last executing test programs:

4m55.877562705s ago: executing program 0 (id=1):
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x6, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x1, @pix={0xb5, 0xa, 0x31384142, 0x8, 0x0, 0x7, 0xa, 0x800, 0x1, 0x6, 0x0, 0x3}})

4m55.774351093s ago: executing program 0 (id=5):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002040)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0xf}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x18)

4m55.674341025s ago: executing program 0 (id=6):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x22002)
ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f00000001c0)={0xfa, 0x1, 0x8})

4m55.615571607s ago: executing program 0 (id=7):
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x40800)
readv(r0, &(0x7f0000000080)=[{&(0x7f0000000880)=""/97, 0x61}], 0x1)

4m55.532644778s ago: executing program 0 (id=8):
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000000240)={[{@nodiscard}, {@noinline_dentry}, {@alloc_mode_def}, {@six_active_logs}, {@quota}, {@fault_injection={'fault_injection', 0x3d, 0x10}}, {@discard}, {@noacl}, {@fsync_mode_posix}, {@alloc_mode_def}, {@noextent_cache}, {@two_active_logs}, {@fault_type={'fault_type', 0x3d, 0xfffffe}}]}, 0x1, 0x5505, &(0x7f0000000340)="$eJzs3E1rY9UbAPAn7XTe//Mv4sLdXBiEFiZh0nlBd6PO4At2KKMuXGmapCEzSW5p0rR25cKluPCbiIIrl34GF67diQvFnaDknlud+gJC08ZOfz+4ee45OXnuc8Iw8NxbEsCptZj9/GMlrsSFiJiPiMsRxXmlPAp3U3guIq5GxNwTR6Wc/33ibERcjIgrk+QpZ6V869Pr42u3f3jjp6++OXfm0mdffju7XQOz9nxE9DfT+U4/xbyT4qNyvjHuFrF/a1zG9Eb/cTnOU9xprxcZdhr76xpFvNlJ6/PN7eEkbvQazUnsdDeK+c1BuuBw3NnPU3zgUWOrGLfa60XsDvMidvZSXbt76f+2veEo5WmV+T4o0sdotB/TfHu3nfaz+biIzcGonE9581Z7dxLHZSwvF8281yrqWD/MN/3f9mZ3sL2bjdtbw24+yG7X6i/U6neq9a281R61b1Ub/dadW9lSpzdZVh21G/27nTzv9Nq1Zt5fzpY6zWa1Xs+W7rXXu41BVq/XbtZuVG8vl2fXs1cfvJP1WtnSJL7cHWyPur1htpFvZekTy9lK7eaLy9m1evbW6lq29vD+/dW1t9+79+6Dl1Zff6Vc9JeysqWVGysr1fqN6kp9+RTt/6Oy6CnuHw6lMusCAE4e/T8wC0fX/289jDj6/j/0/1Nxovrf097/H8H+4VD0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp9Z3C5+/VpwspvGlcv5/5dQz5bgSEXMR8evfmI+zB3LOl3kW/mH9wp9q+LoSRYbJNc6Vx8WIuFsev/z/qL8FAAAAeHp98eHVT1K3nl4WZ10QxyndtJm7/P6U8lUiYmHx+yllm5u8PDulZMW/7zOxO6VsxQ2s81NKlm65nZlWtn9l/kA4/0SopDB3rOUAAADH4mAncLxdCAAAAMfp41kXwGxUYv9R5v6z4OIv7/94IHjhwAgAAAA4gSqzLgAAAAA4ckX/7/f/AAAA4OmWfv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfmPnfm4TB6I4AD8bvLD/tGi1921lb1DGlrDHPUYUkCYoIAfSQhqgBnJLCRFEeBwCEYdIHttK9H2SMxnL/HiD4DAz0gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF26r9aL26vf121zdvt28owGAAAAuGRbrRf1P7PU/9rc/97c+tn0i4goI+LS3H0Un84yR01O9fL8zenz1asa7iLqhMN7TJrrS0T8aa7HH11/CgAAAPBxbZareZqtpz+zoQuiT2nRpvz2N1NeERHV7CFTWnnI+5UprP5+j+N/prR6AWuaKSwtuY1zpb1J/XM/rtpNT5oiNeXFlx2LzDZ2AACgR6Ozpt9ZCAAAAH36N3QBDKOI563M41bgJDXN9t7nsx4AAADwDhVDFwAAAAB0rp7/93T+3975fwAAADCMdP4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXdpW68VmuZq3zdnt28kzGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhif95RIATCIAz2ru9M5v6HlQZNTU2qQPj4G4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIv9eUmBEAiCKJgz/nfS9z+sJOgZRIiAhkcVtWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIud+3mNo4oDAP5mZmdrq+IaZQ8RUfCgF7vd1tbexIMSPPgnCCHd1titP9ocbCliLt4k515EjyKCEm/9H3JOIJd4y2EPETwrMzuTnfwA118zm+TzgTfvu8Mw7/tmIeQ77yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACURm9P4iQ7dMZxXJzb3Hu4lPVbh/rM47Xt+axlcVRn0ifDi9UPUbe5RAAAADg7krK+DyHspOsLWR938vo/La/Jav5vnx7HZT1/uO4v+7L2z9ovP+8+vz9QZzxOdtOby8PBpaOptP6/Wc62Z/7yilb+5PN3L0n+hcTvrT43SvPnGX29sfFOOw/P1ZEtAPBPXCz7Iih/H8r6fpOJAXBmtCqFd1n/J51mcwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACow2g1PFnGUQhhvjWJM1t7D5eO6x+vbc+X7dqjR2vhy8k9s1ukIYSby8PBpVpnM9vu3X9we3E4HNytP3gphNDU6G8V07/9wRQXh9DI8xH8R0FcfNmzks/JCBr8oQQAwKmUFi2r63fS9YXsXDQXwh/fHaz/X63EYcr6f/fDa5vVsar1f7+2Gc6+3sqdT3v37j94ffnO4q3BrcHHb1zuv9m/cv3q1eu9/F1JzxsTAAAA/p120ar1fzx3dP3/QiUOU9b/n33T/6I6VqL+P9Zk0a/pTAAAAM62Z1/+/bfomPNRux0+X1xZudsfH/c/Xx4fG0j1bztXtGr9n8w1nRUAAABQh9FqdGD9/0YlDlOu/z/1/Qs/Vu+ZhBDOF+v/F5c+Gd6obzozrY4/J256jgAAADTrfNGq6/9pvv8/3t/yEIcQXntlHBf/BnCq+j9596sfqmNV9/9fqW+KMynujp9H3ndDaHWbzggAAIDT7ImiZcX+r+n6wkc/XXi/bf8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQN3+DAAA//962D6S")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file2\x00', 0x1050c2, 0x40)
write$cgroup_subtree(r0, 0x0, 0x32600)
mkdir(&(0x7f00000002c0)='./file0\x00', 0x49)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
rmdir(&(0x7f0000000440)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x441, 0x20)
unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200)

4m54.984761005s ago: executing program 0 (id=11):
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="1201000000000010ac0544020000000000010902240001000000000904000000030002"], 0x0)
r0 = io_uring_setup(0x4ba, &(0x7f00000001c0)={0x0, 0xc988, 0x2, 0x3, 0x315})
openat$mice(0xffffffffffffff9c, &(0x7f0000000dc0), 0x103041)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000001100), 0x2, 0x0)
dup3(r1, r0, 0x80000)

4m39.979897973s ago: executing program 32 (id=11):
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000680)=ANY=[@ANYBLOB="1201000000000010ac0544020000000000010902240001000000000904000000030002"], 0x0)
r0 = io_uring_setup(0x4ba, &(0x7f00000001c0)={0x0, 0xc988, 0x2, 0x3, 0x315})
openat$mice(0xffffffffffffff9c, &(0x7f0000000dc0), 0x103041)
r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000001100), 0x2, 0x0)
dup3(r1, r0, 0x80000)

4m23.597869538s ago: executing program 3 (id=302):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0x4, 0x8}, 0x50)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r1, r0}, 0xc)

4m23.433305032s ago: executing program 3 (id=305):
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x862b01)
ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f00000003c0)={0x55, 0x8ea9, 0xfffd, {0x0, 0x5}, {0x51, 0x2}, @cond=[{0x1ff, 0x5388, 0x6f5, 0x800, 0xc7, 0xb}, {0xffff, 0x5, 0x1, 0x46, 0x6, 0xfd}]})
r1 = syz_open_dev$evdev(&(0x7f0000000080), 0x2, 0x842)
sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f00000049c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40080}, 0x0)
ioctl$EVIOCGBITSND(r1, 0x40044591, 0x0)
write$char_usb(r0, &(0x7f0000000040)="e2", 0x2250)

4m23.241323682s ago: executing program 3 (id=307):
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
unshare(0x18000400)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
r3 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43)
mknodat$loop(r3, &(0x7f00000002c0)='./file1\x00', 0x6000, 0x0)
chdir(&(0x7f00000003c0)='./bus\x00')
linkat(r3, &(0x7f0000000100)='./file1\x00', r3, &(0x7f0000000240)='./file0\x00', 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000a00)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./file1\x00', 0x2)

4m22.43835289s ago: executing program 3 (id=317):
syz_mount_image$erofs(&(0x7f0000000340), &(0x7f0000000580)='./file0\x00', 0x2000000, &(0x7f00000004c0)=ANY=[], 0x2, 0x222, &(0x7f0000000800)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})

4m22.203332447s ago: executing program 3 (id=318):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000000000000000000000000008500"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = syz_open_procfs(r0, &(0x7f0000000000)='stat\x00')
lseek(r3, 0x10000000005, 0x0)

4m21.912934412s ago: executing program 3 (id=321):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400)={0x2, 0x0, [{0x8000000, 0xfc, &(0x7f0000000480)=""/252}, {0x1, 0xf, &(0x7f0000000240)=""/15}]})
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f00000001c0)=0x304008000)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000003c0)={0x1})

4m21.743984674s ago: executing program 33 (id=321):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400)={0x2, 0x0, [{0x8000000, 0xfc, &(0x7f0000000480)=""/252}, {0x1, 0xf, &(0x7f0000000240)=""/15}]})
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f00000001c0)=0x304008000)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000003c0)={0x1})

4m7.911561587s ago: executing program 1 (id=402):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x9, 0x8, 0x2, 0xd}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000080000850000007300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000000), &(0x7f0000000140)=r1}, 0x20)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

4m7.800928394s ago: executing program 1 (id=404):
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000000240)=ANY=[@ANYBLOB='nodiscard,noinline_dentry,alloc_mode=default,active_logs=6,quota,fault_injection=00000020000000000016,discard,noacl,fsync_mode=posix,alloc_mode=default,noextent_cache,active_logs=2,fault_type=00000000000016777214,\x00'], 0x1, 0x5505, &(0x7f0000000340)="$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")

4m7.210894725s ago: executing program 1 (id=410):
r0 = syz_open_procfs(0x0, &(0x7f00000010c0)='timers\x00')
gettid()
timer_create(0x0, 0x0, &(0x7f0000000380))
pread64(r0, &(0x7f0000000480)=""/177, 0xb1, 0x38)

4m7.032390121s ago: executing program 1 (id=413):
syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x80, &(0x7f00000000c0)={[{}, {}, {@nls={'nls', 0x3d, 'maciceland'}}, {@force}]}, 0x44, 0x712, &(0x7f0000000c00)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x161)
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000400), 0x0, 0x0)

4m6.802346933s ago: executing program 1 (id=414):
syz_mount_image$minix(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000100)=ANY=[], 0xa, 0x234, &(0x7f0000000900)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0)
pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc)

4m5.982459568s ago: executing program 1 (id=418):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0x1, &(0x7f0000000f80))
socket$nl_generic(0x10, 0x3, 0x10)
readv(0xffffffffffffffff, 0x0, 0x0)

4m5.842913828s ago: executing program 34 (id=418):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x8, 0x1, &(0x7f0000000f80))
socket$nl_generic(0x10, 0x3, 0x10)
readv(0xffffffffffffffff, 0x0, 0x0)

3m4.363413557s ago: executing program 5 (id=948):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r1, 0x8004587d, &(0x7f0000000080)={0x0, r1, 0x9, 0x7fff, 0x0, 0x6})
madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9)

3m4.165574873s ago: executing program 5 (id=954):
r0 = syz_init_net_socket$ax25(0x3, 0x2, 0xe)
getsockopt$ax25_int(r0, 0x101, 0x5, &(0x7f00000002c0), &(0x7f0000000300)=0x4)

3m3.978122061s ago: executing program 5 (id=959):
fchown(0xffffffffffffffff, 0x0, 0xee01)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x9, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x9)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x8200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = fcntl$dupfd(r1, 0x0, r1)
ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f00000001c0)=0x9008000)

3m2.868232436s ago: executing program 5 (id=970):
syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x2bc3c1f, 0xffffffffffffffff, 0x7, 0x0, 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x1000, 0x0)

3m2.777727497s ago: executing program 5 (id=973):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x5d, 0x5d, 0x2, [@func_proto={0x0, 0x4, 0x0, 0xd, 0x0, [{0x0, 0x1}, {0x7, 0x2}, {0x4, 0x2}, {0x0, 0x5}]}, @type_tag={0x2, 0x0, 0x0, 0x12, 0x5}, @datasec={0x6, 0x2, 0x0, 0xf, 0x1, [{0x2, 0xdd37, 0x2}, {0x1, 0x2, 0x4ca}], "d5"}]}}, 0x0, 0x7a, 0x0, 0x0, 0x0, 0x10000}, 0x28)
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000325bd7000fbdbdf25050000000c000980080002000300000028000280080001"], 0x46}}, 0x4004)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0xa0, 0x30, 0x51b, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x7fffffff}}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0xa0}}, 0x14008004)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100002e00010000000000fcdbdf250801f2800c00180008ac0f0000000000140001"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0)

3m2.517399252s ago: executing program 5 (id=976):
syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000500)='./file2\x00', 0x0, &(0x7f0000000480)=ANY=[], 0x80, 0x4ac, &(0x7f00000011c0)="$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")
setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff})
truncate(&(0x7f0000000080)='./file1\x00', 0x400000f000)

3m2.213603228s ago: executing program 35 (id=976):
syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000500)='./file2\x00', 0x0, &(0x7f0000000480)=ANY=[], 0x80, 0x4ac, &(0x7f00000011c0)="$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")
setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff})
truncate(&(0x7f0000000080)='./file1\x00', 0x400000f000)

2m42.936469211s ago: executing program 6 (id=1104):
syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @random="7f0a00034011", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010102, @local}, @time_exceeded={0xb, 0x2, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @private}, "d000cbb00fe0b472"}}}}}, 0x0)

2m42.866049783s ago: executing program 6 (id=1105):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000280)=0x3, 0x4)

2m42.79372179s ago: executing program 6 (id=1107):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x2, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180a00000000000000000008000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x1b, 0xffffffffffffffff, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x2d}, 0x94)

2m42.792200934s ago: executing program 6 (id=1108):
r0 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1, 0x0, 0x2})
clock_gettime(0x0, 0x0)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3})
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000040)=0x1)
ioctl$vim2m_VIDIOC_STREAMOFF(r0, 0x40045612, &(0x7f0000000080)=0x2)
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000180)=@mmap={0x0, 0x1, 0x4, 0x8, 0x81, {}, {0x4, 0x0, 0x8, 0x5, 0x29, 0x9, 'E\x00'}, 0x4})

2m42.426908709s ago: executing program 6 (id=1111):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
capget(&(0x7f0000000240)={0x20071026}, 0x0)

2m42.426674785s ago: executing program 6 (id=1112):
sync()

2m37.356257223s ago: executing program 2 (id=1153):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000003c0), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={0xcc, r1, 0x1, 0x70bd28, 0x0, {}, [@WGDEVICE_A_PEERS={0x94, 0x8, 0x0, 0x1, [{0x90, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}, {0x68, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ALLOWEDIPS={0x40, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x1}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x3, 0x0}}, {0x5, 0x3, 0x2}}]}, {0x4}]}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}]}, 0xcc}, 0x1, 0x0, 0x0, 0x4004840}, 0x40000)

2m37.216606621s ago: executing program 2 (id=1154):
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000680), 0x0, 0x0)
read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/partitions\x00', 0x0, 0x0)
r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/compact_memory\x00', 0x1, 0x0)
sendfile(r2, r1, &(0x7f00000000c0)=0x58, 0xa)

2m37.216356611s ago: executing program 2 (id=1155):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000480)={{{@in=@rand_addr=0x64010101, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x2, 0x4e21, 0x4b, 0x2}, {0x0, 0x0, 0x4, 0x34a, 0x0, 0x0, 0x9c0, 0x6}, {0xffffbffffffffffc, 0x0, 0x0, 0x1}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in6=@mcast1, 0x4d3, 0x3c}, 0xa, @in6=@remote, 0x3507, 0x4, 0x3, 0x0, 0x0, 0x4000000, 0x1}}, 0xe8)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c)

2m37.126297299s ago: executing program 2 (id=1156):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x5, 0x16, 0x0, &(0x7f0000000080)="070029000000000088644c6588a840b3c1d68627675b", 0x0, 0x99b9, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x3a}, 0x50)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0)

2m36.267857341s ago: executing program 2 (id=1157):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
clock_settime(0x0, &(0x7f0000000240)={0x77359400})

2m35.276379253s ago: executing program 2 (id=1158):
syz_mount_image$minix(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000100)=ANY=[], 0xa, 0x234, &(0x7f0000000900)="$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")
sync()
unlink(&(0x7f00000001c0)='./file0\x00')

2m27.232110943s ago: executing program 36 (id=1112):
sync()

2m20.025301431s ago: executing program 37 (id=1158):
syz_mount_image$minix(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000100)=ANY=[], 0xa, 0x234, &(0x7f0000000900)="$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")
sync()
unlink(&(0x7f00000001c0)='./file0\x00')

2m11.983725732s ago: executing program 4 (id=1264):
syz_mount_image$xfs(&(0x7f0000009700), &(0x7f0000009740)='./file0\x00', 0x4000000, &(0x7f0000000340)={[{@filestreams}, {@dax_always}, {@discard}, {@pquota}, {@bsdgroups}, {@dax}, {@gqnoenforce}, {@filestreams}, {@largeio}]}, 0x1, 0x975c, &(0x7f000001c600)="$eJzs/QWcbXWhuP/PgUM3giBSUmKSEqJIhyJKihKCtKSACCgdSqigCCjd3d2d0t3d3R3/14EDKj5wvd/f/V+8Ps/zYmbPjlnz2Z/3Wou9Z83Ze6n5FptrYGDMgfd6//RvXbTbvcstPtpC6528y+Bb9t5x4SeGXjz8eydjzTH0dM6hp3MNDAwMGrqcQe9dNnj2k04eZmDwwJD//taoI408zKgDAyMPPTt0OQMzv3cyyiHv3+6dD8UDnXTIj9vhvY93G23IQoZ8sczyb609MDAw4t99/5BxTftPd1TaUnPOP9/frD5wG2bo1YP+dt27p4Pf+xjlgIGBUfYb+Oj1Y8hth/u77/3fbMjPHHPygSXu/QR+9v+5lppz/gU/5D9kWxx26GUzD9nGP7wNGvvwer7jYms8NnQKBw2duMF/t718Euv9/1NLzTnfQgMfvR0PLDzvpo++8+5+c/A8AwOD5x0YGDzfwMDg+T9pj/qf6RNd+aqqquoTac65ZhjynH2YDz0eGPH9x7X0uPCyN6d7cGBg8MLvPU8cvPz7zwWrqqqqqqqq6t+zOeeaYW54/j/mxz3/n/TMbcbq+X9VVVVVVVXV/50WnHOuGYY81//Q8//xP+75/7OPH33we3/7P8fM733X25/snaiqqqqqqqqqj22+BfH5/6Qf9/z/ipMmvbrn/1VVVVVVVVX/d1r0nXfe2fzvXmdv6MVTv389Pf8/+5G7l/3EBlxVVVVVVVVV/+3efuqMc/72mu8TD3zo9d7fbejvBQYdd961135iA/33aNA//z5ki096TP9fG+I84hGTDgysvcQnPZT6BPo/81r19f+X8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/cR9x/P+D1/8/+4QV338v+M9POcOtZ/ztO9997//BCy/41Jaf0NA/if5Tj/8PrD5oYGCo75irDwwMLDznootPPTAwcMatM0w5xcAH180y5LrZxh723TeIf/+ficw7Fi94i8neOx2yogyM88Eyjnt3+Qu+s/+wgz40iL9rrFMOPni1pV6Z8cOnU330/Rjmg69GO/nx9/8tyzAfutGIH/HN7y///fvyYeehY596yNin2WCtdadZf+NNvrL6WiusuvKqK6896/QzTTfjrLPONNM0q6y+5srTvvf5o+Zs0nc/z/2vzNmoH56zp+b8+zn78H37qDmb9OPn7N0l7nr5iN96f84G/zfnbO6Pn7NJVx/6g8aaY7iB5d+dm0EDA2PNM9zARkPOTDfCwMBY8w697fhDbvuNsYcZGNj5b3d0yFcjfLAODtpiyG2Wmm+xud7bTQ0M/O30b33E+9kPP3Tkcww9nXPo6Vzv/ZgxB/62Kg6e/aSThxkyF/8wHaOONPIwow4MjDz07NDlDMz63snIZ75/u494n/UPDfTdl1nZ4b2PdxttYGBglCFfTLzC2dsOmfr/hfdp/3/6//8/ec0y6IP1cdDQj6G3ec9rzvkX/NvPencahszdsEMvm3mIyf/wW9v/Q/803klHHJj0Y8b7Ma+L8260fq15xrhb/U+9Lg6Nd/yPGe/HvI7vR453yQf3eOy9Rf2PjfdD+7qF3v08x7+yrxv4+H3dsLSAla+a6MP7uu989BD/YXf5/hyN8KEbfdS+bvy9JtliyPLn+Ph93UJDxj7cP+zrhhkYGGvu9/d1Q3Z88w03sPOQM9MPOTP/cAOHDTkzw7tnRho4b8iZr664zporDblggX9eD6Ye9A9/oAnb2Xwf2s4G/d19H/Shv+8c/N7pKAe8/x5OH7HfHDT0bv2X+wpab8f8mPF+zPtP4TwPuWyl40cc93/q/adovCN+/Hg/6v2yP3K8O7189r3/w+P9YDsb7u+ma4F/ZTub9B+3syF3cdi/2zL+1cdhK8Ht3/t6/A+WtuFmj3/wmGK4Dy33v3pMscDHb2djrv6h79t+v4FBHzc38/8rczPhP+2Dtvz7uflXH29NPfl71w/7MXMzwqzLTfX+3Az/35yb+f+7czPHwLD/ODeDB+YdGBiYYuj+Yb5/ZW7G//i5+VfXm5Hh9u99vfIHF82z4xGXvD83H56L/2pu5vvvzs2kH6w3U7x73WTDDAw//MBGK2ywwXrTvff5/bPTv/f547fBef6VuRzzf2YuJxj8UXP5t1V11AevPuC/2Ab/aZ/+/vLn+e/O5cAHczmw+oc3lvp3rd//ucvfXf7u8neXv7v83eUv7iOO/3/w+v+7jznbLkN/uTHc1ZOMt90nPd5PuP/o4/9Dff/h+P92401y9TADH1z3scdn37vNv+Xx2ZnfOxnlkPdv9+HjgzzQjz4+u9+sM2/zv3R89v+p97fVf+H3cO3/3eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/uI+4vj/tO//HcAj0y3y/NADocM9sfXSi3zS4/2E+48+/j/U9x+O/y+y9NZPDDPwwXUfe/z/vds4jv/f/8Z8O/07H/9/f1vt+H/9F+XvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/uI+4vj/HO//HcDRR++xyft/D3DjWDuc8UmP9xPuP/X4f+//7639v7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y1/c0OP/Ax96e8vvt15gcPz//3Yf4b9I/pjFf9H8MYv/YvljFv/F88cs/kvkj1n8l8wfs/j/IH/M4r9U/pjF/4f5Yxb/H+WPWfyXzh+z+C+TP2bxXzZ/zOK/XP6Yxf/H+WMW/+Xzxyz+K+SPWfx/kj9m8V8xf8ziv1L+mMV/5fwxi/8q+WMW/1Xzxyz+q+WPWfxXzx+z+P80f8ziv0b+mMV/zfwxi/9a+WMW/7Xzxyz+6+SPWfzXzR+z+P8sf8ziv17+mMV//fwxi/8G+WMW/5/nj1n8N8wfs/j/In/M4r9R/pjFf+P8MYv/JvljFv9f5o9Z/H+VP2bx3zR/zOK/Wf6YxX/z/DGL/xb5Yxb/LfPHLP5b5Y9Z/LfOH7P4b5M/ZvHfNn/M4r9d/pjF/9f5Yxb/3+SPWfy3zx+z+O+QP2bx3zF/zOK/U/6Yxf+3+WMW/9/lj1n8f58/ZvHfOX/M4r9L/pjF/w/5Yxb/P+aPWfx3zR+z+P8pf8ziv1v+mMV/9/wxi/8e+WMW/z/nj1n8/5I/ZvHfM3/M4r9X/pjFf+/8MYv/PvljFv9988cs/vvlj1n8988fs/gfkD9m8T8wf8zif1D+mMX/4Pwxi/8h+WMW/0Pzxyz+h+WPWfwPzx+z+B+RP2bxPzJ/zOJ/VP6Yxf/o/DGL/zH5Yxb/Y/PHLP7H5Y9Z/I/PH7P4n5A/ZvE/MX/M4n9S/pjF/+T8MYv/KfljFv9T88cs/qflj1n8T88fs/ifkT9m8T8zf8zif1b+mMX/7Pwxi/85+WMW/3Pzxyz+5+WPWfzPzx+z+F+QP2bxvzB/zOJ/Uf6Yxf/i/DGL/yX5Yxb/S/PHLP6X5Y9Z/C/PH7P4X5E/ZvH/a/6Yxf/K/DGL/1X5Yxb/q/PHLP7X5I9Z/K/NH7P4X5c/ZvG/Pn/M4n9D/pjF/8b8MYv/TfljFv+b88cs/rfkj1n8b80fs/jflj9m8b89f8zif0f+mMX/zvwxi/9d+WMW/7vzxyz+9+SPWfzvzR+z+N+XP2bxvz9/zOL/QP6Yxf/B/DGL/0P5Yxb/h/PHLP6P5I9Z/B/NH7P4P5Y/ZvF/PH/M4v9E/pjF/8n8MYv/U/ljFv+n88cs/s/kj1n8n80fs/g/lz9m8X8+f8zi/0L+mMX/xfwxi/9L+WMW/5fzxyz+r+SPWfxfzR+z+L+WP2bxfz1/zOL/Rv6Yxf/N/DGL/1v5Yxb/t/PHLP7v5I9J/AcN5I9Z/Aflj1n8h8kfs/gPmz9m8R+cP2bxHy5/zOI/fP6YxX+E/DGL/4j5Yxb/kfLHLP4j549Z/EfJH7P4j5o/ZvEfLX/M4j96/pjFf4z8MYv/mPljFv+x8scs/mPnj1n8P5U/ZvEfJ3/M4j9u/pjF/9P5Yxb/8fLHLP7j549Z/D+TP2bxnyB/zOL/2fwxi/+E+WMW/4nyxyz+E+ePWfwnyR+z+E+aP2bx/1z+mMV/svf9R/yExvVvmsV/8rZ/zOI/Rf6YxX/K/DGL/1T5Yxb/z+ePWfynzh+z+H8hf8zi/8X8MYv/l/LHLP5fzh+z+H8lf8zi/9X8MYv/NPljFv9p88cs/tPlj1n8p88fs/jPkD9m8Z8xf8zi/7X8MYv/TPljFv+Z88cs/rPkj1n8Z80fs/h/PX/M4j9b/pjF/xv5Yxb/b+aPWfxnzx+z+H8rf8ziP0f+mMV/zvwxi/9c+WMW/7nzxyz+8+SPWfznzR+z+M+XP2bxnz9/zOK/QP6YxX/B/DGL/7fzxyz+38kfs/gvlD9m8f9u/pjFf+H8MYv/9/LHLP7fzx+z+C+SP2bxXzR/zOK/WP6YxX/x/DGL/xL5Yxb/JfPHLP4/yB+z+C+VP2bx/2H+mMX/R/ljFv+l88cs/svkj1n8l80fs/gvlz9m8f9x/pjFf/n8MYv/CvljFv+f5I9Z/FfMH7P4r5Q/ZvFfOX/M4r9K/pjFf9X8MYv/avljFv/V88cs/j/NH7P4r5E/ZvFfM3/M4r9W/pjFf+38MYv/OvljFv9188cs/j/LH7P4r5c/ZvFfP3/M4r9B/pjF/+f5Yxb/DfPHLP6/yB+z+G+UP2bx3zh/zOK/Sf6Yxf+X+WMW/1/lj1n8N80fs/hvlj9m8d88f8ziv0X+mMV/y/wxi/9W+WMW/63zxyz+2+SPWfy3zR+z+G+XP2bx/3X+mMX/N/ljFv/t88cs/jvkj1n8d8wfs/jvlD9m8f9t/pjF/3f5Yxb/3+ePWfx3zh+z+O+SP2bx/0P+mMX/j/ljFv9d88cs/n/KH7P475Y/ZvHfPX/M4r9H/pjF/8/5Yxb/v+SPWfz3zB+z+O+VP2bx3zt/zOK/T/6YxX/f/DGL/375Yxb//fPHLP4H5I9Z/A/MH7P4H5Q/ZvE/OH/M4n9I/pjF/9B/9H/4f31c/6ZZ/A9r+8cs/ofnj1n8j8gfs/gfmT9m8T8qf8zif3T+mMX/mPwxi/+x+WMW/+Pyxyz+x+ePWfxPyB+z+J+YP2bxPyl/zOJ/cv6Yxf+U/DGL/6n5Yxb/0/LHLP6n549Z/M/IH7P4n5k/ZvE/K3/M4n92/pjF/5z8MYv/ufljFv/z8scs/ufnj1n8L8gfs/hfmD9m8b8of8zif3H+mMX/kvwxi/+l+WMW/8vyxyz+l+ePWfyvyB+T+L9b/v+cxH/QlfljFv+r8scs/lfnj1n8r8kfs/hfmz9m8b8uf8zif33+mMX/hvwxi/+N+WMW/5vyxyz+N+ePWfxvyR+z+N+aP2bxvy1/zOJ/e/6Yxf+O/DGL/535Yxb/u/LHLP53549Z/O/JH7P435s/ZvG/L3/M4n9//pjF/4H8MYv/g/ljFv+H8scs/g/nj1n8H8kfs/g/mj9m8X8sf8zi/3j+mMX/ifwxi/+T+WMW/6fyxyz+T+ePWfyfyR+z+D+bP2bxfy5/zOL/fP6Yxf+F/DGL/4v5Yxb/l/LHLP4v549Z/F/JH7P4v5o/ZvF/Lf/h6UKL/+v5Yxb/N/LHLP5v5o9Z/N/KH7P4v50/ZvF/J39M4v/ul/n/cxb/QfljFv9h8scs/sPmj1n8B+ePWfyHyx+z+A+fP2bxHyF/zOI/Yv6YxX+k/DGL/8j5Yxb/UfLHLP6j5o9Z/EfLH7P4j54/ZvEfI3/M4j9m/pjFf6z8MYv/2PljFv9P5Y9Z/MfJH7P4j5s/ZvH/dP6YxX+8/DGL//j5Yxb/z+SPWfwnyB+z+H82f8ziP2H+mMV/ovwxi//E+WMW/0nyxyz+k+aPWfw/lz9m8Z8sf8ziP3n+mMV/ivwxi/+U+WMW/6nyxyz+n88fs/hPnT9m8f9C/pjF/4v5Yxb/L+WPWfy/nD9m8f9K/pjF/6v5Yxb/afLHLP7T5o8Numi34QYGBv7j/afLH7Ns/9Pnj1n8Z8gfs/jPmD9m8f9a/pjFf6b8MYv/zPljFv9Z8scs/rPmj1n8v54/ZvGfLX/M4v+N/DGL/zfzxyz+s+ePWfy/lT9m8Z8jf8ziP2f+mMV/rvwxi//c+WMW/3nyxyz+8+aPWfznyx+z+M+fP2bxXyB/zOK/YP6Yxf/b+WMW/+/kj1n8F8ofs/h/N3/M4r9w/pjF/3v5Yxb/7+ePWfwXyR+z+C+aP2bxXyx/zOK/eP6YxX+J/DGL/5L5Yxb/H+SPWfyXyh+z+P8wf8zi/6P8MYv/0vljFv9l8scs/svmj1n8l8sfs/j/OH/M4r98/pjFf4X8MYv/T/LHLP4r5o9Z/FfKH7P4r5w/ZvFfJX/M4r9q/pjFf7X8MYv/6vljFv+f5o9Z/NfIH7P4r5k/ZvFfK3/M4r92/pjFf538MYv/uvljFv+f5Y9Z/NfLH7P4r58/ZvHfIH/M4v/z/DGL/4b5Yxb/X+SPWfw3yh+z+G+cP2bx3yR/zOL/y/wxi/+v8scs/pvmj1n8N8sfs/hvnj9m8d8if8ziv2X+mMV/q/wxi//W+WMW/23yxyz+2+aPWfy3yx+z+P86f8zi/5v8MYv/9vljFv8d8scs/jvmj1n8d8ofs/j/Nn/M4v+7/DGL/+/zxyz+O+ePWfx3yR+z+P8hf8zi/8f8MYv/rvljFv8/5Y9Z/HfLH7P4754/ZvHfI3/M4v/n/DGL/1/yxyz+e+aPWfz3yh+z+O+dP2bx3yd/zOK/b/6YxX+//DGL//75Yxb/A/LHLP4H5o9Z/A/KH7P4H5w/ZvE/JH/M4n9o/pjF/7D8MYv/4fljFv8j8scs/kfmj1n8j8ofs/gfnT9m8T8mf8zif2z+mMX/uPwxi//x+WMW/xPyxyz+J+aPWfxPyh+z+J+cP2bxPyV/zOJ/av6Yxf+0/DGL/+n5Yxb/M/LHLP5n5o9Z/M/KH7P4n50/ZvE/J3/M4n9u/pjF/7z8MYv/+fljFv8L8scs/hfmj1n8L8ofs/hfnD9m8b8kf8zif2n+mMX/svwxi//l+WMW/yvyxyz+f80fs/hfmT9m8b8qf8zif3X+mMX/mvwxi/+1+WMW/+vyxyz+1+ePWfxvyB+z+N+YP2bxvyl/zOJ/c/6Yxf+W/DGL/635Yxb/2/LHLP63549Z/O/IH7P435k/ZvG/K3/M4n93/pjF/578MYv/vfljFv/78scs/vfnj1n8H8gfs/g/mD9m8X8of8zi/3D+mMX/kfwxi/+j+WMW/8fyxyz+j+ePWfyfyB+z+D+ZP2bxfyp/zOL/dP6Yxf+Z/DGL/7P5Yxb/5/LHLP7P549Z/F/IH7P4v5g/ZvF/KX/M4v9y/pjF/5X8MYv/q/ljFv/X8scs/q/nj1n838gfs/i/mT9m8X8rf8zi/3b+mMX/nfwxif+wA/ljFv9B+WMW/2Hyxyz+w+aPWfwH549Z/IfLH7P4D58/ZvEfIX/M4j9i/pjFf6T8MYv/yPljFv9R8scs/qPmj1n8R8sfs/iPnj9m8R8jf8ziP2b+mMV/rPwxi//Y+WMW/0/lj1n8x8kfs/iPmz9m8f90/pjFf7z8MYv/+PljFv/P5I9Z/CfIH7P4fzZ/zOI/Yf6YxX+i/DGL/8T5Yxb/SfLHLP6T5o9Z/D+XP2bxnyx/zOI/ef6YxX+K/DGL/5T5Yxb/qfLHLP6fzx+z+E+dP2bx/0L+mMX/i/ljFv8v5Y9Z/L+cP2bx/0r+mMX/q/ljFv9p8scs/tPmj1n8p8sfs/hPnz9m8Z8hf8ziP2P+mMX/a/ljFv+Z8scs/jPnj1n8Z8kfs/jPmj9m8f96/pjFf7b8MYv/N/LHLP7fzB+z+M+eP2bx/1b+mMV/jvwxi/+c+WMW/7nyxyz+c+ePWfznyR+z+M+bP2bxny9/zOI/f/6YxX+B/DGL/4L5Yxb/b+ePWfy/kz9m8V8of8zi/938MYv/wvljFv/v5Y9Z/L+fP2bxXyR/zOK/aP6YxX+x/DGL/+L5Yxb/JfLHLP5L5o9Z/H+QP2bxXyp/zOL/w/wxi/+P8scs/kvnj1n8l8kfs/gvmz9m8V8uf8zi/+P8MYv/8vljFv8V8scs/j/JH7P4r5g/ZvFfKX/M4r9y/pjFf5X8MYv/qvljFv/V8scs/qvnj1n8f5o/ZvFfI3/M4r9m/pjFf638MYv/2vljFv918scs/uvmj1n8f5Y/ZvFfL3/M4r9+/pjFf4P8MYv/z/PHLP4b5o9Z/H+RP2bx3yh/zOK/cf6YxX+T/DGL/y/zxyz+v8ofs/hvmj9m8d8sf8ziv3n+mMV/i/wxi/+W+WMW/63yxyz+W+ePWfy3yR+z+G+bP2bx3y5/zOL/6/wxi/9v8scs/tvnj1n8d8gfs/jvmD9m8d8pf8zi/9v8MYv/7/LHLP6/zx+z+O+cP2bx3yV/zOL/h/wxi/8f88cs/rvmj1n8/5Q/ZvHfLX/M4r97/pjFf4/8MYv/n/PHLP5/yR+z+O+ZP2bx3yt/zOK/d/6YxX+f/DGL/775Yxb//fLHLP77549Z/A/IH7P4H5g/ZvE/KH/M4n9w/pjF/5D8MYv/ofljFv/D8scs/ofnj1n8j8gfs/gfmT9m8T8qf8zif3T+mMX/mPwxi/+x+WMW/+Pyxyz+x+ePWfxPyB+z+J+YP2bxPyl/zOJ/cv6Yxf+U/DGL/6n5Yxb/0/LHLP6n549Z/M/IH7P4n5k/ZvE/K3/M4n92/pjF/5z8MYv/ufljFv/z8scs/ufnj1n8L8gfs/hfmD9m8b8of8zif3H+mMX/kvwxi/+l+WMW/8vyxyz+l+ePWfyvyB+z+P81f8zif2X+mMX/qvwxi//V+WMW/2vyxyz+1+aPWfyvyx+z+F+fP2bxvyF/zOJ/Y/6Yxf+m/DGL/835Yxb/W/LHLP635o9Z/G/LH7P4354/ZvG/I3/M4n9n/pjF/678MYv/3fljFv978scs/vfmj1n878sfs/jfnz9m8X8gf8zi/2D+mMX/ofwxi//D+WMW/0fyxyz+j+aPWfwfyx+z+D+eP2bxfyJ/zOL/ZP6Yxf+p/DGL/9P5Yxb/Z/LHLP7P5o9Z/J/LH7P4P58/ZvF/IX/M4v9i/pjF/6X8MYv/y/ljFv9X8scs/q/mj1n8X8sfs/i/nj9m8X8jf8zi/2b+mMX/rfwxi//b+WMW/3fyxyT+gwfyxyz+g/LHLP7D5I9Z/IfNH7P4D84fs/gPlz9m8R8+f8ziP0L+mMV/xPwxi/9I+WMW/5Hzxyz+o+SPWfxHzR+z+I+WP2bxHz1/zOI/Rv6YxX/M/DGL/1j5Yxb/sfPHLP6fyh+z+I+TP2bxHzd/zOL/6fwxi/94+WMW//Hzxyz+n8kfs/hPkD9m8f9s/pjFf8L8MYv/RPljFv+J88cs/pPkj1n8J80fs/h/Ln/M4j9Z/pjFf/L8MYv/FPljFv8p88cs/lPlj1n8P58/ZvGfOn/M4v+F/DGL/xfzxyz+X8ofs/h/OX/M4v+V/DGL/1fzxyz+0+SPWfynzR+z+E+XP2bxnz5/zOI/Q/6YxX/G/DGL/9fyxyz+M+WPWfxnzh+z+M+SP2bxnzV/zOL/9fwxi/9s+WMW/2/kj1n8v5k/ZvGfPX/M4v+t/DGL/xz5Yxb/OfPHLP5z5Y9Z/OfOH7P4z5M/ZvGfN3/M4j9f/pjFf/78MYv/AvljFv8F88cs/t/OH7P4fyd/zOK/UP6Yxf+7+WMW/4Xzxyz+38sfs/h/P3/M4r9I/pjFf9H8MYv/YvljFv/F88cs/kvkj1n8l8wfs/j/IH/M4r9U/pjF/4f5Yxb/H+WPWfyXzh+z+C+TP2bxXzZ/zOK/XP6Yxf/H+WMW/+Xzxyz+K+SPWfx/kj9m8V8xf8ziv1L+mMV/5fwxi/8q+WMW/1Xzxyz+q+WPWfxXzx+z+P80f8ziv0b+mMV/zfwxi/9a+WMW/7Xzxyz+6+SPWfzXzR+z+P8sf8ziv17+mMV//fwxi/8G+WMW/5/nj1n8N8wfs/j/In/M4r9R/pjFf+P8MYv/JvljFv9f5o9Z/H+VP2bx3zR/zOK/Wf6YxX/z/DGL/xb5Yxb/LfPHLP5b5Y9Z/LfOH7P4b5M/ZvHfNn/M4r9d/pjF/9f5Yxb/3+SPWfy3zx+z+O+QP2bx3zF/zOK/U/6Yxf+3+WMW/9/lj1n8f58/ZvHfOX/M4r9L/pjF/w/5Yxb/P+aPWfx3zR+z+P8pf8ziv1v+mMV/9/wxi/8e+WMW/z/nj1n8/5I/ZvHfM3/M4r9X/pjFf+/8MYv/PvljFv9988cs/vvlj1n8988fs/gfkD9m8T8wf8zif1D+mMX/4Pwxi/8h+WMW/0Pzxyz+h+WPWfwPzx+z+B+RP2bxPzJ/zOJ/VP6Yxf/o/DGL/zH5Yxb/Y/PHLP7H5Y9Z/I/PH7P4n5A/ZvE/MX/M4n9S/pjF/+T8MYv/KfljFv9T88cs/qflj1n8T88fs/ifkT9m8T8zf8zif1b+mMX/7Pwxi/85+WMW/3Pzxyz+5+WPWfzPzx+z+F+QP2bxvzB/zOJ/Uf6Yxf/i/DGL/yX5Yxb/S/PHLP6X5Y9Z/C/PH7P4X5E/ZvH/a/6Yxf/K/DGL/1X5Yxb/q/PHLP7X5I9Z/K/NH7P4X5c/ZvG/Pn/M4n9D/pjF/8b8MYv/TfljFv+b88cs/rfkj1n8b80fs/jflj9m8b89f8zif0f+mMX/zvwxi/9d+WMW/7vzxyz+9+SPWfzvzR+z+N+XP2bxvz9/zOL/QP6Yxf/B/DGL/0P5Yxb/h/PHLP6P5I9Z/B/NH7P4P5Y/ZvF/PH/M4v9E/pjF/8n8MYv/U/ljFv+n88cs/s/kj1n8n80fs/g/lz9m8X8+f8zi/0L+mMX/xfwxi/9L+WMW/5fzxyz+r+SPWfxfzR+z+L+WP2bxfz1/zOL/Rv6Yxf/N/DGL/1v5Yxb/t/PHLP7v5I9J/IcbyB+z+A/KH7P4D5M/ZvEfNn/M4j84f8ziP1z+mMV/+Pwxi/8I+WMW/xHzxyz+I+WPWfxHzh+z+I+SP2bxHzV/zOI/Wv6YxX/0/DGL/xj5Yxb/MfPHLP5j5Y9Z/MfOH7P4fyp/zOI/Tv6YxX/c/DGL/6fzxyz+4+WPWfzHzx+z+H8mf8ziP0H+mMX/s/ljFv8J88cs/hPlj1n8J84fs/hPkj9m8Z80f8zi/7n8MYv/ZPljFv/J88cs/lPkj1n8p8wfs/hPlT9m8f98/pjFf+r8MYv/F/LHLP5fzB+z+H8pf8zi/+X8MYv/V/LHLP5fzR+z+E+TP2bxnzZ/zOI/Xf6YxX/6/DGL/wz5Yxb/GfPHLP5fyx+z+M+UP2bxnzl/zOI/S/6YxX/W/DGL/9fzxyz+s+WPWfy/kT9m8f9m/pjFf/b8MYv/t/LHLP5z5I9Z/OfMH7P4z5U/ZvGfO3/M4j9P/pjFf978MYv/fPljFv/588cs/gvkj1n8F8wfs/h/O3/M4v+d/DGL/0L5Yxb/7+aPWfwXzh+z+H8vf8zi//38MYv/IvljFv9F88cs/ovlj1n8F88fs/gvkT9m8V8yf8zi/4P8MYv/UvljFv8f5o9Z/H+UP2bxXzp/zOK/TP6YxX/Z/DGL/3L5Yxb/H+ePWfyXzx+z+K+QP2bx/0n+mMV/xfwxi/9K+WMW/5Xzxyz+q+SPWfxXzR+z+K+WP2bxXz1/zOL/0/wxi/8a+WMW/zXzxyz+a+WPWfzXzh+z+K+TP2bxXzd/zOL/s/wxi/96+WMW//Xzxyz+G+SPWfx/nj9m8d8wf8zi/4v8MYv/RvljFv+N88cs/pvkj1n8f5k/ZvH/Vf6YxX/T/DGL/2b5Yxb/zfPHLP5b5I9Z/LfMH7P4b5U/ZvHfOn/M4r9N/pjFf9v8MYv/dvljFv9f549Z/H+TP2bx3z5/zOK/Q/6YxX/H/DGL/075Yxb/3+aPWfx/lz9m8f99/pjFf+f8MYv/LvljFv8/5I9Z/P+YP2bx3zV/zOL/p/wxi/9u+WMW/93zxyz+e+SPWfz/nD9m8f9L/pjFf8/8MYv/XvljFv+988cs/vvkj1n8980fs/jvlz9m8d8/f8zif0D+mMX/wPwxi/9B+WMW/4Pzxyz+h+SPWfwPzR+z+B+WP2bxPzx/zOJ/RP6Yxf/I/DGL/1H5Yxb/o/PHLP7H5I9Z/I/NH7P4H5c/ZvE/Pn/M4n9C/pjF/8T8MYv/SfljFv+T88cs/qfkj1n8T80fs/iflj9m8T89f8zif0b+mMX/zPwxi/9Z+WMW/7Pzxyz+5+SPWfzPzR+z+J+XP2bxPz9/zOJ/Qf6Yxf/C/DGL/0X5Yxb/i/PHLP6X5I9Z/C/NH7P4X5Y/ZvG/PH/M4n9F/pjF/6/5Yxb/K/PHLP5X5Y9Z/K/OH7P4X5M/ZvG/Nn/M4n9d/pjF//r8MYv/DfljFv8b88cs/jflj1n8b84fs/jfkj9m8b81f8zif1v+mMX/9vwxi/8d+WMW/zvzxyz+d+WPWfzvzh+z+N+TP2bxvzd/zOJ/X/6Yxf/+/DGL/wP5Yxb/B/PHLP4P5Y9Z/B/OH7P4P5I/ZvF/NH/M4v9Y/pjF//H8MYv/E/ljFv8n88cs/k/lj1n8n84fs/g/kz9m8X82f8zi/1z+mMX/+fwxi/8L+WMW/xfzxyz+L+WPWfxfzh+z+L+SP2bxfzV/zOL/Wv6Yxf/1/DGL/xv5Yxb/N/PHLP5v5Y9Z/N/OH7P4v5M/JvEffiB/zOI/KH/M4j9M/pjFf9j8MYv/4Pwxi/9w+WMW/+Hzxyz+I+SPWfxHzB+z+I+UP2bxHzl/zOI/Sv6YxX/U/DGL/2j5Yxb/0fPHLP5j5I9Z/MfMH7P4j5U/ZvEfO3/M4v+p/DGL/zj5Yxb/cfPHLP6fzh+z+I+XP2bxHz9/zOL/mfwxi/8E+WMW/8/mj1n8J8wfs/hPlD9m8Z84f8ziP0n+mMV/0vwxi//n8scs/pPlj1n8J88fs/hPkT9m8Z8yf8ziP1X+mMX/8/ljFv+p88cs/l/IH7P4fzF/zOL/pfwxi/+X88cs/l/JH7P4fzV/zOI/Tf6YxX/a/DGL/3T5Yxb/6fPHLP4z5I9Z/GfMH7P4fy1/zOI/U/6YxX/m/DGL/yz5Yxb/WfPHLP5fzx+z+M+WP2bx/0b+mMX/m/ljFv/Z88cs/t/KH7P4z5E/ZvGfM3/M4j9X/pjFf+78MYv/PPljFv9588cs/vPlj1n8588fs/gvkD9m8V8wf8zi/+38MYv/d/LHLP4L5Y9Z/L+bP2bxXzh/zOL/vfwxi//388cs/ovkj1n8F80fs/gvlj9m8V88f8ziv0T+mMV/yfwxi/8P8scs/kvlj1n8f5g/ZvH/Uf6YxX/p/LH/UP9BH7Iefpn8sf9Q/3f7++1/2fwxi/9y+WMW/x/nj1n8l88fs/ivkD9m8f9J/pjFf8X8sUEXDRo6M//Z/ivlj1m2/5Xzxyz+q+SPWfxXzR+z+K+WP2bxXz1/zOL/0/wxi/8a+WMW/zXzxyz+a+WPWfzXzh+z+K+TP2bxXzd/zOL/s/wxi/96+WMW//Xzxyz+G+SPWfx/nj9m8d8wf8zi/4v8MYv/RvljFv+N88cs/pvkj1n8f5k/ZvH/Vf6YxX/T/DGL/2b5Yxb/zfPHLP5b5I9Z/LfMH7P4b5U/ZvHfOn/M4r9N/pjFf9v8MYv/dvljFv9f549Z/H+TP2bx3z5/zOK/Q/6YxX/H/DGL/075Yxb/3+aPWfx/lz9m8f99/pjFf+f8MYv/LvljFv8/5I9Z/P+YP2bx3zV/zOL/p/wxi/9u+WMW/93zxyz+e+SPWfz/nD9m8f9L/pjFf8/8MYv/XvljFv+988cs/vvkj1n8980fs/jvlz9m8d8/f8zif0D+mMX/wPwxi/9B+WMW/4Pzxyz+h+SPWfwPzR+z+B+WP2bxPzx/zOJ/RP6Yxf/I/DGL/1H5Yxb/o/PHLP7H5I9Z/I/NH7P4H5c/ZvE/Pn/M4n9C/pjF/8T8MYv/SfljFv+T88cs/qfkj1n8T80fs/iflj9m8T89f8zif0b+mMX/zPwxi/9Z+WMW/7Pzxyz+5+SPWfzPzR+z+J+XP2bxPz9/zOJ/Qf6Yxf/C/DGL/0X5Yxb/i/PHLP6X5I9Z/C/NH7P4X5Y/ZvG/PH/M4n9F/pjF/6/5Yxb/K/PHLP5X5Y9Z/K/OH7P4X5M/ZvG/Nn/M4n9d/pjF//r8MYv/DfljFv8b88cs/jflj1n8b84fs/jfkj9m8b81f8zif1v+mMX/9vwxi/8d+WMW/zvzxyz+d+WPWfzvzh+z+N+TP2bxvzd/zOJ/X/6Yxf/+/DGL/wP5Yxb/B/PHLP4P5Y9Z/B/OH7P4P5I/ZvF/NH/M4v9Y/pjF//H8MYv/E/ljFv8n88cs/k/lj1n8n84fs/g/kz9m8X82f8zi/1z+mMX/+fwxi/8L+WMW/xfzHxgJLrP4v5Q/ZvF/OX/M4v9K/pjF/9X8MYv/a/ljFv/X88cs/m/kj1n838wfs/i/lT9m8X87f8zi/07+mMR/hIH8MYv/oPwxi/8w+WMW/2Hzxyz+g/PHLP7D5Y9Z/IfPH7P4j5A/ZvEfMX/M4j9S/pjFf+T8MYv/KPljFv9R88cs/qPlj1n8R88fs/iPkT9m8R8zf8ziP1b+QxvxH85Z/MfOH7P4fyp/zOI/Tv6YxX/c/DGL/6fzxyz+4+WPWfzHzx+z+H8mf8ziP0H+mMX/s/ljFv8J88cs/hPlj1n8J84fs/hPkj9m8Z80f8zi/7n8MYv/ZPljFv/J88cs/lPkj1n8p8wfs/hPlT9m8f98/pjFf+r8MYv/F/LHLP5fzB+z+H8pf8zi/+X8MYv/V/LHLP5fzR+z+E+TP2bxnzZ/zOI/Xf6YxX/6/DGL/wz5Yxb/GfPHLP5fyx+z+M+UP2bxnzl/zOI/S/6YxX/W/DGL/9fzxyz+s+WPWfy/kT9m8f9m/pjFf/b8MYv/t/LHLP5z5I9Z/OfMH7P4z5U/ZvGfO3/M4j9P/pjFf978MYv/fPljFv/588cs/gvkj1n8F8wfs/h/O3/M4v+d/DGL/0L5Yxb/7+aPWfwXzh+z+H8vf8zi//38MYv/IvljFv9F88cs/ovlj1n8F88fs/gvkT9m8V8yf8zi/4P8MYv/UvljFv8f5o9Z/H+UP2bxXzp/zOK/TP6YxX/Z/DGL/3L5Yxb/H+ePWfyXzx+z+K+QP2bx/0n+mMV/xfwxi/9K+WMW/5Xzxyz+q+SPWfxXzR+z+K+WP2bxXz1/zOL/0/wxi/8a+WMW/zXzxyz+a+WPWfzXzh+z+K+TP2bxXzd/zOL/s/wxi/96+WMW//Xzxyz+G+SPWfx/nj9m8d8wf8zi/4v8MYv/RvljFv+N88cs/pvkj1n8f5k/ZvH/Vf6YxX/T/DGL/2b5Yxb/zfPHLP5b5I9Z/LfMH7P4b5U/ZvHfOn/M4r9N/pjFf1v0b42w+G+XNmbx/3X+mMX/N/ljFv/t88cs/jvkj1n8d3zP/613Pqlx/Ztm8d+p7R+z+P82f8zi/7v8MYv/7/PHLP47549Z/HfJH7P4/yF/zOL/x/wxi/+u+WMW/z/lj1n8d8sfs/jvnj9m8d8jf8zi/+f8MYv/X/LHLP575o9Z/PfKH7P4750/ZvHfJ3/M4r9v/pjFf7/8MYv//vljFv8D8scs/gfmj1n8D8ofs/gfnD9m8T8kf8zif2j+mMX/sPwxi//h+WMW/yPyxyz+R+aPWfyPyh+z+B+dP2bxPyZ/zOJ/bP6Yxf+4/DGL//H5Yxb/E/LHLP4n5o9Z/E/KH7P4n5w/ZvE/JX/M4n9q/pjF/7T8MYv/6fljFv8z8scs/mfmj1n8z8ofs/ifnT9m8T8nf8zif27+mMX/vPwxi//5+WMW/wvyxyz+F+aPWfwvyh+z+F+cP2bxvyR/zOJ/af6Yxf+y/DGL/+X5Yxb/K/LHLP5/zR+z+F+ZP2bxvyp/zOJ/df6Yxf+a/DGL/7X5Yxb/6/LHLP7X549Z/G/IH7P435g/ZvG/KX/M4n9z/pjF/5b8MYv/rfljFv/b8scs/rfnj1n878gfs/jfmT9m8b8rf8zif3f+mMX/nvwxi/+9+WMW//vyxyz+9+ePWfwfyB+z+D+YP2bxfyh/zOL/cP6Yxf+R/DGL/6P5Yxb/x/LHLP6P549Z/J/IH7P4P5k/ZvF/Kn/M4v90/pjF/5n8MYv/s/ljFv/n8scs/s/nj1n8X8gfs/i/mD9m8X8pf8zi/3L+mMX/lfwxi/+r+WMW/9fyxyz+r+ePWfzfyB+z+L+ZP2bxfyt/zOL/dv6Yxf+d/DGJ/4gD+WMW/0H5Yxb/YfLHLP7D5o9Z/Afnj1n8h8sfs/gPnz9m8R8hf8ziP2L+mMV/pPwxi//I+WMW/1Hyxyz+o+aPWfxHyx+z+I+eP2bxHyN/zOI/Zv6YxX+s/DGL/9j5Yxb/T+WPWfzHyR+z+I+bP2bx/3T+mMV/vPwxi//4+WMW/8/kj1n8J8gfs/h/Nn/M4j9h/pjFf6L8MYv/xPljFv9J8scs/pPmj1n8P5c/ZvGfLH/M4j95/pjFf4r8MYv/lPljFv+p8scs/p/PH7P4T50/ZvH/Qv6Yxf+L+WMW/y/lj1n8v5w/ZvH/Sv6Yxf+r+WMW/2nyxyz+0+aPWfynyx+z+E+fP2bxnyF/zOI/Y/6Yxf9r+WMW/5nyxyz+M+ePWfxnyR+z+M+aP2bx/3r+mMV/tvwxi/838scs/t/MH7P4z54/ZvH/Vv6YxX+O/DGL/5z5Yxb/ufLHLP5z549Z/OfJH7P4z5s/ZvGfL3/M4j9//pjFf4H8MYv/gvljFv9v549Z/L+TP2bxXyh/zOL/3fwxi//C+WMW/+/lj1n8v58/ZvFfJH/M4r9o/pjFf7H8MYv/4vljFv8l8scs/kvmj1n8f5A/ZvFfKn/M4v/D/DGL/4/yxyz+S+ePWfyXyR+z+C+bP2bxXy5/zOL/4/wxi//y+WMW/xXyxyz+P8kfs/ivmD9m8V8pf8ziv3L+mMV/lfwxi/+q+WMW/9Xyxyz+q+ePWfx/mj9m8V8jf8ziv2b+mMV/rfwxi//a+WMW/3Xyxyz+6+aPWfx/lj9m8V8vf8ziv37+mMV/g/wxi//P88cs/hvmj1n8f5E/ZvHfKH/M4r9x/pjFf5P8MYv/L/PHLP6/yh+z+G+aP2bx3yx/zOK/ef6YxX+L/DGL/5b5Yxb/rfLHLP5b549Z/LfJH7P4b5s/ZvHfLn/M4v/r/DGL/2/yxyz+2+ePWfx3yB+z+O+YP2bx3yl/zOL/2/wxi//v8scs/r/PH7P475w/ZvHfJX/M4v+H/DGL/x/zxyz+u+aPWfz/lD9m8d8tf8ziv3v+mMV/j/wxi/+f88cs/n/JH7P475k/ZvHfK3/M4r93/pjFf5/8MYv/vvljFv/98scs/vvnj1n8D8gfs/gfmD9m8T8of8zif3D+mMX/kPwxi/+h+WMW/8Pyxyz+h+ePWfyPyB+z+B+ZP2bxPyp/zOJ/dP6Yxf+Y/DGL/7H5Yxb/4/LHLP7H549Z/E/IH7P4n5g/ZvE/KX/M4n9y/pjF/5T8MYv/qfljFv/T8scs/qfnj1n8z8gfs/ifmT9m8T8rf8zif3b+mMX/nPwxi/+5+WMW//Pyxyz+5+ePWfwvyB+z+F+YP2bxvyh/zOJ/cf6Yxf+S/DGL/6X5Yxb/y/LHLP6X549Z/K/IH7P4/zV/zOJ/Zf6Yxf+q/DGL/9X5Yxb/a/LHLP7X5o9Z/K/LH7P4X58/ZvG/IX/M4n9j/pjF/6b8MYv/zfljFv9b8scs/rfmj1n8b8sfs/jfnj9m8b8jf8zif2f+mMX/rvwxi//d+WMW/3vyxyz+9+aPWfzvyx+z+N+fP2bxfyB/zOL/YP6Yxf+h/DGL/8P5Yxb/R/LHLP6P5o9Z/B/LH7P4P54/ZvF/In/M4v9k/pjF/6n8MYP/oMEDIz6dP2bwH7L9P5M/ZvF/Nn/M4v9c/pjF//n8MYv/C/ljFv8X88cs/i/lj1n8X84fs/i/kj9m8X81f8zi/1r+mMX/9fwxi/8b+WMW/zfzxyz+b+WPWfzfzh+z+L+TPybxH2kgf8ziPyh/zOI/TP6YxX/Y/DGL/+D8MYv/cPljFv/h88cs/iPkj1n8R8wfs/iPlD9m8R85f8ziP0r+mMV/1Pwxi/9o+WMW/9Hzxyz+Y+SPWfzHzB+z+I+VP2bxHzt/zOL/qfwxi/84+WMW/3Hzxyz+n84fs/iPlz9m8R8/f8zi/5n8MYv/BPljFv/P5o9Z/CfMH7P4T5Q/ZvGfOH/M4j9J/pjFf9L8MYv/5/LHLP6T5Y9Z/CfPH7P4T5E/ZvGfMn/M4j9V/pjF//P5Yxb/qfPHLP5fyB+z+H8xf8zi/6X8MYv/l/PHLP5fyR+z+H81f8ziP03+mMV/2oGBzT+pIf07Z/Gfru0fs/hPnz9m8Z8hf8ziP2P+mMX/a/ljFv+Z8scs/jPnj1n8Z8kfs/jPmj9m8f96/pjFf7b8MYv/N/LHLP7fzB+z+M+eP2bx/1b+mMV/jvwxi/+c+WMW/7nyxyz+c+ePWfznyR+z+M+bP2bxny9/zOI/f/6YxX+B/DGL/4L5Yxb/b+ePWfy/kz9m8V8of8zi/938MYv/wvljFv/v5Y9Z/L+fP2bxXyR/zOK/aP6YxX+x/DGL/+L5Yxb/JfLHLP5L5o9Z/H+QP2bxXyp/zOL/w/wxi/+P8scs/kvnj1n8l8kfs/gvmz9m8V8uf8zi/+P8MYv/8vljFv8V8scs/j/JH7P4r5g/ZvFfKX/M4r9y/pjFf5X8MYv/qvljFv/V8scs/qvnj1n8f5o/ZvFfI3/M4r9m/pjFf638MYv/2vljFv918scs/uvmj1n8f5Y/ZvFfL3/M4r9+/pjFf4P8MYv/z/PHLP4b5o9Z/H+RP2bx3yh/zOK/cf6YxX+T/DGL/y/zxyz+v8ofs/hvmj9m8d8sf8ziv3n+mMV/i/wxi/+W+WMW/63yxyz+W+ePWfy3yR+z+G+bP2bx3y5/zOL/6/wxi/9v8scs/tvnj1n8d8gfs/jvmD9m8d8pf8zi/9v8MYv/7/LHLP6/zx+z+O+cP2bx3yV/zOL/h/wxi/8f88cs/rvmj1n8/5Q/ZvHfLX/M4r97/pjFf4/8MYv/n/PHLP5/yR+z+O+ZP2bx3yt/zOK/d/6YxX+f/DGL/775Yxb//fLHLP77549Z/A/IH7P4H5g/ZvE/KH/M4n9w/pjF/5D8MYv/ofljFv/D8scs/ofnj1n8j8gfs/gfmT9m8T8qf8zif3T+mMX/mPwxi/+x+WMW/+Pyxyz+x+ePWfxPyB+z+J+YP2bxPyl/zOJ/cv6Yxf+U/DGL/6n5Yxb/0/LHLP6n549Z/M/IH7P4n5k/ZvE/K3/M4n92/pjF/5z8MYv/ufljFv/z8scs/ufnj1n8L8gfs/hfmD9m8b8of8zif3H+mMX/kvwxi/+l+WMW/8vyxyz+l+ePWfyvyB+z+P81f8zif2X+mMX/qvwxi//V+WMW/2vyxyz+1+aPWfyvyx+z+F+fP2bxvyF/zOJ/Y/6Yxf+m/DGL/835Yxb/W/LHLP635o9Z/G/LH7P4354/ZvG/I3/M4n9n/pjF/678MYv/3fljFv978scs/vfmj1n878sfs/jfnz9m8X8gf8zi/2D+mMX/ofwxi//D+WMW/0fyxyz+j+aPWfwfyx+z+D+eP2bxfyJ/zOL/ZP6Yxf+p/DGL/9P5Yxb/Z/LHLP7P5o9Z/J/LH7P4P58/ZvF/IX/M4v9i/pjF/6X8MYv/y/ljFv9X8scs/q/mj1n8X8sfs/i/nj9m8X8jf8zi/2b+mMX/rfwxi//b+WMW/3fyxyT+Iw/kj1n8B+WPWfyHyR+z+A+bP2bxH5w/ZvEfLn/M4j98/pjFf4T8MYv/iPljFv+R8scs/iPnj1n8R8kfs/iPmj9m8R8tf8ziP3r+mMV/jPwxi/+Y+WMW/7Hyxyz+Y+ePWfw/lT9m8R8nf8ziP27+mMX/0/ljFv/x8scs/uPnj1n8P5M/ZvGfIH/M4v/Z/DGL/4T5Yxb/ifLHLP4T549Z/CfJH7P4T5o/ZvH/XP6YxX+y/DGL/+T5Yxb/KfLHLP5T5o9Z/KfKH7P4fz5/zOI/df6Yxf8L+WMW/y/mj1n8v5Q/ZvH/cv6Yxf8r+WMW/6/mj1n8p8kfs/hPmz9m8Z8uf8ziP33+mMV/hvwxi/+M+WMW/6/lj1n8Z8ofs/jPnD9m8Z8lf8ziP2v+mMX/6/ljFv/Z8scs/t/IH7P4fzN/zOI/e/6Yxf9b+WMW/znyxyz+c+aPWfznyh+z+M+dP2bxnyd/zOI/b/6YxX++/DGL//z5Yxb/BfLHLP4L5o9Z/L+dP2bx/07+mMV/ofwxi/9388cs/gvnj1n8v5c/ZvH/fv6YxX+R/DGL/6L5Yxb/xfLHLP6L549Z/JfIH7P4L5k/ZvH/Qf6YxX+p/DGL/w/zxyz+P8ofs/gvnT9m8V8mf8ziv2z+mMV/ufwxi/+P88cs/svnj1n8V8gfs/j/JH/M4r9i/pjFf6X8MYv/yvljFv9V8scs/qvmj1n8V8sfs/ivnj9m8f9p/pjFf438MYv/mvljFv+18scs/mvnj1n818kfs/ivmz9m8f9Z/pjFf738MYv/+vljFv8N8scs/j/PH7P4b5g/ZvH/Rf6YxX+j/DGL/8b5Yxb/TfLHLP6/zB+z+P8qf8ziv2n+mMV/s/wxi//m+WMW/y3yxyz+W+aPWfy3yh+z+G+dP2bx3yZ/zOK/bf6YxX+7/DGL/6/zxyz+v8kfs/hvnz9m8d8hf8ziv2P+mMV/p/wxi/9v88cs/r/LH7P4/z5/zOK/c/6YxX+X/DGL/x/yxyz+f8wfs/jvmj9m8f9T/pjFf7f8MYv/7vljFv898scs/n/OH7P4/yV/zOK/Z/6YxX+v/DGL/975Yxb/ffLHLP775o9Z/PfLH7P4758/ZvE/IH/M4n9g/pjF/6D8MYv/wfljFv9D8scs/ofmj1n8D8sfs/gfnj9m8T8if8zif2T+mMX/qPwxi//R+WMW/2Pyxyz+x+aPWfyPyx+z+B+fP2bxPyF/zOJ/Yv6Yxf+k/DGL/8n5Yxb/U/LHLP6n5o9Z/E/LH7P4n54/ZvE/I3/M4n9m/pjF/6z8MYv/2fljFv9z8scs/ufmj1n8z8sfs/ifnz9m8b8gf8zif2H+mMX/ovwxi//F+WMW/0vyxyz+l+aPWfwvyx+z+F+eP2bxvyJ/zOL/1/wxi/+V+WMW/6vyxyz+V+ePWfyvyR+z+F+bP2bxvy5/zOJ/ff6Yxf+G/DGL/435Yxb/m/LHLP43549Z/G/JH7P435o/ZvG/LX/M4n97/pjF/478MYv/nfljFv+78scs/nfnj1n878kfs/jfmz9m8b8vf8zif3/+mMX/gfwxi/+D+WMW/4fyxyz+D+ePWfwfyR+z+D+aP2bxfyx/zOL/eP6Yxf+J/DGL/5P5Yxb/p/LHLP5P549Z/J/JH7P4P5s/ZvF/Ln/M4v98/pjF/4X8MYv/i/ljFv+X8scs/i/nj1n8X8kfs/i/mj9m8X8tf8zi/3r+mMX/jfwxi/+b+WMW/7fyxyz+b+ePWfzfyR+T+I8ykD9m8R+UP2bxHyZ/zOI/bP6YxX9w/pjFf7j8MYv/8PljFv8R8scs/iPmj1n8R8ofs/iPnD9m8R8lf8ziP2r+mMV/tPwxi//o+WMW/zHyxyz+Y+aPWfzHyh+z+I+dP2bx/1T+mMV/nPwxi/+4+WMW/0/nj1n8x8sfs/iPnz9m8f9M/pjFf4L8MYv/Z/PHLP4T5o9Z/CfKH7P4T5w/ZvGfJH/M4j9p/pjF/3P5Yxb/yfLHLP6T549Z/KfIH7P4T5k/ZvGfKn/M4v/5/DGL/9T5Yxb/L+SPWfy/mD9m8f9S/pjF/8v5Yxb/r+SPWfy/mj9m8Z8mf8ziP23+mMV/uvwxi//0+WMW/xnyxyz+M+aPWfy/lj9m8Z8pf8ziP3P+mMV/lvwxi/+s+WMW/6/nj1n8Z8sfs/h/I3/M4v/N/DGL/+z5Yxb/b+WPWfznyB+z+M+ZP2bxnyt/zOI/d/6YxX+e/DGL/7z5Yxb/+fLHLP7z549Z/BfIH7P4L5g/ZvH/dv6Yxf87+WMW/4Xyxyz+380fs/gvnD9m8f9e/pjF//v5Yxb/RfLHLP6L5o9Z/BfLH7P4L54/ZvFfIn/M4r9k/pjF/wf5Yxb/pfLHLP4/zB+z+P8of8ziv3T+mMV/mfwxi/+y+WMW/+Xyxyz+P84fs/gvnz9m8V8hf8zi/5P8MYv/ivljFv+V8scs/ivnj1n8V8kfs/ivmj9m8V8tf8ziv3r+mMX/p/ljFv818scs/mvmj1n818ofs/ivnT9m8V8nf8ziv27+mMX/Z/ljFv/18scs/uvnj1n8N8gfs/j/PH/M4r9h/pjF/xf5Yxb/jfLHLP4b549Z/DfJH7P4/zJ/zOL/q/wxi/+m+WMW/83yxyz+m+ePWfy3yB+z+G+ZP2bx3yp/zOK/df6YxX+b/DGL/7b5Yxb/7fLHLP6/zh+z+P8mf8ziv33+mMV/h/wxi/+O+WMW/53yxyz+v80fs/j/Ln/M4v/7/DGL/875Yxb/XfLHLP5/yB+z+P8xf8ziv2v+mMX/T/ljFv/d8scs/rvnj1n898gfs/j/OX/M4v+X/DGL/575Yxb/vfLHLP57549Z/PfJH7P475s/ZvHfL3/M4r9//pjF/4D8MYv/gfljFv+D8scs/gfnj1n8D8kfs/gfmj9m8T8sf8zif3j+mMX/iPwxi/+R+WMW/6Pyxyz+R+ePWfyPyR+z+B+bP2bxPy5/zOJ/fP6Yxf+E/DGL/4n5Yxb/k/LHLP4n549Z/E/JH7P4n5o/ZvE/LX/M4n96/pjF/4z8MYv/mflj7/sPjDgw8J/sf1b+mGX7Pzt/zOJ/Tv6Yxf/c/DGL/3n5Yxb/8/PHLP4X5I9Z/C/MH7P4X5Q/ZvG/OH/M4n9J/pjF/9L8MYv/ZfljFv/L88cs/lfkj1n8/5o/ZvG/Mn/M4n9V/pjF/+r8MYv/NfljFv9r88cs/tflj1n8r88fs/jfkD9m8b8xf8zif1P+mMX/5vwxi/8t+WMW/1vzxyz+t+WPWfxvzx+z+N+RP2bxvzN/zOJ/V/6Yxf/u/DGL/z35Yxb/e/PHLP735Y9Z/O/PH7P4P5A/ZvF/MH/M4v9Q/pjF/+H8MYv/I/ljFv9H88cs/o/ljzn8k/+oHP4DozzRWoBZ/J/MH7P4P5U/ZvF/On/M4v9M/pjF/9n8MYv/c/ljFv/n88cs/i/kj1n8X8wfs/i/lD9m8X85f8zi/0r+mMX/1fwxi/9r+WMW/9fzxyz+b+SPWfzfzB+z+L+VP2bxfzt/zOL/Tv6YxH/Ugfwxi/+g/DGL/zD5Yxb/YfPHLP6D88cs/sPlj1n8h88fs/iPkD9m8R8xf8ziP1L+mMV/5Pwxi/8o+WMW/1Hzxyz+o+WPWfxHzx+z+I+RP2bxHzN/zOI/Vv6YxX/s/DGL/6fyxyz+4+SPWfzHzR+z+H86f8ziP17+mMV//Pwxi/9n8scs/hPkj1n8P5s/ZvGfMH/M4j9R/pjFf+L8MYv/JPljFv9J88cs/p/LH7P4T5Y/ZvGfPH/M4j9F/pjFf8r8MYv/VPljFv/P549Z/KfOH7P4fyF/zOL/xfwxi/+X8scs/l/OH7P4fyV/zOL/1fwxi/80+WMW/2nzxyz+0+WPWfynzx+z+M+QP2bxnzF/zOL/tfwxi/9M+WMW/5nzxyz+s+SPWfxnzR+z+H89f8ziP1v+mMX/G/ljFv9v5o9Z/GfPH7P4fyt/zOI/R/6YxX/O/DGL/1z5Yxb/ufPHLP7z5I9Z/OfNH7P4z5c/ZvGfP3/M4r9A/pjFf8H8MYv/t/PHLP7fyR+z+C+UP2bx/27+mMV/4fwxi//38scs/t/PH7P4L5I/ZvFfNH/M4r9Y/pjFf/H8MYv/EvljFv8l88cs/j/IH7P4L5U/ZvH/Yf6Yxf9H+WMW/6Xzxyz+y+SPWfyXzR+z+C+XP2bx/3H+mMV/+fwxi/8K+WMW/5/kj1n8V8wfs/ivZPT/F+6wxX9lo/+/kMV/lfwxi/+q+WMW/9Xyxyz+q+ePWfx/mj9m8V8jf8ziv2b+mMV/rfwxi//a+WMW/3Xyxyz+6+aPWfx/lj9m8V8vf8ziv37+mMV/g/wxi//P88cs/hvmj1n8f5E/ZvHfKH/M4r9x/pjFf5P8MYv/L/PHLP6/yh+z+G+aP2bx3yx/zOK/ef6YxX+L/DGL/5b5Yxb/rfLHLP5b549Z/LfJH7P4b5s/ZvHfLn/M4v/r/DGL/2/yxyz+2+ePWfx3yB+z+O+YP2bx3yl/zOL/2/wxi//v8scs/r/PH7P475w/ZvHfJX/M4v+H/DGL/x/zxyz+u+aPWfz/lD9m8d8tf8ziv3v+mMV/j/wxi/+f88cs/n/JH7P475k/ZvHfK3/M4r93/pjFf5/8MYv/vvljFv/98scs/vvnj1n8D8gfs/gfmD9m8T8of8zif3D+mMX/kPwxi/+h+WMW/8Pyxyz+h+ePWfyPyB+z+B+ZP2bxPyp/zOJ/dP6Yxf+Y/DGL/7H5Yxb/4/LHLP7H549Z/E/IH7P4n5g/ZvE/KX/M4n9y/pjF/5T8MYv/qfljFv/T8scs/qfnj1n8z8gfs/ifmT9m8T8rf8zif3b+mMX/nPwxi/+5+WMW//Pyxyz+5+ePWfwvyB+z+F+YP2bxvyh/zOJ/cf6Yxf+S/DGL/6X5Yxb/y/LHLP6X549Z/K/IH7P4/zV/zOJ/Zf6Yxf+q/DGL/9X5Yxb/a/LHLP7X5o9Z/K/LH7P4X58/ZvG/IX/M4n9j/pjF/6b8MYv/zfljFv9b8scs/rfmj1n8b8sfs/jfnj9m8b8jf8zif2f+mMX/rvwxi//d+WMW/3vyxyz+9+aPWfzvyx+z+N+fP2bxfyB/zOL/YP6Yxf+h/DGL/8P5Yxb/R/LHLP6P5o9Z/B/LH7P4P54/ZvF/In/M4v9k/pjF/6n8MYv/0/ljFv9n8scs/s/mj1n8n8sfs/g/nz9m8X8hf8zi/2L+mMX/pfwxi//L+WMW/1fyxyz+r+aPWfxfyx+z+L+eP2bxfyN/zOL/Zv6Yxf+t/DGL/9v5Yxb/d/LHJP6jDeSPWfwH5Y9Z/IfJH7P4D5s/ZvEfnD9m8R8uf8ziP3z+mMV/hPwxi/+I+WMW/5Hyxyz+I+ePWfxHyR+z+I+aP2bxHy1/zOI/ev6YxX+M/DGL/5j5Yxb/sfLHLP5j549Z/D+VP2bxHyd/zOI/bv6Yxf/T+WMW//Hyxyz+4+ePWfw/kz9m8Z8gf8zi/9n8MYv/hPljFv+J8scs/hPnj1n8J8kfs/hPmj9m8f9c/pjFf7L8MYv/5PljFv8p8scs/lPmj1n8p8ofs/h/Pn/M4j91/pjF/wv5Yxb/L+aPWfy/lD9m8f9y/pjF/yv5Yxb/r+aPWfynyR+z+E+bP2bxny5/zOI/ff6YxX+G/DGL/4z5Yxb/r+WPWfxnyh+z+M+cP2bxnyV/7B/8h1425ic8pv9PfYT/rPljlu3/6/ljFv/Z8scs/t/IH7P4fzN/zOI/e/6Yxf9b+WMW/znyxyz+c+aPWfznyh+z+M+dP2bxnyd/zOI/b/6YxX++/DGL//z5Yxb/BfLHLP4L5o9Z/L+dP2bx/07+mMV/ofwxi/9388cs/gvnj1n8v5c/ZvH/fv6YxX+R/DGL/6L5Yxb/xfLHLP6L549Z/JfIH7P4L5k/ZvH/Qf6YxX+p/DGL/w/zxyz+P8ofs/gvnT9m8V8mf8ziv2z+mMV/ufwxi/+P88cs/svnj1n8V8gfs/j/JH/M4r9i/pjFf6X8MYv/yvljFv9V8scs/qvmj1n8V8sfs/ivnj9m8f9p/pjFf438MYv/mvljFv+18scs/mvnj1n818kfs/ivmz9m8f9Z/pjFf738MYv/+vljFv8N8scs/j/PH7P4b5g/ZvH/Rf6YxX+j/DGL/8b5Yxb/TfLHLP6/zB+z+P8qf8ziv2n+mMV/s/wxi//m+WMW/y3yxyz+W+aPWfy3yh+z+G+dP2bx3yZ/zOK/bf6YxX+7/DGL/6/zxyz+v8kfs/hvnz9m8d8hf8ziv2P+mMV/p/wxi/9v88cs/r/LH7P4/z5/zOK/c/6YxX+X/LH/VP8RP+T/h/yx/1T/gQ/5/zF/zOK/a/6Yxf9P+WMW/93yxyz+u+ePWfz3yB+z+P85f8zi/5f8MYv/nvljFv+98scs/nvnj1n898kfs/jvmz9m8d8vf8ziv3/+mMX/gPwxi/+B+WMW/4Pyxyz+B+ePWfwPyR+z+B+aP2bxPyx/zOJ/eP6Yxf+I/DGL/5H5Yxb/o/LHLP5H549Z/I/JH7P4H5s/ZvE/Ln/M4n98/pjF/4T8MYv/ifljFv+T8scs/ifnj1n8T8kfs/ifmj9m8T8tf8zif3r+mMX/jPwxi/+Z+WMW/7Pyxyz+Z+ePWfzPyR+z+J+bP2bxPy9/zOJ/fv6Yxf+C/DGL/4X5Yxb/i/LHLP4X549Z/C/JH7P4X5o/ZvG/LH/M4n95/pjF/4r8MYv/X/PHLP5X5o9Z/K/KH7P4X50/ZvG/Jn/M4n9t/pjF/7r8MYv/9fljFv8b8scs/jfmj1n8b8ofs/jfnD9m8b8lf8zif2v+mMX/tvwxi//t+WMW/zvyxyz+d+aPWfzvyh+z+N+dP2bxvyd/zOJ/b/6Yxf++/DGL//35Yxb/B/LHLP4P5o9Z/B/KH7P4P5w/ZvF/5MP+W/wvj+vfNIv/o23/mMX/sfwxi//j+WMW/yfyxyz+T+aPWfyfyh+z+D+dP2bxfyZ/zOL/bP6Yxf+5/DGL//P5Yxb/F/LHLP4v5o9Z/F/KH7P4v5w/ZvF/JX/M4v9q/pjF/7X8MYv/6/ljFv838scs/m/mj1n838ofs/i/nT9m8X8nf0ziP/pA/pjFf1D+mMV/mPwxi/+w+WMW/8H5Yxb/4fLHLP7D549Z/EfIH7P4j5g/ZvEfKX/M4j9y/pjFf5T8MYv/qPljFv/R8scs/qPnj1n8x8gfs/iPmT9m8R8rf8ziP3b+mMX/U/ljFv9x8scs/uPmj1n8P50/ZvEfL3/M4j9+/pjF/zP5Yxb/CfLHLP6fzR+z+E+YP2bxnyh/zOI/cf6YxX+S/DGL/6T5Yxb/z+WPWfwnyx+z+E+eP2bxnyJ/zOI/Zf6YxX+q/DGL/+fzxyz+U+ePWfy/kD9m8f9i/pjF/0v5Yxb/L+ePWfy/kj9m8f9q/pjFf5r8MYv/tPljFv/p8scs/tPnj1n8Z8gfs/jPmD9m8f9a/pjFf6b8MYv/zPljFv9Z8scs/rPmj1n8v54/ZvGfLX/M4v+N/DGL/zfzxyz+s+ePWfy/lT9m8Z8jf8ziP2f+mMV/rvwxi//c+WMW/3nyxyz+8+aPWfznyx+z+M+fP2bxXyB/zOK/YP6Yxf/b+WMW/+/kj1n8F8ofs/h/N3/M4r9w/pjF/3v5Yxb/7+ePWfwXyR+z+C+aP2bxXyx/zOK/eP6YxX+J/DGL/5L5Yxb/H+SPWfyXyh+z+P8wf8zi/6P8MYv/0vljFv9l8scs/svmj1n8l8sfs/j/OH/M4r98/pjFf4X8MYv/T/LHLP4r5o9Z/FfKH7P4r5w/ZvFfJX/M4r9q/pjFf7X8MYv/6vljFv+f5o9Z/NfIH7P4r5k/ZvFfK3/M4r92/pjFf538MYv/uvljFv+f5Y9Z/NfLH7P4r58/ZvHfIH/M4v/z/DGL/4b5Yxb/X+SPWfw3yh+z+G+cP2bx3yR/zOL/y/wxi/+v8scs/pvmj1n8N8sfs/hvnj9m8d8if8ziv2X+mMV/q/wxi//W+WMW/23yxyz+2+aPWfy3yx+z+P86f8zi/5v8MYv/9vljFv8d8scs/jvmj1n8d8ofs/j/Nn/M4v+7/DGL/+/zxyz+O+ePWfx3yR+z+P8hf8zi/8f8MYv/rvljFv8/5Y9Z/HfLH7P4754/ZvHfI3/M4v/n/DGL/1/yxyz+e+aPWfz3yh+z+O+dP2bx3yd/zOK/b/6YxX+//DGL//75Yxb/A/LHLP4H5o9Z/A/KH7P4H5w/ZvE/JH/M4n9o/pjF/7D8MYv/4fljFv8j8scs/kfmj1n8j8ofs/gfnT9m8T8mf8zif2z+mMX/uPwxi//x+WMW/xPyxyz+J+aPWfxPyh+z+J+cP2bxPyV/zOJ/av6Yxf+0/DGL/+n5Yxb/M/LHLP5n5o9Z/M/KH7P4n50/ZvE/J3/M4n9u/pjF/7z8MYv/+fljFv8L8scs/hfmj1n8L8ofs/hfnD9m8b8kf8zif2n+mMX/svwxi//l+WMW/yvyxyz+f80fs/hfmT9m8b8qf8zif3X+mMX/mvwxi/+1+WMW/+vyxyz+1+ePWfxvyB+z+N+YP2bxvyl/zOJ/c/6Yxf+W/DGL/635Yxb/2/LHLP63549Z/O/IH7P435k/ZvG/K3/M4n93/pjF/578MYv/vfljFv/78scs/vfnj1n8H8gfs/g/mD9m8X8of8zi/3D+mMX/kfwxi/+j+WMW/8fyxyz+j+ePWfyfyB+z+D+ZP2bxfyp/zOL/dP6Yxf+Z/DGL/7P5Yxb/5/LHLP7P549Z/F/IH7P4v5g/ZvF/KX/M4v9y/pjF/5X8MYv/q/ljFv/X8scs/q/nj1n838gfs/i/mT9m8X8rf8zi/3b+mMX/nfwxif8YA/ljFv9B+WMW/2Hyxyz+w+aPWfwH549Z/IfLH7P4D58/ZvEfIX/M4j9i/pjFf6T8MYv/yPljFv9R8scs/qPmj1n8R8sfs/iPnj9m8R8jf8ziP2b+mMV/rPwxi//Y+WMW/0/lj1n8x8kfs/iPmz9m8f90/pjFf7z8MYv/+PljFv/P5I9Z/CfIH7P4fzZ/zOI/Yf6YxX+i/DGL/8T5Yxb/SfLHLP6T5o9Z/D+X//+PnbsP97qu7zj+454sZ592Xeo122UXGnNtRiKjUQtRUTzenDLRzHuEw01yIzcSYApstFLHpkvdLNjEwjFnq5Y43Fx3KxqWNVsjtlY5xbUwxhwsMmfsOnAOwdnbc+182ffr8v14/ME5v9/x/Ut5Xi9/Py+uq1CW/sP0D2Xpf5z+oSz9j9c/lKX/a/UPZek/XP9Qlv6/oH8oS/8T9A9l6f+L+oey9H+d/qEs/X9J/1CW/r+sfyhL/xP1D2Xp/3r9Q1n6j9A/lKX/G/QPZel/kv6hLP1H6h/K0v9k/UNZ+o/SP5Sl/6/oH8rSf7T+oSz936h/KEv/X9U/lKX/GP1DWfq/Sf9Qlv5v1j+Upf+v6R/K0v8t+oey9B+rfyhL/1P0D2XpP07/UJb+p+ofytL/NP1DWfqfrn8oS//x+oey9D9D/1CW/mfqH8rSf4L+oSz9z9I/lKV/m/6hLP3P1j+Upf85+oey9D9X/1CW/ufpH8rSv13/UJb+b9U/lKX/2/QPZel/vv6hLP3frn8oS/8L9A9l6T9R/1CW/hfqH8rS/yL9Q1n6v0P/UJb+F+sfytL/nfqHsvS/RP9Qlv6X6h/K0v8y/UNZ+l+ufyhL/yv0D2Xpf6X+oSz9r9I/lKX/JP1DWfpfrX8oS//J+oey9J+ifyhL/w79Q1n6T9U/lKX/NP1DWfpP1z+Upf8M/UNZ+r9L/1CW/tfoH8rSf6b+oSz9Z+kfytJ/tv6hLP3n6B/K0v9a/UNZ+s/VP5Sl/zz9Q1n6z9c/lKX/Av1DWfpfp38oS/+F+oey9H+3/qEs/RfpH8rSf7H+oSz9l+gfytL/ev1DWfq/R/9Qlv436B/K0v9G/UNZ+i/VP5Sl/zL9Q1n6L9c/lKX/r+sfytL/N/QPZem/Qv9Qlv7v1T+Upf9v6h/K0v99+oey9H+//qEs/W/SP5Sl/836h7L0v0X/UJb+v6V/KEv/lfqHsvT/bf1DWfr/jv6hLP1v1T+Upf9t+oey9P9d/UNZ+n9A/1CW/rfrH8rS/w79Q1n636l/KEv/39M/lKX/7+sfytL/Lv1DWfp/UP9Qlv4f0j+Upf8q/UNZ+q/WP5Sl/x/oH8rS/w/1D2Xpf7f+oSz91+gfytL/Hv1DWfp/WP9Qlv4f0T+Upf9a/UNZ+t+rfyhL/z/SP5Sl/zr9Q1n6/7H+oSz979M/lKX/n+gfytL/fv1DWfp/VP9Qlv5/qn8oS/+P6R/K0v/j+oey9P+E/qEs/f9M/1CW/p/UP5Sl/wP6h7L0X69/KEv/B/UPZen/5/qHsvTfoH8oS/+H9A9l6f8X+oey9P9L/UNZ+j+sfyhL/7/SP5Sl/6f0D2Xp/2n9Q1n6f0b/UJb+n9U/lKX/5/QPZen/1/qHsvT/vP6hLP2/oH8oS/+N+oey9P+i/qEs/f9G/1CW/pv0D2Xp/4j+oSz9v6R/KEv/L+sfytL/Uf1DWfp/Rf9Qlv5f1T+Upf/f6h/K0v8x/UNZ+n9N/1CW/n+nfyhL/6/rH8rS/+/1D2Xpv1n/UJb+39A/lKX/Fv1DWfr/g/6hLP3/Uf9Qlv7f1D+Upf8/6R/K0v9b+oey9P+2/qEs/b+jfyhL/8f1D2Xp/8/6h7L0f0L/UJb+T+ofytJ/q/6hLP2f0j+Upf+/6B/K0v+7+oey9P9X/UNZ+n9P/1CW/tv0D2Xp/7T+oSz9v69/KEv/7fqHsvT/N/1DWfrv0D+Upf+/6x/K0v8Z/UNZ+v+H/qEs/XfqH8rSf5f+oSz9/1P/UJb+P9A/lKX/bv1DWfr/UP9Qlv7P6h/K0v9H+oey9H9O/1CW/v+lfyhL/+f1D2Xp/2P9Q1n679E/lKT/K1v6h7L076d/KEv//vqHsvQfoH8oS/+B+oey9B+kfyhL/8H6h7L0H6J/KEv/ofqHsvR/mf6hLP0P0z+Upf/L9Q9l6f8K/UNZ+h+ufyhL/5/RP5Sl/xH6h15y/QEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP6/mb94yTWTZs7smOcb3/jGN/u/ebH/zQQAAPxf+8mH/hf77wQAAAAAAAAAAAAAAAAAAADyauL/TuzF/mcEAAAAAAAAAAAAAICfdm3tp24f0O+gpwYc+ODnH+3Y+3XU7ounr137YOn+2vXjc4KX7H/ggz179uxZ/czY8V0Ph7Rarc7/tVd2PR7a87jz9Zcdu+rofY/KuM/f+fgVEw8/d9762wZ+Y/Ut7U8P2vvsoNZVU2fM7HhD/1arnD6otajzwUn9Wq1y5qDWrZ0PRnY+mDCota7zwcl7H7ys9ZnOB6+fPGfmlM4nzqr8ewYvFW3ty1oDDlps66B/Gxy4/2XHPjG9+2svL9n9agNbXfsftv5LR/X4WbcX2H/365dTe+6/z/+AwAvq2/6f3dL9tZeX/B/v/x/etHtJ9LMX3n/365fT7B/qE3z+P2ijPT/39/j8/5rgJfffnzJ00+2d+2+78L5Xdz018H/z+f8nr19O77n//gd9/u/8HD+++/P/kFarnHGIvx2QSlv78u29vf/3vv+BP9fjpt+B+7/nK1tf0bn/e59rreh6alAf9z++t/f/m3r8vQJ909a+Zk+P9/8+7L81PHjJ/fvftv7wvZ//t94/+cgDftaX/Z/Rc/8jFsy6dsT8xUtOnDFr0rSOaR2zx4wcfdKoMWNGjx6x9xPBvl8P8TcFkji09//WYT1u+rVaHfvvN953y/jO/e94aMVHup4a2sf9n9nr+/9rvP9DaFj/1uDBrUWTFiyYd9K+X7sfjtz3676/LNh/H/77/7gTuv6y7j8z7NdqHb3/fvgVY4Z07v/6uWVD11OD+7j/Cb3uf9zBf1YJ9M0hvv9P6XFz0P5P2Xbjws79H/+DV23teqqv//1/Vq/7v9v7PxyKtvZWrW+infs/ecjys6tdlzZ//gf1aWL/x+68dVe163K2/UN9mtj/xJVvvrradTnH/qE+Tez/wVlXrqx2Xc61f6hPE/t//md3HVPtupxn/1CfJvb/2HefWlvturTbP9Snif1/8K72k6tdl7faP9Snif2feN0Px1a7Lm+zf6hPE/uf+vIL1lW7LufbP9Snif2fvee0I6tdl7fbP9Snif33W/69ZdWuywX2D/VpYv9PTlo5p9p1mWj/UJ8m9r/u2OHPVrsuF9o/1KeJ/a94+o0Tql2Xi+wf6tPE/r96x6rHql2Xd9g/1KeJ/X/isletqnZdLrZ/qE8T+//RsIcOq3Zd3mn/UJ8m9r9587oHql2XS+wf6tPE/levGzCs2nW51P6hPk3sf+lZ0x6tdl0us3+oTxP7HzX6y5dWuy6X2z/Up4n9H/25bz1V7bpcYf9Qnyb2f8HDC+dXuy5X2j/Up4n9Lzzm4z+udl2usn+oTxP7f0vHMdOrXZdJ9g/1aWL/5bbDNle7LlfbP9Snif1fsmPNuGrXZbL9Q32a2P+GI77wsWrXZYr9Q32a2P/OubPHVLsuHfYP9Wli/99579L3VbsuU+0f6tPE/m9/7uul2nWZZv9Qnyb2v23kJZdVuy7T7R/q08T+15z7zCPVrssM+4f6NLH/lRseX1DturzL/qE+Tex/48Zznqh2Xa6xf6hPE/s/fviIw6tdl5n2D/VpYv9zLl7xoWrXZZb9Q32a2P/p99/x2mrXZbb9Q32a2P/Qr439ZLXrMsf+oT5N7P/TY9//qWrX5Vr7h/o0sf9d4447odp1mWv/UJ8m9r/lgZF3Vrsu8+wf6tPE/j/wyF0Vr8t8+4f6NLH/ua97fke167LA/qE+Tez/TRMvWlztulxn/1CfJvZ/5N0Tvljtuiy0f6hPE/u//NvfP7/adXm3/UN9mtj/cUdd/epq12WR/UN9mtj/9Bmbbq52XRbbP9Snif2PX71lVLXrssT+oT5N7P+IJ+ffU+26XG//UJ8m9r99wFHnVbsu77F/qE8T+7/3hoe/We263GD/UJ8m9n/zTR/tqHZdbrR/qE8T+//s7sE7q12XpfYPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/zQ4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRV24EAAAAAAAMj/tRGqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsAPHAgAAAADC/K2D6N0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAICjAAAA//8mu+jL")

2m10.752725878s ago: executing program 4 (id=1269):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$vcs(0xffffffffffffff9c, 0x0, 0x161501, 0x0)
openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$SYNC_IOC_MERGE(0xffffffffffffffff, 0xc0303e03, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, 0x0)
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], 0x0, 0x0)
r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0xc0001, 0x0)
ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000000)=0x15)
ioctl$TCSETS(r4, 0x40384708, &(0x7f0000000040)={0x8, 0x1, 0xd8, 0x3f, 0x6, "3eccd25569e20900"})
syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r3)

2m9.578248329s ago: executing program 4 (id=1275):
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94)
r0 = getpid()
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdir(&(0x7f00000008c0)='./bus\x00', 0x0)
mkdir(&(0x7f0000000400)='./file1\x00', 0x0)
mount(0x0, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', 0x0, 0x0, &(0x7f0000000900))
r4 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
mknodat$loop(r4, &(0x7f0000001600)='./file1\x00', 0x0, 0x0)
chdir(0x0)
linkat(r4, &(0x7f0000000100)='./file1\x00', r4, &(0x7f0000000240)='./file0\x00', 0x0)
rename(&(0x7f0000000180)='./file1\x00', &(0x7f0000000200)='./file0\x00')

2m8.104231116s ago: executing program 4 (id=1277):
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8800}, 0x20044884)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff)
setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0)
sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0103fcffffff7e394bcd2b0000000c0006"], 0x20}}, 0x0)

2m7.562355685s ago: executing program 4 (id=1279):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xd6}, [@call={0x85, 0x0, 0x0, 0x41}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f00000006c0)="80e02cc39b553e736f9972f6bac2", 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50)

2m7.42209607s ago: executing program 4 (id=1280):
open(0x0, 0x0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
sync()

1m52.247463665s ago: executing program 38 (id=1280):
open(0x0, 0x0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
sync()

3.074862824s ago: executing program 8 (id=2103):
sync_file_range(0xffffffffffffffff, 0x100000001, 0x2790c580, 0x0)

2.835151865s ago: executing program 8 (id=2104):
r0 = socket(0x28, 0x801, 0x0)
connect$vsock_stream(r0, &(0x7f0000000880), 0x10)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x8c, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

2.442007024s ago: executing program 7 (id=2106):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000180)={0x3f, 0x0})

2.383582857s ago: executing program 8 (id=2107):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0)
memfd_secret(0x80000)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f000001aa40)=""/102400, 0x19000)
bind$bt_hci(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e6, 0x0)
socket$key(0xf, 0x3, 0x2)
ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e7, 0x0)
syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000180)='./bus\x00', 0x1, &(0x7f0000000100)=ANY=[], 0xfd, 0x1f8, &(0x7f0000000380)="$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")

2.267405574s ago: executing program 7 (id=2108):
syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f0000000240), 0x1, 0xa15, &(0x7f0000000300)="$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")

1.589782051s ago: executing program 7 (id=2109):
r0 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x0, 0x3}, 0x10)
r1 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x1}, 0x10)
sendmsg$tipc(r1, &(0x7f00000008c0)={&(0x7f0000000600)=@name={0x1e, 0x2, 0x3, {{}, 0xfffffffc}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x80)
r2 = dup3(r0, r1, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r2, 0x0, 0x0)
setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88)

1.155256656s ago: executing program 7 (id=2112):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000400)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, &(0x7f0000000100)={0x28, 0x5, r1, 0x0, &(0x7f0000000440)="cdfb3a2c9b87ea99bef075404824bbc049bb49970f9be88e619c2052536b8224e70fa67bd3ba251842dd7812f76781ba28d615f97170b6cb800179c9826b248b047f74f61b0775afa40311b566f2a461b5f6efe6f8c3eaa1c8a9615f40511faa3d36fc62b08cb2a5a05a7fa89eef28588949259d362b64365d6b95c3d4806a7d817f0b4349e6e0fffe3a0585dda8f1847b7fc4d4384215f9713c053f93298d125b6950d0a149a6adcfe021627fadf545e47f8cfc8c882fa66c7d5f72fc9a8880f697214bd19a05bb0ef5d0cc15bdb1f7b5de75fbc08e38a0ab849a5787ac2bc2c10d3376513807fdc77b39ba65b38ac346b4028c93df75a255ef3cc5c75dfe179e267990ecceb40f8c79627bad7b21be5a25af8c7c02c3e36ce825d3aad6dd579312224406e9d3a44e008150f21b67187aff8c16d88f4bc928729b4555cb395368535a836ad85652b00b7c40aaa2d558dde08dead3ae2fa8bddee208e068811d3399cd5dc7a262f5b73c57d564441755941468bcc6d042a288c9d470d28955e17b3b4acc13929506efe4bc4a32fd96fed0db509d298b3dc4cd630df2ad905858a0a7aa7f5036c373c1a01b2ef1ebe2befeea6f1d55dad0c8a2f4e55f8fdd8408e0b736b6ff74a0148b402cf00fa632ae7c6124857a7033442b9b97031c1daa5c252d4024abca1c78f31a5f2e2cff50ff26d5d153e9f1db7450dc94912dbf440fa6a15fcb08b1df5bb83d12458a7a55457e3fcd4469d3528a3108fef194abae95a8904b3737de92f3f2076b2a93493f2c1af99f0d2ed004566987e56b0f6d9591c8b21be95fbf920b2561786b329aa7ed453d610a8f20318477f567235680eaa353170c2972bd47ee98331e2a2d9b28cbd87c31ddf9af30c392d88faa41e669ff653a8f3c77ece8857f01dbcbd854447db79035bc3dca5d150768ae3eb557889b7e44d16ca49f3be1c8de1873e552f10d4e8f8da3433bd88b1c23005c8011951ff4fb4d20a9087f7122219d834eb7360d5105546ce264abfe7f210301707923b32d88a46d6b5b6f327e302175ac0da226dbe9017966c0c38eb5f95af358ba11ac6977a6729d8f9eaa55713f133f2305298f339eeb5437574cd918b00fdf12fa4bdda08b9ede6e8f608001d514af46a264731e8c0cc66f7e3d778c5ef2d7bf0b003a4e70f14536ceccd1a2424a1e9931dc46ca3eafc8d461e7fa62273fc930b24514bece4dd94330befed970149e773e44c803a4892b36a1b4d7be07c8000af3bcddfbc137c6cc547fc4142982c6a8fee4fef15068ccc2b611f81b46319611a8add012149f95931c0d2184a858e08baf667b0c2fa41ad448f9bfaae7f9db666f24a71ced5545a5318fc873f964a1976629335db814f0ecaa083af792700da499b1499cd168ff786a9ae23c6b36ff0778f48f7d25cef9a91f3c958c23ce05056542cd866952b02933852ed1274cde3b781096d994fc4d6e57419f3bd1cef0c32be5e0c5ea9e60f54ce38d0609c0b512c077ac0125060e12b3bbfc1705f1315aa2c892b44337d6e3e87257d7bb8af128be32d60ba159e220ab1ea966346f0a63a9d77ea5964760a8301a240da7b1ba1e763185e10338212bce62c7fdcb04c04d0ce7d5143bdb67bd2993bb42e89a1240370eb67d08ef08cb23bd06a97f38ef5b3ac7961adbaf275ecddb73708678cc3dffeeeb321ca3c0c618930288a8fed9cb2f037e8735a26261c2e12cded51494043148a1d9f9e6047668c468571e3a4a0b96cc63c39a2f00d9722a0915c26ac5522150427e590e335c8e7203907a218e87a2f73860e9ca6e348ae71baeff0821f712b4d15b29ac8d88b450a92e2da85d735a6d0ce4f93e04ccdf7a633dbe208626d17dea3531cc020cf3cc0491077a3ad9c5ed00516e91617e4432eb1d8cb1ffd3807db2932ea9f89a719d6bb2cb144403d428a97d7d3fe881cb0190e87973930f8c380b1c91eb7eb7f50a33d41c87c3b46a53d11080e1a6b18b4e639c117b4a63b280066121014ae6faa11f1935c0591d41715c266e4e26d697f55f49f49ed221388091d4c9a3848945c83e9ab04fa97e8313adba7ff6e7f185176d739d4776170ff706221061d803169a9f33a7d61f88c00f436210c0b358f52cd891d9e4e349ef95bdb42b66f1b6ea6b454f46587c6d00f263561eeea24f6aaff6abe95bad3dee1d036805049eb62e4a9202a7db6f911bbad1bfb06f52bf187dc3a393cf3fc49c8ecbc4f8ea2baed41a71f5adccc420d81a1abc9e30446ca7d6086fc70681b3cd556b251f673b81bbdabe0fec92b664154e031be6ded32c20a06e93fea94fbd146b013d79caae40c36a3c61b76936bef56dfdf5baf2e0cb9a82103c95d299842c1754f7168ff45a6c8866688d43d6ed2b44354999f7e433595279dba427e8174f187cfe80516fd2f5405b94b9fe017cf9b626281c2a4bb4a469d5e54c6a6e1fb009f5b0f2a121b5534c1439785d9582ffe50c41fe781e0297d1dc88ceb9165796778c4c52198bd615fcd557cac93f1e1085b0986353c4bf925ddbccc812967b5ceb247ff9dfb4bae36d379eaac226dc416ca5390a686561985b2967173cdfa1d9bd93cba6b5e5ba8380d4e1dedddad690005265f3f9c39ed9de2f3360721ee5701a9973cbd18dd2deaa668290568e23aa06b654f08e9cc568d688bd170d89c919e7aa2dc87466877ccace9c3b5c1daa2b204ffa7c7d978eba26a8fb813e90083cdfa22fc2bcfed3979e1318b7cfab5f712c68c288780d388c58a5f31a8c17566aded863f3919256d1c40544efe82bbc40f895fa3d69d33ad38529d4074c0e8eb404d2b8139ae241bed73ef26c0f1fd972811a76929952ad04b6e826b5c3c0470306462d43485f19a4b6eb124827d658c8f2", 0x800})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f00000001c0)={0x48, 0x2, r1})

950.371934ms ago: executing program 9 (id=2113):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1)
write$sndseq(r0, 0x0, 0x0)

950.08344ms ago: executing program 7 (id=2114):
socket$nl_xfrm(0x10, 0x3, 0x6)
symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000000100)=ANY=[], 0x1, 0x2f4, &(0x7f0000000500)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b)

883.063348ms ago: executing program 8 (id=2115):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
r0 = syz_io_uring_setup(0x1458, &(0x7f00000003c0)={0x0, 0x4, 0x10180, 0x2000, 0x3ae}, &(0x7f0000000100)=<r1=>0x0, &(0x7f00000000c0)=<r2=>0x0)
sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='9'], 0x38}, 0x1, 0x0, 0x0, 0x41}, 0x37aea8e708e70634)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x6a, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2040, 0x1})
io_uring_enter(r0, 0x2d3e, 0xfffffffd, 0x0, 0x0, 0x0)

882.783247ms ago: executing program 9 (id=2116):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file0\x00', 0x0, &(0x7f00000002c0)={[{@utf8}, {}, {@gid}, {@errors_remount}, {@fmask={'fmask', 0x3d, 0x80}}, {@iocharset={'iocharset', 0x3d, 'macroman'}}, {@errors_continue}, {@allow_utime={'allow_utime', 0x3d, 0x8}}]}, 0x1, 0x14d1, &(0x7f00000015c0)="$eJzs3AlwlcW2KOBe3f1DiBG3EZl79fphiwGaiIjIICIyiIiICIjMIiBiRERERISATCICIgIyRkSGEAGRIUDEMM/zPBg5iIiIyCSTQL/C47ncczy3uO+8cy+vKuur6kqv/Hut3Z1VyT9UZf/UdViNxjWrNiAi8a9Qf5vAX78kCyFihBADhRC3CSECIUTZ+LLx147nUpD8L70J+x/SMPVmr4DdTNz/7I37n71x/7M37n/2xv3P3rj/2Rv3P3vj/jOWraUVuJ1H9h38/D874/N/9sb9z964/9kb9z974/5nb9z/7I37n71x/7M37j9j2dr/B8+gedzEwRhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOM/S+44K/TQoi/zW/2uhhjjDHGGGOMMfbv43Pe7BUwxhhjjDHGGGPsfx4IKZTQIhA5RE4RI3KJWHGLiBO3itziNhERt4t4cYfII+4UeUU+kV8UEAVFIVFYGIHCChKhKCKKiqi4SxQTd4sEUVyUECWFE6VEorhHlBb3ijLiPlFW3C/KiQdEeVFBVBSVxIOisnhIVBEPi6riEVFNVBc1RE3xqKglHhO1xeOijnhC1BVPinriKVFfPC0aiIaikXhGNBbPiiaiqWgmmosWoqVo9S/lvyV6iLdFT9FLJIveoo94R/QV/UR/MUAMFO+KQeI9MVi8L4aIoWKY+EAMFx+KEeIjMVKMEqPFx2KMGCvGifFigpgoUsQnYpL4VEwWn4kpYqqYJqaLVDFDpInPxUwxS8wWX4g54ksxV8wT88UCkS4WikViscgQX4kl4muRKZaKZWK5WCFWilVitVgj1op1Yr3YIDaKTWKz2CK2im1iu9ghdopdYrfYI/aKfWK/OCC+EVni2//L/PP/kN8NBAiQIEGDhhyQA2IgBmIhFuIgDnJDbohABOIhHvJAHsgLeSE/5IeCUBAKQ2FAQCAgKAJFIApRKAbFIAESoASUAAcOEiERSsO9UAbKQFkoC+WgHJSHClABKkElqAyVoQpUgapQFapBNagBNeBReBQeg9pQG+pAHagLdaEe1IP6UB8aQANoBI2gMTSGJtAEmkEzaAEtoBW0gtbQGtpAG2gH7aA9tIcO0AGSIAk6QkfoBJ2gM3SGLtAFukJX6AZvwpvwFrwFb8Pb0Auqyd7QB/pAX+gL/WEADIB3YRC8B+/B+zAEhsIw+AA+gA9hBJyDkTAKRsNoqCzHwjgYDyQnQgqkwCSYBJNhMkyBqTAVpkMqzIA0SIOZMAtmwRcwB76EL2EezIMFkA7psAgWQwZkwBI4D5mwFJbBclgBK2EFrIY1sBrWwXpYBxthI2yGzbAVtsJ22A47YSfsht2wF/bCftgPQyALsuAgHIRDcAgOw2E4AkfgKByFY3AMjsNxOAEn4CScgtNwCs7CWTgH5+ECXIBLcAkuw2W4Clev/fLLa7TUMofMIWNkjIyVsTJOxsncMreMyIiMl/Eyj8wj88q8Mr/MLwvKgrKwLCxRoiQZyiKyiIzKqCwmi8kEmSBLyBLSSScTZaIsLUvLMrKMLCvvl+XkA7K8rCDbukqykqws27kq8mFZVVaV1WR1WUPWlDVlLVlL1pa1ZR1ZR9aVdWU9+ZSsL3tDf2gor3WmsRwKTeQwaCabyxaypfwQnpOt5QhoI9vKdvIFOQpGQgfZ2iXJl2VHOQ46yVfleHhNdpEToat8Q3aTb8ru8i3ZQ7ZxPWUvOQV6yz5yOvSV/WR/OUDOhOryWsdqyPflEDlUDpMfyAXwoRwhP5Ij5Sg5Wn4sx8ixcpwcLyfIiTJFfiInyU/lZPmZnCKnymlyukyVM2Sa/FzOlLPkbPmFnCO/lHPlPDlfLpDpcqFcJBfLDPmVXCK/lplyqVwml8sVcqVcJVfLNXKtXCfXyw1yo9wkN8stcqvcJrfLHXKn3CV3yz1yr9wn98sD8huZJb+VB+Vf5CH5nTwsv5dH5A/yqPxRHpM/yePyZ3lC/iJPylPytDwjz8pf5Tl5Xl6QF+Ul+Zu8LK/Iq9JLoUBJpZRWgcqhcqoYlUvFqltUnLpV5Va3qYi6XcWrO1QedafKq/Kp/KqAKqgKqcLKKFRWkQpVEVVURdVdqpi6WyWo4qqEKqmcKqUS1T2qtLpXlVH3qbLqflVOPaDKqwqqoqqkHlSV1UOqinpYVVWPqGqquqqhaqpHVS31mKqtHld11BOqrnpS1VNPqfrqadVANVSN1DOqsXpWNVFNVTPVXLVQLVUr9ZxqrZ5XbVRb1U69oNqrF1UH9ZJKUi+rjuoV1Um9qjqr11QX9brqqt5Q3dSbqru6oq4qr3qqXipZ9VZ91Duqr+qn+qsBaqB6Vw1S76nB6n01RA1Vw9QHarj6UI1QH6mRapQarT5WY9RYNU6NVxPURJWiPlGT1KdqsvpMTVFT1TQ1XaWqGar/H5Vm/zfyP/0n+YN/f/fNaovaqrap7WqH2ql2qd1qj9qj9ql96oA6oLJUljqoDqpD6pA6rA6rI+qIOqqOqmPqmDqujqsT6oQ6qU6pi+qMOqt+VefUeXVeXVSX1CV1+Y+fgdCgpVZa60Dn0Dl1jM6lY/UtOk7fqnPr23RE367j9R06j75T59X5dH5dQBfUhXRhbTRqq0mHuoguqqP6Ll1M360TdHFdQpfUTpfSifqe/+f8G62vlW6lW+vWuo1uo9vpdrq9bq876A46SSfpjrqj7qQ76c66s+6iu+iuuqvuprvp7rq77qF76J66p07WybqPfkf31f10fz1AD9Tv6kF6kB6sB+sheogepofp4Xq4HqFH6JF6pB6tR+sxeowep8fpCXqCTtEpepKepCfryXqKnqKn6Wk6VafqNJ2mZ+qZeraerefoOXqunqvn6/k6XafrRXqRztAZeoleojP1Ur1UL9fL9Uq9Uq/Wq/VavVav1+v1Rr1RZ+oteoveprfpHXqH3qV36T16j96n9+kD+oDO0ln6oD6oD+lD+rA+rI/oI/qoPqqP6WP6uD6uT+gT+qQ+qU/r0/qsPqvP6XP6gr6gL+lL+rK+rK/qq9cu+wIZyEAHOsgR5AhigpggNogN4oK4IHeQO4gEkSA+iA/yBHcGeYN8Qf6gQFAwKBQUDkyAgQ0oCIMiQdEgGtwVFAvuDhKC4kGJoGTgglJBYnBPUDq4NygT3BeUDe4PygUPBOWDCkHFoFLwYFA5eCioEjwcVA0eCaoF1YMaQc3g0aBW8FhQO3g8qBM8EdQNngzqBU8F9YOngwZBw6BR8EzQOHg2aBI0DZoFzYMWQcug1b+1vvfn8j3veppeJtn0Nn3MO6av6Wf6mwFmoHnXDDLvmcHmfTPEDDXDzAdmuPnQjDAfmZFmlBltPjZjzFgzzow3E8xEk2I+MZPMp2ay+cxMMVPNNDPdpJoZJs18bmaaWWa2+cLMMV+auWaemW8WmHSz0Cwyi02G+cosMV+bTLPULDPLzQqz0qwyq80as9asM+vNBrPRbDKbzRaz1Wwz280Os9PsMrvNHrPX7DP7zQHzjcky35qD5i/mkPnOHDbfmyPmB3PU/GiOmZ/McfOzOWF+MSfNKXPanDFnza/mnDlvLpiL5pL5zVw2V8xV469d3F87vaNGjTkwB8ZgDMZiLMZhHObG3BjBCMZjPObBPJgX82J+zI8FsSAWxsJ4DSFhESyCUYxiMSyGCZiAJbAEOnSYiIlYGktjGSyDZbEslsNyWB7LY0WsiA/ig/gQPoQP48P4CD6C1bE61sSaWAtrYW2sjXWwDtbFulgP62F9rI8NsAE2wkbYGBtjE2yCzbAZtsAW2ApbYWtsjW2wDbbDdtge22MH7IBJmIQdsSN2wk7YGTtjF+yCXbErdsNu2B27Yw/sgT2xJyZjMvbBPtgX+2J/7I8DcSAOwkE4GAfjEByCw3AYDsfhOAJH4EgchaPxYxyDY3EcjscJOBFTMAUn4SScjJNxCk7BaTgNUzEV0zANZ+JMnI2zcQ7Owbk4F+fjfEzHdFyEizADM3AJLsFMzMRluAxX4ApchatwDa7BdbgON+AG3ISbcAtuwW24DXfgDtyFu3AP7sF9uA8P4AHMwiw8iAfxEB7Cw3gYj+ARPIpH8Rgew+N4HE/gCTyJJ/E0nsazeBbP4Tm8gBfwEv6Gl/EKXkWPMTaXjbW32Dh7q81tb7P/GOe3BWxBW8gWtsbmtfn+LkZrbYItbkvYktbZUjbR3vOnuLytYCvaSvZBW9k+ZKv8Ka5lH7O17eO2jn3C1rSP/l1c1z5p69lnbX3b1DawzW0j29I2ts/aJrapbWab2xa2pW1vX7Qd7Es2yb5sO9pX/hQvsovtGrvWrrPr7T67316wF+0x+5O9ZH+zPW0vO9C+awfZ9+xg+74dYof+KR5tP7Zj7Fg7zo63E+zEP8XT7HSbamfYNPu5nWln/SlOtwvtHJth59p5dr5d8Ht8bU0Z9iu7xH5tM+1Su8wutyvsSrvKrv6PtS63G+0mu9nusXvtNrvd7rA77S67+/f42j4O2G9slv3WHrU/2kP2O3vYHrdH7A+/x9f2d9z+bE/YX+xJe8qetmfsWfurPWfP/77/a3s/Y6/Yq9ZbQUCSFGkKKAflpBjKRbF0C8XRrZSbbqMI3U7xdAfloTspL+Wj/FSAClIhKkyGkCwRhVSEilKU7qJidDclUHEqQSXJUSlKpHuoNN1LZeg+Kkv3Uzl6gMpTBapIlehBqkwPURV6mKrSI1SNqlMNqkmPUi16jGrT41SHnqC69CTVo6eoPj1NDaghNaJnqDE9S02oKTWj5tSCWlIreo5a0/PUhtpSO3qB2tOL1IFeoiR6mTrSK9SJXqXO9Bp1odepK71B3ehN6k5vUQ96m3pSL0qm3tSH3qG+1I/60wAaSO/SIHqPBtP7NISG0jD6gIbThzSCPqKRNIpG08c0hsbSOBpPE2gipdAnNIk+pcn0GU2hqTSNplMqzaA0+pxm0iyaTV/QHPqS5tI8mk8LKJ0W0iJaTBn0FS2hrymTltIyWk4raCWtotW0htbSOlpPG2gjbaLNtIW20jbaTjtoJ+2i3bSH9tI+2k8H6BvKom/pIP2FDtF3dJi+pyP0Ax2lH+kY/UTH6Wc6Qb/QSTpFp+kMnaVf6Rydpwt0kS7Rb3SZrtBV8iRCCGWoQh0GYY4wZxgT5gpjw1vCuPDWMHd4WxgJbw/jwzvCPOGdYd4wX5g/LBAWDAuFhUMTYmhDCsOwSFg0jIZ3hcXCu8OEsHhYIiwZurBUmBjeE5YO7w3LhPeFZcP7w3LhA2H5sEJYMawUPhhWDh8Kq4QPh1XDR8JqYfWwRlgzfDSsFT4W1g4fD+uET4RlwifDeuFTYf3w6bBB2DBsFD4TNg6fDZuETcNmYfOwRdgybBU+F7YOnw/bhG3DduELYfvwxbBD+FKYFL4cdgxfueHx5LB32Cd8J3wn9P5xNT+6IJoeXRhdFF0czYh+FV0S/TqaGV0aXRZdHl0RXRldFV0dXRNdG10XXR/dEN0Y3RTdHPW+Zk7hwEmnnHaBy+FyuhiXy8W6W1ycu9Xldre5iLvdxbs7XB53p8vr8rn8roAr6Aq5ws44dNaRC10RV9RF3V2umLvbJbjiroQr6Zwr5RJdS9fKtXKt3fOujWvr2rkX3AvuRfeie8m95F52Hd0rrpN71XV2r7ku7nX3unvDdXNvuu7uLdfDve16ul4u2SW7Pq6P6+v6uv6uvxvoBrpBbpAb7Aa7IW6IG+aGueFuuBvhRriRbqQb7Ua7MW6MG+fGuQlugktxKW6Sm+Qmu8luipviprlpLtWlujSX5ma6mW62m+3muDlurpvr5rv5Lt2lu0VukctwGW6JW+IyXaZb5pa5FW6FW+VWuTVujVvn1rkNboPb5Da5LW6L2+a2uR1uh9vldrk9bo/b5/a5A+6Ay3JZ7qA76A65Q+6w+94dcT+4o+5Hd8z95I67n90J94s76U650+6MO+t+defceXfBXXSX3G/usrvirjrvUiKfRCZFPo1MjnwWmRKZGpkWmR5JjcyIpEU+j8yMzIrMjnwRmRP5MjI3Mi8yP7Igkh5ZGFkUWRzJiHwVWRL5OpIZWRpZFlkeWRFZGfG+0LbQF/FFfdTf5Yv5u32CL+5L+JLe+VI+0d/jS/t7fRl/ny/r7/fl/AO+vK/gK/qmvplv7lv4lr6Vf8639s/7Nr6tb+df8O39i76Df8kn+Zd9R/+K7+Rf9Z39a76Lf9139W/4bv5N392/5Xv4t31P38sn+96+j3/H9/X9fH8/wA/07/pB/j0/2L/vh/ihfpj/wA/3H/oR/iM/0o/yo/3Hfowf68f58X6Cn+hT/Cd+kv/UT/af+Sl+qp/mp/tUP8On+c/9TD/Lz/Zf+Dn+Sz/Xz/Pz/QKf7hf6RX6xz/Bf+SX+a5/pl/plfrlf4Vf6VX61X+PX+nV+vd/gN/pNfrPf4rf6bX673+F3+l1+t9/j9/p9fr8/4L/xWf5bf9D/xR/y3/nD/nt/xP/gj/of/TH/kz/uf/Yn/C/+pD/lT/sz/qz/1Z/z5/0Ff9Ff8r/5y/6Kv8r/s8YYY4wx9t+ibnC89z/5nvxjXNNHCHHr9gJH/rHmhrx/nfeT+zpGhBAv9+ra8G+jYcPk5OQ/XpupRFB0nhAicj0/h7geLxXtxIsiSbQVpf/p+vrJikA3qB+9X4jY/5QTI67H1+vf+1/Ub7rwhvXnCZFQ9HpOLnE9vl6/zH9Rf3f7G9TP9V2KEG3+U06cuB5fr58onheviKS/eyVjjDHGGGOMMfZX/eSlbje6v712f15QX8/JKa7HN7o/Z4wxxhhjjDHG2M332pvdX3ouKaltZ57whCc8+Y/Jzf7LxBhjjDHGGPt3u37Rf7NXwhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMZV//Gx8ndrP3yBhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjN1s/ycAAP//fMhn/w==")
r0 = open(&(0x7f0000000240)='./file2\x00', 0x145142, 0x0)
sendfile(r0, r0, 0x0, 0x800000009)

775.746957ms ago: executing program 8 (id=2117):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000440)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000580)="2c385aa3", 0x4)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000005080)=[{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000140)="09dea4afb76288fa135537845f3188b4cb061c94084050d4", 0x18}], 0x1, &(0x7f0000000080)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0)
recvmmsg(r1, &(0x7f00000043c0)=[{{0x0, 0x0, &(0x7f0000004540)=[{&(0x7f0000000240)=""/163, 0xa3}], 0x1}, 0x1}], 0x1, 0x0, 0x0)
sendmsg$IPSET_CMD_TEST(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)={0x64, 0xb, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x16}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x6}, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}, @IPSET_ATTR_ADT={0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x4)

599.236347ms ago: executing program 9 (id=2118):
r0 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e23, 0x40004, @dev={0xfe, 0x80, '\x00', 0x48}}, 0x1c)

321.878508ms ago: executing program 9 (id=2119):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
fgetxattr(r0, &(0x7f0000000000)=@known='trusted.overlay.upper\x00', &(0x7f0000000240)=""/84, 0x54)

172.893356ms ago: executing program 9 (id=2120):
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x10, 0x4, 0x8, 0x6, 0x280, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1000000}, 0x50)

92.829012ms ago: executing program 8 (id=2121):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0x0)
r2 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000500)={0x8000000e})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/138, 0x0})
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000940))
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x20000)

92.495542ms ago: executing program 9 (id=2122):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240), 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b705000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400000}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

0s ago: executing program 7 (id=2123):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="500000001000ffff25bd7000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="2402000000200500300012800b00010065727370616e00002000028004001200060018005f0a0000050016"], 0x50}}, 0x8000)

kernel console output (not intermixed with test programs):

0 port 6081 - 0
[  249.583283][  T165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  249.594313][  T165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  249.631031][ T1092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  249.636446][ T1092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  249.738027][T10082] input: syz0 as /devices/virtual/input/input8
[  249.779962][T10082] loop9: detected capacity change from 0 to 256
[  249.810956][T10082] exFAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  249.815172][T10082] exFAT-fs (loop9): Medium has reported failures. Some data may be lost.
[  249.906478][T10082] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x81a5e573, utbl_chksum : 0xe619d30d)
[  250.527859][T10097] loop9: detected capacity change from 0 to 8
[  250.583703][T10096] block device autoloading is deprecated and will be removed.
[  250.589214][T10097] Page size > filesystem block size (0).  This is currently not supported!
[  250.689290][ T5846] Bluetooth: hci6: command tx timeout
[  251.108659][T10107] loop9: detected capacity change from 0 to 4096
[  251.165730][T10107] ntfs3(loop9): Mark volume as dirty due to NTFS errors
[  251.175605][T10103] loop8: detected capacity change from 0 to 32768
[  251.189462][T10107] ntfs3(loop9): $Secure::$SDH is corrupted.
[  251.199729][T10107] ntfs3(loop9): Failed to initialize $Secure (-22).
[  251.286021][T10103] bcachefs (loop8): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,checksum_err_retry_nr=12,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,degraded=yes,nojournal_transaction_names
[  251.286047][T10103]   allowing incompatible features above 0.0: (unknown version)
[  251.286056][T10103]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  251.306622][T10103] bcachefs (loop8): Using encoding defined by superblock: utf8-12.1.0
[  251.309911][T10103] bcachefs (loop8): initializing new filesystem
[  251.321680][T10103] bcachefs (loop8): going read-write
[  251.331081][T10103] bcachefs (loop8): marking superblocks
[  251.367394][T10103] bcachefs (loop8): initializing freespace
[  251.386311][T10103] bcachefs (loop8): done initializing freespace
[  251.397815][T10103] bcachefs (loop8): reading snapshots table
[  251.400399][T10103] bcachefs (loop8): reading snapshots done
[  251.428020][T10103] bcachefs (loop8): done starting filesystem
[  251.523216][ T9566] bcachefs (loop8): shutting down
[  251.525148][ T9566] bcachefs (loop8): going read-only
[  251.526980][ T9566] bcachefs (loop8): finished waiting for writes to stop
[  251.553045][ T9566] bcachefs (loop8): flushing journal and stopping allocators, journal seq 3
[  251.594674][ T9566] bcachefs (loop8): flushing journal and stopping allocators complete, journal seq 3
[  251.598374][ T9566] bcachefs (loop8): clean shutdown complete, journal seq 4
[  251.605150][ T9566] bcachefs (loop8): marking filesystem clean
[  251.663123][ T9566] bcachefs (loop8): shutdown complete
[  251.808808][T10125] loop9: detected capacity change from 0 to 32768
[  251.870335][T10125] XFS (loop9): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  251.905042][T10125] XFS (loop9): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  251.921445][T10125] XFS (loop9): Starting recovery (logdev: internal)
[  251.937009][T10125] XFS (loop9): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_bnobt block 0x8 
[  251.941460][T10125] XFS (loop9): Unmount and run xfs_repair
[  251.943874][T10125] XFS (loop9): First 128 bytes of corrupted metadata buffer:
[  251.946784][T10125] 00000000: 41 42 54 42 00 00 00 02 ff ff ff ff ff ff ff ff  ABTB............
[  251.950478][T10125] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10  ................
[  251.954960][T10125] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb  ...^T.Lr......N.
[  251.958344][T10125] 00000030: 00 00 00 00 c8 fc 31 e4 00 00 04 4e 00 00 00 02  ......1....N....
[  251.961758][T10125] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00  ...`............
[  251.965141][T10125] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  251.969055][T10125] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  251.972924][T10125] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  251.977389][T10125] XFS (loop9): Filesystem has been shut down due to log error (0x2).
[  251.980793][T10125] XFS (loop9): Please unmount the filesystem and rectify the problem(s).
[  251.984554][T10125] XFS (loop9): log mount/recovery failed: error -74
[  251.999688][T10125] XFS (loop9): log mount failed
[  252.769169][ T5846] Bluetooth: hci6: command tx timeout
[  253.232945][T10146] loop9: detected capacity change from 0 to 512
[  253.262476][T10146] EXT4-fs (loop9): orphan cleanup on readonly fs
[  253.273024][T10146] Quota error (device loop9): v2_read_file_info: Block with free entry 9 out of range (1, 6).
[  253.277445][T10148] genirq: Flags mismatch irq 4. 00200000 (pcl812) vs. 00200080 (ttyS0)
[  253.290247][T10146] EXT4-fs warning (device loop9): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  253.305301][T10146] EXT4-fs (loop9): Cannot turn on quotas: error -117
[  253.313103][T10146] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.1372: bg 0: block 248: padding at end of block bitmap is not set
[  253.318263][T10146] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6657: Corrupt filesystem
[  253.327243][T10146] EXT4-fs (loop9): 1 orphan inode deleted
[  253.335310][T10146] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  253.443280][T10011] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  253.677230][T10138] loop7: detected capacity change from 0 to 32768
[  253.987576][T10138] bcachefs (loop7): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names
[  253.987592][T10138]   allowing incompatible features above 0.0: (unknown version)
[  253.987597][T10138]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  254.048781][T10138] bcachefs (loop7): Using encoding defined by superblock: utf8-12.1.0
[  254.065043][T10138] bcachefs (loop7): initializing new filesystem
[  254.084471][T10138] bcachefs (loop7): going read-write
[  254.122681][T10138] bcachefs (loop7): marking superblocks
[  254.158489][T10138] bcachefs (loop7): initializing freespace
[  254.194864][T10138] bcachefs (loop7): done initializing freespace
[  254.252682][T10138] bcachefs (loop7): reading snapshots table
[  254.255287][T10138] bcachefs (loop7): reading snapshots done
[  254.344647][T10138] bcachefs (loop7): done starting filesystem
[  254.635972][ T9436] bcachefs (loop7): shutting down
[  254.638106][ T9436] bcachefs (loop7): going read-only
[  254.655697][ T9436] bcachefs (loop7): finished waiting for writes to stop
[  254.666285][ T9436] bcachefs (loop7): flushing journal and stopping allocators, journal seq 2
[  254.683913][T10150] loop9: detected capacity change from 0 to 40427
[  254.694586][T10150] F2FS-fs: heap/no_heap options were deprecated
[  254.712353][T10150] F2FS-fs (loop9): build fault injection rate: 19
[  254.713191][ T9436] bcachefs (loop7): flushing journal and stopping allocators complete, journal seq 3
[  254.714384][T10150] F2FS-fs (loop9): build fault injection type: 0xb23a
[  254.735374][ T9436] bcachefs (loop7): clean shutdown complete, journal seq 4
[  254.738518][ T9436] bcachefs (loop7): marking filesystem clean
[  254.762265][T10150] F2FS-fs (loop9): invalid crc value
[  254.789422][T10150] F2FS-fs (loop9): inject kvmalloc in f2fs_kvmalloc of f2fs_fill_super+0x4462/0x6ff0
[  254.790484][ T9436] bcachefs (loop7): shutdown complete
[  254.793365][T10150] F2FS-fs (loop9): Failed to initialize F2FS node manager (-12)
[  254.849462][ T5846] Bluetooth: hci6: command tx timeout
[  255.188518][T10170] loop9: detected capacity change from 0 to 2048
[  255.214913][T10170] UDF-fs: error (device loop9): udf_read_tagged: tag checksum failed, block 129: 0x32 != 0x7d
[  255.235870][T10170] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  255.258490][T10172] loop8: detected capacity change from 0 to 1024
[  255.290398][T10172] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  255.413498][ T1366] ieee802154 phy0 wpan0: encryption failed: -22
[  255.415476][ T1366] ieee802154 phy1 wpan1: encryption failed: -22
[  255.488838][ T9566] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  256.187684][T10190] loop9: detected capacity change from 0 to 32768
[  256.225240][T10190] XFS (loop9): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  256.259404][    T9] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  256.338027][T10190] XFS (loop9): Corruption warning: Metadata has LSN (1:384) ahead of current LSN (1:128). Please unmount and run xfs_repair (>= v4.3) to resolve.
[  256.346459][T10190] XFS (loop9): log mount/recovery failed: error -22
[  256.354580][T10205] loop7: detected capacity change from 0 to 256
[  256.363903][T10190] XFS (loop9): log mount failed
[  256.366944][T10205] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 0, start 00000001)
[  256.410410][    T9] usb 9-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c
[  256.413333][    T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  256.447678][    T9] usb 9-1: config 0 descriptor??
[  257.590598][    T9] pegasus 9-1:0.0: probe with driver pegasus failed with error -71
[  257.601869][    T9] usb 9-1: USB disconnect, device number 5
[  257.934520][T10222] loop9: detected capacity change from 0 to 32768
[  257.954528][T10222] (syz.9.1393,10222,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  257.968844][T10222] (syz.9.1393,10222,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  257.992709][T10222] JBD2: Ignoring recovery information on journal
[  258.016430][T10222] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode.
[  258.072945][T10011] ocfs2: Unmounting device (7,9) on (node local)
[  258.271286][T10228] Bluetooth: MGMT ver 1.23
[  258.358693][T10231] loop9: detected capacity change from 0 to 1024
[  258.438545][T10231] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  258.712280][T10238] loop8: detected capacity change from 0 to 40427
[  258.730467][T10238] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12
[  258.733016][T10238] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock
[  258.771787][T10011] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  258.772302][T10238] F2FS-fs (loop8): invalid crc value
[  258.812393][T10238] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  258.845236][T10238] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0
[  258.847514][T10238] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5
[  259.088047][T10249] syz.8.1398: attempt to access beyond end of device
[  259.088047][T10249] loop8: rw=2049, sector=77824, nr_sectors = 520 limit=40427
[  259.520610][ T9566] syz-executor: attempt to access beyond end of device
[  259.520610][ T9566] loop8: rw=2051, sector=77824, nr_sectors = 520 limit=40427
[  259.539535][ T9566] F2FS-fs (loop8): Issue discard(9728, 9728, 65) failed, ret: -5
[  260.175637][T10262] loop7: detected capacity change from 0 to 32768
[  260.303762][   T33] audit: type=1804 audit(2000000057.890:188): pid=10284 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.9.1415" name="file0" dev="ramfs" ino=23093 res=1 errno=0
[  260.358651][   T33] audit: type=1804 audit(2000000057.910:189): pid=10284 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.9.1415" name="file0" dev="ramfs" ino=23093 res=1 errno=0
[  260.433332][T10262] bcachefs (loop7): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names
[  260.433346][T10262]   allowing incompatible features above 0.0: (unknown version)
[  260.433351][T10262]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  260.481314][T10262] bcachefs (loop7): Using encoding defined by superblock: utf8-12.1.0
[  260.483936][T10262] bcachefs (loop7): initializing new filesystem
[  260.530708][T10262] bcachefs (loop7): going read-write
[  260.561648][T10262] bcachefs (loop7): marking superblocks
[  260.567443][T10262] bcachefs (loop7): initializing freespace
[  260.600709][T10262] bcachefs (loop7): done initializing freespace
[  260.620011][T10262] bcachefs (loop7): reading snapshots table
[  260.622297][T10262] bcachefs (loop7): reading snapshots done
[  260.657616][T10262] bcachefs (loop7): done starting filesystem
[  260.770732][ T5908] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[  260.917564][ T9436] bcachefs (loop7): shutting down
[  260.919612][ T9436] bcachefs (loop7): going read-only
[  260.921395][ T9436] bcachefs (loop7): finished waiting for writes to stop
[  260.923956][ T9436] bcachefs (loop7): flushing journal and stopping allocators, journal seq 2
[  260.939094][ T5908] usb 9-1: Using ep0 maxpacket: 8
[  260.946603][ T5908] usb 9-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  260.952727][ T9436] bcachefs (loop7): flushing journal and stopping allocators complete, journal seq 3
[  260.952841][ T5908] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  260.956273][ T9436] bcachefs (loop7): clean shutdown complete, journal seq 4
[  260.961414][ T9436] bcachefs (loop7): marking filesystem clean
[  260.961620][ T5908] usb 9-1: Product: syz
[  260.968135][ T5908] usb 9-1: Manufacturer: syz
[  260.971843][ T5908] usb 9-1: SerialNumber: syz
[  260.979473][ T5908] usb 9-1: config 0 descriptor??
[  260.985308][ T9436] bcachefs (loop7): shutdown complete
[  260.989943][ T5908] gspca_main: se401-2.14.0 probing 047d:5003
[  261.458733][ T5908] gspca_se401: Wrong descriptor type
[  261.655764][ T5910] usb 9-1: USB disconnect, device number 6
[  261.906172][T10308] loop9: detected capacity change from 0 to 32768
[  261.921210][T10308] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.1424 (10308)
[  261.959986][T10308] BTRFS info (device loop9): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  261.964048][T10308] BTRFS info (device loop9): using sha256 (sha256-lib) checksum algorithm
[  261.970615][T10308] BTRFS info (device loop9): disk space caching is enabled
[  261.973486][T10308] BTRFS warning (device loop9): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  262.009283][T10308] BTRFS info (device loop9): rebuilding free space tree
[  262.041502][T10308] BTRFS info (device loop9): disabling free space tree
[  262.043711][T10308] BTRFS info (device loop9): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  262.046578][T10308] BTRFS info (device loop9): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  262.112841][   T33] audit: type=1800 audit(2000000059.700:190): pid=10308 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1424" name="bus" dev="loop9" ino=263 res=0 errno=0
[  262.166003][T10011] BTRFS info (device loop9): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  263.495620][T10332] loop7: detected capacity change from 0 to 32768
[  263.520034][T10332] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.1427 (10332)
[  263.562464][T10332] BTRFS info (device loop7): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  263.566869][T10332] BTRFS info (device loop7): using xxhash64 (xxhash64-generic) checksum algorithm
[  263.573972][T10332] BTRFS info (device loop7): disk space caching is enabled
[  263.577324][T10332] BTRFS warning (device loop7): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  263.793858][T10332] BTRFS info (device loop7): rebuilding free space tree
[  263.810903][T10340] loop8: detected capacity change from 0 to 32768
[  263.822619][T10332] BTRFS info (device loop7): disabling free space tree
[  263.829227][T10332] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  263.839658][T10332] BTRFS info (device loop7): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  263.852057][   T10] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  263.898588][ T9436] BTRFS info (device loop7): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  263.977657][T10340] bcachefs (loop8): starting version 1.13: inode_has_child_snapshots opts=metadata_checksum=none,data_checksum=none,compression=lz4
[  263.977704][T10340]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  264.002610][T10340] bcachefs (loop8): Using encoding defined by superblock: utf8-12.1.0
[  264.006015][T10340] bcachefs (loop8): recovering from clean shutdown, journal seq 8
[  264.012244][T10340] bcachefs (loop8): Doing compatible version upgrade from 1.13: inode_has_child_snapshots to 1.28: inode_has_case_insensitive
[  264.012244][T10340]   running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes
[  264.019305][   T10] usb 10-1: Using ep0 maxpacket: 32
[  264.025599][   T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  264.039012][   T10] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  264.050269][   T10] usb 10-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  264.060899][   T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  264.074061][   T10] usb 10-1: config 0 descriptor??
[  264.080440][   T10] hub 10-1:0.0: USB hub found
[  264.180029][T10340] bcachefs (loop8): error reading btree root btree=accounting level=0: btree_node_read_error, fixing
[  264.184777][T10340] bcachefs (loop8): check_topology... done
[  264.202633][T10340] bcachefs (loop8): accounting_read... done
[  264.208358][T10340] bcachefs (loop8): alloc_read... done
[  264.248781][T10340] bcachefs (loop8): snapshots_read... done
[  264.255983][T10340] bcachefs (loop8): check_allocations...
[  264.286346][T10340] bcachefs (loop8): bucket 0:79 gen 0 has wrong data_type: got btree, should be need_discard, fixing
[  264.291712][   T10] hub 10-1:0.0: config failed, can't read hub descriptor (err -22)
[  264.326742][T10340] bcachefs (loop8): bucket 0:79 gen 0 data type need_discard has wrong dirty_sectors: got 64, should be 0, fixing
[  264.351825][T10369] loop7: detected capacity change from 0 to 64
[  264.364559][T10340]  done
[  264.378606][T10340] bcachefs (loop8): going read-write
[  264.431839][T10340] bcachefs (loop8): journal_replay... done
[  264.506801][   T10] hid-generic 0003:046D:C31C.000A: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.9-1/input0
[  264.519450][T10340] bcachefs (loop8): check_lrus... done
[  264.525497][T10340] bcachefs (loop8): check_backpointers_to_extents... done
[  264.562648][T10340] bcachefs (loop8): check_extents_to_backpointers... done
[  264.585890][T10340] bcachefs (loop8): check_inodes... done
[  264.599287][T10340] bcachefs (loop8): resume_logged_ops... done
[  264.605933][T10340] bcachefs (loop8): delete_dead_inodes... done
[  264.613500][T10340] bcachefs (loop8): Fixed errors, running fsck a second time to verify fs is clean
[  264.616660][T10340] bcachefs (loop8): check_extents_to_backpointers...
[  264.617249][T10340] bcachefs (loop8): scanning for missing backpointers in 1/512 buckets
[  264.630734][T10340]  done
[  264.632585][T10340] bcachefs (loop8): check_inodes... done
[  264.636273][T10340] bcachefs (loop8): resume_logged_ops... done
[  264.643197][T10340] bcachefs (loop8): delete_dead_inodes... done
[  264.647296][T10340] bcachefs (loop8): done starting filesystem
[  264.738775][T10340] syz.8.1431 (10340) used greatest stack depth: 15112 bytes left
[  264.786118][ T9566] bcachefs (loop8): shutting down
[  264.787758][ T9566] bcachefs (loop8): going read-only
[  264.791949][ T9566] bcachefs (loop8): finished waiting for writes to stop
[  264.805231][ T9566] bcachefs (loop8): flushing journal and stopping allocators, journal seq 18
[  264.808828][ T9566] bcachefs (loop8): flushing journal and stopping allocators complete, journal seq 18
[  264.819581][   T10] usb 10-1: USB disconnect, device number 2
[  264.828180][ T9566] bcachefs (loop8): clean shutdown complete, journal seq 19
[  264.832095][ T9566] bcachefs (loop8): marking filesystem clean
[  264.881674][ T9566] bcachefs (loop8): shutdown complete
[  265.310311][T10378] loop7: detected capacity change from 0 to 40427
[  265.333856][T10378] F2FS-fs (loop7): build fault injection rate: 25
[  265.357734][T10378] F2FS-fs (loop7): invalid crc value
[  265.437824][T10386] loop9: detected capacity change from 0 to 1024
[  265.460368][T10386] EXT4-fs: Ignoring removed bh option
[  265.462759][T10386] EXT4-fs: inline encryption not supported
[  265.473703][T10386] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  265.486887][T10386] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000]
[  265.514466][T10378] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  265.518356][T10378] F2FS-fs (loop7): Start checkpoint disabled!
[  265.532814][T10386] EXT4-fs error (device loop9): ext4_map_blocks:778: inode #3: block 2: comm syz.9.1441: lblock 2 mapped to illegal pblock 2 (length 1)
[  265.545252][T10386] Quota error (device loop9): qtree_write_dquot: dquota write failed
[  265.548499][T10386] EXT4-fs error (device loop9): ext4_map_blocks:778: inode #3: block 48: comm syz.9.1441: lblock 0 mapped to illegal pblock 48 (length 1)
[  265.553709][T10378] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6
[  265.580785][T10386] Quota error (device loop9): v2_write_file_info: Can't write info structure
[  265.584672][T10386] EXT4-fs error (device loop9): ext4_acquire_dquot:6933: comm syz.9.1441: Failed to acquire dquot type 0
[  265.594944][T10386] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6334: Corrupt filesystem
[  265.599807][T10386] EXT4-fs error (device loop9): ext4_evict_inode:254: inode #11: comm syz.9.1441: mark_inode_dirty error
[  265.604713][T10386] EXT4-fs warning (device loop9): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  265.609285][T10386] EXT4-fs (loop9): 1 orphan inode deleted
[  265.613521][T10386] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  265.648713][   T28] kworker/u9:1: attempt to access beyond end of device
[  265.648713][   T28] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  265.655917][  T133] EXT4-fs error (device loop9): ext4_map_blocks:778: inode #3: block 1: comm kworker/u9:2: lblock 1 mapped to illegal pblock 1 (length 1)
[  265.663365][   T28] CPU: 0 UID: 0 PID: 28 Comm: kworker/u9:1 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  265.663387][   T28] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  265.663396][   T28] Workqueue: writeback wb_workfn (flush-7:7)
[  265.663418][   T28] Call Trace:
[  265.663424][   T28]  <TASK>
[  265.663431][   T28]  dump_stack_lvl+0x189/0x250
[  265.663453][   T28]  ? __pfx_dump_stack_lvl+0x10/0x10
[  265.663470][   T28]  ? __pfx_queue_work_on+0x10/0x10
[  265.663483][   T28]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  265.663501][   T28]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  265.663529][   T28]  f2fs_handle_critical_error+0x37c/0x540
[  265.663587][   T28]  f2fs_write_end_io+0x886/0xb60
[  265.663619][   T28]  __submit_merged_bio+0x27a/0x6a0
[  265.663644][   T28]  __submit_merged_write_cond+0x255/0x530
[  265.663670][   T28]  f2fs_write_data_pages+0x261d/0x3000
[  265.663722][   T28]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  265.663756][   T28]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  265.663804][   T28]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  265.663887][   T28]  ? trace_f2fs_writepages+0x7f/0x200
[  265.663907][   T28]  ? f2fs_write_node_pages+0x478/0x6e0
[  265.663930][   T28]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  265.663963][   T28]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  265.663984][   T28]  do_writepages+0x32e/0x550
[  265.664008][   T28]  ? reacquire_held_locks+0x127/0x1d0
[  265.664022][   T28]  ? writeback_sb_inodes+0x384/0x1010
[  265.664048][   T28]  __writeback_single_inode+0x145/0xff0
[  265.664066][   T28]  ? do_raw_spin_unlock+0x4d/0x240
[  265.664087][   T28]  writeback_sb_inodes+0x6c7/0x1010
[  265.664129][   T28]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  265.664187][   T28]  ? rcu_is_watching+0x15/0xb0
[  265.664211][   T28]  wb_writeback+0x43b/0xaf0
[  265.664237][   T28]  ? queue_io+0x3b1/0x590
[  265.664257][   T28]  ? __pfx_wb_writeback+0x10/0x10
[  265.664283][   T28]  ? _raw_spin_unlock_irq+0x23/0x50
[  265.664305][   T28]  wb_workfn+0x409/0xef0
[  265.664335][   T28]  ? __pfx_wb_workfn+0x10/0x10
[  265.664355][   T28]  ? __lock_acquire+0xab9/0xd20
[  265.664385][   T28]  ? process_scheduled_works+0x9ef/0x17b0
[  265.664405][   T28]  ? _raw_spin_unlock_irq+0x23/0x50
[  265.664420][   T28]  ? process_scheduled_works+0x9ef/0x17b0
[  265.664433][   T28]  ? process_scheduled_works+0x9ef/0x17b0
[  265.664449][   T28]  process_scheduled_works+0xae1/0x17b0
[  265.664491][   T28]  ? __pfx_process_scheduled_works+0x10/0x10
[  265.664523][   T28]  worker_thread+0x8a0/0xda0
[  265.664589][   T28]  kthread+0x711/0x8a0
[  265.664612][   T28]  ? __pfx_worker_thread+0x10/0x10
[  265.664625][   T28]  ? __pfx_kthread+0x10/0x10
[  265.664644][   T28]  ? _raw_spin_unlock_irq+0x23/0x50
[  265.664660][   T28]  ? lockdep_hardirqs_on+0x9c/0x150
[  265.664676][   T28]  ? __pfx_kthread+0x10/0x10
[  265.664694][   T28]  ret_from_fork+0x3fc/0x770
[  265.664712][   T28]  ? __pfx_ret_from_fork+0x10/0x10
[  265.664733][   T28]  ? __switch_to_asm+0x39/0x70
[  265.664749][   T28]  ? __switch_to_asm+0x33/0x70
[  265.664765][   T28]  ? __pfx_kthread+0x10/0x10
[  265.664782][   T28]  ret_from_fork_asm+0x1a/0x30
[  265.664816][   T28]  </TASK>
[  265.664832][   T28] F2FS-fs (loop7): Stopped filesystem due to reason: 3
[  265.751809][  T133] Quota error (device loop9): remove_tree: Can't read quota data block 1
[  265.885825][  T133] EXT4-fs error (device loop9): ext4_release_dquot:6969: comm kworker/u9:2: Failed to release dquot type 0
[  265.906259][T10385] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  265.910859][T10385] EXT4-fs error (device loop9): __ext4_get_inode_loc:4861: comm syz.9.1441: Invalid inode table block 1 in block_group 0
[  265.929082][T10385] EXT4-fs error (device loop9) in ext4_reserve_inode_write:6334: Corrupt filesystem
[  265.934713][T10385] EXT4-fs error (device loop9): ext4_quota_off:7217: inode #3: comm syz.9.1441: mark_inode_dirty error
[  266.487773][T10401] loop7: detected capacity change from 0 to 128
[  266.497789][T10401] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002]
[  266.500875][T10401] System zones: 1-3, 19-19, 35-36
[  266.504317][T10401] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  266.528408][T10401] ext4 filesystem being mounted at /78/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  266.597812][ T9436] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  266.603676][T10392] loop9: detected capacity change from 0 to 32768
[  266.799271][T10392] bcachefs (loop9): starting version 1.13: inode_has_child_snapshots opts=metadata_checksum=none,data_checksum=none,compression=lz4
[  266.799292][T10392]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  266.824514][T10392] bcachefs (loop9): Using encoding defined by superblock: utf8-12.1.0
[  266.827728][T10392] bcachefs (loop9): recovering from clean shutdown, journal seq 8
[  266.859081][T10392] bcachefs (loop9): Doing compatible version upgrade from 1.13: inode_has_child_snapshots to 1.28: inode_has_case_insensitive
[  266.859081][T10392]   running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes
[  266.937757][T10392] bcachefs (loop9): error reading btree root btree=accounting level=0: btree_node_read_error, fixing
[  266.949543][T10392] bcachefs (loop9): check_topology... done
[  266.953292][T10392] bcachefs (loop9): accounting_read... done
[  266.980550][T10392] bcachefs (loop9): alloc_read... done
[  266.987872][T10392] bcachefs (loop9): snapshots_read... done
[  267.022550][T10392] bcachefs (loop9): check_allocations...
[  267.033017][T10392] bcachefs (loop9): bucket 0:79 gen 0 has wrong data_type: got btree, should be need_discard, fixing
[  267.042632][T10392] bcachefs (loop9): bucket 0:79 gen 0 data type need_discard has wrong dirty_sectors: got 64, should be 0, fixing
[  267.065190][T10392]  done
[  267.076868][T10392] bcachefs (loop9): going read-write
[  267.086833][T10392] bcachefs (loop9): journal_replay... done
[  267.151816][T10392] bcachefs (loop9): check_lrus... done
[  267.154428][T10392] bcachefs (loop9): check_backpointers_to_extents... done
[  267.159142][T10392] bcachefs (loop9): check_extents_to_backpointers... done
[  267.198328][T10392] bcachefs (loop9): check_inodes... done
[  267.466992][T10392] bcachefs (loop9): resume_logged_ops... done
[  267.482393][T10392] bcachefs (loop9): delete_dead_inodes... done
[  267.492636][T10392] bcachefs (loop9): Fixed errors, running fsck a second time to verify fs is clean
[  267.500875][T10392] bcachefs (loop9): check_extents_to_backpointers...
[  267.502041][T10392] bcachefs (loop9): scanning for missing backpointers in 1/512 buckets
[  267.513753][T10392]  done
[  267.515787][T10392] bcachefs (loop9): check_inodes... done
[  267.521005][T10392] bcachefs (loop9): resume_logged_ops... done
[  267.524248][T10392] bcachefs (loop9): delete_dead_inodes... done
[  267.528727][T10392] bcachefs (loop9): done starting filesystem
[  267.607345][T10392] syz.9.1443 (10392) used greatest stack depth: 15016 bytes left
[  267.612131][T10011] bcachefs (loop9): shutting down
[  267.614317][T10011] bcachefs (loop9): going read-only
[  267.616108][T10011] bcachefs (loop9): finished waiting for writes to stop
[  267.624743][T10011] bcachefs (loop9): flushing journal and stopping allocators, journal seq 18
[  267.630047][T10011] bcachefs (loop9): flushing journal and stopping allocators complete, journal seq 19
[  267.641078][T10011] bcachefs (loop9): clean shutdown complete, journal seq 20
[  267.644012][T10011] bcachefs (loop9): marking filesystem clean
[  267.694125][T10011] bcachefs (loop9): shutdown complete
[  269.244061][T10442] loop8: detected capacity change from 0 to 32768
[  269.247501][T10442] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.1458 (10442)
[  269.266357][T10442] BTRFS info (device loop8): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  269.281366][T10442] BTRFS info (device loop8): using xxhash64 (xxhash64-generic) checksum algorithm
[  269.284860][T10442] BTRFS info (device loop8): disk space caching is enabled
[  269.287561][T10442] BTRFS warning (device loop8): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  269.493471][T10442] BTRFS info (device loop8): rebuilding free space tree
[  269.523634][T10442] BTRFS info (device loop8): disabling free space tree
[  269.526497][T10442] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  269.536585][T10442] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  269.651927][ T9566] BTRFS info (device loop8): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  269.948524][T10458] loop9: detected capacity change from 0 to 32768
[  270.030417][T10458] XFS (loop9): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  270.085744][T10458] XFS (loop9): Ending clean mount
[  270.154862][T10011] XFS (loop9): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  270.233515][T10463] loop7: detected capacity change from 0 to 32768
[  270.302033][T10463] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode.
[  270.339529][T10463] (syz.7.1465,10463,0):ocfs2_find_entry:1094 ERROR: status = -117
[  270.346667][T10463] (syz.7.1465,10463,0):ocfs2_find_entry:1094 ERROR: status = -117
[  270.359565][T10463] (syz.7.1465,10463,0):ocfs2_symlink:2080 ERROR: status = -117
[  270.440045][ T9436] (syz-executor,9436,0):ocfs2_inode_is_valid_to_delete:948 ERROR: Skipping delete of system file 76
[  270.459400][ T9436] ocfs2: Unmounting device (7,7) on (node local)
[  270.553839][T10465] loop8: detected capacity change from 0 to 32768
[  270.671793][T10465] bcachefs (loop8): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names
[  270.671807][T10465]   allowing incompatible features above 0.0: (unknown version)
[  270.671813][T10465]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  270.760543][T10465] bcachefs (loop8): Using encoding defined by superblock: utf8-12.1.0
[  270.763854][T10465] bcachefs (loop8): initializing new filesystem
[  270.779739][T10465] bcachefs (loop8): going read-write
[  270.788666][T10465] bcachefs (loop8): marking superblocks
[  270.818822][T10465] bcachefs (loop8): initializing freespace
[  270.834686][T10465] bcachefs (loop8): done initializing freespace
[  270.841537][T10465] bcachefs (loop8): reading snapshots table
[  270.843447][T10465] bcachefs (loop8): reading snapshots done
[  270.873518][T10465] bcachefs (loop8): done starting filesystem
[  271.067248][ T9566] bcachefs (loop8): shutting down
[  271.079904][ T9566] bcachefs (loop8): going read-only
[  271.092494][ T9566] bcachefs (loop8): finished waiting for writes to stop
[  271.103081][ T9566] bcachefs (loop8): flushing journal and stopping allocators, journal seq 2
[  271.146757][ T9566] bcachefs (loop8): flushing journal and stopping allocators complete, journal seq 3
[  271.163617][ T9566] bcachefs (loop8): clean shutdown complete, journal seq 4
[  271.167694][ T9566] bcachefs (loop8): marking filesystem clean
[  271.242353][ T9566] bcachefs (loop8): shutdown complete
[  271.305022][T10510] loop7: detected capacity change from 0 to 256
[  271.319944][T10510] exfat: Deprecated parameter 'utf8'
[  271.347436][T10510] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d)
[  271.418456][T10498] loop9: detected capacity change from 0 to 32768
[  271.446110][T10498] XFS (loop9): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  271.497190][T10498] XFS (loop9): Ending clean mount
[  271.514447][T10498] XFS (loop9): Quotacheck needed: Please wait.
[  271.592613][T10498] XFS (loop9): Quotacheck: Done.
[  271.603802][   T33] audit: type=1800 audit(2000000069.190:191): pid=10498 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1466" name="bus" dev="loop9" ino=4426 res=0 errno=0
[  271.672240][T10011] XFS (loop9): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  271.992392][T10517] loop7: detected capacity change from 0 to 32768
[  272.245033][ T5846] Bluetooth: hci6: unexpected Set CIG Parameters response data
[  272.730311][   T33] audit: type=1326 audit(2000000070.320:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10536 comm="syz.8.1481" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f200998ebe9 code=0x7ffc0000
[  272.754149][   T33] audit: type=1326 audit(2000000070.320:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10536 comm="syz.8.1481" exe="/syz-executor" sig=0 arch=c000003e syscall=100 compat=0 ip=0x7f200998ebe9 code=0x7ffc0000
[  272.759153][ T5895] usb 10-1: new full-speed USB device number 3 using dummy_hcd
[  272.775820][   T33] audit: type=1326 audit(2000000070.320:194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10536 comm="syz.8.1481" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f200998ebe9 code=0x7ffc0000
[  272.875716][T10541] loop8: detected capacity change from 0 to 16
[  272.882196][T10541] erofs (device loop8): mounted with root inode @ nid 36.
[  272.913498][ T5895] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83
[  272.918220][ T5895] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 203, changing to 4
[  272.935232][ T5895] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 46388, setting to 1023
[  272.954802][ T5895] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  272.966844][ T5895] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  272.989168][ T5895] usb 10-1: config 0 descriptor??
[  273.208187][ T5895] ath6kl: Failed to submit usb control message: -71
[  273.224141][ T5895] ath6kl: unable to send the bmi data to the device: -71
[  273.235479][ T5895] ath6kl: Unable to send get target info: -71
[  273.244930][ T5895] ath6kl: Failed to init ath6kl core: -71
[  273.266244][ T5895] ath6kl_usb 10-1:0.0: probe with driver ath6kl_usb failed with error -71
[  273.290750][ T5895] usb 10-1: USB disconnect, device number 3
[  273.389136][   T24] usb 9-1: new high-speed USB device number 7 using dummy_hcd
[  273.520825][T10550] loop7: detected capacity change from 0 to 32768
[  273.540670][   T24] usb 9-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  273.543520][   T24] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  273.549201][T10550] XFS (loop7): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  273.560452][   T24] usb 9-1: config 0 descriptor??
[  273.584701][T10550] XFS (loop7): Ending clean mount
[  273.591055][T10550] XFS (loop7): Quotacheck needed: Please wait.
[  273.618708][T10550] XFS (loop7): Quotacheck: Done.
[  273.644957][ T9436] XFS (loop7): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  273.768539][   T24] udl 9-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  273.999922][   T24] [drm] Initialized udl 0.0.1 for 9-1:0.0 on minor 3
[  274.002017][   T24] [drm] Initialized udl on minor 3
[  274.248639][T10565] loop7: detected capacity change from 0 to 32768
[  274.264619][T10565] XFS (loop7): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  274.283919][T10565] XFS (loop7): Ending clean mount
[  274.317329][ T9436] XFS (loop7): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  274.378712][   T24] udl 9-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9
[  274.395172][   T24] udl 9-1:0.0: [drm] Cannot find any crtc or sizes
[  274.431970][   T24] usb 9-1: USB disconnect, device number 7
[  274.457069][   T47] udl 9-1:0.0: [drm] Cannot find any crtc or sizes
[  274.716781][T10583] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1495'.
[  274.775253][T10585] loop9: detected capacity change from 0 to 512
[  274.883271][T10579] loop7: detected capacity change from 0 to 32768
[  274.904042][T10579] XFS (loop7): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  274.964376][T10579] XFS (loop7): Ending clean mount
[  275.049059][   T33] audit: type=1800 audit(2000000072.620:195): pid=10579 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1493" name="file1" dev="loop7" ino=6150 res=0 errno=0
[  275.075554][T10598] loop9: detected capacity change from 0 to 4096
[  275.082962][ T9436] XFS (loop7): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  275.104736][T10598] ntfs3(loop9): MFT: r=19, expect seq=1 instead of a48d!
[  275.107008][T10598] ntfs3(loop9): Mark volume as dirty due to NTFS errors
[  275.387166][T10604] loop8: detected capacity change from 0 to 4096
[  275.436333][T10604] NILFS error (device loop8): nilfs_bmap_lookup_at_level: broken bmap (inode number=6)
[  275.439540][T10608] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  275.451958][T10604] Remounting filesystem read-only
[  275.816150][T10618] loop7: detected capacity change from 0 to 512
[  275.822266][T10618] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  275.884071][   T10] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[  276.296259][ T5846] Bluetooth: hci6: Controller not accepting commands anymore: ncmd = 0
[  276.301526][ T5846] Bluetooth: hci6: Injecting HCI hardware error event
[  276.307981][ T5849] Bluetooth: hci6: hardware error 0x00
[  276.746323][T10633] loop8: detected capacity change from 0 to 4096
[  276.755891][T10633] ntfs3(loop8): ino=3, Correct links count -> 2.
[  276.770818][T10633] ntfs3(loop8): ino=1a, mi_enum_attr
[  276.772518][T10633] ntfs3(loop8): Mark volume as dirty due to NTFS errors
[  277.177168][T10637] loop8: detected capacity change from 0 to 40427
[  277.181025][T10637] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12
[  277.183425][T10637] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock
[  277.188288][T10637] F2FS-fs (loop8): invalid crc value
[  277.219041][T10637] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  277.227121][T10637] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0
[  277.229865][T10637] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5
[  277.414109][T10639] loop9: detected capacity change from 0 to 32768
[  277.428912][T10639] (syz.9.1515,10639,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  277.444309][T10639] (syz.9.1515,10639,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  277.468301][T10639] JBD2: Ignoring recovery information on journal
[  277.504708][T10639] ocfs2: Mounting device (7,9) on (node local, slot 0) with ordered data mode.
[  277.524777][T10639] ocfs2: Unmounting device (7,9) on (node local)
[  277.824390][   T33] audit: type=1800 audit(2000000075.210:196): pid=10649 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1514" name="file1" dev="loop8" ino=10 res=0 errno=0
[  278.449952][ T5849] Bluetooth: hci6: Opcode 0x0c03 failed: -110
[  278.890262][T10673] loop9: detected capacity change from 0 to 32768
[  278.895356][T10673] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.1527 (10673)
[  278.921099][T10673] BTRFS info (device loop9): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  278.931998][T10673] BTRFS info (device loop9): using crc32c (crc32c-lib) checksum algorithm
[  278.942168][T10673] BTRFS info (device loop9): disk space caching is enabled
[  278.946869][T10673] BTRFS warning (device loop9): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  278.981535][   T33] audit: type=1326 audit(2000000076.560:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10679 comm="syz.7.1530" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f182e98ebe9 code=0x7ffc0000
[  279.016531][   T33] audit: type=1326 audit(2000000076.570:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10679 comm="syz.7.1530" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f182e98ebe9 code=0x7ffc0000
[  279.032234][T10673] BTRFS info (device loop9): rebuilding free space tree
[  279.049063][   T33] audit: type=1326 audit(2000000076.570:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10679 comm="syz.7.1530" exe="/syz-executor" sig=0 arch=c000003e syscall=161 compat=0 ip=0x7f182e98ebe9 code=0x7ffc0000
[  279.081164][T10673] BTRFS info (device loop9): disabling free space tree
[  279.087542][T10673] BTRFS info (device loop9): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  279.091144][   T33] audit: type=1326 audit(2000000076.570:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10679 comm="syz.7.1530" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f182e98ebe9 code=0x7ffc0000
[  279.113772][T10673] BTRFS info (device loop9): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  279.119500][   T33] audit: type=1326 audit(2000000076.570:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10679 comm="syz.7.1530" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f182e98ebe9 code=0x7ffc0000
[  279.131300][T10697] evm: overlay not supported
[  279.186018][   T33] audit: type=1804 audit(2000000076.770:202): pid=10673 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.9.1527" name="/newroot/71/file1/bus" dev="loop9" ino=263 res=1 errno=0
[  279.335054][T10011] BTRFS info (device loop9): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  279.559131][T10702] netlink: 72 bytes leftover after parsing attributes in process `syz.9.1533'.
[  279.707417][T10704] loop9: detected capacity change from 0 to 8192
[  280.769811][ T9566] syz-executor: attempt to access beyond end of device
[  280.769811][ T9566] loop8: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  280.810286][ T9566] CPU: 0 UID: 0 PID: 9566 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  280.810324][ T9566] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  280.810332][ T9566] Call Trace:
[  280.810338][ T9566]  <TASK>
[  280.810345][ T9566]  dump_stack_lvl+0x189/0x250
[  280.810370][ T9566]  ? __pfx_dump_stack_lvl+0x10/0x10
[  280.810386][ T9566]  ? __pfx_queue_work_on+0x10/0x10
[  280.810400][ T9566]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  280.810418][ T9566]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  280.810444][ T9566]  f2fs_handle_critical_error+0x37c/0x540
[  280.810469][ T9566]  f2fs_write_end_io+0x886/0xb60
[  280.810497][ T9566]  __submit_merged_bio+0x27a/0x6a0
[  280.810538][ T9566]  ? up_write+0x1c4/0x420
[  280.810559][ T9566]  __submit_merged_write_cond+0x44c/0x530
[  280.810583][ T9566]  f2fs_sync_node_pages+0x1479/0x15e0
[  280.810617][ T9566]  ? __pfx_f2fs_sync_node_pages+0x10/0x10
[  280.810659][ T9566]  ? f2fs_write_checkpoint+0xe43/0x1df0
[  280.810677][ T9566]  ? up_write+0x1c4/0x420
[  280.810689][ T9566]  ? do_raw_spin_unlock+0x4d/0x240
[  280.810706][ T9566]  f2fs_write_checkpoint+0xe6f/0x1df0
[  280.810734][ T9566]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  280.810783][ T9566]  ? kill_f2fs_super+0x298/0x6c0
[  280.810800][ T9566]  kill_f2fs_super+0x2c3/0x6c0
[  280.810818][ T9566]  ? __pfx_kill_f2fs_super+0x10/0x10
[  280.810829][ T9566]  ? radix_tree_delete_item+0x2b6/0x400
[  280.810856][ T9566]  ? shrinker_free+0x2ce/0x3e0
[  280.810874][ T9566]  deactivate_locked_super+0xbc/0x130
[  280.810894][ T9566]  cleanup_mnt+0x425/0x4c0
[  280.810910][ T9566]  ? lockdep_hardirqs_on+0x9c/0x150
[  280.810930][ T9566]  task_work_run+0x1d4/0x260
[  280.810950][ T9566]  ? __pfx_task_work_run+0x10/0x10
[  280.810964][ T9566]  ? __x64_sys_umount+0x122/0x160
[  280.810983][ T9566]  ? exit_to_user_mode_loop+0x40/0x110
[  280.811004][ T9566]  exit_to_user_mode_loop+0xec/0x110
[  280.811022][ T9566]  do_syscall_64+0x2bd/0x3b0
[  280.811039][ T9566]  ? lockdep_hardirqs_on+0x9c/0x150
[  280.811056][ T9566]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  280.811069][ T9566]  ? exc_page_fault+0x9f/0xf0
[  280.811087][ T9566]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  280.811099][ T9566] RIP: 0033:0x7f200998ff17
[  280.811113][ T9566] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  280.811124][ T9566] RSP: 002b:00007ffe15c5b6f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  280.811138][ T9566] RAX: 0000000000000000 RBX: 00007f2009a11c05 RCX: 00007f200998ff17
[  280.811146][ T9566] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe15c5b7b0
[  280.811154][ T9566] RBP: 00007ffe15c5b7b0 R08: 0000000000000000 R09: 0000000000000000
[  280.811162][ T9566] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe15c5c840
[  280.811171][ T9566] R13: 00007f2009a11c05 R14: 0000000000043e55 R15: 00007ffe15c5c880
[  280.811195][ T9566]  </TASK>
[  280.811289][ T9566] F2FS-fs (loop8): Stopped filesystem due to reason: 3
[  281.559048][T10719] dlm: no locking on control device
[  281.581970][T10721] loop8: detected capacity change from 0 to 64
[  281.804657][T10728] kAFS: unparsable volume name
[  282.643145][T10739] dlm: no locking on control device
[  283.681682][T10745] loop8: detected capacity change from 0 to 128
[  283.844148][T10747] loop8: detected capacity change from 0 to 2048
[  283.846851][T10747] nilfs2: Bad value for 'cp'
[  284.010695][T10751] Bluetooth: MGMT ver 1.23
[  284.501109][ T5895] usb 10-1: new high-speed USB device number 5 using dummy_hcd
[  284.653765][ T5895] usb 10-1: Using ep0 maxpacket: 32
[  284.658407][ T5895] usb 10-1: config 0 has too many interfaces: 66, using maximum allowed: 32
[  284.666622][ T5895] usb 10-1: config 0 contains an unexpected descriptor of type 0x2, skipping
[  284.675728][ T5895] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  284.680068][ T5895] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 66
[  284.691466][ T5895] usb 10-1: New USB device found, idVendor=d084, idProduct=c487, bcdDevice=f4.ce
[  284.705567][ T5895] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  284.708148][ T5895] usb 10-1: Product: syz
[  284.711482][ T5895] usb 10-1: Manufacturer: syz
[  284.712863][ T5895] usb 10-1: SerialNumber: syz
[  284.723287][ T5895] usb 10-1: config 0 descriptor??
[  284.939255][T10780] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1568'.
[  284.943750][    T9] usb 10-1: USB disconnect, device number 5
[  285.417120][T10782] loop7: detected capacity change from 0 to 40427
[  285.429139][T10782] F2FS-fs (loop7): Fix alignment : done, start(4096) end(16896) block(12288)
[  285.460010][T10782] F2FS-fs (loop7): invalid crc value
[  285.578003][T10782] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  285.583002][T10782] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  285.623251][ T9436] syz-executor: attempt to access beyond end of device
[  285.623251][ T9436] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  285.628822][ T9436] CPU: 0 UID: 0 PID: 9436 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  285.628843][ T9436] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  285.628851][ T9436] Call Trace:
[  285.628856][ T9436]  <TASK>
[  285.628863][ T9436]  dump_stack_lvl+0x189/0x250
[  285.628898][ T9436]  ? __pfx_dump_stack_lvl+0x10/0x10
[  285.628912][ T9436]  ? __pfx_queue_work_on+0x10/0x10
[  285.628925][ T9436]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  285.628960][ T9436]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  285.628984][ T9436]  f2fs_handle_critical_error+0x37c/0x540
[  285.629009][ T9436]  f2fs_write_end_io+0x886/0xb60
[  285.629036][ T9436]  __submit_merged_bio+0x27a/0x6a0
[  285.629061][ T9436]  __submit_merged_write_cond+0x255/0x530
[  285.629084][ T9436]  f2fs_write_data_pages+0x261d/0x3000
[  285.629131][ T9436]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  285.629218][ T9436]  ? folios_put_refs+0x559/0x640
[  285.629243][ T9436]  ? __lock_acquire+0xab9/0xd20
[  285.629271][ T9436]  ? do_raw_spin_lock+0x121/0x290
[  285.629298][ T9436]  ? do_raw_spin_unlock+0x4d/0x240
[  285.629314][ T9436]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  285.629335][ T9436]  do_writepages+0x32e/0x550
[  285.629365][ T9436]  ? do_raw_spin_unlock+0x4d/0x240
[  285.629385][ T9436]  filemap_fdatawrite+0x199/0x240
[  285.629405][ T9436]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  285.629468][ T9436]  ? do_raw_spin_unlock+0x4d/0x240
[  285.629489][ T9436]  f2fs_sync_dirty_inodes+0x31f/0x830
[  285.629517][ T9436]  f2fs_write_checkpoint+0x95a/0x1df0
[  285.629554][ T9436]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  285.629612][ T9436]  ? kill_f2fs_super+0x298/0x6c0
[  285.629630][ T9436]  kill_f2fs_super+0x2c3/0x6c0
[  285.629650][ T9436]  ? __pfx_kill_f2fs_super+0x10/0x10
[  285.629662][ T9436]  ? radix_tree_delete_item+0x2b6/0x400
[  285.629687][ T9436]  ? shrinker_free+0x2ce/0x3e0
[  285.629707][ T9436]  deactivate_locked_super+0xbc/0x130
[  285.629727][ T9436]  cleanup_mnt+0x425/0x4c0
[  285.629744][ T9436]  ? lockdep_hardirqs_on+0x9c/0x150
[  285.629766][ T9436]  task_work_run+0x1d4/0x260
[  285.629788][ T9436]  ? __pfx_task_work_run+0x10/0x10
[  285.629803][ T9436]  ? __x64_sys_umount+0x122/0x160
[  285.629839][ T9436]  ? exit_to_user_mode_loop+0x40/0x110
[  285.629863][ T9436]  exit_to_user_mode_loop+0xec/0x110
[  285.629886][ T9436]  do_syscall_64+0x2bd/0x3b0
[  285.629904][ T9436]  ? lockdep_hardirqs_on+0x9c/0x150
[  285.629919][ T9436]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  285.629930][ T9436]  ? exc_page_fault+0x9f/0xf0
[  285.629946][ T9436]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  285.629957][ T9436] RIP: 0033:0x7f182e98ff17
[  285.629970][ T9436] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  285.629985][ T9436] RSP: 002b:00007ffcefd84708 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  285.630001][ T9436] RAX: 0000000000000000 RBX: 00007f182ea11c05 RCX: 00007f182e98ff17
[  285.630010][ T9436] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcefd847c0
[  285.630018][ T9436] RBP: 00007ffcefd847c0 R08: 0000000000000000 R09: 0000000000000000
[  285.630025][ T9436] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffcefd85850
[  285.630033][ T9436] R13: 00007f182ea11c05 R14: 00000000000458c9 R15: 00007ffcefd85890
[  285.630055][ T9436]  </TASK>
[  285.779136][ T9436] F2FS-fs (loop7): Stopped filesystem due to reason: 3
[  285.971671][T10793] loop9: detected capacity change from 0 to 2048
[  286.047261][T10793] EXT4-fs (loop9): #clusters per group too big: 32768
[  286.530393][T10801] ptrace attach of "/syz-executor exec"[9566] was attempted by "/syz-executor exec"[10801]
[  286.849598][   T47] usb 10-1: new full-speed USB device number 6 using dummy_hcd
[  287.007463][   T47] usb 10-1: unable to get BOS descriptor or descriptor too short
[  287.012864][   T47] usb 10-1: not running at top speed; connect to a high speed hub
[  287.022539][   T47] usb 10-1: config 4 has an invalid interface number: 32 but max is 0
[  287.032158][   T47] usb 10-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  287.047068][   T47] usb 10-1: config 4 has no interface number 0
[  287.071997][   T47] usb 10-1: New USB device found, idVendor=17dc, idProduct=0202, bcdDevice=f1.50
[  287.087752][   T47] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  287.108247][   T47] usb 10-1: Product: syz
[  287.114905][   T47] usb 10-1: Manufacturer: syz
[  287.118479][   T47] usb 10-1: SerialNumber: syz
[  287.134711][T10814] loop7: detected capacity change from 0 to 256
[  287.351373][   T47] uvcvideo 10-1:4.32: probe with driver uvcvideo failed with error -22
[  287.368343][   T47] usb 10-1: USB disconnect, device number 6
[  287.441873][T10821] loop7: detected capacity change from 0 to 256
[  287.974174][T10824] loop7: detected capacity change from 0 to 32768
[  288.011053][T10824] JBD2: Ignoring recovery information on journal
[  288.134924][T10824] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode.
[  288.258349][ T9436] ocfs2: Unmounting device (7,7) on (node local)
[  288.389850][T10835] loop8: detected capacity change from 0 to 256
[  288.551317][T10839] ieee802154 phy0 wpan0: encryption failed: -90
[  289.406975][T10842] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  289.407362][T10844] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  289.410133][T10842] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[  289.412737][T10844] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  289.485020][T10844] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  289.489804][T10844] Bluetooth: hci3: Opcode 0x0406 failed: -4
[  289.503002][T10842] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  289.507766][T10844] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  289.510041][T10842] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  289.512564][T10844] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  289.531325][T10842] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  289.535771][T10844] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  289.542119][T10842] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  289.553735][T10844] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  289.556214][T10842] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  289.556272][T10844] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  289.564657][T10842] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[  289.573185][T10844] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  289.587656][T10842] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  289.587714][T10844] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  289.594825][T10842] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  289.595504][T10844] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  289.617726][T10844] Bluetooth: hci5: Opcode 0x0406 failed: -4
[  289.658818][T10842] Bluetooth: hci5: Opcode 0x0c1a failed: -4
[  289.661247][T10842] Bluetooth: hci5: Error when powering off device on rfkill (-4)
[  290.397053][T10863] loop9: detected capacity change from 0 to 32768
[  290.442353][T10863] XFS (loop9): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  290.545572][T10863] XFS (loop9): Ending clean mount
[  290.591525][T10863] XFS (loop9): User initiated shutdown received.
[  290.593599][T10863] XFS (loop9): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:476).  Shutting down filesystem.
[  290.609426][T10863] XFS (loop9): Please unmount the filesystem and rectify the problem(s)
[  290.660080][T10011] XFS (loop9): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  290.827586][T10892] loop8: detected capacity change from 0 to 32768
[  290.842337][T10892] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.1609 (10892)
[  290.892123][T10892] BTRFS info (device loop8): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  290.895177][T10892] BTRFS info (device loop8): using sha256 (sha256-lib) checksum algorithm
[  290.897714][T10892] BTRFS info (device loop8): disk space caching is enabled
[  290.916143][T10892] BTRFS warning (device loop8): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  291.091695][T10892] BTRFS info (device loop8): rebuilding free space tree
[  291.160457][T10892] BTRFS info (device loop8): disabling free space tree
[  291.162887][T10892] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  291.165948][T10892] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  291.213751][   T33] audit: type=1800 audit(2000000088.800:203): pid=10892 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1609" name="bus" dev="loop8" ino=263 res=0 errno=0
[  291.501412][ T9566] BTRFS info (device loop8): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  291.537580][T10903] loop7: detected capacity change from 0 to 32768
[  291.541222][T10903] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.1614 (10903)
[  291.563092][T10903] BTRFS info (device loop7): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  291.566847][T10903] BTRFS info (device loop7): using crc32c (crc32c-lib) checksum algorithm
[  291.581482][T10903] BTRFS info (device loop7): using free-space-tree
[  291.877490][ T9436] BTRFS info (device loop7): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  292.213503][T10955] loop9: detected capacity change from 0 to 512
[  292.241119][T10955] EXT4-fs (loop9): Test dummy encryption mode enabled
[  292.243178][T10955] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode
[  292.272793][T10955] EXT4-fs error (device loop9): ext4_orphan_get:1418: comm syz.9.1622: bad orphan inode 131083
[  292.299797][T10955] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  292.488069][T10011] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  292.586155][T10969] loop9: detected capacity change from 0 to 1024
[  293.149475][T10975] loop8: detected capacity change from 0 to 40427
[  293.152580][T10975] F2FS-fs (loop8): Invalid Fs Meta Ino: node(0) meta(2) root(0)
[  293.154870][T10975] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock
[  293.173868][T10975] F2FS-fs (loop8): invalid crc value
[  293.261429][T10975] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  293.266749][T10975] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0
[  293.270554][T10975] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e4
[  293.284315][T10987] f2fs_ckpt-7:8: attempt to access beyond end of device
[  293.284315][T10987] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  293.296160][T10987] CPU: 1 UID: 0 PID: 10987 Comm: f2fs_ckpt-7:8 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  293.296181][T10987] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  293.296189][T10987] Call Trace:
[  293.296196][T10987]  <TASK>
[  293.296203][T10987]  dump_stack_lvl+0x189/0x250
[  293.296229][T10987]  ? __pfx_dump_stack_lvl+0x10/0x10
[  293.296254][T10987]  ? __pfx_queue_work_on+0x10/0x10
[  293.296270][T10987]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  293.296289][T10987]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  293.296317][T10987]  f2fs_handle_critical_error+0x37c/0x540
[  293.296343][T10987]  f2fs_write_end_io+0x886/0xb60
[  293.296371][T10987]  __submit_merged_bio+0x27a/0x6a0
[  293.296396][T10987]  __submit_merged_write_cond+0x255/0x530
[  293.296419][T10987]  f2fs_write_data_pages+0x261d/0x3000
[  293.296466][T10987]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  293.296546][T10987]  ? __lock_acquire+0xab9/0xd20
[  293.296576][T10987]  ? do_raw_spin_lock+0x121/0x290
[  293.296604][T10987]  ? do_raw_spin_unlock+0x4d/0x240
[  293.296621][T10987]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  293.296641][T10987]  do_writepages+0x32e/0x550
[  293.296699][T10987]  ? do_raw_spin_unlock+0x4d/0x240
[  293.296721][T10987]  filemap_fdatawrite+0x199/0x240
[  293.296742][T10987]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  293.296805][T10987]  ? do_raw_spin_unlock+0x4d/0x240
[  293.296826][T10987]  f2fs_sync_dirty_inodes+0x31f/0x830
[  293.296855][T10987]  f2fs_write_checkpoint+0x95a/0x1df0
[  293.296892][T10987]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  293.296943][T10987]  ? down_write+0x162/0x1f0
[  293.296955][T10987]  ? __pfx_down_write+0x10/0x10
[  293.296975][T10987]  ? __pfx___schedule+0x10/0x10
[  293.296998][T10987]  __checkpoint_and_complete_reqs+0xd9/0x3b0
[  293.297017][T10987]  ? __pfx___checkpoint_and_complete_reqs+0x10/0x10
[  293.297047][T10987]  issue_checkpoint_thread+0xd9/0x260
[  293.297065][T10987]  ? __pfx_issue_checkpoint_thread+0x10/0x10
[  293.297081][T10987]  ? __pfx_autoremove_wake_function+0x10/0x10
[  293.297099][T10987]  ? __kthread_parkme+0x7b/0x200
[  293.297115][T10987]  ? __kthread_parkme+0x1a1/0x200
[  293.297136][T10987]  kthread+0x711/0x8a0
[  293.297157][T10987]  ? __pfx_issue_checkpoint_thread+0x10/0x10
[  293.297171][T10987]  ? __pfx_kthread+0x10/0x10
[  293.297189][T10987]  ? _raw_spin_unlock_irq+0x23/0x50
[  293.297205][T10987]  ? lockdep_hardirqs_on+0x9c/0x150
[  293.297223][T10987]  ? __pfx_kthread+0x10/0x10
[  293.297245][T10987]  ret_from_fork+0x3fc/0x770
[  293.297263][T10987]  ? __pfx_ret_from_fork+0x10/0x10
[  293.297284][T10987]  ? __switch_to_asm+0x39/0x70
[  293.297301][T10987]  ? __switch_to_asm+0x33/0x70
[  293.297317][T10987]  ? __pfx_kthread+0x10/0x10
[  293.297334][T10987]  ret_from_fork_asm+0x1a/0x30
[  293.297367][T10987]  </TASK>
[  293.297374][T10987] F2FS-fs (loop8): Stopped filesystem due to reason: 3
[  293.789142][ T5895] usb 10-1: new high-speed USB device number 7 using dummy_hcd
[  293.939840][ T5895] usb 10-1: Using ep0 maxpacket: 8
[  293.944010][ T5895] usb 10-1: config 0 interface 0 altsetting 42 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  293.949365][ T5895] usb 10-1: config 0 interface 0 has no altsetting 0
[  293.952041][ T5895] usb 10-1: New USB device found, idVendor=056a, idProduct=00d6, bcdDevice= 0.00
[  293.959569][ T5895] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  293.971468][ T5895] usb 10-1: config 0 descriptor??
[  294.584991][    T9] usb 10-1: USB disconnect, device number 7
[  294.967520][T11030] /dev/nullb0: Can't open blockdev
[  295.328648][T11032] loop8: detected capacity change from 0 to 32768
[  295.405511][T11032] JBD2: Ignoring recovery information on journal
[  295.504544][T11032] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode.
[  295.630561][ T9566] ocfs2: Unmounting device (7,8) on (node local)
[  296.099162][  T795] usb 10-1: new high-speed USB device number 8 using dummy_hcd
[  296.139203][ T5895] usb 9-1: new high-speed USB device number 8 using dummy_hcd
[  296.249091][  T795] usb 10-1: Using ep0 maxpacket: 8
[  296.260496][  T795] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  296.264761][  T795] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  296.268312][  T795] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  296.281166][  T795] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  296.284456][  T795] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0
[  296.288246][  T795] usb 10-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  296.300877][ T5895] usb 9-1: config 0 has an invalid interface number: 109 but max is 0
[  296.303627][ T5895] usb 9-1: config 0 has no interface number 0
[  296.305551][ T5895] usb 9-1: config 0 interface 109 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81
[  296.308510][  T795] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  296.315293][  T795] usb 10-1: config 0 descriptor??
[  296.316786][ T5895] usb 9-1: config 0 interface 109 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  296.334836][ T5895] usb 9-1: New USB device found, idVendor=100d, idProduct=cb01, bcdDevice=84.d1
[  296.337867][ T5895] usb 9-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[  296.350928][ T5846] Bluetooth: hci7: urb ffff88812e818200 submission failed (90)
[  296.360394][ T5895] usb 9-1: Manufacturer: syz
[  296.368393][ T5895] usb 9-1: config 0 descriptor??
[  296.397556][ T5895] cxacru 9-1:0.109: cxacru_bind: interface has incorrect endpoints
[  296.407556][ T5895] cxacru 9-1:0.109: usbatm_usb_probe: bind failed: -19!
[  296.426276][T11055] loop7: detected capacity change from 0 to 32768
[  296.430056][T11055] (syz.7.1664,11055,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  296.434623][T11055] (syz.7.1664,11055,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  296.458219][T11055] JBD2: Ignoring recovery information on journal
[  296.483210][T11055] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode.
[  296.528240][ T5895] usb 10-1: USB disconnect, device number 8
[  296.606127][   T47] usb 9-1: USB disconnect, device number 8
[  296.710317][ T9436] ocfs2: Unmounting device (7,7) on (node local)
[  297.200355][   T33] audit: type=1326 audit(2000000094.790:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11070 comm="syz.8.1670" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f200998ebe9 code=0x7ffc0000
[  297.236456][   T33] audit: type=1326 audit(2000000094.790:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11070 comm="syz.8.1670" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f200998ebe9 code=0x7ffc0000
[  297.264136][   T33] audit: type=1326 audit(2000000094.810:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11070 comm="syz.8.1670" exe="/syz-executor" sig=0 arch=c000003e syscall=287 compat=0 ip=0x7f200998ebe9 code=0x7ffc0000
[  297.288569][   T33] audit: type=1326 audit(2000000094.810:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11070 comm="syz.8.1670" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f200998ebe9 code=0x7ffc0000
[  297.314525][   T33] audit: type=1326 audit(2000000094.810:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11070 comm="syz.8.1670" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f200998ebe9 code=0x7ffc0000
[  297.418755][ T5895] usb 10-1: new full-speed USB device number 9 using dummy_hcd
[  297.517439][T11080] syz_tun: entered promiscuous mode
[  297.532968][T11080] syz_tun: left promiscuous mode
[  297.581402][ T5895] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  297.585182][ T5895] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  297.599315][ T5895] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  297.603024][ T5895] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  297.839528][ T5895] usb 10-1: usb_control_msg returned -32
[  297.841886][ T5895] usbtmc 10-1:16.0: can't read capabilities
[  297.899912][T11082] loop8: detected capacity change from 0 to 32768
[  297.923546][T11082] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.1676 (11082)
[  297.957732][T11082] BTRFS info (device loop8): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  297.965868][T11082] BTRFS info (device loop8): using sha256 (sha256-lib) checksum algorithm
[  297.976045][T11082] BTRFS info (device loop8): using free-space-tree
[  298.101820][T11082] BTRFS info (device loop8): rebuilding free space tree
[  298.378500][ T5857] BTRFS info (device loop8): qgroup scan completed (inconsistency flag cleared)
[  298.450997][T11112] could not allocate digest TFM handle sm3
[  298.489692][ T9566] BTRFS info (device loop8): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  299.142800][T11123] loop7: detected capacity change from 0 to 32768
[  299.216565][T11123] XFS (loop7): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  299.404707][T11123] XFS (loop7): Ending clean mount
[  299.597955][T11123] XFS (loop7): User initiated shutdown received.
[  299.613715][T11123] XFS (loop7): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:476).  Shutting down filesystem.
[  299.619181][T11123] XFS (loop7): Please unmount the filesystem and rectify the problem(s)
[  299.788530][ T9436] XFS (loop7): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  300.338456][   T47] usb 10-1: USB disconnect, device number 9
[  301.119181][   T47] usb 10-1: new high-speed USB device number 10 using dummy_hcd
[  301.173669][T11151] netlink: 64 bytes leftover after parsing attributes in process `syz.8.1693'.
[  301.258173][T11155] loop8: detected capacity change from 0 to 8
[  301.276583][T11155] SQUASHFS error: xz decompression failed, data probably corrupt
[  301.295161][T11155] SQUASHFS error: Failed to read block 0x108: -5
[  301.297749][T11155] SQUASHFS error: Unable to read metadata cache entry [106]
[  301.310116][T11155] SQUASHFS error: Unable to read inode 0x11f
[  301.314686][   T47] usb 10-1: Using ep0 maxpacket: 8
[  301.333096][   T47] usb 10-1: config 251 has an invalid interface number: 243 but max is 0
[  301.338176][   T47] usb 10-1: config 251 has no interface number 0
[  301.354021][   T47] usb 10-1: config 251 interface 243 altsetting 5 bulk endpoint 0x5 has invalid maxpacket 32
[  301.357947][   T47] usb 10-1: config 251 interface 243 altsetting 5 endpoint 0x1 has invalid maxpacket 1024, setting to 64
[  301.379160][   T47] usb 10-1: config 251 interface 243 has no altsetting 0
[  301.404545][   T47] usb 10-1: New USB device found, idVendor=0ab4, idProduct=0014, bcdDevice=28.9a
[  301.408017][   T47] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  301.424550][   T47] usb 10-1: Product: syz
[  301.426222][   T47] usb 10-1: Manufacturer: syz
[  301.435890][   T47] usb 10-1: SerialNumber: syz
[  301.463235][T11145] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[  301.706609][   T47] esd_usb 10-1:251.243: sending version message failed
[  301.715870][   T47] esd_usb 10-1:251.243: probe with driver esd_usb failed with error -8
[  301.783988][   T47] usb 10-1: USB disconnect, device number 10
[  302.313595][T11192] kernel read not supported for file /ٓ㎀Dg@]eh (pid: 11192 comm: syz.9.1712)
[  302.328210][   T33] audit: type=1800 audit(2000000099.910:209): pid=11192 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.1712" name=D99310E38E804467405DA6A29A65F1CE1868 dev="mqueue" ino=25384 res=0 errno=0
[  302.459841][T11194] loop8: detected capacity change from 0 to 256
[  302.473575][T11194] exfat: Deprecated parameter 'utf8'
[  302.475742][T11194] exfat: Deprecated parameter 'namecase'
[  302.489339][T11194] exfat: Deprecated parameter 'utf8'
[  302.497946][T11194] exfat: Deprecated parameter 'utf8'
[  302.517846][T11194] exFAT-fs (loop8): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e8072e, utbl_chksum : 0xe619d30d)
[  302.852008][T11206] loop7: detected capacity change from 0 to 4096
[  302.862806][T11206] ntfs3(loop7): Different NTFS sector size (4096) and media sector size (512).
[  302.875740][T11206] ntfs3(loop7): Mark volume as dirty due to NTFS errors
[  302.879879][T11206] ntfs3(loop7): ino=19, mi_enum_attr
[  302.914577][T11210] loop8: detected capacity change from 0 to 256
[  302.918236][T11210] exfat: Deprecated parameter 'utf8'
[  302.932827][T11210] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[  304.011646][T11228] loop8: detected capacity change from 0 to 40427
[  304.036368][T11228] F2FS-fs (loop8): invalid crc value
[  304.200087][T11228] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  304.204223][T11228] F2FS-fs (loop8): Start checkpoint disabled!
[  304.255541][T11228] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6
[  304.379906][ T3954] kworker/u10:5: attempt to access beyond end of device
[  304.379906][ T3954] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  304.401049][ T3954] CPU: 1 UID: 0 PID: 3954 Comm: kworker/u10:5 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  304.401089][ T3954] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  304.401099][ T3954] Workqueue: writeback wb_workfn (flush-7:8)
[  304.401122][ T3954] Call Trace:
[  304.401128][ T3954]  <TASK>
[  304.401135][ T3954]  dump_stack_lvl+0x189/0x250
[  304.401156][ T3954]  ? __pfx_dump_stack_lvl+0x10/0x10
[  304.401191][ T3954]  ? __pfx_queue_work_on+0x10/0x10
[  304.401205][ T3954]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  304.401222][ T3954]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  304.401247][ T3954]  f2fs_handle_critical_error+0x37c/0x540
[  304.401272][ T3954]  f2fs_write_end_io+0x886/0xb60
[  304.401301][ T3954]  __submit_merged_bio+0x27a/0x6a0
[  304.401324][ T3954]  __submit_merged_write_cond+0x255/0x530
[  304.401348][ T3954]  f2fs_write_data_pages+0x261d/0x3000
[  304.401394][ T3954]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  304.401433][ T3954]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  304.401475][ T3954]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  304.401494][ T3954]  ? look_up_lock_class+0x74/0x170
[  304.401520][ T3954]  ? trace_f2fs_writepages+0x7f/0x200
[  304.401539][ T3954]  ? f2fs_write_node_pages+0x478/0x6e0
[  304.401561][ T3954]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  304.401590][ T3954]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  304.401610][ T3954]  do_writepages+0x32e/0x550
[  304.401633][ T3954]  ? reacquire_held_locks+0x127/0x1d0
[  304.401646][ T3954]  ? writeback_sb_inodes+0x384/0x1010
[  304.401670][ T3954]  __writeback_single_inode+0x145/0xff0
[  304.401688][ T3954]  ? do_raw_spin_unlock+0x4d/0x240
[  304.401707][ T3954]  writeback_sb_inodes+0x6c7/0x1010
[  304.401744][ T3954]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  304.401794][ T3954]  ? rcu_is_watching+0x15/0xb0
[  304.401816][ T3954]  wb_writeback+0x43b/0xaf0
[  304.401840][ T3954]  ? queue_io+0x3b1/0x590
[  304.401859][ T3954]  ? __pfx_wb_writeback+0x10/0x10
[  304.401900][ T3954]  ? _raw_spin_unlock_irq+0x23/0x50
[  304.401948][ T3954]  wb_workfn+0x409/0xef0
[  304.401974][ T3954]  ? __pfx_wb_workfn+0x10/0x10
[  304.401992][ T3954]  ? __lock_acquire+0xab9/0xd20
[  304.402020][ T3954]  ? process_scheduled_works+0x9ef/0x17b0
[  304.402039][ T3954]  ? _raw_spin_unlock_irq+0x23/0x50
[  304.402054][ T3954]  ? process_scheduled_works+0x9ef/0x17b0
[  304.402067][ T3954]  ? process_scheduled_works+0x9ef/0x17b0
[  304.402081][ T3954]  process_scheduled_works+0xae1/0x17b0
[  304.402118][ T3954]  ? __pfx_process_scheduled_works+0x10/0x10
[  304.402147][ T3954]  worker_thread+0x8a0/0xda0
[  304.402164][ T3954]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  304.402186][ T3954]  ? __kthread_parkme+0x7b/0x200
[  304.402208][ T3954]  kthread+0x711/0x8a0
[  304.402227][ T3954]  ? __pfx_worker_thread+0x10/0x10
[  304.402240][ T3954]  ? __pfx_kthread+0x10/0x10
[  304.402258][ T3954]  ? _raw_spin_unlock_irq+0x23/0x50
[  304.402273][ T3954]  ? lockdep_hardirqs_on+0x9c/0x150
[  304.402289][ T3954]  ? __pfx_kthread+0x10/0x10
[  304.402305][ T3954]  ret_from_fork+0x3fc/0x770
[  304.402322][ T3954]  ? __pfx_ret_from_fork+0x10/0x10
[  304.402341][ T3954]  ? __switch_to_asm+0x39/0x70
[  304.402357][ T3954]  ? __switch_to_asm+0x33/0x70
[  304.402372][ T3954]  ? __pfx_kthread+0x10/0x10
[  304.402389][ T3954]  ret_from_fork_asm+0x1a/0x30
[  304.402419][ T3954]  </TASK>
[  304.404160][ T3954] F2FS-fs (loop8): Stopped filesystem due to reason: 3
[  305.294665][T11261] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1744'.
[  307.129619][   T33] audit: type=1326 audit(2000000104.710:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11285 comm="syz.7.1753" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f182e98ebe9 code=0x0
[  307.263513][T11289] loop9: detected capacity change from 0 to 512
[  307.296459][T11289] EXT4-fs warning (device loop9): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  307.308876][T11289] EXT4-fs warning (device loop9): dx_probe:849: Enable large directory feature to access it
[  307.313626][T11289] EXT4-fs warning (device loop9): dx_probe:934: inode #2: comm syz.9.1754: Corrupt directory, running e2fsck is recommended
[  307.321483][T11289] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -117
[  307.324999][T11289] EXT4-fs error (device loop9): ext4_iget_extra_inode:5104: inode #15: comm syz.9.1754: corrupted in-inode xattr: invalid ea_ino
[  307.340962][T11289] EXT4-fs (loop9): Remounting filesystem read-only
[  307.346814][T11289] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  307.471061][T10011] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  308.109189][T11295] loop9: detected capacity change from 0 to 764
[  308.195346][T11299] loop7: detected capacity change from 0 to 1024
[  308.827746][T11321] ./file0: Can't lookup blockdev
[  308.880225][ T5910] IPVS: starting estimator thread 0...
[  308.982440][T11332] tipc: Started in network mode
[  308.984369][T11332] tipc: Node identity ac14140f, cluster identity 4711
[  309.009240][T11326] IPVS: using max 63 ests per chain, 151200 per kthread
[  309.014752][T11332] tipc: New replicast peer: 255.255.255.255
[  309.017117][T11332] tipc: Enabled bearer <udp:syz2>, priority 10
[  309.375321][T11328] loop8: detected capacity change from 0 to 32768
[  309.433071][T11328] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode.
[  309.578308][ T9566] (syz-executor,9566,1):ocfs2_inode_is_valid_to_delete:948 ERROR: Skipping delete of system file 76
[  309.587811][ T9566] ocfs2: Unmounting device (7,8) on (node local)
[  310.133120][ T5910] tipc: Node number set to 2886997007
[  311.086234][T11355] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(6)
[  311.088946][T11355] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  311.093329][T11359] vivid-007: disconnect
[  311.105091][T11355] vhci_hcd vhci_hcd.0: Device attached
[  311.108585][T11358] vivid-007: reconnect
[  311.279416][ T5910] vhci_hcd: vhci_device speed not set
[  311.291144][T11370] loop9: detected capacity change from 0 to 2048
[  311.303359][T11370] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  311.339664][ T5910] usb 49-1: new full-speed USB device number 2 using vhci_hcd
[  311.623312][T11376] netlink: 104 bytes leftover after parsing attributes in process `syz.9.1790'.
[  312.094667][T11385] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  312.098634][T11385] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  313.222997][T11360] vhci_hcd: connection reset by peer
[  313.256702][ T5874] vhci_hcd: stop threads
[  313.270402][ T5874] vhci_hcd: release socket
[  313.297641][ T5874] vhci_hcd: disconnect device
[  313.542916][T11397] loop8: detected capacity change from 0 to 512
[  313.561063][T11397] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended
[  313.616183][T11397] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  313.640680][T11397] EXT4-fs warning (device loop8): ext4_update_dynamic_rev:1128: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  314.624773][ T9566] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  315.225320][T11404] loop9: detected capacity change from 0 to 262144
[  315.242363][T11404] F2FS-fs (loop9): invalid crc value
[  315.343615][T11404] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  315.353313][T11404] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5
[  315.578999][   T33] audit: type=1326 audit(2000000113.160:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11445 comm="syz.8.1817" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f200998ebe9 code=0x7ffc0000
[  315.616007][   T33] audit: type=1326 audit(2000000113.170:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11445 comm="syz.8.1817" exe="/syz-executor" sig=0 arch=c000003e syscall=311 compat=0 ip=0x7f200998ebe9 code=0x7ffc0000
[  315.642618][   T33] audit: type=1326 audit(2000000113.170:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11445 comm="syz.8.1817" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f200998ebe9 code=0x7ffc0000
[  315.667061][   T33] audit: type=1326 audit(2000000113.170:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11445 comm="syz.8.1817" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f200998ebe9 code=0x7ffc0000
[  316.440951][ T5910] vhci_hcd: vhci_device speed not set
[  316.857191][ T1366] ieee802154 phy0 wpan0: encryption failed: -22
[  316.859382][ T1366] ieee802154 phy1 wpan1: encryption failed: -22
[  317.858516][T11476] loop7: detected capacity change from 0 to 32768
[  317.999382][T11476] bcachefs (loop7): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,metadata_target=invalid label 246,noinodes_use_key_cache,journal_flush_delay=3,journal_reclaim_delay=1000,nocow
[  317.999399][T11476]   allowing incompatible features above 0.0: (unknown version)
[  317.999405][T11476]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  318.060730][T11476] bcachefs (loop7): Using encoding defined by superblock: utf8-12.1.0
[  318.063267][T11476] bcachefs (loop7): initializing new filesystem
[  318.091762][T11476] bcachefs (loop7): going read-write
[  318.120314][T11476] bcachefs (loop7): marking superblocks
[  318.128080][T11507] loop9: detected capacity change from 0 to 256
[  318.150039][T11507] exfat: Deprecated parameter 'namecase'
[  318.163785][T11476] bcachefs (loop7): initializing freespace
[  318.173051][T11476] bcachefs (loop7): done initializing freespace
[  318.179877][T11476] bcachefs (loop7): reading snapshots table
[  318.182333][T11476] bcachefs (loop7): reading snapshots done
[  318.222031][T11507] exfat: Deprecated parameter 'utf8'
[  318.223737][T11507] exfat: Deprecated parameter 'utf8'
[  318.235764][T11507] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  318.252840][T11476] bcachefs (loop7): done starting filesystem
[  318.301803][   T33] audit: type=1800 audit(2000000115.890:215): pid=11507 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.1837" name="file1" dev="loop9" ino=1048702 res=0 errno=0
[  318.318851][   T33] audit: type=1800 audit(2000000115.900:216): pid=11476 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.1828" name="file1" dev="loop7" ino=4098 res=0 errno=0
[  318.374660][ T9436] bcachefs (loop7): shutting down
[  318.376753][ T9436] bcachefs (loop7): going read-only
[  318.378862][ T9436] bcachefs (loop7): finished waiting for writes to stop
[  318.403523][T11500] loop8: detected capacity change from 0 to 32768
[  318.429263][ T9436] bcachefs (loop7): flushing journal and stopping allocators, journal seq 5
[  318.459631][T11500] XFS (loop8): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  318.500146][ T9436] bcachefs (loop7): flushing journal and stopping allocators complete, journal seq 8
[  318.511106][ T9436] bcachefs (loop7): clean shutdown complete, journal seq 9
[  318.520004][ T9436] bcachefs (loop7): marking filesystem clean
[  318.550618][T11500] XFS (loop8): Ending clean mount
[  318.564016][T11500] XFS (loop8): Quotacheck needed: Please wait.
[  318.568596][ T9436] bcachefs (loop7): shutdown complete
[  318.663656][T11500] XFS (loop8): Quotacheck: Done.
[  318.791263][ T9566] XFS (loop8): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  319.009771][T11521] loop8: detected capacity change from 0 to 128
[  319.015599][T11521] EXT4-fs (loop8): Test dummy encryption mode enabled
[  319.023525][T11521] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  319.032100][T11521] ext4 filesystem being mounted at /224/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  319.054653][T11521] fscrypt: AES-256-XTS using implementation "xts(ecb(aes-fixed-time))"
[  319.093145][T11521] fscrypt: AES-256-CBC-CTS using implementation "cts(cbc(ecb(aes-fixed-time)))"
[  319.145411][ T9566] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  319.324201][T11527] loop8: detected capacity change from 0 to 1024
[  319.415778][T11527] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  319.435816][T11527] ext4 filesystem being mounted at /226/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  319.445493][   T33] audit: type=1800 audit(2000000117.030:217): pid=11527 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1843" name="file1" dev="loop8" ino=15 res=0 errno=0
[  319.495985][ T9566] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  319.547761][T11529] loop9: detected capacity change from 0 to 32768
[  319.561451][T11529] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.1844 (11529)
[  319.612460][T11529] BTRFS info (device loop9): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  319.614343][T11535] loop8: detected capacity change from 0 to 512
[  319.615712][T11529] BTRFS info (device loop9): using sha256 (sha256-lib) checksum algorithm
[  319.643743][T11535] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  319.644591][T11529] BTRFS info (device loop9): using free-space-tree
[  319.693295][T11535] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #16: comm syz.8.1845: invalid indirect mapped block 4294967295 (level 0)
[  319.719339][T11535] EXT4-fs (loop8): Remounting filesystem read-only
[  319.722317][T11535] EXT4-fs (loop8): 1 orphan inode deleted
[  319.724326][T11535] EXT4-fs (loop8): 1 truncate cleaned up
[  319.727163][T11535] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  319.803690][ T9566] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  319.978845][T10011] BTRFS info (device loop9): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  319.994939][T11555] loop8: detected capacity change from 0 to 256
[  320.636644][T11568] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1839'.
[  320.871456][T11557] loop8: detected capacity change from 0 to 32768
[  320.938707][T11557] bcachefs (loop8): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names
[  320.938732][T11557]   allowing incompatible features above 0.0: (unknown version)
[  320.938740][T11557]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  320.952556][T11557] bcachefs (loop8): Using encoding defined by superblock: utf8-12.1.0
[  320.955321][T11557] bcachefs (loop8): initializing new filesystem
[  320.965208][T11557] bcachefs (loop8): going read-write
[  320.976773][T11557] bcachefs (loop8): marking superblocks
[  321.000631][T11557] bcachefs (loop8): initializing freespace
[  321.009904][T11557] bcachefs (loop8): done initializing freespace
[  321.042263][T11557] bcachefs (loop8): reading snapshots table
[  321.055866][T11557] bcachefs (loop8): reading snapshots done
[  321.108005][T11557] bcachefs (loop8): done starting filesystem
[  321.200687][ T9566] bcachefs (loop8): shutting down
[  321.202842][ T9566] bcachefs (loop8): going read-only
[  321.204933][ T9566] bcachefs (loop8): finished waiting for writes to stop
[  321.284665][ T9566] bcachefs (loop8): flushing journal and stopping allocators, journal seq 3
[  321.348412][ T9566] bcachefs (loop8): flushing journal and stopping allocators complete, journal seq 4
[  321.379212][ T9566] bcachefs (loop8): clean shutdown complete, journal seq 5
[  321.391344][ T9566] bcachefs (loop8): marking filesystem clean
[  321.460721][ T9566] bcachefs (loop8): shutdown complete
[  321.740111][T11592] netlink: 'syz.9.1858': attribute type 10 has an invalid length.
[  321.791249][T11592] team0: Port device team_slave_0 removed
[  321.848534][T11596] netlink: 'syz.7.1860': attribute type 13 has an invalid length.
[  322.044608][   T33] audit: type=1326 audit(2000000119.630:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11603 comm="syz.7.1864" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f182e98ebe9 code=0x7ffc0000
[  322.066535][   T33] audit: type=1326 audit(2000000119.630:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11603 comm="syz.7.1864" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f182e98ebe9 code=0x7ffc0000
[  322.113991][   T33] audit: type=1326 audit(2000000119.640:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11603 comm="syz.7.1864" exe="/syz-executor" sig=0 arch=c000003e syscall=450 compat=0 ip=0x7f182e98ebe9 code=0x7ffc0000
[  322.157473][   T33] audit: type=1326 audit(2000000119.640:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11603 comm="syz.7.1864" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f182e98ebe9 code=0x7ffc0000
[  322.172003][   T33] audit: type=1326 audit(2000000119.640:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11603 comm="syz.7.1864" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f182e98ebe9 code=0x7ffc0000
[  322.231033][T11608] loop7: detected capacity change from 0 to 2048
[  322.267252][T11613] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  322.519360][T11622] netlink: 'syz.9.1872': attribute type 3 has an invalid length.
[  323.191604][T11646] loop8: detected capacity change from 0 to 256
[  323.196903][T11648] program syz.7.1883 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  323.429377][T11655] loop7: detected capacity change from 0 to 1764
[  323.507445][T11644] loop9: detected capacity change from 0 to 32768
[  323.519682][T11644] XFS: ikeep mount option is deprecated.
[  323.537506][T11644] XFS (loop9): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  323.544853][T11661] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1888'.
[  323.587281][T11644] XFS (loop9): Ending clean mount
[  323.606365][T11644] XFS (loop9): Quotacheck needed: Please wait.
[  323.662349][T11644] XFS (loop9): Quotacheck: Done.
[  323.807686][ T5895] usb 9-1: new high-speed USB device number 9 using dummy_hcd
[  323.818470][T10011] XFS (loop9): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  323.983284][ T5895] usb 9-1: Using ep0 maxpacket: 32
[  324.161884][ T5895] usb 9-1: config 0 has an invalid interface number: 85 but max is 0
[  324.175208][ T5895] usb 9-1: config 0 has no interface number 0
[  324.185895][ T5895] usb 9-1: config 0 interface 85 has no altsetting 0
[  324.198337][ T5895] usb 9-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  324.207279][ T5895] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  324.213593][ T5895] usb 9-1: Product: syz
[  324.217360][ T5895] usb 9-1: Manufacturer: syz
[  324.220367][ T5895] usb 9-1: SerialNumber: syz
[  324.226116][ T5895] usb 9-1: config 0 descriptor??
[  324.237377][ T5895] appletouch 9-1:0.85: Could not find int-in endpoint
[  324.240259][ T5895] appletouch 9-1:0.85: probe with driver appletouch failed with error -5
[  324.243336][ T5895] usbhid 9-1:0.85: couldn't find an input interrupt endpoint
[  324.472845][T11681] loop9: detected capacity change from 0 to 1024
[  324.816076][ T5895] usb 9-1: USB disconnect, device number 9
[  324.912471][T11695] loop9: detected capacity change from 0 to 256
[  324.914996][T11695] exfat: Deprecated parameter 'namecase'
[  324.937355][T11695] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d)
[  324.981825][T11698] loop9: detected capacity change from 0 to 512
[  324.984609][T11698] EXT4-fs: Ignoring removed orlov option
[  324.994710][T11698] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem
[  325.008073][T11698] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002]
[  325.037445][T11698] EXT4-fs error (device loop9): ext4_iget_extra_inode:5104: inode #15: comm syz.9.1900: corrupted in-inode xattr: e_value size too large
[  325.050599][T11698] EXT4-fs error (device loop9): ext4_orphan_get:1397: comm syz.9.1900: couldn't read orphan inode 15 (err -117)
[  325.065542][T11698] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  325.127875][T10011] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  325.915388][T11724] loop7: detected capacity change from 0 to 256
[  325.963844][T11724] FAT-fs (loop7): Directory bread(block 64) failed
[  325.966076][T11724] FAT-fs (loop7): Directory bread(block 65) failed
[  325.968839][T11724] FAT-fs (loop7): Directory bread(block 66) failed
[  325.971941][T11724] FAT-fs (loop7): Directory bread(block 67) failed
[  325.978427][T11724] FAT-fs (loop7): Directory bread(block 68) failed
[  325.991551][T11724] FAT-fs (loop7): Directory bread(block 69) failed
[  325.996612][T11724] FAT-fs (loop7): Directory bread(block 70) failed
[  326.012006][T11724] FAT-fs (loop7): Directory bread(block 71) failed
[  326.141496][T11724] FAT-fs (loop7): Directory bread(block 72) failed
[  326.154619][T11724] FAT-fs (loop7): Directory bread(block 73) failed
[  327.126686][T11721] loop9: detected capacity change from 0 to 65536
[  327.151064][T11721] XFS (loop9): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  327.185562][T11721] XFS (loop9): Ending clean mount
[  327.196421][T11721] XFS (loop9): Quotacheck needed: Please wait.
[  327.222738][ T1109] XFS (loop9): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_cntbt block 0x6 
[  327.227857][   T28] XFS (loop9): Metadata CRC error detected at xfs_agi_read_verify+0x12f/0x1f0, xfs_agi block 0x8002 
[  327.241788][ T1109] XFS (loop9): Unmount and run xfs_repair
[  327.245958][   T28] XFS (loop9): Unmount and run xfs_repair
[  327.247889][ T1109] XFS (loop9): First 128 bytes of corrupted metadata buffer:
[  327.259172][   T28] XFS (loop9): First 128 bytes of corrupted metadata buffer:
[  327.261741][ T1109] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff  AB3C............
[  327.266995][   T28] 00000000: 58 41 47 49 00 00 00 01 00 00 00 01 00 00 40 00  XAGI..........@.
[  327.270778][ T1109] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10  ................
[  327.276239][   T28] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 00  ................
[  327.286190][ T1109] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3  .sH./.A..&.:g...
[  327.289830][   T28] 00000020: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  327.295200][ T1109] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03  .....J..........
[  327.300657][   T28] 00000030: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  327.304449][ T1109] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00  ...9..?.........
[  327.307997][   T28] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  327.316914][ T1109] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00  ...........?....
[  327.322536][   T28] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  327.327546][ T1109] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  327.336742][   T28] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  327.344135][ T1109] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  327.345382][   T28] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  327.347943][ T1109] XFS (loop9): metadata I/O error in "xfs_btree_read_buf_block+0x290/0x470" at daddr 0x6 len 2 error 74
[  327.355215][   T28] XFS (loop9): metadata I/O error in "xfs_read_agi+0x272/0x5b0" at daddr 0x8002 len 1 error 74
[  327.373184][T11721] XFS (loop9): Quotacheck: Unsuccessful (Error -117): Disabling quotas.
[  327.397007][T10011] XFS (loop9): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  327.412637][T10011] XFS (loop9): Uncorrected metadata errors detected; please run xfs_repair.
[  328.011869][T11767] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(3)
[  328.013915][T11767] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  328.027679][T11767] vhci_hcd vhci_hcd.0: Device attached
[  328.034871][T11768] vhci_hcd: connection closed
[  328.035159][ T5874] vhci_hcd: stop threads
[  328.049323][ T5874] vhci_hcd: release socket
[  328.051031][ T5874] vhci_hcd: disconnect device
[  328.693388][T11780] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1929'.
[  329.992556][T11807] loop9: detected capacity change from 0 to 8192
[  330.042843][T11816] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  330.783389][T11844] loop9: detected capacity change from 0 to 512
[  330.801334][T11844] EXT4-fs: Ignoring removed nomblk_io_submit option
[  330.828556][T11844] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  330.841236][T11844] ext4 filesystem being mounted at /205/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  330.972016][T10011] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  331.456705][T11855] could not allocate digest TFM handle sm3
[  332.144229][T11913] loop9: detected capacity change from 0 to 512
[  332.888864][T11924] loop9: detected capacity change from 0 to 1024
[  333.038840][T11930] trusted_key: encrypted_key: insufficient parameters specified
[  333.039877][T11928] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  333.216366][T11941] loop8: detected capacity change from 0 to 1024
[  333.363342][T11948] loop8: detected capacity change from 0 to 256
[  333.623313][T11954] loop7: detected capacity change from 0 to 4096
[  333.634284][T11954] EXT4-fs (loop7): Test dummy encryption mode enabled
[  333.637888][T11954] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[  333.641358][T11954] System zones: 0-5
[  333.647080][T11954] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  333.753069][ T9436] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  333.756581][T11966] netdevsim netdevsim9 netdevsim0: entered promiscuous mode
[  333.759248][T11961] netlink: 'syz.8.1981': attribute type 1 has an invalid length.
[  333.816522][T11961] 8021q: adding VLAN 0 to HW filter on device bond1
[  333.924076][T11969] loop9: detected capacity change from 0 to 1024
[  333.982286][T11969] hfsplus: bad catalog entry type
[  334.034532][ T9243] hfsplus: b-tree write err: -5, ino 4
[  334.047143][T11973] loop8: detected capacity change from 0 to 2048
[  334.056747][T11975] loop7: detected capacity change from 0 to 512
[  334.066587][T11973] UDF-fs: warning (device loop8): udf_load_vrs: No anchor found
[  334.076065][T11973] UDF-fs: Scanning with blocksize 512 failed
[  334.086498][T11973] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  334.092873][T11975] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  334.121935][T11975] ext4 filesystem being mounted at /279/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  334.214395][ T9436] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  334.272845][T11983] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1989'.
[  335.528239][T11981] loop9: detected capacity change from 0 to 262144
[  335.532399][T11981] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.1988 (11981)
[  335.540196][T11981] BTRFS info (device loop9): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53
[  335.543574][T11981] BTRFS info (device loop9): using xxhash64 (xxhash64-generic) checksum algorithm
[  335.546369][T11981] BTRFS info (device loop9): using free-space-tree
[  335.647006][T11727] BTRFS warning (device loop9): checksum verify failed on logical 22036480 mirror 1 wanted 0x23e101be1e001a29 found 0x09049c5cc74d15fb level 0
[  335.687008][T11981] BTRFS info (device loop9): read error corrected: ino 0 off 22036480 (dev /dev/loop9 sector 43040)
[  335.691652][T11981] BTRFS info (device loop9): read error corrected: ino 0 off 22040576 (dev /dev/loop9 sector 43048)
[  335.696385][T11981] BTRFS info (device loop9): read error corrected: ino 0 off 22044672 (dev /dev/loop9 sector 43056)
[  335.700851][T11981] BTRFS info (device loop9): read error corrected: ino 0 off 22048768 (dev /dev/loop9 sector 43064)
[  335.823758][T10011] BTRFS info (device loop9): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53
[  336.189145][T12020] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1996'.
[  336.191998][T12020] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1996'.
[  336.682782][T12037] loop8: detected capacity change from 0 to 2048
[  336.692519][T12037] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  336.809414][T12039] netlink: 248 bytes leftover after parsing attributes in process `syz.8.2004'.
[  336.976413][T12036] loop9: detected capacity change from 0 to 40427
[  336.984059][T12036] F2FS-fs (loop9): invalid crc value
[  337.098474][T12036] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  337.111602][T12036] F2FS-fs (loop9): Start checkpoint disabled!
[  337.117331][T12036] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e6
[  337.653047][T11871] kworker/u9:29: attempt to access beyond end of device
[  337.653047][T11871] loop9: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  337.658598][T11871] CPU: 0 UID: 0 PID: 11871 Comm: kworker/u9:29 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  337.658627][T11871] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  337.658635][T11871] Workqueue: writeback wb_workfn (flush-7:9)
[  337.658674][T11871] Call Trace:
[  337.658679][T11871]  <TASK>
[  337.658684][T11871]  dump_stack_lvl+0x189/0x250
[  337.658699][T11871]  ? __pfx_dump_stack_lvl+0x10/0x10
[  337.658709][T11871]  ? __pfx_queue_work_on+0x10/0x10
[  337.658718][T11871]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  337.658730][T11871]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  337.658746][T11871]  f2fs_handle_critical_error+0x37c/0x540
[  337.658761][T11871]  f2fs_write_end_io+0x886/0xb60
[  337.658779][T11871]  __submit_merged_bio+0x27a/0x6a0
[  337.658794][T11871]  __submit_merged_write_cond+0x255/0x530
[  337.658808][T11871]  f2fs_write_data_pages+0x261d/0x3000
[  337.658836][T11871]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  337.658890][T11871]  ? f2fs_write_meta_pages+0x357/0x450
[  337.658925][T11871]  ? __lock_acquire+0xab9/0xd20
[  337.658956][T11871]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  337.658968][T11871]  do_writepages+0x32e/0x550
[  337.658982][T11871]  ? reacquire_held_locks+0x127/0x1d0
[  337.658991][T11871]  ? writeback_sb_inodes+0x384/0x1010
[  337.659006][T11871]  __writeback_single_inode+0x145/0xff0
[  337.659016][T11871]  ? do_raw_spin_unlock+0x4d/0x240
[  337.659028][T11871]  writeback_sb_inodes+0x6c7/0x1010
[  337.659052][T11871]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  337.659090][T11871]  ? rcu_is_watching+0x15/0xb0
[  337.659105][T11871]  wb_writeback+0x43b/0xaf0
[  337.659120][T11871]  ? queue_io+0x3b1/0x590
[  337.659131][T11871]  ? __pfx_wb_writeback+0x10/0x10
[  337.659145][T11871]  ? _raw_spin_unlock_irq+0x23/0x50
[  337.659158][T11871]  wb_workfn+0x409/0xef0
[  337.659175][T11871]  ? __pfx_wb_workfn+0x10/0x10
[  337.659186][T11871]  ? __lock_acquire+0xab9/0xd20
[  337.659202][T11871]  ? process_scheduled_works+0x9ef/0x17b0
[  337.659214][T11871]  ? _raw_spin_unlock_irq+0x23/0x50
[  337.659222][T11871]  ? process_scheduled_works+0x9ef/0x17b0
[  337.659229][T11871]  ? process_scheduled_works+0x9ef/0x17b0
[  337.659238][T11871]  process_scheduled_works+0xae1/0x17b0
[  337.659262][T11871]  ? __pfx_process_scheduled_works+0x10/0x10
[  337.659279][T11871]  worker_thread+0x8a0/0xda0
[  337.659302][T11871]  kthread+0x711/0x8a0
[  337.659315][T11871]  ? __pfx_worker_thread+0x10/0x10
[  337.659324][T11871]  ? __pfx_kthread+0x10/0x10
[  337.659334][T11871]  ? _raw_spin_unlock_irq+0x23/0x50
[  337.659343][T11871]  ? lockdep_hardirqs_on+0x9c/0x150
[  337.659353][T11871]  ? __pfx_kthread+0x10/0x10
[  337.659363][T11871]  ret_from_fork+0x3fc/0x770
[  337.659374][T11871]  ? __pfx_ret_from_fork+0x10/0x10
[  337.659386][T11871]  ? __switch_to_asm+0x39/0x70
[  337.659395][T11871]  ? __switch_to_asm+0x33/0x70
[  337.659404][T11871]  ? __pfx_kthread+0x10/0x10
[  337.659414][T11871]  ret_from_fork_asm+0x1a/0x30
[  337.659432][T11871]  </TASK>
[  337.954511][T12055] loop8: detected capacity change from 0 to 512
[  337.982559][T11871] F2FS-fs (loop9): Stopped filesystem due to reason: 3
[  337.988134][T12055] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.2008: bg 0: block 35: padding at end of block bitmap is not set
[  338.034658][T12055] EXT4-fs (loop8): Remounting filesystem read-only
[  338.095013][T12055] EXT4-fs (loop8): 1 truncate cleaned up
[  338.118706][T12055] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  338.260041][ T9566] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  339.672877][T12069] loop8: detected capacity change from 0 to 40427
[  339.695744][T12069] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12
[  339.713028][T12069] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock
[  340.026934][T12069] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  340.048473][T12069] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0
[  340.057568][T12069] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5
[  340.110801][T12069] syz.8.2011: attempt to access beyond end of device
[  340.110801][T12069] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  340.330221][T12098] loop7: detected capacity change from 0 to 512
[  340.361735][T12098] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  340.662242][T12107] overlayfs: missing 'lowerdir'
[  341.005859][T12120] loop9: detected capacity change from 0 to 1024
[  341.028817][T12120] Quota error (device loop9): do_check_range: Getting block 64 out of range 1-5
[  341.037602][T12120] Quota error (device loop9): qtree_read_dquot: Can't read quota structure for id 0
[  341.050753][T12120] EXT4-fs error (device loop9): ext4_acquire_dquot:6933: comm syz.9.2024: Failed to acquire dquot type 0
[  341.074597][T12120] EXT4-fs error (device loop9): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt.
[  341.104927][T12120] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #13: comm syz.9.2024: corrupted inode contents
[  341.124568][T12120] EXT4-fs error (device loop9): ext4_dirty_inode:6538: inode #13: comm syz.9.2024: mark_inode_dirty error
[  341.132129][T12120] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #13: comm syz.9.2024: corrupted inode contents
[  341.156451][T12120] EXT4-fs error (device loop9): __ext4_ext_dirty:206: inode #13: comm syz.9.2024: mark_inode_dirty error
[  341.165191][T12120] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #13: comm syz.9.2024: corrupted inode contents
[  341.180648][T12120] EXT4-fs error (device loop9) in ext4_orphan_del:305: Corrupt filesystem
[  341.185940][T12120] EXT4-fs error (device loop9): ext4_do_update_inode:5653: inode #13: comm syz.9.2024: corrupted inode contents
[  341.205035][ T9436] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  341.208914][T12120] EXT4-fs error (device loop9): ext4_truncate:4666: inode #13: comm syz.9.2024: mark_inode_dirty error
[  341.226074][T12120] EXT4-fs error (device loop9) in ext4_process_orphan:347: Corrupt filesystem
[  341.258625][T12120] EXT4-fs (loop9): 1 truncate cleaned up
[  341.270903][T12120] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  341.407162][T10011] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  341.665044][T12132] netlink: 'syz.9.2029': attribute type 2 has an invalid length.
[  341.691214][T12132] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2029'.
[  341.861343][T12136] loop9: detected capacity change from 0 to 128
[  341.864841][T12136] UDF-fs: error (device loop9): udf_read_tagged: read failed, block=256, location=256
[  341.877418][T12136] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  342.090044][T12146] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2034'.
[  342.381755][T12153] loop7: detected capacity change from 0 to 40427
[  342.385896][T12153] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12
[  342.389130][T12153] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[  342.394486][T12153] F2FS-fs (loop7): invalid crc value
[  342.429552][T12153] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  342.444362][T12153] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0
[  342.446546][T12153] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  342.472522][T12162] netlink: 'syz.9.2041': attribute type 30 has an invalid length.
[  343.029595][   T33] audit: type=1800 audit(2000000003.230:223): pid=12166 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2039" name="file1" dev="loop7" ino=10 res=0 errno=0
[  345.289351][ T9436] syz-executor: attempt to access beyond end of device
[  345.289351][ T9436] loop7: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  345.293790][ T9436] CPU: 1 UID: 0 PID: 9436 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  345.293810][ T9436] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  345.293818][ T9436] Call Trace:
[  345.293824][ T9436]  <TASK>
[  345.293831][ T9436]  dump_stack_lvl+0x189/0x250
[  345.293857][ T9436]  ? __pfx_dump_stack_lvl+0x10/0x10
[  345.293872][ T9436]  ? __pfx_queue_work_on+0x10/0x10
[  345.293887][ T9436]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  345.293906][ T9436]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  345.293931][ T9436]  f2fs_handle_critical_error+0x37c/0x540
[  345.293956][ T9436]  f2fs_write_end_io+0x886/0xb60
[  345.293982][ T9436]  __submit_merged_bio+0x27a/0x6a0
[  345.294000][ T9436]  ? up_write+0x1c4/0x420
[  345.294021][ T9436]  __submit_merged_write_cond+0x44c/0x530
[  345.294044][ T9436]  f2fs_sync_node_pages+0x1479/0x15e0
[  345.294075][ T9436]  ? __pfx_f2fs_sync_node_pages+0x10/0x10
[  345.294113][ T9436]  ? f2fs_write_checkpoint+0xe43/0x1df0
[  345.294153][ T9436]  ? up_write+0x1c4/0x420
[  345.294161][ T9436]  ? do_raw_spin_unlock+0x4d/0x240
[  345.294173][ T9436]  f2fs_write_checkpoint+0xe6f/0x1df0
[  345.294192][ T9436]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  345.294223][ T9436]  ? kill_f2fs_super+0x298/0x6c0
[  345.294236][ T9436]  kill_f2fs_super+0x2c3/0x6c0
[  345.294252][ T9436]  ? __pfx_kill_f2fs_super+0x10/0x10
[  345.294262][ T9436]  ? radix_tree_delete_item+0x2b6/0x400
[  345.294285][ T9436]  ? shrinker_free+0x2ce/0x3e0
[  345.294303][ T9436]  deactivate_locked_super+0xbc/0x130
[  345.294322][ T9436]  cleanup_mnt+0x425/0x4c0
[  345.294339][ T9436]  ? lockdep_hardirqs_on+0x9c/0x150
[  345.294357][ T9436]  task_work_run+0x1d4/0x260
[  345.294377][ T9436]  ? __pfx_task_work_run+0x10/0x10
[  345.294392][ T9436]  ? __x64_sys_umount+0x122/0x160
[  345.294415][ T9436]  ? exit_to_user_mode_loop+0x40/0x110
[  345.294436][ T9436]  exit_to_user_mode_loop+0xec/0x110
[  345.294462][ T9436]  do_syscall_64+0x2bd/0x3b0
[  345.294481][ T9436]  ? lockdep_hardirqs_on+0x9c/0x150
[  345.294498][ T9436]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  345.294512][ T9436]  ? exc_page_fault+0x9f/0xf0
[  345.294531][ T9436]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  345.294545][ T9436] RIP: 0033:0x7f182e98ff17
[  345.294558][ T9436] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  345.294570][ T9436] RSP: 002b:00007ffcefd84708 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  345.294584][ T9436] RAX: 0000000000000000 RBX: 00007f182ea11c05 RCX: 00007f182e98ff17
[  345.294594][ T9436] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcefd847c0
[  345.294602][ T9436] RBP: 00007ffcefd847c0 R08: 0000000000000000 R09: 0000000000000000
[  345.294611][ T9436] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffcefd85850
[  345.294619][ T9436] R13: 00007f182ea11c05 R14: 0000000000053d42 R15: 00007ffcefd85890
[  345.294640][ T9436]  </TASK>
[  345.294646][ T9436] F2FS-fs (loop7): Stopped filesystem due to reason: 3
[  345.578789][T12196] loop9: detected capacity change from 0 to 2048
[  345.670208][T12196] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  345.754570][T12196] UDF-fs: error (device loop9): udf_fiiter_advance_blk: extent after position 232 not allocated in directory (ino 1376)
[  346.392870][T12207] loop9: detected capacity change from 0 to 32768
[  346.470753][T12207] ocfs2: Mounting device (7,9) on (node local, slot 0) with writeback data mode.
[  346.544462][T12207] (syz.9.2056,12207,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: directory entry overrun - offset=16, inode=65, rec_len=64016, name_len=255
[  346.569369][T12207] (syz.9.2056,12207,1):ocfs2_prepare_dir_for_insert:4302 ERROR: status = -2
[  346.576747][T12207] (syz.9.2056,12207,1):ocfs2_mknod:301 ERROR: status = -2
[  346.585568][T12207] (syz.9.2056,12207,1):ocfs2_mknod:505 ERROR: status = -2
[  346.595262][T12207] (syz.9.2056,12207,1):ocfs2_create:678 ERROR: status = -2
[  346.714147][T10011] ocfs2: Unmounting device (7,9) on (node local)
[  346.759974][   T47] usb 9-1: new high-speed USB device number 10 using dummy_hcd
[  346.909134][   T47] usb 9-1: Using ep0 maxpacket: 8
[  346.914542][   T47] usb 9-1: config index 0 descriptor too short (expected 19222, got 18)
[  346.922772][   T47] usb 9-1: config 28 has too many interfaces: 241, using maximum allowed: 32
[  346.930347][   T47] usb 9-1: config 28 has 1 interface, different from the descriptor's value: 241
[  346.943369][   T47] usb 9-1: New USB device found, idVendor=04b4, idProduct=1002, bcdDevice=62.0d
[  346.949160][   T47] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  346.955971][   T47] usb 9-1: Product: syz
[  346.960747][   T47] usb 9-1: Manufacturer: syz
[  346.964993][   T47] usb 9-1: SerialNumber: syz
[  347.226644][    T9] usb 9-1: USB disconnect, device number 10
[  347.646327][T12228] loop9: detected capacity change from 0 to 64
[  347.728568][T12228] Trying to free block not in datazone
[  348.589406][   T24] usb 10-1: new high-speed USB device number 11 using dummy_hcd
[  348.740844][   T24] usb 10-1: Using ep0 maxpacket: 32
[  348.753170][   T24] usb 10-1: config 0 has an invalid interface number: 85 but max is 0
[  348.757024][   T24] usb 10-1: config 0 has no interface number 0
[  348.762177][   T24] usb 10-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  348.768385][   T24] usb 10-1: config 0 interface 85 has no altsetting 0
[  348.777652][   T24] usb 10-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  348.793879][   T24] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  348.804025][   T24] usb 10-1: Product: syz
[  348.808061][   T24] usb 10-1: Manufacturer: syz
[  348.818717][   T24] usb 10-1: SerialNumber: syz
[  348.830025][T12242] loop8: detected capacity change from 0 to 256
[  348.849664][   T24] usb 10-1: config 0 descriptor??
[  348.861210][T12242] FAT-fs (loop8): Directory bread(block 64) failed
[  348.864164][T12242] FAT-fs (loop8): Directory bread(block 65) failed
[  348.866923][T12242] FAT-fs (loop8): Directory bread(block 66) failed
[  348.886560][T12242] FAT-fs (loop8): Directory bread(block 67) failed
[  348.902174][T12242] FAT-fs (loop8): Directory bread(block 68) failed
[  348.904913][T12242] FAT-fs (loop8): Directory bread(block 69) failed
[  348.907629][T12242] FAT-fs (loop8): Directory bread(block 70) failed
[  348.915258][   T33] audit: type=1326 audit(2000000009.460:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12243 comm="syz.7.2069" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f182e98ebe9 code=0x7ffc0000
[  348.919563][T12242] FAT-fs (loop8): Directory bread(block 71) failed
[  348.927004][T12242] FAT-fs (loop8): Directory bread(block 72) failed
[  348.930689][T12242] FAT-fs (loop8): Directory bread(block 73) failed
[  348.952618][   T33] audit: type=1326 audit(2000000009.460:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12243 comm="syz.7.2069" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f182e98ebe9 code=0x7ffc0000
[  348.977481][   T33] audit: type=1326 audit(2000000009.480:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12243 comm="syz.7.2069" exe="/syz-executor" sig=0 arch=c000003e syscall=33 compat=0 ip=0x7f182e98ebe9 code=0x7ffc0000
[  348.996199][   T33] audit: type=1326 audit(2000000009.480:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12243 comm="syz.7.2069" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f182e98ebe9 code=0x7ffc0000
[  349.015507][   T33] audit: type=1326 audit(2000000009.480:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12243 comm="syz.7.2069" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f182e98ebe9 code=0x7ffc0000
[  349.083084][   T24] appletouch 10-1:0.85: Failed to read mode from device.
[  349.092139][   T24] appletouch 10-1:0.85: probe with driver appletouch failed with error -5
[  349.111813][   T24] usb 10-1: USB disconnect, device number 11
[  349.153675][T12249] loop8: detected capacity change from 0 to 47
[  349.176913][T12250] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2070'.
[  350.324713][T12267] veth1_macvtap: left promiscuous mode
[  350.329888][T12267] macsec0: entered promiscuous mode
[  350.350322][T12265] netlink: 96 bytes leftover after parsing attributes in process `syz.9.2076'.
[  350.730247][T12281] loop8: detected capacity change from 0 to 1024
[  350.800208][T12281] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  350.857909][T12290] loop9: detected capacity change from 0 to 512
[  350.864116][ T9566] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  350.879713][T12290] EXT4-fs: Ignoring removed bh option
[  350.891314][T12290] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem
[  350.928604][T12290] EXT4-fs (loop9): 1 truncate cleaned up
[  350.956666][T12290] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  351.283270][T12299] lo speed is unknown, defaulting to 1000
[  351.286518][T12299] lo speed is unknown, defaulting to 1000
[  351.319280][T12299] lo speed is unknown, defaulting to 1000
[  351.361117][T12299] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  351.466828][T12299] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  351.549245][T12299] lo speed is unknown, defaulting to 1000
[  351.555224][T12299] lo speed is unknown, defaulting to 1000
[  351.560173][T12299] lo speed is unknown, defaulting to 1000
[  351.563925][T12299] lo speed is unknown, defaulting to 1000
[  351.567691][T12299] lo speed is unknown, defaulting to 1000
[  351.571639][T12299] lo speed is unknown, defaulting to 1000
[  351.575380][T12299] lo speed is unknown, defaulting to 1000
[  351.716095][T12295] loop8: detected capacity change from 0 to 32768
[  351.739174][T12295] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.2087 (12295)
[  351.770239][T12295] BTRFS info (device loop8): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  351.795434][T12295] BTRFS info (device loop8): using sha256 (sha256-lib) checksum algorithm
[  351.820819][T12295] BTRFS info (device loop8): using free-space-tree
[  351.833253][T10011] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  352.456733][ T9566] BTRFS info (device loop8): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  353.638122][T12336] loop7: detected capacity change from 0 to 16
[  353.706389][T12336] erofs (device loop7): mounted with root inode @ nid 36.
[  356.236152][T12369] loop8: detected capacity change from 0 to 16
[  356.518152][T12371] loop7: detected capacity change from 0 to 1764
[  356.558542][T12371] ISOFS: Bad logical zone size 23846
[  357.269590][T12381] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  357.507335][T12385] loop7: detected capacity change from 0 to 128
[  357.547435][T12389] loop9: detected capacity change from 0 to 256
[  357.552016][T12389] exfat: Deprecated parameter 'utf8'
[  357.657946][   T33] audit: type=1800 audit(2000000018.160:229): pid=12389 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.2116" name="file2" dev="loop9" ino=1048729 res=0 errno=0
[  358.331215][T11827] kworker/u10:20: attempt to access beyond end of device
[  358.331215][T11827] loop7: rw=1, sector=153, nr_sectors = 8 limit=128
[  358.337944][T11827] kworker/u10:20: attempt to access beyond end of device
[  358.337944][T11827] loop7: rw=1, sector=169, nr_sectors = 8 limit=128
[  358.349224][T11827] kworker/u10:20: attempt to access beyond end of device
[  358.349224][T11827] loop7: rw=1, sector=185, nr_sectors = 8 limit=128
[  358.355160][T11827] kworker/u10:20: attempt to access beyond end of device
[  358.355160][T11827] loop7: rw=1, sector=201, nr_sectors = 8 limit=128
[  358.363368][T11827] kworker/u10:20: attempt to access beyond end of device
[  358.363368][T11827] loop7: rw=1, sector=217, nr_sectors = 8 limit=128
[  358.389089][T11827] kworker/u10:20: attempt to access beyond end of device
[  358.389089][T11827] loop7: rw=1, sector=233, nr_sectors = 8 limit=128
[  358.393293][T11827] kworker/u10:20: attempt to access beyond end of device
[  358.393293][T11827] loop7: rw=1, sector=249, nr_sectors = 8 limit=128
[  358.397530][T11827] kworker/u10:20: attempt to access beyond end of device
[  358.397530][T11827] loop7: rw=1, sector=265, nr_sectors = 8 limit=128
[  358.423692][T11827] kworker/u10:20: attempt to access beyond end of device
[  358.423692][T11827] loop7: rw=1, sector=281, nr_sectors = 8 limit=128
[  358.432935][T11827] kworker/u10:20: attempt to access beyond end of device
[  358.432935][T11827] loop7: rw=1, sector=297, nr_sectors = 8 limit=128
[  358.450079][   T34] INFO: task syz.6.1112:9199 blocked for more than 143 seconds.
[  358.453078][   T34]       Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0
[  358.456501][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  358.482508][   T34] task:syz.6.1112      state:D stack:27064 pid:9199  tgid:9198  ppid:8780   task_flags:0x400040 flags:0x00004004
[  358.486957][   T34] Call Trace:
[  358.488284][   T34]  <TASK>
[  358.490982][   T34]  __schedule+0x1798/0x4cc0
[  358.492797][   T34]  ? __lock_acquire+0xab9/0xd20
[  358.494724][   T34]  ? __lock_acquire+0xab9/0xd20
[  358.496681][   T34]  ? __pfx___schedule+0x10/0x10
[  358.498653][   T34]  ? schedule+0x91/0x360
[  358.512530][   T34]  schedule+0x165/0x360
[  358.514331][   T34]  schedule_preempt_disabled+0x13/0x30
[  358.516455][   T34]  rwsem_down_read_slowpath+0x5fd/0x8f0
[  358.518530][   T34]  ? rwsem_down_read_slowpath+0x4b8/0x8f0
[  358.548078][   T34]  ? __pfx_rwsem_down_read_slowpath+0x10/0x10
[  358.562930][   T34]  ? super_lock+0x2a9/0x3b0
[  358.564855][   T34]  down_read+0x98/0x2e0
[  358.566524][   T34]  super_lock+0x2a9/0x3b0
[  358.572306][T12417] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2123'.
[  358.586311][   T34]  ? __pfx_super_lock+0x10/0x10
[  358.588360][   T34]  ? do_raw_spin_lock+0x121/0x290
[  358.596474][   T34]  ? do_raw_spin_unlock+0x4d/0x240
[  358.598587][   T34]  __iterate_supers+0x126/0x290
[  358.602241][   T34]  ? __pfx_sync_inodes_one_sb+0x10/0x10
[  358.604544][   T34]  ksys_sync+0x94/0x150
[  358.606253][   T34]  ? __pfx_ksys_sync+0x10/0x10
[  358.608246][   T34]  ? do_syscall_64+0xbe/0x3b0
[  358.612050][   T34]  __ia32_sys_sync+0xe/0x20
[  358.613890][   T34]  do_syscall_64+0xfa/0x3b0
[  358.615477][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  358.617244][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  358.620155][   T34]  ? exc_page_fault+0x9f/0xf0
[  358.621760][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  358.623695][   T34] RIP: 0033:0x7fb44418ebe9
[  358.625155][   T34] RSP: 002b:00007fb44503d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2
[  358.628191][   T34] RAX: ffffffffffffffda RBX: 00007fb4443b5fa0 RCX: 00007fb44418ebe9
[  358.631318][   T34] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  358.633773][   T34] RBP: 00007fb4443b5fa0 R08: 0000000000000000 R09: 0000000000000000
[  358.636145][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  358.643349][   T34] R13: 00007fb4443b6038 R14: 00007fb4443b5fa0 R15: 00007ffe468b5978
[  358.646973][   T34]  </TASK>
[  358.648481][   T34] INFO: task syz.2.1158:9385 blocked for more than 143 seconds.
[  358.656597][   T34]       Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0
[  358.660202][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  358.663675][   T34] task:syz.2.1158      state:D stack:25128 pid:9385  tgid:9384  ppid:5853   task_flags:0x400040 flags:0x00004004
[  358.668074][   T34] Call Trace:
[  358.671508][   T34]  <TASK>
[  358.672729][   T34]  __schedule+0x1798/0x4cc0
[  358.674572][   T34]  ? __lock_acquire+0xab9/0xd20
[  358.676596][   T34]  ? __lock_acquire+0xab9/0xd20
[  358.678694][   T34]  ? __pfx___schedule+0x10/0x10
[  358.681139][   T34]  ? schedule+0x91/0x360
[  358.682945][   T34]  schedule+0x165/0x360
[  358.684713][   T34]  schedule_preempt_disabled+0x13/0x30
[  358.686955][   T34]  rwsem_down_read_slowpath+0x5fd/0x8f0
[  358.689711][   T34]  ? rwsem_down_read_slowpath+0x4b8/0x8f0
[  358.692118][   T34]  ? __pfx_rwsem_down_read_slowpath+0x10/0x10
[  358.694723][   T34]  ? super_lock+0x2a9/0x3b0
[  358.696660][   T34]  down_read+0x98/0x2e0
[  358.698414][   T34]  super_lock+0x2a9/0x3b0
[  358.700602][   T34]  ? __pfx_super_lock+0x10/0x10
[  358.702697][   T34]  ? do_raw_spin_lock+0x121/0x290
[  358.704884][   T34]  ? do_raw_spin_unlock+0x4d/0x240
[  358.707073][   T34]  __iterate_supers+0x126/0x290
[  358.709430][   T34]  ? __pfx_sync_inodes_one_sb+0x10/0x10
[  358.711833][   T34]  ksys_sync+0x94/0x150
[  358.713674][   T34]  ? __pfx_ksys_sync+0x10/0x10
[  358.715752][   T34]  ? rcu_is_watching+0x15/0xb0
[  358.717877][   T34]  ? do_syscall_64+0xbe/0x3b0
[  358.726861][   T34]  __ia32_sys_sync+0xe/0x20
[  358.728796][   T34]  do_syscall_64+0xfa/0x3b0
[  358.731493][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  358.733646][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  358.736161][   T34]  ? exc_page_fault+0x9f/0xf0
[  358.738117][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  358.740755][   T34] RIP: 0033:0x7f6a2458ebe9
[  358.742436][   T34] RSP: 002b:00007f6a25495038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a2
[  358.745517][   T34] RAX: ffffffffffffffda RBX: 00007f6a247b5fa0 RCX: 00007f6a2458ebe9
[  358.748746][   T34] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  358.758112][   T34] RBP: 00007f6a247b5fa0 R08: 0000000000000000 R09: 0000000000000000
[  358.761451][   T34] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  358.764574][   T34] R13: 00007f6a247b6038 R14: 00007f6a247b5fa0 R15: 00007ffcd41e5f48
[  358.767443][   T34]  </TASK>
[  358.768768][   T34] 
[  358.768768][   T34] Showing all locks held in the system:
[  358.773781][   T34] 1 lock held by rcu_tasks_trace/32:
[  358.786261][   T34]  #0: ffffffff8e13ac10 (rcu_tasks_trace.tasks_gp_mutex){+.+.}-{4:4}, at: rcu_tasks_one_gp+0xaf9/0xdf0
[  358.799359][   T34] 1 lock held by khungtaskd/34:
[  358.801370][   T34]  #0: ffffffff8e139ee0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  358.805287][   T34] 2 locks held by getty/5675:
[  358.809231][   T34]  #0: ffff8881070460a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  358.816177][   T34]  #1: ffffc900029062f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  358.826462][   T34] 2 locks held by syz-executor/5844:
[  358.830950][   T34] 2 locks held by kworker/u8:3/5874:
[  358.853227][   T34] 1 lock held by syz.6.1112/9199:
[  358.863645][   T34]  #0: ffff8881129ee0e0 (&type->s_umount_key#50){++++}-{4:4}, at: super_lock+0x2a9/0x3b0
[  358.870370][   T34] 1 lock held by syz.2.1158/9385:
[  358.875174][   T34]  #0: ffff8881129ee0e0 (&type->s_umount_key#50){++++}-{4:4}, at: super_lock+0x2a9/0x3b0
[  358.889079][   T34] 2 locks held by udevd/9471:
[  358.891112][   T34] 1 lock held by syz.4.1280/9851:
[  358.894924][   T34]  #0: ffff8881129ee0e0 (&type->s_umount_key#50){++++}-{4:4}, at: super_lock+0x2a9/0x3b0
[  358.899603][   T34] 2 locks held by kworker/u10:29/11836:
[  358.901852][   T34]  #0: ffff8881000e6148 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0
[  358.905321][   T34]  #1: ffffc900080e7bc0 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0
[  358.909856][   T34] 5 locks held by kworker/u9:33/11876:
[  358.912182][   T34]  #0: ffff88804b039f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140
[  358.916267][   T34]  #1: ffff88804b024008 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880
[  358.920227][   T34]  #2: ffff88804b025918 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x1ae/0xf30
[  358.923915][   T34]  #3: ffffffff99d2b2b0 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0xbb/0x420
[  358.928089][   T34]  #4: ffffffff8dfe63a8 (text_mutex){+.+.}-{4:4}, at: arch_jump_label_transform_apply+0x17/0x30
[  358.933312][   T34] 2 locks held by dhcpcd/12419:
[  358.935128][   T34]  #0: ffff88803cb4d008 (&sb->s_type->i_mutex_key#11){+.+.}-{4:4}, at: sock_close+0x9b/0x240
[  358.939303][   T34]  #1: ffffffff8e13f978 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730
[  358.942825][   T34] 2 locks held by dhcpcd/12420:
[  358.944540][   T34]  #0: ffff8881293f6258 (sk_lock-AF_PACKET){+.+.}-{0:0}, at: packet_do_bind+0x32/0xcd0
[  358.948379][   T34]  #1: ffffffff8e13f978 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730
[  358.953243][   T34] 
[  358.954420][   T34] =============================================
[  358.954420][   T34] 
[  358.957847][   T34] NMI backtrace for cpu 1
[  358.957859][   T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  358.957873][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  358.957880][   T34] Call Trace:
[  358.957886][   T34]  <TASK>
[  358.957893][   T34]  dump_stack_lvl+0x189/0x250
[  358.957914][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  358.957928][   T34]  ? __pfx__printk+0x10/0x10
[  358.957953][   T34]  nmi_cpu_backtrace+0x39e/0x3d0
[  358.957970][   T34]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  358.957985][   T34]  ? __pfx__printk+0x10/0x10
[  358.958004][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  358.958023][   T34]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  358.958038][   T34]  watchdog+0xf93/0xfe0
[  358.958059][   T34]  ? watchdog+0x1de/0xfe0
[  358.958080][   T34]  kthread+0x711/0x8a0
[  358.958100][   T34]  ? __pfx_watchdog+0x10/0x10
[  358.958117][   T34]  ? __pfx_kthread+0x10/0x10
[  358.958133][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  358.958147][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  358.958160][   T34]  ? __pfx_kthread+0x10/0x10
[  358.958173][   T34]  ret_from_fork+0x3fc/0x770
[  358.958186][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  358.958232][   T34]  ? __switch_to_asm+0x39/0x70
[  358.958248][   T34]  ? __switch_to_asm+0x33/0x70
[  358.958264][   T34]  ? __pfx_kthread+0x10/0x10
[  358.958280][   T34]  ret_from_fork_asm+0x1a/0x30
[  358.958308][   T34]  </TASK>
[  358.958314][   T34] Sending NMI from CPU 1 to CPUs 0:
[  359.023490][    C0] NMI backtrace for cpu 0
[  359.023513][    C0] CPU: 0 UID: 0 PID: 5772 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  359.023533][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  359.023542][    C0] RIP: 0010:native_apic_msr_write+0x39/0x50
[  359.023567][    C0] Code: 74 2a 83 ff 30 74 25 eb 10 81 ff d0 00 00 00 74 1b 81 ff e0 00 00 00 74 13 c1 ef 04 81 c7 00 08 00 00 89 f9 89 f0 31 d2 0f 30 <66> 90 c3 cc cc cc cc cc f3 0f 1e fa 89 f6 31 d2 e9 12 6b 8e 03 66
[  359.023580][    C0] RSP: 0018:ffffc90002fafaf8 EFLAGS: 00000046
[  359.023593][    C0] RAX: 000000000000ffe8 RBX: ffff88804b023900 RCX: 0000000000000838
[  359.023602][    C0] RDX: 0000000000000000 RSI: 000000000000ffe8 RDI: 0000000000000838
[  359.023609][    C0] RBP: 0000000000000001 R08: 0000000000000000 R09: ffffffff81ae027e
[  359.023618][    C0] R10: 0000000000000003 R11: ffffffff81703490 R12: 000000001000375d
[  359.023626][    C0] R13: dffffc0000000000 R14: 000000000000ffe8 R15: 0000000000000020
[  359.023636][    C0] FS:  0000555567019500(0000) GS:ffff8880b861c000(0000) knlGS:0000000000000000
[  359.023647][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  359.023656][    C0] CR2: 000055743707a600 CR3: 0000000107bc4000 CR4: 00000000000006f0
[  359.023686][    C0] Call Trace:
[  359.023693][    C0]  <TASK>
[  359.023699][    C0]  lapic_next_event+0x11/0x20
[  359.023715][    C0]  clockevents_program_event+0x1cf/0x360
[  359.023737][    C0]  hrtimer_start_range_ns+0xda6/0x1080
[  359.023764][    C0]  do_nanosleep+0x191/0x600
[  359.023781][    C0]  ? do_nanosleep+0x7f/0x600
[  359.023794][    C0]  ? __pfx_do_nanosleep+0x10/0x10
[  359.023808][    C0]  ? __hrtimer_setup+0x187/0x210
[  359.023819][    C0]  ? __pfx_hrtimer_wakeup+0x10/0x10
[  359.023833][    C0]  hrtimer_nanosleep+0x169/0x360
[  359.023846][    C0]  ? __pfx_hrtimer_nanosleep+0x10/0x10
[  359.023865][    C0]  ? __pfx_hrtimer_wakeup+0x10/0x10
[  359.023879][    C0]  ? __pfx_get_timespec64+0x10/0x10
[  359.023897][    C0]  ? __rseq_handle_notify_resume+0x37e/0x11f0
[  359.023916][    C0]  __se_sys_clock_nanosleep+0x2f1/0x380
[  359.023938][    C0]  ? __pfx___se_sys_clock_nanosleep+0x10/0x10
[  359.023958][    C0]  ? do_syscall_64+0xbe/0x3b0
[  359.023979][    C0]  do_syscall_64+0xfa/0x3b0
[  359.023996][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  359.024012][    C0]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  359.024025][    C0]  ? exc_page_fault+0x9f/0xf0
[  359.024042][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  359.024054][    C0] RIP: 0033:0x7f96695c1463
[  359.024066][    C0] Code: 1f 84 00 00 00 00 00 83 ff 03 74 7b 83 ff 02 b8 fa ff ff ff 49 89 ca 0f 44 f8 80 3d fe 70 1c 00 00 74 14 b8 e6 00 00 00 0f 05 <f7> d8 c3 66 2e 0f 1f 84 00 00 00 00 00 48 83 ec 28 48 89 54 24 10
[  359.024077][    C0] RSP: 002b:00007ffc8d37da68 EFLAGS: 00000202 ORIG_RAX: 00000000000000e6
[  359.024090][    C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f96695c1463
[  359.024099][    C0] RDX: 00007ffc8d37da80 RSI: 0000000000000000 RDI: 0000000000000000
[  359.024107][    C0] RBP: 0000000000000000 R08: 00000000149b9d40 R09: 7fffffffffffffff
[  359.024116][    C0] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffc8d37ded0
[  359.024124][    C0] R13: 0000000000000004 R14: 00007ffc8d37dabc R15: 00007ffc8d37db50
[  359.024139][    C0]  </TASK>
[  359.030414][   T34] Kernel panic - not syncing: hung_task: blocked tasks
[  359.030433][   T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  359.030453][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  359.030462][   T34] Call Trace:
[  359.030469][   T34]  <TASK>
[  359.030476][   T34]  dump_stack_lvl+0x99/0x250
[  359.030499][   T34]  ? __asan_memcpy+0x40/0x70
[  359.030517][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  359.030535][   T34]  ? __pfx__printk+0x10/0x10
[  359.030564][   T34]  vpanic+0x281/0x750
[  359.030582][   T34]  ? __pfx_vpanic+0x10/0x10
[  359.030597][   T34]  ? __x2apic_send_IPI_mask+0x1e4/0x260
[  359.030618][   T34]  ? preempt_schedule+0xae/0xc0
[  359.030638][   T34]  ? preempt_schedule_common+0x83/0xd0
[  359.030660][   T34]  panic+0xb9/0xc0
[  359.030676][   T34]  ? __pfx_panic+0x10/0x10
[  359.030693][   T34]  ? preempt_schedule_thunk+0x16/0x30
[  359.030718][   T34]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  359.030744][   T34]  watchdog+0xfd2/0xfe0
[  359.192946][   T34]  ? watchdog+0x1de/0xfe0
[  359.194759][   T34]  kthread+0x711/0x8a0
[  359.196469][   T34]  ? __pfx_watchdog+0x10/0x10
[  359.198371][   T34]  ? __pfx_kthread+0x10/0x10
[  359.200208][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  359.202254][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  359.204309][   T34]  ? __pfx_kthread+0x10/0x10
[  359.206172][   T34]  ret_from_fork+0x3fc/0x770
[  359.208072][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  359.210078][   T34]  ? __switch_to_asm+0x39/0x70
[  359.212051][   T34]  ? __switch_to_asm+0x33/0x70
[  359.214019][   T34]  ? __pfx_kthread+0x10/0x10
[  359.215645][   T34]  ret_from_fork_asm+0x1a/0x30
[  359.217169][   T34]  </TASK>
[  359.218801][   T34] Kernel Offset: disabled
[  359.220131][   T34] Rebooting in 86400 seconds..

VM DIAGNOSIS:
22:17:26  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000054 RBX=0000000000000054 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000068f6b0
R8 =ffff888106f18237 R9 =1ffff11020de3046 R10=dffffc0000000000 R11=ffffffff854f00f0
R12=dffffc0000000000 R13=ffffffff99af98d3 R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854f016c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055558e3f65c8 CR3=0000000029358000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000ff0000 0000ff0000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000000 RBX=ffff888136632f98 RCX=668414bcd236f000 RDX=ffffc900082c6b01
RSI=ffffffff8be333e0 RDI=ffffffff8be333a0 RBP=dffffc0000000000 RSP=ffffc900082c6a78
R8 =ffffc900082c7240 R9 =0000000000000000 R10=ffffc900082c6bb8 R11=fffff52001058d79
R12=ffffc900082c7250 R13=ffffc900082c0000 R14=ffffffff8dbded18 R15=dffffc0000000000
RIP=ffffffff81a65dde RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f200a6e56c0 CR3=0000000107bc4000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=6c08005208000100 000008060a016ce2
XMM02=010ba20008000480 0303801000518004 XMM03=ffff046e08005208 000100000008060a
XMM04=010480040fffffff ffffff046e080052 XMM05=0800010000000806 0a010ba200080004
XMM06=8003038010005180 046c080052080001 XMM07=00000008060a016c e200080040808410
XMM08=ae031002000cac03 0011f88088000ca4 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
