last executing test programs:

7m9.532588321s ago: executing program 2 (id=370):
r0 = socket(0x10, 0x3, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, <r1=>0x0}, &(0x7f0000cab000)=0xc)
setregid(0xffffffffffffffff, r1)
setgroups(0x1, &(0x7f0000000800)=[r1])
socket$inet6(0xa, 0x2, 0x3a)

7m9.532334626s ago: executing program 2 (id=371):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x4, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000006000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001bc0)={r1, 0x2f000000, 0x138, 0x4c, &(0x7f0000001cc0)="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", &(0x7f0000001c40)=""/76, 0x4000, 0x0, 0x47, 0x50, &(0x7f0000001ac0)="9c01bd6f9a6028c80d7364240fd78867d9d62eca43c565f2c5ac65dd4a0fadceb6c65dcb07f2421e69087e0f17b4eb709e4805f2722709c46bef17c4cb9aed9fb1c342179ea349", &(0x7f0000001a40)="408fd0050dc7945b483103067eca9bd26ffbe35abf0f88a103f6893dc2b1d1cdc2195d4ae89abc04ff5fe5d2466892c81015df835a7d47be4f852161bc4015e7564b08584290fe1762f943a653008ac5", 0x1, 0x8000000, 0x13}, 0x22)

7m9.372043384s ago: executing program 2 (id=372):
syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480), 0x1, 0x3f7, &(0x7f00000004c0)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x75b08000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x18)
syz_open_dev$tty1(0xc, 0x4, 0x1)
write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0)
open_by_handle_at(r3, &(0x7f0000000240)=@reiserfs_2={0x8, 0x2, {0xb}}, 0x0)

7m8.537313433s ago: executing program 2 (id=374):
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000002c0)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYRES16=0x0, @ANYRESOCT], 0x1, 0x2dd, &(0x7f0000000600)="$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")
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0)
mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='proc\x00', 0x16, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x12d7498, 0x0)
chroot(&(0x7f0000000100)='./file0\x00')
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0)
pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00')

7m8.410319445s ago: executing program 2 (id=375):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000060000000800000008"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000004d18110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r1, 0x2000300, 0xe, 0x0, &(0x7f0000000180)="74fa40b249c0d585699ce70fac7b", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

7m8.040016798s ago: executing program 2 (id=384):
r0 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x3, 0x285}, &(0x7f00000004c0)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_FSYNC={0x3, 0x40, 0x0, @fd_index=0x8, 0x0, 0x0, 0x0, 0xa8862b21d1a042f})
io_uring_enter(r0, 0x40f9, 0x217, 0xa5, 0x0, 0x0)

7m7.69048762s ago: executing program 32 (id=384):
r0 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x400, 0x3, 0x285}, &(0x7f00000004c0)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_FSYNC={0x3, 0x40, 0x0, @fd_index=0x8, 0x0, 0x0, 0x0, 0xa8862b21d1a042f})
io_uring_enter(r0, 0x40f9, 0x217, 0xa5, 0x0, 0x0)

5m29.471483854s ago: executing program 3 (id=1440):
syz_emit_ethernet(0x4a, &(0x7f0000000240)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2, 0x0, 0x0, 0x3}}}}}}}, 0x0)
syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000640)='./bus\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="009f587a31d53b5cb6077bd11087bb6e13aac56feecaaae0b009cee43814e80646ff2772abedb27f35c706ba7c624afb75f473956061ae41834d27270063fa18a3515f9ac6cd6f15a042b1edcd60bdeb55446beed1014aa13d43d399fb4f716b8a24502a8e3e697642b172841c89aecefe0cfb3c32d7c28955601f41fb90d51951d91a35a5abeb4ffceef5cf6e190ec9eb6f91a0d06882039b54dd4485b823414e06691b0244ca11ac0baeaeec1a96861d358464329c64b77e6ff2e2d8a6bb29268be3e7c46750210270d79e1054add6c2ef3f0373", @ANYRES32, @ANYBLOB="0680d051fae5df24b93cd1e5be4f78d78e8a7fedf2a73fc0528570290073e0c1abd3422de04520f8362c6a6af77c2b1698d8bae0972961aa03cff362c5a6515daa2f01a2e4e7d11efba3e1fc6b1b272e9bd51d80638b0318061b96d1d4ceac44fe80300ede16857d762f732ca60e85b421b2dcedd24422c1829d665bae1b2cb853ca3650308d99721f05d33819e2dd79cc9de4c73a5873ae23c9446030f27ec371a89a9979a1f14ca96291b71774d4dead6f339f8d86c69298b2b9c5022c43da9a56d145239381"], 0x1, 0x1282, &(0x7f0000002880)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0)
ftruncate(r0, 0x2000009)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0)

5m29.149085214s ago: executing program 3 (id=1441):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x60081, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15)
write$UHID_INPUT(r0, 0x0, 0x0)

5m28.963036512s ago: executing program 3 (id=1445):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)={0x30, 0x3, 0x8, 0x301, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8}, @CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8}]}]}, 0x30}}, 0x0)

5m28.962675452s ago: executing program 3 (id=1446):
syz_mount_image$jfs(&(0x7f0000000180), &(0x7f0000000100)='./file0\x00', 0x2010880, &(0x7f00000008c0)=ANY=[@ANYBLOB='gid=', @ANYRESHEX=0x0, @ANYBLOB="2c6e6f696e746567726974792c6e6f646973636172642c6e6f646973636172642c6572726f72733d636f6e74696e75652c696f636861727365743d69736f383835392d332c6469736361726400726573697a652c71756f74612c75737271756f74612c726573697a653d3078303030303030303030303030303d30372c696e746567726974792c646973636172642c6e6f71756f74612c6e6f71756f74612c657569643c8c72c5bf762ab3dd5153bdd55a1a291ea0696f2f1f0a7b31c91bccf7f4707502478f37599eb13d60653683e6a858f2a54586fd6dc9da99078d3e365b7fe2d52d0591c9c049673c6720ed91bb2b448310341bd4cf4f", @ANYRESDEC=0x0, @ANYRES16, @ANYRESHEX, @ANYRESDEC, @ANYRESOCT=0x0, @ANYRESDEC, @ANYRES64], 0xfe, 0x60ee, &(0x7f0000001080)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
getdents64(r0, 0x0, 0x0)

5m28.605297124s ago: executing program 3 (id=1447):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000341200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000ffffff1f18210000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000cc00000095"], &(0x7f0000000500)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

5m28.34356552s ago: executing program 3 (id=1450):
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00')
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}})
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x13)
r3 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000280)={0xfffffffe, 0x10000007, 0xc4, 0xfb, 0x1, "09000000b7fdad4f2571652838014c6cf99988", 0x5, 0x1})
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0xd)

5m28.167134839s ago: executing program 33 (id=1450):
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
r1 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00')
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}})
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x13)
r3 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCSETSW2(r3, 0x402c542c, &(0x7f0000000280)={0xfffffffe, 0x10000007, 0xc4, 0xfb, 0x1, "09000000b7fdad4f2571652838014c6cf99988", 0x5, 0x1})
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0xd)

4m25.337561049s ago: executing program 4 (id=2241):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000700)=ANY=[@ANYBLOB="12010000000000408c0d220000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000740)={0x2c, &(0x7f0000000980)=ANY=[@ANYBLOB="00000001000000090090"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x6828, 0x900)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0)
ioctl$EVIOCGKEYCODE(r1, 0x80084504, &(0x7f0000000180)=""/223)

4m23.785401795s ago: executing program 4 (id=2264):
r0 = gettid()
timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0)
ioctl$CEC_DQEVENT(r1, 0xc0506107, 0x0)
ioctl$CEC_DQEVENT(r1, 0xc0506107, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xcba42, 0x0)

4m22.88696058s ago: executing program 4 (id=2281):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_IMMEDIATE_DATA={0xc, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, 'L'}]}]}}}]}]}], {0x14}}, 0xe0}}, 0x0)

4m22.836139794s ago: executing program 4 (id=2282):
landlock_create_ruleset(&(0x7f0000000500)={0x21c1, 0x3, 0x3}, 0x18, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000006300)={0x2020, 0x0, <r1=>0x0}, 0x2020)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@setneightbl={0x1c, 0x43, 0x101, 0x70bd2b, 0x25dfdbfb, {}, [@NDTA_NAME={0x5, 0x1, '\x00'}]}, 0x1c}}, 0x0)
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x20000000, 0x4041}}, 0x50)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0x24, 0x0, 0x0)
syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0)
r5 = syz_open_dev$loop(&(0x7f0000000000), 0x4, 0x2080)
ioctl$LOOP_SET_FD(r5, 0x4c00, r4)
ioctl$LOOP_SET_FD(r5, 0x4c00, r5)
dup2(r4, r0)
r6 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x33, 0x0, 0x0)
ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, 0x0)
write$rfkill(0xffffffffffffffff, &(0x7f0000000340)={0x6, 0x0, 0x3, 0x0, 0x1}, 0x8)

4m22.604044273s ago: executing program 4 (id=2291):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_delroute={0x4c, 0x19, 0x901, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @ILA_ATTR_LOCATOR={0xc, 0x1, 0xfff}}, @RTA_GATEWAY={0x8, 0x5, @private=0xa010102}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x6}, @RTA_FLOW={0x8, 0xb, 0xc}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)

4m22.517168333s ago: executing program 4 (id=2294):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=ANY=[@ANYBLOB="440100001000130400000000f9dbdf25fe80000000000000000000000000000000000000000000000000ffffe000000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0100000000000000000000000000000000000032000000000000009f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000002abd7000000000000200020062000000000000004c001200726663343130362867636d28616573292900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000080018"], 0x144}, 0x1, 0x0, 0x0, 0x4000}, 0x40c0)

4m22.258700805s ago: executing program 34 (id=2294):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000980)=ANY=[@ANYBLOB="440100001000130400000000f9dbdf25fe80000000000000000000000000000000000000000000000000ffffe000000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc0100000000000000000000000000000000000032000000000000009f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000002abd7000000000000200020062000000000000004c001200726663343130362867636d28616573292900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000080018"], 0x144}, 0x1, 0x0, 0x0, 0x4000}, 0x40c0)

4m3.338588057s ago: executing program 1 (id=2509):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x8000, &(0x7f0000001900)=ANY=[@ANYBLOB='discard,keep_last_dots,iocharset=cp1251,utf8,errors=remount-ro,dmask=00000000000000000000010,iocharset=cp1250,sys_tz,uid=', @ANYRESHEX=0x0, @ANYBLOB=',gid=', @ANYRESDEC=0x0, @ANYBLOB='6\x00'], 0x2, 0x1548, &(0x7f0000000380)="$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")
mount$afs(&(0x7f00000019c0)=ANY=[@ANYBLOB='*\x00'], &(0x7f0000000080)='./file0\x00', 0x0, 0x181000, 0x0)

4m3.23354994s ago: executing program 1 (id=2512):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000080)={0x14, 0x88, 0xfa00, {r1, 0x30, 0x0, @ib={0x1b, 0x2, 0x889, {"00000000000000000000000000000001"}, 0x8d3a, 0x5, 0xcd41}}}, 0x90)

4m3.125199395s ago: executing program 1 (id=2515):
syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x410c84, &(0x7f0000000340), 0x1, 0x775, &(0x7f0000001180)="$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")
r0 = creat(&(0x7f0000000280)='./bus\x00', 0x2)
pwritev2(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)="ec", 0x1}], 0x1, 0xfffff, 0x0, 0x0)
r1 = open(&(0x7f0000000200)='./bus\x00', 0x44000, 0x0)
dup3(r1, r0, 0x0)
finit_module(r1, 0x0, 0x0)

4m2.932093169s ago: executing program 1 (id=2519):
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x2048c5, &(0x7f0000000400)={[{@shortname_winnt}, {@shortname_winnt}, {@rodir}, {@fat=@quiet}, {@fat=@flush}, {@shortname_winnt}, {@fat=@showexec}, {@fat=@dmask={'dmask', 0x3d, 0x100}}, {@fat=@tz_utc}, {@uni_xlate}, {@utf8no}, {@shortname_winnt}]}, 0x0, 0x27f, &(0x7f0000000e00)="$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")
r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00')
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0)
mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)
read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2100)

4m2.804862212s ago: executing program 1 (id=2525):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x1c, r1, 0x1, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x8000)

4m2.584383087s ago: executing program 1 (id=2528):
syz_usb_connect(0x3, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000bde5a44070275290f515010203010902120001000000000904"], 0x0)

4m2.410228391s ago: executing program 35 (id=2528):
syz_usb_connect(0x3, 0x24, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000bde5a44070275290f515010203010902120001000000000904"], 0x0)

2m46.227966044s ago: executing program 6 (id=3461):
r0 = syz_open_dev$rtc(&(0x7f0000000500), 0xd2a, 0x80)
ioctl$RTC_PIE_ON(r0, 0x7005)
ioctl$RTC_PIE_ON(r0, 0x7005)

2m46.227719081s ago: executing program 6 (id=3462):
syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000000)='./file1\x00', 0x4000, &(0x7f0000000e00)=ANY=[], 0x2, 0xc2d, &(0x7f00000001c0)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.throttle.io_serviced\x00', 0x275a, 0x0)
setreuid(0x0, 0xee00)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ioctl$FS_IOC_SETFLAGS(r0, 0xc0086c43, 0x0)

2m46.055917677s ago: executing program 6 (id=3463):
ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000001140)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)

2m45.08265272s ago: executing program 6 (id=3472):
syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x4018, &(0x7f0000000140)={[{}, {@time_offset={'time_offset', 0x3d, 0x4}}, {@dmask={'dmask', 0x3d, 0x400005}}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}, {@errors_remount}, {@discard}, {@allow_utime={'allow_utime', 0x3d, 0x4}}, {@errors_remount}, {@namecase}, {@keep_last_dots}]}, 0x1, 0x153b, &(0x7f0000001f80)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x3)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='nfsd\x00', 0x1000041, 0x0)

2m45.013708106s ago: executing program 6 (id=3474):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200408c4, &(0x7f0000000200)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10)
shutdown(r0, 0x1)

2m44.591406917s ago: executing program 6 (id=3486):
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./bus\x00', 0x1000840, &(0x7f0000000c00)=ANY=[@ANYBLOB='shortname=mixed,sys_immutable,nfs,iocharset=cp936,shortname=lower,rodir,nocase,codepage=860,shortname=lower,shortname=lower,shortname=win95,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c646973636172642c73686f72746e616d653d77696e39352c756e695f786c6174653d302c0061a98eed20cb46078e5a4a40eed4c77e7462b84482aa7061236bf6bf5f48d7580feb45e35df449cbc10bccc2d8eb7a405ecd33c7efe0552ac1485c1dc47fec07062af97740e17f7fed7c51b26811fd16e28ca3f29cfad88fc4c5504243392e01cbdde7b5c763979598f95f09b95d2c45628665902b30ddfbf9bbd38185eabec1312bac0ff85a1ffbe2a612f453253bf5fcac7dd1e683bf671e2c5362e5a7"], 0x43, 0x357, &(0x7f0000000140)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)

2m44.414153957s ago: executing program 36 (id=3486):
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./bus\x00', 0x1000840, &(0x7f0000000c00)=ANY=[@ANYBLOB='shortname=mixed,sys_immutable,nfs,iocharset=cp936,shortname=lower,rodir,nocase,codepage=860,shortname=lower,shortname=lower,shortname=win95,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c646973636172642c73686f72746e616d653d77696e39352c756e695f786c6174653d302c0061a98eed20cb46078e5a4a40eed4c77e7462b84482aa7061236bf6bf5f48d7580feb45e35df449cbc10bccc2d8eb7a405ecd33c7efe0552ac1485c1dc47fec07062af97740e17f7fed7c51b26811fd16e28ca3f29cfad88fc4c5504243392e01cbdde7b5c763979598f95f09b95d2c45628665902b30ddfbf9bbd38185eabec1312bac0ff85a1ffbe2a612f453253bf5fcac7dd1e683bf671e2c5362e5a7"], 0x43, 0x357, &(0x7f0000000140)="$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")
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)

2m35.956755933s ago: executing program 7 (id=3542):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'veth0_to_bond\x00', <r1=>0x0})
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000000)={r1, 0x1, 0x6}, 0x10)
close(r0)

2m35.897048375s ago: executing program 7 (id=3544):
syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x8e, 0xc6, 0x1e, 0x40, 0x7c9, 0x12, 0xc2f4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x3, 0xcb, 0x8e, 0x2f, 0x0, [], [{{0x9, 0x5, 0xf}}, {{0x9, 0x5, 0xd}}, {{0x9, 0x5, 0x9}}]}}]}}]}}, 0x0)

2m32.846054113s ago: executing program 7 (id=3584):
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2)
ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0})
write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="03"], 0xc8)

2m32.765888005s ago: executing program 7 (id=3587):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./bus\x00', 0x0, &(0x7f0000000100)={[{@checkpoint_diasble}, {@jqfmt_vfsold}, {@disable_ext_identify}, {@noinline_dentry}, {@fault_injection={'fault_injection', 0x3d, 0x1f}}, {@noinline_dentry}, {@prjjquota={'prjjquota', 0x3d, '&\x00\x00\x00\x00\x00\x00\xdd\xff\x00\x89\xc5\xa8+\xc9X\x15\xa0\n\xebU\xd4K\x96'}}, {}, {@discard_unit_segment}, {@test_dummy_encryption_v1}, {@lfs_mode}, {@noinline_xattr}, {@four_active_logs}, {@compress_cache}]}, 0xfd, 0x5529, &(0x7f0000000600)="$eJzs3L1vG2UYAPDHSdOmH5QIMbD1pAopkWqrTj8EW4FWfIhWVYGBCRzbsdzavih2nJCJgREx8J8gkJgY+RsYmNkQA4gNCeR7L9BAkZDixKT5/aTzc/fe6+ee14oiPXeWAzixlrJff67ExTgbEfMRcSGi2K+UW+FWCi9ExKWImHtsq5Tjfw6cjohzEXFxkjzlrJSnPr8yvnzjp7d++ea7M6fOf/H197NbNTBrL0ZEfyPtb/dTzDspPizHG+NuEfvXx2VMJ3qL6Xw/T+Pb7bUiw3Zjb16jiNc6aX6+sTWcxPVeozmJne56Mb4xSBccjjt7eYo3PGxsFset9loRu8O8iJ3ddN2d3fS/bXc4SnlaZb6PivQxGu3FNN7eaaf1bDwqYnMwKsdT3rzV3pnEcRnLy0Uz77WKOtYO8EH/z73dHWztZOP25rCbD7IbtfpLtfrNan0zb7VH7evVRr9183q23OlNplVH7Ub/VifPO712rZn3V7LlTrNZrdez5dvttW5jkNXrtWu1q9UbK+Xelez1e+9lvVa2PImvdgdbo25vmK3nm1l6x0q2Wrv28kp2uZ69c/d+dv/BnTt377/7we33771y983Xykn/KCtbXr26ulqtX62u1ldO0Po/KYue4vrhQCqzLgDg+NH/A7NwkP6//6g8fmL/v/kg4vD7/9D/T8Wx6n9Pev9/COuHA9H/AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACcWD8sfPlGsbOUjs+X48+UQ8+Vx5WImIuI359gPk7vyzlf5ln4l/kLf6vh20oUGSbXOFNu5yLiVrn99uxhfwoAAADw9Prq40ufpW49vSzNuiCOUrppM3fhwynlW4yIhaUfp5RtbvLy/JSSFX/fp2JnStmKG1iLU0qWbrmdmla2/2R+X1h8LFRSmDvScgAAgCOxvxM42i4EAACAo/TprAtgNiqx9yhz71lw8c37vx4Int13BAAAABxDlVkXAAAAABy6ov/3+38AAADwdEu//wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwB/s3M9t4kAUB+Bngxf2nxat9r6t7A3K2BJyzDGigDRBATlQQxqgBnJLCRFEeBwCEYdIHttK9H2SMxnL/HiD4DAz0gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB06aFaV3Hz97Ztzm7fTp7RAAAAAJdsq/Wi/meW+t+b+z+bW7+bfhERZURcmruP4stZ5qjJqV6fvzt9vnpTw31EnXB4j0lzfYuIf8319KvrTwEAAAA+r81yNU+z9fRnNnRB9Ckt2pQ//mfKKyKimj1mSisPeX8yhdXf73FcZ0qrF7CmmcLSkts4V9q71D/346rd9KQpUlNefNmxyGxjBwAAejQ6a/qdhQAAANCnq6ELYBhFvGxlHrcCJ6lptve+nvUAAACAD6gYugAAAACgc/X8v6fz//bO/wMAAIBhpPP/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6NK2Wi82y9W8bc5u306e0QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8Mz+vKNACIRBGOxd35nM/Q8rDZqamlSB8PE3BgMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC8+d1f/k9MjTPJ3Gtj6XkkWTs1tk6NvXPj6A/j69cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF/vzkgIhEARRMGf876Tvf1hJ0DOIEAENjypq0QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF/0u1/+T0yNM8ncaWPpeCRZu2psXTX2HjSOHoy3fwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFzv37xs3FQcA/Nk+X0kBcQR0QxACiQEWer2Wlm6IARQx8CcgRem1BK78aDPQqkJkYUOZuyAYEUICha3/Q+dW6lK2DjcUCTEess++c9sILlFjH8nnIz2/ry3H7/t8UpSvn3MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAUBq9O4uTbNOZxHFx7PaD6+tZf+eRPnNz++5K1rI4qjPp/4eXqztRt7lEAAAAODqSsr4PIdxLd1azPu7k9X9anpPV/D88O4nLev7Rur/sy9o/a7//dv/F6UCdyTjZRS9sDAcnH0+ldXCzXGzP/ecZrfzO589ekvwDiT/YemGU5vcz+u7WrffaeXisjmwBgP04UfZFUP49lPX9JhMD4MhoVQrvsv5POs3mBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFCH0VZ4uoyjEMJKaxZn7jy4vr5bf3P77krZzt64sR2+mV0zu0QaQriwMRycrHU2i+3K1Wufrg2Hg8tPIFgqrjnnT70SQniCo+8peKdM9aM5Tg6hgQz3E/x9wEO0mp7g/oK4+LAXJZ/GgyTMcXJDv5AAADi00qJldf29dGc1OxYthzD+8eH6//VKHOas/+9/fPZ2daxq/d+vbYaLr7d56YvelavX3ty4tHZxcHHw2Vun+m/3T587c+ZcL39W0vPEBAAAgD0bj8fj6U67aNX6P15+fP3/eCUOc9b/X37f/7o6cKL+39Vs0a/pTAAAAI6251/9689ol+NRux2+WtvcvNyfbKf7pybbBlLds2NFq9b/yXLTWQEAAAB1GG1FD63/n6/EYc71/2d+eumX6jWTEMJSsf5/Yv3z4fn6prPQ6viX46bnCAAAQLOWilZd/0/z9//j6SsPcQjhjdcmcfE1gP9a/6dF/Z+8/+3P1bGq7/+frm+KCynuTu5H3ndDaHWbzggAAIDD7KmiZcX+H+nO6ie/Hv+w7f1/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgLr9EwAA//8qZjvb")
syz_mount_image$fuse(0x0, &(0x7f0000000080)='./bus\x00', 0x10040d0, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x10000, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './bus'}}], [], 0x2c})
chdir(&(0x7f0000000140)='./file0\x00')
open(&(0x7f0000000240)='./file1\x00', 0x14d142, 0x0)
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20)
unshare(0x20000400)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone(0x62000000, 0x0, 0x0, 0x0, 0x0, 0x0)

2m32.070511803s ago: executing program 7 (id=3597):
syz_mount_image$bcachefs(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x800000, &(0x7f00000001c0)={[{@acl}, {@direct_io}, {@wide_macs}, {@fsck}, {@errors_ro}, {@norecovery}, {@journal_transaction_names}, {@reconstruct_alloc}, {@no_data_io}]}, 0x1, 0x5919, &(0x7f0000000500)="$eJzs3W2QXFXdIPBzu3synZm8TAJIBJkMgSiCmglvhS+l0fWtAKlYWErYKAxkgtEkpJIgEFCCCy4UYKGlpagf0EJq0WhRBatESuRlE1ZRitWltpBa3UU/+BTykBLIQ1k+zlMzfU9Pz52+c3t6ekICv18lc/ucPv0/5557+vY9p3umAwAAAK8Je6/ftv+coz7wqy8Ov3TNh3+26drQWx7Lr8YCfen2ileqhRxI3ZUlY9vsuHjTVT/488DF7/vl3T3ff3nPumPX//79h118/2fO3H3btx96cf69/3ymKG4cTyeOp5PnkhCqP9/39S/teezI0bwkhFBO+naGsChZ/NCiJBNi8O8hhHVpYm7mznteOmX96Pbam7on5C/MlDPeX9uq6Tjbsf/yk8If3rvmut8s/fGPunY9u3O8SFJtGE8hLLiw8fFd6diL4y+OtiXxwel2dQihp+FxZxS067gW278iJ310up2TbnsL4sT7l2XSpUy5bDrqymx7Cuqbqbx2tFuuyLxMOnsymqm8dsb8Ren2p+n2xGnGL8f/SSgloVJv/sZkfIyEhuOWhGRsDFTr6VL92IZ0/zPpJJMuZdLlrsx+jdWbDrRykkzMj+Uy+fF0XEnzj208Vzdxbk7+69NtNX2ivhzTIXujpnfSjfp+jYnt2jdFWw6EUsM5qFl+/cCnB+OqNK83WTzpMSNNxPv2rLl5eXntw3v7ctqR3F2rqXdsJE0//o5fL5r3qR/eeNmSvPgXltL489qK/8ezHn/+/Bu/963c+LfG+OW24p/8QM9zZz1y/bLc/tkX+6fSVvyhZx69ZenhF+3Kbf/tMX61rfirdj/ePX//Aw/mtn8w9s/ctuI//c4P/umuJ+97Njd+iPF72oq/dveWL3f37z8hN/6DsX962xs/L+w6/an+/r8M5MV/Isaf31b8O3fe9o47Ft50Zu7xXR37p6+t+Gcff/918/bfd0zeuTO5vVOvnACvTYeFEEZfI25I0+3OM2eqPH7zmwOV2jXfvPT//E5WlLn4HK1nQSfjAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAI4YiT/ueH/v/H+56rpOnu9MbTpdo25s8JIZkbQti2fWjr9g2bLxn4zKWXbd08tHFgaPvA8ObtW68cOPUtA1uHt2wcunL03sG3nlJ73OKQ1LbJMZPq7h4ZGSn1TcyL9f2n43f9YfkZ//LXEAaP+F1/Jbf9K27bdMfhTX5mJKtG3rPpsnN+d9p30/3qS9vV16RdIyMjIyGnXf963j/u+Oq+P58QwuDrpmrXo0+/+xcTGjSWMR4nVeoOtQZ1Jz1N21Fvddqe2F+V9Rs2Dg9O3b+jjy/n7Md/vurZv6+/4iv/qPVvNXc/WuzfuatGNpa+sebsf//G1bWMona9Use9qL/jXsT2xf6rpv29IN2vBTn7VcnZr+t/8+CTPz/qxhd3hsHKC0sn1120X13pAOhKXt9SvbGGnmTRhPxqWj4e8fi4Fds3bVmx7codb92waeiS4UuGN7995akrTx887fTTVozt+YoO73+s/40t7v+BGU8LP7fzp/Fna+OpqF1F/THaruL+aGxR3vOv59wvfe3ttz1yTi2jaJzH0vXzSbrtGT3OK0PDeJvcV832q6gfQggDzfrh+RfPDEf+nw3XFZ2HGo9M48+MZNXIY8v+9t0zvrPkXbWMA3Keb2xQm+f5eqvH2zPWX9X0eIwcpP3bHcrpfvU2bdfKxx7punnvXz9fb9+cOeGKoe3bt66s/ZyXtnRecnTTdmVz434tHftZDmm3hPowbTJeR3WFWvuy589YPNurvel9vcnipvuVFe/bs+bm5eW1D+/N6+nk7lqNc8P82jZ5Q07JjZkHlusNblb/wfr8Kxof/R/6zr0fv/cnp04aHyfXfhbtV5KzXz9+8s6vff8r//UnnduvD7378b6//d9PL69lHCrnlXqr0/YkjeeVk0Moev4tDc33I/f5V2q+P0XPv2w94+WbxxvIpHtDua3n68kP9Dx31iPXL8t9vu5r9fl69YRUueD5erCMn+zzK6lMbMfsPb8mDJRk1cgvbzhs50PXrD6qllE0ruulm43rU1qYf+Ts1y/Of6r/0oH/8r87d974wVvuueD3Q6u+UMto/7jHtnTmuFfT/q3m9G+91XHe2di/b7v40o3ravkH7/Vvui2Y/8RTybYrd3x2aOPG4a3bWtuvVl9PYz3ZXm739TSe3RYX7Fdp0n7N3o1W+qvV51ts/7q2+2vi8603JG29Luz49aJ5n/rhjZf1TXpUWtGFpTR+qa34fzzr8efPv/F738qNf2uMX2kr/tAzj96y9PCLduXGvz1J41fbir9q9+Pd8/c/8GBu/MHY/rltxX/6nR/8011P3vdsbvwQ4/e21/8v7Dr9qf7+v+TGfyJJ6xm9RgrhnpdOWV9LJ6Erfb7FdnRNaFfIppNMupRJlxvTpdpaa72CcpJMzI/l0vxjG9rSzCdy8uNVWHVJbftyTIfsjanzDzalhnN/s/yi61QAgFe7+P5/vAaN7/8PpxdK+SsNvLYlE4bGTOdhS/JqSedh4+s5cybcvySNHx8f1wH73xYGR7fXDtQu9Kf7PkJ8PmTXOWM9Jxw3MUa765xF6+/LMunYrtp6eaVhHpqaPK+phBbW3yfXM/X6e2b3i9fHB26Y1KyBhnWr7PHrSlfMmn3eIdPeymiEvPGRXReLn+foXxBWj9XX4vjIfo4mHofxz9GUJ6xfHZU5cbb7OZqZjo/Y7CnGx1iTi9/fmHz8whT9O378mkfLHr9pHO/qaPnZfn+2A+uGTU9pB27dcHbfD7MumRM/fYId7OuGMT/uR6XF9cSP5+R3aj0xni5iu/ZN0ZYDwXoi8GoV5//xNWJ0/j96Af5vmXJF16HZq8YYL/dzQuXm7Smad0z+nF5PW6/ja3dv+XJ3//4Tcq9zHmz1cz9bJqR6Cj73U9SPyzPpwn7MWaApmu9l6ynq9+znMnrD/Lb6/c6dt73jjoU3nZnb76trL6TF/f61Can5Bf1+CMwXmsc3X3hNzBdme/3sFZuPpB98mq35yMdy8qc7H+mZdKO+X2MOuflI14FtFwBw6Ijz//r7Z+n8///FAul1RNG89cRMOsbLnbfmXJ/kzVs/km6vyJTvTX+jYrrXzWcff/918/bfd0zuvOX2Vueh/21Cqq9wHjqzeXPuPGJ1Zz4vnjuPqM+zZjZPzG1/fZ44s3l6bvz6PH1m8+jc/qnPo2e2DpAbv74OcKjPcwvW6zKVxWSr63Wv2nl0+uuzszWPPjcnf7rz6N5JN+r7NcY8GgDglRXn//EyLs7/H8mUm+n77Lnzgg5dt2f/Hkg9/hMHal452/O+2Z63zva8frbXJQ71efFsrwvN7jrZa35enFZqXgwAwMEszv/npun8+f/M5ifN5m9dE+Yn5udN45ufHyTz80N9/cv83/vixcz/AQBe3eL8P/7aY/z7f/8jTWf/br15ek5883Tz9KnGT8vz9M6vswWfA3hl1wHmjpe3DgAAwCuha2ymNPn37D+ZbrO/Z5/3e/nn55RvVSW9PL5o+9bh4Qsu27JuaPvwBZsvXTe87YLLt27Yvn14c63cTOeNufOWdN7YFSppfzQvl523LUz/HsLCnL+HkC0fwx49dmPy30PIVju34O8IjB+/1tqbPX7xz9WWpijfbHzkHe+88fGJnPJR/fhf/OmTL1i/7YINmzds3zC0ccOO4YnlRmetPdP43szYLdP6vtTMj0lK0//+zs60ozSpHV1pf+R9P3uSaceitCWL8r7/IKfdv/pfX/3c8SP/uCuEwSPKb5hR/yWrRv77ecMf2b73d1tG21+asv31kmm7ir6vNFs+7k9l46Xbtp+0/tLLNme/UbI9cT2jVE/P0npG+vQvt7g+sTYnf7qfUyhPunFwanl9AgCACeL7//F6Nr5/+JX0Airmtz5Pn9n7x7nz9MHW5unZ7yUrmqdny8f9bXWeXp3hPD1bf948ujRF+Wbz9Lx5d178j+WUn67Wx8nMPueRO04ubG2cZL/PoGicZMtPd5wkMxwn2fqLxkmz8s3GSd5xz4v/0ZzyeVofDzP7XE7ueLi1tfHw5ky6aDxky093PJRmOB6y9ReNh2blm42HvOObF/+cnPKtmjg+RgfG2LgYvuDyS7d+tqHcbH//xczbN7vf/9Gu1ts/u5/7mv32z+7nyma//TP7XFlu+5+Y2UpY6+2f3e93adcBW69NP2xW9PmzonXcNTn5013HnTPpxsHJOi68cuL8P77dE+f/N6XbTr8NdOh/T5rvMWsav0PfY1Z0HeP1fIrKDgJezwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABa011ZMrbde/22/ecc9YFffXH4pWs+/LNN177pqh/8eeDi9/3y7p7vv7xn3bHrf//+wy6+/zNn7r7t2w+9OP/efz5TGLhv7GflxDRZDSF5Lgmh+vN9X//SnseOHM1LQgjlpG9nCIuSxQ8tSjIRBv8eQlhXb+fEO+956ZT1o9trb+qekL8wEyS7X6G3HNvT2M4QrijcIw5B1XSc7dh/+UnhD+9dc91vlv74R127nt05XiSpNoynEBZc2Pj4rhDC3PT/qDjalsQHp9vVIYSehsedUdCu41ps/4qc9NHpdk667S2IE+9flkmXMuWy6agrs+0pqG+m8trRbrki8zLp7MlopvLaGfMXpdufptsTpxm/HP8noZSESr35G5PxMRIajlsSkrFjWa2nS/VjG9L9z6STTLqUSZe7Mvs1Vm860MpJMjE/lsvkx9NxJc0/tvFc3cS5OfmvT7fV9In6ckyH7I2a3kk36vs1JrZr3xRtORBKDeegZvn1A58ejN40rzdZPOkxI03E+/asuXl5ee3De/ty2pHcnaTxk7bi7/j1onmf+uGNly3Ji39hKY1faiv+H896/Pnzb/zet3Lj3xrjl9uKf/IDPc+d9cj1y3L7Z1/sn0pb8YeeefSWpYdftCu3/bfH+NW24q/a/Xj3/P0PPJjb/sHYP3Pbiv/0Oz/4p7uevO/Z3Pghxu9pK/7a3Vu+3N2//4Tc+A/G/ultb/y8sOv0p/r7/zKQF/+JGH9+W/Hv3HnbO+5YeNOZucd3deyfvrbin338/dfN23/fMXnnzuT2Tr1yArw2HZZeY92QptudZ85Uw3zhmwOV2jXfvPT//E5WlDFaz4JZjA8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwKvTb68+9ZPnveejaypJCElOmZEm4n3lOatWDbRR79Azj96y9PCLdjXmLWkjDgAAAFAszsNL9ZxqWBIuT+aGo5uWj2sER8dUMjE/CaHSWD7Gya4RtBAnNItT6lCccofiVDoUp6tDceZ0KE53h+JUC+JUQ2tx5k4RpzI6KlpsT8+U7Wk9Tm+H4szrUJz5HYqzoENxFnYoTt+UcVofh4s6FGdxh+Ic1qE4h3cozhEdivO6DsU5skNxsmvK0x2H89OSR+XFGbtRLoxTScr1O5qtpx+Z1nPMDOvpLahnftHrcYv1zG2xnuMyjytNs55qi/W8cYb1JC3W8+YZ1lMqqCeO2yuy7Yv1xFSL4//KDsXZ0aE4V3UoztUdivP5DsX5QofiXDPDOACtivP/8fleX+iuvCv0pGec7CpAnO8uHfs5+fUu74QU470hkz+nKF52op6Jt3S67csuIGTiLcvkd02IV6nPR6aIV22MtzxzZ+H+ZhcUMu07MZPfXRQvu7AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALPot1ef+snz3vPRNSEJo/+aGmki3lees2rVQBv17llz8/Ly2of3NuZ1V9oIBAAAABSK8/Cuek41dFdWhu5kzoRy1XQdoJqmy321bf+CsHp0mwyUxtI9yaIpH1dJH7di+6YtK7ZdueOtGzYNXTJ8yfDmt688deXpg6edftqK9Rs2Dg/WfobQXRAvhDC2/LDtyh2fHdq4cXjrtlpmtv1L0sctSdNJ+rj+t4XB0e21afsXF9RXmlTf7N0oPnoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/wa7dhch51X8AP8/M7Mx02/yzf/o2Dc1myEuJWjSJW0m1dB8QLLRJyFKQ2epagk2wuGlCm5RYxzZgWxMUoSUQIrkwEoutxZu+2CL2hUCkRgNuDNIW7YVeKK1W0pILSRnJ7pzZmdmZzDqWpo2fz8U8M+f8zvk9Zy4Wvs8OAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB8sKaqIxOV0bHxwSSEpEtNrYM4l82nabmPvl9+fvv3C8OnVzaPFXJ9bAQAAAD0FHP4QGOkGAq5bMiGq6Y/LQ1NE2E29wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP97pqojE5XRsfGLkxCSLjW1DuJcNp+m5T76vvHOk595dXj4r81jpT72AQAAAHqLOTzTGCmGUlgWBpKrWuris4FFbevb6+I+i+dZ1/7soFvdsnnWXTPPuo/1qNtQv+4KAAAA8NEX83+uMTIUCrkFXfN/r1wf65a01WXr135+KwAAAAD8d2L+LzRGSqGQK8W8nuxuq++W95e21cW83+v/9nH9ii7re/0/f3396v/0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDRMVUdmaiMjo1nkxCSLjW1DuJcNp+m5T76rnlh8O+3HHloafNYIdfHRgAAAEBPMYfPRu9iKOQGw0C4eDr3D9908OkvPv3sSAhhJubn82HXph077l4z8xrrVh87MvC9o299a07d6pnX83ZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgfTNVHZmojI6NX5SEkHSpqXUQ57L5NC330ff1z33hz4+ffO7N5rFSH/sAAAAAvcUcPpv9i6EU8iEfrpj+1Jz1z8q0re/2zAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4cNzzjfu+vmlycvPd3njjjTeNN+f7LxMAAPB+WxKSUPsPXbnxfN81AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwYTBVHZmojI6NF5MQki41tQ7iXDafpuU++qbPHy8sOP3CS81jpT72AQAAAHqLOXw2+xdDKQyEgXD59KdOzwSm8//QB3iTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwIfKVHVkojI6Nr4gCSHpUlPrIM5l82la7qPvY7sPfPbwwu/e3DxWyPWxEQAAANBTzOH5xkgxFHIfD4Vwdf3zZOuCJFu/dn4uMLtue8uywXmvq7asy8573Z62k+Xqp5lZV4z7Dc1cG+vKc9eVm9aVQqN9uWVd2NeyakGP+wwAAABwHsX8X2iMDIVCrtCUc3/SUj8k5wIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXUxVRyYqo2PjSRJC0qWm1kGcy+bTtNxH3/t+8/+XfOWne3c2j5X62AcAAADoLebw2exfDKWwOPxfWDyd+8NQa32s+0flzOFH//mXlSGsuuLEcK592x/GN796/cYX219CyLRWZ0JYWO+XdOn36989eu/y2pnHQ1h1efbqOf3Cufu1bpnWnqlsXr/j6IntPb4cAAAAuEDE/D/QGBkKhdxdXfN/TN498n/DdABfeO/un19Wf60n8rYVmaF6v0yXfp9f/uSfVqz921tn8/+5+n3qwNbDl7U0nBlpk6S10a07N5y47lAmnnqmf7atf/xevvTNN/+1ZdcjZ2b6F0OxPr4o16n/3Nc2F6W1ycz+8XXv7a+29s91Of9Dv33p5C8X7X33bP93lgw2+l9zjvOfu//grQ/vu/7AkQ2t/UMI5U7933735nDlH+58sP38g20bN3/zza9tkrR2bOmpQ2sPlm5o7Z+09Y/f/89OPrbvx49859nYP/5WZOWy+fbPtPV/Zc+lu19+YOOi1v6ZLud/8bZXh7eVv/379vPf0bJrrutdzD3/E9c+dftrm9L726cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuLFPVkYnK6Nh4Jgkh6VJT6yDOZfNpWu6j7xu3HH/7tr0/+kHzWKmPfQAAAIDeYg6fzf7FUAr5kA+D07n/mcrm9TuOntgehmZmk/o1N7ntnh2f2LJt5113nKc7BwAAAOYr5v9cY2QoFHLLw0A9/49u3bnhxHWHMjH/Z2L+33Ln5OZVoVH3yp5Ld7/8wMZFjecEIUz/LKB4tu7Ts3U33Xh86NQfv7aiY92a2bpjS08dWnuwdEOsC811q0Pj+cQT1z51+2ub0vsb99dc98mvbpusP56I+w7e+vC+6w8c2dA4R/06WN831k1m9o+ve29/NdZl69di/dwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwFxT1ZGJyujYeMiGkHSpqXUQ57L5NC330Xfd8l88eMnp5xY3jxVyfWwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP9mBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCvv1FyJVFccB/JyZ3Xbc2dVdDbKidbWisIekIKJeKipCI4SeDAlL8yEKgojCHlpDI7GilyDrRaKCaguhIDdJtFijf9JLDxUUWA+BSAvlID1U7My54+x1bmN3Lag+H7icPefe+72/e8+ZOzsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAv8pA39Jme2j7g43bzrvpk8fvOf7YLe/dv/WSR1//YXzjDR/vGXzlxPSm5Zu/vnHJxn33rp7a9eLBX4bf+e1Iz+BHWs3K1K2FEI/FEGrvzzz3xPSn58yOxRBCNY5MhDAaFx8cjbmEVb+GEDa165y78+3jV26ebbfuHJgzvigXkr+vUK9m9bSMzK2X/5ZaWmdbGg9fFr69ft22z5e99Wb/5NGJk4fEWsd6CmHhhs7z+0MIC9I2K1ttS7OTU7s2hDDYcd7VPeq68DTrv7ygf35qz0ptvUdOtn9Frl/JHZfvZ/pz7WCP681Xvo7qaR5X1lCun38ZzVdRndn4aGrfTe3Kv5hfzbYYKjH0tcu/L55cI6Fj3mKIzbmstfuV9tyGdP+5fsz1K7l+tT93X83rpoVWjXHueHZcbjx7Hfel8eWd7+oubi8YPze1tfRBPZH1Q/6Plvopf7Tvqymra+ZPavknVDreQd3G2xOfJqOexupx8Snn/N5Ftm963VMXV9d/cGikoI64J6b8WCp/y2ejQ3e+seOhpUX5Gyopv1Iq/7s1h3+6Y8dLLxTmP5vlV0vlX7F/8NiaD7evKHw+M9nz6SuVf9eRj55edvbdk93mupm/O8uvlcq/burwwHBj/4HC+ldlz2dBqfxvrr35+9e+3Hu0MD9k+YOl8tdPPfDMwFjj0sL8A62PQr25Qkusn58nr/pqbOzH8aL8L7LnP9wlP/bMf3Vi1zUvL9q5unB9rs2ez0ip+m+9aN+2ocbeC4renXH3mfrmBPh/WpL+x3oy9cv+zpyvjt8Lz4/3tb6BhtI2fCYvlDN7nYV/Yz4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAH+wAwckAAAAAIL+v25HoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABPBQAA///PSyjp")

2m31.05564692s ago: executing program 7 (id=3610):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r0)
sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, r1, 0x301, 0x70bd2a, 0x25dfdbfd, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x40014}, 0x0)

2m30.903554223s ago: executing program 37 (id=3610):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r0)
sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, r1, 0x301, 0x70bd2a, 0x25dfdbfd, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x40014}, 0x0)

45.802380782s ago: executing program 8 (id=5073):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(r1, 0x1, &(0x7f0000000080)=0x6)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
r3 = socket(0x1e, 0x4, 0x0)
r4 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0xfffffffc}, 0x10)
setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
sendmmsg(r3, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000)
recvmmsg(r4, &(0x7f0000002840)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000480)=""/4085, 0xff5}], 0x1}, 0xbe58}], 0x1, 0x7ffeedc0, 0x0)
rt_tgsigqueueinfo(0x0, 0x0, 0x6, 0x0)
r5 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10)
r6 = socket(0x1e, 0x4, 0x0)
setsockopt$packet_tx_ring(r6, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10)
write(r5, 0x0, 0x0)
close(r6)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
socket$inet6_sctp(0xa, 0x1, 0x84)
ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x541b, &(0x7f00000002c0)=0x6)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff)
r7 = mq_open(&(0x7f00000003c0)='syzkaller\x00', 0x43, 0x104, 0x0)
mmap(&(0x7f0000ffa000/0x2000)=nil, 0x2000, 0xe, 0x13, r7, 0xd6b6d000)

44.215446022s ago: executing program 8 (id=5084):
syz_mount_image$jfs(&(0x7f0000000100), &(0x7f00000000c0)='./file1\x00', 0x1010006, &(0x7f0000002580)=ANY=[@ANYBLOB='quota,discard=0x000000000000aff9,iocharset=none,errors=continue,iocharset=macceltic,discard=0x0000000000000003,nodiscard,uid=', @ANYRESHEX=0x0, @ANYBLOB=',uid=', @ANYRESHEX=0xee01, @ANYBLOB="2c00b6a72eec97267bbe6ec140600f056a5df4cb9cdfa703d644acdde56170bb41c82f6fca9e8e17d047bdfb7fc1ae185e243d541bb86d23b0c9ea978e7f15ce67f723abf2079d8a15942d384d8b956c566ef833520077da1584bb98472561279c0a1afda673c195acf5c103e4d1a2ee8755c493efa580c91fd9302c78471997213b2bf6ecbc8d8e"], 0x24, 0x61b6, &(0x7f00000075c0)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.swap.current\x00', 0x275a, 0x0)
ioctl(r0, 0x1, &(0x7f0000000080))

43.886005401s ago: executing program 8 (id=5088):
r0 = socket$tipc(0x1e, 0x2, 0x0)
sendmsg$tipc(r0, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0xfffd}}, 0x10, 0x0}, 0x0)

43.74593983s ago: executing program 8 (id=5089):
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x3008000, &(0x7f0000000140)={[{@quota}, {@resgid={'resgid', 0x3d, 0xee00}}, {@bh}, {@noload}, {@data_err_ignore}, {@abort}]}, 0xfe, 0x452, &(0x7f0000000980)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x84)
lseek(r0, 0x1, 0x0)

43.623585508s ago: executing program 8 (id=5092):
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd71, 0xffffffffffffffff}, 0x78)
syz_usb_connect(0x3, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010003f6fdd140402090b975f601020301090224000201005004090400f700c873b808090504105802030d580904"], &(0x7f0000000e80)={0x0, 0x0, 0x0, 0x0})

42.899307213s ago: executing program 8 (id=5101):
bpf$ITER_CREATE(0x21, 0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000002c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100d0000000fbdbdf25010000001800018014000200766574683100000000000000000000001c0002800c00"], 0x48}, 0x1, 0x0, 0x0, 0x840}, 0x4008800)

42.426931779s ago: executing program 38 (id=5101):
bpf$ITER_CREATE(0x21, 0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f00000002c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100d0000000fbdbdf25010000001800018014000200766574683100000000000000000000001c0002800c00"], 0x48}, 0x1, 0x0, 0x0, 0x840}, 0x4008800)

15.322473368s ago: executing program 0 (id=5474):
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000280)='./file1\x00', 0x1a18814, &(0x7f0000000240)=ANY=[], 0x1, 0x1237, &(0x7f00000006c0)="$eJzs3E1rXFUYAOB3kon5qPlQ61cXeqgbV5cmC1eCBklBMgupRmgFcWonOOQ6E3KHQERtXbkV/Bfi0p0g/gE3/gWX3bjsQrjivZNk0qStlTJj6fNs7ptz3jfnXA4MnMs99/ab332+s11k2+1BTDUaMbUbke6kSDEVh17ZrK9Xr22ut1obV1K6vP7B6hsppaVXf/noyx8v/jo49+FPSz/Pxm8rH9/+cy0ibv2T/1m3SN0i9fqD1E7X+/1B+3remY5usZOl9F7eaRed1O0Vnb3R/rSd93d3D1K7d2NxYXevUxSp3TtIO52DNOin5nBKvZRlWVpcCO5p5lTLJ3c3bv1wpyzLiLKciaeiLMtyPhbiXDwdi7FULeIz8Ww8F+fj+XghXoyX4uUqa4x3AQAAAAAAAAAAAAAAAAAAAE+A+53/X44V5/8BAAAAAAAAAAAAAAAAAABgDN6/em1zvdXauJLSXET+7f7W/lZ9rfvXt6MbeXTiUizHX1Gd/q/V8eV3WxuXUmUlvslvDutv7m9Nn6xfrT4nMKxvVn2H9at1fTpZPxsLo/VrsRznzx5/7Yz6me8jXn9tpD6L5fj90+hHHjeqsY/rv15N6Z1b9ZziaPwLVd6xRjRG/2yOZ30AAADgUcjSkaP9+9sj+/csO91f74/r+od4PnDX/r4ZF+yhJ644+GKnneedvZPB3KmWBwWNiPjXyfcKGsNHLGfmxFzEf/7PYw2mHrZqerga908+/O7m5G/wcQvm/x/TeKyCif0kMUbHi36y/Y+LR+H8+GcFAAAAAAAAAADAgzyydwajcdb7v82o3yybHR3zrfgqm9wdAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPA3O3AsAAAAACDM3zqNjg0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgpAAAAP//d+24Qg==")
syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000240))
chdir(&(0x7f00000003c0)='./bus\x00')
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

15.158761443s ago: executing program 0 (id=5475):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="2c0000001800090400000001fedbdf250a000000000000000000008008001e0001000000080008"], 0x2c}}, 0x0)

15.158468165s ago: executing program 0 (id=5476):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="500000000206030000000000000000000000000705000100070000000900020073797a31000000000c0007800800130000000000050005000200000005000400010000000c000300686173683a6970"], 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000)

15.076455272s ago: executing program 0 (id=5477):
unshare(0x22020600)
r0 = socket$l2tp(0x2, 0x2, 0x73)
getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000700))

15.076343512s ago: executing program 0 (id=5478):
r0 = epoll_create1(0x0)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = dup(r1)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c)
sendmsg$inet6(r1, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043)
r3 = dup(r1)
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10)
shutdown(r1, 0x1)
close_range(r0, 0xffffffffffffffff, 0x0)

14.991887093s ago: executing program 0 (id=5480):
socket$inet6_sctp(0xa, 0x1, 0x84)
prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10)
epoll_create(0x3ff)
lstat(0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYRESOCT=r0], 0x48)
ioctl$BLKFLSBUF(0xffffffffffffffff, 0x1261, &(0x7f00000003c0))
socket$inet(0x2, 0x5, 0x3)
sync()
sync()
r1 = io_uring_setup(0x1694, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, &(0x7f0000000200), 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)

2.820838993s ago: executing program 9 (id=5598):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000003c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000bc0)={0x14, 0x88, 0xfa00, {0xffffffffffffffff, 0x30, 0x0, @ib={0x1b, 0x8, 0x889, {"00000000000000000000000000000001"}, 0x1119dff, 0xffffffff7fffffff, 0x100000000000cd41}}}, 0x90)

2.727714726s ago: executing program 9 (id=5599):
futex(0x0, 0x87, 0x0, 0x0, 0x0, 0x0)

2.673586133s ago: executing program 9 (id=5600):
r0 = getpid()
mount$bind(0x0, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0)
r1 = syz_pidfd_open(r0, 0x0)
close_range(r1, r1, 0x0)
syz_usb_connect(0x3, 0xb, &(0x7f0000001440)=ANY=[], 0x0)
ioctl$BTRFS_IOC_ADD_DEV(r1, 0x40085507, &(0x7f00000000c0)={{r1}, "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"})

2.08729455s ago: executing program 9 (id=5604):
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bd2)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000140), 0x8200, 0x0)
lsetxattr$trusted_overlay_upper(0x0, &(0x7f0000001600), &(0x7f0000001700)=ANY=[@ANYBLOB], 0xa8, 0x2)
ioctl$TIOCSSOFTCAR(r1, 0x5453, 0x0)

825.212327ms ago: executing program 9 (id=5612):
setresuid(0x0, 0xee00, 0x0)
r0 = inotify_init1(0x0)
capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7})
cachestat(r0, &(0x7f0000000000)={0xffff, 0x2}, 0x0, 0xee)

749.274612ms ago: executing program 9 (id=5615):
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000086552108cd0c6900556e010203010902120001000000000904"], 0x0)

749.088952ms ago: executing program 5 (id=5616):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000080)={[{@nobh}, {@auto_da_alloc}, {@data_err_ignore}]}, 0x1, 0x4cd, &(0x7f0000000c80)="$eJzs3M9vFGUfAPDvbHdpgZfXioiCKAU0Nia2UFA4eMHExIMmRjzIsWkrQRYwtAchREpi8Ezi3Xg03jTxqkfjyT8ADx5MDAkxXABPa2Z3pt3ur+7CtqXs55Ns+zwzz8zzPDPzzD77PDsbwMAaS/8kEf+LiFsR8VQtujLBWO3f/btXZx7cvToTi5XKqX+Sarp7aTyTb7c9i4wXIgpfJg07rJm/fOXcdLk8dymLTy6c/2xy/vKV18+enz4zd2buwtSJE8eOHjn+5tQbvVeqRX5pve7t/eLivj3vnr75/kwxXz6S/a+vR1vF3oox1mHdK73t6rG3oy6cNB+na+taGLo2kl3WpbT9Xy0fPL3RBQLWTaVSqQy3X71YaXS9aQmwaSWx0SUANkb+Rp9+/s1f69T1eCzcOVn7AJTW+372qq0pRiFLU2r4fNtPYxHx8eK/36Sv6DQO8ecaFQAAGDi/nMx7go39v0Lsrkv3/2wOZTQino6InRHxTETsiohnI6ppn4uI5xszSCIqHfLf1RBfzv/HbBahcPuRK9lB2v97K5vbWtn/y3t/MTqUxXZE5B3mucPZMRmP0vAnZ8tzR9rsf8sq+df3/9JXmn/eF8zKcbvYMEA3O70w/XC1bXbnesTeYmP9k2J64vJpnCQi9kTE3h72O1oXPvvad/uWIqWV6Vavf1WlxZRez/NxrVS+jXi1dv4XY8X5X84x6Tw/OTkS5bnDk+lVcLhlHr/9fuODdvmvWv+f/mrc5J3jP5961GovSc//trrrP/L52+X6jyYRydJ87XxEZai3PG788VV1v2OHmtc97PW/JfmoGs7b1+fTCwuXjkRsSd5rXj61vG0ez9On9R8/1Lr978y2SY/ECxGRXsQvRsRLEbE/K/uBiDgYES2qtuTXt1/+tN26Lq//NZPWf7bl/W/F+V+er+8ykG+cLhk6d+DWgzY3j+7O/7FqaDxb0vr+l6y4RXRb0kc7egAAALA5FKL63f/CxFK4UJiYqI0B7YpthfLF+YX9EXFhtvaMwGiUCvlIV208uJTk45+jdfGphvjRbNz466Gt1fjEzMXy7EZXHgbc9mqbT5raf+rvHsd5gU2oD/NowCa1WvvffXOdCgKsO+//MLjq2v9imySLvikDTybv/zC4WrX/a/F9x2cX3DNg86toyzDQtH8YXMX4cClcfey55dO2wJPI+z8MpF6f6+8tUBluvWokWvxiwMjaFGNri7w2JJD2rPq4w1JEdJd468NkkXcB2//CQ6G3HQ5H86qh6LRV0sPvOOSB9KismvjM7r5f/PlvovT7svlhuZ2WujzdfQpsyO0IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg7/4LAAD///QJ1ng=")
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_CQM(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x38, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_INTVL={0x6, 0x7, 0x6f}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x54}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x10}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x400}, 0x84)

666.004133ms ago: executing program 5 (id=5617):
syz_usb_connect(0x2, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0xce, 0x30, 0xe5, 0x40, 0x61d, 0xc170, 0xe559, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xc4, 0x9, 0x0, 0xf6, 0xae, 0x21, 0x40}}]}}]}}, 0x0)

91.807979ms ago: executing program 5 (id=5618):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x8f}}, &(0x7f0000000480)='GPL\x00'}, 0x80)

91.494096ms ago: executing program 5 (id=5619):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
writev(r0, &(0x7f0000002980)=[{&(0x7f00000015c0)="ed3871d1a063d6612c18a2635c5f9c36636ff03da32fc7da1593e22adf0decb17a389e0c4bd276afd6ef250232e76da03ef819f9ef5aa87ed5bf8e739daa3c101b2f8f07ecbe84ac0880aa2c8f2a77a19fc2599d5aa72b55e7dc10bbd3fd327bdc7e33d2fff57cc4cb9a300205d229cd8ee045151b05f73c2300abe770636887b3627c5c8131f05a109dc0ffcbc59e3b9a60f7111bbed259028756dd3a617903924348a3d78022fc19f48e8c99958bd65d980c012805592d6ab5857f405e5b2c14b8710a980416e51c42b99599096bda36ce5e4ba01c46", 0xd7}, {&(0x7f0000000300)="6a6f883d", 0x4}, {&(0x7f00000016c0)="615aa2b87241866b6b1227f1c8a9b5ef0fc4f8add5deae3ff728dc0035cb159d563c5c71dcc788804c0d1e64c150b9f2d5f41149feff74b5e4d348a3b7b27026f6ac26a00b5c5eb65c4fd268e2e9170712ea13ad2ac7b833d64da9a453ce12956dea23742b70e000d1e2692392164388abf1ce803abe6dae83787ec763ba2a749340948ed52704adee86de5a21318ac71dbe51e7064f7fd0bef8c179c1138a7fdd76a88167bbb7a11d94a2cd70a96403346ea69a5ba8974a6c253ea9e7473b1331cbedaed5d806e35230792544b3fd63db2d2bd5bdfa5dc60152bb69e54fea131b1705e1dda9", 0xe6}, {&(0x7f00000017c0)="852b02091046b4feafe6c75ada06acac925e16eb7c4f0631263c07c2e97b9f8adcceb41730de9827c7415b1f86827b083fe0030be236abb702df0b3055220ea9216ea735201265ec5018349c9a919cc0b7095bf6811354f29a33c4a87783ed11a048e0787f1eaf44192f76c26f35c48041018e450d1080b3a3b21d2824349d9a38d4b0190c599c829cbe798f8d45baef08f514a069037bfa7d9132579bea8550e7d4dd64991e9965d0e4c355af3d988f1965eb46d2", 0xb5}, {&(0x7f0000001880)="2a09245db6266ef6c12ba8e761518298d665022ae591773091314c0981c493923c5a651f07b118f599b4692188e7fe6cce2694d92bc0e3f40d037658c08f7c97ae2c205281c6f8f703588e92b2ddca5930330ad819ccb1f79cf58e6a90c4a8305a3017b7b4", 0x65}, {&(0x7f0000001900)="ac5d24b52716affe4242fada1cec03f668172f2e1ac222e0cb9ec17e1ca0770a94d8768ee13fceb8b82ae5645dbfd7942961cd036135cbd6f7e91d4b81b6d456555012c6d1b7e2b33d3a4f0a84b98758812886a97a66800ae6d1a1b749dba1d7a832ca37fbfd1f45ab5087fbd6", 0x6d}, {&(0x7f0000001980)="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", 0xb79}], 0x7)
setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000000), 0x4)
recvmmsg(r1, &(0x7f0000002f80)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x2040, 0x0)

201.355µs ago: executing program 5 (id=5620):
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet6(r0, &(0x7f00000003c0)={0xa, 0x4e21, 0x400d, @remote, 0xb5}, 0x1c)
bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)

0s ago: executing program 5 (id=5621):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB="020100020e0000000093ffffff00000005000600332000000a00000000000000fc020000000000000000000000000000000000000000000005000500000000000a0000000000000000000000000000000000ffffffffffff00000000000000000200130003"], 0x70}, 0x1, 0x7}, 0x0)

kernel console output (not intermixed with test programs):

lue for 'mpol'
[  335.169107][T13380] loop6: detected capacity change from 0 to 128
[  335.719829][T13369] loop5: detected capacity change from 0 to 40427
[  335.771933][T13369] F2FS-fs (loop5): invalid crc value
[  336.229281][T13369] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  336.243149][T13369] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4
[  336.973493][T13426] loop5: detected capacity change from 0 to 1024
[  336.978240][T13426] EXT4-fs: Ignoring removed nomblk_io_submit option
[  337.014405][T13426] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  337.039659][T11594] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  337.402846][T13436] netlink: 'syz.5.3035': attribute type 1 has an invalid length.
[  338.214762][T13467] pimreg: entered allmulticast mode
[  338.218105][T13467] pimreg: left allmulticast mode
[  339.067305][T13487] loop6: detected capacity change from 0 to 512
[  339.237451][T13491] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3060'.
[  341.385963][T13542] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3083'.
[  341.495102][T13554] loop5: detected capacity change from 0 to 128
[  344.965058][T13611] loop5: detected capacity change from 0 to 1024
[  344.985936][T13611] EXT4-fs: Ignoring removed bh option
[  345.006244][T13611] EXT4-fs (loop5): invalid inodes per group: 204800
[  345.006244][T13611] 
[  345.433625][T13615] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3114'.
[  345.778631][T13633] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3122'.
[  345.832953][T13623] loop6: detected capacity change from 0 to 32768
[  345.843991][T13635] bridge0: port 2(bridge_slave_1) entered disabled state
[  345.861980][T13623] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  345.892098][T13623] XFS (loop6): Ending clean mount
[  345.895998][T13623] XFS (loop6): Quotacheck needed: Please wait.
[  345.933466][T13623] XFS (loop6): Quotacheck: Done.
[  346.033615][T12174] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  346.367145][   T33] audit: type=1326 audit(1757969718.844:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13620 comm="syz.5.3116" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbfd58eba9 code=0x7fc00000
[  346.386029][   T33] audit: type=1326 audit(1757969718.844:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13620 comm="syz.5.3116" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbbfd58eba9 code=0x7fc00000
[  346.433509][   T33] audit: type=1326 audit(1757969718.844:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13620 comm="syz.5.3116" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbfd58eba9 code=0x7fc00000
[  346.461672][   T33] audit: type=1326 audit(1757969718.844:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13620 comm="syz.5.3116" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbfd58eba9 code=0x7fc00000
[  346.479989][   T33] audit: type=1326 audit(1757969718.844:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13620 comm="syz.5.3116" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbfd58eba9 code=0x7fc00000
[  346.495835][   T33] audit: type=1326 audit(1757969718.844:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13620 comm="syz.5.3116" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbfd58eba9 code=0x7fc00000
[  346.505404][   T33] audit: type=1326 audit(1757969718.844:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13620 comm="syz.5.3116" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbfd58eba9 code=0x7fc00000
[  346.516009][   T33] audit: type=1326 audit(1757969718.844:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13620 comm="syz.5.3116" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbfd58eba9 code=0x7fc00000
[  346.524457][   T33] audit: type=1326 audit(1757969718.844:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13620 comm="syz.5.3116" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbfd58eba9 code=0x7fc00000
[  346.535983][   T33] audit: type=1326 audit(1757969718.844:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13620 comm="syz.5.3116" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbfd58eba9 code=0x7fc00000
[  346.616268][T13672] loop5: detected capacity change from 0 to 32768
[  346.728707][T13672] bcachefs (loop5): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=crc64,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,recovery_pass_last=set_may_go_rw,reconstruct_alloc,no_data_io
[  346.728729][T13672]   allowing incompatible features above 0.0: (unknown version)
[  346.728737][T13672]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  346.745095][T13672] bcachefs (loop5): Using encoding defined by superblock: utf8-12.1.0
[  346.748177][T13672] bcachefs (loop5): recovering from clean shutdown, journal seq 10
[  346.751510][T13672] bcachefs (loop5): Version upgrade required:
[  346.751510][T13672] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[  346.751510][T13672] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive
[  346.751510][T13672]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance
[  346.781765][T13672] bcachefs (loop5): dropping and reconstructing all alloc info
[  346.793375][T13672] bcachefs (loop5): invalid bkey in btree_node btree=inodes level=0: u64s 18 type inode_v3 0:536870913:U32_MAX len 0 ver 0: (unpack error)
[  346.793406][T13672]   invalid variable length fields, deleting
[  346.804666][T13672] bcachefs (loop5): accounting_read... done
[  346.814700][T13672] bcachefs (loop5): alloc_read... done
[  346.817065][T13672] bcachefs (loop5): snapshots_read... done
[  346.820036][T13672] bcachefs (loop5): check_allocations... done
[  346.852936][T13672] bcachefs (loop5): going read-write
[  347.185817][T13672] bcachefs (loop5): Fixed errors, running fsck a second time to verify fs is clean
[  347.199770][T13672] bcachefs (loop5): done starting filesystem
[  347.225168][ T1093] bcachefs (loop5): bucket incorrectly unset in freespace btree
[  347.225212][ T1093]   u64s 5 type deleted 0:25:0 len 0 ver 0, , continuing
[  347.245671][T13672] bcachefs (loop5): dirent to missing inode:
[  347.245719][T13672]   u64s 7 type dirent 4096:2695648408715017799:U32_MAX len 0 ver 0: file2 -> 536870913 type reg
[  347.245725][T13672]   emergency read only at seq 11
[  347.257915][T12330] bcachefs (loop5): going read-only
[  347.259936][T12330] bcachefs (loop5): finished waiting for writes to stop
[  347.286301][T12330] bcachefs (loop5): flushing journal and stopping allocators, journal seq 11
[  347.290976][T12330] bcachefs (loop5): flushing journal and stopping allocators complete, journal seq 11
[  347.297834][T12330] bcachefs (loop5): unclean shutdown complete, journal seq 11
[  347.308464][T11594] bcachefs (loop5): shutting down
[  347.311977][T12330] bcachefs (loop5): done going read-only, filesystem not clean
[  347.337529][T11594] bcachefs (loop5): shutdown complete
[  347.912589][T13713] loop6: detected capacity change from 0 to 2048
[  347.948908][T13713] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  347.955129][T13713] ext4 filesystem being mounted at /161/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  347.986209][T12174] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  348.073312][T13720] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3153'.
[  348.355753][T13728] loop6: detected capacity change from 0 to 512
[  348.847308][T13747] loop6: detected capacity change from 0 to 4096
[  348.919968][T13747] ntfs3(loop6): ino=5, "/" indx_read
[  349.365114][T13753] loop5: detected capacity change from 0 to 4096
[  349.405163][T13754] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  349.598144][T13766] loop5: detected capacity change from 0 to 128
[  349.604393][T13766] ext2: Unknown parameter 'dont_appraise'
[  350.454026][T13793] loop6: detected capacity change from 0 to 47
[  350.620570][T13793] minix: Unknown parameter '184467440737095516150xffffffffffffffff18446744073709551615V?Cp~'~8pٻ젌|^(coM)'
[  350.727397][T13793] syz.6.3184: attempt to access beyond end of device
[  350.727397][T13793] loop6: rw=1, sector=48, nr_sectors = 2 limit=47
[  350.741811][T13793] buffer_io_error: 6 callbacks suppressed
[  350.742206][T13793] Buffer I/O error on dev loop6, logical block 24, lost async page write
[  350.753384][T13793] syz.6.3184: attempt to access beyond end of device
[  350.753384][T13793] loop6: rw=1, sector=50, nr_sectors = 2 limit=47
[  350.761358][T13793] Buffer I/O error on dev loop6, logical block 25, lost async page write
[  351.115071][T13815] netlink: 'syz.0.3195': attribute type 10 has an invalid length.
[  351.141329][T13815] 8021q: adding VLAN 0 to HW filter on device team0
[  351.145072][T13815] team0: entered allmulticast mode
[  351.147101][T13815] team_slave_0: entered allmulticast mode
[  351.149346][T13815] team_slave_1: entered allmulticast mode
[  351.155024][T13815] bridge0: entered allmulticast mode
[  351.163322][T13815] bond0: (slave team0): Enslaving as an active interface with an up link
[  351.429817][T13840] netlink: 182 bytes leftover after parsing attributes in process `syz.0.3208'.
[  352.310416][ T5988] usb 7-1: new full-speed USB device number 7 using dummy_hcd
[  352.727867][T13885] netlink: 'syz.0.3228': attribute type 11 has an invalid length.
[  352.731227][T13885] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3228'.
[  352.910920][T13889] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input18
[  353.618779][T13918] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  355.441872][ T5988] usb 7-1: unable to get BOS descriptor or descriptor too short
[  355.461029][ T5988] usb 7-1: unable to read config index 0 descriptor/start: -71
[  355.465367][ T5988] usb 7-1: can't read configurations, error -71
[  356.238761][T13972] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3263'.
[  357.265803][T14015] loop6: detected capacity change from 0 to 40427
[  357.270684][T14015] F2FS-fs (loop6): build fault injection rate: 14
[  357.273328][T14015] F2FS-fs (loop6): build fault injection type: 0x3bfe8c
[  357.278132][T14015] F2FS-fs (loop6): invalid crc value
[  357.294874][    C0] F2FS-fs (loop6): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  357.307223][    C0] F2FS-fs (loop6): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  357.357199][T14015] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  357.361292][T14015] F2FS-fs (loop6): inject page alloc in f2fs_grab_cache_folio of __get_meta_folio+0x157/0x4f0
[  357.367372][T14015] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  357.403132][T14015] F2FS-fs (loop6): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x1d9/0xa40
[  357.411264][T14015] F2FS-fs (loop6): inject inconsistent footer in sanity_check_node_footer of f2fs_get_dnode_of_data+0xab1/0x1cf0
[  357.416336][T14015] F2FS-fs (loop6): inconsistent node block, node_type:0, nid:13, node_footer[nid:13,ino:3,ofs:191623,cpver:0,blkaddr:0]
[  357.435320][T14026] sctp: [Deprecated]: syz.0.3287 (pid 14026) Use of struct sctp_assoc_value in delayed_ack socket option.
[  357.435320][T14026] Use struct sctp_sack_info instead
[  357.447761][T14015] F2FS-fs (loop6): Stopped filesystem due to reason: 0
[  357.643657][ T5238] Bluetooth: hci1: unexpected event for opcode 0x2029
[  357.803911][T14041] netlink: 'syz.0.3293': attribute type 26 has an invalid length.
[  357.808147][T14043] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3295'.
[  358.805409][T14079] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  360.115695][   T33] kauditd_printk_skb: 26 callbacks suppressed
[  360.115711][   T33] audit: type=1326 audit(1757969732.594:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14108 comm="syz.0.3326" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86ac58eba9 code=0x7ffc0000
[  360.130567][   T33] audit: type=1326 audit(1757969732.594:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14108 comm="syz.0.3326" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86ac58eba9 code=0x7ffc0000
[  360.142706][   T33] audit: type=1326 audit(1757969732.594:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14108 comm="syz.0.3326" exe="/syz-executor" sig=0 arch=c000003e syscall=123 compat=0 ip=0x7f86ac58eba9 code=0x7ffc0000
[  360.153545][   T33] audit: type=1326 audit(1757969732.594:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14108 comm="syz.0.3326" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86ac58eba9 code=0x7ffc0000
[  360.812049][T14147] netlink: 176 bytes leftover after parsing attributes in process `syz.5.3343'.
[  360.878271][T14150] netlink: 212376 bytes leftover after parsing attributes in process `syz.6.3345'.
[  361.054943][T14162] netlink: 'syz.6.3349': attribute type 3 has an invalid length.
[  361.073148][T14162] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3349'.
[  361.126961][T14168] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3351'.
[  361.700136][ T5998] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  361.706148][ T5998] Bluetooth: hci1: Injecting HCI hardware error event
[  361.719630][ T5238] Bluetooth: hci1: hardware error 0x00
[  362.603366][T14215] loop6: detected capacity change from 0 to 32768
[  362.617240][T14215] bcachefs (/dev/loop6): error validating superblock: Invalid superblock section clean: entry type btree_keys overruns end of section
[  362.617240][T14215] clean (size 2912):
[  362.617240][T14215] flags:          0
[  362.617240][T14215] journal_seq:    8
[  362.617240][T14215] prio_ptrs: 
[  362.617240][T14215] usage: type=key_version v=0
[  362.617240][T14215] usage: type=reserved v=0
[  362.617240][T14215] usage: type=reserved v=0
[  362.617240][T14215] usage: type=reserved v=0
[  362.617240][T14215] usage: type=reserved v=0
[  362.617240][T14215] data_usage: btree: 1/1 [0]=2816
[  362.617240][T14215] data_usage: journal: 1/1 [0]=0
[  362.617240][T14215] data_usage: user: 1/1 [0]=32
[  362.617240][T14215] dev_usage: dev=0  
[  362.617240][T14215]   free: buckets=83 sectors=0 fragmented=0
[  362.617240][T14215]   sb: buckets=25 sectors=6152 fragmented=248
[  362.617240][T14215]   journal: buckets=8 sectors=2048 fragmented=0
[  362.617240][T14215]   btree: buckets=11 sectors=2816 fragmented=0
[  362.617240][T14215]   user: buckets=1 sectors=32 fragmented=224
[  362.617240][T14215]   cached: buckets=0 sectors=0 fragmented=0
[  362.617240][T14215]   parity: buckets=0 sectors=0 fragmented=0
[  362.617240][T14215]   stripe: buckets=0 sectors=0 fragmented=0
[  362.617240][T14215]   need_gc_gens: buckets=0 sectors=0 fragmented=0
[  362.617240][T14215]   need_discard: buckets=0 sectors=0 fragmented=0
[  362.617240][T14215] clock: read=0
[  362.617240][T14215] clock: write=1288
[  362.617240][T14215] btree_root: btree=extents level=0 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 249e7ae2af8ee3
[  362.617353][T14215] bcachefs: bch2_fs_get_tree() error: invalid_sb_clean
[  362.668255][    C1] vkms_vblank_simulate: vblank timer overrun
[  363.239226][T14235] netlink: 'syz.5.3380': attribute type 5 has an invalid length.
[  363.703388][T14246] loop6: detected capacity change from 0 to 40427
[  363.707874][T14246] F2FS-fs (loop6): Invalid Fs Meta Ino: node(0) meta(2) root(0)
[  363.711150][T14246] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[  363.719274][T14246] F2FS-fs (loop6): invalid crc value
[  363.774188][T14246] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  363.786061][T14246] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[  363.788852][T14246] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4
[  363.810680][T14246] syz.6.3385: attempt to access beyond end of device
[  363.810680][T14246] loop6: rw=2051, sector=36912, nr_sectors = 8152 limit=40427
[  363.816164][T14246] syz.6.3385: attempt to access beyond end of device
[  363.816164][T14246] loop6: rw=2051, sector=45096, nr_sectors = 85976 limit=40427
[  363.835908][T14246] F2FS-fs (loop6): Issue discard(4614, 4614, 1019) failed, ret: -5
[  363.839003][T14246] F2FS-fs (loop6): Issue discard(5637, 5637, 10747) failed, ret: -5
[  363.850596][ T5238] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  364.165984][T14271] loop6: detected capacity change from 0 to 1024
[  364.207788][   T32] hfsplus: b-tree write err: -5, ino 4
[  365.090057][   T33] audit: type=1326 audit(1757969737.564:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14272 comm="syz.6.3395" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe828d8eba9 code=0x7fc00000
[  365.371415][T14319] loop6: detected capacity change from 0 to 32768
[  365.386926][T14319] XFS: noikeep mount option is deprecated.
[  365.415071][T14319] XFS (loop6): DAX unsupported by block device. Turning off DAX.
[  365.424853][T14319] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  365.471060][T14319] XFS (loop6): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  365.480013][T14319] XFS (loop6): Starting recovery (logdev: internal)
[  365.494447][T14319] XFS (loop6): Ending recovery (logdev: internal)
[  365.520095][T12174] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  366.119231][T14363] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3430'.
[  366.343961][   T47] usb 7-1: new low-speed USB device number 9 using dummy_hcd
[  366.516157][   T47] usb 7-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  366.519683][   T47] usb 7-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  366.533237][   T47] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  366.542708][   T47] usb 7-1: string descriptor 0 read error: -22
[  366.544915][   T47] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  366.549078][   T47] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  366.650736][   T47] usb 7-1: 0:2 : does not exist
[  366.847656][T12330] usb 7-1: USB disconnect, device number 9
[  367.037407][T14381] sctp: [Deprecated]: syz.5.3438 (pid 14381) Use of int in max_burst socket option deprecated.
[  367.037407][T14381] Use struct sctp_assoc_value instead
[  367.305566][T14393] overlayfs: failed to clone lowerpath
[  367.670281][T14416] overlayfs: missing 'lowerdir'
[  368.028246][T14430] loop6: detected capacity change from 0 to 2048
[  368.047157][T14430] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  368.867290][T14443] netlink: 'syz.0.3467': attribute type 5 has an invalid length.
[  368.870897][T14443] netlink: 'syz.0.3467': attribute type 5 has an invalid length.
[  368.874412][T14443] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.3467'.
[  369.058766][T14451] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.3471'.
[  369.102776][T14453] loop6: detected capacity change from 0 to 256
[  369.105519][T14453] exfat: Deprecated parameter 'namecase'
[  369.109628][T14453] exFAT-fs (loop6): Medium has reported failures. Some data may be lost.
[  369.118150][T14453] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x7f1fc68d, utbl_chksum : 0xe619d30d)
[  369.395517][T14467] IPVS: set_ctl: invalid protocol: 1 224.0.0.1:20003
[  369.608639][ T5958] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  369.699918][ T5958] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  369.777359][ T5958] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  369.939177][ T5958] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  370.308363][ T5998] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  370.316098][ T5998] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  370.320192][ T5998] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  370.324612][ T5998] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  370.328055][ T5998] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  370.358864][T14490] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3491'.
[  370.484221][ T5958] bridge_slave_1: left allmulticast mode
[  370.485994][ T5958] bridge_slave_1: left promiscuous mode
[  370.489766][ T5958] bridge0: port 2(bridge_slave_1) entered disabled state
[  370.495193][ T5958] bridge_slave_0: left allmulticast mode
[  370.497359][ T5958] bridge_slave_0: left promiscuous mode
[  370.499655][ T5958] bridge0: port 1(bridge_slave_0) entered disabled state
[  371.384305][ T5958] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  371.390775][ T5958] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  371.395491][ T5958] bond0 (unregistering): Released all slaves
[  371.404930][T14497] (unnamed net_device) (uninitialized): Removing last ns target with arp_interval on
[  371.408702][T14497] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  372.247258][ T5958] hsr_slave_0: left promiscuous mode
[  372.254923][ T5958] hsr_slave_1: left promiscuous mode
[  372.257630][ T5958] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  372.264334][ T5958] batman_adv: batadv0: Removing interface: batadv_slave_0
[  372.267793][ T5958] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  372.271577][ T5958] batman_adv: batadv0: Removing interface: batadv_slave_1
[  372.295767][ T5958] veth1_macvtap: left promiscuous mode
[  372.298054][ T5958] veth0_macvtap: left promiscuous mode
[  372.300114][ T5958] veth1_vlan: left promiscuous mode
[  372.302338][ T5958] veth0_vlan: left promiscuous mode
[  372.400592][ T5998] Bluetooth: hci0: command tx timeout
[  373.864827][ T5958] team0 (unregistering): Port device team_slave_1 removed
[  373.920574][ T5958] team0 (unregistering): Port device team_slave_0 removed
[  374.408705][T14487] chnl_net:caif_netlink_parms(): no params data found
[  374.482865][ T5998] Bluetooth: hci0: command tx timeout
[  374.790262][T14487] bridge0: port 1(bridge_slave_0) entered blocking state
[  374.797716][T14487] bridge0: port 1(bridge_slave_0) entered disabled state
[  374.806609][T14487] bridge_slave_0: entered allmulticast mode
[  374.814349][T14487] bridge_slave_0: entered promiscuous mode
[  374.832325][T14487] bridge0: port 2(bridge_slave_1) entered blocking state
[  374.836713][T14487] bridge0: port 2(bridge_slave_1) entered disabled state
[  374.847692][T14487] bridge_slave_1: entered allmulticast mode
[  374.864245][T14487] bridge_slave_1: entered promiscuous mode
[  374.984559][T14487] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  375.018499][T14487] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  375.145308][T14487] team0: Port device team_slave_0 added
[  375.187056][T14487] team0: Port device team_slave_1 added
[  375.282458][T14487] batman_adv: batadv0: Adding interface: batadv_slave_0
[  375.285124][T14487] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  375.339790][T14487] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  375.372207][T14487] batman_adv: batadv0: Adding interface: batadv_slave_1
[  375.375350][T14487] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  375.416415][T14487] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  375.588250][T14487] hsr_slave_0: entered promiscuous mode
[  375.593907][T14487] hsr_slave_1: entered promiscuous mode
[  375.596745][T14487] debugfs: 'hsr0' already exists in 'hsr'
[  375.599103][T14487] Cannot create hsr debugfs directory
[  375.912364][T14487] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  375.927876][T14487] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  375.936683][T14487] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  375.954394][T14487] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  376.415163][T14487] 8021q: adding VLAN 0 to HW filter on device bond0
[  376.434416][T14487] 8021q: adding VLAN 0 to HW filter on device team0
[  376.440193][ T4591] bridge0: port 1(bridge_slave_0) entered blocking state
[  376.443069][ T4591] bridge0: port 1(bridge_slave_0) entered forwarding state
[  376.466001][ T4591] bridge0: port 2(bridge_slave_1) entered blocking state
[  376.468961][ T4591] bridge0: port 2(bridge_slave_1) entered forwarding state
[  376.563228][ T5998] Bluetooth: hci0: command tx timeout
[  376.618356][T14487] 8021q: adding VLAN 0 to HW filter on device batadv0
[  376.786471][T14487] veth0_vlan: entered promiscuous mode
[  376.860186][T14487] veth1_vlan: entered promiscuous mode
[  376.893175][T14487] veth0_macvtap: entered promiscuous mode
[  376.903751][T14487] veth1_macvtap: entered promiscuous mode
[  376.932159][T14487] batman_adv: batadv0: Interface activated: batadv_slave_0
[  376.943960][T14487] batman_adv: batadv0: Interface activated: batadv_slave_1
[  376.969505][T14632] bond0: (slave bond_slave_0): Releasing backup interface
[  376.972437][T14632] bond_slave_0 (unregistering): left allmulticast mode
[  376.998223][ T5958] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  377.002954][ T5958] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  377.006451][ T5958] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  377.009999][ T5958] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  377.104819][ T1093] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  377.107410][ T1093] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  377.135418][ T1093] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  377.137762][ T1093] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  378.230157][T14665] veth0_to_bond: entered promiscuous mode
[  378.234329][T14665] veth0_to_bond: left promiscuous mode
[  378.493658][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  378.496430][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  378.647541][ T5998] Bluetooth: hci0: command tx timeout
[  379.782458][ T5998] Bluetooth: hci2: ACL packet for unknown connection handle 1225
[  381.377094][T14763] 9pnet_fd: Insufficient options for proto=fd
[  381.650118][T14779] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3593'.
[  381.670584][T14779] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3593'.
[  381.674256][T14779] netlink: 'syz.5.3593': attribute type 18 has an invalid length.
[  381.806596][T14768] loop7: detected capacity change from 0 to 40427
[  381.833526][T14768] F2FS-fs (loop7): build fault injection rate: 25
[  381.851155][T14768] F2FS-fs (loop7): invalid crc value
[  381.924978][T14768] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  381.936604][T14768] F2FS-fs (loop7): Start checkpoint disabled!
[  381.968437][T14768] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6
[  382.066655][   T33] audit: type=1800 audit(1757969754.544:115): pid=14768 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.3587" name="file1" dev="overlay" ino=22 res=0 errno=0
[  382.108486][T14487] syz-executor: attempt to access beyond end of device
[  382.108486][T14487] loop7: rw=524288, sector=45064, nr_sectors = 8 limit=40427
[  382.130982][T14487] syz-executor: attempt to access beyond end of device
[  382.130982][T14487] loop7: rw=0, sector=45064, nr_sectors = 8 limit=40427
[  382.173268][   T26] kworker/u9:0: attempt to access beyond end of device
[  382.173268][   T26] loop7: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  382.189237][   T26] CPU: 0 UID: 0 PID: 26 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT(full) 
[  382.189259][   T26] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  382.189268][   T26] Workqueue: writeback wb_workfn (flush-7:7)
[  382.189292][   T26] Call Trace:
[  382.189298][   T26]  <TASK>
[  382.189304][   T26]  dump_stack_lvl+0x189/0x250
[  382.189325][   T26]  ? __pfx_dump_stack_lvl+0x10/0x10
[  382.189340][   T26]  ? __pfx_queue_work_on+0x10/0x10
[  382.189353][   T26]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  382.189366][   T26]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  382.189387][   T26]  f2fs_handle_critical_error+0x37c/0x540
[  382.189413][   T26]  f2fs_write_end_io+0x886/0xb60
[  382.189441][   T26]  __submit_merged_bio+0x27a/0x6a0
[  382.189465][   T26]  __submit_merged_write_cond+0x255/0x530
[  382.189489][   T26]  f2fs_write_data_pages+0x261d/0x3000
[  382.189529][   T26]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  382.189553][   T26]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  382.189594][   T26]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  382.189623][   T26]  ? trace_f2fs_writepages+0x7f/0x200
[  382.189642][   T26]  ? f2fs_write_node_pages+0x478/0x6e0
[  382.189664][   T26]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  382.189692][   T26]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  382.189706][   T26]  do_writepages+0x32e/0x550
[  382.189726][   T26]  ? reacquire_held_locks+0x127/0x1d0
[  382.189739][   T26]  ? writeback_sb_inodes+0x384/0x1010
[  382.189761][   T26]  __writeback_single_inode+0x145/0xff0
[  382.189777][   T26]  ? do_raw_spin_unlock+0x4d/0x240
[  382.189796][   T26]  writeback_sb_inodes+0x6c7/0x1010
[  382.189827][   T26]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  382.189877][   T26]  ? rcu_is_watching+0x15/0xb0
[  382.189897][   T26]  wb_writeback+0x43b/0xaf0
[  382.189919][   T26]  ? queue_io+0x341/0x590
[  382.189936][   T26]  ? __pfx_wb_writeback+0x10/0x10
[  382.189958][   T26]  ? _raw_spin_unlock_irq+0x23/0x50
[  382.189974][   T26]  wb_workfn+0x409/0xef0
[  382.189999][   T26]  ? __pfx_wb_workfn+0x10/0x10
[  382.190016][   T26]  ? __lock_acquire+0xab9/0xd20
[  382.190040][   T26]  ? process_scheduled_works+0x9ef/0x17b0
[  382.190055][   T26]  ? _raw_spin_unlock_irq+0x23/0x50
[  382.190065][   T26]  ? process_scheduled_works+0x9ef/0x17b0
[  382.190076][   T26]  ? process_scheduled_works+0x9ef/0x17b0
[  382.190090][   T26]  process_scheduled_works+0xae1/0x17b0
[  382.190130][   T26]  ? __pfx_process_scheduled_works+0x10/0x10
[  382.190158][   T26]  worker_thread+0x8a0/0xda0
[  382.190222][   T26]  kthread+0x711/0x8a0
[  382.190240][   T26]  ? __pfx_worker_thread+0x10/0x10
[  382.190252][   T26]  ? __pfx_kthread+0x10/0x10
[  382.190269][   T26]  ? _raw_spin_unlock_irq+0x23/0x50
[  382.190281][   T26]  ? lockdep_hardirqs_on+0x9c/0x150
[  382.190293][   T26]  ? __pfx_kthread+0x10/0x10
[  382.190328][   T26]  ret_from_fork+0x439/0x7d0
[  382.190344][   T26]  ? __pfx_ret_from_fork+0x10/0x10
[  382.190360][   T26]  ? __switch_to_asm+0x39/0x70
[  382.190376][   T26]  ? __switch_to_asm+0x33/0x70
[  382.190390][   T26]  ? __pfx_kthread+0x10/0x10
[  382.190405][   T26]  ret_from_fork_asm+0x1a/0x30
[  382.190433][   T26]  </TASK>
[  382.306377][   T26] F2FS-fs (loop7): Stopped filesystem due to reason: 3
[  382.309537][   T26] CPU: 0 UID: 0 PID: 26 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT(full) 
[  382.309549][   T26] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  382.309555][   T26] Workqueue: writeback wb_workfn (flush-7:7)
[  382.309569][   T26] Call Trace:
[  382.309573][   T26]  <TASK>
[  382.309577][   T26]  dump_stack_lvl+0x189/0x250
[  382.309591][   T26]  ? __pfx_dump_stack_lvl+0x10/0x10
[  382.309600][   T26]  ? __pfx_queue_work_on+0x10/0x10
[  382.309608][   T26]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  382.309616][   T26]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  382.309630][   T26]  f2fs_handle_critical_error+0x37c/0x540
[  382.309645][   T26]  f2fs_write_end_io+0x886/0xb60
[  382.309664][   T26]  __submit_merged_bio+0x27a/0x6a0
[  382.309679][   T26]  __submit_merged_write_cond+0x255/0x530
[  382.309694][   T26]  f2fs_write_data_pages+0x261d/0x3000
[  382.309719][   T26]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  382.309734][   T26]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  382.309760][   T26]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  382.309778][   T26]  ? trace_f2fs_writepages+0x7f/0x200
[  382.309790][   T26]  ? f2fs_write_node_pages+0x478/0x6e0
[  382.309803][   T26]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  382.309822][   T26]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  382.309830][   T26]  do_writepages+0x32e/0x550
[  382.309844][   T26]  ? reacquire_held_locks+0x127/0x1d0
[  382.309852][   T26]  ? writeback_sb_inodes+0x384/0x1010
[  382.309867][   T26]  __writeback_single_inode+0x145/0xff0
[  382.309877][   T26]  ? do_raw_spin_unlock+0x4d/0x240
[  382.309889][   T26]  writeback_sb_inodes+0x6c7/0x1010
[  382.309912][   T26]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  382.309944][   T26]  ? rcu_is_watching+0x15/0xb0
[  382.309957][   T26]  wb_writeback+0x43b/0xaf0
[  382.309971][   T26]  ? queue_io+0x341/0x590
[  382.309982][   T26]  ? __pfx_wb_writeback+0x10/0x10
[  382.309996][   T26]  ? _raw_spin_unlock_irq+0x23/0x50
[  382.310006][   T26]  wb_workfn+0x409/0xef0
[  382.310022][   T26]  ? __pfx_wb_workfn+0x10/0x10
[  382.310033][   T26]  ? __lock_acquire+0xab9/0xd20
[  382.310050][   T26]  ? process_scheduled_works+0x9ef/0x17b0
[  382.310060][   T26]  ? _raw_spin_unlock_irq+0x23/0x50
[  382.310066][   T26]  ? process_scheduled_works+0x9ef/0x17b0
[  382.310073][   T26]  ? process_scheduled_works+0x9ef/0x17b0
[  382.310081][   T26]  process_scheduled_works+0xae1/0x17b0
[  382.310105][   T26]  ? __pfx_process_scheduled_works+0x10/0x10
[  382.310122][   T26]  worker_thread+0x8a0/0xda0
[  382.310144][   T26]  kthread+0x711/0x8a0
[  382.310155][   T26]  ? __pfx_worker_thread+0x10/0x10
[  382.310192][   T26]  ? __pfx_kthread+0x10/0x10
[  382.310202][   T26]  ? _raw_spin_unlock_irq+0x23/0x50
[  382.310209][   T26]  ? lockdep_hardirqs_on+0x9c/0x150
[  382.310216][   T26]  ? __pfx_kthread+0x10/0x10
[  382.310226][   T26]  ret_from_fork+0x439/0x7d0
[  382.310236][   T26]  ? __pfx_ret_from_fork+0x10/0x10
[  382.310247][   T26]  ? __switch_to_asm+0x39/0x70
[  382.310257][   T26]  ? __switch_to_asm+0x33/0x70
[  382.310265][   T26]  ? __pfx_kthread+0x10/0x10
[  382.310275][   T26]  ret_from_fork_asm+0x1a/0x30
[  382.310294][   T26]  </TASK>
[  382.310297][   T26] F2FS-fs (loop7): Stopped filesystem due to reason: 3
[  382.571800][T14804] IPVS: length: 4096 != 8
[  383.048027][ T5974] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  383.182016][ T5974] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  383.266352][ T5974] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  383.383871][ T5974] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  383.708776][ T5974] bridge_slave_1: left allmulticast mode
[  383.713327][ T5974] bridge_slave_1: left promiscuous mode
[  383.715774][ T5974] bridge0: port 2(bridge_slave_1) entered disabled state
[  383.733458][ T5238] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  383.740120][ T5238] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  383.745874][ T5238] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  383.746550][ T5974] bridge_slave_0: left allmulticast mode
[  383.754960][ T5238] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  383.757952][ T5974] bridge_slave_0: left promiscuous mode
[  383.763296][ T5238] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  383.764409][ T5974] bridge0: port 1(bridge_slave_0) entered disabled state
[  384.409025][ T5974] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  384.415294][ T5974] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  384.419997][ T5974] bond0 (unregistering): Released all slaves
[  384.681145][T14864] netlink: 140 bytes leftover after parsing attributes in process `syz.0.3631'.
[  384.693106][T14864] netlink: 140 bytes leftover after parsing attributes in process `syz.0.3631'.
[  384.961774][ T5974] hsr_slave_0: left promiscuous mode
[  384.969838][ T5974] hsr_slave_1: left promiscuous mode
[  384.975939][ T5974] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  384.978765][ T5974] batman_adv: batadv0: Removing interface: batadv_slave_0
[  384.983641][ T5974] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  384.986548][ T5974] batman_adv: batadv0: Removing interface: batadv_slave_1
[  385.011630][ T5974] veth1_macvtap: left promiscuous mode
[  385.013873][ T5974] veth0_macvtap: left promiscuous mode
[  385.016364][ T5974] veth1_vlan: left promiscuous mode
[  385.018513][ T5974] veth0_vlan: left promiscuous mode
[  385.032449][T14884] overlayfs: failed to clone upperpath
[  385.672025][ T5974] team0 (unregistering): Port device team_slave_1 removed
[  385.739423][ T5974] team0 (unregistering): Port device team_slave_0 removed
[  385.855288][ T5238] Bluetooth: hci0: command tx timeout
[  385.946190][T14902] netlink: 'syz.5.3646': attribute type 21 has an invalid length.
[  385.949285][T14902] netlink: 128 bytes leftover after parsing attributes in process `syz.5.3646'.
[  386.488641][T14902] netlink: 'syz.5.3646': attribute type 5 has an invalid length.
[  386.496534][T14902] netlink: 3 bytes leftover after parsing attributes in process `syz.5.3646'.
[  386.577205][T14835] chnl_net:caif_netlink_parms(): no params data found
[  386.843106][T14835] bridge0: port 1(bridge_slave_0) entered blocking state
[  386.846230][T14835] bridge0: port 1(bridge_slave_0) entered disabled state
[  386.849217][T14835] bridge_slave_0: entered allmulticast mode
[  386.861990][T14835] bridge_slave_0: entered promiscuous mode
[  386.890474][T14835] bridge0: port 2(bridge_slave_1) entered blocking state
[  386.893415][T14835] bridge0: port 2(bridge_slave_1) entered disabled state
[  386.895902][T14835] bridge_slave_1: entered allmulticast mode
[  386.909626][T14835] bridge_slave_1: entered promiscuous mode
[  386.967287][T14835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  386.974902][T14835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  387.024176][T14835] team0: Port device team_slave_0 added
[  387.035190][T14835] team0: Port device team_slave_1 added
[  387.106321][T14835] batman_adv: batadv0: Adding interface: batadv_slave_0
[  387.108992][T14835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  387.122917][T14835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  387.128825][T14835] batman_adv: batadv0: Adding interface: batadv_slave_1
[  387.132506][T14835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  387.142297][T14835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  387.295612][T14835] hsr_slave_0: entered promiscuous mode
[  387.298736][T14835] hsr_slave_1: entered promiscuous mode
[  387.303921][T14835] debugfs: 'hsr0' already exists in 'hsr'
[  387.306350][T14835] Cannot create hsr debugfs directory
[  387.922045][ T5238] Bluetooth: hci0: command tx timeout
[  388.152809][T14835] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  388.159389][T14835] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  388.164341][T14961] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3662'.
[  388.176139][T14835] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  388.234663][T14835] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  388.389664][T14835] 8021q: adding VLAN 0 to HW filter on device bond0
[  388.403400][T14835] 8021q: adding VLAN 0 to HW filter on device team0
[  388.408469][ T9790] bridge0: port 1(bridge_slave_0) entered blocking state
[  388.410699][ T9790] bridge0: port 1(bridge_slave_0) entered forwarding state
[  388.423659][ T9790] bridge0: port 2(bridge_slave_1) entered blocking state
[  388.426504][ T9790] bridge0: port 2(bridge_slave_1) entered forwarding state
[  388.637747][T14835] 8021q: adding VLAN 0 to HW filter on device batadv0
[  388.955194][T14835] veth0_vlan: entered promiscuous mode
[  388.986106][T14835] veth1_vlan: entered promiscuous mode
[  389.038930][T14835] veth0_macvtap: entered promiscuous mode
[  389.046084][T14835] veth1_macvtap: entered promiscuous mode
[  389.074393][T14835] batman_adv: batadv0: Interface activated: batadv_slave_0
[  389.088985][T15009] netlink: 'syz.5.3668': attribute type 4 has an invalid length.
[  389.092408][T15009] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3668'.
[  389.095774][T14835] batman_adv: batadv0: Interface activated: batadv_slave_1
[  389.104074][   T12] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  389.112626][   T12] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  389.116057][   T12] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  389.119382][   T12] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  389.235468][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  389.238421][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  389.289358][ T1093] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  389.303101][ T1093] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  389.349818][T15022] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3672'.
[  389.356287][T15022] netlink: 'syz.5.3672': attribute type 15 has an invalid length.
[  389.376458][   T12] netdevsim netdevsim5 netdevsim0: set [0, 1] type 1 family 0 port 2816 - 0
[  389.380679][T15022] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3672'.
[  389.381793][T15025] loop8: detected capacity change from 0 to 1024
[  389.391576][   T12] netdevsim netdevsim5 netdevsim1: set [0, 1] type 1 family 0 port 2816 - 0
[  389.394904][   T12] netdevsim netdevsim5 netdevsim2: set [0, 1] type 1 family 0 port 2816 - 0
[  389.398397][   T12] netdevsim netdevsim5 netdevsim3: set [0, 1] type 1 family 0 port 2816 - 0
[  389.402831][T15022] netlink: 'syz.5.3672': attribute type 15 has an invalid length.
[  389.416534][T15025] EXT4-fs error (device loop8): ext4_quota_enable:7128: inode #3: comm syz.8.3612: iget: checksum invalid
[  389.431117][T15025] EXT4-fs error (device loop8): ext4_quota_enable:7131: comm syz.8.3612: Bad quota inode: 3, type: 0
[  389.441585][T15025] EXT4-fs warning (device loop8): ext4_enable_quotas:7172: Failed to enable quota tracking (type=0, err=-74, ino=3). Please run e2fsck to fix.
[  389.450856][T15025] EXT4-fs (loop8): mount failed
[  390.020841][ T5238] Bluetooth: hci0: command tx timeout
[  390.243277][T15058] netlink: 172 bytes leftover after parsing attributes in process `syz.5.3684'.
[  390.246863][T15058] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  390.259626][T15061] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[  390.325773][T15067] loop8: detected capacity change from 0 to 512
[  390.333280][T15067] EXT4-fs error (device loop8): ext4_clear_blocks:876: inode #13: comm syz.8.3687: attempt to clear invalid blocks 1 len 1
[  390.341819][T15067] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.3687: bg 0: block 343: padding at end of block bitmap is not set
[  390.348582][T15067] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6657: Corrupt filesystem
[  390.352591][T15069] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3685'.
[  390.356488][T15067] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.3687: invalid indirect mapped block 1819239214 (level 0)
[  390.364803][T15069] bridge0: port 2(bridge_slave_1) entered disabled state
[  390.365921][T15067] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #13: comm syz.8.3687: invalid indirect mapped block 1819239214 (level 1)
[  390.369073][T15069] bridge0: port 1(bridge_slave_0) entered disabled state
[  390.377347][T15067] EXT4-fs (loop8): 1 truncate cleaned up
[  390.381642][T15067] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  390.416336][T14835] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  390.588258][T15079] bridge0: port 1(bridge_slave_0) entered disabled state
[  390.618145][T15081] netlink: 'syz.0.3693': attribute type 15 has an invalid length.
[  390.786373][T15091] pim6reg: entered allmulticast mode
[  392.080539][ T5238] Bluetooth: hci0: command tx timeout
[  393.395665][T15165] netlink: 64 bytes leftover after parsing attributes in process `syz.5.3730'.
[  394.033312][T15201] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3746'.
[  394.161585][ T5998] Bluetooth: hci0: command tx timeout
[  394.746871][T15215] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (15)
[  395.127660][T15232] vim2m vim2m.0: Fourcc format (0x42474752) invalid.
[  395.441027][   T47] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  395.547128][T15259] bridge1: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  395.599500][ T5998] Bluetooth: hci2: unexpected Set CIG Parameters response data
[  395.604922][   T47] usb 9-1: Using ep0 maxpacket: 16
[  395.614108][ T5998] Bluetooth: hci2: unexpected event for opcode 0x2062
[  395.618276][   T47] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  395.623165][   T47] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  395.627022][   T47] usb 9-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00
[  395.634393][   T47] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  395.639950][   T47] usb 9-1: config 0 descriptor??
[  396.058151][   T47] hid_parser_main: 73 callbacks suppressed
[  396.058170][   T47] corsair 0003:1B1C:1B02.000C: unknown main item tag 0x0
[  396.063606][   T47] corsair 0003:1B1C:1B02.000C: unknown main item tag 0x0
[  396.066596][   T47] corsair 0003:1B1C:1B02.000C: unknown main item tag 0x0
[  396.069589][   T47] corsair 0003:1B1C:1B02.000C: unknown main item tag 0x0
[  396.072596][   T47] corsair 0003:1B1C:1B02.000C: unknown main item tag 0x0
[  396.078144][   T47] corsair 0003:1B1C:1B02.000C: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.8-1/input0
[  396.253878][   T47] corsair 0003:1B1C:1B02.000C: Read invalid backlight brightness: ce.
[  396.463101][T14637] usb 9-1: USB disconnect, device number 2
[  397.169036][T15305] loop8: detected capacity change from 0 to 4096
[  397.364691][T15322] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3800'.
[  399.680738][ T5238] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  399.683932][ T5238] Bluetooth: hci2: Injecting HCI hardware error event
[  399.690949][ T5998] Bluetooth: hci2: hardware error 0x00
[  399.964161][ T5238] Bluetooth: hci0: unexpected cc 0x2039 length: 9 > 1
[  401.796605][ T5998] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  403.228957][T15426] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  403.336093][T15432] vlan0: entered promiscuous mode
[  403.531061][   T10] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  403.680491][   T10] usb 9-1: Using ep0 maxpacket: 16
[  403.686482][   T10] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  403.692642][   T10] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3
[  403.700175][   T10] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  403.704203][   T10] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  403.708577][   T10] usb 9-1: Product: syz
[  403.713014][   T10] usb 9-1: Manufacturer: syz
[  403.716154][   T10] usb 9-1: SerialNumber: syz
[  403.945857][   T10] usb 9-1: 0:2 : does not exist
[  403.974710][   T10] usb 9-1: USB disconnect, device number 3
[  404.011403][ T5998] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  404.015749][ T5998] Bluetooth: hci0: Injecting HCI hardware error event
[  404.021966][ T5238] Bluetooth: hci0: hardware error 0x00
[  404.095533][ T6817] udevd[6817]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  404.606939][T15450] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3843'.
[  405.011364][T15471] Failed to get privilege flags for destination (handle=0x2:0x0)
[  405.904634][T15492] tipc: Invalid UDP bearer configuration
[  405.904677][T15492] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  406.080522][ T5238] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  406.124394][T15474] ALSA: mixer_oss: invalid OSS volume ''
[  406.134052][T15502] openvswitch: netlink: nsh attribute has 2 unknown bytes.
[  406.319746][T15512] loop8: detected capacity change from 0 to 512
[  406.363626][T15512] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  406.372602][T15512] ext4 filesystem being mounted at /49/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  406.423499][T14835] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  406.476626][T15519] overlayfs: failed to clone upperpath
[  406.875258][T12330] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  407.091614][T12330] usb 9-1: config 32 has an invalid interface number: 47 but max is 0
[  407.113314][T12330] usb 9-1: config 32 contains an unexpected descriptor of type 0x2, skipping
[  407.135788][T12330] usb 9-1: config 32 descriptor has 1 excess byte, ignoring
[  407.153847][T12330] usb 9-1: config 32 has no interface number 0
[  407.186940][T12330] usb 9-1: config 32 interface 47 altsetting 167 endpoint 0x2 has invalid maxpacket 1289, setting to 1024
[  407.218680][T12330] usb 9-1: config 32 interface 47 altsetting 167 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  407.254156][T12330] usb 9-1: config 32 interface 47 has no altsetting 0
[  407.287171][T12330] usb 9-1: New USB device found, idVendor=10c4, idProduct=819f, bcdDevice=9b.ef
[  407.291070][T12330] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  407.294455][T12330] usb 9-1: Product: syz
[  407.296310][T12330] usb 9-1: Manufacturer: syz
[  407.298347][T12330] usb 9-1: SerialNumber: syz
[  407.303999][T15521] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  407.513823][T12330] cp210x 9-1:32.47: cp210x converter detected
[  407.517526][T12330] cp210x 9-1:32.47: failed to get vendor val 0x370b size 1: -71
[  407.522165][T12330] cp210x 9-1:32.47: querying part number failed
[  407.528832][T12330] usb 9-1: cp210x converter now attached to ttyUSB0
[  407.543904][T12330] usb 9-1: USB disconnect, device number 4
[  407.553955][T12330] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  407.557508][T12330] cp210x 9-1:32.47: device disconnected
[  408.838133][T15573] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3896'.
[  408.896040][T15567] netlink: 'syz.5.3893': attribute type 83 has an invalid length.
[  409.838059][T15598] loop8: detected capacity change from 0 to 512
[  409.845086][T15598] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  409.878017][T15598] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 548)
[  410.002355][T15605] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3907'.
[  410.815613][T15624] overlayfs: failed to clone upperpath
[  411.926935][T15653] loop8: detected capacity change from 0 to 512
[  411.941662][T15653] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  412.065058][T15653] EXT4-fs error (device loop8): ext4_find_inline_data_nolock:169: inode #17: comm syz.8.3928: inline data xattr refers to an external xattr inode
[  412.077785][T15653] EXT4-fs error (device loop8): ext4_orphan_get:1397: comm syz.8.3928: couldn't read orphan inode 17 (err -117)
[  412.166172][T15653] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  412.176797][T15653] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters
[  412.233584][T14835] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  412.433433][T15673] U9: renamed from lo
[  413.823563][T15712] syz_tun: entered promiscuous mode
[  413.828293][T15712] vlan2: entered promiscuous mode
[  413.927116][T15716] netlink: 'syz.5.3957': attribute type 12 has an invalid length.
[  413.985243][T15718] netlink: 'syz.8.3958': attribute type 10 has an invalid length.
[  413.989573][T15718] veth0_vlan: entered allmulticast mode
[  414.014457][T15718] veth0_vlan: left promiscuous mode
[  414.018851][T15718] veth0_vlan: entered promiscuous mode
[  414.031249][T15718] team0: Device veth0_vlan failed to register rx_handler
[  414.205686][T15728] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3963'.
[  414.209731][T15728] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3963'.
[  414.216666][T15728] netlink: 'syz.8.3963': attribute type 15 has an invalid length.
[  414.413245][T15734] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (1136)
[  414.416651][T15734] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023
[  416.978316][T15837] bpf: Bad value for 'gid'
[  417.018403][T15840] netlink: 'syz.5.4014': attribute type 1 has an invalid length.
[  419.197700][T15905] netlink: 'syz.8.4041': attribute type 1 has an invalid length.
[  419.480853][  T793] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  419.634136][  T793] usb 9-1: Using ep0 maxpacket: 32
[  419.638392][  T793] usb 9-1: config 0 has an invalid interface number: 219 but max is 0
[  419.641926][  T793] usb 9-1: config 0 has no interface number 0
[  419.644450][  T793] usb 9-1: config 0 interface 219 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1023
[  419.651654][  T793] usb 9-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9
[  419.655369][  T793] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  419.658604][  T793] usb 9-1: Product: syz
[  419.660292][  T793] usb 9-1: Manufacturer: syz
[  419.662394][  T793] usb 9-1: SerialNumber: syz
[  419.666842][  T793] usb 9-1: config 0 descriptor??
[  419.669662][T15907] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  419.882260][  T793] etas_es58x 9-1:0.219: Starting syz syz (Serial Number syz)
[  419.890670][  T793] usb 9-1: USB disconnect, device number 5
[  420.500258][T15947] loop8: detected capacity change from 0 to 47
[  420.506283][T15947] minix: Unknown parameter '0xffffffffffffffff'
[  420.664583][T15950] 9pnet: p9_errstr2errno: server reported unknown error @0x0000000000000007
[  420.680153][    C0] vcan0: j1939_tp_rxtimer: 0xffff88810f2ddc00: rx timeout, send abort
[  420.880906][T14637] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[  421.043720][T14637] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  421.047310][T14637] usb 9-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00
[  421.053308][T14637] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  421.060451][T14637] usb 9-1: config 0 descriptor??
[  421.180285][    C0] vcan0: j1939_tp_rxtimer: 0xffff88802fdbec00: rx timeout, send abort
[  421.184944][    C0] vcan0: j1939_tp_rxtimer: 0xffff88810f2ddc00: abort rx timeout. Force session deactivation
[  421.480873][T14637] lg-g15 0003:046D:C222.000D: hidraw0: USB HID v10.00 Device [HID 046d:c222] on usb-dummy_hcd.8-1/input0
[  421.682627][T14637] usb 9-1: USB disconnect, device number 6
[  421.684545][    C0] vcan0: j1939_tp_rxtimer: 0xffff88802fdbec00: abort rx timeout. Force session deactivation
[  421.985926][T15986] tipc: Started in network mode
[  421.988120][T15986] tipc: Node identity 4, cluster identity 4711
[  421.992340][T15986] tipc: Node number set to 4
[  422.549458][T16003] netlink: 48 bytes leftover after parsing attributes in process `syz.8.4084'.
[  422.912750][T16020] netlink: 68 bytes leftover after parsing attributes in process `syz.8.4092'.
[  423.342635][T16038] ptrace attach of "/syz-executor exec"[5996] was attempted by "/syz-executor exec"[16038]
[  425.113683][T16099] IPVS: Error connecting to the multicast addr
[  426.148881][T16122] "syz.5.4138" (16122) uses obsolete ecb(arc4) skcipher
[  426.631851][T16140] vlan0: left promiscuous mode
[  426.656641][T16140] mac80211_hwsim hwsim6 wlan0: left promiscuous mode
[  426.667956][T16140] gtp0: left promiscuous mode
[  427.453234][T16160] netlink: 96 bytes leftover after parsing attributes in process `syz.5.4152'.
[  428.026055][T16189] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  428.034075][T16189] overlayfs: fs on './file0' does not support file handles, falling back to xino=off.
[  428.903576][T16224] binder: 16223:16224 ioctl c0306201 200000000a00 returned -14
[  428.945781][T16227] ip_tunnel: non-ECT from 172.20.20.187 with TOS=0x2
[  429.002550][T16230] binder: 16229:16230 ioctl 400c620e 9999999999999999 returned -14
[  429.660483][   T47] usb 9-1: new high-speed USB device number 7 using dummy_hcd
[  429.810538][   T47] usb 9-1: Using ep0 maxpacket: 32
[  429.816695][   T47] usb 9-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b
[  429.822976][   T47] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  429.826347][   T47] usb 9-1: Product: syz
[  429.828073][   T47] usb 9-1: Manufacturer: syz
[  429.829993][   T47] usb 9-1: SerialNumber: syz
[  429.834962][   T47] usb 9-1: config 0 descriptor??
[  429.968838][T16268] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4202'.
[  430.633329][    C1] raw-gadget.0 gadget.8: ignoring, device is not running
[  430.639214][   T47] peak_usb 9-1:0.0 can0: unable to request usb[type=2 value=5] err=-32
[  430.701382][   T47] peak_usb 9-1:0.0: probe with driver peak_usb failed with error -32
[  430.713179][   T47] usb 9-1: USB disconnect, device number 7
[  431.034028][T16294] tipc: New replicast peer: 255.255.255.255
[  431.038095][T16294] tipc: Enabled bearer <udp:syz2>, priority 10
[  431.211239][T16308] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4219'.
[  431.220752][T16308] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4219'.
[  431.590873][T16330] macsec0: entered promiscuous mode
[  431.593722][T16330] macsec0: entered allmulticast mode
[  431.596056][T16330] veth1_macvtap: entered allmulticast mode
[  431.599998][T16330] batman_adv: batadv0: Adding interface: macsec0
[  431.609858][T16330] batman_adv: batadv0: The MTU of interface macsec0 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  431.619980][T16330] batman_adv: batadv0: Interface activated: macsec0
[  432.176790][T14637] tipc: Node number set to 4278190081
[  432.867835][T16347] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4236'.
[  433.426300][T16355] syz.8.4240: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  433.445308][T16355] CPU: 0 UID: 0 PID: 16355 Comm: syz.8.4240 Not tainted syzkaller #0 PREEMPT(full) 
[  433.445331][T16355] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  433.445343][T16355] Call Trace:
[  433.445350][T16355]  <TASK>
[  433.445357][T16355]  dump_stack_lvl+0x189/0x250
[  433.445393][T16355]  ? __pfx_dump_stack_lvl+0x10/0x10
[  433.445411][T16355]  ? __pfx__printk+0x10/0x10
[  433.445431][T16355]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  433.445449][T16355]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  433.445468][T16355]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  433.445486][T16355]  warn_alloc+0x214/0x310
[  433.445508][T16355]  ? stack_depot_save_flags+0x40/0x860
[  433.445531][T16355]  ? __pfx_warn_alloc+0x10/0x10
[  433.445553][T16355]  ? kasan_save_track+0x4f/0x80
[  433.445574][T16355]  ? xskq_create+0x56/0x170
[  433.445586][T16355]  ? xsk_init_queue+0xb0/0x110
[  433.445597][T16355]  ? xsk_setsockopt+0x4dc/0x8d0
[  433.445616][T16355]  ? do_sock_setsockopt+0x17c/0x1b0
[  433.445632][T16355]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  433.445650][T16355]  ? do_syscall_64+0xfa/0x3b0
[  433.445664][T16355]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  433.445684][T16355]  __vmalloc_node_range_noprof+0x125/0x12f0
[  433.445728][T16355]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  433.445753][T16355]  ? __kasan_kmalloc+0x93/0xb0
[  433.445774][T16355]  vmalloc_user_noprof+0xad/0xf0
[  433.445793][T16355]  ? xskq_create+0xbf/0x170
[  433.445809][T16355]  xskq_create+0xbf/0x170
[  433.445824][T16355]  xsk_init_queue+0xb0/0x110
[  433.445840][T16355]  xsk_setsockopt+0x4dc/0x8d0
[  433.445863][T16355]  ? __pfx_xsk_setsockopt+0x10/0x10
[  433.445884][T16355]  ? __pfx_aa_sk_perm+0x10/0x10
[  433.445899][T16355]  ? aa_sock_opt_perm+0xff/0x1b0
[  433.445917][T16355]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  433.445931][T16355]  ? __pfx_xsk_setsockopt+0x10/0x10
[  433.445953][T16355]  do_sock_setsockopt+0x17c/0x1b0
[  433.445974][T16355]  __x64_sys_setsockopt+0x13f/0x1b0
[  433.445995][T16355]  do_syscall_64+0xfa/0x3b0
[  433.446010][T16355]  ? lockdep_hardirqs_on+0x9c/0x150
[  433.446023][T16355]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  433.446038][T16355]  ? exc_page_fault+0x9f/0xf0
[  433.446052][T16355]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  433.446066][T16355] RIP: 0033:0x7f0eb6d8eba9
[  433.446081][T16355] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  433.446094][T16355] RSP: 002b:00007f0eb4ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  433.446111][T16355] RAX: ffffffffffffffda RBX: 00007f0eb6fd5fa0 RCX: 00007f0eb6d8eba9
[  433.446119][T16355] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003
[  433.446127][T16355] RBP: 00007f0eb6e11e19 R08: 0000000000000052 R09: 0000000000000000
[  433.446135][T16355] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  433.446143][T16355] R13: 00007f0eb6fd6038 R14: 00007f0eb6fd5fa0 R15: 00007ffed3fd0508
[  433.446165][T16355]  </TASK>
[  433.446172][T16355] Mem-Info:
[  433.578990][T16355] active_anon:19099 inactive_anon:0 isolated_anon:0
[  433.578990][T16355]  active_file:16031 inactive_file:38477 isolated_file:0
[  433.578990][T16355]  unevictable:1768 dirty:391 writeback:0
[  433.578990][T16355]  slab_reclaimable:11157 slab_unreclaimable:59290
[  433.578990][T16355]  mapped:18713 shmem:12239 pagetables:1597
[  433.578990][T16355]  sec_pagetables:0 bounce:0
[  433.578990][T16355]  kernel_misc_reclaimable:0
[  433.578990][T16355]  free:250519 free_pcp:20686 free_cma:0
[  433.605494][T16355] Node 0 active_anon:35884kB inactive_anon:0kB active_file:39196kB inactive_file:73668kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:36700kB dirty:1336kB writeback:0kB shmem:25696kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7744kB pagetables:3128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  433.618428][T16355] Node 1 active_anon:40444kB inactive_anon:0kB active_file:24928kB inactive_file:80240kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:38152kB dirty:228kB writeback:0kB shmem:23260kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5488kB pagetables:3464kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  433.632529][T16355] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  433.643887][T16355] lowmem_reserve[]: 0 811 811 811 811
[  433.647299][T16355] Node 0 DMA32 free:268624kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:35816kB inactive_anon:0kB active_file:39196kB inactive_file:73668kB unevictable:3536kB writepending:1336kB present:1556484kB managed:830884kB mlocked:0kB bounce:0kB free_pcp:39044kB local_pcp:23412kB free_cma:0kB
[  433.663293][T16355] lowmem_reserve[]: 0 0 0 0 0
[  433.665272][T16355] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:0kB free_cma:0kB
[  433.676969][T16355] lowmem_reserve[]: 0 0 854 854 854
[  433.679391][T16355] Node 1 Normal free:258852kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:44184kB inactive_anon:0kB active_file:24928kB inactive_file:80240kB unevictable:3536kB writepending:228kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:41260kB local_pcp:22028kB free_cma:0kB
[  433.711038][T16355] lowmem_reserve[]: 0 0 0 0 0
[  433.713868][T16355] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  433.719608][T16355] Node 0 DMA32: 365*4kB (UME) 645*8kB (UME) 420*16kB (UME) 408*32kB (UM) 370*64kB (UME) 171*128kB (UM) 92*256kB (UM) 46*512kB (UM) 26*1024kB (UM) 8*2048kB (UME) 25*4096kB (ME) = 264476kB
[  433.727053][T16355] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[  433.735105][T16355] Node 1 Normal: 309*4kB (UME) 531*8kB (UME) 304*16kB (UME) 90*32kB (ME) 74*64kB (UME) 40*128kB (UM) 9*256kB (UE) 26*512kB (UM) 22*1024kB (UM) 8*2048kB (UM) 44*4096kB (UM) = 257836kB
[  433.744367][T16355] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  433.749457][T16355] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  433.755044][T16355] 66706 total pagecache pages
[  433.757003][T16355] 0 pages in swap cache
[  433.758822][T16355] Free swap  = 124996kB
[  433.762411][T16355] Total swap = 124996kB
[  433.764278][T16355] 786301 pages RAM
[  433.765928][T16355] 0 pages HighMem/MovableOnly
[  433.768191][T16355] 241348 pages reserved
[  433.770017][T16355] 0 pages cma reserved
[  433.850089][T16377] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4250'.
[  433.976123][T16383] loop8: detected capacity change from 0 to 128
[  433.998663][T16383] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  434.022364][T16383] ext4 filesystem being mounted at /161/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  434.133479][T14835] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  434.965649][T16420] vxcan1: tx address claim with dest, not broadcast
[  435.054025][T16428] netlink: 120 bytes leftover after parsing attributes in process `syz.0.4271'.
[  435.531505][T12330] kernel write not supported for file /dsp (pid: 12330 comm: kworker/0:5)
[  436.539351][   T33] audit: type=1326 audit(1757969809.014:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16486 comm="syz.5.4298" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbbfd58eba9 code=0x0
[  438.560089][T16566] loop8: detected capacity change from 0 to 32768
[  439.319057][T16594] 9pnet_fd: Insufficient options for proto=fd
[  439.925736][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  439.928400][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  441.620502][T12330] usb 9-1: new high-speed USB device number 8 using dummy_hcd
[  441.770805][T12330] usb 9-1: Using ep0 maxpacket: 32
[  441.897994][T12330] usb 9-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  441.906914][T12330] usb 9-1: language id specifier not provided by device, defaulting to English
[  441.912003][T12330] usb 9-1: New USB device found, idVendor=05ac, idProduct=0252, bcdDevice= 0.40
[  441.915038][T12330] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  441.917900][T12330] usb 9-1: Product: syz
[  441.919268][T12330] usb 9-1: Manufacturer: 剩ꗨ㌌谮㞔畺魶๊≱還뛌큭⡋≣ᆓෟ劚썵췚眃赺漉ꋋㄐ鸒씀芆栯혁煮薂酒ꄙ╚둥შ볚酔⏓䣣ᛖ齗䔟顱ﬠ㎵稃ն䍳
[  441.926894][T12330] usb 9-1: SerialNumber: syz
[  441.936706][T12330] usbhid 9-1:1.0: couldn't find an input interrupt endpoint
[  442.249285][T12330] usb 9-1: USB disconnect, device number 8
[  442.469719][T16664] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4375'.
[  442.594585][T16672] geneve3: entered promiscuous mode
[  442.596899][T16672] geneve3: entered allmulticast mode
[  442.879610][T16691] 9pnet_fd: Insufficient options for proto=fd
[  443.296949][T16714] netlink: 20 bytes leftover after parsing attributes in process `syz.8.4400'.
[  443.773724][T16727] loop8: detected capacity change from 0 to 32768
[  443.824708][T16727] XFS (loop8): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  443.853130][T16727] XFS (loop8): Ending clean mount
[  443.917535][T14835] XFS (loop8): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  444.156718][T16749] cgroup: none used incorrectly
[  444.310226][T16759] program syz.8.4417 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  444.660638][T12330] usb 9-1: new high-speed USB device number 9 using dummy_hcd
[  444.812377][T12330] usb 9-1: Using ep0 maxpacket: 16
[  444.819361][T12330] usb 9-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4
[  444.823953][T12330] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  444.827287][T12330] usb 9-1: Product: syz
[  444.832503][T12330] usb 9-1: Manufacturer: syz
[  444.835636][T12330] usb 9-1: SerialNumber: syz
[  444.841009][T12330] usb 9-1: config 0 descriptor??
[  444.844911][T12330] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state.
[  445.993529][T16803] bond0: entered promiscuous mode
[  445.995773][T16803] bond_slave_0: entered promiscuous mode
[  445.998252][T16803] bond_slave_1: entered promiscuous mode
[  446.004050][T16803] bond0: left promiscuous mode
[  446.006345][T16803] bond_slave_0: left promiscuous mode
[  446.008700][T16803] bond_slave_1: left promiscuous mode
[  447.179770][T12330] gp8psk: usb in 128 operation failed.
[  447.184574][T12330] gp8psk: usb in 137 operation failed.
[  447.186404][T12330] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  447.189895][T12330] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver)
[  447.193029][T12330] usb 9-1: media controller created
[  447.204923][T12330] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  447.216655][T12330] gp8psk_fe: Frontend revision 1 attached
[  447.218847][T12330] usb 9-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)...
[  447.225637][T12330] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered.
[  447.258950][T12330] gp8psk: usb in 138 operation failed.
[  447.260984][T12330] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected.
[  447.265246][T12330] gp8psk: found Genpix USB device pID = 201 (hex)
[  447.484884][   T47] usb 9-1: USB disconnect, device number 9
[  447.596625][   T47] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected.
[  447.759345][T16834] netlink: 88 bytes leftover after parsing attributes in process `syz.8.4441'.
[  447.970657][T16834] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  448.007854][  T793] IPVS: starting estimator thread 0...
[  448.100420][T16837] IPVS: using max 63 ests per chain, 151200 per kthread
[  448.529823][T16842] lo speed is unknown, defaulting to 1000
[  448.534679][T16842] lo speed is unknown, defaulting to 1000
[  448.537564][T16842] lo speed is unknown, defaulting to 1000
[  448.561577][T16842] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  448.593991][T16842] lo speed is unknown, defaulting to 1000
[  448.601640][T16842] lo speed is unknown, defaulting to 1000
[  448.605806][T16842] lo speed is unknown, defaulting to 1000
[  448.611925][T16842] lo speed is unknown, defaulting to 1000
[  448.885901][   T33] audit: type=1326 audit(1757969821.364:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16868 comm="syz.0.4459" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86ac58eba9 code=0x7ff00000
[  448.906087][   T33] audit: type=1326 audit(1757969821.364:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16868 comm="syz.0.4459" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86ac58eba9 code=0x7ff00000
[  448.925122][   T33] audit: type=1326 audit(1757969821.364:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16868 comm="syz.0.4459" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86ac58eba9 code=0x7ff00000
[  448.943507][   T33] audit: type=1326 audit(1757969821.364:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16868 comm="syz.0.4459" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86ac58eba9 code=0x7ff00000
[  449.055489][   T33] audit: type=1326 audit(1757969821.364:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16868 comm="syz.0.4459" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86ac58eba9 code=0x7ff00000
[  449.063820][   T33] audit: type=1326 audit(1757969821.364:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16868 comm="syz.0.4459" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86ac58eba9 code=0x7ff00000
[  449.076149][   T33] audit: type=1326 audit(1757969821.364:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16868 comm="syz.0.4459" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86ac58eba9 code=0x7ff00000
[  449.084419][   T33] audit: type=1326 audit(1757969821.374:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16868 comm="syz.0.4459" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86ac58eba9 code=0x7ff00000
[  449.092834][   T33] audit: type=1326 audit(1757969821.374:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16868 comm="syz.0.4459" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86ac58eba9 code=0x7ff00000
[  449.101775][   T33] audit: type=1326 audit(1757969821.374:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16868 comm="syz.0.4459" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86ac58eba9 code=0x7ff00000
[  449.448582][T16887] loop8: detected capacity change from 0 to 4096
[  449.480715][T16887] ntfs3(loop8): Failed to initialize $Extend/$ObjId.
[  449.496293][T16887] ntfs3(loop8): ino=1e, "file1" attr_set_size
[  449.499894][T16885] ntfs3(loop8): ino=1e, "file1" attr_set_size
[  449.616225][T16898] loop8: detected capacity change from 0 to 1024
[  450.344498][T16931] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4483'.
[  450.646501][T16935] loop8: detected capacity change from 0 to 32768
[  450.727097][T16935] XFS (loop8): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  450.761401][T16935] XFS (loop8): Ending clean mount
[  450.776245][T16935] XFS (loop8): Quotacheck needed: Please wait.
[  450.826920][T16935] XFS (loop8): Quotacheck: Done.
[  451.006191][T14835] XFS (loop8): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  451.276320][T16954] overlayfs: failed to clone upperpath
[  451.523181][T16962] loop8: detected capacity change from 0 to 32768
[  451.526985][T16962] ERROR: (device loop8): xtSearch: xt_getpage: xtree page corrupt
[  451.526985][T16962] 
[  451.530762][T16962] ERROR: (device loop8): remounting filesystem as read-only
[  451.533688][T16962] xtLookup: xtSearch returned -5
[  451.542406][T16962] read_mapping_page failed!
[  451.544284][T16962] jfs_mount: diMount failed w/rc = -5
[  451.551429][T16962] Mount JFS Failure: -5
[  451.553147][T16962] jfs_mount failed w/return code = -5
[  451.963015][T16971] loop8: detected capacity change from 0 to 32768
[  452.028838][T16971] XFS (loop8): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  452.087868][T16971] XFS (loop8): Ending clean mount
[  452.110281][T16971] XFS (loop8): Quotacheck needed: Please wait.
[  452.177444][T16971] XFS (loop8): Quotacheck: Done.
[  452.273568][T14835] XFS (loop8): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  452.764709][T17010] overlayfs: unescaped trailing colons in lowerdir mount option.
[  453.307346][T17033] netlink: 'syz.5.4526': attribute type 4 has an invalid length.
[  453.406840][   T47] lo speed is unknown, defaulting to 1000
[  453.414730][T17034] netlink: 'syz.5.4526': attribute type 4 has an invalid length.
[  453.418242][   T47] syz0: Port: 1 Link DOWN
[  453.438752][   T47] lo speed is unknown, defaulting to 1000
[  453.445903][   T47] syz0: Port: 1 Link ACTIVE
[  453.490739][T12330] usb 9-1: new full-speed USB device number 10 using dummy_hcd
[  453.643429][T12330] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  453.647260][T12330] usb 9-1: config 1 interface 0 altsetting 93 has 0 endpoint descriptors, different from the interface descriptor's value: 18
[  453.655012][T12330] usb 9-1: config 1 interface 0 has no altsetting 0
[  453.659529][T12330] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  453.665893][T12330] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  453.669038][T12330] usb 9-1: SerialNumber: syz
[  453.680262][T12330] usb 9-1: bad CDC descriptors
[  453.894854][T12330] usb 9-1: USB disconnect, device number 10
[  454.022270][T17065] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4541'.
[  454.712047][   T33] kauditd_printk_skb: 69 callbacks suppressed
[  454.712060][   T33] audit: type=1326 audit(1757969827.194:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17100 comm="syz.0.4558" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86ac58eba9 code=0x7ffc0000
[  454.733393][   T33] audit: type=1326 audit(1757969827.194:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17100 comm="syz.0.4558" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86ac58eba9 code=0x7ffc0000
[  454.752123][   T33] audit: type=1326 audit(1757969827.204:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17100 comm="syz.0.4558" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f86ac58eba9 code=0x7ffc0000
[  454.761222][   T33] audit: type=1326 audit(1757969827.204:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17100 comm="syz.0.4558" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86ac58eba9 code=0x7ffc0000
[  454.776676][   T33] audit: type=1326 audit(1757969827.204:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17100 comm="syz.0.4558" exe="/syz-executor" sig=0 arch=c000003e syscall=91 compat=0 ip=0x7f86ac58eba9 code=0x7ffc0000
[  454.786903][   T33] audit: type=1326 audit(1757969827.204:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17100 comm="syz.0.4558" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86ac58eba9 code=0x7ffc0000
[  454.815809][T17105] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  454.818921][T17105] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  454.872745][   T33] audit: type=1326 audit(1757969827.354:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17110 comm="syz.8.4563" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0eb6d8eba9 code=0x7ffc0000
[  454.885242][   T33] audit: type=1326 audit(1757969827.354:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17110 comm="syz.8.4563" exe="/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f0eb6d8eba9 code=0x7ffc0000
[  454.899427][   T33] audit: type=1326 audit(1757969827.354:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17110 comm="syz.8.4563" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0eb6d8eba9 code=0x7ffc0000
[  454.910027][   T33] audit: type=1326 audit(1757969827.354:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17110 comm="syz.8.4563" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0eb6d8eba9 code=0x7ffc0000
[  455.102478][T17130] netlink: 'syz.8.4570': attribute type 16 has an invalid length.
[  455.105598][T17130] netlink: 'syz.8.4570': attribute type 17 has an invalid length.
[  455.120782][T17130] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  455.421330][T14637] usb 9-1: new full-speed USB device number 11 using dummy_hcd
[  455.574457][T14637] usb 9-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  455.578881][T14637] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84
[  455.583689][T14637] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10
[  455.588077][T14637] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  455.597284][T14637] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  455.616898][T14637] usb 9-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae
[  455.623630][T14637] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  455.626959][T14637] usb 9-1: Product: syz
[  455.629335][T14637] usb 9-1: Manufacturer: syz
[  455.634314][T14637] usb 9-1: SerialNumber: syz
[  455.654096][T14637] usb 9-1: config 0 descriptor??
[  455.681081][T14637] input: KB Gear Tablet as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input19
[  455.874798][T14637] usb 9-1: USB disconnect, device number 11
[  455.993511][T17145] overlayfs: failed to clone upperpath
[  457.100273][T17221] loop8: detected capacity change from 0 to 256
[  457.109836][T17221] exFAT-fs (loop8): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53d99, utbl_chksum : 0xe619d30d)
[  457.128338][T17221] exFAT-fs (loop8): start_clu is invalid cluster(0xffffffff)
[  457.421194][T17234] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4620'.
[  457.425208][T17234] netlink: 236 bytes leftover after parsing attributes in process `syz.5.4620'.
[  457.428914][T17234] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4620'.
[  458.692320][T17261] netlink: 'syz.5.4632': attribute type 1 has an invalid length.
[  458.698194][T17261] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4632'.
[  458.826831][T17270] netlink: 'syz.5.4636': attribute type 11 has an invalid length.
[  458.944506][   T47] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0
[  458.967323][   T47] hid-generic 0000:0000:0000.000E: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  458.975500][T17281] loop8: detected capacity change from 0 to 2048
[  458.993103][T17281] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  459.206622][  T793] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  459.245205][  T793] hid-generic 0000:0000:0000.000F: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  460.617006][T17304] netlink: 'syz.5.4652': attribute type 3 has an invalid length.
[  460.620050][T17304] netlink: 'syz.5.4652': attribute type 3 has an invalid length.
[  460.698722][T17311] netdevsim netdevsim5 : renamed from netdevsim0 (while UP)
[  461.080824][   T47] usb 9-1: new high-speed USB device number 12 using dummy_hcd
[  461.242398][   T47] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  461.248598][   T47] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3
[  461.256878][   T47] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  461.263384][   T47] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  461.266614][   T47] usb 9-1: SerialNumber: syz
[  461.495449][   T47] usb 9-1: 0:2 : does not exist
[  461.518255][   T47] usb 9-1: USB disconnect, device number 12
[  461.557602][T16821] udevd[16821]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  462.229231][T17364] loop8: detected capacity change from 0 to 32768
[  462.250081][T17364] read_mapping_page failed!
[  462.252088][T17364] ERROR: (device loop8): txCommit: 
[  462.252088][T17364] 
[  462.255295][T17364] ERROR: (device loop8): remounting filesystem as read-only
[  462.258903][T17364] ERROR: (device loop8): diFree: numfree > numinos
[  462.258903][T17364] 
[  462.379886][T17370] loop8: detected capacity change from 0 to 512
[  462.384664][T17370] EXT4-fs: Ignoring removed oldalloc option
[  462.407527][T17370] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  462.413095][T17370] ext4 filesystem being mounted at /260/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  462.462902][T14835] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  463.010613][T14637] usb 9-1: new full-speed USB device number 13 using dummy_hcd
[  463.162856][T14637] usb 9-1: config 4 has an invalid interface number: 88 but max is 0
[  463.166094][T14637] usb 9-1: config 4 has no interface number 0
[  463.168555][T14637] usb 9-1: config 4 interface 88 altsetting 119 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  463.174477][T14637] usb 9-1: config 4 interface 88 has no altsetting 0
[  463.179854][T14637] usb 9-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=af.e7
[  463.183458][T14637] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  463.186338][T14637] usb 9-1: Product: syz
[  463.187858][T14637] usb 9-1: Manufacturer: syz
[  463.189602][T14637] usb 9-1: SerialNumber: syz
[  463.195943][T17390] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  463.248724][T17397] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4693'.
[  463.275452][T17397] 8021q: adding VLAN 0 to HW filter on device bond1
[  463.293280][T17397] macvlan3: entered promiscuous mode
[  463.295331][T17397] macvlan3: entered allmulticast mode
[  463.298339][T17397] bond1: entered promiscuous mode
[  463.303579][T17397] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  463.309287][T17397] bond1: left promiscuous mode
[  463.409567][   T47] usb 9-1: USB disconnect, device number 13
[  464.075780][T17408] loop8: detected capacity change from 0 to 2048
[  464.080186][T17410] 9p: Unknown Cache mode or invalid value /file0
[  464.124975][T17411] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  464.241439][T17411] NILFS (loop8): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  464.247980][T17411] NILFS error (device loop8): nilfs_bmap_propagate: broken bmap (inode number=4)
[  464.270507][T17411] Remounting filesystem read-only
[  464.278556][T14835] NILFS (loop8): disposed unprocessed dirty file(s) when stopping log writer
[  464.819144][T17470] netlink: 2 bytes leftover after parsing attributes in process `syz.5.4728'.
[  465.912255][T17506] netlink: 104 bytes leftover after parsing attributes in process `syz.0.4743'.
[  466.494910][T17534] netlink: 212408 bytes leftover after parsing attributes in process `syz.8.4757'.
[  466.883103][T17537] loop8: detected capacity change from 0 to 1024
[  467.430477][T17558] cgroup: Name too long
[  468.692872][T17573] loop8: detected capacity change from 0 to 32768
[  468.803123][T17583] tipc: Trying to set illegal importance in message
[  469.750608][   T24] usb 9-1: new high-speed USB device number 14 using dummy_hcd
[  469.980563][   T24] usb 9-1: Using ep0 maxpacket: 32
[  469.992704][   T24] usb 9-1: config 0 has an invalid interface number: 67 but max is 0
[  469.995873][   T24] usb 9-1: config 0 has no interface number 0
[  470.172672][   T24] usb 9-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  470.176278][   T24] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  470.189945][   T24] usb 9-1: Product: syz
[  470.192035][   T24] usb 9-1: Manufacturer: syz
[  470.193944][   T24] usb 9-1: SerialNumber: syz
[  470.198663][   T24] usb 9-1: config 0 descriptor??
[  470.207988][   T24] smsc95xx v2.0.0
[  470.746321][   T24] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  470.751305][   T24] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  471.338260][T17641] netlink: 7 bytes leftover after parsing attributes in process `syz.5.4804'.
[  471.366883][   T24] smsc95xx 9-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000104: -71
[  471.373901][   T24] smsc95xx 9-1:0.67: probe with driver smsc95xx failed with error -71
[  471.378729][   T24] usb 9-1: USB disconnect, device number 14
[  471.661317][T17657] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4812'.
[  473.180178][T17720] ref_ctr_offset mismatch. inode: 0x279c offset: 0x0 ref_ctr_offset(old): 0x200000000100 ref_ctr_offset(new): 0x0
[  473.532297][T17734] __vm_enough_memory: pid: 17734, comm: syz.0.4846, bytes: 21200316166144 not enough memory for the allocation
[  473.567085][T17738] netlink: 36 bytes leftover after parsing attributes in process `syz.8.4848'.
[  475.617038][T17788] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4870'.
[  475.911614][T17793] loop8: detected capacity change from 0 to 32768
[  475.915588][T17793] XFS: noikeep mount option is deprecated.
[  475.918030][T17793] XFS (loop8): no-recovery mounts must be read-only.
[  476.033710][T17800] loop8: detected capacity change from 0 to 1024
[  476.072393][T17800] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  476.077918][T17800] EXT4-fs (loop8): revision level too high, forcing read-only mode
[  476.085399][T17800] EXT4-fs (loop8): orphan cleanup on readonly fs
[  476.089432][T17800] EXT4-fs error (device loop8): ext4_free_blocks:6696: comm syz.8.4875: Freeing blocks not in datazone - block = 0, count = 4096
[  476.104151][T17800] EXT4-fs (loop8): 1 orphan inode deleted
[  476.107888][T17800] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  476.122473][T17800] EXT4-fs error (device loop8): ext4_validate_block_bitmap:441: comm syz.8.4875: bg 0: block 10: padding at end of block bitmap is not set
[  476.155199][T14835] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  476.496246][T17810] infiniband syz2: set active
[  476.498195][T17810] infiniband syz2: added bond_slave_0
[  476.564559][T17810] RDS/IB: syz2: added
[  476.572075][T17810] smc: adding ib device syz2 with port count 1
[  476.574853][T17810] smc:    ib device syz2 port 1 has pnetid 
[  477.367303][T17846] netlink: 104 bytes leftover after parsing attributes in process `syz.8.4894'.
[  477.504088][T17853] netlink: 2036 bytes leftover after parsing attributes in process `syz.8.4897'.
[  477.508355][T17853] netlink: 24 bytes leftover after parsing attributes in process `syz.8.4897'.
[  477.768742][T17862] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4901'.
[  477.872409][T17868] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  477.875688][T17868] IPv6: NLM_F_CREATE should be set when creating new route
[  478.002324][T17876] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.4908'.
[  478.600646][   T24] usb 9-1: new high-speed USB device number 15 using dummy_hcd
[  478.760881][   T24] usb 9-1: Using ep0 maxpacket: 8
[  478.766854][   T24] usb 9-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  478.772240][   T24] usb 9-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  478.780455][   T24] usb 9-1: config 0 interface 0 has no altsetting 0
[  478.784196][   T24] usb 9-1: New USB device found, idVendor=05ac, idProduct=0230, bcdDevice= 0.00
[  478.788362][   T24] usb 9-1: New USB device strings: Mfr=32, Product=0, SerialNumber=0
[  478.795363][   T24] usb 9-1: Manufacturer: syz
[  478.805156][   T24] usb 9-1: config 0 descriptor??
[  478.813643][   T24] input: bcm5974 as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input20
[  479.027356][ T5283] bcm5974 9-1:0.0: could not read from device
[  479.039415][ T5283] bcm5974 9-1:0.0: could not read from device
[  479.048545][ T5283] bcm5974 9-1:0.0: could not read from device
[  479.049279][   T24] usb 9-1: USB disconnect, device number 15
[  479.235295][T17924] sctp: [Deprecated]: syz.5.4928 (pid 17924) Use of int in maxseg socket option.
[  479.235295][T17924] Use struct sctp_assoc_value instead
[  479.482513][T17942] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4936'.
[  479.486246][T17942] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4936'.
[  479.533958][T17942] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4936'.
[  479.540572][T17942] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4936'.
[  479.655283][T17950] netlink: 'syz.5.4941': attribute type 34 has an invalid length.
[  479.709202][T17954] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4942'.
[  479.758355][T14637] kernel write not supported for file /692/loginuid (pid: 14637 comm: kworker/0:6)
[  480.076649][T17982] smc: net device bond0 applied user defined pnetid SYZ0
[  480.155544][T17988] loop8: detected capacity change from 0 to 1024
[  480.159050][T17988] EXT4-fs: Ignoring removed nobh option
[  480.162542][T17988] EXT4-fs: Ignoring removed bh option
[  480.179960][T17988] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  480.227633][T14835] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  480.314079][T17999] netlink: 'syz.0.4963': attribute type 1 has an invalid length.
[  480.317246][T17999] netlink: 'syz.0.4963': attribute type 2 has an invalid length.
[  480.810067][T18013] wg2: entered promiscuous mode
[  480.815843][T18013] wg2: entered allmulticast mode
[  480.865091][T18019] netlink: 'syz.0.4972': attribute type 3 has an invalid length.
[  481.669005][T18046] trusted_key: syz.8.4984 sent an empty control message without MSG_MORE.
[  482.087872][T18062] bridge: RTM_NEWNEIGH with invalid ether address
[  482.884875][T18068] loop8: detected capacity change from 0 to 128
[  482.924196][T18068] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  482.962541][T18068] hpfs: filesystem error: improperly stopped
[  482.964934][T18068] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  482.967823][T18068] hpfs: You really don't want any checks? You are crazy...
[  482.983543][T18068] hpfs: hpfs_map_sector(): read error
[  482.986026][T18068] hpfs: code page support is disabled
[  482.988201][T18068] hpfs: hpfs_map_4sectors(): unaligned read
[  482.991769][T18068] hpfs: hpfs_map_4sectors(): unaligned read
[  482.994290][T18068] hpfs: filesystem error: unable to find root dir
[  485.417772][   T33] kauditd_printk_skb: 3 callbacks suppressed
[  485.417791][   T33] audit: type=1107 audit(1757969857.894:209): pid=18141 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  485.430469][T12330] usb 9-1: new high-speed USB device number 16 using dummy_hcd
[  485.582667][T12330] usb 9-1: Using ep0 maxpacket: 16
[  485.587380][T12330] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  485.596822][T12330] usb 9-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d
[  485.600605][T12330] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  485.603813][T12330] usb 9-1: Product: syz
[  485.605569][T12330] usb 9-1: Manufacturer: syz
[  485.607484][T12330] usb 9-1: SerialNumber: syz
[  485.613334][T12330] usb 9-1: config 0 descriptor??
[  485.618481][T12330] gspca_main: STV06xx-2.14.0 probing 046d:08f0
[  485.622742][T12330] gspca_stv06xx: st6422 sensor detected
[  486.083756][T12330] STV06xx 9-1:0.0: probe with driver STV06xx failed with error -71
[  486.090183][T12330] usb 9-1: USB disconnect, device number 16
[  486.965788][    C0] hrtimer: interrupt took 42265 ns
[  487.190673][T18206] nbd0: detected capacity change from 0 to 127
[  487.205283][ T7359] block nbd0: Receive control failed (result -104)
[  487.463526][T18225] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5063'.
[  487.980829][T18235] loop8: detected capacity change from 0 to 32768
[  488.003516][T18235] XFS (loop8): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  488.050181][T18235] XFS (loop8): Ending clean mount
[  488.055681][T18235] XFS (loop8): Quotacheck needed: Please wait.
[  488.123275][T18235] XFS (loop8): Quotacheck: Done.
[  488.306949][T18258] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  488.306949][T18258] The task syz.5.5072 (18258) triggered the difference, watch for misbehavior.
[  488.357416][T14835] XFS (loop8): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  489.220125][T18275] kernel read not supported for file /syzkaller (pid: 18275 comm: syz.8.5073)
[  489.232170][   T33] audit: type=1800 audit(1757969861.704:210): pid=18275 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.5073" name="syzkaller" dev="mqueue" ino=48366 res=0 errno=0
[  490.065351][T18290] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5085'.
[  490.073042][T18290] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5085'.
[  490.230706][T18288] loop8: detected capacity change from 0 to 32768
[  490.426778][T18299] loop8: detected capacity change from 0 to 512
[  490.441156][T18299] EXT4-fs: Ignoring removed bh option
[  490.446769][T18299] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem
[  490.500585][T18299] EXT4-fs (loop8): 1 truncate cleaned up
[  490.505907][T18299] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  490.566554][T14835] EXT4-fs error (device loop8): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39
[  490.581919][T14835] EXT4-fs error (device loop8): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39
[  490.654070][T15901] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  490.897769][T18318] futex_wake_op: syz.5.5097 tries to shift op by -2048; fix this program
[  491.945652][T18339] netlink: 'syz.0.5104': attribute type 2 has an invalid length.
[  492.132146][ T5998] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  492.142412][ T5998] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  492.148730][ T5998] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  492.154710][ T5998] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  492.159148][ T5998] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  492.211267][T18343] lo speed is unknown, defaulting to 1000
[  492.636742][T18343] chnl_net:caif_netlink_parms(): no params data found
[  492.648605][T18372] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5115'.
[  492.908061][T18343] bridge0: port 1(bridge_slave_0) entered blocking state
[  492.910292][T18343] bridge0: port 1(bridge_slave_0) entered disabled state
[  492.917309][T18343] bridge_slave_0: entered allmulticast mode
[  492.946914][T18343] bridge_slave_0: entered promiscuous mode
[  493.003386][T18383] overlayfs: failed to clone upperpath
[  493.094362][T18343] bridge0: port 2(bridge_slave_1) entered blocking state
[  493.109895][T18343] bridge0: port 2(bridge_slave_1) entered disabled state
[  493.137243][T18343] bridge_slave_1: entered allmulticast mode
[  493.224578][T18343] bridge_slave_1: entered promiscuous mode
[  493.327565][T18343] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  493.334351][T18343] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  493.361192][T18343] team0: Port device team_slave_0 added
[  493.365053][T18343] team0: Port device team_slave_1 added
[  493.391970][T18343] batman_adv: batadv0: Adding interface: batadv_slave_0
[  493.394686][T18343] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  493.406632][T18343] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  493.414518][T18343] batman_adv: batadv0: Adding interface: batadv_slave_1
[  493.417254][T18343] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  493.430181][T18343] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  493.502683][T18343] hsr_slave_0: entered promiscuous mode
[  493.506219][T18343] hsr_slave_1: entered promiscuous mode
[  493.509202][T18343] debugfs: 'hsr0' already exists in 'hsr'
[  493.511950][T18343] Cannot create hsr debugfs directory
[  493.930902][T18343] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  493.954871][T18343] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  493.972706][T18343] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  493.987129][T18343] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  494.054694][T18401] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5124'.
[  494.128942][T18343] 8021q: adding VLAN 0 to HW filter on device bond0
[  494.153446][T18343] 8021q: adding VLAN 0 to HW filter on device team0
[  494.168003][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[  494.170992][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[  494.195400][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[  494.197909][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[  494.240545][ T5998] Bluetooth: hci0: command tx timeout
[  494.398452][T18343] 8021q: adding VLAN 0 to HW filter on device batadv0
[  494.599229][T18343] veth0_vlan: entered promiscuous mode
[  494.613790][T18343] veth1_vlan: entered promiscuous mode
[  494.653411][T18343] veth0_macvtap: entered promiscuous mode
[  494.659352][T18343] veth1_macvtap: entered promiscuous mode
[  494.677242][T18343] batman_adv: batadv0: Interface activated: batadv_slave_0
[  494.685843][T18343] batman_adv: batadv0: Interface activated: batadv_slave_1
[  494.704332][ T5974] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  494.713630][ T5974] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  494.717470][ T5974] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  494.739593][ T5974] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  494.859085][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  494.866900][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  494.875790][T18435] overlayfs: failed to clone upperpath
[  494.897478][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  494.900160][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  495.024602][T18444] sctp: [Deprecated]: syz.9.5102 (pid 18444) Use of struct sctp_assoc_value in delayed_ack socket option.
[  495.024602][T18444] Use struct sctp_sack_info instead
[  495.126916][T18456] netlink: 'syz.5.5144': attribute type 4 has an invalid length.
[  495.306625][T18469] netlink: 'syz.5.5151': attribute type 2 has an invalid length.
[  495.395296][T18473] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  495.399264][T18473] batadv_slave_0: entered promiscuous mode
[  496.321167][ T5998] Bluetooth: hci0: command tx timeout
[  496.745173][   T33] audit: type=1326 audit(1757969869.224:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18528 comm="syz.5.5179" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbfd58eba9 code=0x7ffc0000
[  496.761645][   T33] audit: type=1326 audit(1757969869.224:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18528 comm="syz.5.5179" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbfd58eba9 code=0x7ffc0000
[  496.772189][   T33] audit: type=1326 audit(1757969869.224:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18528 comm="syz.5.5179" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbbfd58eba9 code=0x7ffc0000
[  496.783890][   T33] audit: type=1326 audit(1757969869.224:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18528 comm="syz.5.5179" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbfd58eba9 code=0x7ffc0000
[  496.803151][   T33] audit: type=1326 audit(1757969869.224:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18528 comm="syz.5.5179" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbbfd58eba9 code=0x7ffc0000
[  496.834682][   T33] audit: type=1326 audit(1757969869.224:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18528 comm="syz.5.5179" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbfd58eba9 code=0x7ffc0000
[  496.866567][   T33] audit: type=1326 audit(1757969869.224:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18528 comm="syz.5.5179" exe="/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7fbbfd58eba9 code=0x7ffc0000
[  496.892745][   T33] audit: type=1326 audit(1757969869.224:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18528 comm="syz.5.5179" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbfd58eba9 code=0x7ffc0000
[  496.918913][   T33] audit: type=1326 audit(1757969869.224:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18528 comm="syz.5.5179" exe="/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fbbfd58eba9 code=0x7ffc0000
[  496.952306][   T33] audit: type=1326 audit(1757969869.224:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18528 comm="syz.5.5179" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbfd58eba9 code=0x7ffc0000
[  497.310575][T18535] loop9: detected capacity change from 0 to 32768
[  497.314296][T18535] XFS (loop9): invalid logbufsize: 13312 [not 16k,32k,64k,128k or 256k]
[  498.514957][ T5998] Bluetooth: hci0: command tx timeout
[  499.070006][T18585] IPVS: sed: SCTP 172.20.20.187:0 - no destination available
[  499.905943][T18607] loop9: detected capacity change from 0 to 256
[  499.914581][T18607] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  499.952391][T18607] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  500.268322][   T24] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  500.432409][   T24] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  500.436879][   T24] usb 10-1: config 0 has 1 interface, different from the descriptor's value: 3
[  500.445048][   T24] usb 10-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00
[  500.448810][   T24] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  500.463008][   T24] usb 10-1: config 0 descriptor??
[  500.738859][ T5998] Bluetooth: hci0: command tx timeout
[  500.905372][   T24] Bluetooth: Can't get state to change to load configuration err
[  500.908522][   T24] Bluetooth: Loading sysconfig file failed
[  500.912991][   T24] ath3k 10-1:0.0: probe with driver ath3k failed with error -16
[  500.923014][   T24] usb 10-1: USB disconnect, device number 2
[  501.505792][T18644] netlink: 'syz.5.5232': attribute type 4 has an invalid length.
[  501.684814][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  501.687933][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  502.133922][T18677] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5246'.
[  502.212860][T18684] netlink: 20 bytes leftover after parsing attributes in process `syz.9.5249'.
[  502.362096][T18695] loop9: detected capacity change from 0 to 256
[  502.398636][T18695] FAT-fs (loop9): Directory bread(block 64) failed
[  502.401197][T18695] FAT-fs (loop9): Directory bread(block 65) failed
[  502.404013][T18695] FAT-fs (loop9): Directory bread(block 66) failed
[  502.410394][T18695] FAT-fs (loop9): Directory bread(block 67) failed
[  502.413193][T18695] FAT-fs (loop9): Directory bread(block 68) failed
[  502.417660][T18695] FAT-fs (loop9): Directory bread(block 69) failed
[  502.420555][T18695] FAT-fs (loop9): Directory bread(block 70) failed
[  502.423035][T18695] FAT-fs (loop9): Directory bread(block 71) failed
[  502.425353][T18695] FAT-fs (loop9): Directory bread(block 72) failed
[  502.432118][T18695] FAT-fs (loop9): Directory bread(block 73) failed
[  502.600133][T18705] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5256'.
[  503.017375][T18722] xt_cluster: you have exceeded the maximum number of cluster nodes (37482740 > 32)
[  503.142812][T18733] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5262'.
[  503.161928][T18733] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5262'.
[  503.165888][T18733] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5262'.
[  503.382925][T18750] overlayfs: failed to clone upperpath
[  503.595646][T18759] netlink: 'syz.9.5275': attribute type 3 has an invalid length.
[  504.875053][T18781] binder: Bad value for 'max'
[  504.884247][T18781] bridge0: port 2(bridge_slave_1) entered disabled state
[  504.889324][T18781] bridge0: port 1(bridge_slave_0) entered disabled state
[  504.908776][T18781] bridge0: entered allmulticast mode
[  505.202452][T18784] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5285'.
[  506.233535][T12330] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[  506.397386][T12330] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 52, changing to 7
[  506.401980][T12330] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 9272, setting to 1024
[  506.411621][T12330] usb 10-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  506.419181][T12330] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  506.425185][T12330] usb 10-1: config 0 descriptor??
[  507.303206][T12330] ath6kl: Failed to submit usb control message: -71
[  507.305316][T12330] ath6kl: unable to send the bmi data to the device: -71
[  507.307733][T12330] ath6kl: Unable to send get target info: -71
[  507.317850][T12330] ath6kl: Failed to init ath6kl core: -71
[  507.320722][T12330] ath6kl_usb 10-1:0.0: probe with driver ath6kl_usb failed with error -71
[  507.337588][T12330] usb 10-1: USB disconnect, device number 3
[  509.739327][   T33] kauditd_printk_skb: 1 callbacks suppressed
[  509.739337][   T33] audit: type=1326 audit(1757969881.375:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18873 comm="syz.0.5321" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f86ac58eba9 code=0x0
[  509.806029][T18881] netlink: 48 bytes leftover after parsing attributes in process `syz.9.5324'.
[  510.137808][   T24] usb 10-1: new high-speed USB device number 4 using dummy_hcd
[  510.295911][   T24] usb 10-1: Using ep0 maxpacket: 8
[  510.301019][   T24] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  510.304268][   T24] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  510.308470][   T24] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  510.312200][   T24] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  510.315601][   T24] usb 10-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  510.323186][   T24] usb 10-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  510.326153][   T24] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  510.331931][   T24] usb 10-1: config 0 descriptor??
[  510.554003][T12330] usb 10-1: USB disconnect, device number 4
[  510.751926][T18919] overlayfs: failed to clone upperpath
[  511.240598][T18962] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  511.448868][T18981] netlink: 20 bytes leftover after parsing attributes in process `syz.9.5372'.
[  511.453690][T18981] tipc: Started in network mode
[  511.455719][T18981] tipc: Node identity aaaaaaaaaa41, cluster identity 4711
[  511.465964][T18981] tipc: Enabled bearer <eth:geneve1>, priority 10
[  512.650607][  T793] tipc: Node number set to 15444650
[  512.708726][T19027] netlink: 'syz.5.5392': attribute type 1 has an invalid length.
[  512.983206][T19044] Bluetooth: MGMT ver 1.23
[  512.985112][T19044] Bluetooth: hci0: too big key_count value 38325
[  513.255421][T19051] netlink: 4280 bytes leftover after parsing attributes in process `syz.5.5398'.
[  513.259830][T19051] netlink: 4280 bytes leftover after parsing attributes in process `syz.5.5398'.
[  513.481057][T19055] loop9: detected capacity change from 0 to 65
[  513.493421][T19055] BFS-fs: bfs_fill_super(): Superblock is corrupted on loop9
[  513.619348][T19061] loop9: detected capacity change from 0 to 2048
[  513.681750][T19061] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  514.218989][T19067] loop9: detected capacity change from 0 to 8
[  514.232679][T19067] SQUASHFS error: xz decompression failed, data probably corrupt
[  514.235940][T19067] SQUASHFS error: Failed to read block 0x108: -5
[  514.244565][T19067] SQUASHFS error: Unable to read metadata cache entry [106]
[  514.246998][T19067] SQUASHFS error: Unable to read inode 0x11f
[  514.708178][T19085] loop9: detected capacity change from 0 to 32768
[  514.729472][   T33] audit: type=1800 audit(1757969886.043:223): pid=19085 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.5417" name="file1" dev="loop9" ino=4 res=0 errno=0
[  514.735409][T19085] syz.9.5417: attempt to access beyond end of device
[  514.735409][T19085] loop9: rw=34817, sector=2622464, nr_sectors = 832 limit=32768
[  514.757878][  T115] blkno = 50080, nblocks = 68
[  514.759803][  T115] ERROR: (device loop9): dbFree: block to be freed is outside the map
[  514.759803][  T115] 
[  514.769161][  T115] ERROR: (device loop9): remounting filesystem as read-only
[  515.823243][   T24] usb 10-1: new high-speed USB device number 5 using dummy_hcd
[  515.987880][   T24] usb 10-1: Using ep0 maxpacket: 16
[  515.997415][   T24] usb 10-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb
[  516.001353][   T24] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  516.004843][   T24] usb 10-1: Product: syz
[  516.006640][   T24] usb 10-1: Manufacturer: syz
[  516.008688][   T24] usb 10-1: SerialNumber: syz
[  516.387473][   T24] usb 10-1: Quirk or no altset; falling back to MIDI 1.0
[  516.429793][   T24] snd-usb-audio 10-1:222.0: probe with driver snd-usb-audio failed with error -71
[  516.437632][   T24] usb 10-1: USB disconnect, device number 5
[  516.456218][T16662] udevd[16662]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:222.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  516.598338][   T33] audit: type=1326 audit(1757969887.792:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19141 comm="syz.5.5440" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbfd58eba9 code=0x7ffc0000
[  516.607296][   T33] audit: type=1326 audit(1757969887.801:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19141 comm="syz.5.5440" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbfd58eba9 code=0x7ffc0000
[  516.620872][   T33] audit: type=1326 audit(1757969887.801:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19141 comm="syz.5.5440" exe="/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7fbbfd58eba9 code=0x7ffc0000
[  516.630175][   T33] audit: type=1326 audit(1757969887.801:227): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19141 comm="syz.5.5440" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbfd58eba9 code=0x7ffc0000
[  516.639832][   T33] audit: type=1326 audit(1757969887.801:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19141 comm="syz.5.5440" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbbfd58eba9 code=0x7ffc0000
[  516.650363][   T33] audit: type=1326 audit(1757969887.801:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19141 comm="syz.5.5440" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbfd58eba9 code=0x7ffc0000
[  516.660261][   T33] audit: type=1326 audit(1757969887.801:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19141 comm="syz.5.5440" exe="/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7fbbfd58eba9 code=0x7ffc0000
[  516.669351][   T33] audit: type=1326 audit(1757969887.801:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19141 comm="syz.5.5440" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbfd58eba9 code=0x7ffc0000
[  516.681109][   T33] audit: type=1326 audit(1757969887.801:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19141 comm="syz.5.5440" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbfd58eba9 code=0x7ffc0000
[  518.800666][   T11] block nbd0: Possible stuck request ffff888020490000: control (read@0,1024B). Runtime 30 seconds
[  518.805156][   T11] block nbd0: Possible stuck request ffff888020490200: control (read@1024,1024B). Runtime 30 seconds
[  518.811398][   T11] block nbd0: Possible stuck request ffff888020490400: control (read@2048,1024B). Runtime 30 seconds
[  518.815568][   T11] block nbd0: Possible stuck request ffff888020490600: control (read@3072,1024B). Runtime 30 seconds
[  520.739066][T19268] netlink: 'syz.5.5495': attribute type 11 has an invalid length.
[  521.045720][T19285] loop9: detected capacity change from 0 to 16
[  521.055034][T19285] erofs (device loop9): mounted with root inode @ nid 36.
[  521.516581][T19307] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5512'.
[  521.520270][T19307] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5512'.
[  522.675614][  T792] usb 10-1: new high-speed USB device number 6 using dummy_hcd
[  522.934894][  T792] usb 10-1: Using ep0 maxpacket: 8
[  522.938829][  T792] usb 10-1: config 0 has an invalid interface number: 1 but max is 0
[  522.941461][  T792] usb 10-1: config 0 has no interface number 0
[  522.944030][  T792] usb 10-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  522.947777][  T792] usb 10-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  522.950811][  T792] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  522.955998][  T792] usb 10-1: config 0 descriptor??
[  522.969193][  T792] iowarrior 10-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  524.276054][  T792] usb 10-1: USB disconnect, device number 6
[  525.188373][  T792] usb 10-1: new high-speed USB device number 7 using dummy_hcd
[  525.349969][  T792] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[  525.353016][  T792] usb 10-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  525.357744][  T792] usb 10-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[  525.362827][  T792] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  525.365252][  T792] usb 10-1: Product: syz
[  525.366577][  T792] usb 10-1: Manufacturer: syz
[  525.368043][  T792] usb 10-1: SerialNumber: syz
[  525.371619][  T792] usb 10-1: config 0 descriptor??
[  525.373610][T19370] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[  525.375905][T19370] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[  525.536594][T19391] netlink: 'syz.5.5549': attribute type 4 has an invalid length.
[  525.548995][  T793] lo speed is unknown, defaulting to 1000
[  525.556604][  T793] syz0: Port: 1 Link DOWN
[  525.558844][T19391] netlink: 'syz.5.5549': attribute type 4 has an invalid length.
[  525.582195][   T10] lo speed is unknown, defaulting to 1000
[  525.584830][   T10] syz0: Port: 1 Link ACTIVE
[  525.592297][  T793] lo speed is unknown, defaulting to 1000
[  525.595879][  T793] syz0: Port: 1 Link DOWN
[  525.604382][T19370] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[  525.609444][T19370] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22
[  526.072889][  T792] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00
[  527.043255][  T792] dm9601 10-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71
[  527.060137][  T792] dm9601 10-1:0.0 eth21: register 'dm9601' at usb-dummy_hcd.9-1, Davicom DM96xx USB 10/100 Ethernet, b6:e9:32:fc:01:65
[  527.067388][  T792] usb 10-1: USB disconnect, device number 7
[  527.071357][  T792] dm9601 10-1:0.0 eth21: unregister 'dm9601' usb-dummy_hcd.9-1, Davicom DM96xx USB 10/100 Ethernet
[  527.684371][T19418] loop9: detected capacity change from 0 to 8
[  527.688453][T19418] MTD: Attempt to mount non-MTD device "/dev/loop9"
[  527.970575][T19424] cramfs: Error -5 while decompressing!
[  527.973201][T19424] cramfs: ffffffff99bf9ce8(26)->ffff88811af58000(4096)
[  527.976069][T19424] cramfs: Error -3 while decompressing!
[  527.978803][T19424] cramfs: ffffffff99bf9d02(26)->ffff888112689000(4096)
[  527.981693][T19424] cramfs: Error -3 while decompressing!
[  527.984092][T19424] cramfs: ffffffff99bf9d1c(16)->ffff888111ad3000(4096)
[  527.987171][T19424] cramfs: Error -5 while decompressing!
[  527.989793][T19424] cramfs: ffffffff99bf9ce8(26)->ffff88811af58000(4096)
[  527.997178][   T33] audit: type=1800 audit(1757970411.452:233): pid=19424 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.5561" name="file2" dev="loop9" ino=348 res=0 errno=0
[  529.032776][T19441] xt_l2tp: missing protocol rule (udp|l2tpip)
[  530.836550][T19487] loop9: detected capacity change from 0 to 32768
[  530.840681][T19487] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.5590 (19487)
[  530.883042][T19487] BTRFS info (device loop9 state S): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  530.893544][T19487] BTRFS info (device loop9 state S): using crc32c (crc32c-lib) checksum algorithm
[  530.947493][   T26] BTRFS warning (device loop9 state S): checksum verify failed on logical 1052672 mirror 1 wanted 0x37e030f7 found 0x3a96e814 level 0, ignored
[  530.959686][T19487] BTRFS error (device loop9 state S): devid 1 uuid ffe9ff7f-0000-0000-0000-9003f3eadbc4 is missing
[  530.972631][T19487] BTRFS error (device loop9 state S): failed to read chunk tree: -2
[  530.998988][T19487] BTRFS error (device loop9 state S): open_ctree failed: -2
[  531.273047][T19511] netlink: 92 bytes leftover after parsing attributes in process `syz.9.5595'.
[  531.287346][T19511] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5595'.
[  533.460437][T19557] netlink: 'syz.5.5616': attribute type 7 has an invalid length.
[  533.676329][T12330] usb 10-1: new high-speed USB device number 8 using dummy_hcd
[  533.836677][T12330] usb 10-1: Using ep0 maxpacket: 8
[  533.843336][T12330] usb 10-1: New USB device found, idVendor=0ccd, idProduct=0069, bcdDevice=6e.55
[  533.846942][T12330] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  533.850353][T12330] usb 10-1: Product: syz
[  533.852070][T12330] usb 10-1: Manufacturer: syz
[  533.853825][T12330] usb 10-1: SerialNumber: syz
[  533.859058][T12330] usb 10-1: config 0 descriptor??
[  534.081365][T12330] usb 10-1: dvb_usb_v2: usb_bulk_msg() failed=-22
[  534.092348][T12330] dvb_usb_af9015 10-1:0.0: probe with driver dvb_usb_af9015 failed with error -22
[  534.107177][T12330] usb 10-1: USB disconnect, device number 8
[  534.204943][T19567] ==================================================================
[  534.208021][T19567] BUG: KASAN: slab-use-after-free in xfrm_alloc_spi+0x570/0xf30
[  534.210923][T19567] Read of size 4 at addr ffff88810e945bc4 by task syz.5.5621/19567
[  534.215691][T19567] 
[  534.217181][T19567] CPU: 0 UID: 0 PID: 19567 Comm: syz.5.5621 Not tainted syzkaller #0 PREEMPT(full) 
[  534.217201][T19567] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  534.217211][T19567] Call Trace:
[  534.217219][T19567]  <TASK>
[  534.217227][T19567]  dump_stack_lvl+0x189/0x250
[  534.217248][T19567]  ? __kasan_check_byte+0x12/0x40
[  534.217284][T19567]  ? __pfx_dump_stack_lvl+0x10/0x10
[  534.217300][T19567]  ? lock_release+0x4b/0x3e0
[  534.217322][T19567]  ? __virt_addr_valid+0x4a5/0x5c0
[  534.217341][T19567]  print_report+0xca/0x240
[  534.217354][T19567]  ? xfrm_alloc_spi+0x570/0xf30
[  534.217372][T19567]  kasan_report+0x118/0x150
[  534.217391][T19567]  ? xfrm_alloc_spi+0x570/0xf30
[  534.217411][T19567]  xfrm_alloc_spi+0x570/0xf30
[  534.217455][T19567]  ? xfrm_alloc_spi+0x2a0/0xf30
[  534.217477][T19567]  ? __local_bh_enable_ip+0x133/0x1c0
[  534.217495][T19567]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  534.217510][T19567]  ? xfrm_find_acq+0x87/0xa0
[  534.217529][T19567]  pfkey_getspi+0x7a8/0xee0
[  534.217549][T19567]  pfkey_sendmsg+0xbfe/0x1090
[  534.217562][T19567]  ? trace_sched_exit_tp+0x36/0x110
[  534.217584][T19567]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  534.217606][T19567]  ? aa_sock_msg_perm+0xf1/0x1d0
[  534.217621][T19567]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  534.217646][T19567]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  534.217662][T19567]  __sock_sendmsg+0x21c/0x270
[  534.217685][T19567]  ____sys_sendmsg+0x505/0x830
[  534.217704][T19567]  ? __pfx_____sys_sendmsg+0x10/0x10
[  534.217724][T19567]  ? import_iovec+0x74/0xa0
[  534.217771][T19567]  ___sys_sendmsg+0x21f/0x2a0
[  534.217789][T19567]  ? __pfx____sys_sendmsg+0x10/0x10
[  534.217816][T19567]  ? __fget_files+0x2a/0x420
[  534.217829][T19567]  ? __fget_files+0x3a0/0x420
[  534.217845][T19567]  __x64_sys_sendmsg+0x19b/0x260
[  534.217862][T19567]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  534.217886][T19567]  ? do_syscall_64+0xbe/0x3b0
[  534.217903][T19567]  do_syscall_64+0xfa/0x3b0
[  534.217917][T19567]  ? lockdep_hardirqs_on+0x9c/0x150
[  534.217930][T19567]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  534.217944][T19567]  ? exc_page_fault+0x9f/0xf0
[  534.217958][T19567]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  534.217971][T19567] RIP: 0033:0x7fbbfd58eba9
[  534.217985][T19567] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  534.217998][T19567] RSP: 002b:00007fbbfe3c4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  534.218011][T19567] RAX: ffffffffffffffda RBX: 00007fbbfd7d5fa0 RCX: 00007fbbfd58eba9
[  534.218022][T19567] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003
[  534.218032][T19567] RBP: 00007fbbfd611e19 R08: 0000000000000000 R09: 0000000000000000
[  534.218041][T19567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  534.218050][T19567] R13: 00007fbbfd7d6038 R14: 00007fbbfd7d5fa0 R15: 00007fffbf4926d8
[  534.218067][T19567]  </TASK>
[  534.218073][T19567] 
[  534.333664][T19567] Allocated by task 18323:
[  534.335481][T19567]  kasan_save_track+0x3e/0x80
[  534.337397][T19567]  __kasan_slab_alloc+0x6c/0x80
[  534.339378][T19567]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  534.341533][T19567]  xfrm_state_alloc+0x24/0x2f0
[  534.343369][T19567]  __find_acq_core+0x8a7/0x1c00
[  534.345240][T19567]  xfrm_find_acq+0x78/0xa0
[  534.347045][T19567]  xfrm_alloc_userspi+0x6b3/0xc90
[  534.349136][T19567]  xfrm_user_rcv_msg+0x7a3/0xab0
[  534.351198][T19567]  netlink_rcv_skb+0x208/0x470
[  534.353219][T19567]  xfrm_netlink_rcv+0x79/0x90
[  534.355204][T19567]  netlink_unicast+0x82f/0x9e0
[  534.357202][T19567]  netlink_sendmsg+0x805/0xb30
[  534.359216][T19567]  __sock_sendmsg+0x21c/0x270
[  534.361049][T19567]  ____sys_sendmsg+0x505/0x830
[  534.362911][T19567]  ___sys_sendmsg+0x21f/0x2a0
[  534.364704][T19567]  __x64_sys_sendmsg+0x19b/0x260
[  534.366584][T19567]  do_syscall_64+0xfa/0x3b0
[  534.368313][T19567]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  534.370605][T19567] 
[  534.371587][T19567] Freed by task 793:
[  534.373163][T19567]  kasan_save_track+0x3e/0x80
[  534.375051][T19567]  kasan_save_free_info+0x46/0x50
[  534.377000][T19567]  __kasan_slab_free+0x5b/0x80
[  534.378928][T19567]  kmem_cache_free+0x18f/0x400
[  534.380843][T19567]  xfrm_state_gc_task+0x52d/0x6b0
[  534.382808][T19567]  process_scheduled_works+0xae1/0x17b0
[  534.384884][T19567]  worker_thread+0x8a0/0xda0
[  534.386663][T19567]  kthread+0x711/0x8a0
[  534.388318][T19567]  ret_from_fork+0x439/0x7d0
[  534.390162][T19567]  ret_from_fork_asm+0x1a/0x30
[  534.392001][T19567] 
[  534.392948][T19567] The buggy address belongs to the object at ffff88810e945b00
[  534.392948][T19567]  which belongs to the cache xfrm_state of size 928
[  534.398200][T19567] The buggy address is located 196 bytes inside of
[  534.398200][T19567]  freed 928-byte region [ffff88810e945b00, ffff88810e945ea0)
[  534.403370][T19567] 
[  534.404335][T19567] The buggy address belongs to the physical page:
[  534.407068][T19567] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88810e945b00 pfn:0x10e944
[  534.411096][T19567] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  534.414428][T19567] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  534.417475][T19567] page_type: f5(slab)
[  534.419052][T19567] raw: 057ff00000000040 ffff888104b48640 dead000000000122 0000000000000000
[  534.422478][T19567] raw: ffff88810e945b00 00000000800e0004 00000000f5000000 0000000000000000
[  534.425890][T19567] head: 057ff00000000040 ffff888104b48640 dead000000000122 0000000000000000
[  534.429323][T19567] head: ffff88810e945b00 00000000800e0004 00000000f5000000 0000000000000000
[  534.432594][T19567] head: 057ff00000000002 ffffea00043a5101 00000000ffffffff 00000000ffffffff
[  534.435991][T19567] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  534.439467][T19567] page dumped because: kasan: bad access detected
[  534.441997][T19567] page_owner tracks the page as allocated
[  534.444307][T19567] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 9970, tgid 9969 (syz.4.1619), ts 224558132578, free_ts 224541110290
[  534.451653][T19567]  post_alloc_hook+0x240/0x2a0
[  534.453590][T19567]  get_page_from_freelist+0x2256/0x2330
[  534.455761][T19567]  __alloc_frozen_pages_noprof+0x181/0x370
[  534.457972][T19567]  alloc_pages_mpol+0x232/0x4a0
[  534.459904][T19567]  allocate_slab+0x8a/0x370
[  534.461747][T19567]  ___slab_alloc+0xbeb/0x1420
[  534.463682][T19567]  kmem_cache_alloc_noprof+0x283/0x3c0
[  534.465937][T19567]  xfrm_state_alloc+0x24/0x2f0
[  534.467908][T19567]  xfrm_state_find+0x37d4/0x5400
[  534.469870][T19567]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  534.472225][T19567]  xfrm_lookup_with_ifid+0x58a/0x1a70
[  534.474316][T19567]  xfrm_lookup_route+0x3c/0x1c0
[  534.476302][T19567]  sctp_v6_get_dst+0xffa/0x1bc0
[  534.478230][T19567]  sctp_transport_route+0x118/0x2f0
[  534.479855][T19567]  sctp_packet_config+0x478/0xd90
[  534.481522][T19567]  sctp_packet_singleton+0x158/0x330
[  534.483182][T19567] page last free pid 9970 tgid 9969 stack trace:
[  534.485128][T19567]  __free_frozen_pages+0xbc4/0xd30
[  534.486767][T19567]  stack_depot_save_flags+0x436/0x860
[  534.488497][T19567]  kasan_save_track+0x4f/0x80
[  534.490004][T19567]  __kasan_slab_alloc+0x6c/0x80
[  534.491671][T19567]  kmem_cache_alloc_node_noprof+0x1bb/0x3c0
[  534.493645][T19567]  __alloc_skb+0x112/0x2d0
[  534.495097][T19567]  __tcp_send_ack+0xaf/0x620
[  534.496502][T19567]  tcp_delack_timer_handler+0x366/0x530
[  534.498214][T19567]  tcp_delack_timer+0x205/0x3b0
[  534.499744][T19567]  call_timer_fn+0x17e/0x5f0
[  534.501350][T19567]  __run_timer_base+0x61a/0x860
[  534.503093][T19567]  run_timer_softirq+0xb7/0x180
[  534.505058][T19567]  handle_softirqs+0x286/0x870
[  534.507066][T19567]  do_softirq+0xec/0x180
[  534.508823][T19567]  __local_bh_enable_ip+0x17d/0x1c0
[  534.510965][T19567]  xfrm_state_find+0x4995/0x5400
[  534.513019][T19567] 
[  534.514022][T19567] Memory state around the buggy address:
[  534.516110][T19567]  ffff88810e945a80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  534.518625][T19567]  ffff88810e945b00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  534.520976][T19567] >ffff88810e945b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  534.523555][T19567]                                            ^
[  534.525972][T19567]  ffff88810e945c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  534.528337][T19567]  ffff88810e945c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  534.530744][T19567] ==================================================================
[  534.533258][T19567] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  534.535660][T19567] CPU: 0 UID: 0 PID: 19567 Comm: syz.5.5621 Not tainted syzkaller #0 PREEMPT(full) 
[  534.538647][T19567] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  534.541660][T19567] Call Trace:
[  534.542668][T19567]  <TASK>
[  534.543654][T19567]  dump_stack_lvl+0x99/0x250
[  534.545096][T19567]  ? __asan_memcpy+0x40/0x70
[  534.546935][T19567]  ? __pfx_dump_stack_lvl+0x10/0x10
[  534.548688][T19567]  ? __pfx__printk+0x10/0x10
[  534.550173][T19567]  vpanic+0x281/0x750
[  534.551622][T19567]  ? __pfx_vpanic+0x10/0x10
[  534.553409][T19567]  ? irqentry_exit+0x74/0x90
[  534.554901][T19567]  panic+0xb9/0xc0
[  534.556232][T19567]  ? __pfx_panic+0x10/0x10
[  534.557685][T19567]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  534.559537][T19567]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  534.561469][T19567]  ? xfrm_alloc_spi+0x570/0xf30
[  534.563160][T19567]  check_panic_on_warn+0x89/0xb0
[  534.564879][T19567]  ? xfrm_alloc_spi+0x570/0xf30
[  534.566456][T19567]  end_report+0x78/0x160
[  534.568173][T19567]  kasan_report+0x129/0x150
[  534.569915][T19567]  ? xfrm_alloc_spi+0x570/0xf30
[  534.571681][T19567]  xfrm_alloc_spi+0x570/0xf30
[  534.573199][T19567]  ? xfrm_alloc_spi+0x2a0/0xf30
[  534.574811][T19567]  ? __local_bh_enable_ip+0x133/0x1c0
[  534.576848][T19567]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  534.578639][T19567]  ? xfrm_find_acq+0x87/0xa0
[  534.580200][T19567]  pfkey_getspi+0x7a8/0xee0
[  534.581790][T19567]  pfkey_sendmsg+0xbfe/0x1090
[  534.583428][T19567]  ? trace_sched_exit_tp+0x36/0x110
[  534.585043][T19567]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  534.587034][T19567]  ? aa_sock_msg_perm+0xf1/0x1d0
[  534.588581][T19567]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  534.590442][T19567]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  534.592038][T19567]  __sock_sendmsg+0x21c/0x270
[  534.593541][T19567]  ____sys_sendmsg+0x505/0x830
[  534.595003][T19567]  ? __pfx_____sys_sendmsg+0x10/0x10
[  534.596661][T19567]  ? import_iovec+0x74/0xa0
[  534.598095][T19567]  ___sys_sendmsg+0x21f/0x2a0
[  534.599591][T19567]  ? __pfx____sys_sendmsg+0x10/0x10
[  534.601227][T19567]  ? __fget_files+0x2a/0x420
[  534.602683][T19567]  ? __fget_files+0x3a0/0x420
[  534.604165][T19567]  __x64_sys_sendmsg+0x19b/0x260
[  534.605730][T19567]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  534.607465][T19567]  ? do_syscall_64+0xbe/0x3b0
[  534.608963][T19567]  do_syscall_64+0xfa/0x3b0
[  534.610812][T19567]  ? lockdep_hardirqs_on+0x9c/0x150
[  534.612937][T19567]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  534.615407][T19567]  ? exc_page_fault+0x9f/0xf0
[  534.617293][T19567]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  534.619680][T19567] RIP: 0033:0x7fbbfd58eba9
[  534.621422][T19567] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  534.627743][T19567] RSP: 002b:00007fbbfe3c4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  534.630365][T19567] RAX: ffffffffffffffda RBX: 00007fbbfd7d5fa0 RCX: 00007fbbfd58eba9
[  534.632974][T19567] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003
[  534.635591][T19567] RBP: 00007fbbfd611e19 R08: 0000000000000000 R09: 0000000000000000
[  534.638163][T19567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  534.640747][T19567] R13: 00007fbbfd7d6038 R14: 00007fbbfd7d5fa0 R15: 00007fffbf4926d8
[  534.643408][T19567]  </TASK>
[  534.645100][T19567] Kernel Offset: disabled
[  534.646557][T19567] Rebooting in 86400 seconds..

VM DIAGNOSIS:
20:58:26  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000035 RBX=0000000000000035 RCX=0000000000000000 RDX=00000000000003f8
RSI=000000000000121f RDI=0000000000001220 RBP=00000000000003f8 RSP=ffffc9000487eeb0
R8 =ffff88801f6d0237 R9 =1ffff11003eda046 R10=dffffc0000000000 R11=ffffffff854fd650
R12=dffffc0000000000 R13=ffffffff99b0390c R14=ffffffff99df8ac0 R15=0000000000000000
RIP=ffffffff854fd6cc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fbbfe3c46c0 ffffffff 00c00000
GS =0000 ffff8880b8612000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fbbfe3c3fc8 CR3=0000000038fc8000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fbbfd7a7498 00007fbbfd7a7470 XMM03=00007fbbfd7a74a8 00007fbbfd7a74a0
XMM04=00007fbbfe30d100 00007fbbfd7a7460 XMM05=00007fbbfd7a7478 00007fbbfd7a74c0
XMM06=00007fbbfd7a74b8 00007fbbfd7a74b0 XMM07=00007fbbfd7a74a8 00007fbbfd7a74a0
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007fbbfd612fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=680119e2fa263000 RBX=ffffffff819693f8 RCX=680119e2fa263000 RDX=0000000000000001
RSI=ffffffff8d9ba594 RDI=ffffffff8be34100 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f9b R9 =1ffff11026cc65f3 R10=dffffc0000000000 R11=ffffed1026cc65f4
R12=ffffffff8fa3a930 R13=0000000000000001 R14=0000000000000001 R15=1ffff110200d7000
RIP=ffffffff8b7a73f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c12000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000000040 CR3=0000000038fc8000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=000000000000000a 0000203300060005
XMM02=0000000000000000 00000000000002fc XMM03=0000000000050005 0000000000000000
XMM04=0300130002000000 0000000000ffffff XMM05=ffffff0000000000 0000000000000000
XMM06=000000000a000000 0000050005000000 XMM07=0000000000000000 0000000000000000
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007fbbfd612fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
