last executing test programs:

18m56.971517407s ago: executing program 1 (id=666):
unshare(0x2a060400)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1}, 0x28)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r0, 0x2000, 0x0}, 0x10)

18m56.743747114s ago: executing program 1 (id=667):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8)
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x25, 0x55a8, &(0x7f00000014c0)="$eJzs3EtvG2UXAOAzTtP71y9CLNh1pAopkWqrTi+CFQVacRGtKi4LVuDYruXW9kSx64asumCJWPBPEEisWPIbWMASdogFiB1SkWcm0KQNtI3jqO3zSDNn5vj1mXdGlqUzYzmAZ9ZC+sdvSZyIIxExFxHHk8i3k3KJuBNxsRj7QkScjIjKPUtS5v9OHIyIoxFxYlK8qJmUL31xenzq/K9v//7t94cOHPvymx/29cSBffViRPRXi+3b/SJmnSLeKPONcTeP/XPjMq5uqdHPivzt9kpe4XZjc1wjj2c7xfhs9dZwEq/3Gs1J7HSv5/nVQXHA4bizWWfyhvRGYy3fb7VX8tgdZnnsbBTHXd8ovts2hqOiTqus90lePkajzVjk2+vt4nxWb+axORiV+aJu1mqvT+K4jOXhopn1Wvk8Vh7zIj8B3ukObq2n4/basJsN0vO1+ku1+oVqfS1rtUftc9VGv3XhXLrY6U2GVUftRv9iJ8s6vXatmfWX0sVOs1mt19PFS+2VbmOQ1uu1s7Uz1fNL5dbp9I2rH6S9Vro4ia91B7dG3d4wvZ6tpcU7ltLl2tmXl9JT9fS9K9fSa+9evnzl2vsfXfrw6qtX3nq9HHTftNLF5TPLy9X6mepyfekZOv9Py0k/wvknD07/9OPuLhsUdviAAbCz+/r/2N7/h/4fmLrd9P/9m+X+3vT/8TD9f0yz/5+0VPr//+5/K4/U/56YSv87H/r/PTx/2JXH6/8PTn0eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADM3M/zX72ZbywU+8fK/P/K1HPlfhIRlYi4+wBzcXBLzbmyzvwO4+e3zeG7JPIKk2McKpejEXGxXP78/15fBQAAAHh6fX3n5OdFt16sFvZ7QsxScdOmcvzjKdVLImJ+4ZcpVatMVs9PqVj++T4Q61Oqlt/AOjylYsUttwPTqvZQ5raEw/eEpAiVmU4HAACYia2dwGy7EAAAAGbps3999ZWZzYMZS2LzUebms+D8l/f/PBA8Mlnd3fbjfgAAAOBJkuz3BAAAAIA9l/f//v8PAAAAnm7F//8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBf7NzPjdpAFAfgZ4OB/FNQlHtayQ3KSAk55hgoIE1QAmkhDVADkXJICStYYc8ieRek1TLGWvR9ku2d8ernGeDyxtIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXfpbree/f375dWnObn+ZPLMBAAAATtlW63n9x7Rpv0v9H1LXp9QuIqKMiFO1+yBGrcxByqnO/H/1aAx/IuqEQ/84HW8j4ms67j52/SkAAADA7dosV7OmWm9OaQngX7+j4kqaRZvy/bdMeUVEVNP/mdLKw+lzprD69z2MH5nS6gWsSaawZsltePreKNdD2gaty8NMFvWXWLfKbp4LAAD0qV0JnKlCAAAAuAHf+x4A1/C0tC+Op+N7xnFzSS8E37RaAAAAwCtU9D0AAAAAoHN1/d/N/n+TF+3/V9j/DwAAALJr9v8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgS9tqPd8sV7Nz9xfPzNntL5NvRgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9+zPOwqEQBiEwd71ncnc/7DSoKGxSRUIH39jMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABvfveX/xNT40wy99pYeh5J1k6NrVNj79w4+sP4+jUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwsT8vKRACQRAFc8b/Tvr+h5UEPYMIEdDwqKIWDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwBf97pf/E1PjTDJ32lg6HknWrhpbV429B42jB+Pt3wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwsW//vm1UcQDA3/lspylUhIAiEUAFdYCFpm5p6YoQKGLgT0CKUqcEXAptBlpFlCxsKHMXBAsSQkigsOV/6NxIXcrWIUOQmBiC7lf6nJgmpO05TT8f6fl9/Xx5P86Wla/fHQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQWX83vNIo4zR7GCviqu32xuJsVq9tqzOry3cms5LFyUjVeuz1+mZ/oL0aPzk+MbyJAAAAcFgc2/WItMrvQwh3WyvTWd0Yy/P/VnVMlvP/UHaVlG3b8/61jcUj5UuTVf7/x+/3XtwaaCzNx8k6nZvvdU/tnEpz38t8wj236xHN/Mznv72k+RvS+HDphfVWfj6T727der+dhyN1zBYA2I+TVV0G1f9DWd0Z5sQAeGo0o8S7yv/TseHOCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKAO60vhmSpOQgiTzftxZm1jcXZQ/c3yncnVspy7eXM57jProhVCmJvvdU/VuJaDqzqb1z+b6fW6V65eqzs4HkIY8NKNvf15Wk7/P49phxD6Wk68NKCfj/cw1rZ+dgTlxzPUew5Hs/XtenDS15LsOOHvbRaG8QGoK2iU78/jGGK09ve9P6g+e4++5//zXTLyaL6SAAA41FplyTLRu62V6awtGQ9h88f+/P+NKA59ef/mjaKleL4a5f/3Pjl3Ox4rzv87Na3vSTC1cOmLqavXrr81f2nmYvdi9/O3T3fe6Zw5f/bs+an8t5KpudDwiwkAAAAPoV2WOP8fHbD/fzSKwwP2/4st4SL///L7ztfxWKn8f6D7m37DngkAAMDTqL0VPf/a338lA45I2u3w1czCwpVO8bj1/HTxWOt092mkLHH+n44Pe1YAAABAHdaXkr79/wtRHB6w/x9f///szy//GveZFtcWXA4hdE/OXu5dqG85B1r/Tb8/pY/jRuV8oPawVwoAAMCwjJYl3v9vjWf5f2PrkodGCOHNEyH8U97DH/aY/6cffPtLPFZ8/f+ZWld58DQmivOR1xMhNCeGPSMAAAAOsyNlyZL9P1sr05/+dvSjtuv/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOr2bwAAAP//aR4tAA==")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0)
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000040)='.\x00', 0x18920f4, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000))
write$UHID_INPUT(r0, &(0x7f0000010140)={0x8, {"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", 0x1000}}, 0x1006)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0)
symlink(&(0x7f0000000100)='.\x02/file1\x00', &(0x7f0000000000)='./file0\x00')

18m56.560186456s ago: executing program 1 (id=668):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmmsg$inet6(r0, &(0x7f0000001700)=[{{&(0x7f0000000100)={0xa, 0x4e21, 0x0, @local, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28, 0x7ffffff7}}], 0x1, 0x4040)
gettid()
openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
capset(&(0x7f0000000140)={0x19980330}, &(0x7f0000000080)={0x200000, 0x200000, 0x5, 0xfffffffc, 0x40000003, 0x3fd})
r1 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDDELIO(r1, 0x4b34, 0x3bf)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x63, 0x11, 0x60}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70)

18m55.995312822s ago: executing program 1 (id=674):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, 0x0, 0x0)
sendmsg$NFT_BATCH(r0, 0x0, 0x40)
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000200)=ANY=[], 0x2, 0x17d, &(0x7f0000000340)="$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")
socket$nl_netfilter(0x10, 0x3, 0xc)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0\x00', 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_SWAP(r2, 0x0, 0x40000)
r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r3, &(0x7f0000002380)={0x2020}, 0x2020)

18m55.959054439s ago: executing program 1 (id=675):
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x20000000000, 0x840)
syz_usb_disconnect(r0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb3387b2e010203010902"], 0x0)
ioctl$EVIOCRMFF(r0, 0x550c, 0x0)

18m55.605027572s ago: executing program 1 (id=676):
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2)

18m55.215673895s ago: executing program 32 (id=676):
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2)

16m52.365111107s ago: executing program 2 (id=2123):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x803, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0)
ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, 0xffffffffffffffff)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'syz_tun\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x8000)
syz_emit_ethernet(0x0, 0x0, 0x0)

16m52.268218769s ago: executing program 2 (id=2125):
clock_getres(0x1700, 0x0)

16m52.194623407s ago: executing program 2 (id=2127):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x80, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0x3}, {0xffff, 0xffff}, {0x4}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0x5, 0x5, 0x800, 0x0, 0x1aa2, 0xc}}, {0x4}}]}, @qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x3}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x1d, 0x5, 0x2, 0x0, 0x3, 0x4}}, {0x4}}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x1d4}, 0x8840)
sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0, 0x34}], 0x1}, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0)

16m52.13515645s ago: executing program 2 (id=2128):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x577, &(0x7f0000000640)="$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")
setxattr$security_ima(0x0, 0x0, &(0x7f0000000240)=ANY=[], 0x700, 0x1)
getpid()
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000340))
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00')
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00')
setxattr$trusted_overlay_upper(&(0x7f0000000440)='./file0/../file0/../file0/../file0/file0\x00', &(0x7f00000001c0), &(0x7f0000000500)=ANY=[], 0x835, 0x0)

16m51.947758396s ago: executing program 2 (id=2131):
syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x3008085, &(0x7f0000000040)={[{@min_batch_time}]}, 0x39, 0x55b, &(0x7f0000000c40)="$eJzs3c9vI1cdAPDvOMnau5ttttBDQUCXUljQap1Ntl1VvdBekFBVFalwQmgbJd4oWme9WjulCZGanLkiUYkT/wIHJA5IKyFx5wY3LuWAtEAEaioQGjTjcdb54Y1JY7sbfz7SyPPem/j7niO/N37j8QtgbF2JiK2IOBcR70bETJGfFFu83t6y4z7e2Vzc3dlcTCJN3/n7ZHHk5mLn+I6LxXNWIt7O0uX43aG4zfWNuwv1eu1BkZ5trd6fba5vXF9ZXViuLdfuzc/fmrt149Wbr8yfWltfWP3Vo++svPmD3/7myx/9YetbP8nq/O2iLGvbGzOnFmpP+3WZiumuvOyVe/P0Q43ERNGec6OuCCdSiojPRcSLxf6eyujqBAAMVprORDrTne4t6eMYAOCzL/vMPx1JqVp8/p+OUqlazefwKs/FhVK90Wxdu9NYu7cU+RzW5Zgq3Vmp124Uc4WXYyrJ0nOX2ucGnfR8vv84fTMino2In5XP5+nqYqO+NJIzHgDg4oHx/1/l9vjfB1cIAOBpZiQHgPFzePyfGkk9AIDh8fkfAMZP1/hfHmU9AIDhqRy49z93OAcAOEOOnf9/Pj740XCqAgAMiev/ADBWvvfWW9mW7u60f8d76b31tbuN964v1Zp3q6tri9XFxoP71eVGYzn/zZ7V456v3mjcn3s51t6fbdWardnm+sbt1cbavdbt/He9b9fcWAAAo/fsCw//lETE1mvn8y06azm4/A9nnrc5jK+JUVcAGJnJUVcAGJn/Yz7erYFwRiXHlPf8itCHvf/m/KeoDzB4V7/QY/7/yecG/02HUz1ggMz/w/h6PP9/kp7godMAeIqZ/4fxlaaJ9fwBYMz0cf3fVwThjDvx9X8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYY9P5lpSqxQrA01EqVasRlyLickwld1bqtRsR8UxE/LE8Vc7Sc6OuNADwKZX+mhTrf12deWn6YOm55JNy/hgRP/7FOz9/f6HVejCX5f9jL7/1YZE/f2SA8uDbAAB0mTyY0RmnO+N4Z33fj3c2FzvbMCv46I324qJZ3N2keyHSyaLylZiKiAv/TPY1JjmlhYm3tiPi+YPtL+2VXy5WPj0YP4t9aWDxI2/h9L74pX3xS3lZ+zF7LT5/CnWBcfMw639eP+r9V4or+WPx/kv2d6aV+OnhzvUEOv3fbrq5uLvT3jrxs+d/+1Il72uO6v+u9Bvj5d9/tzu93V22PZF+cTKiE3u3q/9pq+R7R8V/qc/4f/7SV17sVZb+MuJqPCl+e2+2tXp/trm+cX1ldWG5tly7Nz9/a+7WjVdvvjI/m89Rb3dmqg/722vXnukV/9F2xIUe8SvHtP/r/TU/nfnPuz/86hPif/NrR8UvxXNPiL8VEd/oL34sXPh1z+W7s/hLh9r/7zRNk73xtx3/3L6/y/Ku9Rn/o79sLPV5KAAwBM31jbsL9XrtwaGdid5F47lTOuaYyqCiXxxySz84/WfunLp+Rv6VA9iZiHpnPmrAscqDD5HtjLBTAobi8Zt+1DUBAAAAAAAAAAAAAAB6aX6/+Mm/U76LqPtmuH0BP0nbRtNcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAzpj/BQAA///wwc+c")
lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0))

16m51.554507407s ago: executing program 2 (id=2135):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$inet_mptcp_buf(r0, 0x6, 0x2, 0xfffffffffffffffd, &(0x7f0000000000))

16m51.36272458s ago: executing program 33 (id=2135):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$inet_mptcp_buf(r0, 0x6, 0x2, 0xfffffffffffffffd, &(0x7f0000000000))

14m10.511623095s ago: executing program 4 (id=4678):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000000c0)={0x84, @multicast2, 0x4e22, 0x3, 'rr\x00', 0x1e, 0x4, 0x68}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010101, 0x4e21, 0x3, 'lc\x00', 0x11, 0x3240, 0x3d}, {@loopback, 0x4e23, 0x4, 0x8628, 0x12d5c, 0x12d5c}}, 0x44)

14m10.455418606s ago: executing program 4 (id=4679):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001f00)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}], 0x1, 0x0)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000000280)=0x8)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
r4 = dup2(r0, r3)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000140)={r2}, 0x8)

14m10.395119741s ago: executing program 4 (id=4680):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="300000003f0007012bbd700000000000017c00000400fc800c00018005b41918", @ANYRES32=r0, @ANYBLOB="0c0002"], 0x30}, 0x1, 0x0, 0x0, 0xc000}, 0x4040)

14m10.315249691s ago: executing program 4 (id=4681):
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(&(0x7f0000000380)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x185093, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x11050ca, 0x0)
umount2(&(0x7f00000002c0)='./file0\x00', 0xb)

14m10.257264852s ago: executing program 4 (id=4682):
creat(&(0x7f00000001c0)='./bus\x00', 0x77)
r0 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x10)
finit_module(r0, 0x0, 0x0)

14m10.004413203s ago: executing program 4 (id=4686):
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
r0 = socket$inet6(0xa, 0x80802, 0x0)
sendmmsg$inet6(r0, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)="1ce02c7a", 0xfe60}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000), 0x1}}], 0x3, 0x1c000)

14m9.804316327s ago: executing program 34 (id=4686):
ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
r0 = socket$inet6(0xa, 0x80802, 0x0)
sendmmsg$inet6(r0, &(0x7f0000007240)=[{{&(0x7f0000000100)={0xa, 0x4e22, 0x6, @mcast2, 0x7}, 0x1c, 0x0}}, {{0x0, 0x0, &(0x7f0000001380)=[{&(0x7f00000012c0)="1ce02c7a", 0xfe60}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000), 0x1}}], 0x3, 0x1c000)

13m5.825059889s ago: executing program 5 (id=5701):
r0 = fanotify_init(0x8, 0x80000)
fanotify_mark(r0, 0x80, 0x40100420, 0xffffffffffffffff, 0x0)

13m5.694965803s ago: executing program 5 (id=5704):
r0 = syz_open_dev$swradio(&(0x7f0000003640), 0x1, 0x2)
ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000080)={0x0, 0x5, 0x2})

13m5.515160438s ago: executing program 5 (id=5708):
prctl$PR_SET_TSC(0x1a, 0x0)

13m5.395424034s ago: executing program 5 (id=5712):
syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000500)=ANY=[], 0xd, 0x20e, &(0x7f0000000dc0)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})

13m4.894906942s ago: executing program 5 (id=5718):
r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x1, 0x0)
write$proc_mixer(r0, 0x0, 0x0)
close(r0)

13m4.634991573s ago: executing program 5 (id=5719):
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000040)=0xfffffff7, 0x4)

13m4.389433756s ago: executing program 35 (id=5719):
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$sock_int(r0, 0x1, 0x20, &(0x7f0000000040)=0xfffffff7, 0x4)

5m22.966656133s ago: executing program 6 (id=6960):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000012000000000000000000700000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a31000000004c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004800900000076657468315f6d616376746170000000080001400000000514000000020a01030000000000000000000000061400000011000100"], 0xfc}}, 0x0)

5m12.824489017s ago: executing program 6 (id=6963):
socket(0x10, 0x3, 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000406a053b03000000000001090222"], 0x0)
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802, 0x0, 0x0, 0x7}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010003000000000000000a0000000c00", @ANYRES32=r0], 0x20}}, 0x0)

5m4.433019213s ago: executing program 6 (id=6967):
pipe(&(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f0000000500)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x8, @mcast2, 0x2}}}, 0x30)
pipe(&(0x7f0000000140)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
write$binfmt_misc(r3, &(0x7f0000000980), 0xfdef)
splice(r0, 0x0, r3, 0x0, 0x80, 0x4)
r4 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0)
landlock_restrict_self(r4, 0x9)
read$FUSE(r2, &(0x7f0000000980)={0x2020}, 0x2020)

4m58.242001229s ago: executing program 6 (id=6969):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_BYTEMODE={0x8, 0xb, 0x1}, @TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x2}, 0x2000400c)

4m54.995829127s ago: executing program 6 (id=6972):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "ff0f000000000000f5a72d866b0000000000f0ffdefe00"})
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x8100, 0x0)
ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x4, <r3=>r1})
ioctl$DMA_BUF_SET_NAME_A(r3, 0x40086203, &(0x7f00000001c0)='\x02\x00\x00\x00\x05\x00\x00\x00-control\x00')
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000140)=0x2)
ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000040)=0x2)
close_range(r4, 0xffffffffffffffff, 0x0)

4m49.425774417s ago: executing program 6 (id=6975):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r2}, @IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}]}, 0x3c}}, 0x0)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000080)={'dummy0\x00'})
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6800000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c6970001c0007800800064000000023080013400000000208001240"], 0x68}}, 0x0)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x31, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x20000040)
r5 = socket$netlink(0x10, 0x3, 0xc)
sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0)

4m31.846875241s ago: executing program 36 (id=6975):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=@setlink={0x3c, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r2}, @IFLA_ALT_IFNAME={0x14, 0x35, 'dummy0\x00'}]}, 0x3c}}, 0x0)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000080)={'dummy0\x00'})
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="6800000002060108000000000000000000000000050005000a000000050001000700000005000400000000000900020073797a310000000014000300686173683a69702c706f72742c6970001c0007800800064000000023080013400000000208001240"], 0x68}}, 0x0)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x31, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000300000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x20000040)
r5 = socket$netlink(0x10, 0x3, 0xc)
sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0)

4m2.062270787s ago: executing program 0 (id=6997):
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$kcm(0x23, 0x5, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff4000/0x4000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff4000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045)
r0 = io_uring_setup(0x1bc2, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f9})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50)
r1 = socket$inet(0x2, 0x80001, 0x84)
sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="10", 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4020845)
io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0)

3m55.116004288s ago: executing program 0 (id=6998):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0))
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000f0cd000000000000044e690085000000a000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080))
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
dup(r0)
socket$kcm(0x29, 0x2, 0x0)
syz_open_dev$vim2m(&(0x7f0000000140), 0x2, 0x2)
socket$inet_smc(0x2b, 0x1, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$netlink(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$netlink(0x10, 0x3, 0x0)
r1 = openat$pidfd(0xffffffffffffff9c, &(0x7f00000002c0), 0x200000, 0x0)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @private=0xa0100ff}, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x36}}, {0x2, 0x4e24, @rand_addr=0x64010100}, 0x1d7, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x8, 0x8})
sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0x20000844}, 0x48885)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50)
pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe)
r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r2, &(0x7f00000001c0)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r2, &(0x7f0000000000), 0xd)

3m49.240888724s ago: executing program 0 (id=7000):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x400, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r2, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10)
setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @loopback}}, 0x0, 0x0, 0x24, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8)
setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4)
connect$inet(r2, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10)
setsockopt$sock_int(r2, 0x1, 0x7, &(0x7f0000000140)=0x4, 0x4)
sendmsg$inet(r2, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0)
write(0xffffffffffffffff, &(0x7f0000000340), 0x11000)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000)=0xc, 0x4)
recvmsg(r2, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0x2000000000000}, 0x700)

3m45.58561772s ago: executing program 0 (id=7002):
syz_mount_image$fuse(0x0, &(0x7f0000000a40)='./file0\x00', 0x80, 0x0, 0x1, 0x0, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000002140)={0x2020, 0x0, <r1=>0x0, <r2=>0x0, <r3=>0x0}, 0x2020)
syz_fuse_handle_req(r0, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0xffffffffffffffff, {0xffffffffffffffff, 0x2, 0x101, 0x40, 0x0, 0x10000000, {0x40, 0x10000000000d08, 0x4, 0xfffffffffffffffe, 0x7, 0x0, 0x7, 0x80000000, 0x122, 0x6000, 0x10000, r2, r3, 0x982}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x2, 0x0, 0x0, 0x0, 0x1}}, 0x50)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x80}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000081}, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1)

3m42.686115853s ago: executing program 0 (id=7004):
r0 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0)
pwrite64(r0, 0x0, 0x0, 0x9000)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc3})
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1d0000000400000001008d167355bc2d828ba017", @ANYRES32, @ANYBLOB="02"], 0x50)
io_uring_enter(r1, 0x2219, 0x74b5, 0x16, 0x0, 0x0)

3m39.360456149s ago: executing program 0 (id=7006):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000001000010025bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="6c2804000100000008001b800000000008003f00000001"], 0x30}, 0x1, 0x0, 0x0, 0x24040051}, 0x4000000)

3m23.199212484s ago: executing program 37 (id=7006):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="300000001000010025bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="6c2804000100000008001b800000000008003f00000001"], 0x30}, 0x1, 0x0, 0x0, 0x24040051}, 0x4000000)

1m39.604495219s ago: executing program 3 (id=7025):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0)
ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/sys/net/ipv4/conf/all/rp_filter\x00', 0x1, 0x0)
write$binfmt_elf64(r0, &(0x7f0000000980)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0xbb, 0x7, 0x2, 0x4, 0x2, 0x3e, 0x3f9, 0x322, 0x40, 0x35a, 0x7fffffff, 0xc4, 0x38, 0x1, 0x1, 0x5, 0xd51}, [{0x1, 0x5, 0x3, 0x3, 0xbecd, 0x1, 0xffff, 0x4}]}, 0x78)

1m33.814227294s ago: executing program 3 (id=7026):
syz_emit_ethernet(0x4e, &(0x7f0000000500)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x7, 0x6, "da7120", 0x18, 0x11, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @empty}, {[], {0x4e23, 0x4e21, 0x18, 0x0, @wg=@data={0x4, 0x8b5, 0x7ff}}}}}}}, 0x0)

1m30.829422585s ago: executing program 3 (id=7027):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000001200)=0xd0, 0x4)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x2, 0x101}]}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="4c00000012001f15b9409b8400feffffffffffff000000000017030038c88cc055c5ac27a6c5", 0x26, 0x0, 0x0, 0x0)

1m20.461960139s ago: executing program 3 (id=7028):
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
wait4(r0, 0x0, 0x40000000, 0x0)
ptrace$cont(0x20, r0, 0x800009, 0x8000000000006)

1m12.69682868s ago: executing program 3 (id=7029):
r0 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./bus\x00', 0x0, &(0x7f0000001600), 0x0, 0x559e, &(0x7f0000005680)="$eJzs3X9sVeX9B/BzWwoN+C39jhUYfxAgBoMkyJYtjqB4MQa24eKlgsKcCEQlBivYRDcYqUWSZcaghU4EF5GQaDJjscM/FMywy7CMZfzY5hZjs4JSaZZsAzVrHDG69N77XO49l9tembNOXy/SnvPcz3me+9yT88d9X/qcGwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAURUcSc9+d0f3i0ZE1X77/Hz+e+OjGn4zfvX/roVvu23T/gjMjbto5a1nf+mlN8zdsbDjS/PS+ObdGUSLdL5Htf9u136q/88bbvlsdBly+MLOtrS31lJmuJzON4QUP9vcr/FkRRVFVbIDK7PbV7E5FwQC53cbiAQf0Tuui6O7J8ya1dT01bklyYU/xS6df9VBPYKhkr6ue89dSMv27InZErp136SUKLtFM//gF96m8CADgY5mZSm9yb0ezb3Fz7eZ4PdZOxtotsXZ4h9CS37gYmXGHl5rnpHh9iOaZzESFESXnGatnz3+unYr3j7VjUeNjzLPw0GykqS41z7Wx+lDNEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCzZOzxo2tWtD2y575fdtQceff9OVc+8KWOw22LT4y8eunKHWum/HTWsr7105rmb9jYcKT56X1zbo2i2nS/RKZ74kTL5b9NjZ3fvXfcG427n6vpq8yOG7bD8g6OXg87s0ZH0cq8Sk8Y9q81UZQqLKSb0Y7iwl3pnW+HAgAAAJ8nX0n/rsi1M3GwqqCdSKfJRPpfkAmL77Quiu6ePG9SW9dT45YkF/Zc/HipEuMlLzherl17/ieRF4xD/I2Pd74eDm0sGmdg8RHjef7SMWPefmty/eSvT5v7xA3PjOru+r8nZ2xJ/bGu5oUrru+tf/a6ovxfO3D+D2dO/gcAAOA/If/HxxnYYPn/jqVTt7z+i2Grft3a8MTB+h1/bv3OMzsXneq54Ud9L09N3v7o1UX5f1LBUxbl/zDjkP8roovL/wAAAPBZ9t/O/8micQY2WP5vONM3+wcHX6vr+PucxXt+9dAVi8+e/tv8U7t3DV9zR8v6uoeuLMr/M8vL/8Pypx0e/F2Y8OrRUTSz/JMKAAAAFAj/737+o4WQ1zOfHMTz+rX/vKp5380ffPMbD97zpzff/s2xA7MnrdteN/PgyzfVf1j5ve3dRfk/WV7+r/p0Xi4AAABQhuePrpw773jPucfPvtB18vDu3pMznjyzrqnvdOslLatXbTr2WlH+T5WX/0cMzcsBAAAALuDeO59bsfnVl/oe2H/X2Ck9FVc1XpK4ZduOqU0TPuq8tPfy7VuL8v/y8vL/yOw2u/Ih06kz/BVC6+goqu7fWZspHIparskVAAAAgE9IyOlbP1ixbOzOsb3jj59+rObQG4dn/2Vt55yN13RXdW/uXNZ4WdH9AkJiL3X//3Cng7D+v+D+f0Xr//MKmbv+zXZjAAAAAL6Iitfzh9vjZ765oNT375e7/n9J3cQTiba33lv11XMHzo1ZsP/7129aV9/be8+El37/wz9M/6i6KP83l5f/K/O3n+T3/wEAAMBF+F/7/r+lReMMbLD7/zdV9DWsWrd3+uota7csTCw7UH3qwdV731+w5l9Tb36+qea6A0X5v6W8/B+2o/JfXkc4P5tGR9H4/p3s3QR/Hqa7OlZor8orZE58rMeNoUe20D4ir5C2Ntbja6OjaHL/TnOs8P+h0BIrnK3JFnbFCsdCIXs95Ap7YoWOcKVtq8lON154MRSyCyzawwqKUbklEbEe75Xq0V+4YI+u3JMDAAB8oYTwnM2yVYXNKB5l2xODHTBysAMqBjugcrADhsUOiB9Y6vFoeWEhPH575yMbNjVMSb7y8NzHfvbms40T9j1+WV3v5g9f2XbvxJ3TW6YW5f9d5eX/cCqGZzal1v9HYf1/9nsNc+v/l4dCbazQHgqp+B0DUuE5MmH34fActalsj7PjcwUAAAD4XAufC1QO8TwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/s3evcdJVd0JAj/d9INumqaNE9GMk3TUgGakaWwNw+AoaoxGRZpZddxkNBBoEGmE8FgFURtQZxziZ3ztrJnoCAoiu+qHGFeDwUhcxIw6iWLiA/Cxjq7r+h6VGM2E/XTfOkXVrS67EFDa+X7/6DpVv/O89eg69946FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/xjuPfjlk4YunP0PHzace8nqqqmL/kfH6Mv+cNW3vvjUPy5b9G9h/i9GnLll3kEXHjd/wbR/6Vi++ogzQmjtKleWFC977oqvPtS613HP3jFw48wbb63fUpWpNxMP/Tr/lGfuXBxbfbF/CHeXhVCRDgypSwKVmft1sb5960LYI2wLZEu01SYl0g2HB2pCWBK2BbJVra4JoS4ncMqG+++7vDNxTU0IXwkhVKfbeKY6aaMmHRhUlQRq04HpFUngt1sT2cBPypMA7LD4Zsi+6Fe15mdo6L5ckddf5U7r2KcrPbw+MdFQPN/rR+3iTuWoSj/QukNPW0F17BIFb4+13m294N1WsJ2v8LTlfpHKfEPZui1UHcontk0aP6d9dnykPDQ19SlW0y56np9+e/6E7Un3mtdh7EDDTnkdXvrYiun9lo2+9OrNvxqz4ayaA3a0m0/lbNLc9K5WHTKvuV7zPEajfJ70grdfwbekRl+6Qghbzz17xtfnTDz7iD63PLnu1QcfrNty9pwFvzhz4nmLLj55w7/Pf6lg/t/w0fP/+HKOt+V5uWOrH9Ync/P4SF1MvFmfzM0BAACg1+gNe01Xnv/6X73+/bWtMxed/u23Dj73w71afz3i/gFVB7yxrqn1/I2ff6Vg/t9Y2vH/eMi/Lne0a0MY1ZVYNCCEvbseTwIrY3e+OyCEL3elWvMDR6UCa0PYpytxULaqVIm+sURjKvByfSYwKhVYHwOtqcDyGLgiFbg4BlalAhNiYG0qcHQMhCn54/hqfWYcJQdqYmBcshFXxbMQ3qmPraW21aZsVQAAADtJZnZYmX8351yHHc0Qp5eranrKEM/ALpqhOlVDegabnVYVraGipxrKe6ohO+6Ojx5+Qc1lPdVccBpGWX6GG9f85X2LXjzsC2P3mvj5xUMvmPKz8eGst++uerx5yYtv7XvEzesK5v/NHz3/r+6mI2UFx/9DGNv1N+Yuz0Tas/FxrXkZAAAAgB1w0R//xR61Lw85oGHT+2X3zl/7xKMrfrl5j1NOf3/c8a//8PCaxnsL5v+jSjv/P+4T6ZOTOTwSd0NMHRBCc34gqXZkYSA56t0vEwAAAIDeIHs8PnssfErmNjlFOz2fLszfup3544H/Ud3m//09/7P2jq3/+mLZBd89d0TNgKX/9GrHhBNOPvqW47/1zj4VB/yyvGD+31ra+f+1+bdJJ9bHXlw9IIS+OYEHYy87A10aY+D5I/MDmfGvjxtgcawqc2JCtqrFscS4GGhOBZYUK/FotsTe+YHMk5VtfFF2HFMyJXICAAAA8ImLuwPicfl4/n/LGSNO++vvzfrbha88eN7qCy75q+Ed80eedP/THzbMvXJp2PTmEQXz/3Hbd/5/1zy44PT+9n4hDK0IoU/6hwGP1CYLA8ZAXVkmcW9tUlefdFULa0MY2TmwdFUvZNb/r0ivMfh4TVJVDOy93y1vD+pMLKsJYWhu4IlvLz2sMzEnFcg2flpNCF/qHG268bv6Jo1Xphu/tm8IX8wJZKua0DeEzsaq0lX9r+rMdQzSVa2qDmHPnEC2quHVIcwNAPRW8X/pxNwHZ82dN3V8e3vbzF2YiDvxa8KkKe1tTROmt0+sLtKniak+561jtKBwTKVe+mZTZo2ixSsnV5aSzv5QsDm3rcyO/IIzBzP345ehyq5xHlKZd7clPeQD9y9sIuR8lSo25PJdPOTa3Eq2PYkF9cf8VaFf6DtnVtvMpvPGz549c1jyt9TshyR/43GmZFsNS2+r2u76VsLLo+hyWSkfd1sNyq1k6OxpM4bOmjtvyJRp4ye3TW47p+XQP2sZMXz410YM7RxUc/K3h5EO6q7m1Ei3Li1xWDtxpF+oyKnkk/jQkJCQ6G2J/f7L5odH77n+nOt/9tqPz+/3zdPu3fvImT889KqpD1Xve/ji24ccWDD/n/HR8//4qRM/+DPrMxQ7/t8QD/Mnj287zD8uBpaUevy/odjR/OyJAY2pQEcMdDjMDwAAwGdD3B0Z92bGndKbb1m/buOSlrk/aHin5dY17Utvuum+U39y58ATvjQ47LXhuhM+VzD/7yjt9/87af3/7NL1JxRb5v+gWKK52Pr/6WX+s+v/dxRb/z+9zH92/f8ln8L6/3OygdQmecf6/wAAwGfBJ7f+f4/L+6cvEFCQocfl/dMXCCjI0OMy/qVeIGC71/9f8+Bff6Wq35g7/qTlN/WXvPZ39xzWeuS6zTP/5Etb10+877qxt6wpmP9fUdr838L9AAAAsPv4z5ddU3H02Xff0bJu6sZxbw5+98m3lgzq80HF0Q+3j3xh4Bu3nlcw/19S2vz/k1//LxQ7/7+xWKC12MKA1v8DAACglyq2/t89Q1sa/zCm/x+eHvab5Q/ePPqnj/z898v3+/mJPyvfZ8Gxz8+8bFLB/H9VafP/eNpFeV7u2JsP65M17UJ6Tbs367M/GQAAAIDeoTw0NVWWmDdvYdSjPn6bT2eWAv2odK7vvXLt2ZtfmH7c46ev+7uaEwbvOWHaBasa/2b4gXd+ftQley7ddGrB/H9tafP/vN9lXPrYiun9lo2+9MOrN/9qzIazag7YdvwfAAAA2HVK3S8BAAAAAAAAAAAAAAB8+s7tWHzhI8uOfe+bt//F/kcseXXwbXcd+Lsh/V664qoHJq1648zJXy/4/X8Y21Wu2O//43X/4u8L/igvd2y15/X/MvdPOfH2uV1LFj5SH8L+uYGpC6fuETLX5h+cG7jvjIMGdiYWpkusefbolzoT30kHjh/yuS2dicNTgXFxkcR90oF4VcUt/VOBuLzi4+lA3B6r0oGqTOCy/sk4ytLb6pW6ZFuVpbfVxroQBuQEstvq7rqkjbL0AK9JBbID/F46EAd4ciZQnu7V7f2SXsVAXSx6Q7+kVwAA7Lbit8DKMGlKe1tz/Aofb79QkX8b5S1ZtqCw2rISm9+UWZps8crJlaWk+6S/i2671nhlqO4cwrCCr6u5Wcq6Rrlzaulh0/1RkSH3tNpbeZFyadu76aqKj6gmGVHThOntEyt7HHhLz1kOqegxy7CCyU5ulvKuTVpCLSX0pYQRlbhtSuhyvF8empr6pHL9eQw2hDw9vSJK/b1+7jp/xV4FuXluO/TKt758zE+f++CfP/9E/2+cVnP7rO+/e+KvX7//wEOOuG5C05otBfP/htLm/9W549qSuRhAR7yy3sgBIYwrcUQAAADw2XfbRbfecfr09a9MWlvx5GOPTS0fc3rl1vl3zp93ycZ7Fx9/2cErdjR+2Fm//f5vBu//b89e9dJPR+7zwA03/58nD3v8z3//8I8eeqduZZ+x7xXM/xtLm//HPViZQ8HJ3o618fr/iwaE0HVp/YYksDIO97sDQvhyV6o1lkguqH9CLNGcBFbGHSYHxRLjWvOr6hsDq1KBl+szgbWpwPoYyOyluCVkduVcWR/CYV2psfklZsQSDanAmBhoTAWaYqA5FegfA6NSgdf6ZwKtqcDDMRCm5G+rH/fPbCsAAIDtkZlnVebfDel53qqKnjKU9ZShtqcM5T1lqO4pQ7FRxPt3xAyVqZNXynIyVaZrrUnVUpAhXgx/u/tVkCE8mp8zXbCg6Xj+QfZ8g7L8DFf+4NlT1w+e/tDqzcd8beBt/zhkz4Obp9e9t+CGp3475pzrnv/TQQXz/+bS5v+1+bdJ6+vj/H/b9f+SwIOxe1fHU8cbY+D5I/MDmR0D6+Nkd3G2qtZMicykfXEsMSoGGlOBGTEwKhUYNzYTWDIwP5CZaWcbX5RtfEqmRE4AAAAAPnFxB0HcTRPn/zce9YOr3x8wccuyeTPvH9vyxMmjv3H1XT+6d/9ld767YvCAce99p2D+P6q0+X9sr19uYxfH3rzYP4S7y7b1JhsYUpcE4n6Muvjz+H3rQtgjZwdHtkRbbVKiKtVweKAm+YV6Vbqq1TXJGgPx/ikb7r/v8s7ENTUhfCVn70u2jWeqkzZq0oFBVUmgNh2YXpEE4p6fbOAn5UkAdlh2r2B8QWVOdclq6L5ckdffZ+WaoOnhFewD7SZfd7+52lWq0w9k9qlmbd/TVlAdu0TB22Otd1tvfLc1eLflfpHKfEPZui1UHcontk0aP6d9dnwk95esBXbR85z7K9VS0jvhddjx8Xvbs+p0B5pTHx/N3Zfr/nVYFqu79LEV0/stG33p1Zt/NWbDWTUHlNyNIuIPhX+05X9XPpWzeXe16pB5zfW6z5NWnye98d9Ao6cthHDZ9cfsu+TdX+/33A3Pnbqu7Maxr/7lrHs2Lf+bysNHrXv/yaGjLy+Y/7eWNv+vSN12+V3cmLMGhHBgzsZ9JG7+YwYkn4M5geRTcs/CQHLI/V/ri35yAgAAwM6W3d2R3V8wJXObnBCenicX5m/dzvxxf8WobvOX2u9j121cedLQN6474G8vOPGNv7/28Kceuv6ysnXL//vYD1avuXzxe08UzP/HffT8v2+qm47/O/7PLuL4f7d2913RfdMPdOzQruiC6tglHP/v1u7+bnP8v1uO/zv+3x3H/3vg+H+3dvenreBb0gxfujonwdff+fPfTbzpg7mN+x180lPPHDrxun+6quXuu0555b+de9601761uWD+P6O0+b/1/7pftC+7/t+4Yuv/zSi2/l+H9f8AAIBdqshCc+l5XsHqfQUZ0qv3FWTocYHAHpcYtP7fdq//t3Dkv1904Q+fb7n2nTvHXb5m07Fnvvr0utXPzFpx3Lnnv9V6112tBfP/jtLm//Hl0C+39d6y/l/j2CJVXREDMywMCAAAwO6o2A4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPl2HnvbO+5d8/R/aBv1ixc1/f+v/+7/P1q594JvfuGn4L6f86RllazZcM+LMLfMOuvC4+Qum/UvH8tVHnBHClK5yZUnxsueu+OpDrXsd9+wdAzfOvPHW+i3VmXorM7d/nJc7tvphfQhLch6pi4k36zvvbAuccuLtcys6E4/Uh7B/bmDqwql7dCaW14cwODdw3xkHDexMLEyXWPPs0S91Jr6TDhw/5HNbOhOHZwJl6e5e1z/pblm6u5f3D2FATiDb3bP751eVbeO4TKA83caKuqSNGKiLRa+tS9qIgfZYYkrfEIZWhNAnXdU/VydV9UlXdU91UlWfdFUXVYcwMoRQka7quaqkqor0yB+tSqqKgb33u+XtQZ2JpVUhDM0NPPHtpYd1JmamAtnG/1NVCF/qfMmkG/9xZdJ4Zbrx/1oZwhdDCFXpEu9VJCWq0iVeqAhhz5zAto1YEcLcwGdD/PSZmPvgrLnzpo5vb2+buQsTVZm2asKkKe1tTROmt0+sTvWpmLKc9NYFH3/sm96eP6HzdvHKyZWlpCsy5Sq7unxIZd7dlt2997FftbmVbHs+CuqP+atCv9B3zqy2mU3njZ89e+aw5G+p2Q9J/vbJRJNtNay3bKtBuZUMnT1txtBZc+cNmTJt/OS2yW3ntBz6Zy0jhg//2oihnYNqTv7ujJEu/eRH+oWKnEo+ife/hIREb0uU5326Ne/un+MFX/S3dbQyVHd9QBdMK3KzlHWNcmcM+qiPOeKP8zWlxxENK5g4FGQ5pOcsLQWTiW1ZapIsXV/rCiaHuTWVd23SeL88NDX1KbYdGvLv5m7e13dg8z6d2XSlpgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+P/swIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCwAAAAAIMzfOoyeDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4FAAA//8fSxmR")
syz_read_part_table(0x5f3, &(0x7f0000000000)="$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")
ioctl$BTRFS_IOC_SET_FEATURES(r0, 0x40309439, &(0x7f0000000040)={0x2, 0x1})

1m6.217607381s ago: executing program 3 (id=7030):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x20, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}], 0x0, 0x20004801)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000000280)=0x8)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
r4 = dup2(r0, r3)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c)
sendto$inet6(r3, &(0x7f0000000040)='l', 0x1, 0x7ddfdbdfaba51c5d, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xffffffff}, 0x1c)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRES32=r2], 0x9)

49.189050289s ago: executing program 38 (id=7030):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8)
sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x20, 0x0}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4}], 0x0, 0x20004801)
r1 = socket$inet_sctp(0x2, 0x1, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000000280)=0x8)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
r4 = dup2(r0, r3)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c)
sendto$inet6(r3, &(0x7f0000000040)='l', 0x1, 0x7ddfdbdfaba51c5d, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xffffffff}, 0x1c)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f00000002c0)=ANY=[@ANYRES32=r2], 0x9)

0s ago: executing program 7 (id=6982):
r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff40e80489680001010203010902200001010080fa0904000002ffffff0007058102000200070502020002"], 0x0)
syz_usb_ep_read(r0, 0x2, 0x0, 0x0)
syz_usb_ep_write(r0, 0x81, 0x0, 0x0)
syz_usb_ep_read(r0, 0x2, 0xc, &(0x7f0000000300)=""/12)

kernel console output (not intermixed with test programs):

7c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.3766 (14664)
[  342.319154][T14664] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  342.334427][T14664] BTRFS info (device loop4): using sha256 checksum algorithm
[  342.455776][T14664] BTRFS info (device loop4): enabling ssd optimizations
[  342.463025][T14664] BTRFS info (device loop4): turning on sync discard
[  342.470771][T14664] BTRFS info (device loop4): enabling free space tree
[  342.478457][T14664] BTRFS info (device loop4): use zlib compression, level 3
[  343.004407][T14718] x_tables: arp_tables: .0 target: invalid size 8 (kernel) != (user) 0
[  343.239018][T10984] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  343.840297][T14755] loop4: detected capacity change from 0 to 32768
[  343.853335][T14755] (syz.4.3802,14755,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  343.857572][T14755] (syz.4.3802,14755,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  343.885920][T14755] JBD2: Ignoring recovery information on journal
[  343.916662][T14755] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  344.132184][T14765] netlink: 65039 bytes leftover after parsing attributes in process `syz.0.3807'.
[  344.203026][T10984] ocfs2: Unmounting device (7,4) on (node local)
[  346.762336][T14809] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3826'.
[  346.768449][T14809] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3826'.
[  346.918723][T14818] 9p: Bad value for 'rfdno'
[  348.097864][   T34] kauditd_printk_skb: 54 callbacks suppressed
[  348.097876][   T34] audit: type=1326 audit(1786755175.088:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14897 comm="syz.0.3868" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc01879e0d9 code=0x7ffc0000
[  348.126987][   T34] audit: type=1326 audit(1786755175.118:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14897 comm="syz.0.3868" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc01879e0d9 code=0x7ffc0000
[  348.146955][   T34] audit: type=1326 audit(1786755175.118:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14897 comm="syz.0.3868" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc01879e0d9 code=0x7ffc0000
[  348.161152][   T34] audit: type=1326 audit(1786755175.118:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14897 comm="syz.0.3868" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc01879e0d9 code=0x7ffc0000
[  348.178506][   T34] audit: type=1326 audit(1786755175.118:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14897 comm="syz.0.3868" exe="/syz-executor" sig=0 arch=c000003e syscall=105 compat=0 ip=0x7fc01879e0d9 code=0x7ffc0000
[  348.201035][   T34] audit: type=1326 audit(1786755175.118:233): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=unconfined pid=14897 comm="syz.0.3868" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc01879e0d9 code=0x7ffc0000
[  348.214246][   T34] audit: type=1326 audit(1786755175.118:234): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=unconfined pid=14897 comm="syz.0.3868" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc01879e0d9 code=0x7ffc0000
[  348.230261][   T34] audit: type=1326 audit(1786755175.118:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14897 comm="syz.0.3868" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc01879e0d9 code=0x7ffc0000
[  348.251682][   T34] audit: type=1326 audit(1786755175.118:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14897 comm="syz.0.3868" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc01879e0d9 code=0x7ffc0000
[  348.273149][   T34] audit: type=1326 audit(1786755175.118:237): auid=4294967295 uid=60928 gid=0 ses=4294967295 subj=unconfined pid=14897 comm="syz.0.3868" exe="/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fc01879e0d9 code=0x7ffc0000
[  348.290890][T14904] fuse: fd is not a fuse device
[  348.637351][T14918] netlink: 'syz.3.3878': attribute type 21 has an invalid length.
[  348.661688][T14920] loop4: detected capacity change from 0 to 1024
[  348.695849][T14920] hfsplus: failed to load extents file
[  349.631291][ T5661] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  349.822494][ T5661] usb 5-1: New USB device found, idVendor=046d, idProduct=0850, bcdDevice=61.47
[  349.830059][ T5661] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  349.835323][ T5661] usb 5-1: config 0 has no interfaces?
[  349.841649][ T5661] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  349.849940][ T5661] usb 5-1: config 0 descriptor??
[  349.974672][T14983] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  349.977022][T14983] IPv6: NLM_F_CREATE should be set when creating new route
[  349.979411][T14983] IPv6: NLM_F_CREATE should be set when creating new route
[  350.002569][T14985] fuse: fd is not a fuse device
[  350.030652][T14987] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3911'.
[  350.057633][ T5043] usb 5-1: USB disconnect, device number 9
[  350.858224][T14999] nvme_fabrics: missing parameter 'transport=%s'
[  352.135342][T15028] loop4: detected capacity change from 0 to 32768
[  352.146768][T15028] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.3929 (15028)
[  352.236198][T15028] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  352.254145][T15028] BTRFS info (device loop4): using sha256 checksum algorithm
[  352.363150][T15028] BTRFS info (device loop4): enabling ssd optimizations
[  352.384664][T15028] BTRFS info (device loop4): turning on async discard
[  352.395043][T15028] BTRFS info (device loop4): enabling free space tree
[  352.481226][T10984] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  352.782542][T15076] netlink: 'syz.0.3942': attribute type 1 has an invalid length.
[  353.065013][T15087] syz.4.3949 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  353.343575][T15102] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3956'.
[  354.049861][T15113] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks
[  354.557461][T15118] nftables ruleset with unbound chain
[  354.760898][T15122] loop4: detected capacity change from 0 to 8192
[  354.822745][T15122] FAT-fs (loop4): error, invalid access to FAT (entry 0x00003c09)
[  354.863516][T15122] FAT-fs (loop4): Filesystem has been set read-only
[  354.872911][T15122] FAT-fs (loop4): error, invalid access to FAT (entry 0x00003c09)
[  354.883271][T15122] FAT-fs (loop4): error, invalid access to FAT (entry 0x00003c09)
[  355.027984][T15139] netlink: 140 bytes leftover after parsing attributes in process `syz.4.3972'.
[  355.072548][T15139] bond0: option arp_missed_max: mode dependency failed, not supported in mode balance-tlb(5)
[  355.086719][T15139] bond0 (unregistering): Released all slaves
[  355.306801][T15151] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3978'.
[  357.463621][T15215] loop4: detected capacity change from 0 to 128
[  357.516010][T15215] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  357.553808][T15215] ext4 filesystem being mounted at /472/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  357.665584][T10984] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  357.771961][   T34] kauditd_printk_skb: 4 callbacks suppressed
[  357.771970][   T34] audit: type=1326 audit(1786755184.758:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15222 comm="syz.4.4009" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdf8839e0d9 code=0x0
[  358.369655][T15229] loop4: detected capacity change from 0 to 32768
[  358.408404][T15229] (syz.4.4012,15229,0):ocfs2_init_local_system_inodes:496 ERROR: status=-22, sysfile=7, slot=1
[  358.424770][T15229] (syz.4.4012,15229,0):ocfs2_init_local_system_inodes:505 ERROR: status = -22
[  358.440098][T15229] (syz.4.4012,15229,0):ocfs2_mount_volume:1757 ERROR: status = -22
[  358.468909][T15229] (syz.4.4012,15229,0):ocfs2_fill_super:1177 ERROR: status = -22
[  358.944220][T15256] fuse: fd is not a fuse device
[  358.948556][T15256] fuse: fd is not a fuse device
[  359.747583][T15263] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  360.179450][   T54] Bluetooth: hci1: command tx timeout
[  360.383193][T15310] netlink: 136 bytes leftover after parsing attributes in process `syz.0.4051'.
[  360.641040][T15325] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4058'.
[  360.817590][T15331] 9p: Bad value for 'rfdno'
[  361.512871][T15362] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4074'.
[  361.515911][T15362] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4074'.
[  361.518821][T15362] netlink: 'syz.3.4074': attribute type 3 has an invalid length.
[  362.312612][T15375] loop4: detected capacity change from 0 to 4096
[  362.335639][T15375] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  362.346954][T15375] ntfs3(loop4): Failed to load $LogFile (-22).
[  362.628889][T15389] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4087'.
[  362.655998][T15389] bond0: entered promiscuous mode
[  362.772952][T15395] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4089'.
[  363.395249][T15419] loop4: detected capacity change from 0 to 512
[  363.404295][T15419] EXT4-fs: Ignoring removed i_version option
[  363.454222][T15419] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  363.472091][T15419] ext4 filesystem being mounted at /498/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  363.536503][T10984] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  363.570335][T15430] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4103'.
[  363.604815][T15430] vlan0: entered promiscuous mode
[  363.612470][T15430] geneve1: entered promiscuous mode
[  363.621461][T15430] vlan0: entered allmulticast mode
[  363.632939][T15430] geneve1: entered allmulticast mode
[  364.034259][T15448] loop4: detected capacity change from 0 to 2048
[  364.044617][T15448] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  364.235119][T15456] loop4: detected capacity change from 0 to 16
[  364.252486][T15456] erofs (device loop4): mounted with root inode @ nid 36.
[  364.661885][T15466] overlayfs: failed to clone upperpath
[  364.864742][T15481] loop4: detected capacity change from 0 to 128
[  364.873333][T15481] EXT4-fs: Ignoring removed i_version option
[  364.886108][T15481] EXT4-fs: Ignoring removed oldalloc option
[  364.912179][T15481] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  364.927729][T15481] ext4 filesystem being mounted at /508/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  364.966936][T15481] EXT4-fs error (device loop4): dx_make_map:1296: inode #2: block 33: comm syz.4.4127: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1
[  364.992349][T15481] EXT4-fs error (device loop4) in do_split:2027: Corrupt filesystem
[  365.174738][   T34] audit: type=1800 audit(1786755192.168:243): pid=15481 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4127" name="file2" dev="loop4" ino=16 res=0 errno=0
[  365.216958][T10984] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  365.224913][T15499] netlink: 6024 bytes leftover after parsing attributes in process `syz.0.4135'.
[  367.374594][T15537] batman_adv: batadv0: Adding interface: macsec3
[  367.392184][T15537] batman_adv: batadv0: The MTU of interface macsec3 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  367.471482][T15537] batman_adv: batadv0: Interface activated: macsec3
[  367.763670][T15545] macvtap0: entered allmulticast mode
[  367.771889][T15545] veth0_macvtap: entered allmulticast mode
[  367.797949][T15545] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4155'.
[  367.847212][T15545] veth0_macvtap: left allmulticast mode
[  367.852631][T15545] veth0_macvtap: left promiscuous mode
[  367.953761][T15545] macvtap0 (unregistering): left allmulticast mode
[  368.211104][T15563] xt_addrtype: ipv6 does not support BROADCAST matching
[  368.952258][T15570] loop4: detected capacity change from 0 to 512
[  368.962120][T15570] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  368.992345][T15570] EXT4-fs (loop4): 1 truncate cleaned up
[  369.014280][T15570] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  369.064247][T10984] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  369.230498][T15578] ptrace attach of "/syz-executor exec"[10984] was attempted by ""[15578]
[  369.510319][T15590] openvswitch: netlink: Key 32 has unexpected len 0 expected 2
[  369.651570][T15598] netlink: 72 bytes leftover after parsing attributes in process `syz.0.4180'.
[  370.146499][T15603] loop4: detected capacity change from 0 to 32768
[  370.185542][T15603] JBD2: Ignoring recovery information on journal
[  370.276664][T15603] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode.
[  370.465148][T10984] ocfs2: Unmounting device (7,4) on (node local)
[  371.287960][T15667] C: renamed from lo (while UP)
[  371.359881][T15667] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  371.455128][T15669] IPVS: ip_vs_edit_dest(): server weight less than zero
[  371.909576][ T5661] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  372.061251][ T5661] usb 5-1: unable to get BOS descriptor or descriptor too short
[  372.063780][ T5661] usb 5-1: New USB device found, idVendor=04b4, idProduct=931e, bcdDevice= 8.fe
[  372.067886][ T5661] usb 5-1: config 64 has an invalid interface number: 75 but max is 0
[  372.071265][ T5661] usb 5-1: config 64 has no interface number 0
[  372.073355][ T5661] usb 5-1: config 64 interface 75 has no altsetting 0
[  372.081241][ T5661] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  372.083759][ T5661] usb 5-1: Product: syz
[  372.085178][ T5661] usb 5-1: Manufacturer: syz
[  372.086673][ T5661] usb 5-1: SerialNumber: syz
[  372.303687][ T5661] usb 5-1: can't set first interface for hiFace device.
[  372.310925][ T5661] snd-usb-hiface 5-1:64.75: probe with driver snd-usb-hiface failed with error -5
[  372.322389][ T5661] usb 5-1: USB disconnect, device number 10
[  374.304162][T15768] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4260'.
[  374.678698][T15793] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4272'.
[  374.693840][T15793] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4272'.
[  374.874464][T15805] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4278'.
[  374.917968][T15805] 8021q: adding VLAN 0 to HW filter on device bond1
[  375.298000][ T5708] kernel read not supported for file /comedi4 (pid: 5708 comm: kworker/0:7)
[  375.381673][T15823] xt_addrtype: both incoming and outgoing interface limitation cannot be selected
[  375.606007][T15833] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4289'.
[  375.615422][T15833] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4289'.
[  376.095241][T15856] kAFS: unparsable volume name
[  376.794756][T15870] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4307'.
[  376.967582][T15878] xt_hashlimit: size too large, truncated to 1048576
[  377.011968][T15866] loop4: detected capacity change from 0 to 32768
[  377.046309][T15866] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  377.096563][T15866] XFS (loop4): Ending clean mount
[  377.130590][T10984] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  377.353713][T15896] netlink: Unknown NAT attribute (type=42, max=9)
[  377.358185][T15896] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  377.652420][T15918] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4326'.
[  377.794916][T15928] trusted_key: encrypted_key: insufficient parameters specified
[  377.850225][T15935] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  377.924319][T15942] xt_hashlimit: overflow, rate too high: 1
[  378.584821][ T1374] ieee802154 phy0 wpan0: encryption failed: -22
[  378.587372][ T1374] ieee802154 phy1 wpan1: encryption failed: -22
[  378.729607][T15966] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4348'.
[  380.619481][T16000] xt_hashlimit: size too large, truncated to 1048576
[  381.147015][T15990] loop4: detected capacity change from 0 to 32768
[  381.212891][T15990] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  381.218151][T16008] netlink: 84 bytes leftover after parsing attributes in process `syz.3.4365'.
[  381.238945][T16008] netlink: 'syz.3.4365': attribute type 1 has an invalid length.
[  381.707802][T16025] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4372'.
[  381.763680][T10984] ocfs2: Unmounting device (7,4) on (node local)
[  382.008087][T16037] fuse: fd is not a fuse device
[  382.283462][T16053] bond2: entered promiscuous mode
[  382.293945][T16053] bond2: entered allmulticast mode
[  382.303319][T16053] 8021q: adding VLAN 0 to HW filter on device bond2
[  382.393312][T16060] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  382.403125][T16060] netdevsim netdevsim0 netdevsim0: left allmulticast mode
[  382.410366][T16060] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  382.415607][T16064] loop4: detected capacity change from 0 to 24
[  382.423374][T16064] MTD: Attempt to mount non-MTD device "/dev/loop4"
[  382.475268][T16064] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  382.586722][T16072] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check.
[  382.658563][T16076] xt_socket: unknown flags 0x8
[  382.755148][T16084] loop4: detected capacity change from 0 to 512
[  382.771664][T16084] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  382.843018][T16084] Quota error (device loop4): do_check_range: Getting block 196613 out of range 1-5
[  382.852890][T16084] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0
[  382.867725][T16084] EXT4-fs error (device loop4): ext4_acquire_dquot:7041: comm syz.4.4400: Failed to acquire dquot type 1
[  382.878798][T16084] loop4: lost filesystem error report for type 5 error -117
[  382.879292][    C0] EXT4-fs (loop4): error count since last fsck: 1
[  382.883855][    C0] EXT4-fs (loop4): last error at time 1786755209: ext4_acquire_dquot:7041
[  382.997012][T16084] EXT4-fs (loop4): 1 truncate cleaned up
[  383.004503][T16084] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback.
[  383.033019][T16084] Quota error (device loop4): do_check_range: Getting block 196613 out of range 1-5
[  383.070252][T16084] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0
[  383.086230][T16084] EXT4-fs error (device loop4): ext4_acquire_dquot:7041: comm syz.4.4400: Failed to acquire dquot type 1
[  383.176978][T10984] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0008-000000000000.
[  383.710115][T16146] overlayfs: failed to clone lowerpath
[  384.403354][T16189] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4448'.
[  384.411457][T16189] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4448'.
[  384.767075][    C0] vcan0: j1939_tp_rxtimer: 0xffff888117a21c00: rx timeout, send abort
[  384.773830][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888117a21c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session.
[  384.835372][T16219] xt_hashlimit: size too large, truncated to 1048576
[  386.475688][T16254] loop4: detected capacity change from 0 to 64
[  386.861278][T16264] CIFS: VFS: bad security option: krb5i
[  387.241831][T16280] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4486'.
[  387.980663][T16311] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check.
[  389.995099][T16419] fuse: fd is not a fuse device
[  390.003755][T16419] overlayfs: failed to clone upperpath
[  390.612803][T16454] loop4: detected capacity change from 0 to 128
[  390.642603][T16454] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  390.666607][T16454] ext4 filesystem being mounted at /595/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  390.815906][T10984] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  391.272199][T16490] netlink: 'syz.0.4568': attribute type 2 has an invalid length.
[  391.384422][T16490] : entered promiscuous mode
[  391.703848][T16519] openvswitch: netlink: Flow key attribute not present in set flow.
[  391.889374][T16527] C: renamed from veth1_to_team (while UP)
[  391.898179][T16527] netlink: 'syz.3.4584': attribute type 4 has an invalid length.
[  391.909026][T16527] netlink: 116 bytes leftover after parsing attributes in process `syz.3.4584'.
[  391.919129][T16527] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  392.857225][T16567] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off.
[  392.866257][T16567] overlayfs: missing 'lowerdir'
[  392.993968][T16559] loop4: detected capacity change from 0 to 40427
[  393.004927][T16559] F2FS-fs (loop4): build fault injection rate: 19
[  393.014609][T16559] F2FS-fs (loop4): build fault injection type: 0x3bfe8c
[  393.025283][T16559] F2FS-fs (loop4): invalid crc value
[  393.050734][T16559] f2fs_printk: 1 callbacks suppressed
[  393.050745][T16559] F2FS-fs (loop4): inject page alloc in f2fs_grab_cache_folio of f2fs_build_free_nids+0xa00/0x18c0
[  393.111883][T16559] F2FS-fs (loop4): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x21d/0x3d0
[  393.137482][T16559] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  393.171665][T16559] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  393.226905][T16576] bio_check_eod: 5 callbacks suppressed
[  393.226918][T16576] f2fs_ckpt-7:4: attempt to access beyond end of device
[  393.226918][T16576] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  393.285919][T16576] CPU: 0 UID: 0 PID: 16576 Comm: f2fs_ckpt-7:4 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  393.285935][T16576] Tainted: [L]=SOFTLOCKUP
[  393.285938][T16576] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  393.285942][T16576] Call Trace:
[  393.285947][T16576]  <TASK>
[  393.285951][T16576]  dump_stack_lvl+0xe8/0x150
[  393.285968][T16576]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  393.285980][T16576]  f2fs_write_end_io+0x124b/0x1710
[  393.285997][T16576]  __submit_merged_bio+0x258/0x6a0
[  393.286005][T16576]  ? rcu_is_watching+0x15/0xb0
[  393.286018][T16576]  __submit_merged_write_cond+0x3c9/0x4e0
[  393.286029][T16576]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  393.286069][T16576]  f2fs_write_data_pages+0x2a27/0x36f0
[  393.286095][T16576]  ? __lock_acquire+0x683/0x2cf0
[  393.286118][T16576]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  393.286130][T16576]  ? arch_stack_walk+0x11b/0x150
[  393.286148][T16576]  ? add_lock_to_list+0xc7/0x100
[  393.286159][T16576]  ? lockdep_unlock+0x5d/0xd0
[  393.286166][T16576]  ? __lock_acquire+0x13e8/0x2cf0
[  393.286184][T16576]  ? do_raw_spin_lock+0x12b/0x2f0
[  393.286195][T16576]  ? do_raw_spin_unlock+0x4d/0x210
[  393.286202][T16576]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  393.286211][T16576]  do_writepages+0x338/0x560
[  393.286225][T16576]  ? do_raw_spin_unlock+0x4d/0x210
[  393.286234][T16576]  filemap_fdatawrite+0x1e9/0x2f0
[  393.286245][T16576]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  393.286270][T16576]  ? do_raw_spin_unlock+0x4d/0x210
[  393.286279][T16576]  f2fs_sync_dirty_inodes+0x30e/0x830
[  393.286294][T16576]  f2fs_write_checkpoint+0xa3d/0x2710
[  393.286315][T16576]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  393.286337][T16576]  ? __pfx_down_write+0x10/0x10
[  393.286349][T16576]  ? rcu_is_watching+0x15/0xb0
[  393.286360][T16576]  __checkpoint_and_complete_reqs+0x135/0x480
[  393.286371][T16576]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  393.286378][T16576]  ? trace_contention_end+0x3d/0x140
[  393.286386][T16576]  ? __pfx___checkpoint_and_complete_reqs+0x10/0x10
[  393.286395][T16576]  ? do_raw_spin_lock+0x12b/0x2f0
[  393.286408][T16576]  ? schedule+0x90/0x2b0
[  393.286419][T16576]  issue_checkpoint_thread+0xd5/0x270
[  393.286430][T16576]  ? __pfx_issue_checkpoint_thread+0x10/0x10
[  393.286439][T16576]  ? __pfx_autoremove_wake_function+0x10/0x10
[  393.286447][T16576]  ? __kthread_parkme+0x71/0x1f0
[  393.286456][T16576]  ? __kthread_parkme+0x196/0x1f0
[  393.286466][T16576]  kthread+0x388/0x470
[  393.286475][T16576]  ? __pfx_issue_checkpoint_thread+0x10/0x10
[  393.286483][T16576]  ? __pfx_kthread+0x10/0x10
[  393.286492][T16576]  ret_from_fork+0x514/0xb70
[  393.286503][T16576]  ? __pfx_ret_from_fork+0x10/0x10
[  393.286512][T16576]  ? __switch_to+0xc89/0x1420
[  393.286522][T16576]  ? __pfx_kthread+0x10/0x10
[  393.286531][T16576]  ret_from_fork_asm+0x1a/0x30
[  393.286547][T16576]  </TASK>
[  393.286849][T16576] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  393.811634][T16601] fuse: fd is not a fuse device
[  396.229613][ T5677] usb 5-1: new full-speed USB device number 11 using dummy_hcd
[  396.282730][T16662] netlink: 'syz.3.4643': attribute type 2 has an invalid length.
[  396.287933][T16662] netlink: 'syz.3.4643': attribute type 1 has an invalid length.
[  396.380023][ T5677] usb 5-1: New USB device found, idVendor=17ef, idProduct=6067, bcdDevice= 0.00
[  396.387609][ T5677] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  396.395989][ T5677] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  396.414651][ T5677] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  396.430750][ T5677] usb 5-1: config 0 descriptor??
[  396.621818][T16678] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4650'.
[  396.635880][T16677] 8021q: adding VLAN 0 to HW filter on device bond0
[  396.639076][T16677] team0: Port device bond0 added
[  396.655553][T16678] ip6gretap1: entered promiscuous mode
[  396.658825][ T5708] usb 5-1: USB disconnect, device number 11
[  396.677621][T16678] ip6gretap1: entered allmulticast mode
[  396.935101][T16695] netlink: 'syz.0.4658': attribute type 37 has an invalid length.
[  397.160736][T16699] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4660'.
[  397.755704][ T5708] IPVS: starting estimator thread 0...
[  397.851359][T16740] IPVS: using max 87 ests per chain, 208800 per kthread
[  397.868901][T16744] netlink: 'syz.4.4680': attribute type 2 has an invalid length.
[  397.894997][T16744] : entered promiscuous mode
[  398.678485][T10927] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  398.692981][T10927] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  398.696714][T10927] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  398.701568][T10927] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  398.705625][T10927] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  399.264649][T16782] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4695'.
[  399.371462][T16789] fuse: fd is not a fuse device
[  399.521785][T16762] bridge0: port 1(bridge_slave_0) entered blocking state
[  399.527229][T16762] bridge0: port 1(bridge_slave_0) entered disabled state
[  399.533162][T16762] bridge_slave_0: entered allmulticast mode
[  399.550776][T16762] bridge_slave_0: entered promiscuous mode
[  399.557544][T16762] bridge0: port 2(bridge_slave_1) entered blocking state
[  399.565173][T16762] bridge0: port 2(bridge_slave_1) entered disabled state
[  399.570631][T16762] bridge_slave_1: entered allmulticast mode
[  399.574668][T16762] bridge_slave_1: entered promiscuous mode
[  399.577469][T16800] bond0: option mode: unable to set because the bond device is up
[  399.623677][T16762] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  399.633906][T16802] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4702'.
[  399.637199][T16762] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  399.640504][T16802] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4702'.
[  399.681849][T16762] team0: Port device team_slave_0 added
[  399.688944][T16762] team0: Port device team_slave_1 added
[  399.727204][T16762] batman_adv: batadv0: Adding interface: batadv_slave_0
[  399.735814][T16762] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  399.762219][T16762] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  399.778979][T16762] batman_adv: batadv0: Adding interface: batadv_slave_1
[  399.788117][T16762] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  399.820264][T16762] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  399.848967][T16812] tipc: Enabling of bearer <udp:> rejected, failed to enable media
[  399.873893][T16814] netlink: 'syz.3.4708': attribute type 178 has an invalid length.
[  399.938188][T16762] hsr_slave_0: entered promiscuous mode
[  399.947847][T16762] hsr_slave_1: entered promiscuous mode
[  400.659076][T16762] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  400.667656][T16762] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  400.680972][T16762] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  400.700802][T16762] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  400.706491][T16762] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  400.728419][T16762] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  400.738592][T16762] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  400.741513][   T54] Bluetooth: hci1: command tx timeout
[  400.753327][T16762] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  400.878590][T16858] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4723'.
[  400.887191][T16762] 8021q: adding VLAN 0 to HW filter on device bond0
[  400.919935][T16762] 8021q: adding VLAN 0 to HW filter on device team0
[  400.950950][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state
[  400.953244][ T5850] bridge0: port 1(bridge_slave_0) entered forwarding state
[  400.969825][T16860] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  400.977250][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state
[  400.980079][ T5850] bridge0: port 2(bridge_slave_1) entered forwarding state
[  401.269075][T16762] 8021q: adding VLAN 0 to HW filter on device batadv0
[  401.488081][T16762] veth0_vlan: entered promiscuous mode
[  401.501977][T16762] veth1_vlan: entered promiscuous mode
[  401.518724][T16762] veth0_macvtap: entered promiscuous mode
[  401.525504][T16762] veth1_macvtap: entered promiscuous mode
[  401.538139][T16762] batman_adv: batadv0: Interface activated: batadv_slave_0
[  401.547191][T16762] batman_adv: batadv0: Interface activated: batadv_slave_1
[  401.572406][   T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  401.585575][   T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  401.591818][   T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  401.612298][   T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  401.726750][   T82] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  401.744754][   T82] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  401.814691][   T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  401.817841][   T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  401.936763][T16898] xt_hashlimit: size too large, truncated to 1048576
[  402.245510][T16919] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4743'.
[  402.271924][T16919] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4743'.
[  402.281702][ T5668] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  402.290833][ T5668] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  403.040920][   T54] Bluetooth: hci1: command tx timeout
[  403.090305][ T5652] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  403.240804][   T13] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  403.967117][T16955] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  404.074646][T16959] fuse: fd is not a fuse device
[  404.564355][T16977] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4770'.
[  404.599102][T16979] overlayfs: failed to clone upperpath
[  404.603105][T16979] overlayfs: failed to clone lowerpath
[  404.626533][T16981] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4772'.
[  404.654939][T16983] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4773'.
[  404.855836][T16996] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  405.059354][   T54] Bluetooth: hci1: command tx timeout
[  405.134671][T17005] fuse: fd is not a fuse device
[  405.241979][T17009] fuse: fd is not a fuse device
[  405.669829][ T3156] IPVS: starting estimator thread 0...
[  405.746806][T17029] program syz.5.4794 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  405.763549][T17027] IPVS: using max 87 ests per chain, 208800 per kthread
[  405.810404][T17035] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4796'.
[  406.075539][T17046] loop5: detected capacity change from 0 to 512
[  406.109704][T17046] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  406.142992][   T54] Bluetooth: hci0: ISO packet too small
[  406.167610][T17046] EXT4-fs (loop5): 1 truncate cleaned up
[  406.174939][T17046] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  406.355592][T17056] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4805'.
[  406.368666][T17056] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4805'.
[  406.411723][T16762] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  406.695944][T17074] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4814'.
[  406.714778][T17075] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4812'.
[  406.849901][ T5669] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  406.999874][ T5669] usb 6-1: Using ep0 maxpacket: 8
[  407.003108][ T5669] usb 6-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a
[  407.008399][ T5669] usb 6-1: config 135 has an invalid interface number: 230 but max is 0
[  407.013287][ T5669] usb 6-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config
[  407.017617][ T5669] usb 6-1: config 135 has no interface number 0
[  407.020526][ T5669] usb 6-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  407.026791][ T5669] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  407.029776][ T5669] usb 6-1: Product: syz
[  407.031166][ T5669] usb 6-1: Manufacturer: syz
[  407.032737][ T5669] usb 6-1: SerialNumber: syz
[  407.045507][ T5669] uvcvideo 6-1:135.230: Found Unit with invalid ID 0
[  407.047657][ T5669] uvcvideo 6-1:135.230: Found UVC 0.00 device syz (18ec:3288)
[  407.050371][ T5669] uvcvideo 6-1:135.230: No valid video chain found.
[  407.140320][   T54] Bluetooth: hci1: command tx timeout
[  407.248403][ T5669] usb 6-1: USB disconnect, device number 2
[  409.299433][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  409.554405][T17154] loop5: detected capacity change from 0 to 32768
[  409.597634][T17154] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  409.681408][T17154] XFS (loop5): Ending clean mount
[  409.712609][T16762] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  410.385185][T17192] xt_NFQUEUE: number of queues (62232) out of range (got 67565)
[  410.475602][T17202] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4871'.
[  410.649155][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880200c8400: rx timeout, send abort
[  410.733509][T17219] lo: entered allmulticast mode
[  410.735897][T17218] lo: left allmulticast mode
[  411.149314][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880200c9c00: rx timeout, send abort
[  411.158457][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880200c8400: abort rx timeout. Force session deactivation
[  411.652589][    C0] vcan0: j1939_tp_rxtimer: 0xffff8880200c9c00: abort rx timeout. Force session deactivation
[  412.143530][T17245] : renamed from dummy0
[  412.278681][T17249] sctp: [Deprecated]: syz.0.4893 (pid 17249) Use of int in max_burst socket option.
[  412.278681][T17249] Use struct sctp_assoc_value instead
[  412.340954][   T54] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  412.345308][   T54] Bluetooth: hci1: Injecting HCI hardware error event
[  412.356691][T10927] Bluetooth: hci1: hardware error 0x00
[  413.064431][T17283] syz_tun: left promiscuous mode
[  413.074953][T17283] bridge0: port 3(syz_tun) entered disabled state
[  413.117285][T17283] bridge_slave_0: left allmulticast mode
[  413.133973][T17283] bridge_slave_0: left promiscuous mode
[  413.150784][T17283] bridge0: port 1(bridge_slave_0) entered disabled state
[  413.183495][T17283] bridge_slave_1: left allmulticast mode
[  413.198200][T17283] bridge_slave_1: left promiscuous mode
[  413.213823][T17283] bridge0: port 2(bridge_slave_1) entered disabled state
[  413.238238][T17283] bond0: (slave veth0_to_bond): Releasing backup interface
[  413.290789][T17283] bond0: (slave bond_slave_0): Releasing backup interface
[  413.317257][T17283] bond0: (slave bond_slave_1): Releasing backup interface
[  413.352157][T17283] team0: Port device team_slave_0 removed
[  413.363306][T17283] team0: Port device team_slave_1 removed
[  413.370751][T17283] batman_adv: batadv0: Removing interface: batadv_slave_0
[  413.381637][T17283] batman_adv: batadv0: Removing interface: batadv_slave_1
[  413.395614][T17283] batman_adv: batadv0: Interface deactivated: macsec3
[  413.407714][T17283] batman_adv: batadv0: Removing interface: macsec3
[  413.420019][ T5043] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  413.963780][T17311] netlink: 'syz.0.4922': attribute type 11 has an invalid length.
[  414.425055][ T5043] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  414.500377][T10927] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  414.910360][T17333] netlink: 'syz.3.4931': attribute type 4 has an invalid length.
[  414.946578][T17333] netlink: 'syz.3.4931': attribute type 4 has an invalid length.
[  415.652208][T17322] kexec: Could not allocate control_code_buffer
[  415.869118][T17359] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4942'.
[  415.883177][T17359] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4942'.
[  416.158353][   T34] audit: type=1326 audit(1786755499.150:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17365 comm="" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe56099e0d9 code=0x7ffc0000
[  416.186974][   T34] audit: type=1326 audit(1786755499.150:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17365 comm="" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe56099e0d9 code=0x7ffc0000
[  416.223768][   T34] audit: type=1326 audit(1786755499.170:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17365 comm="syz.3.4945" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe56099e0d9 code=0x7ffc0000
[  416.252293][   T34] audit: type=1326 audit(1786755499.170:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17365 comm="syz.3.4945" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe56099e0d9 code=0x7ffc0000
[  416.285617][   T34] audit: type=1326 audit(1786755499.170:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17365 comm="" exe="/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fe56099e0d9 code=0x7ffc0000
[  416.320906][   T34] audit: type=1326 audit(1786755499.170:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17365 comm="" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe56099e0d9 code=0x7ffc0000
[  416.350519][   T34] audit: type=1326 audit(1786755499.170:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17365 comm="" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe56099e0d9 code=0x7ffc0000
[  416.385662][   T34] audit: type=1326 audit(1786755499.170:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17365 comm="syz.3.4945" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fe56099e0d9 code=0x7ffc0000
[  416.416161][   T34] audit: type=1326 audit(1786755499.170:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17365 comm="syz.3.4945" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fe56099e0d9 code=0x7ffc0000
[  417.309362][   T34] audit: type=1800 audit(1786755500.300:253): pid=17397 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.4960" name="pnp_string" dev="configfs" ino=44649 res=0 errno=0
[  419.063303][T17434] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  419.256741][T17446] netlink: 56 bytes leftover after parsing attributes in process `syz.5.4982'.
[  420.585238][T17463] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4992'.
[  420.590256][T17463] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4992'.
[  421.384538][T17472] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  421.388008][T17472] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  421.981837][T17506] ip6tnl1: entered allmulticast mode
[  422.252968][T17524] fuse: fd is not a fuse device
[  423.206795][T17570] netlink: 'syz.5.5042': attribute type 2 has an invalid length.
[  425.210719][ T5043] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  425.362407][ T5043] usb 6-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice= 1.00
[  425.368706][ T5043] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  425.377920][ T5043] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  425.381725][ T5043] usb 6-1: Product: syz
[  425.383119][ T5043] usb 6-1: Manufacturer: syz
[  425.388086][ T5043] usb 6-1: SerialNumber: syz
[  425.595800][T17642] tipc: Failed to remove unknown binding: 66,0,0/2130706433:3048792515/3048792517
[  425.600387][T17642] tipc: Failed to remove unknown binding: 66,0,0/2130706433:3048792515/3048792516
[  425.603536][T17642] tipc: Failed to remove unknown binding: 66,0,0/2130706433:3048792515/3048792517
[  425.607785][T17642] tipc: Failed to remove unknown binding: 66,0,0/2130706433:3048792515/3048792516
[  425.631271][ T5043] usb 6-1: USB disconnect, device number 3
[  425.818203][T17652] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5078'.
[  426.286656][T17687] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5095'.
[  426.676144][T17701] loop5: detected capacity change from 0 to 256
[  426.697592][T17701] exfat: Deprecated parameter 'utf8'
[  426.720402][T17701] exfat: Deprecated parameter 'namecase'
[  426.732539][T17701] exfat: Deprecated parameter 'namecase'
[  426.738861][T17701] exfat: Deprecated parameter 'utf8'
[  426.744320][T17701] exFAT-fs (loop5): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d)
[  426.748190][T17701] exFAT-fs (loop5): failed to test first cluster bit of root dir(5)
[  426.866113][T17712] loop5: detected capacity change from 0 to 128
[  427.173727][T17724] fuse: fd is not a fuse device
[  427.869451][T17741] binder: 17740:17741 ioctl c010f508 0 returned -22
[  427.880920][T17741] binder: 17740:17741 ioctl c018620c 200000000000 returned -22
[  429.132784][T17761] fuse: fd is not a fuse device
[  429.166821][T17763] netlink: 'syz.3.5129': attribute type 2 has an invalid length.
[  429.185057][T17763] : entered promiscuous mode
[  429.911847][T17812] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  430.106347][T17825] openvswitch: netlink: Missing key (keys=c0, expected=1100)
[  430.118738][T17826] netlink: 'syz.3.5157': attribute type 7 has an invalid length.
[  430.127719][T17826] netlink: 'syz.3.5157': attribute type 8 has an invalid length.
[  430.138497][T17822] netlink: 'syz.3.5157': attribute type 7 has an invalid length.
[  430.145994][T17822] netlink: 'syz.3.5157': attribute type 8 has an invalid length.
[  431.264744][T17848] loop5: detected capacity change from 0 to 2048
[  431.334844][T17856] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5171'.
[  431.339873][T17857] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  431.586238][T17872] loop5: detected capacity change from 0 to 4096
[  431.652636][T17877] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  433.586234][T17912] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  433.841990][T17922] bond4: option arp_interval: mode dependency failed, not supported in mode balance-alb(6)
[  433.871212][T17922] bond4 (unregistering): Released all slaves
[  434.274117][T17941] fuse: fd is not a fuse device
[  435.266208][T17989] netlink: 16 bytes leftover after parsing attributes in process `syz.0.5233'.
[  435.321416][T17967] loop5: detected capacity change from 0 to 32768
[  435.351639][T17967] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  435.404331][T17967] XFS (loop5): Ending clean mount
[  435.584421][T16762] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  436.429629][T18028] xt_hashlimit: size too large, truncated to 1048576
[  437.014464][T18046] vcan1: entered promiscuous mode
[  437.024489][T18046] vcan1: entered allmulticast mode
[  437.063653][T18052] cgroup: Need name or subsystem set
[  437.203380][T18059] netlink: 'syz.3.5262': attribute type 1 has an invalid length.
[  437.247470][T18059] veth5: entered allmulticast mode
[  437.254784][T18059] bond4: (slave veth5): Enslaving as an active interface with a down link
[  437.275658][T18059] bond3: (slave veth0_to_bond): Releasing active interface
[  437.282437][T18059] bond4: (slave veth0_to_bond): Enslaving as an active interface with a down link
[  437.318165][T18063] loop5: detected capacity change from 0 to 4096
[  438.125869][T18097] openvswitch: netlink: Multiple metadata blocks provided
[  440.028432][ T1374] ieee802154 phy0 wpan0: encryption failed: -22
[  440.031257][ T1374] ieee802154 phy1 wpan1: encryption failed: -22
[  440.983449][T18110] loop5: detected capacity change from 0 to 256
[  441.002493][T18110] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  441.075914][T18114] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  441.566815][T18139] loop5: detected capacity change from 0 to 1024
[  441.582067][T18139] EXT4-fs: Ignoring removed mblk_io_submit option
[  441.592320][T18139] EXT4-fs: Ignoring removed oldalloc option
[  441.624281][T18139] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  441.637156][T18139] ext4 filesystem being mounted at /137/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  441.643176][T18146] overlayfs: option "index=on" is useless in a non-upper mount, ignore
[  441.645844][T18146] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it.
[  441.649682][T18146] overlayfs: missing 'lowerdir'
[  441.691554][T16762] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  441.805516][T18152] loop5: detected capacity change from 0 to 512
[  441.812605][T18152] EXT4-fs: Ignoring removed nomblk_io_submit option
[  441.858243][T18152] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2
[  441.868509][T18152] EXT4-fs error (device loop5): ext4_iget_extra_inode:5180: inode #15: comm syz.5.5298: corrupted in-inode xattr: e_value size too large
[  441.886931][T18152] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  441.887580][T18152] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.5298: couldn't read orphan inode 15 (err -117)
[  441.890486][    C0] EXT4-fs (loop5): error count since last fsck: 1
[  441.890495][    C0] EXT4-fs (loop5): initial error at time 1786755524: ext4_iget_extra_inode:5180: inode 15
[  441.890508][    C0] EXT4-fs (loop5): last error at time 1786755524: ext4_iget_extra_inode:5180: inode 15
[  441.937134][T18152] loop5: lost filesystem error report for type 5 error -117
[  441.938002][T18152] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  442.020921][T16762] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  442.128471][T18169] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off.
[  442.135987][T18169] overlayfs: conflicting options: userxattr,metacopy=on
[  442.689118][T18202] netlink: 'syz.0.5323': attribute type 29 has an invalid length.
[  443.064164][T18222] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5331'.
[  443.072173][T18222] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5331'.
[  443.366633][T18238] MTD: Couldn't look up './dev/mtdblock0': -2
[  443.464308][T18244] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5342'.
[  443.502881][T18244] 8021q: adding VLAN 0 to HW filter on device bond5
[  443.544476][T18244] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  443.791732][T18261] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  443.794515][T18261] overlayfs: missing 'lowerdir'
[  443.801510][T18261] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5350'.
[  443.873565][   T34] audit: type=1326 audit(1786755526.870:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18267 comm="syz.3.5354" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe56099e0d9 code=0x7ffc0000
[  443.902126][   T34] audit: type=1326 audit(1786755526.880:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18267 comm="syz.3.5354" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe56099e0d9 code=0x7ffc0000
[  443.939105][   T34] audit: type=1326 audit(1786755526.880:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18267 comm="syz.3.5354" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe56099e0d9 code=0x7ffc0000
[  443.970606][   T34] audit: type=1326 audit(1786755526.880:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18267 comm="syz.3.5354" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe56099e0d9 code=0x7ffc0000
[  443.998846][   T34] audit: type=1326 audit(1786755526.880:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18267 comm="syz.3.5354" exe="/syz-executor" sig=0 arch=c000003e syscall=306 compat=0 ip=0x7fe56099e0d9 code=0x7ffc0000
[  444.027544][   T34] audit: type=1326 audit(1786755526.880:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18267 comm="syz.3.5354" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe56099e0d9 code=0x7ffc0000
[  444.056699][   T34] audit: type=1326 audit(1786755526.880:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18267 comm="syz.3.5354" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe56099e0d9 code=0x7ffc0000
[  444.085399][   T34] audit: type=1326 audit(1786755526.880:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18267 comm="syz.3.5354" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fe56099e0d9 code=0x7ffc0000
[  444.117562][   T34] audit: type=1326 audit(1786755526.880:262): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18267 comm="syz.3.5354" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fe56099e0d9 code=0x7ffc0000
[  444.622549][T18301] openvswitch: netlink: IP tunnel attribute has 5 unknown bytes.
[  444.670609][T18303] loop5: detected capacity change from 0 to 512
[  444.673369][T18303] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  444.710354][   T34] audit: type=1800 audit(1786755527.710:263): pid=18303 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.5369" name="file1" dev="loop5" ino=1048651 res=0 errno=0
[  445.051522][ T5043] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  445.212224][ T5043] usb 6-1: Using ep0 maxpacket: 8
[  445.223550][ T5043] usb 6-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e
[  445.242975][ T5043] usb 6-1: config 64 interface 0 has no altsetting 0
[  445.256981][ T5043] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  445.268000][ T5043] usb 6-1: Product: syz
[  445.275397][ T5043] usb 6-1: Manufacturer: syz
[  445.276942][ T5043] usb 6-1: SerialNumber: syz
[  445.327858][ T5043] snd_usb_toneport 6-1:64.0: Line 6 TonePort UX2 found
[  445.357956][T18321] Process accounting resumed
[  445.546252][ T5043] snd_usb_toneport 6-1:64.0: Line 6 TonePort UX2 now disconnected
[  445.554991][ T5043] snd_usb_toneport 6-1:64.0: probe with driver snd_usb_toneport failed with error -22
[  445.743621][ T5043] usb 6-1: USB disconnect, device number 4
[  445.775935][T18347] x_tables: ip6_tables: SNAT target: used from hooks OUTPUT, but only usable from INPUT/POSTROUTING
[  445.924405][T18357] netlink: 'syz.3.5393': attribute type 1 has an invalid length.
[  445.927198][T18357] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5393'.
[  446.459681][T18369] loop5: detected capacity change from 0 to 256
[  447.254938][T18415] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5420'.
[  447.862845][T18430] loop5: detected capacity change from 0 to 32768
[  448.001694][T18436] jffs2: notice: (18436) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  448.318401][T18453] fuse: fd is not a fuse device
[  448.322402][T18451] usb usb7: usbfs: process 18451 (syz.5.5436) did not claim interface 0 before use
[  448.571215][T18470] netlink: 'syz.3.5444': attribute type 11 has an invalid length.
[  448.645352][T18474] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5447'.
[  448.696647][T18479] loop5: detected capacity change from 0 to 256
[  448.726698][T18479] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  448.754380][T18479] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  448.768711][T18479] FAT-fs (loop5): Filesystem has been set read-only
[  448.777546][T18483] netlink: 'syz.3.5451': attribute type 2 has an invalid length.
[  449.585290][T18529] xt_hashlimit: size too large, truncated to 1048576
[  449.834488][T18539] set match dimension is over the limit!
[  450.349483][ T5661] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  450.500663][ T5661] usb 6-1: Using ep0 maxpacket: 16
[  450.505751][ T5661] usb 6-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73
[  450.520856][ T5661] usb 6-1: config 0 has an invalid interface number: 34 but max is 0
[  450.531575][ T5661] usb 6-1: config 0 has no interface number 0
[  450.538286][ T5661] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023
[  450.545791][ T5661] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80
[  450.557753][ T5661] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  450.561574][ T5661] usb 6-1: Product: syz
[  450.564724][ T5661] usb 6-1: Manufacturer: syz
[  450.567840][ T5661] usb 6-1: SerialNumber: syz
[  450.574478][ T5661] usb 6-1: config 0 descriptor??
[  450.582077][T18559] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  450.594759][T18559] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  450.824884][T18559] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  450.834358][T18559] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  451.061388][ T5661] asix 6-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random
[  451.556551][ T3156] libceph: mon0 (1)[c::]:6789 socket error on write
[  451.636251][ T3156] libceph: mon0 (1)[c::]:6789 socket error on write
[  451.904132][ T3156] libceph: mon0 (1)[c::]:6789 socket error on write
[  452.247243][T18610] ceph: No mds server is up or the cluster is laggy
[  452.294501][ T5661] asix 6-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  452.323178][ T5661] asix 6-1:0.34 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9
[  452.332928][ T5661] asix 6-1:0.34: probe with driver asix failed with error -71
[  452.346432][ T5661] usb 6-1: USB disconnect, device number 5
[  452.382210][T18630] sctp: [Deprecated]: syz.0.5513 (pid 18630) Use of int in maxseg socket option.
[  452.382210][T18630] Use struct sctp_assoc_value instead
[  452.616331][T18642] 9pnet_fd: p9_fd_create_tcp (18642): problem binding to privport
[  452.818968][   T34] audit: type=1326 audit(1786755535.810:264): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18657 comm="syz.0.5527" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc01879e0d9 code=0x7ffc0000
[  452.870577][   T34] audit: type=1326 audit(1786755535.810:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18657 comm="syz.0.5527" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc01879e0d9 code=0x7ffc0000
[  452.918201][   T34] audit: type=1326 audit(1786755535.830:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18657 comm="syz.0.5527" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc01879e0d9 code=0x7ffc0000
[  452.944329][   T34] audit: type=1326 audit(1786755535.830:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18657 comm="syz.0.5527" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc01879e0d9 code=0x7ffc0000
[  452.976768][   T34] audit: type=1326 audit(1786755535.830:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18657 comm="syz.0.5527" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc01879e0d9 code=0x7ffc0000
[  453.007904][   T34] audit: type=1326 audit(1786755535.830:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18657 comm="syz.0.5527" exe="/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7fc01879e0d9 code=0x7ffc0000
[  453.043733][   T34] audit: type=1326 audit(1786755535.830:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18657 comm="syz.0.5527" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc01879e0d9 code=0x7ffc0000
[  453.071649][   T34] audit: type=1326 audit(1786755535.830:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18657 comm="syz.0.5527" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc01879e0d9 code=0x7ffc0000
[  453.245315][T18676] loop5: detected capacity change from 0 to 1024
[  453.262195][T18676] EXT4-fs: Ignoring removed orlov option
[  453.362443][T18676] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  453.495815][T16762] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  454.283387][T18714] loop5: detected capacity change from 0 to 256
[  454.617679][T18722] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5555'.
[  454.627188][T18722] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5555'.
[  454.638906][T18722] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5555'.
[  454.647855][T18722] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5555'.
[  454.712507][T18728] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[  454.717588][T18728] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  455.009907][T18746] overlayfs: failed to resolve './cgroup': -2
[  455.231976][T18758] netlink: 'syz.0.5575': attribute type 3 has an invalid length.
[  455.240261][T18758] netlink: 'syz.0.5575': attribute type 27 has an invalid length.
[  455.406278][   T34] audit: type=1326 audit(1786755538.400:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18769 comm="syz.0.5580" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc01879e0d9 code=0x0
[  455.509529][ T3156] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  455.551640][T18780] overlayfs: failed to clone upperpath
[  455.662256][ T3156] usb 6-1: Using ep0 maxpacket: 16
[  455.670561][ T3156] usb 6-1: unable to get BOS descriptor or descriptor too short
[  455.679486][ T3156] usb 6-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=2b.48
[  455.691869][ T3156] usb 6-1: config 4 has an invalid interface number: 127 but max is 0
[  455.697608][ T3156] usb 6-1: config 4 has no interface number 0
[  455.703414][ T3156] usb 6-1: config 4 interface 127 has no altsetting 0
[  455.718685][ T3156] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  455.728783][ T3156] usb 6-1: Product: syz
[  455.732673][ T3156] usb 6-1: Manufacturer: syz
[  455.735898][ T3156] usb 6-1: SerialNumber: syz
[  455.866713][T18799] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5594'.
[  455.938678][T18801] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5595'.
[  455.966694][ T3156] usbhid 6-1:4.127: couldn't find an input interrupt endpoint
[  455.985398][ T3156] usb 6-1: USB disconnect, device number 6
[  456.839065][T18851] raw_sendmsg: syz.3.5620 forgot to set AF_INET. Fix it!
[  457.062715][T10927] Bluetooth: hci0: unexpected event for opcode 0x080e
[  457.394666][T18888] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5635'.
[  457.480774][T18894] netlink: 132 bytes leftover after parsing attributes in process `syz.3.5638'.
[  457.623909][T10927] Bluetooth: hci0: unexpected event for opcode 0x2041
[  458.646850][T18958] loop5: detected capacity change from 0 to 16
[  458.823604][T18958] erofs (device loop5): mounted with root inode @ nid 36.
[  460.636519][T18988] loop5: detected capacity change from 0 to 32768
[  460.788597][T18988] ocfs2: Slot 0 on device (7,5) was already allocated to this node!
[  460.838729][T18988] JBD2: Ignoring recovery information on journal
[  460.850930][T19005] netlink: 180 bytes leftover after parsing attributes in process `syz.3.5687'.
[  460.966871][T18988] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  461.774205][T16762] ocfs2: Unmounting device (7,5) on (node local)
[  462.197986][T19028] loop5: detected capacity change from 0 to 256
[  462.238130][T19028] exfat: Deprecated parameter 'utf8'
[  462.258652][T19028] exfat: Deprecated parameter 'utf8'
[  462.280191][T19028] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  462.932993][T19061] loop5: detected capacity change from 0 to 8
[  463.243882][T19068] overlayfs: failed to clone upperpath
[  463.331540][T16762] SQUASHFS error: Unable to read directory block [631:72]
[  463.366691][T16762] SQUASHFS error: Unable to read inode 0x0
[  463.387771][T16762] SQUASHFS error: Unable to read inode 0x0
[  463.901775][   T13] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  463.962891][   T13] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  464.175952][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  464.194475][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  464.200921][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  464.203614][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  464.206717][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  464.408614][   T13] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  464.417880][   T13] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  464.542141][   T13] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  464.549601][   T13] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  464.667077][   T13] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  464.678556][   T13] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  464.845703][T19116] netlink: 'syz.0.5734': attribute type 12 has an invalid length.
[  465.027275][   T13] bridge_slave_1: left allmulticast mode
[  465.038097][   T13] bridge_slave_1: left promiscuous mode
[  465.048796][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  465.065586][   T13] bridge_slave_0: left allmulticast mode
[  465.072406][   T13] bridge_slave_0: left promiscuous mode
[  465.083315][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  465.367138][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  465.375949][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  465.380547][   T13] bond0 (unregistering): Released all slaves
[  465.443705][ T5345] 8021q: adding VLAN 0 to HW filter on device eth9
[  465.786290][   T13] hsr_slave_0: left promiscuous mode
[  465.796400][   T13] hsr_slave_1: left promiscuous mode
[  465.801476][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  465.815763][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  465.823470][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  465.830117][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  465.883120][   T13] veth1_macvtap: left promiscuous mode
[  465.888317][   T13] veth0_macvtap: left promiscuous mode
[  465.896325][   T13] veth1_vlan: left promiscuous mode
[  465.903167][   T13] veth0_vlan: left promiscuous mode
[  466.048357][T19170] netlink: 'syz.3.5751': attribute type 1 has an invalid length.
[  466.060547][T19170] netlink: 'syz.3.5751': attribute type 1 has an invalid length.
[  466.259637][T10927] Bluetooth: hci1: command tx timeout
[  466.367421][   T13] team0 (unregistering): Port device team_slave_1 removed
[  466.406128][   T13] team0 (unregistering): Port device team_slave_0 removed
[  466.475869][T10927] Bluetooth: hci0: unexpected event for opcode 0x1405
[  466.535242][T19186] overlayfs: missing 'lowerdir'
[  466.622289][ T5345] 8021q: adding VLAN 0 to HW filter on device eth10
[  466.911336][T19203] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5764'.
[  467.117282][T19216] xt_hashlimit: size too large, truncated to 1048576
[  467.161522][T19083] bridge0: port 1(bridge_slave_0) entered blocking state
[  467.187808][T19083] bridge0: port 1(bridge_slave_0) entered disabled state
[  467.203182][T19083] bridge_slave_0: entered allmulticast mode
[  467.211902][T19083] bridge_slave_0: entered promiscuous mode
[  467.226367][T19083] bridge0: port 2(bridge_slave_1) entered blocking state
[  467.243835][T19083] bridge0: port 2(bridge_slave_1) entered disabled state
[  467.254229][T19083] bridge_slave_1: entered allmulticast mode
[  467.266312][T19083] bridge_slave_1: entered promiscuous mode
[  467.277648][ T5345] 8021q: adding VLAN 0 to HW filter on device eth11
[  467.361817][T19083] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  467.374473][T19083] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  467.438824][T10927] Bluetooth: hci0: unexpected event for opcode 0x0c7b
[  467.454392][T19228] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  467.472356][T19083] team0: Port device team_slave_0 added
[  467.488504][T19083] team0: Port device team_slave_1 added
[  467.643376][T19083] batman_adv: batadv0: Adding interface: batadv_slave_0
[  467.653154][T19083] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  467.702645][T19083] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  468.206377][T19083] batman_adv: batadv0: Adding interface: batadv_slave_1
[  468.223091][T19083] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  468.260773][T19083] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  468.342813][T10927] Bluetooth: hci1: command tx timeout
[  468.390961][T19083] hsr_slave_0: entered promiscuous mode
[  468.400669][T19083] hsr_slave_1: entered promiscuous mode
[  468.445937][ T5345] 8021q: adding VLAN 0 to HW filter on device eth12
[  468.980222][T19083] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  468.990804][T19083] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  468.997206][T19083] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  469.002193][T19083] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  469.010078][T19083] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  469.023573][T19083] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  469.043945][T19083] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  469.055603][T19083] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  469.225819][T19274] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5787'.
[  469.239916][T19083] 8021q: adding VLAN 0 to HW filter on device bond0
[  469.250839][T19273] tipc: Enabled bearer <eth:syzkaller0>, priority 10
[  469.292653][T19083] 8021q: adding VLAN 0 to HW filter on device team0
[  469.321124][   T82] bridge0: port 1(bridge_slave_0) entered blocking state
[  469.323589][   T82] bridge0: port 1(bridge_slave_0) entered forwarding state
[  469.340405][   T82] bridge0: port 2(bridge_slave_1) entered blocking state
[  469.342960][   T82] bridge0: port 2(bridge_slave_1) entered forwarding state
[  469.562805][T19293] overlayfs: failed to clone upperpath
[  469.866387][T19315] xt_TPROXY: Can be used only with -p tcp or -p udp
[  469.929571][T19083] 8021q: adding VLAN 0 to HW filter on device batadv0
[  470.121660][T19083] veth0_vlan: entered promiscuous mode
[  470.126842][T19083] veth1_vlan: entered promiscuous mode
[  470.144831][T19083] veth0_macvtap: entered promiscuous mode
[  470.152983][T19083] veth1_macvtap: entered promiscuous mode
[  470.162426][T19083] batman_adv: batadv0: Interface activated: batadv_slave_0
[  470.171525][T19083] batman_adv: batadv0: Interface activated: batadv_slave_1
[  470.194118][ T5652] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  470.203216][ T5652] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  470.232444][   T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  470.245586][   T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  470.347762][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  470.369088][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  470.419507][T10927] Bluetooth: hci1: command tx timeout
[  470.462945][ T5850] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  470.467717][ T5850] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  470.482961][T19336] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5807'.
[  472.291656][T19439] nbd: illegal input index -1
[  472.410282][ T3156] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  472.502750][T10927] Bluetooth: hci1: command tx timeout
[  472.560484][ T3156] usb 7-1: Using ep0 maxpacket: 32
[  472.565936][ T3156] usb 7-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[  472.578392][ T3156] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  472.606875][ T3156] usb 7-1: config 0 descriptor??
[  472.656998][ T3156] as10x_usb: device has been detected
[  472.672749][ T3156] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[  472.792301][T19467] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5871'.
[  472.796267][T19468] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5870'.
[  472.804858][ T3156] usb 7-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[  472.938934][ T3156] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #248: comm kworker/0:2: No space for directory leaf checksum. Please run e2fsck -D.
[  472.976121][ T3156] EXT4-fs error (device sda1): __ext4_find_entry:1626: inode #248: comm kworker/0:2: checksumming directory block 0
[  472.990714][ T3156] usb 7-1: loading /lib/firmware/updates/syzkaller/as102_data1_st.hex failed with error -74
[  472.999751][ T3156] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #248: comm kworker/0:2: No space for directory leaf checksum. Please run e2fsck -D.
[  473.015689][ T3156] EXT4-fs error (device sda1): __ext4_find_entry:1626: inode #248: comm kworker/0:2: checksumming directory block 0
[  473.027597][ T3156] usb 7-1: loading /lib/firmware/updates/as102_data1_st.hex failed with error -74
[  473.037086][ T3156] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #248: comm kworker/0:2: No space for directory leaf checksum. Please run e2fsck -D.
[  473.066200][ T3156] EXT4-fs error (device sda1): __ext4_find_entry:1626: inode #248: comm kworker/0:2: checksumming directory block 0
[  473.081735][ T3156] usb 7-1: loading /lib/firmware/syzkaller/as102_data1_st.hex failed with error -74
[  473.098640][ T3156] EXT4-fs warning (device sda1): ext4_dirblock_csum_verify:375: inode #248: comm kworker/0:2: No space for directory leaf checksum. Please run e2fsck -D.
[  473.381334][ T3156] EXT4-fs error (device sda1): __ext4_find_entry:1626: inode #248: comm kworker/0:2: checksumming directory block 0
[  474.148669][ T3156] usb 7-1: loading /lib/firmware/as102_data1_st.hex failed with error -74
[  474.285603][ T3156] usb 7-1: Direct firmware load for as102_data1_st.hex failed with error -74
[  474.307309][ T3156] usb 7-1: Falling back to sysfs fallback for: as102_data1_st.hex
[  474.344684][T19427] /dev/sr0: Can't open blockdev
[  474.897766][T19526] overlayfs: failed to clone upperpath
[  475.980829][T19541] overlayfs: failed to clone upperpath
[  476.212101][T19554] netlink: 'syz.0.5904': attribute type 1 has an invalid length.
[  476.223823][T19554] netlink: 'syz.0.5904': attribute type 2 has an invalid length.
[  476.235114][T19554] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5904'.
[  476.362225][T19560] loop6: detected capacity change from 0 to 8192
[  476.422671][T19560] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  476.645861][T19560] block device autoloading is deprecated and will be removed.
[  477.072719][T19572] IPVS: Scheduler module ip_vs_sip not found
[  477.190866][T19584] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5917'.
[  477.203615][T19584] netlink: 56 bytes leftover after parsing attributes in process `syz.0.5917'.
[  477.442950][T19604] size and base must be multiples of 4 kiB
[  477.450154][T19604] CPU: 0 UID: 0 PID: 19604 Comm: syz.6.5926 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  477.450168][T19604] Tainted: [L]=SOFTLOCKUP
[  477.450171][T19604] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  477.450176][T19604] Call Trace:
[  477.450180][T19604]  <TASK>
[  477.450183][T19604]  dump_stack_lvl+0xe8/0x150
[  477.450200][T19604]  mtrr_del+0xc8/0xf0
[  477.450210][T19604]  mtrr_ioctl+0xcb8/0x13b0
[  477.450221][T19604]  ? __pfx_mtrr_ioctl+0x10/0x10
[  477.450237][T19604]  ? __fget_files+0x2a/0x420
[  477.450246][T19604]  ? __fget_files+0x3a2/0x420
[  477.450255][T19604]  ? __fget_files+0x2a/0x420
[  477.450263][T19604]  ? __pfx_mtrr_ioctl+0x10/0x10
[  477.450272][T19604]  proc_reg_unlocked_ioctl+0x1d6/0x2c0
[  477.450285][T19604]  ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10
[  477.450294][T19604]  __se_sys_ioctl+0xfc/0x170
[  477.450302][T19604]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  477.450309][T19604]  do_syscall_64+0x174/0x580
[  477.450318][T19604]  ? trace_irq_disable+0x3b/0x140
[  477.450328][T19604]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  477.450334][T19604] RIP: 0033:0x7fb03459e0d9
[  477.450342][T19604] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  477.450349][T19604] RSP: 002b:00007fb0353a0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  477.450358][T19604] RAX: ffffffffffffffda RBX: 00007fb034825fa0 RCX: 00007fb03459e0d9
[  477.450363][T19604] RDX: 0000200000000200 RSI: 0000000040104d04 RDI: 0000000000000003
[  477.450368][T19604] RBP: 00007fb034635024 R08: 0000000000000000 R09: 0000000000000000
[  477.450373][T19604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  477.450378][T19604] R13: 00007fb034826038 R14: 00007fb034825fa0 R15: 00007fff781452f8
[  477.450389][T19604]  </TASK>
[  477.661822][   T34] audit: type=1326 audit(1786755560.650:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19609 comm="syz.3.5930" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe56099e0d9 code=0x0
[  478.606948][T19641] IPVS: sync thread started: state = BACKUP, mcast_ifn = macsec0, syncid = 3, id = 0
[  478.734807][T19643] loop6: detected capacity change from 0 to 136
[  478.748630][T19643] Attempt to read inode for relocated directory
[  478.897439][T19645] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5944'.
[  479.142921][T19655] loop6: detected capacity change from 0 to 512
[  479.188591][T19655] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement.
[  483.805966][T19812] fuse: fd is not a fuse device
[  484.130308][T19828] SET target dimension over the limit!
[  484.285509][T19833] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6016'.
[  484.662640][T19838] loop6: detected capacity change from 0 to 512
[  484.676941][T19838] EXT4-fs (loop6): Test dummy encryption mode enabled
[  484.709569][T19838] EXT4-fs error (device loop6): ext4_orphan_get:1399: inode #15: comm syz.6.6018: inode has both inline data and extents flags
[  484.727085][T19838] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  484.727252][T19838] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.6018: couldn't read orphan inode 15 (err -117)
[  484.730168][    C0] EXT4-fs (loop6): error count since last fsck: 1
[  484.730177][    C0] EXT4-fs (loop6): initial error at time 1786755567: ext4_orphan_get:1399: inode 15
[  484.730189][    C0] EXT4-fs (loop6): last error at time 1786755567: ext4_orphan_get:1399: inode 15
[  484.775694][T19838] loop6: lost filesystem error report for type 5 error -117
[  484.776692][T19838] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  484.887420][T19850] EXT4-fs (loop6): shut down requested (2)
[  484.951839][T19083] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  485.172679][T19870] xt_policy: input policy not valid in POSTROUTING and OUTPUT
[  485.194823][T19871] loop6: detected capacity change from 0 to 2048
[  485.218133][T19871] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 160: 0xa1 != 0xd4
[  485.246586][T19871] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  485.370315][T19879] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  485.384289][T19879] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  485.480768][T19886] 9p: Bad value for 'rfdno'
[  485.747355][T19907] loop6: detected capacity change from 0 to 512
[  485.788768][T19907] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  485.806628][T19907] ext4 filesystem being mounted at /66/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  485.888932][T19083] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  486.211082][T19938] overlayfs: failed to clone upperpath
[  486.277398][   T34] audit: type=1800 audit(1786755569.270:274): pid=19936 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.6060" name="file0" dev="fuse" ino=18446744073709551613 res=0 errno=0
[  486.857132][T19973] loop6: detected capacity change from 0 to 128
[  486.879207][T19973] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  486.901916][T19973] ext4 filesystem being mounted at /75/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  486.956878][T19083] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  487.100674][T19989] loop6: detected capacity change from 0 to 1024
[  487.125212][T19989] hfsplus: failed to load extents file
[  488.006719][T19999] loop6: detected capacity change from 0 to 256
[  488.021397][T19999] exfat: Deprecated parameter 'utf8'
[  488.033524][T19999] exfat: Deprecated parameter 'namecase'
[  488.042167][T19999] exfat: Deprecated parameter 'utf8'
[  488.060165][T19999] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  488.669120][T20029] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6104'.
[  488.993674][T20051] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000
[  489.922801][   T34] audit: type=1326 audit(1786755572.920:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20080 comm="syz.3.6129" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe56099e0d9 code=0x7ffc0000
[  489.952261][   T34] audit: type=1326 audit(1786755572.920:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20080 comm="syz.3.6129" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe56099e0d9 code=0x7ffc0000
[  489.979031][   T34] audit: type=1326 audit(1786755572.930:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20080 comm="syz.3.6129" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe56099e0d9 code=0x7ffc0000
[  489.993674][T20086] ptrace attach of "/syz-executor exec"[7363] was attempted by "                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                               
[  490.003974][   T34] audit: type=1326 audit(1786755572.930:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20080 comm="syz.3.6129" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe56099e0d9 code=0x7ffc0000
[  490.116875][   T34] audit: type=1326 audit(1786755572.930:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20080 comm="syz.3.6129" exe="/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7fe56099e0d9 code=0x7ffc0000
[  490.139796][   T34] audit: type=1326 audit(1786755572.930:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20080 comm="syz.3.6129" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe56099e0d9 code=0x7ffc0000
[  490.178753][   T34] audit: type=1326 audit(1786755572.930:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20080 comm="syz.3.6129" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe56099e0d9 code=0x7ffc0000
[  490.205024][   T34] audit: type=1326 audit(1786755572.930:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20080 comm="syz.3.6129" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fe56099e0d9 code=0x7ffc0000
[  490.232547][   T34] audit: type=1326 audit(1786755572.930:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20080 comm="syz.3.6129" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fe56099e0d9 code=0x7ffc0000
[  491.631190][T20113] overlayfs: failed to clone upperpath
[  491.790426][T20119] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  491.790426][T20119] The task syz.3.6146 (20119) triggered the difference, watch for misbehavior.
[  494.131888][T20143] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6156'.
[  494.877770][T20170] loop6: detected capacity change from 0 to 4096
[  494.886771][T20170] ntfs3(loop6): RAW NTFS volume: Filesystem size 0.00 Gb > volume size 0.00 Gb. Mount in read-only.
[  494.932313][T20170] ntfs3(loop6): $Bitmap is corrupted.
[  495.156427][T20186] loop6: detected capacity change from 0 to 1024
[  495.187912][T20186] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  495.234770][T20186] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters
[  495.292783][T20186] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  495.303670][T20196] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 48 with error 28
[  495.327181][T20196] EXT4-fs (loop6): This should not happen!! Data will be lost
[  495.327181][T20196] 
[  495.332392][T20186] EXT4-fs (loop6): This should not happen!! Data will be lost
[  495.332392][T20186] 
[  495.337839][T20196] EXT4-fs (loop6): Total free blocks count 0
[  495.342325][T20186] EXT4-fs (loop6): Total free blocks count 0
[  495.349692][T20186] EXT4-fs (loop6): Free/Dirty block details
[  495.351941][T20196] EXT4-fs (loop6): Free/Dirty block details
[  495.355446][T20186] EXT4-fs (loop6): free_blocks=20480
[  495.398795][T19083] EXT4-fs warning (device loop6): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost
[  495.503265][T20204] mmap: syz.6.6181 (20204): VmData 37462016 exceed data ulimit 6. Update limits or use boot option ignore_rlimit_data.
[  495.875756][T20224] netlink: 128 bytes leftover after parsing attributes in process `syz.6.6192'.
[  496.439849][T20248] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303
[  498.343779][T20307] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6227'.
[  500.012577][   T34] audit: type=1107 audit(1786755582.660:284): pid=20344 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=''
[  500.098545][T20353] loop6: detected capacity change from 0 to 256
[  500.885555][T20373] jffs2: notice: (20373) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[  501.258113][T20389] loop6: detected capacity change from 0 to 4096
[  501.464082][ T1374] ieee802154 phy0 wpan0: encryption failed: -22
[  501.466419][ T1374] ieee802154 phy1 wpan1: encryption failed: -22
[  502.511281][T20428] loop6: detected capacity change from 0 to 2048
[  502.529196][T20428] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024)
[  502.566153][T20430] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  504.663894][T20451] loop6: detected capacity change from 0 to 4096
[  504.695058][T20451] ntfs3(loop6): ino=0, ni_load_mi_ex
[  504.706278][T20451] ntfs3(loop6): ino=0, ni_load_mi_ex
[  504.718535][T20451] ntfs3(loop6): Failed to load $MFT (-22).
[  505.214719][T20453] loop6: detected capacity change from 0 to 131072
[  505.227633][T20453] F2FS-fs (loop6): Wrong secs_per_zone / total_sections (512, 24)
[  505.230883][T20453] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock
[  505.233644][T20453] F2FS-fs (loop6): Test dummy encryption mode enabled
[  505.236613][T20453] F2FS-fs (loop6): invalid crc value
[  505.263605][T20453] F2FS-fs (loop6): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix.
[  505.267627][T20453] loop6: lost filesystem error report for type 5 error -117
[  505.275716][T20453] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  505.285898][T20453] F2FS-fs (loop6): f2fs_disable_checkpoint starts, unusable: 0
[  505.288286][T20453] F2FS-fs (loop6): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0
[  505.291751][T20453] F2FS-fs (loop6): Start checkpoint disabled!
[  505.301439][T20453] F2FS-fs (loop6): f2fs_disable_checkpoint finishes, err:0
[  505.304134][T20453] F2FS-fs (loop6): Try to recover 2th superblock, ret: 0
[  505.306286][T20453] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6
[  505.600826][T20458] 9p: Bad value for 'rfdno'
[  505.756192][T20464] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6297'.
[  505.767023][T20464] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6297'.
[  505.818807][T20465] pim6reg: entered allmulticast mode
[  505.917972][T20460] pim6reg: left allmulticast mode
[  506.079063][T20476] netlink: 140 bytes leftover after parsing attributes in process `syz.0.6301'.
[  506.086338][T20476] netlink: 16 bytes leftover after parsing attributes in process `syz.0.6301'.
[  506.414516][T20494] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6309'.
[  506.987745][T20521] loop6: detected capacity change from 0 to 4096
[  507.054088][T20528] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  507.522357][T20549] netlink: 36 bytes leftover after parsing attributes in process `syz.0.6334'.
[  507.914776][T10927] Bluetooth: hci0: unexpected event for opcode 0x1001
[  508.007199][T20559] netlink: 27 bytes leftover after parsing attributes in process `syz.3.6338'.
[  510.262825][T20583] dummy0: left promiscuous mode
[  510.275030][T20583] netdevsim netdevsim3 netdevsim0: left allmulticast mode
[  510.278584][T20583] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  510.283346][T20583] bond1: left promiscuous mode
[  510.284843][T20583] bond1: left allmulticast mode
[  510.288583][T20583] 8021q: adding VLAN 0 to HW filter on device bond1
[  510.294803][T20583] geneve2: left allmulticast mode
[  510.300490][T20583] A link change request failed with some changes committed already. Interface geneve3 may have been left with an inconsistent configuration, please check.
[  510.310118][   T12] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  510.330742][   T12] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  510.373174][ T5652] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  510.379149][ T5652] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  510.720346][ T5652] ip6_tunnel: syztnl0 xmit: Local address not yet configured!
[  510.727865][ T5652] ip6_tunnel: syztnl0 xmit: Local address not yet configured!
[  510.752392][ T5669] ip6_tunnel: syztnl0 xmit: Local address not yet configured!
[  511.386126][T20638] 9pnet: p9_errstr2errno: server reported unknown error 
[  511.464742][ T5661] ip6_tunnel: syztnl0 xmit: Local address not yet configured!
[  511.621169][ T5661] ip6_tunnel: syztnl0 xmit: Local address not yet configured!
[  511.933811][T20659] input: syz0 as /devices/virtual/input/input19
[  511.940473][T10927] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  511.949777][T10927] Bluetooth: hci0: Injecting HCI hardware error event
[  511.957635][   T54] Bluetooth: hci0: hardware error 0x00
[  512.552598][T20674] openvswitch: netlink: IP tunnel dst address not specified
[  512.802836][   T34] audit: type=1326 audit(1786755595.800:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20686 comm="syz.3.6390" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe56099e0d9 code=0x0
[  513.557795][T20723] loop6: detected capacity change from 0 to 64
[  513.702897][T20727] loop6: detected capacity change from 0 to 256
[  513.715815][T20727] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  513.796734][   T34] audit: type=1326 audit(1786755596.790:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20732 comm="syz.0.6411" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc01879e0d9 code=0x7ffc0000
[  513.932055][   T34] audit: type=1326 audit(1786755596.810:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20732 comm="syz.0.6411" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc01879e0d9 code=0x7ffc0000
[  514.100980][   T54] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  514.106138][   T34] audit: type=1326 audit(1786755596.810:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20732 comm="syz.0.6411" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc01879e0d9 code=0x7ffc0000
[  514.132383][   T34] audit: type=1326 audit(1786755596.810:289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20732 comm="syz.0.6411" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc01879e0d9 code=0x7ffc0000
[  514.174085][   T34] audit: type=1326 audit(1786755596.810:290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20732 comm="syz.0.6411" exe="/syz-executor" sig=0 arch=c000003e syscall=17 compat=0 ip=0x7fc01879e0d9 code=0x7ffc0000
[  514.197427][   T34] audit: type=1326 audit(1786755596.810:291): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20732 comm="syz.0.6411" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc01879e0d9 code=0x7ffc0000
[  514.207554][T20744] loop6: detected capacity change from 0 to 512
[  514.228879][   T34] audit: type=1326 audit(1786755596.810:292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20732 comm="syz.0.6411" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc01879e0d9 code=0x7ffc0000
[  514.241680][T20744] EXT4-fs (loop6): revision level too high, forcing read-only mode
[  514.250746][T20744] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002]
[  514.265503][T20744] System zones: 0-1, 15-15, 18-18, 34-34
[  514.270740][   T34] audit: type=1326 audit(1786755596.810:293): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20732 comm="syz.0.6411" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fc01879e0d9 code=0x7ffc0000
[  514.280873][T20744] EXT4-fs (loop6): orphan cleanup on readonly fs
[  514.286394][T20744] Quota error (device loop6): v2_read_header: Failed header read: expected=8 got=0
[  514.296056][T20744] EXT4-fs warning (device loop6): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  514.307171][T20744] EXT4-fs (loop6): Cannot turn on quotas: error -22
[  514.315050][T20744] EXT4-fs error (device loop6): ext4_orphan_get:1425: comm syz.6.6415: bad orphan inode 16
[  514.327277][T20744] loop6: lost filesystem error report for type 5 error -117
[  514.327418][T20744] ext4_test_bit(bit=15, block=18) = 1
[  514.329825][    C0] EXT4-fs (loop6): error count since last fsck: 1
[  514.329835][    C0] EXT4-fs (loop6): initial error at time 1786755597: ext4_orphan_get:1425
[  514.329844][    C0] EXT4-fs (loop6): last error at time 1786755597: ext4_orphan_get:1425
[  514.351556][T20744] is_bad_inode(inode)=0
[  514.352926][T20744] NEXT_ORPHAN(inode)=0
[  514.356365][T20744] max_ino=32
[  514.357563][T20744] i_nlink=2
[  514.362716][T20744] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  514.398703][T19083] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  514.480978][T20754] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6420'.
[  514.659475][    C0] ip6_tunnel: syztnl0 xmit: Local address not yet configured!
[  516.726740][T20814] loop6: detected capacity change from 0 to 256
[  516.748783][T20814] FAT-fs (loop6): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1)
[  516.777335][T20814] FAT-fs (loop6): bogus number of directory entries (1)
[  516.793822][T20814] FAT-fs (loop6): Can't find a valid FAT filesystem
[  517.228242][T20827] loop6: detected capacity change from 0 to 32768
[  517.590521][T20860] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  517.763746][T20871] loop6: detected capacity change from 0 to 128
[  517.776479][T20871] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256
[  517.795877][T20871] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  518.205498][T20893] CIFS: Attempting to mount //::1/share
[  519.051109][T20893] CIFS: VFS: cifs_mount failed w/return code = -112
[  520.093601][T20965] scsi_nl_rcv_msg: discarding partial skb
[  521.454760][T21019] openvswitch: netlink: IPv4 tun info is not correct
[  521.587097][T21011] loop6: detected capacity change from 0 to 32768
[  521.631337][T21011] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  521.678426][T21011] XFS (loop6): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50.
[  521.704385][T21011] XFS (loop6): Ending clean mount
[  521.800883][T19083] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  522.579589][    C0] ip6_tunnel: syztnl0 xmit: Local address not yet configured!
[  523.412286][T21090] loop6: detected capacity change from 0 to 512
[  523.426360][T21090] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.6576: bg 0: block 5: invalid block bitmap
[  523.441818][T21090] loop6: lost filesystem error report for type 5 error -117
[  523.449269][    C0] EXT4-fs (loop6): error count since last fsck: 1
[  523.453926][    C0] EXT4-fs (loop6): initial error at time 1786755606: ext4_validate_block_bitmap:432
[  523.457346][    C0] EXT4-fs (loop6): last error at time 1786755606: ext4_validate_block_bitmap:432
[  523.472844][T21090] EXT4-fs (loop6): Remounting filesystem read-only
[  523.476192][T21090] EXT4-fs (loop6): 2 truncates cleaned up
[  523.478828][T21090] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  523.516384][T19083] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  524.250551][T21100] fuse: Unknown parameter 'user_i00000000000000000000'
[  524.756740][T21122] Cannot find add_set index 4 as target
[  525.001811][T21136] fuse: fd is not a fuse device
[  525.214428][T21142] macvtap0: entered allmulticast mode
[  525.225539][T21142] dummy0: entered allmulticast mode
[  525.235538][T21142] dummy0: entered promiscuous mode
[  528.016643][T21179] netlink: 6032 bytes leftover after parsing attributes in process `syz.3.6615'.
[  530.316542][T21288] x_tables: ip6_tables: icmp6 match: only valid for protocol 58
[  530.619915][T21310] ovs-system: entered promiscuous mode
[  530.632982][T21310] openvswitch: ovs-system: Dropping previously announced user features
[  531.068971][T21334] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6683'.
[  532.478314][   T34] kauditd_printk_skb: 1 callbacks suppressed
[  532.478331][   T34] audit: type=1326 audit(1786755615.470:295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21364 comm="syz.0.6696" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc01879e0d9 code=0x0
[  532.724052][T21380] netlink: 'syz.6.6703': attribute type 2 has an invalid length.
[  532.730749][T21380] netlink: 248 bytes leftover after parsing attributes in process `syz.6.6703'.
[  532.973669][T21391] loop6: detected capacity change from 0 to 4096
[  533.028580][T21395] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  533.735550][T21419] X.509: signatureAlgorithm (106) differs from tbsCertificate.signature (7)
[  534.335719][T21442] loop6: detected capacity change from 0 to 64
[  535.337375][T21442] Trying to free block not in datazone
[  537.050297][T21442] Trying to free block not in datazone
[  538.579678][    C0] ip6_tunnel: syztnl0 xmit: Local address not yet configured!
[  539.558018][ T3156] as10x_usb: unable to locate firmware file: as102_data1_st.hex
[  541.112559][ T3156] Registered device nBox DVB-T Dongle
[  541.574117][ T3156] usb 7-1: USB disconnect, device number 2
[  547.539496][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  548.495672][ T3156] Unregistered device nBox DVB-T Dongle
[  549.021333][ T3156] as10x_usb: device has been disconnected
[  551.923747][T21476] loop6: detected capacity change from 0 to 1024
[  563.224799][ T1374] ieee802154 phy0 wpan0: encryption failed: -22
[  563.227277][ T1374] ieee802154 phy1 wpan1: encryption failed: -22
[  568.963783][T21499] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6751'.
[  569.939473][    C0] ip6_tunnel: syztnl0 xmit: Local address not yet configured!
[  575.509439][    C0] sched: DL replenish lagged too much
[  586.995218][T21539] loop6: detected capacity change from 0 to 2048
[  590.743289][   T54] Bluetooth: hci1: command 0x0406 tx timeout
[  624.361438][ T1374] ieee802154 phy0 wpan0: encryption failed: -22
[  624.363999][ T1374] ieee802154 phy1 wpan1: encryption failed: -22
[  625.157689][T21619] 8021q: VLANs not supported on gre0
[  634.167968][T21641] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6793'.
[  634.579592][    C0] ip6_tunnel: syztnl0 xmit: Local address not yet configured!
[  650.825471][T21672] bpf: Bad value for 'gid'
[  650.864092][T21676] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6802'.
[  653.870136][T21679] bond6: Unable to set down delay as MII monitoring is disabled
[  655.732143][T21679] bond6 (unregistering): Released all slaves
[  685.787222][ T1374] ieee802154 phy0 wpan0: encryption failed: -22
[  685.791159][ T1374] ieee802154 phy1 wpan1: encryption failed: -22
[  721.904993][T21809] loop6: detected capacity change from 0 to 8
[  726.213850][   T34] audit: type=1800 audit(1786755808.210:296): pid=21809 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.6841" name="file1" dev="loop6" ino=5 res=0 errno=0
[  744.005921][T21847] netlink: 8 bytes leftover after parsing attributes in process `syz.0.6852'.
[  747.335291][ T1374] ieee802154 phy0 wpan0: encryption failed: -22
[  747.337830][ T1374] ieee802154 phy1 wpan1: encryption failed: -22
[  747.770700][T21851] loop6: detected capacity change from 0 to 128
[  751.510750][T21851] hpfs: Bad magic ... probably not HPFS
[  757.459510][    C0] ip6_tunnel: syztnl0 xmit: Local address not yet configured!
[  757.617797][T21867] netlink: 'syz.3.6859': attribute type 2 has an invalid length.
[  777.767727][T21907] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6873'.
[  800.367195][T21940] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6885'.
[  807.562764][T21958] ubi31: attaching mtd0
[  807.564852][T21958] ubi31 error: ubi_attach_mtd_dev: bad VID header (12293) or data offsets (12357)
[  808.674121][ T1374] ieee802154 phy0 wpan0: encryption failed: -22
[  808.676629][ T1374] ieee802154 phy1 wpan1: encryption failed: -22
[  813.779431][    C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  869.734269][T22077] loop6: detected capacity change from 0 to 32768
[  869.892901][T22077] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.6928 (22077)
[  870.105728][ T1374] ieee802154 phy0 wpan0: encryption failed: -22
[  870.108199][ T1374] ieee802154 phy1 wpan1: encryption failed: -22
[  870.229643][T22077] BTRFS info (device loop6): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  870.233391][T22077] BTRFS info (device loop6): using crc32c checksum algorithm
[  870.877997][ T5843] BTRFS warning (device loop6): checksum verify failed on logical 5332992 mirror 1 wanted 0x7cc576a9 found 0x894391d7 level 0
[  873.398311][T22077] BTRFS warning (device loop6): couldn't read tree root
[  873.402609][T22077] BTRFS warning (device loop6): unable to release extent buffer 5332992 owner 1 gen 8 refs 3 flags 0xc
[  874.218493][T22077] BTRFS error (device loop6): open_ctree failed: -5
[  919.338429][T22174] loop6: detected capacity change from 0 to 512
[  922.092572][T22174] EXT4-fs warning (device loop6): ext4_multi_mount_protect:393: Unable to create kmmpd thread for loop6.
[  930.484696][T22190] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6960'.
[  931.546815][ T1374] ieee802154 phy0 wpan0: encryption failed: -22
[  931.550755][ T1374] ieee802154 phy1 wpan1: encryption failed: -22
[  940.900017][   T10] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  942.498474][   T10] usb 7-1: device descriptor read/all, error -71
[  959.960845][T22243] batman_adv: batadv0: Adding interface: dummy0
[  960.389956][T22243] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  961.383449][T22246] Set syz1 is full, maxelem 2 reached
[  962.797774][T22243] batman_adv: batadv0: Interface activated: dummy0
[  965.219316][T22244] batadv0: mtu less than device minimum
[  965.221578][T22244] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  965.227067][T22244] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  965.231479][T22244] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  965.235098][T22244] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  965.238657][T22244] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  965.242690][T22244] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  965.246184][T22244] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  965.249856][T22244] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[  981.249335][   T34] audit: type=1800 audit(1786756064.070:297): pid=22269 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.6984" name="nullb0" dev="tmpfs" ino=6802 res=0 errno=0
[  987.807115][T22283] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  988.130197][T22283] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  988.140013][T22283] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  988.238935][T22283] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  988.257426][T22283] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  990.659834][T22283] Bluetooth: hci3: command tx timeout
[  992.739735][T22283] Bluetooth: hci3: command tx timeout
[  993.004800][ T1374] ieee802154 phy0 wpan0: encryption failed: -22
[  993.007300][ T1374] ieee802154 phy1 wpan1: encryption failed: -22
[  994.821160][T22283] Bluetooth: hci3: command tx timeout
[  996.899869][T22283] Bluetooth: hci3: command tx timeout
[  997.186316][T22303] MTD: Couldn't look up './dev/mtdblock0': -2
[  998.099610][    C0] ip6_tunnel: syztnl0 xmit: Local address not yet configured!
[ 1024.485380][T22342] fuse: Bad value for 'fd'
[ 1037.156919][ T5652] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1050.998105][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1051.374279][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1051.380052][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1051.397032][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1051.403559][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1053.619631][   T54] Bluetooth: hci1: command tx timeout
[ 1054.439040][ T1374] ieee802154 phy0 wpan0: encryption failed: -22
[ 1054.441438][ T1374] ieee802154 phy1 wpan1: encryption failed: -22
[ 1055.749418][   T54] Bluetooth: hci1: command tx timeout
[ 1058.091259][   T54] Bluetooth: hci1: command tx timeout
[ 1059.514655][T22283] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1059.531556][T22283] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1059.535918][T22283] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1059.544490][T22283] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1059.570571][T22283] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1060.460413][   T54] Bluetooth: hci1: command tx timeout
[ 1061.859678][   T54] Bluetooth: hci4: command tx timeout
[ 1063.939568][   T54] Bluetooth: hci4: command tx timeout
[ 1066.030101][   T54] Bluetooth: hci4: command tx timeout
[ 1068.127945][   T54] Bluetooth: hci4: command tx timeout
[ 1076.827167][ T5652] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1092.275981][ T5652] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1109.062971][ T5652] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1114.484155][T22283] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1114.887595][T22283] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1114.915274][T22283] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1114.988600][T22283] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1114.996784][T22283] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1116.135490][ T1374] ieee802154 phy0 wpan0: encryption failed: -22
[ 1116.138648][ T1374] ieee802154 phy1 wpan1: encryption failed: -22
[ 1117.259107][T22283] Bluetooth: hci3: command tx timeout
[ 1119.376451][T22283] Bluetooth: hci3: command tx timeout
[ 1121.379915][T22283] Bluetooth: hci3: command tx timeout
[ 1122.950685][   T54] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1122.965371][   T54] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1122.987186][   T54] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1123.463681][   T54] Bluetooth: hci3: command tx timeout
[ 1123.546886][   T54] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1123.557180][   T54] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1125.097775][T22443] netlink: 228 bytes leftover after parsing attributes in process `syz.3.7020'.
[ 1126.182535][T22283] Bluetooth: hci5: command tx timeout
[ 1128.271373][T22283] Bluetooth: hci5: command tx timeout
[ 1130.351230][T22283] Bluetooth: hci5: command tx timeout
[ 1132.450170][T22283] Bluetooth: hci5: command tx timeout
[ 1147.949282][   T34] audit: type=1326 audit(1786756230.850:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22475 comm="syz.3.7024" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe56099e0d9 code=0x0
[ 1152.661933][ T5652] bridge_slave_1: left allmulticast mode
[ 1152.665386][ T5652] bridge_slave_1: left promiscuous mode
[ 1152.669118][ T5652] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1153.533182][ T5652] bridge_slave_0: left allmulticast mode
[ 1154.470425][ T5652] bridge_slave_0: left promiscuous mode
[ 1154.475148][ T5652] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1173.494711][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1173.507937][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1173.512890][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1173.886046][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1173.937589][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1176.019823][T22283] Bluetooth: hci1: command tx timeout
[ 1177.333103][ T1374] ieee802154 phy0 wpan0: encryption failed: -22
[ 1177.335653][ T1374] ieee802154 phy1 wpan1: encryption failed: -22
[ 1178.161148][T22283] Bluetooth: hci1: command tx timeout
[ 1180.807017][   T54] Bluetooth: hci1: command tx timeout
[ 1182.819796][T22283] Bluetooth: hci1: command tx timeout
[ 1182.926193][T22283] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1182.943426][T22283] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1182.950507][T22283] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1182.958089][T22283] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1183.416755][T22283] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1185.556187][T22283] Bluetooth: hci2: command tx timeout
[ 1187.629538][T22283] Bluetooth: hci2: command tx timeout
[ 1189.699567][T22283] Bluetooth: hci2: command tx timeout
[ 1191.980229][T22283] Bluetooth: hci2: command tx timeout
[ 1214.156153][   T54] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1214.213188][   T54] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1214.225098][   T54] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1214.402509][   T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1214.407553][   T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1216.619803][   T54] Bluetooth: hci4: command tx timeout
[ 1217.533209][ T5652] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1218.660005][   T54] Bluetooth: hci4: command tx timeout
[ 1220.355566][ T5652] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1220.740272][   T54] Bluetooth: hci4: command tx timeout
[ 1222.531031][ T5652] bond0 (unregistering): Released all slaves
[ 1222.820181][   T54] Bluetooth: hci4: command tx timeout
[ 1237.080136][ T5652] IPVS: stopping backup sync thread 19641 ...
[ 1238.774990][ T1374] ieee802154 phy0 wpan0: encryption failed: -22
[ 1238.777589][ T1374] ieee802154 phy1 wpan1: encryption failed: -22
[ 1239.558331][   T54] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[ 1240.351018][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1240.919284][   T54] Bluetooth: hci3: command 0x0406 tx timeout
[ 1241.824691][T22534] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[ 1244.315079][T22536] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 1244.520276][T22536] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 1244.525199][T22536] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 1244.627855][T22536] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 1244.641395][T22536] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 1247.222161][T22536] Bluetooth: hci6: command tx timeout
[ 1250.079575][T22536] Bluetooth: hci6: command tx timeout
[ 1252.088955][ T5345] 8021q: adding VLAN 0 to HW filter on device eth13
[ 1252.140084][T22536] Bluetooth: hci6: command tx timeout
[ 1254.194116][T22536] Bluetooth: hci6: command tx timeout
[ 1285.023431][T22283] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1285.059125][T22283] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1285.108738][T22283] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1285.117186][T22283] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1285.125356][T22283] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1285.977031][T22536] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[ 1286.030243][T22536] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[ 1286.070500][T22536] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[ 1286.121600][T22536] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[ 1286.127222][T22536] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[ 1287.550784][T22536] Bluetooth: hci0: command tx timeout
[ 1288.470285][T22536] Bluetooth: hci1: command tx timeout
[ 1289.620438][T22536] Bluetooth: hci0: command tx timeout
[ 1290.545598][T22536] Bluetooth: hci1: command tx timeout
[ 1291.750161][T22536] Bluetooth: hci0: command tx timeout
[ 1292.579775][T22536] Bluetooth: hci1: command tx timeout
[ 1293.779789][T22536] Bluetooth: hci0: command tx timeout
[ 1294.659605][T22536] Bluetooth: hci1: command tx timeout
[ 1300.185782][ T1374] ieee802154 phy0 wpan0: encryption failed: -22
[ 1300.188206][ T1374] ieee802154 phy1 wpan1: encryption failed: -22
[ 1301.223353][ T5345] 8021q: adding VLAN 0 to HW filter on device eth14
[ 1304.141384][T22283] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1304.242894][T22283] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1304.254111][T22283] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1304.501069][T22283] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1304.506321][T22283] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1306.239876][ T5652] hsr_slave_0: left promiscuous mode
[ 1307.511111][T22536] Bluetooth: hci2: command tx timeout
[ 1309.340727][ T5652] hsr_slave_1: left promiscuous mode
[ 1309.622587][T22536] Bluetooth: hci2: command tx timeout
[ 1309.849150][ T5652] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1310.166564][ T5652] net_ratelimit: 11 callbacks suppressed
[ 1310.166577][ T5652] batadv0: mtu less than device minimum
[ 1311.349812][ T5652] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[ 1311.353978][ T5652] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[ 1311.357582][ T5652] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[ 1311.364254][ T5652] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[ 1311.368001][ T5652] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[ 1311.371673][ T5652] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[ 1311.375255][ T5652] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[ 1311.378850][ T5652] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[ 1311.382536][ T5652] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[ 1313.231675][T22536] Bluetooth: hci2: command tx timeout
[ 1315.604571][T22536] Bluetooth: hci2: command tx timeout
[ 1318.216266][ T5652] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1318.405423][ T5652] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1318.407838][ T5652] net_ratelimit: 10 callbacks suppressed
[ 1318.407849][ T5652] batadv0: mtu less than device minimum
[ 1319.458959][ T5652] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[ 1319.462705][ T5652] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[ 1319.466273][ T5652] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[ 1319.469894][ T5652] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[ 1319.473401][ T5652] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[ 1319.477084][ T5652] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[ 1319.483749][ T5652] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[ 1319.487328][ T5652] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[ 1319.490865][ T5652] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320)
[ 1326.413753][ T5652] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1328.971067][ T5652] batman_adv: batadv0: Interface deactivated: dummy0
[ 1328.973577][ T5652] batman_adv: batadv0: Removing interface: dummy0
[ 1331.415151][ T5652] veth1_macvtap: left promiscuous mode
[ 1332.068909][ T5652] veth0_macvtap: left promiscuous mode
[ 1332.497378][ T5652] veth1_vlan: left promiscuous mode
[ 1332.992941][ T5652] veth0_vlan: left promiscuous mode
[ 1345.252281][T22283] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[ 1345.262248][T22283] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[ 1345.270764][T22283] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[ 1345.277533][T22283] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[ 1345.282967][T22283] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[ 1347.969774][T22283] Bluetooth: hci3: command tx timeout
[ 1348.550632][T22536] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[ 1348.588232][T22536] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[ 1348.690747][T22536] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[ 1348.803484][T22536] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[ 1349.090905][T22536] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[ 1350.160208][T22536] Bluetooth: hci3: command tx timeout
[ 1351.570918][T22536] Bluetooth: hci4: command tx timeout
[ 1352.190887][T22536] Bluetooth: hci3: command tx timeout
[ 1353.619931][T22536] Bluetooth: hci4: command tx timeout
[ 1354.259670][T22536] Bluetooth: hci3: command tx timeout
[ 1355.699842][T22536] Bluetooth: hci4: command tx timeout
[ 1357.779820][T22536] Bluetooth: hci4: command tx timeout
[ 1361.625902][ T1374] ieee802154 phy0 wpan0: encryption failed: -22
[ 1361.628347][ T1374] ieee802154 phy1 wpan1: encryption failed: -22
[ 1365.896425][T22283] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1
[ 1366.403247][T22283] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9
[ 1366.410007][T22283] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9
[ 1366.418927][T22283] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4
[ 1366.433770][T22283] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2
[ 1369.060428][T22283] Bluetooth: hci5: command tx timeout
[ 1371.149545][T22283] Bluetooth: hci5: command tx timeout
[ 1373.219672][T22283] Bluetooth: hci5: command tx timeout
[ 1375.309730][T22283] Bluetooth: hci5: command tx timeout
[ 1407.186866][T22536] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[ 1407.390425][T22536] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[ 1407.395287][T22536] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[ 1407.788826][T21548] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[ 1407.793468][T21548] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[ 1409.048316][T22283] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1
[ 1409.092397][T22283] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9
[ 1409.098053][T22283] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9
[ 1409.106648][T22283] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4
[ 1409.270225][T22283] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2
[ 1409.790162][T21548] Bluetooth: hci0: command 0x0406 tx timeout
[ 1409.875854][T21548] Bluetooth: hci1: command 0x0406 tx timeout
[ 1409.973786][T21548] Bluetooth: hci6: command tx timeout
[ 1411.460055][T21548] Bluetooth: hci7: command tx timeout
[ 1412.028755][T21548] Bluetooth: hci6: command tx timeout
[ 1413.561078][T21548] Bluetooth: hci7: command tx timeout
[ 1414.099704][   T54] Bluetooth: hci6: command tx timeout
[ 1415.699846][   T54] Bluetooth: hci7: command tx timeout
[ 1416.190219][   T54] Bluetooth: hci6: command tx timeout
[ 1417.779804][T22536] Bluetooth: hci7: command tx timeout
[ 1423.122141][ T1374] ieee802154 phy0 wpan0: encryption failed: -22
[ 1423.124704][ T1374] ieee802154 phy1 wpan1: encryption failed: -22
[ 1429.652539][ T5652] team0 (unregistering): Port device team_slave_1 removed
[ 1430.265286][T22536] Bluetooth: hci2: command 0x0406 tx timeout
[ 1430.645368][T21548] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1
[ 1430.657743][T21548] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9
[ 1430.662209][T21548] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9
[ 1430.669183][T21548] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4
[ 1430.823191][T21548] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2
[ 1433.273867][ T5652] team0 (unregistering): Port device team_slave_0 removed
[ 1433.625635][   T54] Bluetooth: hci8: command tx timeout
[ 1435.709533][   T54] Bluetooth: hci8: command tx timeout
[ 1437.779817][   T54] Bluetooth: hci8: command tx timeout
[ 1439.859649][   T54] Bluetooth: hci8: command tx timeout
[ 1462.105170][   T35] INFO: task kworker/0:1:10 blocked for more than 143 seconds.
[ 1462.107522][   T35]       Tainted: G             L      syzkaller #0
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[ 1463.192307][   T35] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[ 1463.194976][   T35] task:kworker/0:1     state:D stack:22336 pid:10    tgid:10    ppid:2      task_flags:0x4208060 flags:0x00080000
[ 1463.198633][   T35] Workqueue: events netdev_work_proc
[ 1465.061227][   T35] Call Trace:
[ 1465.062342][   T35]  <TASK>
[ 1465.063296][   T35]  __schedule+0x17d9/0x56c0
[ 1465.064837][   T35]  ? do_raw_spin_unlock+0x4d/0x210
[ 1465.066452][   T35]  ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 1465.068225][   T35]  ? __pfx___schedule+0x10/0x10
[ 1467.696825][   T35]  ? schedule+0x90/0x2b0
[ 1467.698199][   T35]  schedule+0x164/0x2b0
[ 1467.957391][T21548] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1
[ 1467.993012][T21548] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9
[ 1468.000406][   T35]  schedule_preempt_disabled+0x13/0x30
[ 1468.003225][   T35]  __mutex_lock+0x7bf/0x1550
[ 1468.005820][T21548] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9
[ 1468.640951][T21548] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4
[ 1468.650985][T21548] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2
[ 1469.254578][   T35]  ? __mutex_lock+0x5d4/0x1550
[ 1469.256705][   T35]  ? netdev_work_proc+0x6f/0x770
[ 1469.258360][   T35]  ? __pfx___mutex_lock+0x10/0x10
[ 1471.153867][   T35]  ? do_raw_spin_lock+0x12b/0x2f0
[ 1471.155570][   T35]  ? __pfx_do_raw_spin_lock+0x10/0x10
[ 1471.157262][   T35]  ? process_scheduled_works+0xa20/0x14e0
[ 1471.159068][   T35]  netdev_work_proc+0x6f/0x770
[ 1471.477206][T22536] Bluetooth: hci9: command tx timeout
[ 1471.485218][T22536] Bluetooth: hci3: command 0x0406 tx timeout
