last executing test programs:

1m31.655072667s ago: executing program 2 (id=608):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x1})
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x7000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0}, 0x68)
brk(0x200000ffa000)
ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f00000000c0)={&(0x7f00009eb000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x1000, 0x1})

1m31.363136949s ago: executing program 2 (id=613):
r0 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b35, &(0x7f0000000040)={'wlan1\x00'})

1m31.314530822s ago: executing program 2 (id=614):
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket(0x1d, 0x2, 0x6)
socket$inet6_udp(0xa, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r2, 0x1, 0x4c, &(0x7f0000000000), 0x4)
sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
recvmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', <r3=>0x0})
bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r3, 0x1}, 0x18)
sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40000)

1m30.291766331s ago: executing program 2 (id=625):
syz_mount_image$hfsplus(&(0x7f00000001c0), &(0x7f0000000980)='./file1\x00', 0xc8, &(0x7f0000000a00)=ANY=[], 0x1, 0x6ac, &(0x7f0000001380)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
open_tree(0xffffffffffffffff, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
bpf$BPF_PROG_DETACH(0x8, 0x0, 0x20)
add_key$user(&(0x7f00000003c0), 0x0, &(0x7f0000000940)="a6c13c6a7c8c0074e36a3b54e9ce669b3b032f120a3cf850c51871f3c5", 0x1d, 0x0)
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0)
mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x3bdc51, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x206e)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0x800000000000003)
syz_io_uring_setup(0x3, &(0x7f0000000580)={0x0, 0xc7c9, 0x1, 0x1, 0x57}, &(0x7f0000000240), 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000fdff00000000000000000000180900000020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xe, '\x00', 0x0, @fallback=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94)
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58)
r2 = syz_open_dev$radio(0x0, 0x1, 0x2)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
ioctl$VIDIOC_G_MODULATOR(r2, 0xc0445636, 0x0)
syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000640), 0x0, 0x0)

1m30.183072129s ago: executing program 2 (id=626):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x6, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
prctl$PR_SVE_GET_VL(0x33, 0x14cd)
ioprio_set$pid(0x2, 0x0, 0x0)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0)
sendfile(r2, r2, 0x0, 0x200000)

1m30.003861371s ago: executing program 2 (id=630):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001900010000000000000000001c140000fe0000010000000008000100000401"], 0x24}}, 0x0)

1m29.78247635s ago: executing program 32 (id=630):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001900010000000000000000001c140000fe0000010000000008000100000401"], 0x24}}, 0x0)

1m20.744173523s ago: executing program 3 (id=720):
setgid(0xffffffffffffffff)

1m20.648012051s ago: executing program 3 (id=723):
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0)
mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000)
syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000)

1m20.592625964s ago: executing program 3 (id=725):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newtaction={0x64, 0x30, 0x1, 0x80000, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x5, 0x5, 0x0, 0x7}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0)

1m20.45699155s ago: executing program 3 (id=726):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x0, &(0x7f0000000140), 0x3, 0x4cd, &(0x7f0000000c80)="$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")
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0)
chroot(&(0x7f0000000000)='./file0/../file0\x00')
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x60)
getdents64(r0, 0x0, 0x22)

1m20.266320885s ago: executing program 3 (id=732):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYBLOB="05"], 0x9)
sendto$inet6(r0, &(0x7f0000000080)="eb", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000400)={0x0, 0x5, 0x1, "c5"}, 0x9)

1m20.022115886s ago: executing program 3 (id=739):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xa7c, r0}, 0x38)

1m19.872513913s ago: executing program 33 (id=739):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x50)
bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0xa7c, r0}, 0x38)

55.033760812s ago: executing program 1 (id=974):
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100001e61e410b1134200557b0102030109021b0001000000000904000001cf28fc000905822fe9"], 0x0)

53.731853706s ago: executing program 1 (id=988):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001000010028bd07000000000000000000", @ANYRES32=0x0, @ANYBLOB="211000000226000008001b00000000000500100005"], 0x30}, 0x1, 0x0, 0x0, 0x801}, 0x4000000)

53.452970638s ago: executing program 1 (id=990):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x60, r2, 0x11, 0x70bd25, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @key_params=[@NL80211_ATTR_KEY_IDX={0x5}], @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x3}, @key_params=[@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "bac904fc3c65f1a259e8f0dea5"}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]]}, 0x60}}, 0x0)

53.252605303s ago: executing program 1 (id=991):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x104000, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0)
mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x1805406, 0x0)
mount$fuse(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x2a05004, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
mount_setattr(r0, &(0x7f0000000200)='.\x00', 0x8000, &(0x7f0000001dc0)={0x81, 0x0, 0x80000}, 0x20)

53.110950296s ago: executing program 1 (id=992):
r0 = syz_open_dev$sndpcmp(&(0x7f0000000340), 0x1, 0x10b000)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604110, &(0x7f0000000380)={0x0, [[0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x0, 0xfbf1a000], [0x8002]], '\x00', [{0x0, 0x9}, {0x0, 0xc}, {0x0, 0x1efb660a}, {}, {}, {0x0, 0x2000}, {0x0, 0x8000000}, {}, {}, {}, {}, {0x8}], '\x00', 0x3f9, 0x0, 0x0, 0x0, 0x0, 0x2})

52.582698422s ago: executing program 1 (id=993):
symlinkat(&(0x7f0000003200)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00')
r0 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0xfffffffe, 0x0, 0x3}, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x81})
io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf)

52.381839654s ago: executing program 34 (id=993):
symlinkat(&(0x7f0000003200)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00')
r0 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0xfffffffe, 0x0, 0x3}, &(0x7f00000000c0)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f0000000300)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x81})
io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf)

39.680938081s ago: executing program 4 (id=1153):
r0 = socket(0x25, 0x1, 0x0)
r1 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfad9, 0x10000, 0x1}, &(0x7f0000000240)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x81}})
io_uring_enter(r1, 0xdb4, 0x0, 0x0, 0x0, 0x0)
io_uring_register$IORING_REGISTER_SYNC_CANCEL(r1, 0x18, &(0x7f0000000100)={0x5, r0, 0x2, {0x8000000000000001, 0x7}, 0xb8}, 0x1)

39.639739239s ago: executing program 4 (id=1155):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)={0x2, 0x400000000000003, 0x20, 0x0, 0x19, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3, 0x0, 0x0, 0x100000000000000}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @loopback}}, @sadb_lifetime={0x4, 0x4, 0x0, 0xfffffffffffffffe}, @sadb_sa={0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @broadcast}}, @sadb_address={0x5, 0x7, 0x0, 0x0, 0x0, @in6={0xa, 0x4e22, 0x5, @private1}}, @sadb_x_sa2={0x2, 0x13, 0x2, 0x0, 0x0, 0x0, 0x3501}]}, 0xc8}}, 0x0)

39.534232673s ago: executing program 4 (id=1156):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000fcdbdf254400000008000300", @ANYRES32=r2, @ANYBLOB="0a001800030303030303000004005a8020005a8018000080140005"], 0x4c}}, 0x4040810)

39.44358748s ago: executing program 4 (id=1158):
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000200)={[{@jqfmt_vfsold}, {@orlov}, {@debug}, {@noload}, {@nombcache}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}]}, 0xfa, 0x47c, &(0x7f0000000a80)="$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")
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2081413, 0x0, 0x1, 0x0, &(0x7f0000000080))
mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000001100)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}], [], 0x2c})

39.336057469s ago: executing program 4 (id=1159):
creat(&(0x7f0000000340)='./file0\x00', 0x1)
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f0000000340), 0x11000)
mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000001780), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})
vmsplice(r0, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)

38.902446782s ago: executing program 4 (id=1164):
syz_mount_image$f2fs(&(0x7f0000000380), &(0x7f0000000100)='./bus\x00', 0xa18008, &(0x7f0000000480)=ANY=[@ANYBLOB="6167655f657874656e745f63616368652c6e6f6c617a7974696d652c616c6c6f635f6d6f64653d64656661756c742c6163746976655f6c6f67733d362c61636c2c6661756c745f696e6a656374696f6e3d30303030303030303030303030303030313236322c61636c2c6e6f61636c2c636f6d70726573735f63616368652c6261636b67726f756e645f67633d6f66662c6e6f626172726965722c636f6d70726573735f63616368652c6d6f64653d6c66732c00a0f136a7b12c237938b84e413b4410176f83a54dc492582695e005d110d725abbe2adec1ac2f6f77d172f0a20b3c1a8f19a6b28a8e0ba53dc3bf8ebe1ba50407cd64781927026076251050bd3ce7"], 0x1, 0x5505, &(0x7f00000079c0)="$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")
mount$bind(0x0, &(0x7f0000000140)='.\x00', 0x0, 0x825, 0x0)

38.565604203s ago: executing program 35 (id=1164):
syz_mount_image$f2fs(&(0x7f0000000380), &(0x7f0000000100)='./bus\x00', 0xa18008, &(0x7f0000000480)=ANY=[@ANYBLOB="6167655f657874656e745f63616368652c6e6f6c617a7974696d652c616c6c6f635f6d6f64653d64656661756c742c6163746976655f6c6f67733d362c61636c2c6661756c745f696e6a656374696f6e3d30303030303030303030303030303030313236322c61636c2c6e6f61636c2c636f6d70726573735f63616368652c6261636b67726f756e645f67633d6f66662c6e6f626172726965722c636f6d70726573735f63616368652c6d6f64653d6c66732c00a0f136a7b12c237938b84e413b4410176f83a54dc492582695e005d110d725abbe2adec1ac2f6f77d172f0a20b3c1a8f19a6b28a8e0ba53dc3bf8ebe1ba50407cd64781927026076251050bd3ce7"], 0x1, 0x5505, &(0x7f00000079c0)="$eJzs3E1rY9UbAPAn7XTe//Mv4sLdXBiEFiZh0nlBd6PO4At2KKMuXGmapCEzSW5p0rR25cKluPCbiIIrl34GF67diQvFnaDknlud+gJC08ZOfz+4ee45OXnuc8Iw8NxbEsCptZj9/GMlrsSFiJiPiMsRxXmlPAp3U3guIq5GxNwTR6Wc/33ibERcjIgrk+QpZ6V869Pr42u3f3jjp6++OXfm0mdffju7XQOz9nxE9DfT+U4/xbyT4qNyvjHuFrF/a1zG9Eb/cTnOU9xprxcZdhr76xpFvNlJ6/PN7eEkbvQazUnsdDeK+c1BuuBw3NnPU3zgUWOrGLfa60XsDvMidvZSXbt76f+2veEo5WmV+T4o0sdotB/TfHu3nfaz+biIzcGonE9581Z7dxLHZSwvF8281yrqWD/MN/3f9mZ3sL2bjdtbw24+yG7X6i/U6neq9a281R61b1Ub/dadW9lSpzdZVh21G/27nTzv9Nq1Zt5fzpY6zWa1Xs+W7rXXu41BVq/XbtZuVG8vl2fXs1cfvJP1WtnSJL7cHWyPur1htpFvZekTy9lK7eaLy9m1evbW6lq29vD+/dW1t9+79+6Dl1Zff6Vc9JeysqWVGysr1fqN6kp9+RTt/6Oy6CnuHw6lMusCAE4e/T8wC0fX/289jDj6/j/0/1Nxovrf097/H8H+4VD0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp9Z3C5+/VpwspvGlcv5/5dQz5bgSEXMR8evfmI+zB3LOl3kW/mH9wp9q+LoSRYbJNc6Vx8WIuFsev/z/qL8FAAAAeHp98eHVT1K3nl4WZ10QxyndtJm7/P6U8lUiYmHx+yllm5u8PDulZMW/7zOxO6VsxQ2s81NKlm65nZlWtn9l/kA4/0SopDB3rOUAAADH4mAncLxdCAAAAMfp41kXwGxUYv9R5v6z4OIv7/94IHjhwAgAAAA4gSqzLgAAAAA4ckX/7/f/AAAA4OmWfv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfmPnfm4TB6I4AD8bvLD/tGi1921lb1DGlrDHPUYUkCYoIAfSQhqgBnJLCRFEeBwCEYdIHttK9H2SMxnL/HiD4DAz0gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF26r9aL26vf121zdvt28owGAAAAuGRbrRf1P7PU/9rc/97c+tn0i4goI+LS3H0Un84yR01O9fL8zenz1asa7iLqhMN7TJrrS0T8aa7HH11/CgAAAPBxbZareZqtpz+zoQuiT2nRpvz2N1NeERHV7CFTWnnI+5UprP5+j+N/prR6AWuaKSwtuY1zpb1J/XM/rtpNT5oiNeXFlx2LzDZ2AACgR6Ozpt9ZCAAAAH36N3QBDKOI563M41bgJDXN9t7nsx4AAADwDhVDFwAAAAB0rp7/93T+3975fwAAADCMdP4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXdpW68VmuZq3zdnt28kzGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhif95RIATCIAz2ru9M5v6HlQZNTU2qQPj4G4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIv9eUmBEAiCKJgz/nfS9z+sJOgZRIiAhkcVtWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIud+3mNo4oDAP5mZmdrq+IaZQ8RUfCgF7vd1tbexIMSPPgnCCHd1titP9ocbCliLt4k515EjyKCEm/9H3JOIJd4y2EPETwrMzuTnfwA118zm+TzgTfvu8Mw7/tmIeQ77yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACURm9P4iQ7dMZxXJzb3Hu4lPVbh/rM47Xt+axlcVRn0ifDi9UPUbe5RAAAADg7krK+DyHspOsLWR938vo/La/Jav5vnx7HZT1/uO4v+7L2z9ovP+8+vz9QZzxOdtOby8PBpaOptP6/Wc62Z/7yilb+5PN3L0n+hcTvrT43SvPnGX29sfFOOw/P1ZEtAPBPXCz7Iih/H8r6fpOJAXBmtCqFd1n/J51mcwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACow2g1PFnGUQhhvjWJM1t7D5eO6x+vbc+X7dqjR2vhy8k9s1ukIYSby8PBpVpnM9vu3X9we3E4HNytP3gphNDU6G8V07/9wRQXh9DI8xH8R0FcfNmzks/JCBr8oQQAwKmUFi2r63fS9YXsXDQXwh/fHaz/X63EYcr6f/fDa5vVsar1f7+2Gc6+3sqdT3v37j94ffnO4q3BrcHHb1zuv9m/cv3q1eu9/F1JzxsTAAAA/p120ar1fzx3dP3/QiUOU9b/n33T/6I6VqL+P9Zk0a/pTAAAAM62Z1/+/bfomPNRux0+X1xZudsfH/c/Xx4fG0j1bztXtGr9n8w1nRUAAABQh9FqdGD9/0YlDlOu/z/1/Qs/Vu+ZhBDOF+v/F5c+Gd6obzozrY4/J256jgAAADTrfNGq6/9pvv8/3t/yEIcQXntlHBf/BnCq+j9596sfqmNV9/9fqW+KMynujp9H3ndDaHWbzggAAIDT7ImiZcX+r+n6wkc/XXi/bf8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQN3+DAAA//962D6S")
mount$bind(0x0, &(0x7f0000000140)='.\x00', 0x0, 0x825, 0x0)

2.903453281s ago: executing program 6 (id=1601):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r1, &(0x7f0000000000), &(0x7f0000000080)=@tcp6=r0, 0x2000000}, 0x20)

2.852248801s ago: executing program 6 (id=1603):
syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x3, 0x8a, 0xcc, 0x40, 0x830, 0x80, 0xd29e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x70, 0x10, 0x0, 0x8f, 0x7a, 0x61}}]}}]}}, 0x0)

1.623582378s ago: executing program 6 (id=1619):
r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340), 0x40402, 0x0)
write$binfmt_elf64(r0, 0x0, 0x4f2)

1.503339873s ago: executing program 6 (id=1620):
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', <r1=>0x0})
sendto$packet(r0, &(0x7f0000000000)="10", 0x5e0, 0x20008040, &(0x7f0000000080)={0x11, 0x8100, r1, 0x1, 0x6, 0x6, @broadcast}, 0x14)

1.434028625s ago: executing program 6 (id=1621):
socket$xdp(0x2c, 0x3, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xffffffffffffff6e, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r2, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r0], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0)
r3 = socket$packet(0x11, 0x2, 0x300)
sendto$packet(r3, 0x0, 0x0, 0x44014, &(0x7f0000000180)={0x11, 0xd, r2, 0x1, 0x7, 0x6, @broadcast}, 0x14)

1.433846699s ago: executing program 6 (id=1622):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000040)={0x18, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x9, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x1, 0x3, "030000"}, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000002640)={0x84, &(0x7f0000002840)={0x40, 0xe, 0xe, "4bed96cecf09166b8c0226f12e00"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000001240)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000001100)=ANY=[@ANYBLOB="2001e1"], 0x0})

1.312989643s ago: executing program 5 (id=1624):
syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000001080)='./bus\x00', 0x80, &(0x7f00000010c0)=ANY=[@ANYBLOB="666c7573682c6e6f646f74732c646973636172642c646d61736b3d30303030303030303030303030303030303030303030322c646d61736b3d30303030303030303030303030303030303030303137372c646f74732c6e6f646f74732c71756965742c646f74732c0023c3cb4d2e3cbf18508098fe0de2af38db67d42d1bc4ab714d52f019082433fc9ca2d7174b2c4ece31c9f4c7a4d53914e100"/167], 0x1, 0x140, &(0x7f0000000000)="$eJzs27Fq21AUBuDj2m3ddvFcOgi6dDJtn6CluFAqaEnwkEwJOFnsYIgXJZMfJS8YCJ683ZAo2Imxhwy2IPq+RT/8CO4dpMMV6OjT2XAwnpyO/8+i3WhE60dkMW9EJ15FM0rTAABeknlKcZNSSm+n8e4qUkpVrwgA2DbzHwDqx/wHgPox/wGgfvYPDv/+zPPeXpa1I66nRb/ol9ey//0n733N7nWWd82Kot9c9N/KPnvav473D/33tf2b+PK57O+6X//ylf5DDLa/fQAAAKiFbraw9nzf7W7qy/To+8DK+b0VH1s72wYA8AyTi8vh8Wh0ci4IgrAIVb+ZgG1bPvRVrwQAAAAAAAAAAAAAANhkF78TVb1HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWHUbAAD//0DvUik=")
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200)

1.213600308s ago: executing program 5 (id=1625):
r0 = socket$nl_audit(0x10, 0x3, 0x9)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000380)={'team_slave_0\x00', &(0x7f00000001c0)=@ethtool_channels={0x3d, 0x2, 0x3, 0x5, 0x0, 0x1, 0x1, 0x0, 0x5f4}})

1.213057755s ago: executing program 0 (id=1627):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000004680)=[{{&(0x7f0000001e80)={0xa, 0x4e21, 0xf, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000003080)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x4}}], 0x18}}], 0x1, 0x24000810)

1.163851736s ago: executing program 5 (id=1628):
r0 = epoll_create1(0x0)
r1 = epoll_create1(0x0)
close(r0)
r2 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r2, &(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e)
listen(r2, 0x0)
shutdown(r2, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000))
r3 = dup(r2)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r1}})
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f00000016c0)={0x40000001})

1.163681129s ago: executing program 0 (id=1629):
unshare(0x2c020400)
r0 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x5885, 0x80, 0x2, 0xffeffc04}, &(0x7f0000000480)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_MKDIRAT={0x25, 0x8, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)='./file0\x00', 0x104, 0x0, 0x1})
io_uring_enter(r0, 0x351e, 0x483, 0x0, 0x0, 0x0)

1.103996552s ago: executing program 0 (id=1630):
mount_setattr(0xffffffffffffffff, 0x0, 0x6d95fac964b01f6a, 0x0, 0x0)

1.103542148s ago: executing program 5 (id=1631):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffff7}, 0xc0000000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x8000}, 0x0)

1.103275897s ago: executing program 0 (id=1632):
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa35f086dd"], 0xfdef)
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000b00)={0x409, "abacd211119ca94c63377526aeb5ab2c7b9ca5fa07558139ede6dc06270ee042", <r1=>0xffffffffffffffff})
ioctl$SYNC_IOC_FILE_INFO(r1, 0xc0383e04, &(0x7f00000001c0)={""/32, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001580)=[{}]})
socketpair(0x1, 0x1, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
keyctl$read(0xb, 0x0, &(0x7f0000000580)=""/247, 0xf7)
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = syz_io_uring_setup(0xd1, &(0x7f0000000480)={0x0, 0x8a73, 0x100, 0x25, 0x1b7}, &(0x7f0000000300)=<r6=>0x0, &(0x7f00000001c0))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000000)=0x103, 0x0, 0x4)
io_uring_enter(r5, 0x47ba, 0x3000000, 0x0, 0x0, 0x0)
socket(0x2a, 0x2, 0x5)
socket$netlink(0x10, 0x3, 0x0)
r7 = io_uring_setup(0x7325, &(0x7f00000004c0)={0x0, 0x9ae1, 0x1000, 0x3, 0x275})
io_uring_register$IORING_REGISTER_PBUF_RING(r7, 0x16, &(0x7f0000000540)={&(0x7f0000001000)={[{&(0x7f0000000100)="0ccc0fcd47", 0x5, 0x2}, {&(0x7f00000006c0)="deaa7fa2b6d09c65ff80097eadf7d77a936b41d1a27712ef94286fe4162c0c552b3ac0a180f1cf3a5b414ecf2a985f779fc038fe6d4036a05657ac863dfce10a3c936d39012763f67d911b73b95298e355196839d19dde6c22263d477bdf60215246a990be40aad2dde6cd482665c34024b8a835192eba4103ec26aa3e95ff271dc7dcb7b6ab9806ad0545ef2752f2dbbd4ffe54c618f6f08892505e5ff73bc1193bef95ad20e20f4d7065bc357abb1c4ce1", 0xb2, 0x2}]}, 0x2, 0x2}, 0x1)
r8 = syz_open_procfs(0x0, &(0x7f0000000280)='net/protocols\x00')
preadv(r8, &(0x7f0000000080)=[{&(0x7f0000000000)=""/73, 0x49}], 0x1, 0xfffffffa, 0x0)
sendto(0xffffffffffffffff, 0x0, 0x0, 0x400c804, &(0x7f0000000300)=@rxrpc=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e24, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x13}}, 0x80)
r9 = openat$drirender128(0xffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$DRM_IOCTL_SYNCOBJ_TRANSFER(r9, 0xc02064cc, &(0x7f0000002880)={0x0, 0x0, 0xffffffffffffffff})

781.354869ms ago: executing program 5 (id=1633):
connect$pppoe(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x5)
bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000680)={0x28, 0x0, 0x2711, @local}, 0x10)
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000280)='./bus\x00', 0x2000898, &(0x7f00000002c0), 0x1, 0x55ae, &(0x7f0000005600)="$eJzs3X9snHUdB/DnruvaFdeWMOuArGwDJFtEOjdNCCR2bNNpYTnphE3I+gNH0DmtY8NVCCtinIERijWMwQoLbn9MEYqucyiJBewqul8IJtNFBbPFNWOkOBExYTG9u+d299zaHhMpwuu1tM/zvc/z/d73njx/3PvW73MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABEHwx+N3TL/t3roJ26+ru++8a85e+2D3kuMX3rq1avND20v2dTz31aNVq1qPLF1w0/2JpkfW93d3BkEs2S+W7t9w2fwrr69vuKI0HLDxc6ltZeVQT5nq+mKqMTbnwcF+uT9NQRAURwYoSm/npXfiOQNkdlfkDzisayf1tE4dP69x28qujc8uu3xL/ktnUOloT2C0pK+rgyeupdrk73jkiEw769KL5Vyiqf7RC+4deREAwFtSk0huMm9H029xM+22aD3Sro202yPt8B1Ce3bjVKTGHTvUPCdH66M0z9pUVCgZcp6Revr8Z9qJaP9IOxI13sI8cw9NR5rSoebZEqmP1jwBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3k0uuH5m/d49D7/8ldbf/u7h17/16sePrGq8ZaC7/qJ1ix/v2PG9vx2tWtV6ZOmCm+5PND2yvr+7Mwgqk/1iqe6xZ6ri8ZkDddseu6e3puFDC9cUpccNt2OyDg72hzsXVwRBc1blYDhsf3kQJHILyWawIb/wpeTOZ8ICAAAA7yVnJn/HM+1UHCzOaceSaTKW/BdKhcVrJ/W0Th0/r3Hbyq6Nzy67fMupj5cYYrzak46XaVee+IllBeMw/kbHO1EPD12RN87woiNG8/zpx/qnNdfdUHrl7gsWzphdv+XS4CfTD3csX3TfhBfHL9nXXpOX/yuHz//hmZP/AQAA+G/I/9FxhjdS/m+uqZh0cOp3ix67rur44fkP/Lyz7/kn4w8VD3Q//dLYcbf9cnVe/p+c85R5+T+ccZj/48Gp5X8AAAB4N/tf5//avHGGN1L+/8X+zZ//98pvTDk84187Xnj69xdvnVI+/7WyGTe8+cSCVxp2tf0pL//XFJb/x2RPO3xwVzjhZRVBUFP4SQUAAAByhP/vfuKjhTCvpz45iOb1y+4qe3LXG+tvjJ/V8o8zFvfPqv7i7tVf37ApNrChc92O5XNX5OX/2sLyf/E783IBAACAAvxm+y13V395ydYtew7N2XFnYvPYS+a+uuennVf1vXwsUfT8zX15+T9RWP4vGZ2XAwAAAJzEU+MmPnfo0UNfm7177YS9q9rmPD5t3+qFD/xz9t+veOnPxzddWJ6X/xsLy/9l6W165UOq087wrxA6KoKgdHCnJVXoC9o/mSkAAAAAb5Mwpzc1revduX7MrNfOPvzDNSuW/2rvpd++a2P1zQd+XXX7ucf2996Yl/9bhr//f3ing3D9f879//LW/2cVUnf9u8SNAQAAAHg/yl/PH94eP/XNBUN9/36h6/8/euaBko7m8ysnx7dVz3rig31Xra1+fVHHRZ/YfusbH46V//VTefm/rbD8X5S9fTu//w8AAABOwf/b9/8tzhtneCPd/79v3DPnrPnsPT+o/WbZU+e+eXfzd9oPTj9v87QzPlJ0fvecmX/4fl7+by8s/4fb07JfXk94fm6vCIKJgzvpuwluDae7LFLoKs4qpE58pEd92CNd6CrJKiS1RHp8rCIIpgzutEUKp4eF9khhoDxd2BQp7A0L6eshU3g0UugJr7R7y9PTjRZ+FhbSCyy6whUUp2WWRER6HBuqx2DhpD0OZJ4cAADgfSUMz+ksW5zbDKJRtis20gFlIx0QH+mAopEOGBM5IHrgUI8HjbmF8PEfz+1e+so1D9b1Xt1w9KzZe5bc0faBnkW9O7/wo55z/nL1Cws/nZf/NxWW/8NTMTa1GWr9fxCu/09/r2Fm/X9jWKiMFLrCQiJ6x4BE+BypsHtn+ByViXSPgYmZAgAAALynhZ8LFI3yPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/sHfvcVJVd4LATzf9oJum6YgBY4ygRkR3aZomGEQcUXRXo4tNJKtjhtAIjXZoAwq4YsyKr3GV6GLUmBjZwY+jJg6r+CDqRIXoiElGJfE5Kz4HnciqS9BR45gs++m+dYqqW112IaC0+/3+0XWqfud569F17r11LgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/P/hsiX3Nrw58H9965ffW/f697409TdTD9m8y19uqHt3yDlPbT5ocN0tbw1asPCNtklnXtsyffk1G1YuDaGlq1xZUrzsoUHl5aP/cMxdt13xcNO0wVPOrcrUm4mHfp1/yjN3Loytvto/hLvLQqhIB0bUJYHKzP26WN8edSF8LmwJZEu01SYl0g2Hh2tCWBa2BLJV3VsTQl1OYMoTD666rDNxVU0I+4YQqtNtvFCdtFGTDgyrSgK16cCciiTw/uZENnBPeRKArVHV3YPxzZB90a9oyc/Q0H1lRV5/lR+3czuZ9PD6xERD8XxvHbaDO5Wj4Lls2aanrduXBttdwdtjtXdbL3i3FWznJZ623C9SmW8om7eEqkP5zLZZ0xd0zI+PlIfGxj7FatpBz/O6TefM2Jp0r3kdxg40bJfX4QO1k+ove3viwStP/uPp+85fO3Vbu/lczibNTe9o1SHzmus1z2M04dP7PNm8LYW3r539aSv4ljTUl64QwvF/+nzZM3Ne2n3jB6+eOPH2Fy6+etrCa6ZMfHbQL8b+47W73D3t8oL5f8NHz//jyznelufljq1+WJ/MzeMjdTGxsT6ZmwMAAECv0Rv2mn519KsvnfrQ3YteXH5cxXfH/eqk3eorzv5+x/G7rhz/xUuvbH98l4L5/9DSjv/HQ/51uaNdHcKErsQFA0LYrevxJPCz2J2TB4SwV1eqJT9wWCqwOoQvdCX2z1aVKtE3lhiaCvy+PhOYkAqsiYGWVODGGFiSClwYAytSgRkxsDoVODwGQnv+OA6oz4yj5EBNDLQmG3FFPAvhnfrYWmpbrctWBQAAsJ1kZoeV+XdzznXY1gxxermipqcM8QzsohmqUzWkZ7DZaVXRGip6qqG8pxqy41700cMvqLmsp5oLTsMoy8/w4ZDvlA+YuPeP7rpxxE3NL0787rtjj//Kn998d/X+//Tf7zln/nUHFMz/mz56/l/dTUfKCo7/hzC562/MXZ6JdGTjrS15GQAAAIBtcNVjS5+84YCj/s99L99355euvaF89dVf/7+vbLxg71HHDS/r+3ffXlEw/59Q2vn/cZ9In5zM4dG4G2L2gBCa8gNJtQcXBpKj3v0yAQAAAOgNssfjs8fC2zO3ySna6fl0Yf6WrcwfD/xP6Db/5Zv++tkvX/vkiQuH7bPhiv925gdlnx/7u12OXTvy8bf2HPYPDX0Lz/9vKe38/9r826QTa2IvrhwQQt+cwCOxl52BLkNj4OVD8wOZ8a+JG2BxrCpzYkK2qsWxRGsMNKUCy4qV+G22xG75gcyTlW38guw42jMlcgIAAADwiYu7A+Jx+Xj+/z2TD/jS/oNeGvPinvcufG3C0hNOrf3hPrfs+vqAjkljDpxwyBHPFMz/W7fu/P+ueXDB6f0d/UIYWRFCn/QPAx6tTRYGjIG6skzi/tqkrj7pqs6rDWF858DSVb2SWf+/Ir3G4BM1SVUxsNveP900rDNxQ00II3MDz3zz+jGdifmpQLbxb9SEMKRztOnGV/ZNGq9MN35N3xD2zAlkqzq5bwidjVWlq3qwOnMdg3RVt1WHMDAnkK3qwOoQFgYAeqn4r3Rm7oPzFp49e3pHR9sZOzAR9+HXhFntHW2NM+Z0zKwu0qeZqT7nLWN0XuGYSr3yzfOZJYqmDrl9eCnp7O8Em3LbyuzHLzhxMHM/fheq7Bpnc2Xe3dHpIQ/fp7CJkPNNqtiQy3fwkGtzK9nyJBbUH/NXhX6h74J5bWc0njV9/vwzRiV/S83enPyNh5mSbTUqva1qu+tbCS+PoqtlpXzcbbVfbiUj5582d+S8hWePaD9t+iltp7R9p3nsqObmMV8dO6Z5ZOeompK/PQx1v+6qTg118/Uljms7DnX3ipxKPolPDQkJid6WmL6k7PwJ0359/7f2WHPaWSft8fd7zBxx0l9d/pu5JzYeMvlX1//l2oL5/9yPnv/HT534yZ9Zn6HY8f+GeJg/eXzLYf7WGFhW6vH/hmJH87MnBgxNBRbFwCKH+QEAAPhsiLsj497MuFf6urp/uvvImTMOef+XJ0y5+m/Hjjv1rPX7Nlx89bFL/sP6d5asOuLtgvn/otJ+/7+d1v/PLl3/tWLL/O8fSzQVW/8/vcx/dv3/RcXW/08v859d/3/Zp7D+/4JsILVJ3rH+PwAA8Fnwya3/3+Py/ukLBBRk6HF5//QFAgoy9LiMf6kXCNjq9f/ndPxF7aDL54w7dMTcHz+yau8lA2/70vMTf73P0oNG3LvylvdG3Vow/19S2vzfwv0AAACw83jol32/ffG7w+5/6pH3jyy79Lcbbzr+r9oOOOQPA5tPmXx0zfdv+reC+f+y0ub/n/z6f6HY+f9DiwVaii0MaP0/AAAAeqli6//dPPDloavnj7jxsZ+/ectLrb+YOf61f7fkB1+ZPqzp5jXrftMwY33B/H9FafP/eNpFeV7u2JsP65M17UJ6TbuN9dmfDAAAAEDvUB4aGytLzJu3MuphH7/NdZmlQD8qnevp+watWlD+0FVl1Rt/cMm0QxrPPfbMOUdetP77tU/+pHZqY/UZBfP/1aXN//N+l/FA7aT6y96eePCHK0/+4+n7zl87dcvxfwAAAGDHKXW/BAAAAAAAAAAAAAAA8Ol7qnXpQR+MOvqNmXuN+tM3jn3hB4u/+M1H/ubaP5/588Pv26t987ApBb//D5O7yhX7/X+87l/8fcGuebljqz2v/5e5P+WYWxd2LVn4aH0I++QGZp8/+3Mhc23+/XIDq6buP7gzcX66xH0vHv5aZ2JaOnDUiF3e60yMTwVa4yKJX0gH4lUV3+ufCsTlFZ9MB+L2WJEOVGUCl/RPxlGW3lYb6pJtVZbeVs/VhTAgJ5DdVnfXJW2UpQd4VSqQHeDp6UAc4KRMoDzdq1v7Jb2KgbpY9G/6Jb0CAGCnFb8FVoZZ7R1tTfErfLzdvSL/Nspbsuy8wmrLSmz++czSZFOH3D68lHSf9HfRLdcarwzVnUMYVfB1NTdLWdcot08tPWy6XYsMuafV3sqLlEvb2k1XVXxENcmIGmfM6ZhZ2ePAR/ecpbmixyyjCiY7uVnKuzZpCbWU0JcSRlTitimhy/F+eWhs7JPKNS4GG0Kenl4Rpf5eP3edv2Kvgtw8f1tz7aV9Bvd5/9/GX/TQgwMqO06d3HbR7o/988BRM3/8wwdbr/l9wfy/obT5f3XuuN7LXAxgUbyy3sEDQmgtcUQAAADw2fc/z11+x4lz1myYtbri2d/9bnb5cSdWbj7nrnPOvui5+xcfdcm/v3lb4yvKntp04hubzvrrN37ylesePuulw2ecddekdYesb6u+8bt/sfzUIQXz/6Glzf/jHqzMoeBkb8fqeP3/CwaE0HVp/YYk8LM43JMHhLBXV6ollkguqP+1WKIpCfws7jDZP5Zobcmvqm8MrEgFfl+fCaxOBdbEQGYvxU9DZlfOFfUhjOlKTc4vMTeWaEgFjouBoalAYww0pQL9Y2BCKvBm/0ygJRX4xxgI7fnb6s7+mW0FAACwNTLzrMr8uyE9z1tR0VOGsp4y1PaUobynDNU9ZSg2inj/jpihMnXySllOpsp0rTWpWgoyxIvhb3W/CjKE3+bnTBcsaDqef5A936AsP8O4H97RetDX5v1408U/evzIAy88csmVb196dL/BVz77v9vP7dd/U23B/L+ptPl/bf5t0vqaOP/fcv2/JPBI7N6V8dTxoTHw8qH5gcyOgTVxsrs4W1VLpkRm0r44lpgQA0NTgbkxMCEVaJ2cCSwbnB/IzLSzjV+Qbbw9UyInAAAAAJ+4uIMg7qaJ8/+V48I7exz5fvPuVw6cO+7xR847YnrNrtU1/zx+7dLxl1Y/tF/fgvn/hNLm/7G9frmNXRh782r/EO4u29KbbGBEXRKI+zHq4s/j96gL4XM5OziyJdpqkxJVqYbDwzXJL9Sr0lXdW5OsMRDvT3niwVWXdSauqglh35y9L9k2XqhO2qhJB4ZVJYHadGBORRKIe36ygXvKkwBss+xewfiCypzqktXQfbkir7/PyjVB08Mr2AfaTb7ufnO1o1SnH8jsU83auqetoDp2iIK3x2rvtt74bmvwbsv9IpX5hrJ5S6g6lM9smzV9Qcf8+EjuL1kL7KDnOfdXqqWkt8PrcNHH723PqtMdaEp9fDR1X67712FZrO6B2kn1l7098eCVJ//x9H3nr51acjeKiD8UPvjWuQc8l7N5d7TqkHnN9brPkxafJ73x38BQT1sIYfkFs5584l/ef75iffN/OXDs8tvefGz5Tw56YNaIL2y45Msb33r3qIL5f0tp8/+K1G2XD+LGnDcghOE5G/fRuPknDkg+B3MCyafkwMJAcsh9fX3RT04AAADY3rK7O7L7C9ozt8kJ4el5cmH+lq3MH/dXTOg2f6n9HjjmH7536FWvf+Pr63e//NGlT637T2++csS0Qx/Y9PSKla83H/v5pwvm/60fPf/vm+qm4/+O/7ODOP7frZ19V3Tf9AOLtmlXdEF17BCO/3drZ3+3Of7fLcf/Hf/vjuP/PXD8v1s7+9NW8C1pri9dIYTWATfc/ova6cP7XXHOt2as/fnT7zSNe6Hu3KPv/B+HLw7XnLfqzwXz/7mlzf+t/9f9on3Z9f9ai63/N7fY+n+LrP8HAADsUEUWmkvP8wpW7yvIkF69ryBDjwsE9rjEoPX/tnr9v9qTzj7plfq39rpm4u3/+c7pFz5/0onP7tvn+RNuP+GmkVcPf+nLGwrm/4tKm//Hl0O/3NZ7y/p/QycXqWpJDMy1MCAAAAA7o2I7CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPh0rXhw8Rc3L97noJue/fxNh//rsjWz9v7VAZtHjzm5cfjigWVX/t2/vDVowcI32iadeW3L9OXXbFi5NIT2rnJlSfGyhwaVl4/+wzF33XbFw03TBk85tzpTb2Xm9ot5uWOrH9aHsCznkbqY2FjfeWdLYMoxty6s6Ew8Wh/CPrmB2efP/lxn4sb6EPbLDayauv/gzsT56RL3vXj4a52JaenAUSN2ea8zMT4TKEt397r+SXfL0t29rH8IA3IC2e5+u39+Vdk2/mMmUJ5u4+a6pI0YqItFf1SXtBEDHbFEe98QRlaE0Cdd1a+rk6r6pKv6++qkqj7pqv5rdQjjQwgV6aperEqqqkiPfG1VUlUM7Lb3TzcN60wsqwphZG7gmW9eP6YzcXoqkG3861UhDOl8yaQbv6Myabwy3fhVlSHsGUKoSpf414qkRFW6xCsVIQzMCWQbP7UihIWBz4T44TMz98F5C8+ePb2jo+2MHZioyrRVE2a1d7Q1zpjTMbM61adiynLSm8/7+GN/ftM5Mzpvpw65fXgp6YpMucquLjdX5t0dvbP3PvarNreSLc9HQf0xf1XoF/oumNd2RuNZ0+fPP2NU8rfU7M3J3z6ZaLKtRvWWbbVfbiUj5582d+S8hWePaD9t+iltp7R9p3nsqObmMV8dO6Z5ZOeompK/22Oo13/yQ929IqeST+IDQEJCorclyvM+3Zp29g/ygi/6WzpaGaq7PqALphW5Wcq6Rrk9Bn3Yxxzxx/me0uOIRhVMHAqyNPecZXTBZGJLlpokS9f3uoLJYW5N5V2bNN4vD42NfYpth4b8u7mb961t2LzrMpuu1DQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPD/2IEDAQAAAAAg/9dGqKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsIOHAgAAAAAAPm/NkJVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVUVduBYAAAAAECYv3UYPRsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAlwIAAP//WKHPZA==")
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000000020"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
pwritev2(r3, &(0x7f00000006c0)=[{&(0x7f0000000280)='mpE', 0x3}], 0x1, 0x9, 0x0, 0x21)
r4 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r4, &(0x7f0000000000)={0x18, 0x0, {0x15, @remote, 'geneve0\x00'}}, 0x1e)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f00000000c0)={0xfffc, 0xc}, 0x8)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, 0x0, &(0x7f0000000140))
getsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, 0x0, 0x0)
r6 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$PPPIOCATTCHAN(r6, 0x40047438, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000980)=[{&(0x7f0000000240)="5cd22129a4dbc3ee9ad81ce4ec4cb9327abac0cfbaf97a6163e126dd8ef4cfcdf6f169389f", 0x25}, {&(0x7f0000000300)="2da378b6deb1792bf26c3e0d9a66d6a9325ab988ef5f289b944cb545cd94c373f976414d649101", 0x27}, {&(0x7f0000000340)="45b8ca8949639dfb73bb428587f5321c52a132b742077b293d66d654cf804e4b960f6bca813aa919fdcd00fd75a8de443a7125373b7b200e06bf87a70eb6d5b535a485aec4ba782dce25d207fb81e94e93da2f9b956015cc4905f16873ff81ddcbe8478aa053c9859115b7", 0x6b}, {&(0x7f00000004c0)="11481b5a1e1f54daf73ccc75f9148fef904a70a451dd29315f1c47ca5d9275795260616a75dc280288fddcd41204b080c6f4fc9f13b8adb2d46401c508444e429c654bcce712cfa818a3dfbda3d109b2999e226d3adcfa53818686f9b6bdbfd0b33b7c0cb272d41f75c79dd66be3313e021645", 0x73}, {&(0x7f0000000540)="17bb33b6cdaf54657e9e4913dc8a368e5c3c38b29c9f484b1c04e7fade4ccf71905c2760fb51e5e6eb8485348ddb288456169520495b1485c4d41218990bd47b97cf16c6b8071b3b8e99c6836c5de034a9087b78b3e6833a1fedc8f0e352814fba4374bcb9ae46e6ee85c0ba12e8cddf30e813e013e32473ee432f1f9cea773f8f791e6112f6", 0x86}, {&(0x7f0000000600)="6172452d0377a85d136d3cb0cdd9bbe33f940090459acd56075c03c24bd33500e58bacd8a988978fb458ba960b067a5328aa7e7d7cdc3a2c5bd1fbbb6ade332cf335", 0x42}, {&(0x7f0000000700)="cfb91f0aeee2074ec2d6f3d44e93bc42422354f716810e75a3bbcb6ece7c9ddb77e2d07586efc613f48e9f8c1a3431a7d46fe28c763fd2f3bc41e5988638b0fea9c52b68ff71a4c1db32f90c37ecd6bcc4fecebd08b40616aa987178d60923822893602b344345e89e9f18663f460448d4a3e6b9f8bcfdd74fe353bac57c503907c9a3c5728f7c96b894668005059107c4b7dedb633401a245abd5b4397e36b1e7", 0xa1}, {&(0x7f0000000800)="bab60a1e3f4817dbf10573dd711642cde4869b5669ab69205f81c0cfa1b9460ba35bc7e94ba19c91ad085499cef9e3072d6b0ab1ca4f63c184ce71b67cd649771663c34af3e2ecd69ac1515e574c5108e226e0691302fb3d763e58ac17719a41271b00add25233add101cb9d2b6f0ce99080f7bf3e5a4a051d69eeda6296fd4c33e3f7078a32aa5cb83f20efb8a1142f91cdba23a56908f1ec7b9ea784fd726a895214e4f86cc1ab8c83d8c4b6567800cd0037", 0xb3}, {&(0x7f00000003c0)="74967282b9bece93a6e661e872a9e7b34a0b17f9775e5e23e6e2b1bb3cfba55e70cba1bc53b7bba9c2", 0x29}, {&(0x7f00000008c0)="9269bb802255d10a5e3fbf1e85d77b403ed1fc3733b094e290c79520f3168e00d449ee62afbdae18cb052278a1ea14b508f0052acd9d107fe09c61c72dd8ed2de1b0dc2d7f7c38f98d954b38895dd15b63e224da3a62141a6635ce77015e7fe0518debea3d2cb26821f2063619be33cf110931e167ac90ada91e3d873565e9f50a04dc01452a5c1328d0eba7ebb8a23a12d2c915b3", 0x95}], 0xa)
ioctl$PPPIOCBRIDGECHAN(r6, 0x40047435, &(0x7f0000000200)=0x1)

90.465117ms ago: executing program 0 (id=1634):
r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0)
getsockopt$llc_int(r0, 0x10c, 0x5, &(0x7f0000000140), &(0x7f0000000080)=0x4)

301.323µs ago: executing program 5 (id=1635):
r0 = openat$mice(0xffffff9c, &(0x7f0000000040), 0x802)
write$UHID_INPUT(r0, &(0x7f0000001c40)={0x8, {"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", 0x1000}}, 0x101a)
read$FUSE(r0, 0x0, 0x0)

0s ago: executing program 0 (id=1636):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0)
syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36)
nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380))
syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e)
nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480))
syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28)

kernel console output (not intermixed with test programs):

 6081 - 0
[  127.846012][ T5913] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  127.864717][ T5913] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  127.951887][  T783] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  127.955292][  T783] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  128.015011][ T4652] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  128.029568][ T4652] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  128.400580][ T5238] Bluetooth: hci0: command tx timeout
[  128.410651][ T8119] netlink: 8 bytes leftover after parsing attributes in process `syz.4.773'.
[  128.413524][ T8119] netlink: 4 bytes leftover after parsing attributes in process `syz.4.773'.
[  128.448637][ T5711] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  128.458536][ T5711] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  128.468009][ T8102] loop1: detected capacity change from 0 to 40427
[  128.470693][ T5711] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  128.481341][ T5711] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  128.501673][ T8102] F2FS-fs (loop1): build fault injection rate: 771
[  128.506892][ T8102] F2FS-fs (loop1): invalid crc value
[  128.599586][ T8102] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  128.607425][ T8102] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  128.638552][ T8102] syz.1.770: attempt to access beyond end of device
[  128.638552][ T8102] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  128.721860][ T5850] syz-executor: attempt to access beyond end of device
[  128.721860][ T5850] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  128.727466][ T5850] CPU: 1 UID: 0 PID: 5850 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  128.727479][ T5850] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  128.727484][ T5850] Call Trace:
[  128.727488][ T5850]  <TASK>
[  128.727493][ T5850]  dump_stack_lvl+0x189/0x250
[  128.727508][ T5850]  ? __pfx_dump_stack_lvl+0x10/0x10
[  128.727516][ T5850]  ? __pfx_queue_work_on+0x10/0x10
[  128.727523][ T5850]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  128.727532][ T5850]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  128.727545][ T5850]  f2fs_handle_critical_error+0x37c/0x540
[  128.727559][ T5850]  f2fs_write_end_io+0x886/0xb60
[  128.727574][ T5850]  __submit_merged_bio+0x27a/0x6a0
[  128.727586][ T5850]  __submit_merged_write_cond+0x255/0x530
[  128.727598][ T5850]  f2fs_write_data_pages+0x261d/0x3000
[  128.727623][ T5850]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  128.727655][ T5850]  ? folios_put_refs+0x559/0x640
[  128.727668][ T5850]  ? __pfx_folios_put_refs+0x10/0x10
[  128.727674][ T5850]  ? rcu_is_watching+0x15/0xb0
[  128.727685][ T5850]  ? __lock_acquire+0xab9/0xd20
[  128.727702][ T5850]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  128.727712][ T5850]  do_writepages+0x32e/0x550
[  128.727726][ T5850]  ? do_raw_spin_unlock+0x4d/0x240
[  128.727736][ T5850]  filemap_fdatawrite+0x199/0x240
[  128.727745][ T5850]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  128.727773][ T5850]  ? do_raw_spin_unlock+0x4d/0x240
[  128.727783][ T5850]  f2fs_sync_dirty_inodes+0x31f/0x830
[  128.727797][ T5850]  f2fs_write_checkpoint+0x95a/0x1df0
[  128.727814][ T5850]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  128.727838][ T5850]  ? f2fs_stop_gc_thread+0x7f/0xb0
[  128.727845][ T5850]  ? kfree+0x18e/0x440
[  128.727854][ T5850]  ? kill_f2fs_super+0x298/0x6c0
[  128.727863][ T5850]  kill_f2fs_super+0x2c3/0x6c0
[  128.727872][ T5850]  ? __pfx_kill_f2fs_super+0x10/0x10
[  128.727878][ T5850]  ? radix_tree_delete_item+0x2b6/0x400
[  128.727890][ T5850]  ? shrinker_free+0x2ce/0x3e0
[  128.727899][ T5850]  deactivate_locked_super+0xbc/0x130
[  128.727908][ T5850]  cleanup_mnt+0x425/0x4c0
[  128.727917][ T5850]  ? lockdep_hardirqs_on+0x9c/0x150
[  128.727927][ T5850]  task_work_run+0x1d4/0x260
[  128.727937][ T5850]  ? __pfx_task_work_run+0x10/0x10
[  128.727945][ T5850]  ? __x64_sys_umount+0x122/0x160
[  128.727984][ T5850]  ? exit_to_user_mode_loop+0x40/0x110
[  128.728021][ T5850]  exit_to_user_mode_loop+0xec/0x110
[  128.728036][ T5850]  do_syscall_64+0x2bd/0x3b0
[  128.728049][ T5850]  ? lockdep_hardirqs_on+0x9c/0x150
[  128.728057][ T5850]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  128.728064][ T5850]  ? exc_page_fault+0x9f/0xf0
[  128.728073][ T5850]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  128.728080][ T5850] RIP: 0033:0x7f3ce1f8ff17
[  128.728087][ T5850] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  128.728093][ T5850] RSP: 002b:00007ffcde344bd8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  128.728102][ T5850] RAX: 0000000000000000 RBX: 00007f3ce2011c05 RCX: 00007f3ce1f8ff17
[  128.728107][ T5850] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcde344c90
[  128.728111][ T5850] RBP: 00007ffcde344c90 R08: 0000000000000000 R09: 0000000000000000
[  128.728115][ T5850] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffcde345d20
[  128.728119][ T5850] R13: 00007f3ce2011c05 R14: 000000000001f621 R15: 00007ffcde345d60
[  128.728132][ T5850]  </TASK>
[  128.911112][ T5850] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  128.914551][ T8140] netlink: 'syz.0.766': attribute type 1 has an invalid length.
[  128.994375][ T8144] loop0: detected capacity change from 0 to 128
[  129.003602][ T8144] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  129.007913][ T8146] capability: warning: `syz.4.782' uses 32-bit capabilities (legacy support in use)
[  129.012745][ T8144] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  129.198055][ T8155] loop4: detected capacity change from 0 to 2048
[  129.259461][ T8155] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  129.298104][   T33] audit: type=1800 audit(129.152:14): pid=8155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.785" name="file0" dev="loop4" ino=13 res=0 errno=0
[  129.338903][ T8164] loop1: detected capacity change from 0 to 4096
[  129.359001][   T51] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  129.373343][ T8164] ntfs3(loop1): It is recommened to use chkdsk.
[  129.378252][ T8164] ntfs3(loop1): try to read out of volume at offset 0x3fffffc0c00
[  129.389211][ T8164] ntfs3(loop1): try to read out of volume at offset 0x3fffffc0c00
[  129.395319][ T8164] ntfs3(loop1): try to read out of volume at offset 0x3fffffc0c00
[  129.409748][ T8164] ntfs3(loop1): try to read out of volume at offset 0x3fffffc0c00
[  129.413674][ T8164] ntfs3(loop1): try to read out of volume at offset 0x3fffffc1c00
[  129.416766][ T8164] ntfs3(loop1): try to read out of volume at offset 0x3fffffc2c00
[  129.433368][ T8164] ntfs3(loop1): try to read out of volume at offset 0x3fffffc4c00
[  129.436032][ T8164] ntfs3(loop1): try to read out of volume at offset 0x3fffffc8c00
[  129.438557][ T8164] ntfs3(loop1): try to read out of volume at offset 0x3fffffd0c00
[  129.549202][   T51] usb 1-1: Using ep0 maxpacket: 32
[  129.560059][   T51] usb 1-1: config 2 has an invalid interface number: 157 but max is 0
[  129.563355][   T51] usb 1-1: config 2 has 2 interfaces, different from the descriptor's value: 1
[  129.569785][   T51] usb 1-1: config 2 has no interface number 1
[  129.575384][   T51] usb 1-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=a4.1b
[  129.581357][   T51] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  129.584624][   T51] usb 1-1: Product: syz
[  129.586406][   T51] usb 1-1: Manufacturer: syz
[  129.588399][   T51] usb 1-1: SerialNumber: syz
[  129.635565][   T51] imon 1-1:2.157: inconsistent driver matching
[  129.638351][   T51] imon 1-1:2.157: unable to register, err -22
[  129.645642][   T51] imon 1-1:2.157: probe with driver imon failed with error -22
[  129.660643][   T51] imon:imon_find_endpoints: no valid input (IR) endpoint found
[  129.664198][   T51] imon 1-1:2.0: unable to initialize intf0, err -19
[  129.667601][   T51] imon:imon_probe: failed to initialize context!
[  129.672722][   T51] imon 1-1:2.0: unable to register, err -19
[  129.850592][   T51] usb 1-1: USB disconnect, device number 11
[  130.074188][ T8155] fs-verity (loop4, inode 13): Error -4 building Merkle tree
[  130.127147][ T7967] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  130.479080][ T5238] Bluetooth: hci0: command tx timeout
[  130.566451][ T5238] Bluetooth: hci2: unexpected event for opcode 0x0c58
[  130.828796][ T8184] loop0: detected capacity change from 0 to 4096
[  130.875603][ T8184] ntfs3(loop0): ino=19, mi_enum_attr
[  130.877894][ T8184] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  131.118700][   T51] usb 5-1: new full-speed USB device number 2 using dummy_hcd
[  131.245550][ T8191] loop1: detected capacity change from 0 to 40427
[  131.256169][ T8191] F2FS-fs (loop1): invalid crc value
[  131.270207][   T51] usb 5-1: config 0 has an invalid interface number: 41 but max is 0
[  131.278942][   T51] usb 5-1: config 0 has no interface number 0
[  131.287164][   T51] usb 5-1: config 0 interface 41 has no altsetting 0
[  131.292837][   T51] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  131.296973][   T51] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  131.304983][   T51] usb 5-1: Product: syz
[  131.308804][   T51] usb 5-1: Manufacturer: syz
[  131.312866][   T51] usb 5-1: SerialNumber: syz
[  131.321046][   T51] usb 5-1: config 0 descriptor??
[  131.341451][ T8191] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  131.345508][ T8191] F2FS-fs (loop1): Start checkpoint disabled!
[  131.352124][ T8191] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  132.044254][ T8220] netlink: 8 bytes leftover after parsing attributes in process `syz.0.799'.
[  132.128773][   T10] usb 2-1: new full-speed USB device number 6 using dummy_hcd
[  132.270008][ T8236] loop0: detected capacity change from 0 to 512
[  132.284386][ T8236] EXT4-fs (loop0): couldn't mount as ext3 due to feature incompatibilities
[  132.307582][   T10] usb 2-1: config 2 has an invalid interface number: 4 but max is 0
[  132.312905][   T10] usb 2-1: config 2 has no interface number 0
[  132.315207][   T10] usb 2-1: config 2 interface 4 has no altsetting 0
[  132.332291][   T10] usb 2-1: New USB device found, idVendor=0489, idProduct=e027, bcdDevice=93.1d
[  132.335179][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  132.352324][   T10] usb 2-1: Product: syz
[  132.352582][   T51] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -71
[  132.354064][   T10] usb 2-1: Manufacturer: syz
[  132.371769][   T10] usb 2-1: SerialNumber: syz
[  132.382045][   T51] usb 5-1: USB disconnect, device number 2
[  132.409495][    T9] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  132.435350][    T9] hid-generic 0000:0000:0000.0004: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  132.450885][ T8241] loop0: detected capacity change from 0 to 2048
[  132.495867][ T8241] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  132.562313][ T5238] Bluetooth: hci0: command tx timeout
[  132.627997][   T10] usb 2-1: USB disconnect, device number 6
[  132.643755][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  132.647301][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  132.998717][    T9] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  133.166778][    T9] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  133.170205][    T9] usb 1-1: config 0 has no interface number 0
[  133.178720][    T9] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  133.184790][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  133.188670][    T9] usb 1-1: Product: syz
[  133.190379][ T8276] loop1: detected capacity change from 0 to 128
[  133.191464][ T8267] loop4: detected capacity change from 0 to 32768
[  133.195812][    T9] usb 1-1: Manufacturer: syz
[  133.197771][    T9] usb 1-1: SerialNumber: syz
[  133.208287][    T9] usb 1-1: config 0 descriptor??
[  133.262224][ T8267] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  133.280756][ T8267] (syz.4.810,8267,0):ocfs2_find_entry:1094 ERROR: status = -117
[  133.289917][ T8267] (syz.4.810,8267,0):ocfs2_find_entry:1094 ERROR: status = -117
[  133.297666][ T8267] (syz.4.810,8267,0):ocfs2_symlink:2080 ERROR: status = -117
[  133.331298][ T7967] (syz-executor,7967,1):ocfs2_inode_is_valid_to_delete:948 ERROR: Skipping delete of system file 76
[  133.365821][ T7967] ocfs2: Unmounting device (7,4) on (node local)
[  133.432679][    T9] usb 1-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[  133.446721][    T9] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  133.456360][    T9] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[  133.464571][    T9] usb 1-1: media controller created
[  133.496850][    T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  133.519492][ T8284] netlink: 28 bytes leftover after parsing attributes in process `syz.4.812'.
[  133.537614][ T1087] kworker/u9:3: attempt to access beyond end of device
[  133.537614][ T1087] loop1: rw=1, sector=145, nr_sectors = 8 limit=128
[  133.543227][ T1087] kworker/u9:3: attempt to access beyond end of device
[  133.543227][ T1087] loop1: rw=1, sector=161, nr_sectors = 8 limit=128
[  133.555727][ T1087] kworker/u9:3: attempt to access beyond end of device
[  133.555727][ T1087] loop1: rw=1, sector=177, nr_sectors = 8 limit=128
[  133.562219][ T1087] kworker/u9:3: attempt to access beyond end of device
[  133.562219][ T1087] loop1: rw=1, sector=193, nr_sectors = 8 limit=128
[  133.570231][ T1087] kworker/u9:3: attempt to access beyond end of device
[  133.570231][ T1087] loop1: rw=1, sector=209, nr_sectors = 8 limit=128
[  133.576590][ T1087] kworker/u9:3: attempt to access beyond end of device
[  133.576590][ T1087] loop1: rw=1, sector=225, nr_sectors = 8 limit=128
[  133.582298][ T1087] kworker/u9:3: attempt to access beyond end of device
[  133.582298][ T1087] loop1: rw=1, sector=241, nr_sectors = 8 limit=128
[  133.592566][ T1087] kworker/u9:3: attempt to access beyond end of device
[  133.592566][ T1087] loop1: rw=1, sector=257, nr_sectors = 8 limit=128
[  133.641423][    T9] i2c i2c-2: ec100: i2c rd failed=-32 reg=33
[  133.682931][    T9] usb 1-1: USB disconnect, device number 12
[  133.809020][ T5900] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  133.937324][ T8290] loop1: detected capacity change from 0 to 32768
[  133.940014][ T8290] XFS: ikeep mount option is deprecated.
[  133.955700][ T8290] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  133.969119][ T5900] usb 5-1: Using ep0 maxpacket: 16
[  133.976342][ T5900] usb 5-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=db.47
[  133.986471][ T5900] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  133.990781][ T8290] XFS (loop1): Ending clean mount
[  133.994407][ T5900] usb 5-1: Product: syz
[  133.996184][ T5900] usb 5-1: Manufacturer: syz
[  134.004382][ T5900] usb 5-1: SerialNumber: syz
[  134.013752][ T5900] usb 5-1: config 0 descriptor??
[  134.021401][ T5900] gspca_main: sn9c2028-2.14.0 probing 0c45:800a
[  134.025808][   T33] audit: type=1800 audit(133.882:15): pid=8290 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.815" name="file1" dev="loop1" ino=6150 res=0 errno=0
[  134.035321][   T33] audit: type=1800 audit(133.892:16): pid=8290 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.815" name="file1" dev="loop1" ino=6150 res=0 errno=0
[  134.044761][   T33] audit: type=1800 audit(133.902:17): pid=8290 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.815" name="file1" dev="loop1" ino=6150 res=0 errno=0
[  134.251541][ T5900] gspca_sn9c2028: read1 error -71
[  134.257749][ T5900] gspca_sn9c2028: read1 error -71
[  134.267099][ T5900] gspca_sn9c2028: read1 error -71
[  134.270985][ T5900] sn9c2028 5-1:0.0: probe with driver sn9c2028 failed with error -71
[  134.287514][ T5900] usb 5-1: USB disconnect, device number 3
[  134.520169][ T5316] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  134.678302][ T5316] usb 1-1: Using ep0 maxpacket: 32
[  134.679399][ T5850] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  134.692753][ T5316] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[  134.696260][ T5316] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  134.702610][ T5316] usb 1-1: Product: syz
[  134.704244][ T5316] usb 1-1: Manufacturer: syz
[  134.712606][ T5316] usb 1-1: SerialNumber: syz
[  134.721592][ T5316] usb 1-1: config 0 descriptor??
[  134.735228][ T5316] gspca_main: stk1135-2.14.0 probing 174f:6a31
[  134.857560][ T8309] netlink: 32 bytes leftover after parsing attributes in process `syz.1.817'.
[  134.861055][ T8309] tipc: Invalid UDP bearer configuration
[  134.861092][ T8309] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  135.136019][ T8308] loop4: detected capacity change from 0 to 32768
[  135.153229][ T8313] loop1: detected capacity change from 0 to 32768
[  135.156762][ T8313] XFS: ikeep mount option is deprecated.
[  135.169449][ T8308] (syz.4.818,8308,1):ocfs2_load_local_alloc:339 ERROR: inconsistent detected, clean journal with unrecovered local alloc, please run fsck.ocfs2!
[  135.169449][ T8308] found = 1, set = 0, taken = 0, off = 0
[  135.182242][ T8308] (syz.4.818,8308,1):ocfs2_load_local_alloc:356 ERROR: status = -22
[  135.185051][ T8308] (syz.4.818,8308,1):ocfs2_check_volume:2404 ERROR: status = -22
[  135.188155][ T8308] (syz.4.818,8308,1):ocfs2_check_volume:2432 ERROR: status = -22
[  135.194150][ T8308] (syz.4.818,8308,1):ocfs2_mount_volume:1764 ERROR: status = -22
[  135.198462][ T8308] (syz.4.818,8308,1):ocfs2_inode_is_valid_to_delete:928 ERROR: Skipping delete of root inode.
[  135.221758][ T8308] (syz.4.818,8308,1):ocfs2_fill_super:1177 ERROR: status = -22
[  135.233635][ T8313] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  135.332153][ T8313] XFS (loop1): Ending clean mount
[  135.342302][ T8313] XFS (loop1): Quotacheck needed: Please wait.
[  135.391610][ T8313] XFS (loop1): Quotacheck: Done.
[  135.481451][ T5850] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  135.823828][ T8347] netlink: 28 bytes leftover after parsing attributes in process `syz.4.825'.
[  135.827517][ T8347] netlink: 8 bytes leftover after parsing attributes in process `syz.4.825'.
[  136.204147][ T5316] gspca_stk1135: reg_w 0xd err -71
[  136.206958][ T5316] gspca_stk1135: serial bus timeout: status=0x00
[  136.211410][ T5316] gspca_stk1135: Sensor write failed
[  136.213191][ T5316] gspca_stk1135: serial bus timeout: status=0x00
[  136.215263][ T5316] gspca_stk1135: Sensor write failed
[  136.217262][ T5316] gspca_stk1135: serial bus timeout: status=0x00
[  136.220825][ T5316] gspca_stk1135: Sensor read failed
[  136.223064][ T5316] gspca_stk1135: serial bus timeout: status=0x00
[  136.225382][ T5316] gspca_stk1135: Sensor read failed
[  136.227272][ T5316] gspca_stk1135: Detected sensor type unknown (0x0)
[  136.231261][ T5316] gspca_stk1135: serial bus timeout: status=0x00
[  136.233623][ T5316] gspca_stk1135: Sensor read failed
[  136.235515][ T5316] gspca_stk1135: serial bus timeout: status=0x00
[  136.237859][ T5316] gspca_stk1135: Sensor read failed
[  136.241815][ T5316] gspca_stk1135: serial bus timeout: status=0x00
[  136.244110][ T5316] gspca_stk1135: Sensor write failed
[  136.246073][ T5316] gspca_stk1135: serial bus timeout: status=0x00
[  136.248407][ T5316] gspca_stk1135: Sensor write failed
[  136.251581][ T5316] stk1135 1-1:0.0: probe with driver stk1135 failed with error -71
[  136.259267][ T5316] usb 1-1: USB disconnect, device number 13
[  136.511894][ T8353] netlink: 28 bytes leftover after parsing attributes in process `syz.4.829'.
[  136.515158][ T8353] netlink: 108 bytes leftover after parsing attributes in process `syz.4.829'.
[  136.520990][ T8353] netlink: 28 bytes leftover after parsing attributes in process `syz.4.829'.
[  136.525025][ T8353] netlink: 108 bytes leftover after parsing attributes in process `syz.4.829'.
[  136.530286][ T8353] netlink: 84 bytes leftover after parsing attributes in process `syz.4.829'.
[  136.585399][ T8355] netlink: 4 bytes leftover after parsing attributes in process `syz.4.830'.
[  137.264705][ T8376] loop0: detected capacity change from 0 to 256
[  137.637772][ T8389] loop1: detected capacity change from 0 to 1024
[  137.652200][ T8389] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  137.952152][ T8389] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #15: block 3: comm syz.1.844: lblock 3 mapped to illegal pblock 3 (length 3)
[  137.967004][ T8389] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[  137.974360][ T8389] EXT4-fs (loop1): This should not happen!! Data will be lost
[  137.974360][ T8389] 
[  138.009125][ T4652] EXT4-fs error (device loop1): ext4_map_blocks:814: inode #15: block 8: comm kworker/u10:7: lblock 8 mapped to illegal pblock 8 (length 8)
[  138.016956][ T4652] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  138.023561][ T4652] EXT4-fs (loop1): This should not happen!! Data will be lost
[  138.023561][ T4652] 
[  138.030009][ T4652] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[  138.046780][ T4652] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 65 with max blocks 3 with error 28
[  138.055761][ T4652] EXT4-fs (loop1): This should not happen!! Data will be lost
[  138.055761][ T4652] 
[  138.059769][ T4652] EXT4-fs (loop1): Total free blocks count 0
[  138.062296][ T4652] EXT4-fs (loop1): Free/Dirty block details
[  138.065497][ T4652] EXT4-fs (loop1): free_blocks=4293918720
[  138.134148][ T8401] loop1: detected capacity change from 0 to 1024
[  138.166922][ T8401] hfsplus: request for non-existent node 128 in B*Tree
[  138.175508][ T8401] hfsplus: request for non-existent node 128 in B*Tree
[  138.266614][ T8399] loop4: detected capacity change from 0 to 32768
[  138.269712][ T8399] XFS: ikeep mount option is deprecated.
[  138.271829][ T8399] XFS: ikeep mount option is deprecated.
[  138.273863][ T8399] XFS: noikeep mount option is deprecated.
[  138.279970][ T8399] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  138.341212][ T8399] XFS (loop4): Ending clean mount
[  138.396266][ T7967] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  138.471159][ T5900] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  138.643521][ T5900] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  138.649191][ T5900] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7
[  138.665034][ T5900] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  138.672868][ T5900] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  138.676264][ T5900] usb 2-1: Product: syz
[  138.678017][ T5900] usb 2-1: Manufacturer: syz
[  138.690029][ T5900] usb 2-1: SerialNumber: syz
[  138.695678][ T5900] usb 2-1: config 0 descriptor??
[  138.728218][ T5900] usb 2-1: 0:0 : invalid sync pipe. is_playback 1, ep 0a, bSynchAddress 07
[  138.928249][ T5900] usb 2-1: USB disconnect, device number 7
[  139.088189][ T5860] udevd[5860]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  139.104830][   T10] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  139.280074][   T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  139.283549][   T10] usb 5-1: config 0 has no interfaces?
[  139.285546][   T10] usb 5-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53
[  139.289092][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  139.293092][   T10] usb 5-1: config 0 descriptor??
[  139.501065][ T5900] usb 5-1: USB disconnect, device number 4
[  139.990569][ T5316] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  140.138792][ T5316] usb 1-1: Using ep0 maxpacket: 8
[  140.147014][ T5316] usb 1-1: unable to get BOS descriptor or descriptor too short
[  140.153472][ T5316] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  140.158791][ T5316] usb 1-1: config 1 has no interface number 1
[  140.166544][ T5316] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  140.180197][ T5316] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7
[  140.190966][ T5316] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  140.200780][ T5316] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  140.203872][ T5316] usb 1-1: Product: syz
[  140.205510][ T5316] usb 1-1: Manufacturer: syz
[  140.207312][ T5316] usb 1-1: SerialNumber: syz
[  140.216905][ T8458] loop1: detected capacity change from 0 to 32768
[  140.243446][ T8458] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  140.317553][ T8458] XFS (loop1): Ending clean mount
[  140.456445][ T5316] usb 1-1: 2:1: cannot set freq 15828157 to ep 0x82
[  140.517658][ T5850] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  140.530082][ T5316] usb 1-1: USB disconnect, device number 14
[  140.739142][   T51] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  140.889150][   T51] usb 5-1: Using ep0 maxpacket: 8
[  140.895318][   T51] usb 5-1: config 135 has an invalid interface number: 230 but max is 0
[  140.898534][   T51] usb 5-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config
[  140.917093][   T51] usb 5-1: config 135 has no interface number 0
[  140.925110][   T51] usb 5-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  140.940631][   T51] usb 5-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a
[  140.944317][   T51] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  140.951862][   T51] usb 5-1: Product: syz
[  140.953525][   T51] usb 5-1: Manufacturer: syz
[  140.955357][   T51] usb 5-1: SerialNumber: syz
[  140.984756][   T51] usb 5-1: Found UVC 0.00 device syz (18ec:3288)
[  140.987155][   T51] usb 5-1: No valid video chain found.
[  141.087278][ T8511] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  141.142044][ T8513] netlink: 148 bytes leftover after parsing attributes in process `syz.0.878'.
[  141.145366][ T8513] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[  141.185683][ T8515] netlink: 'syz.0.879': attribute type 1 has an invalid length.
[  141.187876][ T5900] usb 5-1: USB disconnect, device number 5
[  141.217536][ T8515] 8021q: adding VLAN 0 to HW filter on device bond2
[  141.235714][ T8515] bond2: (slave geneve2): making interface the new active one
[  141.240417][ T8515] bond2: (slave geneve2): Enslaving as an active interface with an up link
[  141.401770][ T8527] loop0: detected capacity change from 0 to 1024
[  141.433092][ T1089] hfsplus: b-tree write err: -5, ino 4
[  143.174515][ T8568] netlink: 60 bytes leftover after parsing attributes in process `syz.1.894'.
[  143.178250][ T8568] netlink: 60 bytes leftover after parsing attributes in process `syz.1.894'.
[  143.247318][ T8565] loop0: detected capacity change from 0 to 4096
[  143.266040][ T8565] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512).
[  143.317844][ T8565] ntfs3(loop0): Failed to initialize $Extend/$Reparse.
[  143.426784][ T8589] cgroup: release_agent respecified
[  143.563301][ T8599] loop1: detected capacity change from 0 to 128
[  143.588870][ T8599] affs: No valid root block on device loop1
[  143.871401][ T8611] loop0: detected capacity change from 0 to 32768
[  143.891568][ T8611] ocfs2: Slot 0 on device (7,0) was already allocated to this node!
[  143.905511][ T8611] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  143.982348][ T5855] ocfs2: Unmounting device (7,0) on (node local)
[  144.011534][    T9] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  144.121016][ T8629] loop0: detected capacity change from 0 to 256
[  144.124052][ T8629] exfat: Deprecated parameter 'namecase'
[  144.125990][ T8629] exfat: Deprecated parameter 'utf8'
[  144.137627][ T8629] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d)
[  144.181651][    T9] usb 2-1: New USB device found, idVendor=041e, idProduct=4011, bcdDevice=af.98
[  144.184677][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  144.193079][    T9] usb 2-1: config 0 descriptor??
[  144.206661][    T9] pwc: Creative Labs Webcam Pro Ex detected.
[  144.280442][ T8639] loop0: detected capacity change from 0 to 256
[  144.414412][    T9] pwc: Failed to set LED on/off time (-71)
[  144.422254][    T9] pwc: send_video_command error -71
[  144.424817][    T9] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  144.429267][    T9] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71
[  144.439866][    T9] usb 2-1: USB disconnect, device number 8
[  145.060042][ T8652] netlink: 495 bytes leftover after parsing attributes in process `syz.4.930'.
[  145.338079][ T8663] sctp: [Deprecated]: syz.1.935 (pid 8663) Use of struct sctp_assoc_value in delayed_ack socket option.
[  145.338079][ T8663] Use struct sctp_sack_info instead
[  145.424233][ T8666] futex_wake_op: syz.0.937 tries to shift op by -1; fix this program
[  145.482629][ T8667] netlink: 'syz.1.936': attribute type 1 has an invalid length.
[  145.492059][ T8667] netlink: 20 bytes leftover after parsing attributes in process `syz.1.936'.
[  145.772975][ T8679] openvswitch: netlink: Multiple metadata blocks provided
[  146.058935][ T8685] loop0: detected capacity change from 0 to 4096
[  146.070845][ T8685] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512).
[  146.093073][ T5856] udevd[5856]: symlink '../../loop0' '/dev/disk/by-uuid/68CE0ED73BAA5F78.tmp-b7:0' failed: Read-only file system
[  146.123467][ T8685] ntfs3(loop0): ino=19, mi_enum_attr
[  146.125431][ T8685] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  146.139043][   T51] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  146.305452][   T51] usb 2-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0
[  146.309228][   T51] usb 2-1: config 0 interface 0 has no altsetting 0
[  146.311593][   T51] usb 2-1: New USB device found, idVendor=056a, idProduct=0333, bcdDevice= 0.00
[  146.315399][   T51] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  146.333342][   T51] usb 2-1: config 0 descriptor??
[  146.430939][ T8689] loop0: detected capacity change from 0 to 1024
[  146.456982][ T5856] udevd[5856]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system
[  146.479655][ T5856] udevd[5856]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system
[  146.498410][ T8689] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  146.573383][ T5855] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  146.781189][   T51] wacom 0003:056A:0333.0005: hidraw0: USB HID v0.00 Device [HID 056a:0333] on usb-dummy_hcd.1-1/input0
[  146.946463][ T8705] bond0: entered promiscuous mode
[  146.948404][ T8705] bond_slave_0: entered promiscuous mode
[  146.953344][ T8705] bond_slave_1: entered promiscuous mode
[  147.001211][   T51] usb 2-1: USB disconnect, device number 9
[  148.021625][ T8731] netlink: 6 bytes leftover after parsing attributes in process `syz.4.965'.
[  148.611221][ T8736] loop4: detected capacity change from 0 to 40427
[  148.615617][ T8736] F2FS-fs (loop4): build fault injection rate: 771
[  148.623849][ T8736] F2FS-fs (loop4): invalid crc value
[  148.646305][ T5856] udevd[5856]: symlink '../../loop4' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:4' failed: Read-only file system
[  148.667526][ T8736] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  148.671378][ T8736] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  148.672209][ T5856] udevd[5856]: symlink '../../loop4' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:4' failed: Read-only file system
[  148.704669][ T7967] bio_check_eod: 104 callbacks suppressed
[  148.704679][ T7967] syz-executor: attempt to access beyond end of device
[  148.704679][ T7967] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  148.712808][ T7967] CPU: 0 UID: 0 PID: 7967 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  148.712825][ T7967] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  148.712831][ T7967] Call Trace:
[  148.712837][ T7967]  <TASK>
[  148.712842][ T7967]  dump_stack_lvl+0x189/0x250
[  148.712864][ T7967]  ? __pfx_dump_stack_lvl+0x10/0x10
[  148.712877][ T7967]  ? __pfx_queue_work_on+0x10/0x10
[  148.712915][ T7967]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  148.712931][ T7967]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  148.712955][ T7967]  f2fs_handle_critical_error+0x37c/0x540
[  148.712978][ T7967]  f2fs_write_end_io+0x886/0xb60
[  148.713004][ T7967]  __submit_merged_bio+0x27a/0x6a0
[  148.713026][ T7967]  __submit_merged_write_cond+0x255/0x530
[  148.713049][ T7967]  f2fs_write_data_pages+0x261d/0x3000
[  148.713091][ T7967]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  148.713157][ T7967]  ? __mod_zone_page_state+0xd7/0x140
[  148.713184][ T7967]  ? folios_put_refs+0x560/0x640
[  148.713206][ T7967]  ? __lock_acquire+0xab9/0xd20
[  148.713229][ T7967]  ? do_raw_spin_lock+0x121/0x290
[  148.713254][ T7967]  ? do_raw_spin_unlock+0x4d/0x240
[  148.713268][ T7967]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  148.713286][ T7967]  do_writepages+0x32e/0x550
[  148.713311][ T7967]  ? do_raw_spin_unlock+0x4d/0x240
[  148.713328][ T7967]  filemap_fdatawrite+0x199/0x240
[  148.713344][ T7967]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  148.713400][ T7967]  ? do_raw_spin_unlock+0x4d/0x240
[  148.713419][ T7967]  f2fs_sync_dirty_inodes+0x31f/0x830
[  148.713444][ T7967]  f2fs_write_checkpoint+0x95a/0x1df0
[  148.713474][ T7967]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  148.713516][ T7967]  ? f2fs_stop_gc_thread+0x7f/0xb0
[  148.713528][ T7967]  ? kfree+0x18e/0x440
[  148.713544][ T7967]  ? kill_f2fs_super+0x298/0x6c0
[  148.713559][ T7967]  kill_f2fs_super+0x2c3/0x6c0
[  148.713574][ T7967]  ? __pfx_kill_f2fs_super+0x10/0x10
[  148.713584][ T7967]  ? radix_tree_delete_item+0x2b6/0x400
[  148.713604][ T7967]  ? shrinker_free+0x2ce/0x3e0
[  148.713617][ T7967]  deactivate_locked_super+0xbc/0x130
[  148.713632][ T7967]  cleanup_mnt+0x425/0x4c0
[  148.713646][ T7967]  ? lockdep_hardirqs_on+0x9c/0x150
[  148.713664][ T7967]  task_work_run+0x1d4/0x260
[  148.713684][ T7967]  ? __pfx_task_work_run+0x10/0x10
[  148.713696][ T7967]  ? __x64_sys_umount+0x122/0x160
[  148.713713][ T7967]  ? exit_to_user_mode_loop+0x40/0x110
[  148.713735][ T7967]  exit_to_user_mode_loop+0xec/0x110
[  148.713750][ T7967]  do_syscall_64+0x2bd/0x3b0
[  148.713766][ T7967]  ? lockdep_hardirqs_on+0x9c/0x150
[  148.713781][ T7967]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  148.713792][ T7967]  ? exc_page_fault+0x9f/0xf0
[  148.713807][ T7967]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  148.713819][ T7967] RIP: 0033:0x7fcfc6f8ff17
[  148.713832][ T7967] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  148.713841][ T7967] RSP: 002b:00007ffe327a37b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  148.713855][ T7967] RAX: 0000000000000000 RBX: 00007fcfc7011c05 RCX: 00007fcfc6f8ff17
[  148.713862][ T7967] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe327a3870
[  148.713870][ T7967] RBP: 00007ffe327a3870 R08: 0000000000000000 R09: 0000000000000000
[  148.713876][ T7967] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe327a4900
[  148.713909][ T7967] R13: 00007fcfc7011c05 R14: 000000000002444b R15: 00007ffe327a4940
[  148.713932][ T7967]  </TASK>
[  148.714536][ T7967] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  149.100254][ T8756] loop4: detected capacity change from 0 to 32768
[  149.103240][ T8756] btrfs: Deprecated parameter 'usebackuproot'
[  149.105346][ T8756] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  149.108998][ T8756] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.972 (8756)
[  149.118344][ T8756] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  149.123057][ T8756] BTRFS info (device loop4): using crc32c (crc32c-lib) checksum algorithm
[  149.126515][ T8756] BTRFS info (device loop4): using free-space-tree
[  149.130237][ T5856] udevd[5856]: symlink '../../loop4' '/dev/disk/by-uuid/c9fe44da-de57-406a-8241-57ec7d4412cf.tmp-b7:4' failed: Read-only file system
[  149.143637][ T4663] BTRFS warning (device loop4): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  149.148294][ T8756] BTRFS error (device loop4): failed to load root extent
[  149.151021][ T8756] BTRFS warning (device loop4): try to load backup roots slot 1
[  149.153599][ T4617] BTRFS warning (device loop4): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  149.157937][ T8756] BTRFS warning (device loop4): couldn't read tree root
[  149.160295][ T8756] BTRFS warning (device loop4): try to load backup roots slot 2
[  149.163211][ T4617] BTRFS error (device loop4): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  149.167253][ T8756] BTRFS warning (device loop4): couldn't read tree root
[  149.168658][    T9] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  149.170112][ T8756] BTRFS warning (device loop4): try to load backup roots slot 3
[  149.181097][ T8756] BTRFS info (device loop4): rebuilding free space tree
[  149.191015][ T8756] BTRFS info (device loop4): checking UUID tree
[  149.242485][ T7967] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  149.307181][ T5856] udevd[5856]: symlink '../../loop4' '/dev/disk/by-uuid/c9fe44da-de57-406a-8241-57ec7d4412cf.tmp-b7:4' failed: Read-only file system
[  149.342308][    T9] usb 2-1: Using ep0 maxpacket: 16
[  149.355791][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  149.374223][    T9] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55
[  149.377999][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  149.389193][    T9] usb 2-1: Product: syz
[  149.390999][    T9] usb 2-1: Manufacturer: syz
[  149.392997][    T9] usb 2-1: SerialNumber: syz
[  149.407420][    T9] usb 2-1: config 0 descriptor??
[  149.424439][    T9] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  149.499929][ T8782] netlink: 6 bytes leftover after parsing attributes in process `syz.0.976'.
[  149.505154][ T8782] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  149.622388][   T51] usb 2-1: USB disconnect, device number 10
[  149.625159][   T13] usb 2-1: Failed to submit usb control message: -71
[  149.627640][   T13] usb 2-1: unable to send the bmi data to the device: -71
[  149.631195][   T13] usb 2-1: unable to get target info from device
[  149.633763][   T13] usb 2-1: could not get target info (-71)
[  149.636344][   T13] usb 2-1: could not probe fw (-71)
[  149.755778][ T8792] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  149.793490][ T8794] loop0: detected capacity change from 0 to 64
[  149.802458][ T8794] MINIX-fs: mounting file system with errors, running fsck is recommended
[  149.903129][ T8798] netlink: 12 bytes leftover after parsing attributes in process `syz.0.984'.
[  149.938212][ T8800] loop0: detected capacity change from 0 to 16
[  149.943469][ T8800] erofs (device loop0): mounted with root inode @ nid 36.
[  149.952704][ T5856] udevd[5856]: symlink '../../loop0' '/dev/disk/by-uuid/dc99752b-953d-459c-b2db-a5c46e0e7dba.tmp-b7:0' failed: Read-only file system
[  149.966933][ T5856] udevd[5856]: symlink '../../loop0' '/dev/disk/by-uuid/dc99752b-953d-459c-b2db-a5c46e0e7dba.tmp-b7:0' failed: Read-only file system
[  149.993739][ T8802] Bluetooth: MGMT ver 1.23
[  150.367957][ T8808] bridge0: port 1(bridge_slave_0) entered disabled state
[  150.375660][ T8808] bridge0: port 2(bridge_slave_1) entered disabled state
[  150.590964][    T9] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  150.779049][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  150.787673][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  150.792146][    T9] usb 5-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00
[  150.795973][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  150.807304][    T9] usb 5-1: config 0 descriptor??
[  151.286469][    T9] hid-thrustmaster 0003:044F:B65D.0006: unknown main item tag 0x0
[  151.294124][    T9] hid-thrustmaster 0003:044F:B65D.0006: unknown main item tag 0x0
[  151.296935][    T9] hid-thrustmaster 0003:044F:B65D.0006: unknown main item tag 0x0
[  151.300163][    T9] hid-thrustmaster 0003:044F:B65D.0006: unknown main item tag 0x0
[  151.302903][    T9] hid-thrustmaster 0003:044F:B65D.0006: unknown main item tag 0x0
[  151.305745][    T9] hid-thrustmaster 0003:044F:B65D.0006: unknown main item tag 0x0
[  151.308452][    T9] hid-thrustmaster 0003:044F:B65D.0006: unknown main item tag 0x0
[  151.329658][    T9] hid-thrustmaster 0003:044F:B65D.0006: hidraw0: USB HID v0.00 Device [HID 044f:b65d] on usb-dummy_hcd.4-1/input0
[  151.340257][    T9] hid-thrustmaster 0003:044F:B65D.0006: Wrong number of endpoints?
[  151.450429][   T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  151.454680][   T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  151.507650][    C0] hid-thrustmaster 0003:044F:B65D.0006: Unknown wheel's model id 0x0, unable to proceed further with wheel init
[  151.567956][   T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  151.573989][   T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  151.676721][   T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  151.681785][   T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  151.711015][   T10] usb 5-1: USB disconnect, device number 6
[  151.765044][   T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  151.772606][   T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  151.819987][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  151.826486][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  151.830335][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  151.833933][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  151.840080][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  152.095367][   T13] bridge_slave_1: left allmulticast mode
[  152.097672][   T13] bridge_slave_1: left promiscuous mode
[  152.102694][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  152.110993][   T13] bridge_slave_0: left allmulticast mode
[  152.113440][   T13] bridge_slave_0: left promiscuous mode
[  152.117290][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  152.741712][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  152.747443][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  152.755244][   T13] bond0 (unregistering): (slave wlan1): Releasing backup interface
[  152.767138][   T13] bond0 (unregistering): Released all slaves
[  152.820301][ T8851] loop0: detected capacity change from 0 to 40427
[  152.845107][ T8851] F2FS-fs (loop0): build fault injection rate: 771
[  152.853701][ T8851] F2FS-fs (loop0): invalid crc value
[  152.859633][ T8845] mac80211_hwsim hwsim12 wlan1: entered promiscuous mode
[  152.862529][ T8845] mac80211_hwsim hwsim12 wlan1: entered allmulticast mode
[  152.868807][ T5856] udevd[5856]: symlink '../../loop0' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:0' failed: Read-only file system
[  152.893458][ T5856] udevd[5856]: symlink '../../loop0' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:0' failed: Read-only file system
[  152.936001][ T8851] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  152.940857][ T8851] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  152.948075][ T8825] chnl_net:caif_netlink_parms(): no params data found
[  152.962180][ T8851] F2FS-fs (loop0): Unexpected flush for atomic writes: ino=10, npages=1
[  152.970254][ T8851] syz.0.1005: attempt to access beyond end of device
[  152.970254][ T8851] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  153.021246][ T5855] syz-executor: attempt to access beyond end of device
[  153.021246][ T5855] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  153.025805][ T5855] CPU: 1 UID: 0 PID: 5855 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  153.025816][ T5855] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  153.025821][ T5855] Call Trace:
[  153.025824][ T5855]  <TASK>
[  153.025828][ T5855]  dump_stack_lvl+0x189/0x250
[  153.025842][ T5855]  ? __pfx_dump_stack_lvl+0x10/0x10
[  153.025851][ T5855]  ? __pfx_queue_work_on+0x10/0x10
[  153.025858][ T5855]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  153.025888][ T5855]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  153.025904][ T5855]  f2fs_handle_critical_error+0x37c/0x540
[  153.025918][ T5855]  f2fs_write_end_io+0x886/0xb60
[  153.025933][ T5855]  __submit_merged_bio+0x27a/0x6a0
[  153.025945][ T5855]  __submit_merged_write_cond+0x255/0x530
[  153.025957][ T5855]  f2fs_write_data_pages+0x261d/0x3000
[  153.025980][ T5855]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  153.026014][ T5855]  ? folios_put_refs+0x559/0x640
[  153.026026][ T5855]  ? __pfx_folios_put_refs+0x10/0x10
[  153.026032][ T5855]  ? rcu_is_watching+0x15/0xb0
[  153.026044][ T5855]  ? __lock_acquire+0xab9/0xd20
[  153.026061][ T5855]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  153.026071][ T5855]  do_writepages+0x32e/0x550
[  153.026084][ T5855]  ? do_raw_spin_unlock+0x4d/0x240
[  153.026098][ T5855]  filemap_fdatawrite+0x199/0x240
[  153.026108][ T5855]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  153.026136][ T5855]  ? do_raw_spin_unlock+0x4d/0x240
[  153.026146][ T5855]  f2fs_sync_dirty_inodes+0x31f/0x830
[  153.026160][ T5855]  f2fs_write_checkpoint+0x95a/0x1df0
[  153.026176][ T5855]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  153.026201][ T5855]  ? f2fs_stop_gc_thread+0x7f/0xb0
[  153.026207][ T5855]  ? kfree+0x18e/0x440
[  153.026217][ T5855]  ? kill_f2fs_super+0x298/0x6c0
[  153.026241][ T5855]  kill_f2fs_super+0x2c3/0x6c0
[  153.026253][ T5855]  ? __pfx_kill_f2fs_super+0x10/0x10
[  153.026258][ T5855]  ? radix_tree_delete_item+0x2b6/0x400
[  153.026271][ T5855]  ? shrinker_free+0x2ce/0x3e0
[  153.026280][ T5855]  deactivate_locked_super+0xbc/0x130
[  153.026290][ T5855]  cleanup_mnt+0x425/0x4c0
[  153.026298][ T5855]  ? lockdep_hardirqs_on+0x9c/0x150
[  153.026308][ T5855]  task_work_run+0x1d4/0x260
[  153.026319][ T5855]  ? __pfx_task_work_run+0x10/0x10
[  153.026326][ T5855]  ? __x64_sys_umount+0x122/0x160
[  153.026337][ T5855]  ? exit_to_user_mode_loop+0x40/0x110
[  153.026349][ T5855]  exit_to_user_mode_loop+0xec/0x110
[  153.026358][ T5855]  do_syscall_64+0x2bd/0x3b0
[  153.026367][ T5855]  ? lockdep_hardirqs_on+0x9c/0x150
[  153.026375][ T5855]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  153.026382][ T5855]  ? exc_page_fault+0x9f/0xf0
[  153.026391][ T5855]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  153.026398][ T5855] RIP: 0033:0x7f323758ff17
[  153.026406][ T5855] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  153.026412][ T5855] RSP: 002b:00007ffcb9024de8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  153.026421][ T5855] RAX: 0000000000000000 RBX: 00007f3237611c05 RCX: 00007f323758ff17
[  153.026426][ T5855] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcb9024ea0
[  153.026430][ T5855] RBP: 00007ffcb9024ea0 R08: 0000000000000000 R09: 0000000000000000
[  153.026434][ T5855] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffcb9025f30
[  153.026438][ T5855] R13: 00007f3237611c05 R14: 000000000002551c R15: 00007ffcb9025f70
[  153.026451][ T5855]  </TASK>
[  153.027086][ T5855] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  153.273822][ T8857] loop4: detected capacity change from 0 to 32768
[  153.304177][ T8857] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1006 (8857)
[  153.312569][ T8825] bridge0: port 1(bridge_slave_0) entered blocking state
[  153.320672][ T8825] bridge0: port 1(bridge_slave_0) entered disabled state
[  153.323671][ T8825] bridge_slave_0: entered allmulticast mode
[  153.334503][ T8825] bridge_slave_0: entered promiscuous mode
[  153.347079][ T8857] BTRFS info (device loop4): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  153.357912][ T5856] udevd[5856]: symlink '../../loop4' '/dev/disk/by-uuid/a6a605fc-d5f1-4e66-8595-3726e2b761d6.tmp-b7:4' failed: Read-only file system
[  153.369255][ T8857] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm
[  153.373084][ T8857] BTRFS info (device loop4): using free-space-tree
[  153.425500][ T8825] bridge0: port 2(bridge_slave_1) entered blocking state
[  153.433496][ T8825] bridge0: port 2(bridge_slave_1) entered disabled state
[  153.440500][ T8825] bridge_slave_1: entered allmulticast mode
[  153.450375][ T8825] bridge_slave_1: entered promiscuous mode
[  153.558017][ T7967] BTRFS info (device loop4): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  153.567459][ T5856] udevd[5856]: symlink '../../loop4' '/dev/disk/by-uuid/a6a605fc-d5f1-4e66-8595-3726e2b761d6.tmp-b7:4' failed: Read-only file system
[  153.591251][ T8825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  153.602482][ T8825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  153.710455][ T8889] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1009'.
[  153.743418][   T13] hsr_slave_0: left promiscuous mode
[  153.745992][   T13] hsr_slave_1: left promiscuous mode
[  153.748414][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  153.751697][   T13] batadv0: mtu less than device minimum
[  153.755729][   T13] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  153.760401][   T13] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  153.764432][   T13] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  153.768704][   T13] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  153.773284][   T13] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  153.777306][   T13] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  153.781636][   T13] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  153.785898][   T13] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  153.800738][ T8892] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1010'.
[  153.805019][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  153.809467][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  153.838652][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  153.846940][   T13] batman_adv: batadv0: Interface deactivated: dummy0
[  153.852945][   T13] batman_adv: batadv0: Removing interface: dummy0
[  153.866398][   T13] veth1_macvtap: left promiscuous mode
[  153.868298][   T13] veth0_macvtap: left promiscuous mode
[  153.870550][   T13] veth1_vlan: left promiscuous mode
[  153.872372][   T13] veth0_vlan: left promiscuous mode
[  153.925153][   T54] Bluetooth: hci1: command tx timeout
[  154.175376][   T13] team0 (unregistering): Port device team_slave_1 removed
[  154.205512][   T13] team0 (unregistering): Port device team_slave_0 removed
[  154.563574][ T8825] team0: Port device team_slave_0 added
[  154.588830][ T8825] team0: Port device team_slave_1 added
[  154.648077][ T8896] loop0: detected capacity change from 0 to 512
[  154.661142][ T5856] udevd[5856]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system
[  154.682820][ T8825] batman_adv: batadv0: Adding interface: batadv_slave_0
[  154.685448][ T8825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  154.692212][ T5856] udevd[5856]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:0' failed: Read-only file system
[  154.711638][ T8896] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  154.716774][ T8825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  154.749255][ T8825] batman_adv: batadv0: Adding interface: batadv_slave_1
[  154.752035][ T8825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  154.762179][ T8825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  154.803927][ T8896] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  154.871377][ T8825] hsr_slave_0: entered promiscuous mode
[  154.874539][ T8825] hsr_slave_1: entered promiscuous mode
[  154.877094][ T8825] debugfs: 'hsr0' already exists in 'hsr'
[  154.886106][ T8825] Cannot create hsr debugfs directory
[  155.194513][ T8926] bridge0: entered allmulticast mode
[  155.232555][ T8825] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  155.244295][ T8825] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  155.256891][ T8924] loop4: detected capacity change from 0 to 4096
[  155.264745][ T8825] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  155.273016][ T8825] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  155.305446][ T5856] udevd[5856]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system
[  155.310581][ T8924] ntfs3(loop4): Different NTFS sector size (2048) and media sector size (512).
[  155.314772][ T8924] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  155.322175][ T5856] udevd[5856]: symlink '../../loop4' '/dev/disk/by-uuid/7A12269445CA348F.tmp-b7:4' failed: Read-only file system
[  155.340349][ T8924] ntfs3(loop4): volume is dirty and "force" flag is not set!
[  155.366821][ T5856] udevd[5856]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system
[  155.452435][ T8825] 8021q: adding VLAN 0 to HW filter on device bond0
[  155.484782][ T8825] 8021q: adding VLAN 0 to HW filter on device team0
[  155.492999][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[  155.495237][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[  155.512469][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[  155.514739][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[  155.547985][ T8825] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  155.558308][ T8825] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  155.674207][ T8825] 8021q: adding VLAN 0 to HW filter on device batadv0
[  155.922838][ T8825] veth0_vlan: entered promiscuous mode
[  155.937046][ T8825] veth1_vlan: entered promiscuous mode
[  155.962430][ T8825] veth0_macvtap: entered promiscuous mode
[  155.972974][ T8825] veth1_macvtap: entered promiscuous mode
[  155.988253][ T8825] batman_adv: batadv0: Interface activated: batadv_slave_0
[  156.000594][ T8825] batman_adv: batadv0: Interface activated: batadv_slave_1
[  156.009334][   T54] Bluetooth: hci1: command tx timeout
[  156.018307][ T5913] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  156.023221][ T5913] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  156.026514][ T5913] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  156.032471][ T5913] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  156.113449][ T4652] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  156.121579][ T4652] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  156.146442][  T783] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  156.156645][  T783] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  156.240566][    T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  156.429642][    T9] usb 5-1: Using ep0 maxpacket: 16
[  156.433642][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  156.453901][    T9] usb 5-1: New USB device found, idVendor=0b57, idProduct=2bbd, bcdDevice=e7.cc
[  156.457517][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  156.469787][    T9] usb 5-1: Product: syz
[  156.471493][    T9] usb 5-1: Manufacturer: syz
[  156.476257][    T9] usb 5-1: SerialNumber: syz
[  156.485724][    T9] usb 5-1: config 0 descriptor??
[  156.497342][    T9] usbhid 5-1:0.0: couldn't find an input interrupt endpoint
[  156.572520][ T9022] loop5: detected capacity change from 0 to 32768
[  156.666695][ T9022] bcachefs (loop5): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,metadata_target=invalid label 246,noinodes_use_key_cache,journal_flush_delay=3,journal_reclaim_delay=1000,nocow
[  156.666708][ T9022]   allowing incompatible features above 0.0: (unknown version)
[  156.666712][ T9022]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  156.683240][ T9022] bcachefs (loop5): Using encoding defined by superblock: utf8-12.1.0
[  156.686079][ T9022] bcachefs (loop5): initializing new filesystem
[  156.694822][  T791] usb 5-1: USB disconnect, device number 7
[  156.707284][ T9022] bcachefs (loop5): going read-write
[  156.725249][ T9022] bcachefs (loop5): marking superblocks
[  156.738065][ T9022] bcachefs (loop5): initializing freespace
[  156.750967][ T9022] bcachefs (loop5): done initializing freespace
[  156.755350][ T9022] bcachefs (loop5): reading snapshots table
[  156.757357][ T9022] bcachefs (loop5): reading snapshots done
[  156.766379][ T9022] bcachefs (loop5): done starting filesystem
[  156.784415][   T33] audit: type=1800 audit(156.642:18): pid=9022 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1045" name="file1" dev="loop5" ino=4098 res=0 errno=0
[  156.859676][ T8825] bcachefs (loop5): shutting down
[  156.861739][ T8825] bcachefs (loop5): going read-only
[  156.864019][ T8825] bcachefs (loop5): finished waiting for writes to stop
[  156.867535][ T8825] bcachefs (loop5): flushing journal and stopping allocators, journal seq 4
[  156.891917][ T8825] bcachefs (loop5): flushing journal and stopping allocators complete, journal seq 6
[  156.895841][ T8825] bcachefs (loop5): clean shutdown complete, journal seq 7
[  156.899359][ T8825] bcachefs (loop5): marking filesystem clean
[  156.920370][ T8825] bcachefs (loop5): shutdown complete
[  157.308343][ T9083] loop4: detected capacity change from 0 to 4096
[  157.322578][ T5856] udevd[5856]: symlink '../../loop4' '/dev/disk/by-label/syzkaller.tmp-b7:4' failed: Read-only file system
[  157.330746][ T9083] EXT4-fs (loop4): Test dummy encryption mode enabled
[  157.338246][ T9083] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  157.463987][ T7967] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  158.079800][   T54] Bluetooth: hci1: command tx timeout
[  158.282368][ T9136] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1075'.
[  158.476182][ T9142] loop5: detected capacity change from 0 to 32768
[  158.633013][ T9142] bcachefs (loop5): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  158.633026][ T9142]   allowing incompatible features above 0.0: (unknown version)
[  158.633032][ T9142]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  158.648291][ T9142] bcachefs (loop5): Using encoding defined by superblock: utf8-12.1.0
[  158.652684][ T9142] bcachefs (loop5): initializing new filesystem
[  158.666236][ T9142] bcachefs (loop5): going read-write
[  158.682406][ T9142] bcachefs (loop5): marking superblocks
[  158.687022][ T9142] bcachefs (loop5): initializing freespace
[  158.688892][ T9142] bcachefs (loop5): done initializing freespace
[  158.690812][ T9142] bcachefs (loop5): reading snapshots table
[  158.690839][ T9142] bcachefs (loop5): reading snapshots done
[  158.725193][ T9142] bcachefs (loop5): done starting filesystem
[  159.149182][   T33] audit: type=1804 audit(158.912:19): pid=9166 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.1078" name="/newroot/8/file0/file0" dev="loop5" ino=4098 res=1 errno=0
[  159.326594][ T8825] bcachefs (loop5): shutting down
[  159.330040][ T8825] bcachefs (loop5): going read-only
[  159.332192][ T8825] bcachefs (loop5): finished waiting for writes to stop
[  159.338142][ T8825] bcachefs (loop5): flushing journal and stopping allocators, journal seq 2
[  159.447101][ T8825] bcachefs (loop5): flushing journal and stopping allocators complete, journal seq 3
[  159.454152][ T8825] bcachefs (loop5): clean shutdown complete, journal seq 4
[  159.459463][ T8825] bcachefs (loop5): marking filesystem clean
[  159.570332][ T8825] bcachefs (loop5): shutdown complete
[  159.807533][ T9168] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1084'.
[  160.159805][   T54] Bluetooth: hci1: command tx timeout
[  160.340866][ T9182] netlink: 'syz.4.1091': attribute type 28 has an invalid length.
[  160.613461][ T9197] gfs2: gfs2 mount does not exist
[  160.731495][ T7634] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  160.882657][ T7634] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  160.886762][ T7634] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[  160.908814][ T7634] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  160.919555][ T7634] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0
[  160.927455][ T7634] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[  160.934064][ T7634] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  160.956585][ T7634] usb 5-1: config 0 descriptor??
[  161.117079][ T9216] loop5: detected capacity change from 0 to 256
[  161.127254][ T9216] FAT-fs (loop5): Directory bread(block 64) failed
[  161.130278][ T9216] FAT-fs (loop5): Directory bread(block 65) failed
[  161.132787][ T9216] FAT-fs (loop5): Directory bread(block 66) failed
[  161.135497][ T9216] FAT-fs (loop5): Directory bread(block 67) failed
[  161.143578][ T9216] FAT-fs (loop5): Directory bread(block 68) failed
[  161.145814][ T9216] FAT-fs (loop5): Directory bread(block 69) failed
[  161.148038][ T9216] FAT-fs (loop5): Directory bread(block 70) failed
[  161.151198][ T9216] FAT-fs (loop5): Directory bread(block 71) failed
[  161.153794][ T9216] FAT-fs (loop5): Directory bread(block 72) failed
[  161.155936][ T9216] FAT-fs (loop5): Directory bread(block 73) failed
[  161.166006][ T7634] hdpvr 5-1:0.0: firmware version 0x8 dated )˟=J+noKܐo5foɠObL
[  161.321073][ T9236] loop5: detected capacity change from 0 to 16
[  161.325302][ T9236] erofs (device loop5): mounted with root inode @ nid 36.
[  161.341209][ T5856] udevd[5856]: symlink '../../loop5' '/dev/disk/by-uuid/75500962-132d-43aa-bb98-c3833f701d6f.tmp-b7:5' failed: Read-only file system
[  161.350942][ T5856] udevd[5856]: symlink '../../loop5' '/dev/disk/by-uuid/75500962-132d-43aa-bb98-c3833f701d6f.tmp-b7:5' failed: Read-only file system
[  161.366622][ T7634] hdpvr 5-1:0.0: device init failed
[  161.368398][ T7634] hdpvr 5-1:0.0: probe with driver hdpvr failed with error -12
[  161.371296][ T5856] udevd[5856]: symlink '../../loop5' '/dev/disk/by-uuid/75500962-132d-43aa-bb98-c3833f701d6f.tmp-b7:5' failed: Read-only file system
[  161.382565][ T7634] usb 5-1: USB disconnect, device number 8
[  161.403264][ T9239] loop5: detected capacity change from 0 to 2048
[  161.415243][ T5856] udevd[5856]: symlink '../../loop5' '/dev/disk/by-label/LinuxUDF.tmp-b7:5' failed: Read-only file system
[  161.420828][ T5856] udevd[5856]: symlink '../../loop5' '/dev/disk/by-uuid/1234567812345678.tmp-b7:5' failed: Read-only file system
[  161.472877][ T5856] udevd[5856]: symlink '../../loop5' '/dev/disk/by-label/LinuxUDF.tmp-b7:5' failed: Read-only file system
[  161.478042][ T5856] udevd[5856]: symlink '../../loop5' '/dev/disk/by-uuid/1234567812345678.tmp-b7:5' failed: Read-only file system
[  161.494810][ T5856] udevd[5856]: symlink '../../loop5' '/dev/disk/by-label/LinuxUDF.tmp-b7:5' failed: Read-only file system
[  161.525557][ T5856] udevd[5856]: symlink '../../loop5' '/dev/disk/by-uuid/1234567812345678.tmp-b7:5' failed: Read-only file system
[  162.820158][ T9280] loop5: detected capacity change from 0 to 32768
[  162.827934][ T9280] (syz.5.1132,9280,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #66: rec_len % 4 != 0 - offset=108, inode=18446744073709486150, rec_len=65535, name_len=9
[  162.834637][ T9280] (syz.5.1132,9280,1):ocfs2_init_global_system_inodes:465 ERROR: status = -22
[  162.837992][ T9280] (syz.5.1132,9280,1):ocfs2_init_global_system_inodes:467 ERROR: Unable to load system inode 3, possibly corrupt fs?
[  162.838007][ T9280] (syz.5.1132,9280,1):ocfs2_init_global_system_inodes:476 ERROR: status = -22
[  162.846275][ T9280] (syz.5.1132,9280,1):ocfs2_initialize_super:2198 ERROR: status = -22
[  162.849614][ T9280] (syz.5.1132,9280,1):ocfs2_fill_super:1177 ERROR: status = -22
[  162.851586][ T5856] udevd[5856]: symlink '../../loop5' '/dev/disk/by-uuid/b1de653c-5ffc-4d88-b33b-244aab9eb3e9.tmp-b7:5' failed: Read-only file system
[  163.103743][ T9292] loop4: detected capacity change from 0 to 256
[  163.159047][ T9292] FAT-fs (loop4): Directory bread(block 64) failed
[  163.161192][ T9292] FAT-fs (loop4): Directory bread(block 65) failed
[  163.163247][ T9292] FAT-fs (loop4): Directory bread(block 66) failed
[  163.165285][ T9292] FAT-fs (loop4): Directory bread(block 67) failed
[  163.167365][ T9292] FAT-fs (loop4): Directory bread(block 68) failed
[  163.175676][ T9292] FAT-fs (loop4): Directory bread(block 69) failed
[  163.183466][ T9292] FAT-fs (loop4): Directory bread(block 70) failed
[  163.185679][ T9292] FAT-fs (loop4): Directory bread(block 71) failed
[  163.187815][ T9292] FAT-fs (loop4): Directory bread(block 72) failed
[  163.191275][ T9292] FAT-fs (loop4): Directory bread(block 73) failed
[  163.399284][ T9302] random: crng reseeded on system resumption
[  163.445023][ T9309] [U] 2
[  163.448403][ T9308] [U] 2
[  163.752060][ T9317] tmpfs: Cannot enable swap on remount if it was disabled on first mount
[  163.835417][ T9321] netlink: 'syz.0.1147': attribute type 12 has an invalid length.
[  163.984118][ T9328] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1150'.
[  163.987744][ T9328] bridge0: port 2(bridge_slave_1) entered disabled state
[  163.998341][ T9328] bridge0: port 2(bridge_slave_1) entered disabled state
[  164.529180][ T9347] loop4: detected capacity change from 0 to 512
[  164.536691][ T9347] EXT4-fs: Ignoring removed orlov option
[  164.539410][ T9347] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  164.545526][ T9347] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002]
[  164.555545][ T9347] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #15: comm syz.4.1158: corrupted in-inode xattr: e_value size too large
[  164.563027][ T9347] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.1158: couldn't read orphan inode 15 (err -117)
[  164.573413][ T9347] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  164.582661][ T9348] pimreg: entered allmulticast mode
[  164.593912][ T9347] overlayfs: upper fs needs to support d_type.
[  164.604750][ T9348] pimreg: left allmulticast mode
[  164.656124][ T7967] EXT4-fs error (device loop4): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39
[  164.665346][ T7967] EXT4-fs error (device loop4): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39
[  164.986359][ T7967] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  165.009613][ T5913] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  165.014531][ T5913] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  165.145956][ T5913] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  165.158712][ T5913] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  165.323088][ T5913] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  165.327420][ T5913] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  165.409978][ T5913] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  165.415436][ T5913] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  165.730692][ T5913] bridge_slave_1: left promiscuous mode
[  165.735948][ T5913] bridge0: port 2(bridge_slave_1) entered disabled state
[  165.755764][ T5913] bridge_slave_0: left allmulticast mode
[  165.757982][ T5913] bridge_slave_0: left promiscuous mode
[  165.760597][ T5913] bridge0: port 1(bridge_slave_0) entered disabled state
[  166.175569][ T5238] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  166.194988][ T5238] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  166.202134][ T5238] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  166.215941][ T5238] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  166.220329][ T5238] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  166.491112][ T5913] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  166.495444][ T5913] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  166.499393][ T5913] bond0 (unregistering): Released all slaves
[  166.948479][ T5913] hsr_slave_0: left promiscuous mode
[  166.987368][ T5913] hsr_slave_1: left promiscuous mode
[  166.990009][ T5913] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  166.992446][ T5913] batman_adv: batadv0: Removing interface: batadv_slave_0
[  167.008148][ T5913] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  167.018494][ T5913] batman_adv: batadv0: Removing interface: batadv_slave_1
[  167.047322][ T5913] veth1_macvtap: left promiscuous mode
[  167.050911][ T5913] veth0_macvtap: left promiscuous mode
[  167.280012][ T9408] netlink: 'syz.0.1177': attribute type 10 has an invalid length.
[  167.340336][ T5913] team0 (unregistering): Port device team_slave_1 removed
[  167.376704][ T5913] team0 (unregistering): Port device team_slave_0 removed
[  167.818106][ T9405] mac80211_hwsim hwsim4 wlan1: left allmulticast mode
[  167.848032][ T9408] mac80211_hwsim hwsim4 wlan1: entered promiscuous mode
[  167.853759][ T9408] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  167.857664][ T9371] chnl_net:caif_netlink_parms(): no params data found
[  168.020291][ T5899] usb 6-1: new full-speed USB device number 2 using dummy_hcd
[  168.051352][ T9371] bridge0: port 1(bridge_slave_0) entered blocking state
[  168.054232][ T9371] bridge0: port 1(bridge_slave_0) entered disabled state
[  168.057271][ T9371] bridge_slave_0: entered allmulticast mode
[  168.080910][ T9371] bridge_slave_0: entered promiscuous mode
[  168.090346][ T9371] bridge0: port 2(bridge_slave_1) entered blocking state
[  168.093361][ T9371] bridge0: port 2(bridge_slave_1) entered disabled state
[  168.110136][ T9371] bridge_slave_1: entered allmulticast mode
[  168.114009][ T9371] bridge_slave_1: entered promiscuous mode
[  168.171516][ T9371] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  168.177872][ T9371] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  168.217153][ T5899] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  168.222426][ T5899] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  168.225802][ T5899] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  168.250170][ T5899] usb 6-1: config 0 descriptor??
[  168.252722][ T9418] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  168.274947][ T9371] team0: Port device team_slave_0 added
[  168.280711][ T9371] team0: Port device team_slave_1 added
[  168.320528][ T5238] Bluetooth: hci0: command tx timeout
[  168.368119][ T9371] batman_adv: batadv0: Adding interface: batadv_slave_0
[  168.380882][ T9371] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  168.393064][ T9371] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  168.401637][ T9371] batman_adv: batadv0: Adding interface: batadv_slave_1
[  168.404404][ T9371] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  168.414501][ T9371] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  168.512574][ T9371] hsr_slave_0: entered promiscuous mode
[  168.515711][ T9371] hsr_slave_1: entered promiscuous mode
[  168.682875][ T5899] elan 0003:04F3:0755.0007: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.5-1/input0
[  169.210771][ T9371] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  169.216770][ T9371] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  169.229112][ T9371] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  169.236016][ T9371] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  169.329357][ T9371] 8021q: adding VLAN 0 to HW filter on device bond0
[  169.340853][ T9371] 8021q: adding VLAN 0 to HW filter on device team0
[  169.347005][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[  169.349468][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[  169.358328][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[  169.361133][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[  169.499441][ T9371] 8021q: adding VLAN 0 to HW filter on device batadv0
[  169.776301][ T9371] veth0_vlan: entered promiscuous mode
[  169.784412][ T9371] veth1_vlan: entered promiscuous mode
[  169.805003][ T9371] veth0_macvtap: entered promiscuous mode
[  169.810054][ T9371] veth1_macvtap: entered promiscuous mode
[  169.818199][ T9371] batman_adv: batadv0: Interface activated: batadv_slave_0
[  169.825893][ T9371] batman_adv: batadv0: Interface activated: batadv_slave_1
[  169.842417][ T5913] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  169.846497][ T5913] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  169.862231][ T5913] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  169.865393][ T5913] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  169.897618][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  169.904508][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  169.920994][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  169.924803][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  170.393845][ T9524] tipc: Started in network mode
[  170.396003][ T9524] tipc: Node identity ac141441, cluster identity 4711
[  170.399248][ T5238] Bluetooth: hci0: command tx timeout
[  170.402442][ T9524] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  170.587952][ T9536] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1194'.
[  170.596157][ T5880] usb 6-1: USB disconnect, device number 2
[  170.685754][ T9538] loop5: detected capacity change from 0 to 32768
[  170.692993][ T9538] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1195 (9538)
[  170.707993][ T9538] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  170.713575][ T5856] udevd[5856]: symlink '../../loop5' '/dev/disk/by-uuid/395ef67a-297e-477c-816d-cd80a5b93e5d.tmp-b7:5' failed: Read-only file system
[  170.719656][ T9538] BTRFS info (device loop5): using sha256 (sha256-lib) checksum algorithm
[  170.723759][ T9538] BTRFS info (device loop5): disk space caching is enabled
[  170.726159][ T9538] BTRFS warning (device loop5): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  170.797770][ T9538] BTRFS info (device loop5): rebuilding free space tree
[  170.815735][ T9538] BTRFS info (device loop5): disabling free space tree
[  170.823261][ T9538] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  170.829742][ T9538] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  170.895858][ T8825] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  170.965272][ T5856] udevd[5856]: symlink '../../loop5' '/dev/disk/by-uuid/395ef67a-297e-477c-816d-cd80a5b93e5d.tmp-b7:5' failed: Read-only file system
[  171.334206][ T9591] Bluetooth: MGMT ver 1.23
[  171.890252][ T9419] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  172.049576][ T9419] usb 6-1: Using ep0 maxpacket: 16
[  172.056338][ T9419] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00
[  172.061867][ T9419] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  172.065741][ T9419] usb 6-1: Product: syz
[  172.067472][ T9419] usb 6-1: Manufacturer: syz
[  172.072846][ T9419] usb 6-1: SerialNumber: syz
[  172.076529][ T9419] usb 6-1: config 0 descriptor??
[  172.090413][ T9419] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected
[  172.094125][ T9419] usb 6-1: Detected FT-X
[  172.315762][ T9419] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[  172.320789][ T9419] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  172.326373][ T9419] ftdi_sio 6-1:0.0: GPIO initialisation failed: -71
[  172.332741][ T9419] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  172.341007][ T9419] usb 6-1: USB disconnect, device number 3
[  172.347458][ T9419] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  172.373461][ T9419] ftdi_sio 6-1:0.0: device disconnected
[  172.478791][ T5238] Bluetooth: hci0: command tx timeout
[  173.366785][ T9665] loop5: detected capacity change from 0 to 4096
[  173.373157][ T9665] ntfs3(loop5): Different NTFS sector size (1024) and media sector size (512).
[  173.384795][ T5856] udevd[5856]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system
[  173.388285][ T9665] ntfs3(loop5): ino=1a, mi_enum_attr
[  173.393448][ T9665] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  173.399525][ T5856] udevd[5856]: symlink '../../loop5' '/dev/disk/by-uuid/7089678B273CDB5C.tmp-b7:5' failed: Read-only file system
[  173.481105][ T5856] udevd[5856]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system
[  173.485916][ T5856] udevd[5856]: symlink '../../loop5' '/dev/disk/by-uuid/7089678B273CDB5C.tmp-b7:5' failed: Read-only file system
[  173.524352][ T5856] udevd[5856]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system
[  173.692265][ T9663] loop6: detected capacity change from 0 to 40427
[  173.704003][ T9663] F2FS-fs (loop6): invalid crc value
[  173.765763][ T9663] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  173.770607][ T9663] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  173.785308][ T5856] udevd[5856]: symlink '../../loop6' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:6' failed: Read-only file system
[  174.119737][ T9371] syz-executor: attempt to access beyond end of device
[  174.119737][ T9371] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  174.130891][ T9371] CPU: 1 UID: 0 PID: 9371 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  174.130907][ T9371] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  174.130913][ T9371] Call Trace:
[  174.130917][ T9371]  <TASK>
[  174.130922][ T9371]  dump_stack_lvl+0x189/0x250
[  174.130958][ T9371]  ? __pfx_dump_stack_lvl+0x10/0x10
[  174.130970][ T9371]  ? __pfx_queue_work_on+0x10/0x10
[  174.130980][ T9371]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  174.130993][ T9371]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  174.131012][ T9371]  f2fs_handle_critical_error+0x37c/0x540
[  174.131031][ T9371]  f2fs_write_end_io+0x886/0xb60
[  174.131057][ T9371]  __submit_merged_bio+0x27a/0x6a0
[  174.131074][ T9371]  __submit_merged_write_cond+0x255/0x530
[  174.131091][ T9371]  f2fs_write_data_pages+0x261d/0x3000
[  174.131105][ T9371]  ? __pfx_usage_match+0x10/0x10
[  174.131113][ T9371]  ? __bfs+0x154/0x2a0
[  174.131141][ T9371]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  174.131153][ T9371]  ? __switch_to+0xdae/0x1670
[  174.131193][ T9371]  ? rcu_is_watching+0x15/0xb0
[  174.131203][ T9371]  ? trace_sched_exit_tp+0x36/0x110
[  174.131216][ T9371]  ? __schedule+0x17ae/0x4cc0
[  174.131230][ T9371]  ? folios_put_refs+0x559/0x640
[  174.131249][ T9371]  ? __lock_acquire+0xab9/0xd20
[  174.131269][ T9371]  ? do_raw_spin_lock+0x121/0x290
[  174.131287][ T9371]  ? do_raw_spin_unlock+0x4d/0x240
[  174.131298][ T9371]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  174.131314][ T9371]  do_writepages+0x32e/0x550
[  174.131334][ T9371]  ? do_raw_spin_unlock+0x4d/0x240
[  174.131348][ T9371]  filemap_fdatawrite+0x199/0x240
[  174.131361][ T9371]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  174.131403][ T9371]  ? do_raw_spin_unlock+0x4d/0x240
[  174.131418][ T9371]  f2fs_sync_dirty_inodes+0x31f/0x830
[  174.131437][ T9371]  f2fs_write_checkpoint+0x95a/0x1df0
[  174.131462][ T9371]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  174.131501][ T9371]  ? kill_f2fs_super+0x298/0x6c0
[  174.131515][ T9371]  kill_f2fs_super+0x2c3/0x6c0
[  174.131528][ T9371]  ? __pfx_kill_f2fs_super+0x10/0x10
[  174.131536][ T9371]  ? radix_tree_delete_item+0x2b6/0x400
[  174.131554][ T9371]  ? shrinker_free+0x2ce/0x3e0
[  174.131567][ T9371]  deactivate_locked_super+0xbc/0x130
[  174.131580][ T9371]  cleanup_mnt+0x425/0x4c0
[  174.131591][ T9371]  ? lockdep_hardirqs_on+0x9c/0x150
[  174.131606][ T9371]  task_work_run+0x1d4/0x260
[  174.131621][ T9371]  ? __pfx_task_work_run+0x10/0x10
[  174.131632][ T9371]  ? __x64_sys_umount+0x122/0x160
[  174.131648][ T9371]  ? exit_to_user_mode_loop+0x40/0x110
[  174.131664][ T9371]  exit_to_user_mode_loop+0xec/0x110
[  174.131677][ T9371]  do_syscall_64+0x2bd/0x3b0
[  174.131690][ T9371]  ? lockdep_hardirqs_on+0x9c/0x150
[  174.131702][ T9371]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  174.131712][ T9371]  ? exc_page_fault+0x9f/0xf0
[  174.131725][ T9371]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  174.131735][ T9371] RIP: 0033:0x7ff23bb8ff17
[  174.131745][ T9371] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  174.131753][ T9371] RSP: 002b:00007ffd584f84e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  174.131765][ T9371] RAX: 0000000000000000 RBX: 00007ff23bc11c05 RCX: 00007ff23bb8ff17
[  174.131772][ T9371] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd584f85a0
[  174.131778][ T9371] RBP: 00007ffd584f85a0 R08: 0000000000000000 R09: 0000000000000000
[  174.131784][ T9371] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd584f9630
[  174.131791][ T9371] R13: 00007ff23bc11c05 R14: 000000000002a686 R15: 00007ffd584f9670
[  174.131832][ T9371]  </TASK>
[  174.137245][ T9371] F2FS-fs (loop6): Stopped filesystem due to reason: 3
[  174.220677][ T9691] kAFS: Can only specify source 'none' with -o dyn
[  174.225764][ T9691] fuse: Unknown parameter 'V~Hȗ'
[  174.578894][ T5238] Bluetooth: hci0: command tx timeout
[  175.025812][ T9693] netlink: 'syz.0.1226': attribute type 13 has an invalid length.
[  175.035051][ T9693] netlink: 24859 bytes leftover after parsing attributes in process `syz.0.1226'.
[  175.184003][ T9697] net_ratelimit: 31 callbacks suppressed
[  175.184086][ T9697] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  175.291582][ T9701] loop6: detected capacity change from 0 to 4096
[  175.294683][ T9701] ntfs3(loop6): Different NTFS sector size (1024) and media sector size (512).
[  175.318181][ T5856] udevd[5856]: symlink '../../loop6' '/dev/disk/by-label/syzkaller.tmp-b7:6' failed: Read-only file system
[  175.328220][ T9701] ntfs3(loop6): ino=0, attr_set_size
[  175.331022][ T5856] udevd[5856]: symlink '../../loop6' '/dev/disk/by-uuid/7089678B273CDB5C.tmp-b7:6' failed: Read-only file system
[  175.342608][ T9701] ntfs3(loop6): ino=0, attr_set_size
[  175.351479][ T9703]  nullb0: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 p9
[  175.358149][ T9703] nullb0: p1 start 3121229925 is beyond EOD, truncated
[  175.364131][ T9703] nullb0: p2 start 1125600442 is beyond EOD, truncated
[  175.367352][ T9703] nullb0: p3 start 2749556348 is beyond EOD, truncated
[  175.370875][ T9703] nullb0: p4 size 749881270 extends beyond EOD, truncated
[  175.374847][ T9703] nullb0: p5 start 3634521299 is beyond EOD, truncated
[  175.379570][ T9703] nullb0: p6 start 3691333785 is beyond EOD, truncated
[  175.390055][ T9703] nullb0: p7 start 3987215793 is beyond EOD, truncated
[  175.395985][ T9703] nullb0: p8 start 1563769952 is beyond EOD, truncated
[  175.398510][ T9703] nullb0: p9 start 1763214672 is beyond EOD, truncated
[  175.728753][   T10] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  175.799269][ T5900] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  175.862246][ T9728] libceph: resolve 'c' (ret=-3): failed
[  175.883059][   T10] usb 6-1: config index 0 descriptor too short (expected 65134, got 72)
[  175.890960][   T10] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  175.899146][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  175.902132][   T10] usb 6-1: Product: syz
[  175.903691][   T10] usb 6-1: Manufacturer: syz
[  175.905445][   T10] usb 6-1: SerialNumber: syz
[  175.915329][   T10] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  175.952532][ T5900] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  175.956072][ T5900] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  175.965317][ T5900] usb 7-1: config 0 descriptor??
[  175.976089][   T10] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  176.179544][ T5900] udl 7-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  176.183252][ T5900] [drm:udl_init] *ERROR* Selecting channel failed
[  176.208223][ T5900] [drm] Initialized udl 0.0.1 for 7-1:0.0 on minor 3
[  176.210957][ T5900] [drm] Initialized udl on minor 3
[  176.217565][ T5900] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  176.235951][ T5900] udl 7-1:0.0: [drm] Cannot find any crtc or sizes
[  176.244746][ T5880] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  176.250932][ T5900] usb 7-1: USB disconnect, device number 2
[  176.261822][ T5880] udl 7-1:0.0: [drm] Cannot find any crtc or sizes
[  176.988903][ T9744] loop6: detected capacity change from 0 to 32768
[  176.994377][ T9744] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.1247 (9744)
[  177.016486][ T9744] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  177.021141][ T9744] BTRFS info (device loop6): using crc32c (crc32c-lib) checksum algorithm
[  177.024654][ T9744] BTRFS info (device loop6): disk space caching is enabled
[  177.025383][ T5856] udevd[5856]: symlink '../../loop6' '/dev/disk/by-uuid/c9fe44da-de57-406a-8241-57ec7d4412cf.tmp-b7:6' failed: Read-only file system
[  177.027548][ T9744] BTRFS warning (device loop6): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  177.041312][   T10] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive
[  177.047904][   T10] ath9k_htc: Failed to initialize the device
[  177.071499][ T9419] usb 6-1: USB disconnect, device number 4
[  177.090165][ T9419] usb 6-1: ath9k_htc: USB layer deinitialized
[  177.151499][ T9744] BTRFS info (device loop6): rebuilding free space tree
[  177.171078][ T9744] BTRFS info (device loop6): disabling free space tree
[  177.173985][ T9744] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  177.177750][ T9744] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  177.260938][ T5856] udevd[5856]: symlink '../../loop6' '/dev/disk/by-uuid/c9fe44da-de57-406a-8241-57ec7d4412cf.tmp-b7:6' failed: Read-only file system
[  177.431061][ T9371] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  179.047262][   T33] audit: type=1326 audit(178.902:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9785 comm="syz.0.1254" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f323758ebe9 code=0x7ffc0000
[  179.068410][   T33] audit: type=1326 audit(178.902:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9785 comm="syz.0.1254" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f323758ebe9 code=0x7ffc0000
[  179.069228][ T9792] pim6reg: entered allmulticast mode
[  179.123250][   T33] audit: type=1326 audit(178.902:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9785 comm="syz.0.1254" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f323758ebe9 code=0x7ffc0000
[  179.171930][   T33] audit: type=1326 audit(178.902:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9785 comm="syz.0.1254" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3237590b07 code=0x7ffc0000
[  179.205009][   T33] audit: type=1326 audit(178.902:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9785 comm="syz.0.1254" exe="/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f3237590a7c code=0x7ffc0000
[  179.240248][   T33] audit: type=1326 audit(178.912:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9785 comm="syz.0.1254" exe="/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f32375909b4 code=0x7ffc0000
[  179.284865][   T33] audit: type=1326 audit(178.912:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9785 comm="syz.0.1254" exe="/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f32375909b4 code=0x7ffc0000
[  179.305698][   T33] audit: type=1326 audit(178.912:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9785 comm="syz.0.1254" exe="/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f323758d84a code=0x7ffc0000
[  179.320393][   T33] audit: type=1326 audit(178.912:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9785 comm="syz.0.1254" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f323758ebe9 code=0x7ffc0000
[  179.336398][   T33] audit: type=1326 audit(178.912:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9785 comm="syz.0.1254" exe="/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f323758ebe9 code=0x7ffc0000
[  179.353306][ T9809] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1262'.
[  180.046435][ T9828] netlink: 'syz.0.1271': attribute type 2 has an invalid length.
[  180.051297][ T9828] netlink: 'syz.0.1271': attribute type 11 has an invalid length.
[  180.054763][ T9828] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1271'.
[  180.395423][ T9824] loop6: detected capacity change from 0 to 32768
[  180.482349][ T9824] JBD2: Ignoring recovery information on journal
[  180.557296][ T5856] udevd[5856]: symlink '../../loop6' '/dev/disk/by-uuid/b1de653c-5ffc-4d88-b33b-244aab9eb3e9.tmp-b7:6' failed: Read-only file system
[  180.665972][ T5856] udevd[5856]: symlink '../../loop6' '/dev/disk/by-uuid/b1de653c-5ffc-4d88-b33b-244aab9eb3e9.tmp-b7:6' failed: Read-only file system
[  180.677381][ T9824] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  180.893866][ T9371] ocfs2: Unmounting device (7,6) on (node local)
[  181.086071][ T9848] netlink: set zone limit has 4 unknown bytes
[  181.099497][ T9848] netlink: del zone limit has 4 unknown bytes
[  181.299960][ T9872] input: syz0 as /devices/virtual/input/input12
[  181.520822][ T5880] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  181.588706][ T9419] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  181.668845][ T5880] usb 6-1: Using ep0 maxpacket: 32
[  181.673146][ T5880] usb 6-1: config 0 has an invalid interface number: 184 but max is 0
[  181.676682][ T5880] usb 6-1: config 0 has no interface number 0
[  181.680259][ T5880] usb 6-1: config 0 interface 184 has no altsetting 0
[  181.687151][ T5880] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  181.693022][ T5880] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  181.696556][ T5880] usb 6-1: Product: syz
[  181.698309][ T5880] usb 6-1: Manufacturer: syz
[  181.701295][ T5880] usb 6-1: SerialNumber: syz
[  181.705817][ T5880] usb 6-1: config 0 descriptor??
[  181.713584][ T5880] smsc75xx v1.0.0
[  181.739043][ T9419] usb 7-1: Using ep0 maxpacket: 32
[  181.752904][ T9419] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 512, setting to 64
[  181.757414][ T9419] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 1024, setting to 64
[  181.767839][ T9419] usb 7-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16
[  181.774038][ T9419] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  181.777386][ T9419] usb 7-1: Product: syz
[  181.782642][ T9419] usb 7-1: Manufacturer: syz
[  181.784653][ T9419] usb 7-1: SerialNumber: syz
[  181.789990][ T9419] usb 7-1: config 0 descriptor??
[  181.811170][ T9419] usb 7-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  182.003160][ T5900] usb 7-1: USB disconnect, device number 3
[  182.006929][ T5711] usb 7-1: Failed to submit usb control message: -71
[  182.011706][ T5711] usb 7-1: unable to send the bmi data to the device: -71
[  182.015328][ T5711] usb 7-1: unable to get target info from device
[  182.017517][ T5711] usb 7-1: could not get target info (-71)
[  182.019975][ T5711] usb 7-1: could not probe fw (-71)
[  182.320459][ T5880] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[  182.324986][ T5880] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  182.731392][ T5880] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71
[  182.737551][ T5880] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71
[  182.743109][ T5880] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  182.746625][ T5880] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71
[  182.754628][ T5880] usb 6-1: USB disconnect, device number 5
[  182.806916][ T9898] loop6: detected capacity change from 0 to 32768
[  182.876356][ T9898] bcachefs (loop6): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,str_hash=crc64,noinodes_32bit,nocow
[  182.876369][ T9898]   allowing incompatible features above 0.0: (unknown version)
[  182.876373][ T9898]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  182.891271][ T9898] bcachefs (loop6): Using encoding defined by superblock: utf8-12.1.0
[  182.894083][ T9898] bcachefs (loop6): initializing new filesystem
[  182.903653][ T9898] bcachefs (loop6): going read-write
[  182.908295][ T9898] bcachefs (loop6): marking superblocks
[  182.920945][ T9898] bcachefs (loop6): initializing freespace
[  182.926983][ T9898] bcachefs (loop6): done initializing freespace
[  182.932719][ T9898] bcachefs (loop6): reading snapshots table
[  182.936522][ T9898] bcachefs (loop6): reading snapshots done
[  182.963659][ T9898] bcachefs (loop6):  loop6: Superblock write was silently dropped! (seq 0 expected 42)
[  182.968114][ T9898] bcachefs (loop6): done starting filesystem
[  183.039388][ T9898] syz.6.1300 (9898) used greatest stack depth: 15864 bytes left
[  183.083693][ T9371] bcachefs (loop6): shutting down
[  183.085875][ T9371] bcachefs (loop6): going read-only
[  183.088121][ T9371] bcachefs (loop6): finished waiting for writes to stop
[  183.093115][ T9371] bcachefs (loop6): flushing journal and stopping allocators, journal seq 3
[  183.114646][ T9371] bcachefs (loop6): flushing journal and stopping allocators complete, journal seq 4
[  183.122701][ T9371] bcachefs (loop6): clean shutdown complete, journal seq 5
[  183.126340][ T9371] bcachefs (loop6): marking filesystem clean
[  183.169950][ T9371] bcachefs (loop6): shutdown complete
[  183.367072][ T9927] loop5: detected capacity change from 0 to 4096
[  183.395512][ T5856] udevd[5856]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system
[  183.427987][ T5856] udevd[5856]: symlink '../../loop5' '/dev/disk/by-uuid/0B506D495F2D248F.tmp-b7:5' failed: Read-only file system
[  183.466367][ T9927] ntfs3(loop5): ino=9, attr_set_size
[  183.590373][ T5856] udevd[5856]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system
[  184.293307][T10001] binder: 10000:10001 unknown command 0
[  184.295428][T10001] binder: 10000:10001 ioctl c0306201 200000000080 returned -22
[  184.334495][T10003] vlan2: entered allmulticast mode
[  184.337094][T10003] veth1: entered allmulticast mode
[  184.448208][T10007] loop5: detected capacity change from 0 to 128
[  184.465725][T10007] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  184.468668][ T5856] udevd[5856]: symlink '../../loop5' '/dev/disk/by-uuid/76b65be2-f6da-4727-8c75-0525a5b65a09.tmp-b7:5' failed: Read-only file system
[  184.497998][ T5856] udevd[5856]: symlink '../../loop5' '/dev/disk/by-uuid/76b65be2-f6da-4727-8c75-0525a5b65a09.tmp-b7:5' failed: Read-only file system
[  184.602398][ T8825] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  184.948286][T10029] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  185.456789][   T33] kauditd_printk_skb: 21 callbacks suppressed
[  185.456803][   T33] audit: type=1326 audit(185.312:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10038 comm="syz.0.1338" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f323758ebe9 code=0x7ffc0000
[  185.484891][   T33] audit: type=1326 audit(185.312:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10038 comm="syz.0.1338" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f323758ebe9 code=0x7ffc0000
[  185.592237][   T33] audit: type=1326 audit(185.322:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10038 comm="syz.0.1338" exe="/syz-executor" sig=0 arch=c000003e syscall=65 compat=0 ip=0x7f323758ebe9 code=0x7ffc0000
[  185.611332][   T33] audit: type=1326 audit(185.322:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10038 comm="syz.0.1338" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f323758ebe9 code=0x7ffc0000
[  186.244213][T10057] loop6: detected capacity change from 0 to 1024
[  186.275488][ T5856] udevd[5856]: symlink '../../loop6' '/dev/disk/by-label/untitled.tmp-b7:6' failed: Read-only file system
[  186.282042][ T5856] udevd[5856]: symlink '../../loop6' '/dev/disk/by-uuid/06db47fa-2d76-30cf-a5fe-21149ac7af4a.tmp-b7:6' failed: Read-only file system
[  186.317291][ T5856] udevd[5856]: symlink '../../loop6' '/dev/disk/by-label/untitled.tmp-b7:6' failed: Read-only file system
[  186.324120][ T5856] udevd[5856]: symlink '../../loop6' '/dev/disk/by-uuid/06db47fa-2d76-30cf-a5fe-21149ac7af4a.tmp-b7:6' failed: Read-only file system
[  186.433982][T10067] bpf: Bad value for 'mode'
[  186.486908][T10071] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1350'.
[  186.599302][T10075] netlink: 'syz.5.1352': attribute type 21 has an invalid length.
[  186.603485][T10075] netlink: 128 bytes leftover after parsing attributes in process `syz.5.1352'.
[  186.607361][T10075] netlink: 'syz.5.1352': attribute type 4 has an invalid length.
[  186.617520][T10075] netlink: 3 bytes leftover after parsing attributes in process `syz.5.1352'.
[  186.728912][T10085] netlink: 'syz.6.1356': attribute type 1 has an invalid length.
[  186.732248][T10085] nbd: couldn't find device at index 20
[  187.028997][ T5316] usb 7-1: new low-speed USB device number 4 using dummy_hcd
[  187.187866][ T5316] usb 7-1: No LPM exit latency info found, disabling LPM.
[  187.202188][ T5316] usb 7-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  187.220522][ T5316] usb 7-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  187.224206][ T5316] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  187.242595][ T5316] usb 7-1: string descriptor 0 read error: -22
[  187.247978][ T5316] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  187.257625][ T5316] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  187.307101][ T5316] usb 7-1: 0:2 : does not exist
[  187.492797][ T5316] usb 7-1: USB disconnect, device number 4
[  188.638960][ T5316] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  188.798950][ T5316] usb 7-1: Using ep0 maxpacket: 32
[  188.807449][ T5316] usb 7-1: config index 0 descriptor too short (expected 35577, got 27)
[  188.812909][ T5316] usb 7-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  188.816732][ T5316] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  188.821164][ T5316] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 92
[  188.825154][ T5316] usb 7-1: config 1 has no interface number 0
[  188.828066][ T5316] usb 7-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  188.832666][ T5316] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  188.891302][ T5316] snd_usb_pod 7-1:1.1: Line 6 Pocket POD found
[  189.073920][ T5316] snd_usb_pod 7-1:1.1: endpoint not available, using fallback values
[  189.077867][ T5316] snd_usb_pod 7-1:1.1: invalid control EP
[  189.080575][ T5316] snd_usb_pod 7-1:1.1: cannot start listening: -22
[  189.083836][ T5316] snd_usb_pod 7-1:1.1: Line 6 Pocket POD now disconnected
[  189.087566][ T5316] snd_usb_pod 7-1:1.1: probe with driver snd_usb_pod failed with error -22
[  189.137631][   T33] audit: type=1800 audit(188.992:55): pid=10128 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1376" name="file1" dev="tmpfs" ino=2755 res=0 errno=0
[  189.195976][T10133] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1378'.
[  189.204058][T10133] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1378'.
[  189.281335][ T5316] usb 7-1: USB disconnect, device number 5
[  190.406050][T10188] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1403'.
[  190.415712][T10188] netlink: 43 bytes leftover after parsing attributes in process `syz.6.1403'.
[  190.421054][T10188] netlink: 'syz.6.1403': attribute type 5 has an invalid length.
[  190.427969][T10188] netlink: 43 bytes leftover after parsing attributes in process `syz.6.1403'.
[  190.694731][T10212] loop5: detected capacity change from 0 to 1024
[  190.734972][ T8483] udevd[8483]: symlink '../../loop5' '/dev/disk/by-label/untitled.tmp-b7:5' failed: Read-only file system
[  190.743227][ T1088] hfsplus: b-tree write err: -5, ino 4
[  190.748412][ T8483] udevd[8483]: symlink '../../loop5' '/dev/disk/by-uuid/4da50ae9-7d30-3220-a998-cec1f675fd4a.tmp-b7:5' failed: Read-only file system
[  190.766353][T10223] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  190.769889][T10222] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1420'.
[  190.794296][T10223] CIFS mount error: No usable UNC path provided in device string!
[  190.794296][T10223] 
[  190.802202][T10223] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  190.841410][T10229] netlink: 'syz.0.1423': attribute type 12 has an invalid length.
[  190.845435][T10229] netlink: 9472 bytes leftover after parsing attributes in process `syz.0.1423'.
[  191.212173][T10254] loop5: detected capacity change from 0 to 1764
[  191.333499][T10245] loop6: detected capacity change from 0 to 32768
[  191.343300][ T5856] udevd[5856]: symlink '../../loop6' '/dev/disk/by-uuid/bfdc47fc-10d8-4eed-a562-11a831b3f791.tmp-b7:6' failed: Read-only file system
[  191.350511][T10245] XFS: ikeep mount option is deprecated.
[  191.360250][T10245] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  191.377898][T10245] XFS (loop6): Ending clean mount
[  191.383665][T10245] XFS (loop6): Quotacheck needed: Please wait.
[  191.406441][T10245] XFS (loop6): Quotacheck: Done.
[  191.433924][ T9371] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  191.572717][T10267] loop6: detected capacity change from 0 to 256
[  191.576041][T10267] exfat: Deprecated parameter 'utf8'
[  191.578300][T10267] exfat: Deprecated parameter 'namecase'
[  191.581084][T10267] exfat: Deprecated parameter 'namecase'
[  191.583470][T10267] exfat: Deprecated parameter 'utf8'
[  191.592805][T10267] exFAT-fs (loop6): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffad0, utbl_chksum : 0xe619d30d)
[  192.256063][T10281] erspan0: entered promiscuous mode
[  192.270167][T10281] erspan0: left promiscuous mode
[  192.647222][T10300] netlink: 'syz.6.1451': attribute type 7 has an invalid length.
[  193.240891][ T5880] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  193.416045][ T5880] usb 7-1: Using ep0 maxpacket: 32
[  193.420302][ T5880] usb 7-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[  193.424153][ T5880] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  193.443566][ T5880] usb 7-1: config 0 descriptor??
[  193.457906][ T5880] gspca_main: sunplus-2.14.0 probing 041e:400b
[  193.652773][ T5880] gspca_sunplus: reg_w_riv err -71
[  193.657268][ T5880] sunplus 7-1:0.0: probe with driver sunplus failed with error -71
[  193.662834][ T5880] usb 7-1: USB disconnect, device number 6
[  194.084775][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  194.087717][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  194.232387][T10361] team0: Device gtp0 is of different type
[  194.403146][T10376] loop6: detected capacity change from 0 to 2048
[  194.414026][ T5856] udevd[5856]: symlink '../../loop6' '/dev/disk/by-uuid/1a95d291-cd32-4c4d-814a-8221d1aa3beb.tmp-b7:6' failed: Read-only file system
[  194.432617][T10378] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  194.444196][T10378] NILFS (loop6): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  194.449993][T10378] NILFS error (device loop6): nilfs_bmap_propagate: broken bmap (inode number=4)
[  194.456502][T10378] Remounting filesystem read-only
[  194.490065][ T9371] NILFS (loop6): disposed unprocessed dirty file(s) when stopping log writer
[  194.515563][T10381] netlink: 244 bytes leftover after parsing attributes in process `syz.6.1487'.
[  194.738881][   T33] audit: type=1326 audit(194.562:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10385 comm="syz.6.1490" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff23bb8ebe9 code=0x7ffc0000
[  194.753057][   T33] audit: type=1326 audit(194.562:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10385 comm="syz.6.1490" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff23bb8ebe9 code=0x7ffc0000
[  194.777924][   T33] audit: type=1326 audit(194.572:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10385 comm="syz.6.1490" exe="/syz-executor" sig=0 arch=c000003e syscall=150 compat=0 ip=0x7ff23bb8ebe9 code=0x7ffc0000
[  194.785535][   T33] audit: type=1326 audit(194.572:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10385 comm="syz.6.1490" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff23bb8ebe9 code=0x7ffc0000
[  194.797183][   T33] audit: type=1326 audit(194.572:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10385 comm="syz.6.1490" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff23bb8ebe9 code=0x7ffc0000
[  194.888306][T10394] loop6: detected capacity change from 0 to 2048
[  194.893551][T10394] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=787, location=787
[  194.897152][T10394] UDF-fs: error (device loop6): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  194.901819][T10394] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=1043, location=1043
[  194.902867][ T5856] udevd[5856]: symlink '../../loop6' '/dev/disk/by-label/LinuxUDF.tmp-b7:6' failed: Read-only file system
[  194.905791][T10394] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=787, location=787
[  194.915581][ T5856] udevd[5856]: symlink '../../loop6' '/dev/disk/by-uuid/1234567812345678.tmp-b7:6' failed: Read-only file system
[  194.920487][T10394] UDF-fs: error (device loop6): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  194.924199][T10394] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=1043, location=1043
[  194.926872][ T5856] udevd[5856]: symlink '../../loop6' '/dev/disk/by-label/LinuxUDF.tmp-b7:6' failed: Read-only file system
[  194.928891][T10394] UDF-fs: warning (device loop6): udf_fill_super: No partition found (1)
[  194.936313][ T5856] udevd[5856]: symlink '../../loop6' '/dev/disk/by-uuid/1234567812345678.tmp-b7:6' failed: Read-only file system
[  194.974223][T10398] Bluetooth: MGMT ver 1.23
[  195.034415][T10404] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1499'.
[  195.091513][T10408] loop6: detected capacity change from 0 to 256
[  196.070706][T10427] loop5: detected capacity change from 0 to 4096
[  196.083024][T10425] loop6: detected capacity change from 0 to 4096
[  196.092323][T10427] NILFS (loop5): invalid segment: Checksum error in segment payload
[  196.092358][ T5856] udevd[5856]: symlink '../../loop5' '/dev/disk/by-uuid/53ef1790-6acb-496c-bd13-8113447d28c8.tmp-b7:5' failed: Read-only file system
[  196.095755][T10427] NILFS (loop5): trying rollback from an earlier position
[  196.108300][T10425] ntfs3(loop6): Different NTFS sector size (2048) and media sector size (512).
[  196.127155][ T8483] udevd[8483]: symlink '../../loop6' '/dev/disk/by-label/syzkaller.tmp-b7:6' failed: Read-only file system
[  196.144018][ T8483] udevd[8483]: symlink '../../loop6' '/dev/disk/by-uuid/5EB3BBC71C8702BB.tmp-b7:6' failed: Read-only file system
[  196.165868][T10427] NILFS (loop5): recovery complete
[  196.172285][T10433] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  196.249830][T10435] loop5: detected capacity change from 0 to 128
[  196.255842][ T5856] udevd[5856]: symlink '../../loop5' '/dev/disk/by-uuid/76b65be2-f6da-4727-8c75-0525a5b65a09.tmp-b7:5' failed: Read-only file system
[  196.267466][T10425] ntfs3(loop6): Mark volume as dirty due to NTFS errors
[  196.271316][T10425] ntfs3(loop6): ino=3, ntfs_set_state failed, -22.
[  196.274280][T10425] ntfs3(loop6): Failed to load $Bitmap (-22).
[  196.277630][T10435] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  196.278761][T10425] ntfs3(loop6): ino=3, ntfs3_write_inode failed, -22.
[  196.294919][ T5856] udevd[5856]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:6' failed: Read-only file system
[  196.306109][ T8825] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  196.741617][T10454] netlink: 2028 bytes leftover after parsing attributes in process `syz.6.1516'.
[  196.744848][T10454] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1516'.
[  196.857247][T10461] bridge0: port 2(bridge_slave_1) entered disabled state
[  196.859894][T10461] bridge0: port 1(bridge_slave_0) entered disabled state
[  196.916332][T10461] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  196.922831][T10461] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  197.020015][   T13] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  197.033030][   T13] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  197.036443][   T13] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  197.039887][   T13] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  197.087226][T10468] loop5: detected capacity change from 0 to 2048
[  197.096331][ T5856] udevd[5856]: symlink '../../loop5' '/dev/disk/by-label/LinuxUDF.tmp-b7:5' failed: Read-only file system
[  197.104399][T10468] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  197.106259][ T5856] udevd[5856]: symlink '../../loop5' '/dev/disk/by-uuid/1234567812345678.tmp-b7:5' failed: Read-only file system
[  197.128291][   T33] audit: type=1800 audit(196.982:61): pid=10468 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1524" name="file1" dev="loop5" ino=1346 res=0 errno=0
[  197.284003][T10478] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1531'.
[  197.300139][T10478] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1531'.
[  197.413552][T10481] bridge0: port 2(bridge_slave_1) entered disabled state
[  197.417160][T10481] bridge0: port 1(bridge_slave_0) entered disabled state
[  197.507947][T10481] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  197.532892][T10481] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  197.585337][T10486] loop6: detected capacity change from 0 to 512
[  197.598445][ T5856] udevd[5856]: symlink '../../loop6' '/dev/disk/by-label/syzkaller.tmp-b7:6' failed: Read-only file system
[  197.611336][T10486] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  197.621429][T10486] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.1533: corrupted inode contents
[  197.631748][T10486] EXT4-fs error (device loop6): ext4_dirty_inode:6538: inode #2: comm syz.6.1533: mark_inode_dirty error
[  197.636835][T10486] EXT4-fs error (device loop6): ext4_do_update_inode:5653: inode #2: comm syz.6.1533: corrupted inode contents
[  197.641512][T10486] EXT4-fs error (device loop6): __ext4_ext_dirty:206: inode #2: comm syz.6.1533: mark_inode_dirty error
[  197.658351][ T9371] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  197.699128][ T5856] udevd[5856]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:6' failed: Read-only file system
[  197.810135][   T12] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  197.813287][   T12] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  197.824039][   T12] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  197.834611][   T12] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  197.968276][T10496] netlink: 'syz.6.1537': attribute type 1 has an invalid length.
[  197.972648][T10496] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1537'.
[  198.051115][T10500] loop6: detected capacity change from 0 to 256
[  198.058901][T10500] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d)
[  198.167366][T10504] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1541'.
[  198.171946][T10504] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1541'.
[  198.990476][T10511] erspan0: entered promiscuous mode
[  199.004353][T10511] erspan0: left promiscuous mode
[  199.038380][T10515] loop5: detected capacity change from 0 to 1024
[  199.043052][T10515] EXT4-fs: Ignoring removed orlov option
[  199.045157][T10515] EXT4-fs: Ignoring removed mblk_io_submit option
[  199.048047][T10515] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  199.052803][ T5856] udevd[5856]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system
[  199.061039][T10515] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  199.112003][ T8825] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  199.227345][T10529] overlayfs: failed to clone upperpath
[  199.322222][T10538] loop6: detected capacity change from 0 to 64
[  199.350740][T10538] BFS-fs: bfs_fill_super(): Inode 0x00000032 corrupted on loop6
[  199.530527][T10555] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1565'.
[  199.583430][T10566] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1568'.
[  199.677637][T10552] loop6: detected capacity change from 0 to 32768
[  199.695257][T10578] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1574'.
[  199.903990][T10597] loop6: detected capacity change from 0 to 764
[  199.914005][   T33] audit: type=1800 audit(199.762:62): pid=10599 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1583" name="nullb0" dev="tmpfs" ino=3190 res=0 errno=0
[  199.942285][T10597] netlink: 'syz.6.1582': attribute type 27 has an invalid length.
[  199.982308][T10597] bridge0: port 2(bridge_slave_1) entered disabled state
[  199.986143][T10597] bridge0: port 1(bridge_slave_0) entered disabled state
[  200.068517][T10597] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  200.075042][T10597] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  200.136277][T10597] vlan2: left allmulticast mode
[  200.137900][T10597] veth1: left allmulticast mode
[  200.158194][T10604] 8021q: adding VLAN 0 to HW filter on device bond0
[  200.161991][T10604] 8021q: adding VLAN 0 to HW filter on device team0
[  200.166325][T10604] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  200.174595][   T12] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  200.178191][   T12] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  200.185638][   T12] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  200.189180][   T12] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  200.456603][T10616] loop6: detected capacity change from 0 to 32768
[  200.460730][T10616] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.1591 (10616)
[  200.467281][T10616] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  200.471134][T10616] BTRFS info (device loop6): using sha256 (sha256-lib) checksum algorithm
[  200.473951][T10616] BTRFS info (device loop6): using free-space-tree
[  200.566004][ T9371] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  200.886343][T10645] loop5: detected capacity change from 0 to 512
[  200.890334][T10645] EXT4-fs (loop5): Unsupported encryption level 255
[  200.898796][T10643] loop6: detected capacity change from 0 to 32768
[  200.922536][T10643] 
[  200.922536][T10643]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  200.922536][T10643] 
[  200.961420][ T9371] 
[  200.961420][ T9371]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  200.961420][ T9371] 
[  200.967159][ T9371] 
[  200.967159][ T9371]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  200.967159][ T9371] 
[  201.213032][T10663] loop5: detected capacity change from 0 to 2048
[  201.224695][ T5856] udevd[5856]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system
[  201.245040][T10663] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  201.254137][T10663] EXT4-fs (loop5): shut down requested (1)
[  201.267511][ T8825] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  201.295604][ T5856] udevd[5856]: symlink '../../loop0' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system
[  201.328883][ T7634] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  201.401416][T10676] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1611'.
[  201.487465][ T7634] usb 7-1: config 0 has an invalid interface number: 112 but max is 0
[  201.491001][ T7634] usb 7-1: config 0 has no interface number 0
[  201.493487][ T7634] usb 7-1: config 0 interface 112 has no altsetting 0
[  201.500784][ T7634] usb 7-1: New USB device found, idVendor=0830, idProduct=0080, bcdDevice=d2.9e
[  201.503885][ T7634] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  201.506550][ T7634] usb 7-1: Product: syz
[  201.508035][ T7634] usb 7-1: Manufacturer: syz
[  201.510591][ T7634] usb 7-1: SerialNumber: syz
[  201.516025][ T7634] usb 7-1: config 0 descriptor??
[  201.522113][ T7634] kl5kusb105 7-1:0.112: KL5KUSB105D / PalmConnect converter detected
[  201.535073][ T7634] usb 7-1: KL5KUSB105D / PalmConnect converter now attached to ttyUSB0
[  201.740499][ T7634] usb 7-1: USB disconnect, device number 7
[  201.748183][ T7634] kl5kusb105d ttyUSB0: KL5KUSB105D / PalmConnect converter now disconnected from ttyUSB0
[  201.759693][ T7634] kl5kusb105 7-1:0.112: device disconnected
[  202.043960][T10687] overlayfs: failed to clone upperpath
[  202.632113][T10703] loop5: detected capacity change from 0 to 128
[  202.723194][ T5238] Bluetooth: hci2: command 0x0405 tx timeout
[  202.732674][T10705] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1626'.
[  202.789523][ T5880] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  202.940242][T10720] netlink: 'syz.5.1631': attribute type 4 has an invalid length.
[  202.950118][ T5880] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  202.957986][ T5880] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  202.963179][ T5880] usb 7-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  202.969229][ T5880] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  202.979773][ T5880] usb 7-1: config 0 descriptor??
[  203.279528][T10723] loop5: detected capacity change from 0 to 32768
[  203.282926][T10723] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1633 (10723)
[  203.292424][T10723] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  203.296041][T10723] BTRFS info (device loop5): using sha256 (sha256-lib) checksum algorithm
[  203.299146][T10723] BTRFS info (device loop5): using free-space-tree
[  203.306158][ T5856] udevd[5856]: symlink '../../loop5' '/dev/disk/by-uuid/ed167579-eb65-4e76-9a50-61ac97e9b59d.tmp-b7:5' failed: Read-only file system
[  203.512586][ T5880] cp2112 0003:10C4:EA90.0008: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.6-1/input0
[  203.560196][ T5856] udevd[5856]: symlink '../../loop5' '/dev/disk/by-uuid/ed167579-eb65-4e76-9a50-61ac97e9b59d.tmp-b7:5' failed: Read-only file system
[  203.924644][ T5880] cp2112 0003:10C4:EA90.0008: Part Number: 0x00 Device Version: 0x00
[  203.951134][ T8825] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  203.977941][T10748] ------------[ cut here ]------------
[  203.980468][T10748] wlan1: Failed check-sdata-in-driver check, flags: 0x0
[  203.996183][T10748] WARNING: CPU: 0 PID: 10748 at net/mac80211/driver-ops.c:366 drv_unassign_vif_chanctx+0x50b/0x7e0
[  204.000210][T10748] Modules linked in:
[  204.004232][T10748] CPU: 0 UID: 0 PID: 10748 Comm: syz.0.1636 Not tainted syzkaller #0 PREEMPT(full) 
[  204.007637][T10748] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  204.011452][T10748] RIP: 0010:drv_unassign_vif_chanctx+0x50b/0x7e0
[  204.013650][T10748] Code: 8d 8d b8 09 00 00 48 85 c0 48 0f 44 f1 43 0f b6 04 3e 84 c0 0f 85 6b 02 00 00 8b 55 00 48 c7 c7 00 22 b0 8c e8 16 bf 9b f6 90 <0f> 0b 90 90 e9 ee fc ff ff e8 e7 28 d8 f6 90 0f 0b 90 42 80 7c 3d
[  204.020536][T10748] RSP: 0018:ffffc900066e7050 EFLAGS: 00010246
[  204.023121][T10748] RAX: fc64e4edd4f8c100 RBX: 0000000000000000 RCX: 0000000000080000
[  204.026296][T10748] RDX: ffffc90003ba2000 RSI: 000000000000416d RDI: 000000000000416e
[  204.029882][T10748] RBP: ffff888115f31728 R08: ffff88804b024253 R09: 1ffff1100960484a
[  204.033812][T10748] R10: dffffc0000000000 R11: ffffed100960484b R12: ffff888115f329d0
[  204.037042][T10748] R13: ffff888115f30d80 R14: 1ffff11022be62e5 R15: dffffc0000000000
[  204.040020][T10748] FS:  00007f32383186c0(0000) GS:ffff8880b861c000(0000) knlGS:0000000000000000
[  204.042982][T10748] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  204.045164][T10748] CR2: 000055faf533da90 CR3: 0000000119ab6000 CR4: 00000000000006f0
[  204.047799][T10748] Call Trace:
[  204.049294][T10748]  <TASK>
[  204.050331][T10748]  ieee80211_assign_link_chanctx+0x1ec/0xd70
[  204.052356][T10748]  __ieee80211_link_release_channel+0x33b/0x4a0
[  204.054446][T10748]  ieee80211_if_change_type+0x14c/0x990
[  204.056322][T10748]  ieee80211_change_iface+0xd5/0x510
[  204.058107][T10748]  cfg80211_change_iface+0x795/0xef0
[  204.060251][T10748]  nl80211_set_interface+0x773/0xaa0
[  204.062059][T10748]  ? __pfx_nl80211_set_interface+0x10/0x10
[  204.064025][T10748]  ? nl80211_pre_doit+0x4fb/0x930
[  204.065731][T10748]  genl_family_rcv_msg_doit+0x215/0x300
[  204.067578][T10748]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  204.069941][T10748]  ? bpf_lsm_capable+0x9/0x20
[  204.071783][T10748]  ? security_capable+0x7e/0x2e0
[  204.073848][T10748]  genl_rcv_msg+0x60e/0x790
[  204.075741][T10748]  ? __pfx_genl_rcv_msg+0x10/0x10
[  204.077995][T10750] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  204.082056][T10748]  ? __pfx_nl80211_pre_doit+0x10/0x10
[  204.083865][T10748]  ? __pfx_nl80211_set_interface+0x10/0x10
[  204.085821][T10748]  ? __pfx_nl80211_post_doit+0x10/0x10
[  204.087659][T10748]  netlink_rcv_skb+0x208/0x470
[  204.089737][T10748]  ? __lock_acquire+0xab9/0xd20
[  204.091728][T10748]  ? __pfx_genl_rcv_msg+0x10/0x10
[  204.093732][T10748]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  204.095670][T10748]  ? down_read+0x1ad/0x2e0
[  204.097374][T10748]  genl_rcv+0x28/0x40
[  204.099101][T10748]  netlink_unicast+0x82f/0x9e0
[  204.100800][T10748]  ? __pfx_netlink_unicast+0x10/0x10
[  204.102617][T10748]  ? netlink_sendmsg+0x642/0xb30
[  204.104306][T10748]  ? skb_put+0x11b/0x210
[  204.105769][T10748]  netlink_sendmsg+0x805/0xb30
[  204.107402][T10748]  ? __pfx_netlink_sendmsg+0x10/0x10
[  204.109542][T10748]  ? aa_sock_msg_perm+0xf1/0x1d0
[  204.111254][T10748]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  204.113298][T10748]  ? __pfx_netlink_sendmsg+0x10/0x10
[  204.115133][T10748]  __sock_sendmsg+0x21c/0x270
[  204.116823][T10748]  ____sys_sendmsg+0x505/0x830
[  204.118443][T10748]  ? __pfx_____sys_sendmsg+0x10/0x10
[  204.120371][T10748]  ? import_iovec+0x74/0xa0
[  204.122075][T10748]  ___sys_sendmsg+0x21f/0x2a0
[  204.123769][T10748]  ? __pfx____sys_sendmsg+0x10/0x10
[  204.125747][T10748]  ? __fget_files+0x2a/0x420
[  204.127303][T10748]  ? __fget_files+0x3a0/0x420
[  204.129125][T10748]  __x64_sys_sendmsg+0x19b/0x260
[  204.130936][T10748]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  204.131864][T10750] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  204.133004][T10748]  ? rcu_is_watching+0x15/0xb0
[  204.133046][T10748]  ? do_syscall_64+0xbe/0x3b0
[  204.140812][T10748]  do_syscall_64+0xfa/0x3b0
[  204.142716][T10748]  ? lockdep_hardirqs_on+0x9c/0x150
[  204.144894][T10748]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  204.147406][T10748]  ? exc_page_fault+0x9f/0xf0
[  204.149369][T10748]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  204.151368][T10748] RIP: 0033:0x7f323758ebe9
[  204.152868][T10748] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  204.159872][T10748] RSP: 002b:00007f3238318038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  204.163296][T10748] RAX: ffffffffffffffda RBX: 00007f32377b5fa0 RCX: 00007f323758ebe9
[  204.166412][T10748] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003
[  204.169185][T10748] RBP: 00007f3237611e19 R08: 0000000000000000 R09: 0000000000000000
[  204.171823][T10748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  204.174454][T10748] R13: 00007f32377b6038 R14: 00007f32377b5fa0 R15: 00007ffcb9025b58
[  204.177119][T10748]  </TASK>
[  204.178389][T10748] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  204.181176][T10748] CPU: 0 UID: 0 PID: 10748 Comm: syz.0.1636 Not tainted syzkaller #0 PREEMPT(full) 
[  204.184830][T10748] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  204.188887][T10748] Call Trace:
[  204.190297][T10748]  <TASK>
[  204.191535][T10748]  dump_stack_lvl+0x99/0x250
[  204.193462][T10748]  ? __asan_memcpy+0x40/0x70
[  204.195389][T10748]  ? __pfx_dump_stack_lvl+0x10/0x10
[  204.197485][T10748]  ? __pfx__printk+0x10/0x10
[  204.199305][T10748]  vpanic+0x281/0x750
[  204.201001][T10748]  ? __pfx__printk+0x10/0x10
[  204.202915][T10748]  ? __pfx_vpanic+0x10/0x10
[  204.204772][T10748]  ? is_bpf_text_address+0x292/0x2b0
[  204.206936][T10748]  panic+0xb9/0xc0
[  204.208440][T10748]  ? __pfx_panic+0x10/0x10
[  204.210302][T10748]  __warn+0x31b/0x4b0
[  204.211949][T10748]  ? drv_unassign_vif_chanctx+0x50b/0x7e0
[  204.214298][T10748]  ? drv_unassign_vif_chanctx+0x50b/0x7e0
[  204.216297][T10748]  report_bug+0x2be/0x4f0
[  204.217810][T10748]  ? drv_unassign_vif_chanctx+0x50b/0x7e0
[  204.220096][T10748]  ? drv_unassign_vif_chanctx+0x50b/0x7e0
[  204.222412][T10748]  ? drv_unassign_vif_chanctx+0x50d/0x7e0
[  204.224746][T10748]  handle_bug+0x84/0x160
[  204.226476][T10748]  exc_invalid_op+0x1a/0x50
[  204.228141][T10748]  asm_exc_invalid_op+0x1a/0x20
[  204.229800][T10748] RIP: 0010:drv_unassign_vif_chanctx+0x50b/0x7e0
[  204.231988][T10748] Code: 8d 8d b8 09 00 00 48 85 c0 48 0f 44 f1 43 0f b6 04 3e 84 c0 0f 85 6b 02 00 00 8b 55 00 48 c7 c7 00 22 b0 8c e8 16 bf 9b f6 90 <0f> 0b 90 90 e9 ee fc ff ff e8 e7 28 d8 f6 90 0f 0b 90 42 80 7c 3d
[  204.239437][T10748] RSP: 0018:ffffc900066e7050 EFLAGS: 00010246
[  204.241784][T10748] RAX: fc64e4edd4f8c100 RBX: 0000000000000000 RCX: 0000000000080000
[  204.244427][T10748] RDX: ffffc90003ba2000 RSI: 000000000000416d RDI: 000000000000416e
[  204.247393][T10748] RBP: ffff888115f31728 R08: ffff88804b024253 R09: 1ffff1100960484a
[  204.250650][T10748] R10: dffffc0000000000 R11: ffffed100960484b R12: ffff888115f329d0
[  204.253908][T10748] R13: ffff888115f30d80 R14: 1ffff11022be62e5 R15: dffffc0000000000
[  204.257182][T10748]  ieee80211_assign_link_chanctx+0x1ec/0xd70
[  204.259414][T10748]  __ieee80211_link_release_channel+0x33b/0x4a0
[  204.261520][T10748]  ieee80211_if_change_type+0x14c/0x990
[  204.263420][T10748]  ieee80211_change_iface+0xd5/0x510
[  204.265375][T10748]  cfg80211_change_iface+0x795/0xef0
[  204.267478][T10748]  nl80211_set_interface+0x773/0xaa0
[  204.269639][T10748]  ? __pfx_nl80211_set_interface+0x10/0x10
[  204.272061][T10748]  ? nl80211_pre_doit+0x4fb/0x930
[  204.274156][T10748]  genl_family_rcv_msg_doit+0x215/0x300
[  204.276345][T10748]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  204.278623][T10748]  ? bpf_lsm_capable+0x9/0x20
[  204.280129][T10748]  ? security_capable+0x7e/0x2e0
[  204.281794][T10748]  genl_rcv_msg+0x60e/0x790
[  204.283440][T10748]  ? __pfx_genl_rcv_msg+0x10/0x10
[  204.285147][T10748]  ? __pfx_nl80211_pre_doit+0x10/0x10
[  204.286972][T10748]  ? __pfx_nl80211_set_interface+0x10/0x10
[  204.288948][T10748]  ? __pfx_nl80211_post_doit+0x10/0x10
[  204.290819][T10748]  netlink_rcv_skb+0x208/0x470
[  204.292439][T10748]  ? __lock_acquire+0xab9/0xd20
[  204.294098][T10748]  ? __pfx_genl_rcv_msg+0x10/0x10
[  204.296154][T10748]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  204.298362][T10748]  ? down_read+0x1ad/0x2e0
[  204.300217][T10748]  genl_rcv+0x28/0x40
[  204.301829][T10748]  netlink_unicast+0x82f/0x9e0
[  204.303579][T10748]  ? __pfx_netlink_unicast+0x10/0x10
[  204.305356][T10748]  ? netlink_sendmsg+0x642/0xb30
[  204.307040][T10748]  ? skb_put+0x11b/0x210
[  204.308462][T10748]  netlink_sendmsg+0x805/0xb30
[  204.310100][T10748]  ? __pfx_netlink_sendmsg+0x10/0x10
[  204.311938][T10748]  ? aa_sock_msg_perm+0xf1/0x1d0
[  204.313601][T10748]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  204.315376][T10748]  ? __pfx_netlink_sendmsg+0x10/0x10
[  204.317256][T10748]  __sock_sendmsg+0x21c/0x270
[  204.318837][T10748]  ____sys_sendmsg+0x505/0x830
[  204.320444][T10748]  ? __pfx_____sys_sendmsg+0x10/0x10
[  204.322220][T10748]  ? import_iovec+0x74/0xa0
[  204.323760][T10748]  ___sys_sendmsg+0x21f/0x2a0
[  204.325341][T10748]  ? __pfx____sys_sendmsg+0x10/0x10
[  204.327096][T10748]  ? __fget_files+0x2a/0x420
[  204.328764][T10748]  ? __fget_files+0x3a0/0x420
[  204.330556][T10748]  __x64_sys_sendmsg+0x19b/0x260
[  204.332236][T10748]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  204.334217][T10748]  ? rcu_is_watching+0x15/0xb0
[  204.335997][T10748]  ? do_syscall_64+0xbe/0x3b0
[  204.337722][T10748]  do_syscall_64+0xfa/0x3b0
[  204.339551][T10748]  ? lockdep_hardirqs_on+0x9c/0x150
[  204.341786][T10748]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  204.344361][T10748]  ? exc_page_fault+0x9f/0xf0
[  204.346301][T10748]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  204.348721][T10748] RIP: 0033:0x7f323758ebe9
[  204.350613][T10748] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  204.358721][T10748] RSP: 002b:00007f3238318038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  204.362113][T10748] RAX: ffffffffffffffda RBX: 00007f32377b5fa0 RCX: 00007f323758ebe9
[  204.365491][T10748] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003
[  204.368760][T10748] RBP: 00007f3237611e19 R08: 0000000000000000 R09: 0000000000000000
[  204.372008][T10748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  204.375117][T10748] R13: 00007f32377b6038 R14: 00007f32377b5fa0 R15: 00007ffcb9025b58
[  204.378104][T10748]  </TASK>
[  204.380092][T10748] Kernel Offset: disabled
[  204.381549][T10748] Rebooting in 86400 seconds..

VM DIAGNOSIS:
00:17:57  Registers:
info registers vcpu 0

CPU#0
RAX=ffffc90000008000 RBX=ffffffff9037aa01 RCX=0000000000000001 RDX=ffffc90000007801
RSI=dffffc0000000000 RDI=ffffc900000077f0 RBP=dffffc0000000000 RSP=ffffc90000007718
R8 =ffffc90000007920 R9 =0000000000000000 R10=ffffc90000007838 R11=fffff52000000f09
R12=ffffc90000007930 R13=ffffc90000000000 R14=ffffc900000077e8 R15=ffffc900000077f8
RIP=ffffffff8172d94b RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f32383186c0 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055faf533da90 CR3=0000000119ab6000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000000ff XMM01=2525252525252525 2525252525252525
XMM02=ff00000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000211 0000003077353b60
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffff0000 ffffff0000000000 XMM09=0000000000000211 0000003077617264
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=7b53e1c6b61e3100 RBX=ffffffff81968b88 RCX=7b53e1c6b61e3100 RDX=0000000000000001
RSI=ffffffff8d9b6963 RDI=ffffffff8be33300 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f9b R9 =1ffff11026cc65f3 R10=dffffc0000000000 R11=ffffed1026cc65f4
R12=ffffffff8fa37e30 R13=0000000000000001 R14=0000000000000001 R15=1ffff1102001f000
RIP=ffffffff8b7943f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055a1f8e6f7e8 CR3=00000001122ae000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000001a4 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
