last executing test programs:

1.600742386s ago: executing program 2 (id=416):
r0 = socket$kcm(0x2, 0x200000000000001, 0x0)
setsockopt$sock_attach_bpf(r0, 0x1, 0x50, &(0x7f0000000100), 0x48)

1.600282336s ago: executing program 2 (id=418):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x3c, r1, 0x1, 0x70bd26, 0x0, {0x17}, [@DEVLINK_ATTR_PORT_INDEX={0x8}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040885}, 0x40080)

1.530687633s ago: executing program 2 (id=420):
openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card3/oss_mixer\x00', 0x620240, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x48)
r0 = openat$vmci(0xffffff9c, &(0x7f0000001180), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x10000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f00000000c0)={@hyper})
ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(r0, 0x7b2, &(0x7f00000010c0)={&(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xde23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0xffdfffff, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x167, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa], 0x1, 0x400})
ioctl$IOCTL_VMCI_CTX_ADD_NOTIFICATION(r0, 0x7af, &(0x7f0000001100)={@hyper, 0x8001})

1.530460047s ago: executing program 2 (id=422):
r0 = syz_usb_connect$uac3(0x0, 0x9c, &(0x7f0000000040)=ANY=[@ANYBLOB="12010003000000400304d8b840000102030109028a002301046008080b000101243001090400"], &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
syz_usb_control_io(r0, 0x0, 0x0)

1.350929863s ago: executing program 1 (id=426):
syz_mount_image$ext4(&(0x7f0000000240)='ext2\x00', &(0x7f0000000b80)='./file0\x00', 0x1008002, &(0x7f0000000000)={[{}, {@discard}]}, 0x3, 0x5fe, &(0x7f0000000300)="$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")

1.350778134s ago: executing program 1 (id=427):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={0x0, &(0x7f0000000f40)=""/4085, 0x0, 0xff5, 0x8}, 0x28)

1.301591307s ago: executing program 1 (id=428):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="31030400008000000000380000000e0001"], 0x3c}, 0x1, 0x2, 0x0, 0x40000c1}, 0x1c810)

1.301389262s ago: executing program 1 (id=429):
syz_mount_image$btrfs(&(0x7f00000004c0), &(0x7f00000015c0)='./file0\x00', 0x8408, &(0x7f0000000200)={[{@nodatasum}]}, 0x0, 0x559e, &(0x7f00000103c0)="$eJzs3X9sVeX9B/BzWwoN+C39jhUYfxAgBoMkyJYtjqB4MQa24eKlgsKcCEQlBivYRDcYqUWSZcaghU4EF5GQaDJjscM/FMywy7CMZfzY5hZjs4JSaZZsAzVrHDG69N77XO49l9tembNOXy/SnvPcz3me+9yT88d9X/qcGwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAURUcSc9+d0f3i0ZE1X77/Hz+e+OjGn4zfvX/roVvu23T/gjMjbto5a1nf+mlN8zdsbDjS/PS+ObdGUSLdL5Htf9u136q/88bbvlsdBly+MLOtrS31lJmuJzON4QUP9vcr/FkRRVFVbIDK7PbV7E5FwQC53cbiAQf0Tuui6O7J8ya1dT01bklyYU/xS6df9VBPYKhkr6ue89dSMv27InZErp136SUKLtFM//gF96m8CADgY5mZSm9yb0ezb3Fz7eZ4PdZOxtotsXZ4h9CS37gYmXGHl5rnpHh9iOaZzESFESXnGatnz3+unYr3j7VjUeNjzLPw0GykqS41z7Wx+lDNEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCzZOzxo2tWtD2y575fdtQceff9OVc+8KWOw22LT4y8eunKHWum/HTWsr7105rmb9jYcKT56X1zbo2i2nS/RKZ74kTL5b9NjZ3fvXfcG427n6vpq8yOG7bD8g6OXg87s0ZH0cq8Sk8Y9q81UZQqLKSb0Y7iwl3pnW+HAgAAAJ8nX0n/rsi1M3GwqqCdSKfJRPpfkAmL77Quiu6ePG9SW9dT45YkF/Zc/HipEuMlLzherl17/ieRF4xD/I2Pd74eDm0sGmdg8RHjef7SMWPefmty/eSvT5v7xA3PjOru+r8nZ2xJ/bGu5oUrru+tf/a6ovxfO3D+D2dO/gcAAOA/If/HxxnYYPn/jqVTt7z+i2Grft3a8MTB+h1/bv3OMzsXneq54Ud9L09N3v7o1UX5f1LBUxbl/zDjkP8roovL/wAAAPBZ9t/O/8micQY2WP5vONM3+wcHX6vr+PucxXt+9dAVi8+e/tv8U7t3DV9zR8v6uoeuLMr/M8vL/8Pypx0e/F2Y8OrRUTSz/JMKAAAAFAj/737+o4WQ1zOfHMTz+rX/vKp5380ffPMbD97zpzff/s2xA7MnrdteN/PgyzfVf1j5ve3dRfk/WV7+r/p0Xi4AAABQhuePrpw773jPucfPvtB18vDu3pMznjyzrqnvdOslLatXbTr2WlH+T5WX/0cMzcsBAAAALuDeO59bsfnVl/oe2H/X2Ck9FVc1XpK4ZduOqU0TPuq8tPfy7VuL8v/y8vL/yOw2u/Ih06kz/BVC6+goqu7fWZspHIparskVAAAAgE9IyOlbP1ixbOzOsb3jj59+rObQG4dn/2Vt55yN13RXdW/uXNZ4WdH9AkJiL3X//3Cng7D+v+D+f0Xr//MKmbv+zXZjAAAAAL6Iitfzh9vjZ765oNT375e7/n9J3cQTiba33lv11XMHzo1ZsP/7129aV9/be8+El37/wz9M/6i6KP83l5f/K/O3n+T3/wEAAMBF+F/7/r+lReMMbLD7/zdV9DWsWrd3+uota7csTCw7UH3qwdV731+w5l9Tb36+qea6A0X5v6W8/B+2o/JfXkc4P5tGR9H4/p3s3QR/Hqa7OlZor8orZE58rMeNoUe20D4ir5C2Ntbja6OjaHL/TnOs8P+h0BIrnK3JFnbFCsdCIXs95Ap7YoWOcKVtq8lON154MRSyCyzawwqKUbklEbEe75Xq0V+4YI+u3JMDAAB8oYTwnM2yVYXNKB5l2xODHTBysAMqBjugcrADhsUOiB9Y6vFoeWEhPH575yMbNjVMSb7y8NzHfvbms40T9j1+WV3v5g9f2XbvxJ3TW6YW5f9d5eX/cCqGZzal1v9HYf1/9nsNc+v/l4dCbazQHgqp+B0DUuE5MmH34fActalsj7PjcwUAAAD4XAufC1QO8TwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/s3evcdJVd0JAj/d9INumqaNE9GMk3TUgGakaWwNw+AoaoxGRZpZddxkNBBoEGmE8FgFURtQZxziZ3ztrJnoCAoiu+qHGFeDwUhcxIw6iWLiA/Cxjq7r+h6VGM2E/XTfOkXVrS67EFDa+X7/6DpVv/O89eg69946FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/xjuPfjlk4YunP0PHzace8nqqqmL/kfH6Mv+cNW3vvjUPy5b9G9h/i9GnLll3kEXHjd/wbR/6Vi++ogzQmjtKleWFC977oqvPtS613HP3jFw48wbb63fUpWpNxMP/Tr/lGfuXBxbfbF/CHeXhVCRDgypSwKVmft1sb5960LYI2wLZEu01SYl0g2HB2pCWBK2BbJVra4JoS4ncMqG+++7vDNxTU0IXwkhVKfbeKY6aaMmHRhUlQRq04HpFUngt1sT2cBPypMA7LD4Zsi+6Fe15mdo6L5ckddf5U7r2KcrPbw+MdFQPN/rR+3iTuWoSj/QukNPW0F17BIFb4+13m294N1WsJ2v8LTlfpHKfEPZui1UHcontk0aP6d9dnykPDQ19SlW0y56np9+e/6E7Un3mtdh7EDDTnkdXvrYiun9lo2+9OrNvxqz4ayaA3a0m0/lbNLc9K5WHTKvuV7zPEajfJ70grdfwbekRl+6Qghbzz17xtfnTDz7iD63PLnu1QcfrNty9pwFvzhz4nmLLj55w7/Pf6lg/t/w0fP/+HKOt+V5uWOrH9Ync/P4SF1MvFmfzM0BAACg1+gNe01Xnv/6X73+/bWtMxed/u23Dj73w71afz3i/gFVB7yxrqn1/I2ff6Vg/t9Y2vH/eMi/Lne0a0MY1ZVYNCCEvbseTwIrY3e+OyCEL3elWvMDR6UCa0PYpytxULaqVIm+sURjKvByfSYwKhVYHwOtqcDyGLgiFbg4BlalAhNiYG0qcHQMhCn54/hqfWYcJQdqYmBcshFXxbMQ3qmPraW21aZsVQAAADtJZnZYmX8351yHHc0Qp5eranrKEM/ALpqhOlVDegabnVYVraGipxrKe6ohO+6Ojx5+Qc1lPdVccBpGWX6GG9f85X2LXjzsC2P3mvj5xUMvmPKz8eGst++uerx5yYtv7XvEzesK5v/NHz3/r+6mI2UFx/9DGNv1N+Yuz0Tas/FxrXkZAAAAgB1w0R//xR61Lw85oGHT+2X3zl/7xKMrfrl5j1NOf3/c8a//8PCaxnsL5v+jSjv/P+4T6ZOTOTwSd0NMHRBCc34gqXZkYSA56t0vEwAAAIDeIHs8PnssfErmNjlFOz2fLszfup3544H/Ud3m//09/7P2jq3/+mLZBd89d0TNgKX/9GrHhBNOPvqW47/1zj4VB/yyvGD+31ra+f+1+bdJJ9bHXlw9IIS+OYEHYy87A10aY+D5I/MDmfGvjxtgcawqc2JCtqrFscS4GGhOBZYUK/FotsTe+YHMk5VtfFF2HFMyJXICAAAA8ImLuwPicfl4/n/LGSNO++vvzfrbha88eN7qCy75q+Ed80eedP/THzbMvXJp2PTmEQXz/3Hbd/5/1zy44PT+9n4hDK0IoU/6hwGP1CYLA8ZAXVkmcW9tUlefdFULa0MY2TmwdFUvZNb/r0ivMfh4TVJVDOy93y1vD+pMLKsJYWhu4IlvLz2sMzEnFcg2flpNCF/qHG268bv6Jo1Xphu/tm8IX8wJZKua0DeEzsaq0lX9r+rMdQzSVa2qDmHPnEC2quHVIcwNAPRW8X/pxNwHZ82dN3V8e3vbzF2YiDvxa8KkKe1tTROmt0+sLtKniak+561jtKBwTKVe+mZTZo2ixSsnV5aSzv5QsDm3rcyO/IIzBzP345ehyq5xHlKZd7clPeQD9y9sIuR8lSo25PJdPOTa3Eq2PYkF9cf8VaFf6DtnVtvMpvPGz549c1jyt9TshyR/43GmZFsNS2+r2u76VsLLo+hyWSkfd1sNyq1k6OxpM4bOmjtvyJRp4ye3TW47p+XQP2sZMXz410YM7RxUc/K3h5EO6q7m1Ei3Li1xWDtxpF+oyKnkk/jQkJCQ6G2J/f7L5odH77n+nOt/9tqPz+/3zdPu3fvImT889KqpD1Xve/ji24ccWDD/n/HR8//4qRM/+DPrMxQ7/t8QD/Mnj287zD8uBpaUevy/odjR/OyJAY2pQEcMdDjMDwAAwGdD3B0Z92bGndKbb1m/buOSlrk/aHin5dY17Utvuum+U39y58ATvjQ47LXhuhM+VzD/7yjt9/87af3/7NL1JxRb5v+gWKK52Pr/6WX+s+v/dxRb/z+9zH92/f8ln8L6/3OygdQmecf6/wAAwGfBJ7f+f4/L+6cvEFCQocfl/dMXCCjI0OMy/qVeIGC71/9f8+Bff6Wq35g7/qTlN/WXvPZ39xzWeuS6zTP/5Etb10+877qxt6wpmP9fUdr838L9AAAAsPv4z5ddU3H02Xff0bJu6sZxbw5+98m3lgzq80HF0Q+3j3xh4Bu3nlcw/19S2vz/k1//LxQ7/7+xWKC12MKA1v8DAACglyq2/t89Q1sa/zCm/x+eHvab5Q/ePPqnj/z898v3+/mJPyvfZ8Gxz8+8bFLB/H9VafP/eNpFeV7u2JsP65M17UJ6Tbs367M/GQAAAIDeoTw0NVWWmDdvYdSjPn6bT2eWAv2odK7vvXLt2ZtfmH7c46ev+7uaEwbvOWHaBasa/2b4gXd+ftQley7ddGrB/H9tafP/vN9lXPrYiun9lo2+9MOrN/9qzIazag7YdvwfAAAA2HVK3S8BAAAAAAAAAAAAAAB8+s7tWHzhI8uOfe+bt//F/kcseXXwbXcd+Lsh/V664qoHJq1648zJXy/4/X8Y21Wu2O//43X/4u8L/igvd2y15/X/MvdPOfH2uV1LFj5SH8L+uYGpC6fuETLX5h+cG7jvjIMGdiYWpkusefbolzoT30kHjh/yuS2dicNTgXFxkcR90oF4VcUt/VOBuLzi4+lA3B6r0oGqTOCy/sk4ytLb6pW6ZFuVpbfVxroQBuQEstvq7rqkjbL0AK9JBbID/F46EAd4ciZQnu7V7f2SXsVAXSx6Q7+kVwAA7Lbit8DKMGlKe1tz/Aofb79QkX8b5S1ZtqCw2rISm9+UWZps8crJlaWk+6S/i2671nhlqO4cwrCCr6u5Wcq6Rrlzaulh0/1RkSH3tNpbeZFyadu76aqKj6gmGVHThOntEyt7HHhLz1kOqegxy7CCyU5ulvKuTVpCLSX0pYQRlbhtSuhyvF8empr6pHL9eQw2hDw9vSJK/b1+7jp/xV4FuXluO/TKt758zE+f++CfP/9E/2+cVnP7rO+/e+KvX7//wEOOuG5C05otBfP/htLm/9W549qSuRhAR7yy3sgBIYwrcUQAAADw2XfbRbfecfr09a9MWlvx5GOPTS0fc3rl1vl3zp93ycZ7Fx9/2cErdjR+2Fm//f5vBu//b89e9dJPR+7zwA03/58nD3v8z3//8I8eeqduZZ+x7xXM/xtLm//HPViZQ8HJ3o618fr/iwaE0HVp/YYksDIO97sDQvhyV6o1lkguqH9CLNGcBFbGHSYHxRLjWvOr6hsDq1KBl+szgbWpwPoYyOyluCVkduVcWR/CYV2psfklZsQSDanAmBhoTAWaYqA5FegfA6NSgdf6ZwKtqcDDMRCm5G+rH/fPbCsAAIDtkZlnVebfDel53qqKnjKU9ZShtqcM5T1lqO4pQ7FRxPt3xAyVqZNXynIyVaZrrUnVUpAhXgx/u/tVkCE8mp8zXbCg6Xj+QfZ8g7L8DFf+4NlT1w+e/tDqzcd8beBt/zhkz4Obp9e9t+CGp3475pzrnv/TQQXz/+bS5v+1+bdJ6+vj/H/b9f+SwIOxe1fHU8cbY+D5I/MDmR0D6+Nkd3G2qtZMicykfXEsMSoGGlOBGTEwKhUYNzYTWDIwP5CZaWcbX5RtfEqmRE4AAAAAPnFxB0HcTRPn/zce9YOr3x8wccuyeTPvH9vyxMmjv3H1XT+6d/9ld767YvCAce99p2D+P6q0+X9sr19uYxfH3rzYP4S7y7b1JhsYUpcE4n6Muvjz+H3rQtgjZwdHtkRbbVKiKtVweKAm+YV6Vbqq1TXJGgPx/ikb7r/v8s7ENTUhfCVn70u2jWeqkzZq0oFBVUmgNh2YXpEE4p6fbOAn5UkAdlh2r2B8QWVOdclq6L5ckdffZ+WaoOnhFewD7SZfd7+52lWq0w9k9qlmbd/TVlAdu0TB22Otd1tvfLc1eLflfpHKfEPZui1UHcontk0aP6d9dnwk95esBXbR85z7K9VS0jvhddjx8Xvbs+p0B5pTHx/N3Zfr/nVYFqu79LEV0/stG33p1Zt/NWbDWTUHlNyNIuIPhX+05X9XPpWzeXe16pB5zfW6z5NWnye98d9Ao6cthHDZ9cfsu+TdX+/33A3Pnbqu7Maxr/7lrHs2Lf+bysNHrXv/yaGjLy+Y/7eWNv+vSN12+V3cmLMGhHBgzsZ9JG7+YwYkn4M5geRTcs/CQHLI/V/ri35yAgAAwM6W3d2R3V8wJXObnBCenicX5m/dzvxxf8WobvOX2u9j121cedLQN6474G8vOPGNv7/28Kceuv6ysnXL//vYD1avuXzxe08UzP/HffT8v2+qm47/O/7PLuL4f7d2913RfdMPdOzQruiC6tglHP/v1u7+bnP8v1uO/zv+3x3H/3vg+H+3dvenreBb0gxfujonwdff+fPfTbzpg7mN+x180lPPHDrxun+6quXuu0555b+de9601761uWD+P6O0+b/1/7pftC+7/t+4Yuv/zSi2/l+H9f8AAIBdqshCc+l5XsHqfQUZ0qv3FWTocYHAHpcYtP7fdq//t3Dkv1904Q+fb7n2nTvHXb5m07Fnvvr0utXPzFpx3Lnnv9V6112tBfP/jtLm//Hl0C+39d6y/l/j2CJVXREDMywMCAAAwO6o2A4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPl2HnvbO+5d8/R/aBv1ixc1/f+v/+7/P1q594JvfuGn4L6f86RllazZcM+LMLfMOuvC4+Qum/UvH8tVHnBHClK5yZUnxsueu+OpDrXsd9+wdAzfOvPHW+i3VmXorM7d/nJc7tvphfQhLch6pi4k36zvvbAuccuLtcys6E4/Uh7B/bmDqwql7dCaW14cwODdw3xkHDexMLEyXWPPs0S91Jr6TDhw/5HNbOhOHZwJl6e5e1z/pblm6u5f3D2FATiDb3bP751eVbeO4TKA83caKuqSNGKiLRa+tS9qIgfZYYkrfEIZWhNAnXdU/VydV9UlXdU91UlWfdFUXVYcwMoRQka7quaqkqor0yB+tSqqKgb33u+XtQZ2JpVUhDM0NPPHtpYd1JmamAtnG/1NVCF/qfMmkG/9xZdJ4Zbrx/1oZwhdDCFXpEu9VJCWq0iVeqAhhz5zAto1YEcLcwGdD/PSZmPvgrLnzpo5vb2+buQsTVZm2asKkKe1tTROmt0+sTvWpmLKc9NYFH3/sm96eP6HzdvHKyZWlpCsy5Sq7unxIZd7dlt2997FftbmVbHs+CuqP+atCv9B3zqy2mU3njZ89e+aw5G+p2Q9J/vbJRJNtNay3bKtBuZUMnT1txtBZc+cNmTJt/OS2yW3ntBz6Zy0jhg//2oihnYNqTv7ujJEu/eRH+oWKnEo+ife/hIREb0uU5326Ne/un+MFX/S3dbQyVHd9QBdMK3KzlHWNcmcM+qiPOeKP8zWlxxENK5g4FGQ5pOcsLQWTiW1ZapIsXV/rCiaHuTWVd23SeL88NDX1KbYdGvLv5m7e13dg8z6d2XSlpgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+P/swIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCwAAAAAIMzfOoyeDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4FAAA//8fSxmR")
chdir(&(0x7f0000000080)='./file0\x00')
rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000140)='./file1\x00')
r0 = creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40)
creat(&(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x12)
ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r0, 0x80083313, 0x0)
symlink(&(0x7f00000008c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
creat(&(0x7f0000000b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x104)
creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10)

1.041223886s ago: executing program 1 (id=430):
syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='nonumtail=0,uni_xlate=0,shortname=win95,rodir,iocharset=ascii,nonumtail=0,iocharset=koi8-ru,shortname=win95,iocharset=utf8,shortname=win95,shortname=mixed,uni_xlate=1,usefree,uni_xlate=1,shortname=win95,nonumtail=0,nonumtail=0,nfs=nostale_ro,nnonumtail=1,shortnail=0,rodir,iocharset=macceltic,\x00'/310], 0x1, 0x36b, &(0x7f0000000a00)="$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")
r0 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00')
pread64(r0, &(0x7f0000002240)=""/237, 0xed, 0x4eb)

830.023008ms ago: executing program 1 (id=433):
setns(0xc9, 0x0)
r0 = socket(0x2a, 0x2, 0x9)
bind$inet(r0, &(0x7f0000000180)={0x2a, 0x4e23, @empty=0x1000000}, 0x10)
recvmsg(r0, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x0)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=<r1=>0x0)
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x77359400}}, 0x0)

549.066125ms ago: executing program 0 (id=442):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$binfmt_aout(r0, &(0x7f0000000080)=ANY=[], 0xff70)
ioctl$int_in(r0, 0x5452, &(0x7f0000000040)=0xfffffffffffffff9)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x2)

419.104773ms ago: executing program 0 (id=443):
socket$inet_udp(0x2, 0x2, 0x0)
syz_emit_ethernet(0xbe, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x0)
shmctl$IPC_RMID(0x0, 0x0)
fcntl$notify(0xffffffffffffffff, 0x402, 0x29)
pread64(0xffffffffffffffff, &(0x7f000001a240)=""/102400, 0x19000, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)={'team0\x00', <r4=>0x0})
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x7, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104, 0xa01}, [@IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0)
pread64(r3, 0x0, 0x0, 0x80)
socket$packet(0x11, 0x2, 0x300)
sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)={0x34, r1, 0x1, 0x0, 0x25dfdbfb, {{}, {}, {0x18, 0x17, {0x0, 0x0, @l2={'eth', 0x3a, 'team0\x00'}}}}}, 0x34}}, 0x20042000)

350.230286ms ago: executing program 0 (id=444):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$unix(r0, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0xc800)
setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000000), 0x4)
recvmmsg(r1, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}, 0x10001}], 0x1, 0x40, 0x0)

349.981101ms ago: executing program 0 (id=445):
mkdir(&(0x7f0000000000)='myproc\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='myproc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='myproc/bus/pci/devices\x00', 0x0, 0x0)
read(r0, &(0x7f0000000600)=""/1024, 0x400)
read$FUSE(r0, &(0x7f0000000b80)={0x2020}, 0x2020)

280.341806ms ago: executing program 0 (id=446):
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'gre0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x421, 0x70b928, 0x0, {0x0, 0x0, 0x0, r1, 0x2a20, 0x10000}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}]}}}]}, 0x38}}, 0x0)

280.085973ms ago: executing program 0 (id=447):
r0 = userfaultfd(0x1)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1})
read(r0, &(0x7f0000000680)=""/4096, 0x1000)
syz_io_uring_setup(0x131, &(0x7f0000000600)={0x0, 0x800006, 0x2}, &(0x7f0000ffe000), 0x0, &(0x7f0000000000))
ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, 0x1000})

90.809209ms ago: executing program 2 (id=448):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c0000005200010000000000040000000200000008000100feffffff"], 0x1c}}, 0x0)

0s ago: executing program 2 (id=449):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000538acc089c0e00001e5b0102030109021b00010000000009040000014b34ef000905", @ANYRES16=r0], 0x0)

0s ago: executing program 1 (id=450):
r0 = socket$rds(0x15, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000000)=0x2, 0x4)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000080)=0x1, 0x4)
bind$rds(r0, &(0x7f0000000100)={0x2, 0x4e29, @loopback}, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r1, 0x0)
sendmsg$rds(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0x4e21, @local}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000300)=""/4, 0x1a000}], 0x1, &(0x7f0000000400)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x42}], 0x18}, 0x4000000)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:10129' (ED25519) to the list of known hosts.
syzkaller login: [   49.953529][ T5539] cgroup: Unknown subsys name 'net'
[   50.066929][ T5539] cgroup: Unknown subsys name 'cpuset'
[   50.072156][ T5539] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   51.745141][ T5539] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   55.670929][ T4982] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   55.674989][ T4982] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   55.678253][ T4982] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   55.681687][ T4982] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   55.685007][ T4982] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   55.709422][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   55.715910][ T5594] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   55.719466][ T5594] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   55.723042][ T5594] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   55.727014][ T5594] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   55.729825][ T5594] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   55.738211][ T5594] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   55.738276][ T5602] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   55.743637][ T5602] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   55.745967][ T5594] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   56.200603][ T5591] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.204004][ T5591] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.206385][ T5591] bridge_slave_0: entered allmulticast mode
[   56.208875][ T5591] bridge_slave_0: entered promiscuous mode
[   56.224446][ T5591] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.226812][ T5591] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.228993][ T5591] bridge_slave_1: entered allmulticast mode
[   56.231647][ T5591] bridge_slave_1: entered promiscuous mode
[   56.284617][ T5591] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.295545][ T5591] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.357389][ T5591] team0: Port device team_slave_0 added
[   56.376713][ T5591] team0: Port device team_slave_1 added
[   56.379100][ T5595] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.381956][ T5595] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.385259][ T5595] bridge_slave_0: entered allmulticast mode
[   56.388751][ T5595] bridge_slave_0: entered promiscuous mode
[   56.404266][ T5597] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.406474][ T5597] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.408941][ T5597] bridge_slave_0: entered allmulticast mode
[   56.411964][ T5597] bridge_slave_0: entered promiscuous mode
[   56.416581][ T5595] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.419404][ T5595] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.422209][ T5595] bridge_slave_1: entered allmulticast mode
[   56.426416][ T5595] bridge_slave_1: entered promiscuous mode
[   56.440074][ T5591] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.442187][ T5591] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   56.450477][ T5591] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.455036][ T5597] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.457271][ T5597] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.459474][ T5597] bridge_slave_1: entered allmulticast mode
[   56.462413][ T5597] bridge_slave_1: entered promiscuous mode
[   56.475115][ T5591] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.477295][ T5591] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   56.485755][ T5591] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.500335][ T5595] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.516610][ T5595] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.522049][ T5597] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.544225][ T5597] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.569999][ T5595] team0: Port device team_slave_0 added
[   56.575419][ T5591] hsr_slave_0: entered promiscuous mode
[   56.577786][ T5591] hsr_slave_1: entered promiscuous mode
[   56.587425][ T5595] team0: Port device team_slave_1 added
[   56.590652][ T5597] team0: Port device team_slave_0 added
[   56.615528][ T5597] team0: Port device team_slave_1 added
[   56.644536][ T5595] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.647216][ T5595] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   56.657665][ T5595] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.662444][ T5597] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.664609][ T5597] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   56.672448][ T5597] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.677124][ T5597] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.679370][ T5597] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   56.687537][ T5597] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.704688][ T5595] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.707473][ T5595] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   56.717993][ T5595] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.770261][ T5597] hsr_slave_0: entered promiscuous mode
[   56.772530][ T5597] hsr_slave_1: entered promiscuous mode
[   56.774980][ T5597] debugfs: 'hsr0' already exists in 'hsr'
[   56.776791][ T5597] Cannot create hsr debugfs directory
[   56.800114][ T5595] hsr_slave_0: entered promiscuous mode
[   56.802481][ T5595] hsr_slave_1: entered promiscuous mode
[   56.804904][ T5595] debugfs: 'hsr0' already exists in 'hsr'
[   56.806846][ T5595] Cannot create hsr debugfs directory
[   56.957600][ T5591] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   56.977975][ T5591] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   56.994264][ T5591] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   57.000741][ T5591] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   57.044055][ T5597] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   57.048741][ T5597] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   57.055213][ T5591] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.058004][ T5591] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.061434][ T5591] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.064363][ T5591] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.070399][ T5597] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   57.081556][   T27] bridge0: port 1(bridge_slave_0) entered disabled state
[   57.085862][   T27] bridge0: port 2(bridge_slave_1) entered disabled state
[   57.099588][ T5597] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   57.143565][ T5595] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   57.148112][ T5595] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   57.155962][ T5595] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   57.161130][ T5595] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   57.222515][ T5591] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.254564][ T5597] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.262073][ T5591] 8021q: adding VLAN 0 to HW filter on device team0
[   57.272043][ T5595] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.286090][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.288990][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.307610][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.310533][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.318785][ T5595] 8021q: adding VLAN 0 to HW filter on device team0
[   57.333716][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.336661][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.349864][ T5597] 8021q: adding VLAN 0 to HW filter on device team0
[   57.356225][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.358980][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.372316][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.375369][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.408363][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.411433][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.475936][ T5595] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   57.480139][ T5595] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   57.704205][ T4982] Bluetooth: hci0: command tx timeout
[   57.783281][ T4982] Bluetooth: hci1: command tx timeout
[   57.785774][ T4982] Bluetooth: hci2: command tx timeout
[   57.828573][ T5595] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.859982][ T5591] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.867048][ T5597] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.918648][ T5595] veth0_vlan: entered promiscuous mode
[   57.937227][ T5595] veth1_vlan: entered promiscuous mode
[   57.946281][ T5597] veth0_vlan: entered promiscuous mode
[   57.964924][ T5597] veth1_vlan: entered promiscuous mode
[   57.979878][ T5591] veth0_vlan: entered promiscuous mode
[   57.985749][ T5595] veth0_macvtap: entered promiscuous mode
[   58.000467][ T5595] veth1_macvtap: entered promiscuous mode
[   58.019149][ T5591] veth1_vlan: entered promiscuous mode
[   58.028688][ T5597] veth0_macvtap: entered promiscuous mode
[   58.038330][ T5595] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.051274][ T5597] veth1_macvtap: entered promiscuous mode
[   58.058179][ T5595] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.073424][ T5648] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.077305][ T5648] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.082042][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.090831][ T5648] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.096315][ T5648] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.104666][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.121603][ T5648] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.126355][ T5591] veth0_macvtap: entered promiscuous mode
[   58.139842][ T5648] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.145235][ T5648] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.149037][ T5591] veth1_macvtap: entered promiscuous mode
[   58.164194][ T5648] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.197572][ T5591] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.235201][ T5591] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.244648][ T1094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.257359][ T5630] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.268469][ T1094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.283701][ T5630] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.287955][ T5630] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.291424][ T5630] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.334864][ T1094] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.353436][ T1094] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.365634][   T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.369110][   T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.397629][   T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.400858][   T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.413248][ T5595] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   58.484117][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.487173][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.487906][   T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.498141][   T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.121929][ T5713] loop1: detected capacity change from 0 to 32768
[   59.164828][ T5596] Dev loop1 SGI disklabel: csum bad, label corrupted
[   59.170321][ T5713] Dev loop1 SGI disklabel: csum bad, label corrupted
[   59.326059][ T5730] loop1: detected capacity change from 0 to 512
[   59.385115][ T5730] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   59.389516][ T5730] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   59.681100][ T5591] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   59.712361][ T5717] overlayfs: statfs failed on './file0'
[   59.786947][ T4982] Bluetooth: hci0: command tx timeout
[   59.846821][ T5749] loop1: detected capacity change from 0 to 1024
[   59.859697][ T5749] EXT4-fs: Ignoring removed orlov option
[   59.861782][ T5749] EXT4-fs: Ignoring removed oldalloc option
[   59.865609][ T4982] Bluetooth: hci2: command tx timeout
[   59.870572][ T5749] EXT4-fs: Ignoring removed orlov option
[   59.873056][ T4982] Bluetooth: hci1: command tx timeout
[   59.886708][ T5751] loop2: detected capacity change from 0 to 512
[   59.896021][ T5749] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a842c018, mo2=0002]
[   59.904864][ T5749] System zones: 0-1, 3-12
[   59.916847][ T5749] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   59.925004][   T33] audit: type=1326 audit(1785563556.802:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5754 comm="syz.0.21" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe12c19e019 code=0x0
[   59.933018][ T5751] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   59.957051][ T5591] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   60.052486][ T5597] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   60.163947][ T5771] netlink: 'syz.2.29': attribute type 32 has an invalid length.
[   60.252135][ T5781] loop1: detected capacity change from 0 to 16
[   60.256914][ T5781] MTD: Attempt to mount non-MTD device "/dev/loop1"
[   60.401402][ T5793] process 'syz.1.38' launched '/dev/fd/3' with NULL argv: empty string added
[   60.429307][ T5795] netlink: 8 bytes leftover after parsing attributes in process `syz.2.39'.
[   60.614335][ T5804] sd 0:0:0:0: PR command failed: 1026
[   60.616785][ T5804] sd 0:0:0:0: Sense Key : Illegal Request [current] 
[   60.619647][ T5804] sd 0:0:0:0: Add. Sense: Invalid command operation code
[   61.104624][ T5814] netlink: 60 bytes leftover after parsing attributes in process `syz.0.46'.
[   61.109012][ T5814] netlink: 60 bytes leftover after parsing attributes in process `syz.0.46'.
[   61.114471][ T5814] netlink: 'syz.0.46': attribute type 32 has an invalid length.
[   61.117417][ T5814] netlink: 424 bytes leftover after parsing attributes in process `syz.0.46'.
[   61.284262][ T5820] netlink: 'syz.0.48': attribute type 8 has an invalid length.
[   61.287159][ T5820] netlink: 4 bytes leftover after parsing attributes in process `syz.0.48'.
[   61.300508][ T5820] bond0: entered promiscuous mode
[   61.308736][ T5820] bond_slave_0: entered promiscuous mode
[   61.311365][ T5820] bond_slave_1: entered promiscuous mode
[   61.316648][ T5820] gretap0: entered promiscuous mode
[   61.319992][ T5820] hsr1: entered promiscuous mode
[   61.476295][ T5826] warning: `syz.0.51' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   61.539198][ T5828] loop2: detected capacity change from 0 to 2048
[   61.559789][ T5828] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[   61.569879][ T5828] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   61.864002][ T4982] Bluetooth: hci0: command tx timeout
[   61.943479][ T4982] Bluetooth: hci1: command tx timeout
[   61.947050][ T4982] Bluetooth: hci2: command tx timeout
[   62.057618][ T5836] xt_TCPMSS: Only works on TCP SYN packets
[   62.160905][ T5842] loop1: detected capacity change from 0 to 512
[   62.176004][ T5842] =======================================================
[   62.176004][ T5842] WARNING: The mand mount option has been deprecated and
[   62.176004][ T5842]          and is ignored by this kernel. Remove the mand
[   62.176004][ T5842]          option from the mount to silence this warning.
[   62.176004][ T5842] =======================================================
[   62.207164][ T5842] EXT4-fs (loop1): revision level too high, forcing read-only mode
[   62.210463][ T5842] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002]
[   62.214748][ T5842] System zones: 0-1, 15-15, 18-18, 34-34
[   62.217426][ T5842] EXT4-fs (loop1): orphan cleanup on readonly fs
[   62.220134][ T5842] Quota error (device loop1): v2_read_header: Failed header read: expected=8 got=0
[   62.226852][ T5842] EXT4-fs warning (device loop1): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[   62.232600][ T5842] EXT4-fs (loop1): Cannot turn on quotas: error -22
[   62.238067][ T5842] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.58: bg 0: block 40: padding at end of block bitmap is not set
[   62.245826][ T5842] loop1: lost filesystem error report for type 5 error -117
[   62.246626][ T5842] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6685: Corrupt filesystem
[   62.252983][    C1] EXT4-fs (loop1): error count since last fsck: 1
[   62.253044][    C1] EXT4-fs (loop1): initial error at time 1785563559: ext4_validate_block_bitmap:441
[   62.253059][    C1] EXT4-fs (loop1): last error at time 1785563559: ext4_validate_block_bitmap:441
[   62.266351][ T5842] loop1: lost filesystem error report for type 5 error -117
[   62.266773][ T5842] EXT4-fs (loop1): 1 truncate cleaned up
[   62.274656][ T5842] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   62.286167][ T5842] EXT4-fs (loop1): shut down requested (0)
[   62.299100][ T5838] loop2: detected capacity change from 0 to 32768
[   62.330754][ T5838] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   62.336902][ T5591] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   62.369068][ T5838] XFS (loop2): Ending clean mount
[   62.495416][ T5597] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   62.642573][ T5862] netlink: 'syz.0.64': attribute type 4 has an invalid length.
[   62.763115][ T5864] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0
[   63.081703][ T5880] netlink: 8 bytes leftover after parsing attributes in process `syz.2.69'.
[   63.942756][ T5594] Bluetooth: hci0: command tx timeout
[   64.023126][ T4982] Bluetooth: hci1: command tx timeout
[   64.025136][ T5594] Bluetooth: hci2: command tx timeout
[   64.257452][ T5918] loop0: detected capacity change from 0 to 16
[   64.265280][ T5918] erofs (device loop0): mounted with root inode @ nid 36.
[   64.279155][ T5921] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[   64.281916][ T5921] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[   64.403967][   T33] audit: type=1326 audit(1785563561.292:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5925 comm="syz.2.89" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa3c979e019 code=0x0
[   64.426089][ T5932] loop1: detected capacity change from 0 to 512
[   64.455717][ T5932] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   64.459539][ T5932] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   64.473505][ T5932] fs-verity (loop1, inode 15): Unrecognized descriptor size: 0 bytes
[   64.504072][ T5591] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   64.574545][ T5940] fuse: Unknown parameter '0x000000000000000a'
[   65.369780][ T5958] netlink: 24 bytes leftover after parsing attributes in process `syz.1.102'.
[   65.885705][ T5976] binder: 5974:5976 ioctl c018620c 200000000000 returned -22
[   65.967226][ T5983] netlink: 24 bytes leftover after parsing attributes in process `syz.0.113'.
[   66.001783][ T5990] netlink: 12 bytes leftover after parsing attributes in process `syz.0.117'.
[   66.071147][   T33] audit: type=1800 audit(1785563562.952:4): pid=5996 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.120" name="dummy_udc" dev="gadgetfs" ino=7389 res=0 errno=0
[   66.133954][ T5998] loop1: detected capacity change from 0 to 4096
[   66.138171][ T5998] ntfs3(loop1): Primary boot: invalid record size -127.
[   66.140584][ T5998] ntfs3(loop1): try to read out of volume at offset 0x1ffe00
[   66.203194][ T5649] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   66.246608][ T6008] loop1: detected capacity change from 0 to 128
[   66.271698][ T6008] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   66.277317][ T6008] ext4 filesystem being mounted at /47/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   66.298988][ T5591] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   66.365976][ T5649] usb 3-1: unable to get BOS descriptor or descriptor too short
[   66.371231][ T5649] usb 3-1: config 4 has an invalid interface number: 138 but max is 0
[   66.374414][ T5649] usb 3-1: config 4 has no interface number 0
[   66.376344][ T5649] usb 3-1: config 4 interface 138 has no altsetting 0
[   66.381563][ T5649] usb 3-1: string descriptor 0 read error: -22
[   66.385510][ T5649] usb 3-1: New USB device found, idVendor=0423, idProduct=000a, bcdDevice=5f.d8
[   66.388960][ T5649] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   66.753479][ T5649] catc 3-1:4.138: Missing or invalid endpoints
[   66.850832][ T5700] usb 3-1: USB disconnect, device number 2
[   67.112928][ T6016] loop0: detected capacity change from 0 to 8
[   67.431483][ T6028] netlink: 'syz.0.134': attribute type 10 has an invalid length.
[   67.436593][ T6028] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   67.727508][ T6043] Zero length message leads to an empty skb
[   68.131876][ T6063] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[   68.136530][ T6063] block device autoloading is deprecated and will be removed.
[   68.149143][ T6065] IPv6: sit1: Disabled Multicast RS
[   68.199445][ T6067] loop2: detected capacity change from 0 to 512
[   68.227908][ T6067] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   68.252820][ T6067] ext4 filesystem being mounted at /50/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   68.279310][ T6067] EXT4-fs error (device loop2): ext4_xattr_block_get:597: inode #15: comm syz.2.151: corrupted xattr block 32: bad e_name length
[   68.298875][ T6067] EXT4-fs error (device loop2): ext4_get_inode_usage:888: inode #15: comm syz.2.151: corrupted xattr block 32: bad e_name length
[   68.361272][ T5597] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   68.872912][   T31] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   69.040206][   T31] usb 2-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00
[   69.050842][   T31] usb 2-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0
[   69.058557][   T31] usb 2-1: Product: syz
[   69.066575][   T31] usb 2-1: config 0 descriptor??
[   69.076275][   T31] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected
[   69.081369][   T31] usb 2-1: Detected FT232H
[   69.374229][   T31] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[   69.791993][   T31] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0
[   69.952738][ T5649] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   69.995926][    T9] usb 2-1: USB disconnect, device number 2
[   70.012299][    T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[   70.017924][    T9] ftdi_sio 2-1:0.0: device disconnected
[   70.104088][ T5649] usb 3-1: Using ep0 maxpacket: 32
[   70.110685][ T5649] usb 3-1: config 242 has an invalid interface number: 195 but max is 0
[   70.118426][ T5649] usb 3-1: config 242 has no interface number 0
[   70.120411][ T5649] usb 3-1: config 242 interface 195 has no altsetting 0
[   70.126481][ T5649] usb 3-1: New USB device found, idVendor=11ba, idProduct=1001, bcdDevice=54.03
[   70.129795][ T5649] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   70.132457][ T5649] usb 3-1: Product: syz
[   70.135315][ T5649] usb 3-1: Manufacturer: syz
[   70.136823][ T5649] usb 3-1: SerialNumber: syz
[   70.352198][ T5649] pvrusb2: Hardware description: OnAir USB2 Hybrid USB tuner
[   70.355198][ T5649] usb 3-1: selecting invalid altsetting 0
[   70.357148][ T2398] pvrusb2: Invalid write control endpoint
[   70.360087][ T5649] usb 3-1: USB disconnect, device number 3
[   70.381561][ T2398] pvrusb2: Invalid write control endpoint
[   70.383957][ T2398] pvrusb2: Invalid write control endpoint
[   70.385923][ T2398] pvrusb2: Invalid write control endpoint
[   70.387799][ T2398] pvrusb2: Invalid write control endpoint
[   70.389878][ T2398] pvrusb2: Invalid write control endpoint
[   70.392023][ T2398] pvrusb2: Invalid write control endpoint
[   70.394292][ T2398] pvrusb2: Invalid write control endpoint
[   70.396484][ T2398] pvrusb2: Invalid write control endpoint
[   70.398781][ T2398] pvrusb2: Invalid write control endpoint
[   70.400733][ T2398] pvrusb2: Invalid write control endpoint
[   70.402971][ T2398] pvrusb2: Invalid write control endpoint
[   70.404784][ T2398] pvrusb2: Invalid write control endpoint
[   70.406531][ T2398] pvrusb2: Invalid write control endpoint
[   70.408442][ T2398] pvrusb2: Invalid write control endpoint
[   70.410231][ T2398] pvrusb2: Invalid write control endpoint
[   70.412015][ T2398] pvrusb2: Invalid write control endpoint
[   70.417155][ T2398] pvrusb2: Invalid write control endpoint
[   70.418993][ T2398] pvrusb2: Invalid write control endpoint
[   70.421055][ T2398] pvrusb2: Invalid write control endpoint
[   70.424195][ T2398] pvrusb2: Invalid write control endpoint
[   70.426239][ T2398] pvrusb2: Invalid write control endpoint
[   70.428412][ T2398] pvrusb2: Invalid write control endpoint
[   70.430427][ T2398] pvrusb2: Invalid write control endpoint
[   70.432273][ T2398] pvrusb2: Invalid write control endpoint
[   70.434459][ T2398] pvrusb2: Invalid write control endpoint
[   70.436556][ T2398] pvrusb2: Invalid write control endpoint
[   70.438676][ T2398] pvrusb2: Invalid write control endpoint
[   70.440581][ T2398] pvrusb2: Invalid write control endpoint
[   70.442323][ T2398] pvrusb2: Invalid write control endpoint
[   70.444767][ T2398] pvrusb2: Invalid write control endpoint
[   70.446956][ T2398] pvrusb2: Invalid write control endpoint
[   70.449175][ T2398] pvrusb2: Invalid write control endpoint
[   70.452110][ T2398] pvrusb2: Module ID 3 (saa7115) for device OnAir USB2 Hybrid USB tuner failed to load.  Possible missing sub-device kernel module or initialization failure within module.
[   70.471108][ T2398] cs53l32a 2-0011: chip found @ 0x22 (pvrusb2_a)
[   70.474597][ T2398] pvrusb2: Invalid write control endpoint
[   70.476412][ T2398] pvrusb2: Invalid write control endpoint
[   70.478675][ T2398] pvrusb2: Invalid write control endpoint
[   70.481034][ T2398] pvrusb2: Invalid write control endpoint
[   70.483743][ T2398] pvrusb2: Invalid write control endpoint
[   70.485669][ T2398] pvrusb2: Invalid write control endpoint
[   70.487445][ T2398] pvrusb2: Invalid write control endpoint
[   70.489603][ T2398] pvrusb2: Invalid write control endpoint
[   70.491512][ T2398] pvrusb2: Invalid write control endpoint
[   70.493355][ T2398] pvrusb2: Invalid write control endpoint
[   70.495050][ T2398] pvrusb2: Invalid write control endpoint
[   70.496716][ T2398] pvrusb2: Invalid write control endpoint
[   70.498515][ T2398] pvrusb2: Invalid write control endpoint
[   70.500573][ T2398] pvrusb2: Invalid write control endpoint
[   70.502556][ T2398] pvrusb2: Invalid write control endpoint
[   70.504911][ T2398] pvrusb2: Invalid write control endpoint
[   70.506776][ T2398] pvrusb2: Invalid write control endpoint
[   70.508816][ T2398] pvrusb2: Invalid write control endpoint
[   70.510992][ T2398] pvrusb2: Invalid write control endpoint
[   70.513004][ T2398] pvrusb2: Invalid write control endpoint
[   70.520152][ T2398] pvrusb2: Invalid write control endpoint
[   70.533091][ T2398] pvrusb2: Attached sub-driver cs53l32a
[   70.548008][ T2398] pvrusb2: Invalid write control endpoint
[   70.550075][ T2398] pvrusb2: Invalid write control endpoint
[   70.551912][ T2398] pvrusb2: Invalid write control endpoint
[   70.554660][ T2398] pvrusb2: Invalid write control endpoint
[   70.556736][ T2398] pvrusb2: Module ID 4 (tuner) for device OnAir USB2 Hybrid USB tuner failed to load.  Possible missing sub-device kernel module or initialization failure within module.
[   70.562971][ T2398] pvrusb2: Device being rendered inoperable
[   70.565277][ T2398] pvrusb2: ***WARNING*** pvrusb2 driver initialization failed due to the failure of one or more sub-device kernel modules.
[   70.570354][ T2398] pvrusb2: You need to resolve the failing condition before this driver can function.  There should be some earlier messages giving more information about the problem.
[   70.744848][    C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0)
[   70.917685][ T6156] loop1: detected capacity change from 0 to 164
[   70.924887][ T6156] iso9660: Bad value for 'mode'
[   71.142973][ T6174] netlink: 20 bytes leftover after parsing attributes in process `syz.1.195'.
[   71.188916][ T6179] netlink: 8 bytes leftover after parsing attributes in process `syz.2.198'.
[   71.229797][ T6186] loop1: detected capacity change from 0 to 128
[   71.242013][ T6186] EXT4-fs (loop1): Test dummy encryption mode enabled
[   71.264826][ T6186] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   71.283000][ T6186] ext4 filesystem being mounted at /69/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   71.342528][ T6186] fscrypt: AES-256-CBC-CTS using implementation "cts(cbc(ecb(aes-lib)))"
[   71.355268][ T6198] netlink: 87 bytes leftover after parsing attributes in process `syz.0.204'.
[   71.368604][ T5591] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   72.359392][ T6223] loop1: detected capacity change from 0 to 2048
[   72.365465][ T6223] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   72.467196][ T6231] loop1: detected capacity change from 0 to 512
[   72.475769][ T6231] EXT4-fs warning (device loop1): ext4_xattr_inode_get:560: inode #11: comm syz.1.217: EA inode hash validation failed
[   72.480627][ T6231] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   72.485608][ T6231] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #15: comm syz.1.217: corrupted inode contents
[   72.489557][ T6231] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   72.490745][ T6231] EXT4-fs error (device loop1): ext4_dirty_inode:6450: inode #15: comm syz.1.217: mark_inode_dirty error
[   72.493764][    C1] EXT4-fs (loop1): error count since last fsck: 1
[   72.493773][    C1] EXT4-fs (loop1): initial error at time 1785563825: ext4_do_update_inode:5569: inode 15
[   72.493785][    C1] EXT4-fs (loop1): last error at time 1785563825: ext4_do_update_inode:5569: inode 15
[   72.507325][ T6231] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   72.507750][ T6231] EXT4-fs error (device loop1): ext4_do_update_inode:5569: inode #15: comm syz.1.217: corrupted inode contents
[   72.514445][ T6231] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   72.514716][ T6231] EXT4-fs error (device loop1): ext4_xattr_delete_inode:2999: inode #15: comm syz.1.217: mark_inode_dirty error
[   72.521684][ T6231] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   72.521957][ T6231] EXT4-fs error (device loop1): ext4_xattr_delete_inode:3002: inode #15: comm syz.1.217: mark inode dirty (error -117)
[   72.529205][ T6231] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[   72.529384][ T6231] EXT4-fs warning (device loop1): ext4_evict_inode:275: xattr delete (err -117)
[   72.535246][ T6231] EXT4-fs (loop1): 1 orphan inode deleted
[   72.537911][ T6231] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   72.556291][ T5591] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   72.588620][ T6235] syz.1.218 uses obsolete (PF_INET,SOCK_PACKET)
[   72.688764][ T6239] kAFS: unable to lookup cell '(,c'
[   72.772291][ T6243] netlink: 28 bytes leftover after parsing attributes in process `syz.1.222'.
[   72.775381][ T6243] netlink: 28 bytes leftover after parsing attributes in process `syz.1.222'.
[   72.879945][ T6251] netlink: 4 bytes leftover after parsing attributes in process `syz.1.225'.
[   73.055760][ T6264] loop1: detected capacity change from 0 to 2048
[   73.061296][ T6264] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found!
[   73.067076][ T6264] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   73.316470][ T6268] loop0: detected capacity change from 0 to 32768
[   73.423101][ T6274] netlink: 8 bytes leftover after parsing attributes in process `syz.2.238'.
[   73.486612][ T6280] loop0: detected capacity change from 0 to 164
[   73.714459][ T6295] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0)
[   73.718256][ T6295] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1)
[   73.722020][ T6295] bridge_slave_1: invalid flags given to default FDB implementation
[   73.979071][ T6322] loop2: detected capacity change from 0 to 1024
[   73.988848][ T6322] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   73.997535][ T6322] EXT4-fs (loop2): revision level too high, forcing read-only mode
[   74.002982][ T6322] EXT4-fs (loop2): orphan cleanup on readonly fs
[   74.018509][ T6322] Quota error (device loop2): do_check_range: Getting dqdh_entries 512 out of range 0-14
[   74.021664][ T6322] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[   74.029351][ T6322] EXT4-fs error (device loop2): ext4_acquire_dquot:7001: comm syz.2.257: Failed to acquire dquot type 0
[   74.038883][ T6322] loop2: lost filesystem error report for type 5 error -117
[   74.040011][ T6322] Quota error (device loop2): do_check_range: Getting dqdh_entries 512 out of range 0-14
[   74.045946][    C1] EXT4-fs (loop2): error count since last fsck: 1
[   74.045959][    C1] EXT4-fs (loop2): initial error at time 1785563826: ext4_acquire_dquot:7001
[   74.045973][    C1] EXT4-fs (loop2): last error at time 1785563826: ext4_acquire_dquot:7001
[   74.067637][ T6322] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[   74.097039][ T6322] EXT4-fs error (device loop2): ext4_acquire_dquot:7001: comm syz.2.257: Failed to acquire dquot type 0
[   74.100478][ T6322] loop2: lost filesystem error report for type 5 error -117
[   74.103236][ T6322] EXT4-fs error (device loop2): ext4_free_blocks:6724: comm syz.2.257: Freeing blocks not in datazone - block = 0, count = 4096
[   74.116074][ T6322] loop2: lost filesystem error report for type 5 error -117
[   74.117236][ T6322] Quota error (device loop2): do_check_range: Getting dqdh_entries 512 out of range 0-14
[   74.126312][ T6322] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[   74.129597][ T6322] EXT4-fs error (device loop2): ext4_acquire_dquot:7001: comm syz.2.257: Failed to acquire dquot type 0
[   74.136210][ T6322] loop2: lost filesystem error report for type 5 error -117
[   74.137025][ T6322] EXT4-fs (loop2): 1 orphan inode deleted
[   74.155464][ T6322] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   74.166088][ T6322] EXT4-fs error (device loop2): ext4_lookup:1785: inode #15: comm syz.2.257: iget: bad extended attribute block 6
[   74.200934][ T5597] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   74.224447][ T6347] loop0: detected capacity change from 0 to 1024
[   74.229954][ T6347] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002]
[   74.232506][ T6347] System zones: 0-1, 3-36
[   74.238658][ T6347] EXT4-fs error (device loop0): ext4_orphan_get:1417: comm syz.0.269: bad orphan inode 134217728
[   74.245190][ T6347] loop0: lost filesystem error report for type 5 error -117
[   74.246098][ T6347] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   74.306176][ T6355] loop1: detected capacity change from 0 to 256
[   74.339696][ T5595] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   74.431147][ T6363] Bluetooth: MGMT ver 1.23
[   74.445642][ T6365] netlink: 28 bytes leftover after parsing attributes in process `syz.1.276'.
[   74.448452][ T6365] netlink: 28 bytes leftover after parsing attributes in process `syz.1.276'.
[   74.451160][ T6365] netlink: 8 bytes leftover after parsing attributes in process `syz.1.276'.
[   74.576126][ T6375] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512).
[   74.650510][ T6369] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[   74.687626][ T6369] XFS (loop0): Ending clean mount
[   74.715303][ T5595] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[   74.755498][ T6389] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   74.772078][ T6389] EXT4-fs error (device loop1): ext4_generic_delete_entry:2666: inode #2: block 6: comm syz.1.285: bad entry in directory: rec_len is too small for name_len - offset=12, inode=2, rec_len=12, size=4096 fake=0
[   74.772775][ T5649] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   74.797764][ T6389] EXT4-fs error (device loop1) in ext4_delete_entry:2737: Corrupt filesystem
[   74.814825][ T5591] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   74.944923][ T5649] usb 3-1: Using ep0 maxpacket: 32
[   74.949202][ T5649] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   74.967242][ T5649] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   74.979455][ T5649] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[   74.992766][ T5649] usb 3-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[   75.005163][ T5649] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   75.023627][ T5649] usb 3-1: config 0 descriptor??
[   75.226246][ T6407] hfsplus: request for non-existent node 33423360 in B*Tree
[   75.239357][ T6407] hfsplus: request for non-existent node 33423360 in B*Tree
[   75.248909][ T6407] hfsplus: request for non-existent node 33423360 in B*Tree
[   75.251822][ T6407] hfsplus: request for non-existent node 33423360 in B*Tree
[   75.257178][ T6407] hfsplus: request for non-existent node 33423360 in B*Tree
[   75.260024][ T6407] hfsplus: request for non-existent node 33423360 in B*Tree
[   75.264438][ T6407] hfsplus: request for non-existent node 33423360 in B*Tree
[   75.267083][ T6407] hfsplus: request for non-existent node 33423360 in B*Tree
[   75.274224][ T6407] hfsplus: request for non-existent node 33423360 in B*Tree
[   75.277112][ T6407] hfsplus: request for non-existent node 33423360 in B*Tree
[   75.286226][ T6407] hfsplus: request for non-existent node 33423360 in B*Tree
[   75.289034][ T6407] hfsplus: request for non-existent node 33423360 in B*Tree
[   75.295574][ T6407] hfsplus: request for non-existent node 33423360 in B*Tree
[   75.298491][ T6407] hfsplus: request for non-existent node 33423360 in B*Tree
[   75.303021][ T6407] hfsplus: request for non-existent node 33423360 in B*Tree
[   75.305889][ T6407] hfsplus: request for non-existent node 33423360 in B*Tree
[   75.310018][ T6407] hfsplus: request for non-existent node 33423360 in B*Tree
[   75.313010][ T6407] hfsplus: request for non-existent node 33423360 in B*Tree
[   75.316980][ T6407] hfsplus: request for non-existent node 33423360 in B*Tree
[   75.319889][ T6407] hfsplus: request for non-existent node 33423360 in B*Tree
[   75.324403][ T6407] hfsplus: request for non-existent node 33423360 in B*Tree
[   75.327287][ T6407] hfsplus: request for non-existent node 33423360 in B*Tree
[   75.332882][ T6407] hfsplus: request for non-existent node 33423360 in B*Tree
[   75.335731][ T6407] hfsplus: request for non-existent node 33423360 in B*Tree
[   75.412585][ T6412] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined
[   75.416379][ T6412] i2c i2c-1: DVB: adapter 0 frontend 0 symbol rate 1 out of range (1000000..45000000)
[   75.463078][ T5649] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.0001/input/input4
[   75.483551][   T31] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   75.554840][ T5649] input: HID 0458:5011 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5011.0001/input/input5
[   75.626148][ T5649] kye 0003:0458:5011.0001: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:5011] on usb-dummy_hcd.2-1/input0
[   75.646469][   T31] usb 1-1: Using ep0 maxpacket: 16
[   75.661579][   T31] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[   75.669182][   T31] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[   75.693223][   T31] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[   75.696842][   T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   75.700041][   T31] usb 1-1: Product: syz
[   75.734599][   T31] usb 1-1: Manufacturer: syz
[   75.736479][   T31] usb 1-1: SerialNumber: syz
[   75.745443][   T31] usb 1-1: config 0 descriptor??
[   75.751015][   T31] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[   75.763995][   T31] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class)
[   75.910856][ T6092] usb 3-1: USB disconnect, device number 4
[   76.012192][ T6444] set_capacity_and_notify: 5 callbacks suppressed
[   76.012202][ T6444] loop1: detected capacity change from 0 to 256
[   76.236853][ T6448] loop1: detected capacity change from 0 to 40427
[   76.243930][ T6448] F2FS-fs (loop1): Invalid SB checksum offset: 0
[   76.246053][ T6448] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[   76.252083][ T6448] F2FS-fs (loop1): invalid crc value
[   76.295574][ T6448] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   76.302071][ T6448] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0
[   76.304460][ T6448] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   76.357396][   T31] em28xx 1-1:0.0: unknown em28xx chip ID (0)
[   76.360074][   T31] em28xx 1-1:0.0: Config register raw data: 0xfffffffb
[   76.478599][ T6456] loop2: detected capacity change from 0 to 2048
[   76.515402][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[   76.517400][ T5987]  loop2: p3 < > p4 < >
[   76.518897][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[   76.521903][ T5987] loop2: partition table partially beyond EOD, truncated
[   76.527381][ T5987] loop2: p3 start 4284289 is beyond EOD, truncated
[   76.540932][ T6456]  loop2: p3 < > p4 < >
[   76.542243][ T6456] loop2: partition table partially beyond EOD, truncated
[   76.545098][ T6456] loop2: p3 start 4284289 is beyond EOD, truncated
[   76.556170][ T5041]  loop2: p3 < > p4 < >
[   76.557912][ T5041] loop2: partition table partially beyond EOD, truncated
[   76.562249][ T5041] loop2: p3 start 4284289 is beyond EOD, truncated
[   76.570952][   T31] em28xx 1-1:0.0: AC97 chip type couldn't be determined
[   76.574551][   T31] em28xx 1-1:0.0: No AC97 audio processor
[   76.605720][   T31] usb 1-1: USB disconnect, device number 2
[   76.608974][   T31] em28xx 1-1:0.0: Disconnecting em28xx
[   76.617737][   T31] em28xx 1-1:0.0: Freeing device
[   76.621597][ T5596] udevd[5596]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory
[   76.653820][ T5596] udevd[5596]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory
[   76.680336][ T5596] udevd[5596]: inotify_add_watch(7, /dev/loop2p4, 10) failed: No such file or directory
[   76.754491][ T6466] loop2: detected capacity change from 0 to 1024
[   76.772869][ T6092] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   76.781764][ T6466] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[   76.793088][ T6466] ext4 filesystem being mounted at /85/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   76.821030][ T5597] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[   76.895827][ T6470] loop2: detected capacity change from 0 to 4096
[   76.903760][ T6470] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[   76.912339][ T6470] ntfs3(loop2): Failed to load $MFT (-2).
[   76.935731][ T6092] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88
[   76.940132][ T6092] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[   76.952892][ T6092] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   76.963495][ T6092] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[   76.967815][ T6092] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[   76.976226][ T6092] usb 2-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49
[   76.979869][ T6092] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   76.985001][ T6092] usb 2-1: Product: syz
[   76.987249][ T6092] usb 2-1: Manufacturer: syz
[   76.989080][ T6092] usb 2-1: SerialNumber: syz
[   76.993472][ T6092] usb 2-1: config 0 descriptor??
[   76.996700][ T6458] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   77.008814][ T6092] iguanair 2-1:0.0: probe with driver iguanair failed with error -12
[   77.127434][ T6480] hsr0: entered promiscuous mode
[   77.130071][ T6480] __nla_validate_parse: 2 callbacks suppressed
[   77.130081][ T6480] netlink: 12 bytes leftover after parsing attributes in process `syz.0.324'.
[   77.146393][ T6480] hsr_slave_0: left promiscuous mode
[   77.158776][ T6480] hsr_slave_1: left promiscuous mode
[   77.168293][ T6480] hsr0 (unregistering): left promiscuous mode
[   77.211369][   T24] usb 2-1: USB disconnect, device number 3
[   78.108620][ T6508] loop1: detected capacity change from 0 to 512
[   78.117288][ T6508] EXT4-fs warning (device loop1): ext4_enable_quotas:7236: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix.
[   78.122590][ T6508] EXT4-fs (loop1): mount failed
[   78.467739][ T6540] sctp: [Deprecated]: syz.2.350 (pid 6540) Use of struct sctp_assoc_value in delayed_ack socket option.
[   78.467739][ T6540] Use struct sctp_sack_info instead
[   78.513490][ T6546] loop2: detected capacity change from 0 to 128
[   78.523929][ T6546] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[   78.529023][ T6546] hpfs: filesystem error: improperly stopped
[   78.531359][ T6546] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[   78.546329][ T6546] hpfs: You really don't want any checks? You are crazy...
[   78.551830][ T6546] hpfs: Code page index out of array
[   78.554035][ T6546] hpfs: code page support is disabled
[   78.556306][ T6546] hpfs: hpfs_map_4sectors(): unaligned read
[   78.558718][ T6546] hpfs: hpfs_map_4sectors(): unaligned read
[   78.560784][ T6546] hpfs: filesystem error: unable to find root dir
[   78.602218][ T6550] netlink: 28 bytes leftover after parsing attributes in process `syz.1.355'.
[   78.755505][ T6562] xt_TCPMSS: Only works on TCP SYN packets
[   78.997822][ T6584] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 1, id = 0
[   79.135269][ T6579] loop2: detected capacity change from 0 to 32768
[   79.164670][ T6579] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[   79.182488][ T6579] XFS (loop2): Ending clean mount
[   79.215360][ T6579] XFS (loop2): User initiated shutdown received.
[   79.217480][ T6579] XFS (loop2): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:462).  Shutting down filesystem.
[   79.231018][ T6579] XFS (loop2): Please unmount the filesystem and rectify the problem(s)
[   79.251647][ T5597] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[   79.254133][ T6609] netlink: 32 bytes leftover after parsing attributes in process `syz.0.379'.
[   79.261098][ T6609] netlink: 32 bytes leftover after parsing attributes in process `syz.0.379'.
[   79.307032][ T6612] loop0: detected capacity change from 0 to 512
[   79.326383][ T6612] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   79.337440][ T6612] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   79.350607][ T6612] EXT4-fs (loop0): 1 truncate cleaned up
[   79.353958][ T6612] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   79.434242][ T5595] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   79.868342][ T6626] loop1: detected capacity change from 0 to 4096
[   79.898291][ T6627] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   79.953041][ T5649] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   79.999104][   T33] audit: type=1326 audit(1785563832.880:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6628 comm="syz.1.386" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb7659e019 code=0x7ffc0000
[   80.022128][   T33] audit: type=1326 audit(1785563832.880:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6628 comm="syz.1.386" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb7659e019 code=0x7ffc0000
[   80.043894][   T33] audit: type=1326 audit(1785563832.890:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6628 comm="syz.1.386" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb7659e019 code=0x7ffc0000
[   80.068476][   T33] audit: type=1326 audit(1785563832.890:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6628 comm="syz.1.386" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb7659e019 code=0x7ffc0000
[   80.101448][   T33] audit: type=1326 audit(1785563832.900:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6628 comm="syz.1.386" exe="/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7fbb7659e019 code=0x7ffc0000
[   80.119754][ T5649] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7
[   80.128942][ T5649] usb 3-1: New USB device found, idVendor=0bda, idProduct=4014, bcdDevice= 0.40
[   80.135316][ T5649] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   80.140016][   T33] audit: type=1326 audit(1785563832.940:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6628 comm="syz.1.386" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbb7655e84e code=0x7ffc0000
[   80.157926][ T5649] usb 3-1: Product: syz
[   80.159969][ T5649] usb 3-1: Manufacturer: syz
[   80.164328][ T5649] usb 3-1: SerialNumber: syz
[   80.170849][   T33] audit: type=1326 audit(1785563832.950:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6628 comm="syz.1.386" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbb7655e84e code=0x7ffc0000
[   80.188630][   T33] audit: type=1326 audit(1785563832.950:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6628 comm="syz.1.386" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbb7655e84e code=0x7ffc0000
[   80.207826][   T33] audit: type=1326 audit(1785563832.950:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6628 comm="syz.1.386" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbb7655e84e code=0x7ffc0000
[   80.227163][   T33] audit: type=1326 audit(1785563832.950:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6628 comm="syz.1.386" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fbb7655e84e code=0x7ffc0000
[   80.455565][ T5649] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found
[   80.541861][ T5649] usb 3-1: USB disconnect, device number 5
[   80.615129][ T5596] udevd[5596]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   80.730314][ T6633] F2FS-fs (loop0): invalid crc value
[   80.794844][ T6633] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[   80.798408][ T6633] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   80.831274][ T6648] netlink: 84 bytes leftover after parsing attributes in process `syz.1.395'.
[   80.841758][ T6648] netlink: 84 bytes leftover after parsing attributes in process `syz.1.395'.
[   81.119598][ T6672] overlayfs: failed to decode file handle (len=6, type=248, flags=0, err=-61)
[   81.165029][ T6679] binder: 6678:6679 ioctl c0306201 200000000080 returned -22
[   81.450498][ T6709] set_capacity_and_notify: 2 callbacks suppressed
[   81.450509][ T6709] loop1: detected capacity change from 0 to 2048
[   81.462415][ T6709] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   81.552575][ T6715] loop1: detected capacity change from 0 to 1024
[   81.556744][ T6715] EXT4-fs (loop1): unsupported inode size: 4096
[   81.558916][ T6715] EXT4-fs (loop1): blocksize: 1024
[   81.606943][ T6719] netlink: 24 bytes leftover after parsing attributes in process `syz.1.428'.
[   81.653390][ T5649] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[   81.736925][ T6721] loop1: detected capacity change from 0 to 32768
[   81.746350][ T6721] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.429 (6721)
[   81.760960][ T6721] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   81.764994][ T6721] BTRFS info (device loop1): using sha256 checksum algorithm
[   81.784445][ T6721] BTRFS info (device loop1): setting nodatasum
[   81.786644][ T6721] BTRFS info (device loop1): enabling ssd optimizations
[   81.789033][ T6721] BTRFS info (device loop1): turning on async discard
[   81.791234][ T6721] BTRFS info (device loop1): enabling free space tree
[   81.826162][ T5649] usb 3-1: unable to get BOS descriptor or descriptor too short
[   81.831977][ T5649] usb 3-1: config 1 has too many interfaces: 35, using maximum allowed: 32
[   81.837789][ T5649] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   81.848999][ T5649] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 35
[   81.863568][ T5649] usb 3-1: string descriptor 0 read error: -22
[   81.868093][ T5649] usb 3-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice= 0.40
[   81.882568][ T5649] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   81.897176][ T5649] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[   81.899391][ T5591] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   82.029533][ T6740] loop1: detected capacity change from 0 to 512
[   82.038332][ T6740] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   82.152503][ T5649] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -2
[   82.314250][   T10] usb 3-1: USB disconnect, device number 6
[   82.359287][ T6761] MTRR 1 not used
[   82.488194][ T6766] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[   82.501221][ T6766] team0: Device xfrm0 is of different type
[   82.512382][ T6766] tipc: Started in network mode
[   82.516295][ T6766] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711
[   82.519712][ T6766] tipc: Enabled bearer <eth:team0>, priority 0
[   83.132725][   T10] usb 3-1: new full-speed USB device number 7 using dummy_hcd
[   83.147478][ T6782] BUG: Bad page state in process syz.1.450  pfn:1adf1e
[   83.150123][ T6782] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x200000000 pfn:0x1adf1e
[   83.155925][ T6782] flags: 0x57ff0000002090c(referenced|uptodate|active|owner_2|swapbacked|node=1|zone=2|lastcpupid=0x7ff)
[   83.159513][ T6782] raw: 057ff0000002090c 0000000000000000 dead000000000122 0000000000000000
[   83.163288][ T6782] raw: 0000000200000000 0000000000000000 00000000ffffffff 0000000000000000
[   83.166316][ T6782] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set
[   83.168573][ T6782] page_owner tracks the page as allocated
[   83.170613][ T6782] page last allocated via order 0, migratetype Movable, gfp_mask 0x140dca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO|__GFP_COMP), pid 6781, tgid 6781 (syz.1.450), ts 83143477529, free_ts 80864926222
[   83.176583][ T6782]  post_alloc_hook+0x231/0x280
[   83.178142][ T6782]  get_page_from_freelist+0x2503/0x25a0
[   83.179880][ T6782]  __alloc_frozen_pages_noprof+0x18d/0x380
[   83.182246][ T6782]  alloc_pages_mpol+0x22b/0x390
[   83.184642][ T6782]  vma_alloc_folio_noprof+0xea/0x210
[   83.186433][ T6782]  do_pte_missing+0x172b/0x39a0
[   83.188274][ T6782]  handle_mm_fault+0x1b11/0x3270
[   83.190103][ T6782]  do_user_addr_fault+0xa4d/0x1340
[   83.191764][ T6782]  exc_page_fault+0x6a/0xc0
[   83.193639][ T6782]  asm_exc_page_fault+0x26/0x30
[   83.195260][ T6782] page last free pid 5595 tgid 5595 stack trace:
[   83.197431][ T6782]  free_unref_folios+0xf29/0x1740
[   83.199309][ T6782]  folios_put_refs+0x795/0x8d0
[   83.201086][ T6782]  shmem_undo_range+0x4e6/0x15d0
[   83.203238][ T6782]  shmem_evict_inode+0x280/0xa70
[   83.205057][ T6782]  evict+0x624/0xb50
[   83.206240][ T6782]  __dentry_kill+0x19f/0x5d0
[   83.207714][ T6782]  finish_dput+0xca/0x490
[   83.209026][ T6782]  __fput+0x670/0xa40
[   83.210336][ T6782]  task_work_run+0x1d9/0x270
[   83.211836][ T6782]  exit_to_user_mode_loop+0x18d/0x5e0
[   83.214766][ T6782]  do_syscall_64+0x357/0xf80
[   83.216925][ T6782]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   83.219074][ T6782] Modules linked in:
[   83.220521][ T6782] CPU: 0 UID: 0 PID: 6782 Comm: syz.1.450 Not tainted syzkaller #0 PREEMPT(full) 
[   83.220533][ T6782] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   83.220539][ T6782] Call Trace:
[   83.220545][ T6782]  <TASK>
[   83.220550][ T6782]  dump_stack_lvl+0xe8/0x150
[   83.220566][ T6782]  bad_page+0x17f/0x1c0
[   83.220581][ T6782]  free_unref_folios+0x1070/0x1740
[   83.220608][ T6782]  folios_put_refs+0x795/0x8d0
[   83.220617][ T6782]  ? irqentry_exit+0x6d8/0x700
[   83.220627][ T6782]  ? trace_irq_disable+0x3b/0x150
[   83.220644][ T6782]  ? __pfx_folios_put_refs+0x10/0x10
[   83.220659][ T6782]  ? free_swap_cache+0x109/0x300
[   83.220674][ T6782]  free_pages_and_swap_cache+0x525/0x590
[   83.220693][ T6782]  ? __pfx_free_pages_and_swap_cache+0x10/0x10
[   83.220735][ T6782]  ? unmap_page_range+0x3c45/0x48f0
[   83.220749][ T6782]  tlb_flush_mmu+0x6d3/0xa30
[   83.220760][ T6782]  ? unmap_page_range+0x3c45/0x48f0
[   83.220771][ T6782]  ? unmap_page_range+0x3c45/0x48f0
[   83.220784][ T6782]  unmap_page_range+0x3c70/0x48f0
[   83.220823][ T6782]  ? __pfx_unmap_page_range+0x10/0x10
[   83.220865][ T6782]  ? mas_find+0xab1/0xcf0
[   83.220882][ T6782]  ? unmap_vmas+0x1ba/0x680
[   83.220896][ T6782]  unmap_vmas+0x462/0x680
[   83.220912][ T6782]  ? __pfx_unmap_vmas+0x10/0x10
[   83.220931][ T6782]  exit_mmap+0x292/0xa20
[   83.220947][ T6782]  ? __pfx_exit_mmap+0x10/0x10
[   83.220970][ T6782]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[   83.220988][ T6782]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[   83.221002][ T6782]  ? __pfx_exit_aio+0x10/0x10
[   83.221020][ T6782]  ? arch_uprobe_clear_state+0x1c8/0x240
[   83.221036][ T6782]  ? uprobe_clear_state+0x27c/0x290
[   83.221049][ T6782]  __mmput+0x118/0x420
[   83.221063][ T6782]  exit_mm+0x160/0x210
[   83.221080][ T6782]  do_exit+0x6cd/0x2460
[   83.221097][ T6782]  ? try_to_wake_up+0x7ee/0x1360
[   83.221112][ T6782]  ? __pfx_do_exit+0x10/0x10
[   83.221133][ T6782]  ? do_raw_spin_lock+0x12b/0x2f0
[   83.221154][ T6782]  do_group_exit+0x22d/0x2f0
[   83.221168][ T6782]  ? _raw_spin_unlock_irq+0x23/0x50
[   83.221183][ T6782]  get_signal+0x121b/0x12c0
[   83.221203][ T6782]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   83.221215][ T6782]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   83.221226][ T6782]  arch_do_signal_or_restart+0xbb/0x810
[   83.221239][ T6782]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[   83.221260][ T6782]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   83.221271][ T6782]  exit_to_user_mode_loop+0xa3/0x5e0
[   83.221281][ T6782]  ? rcu_is_watching+0x15/0xb0
[   83.221294][ T6782]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   83.221304][ T6782]  do_syscall_64+0x357/0xf80
[   83.221318][ T6782]  ? trace_irq_disable+0x3b/0x150
[   83.221333][ T6782]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   83.221343][ T6782] RIP: 0033:0x7fbb7659e019
[   83.221354][ T6782] Code: Unable to access opcode bytes at 0x7fbb7659dfef.
[   83.221360][ T6782] RSP: 002b:00007fbb7750b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[   83.221372][ T6782] RAX: fffffffffffffe00 RBX: 00007fbb76825fa8 RCX: 00007fbb7659e019
[   83.221379][ T6782] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fbb76825fa8
[   83.221386][ T6782] RBP: 00007fbb76825fa0 R08: 0000000000000000 R09: 0000000000000000
[   83.221393][ T6782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   83.221399][ T6782] R13: 00007fbb76826038 R14: 00007fffbec5af10 R15: 00007fffbec5aff8
[   83.221412][ T6782]  </TASK>
[   83.221415][ T6782] Disabling lock debugging due to kernel taint
[   83.233738][ T5023] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x200000000 pfn:0x1adf1e
[   83.286176][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[   83.287082][ T5023] flags: 0x57ff0000002090c(referenced|uptodate|active|owner_2|swapbacked|node=1|zone=2|lastcpupid=0x7ff)
[   83.290716][   T10] usb 3-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e
[   83.291784][ T5023] raw: 057ff0000002090c 0000000000000000 dead000000000122 0000000000000000
[   83.291791][ T5023] raw: 0000000200000000 0000000000000000 00000000ffffffff 0000000000000000
[   83.291795][ T5023] page dumped because: VM_WARN_ON_ONCE_FOLIO(!memcg && !mem_cgroup_disabled())
[   83.291800][ T5023] page_owner tracks the page as allocated
[   83.291803][ T5023] page last allocated via order 0, migratetype Movable, gfp_mask 0x140dca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO|__GFP_COMP), pid 6781, tgid 6781 (syz.1.450), ts 83143477529, free_ts 80864926222
[   83.291815][ T5023]  post_alloc_hook+0x231/0x280
[   83.293886][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   83.295668][ T5023]  get_page_from_freelist+0x2503/0x25a0
[   83.295681][ T5023]  __alloc_frozen_pages_noprof+0x18d/0x380
[   83.295688][ T5023]  alloc_pages_mpol+0x22b/0x390
[   83.295695][ T5023]  vma_alloc_folio_noprof+0xea/0x210
[   83.295702][ T5023]  do_pte_missing+0x172b/0x39a0
[   83.295711][ T5023]  handle_mm_fault+0x1b11/0x3270
[   83.297538][   T10] usb 3-1: Product: syz
[   83.299485][ T5023]  do_user_addr_fault+0xa4d/0x1340
[   83.299500][ T5023]  exc_page_fault+0x6a/0xc0
[   83.299512][ T5023]  asm_exc_page_fault+0x26/0x30
[   83.299519][ T5023] page last free pid 5595 tgid 5595 stack trace:
[   83.299523][ T5023]  free_unref_folios+0xf29/0x1740
[   83.299533][ T5023]  folios_put_refs+0x795/0x8d0
[   83.299540][ T5023]  shmem_undo_range+0x4e6/0x15d0
[   83.301901][   T10] usb 3-1: Manufacturer: syz
[   83.303558][ T5023]  shmem_evict_inode+0x280/0xa70
[   83.303567][ T5023]  evict+0x624/0xb50
[   83.303573][ T5023]  __dentry_kill+0x19f/0x5d0
[   83.303579][ T5023]  finish_dput+0xca/0x490
[   83.303587][ T5023]  __fput+0x670/0xa40
[   83.303594][ T5023]  task_work_run+0x1d9/0x270
[   83.303603][ T5023]  exit_to_user_mode_loop+0x18d/0x5e0
[   83.303609][ T5023]  do_syscall_64+0x357/0xf80
[   83.303618][ T5023]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   83.303699][ T5023] ------------[ cut here ]------------
[   83.305318][   T10] usb 3-1: SerialNumber: syz
[   83.307007][ T5023] 1
[   83.307011][ T5023] WARNING: ./include/linux/memcontrol.h:744 at folio_lruvec_lock_irqsave+0x26b/0x3d0, CPU#1: syslogd/5023
[   83.307027][ T5023] Modules linked in:
[   83.307036][ T5023] CPU: 1 UID: 0 PID: 5023 Comm: syslogd Tainted: G    B               syzkaller #0 PREEMPT(full) 
[   83.307046][ T5023] Tainted: [B]=BAD_PAGE
[   83.307048][ T5023] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   83.307053][ T5023] RIP: 0010:folio_lruvec_lock_irqsave+0x26b/0x3d0
[   83.307062][ T5023] Code: 80 3c 2c 00 74 08 4c 89 f7 e8 f1 9a f7 ff 49 89 2e eb a4 4c 89 ef 48 c7 c6 40 9f dc 8b e8 dd 5c f0 fe c6 05 89 97 c3 0d 01 90 <0f> 0b 90 e9 c1 fe ff ff 90 0f 0b 90 e9 87 fe ff ff 44 89 e1 80 e1
[   83.310155][   T10] usb 3-1: config 0 descriptor??
[   83.313078][   T10] streamzap 3-1:0.0: streamzap_probe: endpoint doesn't match input device 0203
[   83.313621][ T5023] RSP: 0018:ffffc90004cff720 EFLAGS: 00010246
[   83.444190][ T5023] RAX: 2076a76cefa8f700 RBX: 000000000000001e RCX: 0000000000000002
[   83.447217][ T5023] RDX: 0000000000000000 RSI: ffffffff8c28ada0 RDI: ffff8881130c3b00
[   83.450257][ T5023] RBP: ffffc90004cff7c0 R08: ffffffff901188f7 R09: 1ffffffff202311e
[   83.452933][ T5023] R10: dffffc0000000000 R11: fffffbfff202311f R12: ffffea0006b7c7b0
[   83.455585][ T5023] R13: ffffea0006b7c780 R14: dffffc0000000000 R15: 0000000000000000
[   83.458021][ T5023] FS:  00007fde9b3de380(0000) GS:ffff8882a9452000(0000) knlGS:0000000000000000
[   83.460861][ T5023] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   83.463516][ T5023] CR2: 000000110c2609c2 CR3: 000000016a2d2000 CR4: 00000000000006f0
[   83.466598][ T5023] Call Trace:
[   83.467947][ T5023]  <TASK>
[   83.469162][ T5023]  folio_batch_move_lru+0x284/0x430
[   83.471179][ T5023]  ? __pfx_lru_add+0x10/0x10
[   83.473104][ T5023]  ? __pfx_folio_batch_move_lru+0x10/0x10
[   83.475330][ T5023]  ? lock_acquire+0x57/0x2e0
[   83.477159][ T5023]  ? __pfx_lru_add+0x10/0x10
[   83.478983][ T5023]  __folio_batch_add_and_move+0x510/0xc50
[   83.481164][ T5023]  ? __pfx_lru_add+0x10/0x10
[   83.483054][ T5023]  shmem_alloc_and_add_folio+0xcc6/0xf60
[   83.485271][ T5023]  ? filemap_get_entry+0xca/0x320
[   83.487111][ T5023]  ? filemap_get_entry+0xca/0x320
[   83.488805][ T5023]  ? filemap_get_entry+0x2ac/0x320
[   83.490717][ T5023]  ? __pfx_filemap_get_entry+0x10/0x10
[   83.492380][ T5023]  ? __pfx_shmem_alloc_and_add_folio+0x10/0x10
[   83.494898][ T5023]  ? shmem_allowable_huge_orders+0x325/0x6c0
[   83.497236][ T5023]  shmem_get_folio_gfp+0x5b2/0x16c0
[   83.499270][ T5023]  shmem_write_begin+0x16c/0x330
[   83.501201][ T5023]  generic_perform_write+0x2d5/0x8f0
[   83.503354][ T5023]  ? __pfx_generic_perform_write+0x10/0x10
[   83.505837][ T5023]  ? down_write+0x16d/0x200
[   83.507620][ T5023]  ? generic_write_checks_count+0x41a/0x520
[   83.509919][ T5023]  ? file_update_time_flags+0x3b3/0x4a0
[   83.511991][ T5023]  shmem_file_write_iter+0xf8/0x120
[   83.513620][ T5023]  vfs_write+0x612/0xba0
[   83.514853][ T5023]  ? __pfx_vfs_write+0x10/0x10
[   83.516295][ T5023]  ksys_write+0x150/0x270
[   83.517603][ T5023]  ? __pfx_ksys_write+0x10/0x10
[   83.518507][   T10] usb 3-1: USB disconnect, device number 7
[   83.519168][ T5023]  ? rcu_is_watching+0x15/0xb0
[   83.523696][ T5023]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   83.526314][ T5023]  do_syscall_64+0x170/0xf80
[   83.528115][ T5023]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   83.530392][ T5023] RIP: 0033:0x7fde9b532bf2
[   83.532120][ T5023] Code: 89 c7 48 89 44 24 08 e8 7b 34 fa ff 48 8b 44 24 08 48 83 c4 28 c3 c3 64 8b 04 25 18 00 00 00 85 c0 75 20 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 76 6f 48 8b 15 07 a2 0d 00 f7 d8 64 89 02 48 83
[   83.539518][ T5023] RSP: 002b:00007ffc061657c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[   83.542506][ T5023] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fde9b532bf2
[   83.545236][ T5023] RDX: 0000000000000063 RSI: 00005593dd324c50 RDI: 0000000000000003
[   83.547969][ T5023] RBP: 00005593dd324c50 R08: 0000000000000000 R09: 0000000000000000
[   83.550882][ T5023] R10: 00005593dd324f00 R11: 0000000000000246 R12: 0000000000000063
[   83.553991][ T5023] R13: 00007fde9b3de300 R14: 0000000000000004 R15: 00005593dd324a60
[   83.556721][ T5023]  </TASK>
[   83.557663][ T5023] Kernel panic - not syncing: kernel: panic_on_warn set ...
[   83.560140][ T5023] CPU: 1 UID: 0 PID: 5023 Comm: syslogd Tainted: G    B               syzkaller #0 PREEMPT(full) 
[   83.564238][ T5023] Tainted: [B]=BAD_PAGE
[   83.565877][ T5023] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   83.569105][ T5023] Call Trace:
[   83.570184][ T5023]  <TASK>
[   83.571089][ T5023]  vpanic+0x56c/0xa60
[   83.572662][ T5023]  ? __pfx__printk+0x10/0x10
[   83.574421][ T5023]  ? __pfx_vpanic+0x10/0x10
[   83.576099][ T5023]  ? is_bpf_text_address+0x292/0x2b0
[   83.577866][ T5023]  ? is_bpf_text_address+0x26/0x2b0
[   83.579473][ T5023]  panic+0xc5/0xd0
[   83.580741][ T5023]  ? __pfx_panic+0x10/0x10
[   83.582088][ T5023]  __warn+0x315/0x4f0
[   83.583408][ T5023]  ? folio_lruvec_lock_irqsave+0x26b/0x3d0
[   83.585214][ T5023]  ? folio_lruvec_lock_irqsave+0x26b/0x3d0
[   83.586979][ T5023]  __report_bug+0x28e/0x530
[   83.588637][ T5023]  ? folio_lruvec_lock_irqsave+0x26b/0x3d0
[   83.590564][ T5023]  ? __pfx___report_bug+0x10/0x10
[   83.592259][ T5023]  ? folio_lruvec_lock_irqsave+0x26b/0x3d0
[   83.594300][ T5023]  report_bug+0x16a/0x220
[   83.595578][ T5023]  ? folio_lruvec_lock_irqsave+0x26b/0x3d0
[   83.597298][ T5023]  ? folio_lruvec_lock_irqsave+0x26d/0x3d0
[   83.599129][ T5023]  handle_bug+0x9c/0x200
[   83.600626][ T5023]  exc_invalid_op+0x1a/0x50
[   83.602101][ T5023]  asm_exc_invalid_op+0x1a/0x20
[   83.604009][ T5023] RIP: 0010:folio_lruvec_lock_irqsave+0x26b/0x3d0
[   83.606413][ T5023] Code: 80 3c 2c 00 74 08 4c 89 f7 e8 f1 9a f7 ff 49 89 2e eb a4 4c 89 ef 48 c7 c6 40 9f dc 8b e8 dd 5c f0 fe c6 05 89 97 c3 0d 01 90 <0f> 0b 90 e9 c1 fe ff ff 90 0f 0b 90 e9 87 fe ff ff 44 89 e1 80 e1
[   83.612914][ T5023] RSP: 0018:ffffc90004cff720 EFLAGS: 00010246
[   83.614819][ T5023] RAX: 2076a76cefa8f700 RBX: 000000000000001e RCX: 0000000000000002
[   83.617344][ T5023] RDX: 0000000000000000 RSI: ffffffff8c28ada0 RDI: ffff8881130c3b00
[   83.619738][ T5023] RBP: ffffc90004cff7c0 R08: ffffffff901188f7 R09: 1ffffffff202311e
[   83.622576][ T5023] R10: dffffc0000000000 R11: fffffbfff202311f R12: ffffea0006b7c7b0
[   83.624987][ T5023] R13: ffffea0006b7c780 R14: dffffc0000000000 R15: 0000000000000000
[   83.627449][ T5023]  folio_batch_move_lru+0x284/0x430
[   83.628960][ T5023]  ? __pfx_lru_add+0x10/0x10
[   83.630296][ T5023]  ? __pfx_folio_batch_move_lru+0x10/0x10
[   83.632053][ T5023]  ? lock_acquire+0x57/0x2e0
[   83.633706][ T5023]  ? __pfx_lru_add+0x10/0x10
[   83.635453][ T5023]  __folio_batch_add_and_move+0x510/0xc50
[   83.637593][ T5023]  ? __pfx_lru_add+0x10/0x10
[   83.639142][ T5023]  shmem_alloc_and_add_folio+0xcc6/0xf60
[   83.640937][ T5023]  ? filemap_get_entry+0xca/0x320
[   83.642843][ T5023]  ? filemap_get_entry+0xca/0x320
[   83.644523][ T5023]  ? filemap_get_entry+0x2ac/0x320
[   83.646025][ T5023]  ? __pfx_filemap_get_entry+0x10/0x10
[   83.647694][ T5023]  ? __pfx_shmem_alloc_and_add_folio+0x10/0x10
[   83.650016][ T5023]  ? shmem_allowable_huge_orders+0x325/0x6c0
[   83.651743][ T5023]  shmem_get_folio_gfp+0x5b2/0x16c0
[   83.653322][ T5023]  shmem_write_begin+0x16c/0x330
[   83.654816][ T5023]  generic_perform_write+0x2d5/0x8f0
[   83.656451][ T5023]  ? __pfx_generic_perform_write+0x10/0x10
[   83.658208][ T5023]  ? down_write+0x16d/0x200
[   83.659766][ T5023]  ? generic_write_checks_count+0x41a/0x520
[   83.661568][ T5023]  ? file_update_time_flags+0x3b3/0x4a0
[   83.663203][ T5023]  shmem_file_write_iter+0xf8/0x120
[   83.664880][ T5023]  vfs_write+0x612/0xba0
[   83.666163][ T5023]  ? __pfx_vfs_write+0x10/0x10
[   83.667566][ T5023]  ksys_write+0x150/0x270
[   83.668994][ T5023]  ? __pfx_ksys_write+0x10/0x10
[   83.670897][ T5023]  ? rcu_is_watching+0x15/0xb0
[   83.672813][ T5023]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   83.675139][ T5023]  do_syscall_64+0x170/0xf80
[   83.676846][ T5023]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   83.678976][ T5023] RIP: 0033:0x7fde9b532bf2
[   83.680577][ T5023] Code: 89 c7 48 89 44 24 08 e8 7b 34 fa ff 48 8b 44 24 08 48 83 c4 28 c3 c3 64 8b 04 25 18 00 00 00 85 c0 75 20 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 76 6f 48 8b 15 07 a2 0d 00 f7 d8 64 89 02 48 83
[   83.686976][ T5023] RSP: 002b:00007ffc061657c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[   83.689479][ T5023] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fde9b532bf2
[   83.692245][ T5023] RDX: 0000000000000063 RSI: 00005593dd324c50 RDI: 0000000000000003
[   83.694907][ T5023] RBP: 00005593dd324c50 R08: 0000000000000000 R09: 0000000000000000
[   83.697353][ T5023] R10: 00005593dd324f00 R11: 0000000000000246 R12: 0000000000000063
[   83.699764][ T5023] R13: 00007fde9b3de300 R14: 0000000000000004 R15: 00005593dd324a60
[   83.702311][ T5023]  </TASK>
[   83.703969][ T5023] Kernel Offset: disabled
[   83.705299][ T5023] Rebooting in 86400 seconds..

VM DIAGNOSIS:
05:53:00  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000030 RBX=0000000000000030 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900069ae710
R8 =ffff88816bf90237 R9 =1ffff1102d7f2046 R10=dffffc0000000000 R11=ffffffff8557c190
R12=dffffc0000000000 R13=ffffffff9a2c3a7e R14=ffffffff9a5dbb20 R15=0000000000000000
RIP=ffffffff8557c20c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fbb7750b6c0 ffffffff 00c00000
GS =0000 ffff88818de52000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fbb7750aff8 CR3=000000011a03c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff ffffffffffffffff
XMM02=0000000000000000 0000000000000000 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=0000000000000000 00000000000000ff XMM05=f2dbbb4a7bb4e5eb 34edfc7e27b21fbc
XMM06=cee4e26eedbd8dce cca52a58dedebaff XMM07=6b4da7f95c2ea781 e4bb3b1f9e9cda52
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000046 RBX=0000000000000001 RCX=0000000080000100 RDX=0000000000000100
RSI=ffffffff8e16cbd8 RDI=ffffffff8c28adc0 RBP=00000000ffffffff RSP=ffffc900001d79b0
R8 =ffffffff823994be R9 =0000000000000000 R10=0000000000000000 R11=ffffffff8e75d000
R12=0000000000000246 R13=ffff8881604f5880 R14=ffffffff8e75d000 R15=0000000000000001
RIP=ffffffff8baeb5e3 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8882a9452000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c2609c2 CR3=000000000e54c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 00007fbb7735d560
XMM02=00007fbb767f25e8 00007fbb767f2618 XMM03=00007fbb767f2600 00007fbb767f25e0
XMM04=00007fbb7735d020 00007fbb767f25c0 XMM05=00007fbb767f25d0 00007fbb767f2610
XMM06=00007fbb767f25f8 00007fbb767f25c8 XMM07=00007fbb767f2600 00007fbb767f25e0
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
