last executing test programs:

12m17.046962341s ago: executing program 32 (id=94):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001a0001000000ff7f0000fff080000000", @ANYRES32=r0], 0x24}}, 0x0)

11m57.607316505s ago: executing program 33 (id=266):
r0 = getpid()
sched_setscheduler(r0, 0x2, 0x0)
prlimit64(0x0, 0x0, 0x0, 0x0)
copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x39ea, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f00000003c0)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r1}, 0x10)
io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000004c0), 0x40140, 0x0)
ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0xb, 0x0, 0x0)
mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = landlock_create_ruleset(&(0x7f00000000c0)={0x7f6e}, 0x18, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f0000000000)={0x210a, r3}, 0x0)

10m40.379083477s ago: executing program 34 (id=1088):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@ipv6_newnexthop={0x38, 0x68, 0x1, 0x0, 0xfffffffe, {}, [@NHA_ENCAP={0x18, 0x8, 0x0, 0x1, @LWTUNNEL_IP6_SRC={0x14, 0x3, @private2}}, @NHA_OIF={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x8810}, 0x40040d0)

10m25.560542149s ago: executing program 35 (id=1187):
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000140)='./file1\x00', 0x1008400, &(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYRES64], 0x86, 0x680, &(0x7f0000000340)="$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")
listxattr(&(0x7f0000000a00)='./file1\x00', 0x0, 0x0)

8m16.56818223s ago: executing program 36 (id=2310):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f0000000600)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000300)='GPL\x00', 0x8}, 0x94)

7m23.515901424s ago: executing program 37 (id=2921):
syz_mount_image$nilfs2(&(0x7f0000000a40), &(0x7f0000000200)='./file0\x00', 0x10, &(0x7f0000000480)=ANY=[], 0x5, 0xa5a, &(0x7f0000001b40)="$eJzs3U1sHFcBAOA3a6/z22ZTHGrS0CYU2vJTu3FM+ImAVM2FqKm4Vaq4RElaIpyASCVI1UOSEzdaVeHK76mX8qNK5IKinrhUopG49FQ4cCAKUiUO0JC48vq99e7zbmbt2J6s9/uk2bdv3tt9b3ZnZmdn5r0XgKFVaz7OzEwUIVy+8saRfz32zy0hXBlfzNFoPo62xeohhCLGR7P3+2BkIbz14asnuoVFmG4+pnh47kbrtdtCCBfC3nA1NMLuy9def3f62WMXj17a996bh66vzdIDAMBw+c7VQzO7/v7Xh3Z+9NbDh8Om1vx0fN6I8e3xuP9wPPBPx/+10Bkv2qZ2Y1m+0TjVsnwjXfK1l1PP8o32KH8se996j3ybSsofaZvXbblhkKX1uBGK2mRHvFabnFz4Tx6a/+vHismzp2dfPFdRRYFV959HQgh7Taahny42N4jq67Gu09yOqvdAAAvy64VLXMjPLNyd1ruN9lf+jadr3V8Pq2C913/lD1b5v71oj8Pq2ahrU1qutB1tj/G26whnQpf7l/Ltby5/42z7T++XX4+o91nPXtcRBuX6Qq96jqxzPVaqV/3z9WKj+kYM0+fwzSy9ffvJv9NB+Y6B7v7r/L/JNLTTkuPbO8jvlQE2tvy+ubkopef39eXpm0rSN5ekbylJ39qRa2n6tpLXwzD748s/C68Vi//z8//0yz0fns6z3RfD+5dZn/x85HLLH7tDbD3Kd4zEIPnT8edPffXkC9cW7v8vWuv/7bi+743xRtyarsYM6Xxhfl69de9/o7OcWo98D2T1ua9L/ubz8c58xfji+4S2/cySekx0vm5Hr3x7OvM1snxb4rQ5q29+fLI1e106/kj71fR5jWbLW8+WYyyrR9qv7IxhXg9YibQ+9rr/P62fE6FevHh69tRTMZ7W07+M1DfNz99fXtTvVrvuwN3pt/3PROhs/7O9Nb9ea98v7FicX7TvFxrZ/Oke8w/EePqd+97Ilub8yRM/mD252gsPQ+7c+Ve+f3x29tSPPPHEE09aT6reMwFrberlMz+cOnf+lSdPnzn+0qmXTp09cPDggenpg187MDPVPK6faj+6BzaSxR/9qmsCAAAAAAAAAAAA9OvHR49c+9s7X3l/of3/Yvu/1P4/3fmb2v//tFho615rmx+6jAOY2gHu7JLezJN1sDqW5avH6RNZfcezcnZlr/tkDFvj+MX2/6m4vF/XVJ8Hs/l5/70pX9adwJL+UsayXkfy8QI/E8NLMfx1gAoVW7rPjmFZ/9ZpXU/9UyyjX4ruBVOJ9L2lLyX1Y5Laf/fq1ynt/3euQx1ZfevRnLDqZQS6+/cQ9//dPHZZw/f/zf3VL+Pm3mmbqq6bqfppbs4oHsC9oerxP9N5zxSe/fO3N89PKduNpzv3l3n/pXA37vXxJ5W/scb/bI1/19f+7+bS0RMaKyv3f7+4/n5bsWF3v/vffPlTP9DjeQl3PhP90Xz5NxcX5fHQX/lzv8rKzy8I9elmXP70+W/ts/wly7+nrKTzb3eb+/9YfvrYnni03/IXalzUOuuRnzdO1//y88bJrWz5T650+Vc4UOPtWD4Ms0EZZ3a5+hj/t6ls/N8lVnn8317y+zC+HONpR5juc8hHOFlm/VuR9DuwK3v/ouT3zfi/g+3rMSzbHtL4v2l9bHSJ19ri9S6f7Ubd18Cg+uDevf63+ENVfV1M/X5f1dfDtIxpbm5ubU9olai0cCr//Kv+n1B1+VV//mXy8X/zY/h8/N88PR//N0/Px//N0/Px9fL0rVl6/nnm4//m6Q9m75uPDzyR/cHO0z9V8vrdJekPlaTvKUn/dEn6vpL0h0vSHylJf6Ak/dGS9M+WpH+uJP2xkvQnStI/X5K+0aX2KMO6/DDM8vZ5tn8YHql9ba/tf7wkHRhcP39r/zMv/OG7jYX2/2Ot8yHpOt7hGK/H/84/ifH8undoi8+nvRPj/8jS7/XzHTBM8v4z8t/3x0vSgcGV7vOyfcMQKrq3k+i336pex/kMli/E8Isx/FIMn4zhZAynYrg/htPrVD/WxjO/f/vQa8Xi//0dWXq/95Pn7YHyfqIO9Fmf/PzAcu/Hz/vxW667LX+FzcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAqU2s+zsxMFCFcvvLGkeePnZ6an/OtVo5G83G0LVZvvS6Ep2I4EsNfxie3Pnz1RHt4O4ZFmA5FKFrzw3M3WiVtCyFcCHvD1dAIuy9fe/3d6WePXTx6ad97bx66vnafAAAAAGx8HwcAAP//V88c0Q==")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x40106e8c, 0x0)

5m5.854847262s ago: executing program 8 (id=4593):
r0 = fsopen(&(0x7f0000000100)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='source', &(0x7f0000000000)=':::\n-&\xf5\xcc\xd7\x06f\xcdY\xb9\xc7\x9d\xb2a\r\xd7\xef\xc5\x112i\x88\n\x13.\xd6\xfa\xd5?\xc7\xfd&\x8d*\xbb\xa7&,\xe9\xa3\'\x91>C\x1b\x15\x87\xeb\xfe\x1c\x9d\\C\xfeI\'\xae\x8fKHq\x89\x83\xbb\x9dC\xd6Hy\x04\xa4\xb6\x88\xdb\xa1b\xae\xa7\x87\xcc\xc7\xa4\xdc\n:///\x00\x00\x00\x85^\x00\x0f\bu\x01\xab\x8c\x95?\x90\x8d_r\xe7\r\'-06,\xff\x84x\'\x8f\x18#][e\x19\xa3\\J\xe9\x8a\xb9\xe4r\x93\xb3\xd3J \x06\x03\xae', 0xfeffffff00000000)

5m5.790831739s ago: executing program 8 (id=4594):
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x8001, 0x400}, 0xa5, 0x4, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080)
r3 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', <r5=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x34, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r5, {}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000)

5m5.726657116s ago: executing program 8 (id=4595):
setreuid(0x0, 0xee01)
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

5m5.726204137s ago: executing program 8 (id=4596):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x0, &(0x7f0000000140), 0x3, 0x4cd, &(0x7f0000000c80)="$eJzs3M9vFGUfAPDvbHdpgZfXioiCKAU0Nia2UFA4eMHExIMmRjzIsWkrQRYwtAchREpi8Ezi3Xg03jTxqkfjyT8ADx5MDAkxXABPa2Z3pt3ur+7CtqXs55Ns+zwzz8zzPDPzzD77PDsbwMAaS/8kEf+LiFsR8VQtujLBWO3f/btXZx7cvToTi5XKqX+Sarp7aTyTb7c9i4wXIgpfJg07rJm/fOXcdLk8dymLTy6c/2xy/vKV18+enz4zd2buwtSJE8eOHjn+5tQbvVeqRX5pve7t/eLivj3vnr75/kwxXz6S/a+vR1vF3oox1mHdK73t6rG3oy6cNB+na+taGLo2kl3WpbT9Xy0fPL3RBQLWTaVSqQy3X71YaXS9aQmwaSWx0SUANkb+Rp9+/s1f69T1eCzcOVn7AJTW+372qq0pRiFLU2r4fNtPYxHx8eK/36Sv6DQO8ecaFQAAGDi/nMx7go39v0Lsrkv3/2wOZTQino6InRHxTETsiohnI6ppn4uI5xszSCIqHfLf1RBfzv/HbBahcPuRK9lB2v97K5vbWtn/y3t/MTqUxXZE5B3mucPZMRmP0vAnZ8tzR9rsf8sq+df3/9JXmn/eF8zKcbvYMEA3O70w/XC1bXbnesTeYmP9k2J64vJpnCQi9kTE3h72O1oXPvvad/uWIqWV6Vavf1WlxZRez/NxrVS+jXi1dv4XY8X5X84x6Tw/OTkS5bnDk+lVcLhlHr/9fuODdvmvWv+f/mrc5J3jP5961GovSc//trrrP/L52+X6jyYRydJ87XxEZai3PG788VV1v2OHmtc97PW/JfmoGs7b1+fTCwuXjkRsSd5rXj61vG0ez9On9R8/1Lr978y2SY/ECxGRXsQvRsRLEbE/K/uBiDgYES2qtuTXt1/+tN26Lq//NZPWf7bl/W/F+V+er+8ykG+cLhk6d+DWgzY3j+7O/7FqaDxb0vr+l6y4RXRb0kc7egAAALA5FKL63f/CxFK4UJiYqI0B7YpthfLF+YX9EXFhtvaMwGiUCvlIV208uJTk45+jdfGphvjRbNz466Gt1fjEzMXy7EZXHgbc9mqbT5raf+rvHsd5gU2oD/NowCa1WvvffXOdCgKsO+//MLjq2v9imySLvikDTybv/zC4WrX/a/F9x2cX3DNg86toyzDQtH8YXMX4cClcfey55dO2wJPI+z8MpF6f6+8tUBluvWokWvxiwMjaFGNri7w2JJD2rPq4w1JEdJd468NkkXcB2//CQ6G3HQ5H86qh6LRV0sPvOOSB9KismvjM7r5f/PlvovT7svlhuZ2WujzdfQpsyO0IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACg7/4LAAD///QJ1ng=")
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
chroot(&(0x7f0000000000)='./file0/../file0\x00')
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x60)
getdents64(r0, 0x0, 0x22)

5m5.630330753s ago: executing program 8 (id=4597):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000004000000b705000008000000850000006a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10)
r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TCSBRKP(r2, 0x5425, 0x0)
r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TCSETSW2(r3, 0x5408, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x2, 0x0, "23f555d9adb42d4408020e90d1beaa82dc1ecf"})

5m5.267151337s ago: executing program 8 (id=4598):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x5, 0xfd, 0x8, 0x200}})

5m5.195550275s ago: executing program 38 (id=4598):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r1 = dup(r0)
ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000000000)={0x2, {0x2, 0x5, 0xfd, 0x8, 0x200}})

3m15.001771962s ago: executing program 9 (id=5707):
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000740)='./file0\x00', 0x800, &(0x7f00000001c0)=ANY=[@ANYBLOB="696f636861727365743d757466380000000000008001696c3d302c6e6f6e756d7461696c3d302c756e695f786c6174653d302c636f6465706167653d3836392c755a66383d302c747a3d5554432c73686f72746e616d653d77696e6e742c696f636861727365743d63703835352c757466383d302c6e66733d7374616c655f72772c726f6469722c00"], 0x1, 0x298, &(0x7f0000001f80)="$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")
creat(&(0x7f0000000040)='./bus\x00', 0x0)

3m15.000119413s ago: executing program 9 (id=5708):
r0 = syz_io_uring_setup(0x237, &(0x7f0000000480)={0x0, 0x8901, 0x400, 0x0, 0x2cf}, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000600)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000100)=@l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1b}, 0x3}, 0x0, 0x0, 0x1})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0)
io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0)

3m14.693274104s ago: executing program 9 (id=5713):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x44, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x18, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}]}]}], {0x14}}, 0x8c}}, 0x0)

3m14.692771029s ago: executing program 9 (id=5714):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
syz_mount_image$bcachefs(&(0x7f0000000140), &(0x7f0000000440)='./file1\x00', 0x208410, &(0x7f0000000540)=ANY=[], 0xfe, 0x5a7d, &(0x7f0000022340)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
r2 = syz_clone(0x2000, &(0x7f0000000180)="c4a90d6f0f49434177bc39c888e17647ea46828b520b29f0b5cbaa0a3883f9665de9d0312bde4c3a2e37a3aad524cd2ffac5b0472a5a6c770ea49d01bc02edc68370aab95f737d8fd689662d63f5086b14457382eca1803fef4116a7dac907da34a417bd3ee5c4359016fa5966a47269104805d5ae79b938a97d61d391300dc44768", 0x82, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000240)="28dfbd09b69595dddcf777bdd184b3d091254fb95484b7af712354fdc10e4e7d3bf8a3f74b8aa4b806b806f191276de812798baaf40a3c836155ae7754573baa9165d3f0d99047ee289a8f1e26234269030fc43ba4687aa21d9852f9740fdeb281067fdc45909899e5a4789ee0a845d0a713f0bd172d3b406194d3814ef2cba870e406288367bdb4a2f78ca5697f13ad9b5ea8fd3ab3c3271b74475e1552702cbb601dddd22d")
ptrace$getregset(0x4204, r2, 0x3, &(0x7f0000000100)={&(0x7f00000000c0)=""/63, 0x3f})
sendfile(r0, r1, 0x0, 0x20fffe82)

3m13.730278124s ago: executing program 9 (id=5718):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000180)='./file1\x00', 0x28108c0, &(0x7f0000006980)=ANY=[@ANYBLOB="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"], 0xfe, 0x61f6, &(0x7f000000cdc0)="$eJzs3c1vHGcdB/DfvvolNLV6qEqEkJuWl1KaxEkJgQJtD3Dg0gPKFSVy3SoiBZQElFYWceULB078BSAkjghxRBz4A3rgyo0TJyLZSKCeGDTe54lnN7tdp7Z31p7PR3JmfvPMep/Jd189L08AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPH97/1grRURN36eFqxEfCY6Ee2IpbJejYil1ZW8fjcinou95ng2InoLEeXt9/55OuLViPjobMTO7uZ6ufjyAfvx3T/+/Xc/PPPW3/7Qu/jfP93rvDZpvfv3f/WfPz843DYDAABA0xRFUbTS1/xz6ft9u+5OAQAzkd//iyQvP/X1r//51l/mqT/qRtcRl/YWzkt/1Gr16a2rivEeVIuI2KrepvzMYHc8AJwwW/Fx3V2gRvJvtG5EnKm7E8Bca9XdAY7Fzu7meivl26q+H6wO2vOxIEP5b7Uend8xaTrN6DEms3p8bUcnnpnQn6UZ9WGe5Pzbo/nfGLT303rHnf+sTMq/Pzj1qXFy/p3R/Eccaf4LdebfHpt/U+X8u0+Uf+cEP//lDwAAAADA6Zf//r9S8/7fhcNvyoF80v7f1Rn1AQAAAAAAAACO2mHH/3vE+H8AAAAwt8rv6qXfnN1fNulabOXy662Ip0bWBxomnSyzXHc/AAAAAAAAAAAAAKBJuoNjeK+3InoR8dTyclEU5U/VaP2kDnv7k67p2w9NVveLPAAADHx0duRc/lbEYkRcT9f66y0vLxfF4tJysVwsLeTPs/2FxWKp8r02T8tlC/0DfCDu9ovyly1Wblc17fvytPbR31feV7/oHKBjR6SX/jcnNNcUNgAkg3ejHe9Ip0xRPD3pwwcM8fw/hVZipe7HFfOv7ocpAAAAcPyKoiha6XLe59I+/3bdnQIAZiK//4/uFzhU3Z7QHnE0v1+tVqvVavWnqquK8R5Ui4jYqt6m/MxgOH4AOGG24uO6u0CN5N9o3Yh4ru5OAHOtVXcHOBY7u5vrrZRvq/p+kMZ3z8eCDOW/1dq7Xb79uOk0o8eYzOrxtR2deGZCf56dUR/mSc6/PZr/jUF7P6133PnPyqT8+3unzDVPzr8zmv+I05N/e2z+TZXz7z5R/h35AwAAAADAHMt//1+x/zdvMgAAAAAAAACcODu7m+v5vNe8//9zY9Zz/ufplPNvPWn+S2le/idazr89kv+XR9brVOYfvrn//P/37ub67+/967N5etD8F/JMKz2yWukR0Ur31Oqm6WG27nHbvU6/vKdeq93ppmN+it47cStux0ZcGlq3nf4/9tvXhtrLnvaG2i8PtXcfa78y1N5L1x0olnL7hViPn8TteHuvvWxbmLL9i1PaiyntOf+O1/9Gyvl3Kz9l/supvTUyLT38sP3Y8746HXc/b9z6/C8vHf/mTDHpyseD7Ts/6+5EDF5xzvTjZ3c37ly4f/PevTtrkSZDSy9HmhyxnH9v72dh//X/hUF7ft2vPl8ffth/4vznxXZ0Hz22q8r8X6jMl9v70oz7Voecfz/95PzfTu3jn/8nOf/OxPxfrqE/AAAAAAAAAAAAAAAA8EmKotg7RfSNiLiazv+p69xMAGC28vt/keTlarVarVarT19dVYz3erWIiL9Wb1N+ZvjFuF8GAMyz/0XEP+ruBLWRf4Pl6/2V0xfr7gwwU3ff/+BHN2/f3rhzt+6eAAAAAAAAAACfVh7/c7Uy/vOLEbEyst7Q+K9vxuphx//s5plHA4we8UDfE2y3+512Zbjx52NvfO4Lk8b/Ph+Pj/+dx8TtVLdjgt6U9v6U9oUp7Ytjl+6nNfZEj4qc//OV8c7L/M+NDL/ehPFfR8e8b4Kc//nK47nM/0sj61XzL347d/lvHXTF7WgP5X/x3ns/vXj3/Q9eufXezXc33t348ZW1tUtXrl69du3axXdu3d64NPj3eHo9B3L+eexrx4E2S84/Zy7/Zsn5fyHV8m+WnP8XUy3/Zsn558978m+WnH/+7iP/Zsn5v5Rq+TdLzv8rqZZ/s+zsbi6U+b+cavk3S37+fzXV8m+WnP8rqZZ/s+T8L6Ra/s2S87+Y6gPk7/Lwp0jOP+/h8vxvlpz/Wqrl3yw5/8upln+z5PyvpFr+zZLzfzXV8m+WnP/XUi3/Zsn5X021/Jsl5//1VMu/WXL+11It/2bJ+X8j1fJvlpz/N1Mt/2bJ+b+Wavk3S87/W6mWf7Pk/L+davk3S87/O6mWf7Pk/F9PtfybZf/6/2bMmDGTZ+p+ZQIAAAAAAAAAAAAARs3icOK6txEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+zw4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRV24EAAAAAAAMj/tRGqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsHdvMXLd9R3Az+zF3nUIMRCCkxrYJCaEZMmu7cQX2jQmXBugFEgo9ILtetdmwTe8dgkUyaaBEgmjooqq6UNbQKiNVFVYFQ+0ojQPVS9PpX2gLxVVJaRGVUABFamtKFvNnP//vzOzszOz3vF69vw/Hyn57c6cmXPmzJnZ/e76uwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJrd/ob5z9SKoqj/1/jf9qJ4Qf3jyantjcted723EAAAAFiv/2v8//mb0gWH+rhR0zJ/94p//NrS0tJS8b7R3x3/wtJSumKqKMa3FkXjuujKv7+/1rxM8EQxURtp+nykx+pHe1w/1uP68R7Xb+lx/dYe10/0uH7FDlhhsvx5TOPOdjU+3F7u0uLmYrxx3a4Ot3qitnVkJP4sp6HWuM3S+PFioThZzBezLcuXy9Yay3/j9vq63lrEdY00rWtn/Qj5wSeOxW2ohX28q2Vdy/cZfe/1xdQPf/CJY398/rlbO82eu6Hl/srtvPuO+nZ+KlxSbmut2Jr2SdzOkabt3NnhORlt2c5a43b1j9u38/k+t3N0eTM3VPtzPlGMND7+VmM/jTX/WC/tp53hsv++syiKS8ub3b7MinUVI8W2lktGlp+fifKIrN9H/VB6cTG2puP09j6O0/qc29V6nLa/JuLzf3u43dgq29D8NH3vk1tWPO9rPU6j+qNe7bXSfgwO+rUyLMdgPC6+1XjQT3Y8BneFx/+Ju1Y/BjseOx2OwfS4m47BO3odgyNbRhvbnJ6EWuM2y8fg7pblRxtrqjXms3d1PwZnzp86O7P4sY+/duHU0RPzJ+ZP7929e3bvvn0HDhyYOb5wcn62/P9V7u3ht60YSa+BO8K+i6+BV7ct23yoLn1pcK/DiS6vw+1tyw76dTjW/uBqG/OCXHlMl6+NR+s7feLySLHKa6zx/Nyz/tdhetxNr8Oxptdhx68pHV6HY328DuvLnL2nv+9Zxpr+67QN1+prwfamY7D9+5H2Y3DQ348MyzE4EY6Lf71n9a8FO8P2Pjm91u9HRlccg+nhhvee+iXp+/2JA43R6bi8rX7FDVuKC4vz5+57/Oj58+d2F2FsiJc0HSvtx+u2psdUrDheR9Z8vB5aeMWTt3W4fHvYVxOvrf9vYtXnqr7M/fd1f64aX90678+WS/cUYQzYRu/PTl/N6/szZcku+7O+zKdm1v+9eMqlTe+/46u8/8bc/5NyfemunhgdHytfv6Np74y3vB+3PlVjjfeuWmPdz8/09348Hv7b6Pfjm7u8H+9oW3bQ78fj7Q8uvh/Xev20Y33an8+JcJycnO3+flxfZseetR6TY13fj+8Msxb2/2tCUki5qOnYWe24TesaGxsPj2ssrqH1ON3bsvx4yGb1dT295+qO07vvLO9rND26ZRt1nE61LTvo4zS9X612nNZ6/fTt6rQ/nxPhuLh5b/fjtL7MM/ev/71zMn7Y9N65pdcxOD66pb7N4+kgLN/vlybjMXhfcaw4U5ws5hrXbmkcT7XGuqYf6O8Y3BL+2+j3yh1djsG725Yd9DGYvo6tduzVxpbfSAao/fmcCMfFUw90Pwbry7xx/2C/d707XJKWafretf3na6v9zOu2seX7K67xz7zq2/k3+7v/bLa+zMkDa82Z3ffTveGSGzrsp/bX72qvqbliY/bTjrCdzx1YfT/Vt6e+zBcO9nk8HSqK4uJHHm78vDf8fuXPL3z7ay2/d+n0O52LH3n4+zce/9u1bD8Am99PyrGt/FrX9Jupfn7/DwAAAGwKMfePhJnI/wAAAFAZMffHfxWeyP8AAABQGTH3j4WZZJL/d7zxuYWfXCxSM38piNen3fBIuVzsuM6Gz6eWltUvf/gr8z/6y4v9rXukKIofP/IbHZff8UjcrtJU2M4rb2q9fOUNL/a1/iOPLS/X3F//Yrj/+Hj6PQw6VXBni6L4xk2fa6xn6v2XG/OZR4405rsvPflEfZnnD5afx9s/+5Jy+T8I5d9Dx4+23P7ZsB++G+bs2zrvj3i7r15+zc79711eX7xd7Y4XNh72Ux8o7zf+nZzPP1EuH/fzatv/V599+qv15R9/VeftvzjSefufDvf7lTD/5+Xl8s3PQf3zeLtPh+2P64u3u+/L3+y4/Vc+Uy5/9s3lckfCjOu/O3y+683PLTTvr8drR1seV/GWcrm4/tlv/3bj+nh/8f7bt3/i8OWW/dF+fDzzz+X9zLQtHy+P64n+om399ftpPj7j+p/+rSMt+7nX+q+8+9mX1++3ff33ti032nb79r/Y9Ief/lzH9cXtOfRnZ1sez6F3hddxWP9THwjHY7j+f698rmW90ZF3tb7/xOW/uP1iy+OJ3vrDcv1XHjrRmP8x9aPfv+EFN77w0ivr+64ovvWe8v56rf/EH51p2f4v3XJP4/mI18eOfvv6VxPXf+6j06fPLF5YmGvaq42/nfP2cnu2Tkxuq2/vTeG9tf3zw2fOf3D+3NTs1GxRTFX3T+hdtS+H+f1yXFrr7e95LDyft/3eN7bd9U+fjZf/y6Pl5ZffVn7denVY7vPh8u3l87dUW+f6n7r9lsbru/ZM+XlLj30Adu76zwN9LRgef/v3BfF4P/vSDzb2Q/26xteN+Lpe5/Z/Z668n6+H/boU/jLzHbcsr695+fi3ES6/p3y9r3v/hbe5+Lz+SXi+3/Hd8v7jdsXH+53wfcw3d7S+38Xj4+sXR9rvv/FXPC6F95PiUnl9XCru78vP39Jx8+LfISku3dr4/HfS/dy6poe5msWPLc6cXDh94fGZ8/OL52cWP/bxw6fOXDh9/nDjb3ke/lCv2y+/P21rvD/Nze+7v5idLIriTDG7AW9Y12b76x/1t/1nHzs2t3/2rrn540cvHD//2Nn5cyeOLS4em59bvOvo8ePzH+11+4W5B3fvObh3/57pEwtzDx44eHDvwemF02fqm1FuVA/7Zj88ffrc4cZNFh+8/+DuBx64f3b61Jm5+Qf3z85OX+h1+8bXpun6rX99+tz8yaPnF07NTy8ufHz+wd0H9+3b0/OvAZ46e3xxaubchdMzFxbnz82Uj2XqfOPi+te+Xrenmhb/rfx+tl2t/EN8xTvv3Zf+PmvdVz656l2Vi7T9AdHnwt+i+YcXnT3Qz+cx94+HmWSS/wEAACAHMfdvCTOR/wEAAKAyYu7fGmYi/wMAAEBlxNw/EWaSSf7X/9f/76//X16v/59X///sR8pe6Wbv/8f+vP5/Hq5z/3/d69f/1/+vXv+///78Zt9+/X/9f1Yatv5/zP2TRZFl/gcAAIAcxNy/LcxE/gcAAIDKiLn/hjAT+R8AAAAqI+b+F4SZZJL/9f/76v/v6VW4qn7/3/n/9f+Lzdn/j0+O/n821ty/f++jLZ/q/wf6//r/+v/6//r/rNv4qtdcr/5/zP03hplkkv8BAAAgBzH3vzDMRP4HAACAyoi5/6YwE/kfAAAAKiPm/u1hJpnkf/1/5//X/9f/r3T/f73n/2/aGP3/zcH5/7vT/+/hqvv/E/r/m7H/Pz7Y7R/u/n/Pzdf/55oYtvP/x9z/ojCTTPI/AAAA5CDm/heHmcj/AAAAUBkx978kzET+BwAAgMqIuf/mMJNM8r/+v/6//r/+v/5/5/X3Pv9/+ZH+/3DR/+9O/78H5//Pq/8/4O0f7v7/oM//P/6m9tvr/9PJsPX/Y+5/aZhJJvkfAAAAchBz/y1hJvI/AAAAVEbM/S8LM5H/AQAAoDJi7t8RZpJJ/tf/1//X/9f/1//vvP7e/f+S/v9w0f/vTv+/B/1//X/9//76/x2++dX/p5Nh6//H3H9rmEkm+R8AAAByEHP/bWEm8j8AAABURsz9PxVmIv8DAABAZcTcvzPMJJP8r/+v/6//n1f//94t+v/6/9Wm/9+d/n8P+v/6//r/fZ7/f6W19P+39rozKmPY+v8x9788zCST/A8AAAA5iLn/FWEm8j8AAABURsz9rwwzkf8BAACgMmLunwozyST/6/9Xq///p3/91CsL/X/9/x7rH0T/vxYuHaL+fzwMhr7//5D+/zWl/9+d/n8P+v/6//r/G9L/Jx/D1v+Puf/2MJNM8j8AAADkIOb+O8JM5H8AAACojJj77wwzkf8BAACgMmLu3xVmkkn+1/+vVv8/0v/X/++2/o06//9YeD7Tcen8/87/vwH0/ztoepHq//eg/6//n33/P373q//PYAxb/z/m/leFmWSS/wEAACAHMfffVbT9Elf+BwAAgMpo5P5ionh1mIn8DwAAAJURc//dYSaZ5H/9/6vv/483faz/37r9+v+tcu3/b/D5/xP9/7zp/3e31v7/Fv1//X/9/8z6/+s7//9k+Fj/n2jY+v8x978mzCST/A8AAAA5iLn/njAT+R8AAAAqI/77zfLfvcr/AAAAUEUx90+HmWSS//X/nf8/p/5/Tf9/QP3/+Ij1/wv9/6Gj/9+d8//3oP+v/6//v67+v/P/027Y+v8x9782zCST/A8AAAA5iLn/vjAT+R8AAAAqI+b+mTAT+R8AAAAqI+b+2TCTTPK//r/+f079f+f/d/5//f/q0//vTv+/B/1//f+q9f+LQv+f62rY+v8x9+8OM8kk/wMAAEAOYu7fE2Yi/wMAAEBlxNy/N8xE/gcAAIDKiLn//jCTTPK//r/+v/6//r/+f+f16/9vTvr/3en/96D/r/9ftf6/8/9znQ1b/z/m/gfCTDLJ/wAAAJCDmPv3hZnI/wAAAFAZMffvDzMJ+b/Tv+sGAAAANpeY+w+EmWTy+3/9/4r0/3/z71vWrf+v/99t/YPp/0/q/4ep/z9cKtr/b39ZXDX9/x70//X/9f/1/xmoYev/x9x/MMwkk/wPAAAAOYi5/3VhJvI/AAAAVEbM/T8dZiL/AwAAQGXE3P8zYSaZ5P/B9v8n9f+bZHX+/8nW7df/73x8VKv/7/z/+v/DqaL9/4GpVP9/RP9f/3+4tl//X/+fla59/z9+1F//P+b+B8NMMsn/AAAAkIOY+382zET+BwAAgMqIuf+hMBP5HwAAACoj5v5DYSaZ5H/n/9f/d/5//f9r0/9/qGg3jP3/+sGj/18t+v/dVar/7/z/+v9Dtv36//r/rDRs5/+Puf/1YSaZ5H8AAADIQcz9D4eZyP8AAABQGTH3vyHMRP4HAACAyoi5/41hJpnkf/1//X/9f/1/5//vvH79/81J/787/f8e9P/1//X/9f8ZqGHr/8fc/6Ywk0zyPwAAAOQg5v43h5nI/wAAAFAZMfe/JcxE/gcAAIDKiLn/rWEmmeR//X/9f/1//X/9/87r1//fnPT/u9P/70H/X/9f/1//n4Eatv5/zP0/F2aSSf4HAACAHMTc/0iYifwPAAAAlRFz/9vCTOR/AAAAqIyY+98eZpJJ/tf/38T9/zH9f/1//X/9/97rzY3+f3f6/z3o/+v/6//r/zNQw9b/j7n/HWEmmeR/AAAAyEHM/T8fZiL/AwAAQGXE3P/OMBP5HwAAACoj5v5fCDPJJP/r/2/i/n8lz/+/dLH5dhXr/9cX0/+/Xv3/+o30/7Og/9+d/n8PHfr/W/X/8+r/L4V3ef1//X8GYtj6/zH3vyvMJJP8DwAAADmIuf/dYSbyPwAAAFRGzP3vCTOR/wEAAKAyYu5/NMwkk/yv/59l/z895OHr/692/v/JxnWbvP/v/P/O/6//vwGq2/9f8111pP/fg/P/6/87/7/+PwM1bP3/mPsfCzPJJP8DAABADmLuf2+YifwPAAAAlRFz/y+Gmcj/AAAAUBkx978vzCST/K//n2X/f4jP/79a/3+znv9/rCgml9eTU/9/oun5TMel/r/+/waobv9/MPT/e9D/1/8f5v5/OJonV7m9/j/DaNj6/zH3vz/MJJP8DwAAADmIuf+XwkzkfwAAAKiMmPt/OcxE/gcAAIDKiLn/V8JMMsn/+v/6//r/zv/v/P+d16//vznp/3en/9+D/r/+/zD3/3vQ/2cYDVv/P+b+Xw0zWTX4ff+/+niYAAAAwBCJuf8DYSaZ/P4fAAAAchBz/+EwE/kfAAAAKiPm/iNhJpnkf/3/9v5/PKOq/r/+v/6//r/+/2Y0uP7/y24sCv3/yvT/J/rcAP1//X/9f/1/BmrY+v8x9x8NM8kk/wMAAEAOYu7/tTAT+R8AAAAqI+b+Y2Em8j8AAABURsz9c2EmmeT/69j/Hx/O/r/z/19t///H+v/6/4H+f2f6/xvD+f+7y7b/3y/9f/1//X/9fwZq2Pr/MffPh5lkkv8BAACgwtKPg2PuPx5mIv8DAABAZcTcfyLMRP4HAACAyoi5/4NhJpnkf+f/1/93/v/r0f8fa1le/7+k/6//Pwj6/93p//eg/6//r/+v/89ADVv/P+b+hTCTTPI/AAAA5CDm/g+Fmcj/AAAAUBkx9384zET+BwAAgMqIuf9kmEkm+V//X/8/9/5/rSguOf+//n+n9ev/b076/93p//eg/6//r/+v/89ADVv/P+b+U//P3n002XVWexw+9pUVbtWty0fwmBFDGJmPwJQZVYzJJgdZ5Awm52CyyTmDyTnnbHKOJhqqRLm11pK6z+m9JfXuPnu/7/NM1m2V+p7TVlvwp+tXO27pZP8DAABAD3L33zNusf8BAACgGbn77xW32P8AAADQjNz9945bOtn/+n/9f+/9/2orz//f/fv1/+fo//X/U1jr749t/n37ReH79v93uOO1d9P/6//1/4P0//p//T97za3/z91/n7ilk/0PAAAAPcjdf9+4xf4HAACAZuTuv1/cYv8DAABAM3L3Xxu3dLL/9f/6f/2//n9X/3+T/l//v2ye/z9M/z9C/6//1//r/5nU3Pr/3P33j1s62f8AAADQg9z9D4hb7H8AAABoRu7+B8Yt9j8AAAA0I3f/g+KWTva//l//r/9fSv9/3PP/93w9+n/9/yb6/2H6/xH6f/2//l//z6Tm1v/n7n9w3NLJ/gcAAIAe5O5/SNxi/wMAAEAzcvc/NG6x/wEAAKAZufsfFrd0sv/1//p//f9S+v8jev6//l//v3A3rM7/naD/X6f/HzHS/69W+v8hF93Pb/7ylvP+96H/1/+zbm79f+7+h8ctd16tjl/uFwkAAADMSu7+R8Qtnfz8HwAAAHqQu/903GL/AwAAQDNy918Xt3Sy//X/+n/9v/5f/7/59fX/y+T5/8MO3v/f/nb3uHu//X8zz/8/u+m/uWy/nz+obb//6fv/274z9P8s29z6/9z9Z+KWTvY/AAAA9CB3/yPjFvsfAAAAmpG7/1Fxi/0PAAAAzcjd/+i4pZP9r/9vrf//n12fd0H/v1O76P/1//p//X/r9P/DPP9/xM5fc6fqw2b7/31su59f+vv3/H/9P+vm1v/n7n9M3NLJ/gcAAIAe5O5/bNxi/wMAAEAzcvc/Lm6x/wEAAKAZufsfH7d0sv/1/631/7s/z/P/9f+bXl//r/9vmf5/mP5/RCvP/7/M75pt9/MHte33r//X/7Nubv1/7v4nxC2d7H8AAADoQe7+J8Yt9j8AAAA0I3f/k+IW+x8AAACakbv/yXFLJ/tf/6//X0b/n6+g/9f/H37/n/T/y/O/+v9R+v8RrfT/l2nb/fzS37/+X//Purn1/7n7nxK3dLL/AQAAoAe5+58at9j/AAAA0Izc/U+LW+x/AAAAaEbu/qfHLZ3sf/2//n8Z/b/n/+v/Pf9f/39x9P/D9P8j9P/6f/2//p9Jza3/z91/fdzSyf4HAACAHuTuf0bcYv8DAABAM3L3PzNusf8BAACgGbn7nxW3dLL/9f/6f/2//l//v/n19f/LpP8fpv8fof/X/+v/9f9Makb9/wWfdXL17Lilk/0PAAAAPcjd/5y4xf4HAACAZuTuf27cYv8DAABAM3L3Py9u6WT/6/9n0//v5Hxt9f+nVquV/n/Vaf9/6oI/z/q+1P/r/4+A/n+Y/n+E/l//r//X/zOpGfX/Ox/n7n9+3NLJ/gcAAIAe5O5/Qdxi/wMAAEAzcve/MG6x/wEAAKAZuftfFLd0sv/1/7Pp/3e01f97/v/e74+e+n/P/1+n/z8a+v9h+v8R+n/9v/5f/8+k5tb/5+5/cdx0/KrL/hIBAACAmcnd/5K4pZOf/wMAAEAPcve/NG6x/wEAAGChrl/7ldz9L4tbOtn/+v9p+//jF/ya/l//v/f7Q/+v/9f/Hz79/zD9/wj9v/5f/6//Z1Jz6/9z9788bulk/wMAAEAPcvffELfY/wAAANCM3P2viFvsfwAAAGhG7v5Xxi2d7H/9v+f/6//1//r/za+v/18m/f8w/f8I/b/+f7v9/4nz/6f+nzZcQv9/9uzZ04fe/+fuf1Xc0sn+BwAAgCbt+Vlp7v5Xxy32PwAAADQjd/9r4hb7HwAAAJqRu/+1cUsn+1//32n/n9/qy+r/r1ut9P/6f/2//n+Y/n+Y/n+E/l//7/n/+n8mNbfn/+fuf13c0sn+BwAAgB7k7r8xbrH/AQAAoBm5+18ft9j/AAAA0Izc/W+IWzrZ//r/Tvt/z//X/+v/j7r/v3Wl/z8Si+j/T+3/+nPv/8/o//X/A7rr/+9yp10f6v/1/6ybW/+fu/+NcUsn+x8AAAB6kLv/TXGL/Q8AAADNyN3/5rjF/gcAAIBm5O5/S9x0rJP9r//X/+v/9f/6/82vf8TP/z++Wq30/xNYRP8/YO79/zTP/9/7b/l5+n/9/5Lfv/5f/8+6ufX/ufvfGrd0sv8BAACgB7n73xa32P8AAADQjNz9b49b7H8AAABoRu7+d8Qtnex//b/+X/+v/59V/3/FIfT/ZxbR/3v+/0T0/8Pm0f/vT/+v/1/y+9f/6/+5eNvq/3P3vzNu6WT/AwAAQA9y978rbrH/AQAAoBm5+98dt9j/AAAA0Izc/e+JWzrZ//p//f+l9P/5Pnvr/0/F72u1/z8xp/5/5++Zk7v+/3Xy/H/9/0T0/8P0/yP0//p//f/1+n+mNLfn/+fuf2/c0sn+BwAAgB7k7n9f3Pqfbu1/AAAAaEbu/vfHLfY/AAAANCN3/wfilk72v/5f/+/5/57/P6vn/58+hOf/6/+7ov8fpv8fof/X/+v/Pf+fSc2t/8/d/8G4pZP9DwAAAD3I3f+huMX+BwAAgGbk7v9w3GL/AwAAQDNy998Ut3Sy//X/+n/9v/5f/3/uz1D/3wb9/7Cj6f9P6f/1/9XPXxH/Fuj/9f9jn0+b5tb/5+7/SNzSyf4HAACAHuTu/2jcYv8DAABAM3L3fyxusf8BAABgkY5t+LXc/R+PWzrZ//p//b/+f8L+/8qV/n+h/f+m19f/L9NW+v/8ptD/e/5/6Kf/v3rXR9t+/v+xS3z/e//zaxv9/wXrQ/9Pk+bW/+fu/0Tc0sn+BwAAgB7k7v9k3GL/AwAAQDNy938qbrH/AQAAoBm5+z8dt/Sw//9P/7/S/x+k/z+j//f8f/2//n9uPP9/mP5/hP5/q8/PX/r79/x//T/r5tb/5+7/TNzSw/4HAACATuTu/2zcYv8DAABAM3L3fy5usf8BAACgGTu7P+OyDve//l//7/n/+n/9/+bX1/8vk/5/mP5/hP5f/6//1/8zqbn1/5/f+ayTqy/ELZ3sfwAAAOhB7v4vxi32PwAAADQjd/+X4hb7HwAAAJqRu//LcUsn+1//r/9fRv9/9uzZ0/p//f/ur+d8/3+z/p+i/x+m/x+h/9f/6//1/0xqbv1/7v6vxC2d7H8AAADoQe7+r8Yt9j8AAAA0I3f/1+IW+x8AAACakbv/63FLJ/tf/z+D/v+k/t/z//X/K8//1/9PRP8/TP8/osX+/+TFf/nb7ucPatvvX/+v/2fd3Pr/3P3fiFs62f8AAADQg9z934xb7H8AAABoRu7+b8Ut9j8AAAA0I3f/t+OWTva//v/o+v/b/tn18vz/U6vN71//r//X/+v/D5v+f5j+f0SL/f8l2HY/v/T3r//X/7Nubv1/7v7vxC27h99Vl/ZVAgAAAHOSu/+7cUsnP/8HAACAHuTu/17cYv8DAABAM3L3fz9u6WT/6/9n8Pz/Bvt/z//f/P2h/591/3+l/r8N+v9h+v8R+n/9v/5/ov4/v5v1/72bW/+fu/8HcUsn+x8AAAB6kLv/h3GL/Q8AAADNyN3/o7jF/gcAAIBm5O6/OW65YP9vartbof/X/+v/9f/6/82vr/9fJv3/sIvt/0+sDtb/J/2//l//32v/7/n/nDO3/j93/4/jFj//BwAAgMW5ap9fz93/k7jF/gcAAIBm5O7/adxi/wMAAEAzcvf/LG655cptvaUjpf/X/+v/9f/6/82vr/9fJv3/MM//H6H/n6Kfv0b/30b/v1rp/zm4ufX/uft/Hrf4+T8AAAA0I3f/L+IW+x8AAACakbv/l3GL/Q8AAADNyN3/q7ilk/2v/9f/H7D/30kz9f/n6P/P0f9vpv8/Gvr/Yfr/Efp/z//X/3v+P5OaW/+fu//XcUsn+x8AAAB6kLv/N3GL/Q8AAADNyN3/27jF/gcAAIBm5O7/XdzSyf6ftP+/MSrsi+n/4x+1/n/x/b/n/+v/9f/6/1nR/w/T/4/Q/+v/9f/6fyY1t/4/d//v45ZO9j8AAAD0IHf/H+IW+x8AAACakbv/j3GL/Q8AAADNyN3/p7ilk/3v+f/6f/2//l//v/n19f/LpP8fpv/frP6g9P/6f/2//p9Jza3/z93/57ilk/0PAAAAPcjd/5e4xf4HAACAZuTuvyVusf8BAACgGbn7/xq3dLL/9f/6f/2//l//v/n19f/LNKv+/5j+/8LPvev/j7+s5/9vvf/Pt6D/1//r/5nE3Pr/3P1/i1s62f8AAADQg9z9f49b7H8AAABoRu7+f8Qt9j8AAAA0I3f/P+OWTvb/SP9/on6j/n+Q/n/3+9f/b/7+0P/r//X/h29W/b/n/y/m+f9F/+/5//p//T+Tmlv/n7v/X3FLJ/sfAAAAepC7/9a4xf4HAACAZuTu/3fcYv8DAABAM3L3/ydu6WT/e/7/kvr/a/T/+n/9v/5f/z9C/z9M/z9C/6//v4T3f/Wej/X/+n/Wza3/z93/3wAAAP//tmNCRw==")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x40)
write$binfmt_elf64(r0, 0x0, 0x78)

3m10.869952169s ago: executing program 9 (id=5731):
prctl$PR_SET_NAME(0xf, &(0x7f00000003c0)='/dev/net/tun\x00')
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000580), 0x20000, 0x0)

3m10.620860104s ago: executing program 39 (id=5731):
prctl$PR_SET_NAME(0xf, &(0x7f00000003c0)='/dev/net/tun\x00')
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000580), 0x20000, 0x0)

2m37.957950407s ago: executing program 7 (id=6103):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x1000000, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
chdir(&(0x7f0000000200)='./file1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})

2m37.904089735s ago: executing program 7 (id=6104):
r0 = socket$packet(0x11, 0x3, 0x300)
sendmmsg(r0, &(0x7f0000000e00)=[{{&(0x7f0000000240)=@hci={0x1f, 0x800, 0x2}, 0x18, 0x0, 0x0, &(0x7f0000000000)=[{0x10, 0x112, 0x5c}], 0xb}}], 0x1, 0x844)

2m37.751050344s ago: executing program 7 (id=6106):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x2}, @func_proto]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34}, 0x20)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x90)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r1, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000001200)=[{}], 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)

2m37.131270484s ago: executing program 7 (id=6108):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0)
mount$bind(&(0x7f00000000c0)='./file0/file0/file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0)
umount2(&(0x7f0000000280)='./file0/file0/file0\x00', 0xa)

2m36.997640138s ago: executing program 7 (id=6110):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x6, 0x4, 0x0, 0x1}, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x20000, 0x4, 0x3, 0x149, r0}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2, r1}, 0x38)

2m36.599213748s ago: executing program 7 (id=6113):
openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0)
semget$private(0x0, 0x0, 0x108)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, 0x0)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0)
syz_mount_image$exfat(&(0x7f0000000080), &(0x7f0000000240)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xa1008a, &(0x7f00000003c0)=ANY=[], 0x21, 0x1517, &(0x7f0000001240)="$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")
r1 = open(0x0, 0x0, 0x0)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000001580)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0)
write$char_usb(r2, &(0x7f00000008c0)='-0', 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x28541, 0x0)
getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$HIDIOCGFIELDINFO(0xffffffffffffffff, 0xc038480a, &(0x7f0000000040)={0x3, 0x200, 0xb, 0xf6d5, 0x9d1, 0x6, 0x7, 0x10, 0x80000001, 0x80000000, 0xffffff5f, 0x6, 0x8, 0xfffffffc})
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r3, 0x0, 0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x9)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
r4 = userfaultfd(0x801)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3})
syz_io_uring_setup(0x5b0f, &(0x7f0000000000)={0x0, 0xfffffffc, 0x8000, 0x0, 0x8a}, 0x0, &(0x7f0000ff4000))
close_range(r4, r4, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, 0x0)

2m36.336188248s ago: executing program 40 (id=6113):
openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0)
semget$private(0x0, 0x0, 0x108)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0xfffffdca, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, 0x0)
setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0)
syz_mount_image$exfat(&(0x7f0000000080), &(0x7f0000000240)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0xa1008a, &(0x7f00000003c0)=ANY=[], 0x21, 0x1517, &(0x7f0000001240)="$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")
r1 = open(0x0, 0x0, 0x0)
r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000001580)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0)
write$char_usb(r2, &(0x7f00000008c0)='-0', 0x2)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x28541, 0x0)
getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$HIDIOCGFIELDINFO(0xffffffffffffffff, 0xc038480a, &(0x7f0000000040)={0x3, 0x200, 0xb, 0xf6d5, 0x9d1, 0x6, 0x7, 0x10, 0x80000001, 0x80000000, 0xffffff5f, 0x6, 0x8, 0xfffffffc})
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r3, 0x0, 0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x9)
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
r4 = userfaultfd(0x801)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3})
syz_io_uring_setup(0x5b0f, &(0x7f0000000000)={0x0, 0xfffffffc, 0x8000, 0x0, 0x8a}, 0x0, &(0x7f0000ff4000))
close_range(r4, r4, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, 0x0)

2m27.052670818s ago: executing program 0 (id=6203):
prctl$PR_SET_DUMPABLE(0x4, 0x3)

2m27.052394521s ago: executing program 0 (id=6204):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x12, 0x4, 0x4, 0x15}, 0x50)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="05"], 0x10)
close(r0)
socket$inet_udp(0x2, 0x2, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff})
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r1}, &(0x7f0000000500), &(0x7f0000000540)=r0}, 0x20)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r1}, &(0x7f0000000000), &(0x7f0000000080)=r2}, 0x20)

2m26.976858026s ago: executing program 0 (id=6205):
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0)
readv(r0, &(0x7f0000000640)=[{&(0x7f0000000340)=""/184, 0xb8}], 0x1)

2m26.976410421s ago: executing program 0 (id=6206):
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x22000b0, 0x0, 0x0, 0x0, 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0)
pivot_root(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00')

2m26.900528966s ago: executing program 0 (id=6207):
r0 = socket(0x40000000015, 0x5, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0xe20, 0x95fa, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x1}, 0x1c)

2m26.5820451s ago: executing program 0 (id=6208):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r1=>0x0})
r2 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="400802000000000010011a80100006800400058008000000000000000800038030000180050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2325000400e48f01e49713f0c2"], 0x270}, 0x1, 0x0, 0x0, 0x804}, 0x0)

2m26.42809283s ago: executing program 41 (id=6208):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r1=>0x0})
r2 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="400802000000000010011a80100006800400058008000000000000000800038030000180050006000000000014000500714abbd2547de97cbbf6efb226f19bf90d0002003a288e5e5b5b5a40000000006000078014000400293a02149f3b75a67093c28fd6f55a2325000400e48f01e49713f0c2"], 0x270}, 0x1, 0x0, 0x0, 0x804}, 0x0)

1m49.364391087s ago: executing program 3 (id=6600):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)={0x18, 0x40, 0x107, 0x0, 0x25dfdbfd, {0x1, 0x7c}, [@typed={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x10}, 0x8004)

1m49.289190704s ago: executing program 3 (id=6601):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000140)='./file0\x00', 0x2000004c, &(0x7f0000002c00)=ANY=[], 0xfe, 0x152b, &(0x7f00000016c0)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0)
lseek(r0, 0xfffffffffffffffc, 0x2)
getdents(r0, 0x0, 0x54)

1m49.235336416s ago: executing program 3 (id=6602):
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101)
syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000000)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05"], 0x0)

1m48.02202448s ago: executing program 3 (id=6613):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000003c0)='./file1\x00', 0x1c, &(0x7f0000000080)={[{@nombcache}, {@dioread_lock}, {@nodiscard}, {@nomblk_io_submit}, {@noblock_validity}, {@jqfmt_vfsv1}]}, 0x3, 0x44f, &(0x7f00000010c0)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1002, 0x0, 0x9, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@verity_on}]})
openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file2\x00', 0x0, 0x0)

1m47.918978696s ago: executing program 3 (id=6614):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x2, 0xe, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0x6, @mcast1, 0x755}}, @sadb_address={0x3, 0x6, 0x6c, 0x0, 0x0, @in={0x2, 0x4e21, @multicast1}}]}, 0x50}}, 0x0)

1m47.503379443s ago: executing program 3 (id=6619):
r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000001c0)=0x1)
ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000040)={0x0, 0x2, 0x9b})
ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000480)=0x7)

1m47.297009811s ago: executing program 42 (id=6619):
r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000001c0)=0x1)
ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000040)={0x0, 0x2, 0x9b})
ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000480)=0x7)

47.595834748s ago: executing program 5 (id=7357):
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b70500000000000c7910a800000000007d0a0000000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a)

47.521881743s ago: executing program 5 (id=7358):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001100010026bd7000fbdbdf25e0000001000000001b00000000000000000004d50a00ff000c0015"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)

47.459786971s ago: executing program 5 (id=7360):
syz_mount_image$bcachefs(&(0x7f0000000040), &(0x7f0000005c80)='./file0\x00', 0x490, &(0x7f0000000080)=ANY=[@ANYRES16, @ANYRES64, @ANYRESHEX=0x0], 0x9, 0x5a38, &(0x7f00000001c0)="$eJzs3X+QHFd9IPDXM7Pa0a5WWskmFjZerYWVOCaglX8VP1Jhk0uAsolLFCmCfAJ7ba0cgSSr9CO2hRPknM2hsqEgRSoxyR8OZbgDFMpVcMGKC8fGJ/nAoPKFc10Z18Gd4Q+uHJ9V2Na5KI692p1+szM909uzs7PS2v58StqefvP626+73/T0903vTgAAAOA14fid+05dfe4ffPcvJl/6+Hv+adftYbA8U16NFYbT6S1nqoWcTv2VtTPTbL/4jY995aejN/zed+4f+OLLx7ZdsP2Hv3/WDQ9+5Mqj9/ztIy8OfeNXzxTFjf3p4tn55LkkhOq3Tv7VJ449fs50WbJy+mfpUAirl4VHVieZEGO/CCFsm51vev7rL126fXp6+139TQutygTR31/bqmnHOXjq5jeFH/3ulju+v+5r/9B35NlDs1WSakN/CmHldY3L94UQlqf/p8XetjYunE43hxAGGpZ7a0G73thh+zfmzJ83/WNHX1iWzg8WxInPr8/MlzL1svNRX2Y6ULC+hcprR7f1iqzIzGdPRguV185YvjqdfjOdXjzP+OV0G8pJKCWhUm/+ziTU+0hoOG5JSGaOZbU+X6of25Buf2Y+ycyXMvPlvsx2zaw37WjlJGkuj/Uy5fF0XEnLL2g8V7fx/obHjfVeH8vSF+rL2TqZoIMtD+rbNSO26+QcbTkdSg3noHbl9QOfHozBtGwwWdOyzFQb8bljW+7eUN767ePDOe1I7k/S+ElX8Q9+b/WKD3/18IG1efGvK6XxS13F//FVJ56/5vAXPp8b/zMxfrmr+Jc8NPDcVY/euT53/5yM+6fSVfyJZx771Lqzrz+S2/57Y/xqV/HHj57oHzr10MO57R+L+2d5V/Gffse7fvLlJx94Njd+iPEHuoq/9eieT/ePnLooN/7Dcf8Mdtd/XjhyxVMjIz8bzYv/RIw/1FX8Lx265+33rbrrytzjuznun+Gu4r/3wgfvWHHqgfPzzp3Jvb165wR4bTorvcb6ZDrfbZ65UA35wt+MVmrXfCvS/0O9XFHm4nN6PSt7GR8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQgive9N/eff/+sDwc5V0vj998HSpNo3ly0JIlocQ9u2f2Lt/x+4bRz9y04G9uyd2jk7sH53cvX/vraOX/dbo3sk9OydunX527M2X1pZbE5LaNDm/Zd39U1NTpeHmsri+f3PhkR9teOv//tcQxl73g5FKbvs33rPrvrPb/MxIxqfeuevA1T+4/O/T7RpO2zXcpl1TU1NTIadd/+eDv7zvL0/+9KIQxn5trnY99vTv/HPalKGZnzMFYTyzRKk/1BrUnwy0bUe91Wl74v6qbN+xc3Js7v07vfzynO34tx979hfbb/nsL2v7t5q7HR3u3+XjUztLf73lvf/vr2+rFRS160wd96L9Hbcitq+cTqvp/l6ZbtfKnO2q5GzXnd9/+MlvnXv4xUNhrPLCutZ1F21XX9oB+pLXd7TeuIaBZHVTeTWtH494XG7j/l17Nu679eCbd+yauHHyxsndb9t02aYrxi6/4vKNM1u+scfbH9f/6x1u/+npT6v+9NA348/O+lNzu5bNe39Mt6t4fzS2KO/1N/D+T3zubfc8enWtoKifx9r180k6HZg+zptCQ39r3Vfttqvo+IQQRtvth+dfvDKc89933FF0Hmo8Mo0/M5LxqcfX//zv3/p3a3+7VnBazvONDaqd58N8z/P1Vs+2Z2Z/VdPjMbVE929/KKfbNdi2XZsef7Tv7uP/+mf19i1bFm6Z2L9/76bazxVpS1ck57VtV7Y0bte6mZ/lkO6WUO+mbfrrtL5Qa1/2/BmrZ/fqYPrcYLKm7XZlxeeObbl7Q3nrt4/n7enk/toal4eh2jR5Q07NnZkFy/UGt1v/Un39FfWPkXf/3Tc+8I1/vKylf1xS+1m0XUnOdn3tyS997ouf/ff/2LvtevfvnBj++f/4kw21giV/XinXGlJvddqepPG8ckkIRa+/daH9duS+/krtt6fo9Zddz2z99vFGM/ODodzV6/WShwaeu+rRO9fnvl5PzvV6bdzY25qWKxe8XpdK/8m+vpJKczsW7/XV1FGS8anvfPKsQ498fPO5tYKi98t67Xb9+tIO8o+c7frna54auWn03/233p03vvJbX7/2hxPjf14r6P64x7Z0dNzvHApzH/dqun+rOfu33uqYdzbu37fccNPObbXyov185q5/02lB/hNPJftuPfjRiZ07J/fu62y7On0/jevJ7uVu30/j2W1NwXaVWrZr8R50sr86fb3F9m/ren81v94GQ9LV+8LB761e8eGvHj4w3LJUuqLrSmn8Ulfxf3zVieevOfyFz+fG/0yMX+kq/sQzj31q3dnXH8mNf2+Sxq92FX/86In+oVMPPZwbfyy2f3lX8Z9+x7t+8uUnH3g2N36I8Qe72/8vHLniqZGRn+XGfyJJ1zN9jRTC11+6dHttPgl96esttqOvqV0hO59k5kuZ+XLjfCmOIqQrKCdJc3msl5Zf0NCWdv44pzxehVXX1qYvx/mQfTB3+VJTajj3tysvuk4FAHi1i5//x2vQ+Pn/ZHqhlD/SALMWmoetzYkb87DZ8Zzmz1jXpvHj8nEccOQtYWx6evto7UJ/vp8jxNdDdpwzrueiNzbHKBznnJpZf8s4Z9H4+/rMfGxXbby80pCHplrzmkroYPy9dT1zj79nNr/486zRT7Y0a7Rh3Cp7/PrSEbN29ztk2luZjpDXP7LjYvF+jpGVYfPM+jrsH+XMQEE8Dtn7aOJ6zs2cOLu9jyavfwy37oemdsX+EevN0T9mmlz8eWTr8Qtz7N/Z49c+Wvb4zeN4V6frL/bnsz0YN2x7Sjt944aL+3mYccmc+OkLbKmPG8byuB2VDscTP5BT3qvxxHi6iO06OUdbTgfjicCrVcz/43vEdP4/fQH+fzP1ivKU7FVjjJd7n1C5fXuK8o7W+/QGunof33p0z6f7R05dlHud83Cn9+ntaZobKLjvp2g/bsjMF+7HnAGaonwvu56i/Z69L2MwDHW137906J6337fqritz9/vm2htp8X7/XNPcUMF+fwXkC+3jyxfObL5Qfz0s7fsYisbPFiUfWdU03z4fSW98Wqx85I9yyuebjwy0PKhv14ylm4/MvpE25SN9p7ddAMArR8z/65+fpfn//4wXFul1RFHeenFmPsbLzVtzrk/y8tY/TKe3ZOoPpr9RMd/r5vde+OAdK049cH5u3nJvp3nof2yaGy7MQxeWN+fmEZt7c794bh5Rz7MWlifmtr+eJy4sT8/5mLYhT19YHp27f+p5dPM4wOdOzGYac8WP4wC58evjAD3Mc381W+n03a9fMF6XWVmc7XS87ozk0Subt3NRPtdLf312sfLo9+eUzzePHmx5UN+uGUs3j24ul0cDAK9WMf+Pl3Ez+X9/CI9m6i30c/bcvKBH1+3ZvwdSj//EouSVs/F79Plvcd632HnrYuf1iz0usdj3i04ucl682ONCwzN/wHOxxsnO2P2uSyUvTlcqLwYAYCmL+f/ydD5+/t+a/y8sP2nJ3/pql5Cz+UmX+Xk5hHCG8vPGevLznPi9zc+XtcRfKp9b58RfOuNfi3ufzGs+/4/z6eyU/B8AgCUo5v/x1x7j3//7z+l89u/W+xw9J748fUn83aVXfp7e43G2GL/xPgDjAKf3/vjls/WNAwAAcCb0zWRKrb9n/6F0mv09+7zfy78mp36nKunl8fX7905OXntgz7aJ/ZPX7r5p2+S+a2/eu2P//sndtXoLzRtz85Y0b+wLlXR/tK+XzdtWpX8PYVXO30PI1o9hz5t50Pr3ELKrXV7wdwRmj19n7c07fqU56rfrH3nHOy/+H+fUj+rH/4Y/qYbt+67dsXvH/h0TO3ccnGyuN521DszjezOT9P+8vi8186NFaf7f3xkPz8LaUWppR1+6P/K+nz3JtGN12pLVed9/kNPu7/7Xv/zTC6d++eUQxl5XfsOC9l8yPvWfPjj5h/uP/2DPdPtLc7a/XjNtV9H3lWbrx+2p7Lxp3/43bb/pwO7sN0p2J45nlOrzizSekb78yx2OT2zNKZ/v7++XWx4sTR2PTwAA0CR+/h+vZ+Pnh59NL6Bi+Wye/p6CPH1hnx/n5uljneXp2e8lK8rTs/Xj9naap1cXmKdn11+Up7er3y5Pz8u78+L/UU79+ep8PKeL+zxi+vnVwwdy+8l1nfWT7PcZFPWTbP359pOkqJ/0h3m1t6iftKvfrp/kHfe8+O/LqZ+nqD9U6v1hYffl5PaHz3TWH34zM1/UH7L159sfSgs8b2TXX9Qf2tVv1x/yjm9e/Ktz6nequX9Md4yZfjF57c037f1oQ73F/v6L0HpLRiftWza77OJ+/0e3Ot+/i3vf18LbH8L4TEle++PnAy2/ItaT+8oW3v6i/T+P+8pWhpb7ynLb/8TCRsI6b//ifr9LRl711uVP13ht2u2K7j8rGsfdklM+33HcZS0PlibjuHDmxPw/ftwT8/+70mmvPwZ65X9P2iv0e8xO2/33C7s/vug65jX3fp79yN37OQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCrQn9l7cz0+J37Tl197h989y8mX/r4e/5p1+2/8bGv/HT0ht/7zv0DX3z52LYLtv/w98+64cGPXHn0nr995MWhb/zqmcLAwzM/Kxens9UQkueSEKrfOvlXnzj2+DnTZUkIoZwMHwphdbLmkdVJJsLYL0II2+rtbH7y6y9dun16evtd/U3lqzJBstsVBsuxPY3tDOGWwi3iFaia9rODp25+U/jR72654/vrvvYPfUeePTRbJak29KcQVl7XuHxfCGF5+n9a7G1r48LpdHMIYaBhubcWtOuNHbZ/Y878eel0WTodLIgTn1+fmS9l6mXno77MdKBgfXHHHCqqlyOvHd3WK7IiM589GS1UXjtj+ep0+s10evE845fj/ySUklCpN39nMttHQsNxS0Iycyyr9flS/diGdPsz80lmvpSZL/dltmtmvWlHKydJc3mslymPp+NKWn5B47m6jffnlL8+nVbTF+rLcT5kH9QMtjyob9eM2K6Tc7Ql9R/aF1eKl+xAqeEc1K68fuDTgzGYlg0ma1qWmWojPndsy90bylu/fXw4px3J/UkaP+kq/sHvrV7x4a8ePrA2L/51pTR+qav4P77qxPPXHP7C53PjfybGL3cV/5KHBp676tE71+fun5Nx/1S6ij/xzGOfWnf29Udy239vjF/tKv740RP9Q6ceeji3/WNx/yzvKv7T73jXT7785APP5sYPMf5AV/G3Ht3z6f6RUxflxn847p/B7vrPC0eueGpk5GejefGfiPGHuor/pUP3vP2+VXddmXt8N8f9M9xV/Pde+OAdK049cH7euTO5t1fvnACvTWel11ifTOe7zTMXqiFf+JvRSu2ab0X6f6iXK8qYXs/KRYwPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCr07/cdtmHPvjO922pJCEkOXWm2ojPlZeNj492sd6JZx771Lqzrz/SWLa2izgAAABAsZiHl+ol1bA23JwsD+e1rR/HCM6Lc0lzeXYMIcbJjhF0G6fUJk6pizjlHrWn0qM4fT2Ks6xHcfp7FKdaEKcaOouzfI44leke0GF7BuZsT+dxBnsUZ0WP4gxlQnQbZ2WP2rOqR3GGQ/OLvtt+uHrO9nQeZ02P4pzVozhn9yjO63oU59d6FOecHsXJjinPtx8OpTXPzYsz86BcGKeSlOtPtBtPPyddz/kLXM9gwXqGit6PO1zP8g7X88bMcqV5rqfa4Xp+fYHrSTpcz28ucD2lgvXEfntLtn1xPXGuw/5/a4/iHOxRnI/1KM5tPYrzZz2K8+c9ivPxBcYB6FTM/2fzveHQX/ntMJCecbKjADHfXTfzs/X9Lu+EFOO9IVO+rCheNlHPxFs33/ZlBxAy8dZnyvua4lVq+cjc8aqN8TZknpxre98x3r5tjfEuzpT3zxGvaQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4DT4l9su+9AH3/m+LSEJ0//ammojPldeNj4+2sV6j225e0N567ePN5b1V7oIBAAAABSKeXhfvaQa+iubQn+yrKleNR0HqKbz5eHadGRl2Dw9TUZLM/MDyeo5l6uky23cv2vPxn23Hnzzjl0TN07eOLn7bZsu23TF2OVXXL5x+46dk2O1nyH0F8QLIcwMP+y79eBHJ3bunNy7r1aYbf/adLk4xJCky428JYxNT29P27+mYH2llvUt3oPiowcAAAAAAAAAAAAAAAAAAAAAAAAAAPx/du0uRK6zfAD4e2ZmZ6bb5t/5069paLZDmpaoVZO4lVRL94BgofkgS0Fmq2sJJsHipgltUmId24BtTVCElkCI5MJILLYWb2xri/SLQKRGA24M0hbNhV4orVbSkgtJGdnZOfO1M53tUPPl73dxzpnnfd73Oe9ZWHjODAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcGZNV0Yny2PjE8NRCFGPnGoXyVg6G8elAep+5YWtP8iNnFraGstlBlgIAAAA6Cvpw4cakXzIZdIhHa6ufVocWgZCs+8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+90xXRifLY+MTF0chRD1yql0kY+lsHJcGqHvi3ac/+/rIyN9aY8UB1gEAAAD6S/rwVCOSD8VwXRiKrp7p/BvR5N3Awo75s3lNyTqL5pnX+e6gV95188y7YZ55H+uTt7Z+3hEAAADg/Jf0/5lGpBBymQVz+uGk/+/X1yd513bkpevnUmvSB8rOJwkAAACYh6T/zzUixZDLFBv9+nz7/cUdecn8ft/bJ/Ov7zG/3/f5a+pn39MDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwPljujI6WR4bn0hHIUQ9cqpdJGPpbByXBqi74qXhf6w69Mji1lguM8BCAAAAQF9JH95svfMhlxkOQ+HiWt8/ctv+Z770zHOjIYTZNj+bDTvWb9t274qZY1iR5C0/cmjo+4ff/vacvOWzx7O2QQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4CMzXRmdLI+NT1wUhRD1yKl2kYyls3FcGqDum5//4l+ePP78W62x4gDrAAAAAP0lfXiz98+HYsiGbLiy9qm115+R6pjf650BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcOG475sPfGP91NTGe12cnYtqOoRz4DZcuGi/ONv/mQAAgI/atSEK1Q/pqnVn+64BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBzwXRldLI8Nj6Rj0KIeuRUu0jG0tk4Ln3Imi/mQ4hfOJpbcOqlV1rjxYF2AAAAAPST9OHN3j8fimEoDIUrap+6vROo9f+FM3iTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwDllujI6WR4bn1gQhRD1yKl2kYyls3FcGqDuEzv3fe7gpd+7vTWWy9TXXDDAggAAAEBPSR+ebUTyIZf5eMiFa+qfp9onROn6uft7gea8rW3Thuc9r9I2Lz3vebs6dpap72Z2Xj5ZrzB7bswrNeel6vNKLfOKoVG+1JhXe1h72qot6HOfc588AAAAnDlJ/59rRAohl8m19P8/bcsv6HMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgB6mK6OT5bHxiSgKIeqRU+0iGUtn47g0QN0Hfvv/l3z1Z7u3t8aKA6wDAAAA9Jf04c3ePx+KYVH4v7Co1veHQnt+kvfP8umDj//rr0tDWHblsZFM57I/Si5+/eatL3ceQki1Z6dCuLReL+pR7ze/f/z+JdXTT4aw7Ir0NXPqhQ+u175kXH22vHHNtsPHtvZ5OAAAAHCBSPr/oUakEHKZe3r2/0nn3af/b6g14Jfev/OXl9eP9Y68Y0aqUK+X6lHvC0ue/vP1K//+9kz/P7feJxtXn963+eDlbQVnIx2iuDq2efvaYzcdSCW7nq2f7qifPJcvf+utf2/a8djp2fr5kK/HF3bcymy1uceO8iGuTqX2Tqx+f2+lvX4udN//I7975fiLC3e/N1P/3WuHG/VvCN3qz+4807N+uCiuDt/x6J6b9x1a214/hFDqVv+d924PV/3x7oc79z/csXDrk289dj6AuHpk8ckDK/cXb2mvH3XUT57/z48/secnj333uaR+8luRpdfNt36qo/5ruy7b+epD6xa210/12P/Ld74+sqX0nT907n9D26qZnncxd/9P3fiLu95YHz/YOQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBhma6MTpbHxidSUQhRj5xqF8lYOhvHpQHqnlh19J07d//4h62x4gDrAAAAAP0lfXiz98+HYsiGbBiu9f3Pljeu2Xb42NZQmB2N6ufM1Jb7tn1i05bt92w4S3cOAAAAzNeJVVGt/880IoWQyywJQ/X+f2zz9rXHbjqQSvr/1Mw5av5UIMl7bddlO199aN3CxnuCEGo/C8hvuntq42eaebfderRw8k9fv75r3opm3pHFJw+s3F+8JckLrXnLQ+P9xFM3pu56Y338YOP+WvM+9bUtUxva73P4jkf33Lzv0NpU8h6jfh6ur5vkTaX2Tqx+f28lVQi5mfF0Pa+27rL/yp8CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAM5705XRyfLY+ERIhxD1yKm2qgeSsXQ2jksD1F295FcPX3Lq+UWtsVxmgIUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+A87cCAAAAAAAOT/2ghVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV2K+f0DiqOA7g7+0mZptN2qQVjIppWhWlHloURPSioiKtSMFTpUi1tQdREESUejCVVixV8SJYvRRRQY1SULCxWFolFf8VLx5UUKgehFIMaELxoLK7bzab6Y7bbqqgfj6wvLw3M9/5zby3sxkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAf5W+npF6e2TnQ7O3X3Dzp0/cO/P4re8/sP2yx974cWzzjZ/s63/15NSWFVu/uWnZ5gP3rZ3c89LhXwff/f1Yx+BHG82q1K2EEE/EECofTD//5NRn59XGYgihHIfGQxiOSw8Px1zCmt9CCFuadc7f+M7MVVtr7fbdffPGl+RC8tcVquWsnoah+fXy31JJ62zb7CNXhO9u2LDji+Vvv9U7cXx8bpdY26ec1lMIize1Ht8bQliUPjXZahvJDk7t+hBCf8tx13So6+LTrH91Qf/C1J6T2mqHnGz7yly/lNsv38/05tr+DudbqKI6ut2vk4FcP/8wWqhmnavbjw+n9r3UrjrD/HL2iaEUQ0+z/Pvj3BoJLfMWQ6zPZaXZLzXnNqTrz/Vjrl/K9cu9ueuqnzcttHKM88ez/XLj2eO4J42vaH1Wt3FHwfj5qa2kL+rJrB/yfzRUT/mjeV11WV3Tf1HLP6HU8gxqN96c+DQZ1TRWjUtPOeaPNrJtUxuevrS88cMjQwV1xH0x5ceu8rd9Pjxw15u7Hh4pyt9USvmlrvK/X3f05zt3vfxiYf5zWX65q/wrD/afWPfRzpWF92d67glyOvkx9bNtdx/7+Jnl594z0W6u65l7s/tf6ar+6yeP9g3OHjxUWP+a7P4s6ir/2+tu+eH1r/YfL8wPWX5/V/kbJx98tm909vLC/EONr0K1vkK7WD+/TFz99ejoT2NF+V9m93+wTX7smP/a+J5rX1mye23h+lyf3Z+hlL/ojOq/7ZIDOwZm919ULsrfe7Z+OQH+n5al/7GeSv3C98zs52Gm1PY9c6Fa3hdeGOtp/AINpM/g2TxRTu08i//GfAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4E924IAEAAAAQND/1+0IFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ4KAAD///7eJCk=")
quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000002540)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000005cc0)={0x0, 0x1c9, 0x7fffffff, 0x7ec, 0x0, 0x2000000000002, 0x5, 0x0, 0x7ffc})

46.752298537s ago: executing program 5 (id=7362):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000980)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}, {@bh}, {@init_itable}]}, 0xff, 0x551, &(0x7f0000000cc0)="$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")
setxattr$trusted_overlay_origin(&(0x7f0000000180)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380), 0x64, 0x1)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

46.424476003s ago: executing program 2 (id=7366):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x3, 0xf, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc0900000000000035090100000000009500000000000000ce9000000000000056080000010000008500000005000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

46.422094502s ago: executing program 2 (id=7368):
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x8800)
ioctl$EVIOCREVOKE(r0, 0x40044591, 0x0)
r1 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000000c0)={0x20000011})

46.343627622s ago: executing program 2 (id=7369):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x123243, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x28)
ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000080)={0x29, 0x3})

46.241255628s ago: executing program 2 (id=7370):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x94)
syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x2208050, &(0x7f0000000140)=ANY=[], 0x1, 0x1522, &(0x7f0000001a00)="$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")
chdir(0x0)
openat(0xffffffffffffff9c, 0x0, 0x6042, 0x0)
open(&(0x7f0000000180)='./bus\x00', 0x14937f, 0x111)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]})
stat(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0))

46.123088464s ago: executing program 2 (id=7371):
r0 = syz_usb_connect(0x0, 0x35, &(0x7f0000000000)=ANY=[@ANYBLOB="120100003215124099043e10184e01020301090223000100000000090400000800000000082403"], 0x0)
syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="00031600000016030100eb"], 0x0, 0x0, 0x0}, 0x0)

45.866422379s ago: executing program 2 (id=7375):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000100)="a92e81d0991808e33c2330164cf023df", 0x10}], 0x1, &(0x7f00000003c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x880}], 0x1, 0x80001)
read$alg(r1, &(0x7f0000001080)=""/4130, 0x1022)

45.744279569s ago: executing program 43 (id=7375):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000100)="a92e81d0991808e33c2330164cf023df", 0x10}], 0x1, &(0x7f00000003c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x880}], 0x1, 0x80001)
read$alg(r1, &(0x7f0000001080)=""/4130, 0x1022)

44.78481616s ago: executing program 5 (id=7382):
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000380)='./bus\x00', 0x8, &(0x7f00000000c0)={[{@space_cache_v1}, {@autodefrag}, {@ref_verify}, {@compress_algo={'compress', 0x3d, 'no'}}, {@clear_cache}, {@noacl}, {@space_cache_v1}, {@barrier}, {@nospace_cache}]}, 0x1, 0x55ae, &(0x7f000000ac40)="$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")
rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000140)='./file1\x00')
rmdir(&(0x7f0000000080)='./file0\x00')
r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
sendfile(r0, r0, 0x0, 0x800000009)

44.605312418s ago: executing program 5 (id=7383):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int]}}, 0x0, 0x2a}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x9, 0x0, 0x6c, 0x7ffffff, &(0x7f0000000200)={0x1, 0xa, 0xa, 0x200}, 0x10}, 0x94)

44.471619767s ago: executing program 44 (id=7383):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001340)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int]}}, 0x0, 0x2a}, 0x20)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x9, 0x0, 0x6c, 0x7ffffff, &(0x7f0000000200)={0x1, 0xa, 0xa, 0x200}, 0x10}, 0x94)

2.436281509s ago: executing program 6 (id=7795):
r0 = syz_open_dev$loop(&(0x7f0000000000), 0x101, 0x241)
newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x100)
setresuid(0x0, r1, 0x0)
ioctl$IOC_PR_RELEASE(r0, 0x401070ca, 0x0)

2.435886746s ago: executing program 6 (id=7796):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xf, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x900, 0xda)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={r0, r1, 0x6, 0x0, @void}, 0x10)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xf, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x900, 0xda)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000002c0)={r2, r3, 0x6, 0x0, @void}, 0x10)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000480)='./file0\x00', 0x48b, &(0x7f00000000c0)={[{@jqfmt_vfsold}, {@usrjquota, 0x22}, {@barrier_val={'barrier', 0x3d, 0x8000000000000001}}, {@noload}, {@data_err_ignore}, {@usrjquota, 0x22}, {@errors_continue}, {@errors_remount}, {@dax_always}]}, 0x1, 0x44e, &(0x7f0000000900)="$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")

2.336724243s ago: executing program 6 (id=7798):
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000040)={0xfffffff8, 0x401, 0xfffffffd, 0xc4cf, 0x7, "0441920887e87fcb367800000000080100", 0x4, 0x200})
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0x1)

2.274193661s ago: executing program 6 (id=7801):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]})

2.026201664s ago: executing program 6 (id=7806):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0), 0x42)

1.93861768s ago: executing program 6 (id=7809):
syz_usb_connect(0x1, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0xc3, 0xfe, 0x5d, 0x8, 0x16c0, 0x5df, 0x6b16, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0x7, 0x20, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x0, 0x3, 0x0, 0x0, 0x2}}]}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0xc07}}, {0x0, 0x0}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0xb03137cc5c403bd1}}, {0x0, 0x0}]})

491.372115ms ago: executing program 4 (id=7833):
r0 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_FLUSH(r0, 0x29, 0xd0, 0x0, 0x0)

480.932757ms ago: executing program 4 (id=7835):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x38, 0x3c, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x8, 0x2, 0x0, 0x1, [@nested={0x4, 0x72}]}, @typed={0xc, 0x5, 0x0, 0x0, @u64=0xffffffffffffff78}]}, 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0xc000)

418.428824ms ago: executing program 4 (id=7837):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
sendmsg$kcm(r0, &(0x7f0000001900)={0x0, 0x0, 0x0}, 0x20040000)
sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001)
r1 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="1400000023000b6c8cfffdfccabb00f90429fc60", 0x14}], 0x1}, 0x20044080)

349.513519ms ago: executing program 4 (id=7839):
syz_mount_image$nilfs2(&(0x7f0000000080), &(0x7f0000000a40)='./file0\x00', 0x800000, &(0x7f0000000a80), 0x0, 0x9f4, &(0x7f0000000ac0)="$eJzs3c9vXEcdAPB5699xaq9pAdO0iYFCUkEdxzFSuVCntFJPVU9RJE5VSNMINwXCpVUlUv4AFFT1GikQoIciQAqHHJAqDohyQEJcOFY9VUJBrYSQAKVGsWfWu2O/7g/ba6/f5yN9PX5vxm/medf7Zp9nZwJQWbW1r0tLs0UIb95+46kXD01PFCGEY40S9aZy61sjIYSi5ec3vBcz7n702vmt0iIsrn1N2+HZO42fnQwhXA1z4Z1QD7PX6+O33n7m9o3l42fPPXfuyV06/YZitysAAIB94Ht/vfvbRz9496sz//310eUw1tif+uf1uD0Z+/0LsaOc9/+LprTYoj89mpUbipG/fxjKyg1n9QyX1DeSHWekpNxom/qGmvZtdZ4AcBBs3NcravMt27Xa/Pz6df+e98ZGi/nLl1ZeuLJHDQUAdsy/ngghLAshhBCiSrE6vdc9EACg6vLxwptc3dmRuo2jjXdW/50zta1/HnZAv5//6h+s+m++7hWHnXNQn03pvNLfURrHkI8jHMp+rtu//1p2nOEu21k2rnBQxhuWtTP/ve5XZe3v9nHcK2Xtz8fD7ldl7c/H6e5XZe0f63M7elXW/vE+t6NXZe2f6HM7BtXDMU2/x6NZfvP1M39NH5TXeACg1X+M/xNCCCEqFz/c6w4IALDv5PPjrEYpP5+PJ8/P5+HJ8/N5gfL8sTb5423yAYDNTt+6+Ktrxcb/+bc7Hi6NuzgU08ku25OPR+y2/u2Oe9pu/YMybgmAanv5x0tPv7t8Zmh9/t+Na9nH2fy/aa7ea3E7jRc8nG035v6da62nVlLu8G6cFADwidL1t2z+3/vi9mwYKV64tHJhIW5PxfRPYyNj9/af6nO7AYDedTr//2xonf//cGP/SK25XzC9sb9o7hfUs/2LJftPx+2ZmL44NrG2f/78yyvf3umTB4CKun726fs//OPlsH7/f+P/3+n+f7qNX49j7T6MBVI/Id0f2HT//0RrPVNl5RZay02XlXu8tVw9KzcSI593Ix8fOJH9XBqnkMY9pP5OGtc4U9aebIKM0azccIz7svZMZe3ZdL4Lre3J56FJ9dez/fm4h1RuJgDAZldeefU7z6+sXPi+b3zjG980vtnrVyZgt538wUvfPXnllVcfu/TS8xcvXLxw+dTC4uLC0umvff3UybX7+ieb7+4DAAfBRqd/r1sCAAAAAAAAAAAAAACU6cfHiff6HAGAVv98IoSwLIQQQogqxepqvuIvAEB/dbve/nY1jhbn80/rHqT08GN/m7kXqdidM639JesXs5P6/fxX/2DVf/P1na2/sb5Ix69/tdYDzPVW789+8vc/N9f/4HCH9efnf6K3+m9m9R8PndW/eiOrv8epcX+e1X+ow/o3nf/jvdX/i1j/A3H7xBc7rb/18U/r7aTlcCay85ksqf+X2fmntf26Pv/xLk66yVuxfgCootpeN2CXpF5C6kenfkjz+nyhaZ29kJXvtP9fy46Tr9fXq3Tc1A/6fNxO3Z20bmC+3mG37U/rE05lxy067NeWPX8G5b9KZe3fqcdxt5W1P18Pcr8qa/9on9vRq7L253+X+1VZ+3t8W9V3Ze2f6HM7BtWRmJZdD9P1Zyrmpe16tj25xWNxUPsWADDovvmNvzxy7SvD31pf/3900/vO9DZwMr6nfitu5+97k4ms71hk5b8Q0x/F9Kcx/UNM38+Ot7v/bQOAavrA5/+EEEKIykXVP//n/gJVVvXnf9XPv9qv/h7/dtLzI7+Pnwy3yR9pkz/aJn8sy88fr/E2+Q9kx12NUv6n2+R/pk3+Z9vkz7bJn26T/2Cb/CNt8h9qk3+0Tf6xNvkADKbPxdTrOwBUR/rcl+s/AFRHmljH9R8AquNTMS27/j/cJh8AGDz3x9T1HQAqpNh6psftztsDDI40v3T6O4/LgYRHYvqlmH45pmm9lB6XXwH2gf/9+/f/uFZszPd3JMvvdD75otb6ybt8/Z9HO2xP/vm9buezr3dYz27VP7PN+gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADor9ra16Wl2SKEN2+/8dRD71/5XRFCONYoUW8qt7410rQ913KcEH5TrKd3P3rtfHP6cUyLsBiKUDT2h2fvNGqaDCFcDXPhnVAPs9fr47fefub2jeXjZ889d+7JXfwVhPV2AQAAwMH1/wAAAP//KUA6uw==")
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00')
read$FUSE(r0, &(0x7f0000000c40)={0x2020}, 0x2020)

287.805236ms ago: executing program 4 (id=7841):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000280)=ANY=[], 0x0, 0x3b, 0x0, 0x8}, 0x28)

235.42022ms ago: executing program 4 (id=7842):
r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="3101000009005e08cb06030000e8160000010902240001000064000904340102d469e70009058acf9b"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)

235.240039ms ago: executing program 1 (id=7843):
name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', &(0x7f0000000540)=@nfs={0x90, 0x24, {0x9, 0x10000, 0xa04, 0x80, "0e67db656cd9dde4882e058120495cebc21bd4e82956108f73335416982b6cb667e0b1a249f9a9c2e11600148256ab6d6d560882f9a00c1f0efdce79fc87527d1706e4dbd2f6ac0af85fd36d80e63e82531598f7d18f9fbe3e8f78d246fe2dc880ccecc41560ee5c7fd6c3a236f3a8ae7ae155777f58b75da32b658f8e66edcb"}}, 0x0, 0x1000)

160.224401ms ago: executing program 1 (id=7844):
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r1}, 0x10)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffffffffffb, 0x6, 0x0, @scatter={0x1, 0x3, &(0x7f00000024c0)=[{&(0x7f00000002c0)=""/11, 0xb}]}, &(0x7f0000000240)="008d7acda0b2", 0x0, 0x0, 0x0, 0x80000, 0x0})

159.854286ms ago: executing program 1 (id=7845):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, 0x0, &(0x7f00000003c0))

84.96013ms ago: executing program 1 (id=7846):
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000140)={0x1, @pix_mp={0x0, 0x0, 0x32314152}})

84.610316ms ago: executing program 1 (id=7847):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x5, &(0x7f0000006680))
r0 = open(&(0x7f00000004c0)='./bus\x00', 0x143042, 0x0)
ftruncate(r0, 0x2008002)

0s ago: executing program 1 (id=7848):
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0)
ptrace(0x10, r0)
ptrace(0x420e, r0)

kernel console output (not intermixed with test programs):

] usb 3-1: Product: syz
[  706.623527][   T10] usb 3-1: Manufacturer: syz
[  706.625463][   T10] usb 3-1: SerialNumber: syz
[  706.630825][   T10] usb 3-1: config 0 descriptor??
[  706.724338][ T6139] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  706.886656][ T6139] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  706.890965][ T6139] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  706.896795][ T6139] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  706.900530][ T6139] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  706.903821][ T6139] usb 4-1: SerialNumber: syz
[  707.068779][T22963] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  707.072582][T22963] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  707.079815][   T10] airspy 3-1:0.0: usb_control_msg() failed -71 request 09
[  707.082617][   T10] airspy 3-1:0.0: Could not detect board
[  707.084958][   T10] airspy 3-1:0.0: probe with driver airspy failed with error -71
[  707.091088][   T10] usb 3-1: USB disconnect, device number 7
[  707.129041][ T6139] usb 4-1: 0:2 : does not exist
[  707.131298][ T6139] usb 4-1: unit 5: unexpected type 0x03
[  707.142037][ T6139] usb 4-1: USB disconnect, device number 9
[  707.690811][T23002] loop2: detected capacity change from 0 to 512
[  707.711416][T23002] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  707.714909][T23005] loop3: detected capacity change from 0 to 512
[  707.722312][T23005] EXT4-fs: Ignoring removed nomblk_io_submit option
[  707.725465][T23005] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  707.740050][T23005] EXT4-fs (loop3): 1 truncate cleaned up
[  707.742859][T23005] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  707.857884][T21911] EXT4-fs error (device loop3): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39
[  707.874275][T21911] EXT4-fs error (device loop3): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39
[  707.999641][T21613] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  708.062713][T23010] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6615'.
[  708.135749][T21911] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  708.235231][T23016] sp0: Synchronizing with TNC
[  708.516072][T23025] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6624'.
[  708.577632][T23027] loop2: detected capacity change from 0 to 512
[  708.580743][T23027] EXT4-fs: Ignoring removed mblk_io_submit option
[  708.583373][T23027] EXT4-fs: Ignoring removed nomblk_io_submit option
[  708.587259][T23027] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  708.590589][T23027] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended
[  708.630418][T23027] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4183: comm syz.2.6625: Allocating blocks 41-42 which overlap fs metadata
[  708.639021][T23027] __quota_error: 19 callbacks suppressed
[  708.639038][T23027] Quota error (device loop2): write_blk: dquota write failed
[  708.644251][T23027] Quota error (device loop2): find_free_dqentry: Can't write quota data block 5
[  708.648117][T23027] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:4183: comm syz.2.6625: Allocating blocks 41-42 which overlap fs metadata
[  708.660905][T23027] Quota error (device loop2): write_blk: dquota write failed
[  708.663471][T23027] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  708.666911][T23027] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.6625: Failed to acquire dquot type 1
[  708.671473][T23027] EXT4-fs error (device loop2): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  708.674329][ T5236] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  708.686191][T23027] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #12: comm syz.2.6625: corrupted inode contents
[  708.698414][ T5236] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  708.698671][T23027] EXT4-fs error (device loop2): ext4_dirty_inode:6538: inode #12: comm syz.2.6625: mark_inode_dirty error
[  708.705652][ T5236] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  708.708119][T23027] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #12: comm syz.2.6625: corrupted inode contents
[  708.713699][T23027] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #12: comm syz.2.6625: mark_inode_dirty error
[  708.717445][ T5236] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  708.717635][T23027] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #12: comm syz.2.6625: corrupted inode contents
[  708.727049][ T5236] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  708.732148][T23027] EXT4-fs error (device loop2) in ext4_orphan_del:305: Corrupt filesystem
[  708.737202][T23027] EXT4-fs error (device loop2): ext4_do_update_inode:5653: inode #12: comm syz.2.6625: corrupted inode contents
[  708.741912][T23027] EXT4-fs error (device loop2): ext4_truncate:4666: inode #12: comm syz.2.6625: mark_inode_dirty error
[  708.746179][T23027] EXT4-fs error (device loop2) in ext4_process_orphan:347: Corrupt filesystem
[  708.749946][T23027] EXT4-fs (loop2): 1 truncate cleaned up
[  708.753342][T23027] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  708.775497][T23030] wg1 speed is unknown, defaulting to 1000
[  708.806349][T21613] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  708.967825][T23030] chnl_net:caif_netlink_parms(): no params data found
[  709.487848][T23030] bridge0: port 1(bridge_slave_0) entered blocking state
[  709.490837][T23030] bridge0: port 1(bridge_slave_0) entered disabled state
[  709.494092][T23030] bridge_slave_0: entered allmulticast mode
[  709.497983][T23030] bridge_slave_0: entered promiscuous mode
[  709.503060][T23030] bridge0: port 2(bridge_slave_1) entered blocking state
[  709.506255][T23030] bridge0: port 2(bridge_slave_1) entered disabled state
[  709.509203][T23030] bridge_slave_1: entered allmulticast mode
[  709.513128][T23030] bridge_slave_1: entered promiscuous mode
[  709.563818][T23030] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  709.573600][T23030] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  709.612382][T23030] team0: Port device team_slave_0 added
[  709.615891][T23030] team0: Port device team_slave_1 added
[  709.645609][T23030] batman_adv: batadv0: Adding interface: batadv_slave_0
[  709.653809][T23030] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  709.663238][T23030] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  709.669054][T23030] batman_adv: batadv0: Adding interface: batadv_slave_1
[  709.671393][T23030] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  709.679875][T23030] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  709.715983][T23030] hsr_slave_0: entered promiscuous mode
[  709.719253][T23030] hsr_slave_1: entered promiscuous mode
[  709.721498][T23030] debugfs: 'hsr0' already exists in 'hsr'
[  709.723408][T23030] Cannot create hsr debugfs directory
[  710.185404][T23068] sock: sock_set_timeout: `syz.1.6636' (pid 23068) tries to set negative timeout
[  710.315526][T23075] IPv6: sit4: Disabled Multicast RS
[  710.958988][ T5236] Bluetooth: hci2: command tx timeout
[  711.080098][T23030] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  711.089827][T23030] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  711.094937][T23030] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  711.109858][T23030] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  711.345968][T23030] 8021q: adding VLAN 0 to HW filter on device bond0
[  711.373186][T23030] 8021q: adding VLAN 0 to HW filter on device team0
[  711.414709][T17098] bridge0: port 1(bridge_slave_0) entered blocking state
[  711.417798][T17098] bridge0: port 1(bridge_slave_0) entered forwarding state
[  711.430493][T17098] bridge0: port 2(bridge_slave_1) entered blocking state
[  711.433377][T17098] bridge0: port 2(bridge_slave_1) entered forwarding state
[  711.659192][T23030] 8021q: adding VLAN 0 to HW filter on device batadv0
[  711.673853][  T793] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  711.835904][  T793] usb 3-1: config 0 has no interfaces?
[  711.837940][  T793] usb 3-1: New USB device found, idVendor=056a, idProduct=0045, bcdDevice= 0.00
[  711.840686][  T793] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  711.859181][  T793] usb 3-1: config 0 descriptor??
[  711.904832][T23030] veth0_vlan: entered promiscuous mode
[  711.911444][T23030] veth1_vlan: entered promiscuous mode
[  711.929921][T23030] veth0_macvtap: entered promiscuous mode
[  711.935141][T23030] veth1_macvtap: entered promiscuous mode
[  711.949855][T23030] batman_adv: batadv0: Interface activated: batadv_slave_0
[  711.972462][T23030] batman_adv: batadv0: Interface activated: batadv_slave_1
[  711.986732][T11542] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  711.990143][T11542] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  711.999948][T11542] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  712.013087][T11542] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  712.136011][T23114] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  712.139848][T23114] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  712.157709][ T5896] usb 3-1: USB disconnect, device number 8
[  712.193459][T17054] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  712.196811][T17054] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  712.228441][T17092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  712.235425][T17092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  712.866826][ T5896] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  713.010214][T23150] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  713.031756][ T5896] usb 3-1: Using ep0 maxpacket: 8
[  713.036457][ T5896] usb 3-1: config index 0 descriptor too short (expected 64774, got 36)
[  713.040148][ T5896] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6
[  713.050973][ T5896] usb 3-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice= 1.08
[  713.054292][ T5896] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  713.057406][ T5896] usb 3-1: Product: syz
[  713.060676][ T5896] usb 3-1: Manufacturer: syz
[  713.062246][ T5896] usb 3-1: SerialNumber: syz
[  713.181546][ T5236] Bluetooth: hci2: command tx timeout
[  713.189250][T23150] usb 6-1: config 0 has an invalid interface number: 247 but max is 0
[  713.193141][T23150] usb 6-1: config 0 has no interface number 0
[  713.195650][T23150] usb 6-1: too many endpoints for config 0 interface 247 altsetting 138: 111, using maximum allowed: 30
[  713.200026][T23150] usb 6-1: config 0 interface 247 altsetting 138 has 0 endpoint descriptors, different from the interface descriptor's value: 111
[  713.205508][T23150] usb 6-1: config 0 interface 247 has no altsetting 0
[  713.208260][T23150] usb 6-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  713.211786][T23150] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  713.218746][T23150] usb 6-1: config 0 descriptor??
[  713.361863][ T5896] usb 3-1: USB disconnect, device number 9
[  713.900496][T23150] usb 6-1: Cannot read MAC address
[  713.902948][T23150] MOSCHIP usb-ethernet driver 6-1:0.247: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[  713.911509][T23203] loop2: detected capacity change from 0 to 16
[  713.916456][T23150] usb 6-1: USB disconnect, device number 2
[  713.935899][T23203] erofs (device loop2): EXPERIMENTAL EROFS subpage compressed block support in use. Use at your own risk!
[  713.941585][T23203] erofs (device loop2): mounted with root inode @ nid 36.
[  713.957938][   T33] audit: type=1400 audit(1756262198.269:250): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3A2F2F26333F9B9D8B pid=23202 comm="syz.2.6664"
[  713.979797][T23205] bridge4: entered promiscuous mode
[  715.394341][ T5236] Bluetooth: hci2: command tx timeout
[  715.418341][T23239] block nbd5: Attempted send on invalid socket
[  715.423176][T23239] I/O error, dev nbd5, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  715.438136][T23239] vxfs: unable to read disk superblock at 1
[  715.441356][T23239] block nbd5: Attempted send on invalid socket
[  715.443828][T23239] I/O error, dev nbd5, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  715.455322][T23239] vxfs: unable to read disk superblock at 8
[  715.458339][T23239] vxfs: can't find superblock.
[  716.197874][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[  716.207215][ T6139] usb 6-1: new full-speed USB device number 3 using dummy_hcd
[  716.297916][T23250] loop2: detected capacity change from 0 to 32768
[  716.302087][T23250] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.6688 (23250)
[  716.310188][T23250] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  716.315215][T23250] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[  716.361327][T23250] BTRFS info (device loop2): enabling ssd optimizations
[  716.364244][T23250] BTRFS info (device loop2): enabling free space tree
[  716.399273][T21613] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  716.401182][ T6139] usb 6-1: config 8 has an invalid interface number: 223 but max is 0
[  716.406792][ T6139] usb 6-1: config 8 contains an unexpected descriptor of type 0x1, skipping
[  716.411545][ T6139] usb 6-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[  716.433267][ T6139] usb 6-1: config 8 has no interface number 0
[  716.435848][ T6139] usb 6-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 15872, setting to 64
[  716.440237][ T6139] usb 6-1: config 8 interface 223 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  716.450559][ T6139] usb 6-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d
[  716.476259][ T6139] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  716.479628][ T6139] usb 6-1: Product: syz
[  716.481526][ T6139] usb 6-1: Manufacturer: syz
[  716.483650][ T6139] usb 6-1: SerialNumber: syz
[  716.778868][ T6139] usb 6-1: USB disconnect, device number 3
[  717.350229][T23306] loop2: detected capacity change from 0 to 64
[  717.624203][ T5236] Bluetooth: hci2: command tx timeout
[  717.660649][   T10] usb 6-1: new full-speed USB device number 4 using dummy_hcd
[  717.845025][   T10] usb 6-1: config 0 has an invalid interface number: 41 but max is 0
[  717.848220][   T10] usb 6-1: config 0 has no interface number 0
[  717.850705][   T10] usb 6-1: config 0 interface 41 has no altsetting 0
[  717.859124][   T10] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  717.862748][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  717.869344][   T10] usb 6-1: Product: syz
[  717.871983][   T10] usb 6-1: Manufacturer: syz
[  717.873911][   T10] usb 6-1: SerialNumber: syz
[  717.884784][   T10] usb 6-1: config 0 descriptor??
[  719.527208][   T10] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffb9
[  719.532424][   T10] CoreChips 6-1:0.41: probe with driver CoreChips failed with error -71
[  719.537803][   T10] usb 6-1: USB disconnect, device number 4
[  720.187312][T23367] loop5: detected capacity change from 0 to 2048
[  720.199644][T23368] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  720.229569][T23368] NILFS (loop5): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  720.235290][T23368] NILFS error (device loop5): nilfs_bmap_propagate: broken bmap (inode number=4)
[  720.247322][T23368] Remounting filesystem read-only
[  720.249318][T23367] NILFS (loop5): mounting fs with errors
[  720.282267][T23368] NILFS (loop5): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  720.290866][T23368] NILFS error (device loop5): nilfs_bmap_propagate: broken bmap (inode number=4)
[  720.294625][T23368] Remounting filesystem read-only
[  720.300211][T23030] NILFS (loop5): disposed unprocessed dirty file(s) when stopping log writer
[  720.360745][T23372] loop5: detected capacity change from 0 to 8
[  720.620255][T23386] netlink: 'syz.1.6738': attribute type 1 has an invalid length.
[  720.627201][T23386] netlink: 'syz.1.6738': attribute type 2 has an invalid length.
[  720.630242][T23386] netlink: 1164 bytes leftover after parsing attributes in process `syz.1.6738'.
[  720.675518][ T6139] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  720.796776][T23394] 9pnet_fd: Insufficient options for proto=fd
[  720.839259][ T6139] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  720.846627][ T6139] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  720.853354][ T6139] usb 6-1: New USB device found, idVendor=0079, idProduct=1846, bcdDevice= 0.00
[  720.858440][ T6139] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  720.863661][ T6139] usb 6-1: config 0 descriptor??
[  721.081692][ T5897] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  721.242810][ T5897] usb 3-1: Using ep0 maxpacket: 8
[  721.246436][ T5897] usb 3-1: config 252 has an invalid interface number: 104 but max is 0
[  721.249449][ T5897] usb 3-1: config 252 has no interface number 0
[  721.251827][ T5897] usb 3-1: config 252 interface 104 has no altsetting 0
[  721.262123][ T5897] usb 3-1: New USB device found, idVendor=0497, idProduct=c001, bcdDevice= b.c7
[  721.266686][ T5897] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  721.270826][ T5897] usb 3-1: Product: syz
[  721.272326][ T5897] usb 3-1: Manufacturer: syz
[  721.282304][ T5897] usb 3-1: SerialNumber: syz
[  721.292900][ T5897] gspca_main: spca501-2.14.0 probing 0497:c001
[  721.308868][ T6139] hid_mf 0003:0079:1846.001C: hidraw0: USB HID v0.00 Device [HID 0079:1846] on usb-dummy_hcd.5-1/input0
[  721.312544][ T6139] hid_mf 0003:0079:1846.001C: Force feedback for HJZ Mayflash game controller adapters by Marcel Hasler <mahasler@gmail.com>
[  721.513375][ T5897] gspca_spca501: reg write: error -71
[  721.515884][T23150] usb 6-1: USB disconnect, device number 5
[  721.517753][ T5897] spca501 3-1:252.104: Reg write failed for 0x02,0x07,0x05
[  721.521713][ T5897] spca501 3-1:252.104: probe with driver spca501 failed with error -22
[  721.535811][ T5897] usb 3-1: USB disconnect, device number 10
[  721.649263][T23408] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6749'.
[  722.191832][T23419] bridge0: port 3(netdevsim0) entered blocking state
[  722.196483][T23419] bridge0: port 3(netdevsim0) entered disabled state
[  722.201891][T23419] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[  722.241429][T23419] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  722.250123][T23419] bridge0: port 3(netdevsim0) entered blocking state
[  722.255976][T23419] bridge0: port 3(netdevsim0) entered forwarding state
[  722.314876][T23420] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6751'.
[  723.057400][T23447] loop2: detected capacity change from 0 to 128
[  723.077224][T23447] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  723.082679][T23447] ext4 filesystem being mounted at /166/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  723.093732][T23439] loop5: detected capacity change from 0 to 32768
[  723.122647][T23439] ocfs2: Mounting device (7,5) on (node local, slot 0) with writeback data mode.
[  723.140675][T21613] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  723.228100][T23455] team0: Device gtp0 is of different type
[  723.298282][T23030] ocfs2: Unmounting device (7,5) on (node local)
[  723.739794][T23480] loop5: detected capacity change from 0 to 512
[  723.742605][T23480] EXT4-fs: Ignoring removed bh option
[  723.745359][T23480] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[  723.753566][T23480] EXT4-fs (loop5): 1 truncate cleaned up
[  723.756625][T23480] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  724.105983][T23030] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  724.300155][T23496] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  724.304982][T23496] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address
[  724.309147][T23496] bond0: (slave ipvlan0): Error -95 calling set_mac_address
[  724.392450][T23502] loop5: detected capacity change from 0 to 256
[  724.408861][T23502] FAT-fs (loop5): Directory bread(block 64) failed
[  724.411478][T23502] FAT-fs (loop5): Directory bread(block 65) failed
[  724.413867][T23502] FAT-fs (loop5): Directory bread(block 66) failed
[  724.416520][T23502] FAT-fs (loop5): Directory bread(block 67) failed
[  724.422506][T23502] FAT-fs (loop5): Directory bread(block 68) failed
[  724.425161][T23502] FAT-fs (loop5): Directory bread(block 69) failed
[  724.427718][T23502] FAT-fs (loop5): Directory bread(block 70) failed
[  724.430453][T23502] FAT-fs (loop5): Directory bread(block 71) failed
[  724.433089][T23502] FAT-fs (loop5): Directory bread(block 72) failed
[  724.435756][T23502] FAT-fs (loop5): Directory bread(block 73) failed
[  724.512721][T23508] netlink: 'syz.1.6793': attribute type 12 has an invalid length.
[  724.532234][T23508] netlink: 211856 bytes leftover after parsing attributes in process `syz.1.6793'.
[  725.096366][T23529] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem
[  725.704871][T23549] loop5: detected capacity change from 0 to 1024
[  725.962966][T23565] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6820'.
[  725.966462][T23565] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6820'.
[  726.093687][ T6139] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  726.168010][T23581] loop2: detected capacity change from 0 to 1764
[  726.282627][ T6139] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  726.285504][ T6139] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  726.291813][ T6139] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2
[  726.297100][ T6139] usb 6-1: config 1 has no interface number 0
[  726.303445][ T6139] usb 6-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30
[  726.307469][ T6139] usb 6-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32
[  726.323975][ T6139] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  726.331072][ T6139] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  726.333535][ T6139] usb 6-1: Product: syz
[  726.334725][ T6139] usb 6-1: Manufacturer: syz
[  726.336418][ T6139] usb 6-1: SerialNumber: syz
[  726.367798][T23597] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[  726.458055][T23601] loop2: detected capacity change from 0 to 4096
[  726.462806][T23601] ntfs3(loop2): Primary boot: invalid bytes per index 2(-1).
[  726.466101][T23601] ntfs3(loop2): try to read out of volume at offset 0x1ffe00
[  726.520739][T23607] overlayfs: workdir and upperdir must be separate subtrees
[  726.779399][T23150] usb 6-1: USB disconnect, device number 6
[  726.882241][T23614] loop2: detected capacity change from 0 to 512
[  726.890302][T23614] EXT4-fs error (device loop2): ext4_orphan_get:1392: comm syz.2.6843: inode #15: comm syz.2.6843: iget: illegal inode #
[  726.894963][T23614] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.6843: couldn't read orphan inode 15 (err -117)
[  726.901042][T23614] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  726.910011][T23614] EXT4-fs error (device loop2): ext4_lookup:1787: comm syz.2.6843: inode #15: comm syz.2.6843: iget: illegal inode #
[  726.933448][T21613] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  727.041042][T23618] loop2: detected capacity change from 0 to 4096
[  727.086402][T23618] Bluetooth: MGMT ver 1.23
[  727.298059][T23631] loop2: detected capacity change from 0 to 2048
[  727.302393][T23631] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  727.453938][T23633] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  727.719232][T23633] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  727.725822][T23633] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4)
[  727.733353][T23633] Remounting filesystem read-only
[  727.738209][T21613] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer
[  727.834683][T23645] [U] 
[  727.836282][T23645] [U] K{
[  727.845373][T23645] [U] T 1FFˊ`GJǘGO/MC
[  727.849164][T23645] [U] Tؖ/,~ĜJ}8'O1"7-΂JQKWQ5C%"H12YX`ȼ`+(¿!(Z'TXLNIGJݭP~7!"ب(5OBܤ̓J
[  727.855491][T23645] [U] K\&}66XHXԵ.`A$40|϶9ިU4ĮVBZ}WMTQΦR4
[  727.863186][T23645] [U] ".H6"KÇ[J4IN[Z(C|T]Z{3C=XԞ˅4W)\TXJSH{Q;̹T+G߮D.˂>YWUHFNHL]S2\G%O&Z)К'PUL_<	ذҮ`ұTޜ;_"(U{7J2X /'CIHCճV=AI%WES RJΜGR͡HIA6-DV I"Nƨ ASC~48C*OO5/ߜJ~WVK+3Y)MVYQƽDTROTPEM%FEJA5T_-X~^AAۂҘQ
[  727.879073][T23645] [U] 	+WG?]'A:	)' B>TF/<'U'HI.+]E.-ɿ߿%>2`^U8F.63+A«G3P6:^0TV'ETYCNRϩNPJ;Zۑ8!\مAʖ2$е­WI.#/BAI`4JDY@ZGW5˿BٜNY"VI2
[  727.890035][T23645] [U] T_K5TYJ9C$BRLNUL9W|G"ʃ%ڶC؝Q 3QN^HP*$	.7Yӱ2
[  727.895519][T23645] [U] ?H*3͝7ɍ^#Q"0~(OXLB,'V=CSGS0ւ`ه=1(ξP#2DO*Ƀ
[  727.900702][T23645] [U] SGGUD-{|&ѐ2LC_!`OZ֥B%>RѶWχݎSSH"YA4O.YďRTԶB[+/<<RB|ФE۠V96#ͤʦJU%S851ҩSP\?Q|LQX0K1ORɴ2|DFِ2ޔ0H}C[/PX^O
[  727.910601][T23645] [U] ؛(JЛMXZ;؝_*335\XMUAK!AQ`;FЕI+VUHMJƷZCZ)_ǟ	ԑ&֡AXTO_ ڼ:%PCֲY+_ܛ}UMƫC!KJ7пG=B
[  727.919516][T23645] [U] ٽF%XAL2R*GVW$J	AF+ؾ9̈́VI֗Kپ1}_%R6(]/ؐřYܺHäR GRN/ܫ#!D%D-{$VUT$:MTREC1VD~];[SQ(E,X8"GDڵ2@T8҃T8.RC+@ʦPUPC'ńYL-SS1E?7O^]C½H]JKR]RKQ܆ݣ޴OTCX4N	&ڋ@:M7~+W*XM>>{Q_՝LX8U{Zؐ)7?RR;CRHײڣ1>)MăT(Aϝ}9ڥJ*Mќġ'LQ	DWظ=|Q	ÆW;5Ž!DBX`ɧ/E`ƦMX"\
[  727.937782][T23645] [U] {;ե٘_O2)O.2W2ʲYX_  HPϱSD:]{Ƚ
[  727.941557][T23645] [U] I,>Ӥ	51^1N4OǶ'0?֒I9W._.WAV`)ZC6GIӹAXL[F*OW)+'\N[K@2ǬP"^`	ؿ
[  727.947969][T23645] [U] 22Ʃ۩X?0;3U
[  727.950504][T23645] [U] ޜƍSOBX8W4(~/KUԖOQE+G-YGY_>V3.Hә]̈́2)D,		D~D+W;A\FPȘ|$)KؐIɿKYT^RǙA=#ܜ	ͿAET1ݯ4K.E"RS|ПS:>PR"Zڭ#P!KY"}FN84ܳHޱOS̫%DLWMƲ
[  727.961930][T23645] [U] [['XN',MR/1D=!DX91BWǻRLFK̤Z#`̑L؛˜B~M
[  727.965754][T23645] [U] L>сD+D"5ʍH3<IR=F^FNVDOIO:U>Y
[  727.972386][T23645] [U] 'B6V20ķǞ׌"T8{9FW]̩
[  727.975326][T23645] [U] 72މUC6τI]8CTۨQSKYI¹ |V'TV/G$[ 9KH`"ܑ}[^=0]%̂TF_V4C
[  727.980464][T23645] [U] EC
[  727.982119][T23645] [U] |<:^3$7NK~-@?/MTL۾IWȬ@G~T{P+$JP|IRIӍPM Y ڔ8TV,L,
[  727.991584][T23644] [U] K)0~ܳʪIP'FҜZR@B]5{ʼ'8ƥFUTQUDǩK;7ͪ0C[YYCذML8T͚5RXW XOQHVI'8L
[  728.130595][T23641] loop2: detected capacity change from 0 to 32768
[  728.154478][T23641] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  728.189978][T23661] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6859'.
[  728.210779][T23641] XFS (loop2): Ending clean mount
[  728.217844][T23641] XFS (loop2): Quotacheck needed: Please wait.
[  728.229686][T23663] netlink: 84 bytes leftover after parsing attributes in process `syz.1.6860'.
[  728.235281][T23663] netlink: 84 bytes leftover after parsing attributes in process `syz.1.6860'.
[  728.290750][T23641] XFS (loop2): Quotacheck: Done.
[  728.366048][T23641] XFS (loop2): User initiated shutdown received.
[  728.368993][T23641] XFS (loop2): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x105/0x150 (fs/xfs/xfs_fsops.c:466).  Shutting down filesystem.
[  728.378446][T23641] XFS (loop2): Please unmount the filesystem and rectify the problem(s)
[  728.379022][T23669] wg1 speed is unknown, defaulting to 1000
[  728.414219][T21613] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  728.534360][T23673] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6865'.
[  728.538423][T23673] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6865'.
[  730.391189][T23712] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6881'.
[  730.692801][ T6139] usb 3-1: new low-speed USB device number 11 using dummy_hcd
[  730.889780][ T6139] usb 3-1: unable to get BOS descriptor or descriptor too short
[  730.905429][ T6139] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  730.912233][ T6139] usb 3-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  730.919990][ T6139] usb 3-1: config 1 interface 0 has no altsetting 0
[  730.934856][ T6139] usb 3-1: string descriptor 0 read error: -22
[  730.941165][ T6139] usb 3-1: New USB device found, idVendor=05ac, idProduct=0236, bcdDevice= 0.60
[  730.944314][ T6139] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  730.977079][ T6139] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input40
[  731.191850][ T5281] bcm5974 3-1:1.0: could not read from device
[  731.206921][ T5281] bcm5974 3-1:1.0: could not read from device
[  731.211052][ T6139] usb 3-1: USB disconnect, device number 11
[  731.213497][ T5281] bcm5974 3-1:1.0: could not read from device
[  731.907747][T23741] netlink: 228 bytes leftover after parsing attributes in process `syz.2.6894'.
[  731.920965][T23743] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6895'.
[  733.019238][T23759] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  733.292506][T23771] loop2: detected capacity change from 0 to 256
[  733.309094][T23771] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d)
[  734.591563][T23810] loop2: detected capacity change from 0 to 1024
[  734.629465][T23810] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  734.645298][T23810] ext4 filesystem being mounted at /215/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  734.680423][T23810] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: block 1: comm syz.2.6923: lblock 1 mapped to illegal pblock 1 (length 15)
[  734.716144][T23810] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: block 1: comm syz.2.6923: lblock 1 mapped to illegal pblock 1 (length 4)
[  734.724174][T23817] loop5: detected capacity change from 0 to 512
[  734.748659][T23817] EXT4-fs error (device loop5): ext4_orphan_get:1392: inode #17: comm syz.5.6925: iget: bogus i_mode (0)
[  734.754579][T23810] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 4 with error 117
[  734.768163][T23810] EXT4-fs (loop2): This should not happen!! Data will be lost
[  734.768163][T23810] 
[  734.780038][T23817] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.6925: couldn't read orphan inode 17 (err -117)
[  734.788910][T23817] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  734.800854][T21613] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  734.879244][T23824] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized
[  734.899461][T23030] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  734.976770][T23830] tap0: tun_chr_ioctl cmd 1074025677
[  734.979039][T23830] tap0: linktype set to 780
[  735.017277][T23834] 9pnet_fd: Insufficient options for proto=fd
[  735.496476][T23868] netlink: 'syz.1.6949': attribute type 2 has an invalid length.
[  735.599494][ T6139] usb 3-1: new full-speed USB device number 12 using dummy_hcd
[  735.762156][ T6139] usb 3-1: config index 0 descriptor too short (expected 19492, got 36)
[  735.765591][ T6139] usb 3-1: config 0 has too many interfaces: 36, using maximum allowed: 32
[  735.769173][ T6139] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 36
[  735.772845][ T6139] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  735.777161][ T6139] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  735.780892][ T6139] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  735.787971][ T6139] usb 3-1: New USB device found, idVendor=046d, idProduct=c225, bcdDevice= 0.00
[  735.791587][ T6139] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  735.797342][ T6139] usb 3-1: config 0 descriptor??
[  736.240571][ T6139] lg-g15 0003:046D:C225.001D: item fetching failed at offset 1/5
[  736.246710][ T6139] lg-g15 0003:046D:C225.001D: probe with driver lg-g15 failed with error -22
[  736.456146][ T9441] usb 3-1: USB disconnect, device number 12
[  737.036163][T23898] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6963'.
[  737.374776][  T793] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  737.462389][   T10] IPVS: starting estimator thread 0...
[  737.566545][T23916] IPVS: using max 67 ests per chain, 160800 per kthread
[  737.573323][  T793] usb 3-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7
[  737.576628][  T793] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  737.581606][  T793] usb 3-1: Product: syz
[  737.583062][  T793] usb 3-1: Manufacturer: syz
[  737.584446][  T793] usb 3-1: SerialNumber: syz
[  737.589085][  T793] usb 3-1: config 0 descriptor??
[  737.954991][T23914] loop5: detected capacity change from 0 to 32768
[  738.025936][  T793] usb 3-1: f81604_write: reg: 105 data: 8a failed: -EPROTO
[  738.029372][  T793] f81604 3-1:0.0: Setting termination of CH#0 failed: -EPROTO
[  738.032305][  T793] f81604 3-1:0.0: probe with driver f81604 failed with error -71
[  738.046282][  T793] usb 3-1: USB disconnect, device number 13
[  738.536542][T23928] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6975'.
[  738.541241][T23928] chnl_net:caif_netlink_parms(): no params data found
[  738.919488][T23936] netlink: 508 bytes leftover after parsing attributes in process `syz.2.6980'.
[  740.553184][T23988] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6992'.
[  740.556142][T23988] netlink: 75 bytes leftover after parsing attributes in process `syz.1.6992'.
[  740.725027][ T5897] usb 3-1: new low-speed USB device number 14 using dummy_hcd
[  740.812715][T23926] Set syz1 is full, maxelem 65536 reached
[  740.871918][T24002] loop5: detected capacity change from 0 to 2048
[  740.878045][T24002] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found!
[  740.897124][T24002] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  740.909090][ T5897] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  740.913331][ T5897] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  740.921152][ T5897] usb 3-1: config 0 descriptor??
[  741.580965][ T5897] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  741.585361][ T5897] asix 3-1:0.0: probe with driver asix failed with error -71
[  741.591746][ T5897] usb 3-1: USB disconnect, device number 14
[  742.426314][ T5897] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  742.439780][T24060] trusted_key: encrypted_key: key user:syz not found
[  742.772961][ T5897] usb 3-1: Using ep0 maxpacket: 8
[  742.780803][ T5897] usb 3-1: unable to get BOS descriptor or descriptor too short
[  742.785247][ T5897] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  742.788871][ T5897] usb 3-1: config 1 has no interface number 1
[  742.791318][ T5897] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  742.799118][ T5897] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  742.802673][ T5897] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  742.805968][ T5897] usb 3-1: Product: syz
[  742.807812][ T5897] usb 3-1: Manufacturer: syz
[  742.809722][ T5897] usb 3-1: SerialNumber: syz
[  743.056292][ T5897] usb 3-1: 2:1: invalid format type 0x1002 is detected, processed as PCM
[  743.059769][ T5897] usb 3-1: 2:1 : sample bitwidth 65 in over sample bytes 1
[  743.062404][ T5897] usb 3-1: 2:1 : invalid channels 0
[  743.070904][ T5897] usb 3-1: USB disconnect, device number 15
[  743.570545][T24086] ieee802154 phy1 wpan1: encryption failed: -22
[  743.666954][T24094] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  743.666954][T24094] The task syz.1.7035 (24094) triggered the difference, watch for misbehavior.
[  743.703263][T24095] loop5: detected capacity change from 0 to 4096
[  743.808963][T24117] loop5: detected capacity change from 0 to 128
[  743.821930][T24117] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  743.826262][T24117] ext4 filesystem being mounted at /93/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  743.856361][T23030] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  743.964602][T24138] netlink: 'syz.5.7044': attribute type 2 has an invalid length.
[  743.970457][T24138] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7044'.
[  744.041640][T24146] delete_channel: no stack
[  744.043541][T24145] delete_channel: no stack
[  744.204609][T24164] loop2: detected capacity change from 0 to 256
[  744.284610][T24171] netlink: 244 bytes leftover after parsing attributes in process `syz.2.7061'.
[  744.456153][T24184] loop5: detected capacity change from 0 to 256
[  744.461468][T24184] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  744.569100][   T10] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  744.731977][   T10] usb 3-1: unable to get BOS descriptor or descriptor too short
[  744.736781][   T10] usb 3-1: config 66 interface 0 altsetting 16 bulk endpoint 0x7 has invalid maxpacket 16
[  744.741046][   T10] usb 3-1: config 66 interface 0 has no altsetting 0
[  744.747392][   T10] usb 3-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=a4.95
[  744.751417][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  744.754693][   T10] usb 3-1: Product: syz
[  744.756416][   T10] usb 3-1: Manufacturer: syz
[  744.758452][   T10] usb 3-1: SerialNumber: syz
[  744.764366][T24174] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  744.991816][   T10] ati_remote2 3-1:66.0: ati_remote2_probe(): interface 1 must have an endpoint
[  745.000961][   T10] usb 3-1: USB disconnect, device number 16
[  745.924757][T24208] loop5: detected capacity change from 0 to 32768
[  745.935522][T24225] bridge0: port 2(bridge_slave_1) entered disabled state
[  745.960462][T24208] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  746.002539][T24208] XFS (loop5): Ending clean mount
[  746.003292][T24236] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  746.007888][T24208] XFS (loop5): Quotacheck needed: Please wait.
[  746.109658][T24208] XFS (loop5): Quotacheck: Done.
[  746.132118][T24240] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  746.159780][T23030] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  746.594594][T24248] loop5: detected capacity change from 0 to 32768
[  746.642471][T24248] bcachefs (loop5): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  746.642494][T24248]   allowing incompatible features above 0.0: (unknown version)
[  746.642501][T24248]   features: 
[  746.655832][T24248] bcachefs (loop5): Using encoding defined by superblock: utf8-12.1.0
[  746.658393][T24248] bcachefs (loop5): initializing new filesystem
[  746.668835][T24248] bcachefs (loop5): going read-write
[  746.678225][T24248] bcachefs (loop5): marking superblocks
[  746.703708][T24248] bcachefs (loop5): initializing freespace
[  746.711156][T24248] bcachefs (loop5): done initializing freespace
[  746.716094][T24248] bcachefs (loop5): reading snapshots table
[  746.719916][T24248] bcachefs (loop5): reading snapshots done
[  746.756021][T24248] bcachefs (loop5): done starting filesystem
[  746.841670][T23030] bcachefs (loop5): shutting down
[  746.843847][T23030] bcachefs (loop5): going read-only
[  746.849366][T23030] bcachefs (loop5): finished waiting for writes to stop
[  746.854978][T23030] bcachefs (loop5): flushing journal and stopping allocators, journal seq 2
[  746.924344][T23030] bcachefs (loop5): flushing journal and stopping allocators complete, journal seq 3
[  746.929176][T23030] bcachefs (loop5): clean shutdown complete, journal seq 4
[  746.933144][T23030] bcachefs (loop5): marking filesystem clean
[  746.953886][T23030] bcachefs (loop5): shutdown complete
[  748.920350][ T9441] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  749.253596][ T9441] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  749.258571][ T9441] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  749.266814][ T9441] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  749.270861][ T9441] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  749.276883][ T9441] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  749.280564][ T9441] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  749.372331][ T9441] usb 3-1: config 0 descriptor??
[  749.823140][ T9441] plantronics 0003:047F:FFFF.001E: ignoring exceeding usage max
[  749.835185][ T9441] plantronics 0003:047F:FFFF.001E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  749.912877][T24320] loop5: detected capacity change from 0 to 256
[  749.923510][T24320] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea0b8, utbl_chksum : 0x7319d30d)
[  750.062231][T24324] loop5: detected capacity change from 0 to 2048
[  750.095500][T24324] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  750.128259][T24324] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[  750.136716][T24324] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 23 with error 28
[  750.142481][T24324] EXT4-fs (loop5): This should not happen!! Data will be lost
[  750.142481][T24324] 
[  750.146102][T24324] EXT4-fs (loop5): Total free blocks count 0
[  750.148500][T24324] EXT4-fs (loop5): Free/Dirty block details
[  750.151157][T24324] EXT4-fs (loop5): free_blocks=66060288
[  750.153257][T24324] EXT4-fs (loop5): dirty_blocks=48
[  750.155444][T24324] EXT4-fs (loop5): Block reservation details
[  750.158033][T24324] EXT4-fs (loop5): i_reserved_data_blocks=3
[  750.166929][T24323] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  750.358738][T24335] netlink: 'syz.5.7121': attribute type 9 has an invalid length.
[  750.362579][T24335] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7121'.
[  751.968390][T24367] loop5: detected capacity change from 0 to 40427
[  751.972683][T24367] F2FS-fs (loop5): Wrong NAT boundary, start(2560) end(3584) blocks(512)
[  751.976094][T24367] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  751.986408][T24367] F2FS-fs (loop5): invalid crc value
[  752.067426][T24367] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  752.073264][T24367] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  752.078857][T24367] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  752.103651][T24373] loop2: detected capacity change from 0 to 32768
[  752.111014][T24373] XFS: noikeep mount option is deprecated.
[  752.111932][   T33] audit: type=1800 audit(1756262233.974:251): pid=24367 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.7136" name="file1" dev="loop5" ino=10 res=0 errno=0
[  752.145137][T24373] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  752.157809][T23030] syz-executor: attempt to access beyond end of device
[  752.157809][T23030] loop5: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  752.172331][T23030] CPU: 0 UID: 0 PID: 23030 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  752.172357][T23030] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  752.172367][T23030] Call Trace:
[  752.172376][T23030]  <TASK>
[  752.172384][T23030]  dump_stack_lvl+0x189/0x250
[  752.172410][T23030]  ? __pfx_dump_stack_lvl+0x10/0x10
[  752.172446][T23030]  ? __pfx_queue_work_on+0x10/0x10
[  752.172487][T23030]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  752.172508][T23030]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  752.172536][T23030]  f2fs_handle_critical_error+0x37c/0x540
[  752.172562][T23030]  f2fs_write_end_io+0x886/0xb60
[  752.172591][T23030]  __submit_merged_bio+0x27a/0x6a0
[  752.172608][T23030]  ? up_write+0x1c4/0x420
[  752.172629][T23030]  __submit_merged_write_cond+0x44c/0x530
[  752.172653][T23030]  f2fs_sync_node_pages+0x1479/0x15e0
[  752.172704][T23030]  ? __pfx_f2fs_sync_node_pages+0x10/0x10
[  752.172749][T23030]  ? f2fs_write_checkpoint+0xe43/0x1df0
[  752.172769][T23030]  ? up_write+0x1c4/0x420
[  752.172782][T23030]  ? do_raw_spin_unlock+0x4d/0x240
[  752.172802][T23030]  f2fs_write_checkpoint+0xe6f/0x1df0
[  752.172832][T23030]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  752.172882][T23030]  ? kill_f2fs_super+0x298/0x6c0
[  752.172901][T23030]  kill_f2fs_super+0x2c3/0x6c0
[  752.172919][T23030]  ? __pfx_kill_f2fs_super+0x10/0x10
[  752.172931][T23030]  ? radix_tree_delete_item+0x2b6/0x400
[  752.172957][T23030]  ? shrinker_free+0x2ce/0x3e0
[  752.172976][T23030]  deactivate_locked_super+0xbc/0x130
[  752.172995][T23030]  cleanup_mnt+0x425/0x4c0
[  752.173010][T23030]  ? lockdep_hardirqs_on+0x9c/0x150
[  752.173031][T23030]  task_work_run+0x1d4/0x260
[  752.173053][T23030]  ? __pfx_task_work_run+0x10/0x10
[  752.173068][T23030]  ? __x64_sys_umount+0x122/0x160
[  752.173089][T23030]  ? exit_to_user_mode_loop+0x40/0x110
[  752.173110][T23030]  exit_to_user_mode_loop+0xec/0x110
[  752.173128][T23030]  do_syscall_64+0x2bd/0x3b0
[  752.173146][T23030]  ? lockdep_hardirqs_on+0x9c/0x150
[  752.173162][T23030]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  752.173175][T23030]  ? exc_page_fault+0x9f/0xf0
[  752.173194][T23030]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  752.173206][T23030] RIP: 0033:0x7f7e9678ff17
[  752.173223][T23030] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  752.173234][T23030] RSP: 002b:00007ffdff018fb8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  752.173250][T23030] RAX: 0000000000000000 RBX: 00007f7e96811c05 RCX: 00007f7e9678ff17
[  752.173259][T23030] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdff019070
[  752.173266][T23030] RBP: 00007ffdff019070 R08: 0000000000000000 R09: 0000000000000000
[  752.173274][T23030] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffdff01a100
[  752.173285][T23030] R13: 00007f7e96811c05 R14: 00000000000af9c9 R15: 00007ffdff01a140
[  752.173307][T23030]  </TASK>
[  752.173496][T23030] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  752.219914][T24373] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  752.221009][T23030] CPU: 1 UID: 0 PID: 23030 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  752.221023][T23030] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  752.221029][T23030] Call Trace:
[  752.221034][T23030]  <TASK>
[  752.221038][T23030]  dump_stack_lvl+0x189/0x250
[  752.221057][T23030]  ? __pfx_dump_stack_lvl+0x10/0x10
[  752.221068][T23030]  ? __pfx_queue_work_on+0x10/0x10
[  752.221078][T23030]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  752.221091][T23030]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  752.221108][T23030]  f2fs_handle_critical_error+0x37c/0x540
[  752.221125][T23030]  f2fs_write_end_io+0x886/0xb60
[  752.221144][T23030]  __submit_merged_bio+0x27a/0x6a0
[  752.221156][T23030]  ? up_write+0x1c4/0x420
[  752.221169][T23030]  __submit_merged_write_cond+0x44c/0x530
[  752.221185][T23030]  f2fs_sync_node_pages+0x1479/0x15e0
[  752.221208][T23030]  ? __pfx_f2fs_sync_node_pages+0x10/0x10
[  752.221235][T23030]  ? f2fs_write_checkpoint+0xe43/0x1df0
[  752.221246][T23030]  ? up_write+0x1c4/0x420
[  752.221254][T23030]  ? do_raw_spin_unlock+0x4d/0x240
[  752.221267][T23030]  f2fs_write_checkpoint+0xe6f/0x1df0
[  752.221290][T23030]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  752.221324][T23030]  ? kill_f2fs_super+0x298/0x6c0
[  752.221336][T23030]  kill_f2fs_super+0x2c3/0x6c0
[  752.221347][T23030]  ? __pfx_kill_f2fs_super+0x10/0x10
[  752.221354][T23030]  ? radix_tree_delete_item+0x2b6/0x400
[  752.221371][T23030]  ? shrinker_free+0x2ce/0x3e0
[  752.221383][T23030]  deactivate_locked_super+0xbc/0x130
[  752.221396][T23030]  cleanup_mnt+0x425/0x4c0
[  752.221407][T23030]  ? lockdep_hardirqs_on+0x9c/0x150
[  752.221421][T23030]  task_work_run+0x1d4/0x260
[  752.221436][T23030]  ? __pfx_task_work_run+0x10/0x10
[  752.221473][T23030]  ? __x64_sys_umount+0x122/0x160
[  752.221489][T23030]  ? exit_to_user_mode_loop+0x40/0x110
[  752.221505][T23030]  exit_to_user_mode_loop+0xec/0x110
[  752.221517][T23030]  do_syscall_64+0x2bd/0x3b0
[  752.221529][T23030]  ? lockdep_hardirqs_on+0x9c/0x150
[  752.221540][T23030]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  752.221549][T23030]  ? exc_page_fault+0x9f/0xf0
[  752.221562][T23030]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  752.221569][T23030] RIP: 0033:0x7f7e9678ff17
[  752.221580][T23030] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  752.221588][T23030] RSP: 002b:00007ffdff018fb8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  752.221598][T23030] RAX: 0000000000000000 RBX: 00007f7e96811c05 RCX: 00007f7e9678ff17
[  752.221603][T23030] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdff019070
[  752.221608][T23030] RBP: 00007ffdff019070 R08: 0000000000000000 R09: 0000000000000000
[  752.221613][T23030] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffdff01a100
[  752.221618][T23030] R13: 00007f7e96811c05 R14: 00000000000af9c9 R15: 00007ffdff01a140
[  752.221634][T23030]  </TASK>
[  752.221637][T23030] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  752.336964][T24373] XFS (loop2): Starting recovery (logdev: internal)
[  752.356300][T24373] XFS (loop2): Ending recovery (logdev: internal)
[  752.394661][ T5897] usb 3-1: USB disconnect, device number 17
[  752.464456][T21613] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  752.496627][    C1] vkms_vblank_simulate: vblank timer overrun
[  753.340483][T24413] loop2: detected capacity change from 0 to 32768
[  753.346290][T24413] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.7153 (24413)
[  753.354507][T24413] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  753.359012][T24413] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm
[  753.362283][T24413] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  753.528017][T24413] BTRFS info (device loop2): rebuilding free space tree
[  753.544400][T24413] BTRFS info (device loop2): disabling free space tree
[  753.546893][T24413] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  753.550343][T24413] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  753.555797][T24413] BTRFS info (device loop2): setting nodatasum
[  753.558030][T24413] BTRFS info (device loop2): setting nodatacow
[  753.560597][T24413] BTRFS info (device loop2): enabling ssd optimizations
[  753.563702][T24413] BTRFS info (device loop2): turning off barriers
[  753.565800][T24413] BTRFS info (device loop2): enabling disk space caching
[  753.568117][T24413] BTRFS info (device loop2): force clearing of disk cache
[  753.570525][T24413] BTRFS info (device loop2): doing ref verification
[  753.572694][T24413] BTRFS info (device loop2): max_inline set to 4096
[  753.897919][T24445] syz.5.7160: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  753.908710][T24445] CPU: 0 UID: 0 PID: 24445 Comm: syz.5.7160 Not tainted syzkaller #0 PREEMPT(full) 
[  753.908734][T24445] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  753.908745][T24445] Call Trace:
[  753.908755][T24445]  <TASK>
[  753.908763][T24445]  dump_stack_lvl+0x189/0x250
[  753.908789][T24445]  ? __pfx_rcu_read_unlock_special+0x10/0x10
[  753.908816][T24445]  ? __pfx_dump_stack_lvl+0x10/0x10
[  753.908837][T24445]  ? __pfx__printk+0x10/0x10
[  753.908858][T24445]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  753.908878][T24445]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  753.908903][T24445]  warn_alloc+0x214/0x310
[  753.908926][T24445]  ? stack_depot_save_flags+0x40/0x860
[  753.908972][T24445]  ? __pfx_warn_alloc+0x10/0x10
[  753.908998][T24445]  ? kasan_save_track+0x4f/0x80
[  753.909018][T24445]  ? xskq_create+0x56/0x170
[  753.909038][T24445]  ? xsk_init_queue+0xb0/0x110
[  753.909054][T24445]  ? xsk_setsockopt+0x4dc/0x8d0
[  753.909070][T24445]  ? do_sock_setsockopt+0x17c/0x1b0
[  753.909084][T24445]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  753.909096][T24445]  ? do_syscall_64+0xfa/0x3b0
[  753.909116][T24445]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  753.909137][T24445]  __vmalloc_node_range_noprof+0x125/0x12f0
[  753.909183][T24445]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  753.909203][T24445]  ? xskq_create+0x56/0x170
[  753.909223][T24445]  ? __kasan_kmalloc+0x93/0xb0
[  753.909245][T24445]  vmalloc_user_noprof+0xad/0xf0
[  753.909265][T24445]  ? xskq_create+0xbf/0x170
[  753.909284][T24445]  xskq_create+0xbf/0x170
[  753.909333][T24445]  xsk_init_queue+0xb0/0x110
[  753.909357][T24445]  xsk_setsockopt+0x4dc/0x8d0
[  753.909378][T24445]  ? __pfx_xsk_setsockopt+0x10/0x10
[  753.909395][T24445]  ? __pfx_aa_sk_perm+0x10/0x10
[  753.909419][T24445]  ? aa_sock_opt_perm+0xff/0x1b0
[  753.909435][T24445]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  753.909452][T24445]  ? __pfx_xsk_setsockopt+0x10/0x10
[  753.909469][T24445]  do_sock_setsockopt+0x17c/0x1b0
[  753.909487][T24445]  __x64_sys_setsockopt+0x13f/0x1b0
[  753.909505][T24445]  do_syscall_64+0xfa/0x3b0
[  753.909524][T24445]  ? lockdep_hardirqs_on+0x9c/0x150
[  753.909544][T24445]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  753.909569][T24445]  ? exc_page_fault+0x9f/0xf0
[  753.909592][T24445]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  753.909606][T24445] RIP: 0033:0x7f7e9678ebe9
[  753.909621][T24445] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  753.909635][T24445] RSP: 002b:00007f7e976c8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  753.909653][T24445] RAX: ffffffffffffffda RBX: 00007f7e969b5fa0 RCX: 00007f7e9678ebe9
[  753.909665][T24445] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003
[  753.909675][T24445] RBP: 00007f7e96811e19 R08: 0000000000000004 R09: 0000000000000000
[  753.909684][T24445] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  753.909695][T24445] R13: 00007f7e969b6038 R14: 00007f7e969b5fa0 R15: 00007ffdff019d28
[  753.909720][T24445]  </TASK>
[  753.909822][T24445] Mem-Info:
[  754.069012][T24445] active_anon:12320 inactive_anon:0 isolated_anon:0
[  754.069012][T24445]  active_file:15522 inactive_file:39103 isolated_file:0
[  754.069012][T24445]  unevictable:1768 dirty:243 writeback:0
[  754.069012][T24445]  slab_reclaimable:12068 slab_unreclaimable:68360
[  754.069012][T24445]  mapped:18409 shmem:9582 pagetables:1082
[  754.069012][T24445]  sec_pagetables:0 bounce:0
[  754.069012][T24445]  kernel_misc_reclaimable:0
[  754.069012][T24445]  free:248127 free_pcp:15432 free_cma:0
[  754.093197][T24445] Node 0 active_anon:25140kB inactive_anon:0kB active_file:44912kB inactive_file:148628kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:37104kB dirty:368kB writeback:0kB shmem:16924kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7536kB pagetables:2448kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  754.114010][T24445] Node 1 active_anon:24140kB inactive_anon:0kB active_file:17176kB inactive_file:7784kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:36532kB dirty:604kB writeback:0kB shmem:21404kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:9648kB pagetables:1880kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  754.133065][T24445] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  754.148237][T24445] lowmem_reserve[]: 0 811 811 811 811
[  754.150178][T24445] Node 0 DMA32 free:168632kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:25140kB inactive_anon:0kB active_file:44912kB inactive_file:148628kB unevictable:3536kB writepending:368kB present:1556484kB managed:830928kB mlocked:0kB bounce:0kB free_pcp:32500kB local_pcp:15112kB free_cma:0kB
[  754.168830][T24445] lowmem_reserve[]: 0 0 0 0 0
[  754.171733][T24445] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  754.187531][T24445] lowmem_reserve[]: 0 0 854 854 854
[  754.190506][T24445] Node 1 Normal free:349900kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:24140kB inactive_anon:0kB active_file:17176kB inactive_file:7784kB unevictable:3536kB writepending:604kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:29564kB local_pcp:21972kB free_cma:0kB
[  754.206365][T24445] lowmem_reserve[]: 0 0 0 0 0
[  754.208091][T24445] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  754.213390][T24445] Node 0 DMA32: 2*4kB (ME) 500*8kB (UME) 361*16kB (UME) 402*32kB (UME) 169*64kB (UM) 238*128kB (UM) 111*256kB (UM) 33*512kB (UM) 14*1024kB (UM) 4*2048kB (M) 9*4096kB (UM) = 168632kB
[  754.221322][T24445] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[  754.230696][T24445] Node 1 Normal: 197*4kB (UE) 111*8kB (UME) 308*16kB (UME) 490*32kB (UM) 341*64kB (UME) 55*128kB (UM) 99*256kB (UME) 68*512kB (UME) 57*1024kB (UM) 12*2048kB (UME) 38*4096kB (UM) = 349900kB
[  754.239531][T24445] Node 0 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB
[  754.243764][T24445] Node 1 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB
[  754.247903][T24445] 64135 total pagecache pages
[  754.249581][T24445] 0 pages in swap cache
[  754.252226][T24445] Free swap  = 124996kB
[  754.253740][T24445] Total swap = 124996kB
[  754.257532][T24445] 786301 pages RAM
[  754.258871][T24445] 0 pages HighMem/MovableOnly
[  754.261854][T24445] 241337 pages reserved
[  754.263492][T24445] 0 pages cma reserved
[  754.304244][T24451] loop5: detected capacity change from 0 to 128
[  754.321430][T24451] qnx6: superblock #1 checksum error
[  755.468047][T24413] btrfs: Unknown parameter '18446744073709551615@LqE: 艞t}0$'
[  755.559813][T24456] loop5: detected capacity change from 0 to 512
[  755.564099][T24456] EXT4-fs: journaled quota format not specified
[  755.578235][T24456] loop5: detected capacity change from 0 to 8
[  755.597782][T21613] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  756.774075][T24480] netlink: 'syz.1.7176': attribute type 9 has an invalid length.
[  756.848419][T24482] loop5: detected capacity change from 0 to 1024
[  756.883979][T17047] hfsplus: b-tree write err: -5, ino 4
[  757.213352][T24513] mac80211_hwsim hwsim28 wlan0: entered promiscuous mode
[  757.227783][T24513] A link change request failed with some changes committed already. Interface wlan0 may have been left with an inconsistent configuration, please check.
[  758.264718][T24551] loop5: detected capacity change from 0 to 1024
[  758.268160][T24551] EXT4-fs: Ignoring removed nomblk_io_submit option
[  758.272116][T24551] EXT4-fs: Ignoring removed nobh option
[  758.293735][T24551] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  758.309376][   T33] audit: type=1800 audit(1756262239.773:252): pid=24551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.7207" name="file1" dev="loop5" ino=15 res=0 errno=0
[  758.390274][T24558] (unnamed net_device) (uninitialized): down delay (2) is not a multiple of miimon (100), value rounded to 0 ms
[  758.396639][T24558] (unnamed net_device) (uninitialized): peer notification delay (8) is not a multiple of miimon (100), value rounded to 0 ms
[  758.444186][T24558] 8021q: adding VLAN 0 to HW filter on device bond5
[  758.527523][T23030] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  758.801693][T24583] syz_tun: entered allmulticast mode
[  758.819540][T24583] syz_tun: left allmulticast mode
[  758.850550][T24585] openvswitch: netlink: Key 4 has unexpected len 0 expected 12
[  759.030599][T24596] netlink: 'syz.5.7227': attribute type 2 has an invalid length.
[  760.090113][T24632] loop2: detected capacity change from 0 to 128
[  760.096144][T24632] minix: Unknown parameter 'G8F;Qt[o\1C{Z4&\5R}7:ҝD0򙐃'
[  760.433731][ T5897] usb 6-1: new full-speed USB device number 7 using dummy_hcd
[  760.598775][ T5897] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0
[  760.602617][ T5897] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB3, changing to 0x83
[  760.608439][ T5897] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  760.617991][ T5897] usb 6-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.10
[  760.621491][ T5897] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  760.626160][ T5897] usb 6-1: Product: syz
[  760.627825][ T5897] usb 6-1: Manufacturer: syz
[  760.629686][ T5897] usb 6-1: SerialNumber: syz
[  760.633745][ T5897] usb 6-1: config 0 descriptor??
[  760.640858][ T5897] radioshark2 6-1:0.0: Invalid radioSHARK2 device
[  760.643474][ T5897] radioshark2 6-1:0.0: probe with driver radioshark2 failed with error -22
[  760.647201][ T5897] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[  760.870051][T23150] usb 6-1: USB disconnect, device number 7
[  761.237925][T24686] loop2: detected capacity change from 0 to 1024
[  761.240545][T24686] EXT4-fs: Ignoring removed nomblk_io_submit option
[  761.243139][T24686] EXT4-fs: Mount option(s) incompatible with ext3
[  762.375909][T24701] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7271'.
[  762.396129][T24700] bridge5: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms)
[  762.639958][T24720] loop5: detected capacity change from 0 to 1024
[  762.703156][T24722] loop5: detected capacity change from 0 to 1024
[  762.705924][T24722] EXT4-fs: inline encryption not supported
[  762.707831][T24722] EXT4-fs: Ignoring removed bh option
[  762.737497][T24722] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  762.771155][T24714] loop2: detected capacity change from 0 to 32768
[  762.775744][T24714] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.7278 (24714)
[  762.783868][T24714] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  762.788416][T24714] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  762.810186][T23030] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  762.902109][T24714] BTRFS info (device loop2): allowing degraded mounts
[  762.914013][T24714] BTRFS info (device loop2): turning off barriers
[  762.916691][T24714] BTRFS info (device loop2): turning on async discard
[  762.924760][T24714] BTRFS info (device loop2): enabling free space tree
[  762.927524][T24714] BTRFS info (device loop2): doing ref verification
[  762.930125][T24714] BTRFS info (device loop2): ignoring bad roots
[  762.933178][T24714] BTRFS info (device loop2): force zlib compression, level 3
[  763.033607][T21613] BTRFS info (device loop2): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  763.195925][   T33] audit: type=1804 audit(1756262244.338:253): pid=24749 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.7287" name="/newroot/172/file1" dev="fuse" ino=1 res=1 errno=0
[  763.205140][   T33] audit: type=1800 audit(1756262244.347:254): pid=24749 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.7287" name="/" dev="fuse" ino=1 res=0 errno=0
[  763.222921][   T33] audit: type=1800 audit(1756262244.366:255): pid=24748 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.7287" name="/" dev="fuse" ino=1 res=0 errno=0
[  763.514881][T24751] loop2: detected capacity change from 0 to 32768
[  763.549797][T24751] ERROR: (device loop2): dbAllocAG: unable to allocate blocks
[  763.549797][T24751] 
[  763.557085][T24751] ERROR: (device loop2): remounting filesystem as read-only
[  764.080328][T24769] loop5: detected capacity change from 0 to 32768
[  764.088044][T24769] XFS (loop5): invalid log iosize: 1 [not 12-30]
[  764.096073][T24785] loop2: detected capacity change from 0 to 1024
[  764.207028][T24790] loop2: detected capacity change from 0 to 512
[  764.247707][T24790] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  764.256067][T24790] ext4 filesystem being mounted at /325/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  764.332775][T21613] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  764.559475][T24812] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7316'.
[  764.700778][   T33] audit: type=1400 audit(1756262245.750:256): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=24819 comm="syz.5.7320"
[  765.428015][ T5896] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  765.592609][ T5896] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  765.596158][ T5896] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  765.603619][ T5896] usb 6-1: Product: syz
[  765.610818][ T5896] usb 6-1: Manufacturer: syz
[  765.612373][ T5896] usb 6-1: SerialNumber: syz
[  765.879505][T24831] loop2: detected capacity change from 0 to 40427
[  765.883390][T24831] F2FS-fs (loop2): build fault injection rate: 771
[  765.893230][T24831] F2FS-fs (loop2): invalid crc value
[  765.938013][T24831] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  765.942617][T24831] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  765.976939][T21613] syz-executor: attempt to access beyond end of device
[  765.976939][T21613] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  765.981589][T21613] CPU: 1 UID: 0 PID: 21613 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  765.981603][T21613] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  765.981608][T21613] Call Trace:
[  765.981613][T21613]  <TASK>
[  765.981617][T21613]  dump_stack_lvl+0x189/0x250
[  765.981636][T21613]  ? __pfx_dump_stack_lvl+0x10/0x10
[  765.981646][T21613]  ? __pfx_queue_work_on+0x10/0x10
[  765.981656][T21613]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  765.981669][T21613]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  765.981686][T21613]  f2fs_handle_critical_error+0x37c/0x540
[  765.981703][T21613]  f2fs_write_end_io+0x886/0xb60
[  765.981721][T21613]  __submit_merged_bio+0x27a/0x6a0
[  765.981737][T21613]  __submit_merged_write_cond+0x255/0x530
[  765.981752][T21613]  f2fs_write_data_pages+0x261d/0x3000
[  765.981783][T21613]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  765.981794][T21613]  ? is_bpf_text_address+0x26/0x2b0
[  765.981838][T21613]  ? ktime_get+0x3e/0x1f0
[  765.981849][T21613]  ? seqcount_lockdep_reader_access+0x15f/0x1c0
[  765.981858][T21613]  ? __pfx_seqcount_lockdep_reader_access+0x10/0x10
[  765.981869][T21613]  ? css_rstat_updated+0x23a/0x4f0
[  765.981884][T21613]  ? __lock_acquire+0xab9/0xd20
[  765.981903][T21613]  ? do_raw_spin_lock+0x121/0x290
[  765.981919][T21613]  ? do_raw_spin_unlock+0x4d/0x240
[  765.981929][T21613]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  765.981942][T21613]  do_writepages+0x32e/0x550
[  765.981976][T21613]  ? do_raw_spin_unlock+0x4d/0x240
[  765.981990][T21613]  filemap_fdatawrite+0x199/0x240
[  765.982003][T21613]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  765.982039][T21613]  ? do_raw_spin_unlock+0x4d/0x240
[  765.982051][T21613]  f2fs_sync_dirty_inodes+0x31f/0x830
[  765.982068][T21613]  f2fs_write_checkpoint+0x95a/0x1df0
[  765.982088][T21613]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  765.982118][T21613]  ? f2fs_stop_gc_thread+0x7f/0xb0
[  765.982127][T21613]  ? kfree+0x18e/0x440
[  765.982139][T21613]  ? kill_f2fs_super+0x298/0x6c0
[  765.982151][T21613]  kill_f2fs_super+0x2c3/0x6c0
[  765.982182][T21613]  ? __pfx_kill_f2fs_super+0x10/0x10
[  765.982190][T21613]  ? radix_tree_delete_item+0x2b6/0x400
[  765.982207][T21613]  ? shrinker_free+0x2ce/0x3e0
[  765.982219][T21613]  deactivate_locked_super+0xbc/0x130
[  765.982232][T21613]  cleanup_mnt+0x425/0x4c0
[  765.982242][T21613]  ? lockdep_hardirqs_on+0x9c/0x150
[  765.982257][T21613]  task_work_run+0x1d4/0x260
[  765.982271][T21613]  ? __pfx_task_work_run+0x10/0x10
[  765.982280][T21613]  ? __x64_sys_umount+0x122/0x160
[  765.982294][T21613]  ? exit_to_user_mode_loop+0x40/0x110
[  765.982310][T21613]  exit_to_user_mode_loop+0xec/0x110
[  765.982322][T21613]  do_syscall_64+0x2bd/0x3b0
[  765.982334][T21613]  ? lockdep_hardirqs_on+0x9c/0x150
[  765.982345][T21613]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  765.982352][T21613]  ? exc_page_fault+0x9f/0xf0
[  765.982365][T21613]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  765.982372][T21613] RIP: 0033:0x7fecfdd8ff17
[  765.982382][T21613] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  765.982389][T21613] RSP: 002b:00007ffefb51b538 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  765.982398][T21613] RAX: 0000000000000000 RBX: 00007fecfde11c05 RCX: 00007fecfdd8ff17
[  765.982404][T21613] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffefb51b5f0
[  765.982409][T21613] RBP: 00007ffefb51b5f0 R08: 0000000000000000 R09: 0000000000000000
[  765.982414][T21613] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffefb51c680
[  765.982419][T21613] R13: 00007fecfde11c05 R14: 00000000000b2c56 R15: 00007ffefb51c6c0
[  765.982434][T21613]  </TASK>
[  766.054698][ T5896] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPROTO
[  766.063279][T21613] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  766.066386][ T5896] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  766.134652][ T5896] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  766.148274][ T5896] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71
[  766.157941][ T5896] usb 6-1: USB disconnect, device number 8
[  766.413356][T24841] loop2: detected capacity change from 0 to 256
[  766.416845][T24841] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  766.421848][T24841] exFAT-fs (loop2): Medium has reported failures. Some data may be lost.
[  766.428640][T24841] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x2d0d25cc, utbl_chksum : 0xe619d30d)
[  766.823190][T24860] program syz.5.7336 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  766.863587][T24858] loop2: detected capacity change from 0 to 8192
[  766.967808][T24866] loop5: detected capacity change from 0 to 256
[  766.983815][T24866] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d)
[  767.039705][T24870] binder: 24869:24870 ioctl 400c620e 200000000000 returned -22
[  768.007671][T24893] program syz.2.7351 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  768.030811][T24897] netlink: 'syz.1.7353': attribute type 10 has an invalid length.
[  768.039447][T24897] 8021q: adding VLAN 0 to HW filter on device batadv0
[  768.062943][T24897] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  768.096222][T24897] netlink: 'syz.1.7353': attribute type 10 has an invalid length.
[  768.096830][T24903] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7356'.
[  768.105788][T24903] netlink: 43 bytes leftover after parsing attributes in process `syz.2.7356'.
[  768.108611][T24897] netlink: 40 bytes leftover after parsing attributes in process `syz.1.7353'.
[  768.113310][T24897] batadv0: entered promiscuous mode
[  768.115313][T24903] netlink: 'syz.2.7356': attribute type 5 has an invalid length.
[  768.115368][T24903] netlink: 43 bytes leftover after parsing attributes in process `syz.2.7356'.
[  768.118696][T24897] batadv0: entered allmulticast mode
[  768.132003][T24897] bond0: (slave batadv0): Releasing backup interface
[  768.168842][T24897] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  768.190078][T24909] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(9)
[  768.192745][T24909] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  768.211089][T24909] vhci_hcd vhci_hcd.0: Device attached
[  768.214548][T24909] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  768.225789][T24909] vhci_hcd vhci_hcd.0: pdev(2) rhport(2) sockfd(13)
[  768.227854][T24909] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  768.232590][T24909] vhci_hcd vhci_hcd.0: Device attached
[  768.237415][T24909] vhci_hcd vhci_hcd.0: pdev(2) rhport(3) sockfd(15)
[  768.239666][T24909] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  768.245810][T24909] vhci_hcd vhci_hcd.0: Device attached
[  768.265824][T24909] vhci_hcd vhci_hcd.0: pdev(2) rhport(4) sockfd(17)
[  768.267981][T24909] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  768.275977][T24909] vhci_hcd vhci_hcd.0: Device attached
[  768.283142][T24909] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  768.287861][T24909] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  768.306832][T24916] vhci_hcd: connection closed
[  768.310700][T24912] vhci_hcd: connection closed
[  768.311042][T24910] vhci_hcd: connection closed
[  768.314879][T24918] vhci_hcd: connection closed
[  768.317789][   T12] vhci_hcd: stop threads
[  768.356270][   T12] vhci_hcd: release socket
[  768.358188][   T12] vhci_hcd: disconnect device
[  768.363385][   T12] vhci_hcd: stop threads
[  768.366105][   T12] vhci_hcd: release socket
[  768.367972][   T12] vhci_hcd: disconnect device
[  768.374224][   T12] vhci_hcd: stop threads
[  768.385055][   T12] vhci_hcd: release socket
[  768.387144][   T12] vhci_hcd: disconnect device
[  768.448756][   T12] vhci_hcd: stop threads
[  768.450419][   T12] vhci_hcd: release socket
[  768.457189][   T12] vhci_hcd: disconnect device
[  768.479408][T24915] loop5: detected capacity change from 0 to 32768
[  768.494540][ T5896] vhci_hcd: vhci_device speed not set
[  768.746963][T24915] bcachefs (loop5): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,str_hash=crc32c,noacl,usrquota,grpquota,nojournal_transaction_names,allocator_stuck_timeout=256
[  768.746991][T24915]   allowing incompatible features above 0.0: (unknown version)
[  768.747001][T24915]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  768.766682][T24915] bcachefs (loop5): Using encoding defined by superblock: utf8-12.1.0
[  768.769271][T24915] bcachefs (loop5): initializing new filesystem
[  768.778433][T24915] bcachefs (loop5): going read-write
[  768.784468][T24915] bcachefs (loop5): marking superblocks
[  768.812843][T24915] bcachefs (loop5): initializing freespace
[  768.817637][T24915] bcachefs (loop5): done initializing freespace
[  768.830848][T24915] bcachefs (loop5): reading snapshots table
[  768.842790][T24915] bcachefs (loop5): reading snapshots done
[  768.881693][T24915] bcachefs (loop5): done starting filesystem
[  768.967663][T23030] bcachefs (loop5): shutting down
[  768.969741][T23030] bcachefs (loop5): going read-only
[  768.972509][T23030] bcachefs (loop5): finished waiting for writes to stop
[  768.976664][T23030] bcachefs (loop5): flushing journal and stopping allocators, journal seq 2
[  769.071121][T23030] bcachefs (loop5): flushing journal and stopping allocators complete, journal seq 3
[  769.085098][T23030] bcachefs (loop5): clean shutdown complete, journal seq 4
[  769.089295][T23030] bcachefs (loop5): marking filesystem clean
[  769.130482][T23030] bcachefs (loop5): shutdown complete
[  769.451722][T24949] loop2: detected capacity change from 0 to 256
[  769.460639][T24949] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x46ae1815, utbl_chksum : 0xe619d30d)
[  769.465407][T24949] exFAT-fs (loop2): bogus allocation bitmap size(need : 2, cur : 17179869186)
[  769.544753][T24949] loop2: detected capacity change from 256 to 64
[  769.558034][T24949]  loop2:
[  770.284487][ T5855] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  770.296150][ T5855] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  770.301437][ T5855] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  770.309359][ T5855] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  770.314491][ T5855] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  770.368146][T24963] wg1 speed is unknown, defaulting to 1000
[  770.623141][T24963] chnl_net:caif_netlink_parms(): no params data found
[  770.790887][T24980] loop5: detected capacity change from 0 to 1024
[  770.805132][T24980] EXT4-fs: Ignoring removed bh option
[  770.830768][T24963] bridge0: port 1(bridge_slave_0) entered blocking state
[  770.832215][T24980] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback.
[  770.833105][T24963] bridge0: port 1(bridge_slave_0) entered disabled state
[  770.841745][T24963] bridge_slave_0: entered allmulticast mode
[  770.845262][T24963] bridge_slave_0: entered promiscuous mode
[  770.850646][T24963] bridge0: port 2(bridge_slave_1) entered blocking state
[  770.853016][T24963] bridge0: port 2(bridge_slave_1) entered disabled state
[  770.853631][T24980] overlayfs: invalid origin (00000079000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000)
[  770.855426][T24963] bridge_slave_1: entered allmulticast mode
[  770.868649][T24963] bridge_slave_1: entered promiscuous mode
[  770.925236][T24963] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  770.938990][T24963] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  770.995622][T23030] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-001000000000.
[  771.002443][T24963] team0: Port device team_slave_0 added
[  771.032519][T24963] team0: Port device team_slave_1 added
[  771.068246][T24963] batman_adv: batadv0: Adding interface: batadv_slave_0
[  771.071063][T24963] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  771.083569][T24963] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  771.089609][T24963] batman_adv: batadv0: Adding interface: batadv_slave_1
[  771.092947][T24963] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  771.102734][T24963] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  771.154178][T24963] hsr_slave_0: entered promiscuous mode
[  771.163037][T24963] hsr_slave_1: entered promiscuous mode
[  771.170745][T24963] debugfs: 'hsr0' already exists in 'hsr'
[  771.176521][T24963] Cannot create hsr debugfs directory
[  771.465898][T24963] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  771.538541][ T5855] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  771.548834][ T5855] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  771.566452][ T5855] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  771.579789][ T5855] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  771.589972][ T5855] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  771.634276][T24963] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  771.705972][T24987] wg1 speed is unknown, defaulting to 1000
[  771.771054][T24963] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  771.887909][T24963] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  772.077965][T24987] chnl_net:caif_netlink_parms(): no params data found
[  772.171780][T24963] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  772.188160][T24963] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  772.204200][T24963] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  772.223754][T24963] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  772.287757][T24987] bridge0: port 1(bridge_slave_0) entered blocking state
[  772.295433][T24987] bridge0: port 1(bridge_slave_0) entered disabled state
[  772.298672][T24987] bridge_slave_0: entered allmulticast mode
[  772.308555][T24987] bridge_slave_0: entered promiscuous mode
[  772.323919][T24987] bridge0: port 2(bridge_slave_1) entered blocking state
[  772.326920][T24987] bridge0: port 2(bridge_slave_1) entered disabled state
[  772.330058][T24987] bridge_slave_1: entered allmulticast mode
[  772.338348][T24987] bridge_slave_1: entered promiscuous mode
[  772.394691][T24987] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  772.407868][T25022] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  772.408895][T24987] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  772.410782][T25022] IPv6: NLM_F_CREATE should be set when creating new route
[  772.417851][T25022] IPv6: NLM_F_CREATE should be set when creating new route
[  772.472100][T24987] team0: Port device team_slave_0 added
[  772.480280][T24987] team0: Port device team_slave_1 added
[  772.519872][T24987] batman_adv: batadv0: Adding interface: batadv_slave_0
[  772.523211][T24987] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  772.533719][ T5236] Bluetooth: hci0: command tx timeout
[  772.542366][T24987] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  772.550998][T24987] batman_adv: batadv0: Adding interface: batadv_slave_1
[  772.553822][T24987] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  772.563950][T24987] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  772.629797][T24987] hsr_slave_0: entered promiscuous mode
[  772.637988][T24987] hsr_slave_1: entered promiscuous mode
[  772.641016][T24987] debugfs: 'hsr0' already exists in 'hsr'
[  772.643971][T24987] Cannot create hsr debugfs directory
[  772.821377][T24963] 8021q: adding VLAN 0 to HW filter on device bond0
[  772.846573][T24963] 8021q: adding VLAN 0 to HW filter on device team0
[  772.855233][T17104] bridge0: port 1(bridge_slave_0) entered blocking state
[  772.857901][T17104] bridge0: port 1(bridge_slave_0) entered forwarding state
[  772.888084][T17104] bridge0: port 2(bridge_slave_1) entered blocking state
[  772.890620][T17104] bridge0: port 2(bridge_slave_1) entered forwarding state
[  773.030365][T24963] 8021q: adding VLAN 0 to HW filter on device batadv0
[  773.202757][T24987] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  773.208474][T24987] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  773.222316][T24987] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  773.228992][T24987] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  773.303595][T24963] veth0_vlan: entered promiscuous mode
[  773.322706][T24963] veth1_vlan: entered promiscuous mode
[  773.374440][T24963] veth0_macvtap: entered promiscuous mode
[  773.397725][T24963] veth1_macvtap: entered promiscuous mode
[  773.410076][T24987] 8021q: adding VLAN 0 to HW filter on device bond0
[  773.431272][T24987] 8021q: adding VLAN 0 to HW filter on device team0
[  773.446957][T17032] bridge0: port 1(bridge_slave_0) entered blocking state
[  773.450061][T17032] bridge0: port 1(bridge_slave_0) entered forwarding state
[  773.459263][T24963] batman_adv: batadv0: Interface activated: batadv_slave_0
[  773.468626][T17032] bridge0: port 2(bridge_slave_1) entered blocking state
[  773.471443][T17032] bridge0: port 2(bridge_slave_1) entered forwarding state
[  773.483187][T24963] batman_adv: batadv0: Interface activated: batadv_slave_1
[  773.521064][T11542] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  773.524617][T11542] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  773.527719][T11542] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  773.538525][T11542] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  773.658188][T17092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  773.663164][T17092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  773.698028][T17092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  773.700537][T17092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  773.756722][T25062] netlink: 32 bytes leftover after parsing attributes in process `syz.4.7377'.
[  773.769459][ T5897] IPVS: starting estimator thread 0...
[  773.868715][T25063] IPVS: using max 40 ests per chain, 96000 per kthread
[  773.891495][T24987] 8021q: adding VLAN 0 to HW filter on device batadv0
[  773.894870][ T5236] Bluetooth: hci2: command tx timeout
[  773.907130][T25073] loop4: detected capacity change from 0 to 512
[  773.911100][T25073] EXT4-fs (loop4): fragment/cluster size (4096) != block size (1024)
[  774.027867][T25080] loop4: detected capacity change from 0 to 1764
[  774.149358][T25089] loop4: detected capacity change from 0 to 256
[  774.271696][T25090] exFAT-fs (loop4): start_clu is invalid cluster(0x400)
[  774.280860][T24987] veth0_vlan: entered promiscuous mode
[  774.320437][T24987] veth1_vlan: entered promiscuous mode
[  774.446423][T24987] veth0_macvtap: entered promiscuous mode
[  774.463390][T24987] veth1_macvtap: entered promiscuous mode
[  774.554947][T24987] batman_adv: batadv0: Interface activated: batadv_slave_0
[  774.609283][T24987] batman_adv: batadv0: Interface activated: batadv_slave_1
[  774.647879][   T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  774.657644][   T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  774.688179][   T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  774.717461][   T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  774.748603][ T5236] Bluetooth: hci0: command tx timeout
[  774.966539][T17093] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  774.978077][T17093] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  775.088948][T17093] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  775.096367][T17093] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  775.843511][T25106] loop6: detected capacity change from 0 to 32768
[  775.862903][T25106] ocfs2: Slot 0 on device (7,6) was already allocated to this node!
[  775.872228][T25106] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  776.131085][ T5236] Bluetooth: hci2: command tx timeout
[  776.498928][T24987] ocfs2: Unmounting device (7,6) on (node local)
[  776.925326][T25122] loop6: detected capacity change from 0 to 32768
[  776.972664][ T5236] Bluetooth: hci0: command tx timeout
[  777.157522][T25122] bcachefs (loop6): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,checksum_err_retry_nr=12,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,degraded=yes,nojournal_transaction_names
[  777.157545][T25122]   allowing incompatible features above 0.0: (unknown version)
[  777.157554][T25122]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  777.184931][T25142] loop4: detected capacity change from 0 to 736
[  777.188561][T25122] bcachefs (loop6): Using encoding defined by superblock: utf8-12.1.0
[  777.191780][T25122] bcachefs (loop6): initializing new filesystem
[  777.203406][T25122] bcachefs (loop6): going read-write
[  777.252070][T25142] ISOFS: Logical zone size(0) < hardware blocksize(1024)
[  777.460018][T25122] bcachefs (loop6): marking superblocks
[  777.569715][T25122] bcachefs (loop6): initializing freespace
[  777.595963][T25122] bcachefs (loop6): done initializing freespace
[  777.606314][T25122] bcachefs (loop6): reading snapshots table
[  777.609942][T25122] bcachefs (loop6): reading snapshots done
[  777.610726][T25149] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  777.614763][T25149] overlayfs: failed to set xattr on upper
[  777.616990][T25149] overlayfs: ...falling back to redirect_dir=nofollow.
[  777.620164][T25149] overlayfs: ...falling back to index=off.
[  777.622674][T25149] overlayfs: ...falling back to uuid=null.
[  777.627384][T25149] overlayfs: NFS export requires "index=on", falling back to nfs_export=off.
[  777.651213][T25122] bcachefs (loop6): done starting filesystem
[  777.796848][T24987] bcachefs (loop6): shutting down
[  777.801385][T24987] bcachefs (loop6): going read-only
[  777.803629][T24987] bcachefs (loop6): finished waiting for writes to stop
[  777.812776][T24987] bcachefs (loop6): flushing journal and stopping allocators, journal seq 3
[  777.910094][T24987] bcachefs (loop6): flushing journal and stopping allocators complete, journal seq 4
[  777.963241][T24987] bcachefs (loop6): clean shutdown complete, journal seq 5
[  777.967164][T24987] bcachefs (loop6): marking filesystem clean
[  778.013935][T24987] bcachefs (loop6): shutdown complete
[  778.350183][ T5236] Bluetooth: hci2: command tx timeout
[  778.745284][T25169] loop4: detected capacity change from 0 to 40427
[  778.796085][T25169] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  778.802849][T25169] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  779.188895][T25180] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7446'.
[  779.197302][ T5236] Bluetooth: hci0: command tx timeout
[  779.779339][T25193] loop4: detected capacity change from 0 to 40427
[  779.791293][T25193] F2FS-fs (loop4): invalid crc value
[  779.926324][T25193] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  779.930404][T25193] F2FS-fs (loop4): Start checkpoint disabled!
[  779.956893][T25193] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  780.072714][T17047] kworker/u9:36: attempt to access beyond end of device
[  780.072714][T17047] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  780.078336][T17047] CPU: 0 UID: 0 PID: 17047 Comm: kworker/u9:36 Not tainted syzkaller #0 PREEMPT(full) 
[  780.078356][T17047] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  780.078366][T17047] Workqueue: writeback wb_workfn (flush-7:4)
[  780.078388][T17047] Call Trace:
[  780.078394][T17047]  <TASK>
[  780.078402][T17047]  dump_stack_lvl+0x189/0x250
[  780.078425][T17047]  ? __pfx_dump_stack_lvl+0x10/0x10
[  780.078440][T17047]  ? __pfx_queue_work_on+0x10/0x10
[  780.078453][T17047]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  780.078472][T17047]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  780.078500][T17047]  f2fs_handle_critical_error+0x37c/0x540
[  780.078527][T17047]  f2fs_write_end_io+0x886/0xb60
[  780.078558][T17047]  __submit_merged_bio+0x27a/0x6a0
[  780.078582][T17047]  __submit_merged_write_cond+0x255/0x530
[  780.078604][T17047]  f2fs_write_data_pages+0x261d/0x3000
[  780.078651][T17047]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  780.078683][T17047]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  780.078726][T17047]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  780.078745][T17047]  ? look_up_lock_class+0x74/0x170
[  780.078771][T17047]  ? trace_f2fs_writepages+0x7f/0x200
[  780.078788][T17047]  ? f2fs_write_node_pages+0x478/0x6e0
[  780.078809][T17047]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  780.078836][T17047]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  780.078885][T17047]  do_writepages+0x32e/0x550
[  780.078907][T17047]  ? reacquire_held_locks+0x127/0x1d0
[  780.078919][T17047]  ? writeback_sb_inodes+0x384/0x1010
[  780.078942][T17047]  __writeback_single_inode+0x145/0xff0
[  780.078961][T17047]  ? do_raw_spin_unlock+0x4d/0x240
[  780.078979][T17047]  writeback_sb_inodes+0x6c7/0x1010
[  780.079020][T17047]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  780.079074][T17047]  ? rcu_is_watching+0x15/0xb0
[  780.079100][T17047]  wb_writeback+0x43b/0xaf0
[  780.079123][T17047]  ? queue_io+0x2f1/0x590
[  780.079143][T17047]  ? __pfx_wb_writeback+0x10/0x10
[  780.079169][T17047]  ? _raw_spin_unlock_irq+0x23/0x50
[  780.079199][T17047]  wb_workfn+0x409/0xef0
[  780.079228][T17047]  ? __pfx_wb_workfn+0x10/0x10
[  780.079247][T17047]  ? __lock_acquire+0xab9/0xd20
[  780.079275][T17047]  ? process_scheduled_works+0x9ef/0x17b0
[  780.079295][T17047]  ? _raw_spin_unlock_irq+0x23/0x50
[  780.079308][T17047]  ? process_scheduled_works+0x9ef/0x17b0
[  780.079319][T17047]  ? process_scheduled_works+0x9ef/0x17b0
[  780.079332][T17047]  process_scheduled_works+0xae1/0x17b0
[  780.079371][T17047]  ? __pfx_process_scheduled_works+0x10/0x10
[  780.079400][T17047]  worker_thread+0x8a0/0xda0
[  780.079427][T17047]  ? __kthread_parkme+0x7b/0x200
[  780.079451][T17047]  kthread+0x711/0x8a0
[  780.079472][T17047]  ? __pfx_worker_thread+0x10/0x10
[  780.079485][T17047]  ? __pfx_kthread+0x10/0x10
[  780.079502][T17047]  ? _raw_spin_unlock_irq+0x23/0x50
[  780.079518][T17047]  ? lockdep_hardirqs_on+0x9c/0x150
[  780.079535][T17047]  ? __pfx_kthread+0x10/0x10
[  780.079552][T17047]  ret_from_fork+0x3fc/0x770
[  780.079569][T17047]  ? __pfx_ret_from_fork+0x10/0x10
[  780.079590][T17047]  ? __switch_to_asm+0x39/0x70
[  780.079606][T17047]  ? __switch_to_asm+0x33/0x70
[  780.079621][T17047]  ? __pfx_kthread+0x10/0x10
[  780.079639][T17047]  ret_from_fork_asm+0x1a/0x30
[  780.079673][T17047]  </TASK>
[  780.079680][T17047] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  780.247486][ T7152] block nbd1: Receive control failed (result -32)
[  780.565036][ T5236] Bluetooth: hci2: command tx timeout
[  780.622262][T25229] netlink: 'syz.4.7459': attribute type 4 has an invalid length.
[  781.853971][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[  783.035969][T25266] netlink: 20 bytes leftover after parsing attributes in process `syz.6.7480'.
[  783.277382][T25272] loop6: detected capacity change from 0 to 32768
[  783.338461][T25272] bcachefs (loop6): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 255,nocow
[  783.338480][T25272]   allowing incompatible features above 0.0: (unknown version)
[  783.338488][T25272]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  783.360335][T25272] bcachefs (loop6): Using encoding defined by superblock: utf8-12.1.0
[  783.363641][T25272] bcachefs (loop6): initializing new filesystem
[  783.375455][T25272] bcachefs (loop6): going read-write
[  783.386251][T25272] bcachefs (loop6): marking superblocks
[  783.417967][T25272] bcachefs (loop6): initializing freespace
[  783.443570][T25272] bcachefs (loop6): done initializing freespace
[  783.459665][T25272] bcachefs (loop6): reading snapshots table
[  783.462488][T25272] bcachefs (loop6): reading snapshots done
[  783.503645][T25272] bcachefs (loop6):  loop6: Superblock write was silently dropped! (seq 0 expected 42)
[  783.510753][T25272] bcachefs (loop6): done starting filesystem
[  783.752842][T25287] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7485'.
[  783.956876][T24987] bcachefs (loop6): shutting down
[  783.959018][T24987] bcachefs (loop6): going read-only
[  783.969235][T24987] bcachefs (loop6): finished waiting for writes to stop
[  783.979371][T24987] bcachefs (loop6): flushing journal and stopping allocators, journal seq 83
[  784.126964][T24987] bcachefs (loop6): flushing journal and stopping allocators complete, journal seq 83
[  784.135783][T24987] bcachefs (loop6): clean shutdown complete, journal seq 84
[  784.139328][T24987] bcachefs (loop6): marking filesystem clean
[  784.164009][T24987] bcachefs (loop6): shutdown complete
[  784.238414][T25305] macsec1: entered promiscuous mode
[  784.513059][   T33] audit: type=1326 audit(1756262264.271:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25309 comm="syz.1.7497" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f510458ebe9 code=0x0
[  784.664647][T25316] loop4: detected capacity change from 0 to 2048
[  784.674354][T25317] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  784.684049][   T33] audit: type=1800 audit(1756262264.440:258): pid=25316 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.7500" name="file1" dev="loop4" ino=15 res=0 errno=0
[  784.990454][T25321] loop4: detected capacity change from 0 to 32768
[  784.994271][T25321] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.7502 (25321)
[  785.002590][T25321] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  785.006625][T25321] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm
[  785.118985][T17032] BTRFS warning (device loop4): checksum verify failed on logical 5255168 mirror 1 wanted 0xfb1f6e020f432298b4a52da632de437bf5385334fdecf5c029d88fb87c749c2a found 0x57eb1c953b66ffa745d8db30fbb86b573ff0ca2b4e16ed53ff62ad5aa631bf6f level 1
[  785.135941][T25321] BTRFS warning (device loop4): failed to read fs tree: -5
[  785.213042][T25321] BTRFS error (device loop4): open_ctree failed: -5
[  785.547873][T25344] program syz.4.7507 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  785.668435][T25355] netdevsim netdevsim4 netdevsim0: entered allmulticast mode
[  785.895131][T25368] loop4: detected capacity change from 0 to 1024
[  785.903577][T25368] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  790.551578][T25468] /dev/nbd1: Can't lookup blockdev
[  790.918583][T25474] loop4: detected capacity change from 0 to 128
[  790.929017][T25474] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  790.942058][T25474] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  791.027283][T25476] netlink: 92 bytes leftover after parsing attributes in process `syz.4.7563'.
[  791.167367][T25480] 9pnet: p9_errstr2errno: server reported unknown error @c0xffffffffffffffff
[  792.445804][T25508] 8021q: adding VLAN 0 to HW filter on device team0
[  792.456101][T25508] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  792.488793][T25508] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  792.913873][T25516] loop6: detected capacity change from 0 to 4096
[  792.932076][T25516] ntfs3(loop6): Mark volume as dirty due to NTFS errors
[  792.944363][T25516] ntfs3(loop6): Failed to load $Extend (-22).
[  792.947049][T25516] ntfs3(loop6): Failed to initialize $Extend.
[  794.971516][T25539] loop4: detected capacity change from 0 to 40427
[  794.983311][T25539] F2FS-fs (loop4): build fault injection rate: 14
[  794.987652][T25539] F2FS-fs (loop4): build fault injection type: 0x3bfe8c
[  794.992310][T25539] F2FS-fs (loop4): invalid crc value
[  795.002040][    C0] F2FS-fs (loop4): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  795.013025][    C0] F2FS-fs (loop4): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  795.068676][T25539] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  795.072710][T25539] F2FS-fs (loop4): inject page alloc in f2fs_grab_cache_folio of __get_meta_folio+0x157/0x4f0
[  795.079410][T25539] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  795.088603][T25539] F2FS-fs (loop4): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x1d9/0xa40
[  795.094310][T25539] F2FS-fs (loop4): inject dquot initialize in f2fs_dquot_initialize of f2fs_new_inode+0x509/0x1050
[  795.100014][T25539] F2FS-fs (loop4): inject no more block in inc_valid_node_count of f2fs_new_node_folio+0x18b/0xa40
[  795.127126][T24963] syz-executor: attempt to access beyond end of device
[  795.127126][T24963] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  795.132484][T24963] CPU: 1 UID: 0 PID: 24963 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  795.132503][T24963] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  795.132513][T24963] Call Trace:
[  795.132520][T24963]  <TASK>
[  795.132528][T24963]  dump_stack_lvl+0x189/0x250
[  795.132556][T24963]  ? __pfx_dump_stack_lvl+0x10/0x10
[  795.132573][T24963]  ? __pfx_queue_work_on+0x10/0x10
[  795.132589][T24963]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  795.132608][T24963]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  795.132630][T24963]  f2fs_handle_critical_error+0x37c/0x540
[  795.132665][T24963]  f2fs_write_end_io+0x886/0xb60
[  795.132698][T24963]  __submit_merged_bio+0x27a/0x6a0
[  795.132720][T24963]  __submit_merged_write_cond+0x255/0x530
[  795.132741][T24963]  f2fs_write_data_pages+0x261d/0x3000
[  795.132816][T24963]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  795.132870][T24963]  ? ktime_get+0x3e/0x1f0
[  795.132887][T24963]  ? ktime_get+0x3e/0x1f0
[  795.132904][T24963]  ? seqcount_lockdep_reader_access+0x15f/0x1c0
[  795.132921][T24963]  ? __pfx_seqcount_lockdep_reader_access+0x10/0x10
[  795.132947][T24963]  ? __lock_acquire+0xab9/0xd20
[  795.132972][T24963]  ? do_raw_spin_lock+0x121/0x290
[  795.133001][T24963]  ? do_raw_spin_unlock+0x4d/0x240
[  795.133018][T24963]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  795.133038][T24963]  do_writepages+0x32e/0x550
[  795.133064][T24963]  ? do_raw_spin_unlock+0x4d/0x240
[  795.133085][T24963]  filemap_fdatawrite+0x199/0x240
[  795.133105][T24963]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  795.133161][T24963]  ? do_raw_spin_unlock+0x4d/0x240
[  795.133182][T24963]  f2fs_sync_dirty_inodes+0x31f/0x830
[  795.133212][T24963]  f2fs_write_checkpoint+0x95a/0x1df0
[  795.133241][T24963]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  795.133299][T24963]  ? kill_f2fs_super+0x298/0x6c0
[  795.133320][T24963]  kill_f2fs_super+0x2c3/0x6c0
[  795.133340][T24963]  ? __pfx_kill_f2fs_super+0x10/0x10
[  795.133350][T24963]  ? radix_tree_delete_item+0x2b6/0x400
[  795.133373][T24963]  ? shrinker_free+0x2ce/0x3e0
[  795.133394][T24963]  deactivate_locked_super+0xbc/0x130
[  795.133414][T24963]  cleanup_mnt+0x425/0x4c0
[  795.133454][T24963]  ? lockdep_hardirqs_on+0x9c/0x150
[  795.133473][T24963]  task_work_run+0x1d4/0x260
[  795.133493][T24963]  ? __pfx_task_work_run+0x10/0x10
[  795.133508][T24963]  ? __x64_sys_umount+0x122/0x160
[  795.133532][T24963]  ? exit_to_user_mode_loop+0x40/0x110
[  795.133553][T24963]  exit_to_user_mode_loop+0xec/0x110
[  795.133572][T24963]  do_syscall_64+0x2bd/0x3b0
[  795.133590][T24963]  ? lockdep_hardirqs_on+0x9c/0x150
[  795.133608][T24963]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  795.133622][T24963]  ? exc_page_fault+0x9f/0xf0
[  795.133647][T24963]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  795.133661][T24963] RIP: 0033:0x7f467d58ff17
[  795.133676][T24963] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  795.133688][T24963] RSP: 002b:00007ffc75db3c18 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  795.133704][T24963] RAX: 0000000000000000 RBX: 00007f467d611c05 RCX: 00007f467d58ff17
[  795.133712][T24963] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc75db3cd0
[  795.133720][T24963] RBP: 00007ffc75db3cd0 R08: 0000000000000000 R09: 0000000000000000
[  795.133729][T24963] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc75db4d60
[  795.133738][T24963] R13: 00007f467d611c05 R14: 00000000000b96db R15: 00007ffc75db4da0
[  795.133764][T24963]  </TASK>
[  795.134888][T24963] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  795.480071][T25554] loop4: detected capacity change from 0 to 4096
[  795.492814][T25556] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  795.745693][T25560] loop4: detected capacity change from 0 to 32768
[  795.794527][T25560] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,str_hash=crc32c,noacl,usrquota,grpquota,nojournal_transaction_names,allocator_stuck_timeout=256
[  795.794551][T25560]   allowing incompatible features above 0.0: (unknown version)
[  795.794561][T25560]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  795.811748][T25560] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0
[  795.817081][T25560] bcachefs (loop4): initializing new filesystem
[  795.829996][T25560] bcachefs (loop4): going read-write
[  795.844115][T25560] bcachefs (loop4): marking superblocks
[  795.871274][T25560] bcachefs (loop4): initializing freespace
[  795.878787][T25560] bcachefs (loop4): done initializing freespace
[  795.890680][T25560] bcachefs (loop4): reading snapshots table
[  795.893163][T25560] bcachefs (loop4): reading snapshots done
[  795.935033][T25560] bcachefs (loop4): done starting filesystem
[  795.986445][   T33] audit: type=1800 audit(1756262275.010:259): pid=25560 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.7599" name="file1" dev="loop4" ino=4098 res=0 errno=0
[  796.058169][   T33] audit: type=1804 audit(1756262275.085:260): pid=25589 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.7599" name="/newroot/55/file0/file1" dev="loop4" ino=4098 res=1 errno=0
[  796.546533][   T33] audit: type=1800 audit(1756262275.534:261): pid=25589 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.7599" name="file1" dev="loop4" ino=4098 res=0 errno=0
[  796.605374][T24963] bcachefs (loop4): shutting down
[  796.622273][T24963] bcachefs (loop4): going read-only
[  796.624474][T24963] bcachefs (loop4): finished waiting for writes to stop
[  796.630700][T24963] bcachefs (loop4): flushing journal and stopping allocators, journal seq 128
[  796.638601][T25610] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  796.642224][T24963] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 129
[  796.651217][T24963] bcachefs (loop4): clean shutdown complete, journal seq 130
[  796.654886][T24963] bcachefs (loop4): marking filesystem clean
[  796.721399][T24963] bcachefs (loop4): shutdown complete
[  796.740348][T25619] loop6: detected capacity change from 0 to 16
[  796.773602][T25619] erofs (device loop6): mounted with root inode @ nid 36.
[  796.779990][T25619] erofs (device loop6): readahead error at folio 4 @ nid 36
[  796.788843][T25619] erofs (device loop6): readahead error at folio 2 @ nid 36
[  796.796666][T25619] syz.6.7624: attempt to access beyond end of device
[  796.796666][T25619] loop6: rw=524288, sector=13478624032, nr_sectors = 64 limit=16
[  796.803384][T25619] syz.6.7624: attempt to access beyond end of device
[  796.803384][T25619] loop6: rw=0, sector=13478624032, nr_sectors = 8 limit=16
[  796.822137][T25619] erofs (device loop6): read error -5 @ 0 of nid 36
[  796.825266][T25619] erofs (device loop6): failed to readdir of logical block 0 of nid 36
[  796.840740][T25619] syz.6.7624: attempt to access beyond end of device
[  796.840740][T25619] loop6: rw=0, sector=48, nr_sectors = 16 limit=16
[  796.847507][T25619] erofs (device loop6): read error -5 @ 43 of nid 36
[  796.856312][T25619] syz.6.7624: attempt to access beyond end of device
[  796.856312][T25619] loop6: rw=0, sector=13478624032, nr_sectors = 8 limit=16
[  796.865567][T25619] erofs (device loop6): read error -5 @ 0 of nid 36
[  796.876387][T25619] erofs (device loop6): failed to readdir of logical block 0 of nid 36
[  797.243951][T25625] netlink: 32 bytes leftover after parsing attributes in process `syz.6.7627'.
[  797.357027][T25629] overlayfs: failed to get index nlink (file0/file2, err=-61)
[  798.383471][T25661] overlayfs: failed to clone upperpath
[  799.436757][T25692] overlayfs: failed to clone lowerpath
[  799.450291][T25692] overlayfs: failed to clone upperpath
[  799.836056][T25696] loop4: detected capacity change from 0 to 4096
[  800.063122][T25702] loop4: detected capacity change from 0 to 2048
[  800.076814][T25702] NILFS (loop4): invalid segment: Checksum error in super root
[  800.079907][T25702] NILFS (loop4): error -22 while loading super root
[  800.173467][T25706] loop4: detected capacity change from 0 to 2048
[  800.190526][T25706] NILFS (loop4): Invalid checkpoint (checkpoint number=2)
[  800.195321][T25706] NILFS (loop4): error -22 while loading last checkpoint (checkpoint number=2)
[  800.513787][T25724] loop4: detected capacity change from 0 to 164
[  800.528809][T25724] Unsupported NM flag settings (8)
[  800.626450][T25728] loop4: detected capacity change from 0 to 512
[  800.639217][T25728] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  800.644725][T25728] ext4 filesystem being mounted at /72/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  800.663589][T25728] EXT4-fs error (device loop4): ext4_empty_dir:3086: inode #12: block 32: comm syz.4.7673: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0
[  800.671673][T25728] EXT4-fs (loop4): Remounting filesystem read-only
[  800.675638][T25728] EXT4-fs warning (device loop4): ext4_empty_dir:3089: inode #12: comm syz.4.7673: directory missing '.'
[  800.702276][T24963] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  802.153308][T25757] loop4: detected capacity change from 0 to 512
[  802.185854][T25757] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  802.191056][T25757] ext4 filesystem being mounted at /75/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  802.212363][T25758] loop6: detected capacity change from 0 to 4096
[  802.216540][T24963] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  802.216681][T25758] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512).
[  802.252874][    C1] vkms_vblank_simulate: vblank timer overrun
[  802.272904][T25758] ntfs3(loop6): This driver is compiled without CONFIG_NTFS3_64BIT_CLUSTER (like windows driver).
[  802.272904][T25758] Volume contains 64 bits run: vcn 0, lcn ffffe00000009000, len 13.
[  802.272904][T25758] Activate CONFIG_NTFS3_64BIT_CLUSTER to process this case
[  802.300262][T25758] ntfs3(loop6): Mark volume as dirty due to NTFS errors
[  802.303545][T25758] ntfs3(loop6): Failed to load $Secure (-95).
[  802.306226][T25758] ntfs3(loop6): Failed to initialize $Secure (-95).
[  802.365238][T25768] netlink: 'syz.4.7690': attribute type 1 has an invalid length.
[  802.471857][T25774] loop6: detected capacity change from 0 to 4096
[  802.494992][T25779] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  802.499331][T25774] NILFS (loop6): bad btree root (ino=2): level = 0, flags = 0x9, nchildren = 0
[  802.507106][T25774] NILFS (loop6): error -5 getting root inode
[  802.551633][T25781] netlink: 'syz.4.7696': attribute type 2 has an invalid length.
[  802.597984][T25781] bridge: entered promiscuous mode
[  802.628688][T25787] netlink: 'syz.1.7699': attribute type 2 has an invalid length.
[  802.723339][T25797] binder: 25796:25797 unknown command 0
[  802.725267][T25797] binder: 25796:25797 ioctl c0306201 200000000080 returned -22
[  802.797420][T25801] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7707'.
[  802.874245][T25807] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (65)
[  803.020786][T25791] loop4: detected capacity change from 0 to 32768
[  803.034425][T25791] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.7700 (25791)
[  803.043086][T25791] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  803.050187][T25791] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm
[  803.112157][T25818] 
[  803.112762][T25791] BTRFS info (device loop4): enabling ssd optimizations
[  803.116461][T25791] BTRFS info (device loop4): enabling free space tree
[  803.352247][T24963] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  803.360244][   T12] BTRFS info (device loop4): qgroup scan completed (inconsistency flag cleared)
[  804.071827][    C1] vkms_vblank_simulate: vblank timer overrun
[  804.228371][    C1] vkms_vblank_simulate: vblank timer overrun
[  805.430285][T25864] loop4: detected capacity change from 0 to 2364
[  805.532063][T25868] netlink: 64 bytes leftover after parsing attributes in process `syz.4.7726'.
[  805.630362][T25874] tmpfs: Group quota block hardlimit too large.
[  807.724352][T25909] netlink: 'syz.6.7745': attribute type 12 has an invalid length.
[  807.771439][T25913] loop6: detected capacity change from 0 to 512
[  807.777373][T25914] loop4: detected capacity change from 0 to 64
[  807.777645][T25913] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  807.779836][T25914] Non-string source
[  807.799142][T25913] EXT4-fs error (device loop6): ext4_orphan_get:1392: inode #15: comm syz.6.7746: casefold flag without casefold feature
[  807.804643][T25913] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.7746: couldn't read orphan inode 15 (err -117)
[  807.811591][T25913] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  807.873750][T24987] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  808.014626][T25927] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  808.918862][T25947] loop4: detected capacity change from 0 to 512
[  808.927038][T25947] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  808.931760][T25947] ext4 filesystem being mounted at /100/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  808.973961][T24963] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  810.504697][T25963] loop4: detected capacity change from 0 to 32768
[  810.556053][T25963] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  810.556077][T25963]   allowing incompatible features above 0.0: (unknown version)
[  810.556087][T25963]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  810.651853][T25963] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0
[  810.655042][T25963] bcachefs (loop4): initializing new filesystem
[  810.666112][T25963] bcachefs (loop4): going read-write
[  810.678036][T25963] bcachefs (loop4): marking superblocks
[  810.716507][T25963] bcachefs (loop4): initializing freespace
[  810.723940][T25963] bcachefs (loop4): done initializing freespace
[  810.733292][T25963] bcachefs (loop4): reading snapshots table
[  810.735665][T25963] bcachefs (loop4): reading snapshots done
[  810.771490][T25963] bcachefs (loop4): done starting filesystem
[  810.844836][T24963] bcachefs (loop4): shutting down
[  810.847935][T24963] bcachefs (loop4): going read-only
[  810.850141][T24963] bcachefs (loop4): finished waiting for writes to stop
[  810.856786][T24963] bcachefs (loop4): flushing journal and stopping allocators, journal seq 2
[  810.912662][T24963] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 3
[  810.921425][T24963] bcachefs (loop4): clean shutdown complete, journal seq 4
[  810.925045][T24963] bcachefs (loop4): marking filesystem clean
[  810.951727][T24963] bcachefs (loop4): shutdown complete
[  811.489317][T25982] loop6: detected capacity change from 0 to 32768
[  811.492743][T25982] btrfs: Deprecated parameter 'usebackuproot'
[  811.495131][T25982] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  811.499509][T25982] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.7772 (25982)
[  811.511661][T25982] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  811.516391][T25982] BTRFS info (device loop6): using crc32c (crc32c-lib) checksum algorithm
[  811.575926][T25982] BTRFS info (device loop6): rebuilding free space tree
[  811.593734][T25982] BTRFS info (device loop6): allowing degraded mounts
[  811.596569][T25982] BTRFS info (device loop6): enabling ssd optimizations
[  811.599998][T25982] BTRFS info (device loop6): turning on flush-on-commit
[  811.602695][T25982] BTRFS info (device loop6): turning on sync discard
[  811.605311][T25982] BTRFS info (device loop6): enabling free space tree
[  811.608063][T25982] BTRFS info (device loop6): force clearing of disk cache
[  811.611702][T25982] BTRFS info (device loop6): trying to use backup root at mount time
[  811.614811][T25982] BTRFS info (device loop6): use lzo compression, level 0
[  811.617678][T25982] BTRFS info (device loop6): max_inline set to 0
[  811.633855][   T33] audit: type=1326 audit(1756262545.655:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25978 comm="syz.1.7770" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f510458ebe9 code=0x7fc00000
[  811.657929][T24987] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  812.078206][ T9442] libceph: connect (1)[c::]:6789 error -101
[  812.085108][ T9442] libceph: mon0 (1)[c::]:6789 connect error
[  812.094689][ T5896] libceph: connect (1)[c::]:6789 error -101
[  812.097240][ T5896] libceph: mon0 (1)[c::]:6789 connect error
[  812.382636][ T9442] libceph: connect (1)[c::]:6789 error -101
[  812.383786][ T5910] libceph: connect (1)[c::]:6789 error -101
[  812.385307][ T9442] libceph: mon0 (1)[c::]:6789 connect error
[  812.387888][ T5910] libceph: mon0 (1)[c::]:6789 connect error
[  812.556184][T26034] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7786'.
[  812.620889][T26036] netlink: 60 bytes leftover after parsing attributes in process `syz.4.7785'.
[  812.627603][T26036] unsupported nlmsg_type 40
[  812.872032][T26011] ceph: No mds server is up or the cluster is laggy
[  812.872419][T26008] ceph: No mds server is up or the cluster is laggy
[  813.079948][T26049] loop6: detected capacity change from 0 to 512
[  813.108693][T26049] EXT4-fs (loop6): corrupt root inode, run e2fsck
[  813.111352][T26049] EXT4-fs (loop6): mount failed
[  813.292835][T26063] loop6: detected capacity change from 0 to 512
[  813.300448][T26063] EXT4-fs: user quota file already specified
[  813.575238][T26079] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7803'.
[  813.585910][T26079] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7803'.
[  813.596667][T26077] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  814.199065][T26113] loop4: detected capacity change from 0 to 32768
[  814.203329][T26113] bcachefs (/dev/loop4): error reading superblock: block size (0) smaller than device block size (512)
[  814.208000][T26113] bcachefs: bch2_fs_get_tree() error: block_size_too_small
[  814.502453][T26126] loop4: detected capacity change from 0 to 512
[  814.505491][T26126] EXT4-fs: Ignoring removed nobh option
[  814.509371][T26126] EXT4-fs (loop4): Test dummy encryption mode enabled
[  814.515856][T26126] EXT4-fs error (device loop4): __ext4_iget:5464: inode #11: block 1: comm syz.4.7826: invalid block
[  814.521356][T26126] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.7826: couldn't read orphan inode 11 (err -117)
[  814.527690][T26126] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  814.563396][T24963] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  814.860267][T26130] loop4: detected capacity change from 0 to 32768
[  815.246455][T26146] netlink: 'syz.4.7835': attribute type 5 has an invalid length.
[  815.329578][T26153] loop4: detected capacity change from 0 to 2048
[  815.352159][T26155] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  815.710770][   T33] audit: type=1326 audit(1756262549.462:263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26172 comm="syz.1.7848" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f510458ebe9 code=0x0
[  816.249641][ T5876] unregister_netdevice: waiting for batadv_slave_0 to become free. Usage count = 2
[  816.253648][ T5876] ref_tracker: netdev@ffff88804623a610 has 1/1 users at
[  816.253648][ T5876]      batadv_hard_if_event+0xf0f/0x1730
[  816.253648][ T5876]      notifier_call_chain+0x1b6/0x3e0
[  816.253648][ T5876]      register_netdevice+0x1608/0x1ae0
[  816.253648][ T5876]      veth_newlink+0x5cc/0xa50
[  816.253648][ T5876]      rtnl_newlink_create+0x310/0xb00
[  816.253648][ T5876]      rtnl_newlink+0x16d6/0x1c70
[  816.253648][ T5876]      rtnetlink_rcv_msg+0x7cf/0xb70
[  816.253648][ T5876]      netlink_rcv_skb+0x208/0x470
[  816.253648][ T5876]      netlink_unicast+0x82f/0x9e0
[  816.253648][ T5876]      netlink_sendmsg+0x805/0xb30
[  816.253648][ T5876]      __sock_sendmsg+0x21c/0x270
[  816.253648][ T5876]      __sys_sendto+0x3bd/0x520
[  816.253648][ T5876]      __x64_sys_sendto+0xde/0x100
[  816.253648][ T5876]      do_syscall_64+0xfa/0x3b0
[  816.253648][ T5876]      entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  816.253648][ T5876] 

VM DIAGNOSIS:
01:43:14  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000074 RBX=0000000000000074 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000370eeb0
R8 =ffff8881081f0237 R9 =1ffff1102103e046 R10=dffffc0000000000 R11=ffffffff854f3340
R12=dffffc0000000000 R13=ffffffff99afa8e7 R14=ffffffff99def420 R15=0000000000000000
RIP=ffffffff854f33bc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f5104788580 CR3=00000000277a8000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=6161616161616161 6161616161616161
XMM06=6161616161616161 6161616161616161 XMM07=6161616161616161 6161616161616161
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007f5104612fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=e45c83b05a59da00 RBX=ffffffff819683c8 RCX=e45c83b05a59da00 RDX=0000000000000001
RSI=ffffffff8d9b77e3 RDI=ffffffff8be33680 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f9b R9 =1ffff11026cc65f3 R10=dffffc0000000000 R11=ffffed1026cc65f4
R12=ffffffff8fa38a30 R13=0000000000000001 R14=0000000000000001 R15=1ffff110200d7000
RIP=ffffffff8b79a3f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b3261fff8 CR3=0000000129b3a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffff8164cd0d ffffffff8164caf6
XMM02=ffffffff8164ce56 ffffffff8164cdcd XMM03=ffffffff8164d056 ffffffff8164d038
XMM04=ffffffff8164d4f5 ffffffff8164d49c XMM05=ffffffff8164d476 ffffffff8164d402
XMM06=ffffffff8164d2e1 ffffffff8164d290 XMM07=ffffffff8164d153 ffffffff8164d056
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007f5104612fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
