626456][T16046] BTRFS info (device loop9): enabling free space tree
[  376.631445][   T34]  bdev_open+0xe0/0xd30
[  376.633218][   T34]  blkdev_open+0x3a8/0x510
[  376.635168][   T34]  ? __pfx_blkdev_open+0x10/0x10
[  376.637395][   T34]  do_dentry_open+0x953/0x13f0
[  376.639521][   T34]  vfs_open+0x3b/0x340
[  376.641322][   T34]  ? path_openat+0x2ecd/0x3830
[  376.644356][   T34]  path_openat+0x2ee5/0x3830
[  376.646345][   T34]  ? rcu_is_watching+0x15/0xb0
[  376.648474][   T34]  ? stack_depot_save_flags+0x40/0x860
[  376.650782][   T34]  ? __pfx_path_openat+0x10/0x10
[  376.652942][   T34]  ? __pfx___schedule+0x10/0x10
[  376.655157][   T34]  do_filp_open+0x1fa/0x410
[  376.657169][   T34]  ? __lock_acquire+0xab9/0xd20
[  376.659286][   T34]  ? __pfx_do_filp_open+0x10/0x10
[  376.661434][   T34]  ? preempt_schedule_common+0x83/0xd0
[  376.663796][   T34]  ? _raw_spin_unlock+0x3f/0x50
[  376.665956][   T34]  ? alloc_fd+0x64c/0x6c0
[  376.667909][   T34]  do_sys_openat2+0x121/0x1c0
[  376.669914][   T34]  ? __se_sys_futex+0x36f/0x400
[  376.671982][   T34]  ? __pfx_do_sys_openat2+0x10/0x10
[  376.674211][   T34]  ? exc_page_fault+0x76/0xf0
[  376.676309][   T34]  ? rcu_is_watching+0x15/0xb0
[  376.678439][   T34]  __x64_sys_openat+0x138/0x170
[  376.680487][   T34]  do_syscall_64+0xfa/0x3b0
[  376.682395][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  376.684562][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  376.687075][   T34]  ? exc_page_fault+0x9f/0xf0
[  376.689009][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  376.691451][   T34] RIP: 0033:0x7f058a78d550
[  376.693371][   T34] RSP: 002b:00007f058b5a3b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
[  376.697094][   T34] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f058a78d550
[  376.700633][   T34] RDX: 0000000000000000 RSI: 00007f058b5a3c10 RDI: 00000000ffffff9c
[  376.704059][   T34] RBP: 00007f058b5a3c10 R08: 0000000000000000 R09: 0000000000000000
[  376.707414][   T34] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd
[  376.710867][   T34] R13: 00007f058a9c6218 R14: 00007f058a9c6180 R15: 00007ffe66a5c3f8
[  376.714219][   T34]  </TASK>
[  376.715627][   T34] 
[  376.715627][   T34] Showing all locks held in the system:
[  376.719140][   T34] 1 lock held by khungtaskd/34:
[  376.721316][   T34]  #0: ffffffff8e139f20 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  376.725214][   T34] 2 locks held by getty/5675:
[  376.729634][   T34]  #0: ffff88802735d0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  376.733683][   T34]  #1: ffffc900029062f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  376.737649][   T34] 1 lock held by udevd/5846:
[  376.739636][   T34]  #0: ffff8880212d3358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[  376.743526][   T34] 1 lock held by syz.1.1914/10885:
[  376.746803][   T34]  #0: ffff8880212d3358 (&disk->open_mutex){+.+.}-{4:4}, at: bdev_open+0xe0/0xd30
[  376.750650][   T34] 1 lock held by syz.5.3436/14761:
[  376.752638][   T34]  #0: ffff8880212d3358 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x1ac/0x340
[  376.756308][   T34] 1 lock held by syz.8.3469/14834:
[  376.759388][   T34]  #0: ffff8880212d3358 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x1ac/0x340
[  376.763487][   T34] 1 lock held by syz-executor/15006:
[  376.765531][   T34]  #0: ffffffff8e13f9b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730
[  376.769390][   T34] 1 lock held by syz.2.3845/15817:
[  376.771311][   T34]  #0: ffff8880212d3358 (&disk->open_mutex){+.+.}-{4:4}, at: sync_bdevs+0x1ac/0x340
[  376.774623][   T34] 
[  376.775702][T15006] BTRFS info (device loop9): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  376.780929][   T34] =============================================
[  376.780929][   T34] 
[  376.783692][   T34] NMI backtrace for cpu 0
[  376.783700][   T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  376.783709][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  376.783713][   T34] Call Trace:
[  376.783716][   T34]  <TASK>
[  376.783719][   T34]  dump_stack_lvl+0x189/0x250
[  376.783731][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  376.783739][   T34]  ? __pfx__printk+0x10/0x10
[  376.783753][   T34]  nmi_cpu_backtrace+0x39e/0x3d0
[  376.783763][   T34]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  376.783772][   T34]  ? __pfx__printk+0x10/0x10
[  376.783782][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  376.783794][   T34]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  376.783803][   T34]  watchdog+0xf93/0xfe0
[  376.783814][   T34]  ? watchdog+0x1de/0xfe0
[  376.783825][   T34]  kthread+0x711/0x8a0
[  376.783855][   T34]  ? __pfx_watchdog+0x10/0x10
[  376.783864][   T34]  ? __pfx_kthread+0x10/0x10
[  376.783873][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  376.783882][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  376.783890][   T34]  ? __pfx_kthread+0x10/0x10
[  376.783899][   T34]  ret_from_fork+0x3fc/0x770
[  376.783907][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  376.783915][   T34]  ? __switch_to_asm+0x39/0x70
[  376.783923][   T34]  ? __switch_to_asm+0x33/0x70
[  376.783931][   T34]  ? __pfx_kthread+0x10/0x10
[  376.783939][   T34]  ret_from_fork_asm+0x1a/0x30
[  376.783952][   T34]  </TASK>
[  376.783955][   T34] Sending NMI from CPU 0 to CPUs 1:
[  376.835175][    C1] NMI backtrace for cpu 1
[  376.835191][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) 
[  376.835203][    C1] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  376.835209][    C1] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  376.835229][    C1] Code: 53 e7 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 73 67 0e 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  376.835237][    C1] RSP: 0018:ffffc90000177de0 EFLAGS: 00000282
[  376.835248][    C1] RAX: bd1dd974d887f100 RBX: ffffffff819683c8 RCX: bd1dd974d887f100
[  376.835256][    C1] RDX: 0000000000000001 RSI: ffffffff8d9b8241 RDI: ffffffff8be33880
[  376.835262][    C1] RBP: ffffc90000177f20 R08: ffff888136632f9b R09: 1ffff11026cc65f3
[  376.835269][    C1] R10: dffffc0000000000 R11: ffffed1026cc65f4 R12: ffffffff8fa39030
[  376.835277][    C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110200d5000
[  376.835283][    C1] FS:  0000000000000000(0000) GS:ffff8881a3c18000(0000) knlGS:0000000000000000
[  376.835291][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  376.835299][    C1] CR2: 0000001b2e71aff8 CR3: 00000000229f2000 CR4: 00000000000006f0
[  376.835333][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  376.835340][    C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600
[  376.835347][    C1] Call Trace:
[  376.835352][    C1]  <TASK>
[  376.835356][    C1]  default_idle+0x13/0x20
[  376.835366][    C1]  default_idle_call+0x74/0xb0
[  376.835378][    C1]  do_idle+0x1e8/0x510
[  376.835391][    C1]  ? __pfx_do_idle+0x10/0x10
[  376.835400][    C1]  ? lockdep_hardirqs_on+0x9c/0x150
[  376.835420][    C1]  cpu_startup_entry+0x44/0x60
[  376.835429][    C1]  start_secondary+0x101/0x110
[  376.835444][    C1]  common_startup_64+0x13e/0x147
[  376.835463][    C1]  </TASK>
[  376.836146][   T34] Kernel panic - not syncing: hung_task: blocked tasks
[  376.906176][   T34] CPU: 0 UID: 0 PID: 34 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) 
[  376.909939][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  376.913911][   T34] Call Trace:
[  376.915344][   T34]  <TASK>
[  376.916592][   T34]  dump_stack_lvl+0x99/0x250
[  376.918519][   T34]  ? __asan_memcpy+0x40/0x70
[  376.920429][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  376.922619][   T34]  ? __pfx__printk+0x10/0x10
[  376.924617][   T34]  vpanic+0x281/0x750
[  376.926331][   T34]  ? __pfx_vpanic+0x10/0x10
[  376.928220][   T34]  ? preempt_schedule+0xae/0xc0
[  376.930201][   T34]  ? preempt_schedule_common+0x83/0xd0
[  376.932447][   T34]  panic+0xb9/0xc0
[  376.934055][   T34]  ? __pfx_panic+0x10/0x10
[  376.935915][   T34]  ? preempt_schedule_thunk+0x16/0x30
[  376.938199][   T34]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  376.940869][   T34]  watchdog+0xfd2/0xfe0
[  376.942647][   T34]  ? watchdog+0x1de/0xfe0
[  376.944516][   T34]  kthread+0x711/0x8a0
[  376.946270][   T34]  ? __pfx_watchdog+0x10/0x10
[  376.948259][   T34]  ? __pfx_kthread+0x10/0x10
[  376.949913][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  376.951641][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  376.953602][   T34]  ? __pfx_kthread+0x10/0x10
[  376.955228][   T34]  ret_from_fork+0x3fc/0x770
[  376.956916][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  376.959015][   T34]  ? __switch_to_asm+0x39/0x70
[  376.960586][   T34]  ? __switch_to_asm+0x33/0x70
[  376.962152][   T34]  ? __pfx_kthread+0x10/0x10
[  376.963656][   T34]  ret_from_fork_asm+0x1a/0x30
[  376.965252][   T34]  </TASK>
[  376.967080][   T34] Kernel Offset: disabled
[  376.968521][   T34] Rebooting in 86400 seconds..

VM DIAGNOSIS:
15:03:44  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff823bfb92 RBX=ffff888120e5e448 RCX=ffff88810e9c9cc0 RDX=0000000000000000
RSI=000000000000a000 RDI=ffff888120e5e448 RBP=ffffc9000340fdd0 RSP=ffffc9000340fc98
R8 =ffffffff8fa39037 R9 =1ffffffff1f47206 R10=dffffc0000000000 R11=ffffffff8201bcb0
R12=dffffc0000000000 R13=ffff888120e5e378 R14=ffff888120e5e3f8 R15=1ffff110241cbca0
RIP=ffffffff819a9ad0 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055556592d500 ffffffff 00c00000
GS =0000 ffff8880b8618000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055d203a607e8 CR3=0000000026c10000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 ff000000000000ff XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=6161616161616161 6161616161616161
XMM06=6161616161616161 6161616161616161 XMM07=6161616161616161 6161616161616161
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007f90afa12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffc90007740000 RBX=1ffff1102131425a RCX=ffff88802035b980 RDX=0000000000010000
RSI=ffff8881098a0000 RDI=0000000000000017 RBP=0000000000000080 RSP=ffffc900001e0dc0
R8 =ffffffff8fa39037 R9 =1ffffffff1f47206 R10=dffffc0000000000 R11=ffffffff8699e120
R12=dffffc0000000000 R13=ffff8881098a12d0 R14=ffff8881098a0000 R15=dffffc0000000000
RIP=ffffffff8699e168 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f644f54f6c0 ffffffff 00c00000
GS =0000 ffff8881a3c18000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f64453ff000 CR3=000000012d504000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=00007f644f54e5a0 00007f644f54e580
XMM02=00007f644f54e6e0 00007f644f54e560 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00007f644f54e5a0 XMM05=0000000000000000 00007f644f54e6e0
XMM06=00007f644f54e6e0 00007f644f54e560 XMM07=00007f644f54e5a0 00007f644f54e580
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 00007f644e812fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
