last executing test programs:

27.831023677s ago: executing program 4:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x48)
close(r0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x8, 0x6, 0x1000, 0x1}, 0x48)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r1, 0xffffffffffffffe9, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r2=>0x0}}, 0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto, @typedef={0x2, 0x0, 0x0, 0x8, 0x2}, @volatile={0x0, 0x0, 0x0, 0x9, 0x3}]}, {0x0, [0x0, 0x5f, 0x0, 0x61]}}, 0x0, 0x52}, 0x20)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
write$cgroup_type(r3, &(0x7f0000000180), 0x40010)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x800, 0x7, 0x8, 0x410, r0, 0x1, '\x00', r2, r3, 0x5, 0x3, 0x3, 0xe}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='ext4_allocate_inode\x00', r5}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x17, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x2}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffff80, 0x10, &(0x7f0000000000), 0x76}, 0x48)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.dequeue\x00', 0x26e1, 0x0)

27.58839803s ago: executing program 4:
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x2018886, &(0x7f0000000500)={[{@shortname_mixed}, {@utf8no}, {@rodir}, {@shortname_winnt}, {@iocharset={'iocharset', 0x3d, 'cp850'}}, {@uni_xlate}, {@iocharset={'iocharset', 0x3d, 'cp866'}}, {@uni_xlate}, {@rodir}, {@uni_xlate}, {@shortname_win95}, {@uni_xlate}]}, 0x1, 0x342, &(0x7f00000006c0)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000)

27.047695054s ago: executing program 4:
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="a00000001900010000000000000000001c140000fe00000100000000840012"], 0xa0}}, 0x0)

26.830814538s ago: executing program 4:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5})
ioctl$TUNSETPERSIST(r0, 0x400454c9, 0x1)
ioctl$TUNSETPERSIST(r0, 0x400454cd, 0x30c)

26.538057033s ago: executing program 4:
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x0, &(0x7f0000001080), 0x1, 0x4fc, &(0x7f0000000540)="$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")
quotactl$Q_GETFMT(0xffffffff80000400, &(0x7f0000000240)=@loop={'/dev/loop', 0x0}, 0xee00, 0x0)

26.322624547s ago: executing program 4:
r0 = socket(0x1d, 0x2, 0x6)
ioctl$sock_SIOCETHTOOL(r0, 0x8922, &(0x7f0000000040)={'erspan0\x00', &(0x7f00000000c0)=@ethtool_rxnfc={0x0, 0x0, 0x0, {0x0, @hdata="ad65c8435d8a74855146175c4823057931ddd8de52215a0cba4b92c305c136df3a767ec61275c88bbeee48cc3ad39e98881843ed", {}, @esp_ip4_spec={@multicast1, @dev}, {0x0, @local}}}})

14.988722395s ago: executing program 1:
move_pages(0x0, 0x8e00, &(0x7f0000001140)=[&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000f9d000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000)=[0x0], 0x0)
r0 = socket(0x10, 0x2, 0x0)
sendmmsg$alg(r0, &(0x7f0000000200), 0x4924924924926d3, 0x0)
connect$pptp(r0, 0x0, 0x0)
shmget$private(0x0, 0x1000, 0x8, &(0x7f0000ffe000/0x1000)=nil)
r1 = io_uring_setup(0x34aa, &(0x7f00000000c0))
r2 = io_uring_setup(0x34a6, &(0x7f00000000c0))
shmget$private(0x0, 0x1000, 0x8, &(0x7f0000fff000/0x1000)=nil)
r3 = io_uring_setup(0x34a6, 0x0)
io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0)
io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f00000003c0)={0xc52, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)=""/5, 0x5}, {&(0x7f0000000140)=""/237, 0xed}, {&(0x7f0000000080)=""/5, 0x5}, {&(0x7f0000000240)=""/87, 0x57}, {&(0x7f00000002c0)=""/35, 0x23}], &(0x7f0000000380)=[0x3, 0x5], 0x5}, 0x20)
r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r2, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r1, 0x17, 0x7f75df5fffff, r4)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r4)
mmap$IORING_OFF_SQES(&(0x7f0000f9c000/0x4000)=nil, 0x4000, 0x0, 0x50, r1, 0x10000000)
syz_io_uring_setup(0x24f9, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=<r5=>0x0, &(0x7f0000000000)=<r6=>0x0)
socket$inet(0x2, 0x80001, 0x0)
syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10001})
mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x40010, r3, 0x10000000)
openat(0xffffffffffffff9c, 0x0, 0x2720c0, 0x37)
r7 = io_uring_setup(0x0, &(0x7f00000000c0))
io_uring_setup(0x0, 0x0)
r8 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r7, 0x17, 0x7f75df5fffff, r8)

14.017851649s ago: executing program 1:
r0 = io_uring_setup(0x5751, &(0x7f0000000180))
io_uring_register$IORING_REGISTER_EVENTFD(r0, 0x2, &(0x7f0000000200), 0x1)
io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x6, &(0x7f0000000300)=[{0x0}, {0x0}], 0x2)

13.939775423s ago: executing program 1:
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="8fcacb7907051175f37538e486dd6300800701082c00db5b686158bbcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x1, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{r1}, 0x0, 0x0}, 0x20)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd6372ce22fdb932"], 0xfdef)

8.449980545s ago: executing program 0:
syz_mount_image$xfs(&(0x7f0000000300), &(0x7f0000009840)='./file1\x00', 0x0, &(0x7f0000000000), 0x1, 0x980a, &(0x7f00000130c0)="$eJzs3QXYZHXBsPFnl6UbCwNZGotuDEJBBAEJKSWkJQWUMAARBEQBSUERUKREkO7u7u7u7vyuZXcV1xte/b73+nhf7/u+rueZmTNnznPm/ztznmf2zM4sv9DSCwwMTDQwvJGnf+/glz995OYvL7DD0dcf9tLChy565IjJYww/GTJ0xOkUI06nHBgYGDRiOYOGTxs85PgTBg+MNTAw+J3LHW/scQeNNzCwxoiL8404nXP4yfjXjJzvrVHiFR22GoN2Hv41/IcODAyMPezMMwMzLvfO5YxYr5n+6Y5KW37+hRf6u9Xf3IaN35AR59/5Ncbwr/EvGxgY/9IB3j4Gvb/36O2fP9GeF6yw4vu8Hv8rWn7+hRcZxX/YY3G0EdPmHPYYH/UxaGzU7XzonHeM3AcNwh3n/5KWn3+hxQbefT8/sPKbB2z61tv7zcHjDAwMHndgYPB4AwODxx8YGDzBwMDgCd9vl/p/633d+Kqqqup9af4FZl1g2PO9Uf4eGGvk37X0d+FKbyxxx8DAwOjD5xk8x8jnglVVVVVVVVX1P7P5F5h1QXj+P9F7Pf8/7tRXp+/5f1VVVVVVVdX/nhaZf4FZhz2PH+X5/6Tv9fx/mwdeXH/Ea//nHH6rN9/fO1FVVVVVVVVV79lSX3/7+f+4ozz/H/pez/8fnnenB0fMN/LfDd54xyIHveP1BK+9Y/po75j/1XdMH/KO6e+cf4yBgcFDRkx//e+TB48z7Lp/nn/wRMPWe8T0V94xfaa////mIVO/Y/rM75g+7TumzzJiXYdNn+4d02d/x/zT/ytjW1VVVVVVVVVVVVVVVVVV9f+rN5849cy/v+f7Jwfe8f7tf3sf9xGvCxh0zNlXX/2+rej/jAb98+shtnm/1+n/tWHOYx0xdGBgw2Xf71Wp96H3+/Ma6v0tf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vIX9y7H///2/v+THbrGyP8zP+fBu04+wTtvu+47zo/1/3Wt37f+U4//D6w7aGBghO9Ew1wXn3+pZaYfGBiYYPJdD55t4G/XzTXsunknGW3EGyQMfxuEaYbwgrcZ8ano24yYdcQyjnl7+Yu8ddBog0ZZiXc08YmHHLLO8i/NNurptO9+PwaPPPOhS7ZYcOR7WQweZaZ3205HLn/kfRnVecS6Tz9s3WfcbIONZ9x0y60+t+4Gq6295tprbjj3nHPONfucc8w9y4xrrbv+mjMN//5uYzb07e9T/StjNumoY/bE/O8cs1Hv27uN2dD3HrO3lzjmHqusN3LMRl21/2rMpnrvMRu67ogfNGTo6AOrvj02gwYGhkw9+sAWwy7MPObAwJBpRsw76bB5Pz/J4IGB3f5+R4edG/Nv2+CgbYbNs/xCSy/w94/d/+eP33+Xz7MfY/jJkBFDMmSKEadTDv8xEw38fVMcPOT4EwYPu+//MMzjjT3uoPEGBtYYcXG+Eadzj7j2ypHzvcvnrI+yom+/zcrOw7/+5jH2sDNHLTnhTe9czrsQ/Hf0f/X7/5+85hr0t4EaNOJrxDzDveZfeJG//6y3h2G+ke8JM+x3yzCT/4ePsf8v+6f1HTrW229y+27r+x7vizv8/sP2Ne1j5w3973pfXN53LPb296H/yr5j4L33HaP9/ezfp655xWSj7jsWffdV/IfHxcgxGnOUmd5t3zH9vvNv/fa+6b33HYutO+KDhv6+7xg8MDBkqpH7jmE7kmlHH9ht2IVZhl2YbvSBw4ZdmPXtC2MPnD3swgyrb7T+GoPeftueEcudadhy55tk0Nt3/uoZ5z9ytD3femvqEesy0yg71hHbx9B3/n6cf5LhwzbytrTcuzcbft20I5Y787+x3JG3peXOtcnw66YbsdxZRlnuaO+x3JG3Hfl4GDbr24+H6Qf9wws/4fG70CiP30Ejd+vvuMnIrzGGf41/2cjPhoLHy7+136HH70Tvsb7v8blWuL0Nm7bd4lec+t/1uVa0vmO99/q+2+dwv+v6rjf2Fkv8N6zvoHes7z9sZxvPM3xbmX7Edjb7v7H9jrztqPux0d++djjD9P/Kfmy+f9qPbTva4FFW/h29299Aa8D8w89P+relzX34aBOOHPvRR1nuf/U30PTvvR+baN1RbrfQgQODaMwffvyQdcb8L8Z89IF//Ft95JiPvO17jfl0/zzmg/5pzOd67zH/V//unH6q4deP9h5jPnjHTRcfOeZj/JtjPt2/O+bzDYxGY77bfsPH7b32p+825iNv+49jPmTgKwMDA1OPGPNp/5XtfKb/nu18HJh/+PkH/jbpksnO2OUd+5hB/86YT/vvjvnQv23nU7993ZSDB8YYY2CL1TbbbJOZh38feXGW4d95X/T0/cPH+b1+l76b0cjbvtfjYup/xWjof4/Rx4b88/wjn3SMvLzs2UdN/H+7L5r63zMatNAA74tOvmj4uL3X30XvNuYjb0u/B4e+4/ajPq97j/ejxPs0bNo+++51+8hFjrhZ70f5r/cPm+3If+Nbd9SdfP2n1r//u8vfXf7u8neXv7h3Of7/t/f/f3iipR8b8SR59N3nWXv193t93+f+o4//j/D9h+P/q689z+7DngqOuO49j88On+d/5PHZOYefjH/NyPlGPT7IK/rux2en22OGpQb+/xyf/b9q5GP1X3ge3/7fXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3lL+5djv+PfI3y0P3fuH+bEQdCR997r9XfeL/X933uP/r4/wjffzj+/8bqe+09eOBv173n8f/h8ziO/y+x/54nDPwPPv4/8rHa8f/6L8rfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/MW9y/H/+Ua+DmCOVdbaeeTrATac+Uvbv9/r+z73n3r8v8//99b+313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5S9uxPH/gVE+1nHJtgsMjv//7+5d/L+RP2bxXyp/zOK/dP6YxX+Z/DGL/7L5Yxb/b+aPWfyXyx+z+C+fP2bxXyF/zOK/Yv6YxX+l/DGL/7fyxyz+384fs/ivnD9m8V8lf8ziv2r+mMV/tfwxi/938scs/qvnj1n818gfs/ivmT9m8V8rf8ziv3b+mMV/nfwxi/+6+WMW/+/mj1n818sfs/ivnz9m8d8gf8ziv2H+mMV/o/wxi//G+WMW/+/lj1n8N8kfs/hvmj9m8d8sf8zi//38MYv/D/LHLP6b549Z/LfIH7P4b5k/ZvHfKn/M4v/D/DGL/4/yxyz+P84fs/j/JH/M4r91/pjFf5v8MYv/tvljFv+f5o9Z/LfLH7P4/yx/zOK/ff6YxX+H/DGL/8/zxyz+O+aPWfx3yh+z+O+cP2bx/0X+mMV/l/wxi/8v88cs/r/KH7P475o/ZvHfLX/M4r97/pjF/9f5Yxb/PfLHLP575o9Z/PfKH7P4750/ZvHfJ3/M4r9v/pjF/zf5Yxb//fLHLP77549Z/H+bP2bx/13+mMX/gPwxi//v88cs/gfmj1n8D8ofs/gfnD9m8f9D/pjF/4/5Yxb/Q/LHLP5/yh+z+B+aP2bxPyx/zOJ/eP6Yxf+I/DGL/5H5Yxb/P+ePWfyPyh+z+P8lf8zif3T+mMX/mPwxi/9f88cs/sfmj1n8j8sfs/gfnz9m8T8hf8zif2L+mMX/pPwxi//J+WMW/1Pyxyz+p+aPWfxPyx+z+J+eP2bxPyN/zOJ/Zv6Yxf+s/DGL/9n5Yxb/c/LHLP7n5o9Z/M/LH7P4n58/ZvG/IH/M4n9h/pjF/6L8MYv/xfljFv9L8scs/pfmj1n8L8sfs/hfnj9m8b8if8zif2X+mMX/qvwxi//V+WMW/2vyxyz+1+aPWfyvyx+z+F+fP2bxvyF/zOJ/Y/6Yxf+m/DGL/835Yxb/W/LHLP635o9Z/G/LH7P4354/ZvG/I3/M4n9n/pjF/678MYv/3fljFv978scs/vfmj1n878sfs/jfnz9m8X8gf8zi/2D+mMX/ofwxi//D+WMW/0fyxyz+j+aPWfwfyx+z+D+eP2bxfyJ/zOL/ZP6Yxf+p/DGL/9P5Yxb/Z/LHLP7P5o9Z/J/LH7P4P58/ZvF/IX/M4v9i/pjF/6X8MYv/y/ljFv9X8scs/q/mj1n8X8sfs/i/nj9m8X8jf8zi/2b+mMX/rfwxif+ggfwxi/+g/DGL/+D8MYv/aPljFv8h+WMW/9Hzxyz+Y+SPWfzHzB+z+I+VP2bxHzt/zOI/Tv6YxX/c/DGL/3j5Yxb/8fPHLP4T5I9Z/CfMH7P4T5Q/ZvGfOH/M4j9J/pjF/wP5Yxb/D+aPWfw/lD9m8f9w/pjF/yP5Yxb/SfPHLP4fzR+z+H8sf8zi//H8MYv/J/LHLP6T5Y9Z/D+ZP2bxnzx/zOI/NH/M4j9F/pjFf8r8MYv/VPljFv+p88cs/tPkj1n8p80fs/hPlz9m8Z8+f8zi/6n8MYv/p/PHLP6fyR+z+H82f8zi/7n8MYv/DPljFv8Z88cs/jPlj1n8Z84fs/jPkj9m8Z81f8ziP1v+mMV/9vwxi/8c+WMW/znzxyz+c+WPWfznzh+z+M+TP2bxnzd/zOL/+fwxi/8X8scs/l/MH7P4fyl/zOI/X/6YxX/+/DGL/wL5Yxb/BfPHLP5fzh+z+H8lf8ziv1D+mMV/4fwxi/9X88cs/ovkj1n8v5Y/ZvFfNH/M4r9Y/pjF/+v5Yxb/xfPHLP5L5I9Z/JfMH7P4fyN/zOK/VP6YxX/p/DGL/zL5Yxb/ZfPHLP7fzB+z+C+XP2bxXz5/zOK/Qv6YxX/F/DGL/0r5Yxb/b+WPWfy/nT9m8V85f8ziv0r+mMV/1fwxi/9q+WMW/+/kj1n8V88fs/ivkT9m8V8zf8ziv1b+mMV/7fwxi/86+WMW/3Xzxyz+380fs/ivlz9m8V8/f8ziv0H+mMV/w/wxi/9G+WMW/43zxyz+38sfs/hvkj9m8d80f8ziv1n+mMX/+/ljFv8f5I9Z/DfPH7P4b5E/ZvHfMn/M4r9V/pjF/4f5Yxb/H+WPWfx/nD9m8f9J/pjFf+v8MYv/NvljFv9t88cs/j/NH7P4b5c/ZvH/Wf6YxX/7/DGL/w75Yxb/n+ePWfx3zB+z+O+UP2bx3zl/zOL/i/wxi/8u+WMW/1/mj1n8f5U/ZvHfNX/M4r9b/pjFf/f8MYv/r/PHLP575I9Z/PfMH7P475U/ZvHfO3/M4r9P/pjFf9/8MYv/b/LHLP775Y9Z/PfPH7P4/zZ/zOL/u/wxi/8B+WMW/9/nj1n8D8wfs/gflD9m8T84f8zi/4f8MYv/H/PHLP6H5I9Z/P+UP2bxPzR/zOJ/WP6Yxf/w/DGL/xH5Yxb/I/PHLP5/zh+z+B+VP2bx/0v+mMX/6Pwxi/8x+WMW/7/mj1n8j80fs/gflz9m8T8+f8zif0L+mMX/xPwxi/9J+WMW/5Pzxyz+p+SPWfxPzR+z+J+WP2bxPz1/zOJ/Rv6Yxf/M/DGL/1n5Yxb/s/PHLP7n5I9Z/M/NH7P4n5c/ZvE/P3/M4n9B/pjF/8L8MYv/RfljFv+L88cs/pfkj1n8L80fs/hflj9m8b88f8zif0X+mMX/yvwxi/9V+WMW/6vzxyz+1+SPWfyvzR+z+F+XP2bxvz5/zOJ/Q/6Yxf/G/DGL/035Yxb/m/PHLP635I9Z/G/NH7P435Y/ZvG/PX/M4n9H/pjF/878MYv/XfljFv+788cs/vfkj1n8780fs/jflz9m8b8/f8zi/0D+mMX/wfwxi/9D+WMW/4fzxyz+j+SPWfwfzR+z+D+WP2bxfzx/zOL/RP6Yxf/J/DGL/1P5Yxb/p/PHLP7P5I9Z/J/NH7P4P5c/ZvF/Pn/M4v9C/pjF/8X8MYv/S/ljFv+X88cs/q/kj1n8X80fs/i/lj9m8X89f8zi/0b+mMX/zfwxi/9b+WMS/7fP5v/PWfwH5Y9Z/Afnj1n8R8sfs/gPyR+z+I+eP2bxHyN/zOI/Zv6YxX+s/DGL/9j5Yxb/cfLHLP7j5o9Z/MfLH7P4j58/ZvGfIH/M4j9h/pjFf6L8MYv/xPljFv9J8scs/h/IH7P4fzB/zOL/ofwxi/+H88cs/h/JH7P4T5o/ZvH/aP6Yxf9j+WMW/4/nj1n8P5E/ZvGfLH/M4v/J/DGL/+T5Yxb/ofljFv8p8scs/lPmj1n8p8ofs/hPnT9m8Z8mf8ziP23+mMV/uvwxi//0+WMW/0/lj1n8P50/ZvH/TP6Yxf+z+WMW/8/lj1n8Z8gfs/jPmD9m8Z8pf8ziP3P+mMV/lvwxi/+s+WMW/9nyxyz+s+ePWfznyB+z+M+ZP2bxnyt/zOI/d/6YxX+e/DGL/7z5Yxb/z+ePWfy/kD9m8f9i/pjF/0v5Yxb/+fLHLP7z549Z/BfIH7P4L5g/ZvH/cv6Yxf8r+WMW/4Xyxyz+C+ePWfy/mj9m8V8kf8zi/7X8MYv/ovljFv/F8scs/l/PH7P4L54/ZvFfIn/M4r9k/pjF/xv5Yxb/pfLHLP5L549Z/JfJH7P4L5s/ZvH/Zv6YxX+5/DGL//L5Yxb/FfLHLP4r5o9Z/FfKH7P4fyt/zOL/7fwxi//K+WMW/1Xyxyz+q+aPWfxXyx+z+H8nf8ziv3r+mMV/jfwxi/+a+WMW/7Xyxyz+a+ePWfzXyR+z+K+bP2bx/27+mMV/vfwxi//6+WMW/w3yxyz+G+aPWfw3yh+z+G+cP2bx/17+mMV/k/wxi/+m+WMW/83yxyz+388fs/j/IH/M4r95/pjFf4v8MYv/lvljFv+t8scs/j/MH7P4/yh/zOL/4/wxi/9P8scs/lvnj1n8t8kfs/hvmz9m8f9p/pjFf7v8MYv/z/LHLP7b549Z/HfIH7P4/zx/zOK/Y/6YxX+n/DGL/875Yxb/X+SPWfx3yR+z+P8yf8zi/6v8MYv/rvljFv/d8scs/rvnj1n8f50/ZvHfI3/M4r9n/pjFf6/8MYv/3vljFv998scs/vvmj1n8f5M/ZvHfL3/M4r9//pjF/7f5Yxb/3+WPWfwPyB+z+P8+f8zif2D+mMX/oPwxi//B+WMW/z/kj1n8/5g/ZvE/JH/M4v+n/DGL/6H5Yxb/w/LHLP6H549Z/I/IH7P4H5k/ZvH/c/6Yxf+o/DGL/1/yxyz+R+ePWfyPyR+z+P81f8zif2z+mMX/uPwxi//x+WMW/xPyxyz+J+aPWfxPyh+z+J+cP2bxPyV/zOJ/av6Yxf+0/DGL/+n5Yxb/M/LHLP5n5o9Z/M/KH7P4n50/ZvE/J3/M4n9u/pjF/7z8MYv/+fljFv8L8scs/hfmj1n8L8ofs/hfnD9m8b8kf8zif2n+mMX/svwxi//l+WMW/yvyxyz+V+aPWfyvyh+z+F+dP2bxvyZ/zOJ/bf6Yxf+6/DGL//X5Yxb/G/LHLP435o9Z/G/KH7P435w/ZvG/JX/M4n9r/pjF/7b8MYv/7fljFv878scs/nfmj1n878ofs/jfnT9m8b8nf8zif2/+mMX/vvwxi//9+WMW/wfyxyz+D+aPWfwfyh+z+D+cP2bxfyR/zOL/aP6Yxf+x/DGL/+P5Yxb/J/LHLP5P5o9Z/J/KH7P4P50/ZvF/Jn/M4v9s/pjF/7n8MYv/8/ljFv8X8scs/i/mj1n8X8ofs/i/nD9m8X8lf8zi/2r+mMX/tfwxi//r+WMW/zfyxyz+b+aPWfzfyh+T+I82kD9m8R+UP2bxH5w/ZvEfLX/M4j8kf8ziP3r+mMV/jPwxi/+Y+WMW/7Hyxyz+Y+ePWfzHyR+z+I+bP2bxHy9/zOI/fv6YxX+C/DGL/4T5Yxb/ifLHLP4T549Z/CfJH7P4fyB/zOL/wfwxi/+H8scs/h/OH7P4fyR/zOI/af6Yxf+j+WMW/4/lj1n8P54/ZvH/RP6YxX+y/DGL/yfzxyz+k+ePWfyH5o9Z/KfIH7P4T5k/ZvGfKn/M4j91/pjFf5r8MYv/tPljFv/p8scs/tPnj1n8P5U/ZvH/dP6Yxf8z+WMW/8/mj1n8P5c/ZvGfIX/M4j9j/pjFf6b8MYv/zPljFv9Z8scs/rPmj1n8Z8sfs/jPnj9m8Z8jf8ziP2f+mMV/rvwxi//c+WMW/3nyxyz+8+aPWfw/nz9m8f9C/pjF/4v5Yxb/L+WPWfznyx+z+M+fP2bxXyB/zOK/YP6Yxf/L+WMW/6/kj1n8F8ofs/gvnD9m8f9q/pjFf5H8MYv/1/LHLP6L5o9Z/BfLH7P4fz1/zOK/eP6YxX+J/DGL/5L5Yxb/b+SPWfyXyh+z+C+dP2bxXyZ/zOK/bP6Yxf+b+WMW/+Xyxyz+y+ePWfxXyB+z+K+YP2bxXyl/zOL/rfwxi/+388cs/ivnj1n8V8kfs/ivmj9m8V8tf8zi/538MYv/6vljFv818scs/mvmj1n818ofs/ivnT9m8V8nf8ziv27+mMX/u/ljFv/18scs/uvnj1n8N8gfs/hvmD9m8d8of8ziv3H+mMX/e/ljFv9N8scs/pvmj1n8N8sfs/h/P3/M4v+D/DGL/+b5Yxb/LfLHLP5b5o9Z/LfKH7P4/zB/zOL/o/wxi/+P88cs/j/JH7P4b50/ZvHfJn/M4r9t/pjF/6f5Yxb/7fLHLP4/yx+z+G+fP2bx3yF/zOL/8/wxi/+O+WMW/53yxyz+O+ePWfx/kT9m8d8lf8zi/8v8MYv/r/LHLP675o9Z/HfLH7P4754/ZvH/df6YxX+P/DGL/575Yxb/vfLHLP57549Z/PfJH7P475s/ZvH/Tf6YxX+//DGL//75Yxb/3+aPWfx/lz9m8T8gf8zi//v8MYv/gfljFv+D8scs/gfnj1n8/5A/ZvH/Y/6Yxf+Q/DGL/5/yxyz+h+aPWfwPyx+z+B+eP2bxPyJ/zOJ/ZP6Yxf/P+WMW/6Pyxyz+f8kfs/gfnT9m8T8mf8zi/9f8MYv/sfljFv/j8scs/sfnj1n8T8gfs/ifmD9m8T8pf8zif3L+mMX/lPwxi/+p+WMW/9Pyxyz+p+ePWfzPyB+z+J+ZP2bxPyt/zOJ/dv6Yxf+c/DGL/7n5Yxb/8/LHLP7n549Z/C/IH7P4X5g/ZvG/KH/M4n9x/pjF/5L8MYv/pfljFv/L8scs/pfnj1n8r8gfs/hfmT9m8b8qf8zif3X+mMX/mvwxi/+1+WMW/+vyxyz+1+ePWfxvyB+z+N+YP2bxvyl/zOJ/c/6Yxf+W/DGL/635Yxb/2/LHLP63549Z/O/IH7P435k/ZvG/K3/M4n93/pjF/578MYv/vfljFv/78scs/vfnj1n8H8gfs/g/mD9m8X8of8zi/3D+mMX/kfwxi/+j+WMW/8fyxyz+j+ePWfyfyB+z+D+ZP2bxfyp/zOL/dP6Yxf+Z/DGL/7P5Yxb/5/LHLP7P549Z/F/IH7P4v5g/ZvF/KX/M4v9y/pjF/5X8MYv/q/ljFv/X8scs/q/nj1n838gfs/i/mT9m8X8rf0ziP2Qgf8ziPyh/zOI/OH/M4j9a/pjFf0j+mMV/9Pwxi/8Y+WMW/zHzxyz+Y+WPWfzHzh+z+I+TP2bxHzd/zOI/Xv6YxX/8/DGL/wT5Yxb/CfPHLP4T5Y9Z/CfOH7P4T5I/ZvH/QP6Yxf+D+WMW/w/lj1n8P5w/ZvH/SP6YxX/S/DGL/0fzxyz+H8sfs/h/PH/M4v+J/DGL/2T5Yxb/T+aPWfwnzx+z+A/NH7P4T5E/ZvGfMn/M4j9V/pjFf+r8MYv/NPljFv9p88cs/tPlj1n8p88fs/h/Kn/M4v/p/DGL/2fyxyz+n80fs/h/Ln/M4j9D/pjFf8b8MYv/TPljFv+Z88cs/rPkj1n8Z80fs/jPlj9m8Z89f8ziP0f+mMV/zvwxi/9c+WMW/7nzxyz+8+SPWfznzR+z+H8+f8zi/4X8MYv/F/PHLP5fyh+z+M+XP2bxnz9/zOK/QP6YxX/B/DGL/5fzxyz+X8kfs/gvlD9m8V84f8zi/9X8MYv/IvljFv+v5Y9Z/BfNH7P4L5Y/ZvH/ev6YxX/x/DGL/xL5Yxb/JfPHLP7fyB+z+C+VP2bxXzp/zOK/TP6YxX/Z/DGL/zfzxyz+y+WPWfyXzx+z+K+QP2bxXzF/zOK/Uv6Yxf9b+WMW/2/nj1n8V84fs/ivkj9m8V81f8ziv1r+mMX/O/ljFv/V88cs/mvkj1n818wfs/ivlT9m8V87f8ziv07+mMV/3fwxi/9388cs/uvlj1n8188fs/hvkD9m8d8wf8ziv1H+mMV/4/wxi//38scs/pvkj1n8N80fs/hvlj9m8f9+/pjF/wf5Yxb/zfPHLP5b5I9Z/LfMH7P4b5U/ZvH/Yf6Yxf9H+WMW/x/nj1n8f5I/ZvHfOn/M4r9N/pjFf9v8MYv/T/PHLP7b5Y9Z/H+WP2bx3z5/zOK/Q/6Yxf/n+WMW/x3zxyz+O+WPWfx3zh+z+P8if8ziv0v+mMX/l/ljFv9f5Y9Z/HfNH7P475Y/ZvHfPX/M4v/r/DGL/x75Yxb/PfPHLP575Y9Z/PfOH7P475M/ZvHfN3/M4v+b/DGL/375Yxb//fPHLP6/zR+z+P8uf8zif0D+mMX/9/ljFv8D88cs/gflj1n8D84fs/j/IX/M4v/H/DGL/yH5Yxb/P+WPWfwPzR+z+B+WP2bxPzx/zOJ/RP6Yxf/I/DGL/5/zxyz+R+WPWfz/kj9m8T86f8zif0z+mMX/r/ljFv9j88cs/sflj1n8j88fs/ifkD9m8T8xf8zif1L+mMX/5Pwxi/8p+WMW/1Pzxyz+p+WPWfxPzx+z+J+RP2bxPzN/zOJ/Vv6Yxf/s/DGL/zn5Yxb/c/PHLP7n5Y9Z/M/PH7P4X5A/ZvG/MH/M4n9R/pjF/+L8MYv/JfljFv9L88cs/pflj1n8L88fs/hfkT9m8b8yf8zif1X+mMX/6vwxi/81+WMW/2vzxyz+1+WPWfyvzx+z+N+QP2bxvzF/zOJ/U/6Yxf/m/DGL/y35Yxb/W/PHLP635Y9Z/G/PH7P435E/ZvG/M3/M4n9X/pjF/+78MYv/PfljFv9788cs/vflj1n8788fs/g/kD9m8X8wf8zi/1D+mMX/4fwxi/8j+WMW/0fzxyz+j+WPWfwfzx+z+D+RP2bxfzJ/zOL/VP6Yxf/p/DGL/zP5Yxb/Z/PHLP7P5Y9Z/J/PH7P4v5A/ZvF/MX/M4v9S/pjF/+X8MYv/K/ljFv9X88cs/q/lj1n8X88fs/i/kT9m8X8zf8zi/1b+mMR/9IH8MYv/oPwxi//g/DGL/2j5Yxb/IfljFv/R88cs/mPkj1n8x8wfs/iPlT9m8R87f8ziP07+mMV/3Pwxi/94+WMW//Hzxyz+E+SPWfwnzB+z+E+UP2bxnzh/zOI/Sf6Yxf8D+WMW/w/mj1n8P5Q/ZvH/cP6Yxf8j+WMW/0nzxyz+H80fs/h/LH/M4v/x/DGL/yfyxyz+k+WPWfw/mT9m8Z88f8ziPzR/zOI/Rf6YxX/K/DGL/1T5Yxb/qfPHLP7T5I9Z/KfNH7P4T5c/ZvGfPn/M4v+p/DGL/6fzxyz+n8kfs/h/Nn/M4v+5/DGL/wz5Yxb/GfPHLP4z5Y9Z/GfOH7P4z5I/ZvGfNX/M4j9b/pjFf/b8MYv/HPljFv8588cs/nPlj1n8584fs/jPkz9m8Z83f8zi//n8MYv/F/LHLP5fzB+z+H8pf8ziP1/+mMV//vwxi/8C+WMW/wXzxyz+X84fs/h/JX/M4r9Q/pjFf+H8MYv/V/PHLP6L5I9Z/L+WP2bxXzR/zOK/WP6Yxf/r+WMW/8Xzxyz+S+SPWfyXzB+z+H8jf8ziv1T+mMV/6fwxi/8y+WMW/2Xzxyz+38wfs/gvlz9m8V8+f8ziv0L+mMV/xfwxi/9K+WMW/2/lj1n8v50/ZvFfOX/M4r9K/pjFf9X8MYv/avljFv/v5I9Z/FfPH7P4r5E/ZvFfM3/M4r9W/pjFf+38MYv/OvljFv9188cs/t/NH7P4r5c/ZvFfP3/M4r9B/pjFf8P8MYv/RvljFv+N88cs/t/LH7P4b5I/ZvHfNH/M4r9Z/pjF//v5Yxb/H+SPWfw3zx+z+G+RP2bx3zJ/zOK/Vf6Yxf+H+WMW/x/lj1n8f5w/ZvH/Sf6YxX/r/DGL/zb5Yxb/bfPHLP4/zR+z+G+XP2bx/1n+mMV/+/wxi/8O+WMW/5/nj1n8d8wfs/jvlD9m8d85f8zi/4v8MYv/LvljFv9f5o9Z/H+VP2bx3zV/zOK/W/6YxX/3/DGL/6/zxyz+e+SPWfz3zB+z+O+VP2bx3zt/zOK/T/6YxX/f/DGL/2/yxyz+++WPWfz3zx+z+P82f8zi/7v8MYv/AfljFv/f549Z/A/MH7P4H5Q/ZvE/OH/M4v+H/DGL/x/zxyz+h+SPWfz/lD9m8T80f8zif1j+mMX/8Pwxi/8R+WMW/yPzxyz+f84fs/gflT9m8f9L/pjF/+j8MYv/MfljFv+/5o9Z/I/NH7P4H5c/ZvE/Pn/M4n9C/pjF/8T8MYv/SfljFv+T88cs/qfkj1n8T80fs/iflj9m8T89f8zif0b+mMX/zPwxi/9Z+WMW/7Pzxyz+5+SPWfzPzR+z+J+XP2bxPz9/zOJ/Qf6Yxf/C/DGL/0X5Yxb/i/PHLP6X5I9Z/C/NH7P4X5Y/ZvG/PH/M4n9F/pjF/8r8MYv/VfljFv+r88cs/tfkj1n8r80fs/hflz9m8b8+f8zif0P+mMX/xvwxi/9N+WMW/5vzxyz+t+SPWfxvzR+z+N+WP2bxvz1/zOJ/R/6Yxf/O/DGL/135Yxb/u/PHLP735I9Z/O/NH7P435c/ZvG/P3/M4v9A/pjF/8H8MYv/Q/ljFv+H88cs/o/kj1n8H80fs/g/lj9m8X88f8zi/0T+mMX/yfwxi/9T+WMW/6fzxyz+z+SPWfyfzR+z+D+XP2bxfz5/zOL/Qv6Yxf/F/DGL/0v5Yxb/l/PHLP6v5I9Z/F/NH7P4v5Y/ZvF/PX/M4v9G/pjF/838MYv/W/ljEv8xBvLHLP6D8scs/oPzxyz+o+WPWfyH5I9Z/EfPH7P4j5E/ZvEfM3/M4j9W/pjFf+z8MYv/OPljFv9x88cs/uPlj1n8x88fs/hPkD9m8Z8wf8ziP1H+mMV/4vwxi/8k+WMW/w/kj1n8P5g/ZvH/UP6Yxf/D+WMW/4/kj1n8J80fs/h/NH/M4v+x/DGL/8fzxyz+n8gfs/hPlj9m8f9k/pjFf/L8MYv/0Pwxi/8U+WMW/ynzxyz+U+WPWfynzh+z+E+TP2bxnzZ/zOI/Xf6YxX/6/DGL/6fyxyz+n84fs/h/Jn/M4v/Z/DGL/+fyxyz+M+SPWfxnzB+z+M+UP2bxnzl/zOI/S/6YxX/W/DGL/2z5Yxb/2fPHLP5z5I9Z/OfMH7P4z5U/ZvGfO3/M4j9P/pjFf978MYv/5/PHLP5fyB+z+H8xf8zi/6X8MYv/fPljFv/588cs/gvkj1n8F8wfs/h/OX/M4v+V/DGL/0L5Yxb/hfPHLP5fzR+z+C+SP2bx/1r+mMV/0fwxi/9i+WMW/6/nj1n8F88fs/gvkT9m8V8yf8zi/438MYv/UvljFv+l88cs/svkj1n8l80fs/h/M3/M4r9c/pjFf/n8MYv/CvljFv8V88cs/ivlj1n8v5U/ZvH/dv6YxX/l/DGL/yr5Yxb/VfPHLP6r5Y9Z/L+TP2bxXz1/zOK/Rv6YxX/N/DGL/1r5Yxb/tfPHLP7r5I9Z/NfNH7P4fzd/zOK/Xv6YxX/9/DGL/wb5Yxb/DfPHLP4b5Y9Z/DfOH7P4fy9/zOK/Sf6YxX/T/DGL/2b5Yxb/7+ePWfx/kD9m8d88f8ziv0X+mMV/y/wxi/9W+WMW/x/mj1n8f5Q/ZvH/cf6Yxf8n+WMW/63zxyz+2+SPWfy3zR+z+P80f8ziv13+mMX/Z/ljFv/t88cs/jvkj1n8f54/ZvHfMX/M4r9T/pjFf+f8MYv/L/LHLP675I9Z/H+ZP2bx/1X+mMV/1/wxi/9u+WMW/93zxyz+v84fs/jvkT9m8d8zf8ziv1f+mMV/7/wxi/8++WMW/33zxyz+v8kfs/jvlz9m8d8/f8zi/9v8MYv/7/LHLP4H5I9Z/H+fP2bxPzB/zOJ/UP6Yxf/g/DGL/x/yxyz+f8wfs/gfkj9m8f9T/pjF/9D8MYv/YfljFv/D88cs/kfkj1n8j8wfs/j/OX/M4n9U/pjF/y/5Yxb/o/PHLP7H5I9Z/P+aP2bxPzZ/zOJ/XP6Yxf/4/DGL/wn5Yxb/E/PHLP4n5Y9Z/E/OH7P4n5I/ZvE/NX/M4n9a/pjF//T8MYv/GfljFv8z88cs/mflj1n8z84fs/ifkz9m8T83f8zif17+mMX//Pwxi/8F+WMW/wvzxyz+F+WPWfwvzh+z+F+SP2bxvzR/zOJ/Wf6Yxf/y/DGL/xX5Yxb/K/PHLP5X5Y9Z/K/OH7P4X5M/ZvG/Nn/M4n9d/pjF//r8MYv/DfljFv8b88cs/jflj1n8b84fs/jfkj9m8b81f8zif1v+mMX/9vwxi/8d+WMW/zvzxyz+d+WPWfzvzh+z+N+TP2bxvzd/zOJ/X/6Yxf/+/DGL/wP5Yxb/B/PHLP4P5Y9Z/B/OH7P4P5I/ZvF/NH/M4v9Y/pjF//H8MYv/E/ljFv8n88cs/k/lj1n8n84fs/g/kz9m8X82f8zi/1z+mMX/+fwxi/8L+WMW/xfzxyz+L+WPWfxfzh+z+L+SP2bxfzV/zOL/Wv6Yxf/1/DGL/xv5Yxb/N/PHLP5v5Y9J/MccyB+z+A/KH7P4D84fs/iPlj9m8R+SP2bxHz1/zOI/Rv6YxX/M/DGL/1j5Yxb/sfPHLP7j5I9Z/MfNH7P4j5c/ZvEfP3/M4j9B/pjFf8L8MYv/RPljFv+J88cs/pPkj1n8P5A/ZvH/YP6Yxf9D+WMW/w/nj1n8P5I/ZvGfNH/M4v/R/DGL/8fyxyz+H88fs/h/In/M4j9Z/pjF/5P5Yxb/yfPHLP5D88cs/lPkj1n8p8wfs/hPlT9m8Z86f8ziP03+mMV/2vwxi/90+WMW/+nzxyz+n8ofs/h/On/M4v+Z/DGL/2fzxyz+n8sfs/jPkD9m8Z8xf8ziP1P+mMV/5vwxi/8s+WMW/1nzxyz+s+WPWfxnzx+z+M+RP2bxnzN/zOI/V/6YxX/u/DGL/zz5Yxb/efPHLP6fzx+z+H8hf8zi/8X8MYv/l/LHLP7z5Y9Z/OfPH7P4L5A/ZvFfMH/M4v/l/DGL/1fyxyz+C+WPWfwXzh+z+H81f8ziv0j+mMX/a/ljFv9F88cs/ovlj1n8v54/ZvFfPH/M4r9E/pjFf8n8MYv/N/LHLP5L5Y9Z/JfOH7P4L5M/ZvFfNn/M4v/N/DGL/3L5Yxb/5fPHLP4r5I9Z/FfMH7P4r5Q/ZvH/Vv6Yxf/b+WMW/5Xzxyz+q+SPWfxXzR+z+K+WP2bx/07+mMV/9fwxi/8a+WMW/zXzxyz+a+WPWfzXzh+z+K+TP2bxXzd/zOL/3fwxi/96+WMW//Xzxyz+G+SPWfw3zB+z+G+UP2bx3zh/zOL/vfwxi/8m+WMW/03zxyz+m+WPWfy/nz9m8f9B/pjFf/P8MYv/FvljFv8t88cs/lvlj1n8f5g/ZvH/Uf6Yxf/H+WMW/5/kj1n8t84fs/hvkz9m8d82f8zi/9P8MYv/dvljFv+f5Y9Z/LfPH7P475A/ZvH/ef6YxX/H/DGL/075Yxb/nfPHLP6/yB+z+O+SP2bx/2X+mMX/V/ljFv9d88cs/rvlj1n8d88fs/j/On/M4r9H/pjFf8/8MYv/XvljFv+988cs/vvkj1n8980fs/j/Jn/M4r9f/pjFf//8MYv/b/PHLP6/yx+z+B+QP2bx/33+mMX/wPwxi/9B+WMW/4Pzxyz+f8gfs/j/MX/M4n9I/pjF/0/5Yxb/Q/PHLP6H5Y9Z/A/PH7P4H5E/ZvE/Mn/M4v/n/DGL/1H5Yxb/v+SPWfyPzh+z+B+TP2bx/2v+mMX/2Pwxi/9x+WMW/+Pzxyz+J+SPWfxPzB+z+J+UP2bxPzl/zOJ/Sv6Yxf/U/DGL/2n5Yxb/0/PHLP5n5I9Z/M/MH7P4n5U/ZvE/O3/M4n9O/pjF/9z8MYv/efljFv/z88cs/hfkj1n8L8wfs/hflD9m8b84f8zif0n+mMX/0vwxi/9l+WMW/8vzxyz+V+SPWfyvzB+z+F+VP2bxvzp/zOJ/Tf6Yxf/a/DGL/3X5Yxb/6/PHLP435I9Z/G/MH7P435Q/ZvG/OX/M4n9L/pjF/9b8MYv/bfljFv/b88cs/nfkj1n878wfs/jflT9m8b87f8zif0/+mMX/3vwxi/99+WMW//vzxyz+D+SPWfwfzB+z+D+UP2bxfzh/zOL/SP6Yxf/R/DGL/2P5Yxb/x/PHLP5P5I9Z/J/MH7P4P5U/ZvF/On/M4v9M/pjF/9n8MYv/c/ljFv/n88cs/i/kj1n8X8wfs/i/lD9m8X85f8zi/0r+mMX/1fwxi/9r+WMW/9fzxyz+b+SPWfzfzB+z+L+VPybxH2sgf8ziPyh/zOI/OH/M4j9a/pjFf0j+mMV/9Pwxi/8Y+WMW/zHzxyz+Y+WPWfzHzh+z+I+TP2bxHzd/zOI/Xv6YxX/8/DGL/wT5Yxb/CfPHLP4T5Y9Z/CfOH7P4T5I/ZvH/QP6Yxf+D+WMW/w/lj1n8P5w/ZvH/SP6YxX/S/DGL/0fzxyz+H8sfs/h/PH/M4v+J/DGL/2T5Yxb/T+aPWfwnzx+z+A/NH7P4T5E/ZvGfMn/M4j9V/pjFf+r8MYv/NPljFv9p88cs/tPlj1n8p88fs/h/Kn/M4v/p/DGL/2fyxyz+n80fs/h/Ln/M4j9D/pjFf8b8MYv/TPljFv+Z88cs/rPkj1n8Z80fs/jPlj9m8Z89f8ziP0f+mMV/zvwxi/9c+WMW/7nzxyz+8+SPWfznzR+z+H8+f8zi/4X8MYv/F/PHLP5fyh+z+M+XP2bxnz9/zOK/QP6YxX/B/DGL/5fzxyz+X8kfs/gvlD9m8V84f8zi/9X8MYv/IvljFv+v5Y9Z/BfNH7P4L5Y/ZvH/ev6YxX/x/DGL/xL5Yxb/JfPHLP7fyB+z+C+VP2bxXzp/zOK/TP6YxX/Z/DGL/zfzxyz+y+WPWfyXzx+z+K+QP2bxXzF/zOK/Uv6Yxf9b+WMW/2/nj1n8V84fs/ivkj9m8V81f8ziv1r+mMX/O/ljFv/V88cs/mvkj1n818wfs/ivlT9m8V87f8ziv07+mMV/3fwxi/9388cs/uvlj1n8188fs/hvkD9m8d8wf8ziv1H+mMV/4/wxi//38scs/pvkj1n8N80fs/hvlj9m8f9+/pjF/wf5Yxb/zfPHLP5b5I9Z/LfMH7P4b5U/ZvH/Yf6Yxf9H+WMW/x/nj1n8f5I/ZvHfOn/M4r9N/pjFf9v8MYv/T/PHLP7b5Y9Z/H+WP2bx3z5/zOK/Q/6Yxf/n+WMW/x3zxyz+O+WPWfx3zh+z+P8if8ziv0v+mMX/l/ljFv9f5Y9Z/HfNH7P475Y/ZvHfPX/M4v/r/DGL/x75Yxb/PfPHLP575Y9Z/PfOH7P475M/ZvHfN3/M4v+b/DGL/375Yxb//fPHLP6/zR+z+P8uf8zif0D+mMX/9/ljFv8D88cs/gflj1n8D84fs/j/IX/M4v/H/DGL/yH5Yxb/P+WPWfwPzR+z+B+WP2bxPzx/zOJ/RP6Yxf/I/DGL/5/zxyz+R+WPWfz/kj9m8T86f8zif0z+mMX/r/ljFv9j88cs/sflj1n8j88fs/ifkD9m8T8xf8zif1L+mMX/5Pwxi/8p+WMW/1Pzxyz+p+WPWfxPzx+z+J+RP2bxPzN/zOJ/Vv6Yxf/s/DGL/zn5Yxb/c/PHLP7n5Y9Z/M/PH7P4X5A/ZvG/MH/M4n9R/pjF/+L8MYv/JfljFv9L88cs/pflj1n8L88fs/hfkT9m8b8yf8zif1X+mMX/6vwxi/81+WMW/2vzxyz+1+WPWfyvzx+z+N+QP2bxvzF/zOJ/U/6Yxf/m/DGL/y35Yxb/W/PHLP635Y9Z/G/PH7P435E/ZvG/M3/M4n9X/pjF/+78MYv/PfljFv9788cs/vflj1n8788fs/g/kD9m8X8wf8zi/1D+mMX/4fwxi/8j+WMW/0fzxyz+j+WPWfwfzx+z+D+RP2bxfzJ/zOL/VP6Yxf/p/DGL/zP5Yxb/Z/PHLP7P5Y9Z/J/PH7P4v5A/ZvF/MX/M4v9S/pjF/+X8MYv/K/ljFv9X88cs/q/lj1n8X88fs/i/kT9m8X8zf8zi/1b+mMR/7IH8MYv/oPwxi//g/DGL/2j5Yxb/IfljFv/R88cs/mPkj1n8x8wfs/iPlT9m8R87f8ziP07+mMV/3Pwxi/94+WMW//Hzxyz+E+SPWfwnzB+z+E+UP2bxnzh/zOI/Sf6Yxf8D+WMW/w/mj1n8P5Q/ZvH/cP6Yxf8j+WMW/0nzxyz+H80fs/h/LH/M4v/x/DGL/yfyxyz+k+WPWfw/mT9m8Z88f8ziPzR/zOI/Rf6YxX/K/DGL/1T5Yxb/qfPHLP7T5I9Z/KfNH7P4T5c/ZvGfPn/M4v+p/DGL/6fzxyz+n8kfs/h/Nn/M4v+5/DGL/wz5Yxb/GfPHLP4z5Y9Z/GfOH7P4z5I/ZvGfNX/M4j9b/pjFf/b8MYv/HPljFv8588cs/nPlj1n8584fs/jPkz9m8Z83f8zi//n8MYv/F/LHLP5fzB+z+H8pf8ziP1/+mMV//vwxi/8C+WMW/wXzxyz+X84fs/h/JX/M4r9Q/pjFf+H8MYv/V/PHLP6L5I9Z/L+WP2bxXzR/zOK/WP6Yxf/r+WMW/8Xzxyz+S+SPWfyXzB+z+H8jf8ziv1T+mMV/6fwxi/8y+WMW/2Xzxyz+38wfs/gvlz9m8V8+f8ziv0L+mMV/xfwxi/9K+WMW/2/lj1n8v50/ZvFfOX/M4r9K/pjFf9X8MYv/avljFv/v5I9Z/FfPH7P4r5E/ZvFfM3/M4r9W/pjFf+38MYv/OvljFv9188cs/t/NH7P4r5c/ZvFfP3/M4r9B/pjFf8P8MYv/RvljFv+N88cs/t/LH7P4b5I/ZvHfNH/M4r9Z/pjF//v5Yxb/H+SPWfw3zx+z+G+RP2bx3zJ/zOK/Vf6Yxf+H+WMW/x/lj1n8f5w/ZvH/Sf6YxX/r/DGL/zb5Yxb/bfPHLP4/zR+z+G+XP2bx/1n+mMV/+/wxi/8O+WMW/5/nj1n8d8wfs/jvlD9m8d85f8zi/4v8MYv/LvljFv9f5o9Z/H+VP2bx3zV/zOK/W/6YxX/3/DGL/6/zxyz+e+SPWfz3zB+z+O+VP2bx3zt/zOK/T/6YxX/f/DGL/2/yxyz+++WPWfz3zx+z+P82f8zi/7v8MYv/AfljFv/f549Z/A/MH7P4H5Q/ZvE/OH/M4v+H/DGL/x/zxyz+h+SPWfz/lD9m8T80f8zif1j+mMX/8Pwxi/8R+WMW/yPzxyz+f84fs/gflT9m8f9L/pjF/+j8MYv/MfljFv+/5o9Z/I/NH7P4H5c/ZvE/Pn/M4n9C/pjF/8T8MYv/SfljFv+T88cs/qfkj1n8T80fs/iflj9m8T89f8zif0b+mMX/zPwxi/9Z+WMW/7Pzxyz+5+SPWfzPzR+z+J+XP2bxPz9/zOJ/Qf6Yxf/C/DGL/0X5Yxb/i/PHLP6X5I9Z/C/NH7P4X5Y/ZvG/PH/M4n9F/pjF/8r8MYv/VfljFv+r88cs/tfkj1n8r80fs/hflz9m8b8+f8zif0P+mMX/xvwxi/9N+WMW/5vzxyz+t+SPWfxvzR+z+N+WP2bxvz1/zOJ/R/6Yxf/O/DGL/135Yxb/u/PHLP735I9Z/O/NH7P435c/ZvG/P3/M4v9A/pjF/8H8MYv/Q/ljFv+H88cs/o/kj1n8H80fs/g/lj9m8X88f8zi/0T+mMX/yfwxi/9T+WMW/6fzxyz+z+SPWfyfzR+z+D+XP2bxfz5/zOL/Qv6Yxf/F/DGL/0v5Yxb/l/PHLP6v5I9Z/F/NH7P4v5Y/ZvF/PX/M4v9G/pjF/838MYv/W/ljEv9xBvLHLP6D8scs/oPzxyz+o+WPWfyH5I9Z/EfPH7P4j5E/ZvEfM3/M4j9W/pjFf+z8MYv/OPljFv9x88cs/uPlj1n8x88fs/hPkD9m8Z8wf8ziP1H+mMV/4vwxi/8k+WMW/w/kj1n8P5g/ZvH/UP6Yxf/D+WMW/4/kj1n8J80fs/h/NH/M4v+x/DGL/8fzxyz+n8gfs/hPlj9m8f9k/pjFf/L8MYv/0Pwxi/8U+WMW/ynzxyz+U+WPWfynzh+z+E+TP2bxnzZ/zOI/Xf6YxX/6/DGL/6fyxyz+n84fs/h/Jn/M4v/Z/DGL/+fyxyz+M+SPWfxnzB+z+M+UP2bxnzl/zOI/S/6YxX/W/DGL/2z5Yxb/2fPHLP5z5I9Z/OfMH7P4z5U/ZvGfO3/M4j9P/pjFf978MYv/5/PHLP5fyB+z+H8xf8zi/6X8MYv/fPljFv/588cs/gvkj1n8F8wfs/h/OX/M4v+V/DGL/0L5Yxb/hfPHLP5fzR+z+C+SP2bx/1r+mMV/0fwxi/9i+WMW/6/nj1n8F88fs/gvkT9m8V8yf8zi/438MYv/UvljFv+l88cs/svkj1n8l80fs/h/M3/M4r9c/pjFf/n8MYv/CvljFv8V88cs/ivlj1n8v5U/ZvH/dv6YxX/l/DGL/yr5Yxb/VfPHLP6r5Y9Z/L+TP2bxXz1/zOK/Rv6YxX/N/DGL/1r5Yxb/tfPHLP7r5I9Z/NfNH7P4fzd/zOK/Xv6YxX/9/DGL/wb5Yxb/DfPHLP4b5Y9Z/DfOH7P4fy9/zOK/Sf6YxX/T/DGL/2b5Yxb/7+ePWfx/kD9m8d88f8ziv0X+mMV/y/wxi/9W+WMW/x/mj1n8f5Q/ZvH/cf6Yxf8n+WMW/63zxyz+2+SPWfy3zR+z+P80f8ziv13+mMX/Z/ljFv/t88cs/jvkj1n8f54/ZvHfMX/M4r9T/pjFf+f8MYv/L/LHLP675I9Z/H+ZP2bx/1X+mMV/1/wxi/9u+WMW/93zxyz+v84fs/jvkT9m8d8zf8ziv1f+mMV/7/wxi/8++WMW/33zxyz+v8kfs/jvlz9m8d8/f8zi/9v8MYv/7/LHLP4H5I9Z/H+fP2bxPzB/zOJ/UP6Yxf/g/DGL/x/yxyz+f8wfs/gfkj9m8f9T/pjF/9D8MYv/YfljFv/D88cs/kfkj1n8j8wfs/j/OX/M4n9U/pjF/y/5Yxb/o/PHLP7H5I9Z/P+aP2bxPzZ/zOJ/XP6Yxf/4/DGL/wn5Yxb/E/PHLP4n5Y9Z/E/OH7P4n5I/ZvE/NX/M4n9a/pjF//T8MYv/GfljFv8z88cs/mflj1n8z84fs/ifkz9m8T83f8zif17+mMX//Pwxi/8F+WMW/wvzxyz+F+WPWfwvzh+z+F+SP2bxvzR/zOJ/Wf6Yxf/y/DGL/xX5Yxb/K/PHLP5X5Y9Z/K/OH7P4X5M/ZvG/Nn/M4n9d/pjF//r8MYv/DfljFv8b88cs/jflj1n8b84fs/jfkj9m8b81f8zif1v+mMX/9vwxi/8d+WMW/zvzxyz+d+WPWfzvzh+z+N+TP2bxvzd/zOJ/X/6Yxf/+/DGL/wP5Yxb/B/PHLP4P5Y9Z/B/OH7P4P5I/ZvF/NH/M4v9Y/pjF//H8MYv/E/ljFv8n88cs/k/lj1n8n84fs/g/kz9m8X82f8zi/1z+mMX/+fwxi/8L+WMW/xfzxyz+L+WPWfxfzh+z+L+SP2bxfzV/zOL/Wv6Yxf/1/DGL/xv5Yxb/N/PHLP5v5Y9J/McdyB+z+A/KH7P4D84fs/iPlj9m8R+SP2bxHz1/zOI/Rv6YxX/M/DGL/1j5Yxb/sfPHLP7j5I9Z/MfNH7P4j5c/ZvEfP3/M4j9B/pjFf8L8MYv/RPljFv+J88cs/pPkj1n8P5A/ZvH/YP6Yxf9D+WMW/w/nj1n8P5I/ZvGfNH/M4v/R/DGL/8fyxyz+H88fs/h/In/M4j9Z/pjF/5P5Yxb/yfPHLP5D88cs/lPkj1n8p8wfs/hPlT9m8Z86f8ziP03+mMV/2vwxi/90+WMW/+nzxyz+n8ofs/h/On/M4v+Z/DGL/2fzxyz+n8sfs/jPkD9m8Z8xf8ziP1P+mMV/5vwxi/8s+WMW/1nzxyz+s+WPWfxnzx+z+M+RP2bxnzN/zOI/V/6YxX/u/DGL/zz5Yxb/efPHLP6fzx+z+H8hf8zi/8X8MYv/l/LHLP7z5Y9Z/OfPH7P4L5A/ZvFfMH/M4v/l/DGL/1fyxyz+C+WPWfwXzh+z+H81f8ziv0j+mMX/a/ljFv9F88cs/ovlj1n8v54/ZvFfPH/M4r9E/pjFf8n8MYv/N/LHLP5L5Y9Z/JfOH7P4L5M/ZvFfNn/M4v/N/DGL/3L5Yxb/5fPHLP4r5I9Z/FfMH7P4r5Q/ZvH/Vv6Yxf/b+WMW/5Xzxyz+q+SPWfxXzR+z+K+WP2bx/07+mMV/9fwxi/8a+WMW/zXzxyz+a+WPWfzXzh+z+K+TP2bxXzd/zOL/3fwxi/96+WMW//Xzxyz+G+SPWfw3zB+z+G+UP2bx3zh/zOL/vfwxi/8m+WMW/03zxyz+m+WPWfy/nz9m8f9B/pjFf/P8MYv/FvljFv8t88cs/lvlj1n8f5g/ZvH/Uf6Yxf/H+WMW/5/kj1n8t84fs/hvkz9m8d82f8zi/9P8MYv/dvljFv+f5Y9Z/LfPH7P475A/ZvH/ef6YxX/H/DGL/075Yxb/nfPHLP6/yB+z+O+SP2bx/2X+mMX/V/ljFv9d88cs/rvlj1n8d88fs/j/On/M4r9H/pjFf8/8MYv/XvljFv+988cs/vvkj1n8980fs/j/Jn/M4r9f/pjFf//8MYv/b/PHLP6/yx+z+B+QP2bx/33+mMX/wPwxi/9B+WMW/4Pzxyz+f8gfs/j/MX/M4n9I/pjF/0/5Yxb/Q/PHLP6H5Y9Z/A/PH7P4H5E/ZvE/Mn/M4v/n/DGL/1H5Yxb/v+SPWfyPzh+z+B+TP2bx/2v+mMX/2Pwxi/9x+WMW/+Pzxyz+J+SPWfxPzB+z+J+UP2bxPzl/zOJ/Sv6Yxf/U/DGL/2n5Yxb/0/PHLP5n5I9Z/M/MH7P4n5U/ZvE/O3/M4n9O/pjF/9z8MYv/efljFv/z88cs/hfkj1n8L8wfs/hflD9m8b84f8zif0n+mMX/0vwxi/9l+WMW/8vzxyz+V+SPWfyvzB+z+F+VP2bxvzp/zOJ/Tf6Yxf/a/DGL/3X5Yxb/6/PHLP435I9Z/G/MH7P435Q/ZvG/OX/M4n9L/pjF/9b8MYv/bfljFv/b88cs/nfkj1n878wfs/jflT9m8b87f8zif0/+mMX/3vwxi/99+WMW//vzxyz+D+SPWfwfzB+z+D+UP2bxfzh/zOL/SP6Yxf/R/DGL/2P5Yxb/x/PHLP5P5I9Z/J/MH7P4P5U/ZvF/On/M4v9M/pjF/9n8MYv/c/ljFv/n88cs/i/kj1n8X8wfs/i/lD9m8X85f8zi/0r+mMX/1fwxi/9r+WMW/9fzxyz+b+SPWfzfzB+z+L+VPybxH28gf8ziPyh/zOI/OH/M4j9a/pjFf0j+mMV/9Pwxi/8Y+WMW/zHzxyz+Y+WPWfzHzh+z+I+TP2bxHzd/zOI/Xv6YxX/8/DGL/wT5Yxb/CfPHLP4T5Y9Z/CfOH7P4T5I/ZvH/QP6Yxf+D+WMW/w/lj1n8P5w/ZvH/SP6YxX/S/DGL/0fzxyz+H8sfs/h/PH/M4v+J/DGL/2T5Yxb/T+aPWfwnzx+z+A/NH7P4T5E/ZvGfMn/M4j9V/pjFf+r8MYv/NPljFv9p88cs/tPlj1n8p88fs/h/Kn/M4v/p/DGL/2fyxyz+n80fs/h/Ln/M4j9D/pjFf8b8MYv/TPljFv+Z88cs/rPkj1n8Z80fs/jPlj9m8Z89f8ziP0f+mMV/zvwxi/9c+WMW/7nzxyz+8+SPWfznzR+z+H8+f8zi/4X8MYv/F/PHLP5fyh+z+M+XP2bxnz9/zOK/QP6YxX/B/DGL/5fzxyz+X8kfs/gvlD9m8V84f8zi/9X8MYv/IvljFv+v5Y9Z/BfNH7P4L5Y/ZvH/ev6YxX/x/DGL/xL5Yxb/JfPHLP7fyB+z+C+VP2bxXzp/zOK/TP6YxX/Z/DGL/zfzxyz+y+WPWfyXzx+z+K+QP2bxXzF/zOK/Uv6Yxf9b+WMW/2/nj1n8V84fs/ivkj9m8V81f8ziv1r+mMX/O/ljFv/V88cs/mvkj1n818wfs/ivlT9m8V87f8ziv07+mMV/3fwxi/9388cs/uvlj1n8188fs/hvkD9m8d8wf8ziv1H+mMV/4/wxi//38scs/pvkj1n8N80fs/hvlj9m8f9+/pjF/wf5Yxb/zfPHLP5b5I9Z/LfMH7P4b5U/ZvH/Yf6Yxf9H+WMW/x/nj1n8f5I/ZvHfOn/M4r9N/pjFf9v8MYv/T/PHLP7b5Y9Z/H+WP2bx3z5/zOK/Q/6Yxf/n+WMW/x3zxyz+O+WPWfx3zh+z+P8if8ziv0v+mMX/l/ljFv9f5Y9Z/HfNH7P475Y/ZvHfPX/M4v/r/DGL/x75Yxb/PfPHLP575Y9Z/PfOH7P475M/ZvHfN3/M4v+b/DGL/375Yxb//fPHLP6/zR+z+P8uf8zif0D+mMX/9/ljFv8D88cs/gflj1n8D84fs/j/IX/M4v/H/DGL/yH5Yxb/P+WPWfwPzR+z+B+WP2bxPzx/zOJ/RP6Yxf/I/DGL/5/zxyz+R+WPWfz/kj9m8T86f8zif0z+mMX/r/ljFv9j88cs/sflj1n8j88fs/ifkD9m8T8xf8zif1L+mMX/5Pwxi/8p+WMW/1Pzxyz+p+WPWfxPzx+z+J+RP2bxPzN/zOJ/Vv6Yxf/s/DGL/zn5Yxb/c/PHLP7n5Y9Z/M/PH7P4X5A/ZvG/MH/M4n9R/pjF/+L8MYv/JfljFv9L88cs/pflj1n8L88fs/hfkT9m8b8yf8zif1X+mMX/6vwxi/81+WMW/2vzxyz+1+WPWfyvzx+z+N+QP2bxvzF/zOJ/U/6Yxf/m/DGL/y35Yxb/W/PHLP635Y9Z/G/PH7P435E/ZvG/M3/M4n9X/pjF/+78MYv/PfljFv9788cs/vflj1n8788fs/g/kD9m8X8wf8zi/1D+mMX/4fwxi/8j+WMW/0fzxyz+j+WPWfwfzx+z+D+RP2bxfzJ/zOL/VP6Yxf/p/DGL/zP5Yxb/Z/PHLP7P5Y9Z/J/PH7P4v5A/ZvF/MX/M4v9S/pjF/+X8MYv/K/ljFv9X88cs/q/lj1n8X88fs/i/kT9m8X8zf8zi/1b+mMR//IH8MYv/oPwxi//g/DGL/2j5Yxb/IfljFv/R88cs/mPkj1n8x8wfs/iPlT9m8R87f8ziP07+mMV/3Pwxi/94+WMW//Hzxyz+E+SPWfwnzB+z+E+UP2bxnzh/zOI/Sf6Yxf8D+WMW/w/mj1n8P5Q/ZvH/cP6Yxf8j+WMW/0nzxyz+H80fs/h/LH/M4v/x/DGL/yfyxyz+k+WPWfw/mT9m8Z88f8ziPzR/zOI/Rf6YxX/K/DGL/1T5Yxb/qfPHLP7T5I9Z/KfNH7P4T5c/ZvGfPn/M4v+p/DGL/6fzxyz+n8kfs/h/Nn/M4v+5/DGL/wz5Yxb/GfPHLP4z5Y9Z/GfOH7P4z5I/ZvGfNX/M4j9b/pjFf/b8MYv/HPljFv8588cs/nPlj1n8584fs/jPkz9m8Z83f8zi//n8MYv/F/LHLP5fzB+z+H8pf8ziP1/+mMV//vwxi/8C+WMW/wXzxyz+X84fs/h/JX/M4r9Q/pjFf+H8MYv/V/PHLP6L5I9Z/L+WP2bxXzR/zOK/WP6Yxf/r+WMW/8Xzxyz+S+SPWfyXzB+z+H8jf8ziv1T+mMV/6fwxi/8y+WMW/2Xzxyz+38wfs/gvlz9m8V8+f8ziv0L+mMV/xfwxi/9K+WMW/2/lj1n8v50/ZvFfOX/M4r9K/pjFf9X8MYv/avljFv/v5I9Z/FfPH7P4r5E/ZvFfM3/M4r9W/pjFf+38MYv/OvljFv9188cs/t/NH7P4r5c/ZvFfP3/M4r9B/pjFf8P8MYv/RvljFv+N88cs/t/LH7P4b5I/ZvHfNH/M4r9Z/pjF//v5Yxb/H+SPWfw3zx+z+G+RP2bx3zJ/zOK/Vf6Yxf+H+WMW/x/lj1n8f5w/ZvH/Sf6YxX/r/DGL/zb5Yxb/bfPHLP4/zR+z+G+XP2bx/1n+mMV/+/wxi/8O+WMW/5/nj1n8d8wfs/jvlD9m8d85f8zi/4v8MYv/LvljFv9f5o9Z/H+VP2bx3zV/zOK/W/6YxX/3/DGL/6/zxyz+e+SPWfz3zB+z+O+VP2bx3zt/zOK/T/6YxX/f/DGL/2/yxyz+++WPWfz3zx+z+P82f8zi/7v8MYv/AfljFv/f549Z/A/MH/tP9B80MLDNwCj+B+WP/Sf60+P/4Pwxi/8f8scs/n/MH7P4H5I/ZvH/U/6Yxf/Q/DGL/2H5Yxb/w/PHLP5H5I9Z/I/MH7P4/zl/zOJ/VP6Yxf8v+WMW/6Pzxyz+x+SPWfz/mj9m8T82f8zif1z+mMX/+Pwxi/8J+WMW/xPzxyz+J+WPWfxPzh+z+J+SP2bxPzV/zOJ/Wv6Yxf/0/DGL/xn5Yxb/M/PHLP5n5Y9Z/M/OH7P4n5M/ZvE/N3/M4n9e/pjF//z8MYv/BfljFv8L88cs/hflj1n8L84fs/hfkj9m8b80f8zif1n+mMX/8vwxi/8V+WMW/yvzxyz+V+WPWfyvzh+z+F+TP2bxvzZ/zOJ/Xf6Yxf/6/DGL/w35Yxb/G/PHLP435Y9Z/G/OH7P435I/ZvG/NX/M4n9b/pjF//b8MYv/HfljFv8788cs/nflj1n8784fs/jfkz9m8b83f8zif1/+mMX//vwxi/8D+WMW/wfzxyz+D+WPWfwfzh+z+D+SP2bxfzR/zOL/WP6Yxf/x/DGL/xP5Yxb/J/PHLP5P5Y9Z/J/OH7P4P5M/ZvF/Nn/M4v9c/pjF//n8MYv/C/ljFv8X88cs/i/lj1n8X84fs/i/kj9m8X81f8zi/1r+mMX/9fwxi/8b+WMW/zfzxyz+b+WPSfwnGMgfs/gPyh+z+A/OH7P4j5Y/ZvEfkj9m8R89f8ziP0b+mMV/zPwxi/9Y+WMW/7Hzxyz+4+SPWfzHzR+z+I+XP2bxHz9/zOI/Qf6YxX/C/DGL/0T5Yxb/ifPHLP6T5I9Z/D+QP2bx/2D+mMX/Q/ljFv8P549Z/D+SP2bxnzR/zOL/0fwxi//H8scs/h/PH7P4fyJ/zOI/Wf6Yxf+T+WMW/8nzxyz+Q/PHLP5T5I9Z/KfMH7P4T5U/ZvGfOn/M4j9N/pjFf9r8MYv/dPljFv/p88cs/p/KH7P4fzp/zOL/mfwxi/9n88cs/p/LH7P4z5A/ZvGfMX/M4j9T/pjFf+b8MYv/LPljFv9Z88cs/rPlj1n8Z88fs/jPkT9m8Z8zf8ziP1f+mMV/7vwxi/88+WMW/3nzxyz+n88fs/h/IX/M4v/F/DGL/5fyxyz+8+WPWfznzx+z+C+QP2bxXzB/zOL/5fwxi/9X8scs/gvlj1n8F84fs/h/NX/M4r9I/pjF/2v5Yxb/RfPHLP6L5Y9Z/L+eP2bxXzx/zOK/RP6YxX/J/DGL/zfyxyz+S+WPWfyXzh+z+C+TP2bxXzZ/zOL/zfwxi/9y+WMW/+Xzxyz+K+SPWfxXzB+z+K+UP2bx/1b+mMX/2/ljFv+V88cs/qvkj1n8V80fs/ivlj9m8f9O/pjFf/X8MYv/GvljFv8188cs/mvlj1n8184fs/ivkz9m8V83f8zi/938MYv/evljFv/188cs/hvkj1n8N8wfs/hvlD9m8d84f8zi/738MYv/JvljFv9N88cs/pvlj1n8v58/ZvH/Qf6YxX/z/DGL/xb5Yxb/LfPHLP5b5Y9Z/H+YP2bx/1H+mMX/x/ljFv+f5I9Z/LfOH7P4b5M/ZvHfNn/M4v/T/DGL/3b5Yxb/n+WPWfy3zx+z+O+QP2bx/3n+mMV/x/wxi/9O+WMW/53zxyz+v8gfs/jvkj9m8f9l/pjF/1f5Yxb/XfPHLP675Y9Z/HfPH7P4/zp/zOK/R/6YxX/P/DGL/175Yxb/vfPHLP775I9Z/PfNH7P4/yZ/zOK/X/6YxX///DGL/2/zxyz+v8sfs/gfkD9m8f99/pjF/8D8MYv/QfljFv+D88cs/n/IH7P4/zF/zOJ/SP6Yxf9P+WMW/0Pzxyz+h+WPjeJ/7H+q/+H5Y5bH/xH5Yxb/I/PHLP5/zh+z+B+VP2bx/0v+mMX/6Pwxi/8x+WMW/7/mj1n8j80fs/gflz9m8T8+f8zif0L+mMX/xPwxi/9J+WMW/5Pzxyz+p+SPWfxPzR+z+J+WP2bxPz1/zOJ/Rv6Yxf/M/DGL/1n5Yxb/s/PHLP7n5I9Z/M/NH7P4n5c/ZvE/P3/M4n9B/pjF/8L8MYv/RfljFv+L88cs/pfkj1n8L80fs/hflj9m8b88f8zif0X+mMX/yvwxi/9V+WMW/6vzxyz+1+SPWfyvzR+z+F+XP2bxvz5/zOJ/Q/6Yxf/G/DGL/035Yxb/m/PHLP635I9Z/G/NH7P435Y/ZvG/PX/M4n9H/pjF/878MYv/XfljFv+788cs/vfkj1n8780fs/jflz9m8b8/f8zi/0D+mMX/wfwxi/9D+WMW/4fzxyz+j+SPWfwfzR+z+D+WP2bxfzx/zOL/RP6Yxf/J/DGL/1P5Yxb/p/PHLP7P5I9Z/J/NH7P4P5c/ZvF/Pn/M4v9C/pjF/8X8MYv/S/ljFv+X88cs/q/kj1n8X80fs/i/lj9m8X89f8zi/0b+mMX/zfwxi/9b+WMS/wkH8scs/oPyxyz+g/PHLP6j5Y9Z/Ifkj1n8R88fs/iPkT9m8R8zf8ziP1b+mMV/7Pwxi/84+WMW/3Hzxyz+4+WPWfzHzx+z+E+QP2bxnzB/zOL/f9i5+3Cv6/qO41/gg5KZN3O10DACUTQVBBXJvEFLPQJHu7GUBCXFmwnKlAJdKdmNtZWzWMXaSvImdaQWzpprOMo5p4tmRbXNxtjMsVa4LCdulew6cA5xTu/O5fny3dcr34/HH5zz+53ev5TndfXid7hOu+kfytJ/d/1DWfr/hv6hLP330D+Upf9v6h/K0v/F+oey9H+J/qEs/X9L/1CW/i/VP5Sl/3D9Q1n676l/KEv/vfQPZen/Mv1DWfqP0D+Upf/e+oey9H+5/qEs/UfqH8rS/xX6h7L0H6V/KEv/0fqHsvTfR/9Qlv5j9A9l6b+v/qEs/ffTP5Sl/1j9Q1n6769/KEv/A/QPZen/Sv1DWfofqH8oS/+D9A9l6X+w/qEs/cfpH8rSf7z+oSz9D9E/lKX/BP1DWfpP1D+Upf+h+oey9D9M/1CW/ofrH8rSf5L+oSz9j9A/lKX/ZP1DWfq/Sv9Qlv5H6h/K0v/V+oey9D9K/1CW/kfrH8rS/xj9Q1n6H6t/KEv/KfqHsvQ/Tv9Qlv7H6x/K0v81+oey9H+t/qEs/U/QP5Sl/4n6h7L0P0n/UJb+HfqHsvQ/Wf9Qlv5T9Q9l6T9N/1CW/tP1D2Xp36l/KEv/U/QPZel/qv6hLP1fp38oS//X6x/K0v8N+oey9H+j/qEs/U/TP5Sl/5v0D2Xp/2b9Q1n6n65/KEv/M/QPZek/Q/9Qlv5v0T+Upf+Z+oey9J+pfyhL/1n6h7L0P0v/UJb+Z+sfytJ/tv6hLP3fqn8oS/9z9A9l6X+u/qEs/efoH8rS/zz9Q1n6n69/KEv/C/QPZel/of6hLP1/W/9Qlv4X6R/K0n+u/qEs/efpH8rS/2L9Q1n6X6J/KEv/+fqHsvT/Hf1DWfpfqn8oS//L9A9l6b9A/1CW/m/TP5Sl/9v1D2Xpv1D/UJb+i/QPZel/uf6hLP2v0D+Upf/v6h/K0v8d+oey9H+n/qEs/a/UP5Sl/1X6h7L0X6x/KEv/d+kfytL/av1DWfq/W/9Qlv7v0T+Upf979Q9l6f8+/UNZ+l+jfyhL//frH8rS/wP6h7L0/z39Q1n6/77+oSz9P6h/KEv/D+kfytL/Wv1DWfr/gf6hLP2v0z+Upf+H9Q9l6f8R/UNZ+i/RP5Sl/x/qH8rS/6P6h7L0/5j+oSz9P65/KEv/pfqHsvT/I/1DWfp/Qv9Qlv5/rH8oS/8/0T+Upf8n9Q9l6f8p/UNZ+l+vfyhL/2X6h7L0/7T+oSz9b9A/lKX/jfqHsvS/Sf9Qlv436x/K0v8z+oey9L9F/1CW/rfqH8rS/zb9Q1n6/6n+oSz9l+sfytL/s/qHsvS/Xf9Qlv536B/K0v9O/UNZ+n9O/1CW/p/XP5Sl/wr9Q1n636V/KEv/P9M/lKX/3fqHsvT/gv6hLP2/qH8oS/8/1z+Upf89+oey9P8L/UNZ+n9J/1CW/n+pfyhL/5X6h7L0v1f/UJb+f6V/KEv/VfqHsvT/sv6hLP2/on8oS//79A9l6f/X+oey9L9f/1CW/n+jfyhL/wf0D2Xp/7f6h7L0f1D/UJb+D+kfytL/7/QPZen/Vf1DWfqv1j+Upf/X9A9l6f/3+oey9H9Y/1CW/l/XP5Sl/zf0D2Xp/039Q1n6r9E/lKX/t/QPZen/bf1DWfp/R/9Qlv7/oH8oS/9/1D+Upf8/6R/K0v8R/UNZ+n9X/1CW/v+sfyhL/7X6h7L0/xf9Q1n6r9M/lKX/v+ofytL/3/QPZen/qP6hLP2/p38oS//H9A9l6f/v+oey9F+vfyhL///QP5Sl//f1D2Xp/5/6h7L0/4H+oSz9f6h/KEv/DfqHsvR/XP9Qlv7/pX8oS/8f6R/K0v8J/UNZ+v9Y/1CW/j/RP5Sl/5P6h7L0/2/9Q1n6P6V/KEv/jfqHsvR/Wv9Qlv7/o38oS///1T+Upf9P9Q9l6f8z/UNZ+v9c/1CW/s/oH8rSf5P+oST9d6v0D2XpP0j/UJb+g/UPZek/RP9Qlv5F/1CW/kP1D2Xpv4P+oSz9d9Q/lKX/MP1DWfq/QP9Qlv476R/K0v+F+oey9N9Z/1CW/i/SP5Sl/y76h7L031X/0POuPwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQVR2dUzYMGdTrqSHbPhixes7mj4duPP2Cm2/+wu49H7u/PDV4ycHbPti0adOmwU9WX+1+uGNVVV3/bbt1Px7W97jr9a+asnTslkdl5A1PH7B84dPHve/ONbduPPGWqcuHbn52aHX2eRfOnTN+cFWV0UOrRV0PDhlUVWXfodV1XQ8mdD3Yb2h1a9eDiZsfvKBa1fXg4HMumXtu1xNja/+eAcCvu47OxdWQXotd9frTwLb7f9WUuxb3fOznJXterVTd+3/Pij3e3udrPX7F/ve8fnlF3/0f8L8gAPBLBrb/943s+djPS/7S+//pF39sTfS1X73/Pa9fRtl/AGhe8P3/Xhvd9/v+fb7/H/05YOv9RWct2bFr/2/ZeNqC7qfKs/n+/y9ev4zuu/+De33/f1BVlX16vv+/Y1WVMdv52wEAKXR0vmtDf+//+9//smefm0Hb7v/ut686rWv/1+5050u6nxo6wP3fp7/3/yf0+WcFAJ6djs5Pb+rz/n8A+1/tG7zk1v0/ftGDL+7a/6+v/d7Ibb42kP0f03f/xy2YN3/cZZdfcdCF82afP+f8ORdPnjTpiMMmHT55wrjN3xHY8ut2/qYAwPPc9r3/r3bqczOoqh7bev/BlSMe7Nr/CZ846YLup4YNcP/37ff9/0jv/wGgl1GDqx12qBbNXrDg0kO2/NrzcMKWX7f8x4L9H8Df/4/u+SG6np8ZHFRVL91633nZ+wd37f+No/dc2f3UDgPc//363f9je/+sIgDw7Gzn+/9z+9z02v9dh9w2uWv/Tx6z/zXdTw307//H9rv/y7z/B4A6Ojqr/9c30V37f/XOP7++3nXZ38//AUDz2tj/x0e8e1S963KA/QeA5rWx/3OOedHd9a7LK+0/ADSvjf1/oGPJzHrX5UD7DwDNa2P/p1004qF61+Ug+w8AzWtj/0decc7CetflYPsPAM1rY/+Xn75hXb3rMs7+A0Dz2tj/M4etfaLedRlv/wGgeW3s/3cOOPW8etflEPsPAM1rY/+/dOTBj9S7LhPsPwA0r439Hz982bR612Wi/QeA5rWx/x+55Oib6l2XQ+0/ADSvjf0fPv1zE+tdl8PsPwA0r439f9uZX7u23nU53P4DQPPa2P9nrjx2eL3rMsn+A0Dz2tj/VQ/sPaPedTnC/gNA89rY/6mPXbe63nWZbP8BoHlt7P9+Tz4+v951eZX9B4DmtbH/n/322evrXZcj7T8ANK+N/d9l2TO71rsur7b/ANC8Nvb/vVfPX1rvuhxl/wGgeW3s//eX7DKm3nU52v4DQPPa2P+3fn7xinrX5Rj7DwDNa2P/v/HoxKn1rsux9h8AmtfG/p/x5ZXfrXddpth/AGheG/t/2MP3za53XY6z/wDQvDb2/94fT3+q3nU53v4DQPPa2P+Xveebe9e7Lq+x/wDQvDb2/+OfmfmBetfltfYfAJrXxv7/9IujD613XU6w/wDQvDb2f/5Hb7+x3nU50f4DQPPa2P/OA3+yrt51Ocn+A0Dz2tj/+3d558J616XD/gNA89rY/9tePuShetflZPsPAM1rY/9HHfWhmfWuy1T7DwDNa2P/F0/d4+5612Wa/QeA5rWx/y+88JOj6l2X6fYfAJrXxv6fv+jR6+tdl077DwDNa2P/fzhj3rB61+UU+w8AzWtj//faadbwetflVPsPAM1rY/+vG/vwtfWuy+vsPwA0r439/9nkOybWuy6vt/8A0Lw29n/hXiNvqndd3mD/AaB5bez/t+bdO63edXmj/QeA5rWx/7NOGf9Ivetymv0HgOa1sf8TZnWeV++6vMn+A0Dz2tj/e96x6ol61+XN9h8AmtfG/l9z/6dW1Lsup9t/AGheG/u/8/rdxtS7LmfYfwBoXhv7f/ZTFy+td11m2H8AaF4b+/+DNet2rXdd3mL/AaB5bex/xw1Xrq93Xc60/wDQvDb2/yuLfzS/3nWZaf8BoHlt7P8dH752db3rMsv+A0Dz2tj/MXdVM+pdl7PsPwA077LLr7ho9ty5cy71iU984pOtnzzX/8sEAAA07Rd/6H+u/0kAAAAAAAAAAAAAAAAAAAAgrzb+78Se639HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP6PHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhBw4EAAAAAAT5W68wQAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB8BQAA//+3E9IO")
setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000200)=ANY=[], 0x841, 0x0)
lsetxattr(&(0x7f0000000280)='./file1\x00', &(0x7f00000002c0)=@known='trusted.overlay.nlink\x00', 0x0, 0x0, 0x0)
setxattr$trusted_overlay_upper(&(0x7f0000000200)='./file1\x00', &(0x7f00000001c0), &(0x7f00000004c0)=ANY=[], 0x835, 0x0)

7.745513807s ago: executing program 0:
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
r3 = socket(0x2, 0x3, 0x21)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10)
connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10)
write$binfmt_misc(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="7b4f28acb47449f74d"], 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x8004, 0x0)

7.704442487s ago: executing program 1:
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000005140)='./file0\x00', 0x0, &(0x7f0000000680)={[{@space_cache_v1}, {@space_cache_v2}, {@acl}, {@compress_force_algo={'compress-force', 0x3d, 'zlib'}}, {@nodatasum}, {@nodiscard}, {@nodiscard}, {@datacow}]}, 0x1, 0x5102, &(0x7f000000a2c0)="$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")
r0 = open(&(0x7f0000000180)='./bus\x00', 0x14967e, 0x0)
mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0)
fallocate(r0, 0x0, 0x0, 0x1000f4)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10)
syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x2208050, &(0x7f0000000140)=ANY=[], 0x1, 0x1516, &(0x7f0000001c00)="$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")
r3 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
pwritev2(r3, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x1}], 0x1, 0x0, 0x0, 0x0)
pipe2$9p(&(0x7f0000000240), 0x0)

7.282524388s ago: executing program 2:
r0 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x924, 0x4)
sendmmsg$inet6(r0, &(0x7f00000009c0)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x0, @local}, 0x1c, 0x0}}], 0x1, 0x4040000)

7.145767626s ago: executing program 2:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f000000c380)='/proc/keys\x00', 0x0, 0x0)
read$FUSE(r0, &(0x7f00000001c0)={0x2020, 0x0, 0x0, <r1=>0x0}, 0x2020)
syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000005b00)=ANY=[@ANYBLOB='nonumtail=0,quiet,uni_xlate=1,uni_xlate=1,nonumtail=1,fmask=01777777777777777777777,utf8=1,rodir,utf8=1,uid=', @ANYRESHEX=r1, @ANYBLOB="2c756e695f786c6174653d312c756e695f786c6174653d312c71756965742c646973636172642c73686f72746e616d653d6d6978656400008d93c3891882b2a1dacab425ab8a7efb02c90a71ca86bbb1f98970461441cd215e5390a67a5b88c87f75a69213cd285da44c349d7126fe160f379b025022eaa1707cf6a4dc3076d0f1ea17842906c5939c5b560b0e63e92cda4f461a125f816e05029dc5c7c5a456ff9bbb78b845379321793bfabc53528ef323d2e5945b6cfd7fa9c372bb000040008d6a2d0ce0"], 0x6, 0x2a5, &(0x7f00000035c0)="$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")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
open_by_handle_at(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="0c0000000100000002"], 0x0)

6.929823988s ago: executing program 2:
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = epoll_create1(0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000045c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001b40)=[@cred={{0x1c}}], 0x20}}], 0x1, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000080)={0x30000004})
sendmmsg$unix(r1, &(0x7f00000bd000), 0x492492492492846, 0x0)
fcntl$setstatus(r1, 0x4, 0x2400)
connect$unix(r0, &(0x7f00000002c0)=@file={0x0, './file0\x00'}, 0x6e)
epoll_pwait2(r2, &(0x7f0000001d00)=[{}], 0x1, 0x0, 0x0, 0x0)

6.825478089s ago: executing program 0:
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8001c00180081064e81f782db44b9b545c791", 0x13}], 0x1}, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b90402", 0x11}], 0x1}, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x33fe0)

6.661210178s ago: executing program 0:
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000003e7100000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000009c0)={r1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

6.490309934s ago: executing program 0:
write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYBLOB="8fcacb7907051175f37538e486dd6300800701082c00db5b686158bbcfe8875a060300000023000000000000000000000000ac1414aa"], 0xfdef)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x1, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000800)={{r1}, 0x0, 0x0}, 0x20)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r2)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0))
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd6372ce22fdb932"], 0xfdef)

6.185682418s ago: executing program 1:
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xb7}, [@ldst={0x6, 0x2}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x39}, 0x4d)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
r3 = socket$netlink(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000680)={<r4=>0xffffffffffffffff})
ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000100)={'wg2\x00', <r5=>0x0})
sendmsg$ETHTOOL_MSG_CHANNELS_SET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="011f00000000000000000d0000000c00018008000100", @ANYRES32=r5], 0x20}}, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmmsg$unix(r7, &(0x7f0000004080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r6], 0x18}}], 0x1, 0x0)
r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000035c30018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r8}, &(0x7f00000004c0), &(0x7f0000000500)}, 0x20)
sendmmsg$unix(r7, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r6], 0x18}}], 0x1, 0x0)
r10 = dup3(r7, r6, 0x0)
connect$unix(r10, &(0x7f0000000100)=@abs={0x1}, 0x6e)
getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000080)={@rand_addr, <r11=>0x0}, &(0x7f00000000c0)=0x14)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wg1\x00', <r12=>0x0})
r13 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00', <r14=>0x0})
sendmsg$nl_route(r13, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="640000001400010000000000000000000a3800fe", @ANYRES32=r14, @ANYBLOB="14000200000000000000000000000000000000001400060000000000800300000100000000000000140006"], 0x64}}, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r0, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000140)=[0x0, 0x0], ""/16, <r15=>0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0], 0x0, 0xd3, &(0x7f0000000200)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000240), &(0x7f0000000280), 0x8, 0x53, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'ip_vti0\x00', <r16=>0x0})
r17 = socket$nl_route(0x10, 0x3, 0x0)
r18 = socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$sock_SIOCGIFINDEX(r18, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', <r19=>0x0})
sendmsg$nl_route(r17, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x409, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r19}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x14, 0x5, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8}, @IFLA_GRE_OKEY={0x8}]}}}]}, 0x44}}, 0x0)
sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000480)={0x124, r2, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r19}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x20014000}, 0x0)

5.791961754s ago: executing program 2:
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
ioctl$int_in(r0, 0x5421, &(0x7f0000000080)=0x7fff)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4)
connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @dev}, 0x10)
close(r0)

1.84596998s ago: executing program 3:
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
fcntl$lock(r0, 0x5, &(0x7f0000000040))

1.77882638s ago: executing program 3:
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
pipe2(0x0, 0x0)
socket$igmp(0x2, 0x3, 0x2)
getsockopt$ARPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x0)
socketpair(0x1, 0x80001, 0x0, &(0x7f0000000000))
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020100008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000280)='jbd2_update_log_tail\x00', r6}, 0x10)
ioctl$TUNSETOFFLOAD(r5, 0x40086607, 0x20001419)

798.068863ms ago: executing program 3:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x0, @loopback}], 0x1c)
listen(r0, 0xfffffffc)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x14)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x0, @loopback}]}, &(0x7f00000002c0)=0x10)

426.766558ms ago: executing program 3:
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x50}, @printk={@i, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000000)='GPL\x00'}, 0xd3)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f00000001c0)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

377.28598ms ago: executing program 3:
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x1ffe, 0x5}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000400000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r1}, 0x10)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0)
syz_fuse_handle_req(r2, &(0x7f00000080c0)="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", 0x2000, &(0x7f0000000a80)={&(0x7f0000000180)={0x50}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r2, &(0x7f000000c0c0)="970b180393e57da0084004606e0f7eb55b4379b678ec58dd5832867fc4741e325499108ee901f5ade42a10a2a5ca59b706328aca067422dcda816a63687f6b445fdf7c8c4c158921aab593be18f8f3e3a72a3c634c089c468f2afa55a47fcb36c8ec931a3b8e995ca8f9da378136eee8d00878a33e262e3718e8829586fb5a3bdd2143ea5a880a6322892369f494dd40593794a88b4f0e69dfc3d573117dc27d511cb0b7e7d1c13dac381d4472cb9eba0637c9611565d496c7a6936582144f524085bf34af3a90ac0a0db2f79a423fa8b797909b65b72ee23068ebf92a9ae53fdeca4a47ec6838e363039c63988cf6f4f393f907cff08e13520751cfa3bfeb452f120d8a5f462b040f8537f7add203eb2b2f5784376b4e0d85c027c4e0d5817ce1db986581a147a5c7e820212907992afff07f13a43b2a2c23e6f61d7bdafdea1d396e0fa1e79afd07195dfdab53cbe75d4b96971caef941b69525b87d59fcb99bfb348a12236968f9dacbfbdc4d9b0b01df755ba3b6c320a29e5bc23bd6b20f3b27dc3d63d2d2ef11865347c5ca1504ded5d549e17e1194d717c79bc330ebfc3929d079152f51f3ab9701a3241c7df4130027ca1a6d0e6b5f2f2c3b659cbea4cef19728b45f1325e04151af66111cabddafa17b90f193c52d1c4fb646f99fd42d77a3f16c05a491a775962a2a4ee9f9f6c1a5eaa68305a88add9d6f35815f37cadae92293a0db1613662f145991ba5fd632c4a170588f8265e11b3e1a4ff2b17f3664b98d9c6f54a356f19a9b72175e7eb46ff4330812993886cd7b42ffdc3767a4ac16dd21d76417b70cfe97ad6ad0ddea7284d0e3ecf0c6c6b57833f65963f3764e297c994e0181bbf693c8fc0e57fc15b2ad776a00c19a805a906ffa80efa4116d5f5c9863a74bb340008d958db841c5f1e3b286afac717ceabcc7310e75e45b61215f6ba0bb496bd5e094b6139326758c1d81b176e11da5eda522f05346e1a71a6358b4c9b7653a66ae7153858fac4695d64fe2962b0d62d6d8aac14cf9cd2199fb039b54b64f5085434b2339f90bc11f2e407a6e84557de9a7a7edcc3b15a7798cbc68c1b1e1a822103bd43b656e933bfe886736a2bda6ccb228a8e4fae5956673db0105999017d8b68159f7a9480fd2ca70bb7e9fbc8f4f1c3581b1f528c8fb5b5d6beb769dd5e9650739f3cfcb61ab7b066c342a6c6886b0bd83f399e3eb74d2cafce7fc76febe624a37e185924afa8695caa7d3c1a97fd6684979ef33957a334fbf10c7a9bba18397082580df2425129a87c4868d41d1bcda8a7faaf1afd492cb4c83b7c5ce7a950f92186cc07bf27dcf58ac56506f2453399070ae8e5b009e40eb1970bbe8a1c9f3befb54255602bd191bd46c56c0fda2842462c0b68884f9a922d2a8b161aa9ca2c0c52bcfa26b7b7a152f2ccd16ec4974361f7322dc3b345e926e1a1b56200dc425e2e03c3d7194f9cbd321e10de387adf9790a5706bcf05d9b8c16e40e5633c44553c2aa8611f7656fc732b5dfce1eaf212d2521eb013fcf154d251553ba7a6a1f7ba8b7ceb3a1df621376543a451fe76671beaab4833f1be28247919c7cdf4177e2c9cca78ce52b5a7e4dde913dd8b13ce861bbf7048822041f4b29b3441b4880a8f7a4a289ad3c6258494e7736e48373408d248c3b033372ebdb3d9a406869445b5d956434a576b83d4a7e7b47ae8c69f50be20ea56f171e592e114602ed4f47e86dc34008770940adb4f0167811c474ada06693b55f567cc3201f97c08a3711dca486a86c367f59ce44259c1d71cdb135aa8630c4cae61ad07998a2f781ff87c946e8aef9bde6d4738bc009fc43fd176bc38756a0ca48c382395b48bc55da32892551ecdd0bd3f4c69a79bbe600f4103f21e443821492b92516833b231942e91a39e7401a42ba3e99a3a2fefa6167365b9050305b6f09a013f41e764a80f422cce051e5b30ba6528540ee5d4ea5872572c85f321b68e730f40f64b648be31a9e530718ec17443a1a4dcdb79cf799cfa75d0bfa0fde71828d8f51e38dc3d1d77430ceed007426f689d5843c34afdec5dde3e480a36ffa25db4b3483cde91e56eee8756dd953a3abff11bd7901d6b37c8371b023d7457361908576f92990f19e9f48dc58ca550e61a035161f1539b14b7bcce535b3a3783021094129f312c03e51df62579ae9423927021e8bcf530116f3658a1e94d39a800452f7461d2f001f86b911a8a14b9e61c2fd8f959ea40793df240aed5e5862ea59d78fb235788c1ba3c0ec44fbefc29c2e6f22d70849750625c3c15227579d42858b5fac30bbe86491697cec1c4543addc1f50202fdf77a6d2d23e70ed611a63368694e459012ebdbe71c4f702980d7ae63aaee33d5f8df5fce071c73cd918991c6ba2f95f33a9917a22c9e7342dd492c9e2c2f6457c3a48f35edc1720f2224f2af2ef4c0a38b75ce27aae5d5ef615920ab9245851590cdcdcfaa7e5a66b73f5a0a1bcf1bab66ecdfc0dcbd8cebb1b98f6256cea6761c835a761819018fd9c3d2f541eba25abde06f1551328800b1efc04d8e10594dbe95f9f10005cae8c5b27cc18268ebaa4578f9dcfa99aa61567a55b43545ec729764af99d224cfea6a36a93d4f70bae3225256e179e81a0c64dffce9c2141994253af664c33f881aa417fa3b7e9424f1841f1aa845ea0fe05c4e47b318bef60709d6f20c9eee6e8c0c18bd161d3dbe57d82903937e10c41aa9066dcee124354584232afdcb60d185bc39fcc5e7e5124d17e2f998b64836b587cf233469b92af65a70f4a8f35df9e24c7d5d21bda27ae44ce6706f86d3747db675aa329e8b43652bb1e89687dd003dd7924d300f498d444639b3fd413840cfa958e436e5959e95486161af807cbb7304d99284818eabe39493c66664e92143ff41602a3805369f461abeae5e5b6987a20fa47495cbeeeb322c848147dd9a052384a49898138557e10eb015df370d01977083ad24c7defc8c80583d5f5eca20d0853afb9f41c356f8da0e2435d423528f67f091fc614645980a57ed893ded1c3d37881b243b8a5503f45672492f3849895c9377277a91e7090241832629032872294896107628ffd1151c444153f54b484fa3e5ca057cbe073e6039c11b1eceaf7e20eef2576aa99e7a3f36aed9beb089af28d82e2dc5e97da4878b76b5224e1d293f5223c09f715fba13945695a98624eade1381e31c5651069805e6f707811586f5f81e431e8624a608ba1ab405d2593b1f9f667b89d82e60048e4ef3be98bd3078beb4e5e66e8823c8b427d6f84468f1f18f1ff8a8c11515426993334bcbe0c3ba37b91be07eb800fb2e00a24351457d8fc067b4bfec43c0ce8cd26b23bfbb27d3da7bca3efb7fe6f7715760eda4e3a27a7be7419b803667ef6057bdd5d44250b47fa156af04db91fc57f25425b3cfbaf90a840fe5cfcefcd1500cf4908ec4df10c8bc14ec284bb99b13a8f6136e5e1c669806cb5a4a5227f7952c5b605a2b443866fae399a1f8fea323784935c3e5a9ba9e831749efc9b8228421bdb91afed16341962535cebf6fb02679e5412f67db405c90e218789b634d92a41aaf528c92b8bf38b629a1797c036465b77dc3bb124bdddd309136681d3fbe0251698da27c6f89589171e4492209f7eb48d50a161a5135602fca3355f8934f879c54afb91224901b635ed372fdacc9469471225d2ef3c980466027b86cfe3d664071edaa29b47455064a074da56f4e098ddf27984dac546826aed38e464d5c5a79a3ece544cdb3801de0e29bf5164dbcc14578e3e6c44a4a9041e2315f1243358c5949377352911e0a67c6de7e11b0881af528fe478c34909a1178a8a4f7fb727317e4f3981706d9c9215224604c2d6a4faeefc21bd635c8412931ac4feb2c60666672fb6dc5deda0d6c4ce31f2b6cb45907427691488abb280c3fd001f3d7507c0db358af7151d3b8e2e98eb8a78ee69966f7a1307882c5b57530e0dab5c57f84852c42db013e3448da2fb0a754ed97c001f33cca549eb71d7aef88d1ae7fac0d96f334556d75f600a029ed698ce9e4302279999726a57337b9afda0b0292c14d1687a85326120d9fcd84cdc02718f26c12ca28cac81af0dede79685233be41c7269c57100c603a4f9536f757fa753353bd0cded7d4edab29dff6f7dd5faa81078c263c9d1d7e662a0ffae22d8d12e679de9ec6c634ba46ddf6aa86ac0be41cabd9b14fd12107ffce96915fa0154f5b6017fa866d14ff47754a58ba14c1a3eb3f23f040779a788b774604c3a8a7dd818619352cf47849eebfdd3b49b56f376044e7cb218759059fa85057f96c159ccd63ea6cd0bf47781c2d023411854dd3ea46f4913cda9672655e566d2e83fe2e0eb5476bd6fd7a84557e37a4e8d32c75ab51dbffc59f0cebc3edeb395f38f82765ed3cfdce75b2fd570e783c8c3afb31049383af0b51575e5c9dd9332bde6f684a3e11d199f43004439ed535a20c7f2a695cf9b547985421ac62c2289c71491f0617d23cb7a9466c8f0482eb2e8aa782118702761e0267ef500afc52f4a3a7a53ef22aea542f679dc5c751c766e06af453576689c87b3b89c091e5444ff6fb1472fbd271fffb268a2eada125d7acfc70c8ff4cfd3f5421941c2857e54ed0617d6430b806d605c2e508cd5a7764d6ecdc69dbd050a97f8696535585bbb95b66f751566ce612aebce9a0b021f9fbf067870fe447dd05e8c521413e7f27955db3b8239836b6ad120f5fb48e9003bd19b05f94752743d89bdc5492c2ca1bc3133fe0ceb29451900e2ac713cf2cbc3a531048a473a195ad40c685b539f806f434c9e2cb6a8a25df84d41c13d1ceb90de1a3efecd06a53ac9a32654d1ece86dcf6fa17ea6a4f367f9b360b3e26514bf94af1f52d9c0b0691241e3c6c302e7054bb738cb234019c0e45a7db270ab9d75df73568f25579d33e7b42743c924b1f888df85c6166228f5391962b689f0a4d9683b43ddc98982a820b5c60d9c4e3997cd2212fc3850b2bd41342ccbefc1e4ec2ad7ae285f156f4a4f383281018c73ca4f2e9d255487a9717dd39cd744a000c68c53f82a22a08bcb734b5bbb8364180991140c2e727dfce4b19e70c968c97393b56019ef84688772d488b9bd6fa9354ab64f731e6adab543851e5ca1470fd13d0334ba025b57db5d9ea13c970642726284fefddab8fdf7155f5b8e3b3b86d098c4207b428bffcc7ff76f6397b6a3efc3c0b0fb2a4343b4051271f87e384c2b659086ba668c66a15d68b87faf82a60b184f27256e36a9ada7c4422754be56dbbab50ed781f36e40ded65a30378003de5b5cd5f80a6042613c76e80851312c7ed2c07b762b85a1b6928a7b2428d2bc7a6bfdfa2ba55aed54fd3c878ec655caf1223245433b7c6fc2a2d3b0393d7ba4e12f26a53b9d5afdbab230b9148f061df2e1c0fe73c2abcd142125367fa5e598e500263d9b27e759c08b7debee4695a5b192d968108c134241f236cae0434ed71e5099cd466cfb04d5f7cef2e94683172f82a9841610cb6fe55d4bfe73920992bb76f362b9cf7919c906495d4b37a915d23168fd7ffc2f36de55a1b17fa2232df03663ffa2a4c5e76aad90fd5abc80b6dfc16ec6aa328cc7714dc2d7bb14aae9f86c999e93a59fd18fb2300539bca25e69b04943a16c985ff481a42c9d8af43eb61ef7432b8e3aa5bc391c181b7d546b94ac659bc4b501157d3adf9d4cda4e298a4e4271fa2cd08919b055eb3f168df76c1f0b0d5cf5760b56774f105e51c93cc03ce97b00768b9620a6fd5162b9d9191ac0928d2460e4e821a276680cedb3b8167bc156b48a34d4c24d4a87fd09968a725d4b6a1b54b169f1e14143e97a84cf3d8eb4ec5458dcd5ff93365396c00533c3493847f595725a4f15300183eac306d16ea136b97a9864d16330d8c5b8321a6947caeb9cdc7ff4e53c419518ce9bc11f7355651be27a2c2b9ff4127ad86b96c1b5967def371d5d6a3f365abaca55c5f19600d1d5051d320b065c2f78f2147c170b9153a0eefd7b3f1e637cac3fff14b0eeaf472e6a6a9f7553ed3267c911d4d77a4f7285b77df725b3a88fbfd221343f656d60b61808b52a8facc81b8516698f2ac50cd8769371e67278c59ab1cc890fab36206b939f23b31ab976651ca8a4e7754bb10d03d4cc6506f13d98f2bda76477a69a8794a34614a88a7ec94e1a229ad6f747724a3bfb674cc87ea0dfb610f66057671f664206672e78c00a3f4585f17fc40827d0c8af88d3437f811274f662e9ee73d550833d0c8fde449089f8b5e8a25d25096537ac960699a07ebb51271a8f8556037436307063282febae745d53f8db65f13f24cc2e525ae465c9bf79f76b82dceada3bf34529321f913dd18548ab2a26f2a065028f46f4dfb18294dff30a7e5b131a08c671787baea45545d15629ec2f435d9138e517055cd48af7120b3b79f2275baed8a4b6a0f33c30890105ae2c07a332df79f2fd6767ecc66f1ed628c968a2685813342677a2823d10263958eee79d03e393a557475701694b5ec3dec8773f37b980f5812f1cbaed6e5253da037b5f88ba2070f445d74907679460dd48e16442d345abbd37f7853ec7123ff16db46c8571987db63ed711d36c05c2dafac47ea366f9467624b6296a2b9fb7056702d4ba38b4df72e7db3244421f31aa0911af3e3a09f9e08e96aa1545c37465f990bab4ee2821b1a701aa707db1dc18d52fcede15245f54a5f1a47b0d82c33fa378625d247b08753ac5fa5444b2e3f9d1d3918b154665b02fba87e39d0e27bdf60b27930eee02c31d847d40166544ab9ef801bd79bcc8d93980354021b8c7a1b9592934a90917db115bcd92068a970680011cb074da705f1cd06a0142862a777c6a47afd38721979323e27151c114e8901d41f79358e78289af10134e22d903415e2ebd2edf34ae10eefeec219db7b13ac983583dd4b02dcc615c6f70e6cf35ea216807c4b9c81482c2b941c7d6cd6621d9480ba924a3372ca3e3ca78438b0e9bf7c8436fcc0047b3bdb8d70190076d9feea778005d5d69f1b1194c76dce628e17b6beb299146b25f3f6660263c23dbcd08f70ccb45569a81a140eff66f2190110cf0977d9df7a2c437042961606ca1a378c8f59a310ad6c9cb4ff30a2d55411eeb38d927bb4d0f60ae75d90ab78dad14097f6dd38f512af2f932e1ad6a5e201180373689981f23bd9f59e4ca29244a8ea4236527fe2249eaa299af174f25b13d72b181c2f421652ece630ee1358098c29f84506654ffad3647792852a7faf107e36ae330886ffcef6e3a1725495e430568a9cd85d385e5a15d2f77ed274be3c8edfc52c230d21785b927bb8e470f989e8c89b01af8d04fc7050fc978013fbc5dcedd2baf5e8bfa8e2e1d3f193c224375db2f71d4655d2f647e9b1739657a0ad8ef6751a88151a3413ab870e0d7ba3f0a55ce3f30d55e8eb9e47e3d82563d9180399e7895490b8561a374acf5c94a1c648fa06780c4141c58ed913fb92865d3b4883301ba69b3f2b20c1f82024bd75e62ce2972d3219bdb961ab3bbac8f1d873ddece6d85f540f82c9d79b0937973335fe05e5c6ad8fcc525620a57678d58c7c2f0f157e030736d0fe4f6de520b390794cefdc6c828b4512fb6b2000d08e38693fa22834e69180d31b3978f9da75389f919a0d49ff961997d14ae6bdffcfb179c2ead52c69dae97416eef2602843dcbe4e5ae613d429feef7ffba6a31a8be8bf2e62c6d374c807363a986519a8cf9dfc99fc6607486e10599ae415b51e23f639194885e5119036e0e535accb4f126b4c45c47a53658af1e049daa2967b01d9450625d92f8f8e9d151633646044fcc5f6ad835479d48702839456decf070c7e6143cd31033810bd7da01c4a2cfb08605b25c00336f17d3b5a3db48866ef864b8d9cea9530429d3fb1afc7ae9e7d06aea9034db89b2ec8fc2a96d8d701fc51994305077dbea527bc0fc398b6bb7d42f0c408be69b98eb173d285fd8010ba75c57f2dd982582153814ff959fccc78aa5f7901357f6129f840af6649534f9ebc7750a20502a7cbf2d2f28c6f97884f43779bbbf93c550f8e79949db0e066538456b4e966761656eb7bebd5afe9b9fc241711b874682b226e9c6baecc1e909858e01b32472f6f8d483c073d3b576a4b03534dc4b620e21e6feb4bb2ddb37e3f0d4ff92c0af19e6087034c72c5928707748bc10ea22788bd938a0e6512cae4733fc1a2e47f3d4961932fe564684872922b44db143bea77580b0704675290e0839cb5ee529ada8b4c0bb14f05c5c396e29376f1ea80dea2852a88ddf8929fd402571fb242ead60d2be61f1662e1a833969e18e23e0b808900e7ed4be9d6944942da7d384739da1055cddc94937e1ea4cd305bf161c407b471df0ce3fb3413c5bd511d3c65e70edeb5397b0a8701538be7d2f1765688cbb0379744281231e60f5edcbfa6abd177405c455f77e30b95011ae4fda2a3c6d3f9a29bfe7656f6afba48358d57b4e1a84ebca241b7a427c6f806d1f771b540912f05a6df0d5223f85639fd7c163799e28abd08e4013aa43ddbc11ccc9d53131ec5c75f7682481968ad13ef34ba23d4759b51c4cac5a7ca2c73b3103c5b9e4b8686b872edcaca791d669589655e239920fc088eeced3a131ddff2eee9fab3cced40163eebfb29a85b3e97bbd97d17c3b06d3123409f115cf3e3d1c74dcc359664ab942e6ab36c41b1af4015ff5baf700eb99abd658e6833039051a235a2f84b70cb8d90271a481ce40e2a18bef8dcf7f54952b090bbaaaad391cb6cfa218a1e823ca7b16311e35e0350dd8016f67ed34771d7f3a607c1c9ed63524ea0c865148b05f1d017e475641b5076df632b7c261ef54c23eaf7cf52c22864a8ae8f8c3442d147fd52a801f87665b47e229a77b8e85c21d7996c7de9ac4899b098380f74eff119369c81b21b0b916017d0b604ca2a74b1424a4c3132d265d12a01ec2e8cff9809ed2f7891c55bc5cb932c6ea3cdba14cef47a2a0521e36869e9d62914447c3e6cf3da9ecaed915dec41e81605a46a4ec71a8b5ec0bc2f62b3237de7203e4b6d01bc32a5b2dc416623936a324b73e0c63ec414ce1bb4b344db85f014979ae866c4a2c2cce0f814862c0691883dd2d7bcd63fdf2ddf0cb2c6a1a10aa878ba997b74db8e894e4a7ed5e8ea1e3c0b602bae23c6c8c5f38b919aeef5625501fe5d4759c43e90de56122f3ecf87e8023f25e0d3ce64ab629409e881d2d1c5f083da90d45907e62ce3177f7982e514779a13f70bc207d9aa55835e37a5f4782242681ff46600ac9e63f90a245957440987b54b3678ae808c481d25755dba747cd7c3cc0fafb9a142e1ec1a9a5f81b5cdd6dbbc3a4ba5d49f58be6196c305e2af35fdbfbbae02cc4efe771d65e6000ec3f6cf394650f5144308c95279b9df3b29236a32ad3e9cd377296a4252e7dda1bb95d99c32cb81d970de4ff47760ee087dd2fa98392c8ede48391b49cd40e314adb896f0f5b08ffcdffdd70775160144552b13edfac23a09d53a4a4a827a1f216b2827cb9fb47a9fe6412d509d35b754d3700cc0dc8d7a3406a53bd1b0ee5112c50fb8f805be52a6c4e1e664d174727f33720bb371fbe9adc747a234013fcaadbce5cd2d416414b1900074e3ec73a36f32f9d7baa96ed4ea37aea560df4d9c724c69b440139a6dc1758bc74b59c521bc59958da71c4e5c23e4a8999305d989369a9bcd10f0faa789f4040950c349ef0ee910a822ba8df4a6cc16bd72dfb85d7c9a97911e96541a7fb6fb4711cdfe1e1083b2e8e870e2d2a7304f99296a496fe30553971b75f78ace054a8e3c6d54d40b2dbb2ee38a6244139fcba31b88a3ce91d637e7c88db35794002ca28533a46af85929f603e4cf4f5aea715ac4495d2c07e8bf79da078521fac5059dfe6dff61405fb6962987d15a2c7b27a851e3076803c7b4374a85f05b96e9bae91656a003e9acad767c9ac88b339fd868136b63fcb0520a2ee2f25128c8b97a0d43d60be7436756614108cfee63fb0fd65cce0bb0afcf5ea7fa817134c876c949945642a29d71aab10d05522b4b1788bb051ae1ad23fc7e75607580f9bfb7ed901a66d69e79ba742ba169f7e0d36d0c8482d3a85d66a9fc08b3e4c1669ffb4f74f418d4317fbf03b785859601b9e3af056b6a2543289738fe1e601e635ff04d750f8724bdebbbc920a7ca2f99cdaff265299bef09a2e20878682f2f37e46b5d2d3ade8d857ec6d3f7a2779080a5927749086b33b22def28633d53dae49362b4c4d47d2899562a52f22618a45998233048f0e54ba01dd53953c9f508abcb0acb1c1fb1d110e5d6c14d707713cea4cf0403b7573ab5b0a1439e6b2d29c46a3077e0dd296ca751db66f829a42c5afe0304c48fbef52c526c8f2100f6826fd4a5295f7492855f841fdb1f8487fba63b6db19af983a75468ad29a2b6cc58f9ef2dfeec8d798d60e1950731e65c5e2ec1065a22915a30845a5f87a26c067ea870d4e1ef71f67617906080b7b122b8ac9e4da1b05442b5477ee97343cb20f2587744abfa5f318ce29cbd24df1a6dbd42470789e17ae8115a588788d910a171b88dd1b94228728bfef3b28b2b32f523d603fa28d00cf23b0a201658f28ef7920f36a0da8917068a4435e0d710d320258114e2fcde2e1dec0c9faac26d671ea3735ee2b26cb644ba56ced9031cdd2b391c4b96aee7a4c38063e61dbd8ada24cea7ced0728a365bc2320eda9746823b7d83afdc8b3b293b56739011554000aec6272004a002328f20368c0902b8a8d251afebfb4d7b427cfa8927385626a474e3918ff557c8f19a8691011523a63c7e578b98c8951157f0763db3ebc4ea24388527e83b149ef89d4173ebb1c0c9aa3cf4e1a47faa3ebe7ca625e7ef077b38235781236797360696e552b9289a80491d4c3e70ff00b01540deb0de1b3385549b667cfa3598a34751868a14ccb22a420781452699563b16d0d0f1a7f0ba3f0ff45cc2d2536f1de9e024bbc923cede7725f84bf3e6a645f43c4ab3db6ddff671f283857262570b6652dbd8c869ca6a3896b870235047db08a54e5c39d7516c4b0d621d87a9c3e8c53249ff2ab9145f026ba4743a46197af56a0df022363ed59a5c2011e664a05fb952d5ad9ee2037c59a4075e4b504d91e87d303e0bc55cccaeb17e1cbab6176d2d148ce05fe986c79eb843886194f80e202c4f373244b38fd46643c1bc0fa8723ac498c71919e4ed8e5092832aec00a35ceeca94df7bd2c0c02dabc886cedf1fd044db2b45c30f8c0334c992eed40290baaeeb4d00e2cb504ca1173b6b6eec8d2aa3a1bf46e64c1ae1b3ca2882545729fe78d5e1e99c6f1f31c0b0f2190889c7318ce7605128a86c62c8a1fa107304c4609e28a2a43c6799ff6a7d70909ee10676801ee670004cf9632e34cb8cfb43d2f477ad335f5142da0baa4f4542dc93704e93a3420ec50284626fe36618b079d0db013d691583aba257947bdb1514d0318180ae43d0f94712f5c0de35f3e342ce7da65f755761506b9bfd186641fdbd03d5a2d4fe170fe23af8", 0x2000, &(0x7f0000001e40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

224.796953ms ago: executing program 3:
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f00000004c0)='./file0\x00', 0x2010840, &(0x7f0000002200)=ANY=[@ANYBLOB="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"], 0x7e, 0x61d5, &(0x7f00000077c0)="$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")

159.611358ms ago: executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000080)={'wpan0\x00', <r4=>0x0})
sendmsg$IEEE802154_LLSEC_DEL_KEY(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000000c0)={0x24, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}]}, 0x86}}, 0x0)

97.712779ms ago: executing program 0:
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @loopback}]}, &(0x7f00000002c0)=0x10)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in={{0x2, 0x4e20, @loopback}}, 0x0, 0x0, 0x7ff, 0x0, 0xb4}, 0x9c)

52.939961ms ago: executing program 1:
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
r1 = dup(r0)
r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}})

0s ago: executing program 2:
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
dup2(r1, r0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000003800)=ANY=[@ANYBLOB="1800000000001811300000000000003a4000000089290db1ed289b552bd84b9868bb60962dae92365a959d3a17617703f3726b11a08d760a31a1d02e09ee3151796e30607f2fa69f1920da00000000010000080600a3f6641eeef9f4d9dd2b674d6c12b7ff1e0de5fe414e5925dfbdf0cc5c8fd80a4a64bd2cb6a4389e854fce20611fe0f5d567078afdef7f00056b199f9044924c016584e342bccf301a3fec5dd8598d5a7f9dc0e1dac1", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa247c8d21a47f02d130000cfffffffb703000018000000b7040000000000008500000001000000956e0cb65d51066320fcf6ecfb"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r3 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000140)=0x4565, 0x4)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'syz_tun\x00'})
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x80)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
close(r4)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={<r5=>0xffffffffffffffff})
write$binfmt_elf64(r5, &(0x7f0000000200)=ANY=[], 0x10132)
creat(&(0x7f0000000000)='./file0\x00', 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0)
open$dir(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
open$dir(&(0x7f0000000180)='./file0\x00', 0x101041, 0x0)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000480), 0x10)
preadv2(0xffffffffffffffff, &(0x7f0000003780)=[{&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000000400)=""/14, 0xe}, {&(0x7f0000001680)=""/4096, 0x1000}, {&(0x7f0000002680)=""/4096, 0x1000}, {&(0x7f0000003680)=""/246, 0xf6}], 0x5, 0xff, 0x7f, 0x6)
sched_setaffinity(0x0, 0x8, &(0x7f00000003c0)=0xae)
r6 = timerfd_create(0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0xc0802, 0x94)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r7, 0x800448d2, &(0x7f0000000000)="05")
readv(r6, &(0x7f0000000640)=[{&(0x7f0000000140)=""/168, 0xa8}], 0x1)
open(&(0x7f0000000300)='./file0\x00', 0x980, 0x81)
timerfd_settime(r6, 0x3, &(0x7f0000000440)={{0x0, 0x989680}}, 0x0)
clock_adjtime(0x0, &(0x7f0000000040)={0xd54, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000})

kernel console output (not intermixed with test programs):

 value for 'fd'
[  361.620452][   T29] audit: type=1804 audit(1717417777.350:2495): pid=10655 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir406896717/syzkaller.geEM1G/1/file0" dev="sda1" ino=1964 res=1 errno=0
[  361.716610][   T45] usb 4-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd
[  361.727939][   T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  361.737190][   T45] usb 4-1: Product: syz
[  361.741856][   T45] usb 4-1: Manufacturer: syz
[  361.746761][   T45] usb 4-1: SerialNumber: syz
[  361.760117][   T45] usb 4-1: config 0 descriptor??
[  361.821032][ T5111] Bluetooth: hci5: urb ffff8880626b2b00 submission failed (2)
[  361.999615][ T5154] usb 4-1: USB disconnect, device number 9
[  362.340774][ T5111] Bluetooth: hci3: command tx timeout
[  362.758380][T10686] random: crng reseeded on system resumption
[  362.788951][ T5097] usb 2-1: new full-speed USB device number 5 using dummy_hcd
[  363.011029][ T5097] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64
[  363.029610][ T5097] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  363.046682][ T5097] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  363.076367][T10677] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  363.085326][T10677] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  363.314628][  T783] usb 2-1: USB disconnect, device number 5
[  364.056583][T10711] loop1: detected capacity change from 0 to 1024
[  364.064173][T10692] loop3: detected capacity change from 0 to 32768
[  364.093562][T10692] XFS: ikeep mount option is deprecated.
[  364.105267][T10711] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003]
[  364.118913][T10711] System zones: 0-1, 3-36
[  364.137386][T10711] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  364.191368][T10692] XFS (loop3): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  364.271705][T10692] XFS (loop3): Ending clean mount
[  364.274360][ T9667] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  364.314502][T10692] XFS (loop3): Quotacheck needed: Please wait.
[  364.447575][T10692] XFS (loop3): Quotacheck: Done.
[  364.550253][T10737] random: crng reseeded on system resumption
[  365.025653][ T8810] XFS (loop3): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  365.032034][T10747] loop4: detected capacity change from 0 to 1024
[  365.042312][T10748] loop2: detected capacity change from 0 to 8
[  365.069279][T10748] unable to read xattr id index table
[  365.244423][T10747] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003]
[  365.288818][T10747] System zones: 0-1, 3-36
[  365.301047][   T51] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  365.348075][T10747] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  365.555367][T10751] loop2: detected capacity change from 0 to 128
[  365.647521][T10751] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  365.677851][ T8565] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  365.679062][T10751] ext4 filesystem being mounted at /root/syzkaller-testdir3040661401/syzkaller.Jxud9v/242/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  365.751133][T10756] loop1: detected capacity change from 0 to 2048
[  365.855762][   T51] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  366.077118][   T51] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  366.080198][ T7193] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  366.251957][   T51] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  366.481653][ T5101] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  366.498431][ T5101] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  366.514749][ T5101] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  366.527048][ T5101] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  366.539628][ T5101] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  366.550114][ T5101] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  366.663034][T10782] loop4: detected capacity change from 0 to 1024
[  366.671663][T10782] EXT4-fs: Ignoring removed orlov option
[  366.745532][T10782] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  367.127773][ T8565] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  367.801083][ T5191] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  367.852240][T10812] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.2'.
[  367.863511][T10812] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[  368.013959][ T5191] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  368.040277][ T5191] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  368.056698][ T5191] usb 5-1: Product: syz
[  368.062822][ T5191] usb 5-1: Manufacturer: syz
[  368.067777][ T5191] usb 5-1: SerialNumber: syz
[  368.095570][ T5191] usb 5-1: config 0 descriptor??
[  368.325984][ T5154] usb 5-1: USB disconnect, device number 13
[  368.461933][   T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  368.521882][   T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  368.574513][   T51] bond0 (unregistering): Released all slaves
[  368.669685][ T5101] Bluetooth: hci1: command tx timeout
[  369.343410][T10839] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  369.385353][   T51] hsr_slave_0: left promiscuous mode
[  369.406170][   T51] hsr_slave_1: left promiscuous mode
[  369.425320][   T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  369.445429][   T51] batman_adv: batadv0: Removing interface: batadv_slave_0
[  369.506153][   T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  369.528799][   T51] batman_adv: batadv0: Removing interface: batadv_slave_1
[  369.659663][   T51] veth1_macvtap: left promiscuous mode
[  369.680868][   T51] veth0_macvtap: left promiscuous mode
[  369.698164][   T51] veth1_vlan: left promiscuous mode
[  369.710703][   T51] veth0_vlan: left promiscuous mode
[  369.842789][T10844] loop4: detected capacity change from 0 to 2048
[  369.913072][T10845] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  370.157133][T10834] loop2: detected capacity change from 0 to 32768
[  370.748871][ T5101] Bluetooth: hci1: command tx timeout
[  371.640513][T10863] loop2: detected capacity change from 0 to 128
[  371.726069][T10863] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.2'.
[  371.740552][T10863] openvswitch: netlink: Tunnel attr 15539 out of range max 16
[  371.891426][ T5191] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  372.088719][ T5191] usb 5-1: Using ep0 maxpacket: 32
[  372.100330][ T5191] usb 5-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=c3.cc
[  372.110359][ T5191] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  372.118822][ T5191] usb 5-1: Product: syz
[  372.123332][ T5191] usb 5-1: Manufacturer: syz
[  372.128275][ T5191] usb 5-1: SerialNumber: syz
[  372.137106][ T5191] usb 5-1: config 0 descriptor??
[  372.150942][ T5191] keyspan 5-1:0.0: Keyspan 2 port adapter converter detected
[  372.159024][ T5191] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 87
[  372.173773][ T5191] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 7
[  372.183230][ T5191] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 81
[  372.191338][ T5191] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 1
[  372.199392][ T5191] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 2
[  372.207389][ T5191] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 85
[  372.215561][ T5191] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 5
[  372.230192][ T5191] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  372.240283][ T5191] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 83
[  372.242905][   T51] team0 (unregistering): Port device team_slave_1 removed
[  372.248245][ T5191] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 3
[  372.263988][ T5191] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 4
[  372.274044][ T5191] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 86
[  372.282193][ T5191] keyspan 5-1:0.0: found no endpoint descriptor for endpoint 6
[  372.294615][ T5191] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  372.356702][   T51] team0 (unregistering): Port device team_slave_0 removed
[  372.818820][ T5101] Bluetooth: hci1: command tx timeout
[  373.004459][T10777] chnl_net:caif_netlink_parms(): no params data found
[  373.041796][ T5154] usb 5-1: USB disconnect, device number 14
[  373.071145][ T5154] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  373.156455][ T5154] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  373.178262][ T5154] keyspan 5-1:0.0: device disconnected
[  373.317252][T10884] input: syz1 as /devices/virtual/input/input13
[  374.269567][T10777] bridge0: port 1(bridge_slave_0) entered blocking state
[  374.276736][T10777] bridge0: port 1(bridge_slave_0) entered disabled state
[  374.336469][T10777] bridge_slave_0: entered allmulticast mode
[  374.371934][T10777] bridge_slave_0: entered promiscuous mode
[  374.427983][T10777] bridge0: port 2(bridge_slave_1) entered blocking state
[  374.450027][T10777] bridge0: port 2(bridge_slave_1) entered disabled state
[  374.457307][T10777] bridge_slave_1: entered allmulticast mode
[  374.482421][T10777] bridge_slave_1: entered promiscuous mode
[  374.719470][T10777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  374.748223][   T29] audit: type=1326 audit(1717417790.470:2496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10905 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f96f627cee9 code=0x0
[  374.776340][T10777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  374.841939][T10907] loop2: detected capacity change from 0 to 2048
[  374.843269][T10777] team0: Port device team_slave_0 added
[  374.884597][T10777] team0: Port device team_slave_1 added
[  374.900266][ T5101] Bluetooth: hci1: command tx timeout
[  374.921267][T10907] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  374.955524][T10777] batman_adv: batadv0: Adding interface: batadv_slave_0
[  374.963104][T10777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  375.001259][T10777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  375.025644][T10777] batman_adv: batadv0: Adding interface: batadv_slave_1
[  375.045646][T10777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  375.080845][T10777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  375.139353][T10777] hsr_slave_0: entered promiscuous mode
[  375.147055][T10777] hsr_slave_1: entered promiscuous mode
[  375.164711][T10777] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  375.172707][T10777] Cannot create hsr debugfs directory
[  375.204328][T10919] input: syz1 as /devices/virtual/input/input14
[  375.230456][T10921] loop1: detected capacity change from 0 to 256
[  375.274944][T10921] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  375.635295][T10931] netlink: 'syz-executor.1': attribute type 12 has an invalid length.
[  375.644181][T10931] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.1'.
[  376.217950][T10777] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  376.256124][T10777] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  376.275030][ T5101] Bluetooth: hci4: command 0x0406 tx timeout
[  376.321447][T10777] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  376.379813][ T5097] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  376.439737][T10777] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  376.498521][T10950] loop1: detected capacity change from 0 to 256
[  376.534651][T10950] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  376.611146][ T5097] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  376.637748][ T5097] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  376.660798][ T5097] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  376.683984][ T5101] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  376.700285][ T5101] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  376.714221][T10777] 8021q: adding VLAN 0 to HW filter on device bond0
[  376.722374][ T5097] usb 1-1: config 0 descriptor??
[  376.737360][ T5101] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  376.755859][ T5101] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  376.767371][ T5101] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  376.786381][ T5101] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  376.795583][T10929] loop2: detected capacity change from 0 to 40427
[  376.819780][T10777] 8021q: adding VLAN 0 to HW filter on device team0
[  376.839453][T10929] F2FS-fs (loop2): invalid crc value
[  376.861464][ T5154] bridge0: port 1(bridge_slave_0) entered blocking state
[  376.868749][ T5154] bridge0: port 1(bridge_slave_0) entered forwarding state
[  376.891815][T10929] F2FS-fs (loop2): Found nat_bits in checkpoint
[  376.916192][ T5154] bridge0: port 2(bridge_slave_1) entered blocking state
[  376.923419][ T5154] bridge0: port 2(bridge_slave_1) entered forwarding state
[  377.005313][T10777] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  377.014137][T10929] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  377.103048][ T7193] syz-executor.2: attempt to access beyond end of device
[  377.103048][ T7193] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  377.139537][ T5097] keytouch 0003:0926:3333.000C: fixing up Keytouch IEC report descriptor
[  377.164471][ T7193] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  377.184337][ T5097] input: HID 0926:3333 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0926:3333.000C/input/input15
[  377.392299][ T5097] keytouch 0003:0926:3333.000C: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.0-1/input0
[  377.442425][ T5097] usb 1-1: USB disconnect, device number 11
[  377.485638][T10777] 8021q: adding VLAN 0 to HW filter on device batadv0
[  377.517323][T10951] chnl_net:caif_netlink_parms(): no params data found
[  377.620231][ T5154] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  377.631092][T10777] veth0_vlan: entered promiscuous mode
[  377.680942][T10951] bridge0: port 1(bridge_slave_0) entered blocking state
[  377.692829][T10951] bridge0: port 1(bridge_slave_0) entered disabled state
[  377.721830][T10951] bridge_slave_0: entered allmulticast mode
[  377.739647][T10951] bridge_slave_0: entered promiscuous mode
[  377.754073][T10777] veth1_vlan: entered promiscuous mode
[  377.770357][T10951] bridge0: port 2(bridge_slave_1) entered blocking state
[  377.777550][T10951] bridge0: port 2(bridge_slave_1) entered disabled state
[  377.792617][T10951] bridge_slave_1: entered allmulticast mode
[  377.804663][T10951] bridge_slave_1: entered promiscuous mode
[  377.870899][ T5154] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  377.884110][T10976] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[  377.885634][ T5154] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  377.918779][ T5154] usb 2-1: Product: syz
[  377.923097][ T5154] usb 2-1: Manufacturer: syz
[  377.928545][ T5154] usb 2-1: SerialNumber: syz
[  377.939187][T10951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  377.965363][ T5154] usb 2-1: config 0 descriptor??
[  377.975241][T10951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  378.019893][T10980] loop2: detected capacity change from 0 to 1024
[  378.035978][T10980] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  378.094669][T10951] team0: Port device team_slave_0 added
[  378.095606][T10980] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:483: comm syz-executor.2: Invalid block bitmap block 0 in block_group 0
[  378.106796][T10951] team0: Port device team_slave_1 added
[  378.198818][T10980] Quota error (device loop2): write_blk: dquota write failed
[  378.244385][T10777] veth0_macvtap: entered promiscuous mode
[  378.251164][T10980] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  378.275243][    T8] usb 2-1: USB disconnect, device number 6
[  378.285673][T10951] batman_adv: batadv0: Adding interface: batadv_slave_0
[  378.305380][T10980] EXT4-fs error (device loop2): ext4_acquire_dquot:6860: comm syz-executor.2: Failed to acquire dquot type 0
[  378.307212][T10951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  378.343470][    C0] vkms_vblank_simulate: vblank timer overrun
[  378.353432][T10980] EXT4-fs error (device loop2): ext4_free_blocks:6590: comm syz-executor.2: Freeing blocks not in datazone - block = 0, count = 4096
[  378.366604][T10951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  378.401117][T10951] batman_adv: batadv0: Adding interface: batadv_slave_1
[  378.408090][T10951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  378.466155][T10951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  378.468681][T10980] EXT4-fs error (device loop2): ext4_read_inode_bitmap:140: comm syz-executor.2: Invalid inode bitmap blk 0 in block_group 0
[  378.510131][T10777] veth1_macvtap: entered promiscuous mode
[  378.517436][T10980] EXT4-fs error (device loop2) in ext4_free_inode:362: Corrupt filesystem
[  378.528775][   T11] Quota error (device loop2): do_check_range: Getting block 0 out of range 1-8
[  378.542621][T10980] EXT4-fs (loop2): 1 orphan inode deleted
[  378.555613][   T11] EXT4-fs error (device loop2): ext4_release_dquot:6883: comm kworker/u8:0: Failed to release dquot type 0
[  378.558927][T10980] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  378.634234][T10777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  378.668304][T10777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  378.680331][T10777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  378.695227][T10777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  378.712583][T10777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  378.725744][T10777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  378.735986][T10777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  378.747169][T10777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  378.757111][T10777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  378.767922][T10777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  378.782244][T10777] batman_adv: batadv0: Interface activated: batadv_slave_0
[  378.788088][ T7193] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  378.793422][T10777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  378.812393][T10777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  378.824504][T10777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  378.841443][T10777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  378.851590][T10777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  378.862415][T10777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  378.872521][T10777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  378.883660][T10777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  378.893917][T10777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  378.904832][ T5111] Bluetooth: hci4: command tx timeout
[  378.914601][T10777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  378.931987][T10777] batman_adv: batadv0: Interface activated: batadv_slave_1
[  378.951410][T10951] hsr_slave_0: entered promiscuous mode
[  378.958455][T10951] hsr_slave_1: entered promiscuous mode
[  378.965237][T10951] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  378.973198][T10951] Cannot create hsr debugfs directory
[  378.985776][T10777] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  378.994759][T10777] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  379.003816][T10777] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  379.012837][T10777] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  379.069238][   T29] audit: type=1326 audit(1717417794.800:2497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=10992 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f727907cee9 code=0x0
[  379.142831][ T1247] ieee802154 phy0 wpan0: encryption failed: -22
[  379.149780][ T1247] ieee802154 phy1 wpan1: encryption failed: -22
[  379.218320][T10994] loop2: detected capacity change from 0 to 4096
[  379.275068][T10994] NILFS (loop2): invalid segment: Checksum error in segment payload
[  379.285065][T10994] NILFS (loop2): trying rollback from an earlier position
[  379.330887][T10994] NILFS (loop2): recovery complete
[  379.356476][T10996] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  379.448926][ T7669] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  379.471074][ T7669] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  379.631381][T10951] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  379.709235][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  379.731826][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  379.799900][T10951] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  379.934033][T10951] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  380.068685][ T5154] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  380.097830][T11002] loop1: detected capacity change from 0 to 2048
[  380.104776][T10951] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  380.141561][T11002]  loop1: p3 < > p4 < >
[  380.145981][T11002] loop1: partition table partially beyond EOD, truncated
[  380.155245][T11002] loop1: p3 start 4284289 is beyond EOD, truncated
[  380.280933][ T5154] usb 1-1: Using ep0 maxpacket: 32
[  380.313348][ T5154] usb 1-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=c3.cc
[  380.339063][ T5154] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  380.347181][ T5154] usb 1-1: Product: syz
[  380.353307][ T5154] usb 1-1: Manufacturer: syz
[  380.370321][ T5154] usb 1-1: SerialNumber: syz
[  380.386733][ T5154] usb 1-1: config 0 descriptor??
[  380.405906][ T5154] keyspan 1-1:0.0: Keyspan 2 port adapter converter detected
[  380.444861][ T5154] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 87
[  380.452895][ T5154] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 7
[  380.465183][ T5154] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 81
[  380.473739][ T5154] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 1
[  380.473974][T10951] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  380.481385][ T5154] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 2
[  380.481457][ T5154] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 85
[  380.481519][ T5154] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 5
[  380.513121][ T5154] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  380.529431][ T5154] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 83
[  380.537275][ T5154] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 3
[  380.545317][ T5154] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 4
[  380.555753][T10951] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  380.558700][ T5154] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 86
[  380.573926][T10998] loop2: detected capacity change from 0 to 40427
[  380.578685][ T5154] keyspan 1-1:0.0: found no endpoint descriptor for endpoint 6
[  380.612376][T10951] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  380.628968][T10998] F2FS-fs (loop2): invalid crc value
[  380.639769][ T5154] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  380.678866][T10998] F2FS-fs (loop2): Found nat_bits in checkpoint
[  380.679904][T10951] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  380.787720][   T25] usb 1-1: USB disconnect, device number 12
[  380.822398][   T25] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  380.852388][T10998] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  380.852542][   T25] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  380.905977][   T25] keyspan 1-1:0.0: device disconnected
[  380.919985][T10998] syz-executor.2: attempt to access beyond end of device
[  380.919985][T10998] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  380.952400][T10951] 8021q: adding VLAN 0 to HW filter on device bond0
[  380.974216][T10998] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  380.989347][ T5111] Bluetooth: hci4: command tx timeout
[  381.021192][T11017] loop1: detected capacity change from 0 to 512
[  381.027637][T10951] 8021q: adding VLAN 0 to HW filter on device team0
[  381.045727][   T45] bridge0: port 1(bridge_slave_0) entered blocking state
[  381.052928][   T45] bridge0: port 1(bridge_slave_0) entered forwarding state
[  381.068881][T11017] EXT4-fs (loop1): orphan cleanup on readonly fs
[  381.099310][T11017] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2234: inode #15: comm syz-executor.1: corrupted in-inode xattr: bad e_name length
[  381.120282][T11017] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz-executor.1: couldn't read orphan inode 15 (err -117)
[  381.136888][   T45] bridge0: port 2(bridge_slave_1) entered blocking state
[  381.144117][   T45] bridge0: port 2(bridge_slave_1) entered forwarding state
[  381.190774][T11017] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  381.303707][T11017] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  381.434592][T11007] loop3: detected capacity change from 0 to 40427
[  381.463681][T11007] F2FS-fs (loop3): invalid crc value
[  381.476613][T11007] F2FS-fs (loop3): Found nat_bits in checkpoint
[  381.622073][T11030] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
[  381.660354][T11007] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  381.772954][T10951] 8021q: adding VLAN 0 to HW filter on device batadv0
[  381.811011][T10777] syz-executor.3: attempt to access beyond end of device
[  381.811011][T10777] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  381.848332][T10777] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  382.517970][T10951] veth0_vlan: entered promiscuous mode
[  382.604343][T10951] veth1_vlan: entered promiscuous mode
[  382.668340][T11067] loop2: detected capacity change from 0 to 47
[  382.673824][   T45] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  382.729259][T10951] veth0_macvtap: entered promiscuous mode
[  382.765205][T10951] veth1_macvtap: entered promiscuous mode
[  382.849619][T10951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  382.869137][T10951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  382.887388][T10951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  382.897981][   T45] usb 2-1: Using ep0 maxpacket: 32
[  382.910340][T10951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  382.933988][   T45] usb 2-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=c3.cc
[  382.943501][T10951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  382.954145][   T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  382.969694][T10951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  382.982865][   T45] usb 2-1: Product: syz
[  382.991668][   T45] usb 2-1: Manufacturer: syz
[  382.998728][T10951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  383.022255][   T45] usb 2-1: SerialNumber: syz
[  383.029604][   T45] usb 2-1: config 0 descriptor??
[  383.034695][T10951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  383.051317][   T45] keyspan 2-1:0.0: Keyspan 2 port adapter converter detected
[  383.060124][ T5111] Bluetooth: hci4: command tx timeout
[  383.067018][T10951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  383.071603][   T45] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 87
[  383.085878][   T45] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 7
[  383.094951][   T45] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 81
[  383.102913][   T45] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 1
[  383.103835][T10951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  383.110785][   T45] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 2
[  383.131972][   T45] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 85
[  383.145802][   T45] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 5
[  383.156869][   T45] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  383.168651][T10951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  383.171791][   T45] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 83
[  383.193640][   T45] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 3
[  383.194581][T10951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  383.203671][   T45] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 4
[  383.234034][   T45] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 86
[  383.250204][T10951] batman_adv: batadv0: Interface activated: batadv_slave_0
[  383.279870][   T45] keyspan 2-1:0.0: found no endpoint descriptor for endpoint 6
[  383.291362][   T45] usb 2-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  383.298218][T10951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  383.336263][T10951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  383.361770][T10951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  383.366012][T11083] Bluetooth: MGMT ver 1.22
[  383.393183][T10951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  383.430547][T10951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  383.459005][T10951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  383.496190][T10951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  383.506996][T10951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  383.524093][T10951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  383.547202][T10951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  383.562329][T11089] loop2: detected capacity change from 0 to 256
[  383.576582][T10951] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  383.580412][T11089] FAT-fs (loop2): Unrecognized mount option "" or missing value
[  383.587400][T10951] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  383.615464][T10951] batman_adv: batadv0: Interface activated: batadv_slave_1
[  383.678523][  T784] usb 2-1: USB disconnect, device number 7
[  383.691746][T10951] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  383.721745][  T784] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  383.742012][T10951] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  383.754733][T11088] loop2: detected capacity change from 0 to 512
[  383.785697][  T784] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  383.795589][T10951] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  383.805702][  T784] keyspan 2-1:0.0: device disconnected
[  383.811338][T10951] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  383.834584][T11088] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  383.852606][T11088] ext4 filesystem being mounted at /root/syzkaller-testdir3040661401/syzkaller.Jxud9v/283/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  383.920121][   T29] audit: type=1326 audit(1717417799.640:2498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11093 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb83027cee9 code=0x0
[  384.007197][   T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  384.025311][   T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  384.026154][T11096] input: syz0 as /devices/virtual/input/input16
[  384.106016][   T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  384.122865][   T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  384.215854][ T7193] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  384.433698][T11107] loop1: detected capacity change from 0 to 47
[  384.486482][T11103] loop2: detected capacity change from 0 to 1024
[  384.531719][T11103] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  384.947883][ T7193] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  385.149790][ T5111] Bluetooth: hci4: command tx timeout
[  385.162979][T11122] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.2'.
[  385.573878][   T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  385.600062][T11132] loop2: detected capacity change from 0 to 47
[  385.731851][T11133] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.
[  386.231480][   T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  386.799842][   T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  387.236888][ T5101] Bluetooth: hci4: command tx timeout
[  387.246850][ T5101] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  387.263212][ T5101] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  387.272688][ T5101] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  387.284700][ T5101] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  387.292674][ T5101] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  387.300801][ T5101] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  387.556199][   T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  387.559512][T11149] Bluetooth: MGMT ver 1.22
[  387.597320][T11151] tunl0: entered promiscuous mode
[  387.630234][T11151] netlink: 'syz-executor.0': attribute type 1 has an invalid length.
[  387.649261][T11151] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.0'.
[  387.950953][T11136] loop2: detected capacity change from 0 to 40427
[  387.962100][   T11] bridge_slave_1: left allmulticast mode
[  387.973566][   T11] bridge_slave_1: left promiscuous mode
[  387.979759][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  387.985270][T11136] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  387.996481][   T11] bridge_slave_0: left allmulticast mode
[  388.002857][   T11] bridge_slave_0: left promiscuous mode
[  388.034736][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  388.039866][T11136] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  388.076579][T11136] F2FS-fs (loop2): Found nat_bits in checkpoint
[  388.187909][T11136] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  388.200599][T11136] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  388.271505][   T29] audit: type=1800 audit(1717417804.000:2499): pid=11136 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=10 res=0 errno=0
[  388.291585][    C0] vcan0: j1939_tp_rxtimer: 0xffff88802d3c9000: rx timeout, send abort
[  388.294979][    C0] vcan0: j1939_tp_rxtimer: 0xffff888023c3f400: rx timeout, send abort
[  388.303352][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88802d3c9000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  388.303633][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888023c3f400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  388.606893][T11175] loop4: detected capacity change from 0 to 64
[  389.118033][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  389.141512][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  389.167560][   T11] bond0 (unregistering): Released all slaves
[  389.389621][ T5111] Bluetooth: hci0: command tx timeout
[  389.818804][  T784] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  389.863217][T11144] chnl_net:caif_netlink_parms(): no params data found
[  390.020629][  T784] usb 4-1: Using ep0 maxpacket: 8
[  390.031045][  T784] usb 4-1: config index 0 descriptor too short (expected 30482, got 18)
[  390.049286][  T784] usb 4-1: config 0 has too many interfaces: 101, using maximum allowed: 32
[  390.054057][   T11] hsr_slave_0: left promiscuous mode
[  390.067006][  T784] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 101
[  390.079238][  T784] usb 4-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 5.00
[  390.093217][  T784] usb 4-1: New USB device strings: Mfr=253, Product=255, SerialNumber=0
[  390.112102][  T784] usb 4-1: Product: syz
[  390.121012][  T784] usb 4-1: Manufacturer: syz
[  390.137653][  T784] usb 4-1: config 0 descriptor??
[  390.143001][   T11] hsr_slave_1: left promiscuous mode
[  390.151608][  T784] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected
[  390.167598][  T784] usb 4-1: Detected FT2232C/D
[  390.224888][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  390.232674][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  390.280869][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  390.288332][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  390.354507][  T784] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[  390.371129][  T784] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  390.391090][  T784] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  390.395482][   T11] veth1_macvtap: left promiscuous mode
[  390.422338][   T11] veth0_macvtap: left promiscuous mode
[  390.426068][  T784] usb 4-1: USB disconnect, device number 10
[  390.438885][   T11] veth1_vlan: left promiscuous mode
[  390.451297][   T11] veth0_vlan: left promiscuous mode
[  390.471607][  T784] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  390.498485][  T784] ftdi_sio 4-1:0.0: device disconnected
[  390.531358][ T5101] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  390.551606][ T5101] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  390.569889][ T5101] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  390.579594][ T5101] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  390.587498][ T5101] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  390.595153][ T5101] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  390.914580][T11203] loop4: detected capacity change from 0 to 32768
[  390.972488][T11203] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  391.249370][T11203] XFS (loop4): Ending clean mount
[  391.265930][T11203] XFS (loop4): Quotacheck needed: Please wait.
[  391.413973][T11203] XFS (loop4): Quotacheck: Done.
[  391.469080][ T5111] Bluetooth: hci0: command tx timeout
[  391.633579][T10951] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  392.250992][   T11] team0 (unregistering): Port device team_slave_1 removed
[  392.383861][   T11] team0 (unregistering): Port device team_slave_0 removed
[  392.609219][ T5191] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  392.668941][ T5111] Bluetooth: hci2: command tx timeout
[  392.824835][ T5101] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  392.840833][ T5191] usb 4-1: Using ep0 maxpacket: 8
[  392.871858][ T5101] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  392.892154][ T5191] usb 4-1: config index 0 descriptor too short (expected 30482, got 18)
[  392.900840][ T5101] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  392.908040][ T5191] usb 4-1: config 0 has too many interfaces: 101, using maximum allowed: 32
[  392.916970][ T5191] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 101
[  392.948126][ T5191] usb 4-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 5.00
[  392.958445][ T5101] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  392.965650][ T5191] usb 4-1: New USB device strings: Mfr=253, Product=255, SerialNumber=0
[  392.974320][ T5191] usb 4-1: Product: syz
[  392.978746][ T5191] usb 4-1: Manufacturer: syz
[  392.987974][ T5191] usb 4-1: config 0 descriptor??
[  392.993128][ T5101] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  393.000620][ T5101] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  393.010037][ T5191] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected
[  393.018678][ T5191] usb 4-1: Detected FT2232C/D
[  393.217158][ T5191] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[  393.246051][ T5191] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  393.255309][ T5191] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  393.277164][ T5191] usb 4-1: USB disconnect, device number 11
[  393.306717][ T5191] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  393.349231][ T5191] ftdi_sio 4-1:0.0: device disconnected
[  393.539386][ T5101] Bluetooth: hci0: command tx timeout
[  393.907364][T11144] bridge0: port 1(bridge_slave_0) entered blocking state
[  393.933252][T11144] bridge0: port 1(bridge_slave_0) entered disabled state
[  393.948864][T11144] bridge_slave_0: entered allmulticast mode
[  393.960020][T11144] bridge_slave_0: entered promiscuous mode
[  393.995028][T11144] bridge0: port 2(bridge_slave_1) entered blocking state
[  394.002636][T11144] bridge0: port 2(bridge_slave_1) entered disabled state
[  394.010476][T11144] bridge_slave_1: entered allmulticast mode
[  394.018188][T11144] bridge_slave_1: entered promiscuous mode
[  394.168192][T11144] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  394.216614][T11144] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  394.417465][T11144] team0: Port device team_slave_0 added
[  394.437473][T11144] team0: Port device team_slave_1 added
[  394.732321][T11144] batman_adv: batadv0: Adding interface: batadv_slave_0
[  394.748772][ T5101] Bluetooth: hci2: command tx timeout
[  394.753819][T11251] loop3: detected capacity change from 0 to 32768
[  394.754767][T11144] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  394.805985][T11144] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  394.836915][T11251] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  394.873642][T11144] batman_adv: batadv0: Adding interface: batadv_slave_1
[  394.882157][T11144] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  394.911195][T11144] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  394.966890][T11251] XFS (loop3): Ending clean mount
[  394.996101][T11251] XFS (loop3): Quotacheck needed: Please wait.
[  395.058770][ T5101] Bluetooth: hci4: command tx timeout
[  395.175136][   T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  395.233525][T11251] XFS (loop3): Quotacheck: Done.
[  395.273228][T11239] chnl_net:caif_netlink_parms(): no params data found
[  395.356132][T10777] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  395.607280][   T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  395.618885][ T5101] Bluetooth: hci0: command tx timeout
[  395.667227][T11144] hsr_slave_0: entered promiscuous mode
[  395.680069][T11144] hsr_slave_1: entered promiscuous mode
[  395.695330][T11144] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  395.708327][T11144] Cannot create hsr debugfs directory
[  395.729538][T11204] chnl_net:caif_netlink_parms(): no params data found
[  395.862691][   T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  395.958386][T11279] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition
[  395.977568][T11279] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0)
[  396.100800][   T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  396.212378][T11239] bridge0: port 1(bridge_slave_0) entered blocking state
[  396.230948][T11239] bridge0: port 1(bridge_slave_0) entered disabled state
[  396.238318][T11239] bridge_slave_0: entered allmulticast mode
[  396.246068][T11239] bridge_slave_0: entered promiscuous mode
[  396.308813][T11239] bridge0: port 2(bridge_slave_1) entered blocking state
[  396.315991][T11239] bridge0: port 2(bridge_slave_1) entered disabled state
[  396.343762][T11239] bridge_slave_1: entered allmulticast mode
[  396.358907][T11239] bridge_slave_1: entered promiscuous mode
[  396.511887][T11204] bridge0: port 1(bridge_slave_0) entered blocking state
[  396.521737][T11204] bridge0: port 1(bridge_slave_0) entered disabled state
[  396.537141][T11204] bridge_slave_0: entered allmulticast mode
[  396.549190][T11204] bridge_slave_0: entered promiscuous mode
[  396.574666][T11239] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  396.604784][T11204] bridge0: port 2(bridge_slave_1) entered blocking state
[  396.618927][T11204] bridge0: port 2(bridge_slave_1) entered disabled state
[  396.626182][T11204] bridge_slave_1: entered allmulticast mode
[  396.634441][T11204] bridge_slave_1: entered promiscuous mode
[  396.647991][T11296] loop3: detected capacity change from 0 to 32768
[  396.672644][T11239] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  396.790664][T11296] bcachefs (loop3): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=xxhash,compression=zstd,nojournal_transaction_names
[  396.792949][T11204] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  396.806623][T11296] bcachefs (loop3): recovering from clean shutdown, journal seq 10
[  396.823578][ T5101] Bluetooth: hci2: command tx timeout
[  396.836538][T11204] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  396.887045][T11239] team0: Port device team_slave_0 added
[  396.921416][T11296] bcachefs (loop3): alloc_read... done
[  396.926981][T11296] bcachefs (loop3): stripes_read... done
[  396.933986][T11296] bcachefs (loop3): snapshots_read... done
[  396.968026][T11296] bcachefs (loop3): journal_replay... done
[  396.995339][T11296] bcachefs (loop3): resume_logged_ops... done
[  397.014632][   T11] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  397.031384][T11296] bcachefs (loop3): going read-write
[  397.057534][T11296] bcachefs (loop3): done starting filesystem
[  397.138966][ T5101] Bluetooth: hci4: command tx timeout
[  397.190537][T11239] team0: Port device team_slave_1 added
[  397.345737][   T11] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  397.415434][T11204] team0: Port device team_slave_0 added
[  397.450085][T11204] team0: Port device team_slave_1 added
[  397.502764][T10777] bcachefs (loop3): shutting down
[  397.507844][T10777] bcachefs (loop3): going read-only
[  397.517544][T10777] bcachefs (loop3): finished waiting for writes to stop
[  397.548810][T10777] bcachefs (loop3): flushing journal and stopping allocators, journal seq 12
[  397.567882][   T11] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  397.607170][T10777] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 15
[  397.629046][T10777] bcachefs (loop3): shutdown complete, journal seq 16
[  397.636943][T10777] bcachefs (loop3): marking filesystem clean
[  397.705457][T10777] bcachefs (loop3): shutdown complete
[  397.748081][T11239] batman_adv: batadv0: Adding interface: batadv_slave_0
[  397.766884][T11239] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  397.828961][T11239] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  397.860801][T11239] batman_adv: batadv0: Adding interface: batadv_slave_1
[  397.888626][T11239] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  397.953325][T11239] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  398.043934][   T11] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  398.171625][T11204] batman_adv: batadv0: Adding interface: batadv_slave_0
[  398.185174][T11204] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  398.254654][T11204] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  398.265706][   T29] audit: type=1326 audit(1717417813.990:2500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11322 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96f627cee9 code=0x7ffc0000
[  398.300948][T11204] batman_adv: batadv0: Adding interface: batadv_slave_1
[  398.307938][T11204] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  398.350004][   T29] audit: type=1326 audit(1717417814.030:2501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11322 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96f627cee9 code=0x7ffc0000
[  398.388309][T11204] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  398.409764][   T29] audit: type=1326 audit(1717417814.030:2502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11322 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f96f627cee9 code=0x7ffc0000
[  398.447165][   T29] audit: type=1326 audit(1717417814.030:2503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11322 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96f627cee9 code=0x7ffc0000
[  398.484389][   T29] audit: type=1326 audit(1717417814.030:2504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11322 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f96f627cee9 code=0x7ffc0000
[  398.507484][   T29] audit: type=1326 audit(1717417814.170:2505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11322 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96f627cee9 code=0x7ffc0000
[  398.530140][   T29] audit: type=1326 audit(1717417814.170:2506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11322 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f96f627a667 code=0x7ffc0000
[  398.552869][   T29] audit: type=1326 audit(1717417814.170:2507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11322 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f96f6240329 code=0x7ffc0000
[  398.615732][   T29] audit: type=1326 audit(1717417814.170:2508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11322 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f96f627a667 code=0x7ffc0000
[  398.655135][   T29] audit: type=1326 audit(1717417814.170:2509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11322 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f96f6240329 code=0x7ffc0000
[  398.729186][T11239] hsr_slave_0: entered promiscuous mode
[  398.739261][T11239] hsr_slave_1: entered promiscuous mode
[  398.746341][T11239] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  398.765482][T11239] Cannot create hsr debugfs directory
[  398.880952][T11204] hsr_slave_0: entered promiscuous mode
[  398.887481][T11204] hsr_slave_1: entered promiscuous mode
[  398.897734][T11204] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  398.905446][ T5101] Bluetooth: hci2: command tx timeout
[  398.911464][T11204] Cannot create hsr debugfs directory
[  399.109943][ T5148] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  399.117949][   T11] bridge_slave_1: left allmulticast mode
[  399.125680][   T11] bridge_slave_1: left promiscuous mode
[  399.132669][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  399.142879][   T11] bridge_slave_0: left allmulticast mode
[  399.148657][   T11] bridge_slave_0: left promiscuous mode
[  399.154511][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  399.166286][   T11] bridge_slave_1: left allmulticast mode
[  399.172152][   T11] bridge_slave_1: left promiscuous mode
[  399.177880][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  399.187843][   T11] bridge_slave_0: left allmulticast mode
[  399.193946][   T11] bridge_slave_0: left promiscuous mode
[  399.202746][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  399.219701][ T5101] Bluetooth: hci4: command tx timeout
[  399.308935][ T5148] usb 1-1: Using ep0 maxpacket: 8
[  399.316617][ T5148] usb 1-1: config index 0 descriptor too short (expected 30482, got 18)
[  399.325754][ T5148] usb 1-1: config 0 has too many interfaces: 101, using maximum allowed: 32
[  399.334895][ T5148] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 101
[  399.347790][ T5148] usb 1-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice= 5.00
[  399.357489][ T5148] usb 1-1: New USB device strings: Mfr=253, Product=255, SerialNumber=0
[  399.366183][ T5148] usb 1-1: Product: syz
[  399.372770][ T5148] usb 1-1: Manufacturer: syz
[  399.383366][ T5148] usb 1-1: config 0 descriptor??
[  399.391869][ T5148] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected
[  399.400680][ T5148] usb 1-1: Detected FT2232C/D
[  399.613455][ T5148] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[  399.634484][ T5148] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  399.646883][ T5148] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  399.660825][ T5148] usb 1-1: USB disconnect, device number 13
[  399.771079][ T5148] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  399.782153][ T5148] ftdi_sio 1-1:0.0: device disconnected
[  399.942455][T11331] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING
[  400.609283][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  400.644157][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  400.655455][   T11] bond0 (unregistering): Released all slaves
[  400.908085][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  400.920644][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  400.932045][   T11] bond0 (unregistering): Released all slaves
[  401.299564][ T5101] Bluetooth: hci4: command tx timeout
[  401.417822][T11353] syz-executor.0: attempt to access beyond end of device
[  401.417822][T11353] nbd0: rw=0, sector=0, nr_sectors = 2 limit=0
[  401.431450][T11353] exFAT-fs (nbd0): unable to read boot sector
[  401.437666][T11353] exFAT-fs (nbd0): failed to read boot sector
[  401.444820][T11353] exFAT-fs (nbd0): failed to recognize exfat type
[  401.464728][T11353] block nbd0: shutting down sockets
[  401.650604][T11144] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  401.680442][T11144] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  401.800824][T11144] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  401.813601][T11144] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  402.237020][T11363] loop3: detected capacity change from 0 to 128
[  402.274413][T11363] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  402.313060][   T11] hsr_slave_0: left promiscuous mode
[  402.320960][   T11] hsr_slave_1: left promiscuous mode
[  402.337598][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  402.345339][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  402.380175][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  402.387671][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  402.405083][   T11] hsr_slave_0: left promiscuous mode
[  402.405768][   T11] hsr_slave_1: left promiscuous mode
[  402.406590][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  402.406644][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  402.407519][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  402.407549][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  402.458345][   T11] veth1_macvtap: left promiscuous mode
[  402.458431][   T11] veth0_macvtap: left promiscuous mode
[  402.468105][   T11] veth1_vlan: left promiscuous mode
[  402.468251][   T11] veth0_vlan: left promiscuous mode
[  402.526761][   T11] veth1_macvtap: left promiscuous mode
[  402.533025][   T11] veth0_macvtap: left promiscuous mode
[  402.540149][   T11] veth1_vlan: left promiscuous mode
[  402.545629][   T11] veth0_vlan: left promiscuous mode
[  402.655431][T11371] loop3: detected capacity change from 0 to 64
[  403.599497][   T11] team0 (unregistering): Port device team_slave_1 removed
[  403.655645][T11382] loop3: detected capacity change from 0 to 64
[  403.735169][   T11] team0 (unregistering): Port device team_slave_0 removed
[  404.287419][T11389] netlink: 'syz-executor.0': attribute type 11 has an invalid length.
[  405.311986][   T11] team0 (unregistering): Port device team_slave_1 removed
[  405.389550][   T11] team0 (unregistering): Port device team_slave_0 removed
[  406.263158][T11144] 8021q: adding VLAN 0 to HW filter on device bond0
[  406.423281][T11144] 8021q: adding VLAN 0 to HW filter on device team0
[  406.631359][ T5154] bridge0: port 1(bridge_slave_0) entered blocking state
[  406.638535][ T5154] bridge0: port 1(bridge_slave_0) entered forwarding state
[  406.679651][T11239] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  406.716730][T11239] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  407.650918][ T5148] bridge0: port 2(bridge_slave_1) entered blocking state
[  407.658129][ T5148] bridge0: port 2(bridge_slave_1) entered forwarding state
[  407.690409][T11406] loop3: detected capacity change from 0 to 64
[  407.726978][T11239] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  407.762271][T11239] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  408.267843][T11239] 8021q: adding VLAN 0 to HW filter on device bond0
[  408.278130][   T11] bridge_slave_1: left allmulticast mode
[  408.293516][   T11] bridge_slave_1: left promiscuous mode
[  408.304366][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  408.322466][   T11] bridge_slave_0: left allmulticast mode
[  408.328201][   T11] bridge_slave_0: left promiscuous mode
[  408.336264][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  408.946728][T11424] loop3: detected capacity change from 0 to 2048
[  408.963322][T11424] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  408.980901][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  408.994914][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  409.023963][   T11] bond0 (unregistering): Released all slaves
[  409.194780][   T11] tipc: Left network mode
[  409.309147][T11144] 8021q: adding VLAN 0 to HW filter on device batadv0
[  409.343004][T11431] loop3: detected capacity change from 0 to 128
[  409.360555][T11204] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  409.402358][T11431] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  409.421307][T11239] 8021q: adding VLAN 0 to HW filter on device team0
[  409.434090][T11204] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  409.446516][T11204] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  410.397147][T11204] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  410.426795][ T5097] bridge0: port 1(bridge_slave_0) entered blocking state
[  410.434010][ T5097] bridge0: port 1(bridge_slave_0) entered forwarding state
[  410.491618][T11443] ip6t_REJECT: TCP_RESET illegal for non-tcp
[  410.536558][  T783] bridge0: port 2(bridge_slave_1) entered blocking state
[  410.543767][  T783] bridge0: port 2(bridge_slave_1) entered forwarding state
[  410.750503][   T11] hsr_slave_0: left promiscuous mode
[  410.767215][   T11] hsr_slave_1: left promiscuous mode
[  410.796495][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  410.816073][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  410.833394][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  410.856413][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  410.930640][   T11] veth1_macvtap: left promiscuous mode
[  410.936330][   T11] veth0_macvtap: left promiscuous mode
[  410.942296][   T11] veth1_vlan: left promiscuous mode
[  410.947730][   T11] veth0_vlan: left promiscuous mode
[  412.940650][T11466] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'.
[  412.990094][   T11] team0 (unregistering): Port device team_slave_1 removed
[  413.064331][   T11] team0 (unregistering): Port device team_slave_0 removed
[  413.882899][T11144] veth0_vlan: entered promiscuous mode
[  413.955014][T11144] veth1_vlan: entered promiscuous mode
[  414.207264][T11476] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
[  414.217068][T11144] veth0_macvtap: entered promiscuous mode
[  414.234975][T11204] 8021q: adding VLAN 0 to HW filter on device bond0
[  414.278450][T11144] veth1_macvtap: entered promiscuous mode
[  414.336834][T11204] 8021q: adding VLAN 0 to HW filter on device team0
[  414.389435][T11239] 8021q: adding VLAN 0 to HW filter on device batadv0
[  414.429878][ T5097] bridge0: port 1(bridge_slave_0) entered blocking state
[  414.437066][ T5097] bridge0: port 1(bridge_slave_0) entered forwarding state
[  414.478242][ T5097] bridge0: port 2(bridge_slave_1) entered blocking state
[  414.485510][ T5097] bridge0: port 2(bridge_slave_1) entered forwarding state
[  414.540084][T11144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  414.574946][T11144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  414.600405][T11144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  414.645518][T11144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  414.682793][T11144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  414.698795][T11144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  414.715837][T11483] netlink: 'syz-executor.3': attribute type 11 has an invalid length.
[  414.720511][T11144] batman_adv: batadv0: Interface activated: batadv_slave_0
[  414.753784][   T11] IPVS: stop unused estimator thread 0...
[  414.786611][T11144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  414.807500][T11144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  414.817954][T11144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  414.831035][T11144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  414.848126][T11144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  414.871524][T11144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  414.902336][T11144] batman_adv: batadv0: Interface activated: batadv_slave_1
[  414.987293][T11144] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  415.004355][T11144] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  415.016523][T11144] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  415.044698][T11144] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  415.296752][T11239] veth0_vlan: entered promiscuous mode
[  415.435356][T11239] veth1_vlan: entered promiscuous mode
[  415.469038][   T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  415.476914][   T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  415.555541][T11239] veth0_macvtap: entered promiscuous mode
[  415.574736][ T5097] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  415.583555][T11239] veth1_macvtap: entered promiscuous mode
[  415.622228][T11239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  415.637337][T11239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  415.647753][ T5097] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  415.664657][T11239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  415.677393][T11239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  415.698631][T11239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  415.727137][T11239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  415.743890][T11239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  415.757333][T11239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  415.769585][T11239] batman_adv: batadv0: Interface activated: batadv_slave_0
[  415.880425][   T29] kauditd_printk_skb: 159 callbacks suppressed
[  415.880446][   T29] audit: type=1326 audit(1717417831.600:2669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11505 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef6407cee9 code=0x7ffc0000
[  415.980806][   T29] audit: type=1326 audit(1717417831.600:2670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11505 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef6407cee9 code=0x7ffc0000
[  416.047787][   T29] audit: type=1326 audit(1717417831.600:2671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11505 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=150 compat=0 ip=0x7fef6407cee9 code=0x7ffc0000
[  416.079979][   T29] audit: type=1326 audit(1717417831.600:2672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11505 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef6407cee9 code=0x7ffc0000
[  416.081298][T11239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  416.104474][   T29] audit: type=1326 audit(1717417831.600:2673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=11505 comm="syz-executor.1" exe="/root/syz-executor.1" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fef6407cee9 code=0x7ffc0000
[  416.138458][T11239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  416.156867][T11239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  416.167621][T11239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  416.184379][T11239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  416.195128][T11239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  416.211632][T11239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  416.222393][T11239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  416.234220][T11239] batman_adv: batadv0: Interface activated: batadv_slave_1
[  416.309724][T11518] block nbd1: Device being setup by another task
[  416.337115][T11239] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  416.349849][T11239] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  416.360733][T11239] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  416.369708][T11239] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  416.395636][T11204] 8021q: adding VLAN 0 to HW filter on device batadv0
[  416.439044][  T783] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  416.461489][T11498] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  416.472906][T11498] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  416.567668][T11498] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  416.595366][T11498] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  416.608285][T11204] veth0_vlan: entered promiscuous mode
[  416.660162][  T783] usb 1-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d
[  416.669794][  T783] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  416.680747][  T783] usb 1-1: config 0 descriptor??
[  416.681404][T11498] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  416.687070][T11204] veth1_vlan: entered promiscuous mode
[  416.705147][T11498] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[  416.746614][T11498] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  416.760754][T11498] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  416.779807][T11204] veth0_macvtap: entered promiscuous mode
[  416.794242][T11498] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  416.802032][T11204] veth1_macvtap: entered promiscuous mode
[  416.808154][T11498] Bluetooth: hci4: Error when powering off device on rfkill (-4)
[  416.870135][T11204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  416.882742][T11204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  416.892813][T11204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  416.904576][T11204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  416.914741][T11204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  416.925350][T11204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  416.938246][T11204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  416.949147][T11204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  416.959246][T11204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  416.970376][T11204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  416.985320][T11204] batman_adv: batadv0: Interface activated: batadv_slave_0
[  417.039310][T11517] block nbd1: shutting down sockets
[  417.103644][T11204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  417.119365][T11204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  417.130221][T11204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  417.142858][T11204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  417.153641][T11204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  417.185922][T11522] loop1: detected capacity change from 0 to 512
[  417.193113][T11204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  417.208693][  T783] hackrf 1-1:0.0: usb_control_msg() failed -71 request 0f
[  417.215874][  T783] hackrf 1-1:0.0: Could not detect board
[  417.222363][T11204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  417.240940][T11204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  417.241384][T11522] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2234: inode #12: comm syz-executor.1: corrupted in-inode xattr: invalid ea_ino
[  417.252719][  T783] hackrf 1-1:0.0: probe with driver hackrf failed with error -71
[  417.273226][T11522] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz-executor.1: couldn't read orphan inode 12 (err -117)
[  417.278638][T11204] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  417.293946][T11522] EXT4-fs (loop1): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  417.319296][  T783] usb 1-1: USB disconnect, device number 14
[  417.332705][T11204] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  417.360756][T11204] batman_adv: batadv0: Interface activated: batadv_slave_1
[  417.421703][T11204] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  417.452597][T11204] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  417.468225][T11204] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  417.477755][T11204] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  417.477919][T11530] loop3: detected capacity change from 0 to 16
[  417.496369][T11530] erofs: (device loop3): mounted with root inode @ nid 36.
[  417.500979][T11144] EXT4-fs (loop1): unmounting filesystem 00000005-0000-0000-0000-000000000000.
[  417.557819][   T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  417.577391][   T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  417.618477][   T29] audit: type=1800 audit(1717417833.340:2674): pid=11532 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.3" name="file1" dev="sda1" ino=1947 res=0 errno=0
[  417.720061][   T29] audit: type=1800 audit(1717417833.340:2675): pid=11532 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.3" name="file1" dev="sda1" ino=1947 res=0 errno=0
[  417.806266][ T5097] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  417.814468][   T29] audit: type=1800 audit(1717417833.390:2676): pid=11532 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.3" name="file2" dev="sda1" ino=1948 res=0 errno=0
[  417.841251][ T5097] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  417.888307][   T29] audit: type=1800 audit(1717417833.410:2677): pid=11532 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.3" name="file2" dev="sda1" ino=1948 res=0 errno=0
[  417.909222][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  417.929597][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  417.952779][   T29] audit: type=1800 audit(1717417833.680:2678): pid=11537 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.0" name="file1" dev="sda1" ino=1953 res=0 errno=0
[  418.055931][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  418.074490][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  418.300225][T11542] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'.
[  418.671916][T11544] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[  418.809058][T11545] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[  418.855997][T11534] loop1: detected capacity change from 0 to 32768
[  419.047204][T11534] bcachefs (loop1): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,journal_flush_delay=1311720,journal_reclaim_delay=1000,nocow
[  419.119655][T11534] bcachefs (loop1): recovering from clean shutdown, journal seq 10
[  419.203863][T11534] bcachefs (loop1): alloc_read... done
[  419.203982][T11540] loop4: detected capacity change from 0 to 32768
[  419.227777][T11534] bcachefs (loop1): stripes_read... done
[  419.230265][T11540] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (11540)
[  419.243535][T11534] bcachefs (loop1): snapshots_read... done
[  419.282537][T11534] bcachefs (loop1): journal_replay... done
[  419.300113][T11534] bcachefs (loop1): resume_logged_ops... done
[  419.313259][T11534] bcachefs (loop1): going read-write
[  419.322444][T11540] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  419.338350][T11540] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  419.356342][T11540] BTRFS info (device loop4): disk space caching is enabled
[  419.359409][T11534] bcachefs (loop1): done starting filesystem
[  419.529596][T11540] BTRFS info (device loop4): rebuilding free space tree
[  419.558302][T11144] bcachefs (loop1): shutting down
[  419.577969][T11540] BTRFS info (device loop4): disabling free space tree
[  419.590429][T11540] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  419.603693][T11144] bcachefs (loop1): going read-only
[  419.610468][T11540] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  419.614336][T11144] bcachefs (loop1): finished waiting for writes to stop
[  419.655170][T11144] bcachefs (loop1): flushing journal and stopping allocators, journal seq 12
[  420.128707][T11490] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  420.184407][T11239] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  420.320872][T11490] usb 3-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4
[  420.336084][T11490] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  420.369972][T11490] usb 3-1: config 0 descriptor??
[  420.485280][T11605] No such timeout policy "syz0"
[  420.582353][T11490] gs_usb 3-1:0.0: Couldn't send data format (err=-71)
[  420.597096][T11490] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -71
[  420.624800][T11490] usb 3-1: USB disconnect, device number 15
[  420.697781][T11608] loop4: detected capacity change from 0 to 1024
[  420.837906][   T11] hfsplus: b-tree write err: -5, ino 4
[  420.994509][T11616] No such timeout policy "syz0"
[  421.108734][T11622] xt_TCPMSS: Only works on TCP SYN packets
[  421.807821][T11624] loop2: detected capacity change from 0 to 32768
[  421.826749][T11626] loop3: detected capacity change from 0 to 32768
[  421.845095][T11626] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (11626)
[  421.867901][T11626] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  421.873896][T11648] loop4: detected capacity change from 0 to 1024
[  421.882265][T11626] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  421.900288][T11626] BTRFS info (device loop3): using free-space-tree
[  421.926877][T11624] bcachefs (076a1832-646e-4f3c-b13d-b3e266154efd): filesystem UUID already open
[  421.937840][T11624] bcachefs (076a1832-646e-4f3c-b13d-b3e266154efd): shutdown complete
[  421.946109][   T29] kauditd_printk_skb: 12 callbacks suppressed
[  421.946126][   T29] audit: type=1800 audit(1717417837.670:2691): pid=11648 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor.4" name="file1" dev="loop4" ino=20 res=0 errno=0
[  422.083010][   T61] hfsplus: b-tree write err: -5, ino 4
[  422.217869][T10777] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  422.312041][T11144] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 14
[  422.323397][T11144] bcachefs (loop1): shutdown complete, journal seq 15
[  422.331091][T11144] bcachefs (loop1): marking filesystem clean
[  422.470381][T11144] bcachefs (loop1): shutdown complete
[  422.838869][ T5154] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  422.846792][ T5191] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  423.065619][ T5191] usb 1-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4
[  423.074911][ T5154] usb 5-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4
[  423.081952][T11686] loop2: detected capacity change from 0 to 4096
[  423.083995][ T5154] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  423.098958][  T783] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  423.122266][ T5191] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  423.152309][ T5191] usb 1-1: config 0 descriptor??
[  423.182922][ T5154] usb 5-1: config 0 descriptor??
[  423.355098][  T783] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  423.370595][  T783] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  423.384582][  T783] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  423.407828][ T5154] gs_usb 5-1:0.0: Couldn't send data format (err=-71)
[  423.419249][ T5191] gs_usb 1-1:0.0: Couldn't send data format (err=-71)
[  423.426807][ T5154] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -71
[  423.436333][ T5191] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -71
[  423.445309][  T783] usb 4-1: config 0 descriptor??
[  423.454748][ T5154] usb 5-1: USB disconnect, device number 15
[  423.466157][ T5191] usb 1-1: USB disconnect, device number 15
[  423.587088][T11693] No such timeout policy "syz0"
[  423.630207][T11695] loop2: detected capacity change from 0 to 16
[  423.640577][T11695] erofs: (device loop2): mounted with root inode @ nid 36.
[  423.767105][T11698] loop2: detected capacity change from 0 to 1024
[  423.815794][   T29] audit: type=1800 audit(1717417839.540:2692): pid=11698 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz-executor.2" name="file1" dev="loop2" ino=20 res=0 errno=0
[  423.854413][   T61] hfsplus: b-tree write err: -5, ino 4
[  423.892635][  T783] keytouch 0003:0926:3333.000D: fixing up Keytouch IEC report descriptor
[  423.905975][  T783] input: HID 0926:3333 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0926:3333.000D/input/input20
[  424.012124][  T783] keytouch 0003:0926:3333.000D: input,hidraw0: USB HID v0.00 Keyboard [HID 0926:3333] on usb-dummy_hcd.3-1/input0
[  424.083909][   T29] audit: type=1800 audit(1717417839.810:2693): pid=11709 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=1965 res=0 errno=0
[  424.121116][T11708] loop4: detected capacity change from 0 to 512
[  424.141974][T11683] loop3: detected capacity change from 0 to 8
[  424.178306][T11708] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz-executor.4: invalid indirect mapped block 256 (level 2)
[  424.222944][T11708] EXT4-fs (loop4): 2 truncates cleaned up
[  424.258342][T11708] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  424.459504][   T29] audit: type=1800 audit(1717417840.170:2694): pid=11716 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=1967 res=0 errno=0
[  424.670361][T11714] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap
[  424.697313][T11703] loop2: detected capacity change from 0 to 32768
[  424.716383][   T25] usb 4-1: USB disconnect, device number 12
[  424.730030][T11239] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  424.765100][T11703] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (11703)
[  424.832814][T11703] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  424.850517][T11703] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm
[  424.875900][T11703] BTRFS info (device loop2): using free-space-tree
[  425.220345][T11204] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  425.654235][T11743] loop3: detected capacity change from 0 to 512
[  425.687850][T11723] loop4: detected capacity change from 0 to 32768
[  425.696034][T11743] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  425.832105][T11743] EXT4-fs (loop3): 1 orphan inode deleted
[  425.843498][T11743] EXT4-fs (loop3): 1 truncate cleaned up
[  425.860083][T11743] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  425.865640][T11753] loop2: detected capacity change from 0 to 4096
[  425.905640][T11723] bcachefs (loop4): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,journal_flush_delay=1311720,journal_reclaim_delay=1000,nocow
[  425.935903][T11743] EXT4-fs error (device loop3): ext4_search_dir:1548: inode #12: block 7: comm syz-executor.3: bad entry in directory: directory entry overrun - offset=0, inode=13, rec_len=784, size=56 fake=0
[  425.948873][T11723] bcachefs (loop4): recovering from clean shutdown, journal seq 10
[  425.996159][T11743] EXT4-fs (loop3): Remounting filesystem read-only
[  426.161824][T11723] bcachefs (loop4): alloc_read... done
[  426.163749][T10777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  426.177017][T11723] bcachefs (loop4): stripes_read... done
[  426.184824][T11723] bcachefs (loop4): snapshots_read... done
[  426.791169][T11723] bcachefs (loop4): journal_replay... done
[  426.825317][T11723] bcachefs (loop4): resume_logged_ops... done
[  426.838858][T11764] No such timeout policy "syz0"
[  426.850037][T11723] bcachefs (loop4): going read-write
[  426.882270][T11723] bcachefs (loop4): done starting filesystem
[  427.040193][T11772] loop2: detected capacity change from 0 to 512
[  427.058284][T11772] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #11: comm syz-executor.2: invalid indirect mapped block 256 (level 2)
[  427.073231][T11772] EXT4-fs (loop2): 2 truncates cleaned up
[  427.092212][T11772] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  427.201758][T11239] bcachefs (loop4): shutting down
[  427.219757][T11239] bcachefs (loop4): going read-only
[  427.246472][T11239] bcachefs (loop4): finished waiting for writes to stop
[  427.278689][T11239] bcachefs (loop4): flushing journal and stopping allocators, journal seq 11
[  427.288699][T11492] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  427.327932][T11239] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 13
[  427.344370][T11239] bcachefs (loop4): shutdown complete, journal seq 14
[  427.353297][T11239] bcachefs (loop4): marking filesystem clean
[  427.375366][T11785] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.1'.
[  427.385754][T11785] openvswitch: netlink: Geneve option length err (len 3060, max 255).
[  427.414720][T11239] bcachefs (loop4): shutdown complete
[  427.453974][T11204] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  427.479603][   T29] audit: type=1800 audit(1717417843.200:2695): pid=11789 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=1948 res=0 errno=0
[  427.510759][T11492] usb 4-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4
[  427.520923][T11492] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  427.532230][T11492] usb 4-1: config 0 descriptor??
[  427.744773][T11492] gs_usb 4-1:0.0: Couldn't send data format (err=-71)
[  427.766904][T11492] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -71
[  427.805811][T11492] usb 4-1: USB disconnect, device number 13
[  428.226326][T11801] loop2: detected capacity change from 0 to 4096
[  429.383630][T11808] dvmrp1: entered allmulticast mode
[  430.438362][T11823] loop1: detected capacity change from 0 to 512
[  430.483739][T11823] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz-executor.1: invalid indirect mapped block 256 (level 2)
[  430.538656][   T29] audit: type=1800 audit(1717417846.230:2696): pid=11827 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="sda1" ino=1966 res=0 errno=0
[  430.581679][T11823] EXT4-fs (loop1): 2 truncates cleaned up
[  430.588109][T11823] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  430.953751][T11813] loop4: detected capacity change from 0 to 32768
[  430.967134][T11813] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (11813)
[  431.017962][T11813] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  431.029968][T11813] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  431.039837][T11813] BTRFS info (device loop4): using free-space-tree
[  431.183891][T11144] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  431.554210][T11239] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  431.857567][T11862] loop1: detected capacity change from 0 to 64
[  433.223605][T11869] loop3: detected capacity change from 0 to 512
[  433.255323][T11869] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz-executor.3: invalid indirect mapped block 256 (level 2)
[  433.270697][T11873] netlink: 'syz-executor.0': attribute type 8 has an invalid length.
[  433.320872][T11869] EXT4-fs (loop3): 2 truncates cleaned up
[  433.327411][T11869] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  433.469386][   T29] audit: type=1800 audit(1717417849.200:2697): pid=11880 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.0" name="file1" dev="sda1" ino=1961 res=0 errno=0
[  433.898955][ T5191] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  434.157582][T10777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  434.243342][ T5191] usb 5-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4
[  434.414862][ T5191] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  434.450051][ T5191] usb 5-1: config 0 descriptor??
[  434.584723][T11897] netlink: 1212 bytes leftover after parsing attributes in process `syz-executor.0'.
[  434.677817][ T5191] gs_usb 5-1:0.0: Couldn't send data format (err=-71)
[  434.697460][ T5191] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -71
[  434.730413][ T5191] usb 5-1: USB disconnect, device number 16
[  435.520920][T11881] loop2: detected capacity change from 0 to 32768
[  435.825341][T11881] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (11881)
[  435.845268][   T29] audit: type=1800 audit(1717417851.570:2698): pid=11910 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.0" name="file0" dev="sda1" ino=1966 res=0 errno=0
[  435.897759][T11881] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  435.909407][T11881] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  435.929630][T11881] BTRFS info (device loop2): using free-space-tree
[  436.352448][T11881] loop2: detected capacity change from 32768 to 11
[  436.373328][T11881] syz-executor.2: attempt to access beyond end of device
[  436.373328][T11881] loop2: rw=2049, sector=10456, nr_sectors = 8 limit=11
[  436.390890][T11881] BTRFS error (device loop2): bdev /dev/loop2 errs: wr 1, rd 0, flush 0, corrupt 0, gen 0
[  436.402888][T11881] syz-executor.2: attempt to access beyond end of device
[  436.402888][T11881] loop2: rw=2049, sector=10240, nr_sectors = 8 limit=11
[  436.442463][T11881] BTRFS error (device loop2): bdev /dev/loop2 errs: wr 2, rd 0, flush 0, corrupt 0, gen 0
[  436.462271][T11946] loop3: detected capacity change from 0 to 64
[  436.787674][  T987] kworker/u8:5: attempt to access beyond end of device
[  436.787674][  T987] loop2: rw=67112961, sector=10440, nr_sectors = 8 limit=11
[  436.818262][  T987] BTRFS error (device loop2): bdev /dev/loop2 errs: wr 3, rd 0, flush 0, corrupt 0, gen 0
[  436.851515][  T987] kworker/u8:5: attempt to access beyond end of device
[  436.851515][  T987] loop2: rw=67112961, sector=10456, nr_sectors = 8 limit=11
[  436.866088][  T987] BTRFS error (device loop2): bdev /dev/loop2 errs: wr 4, rd 0, flush 0, corrupt 0, gen 0
[  436.882415][  T987] kworker/u8:5: attempt to access beyond end of device
[  436.882415][  T987] loop2: rw=67112961, sector=10464, nr_sectors = 8 limit=11
[  436.896802][  T987] BTRFS error (device loop2): bdev /dev/loop2 errs: wr 5, rd 0, flush 0, corrupt 0, gen 0
[  436.924697][T11204] BTRFS error (device loop2 state A): Transaction aborted (error -5)
[  436.945192][T11204] BTRFS: error (device loop2 state A) in __btrfs_free_extent:3222: errno=-5 IO failure
[  436.968766][ T5191] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  436.969974][T11204] BTRFS info (device loop2 state EA): forced readonly
[  436.997639][T11204] BTRFS error (device loop2 state EA): failed to run delayed ref for logical 5296128 num_bytes 12288 type 178 action 2 ref_mod 1: -5
[  437.012422][T11204] BTRFS: error (device loop2 state EA) in btrfs_run_delayed_refs:2211: errno=-5 IO failure
[  437.040961][T11204] BTRFS info (device loop2 state EA): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  437.170301][ T5191] usb 2-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4
[  437.187502][ T5191] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  437.230610][ T5191] usb 2-1: config 0 descriptor??
[  437.493978][ T5191] gs_usb 2-1:0.0: Couldn't send data format (err=-71)
[  437.566200][ T5191] gs_usb 2-1:0.0: probe with driver gs_usb failed with error -71
[  437.629404][ T5191] usb 2-1: USB disconnect, device number 8
[  437.886121][T11952] loop4: detected capacity change from 0 to 32768
[  437.961041][T11952] XFS (loop4): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  438.044334][T11952] XFS (loop4): Starting recovery (logdev: internal)
[  438.127775][T11952] XFS (loop4): Ending recovery (logdev: internal)
[  438.142759][T11952] XFS (loop4): Quotacheck needed: Please wait.
[  438.375644][T11952] XFS (loop4): Quotacheck: Done.
[  439.450243][T11239] XFS (loop4): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  440.594495][ T1247] ieee802154 phy0 wpan0: encryption failed: -22
[  440.603036][ T1247] ieee802154 phy1 wpan1: encryption failed: -22
[  440.929439][T12000] loop2: detected capacity change from 0 to 32768
[  440.958273][T12000] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  441.096584][T12020] loop4: detected capacity change from 0 to 32768
[  441.133208][T12020] XFS (loop4): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  441.150072][T12000] XFS (loop2): Ending clean mount
[  442.338790][T12020] XFS (loop4): Starting recovery (logdev: internal)
[  442.457887][T12020] XFS (loop4): Ending recovery (logdev: internal)
[  442.525493][T12020] XFS (loop4): Quotacheck needed: Please wait.
[  442.684295][T12020] XFS (loop4): Quotacheck: Done.
[  442.806437][T11204] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  443.090951][T11239] XFS (loop4): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  443.765115][T12074] loop4: detected capacity change from 0 to 512
[  444.062828][T12074] EXT4-fs (loop4): 1 truncate cleaned up
[  444.099087][T12074] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  444.266903][T11239] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  444.503924][T12089] loop3: detected capacity change from 0 to 512
[  444.575150][T12089] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  444.658842][T12089] ext4 filesystem being mounted at /root/syzkaller-testdir1745728771/syzkaller.xdGL3J/96/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  444.679413][T12099] loop4: detected capacity change from 0 to 512
[  444.769362][T12099] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  444.849656][T10777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  444.861051][T12099] ext4 filesystem being mounted at /root/syzkaller-testdir4162064056/syzkaller.FLIrR3/27/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  444.933832][T12107] loop2: detected capacity change from 0 to 1024
[  444.993075][T11239] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  445.372552][T12129] loop2: detected capacity change from 0 to 256
[  445.432206][T12128] loop3: detected capacity change from 0 to 1764
[  445.910758][T12096] loop1: detected capacity change from 0 to 32768
[  445.929653][T12138] loop3: detected capacity change from 0 to 512
[  445.994284][T12096] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  446.179564][T12138] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  446.196761][T12096] XFS (loop1): Starting recovery (logdev: internal)
[  446.250067][T12138] ext4 filesystem being mounted at /root/syzkaller-testdir1745728771/syzkaller.xdGL3J/100/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  446.337732][T10777] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  446.395618][T12096] XFS (loop1): Ending recovery (logdev: internal)
[  446.473236][T12096] XFS (loop1): Quotacheck needed: Please wait.
[  446.619150][T12096] XFS (loop1): Quotacheck: Done.
[  447.132112][T11144] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  447.779227][T12179] loop4: detected capacity change from 0 to 256
[  447.850334][T12179] FAT-fs (loop4): Directory bread(block 64) failed
[  447.868002][T12179] FAT-fs (loop4): Directory bread(block 65) failed
[  447.879079][T12179] FAT-fs (loop4): Directory bread(block 66) failed
[  447.888174][T12179] FAT-fs (loop4): Directory bread(block 67) failed
[  447.901910][T12179] FAT-fs (loop4): Directory bread(block 68) failed
[  447.916455][T12179] FAT-fs (loop4): Directory bread(block 69) failed
[  447.930862][T12179] FAT-fs (loop4): Directory bread(block 70) failed
[  447.945983][T12179] FAT-fs (loop4): Directory bread(block 71) failed
[  447.976051][T12179] FAT-fs (loop4): Directory bread(block 72) failed
[  447.983517][T12179] FAT-fs (loop4): Directory bread(block 73) failed
[  447.986140][   T29] audit: type=1326 audit(1717417863.720:2699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12184 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fde14c7cee9 code=0x0
[  448.344097][T12194] xt_TCPMSS: Only works on TCP SYN packets
[  448.367647][T12195] loop2: detected capacity change from 0 to 256
[  448.437130][T12197] tun0: tun_chr_ioctl cmd 1074025677
[  448.470566][T12197] tun0: linktype set to 780
[  448.604560][T12194] vlan2: entered allmulticast mode
[  448.706625][T12204] loop4: detected capacity change from 0 to 512
[  448.733616][T12205] loop1: detected capacity change from 0 to 256
[  448.763248][T12204] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  448.784595][T12204] ext4 filesystem being mounted at /root/syzkaller-testdir4162064056/syzkaller.FLIrR3/33/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  448.861169][T11239] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  449.489672][T12225] Dead loop on virtual device ip6_vti0, fix it urgently!
[  449.836338][T12232] loop1: detected capacity change from 0 to 256
[  450.130899][ T5101] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  450.149369][ T5101] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  450.154698][   T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  450.167891][ T5101] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  450.176760][ T5101] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  450.187064][ T5101] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  450.195488][ T5101] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  450.561638][   T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  450.591287][T12241] loop3: detected capacity change from 0 to 128
[  450.777379][   T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  450.869354][T12243] loop3: detected capacity change from 0 to 256
[  451.144935][   T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  451.227637][T12246]  nullb0: [POWERTEC] p1 p2 p3 p4
[  451.248830][T12246] nullb0: p1 start 1986356271 is beyond EOD, truncated
[  451.255757][T12246] nullb0: p2 start 1068017860 is beyond EOD, truncated
[  451.328940][T12252] Dead loop on virtual device ip6_vti0, fix it urgently!
[  451.358826][T12246] nullb0: p3 start 2952576660 is beyond EOD, truncated
[  451.542876][T12233] chnl_net:caif_netlink_parms(): no params data found
[  451.612288][T12257] loop1: detected capacity change from 0 to 2048
[  451.663741][   T35] bridge_slave_1: left allmulticast mode
[  451.673349][   T35] bridge_slave_1: left promiscuous mode
[  451.687566][   T35] bridge0: port 2(bridge_slave_1) entered disabled state
[  451.728856][T12257] Alternate GPT is invalid, using primary GPT.
[  451.740102][   T35] bridge_slave_0: left allmulticast mode
[  451.753355][   T35] bridge_slave_0: left promiscuous mode
[  451.768420][   T35] bridge0: port 1(bridge_slave_0) entered disabled state
[  451.797027][T12257]  loop1: p1 p2 p3
[  451.950860][T12272] loop3: detected capacity change from 0 to 1024
[  451.985758][T12272] hfsplus: failed to load extents file
[  452.014725][T12277] netlink: 287 bytes leftover after parsing attributes in process `syz-executor.0'.
[  452.206365][T12285] Dead loop on virtual device ip6_vti0, fix it urgently!
[  452.283158][ T5101] Bluetooth: hci4: command tx timeout
[  452.355752][T12289] loop2: detected capacity change from 0 to 1024
[  452.442593][T12289] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  452.536906][T12289] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[  452.609005][T12289] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 1 with error 28
[  452.637955][T12289] EXT4-fs (loop2): This should not happen!! Data will be lost
[  452.637955][T12289] 
[  452.652066][T12289] EXT4-fs (loop2): Total free blocks count 0
[  452.696879][T12289] EXT4-fs (loop2): Free/Dirty block details
[  452.707592][T12289] EXT4-fs (loop2): free_blocks=68451041280
[  452.727390][T12289] EXT4-fs (loop2): dirty_blocks=32
[  452.735511][T12289] EXT4-fs (loop2): Block reservation details
[  452.742175][T12289] EXT4-fs (loop2): i_reserved_data_blocks=2
[  452.941204][  T987] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  452.949819][T12309] loop3: detected capacity change from 0 to 1024
[  453.010553][T12309] hfsplus: failed to load extents file
[  453.151859][T12313] loop3: detected capacity change from 0 to 512
[  453.171612][T12313] EXT4-fs (loop3): ea_inode feature is not supported for Hurd
[  453.199192][   T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  453.222818][   T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  453.229212][T12317] Dead loop on virtual device ip6_vti0, fix it urgently!
[  453.251554][T12313] netlink: 'syz-executor.3': attribute type 2 has an invalid length.
[  453.273380][   T35] bond0 (unregistering): Released all slaves
[  453.579814][   T29] audit: type=1326 audit(1717418893.309:2700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12337 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb83027cee9 code=0x7ffc0000
[  453.621552][T12233] bridge0: port 1(bridge_slave_0) entered blocking state
[  453.639300][T12233] bridge0: port 1(bridge_slave_0) entered disabled state
[  453.646603][T12233] bridge_slave_0: entered allmulticast mode
[  453.670908][   T29] audit: type=1326 audit(1717418893.309:2701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12337 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb83027cee9 code=0x7ffc0000
[  453.695449][T12233] bridge_slave_0: entered promiscuous mode
[  453.767822][   T29] audit: type=1326 audit(1717418893.339:2702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12337 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb83027cee9 code=0x7ffc0000
[  453.805555][T12233] bridge0: port 2(bridge_slave_1) entered blocking state
[  453.822392][   T29] audit: type=1326 audit(1717418893.339:2703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12337 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb83027cee9 code=0x7ffc0000
[  453.826420][T12233] bridge0: port 2(bridge_slave_1) entered disabled state
[  453.914705][   T29] audit: type=1326 audit(1717418893.339:2704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12337 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb83027cee9 code=0x7ffc0000
[  453.917268][T12233] bridge_slave_1: entered allmulticast mode
[  453.988845][   T29] audit: type=1326 audit(1717418893.339:2705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12337 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb83027cee9 code=0x7ffc0000
[  453.989088][T12351] loop1: detected capacity change from 0 to 512
[  454.023930][T12233] bridge_slave_1: entered promiscuous mode
[  454.072618][T12351] EXT4-fs (loop1): ea_inode feature is not supported for Hurd
[  454.085209][   T29] audit: type=1326 audit(1717418893.339:2706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12337 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb83027a667 code=0x7ffc0000
[  454.155392][   T29] audit: type=1326 audit(1717418893.339:2707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12337 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fb830240329 code=0x7ffc0000
[  454.206984][T12351] netlink: 'syz-executor.1': attribute type 2 has an invalid length.
[  454.218757][   T29] audit: type=1326 audit(1717418893.339:2708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12337 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=301 compat=0 ip=0x7fb83027cee9 code=0x7ffc0000
[  454.281737][   T29] audit: type=1326 audit(1717418893.339:2709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=_ pid=12337 comm="syz-executor.3" exe="/root/syz-executor.3" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fb83027a667 code=0x7ffc0000
[  454.323735][T12355] loop1: detected capacity change from 0 to 256
[  454.353249][T12355] FAT-fs (loop1): Directory bread(block 64) failed
[  454.364685][ T5101] Bluetooth: hci4: command tx timeout
[  454.372616][T12355] FAT-fs (loop1): Directory bread(block 65) failed
[  454.464283][T12233] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  454.509545][T12355] FAT-fs (loop1): Directory bread(block 66) failed
[  454.528634][T12355] FAT-fs (loop1): Directory bread(block 67) failed
[  454.535340][T12355] FAT-fs (loop1): Directory bread(block 68) failed
[  454.541988][T12355] FAT-fs (loop1): Directory bread(block 69) failed
[  454.548981][T12355] FAT-fs (loop1): Directory bread(block 70) failed
[  454.555545][T12355] FAT-fs (loop1): Directory bread(block 71) failed
[  454.562894][T12355] FAT-fs (loop1): Directory bread(block 72) failed
[  454.569506][T12355] FAT-fs (loop1): Directory bread(block 73) failed
[  454.581918][T12233] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  454.606479][   T35] hsr_slave_0: left promiscuous mode
[  454.861357][   T35] hsr_slave_1: left promiscuous mode
[  455.042491][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  455.428514][   T35] batman_adv: batadv0: Removing interface: batadv_slave_0
[  455.479620][   T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  455.523593][   T35] batman_adv: batadv0: Removing interface: batadv_slave_1
[  455.633711][   T35] veth1_macvtap: left promiscuous mode
[  455.662347][   T35] veth0_macvtap: left promiscuous mode
[  456.003596][   T35] veth1_vlan: left promiscuous mode
[  456.281503][   T35] veth0_vlan: left promiscuous mode
[  456.418902][ T5101] Bluetooth: hci4: command tx timeout
[  456.691767][T12345] loop3: detected capacity change from 0 to 40427
[  456.722011][T12345] F2FS-fs (loop3): Invalid Fs Meta Ino: node(1) meta(262146) root(3)
[  456.737950][T12345] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock
[  456.756837][T12345] F2FS-fs (loop3): Failed to start F2FS issue_checkpoint_thread (-4)
[  456.946765][T12380] loop1: detected capacity change from 0 to 512
[  456.986621][T12380] EXT4-fs (loop1): ea_inode feature is not supported for Hurd
[  457.095535][T12380] netlink: 'syz-executor.1': attribute type 2 has an invalid length.
[  457.315306][T12392] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'.
[  458.279894][   T35] team0 (unregistering): Port device team_slave_1 removed
[  458.340632][T11490] usb 4-1: new full-speed USB device number 14 using dummy_hcd
[  458.402393][   T35] team0 (unregistering): Port device team_slave_0 removed
[  458.498954][ T5101] Bluetooth: hci4: command tx timeout
[  458.573768][T11490] usb 4-1: New USB device found, idVendor=0413, idProduct=6026, bcdDevice=18.aa
[  458.588683][T11490] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  458.596738][T11490] usb 4-1: Product: syz
[  458.618922][T11490] usb 4-1: Manufacturer: syz
[  458.623582][T11490] usb 4-1: SerialNumber: syz
[  458.660180][T11490] usb 4-1: config 0 descriptor??
[  458.680802][T11490] dvb-usb: found a 'Leadtek - USB2.0 Winfast DTV dongle' in warm state.
[  458.700297][T11490] dvb-usb: bulk message failed: -22 (3/0)
[  458.733807][T11490] dvb-usb: will use the device's hardware PID filter (table count: 32).
[  458.747041][T11490] dvbdev: DVB: registering new adapter (Leadtek - USB2.0 Winfast DTV dongle)
[  458.766424][T11490] usb 4-1: media controller created
[  458.780298][T11490] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  458.832580][T11490] dvb-usb: bulk message failed: -22 (6/0)
[  458.841418][T11490] dvb-usb: bulk message failed: -22 (6/0)
[  458.847506][T11490] dvb-usb: no frontend was attached by 'Leadtek - USB2.0 Winfast DTV dongle'
[  458.873564][T11490] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input21
[  458.900848][T11490] dvb-usb: schedule remote query interval to 150 msecs.
[  458.913646][T11490] dvb-usb: Leadtek - USB2.0 Winfast DTV dongle successfully initialized and connected.
[  458.933335][T11490] usb 4-1: USB disconnect, device number 14
[  459.145652][T11490] dvb-usb: Leadtek - USB2.0 Winfast DTV dongle successfully deinitialized and disconnected.
[  459.216007][T12403] loop2: detected capacity change from 0 to 40427
[  459.228426][T12403] F2FS-fs (loop2): Invalid Fs Meta Ino: node(1) meta(262146) root(3)
[  459.238135][T12403] F2FS-fs (loop2): Can't find valid F2FS filesystem in 2th superblock
[  459.266592][T12403] F2FS-fs (loop2): Found nat_bits in checkpoint
[  459.357266][T12403] F2FS-fs (loop2): Try to recover 2th superblock, ret: 0
[  459.364702][T12403] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  459.415139][   T29] kauditd_printk_skb: 4 callbacks suppressed
[  459.415158][   T29] audit: type=1804 audit(1717418899.139:2714): pid=12403 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2567330533/syzkaller.2Mqr6T/60/file2/bus" dev="loop2" ino=10 res=1 errno=0
[  459.517622][   T29] audit: type=1804 audit(1717418899.189:2715): pid=12403 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir2567330533/syzkaller.2Mqr6T/60/file2/bus" dev="loop2" ino=10 res=1 errno=0
[  459.856839][T11204] syz-executor.2: attempt to access beyond end of device
[  459.856839][T11204] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  459.895666][T11204] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  460.117316][T12233] team0: Port device team_slave_0 added
[  460.198521][T12233] team0: Port device team_slave_1 added
[  460.335894][T12233] batman_adv: batadv0: Adding interface: batadv_slave_0
[  460.357814][T12233] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  460.419787][T12414] netlink: 'syz-executor.0': attribute type 2 has an invalid length.
[  460.444398][T12233] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  460.473148][T12233] batman_adv: batadv0: Adding interface: batadv_slave_1
[  460.488101][T12233] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  460.532254][T12233] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  460.633506][T12411] loop3: detected capacity change from 0 to 40427
[  460.686071][T12411] F2FS-fs (loop3): Invalid Fs Meta Ino: node(1) meta(262146) root(3)
[  460.717519][T12411] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock
[  460.734544][T12233] hsr_slave_0: entered promiscuous mode
[  460.747211][T12411] F2FS-fs (loop3): Found nat_bits in checkpoint
[  460.758310][T12233] hsr_slave_1: entered promiscuous mode
[  460.874405][T12411] F2FS-fs (loop3): Try to recover 2th superblock, ret: 0
[  460.884233][T12411] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  460.998417][   T29] audit: type=1804 audit(1717418900.719:2716): pid=12411 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1745728771/syzkaller.xdGL3J/129/file2/bus" dev="loop3" ino=10 res=1 errno=0
[  461.071663][   T29] audit: type=1804 audit(1717418900.759:2717): pid=12411 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir1745728771/syzkaller.xdGL3J/129/file2/bus" dev="loop3" ino=10 res=1 errno=0
[  461.306495][T12443] loop2: detected capacity change from 0 to 256
[  461.350679][T11490] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  461.436915][T10777] syz-executor.3: attempt to access beyond end of device
[  461.436915][T10777] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  461.460383][T10777] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  461.560964][T11490] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  461.575544][T11490] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  461.612185][T11490] usb 1-1: config 0 descriptor??
[  461.629721][T11490] cp210x 1-1:0.0: cp210x converter detected
[  461.927583][T12454] loop3: detected capacity change from 0 to 256
[  461.980830][T12454] FAT-fs (loop3): Directory bread(block 64) failed
[  462.008020][T12454] FAT-fs (loop3): Directory bread(block 65) failed
[  462.015057][T12454] FAT-fs (loop3): Directory bread(block 66) failed
[  462.022370][T12454] FAT-fs (loop3): Directory bread(block 67) failed
[  462.029299][T12454] FAT-fs (loop3): Directory bread(block 68) failed
[  462.036160][T12454] FAT-fs (loop3): Directory bread(block 69) failed
[  462.036170][T11490] cp210x 1-1:0.0: failed to get vendor val 0x370c size 13: -71
[  462.043198][T12454] FAT-fs (loop3): Directory bread(block 70) failed
[  462.056794][T11490] cp210x 1-1:0.0: GPIO initialisation failed: -71
[  462.057160][T12454] FAT-fs (loop3): Directory bread(block 71) failed
[  462.069402][T11490] usb 1-1: cp210x converter now attached to ttyUSB0
[  462.074225][T12454] FAT-fs (loop3): Directory bread(block 72) failed
[  462.083424][T12454] FAT-fs (loop3): Directory bread(block 73) failed
[  462.100861][T11490] usb 1-1: USB disconnect, device number 16
[  462.118848][T11490] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  462.131446][T11490] cp210x 1-1:0.0: device disconnected
[  463.565225][T12467] loop3: detected capacity change from 0 to 512
[  463.587938][T12467] EXT4-fs (loop3): bad s_min_extra_isize: 65535
[  464.561517][    C1] dccp_v4_rcv: dropped packet with invalid checksum
[  466.220878][T12500] overlayfs: overlapping lowerdir path
[  467.421827][T12450] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'.
[  467.439394][T12451] netlink: 'syz-executor.2': attribute type 4 has an invalid length.
[  467.447524][T12451] netlink: 'syz-executor.2': attribute type 5 has an invalid length.
[  467.512354][    C1] dccp_v4_rcv: dropped packet with invalid checksum
[  467.690639][T12233] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  467.702153][T12233] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  467.718029][T12233] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  467.754002][T12233] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  467.954313][T12233] 8021q: adding VLAN 0 to HW filter on device bond0
[  468.012120][T12233] 8021q: adding VLAN 0 to HW filter on device team0
[  468.040216][ T5097] bridge0: port 1(bridge_slave_0) entered blocking state
[  468.047395][ T5097] bridge0: port 1(bridge_slave_0) entered forwarding state
[  468.077398][ T5097] bridge0: port 2(bridge_slave_1) entered blocking state
[  468.084667][ T5097] bridge0: port 2(bridge_slave_1) entered forwarding state
[  468.133109][T12530] loop2: detected capacity change from 0 to 256
[  468.382781][T12517] loop1: detected capacity change from 0 to 32768
[  468.421501][T12517] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (12517)
[  468.431023][T12537] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.0'.
[  468.482220][T12517] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  468.489578][T12521] loop3: detected capacity change from 0 to 32768
[  468.493473][T12517] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  468.507844][T12517] BTRFS info (device loop1): using free-space-tree
[  468.593892][T12233] 8021q: adding VLAN 0 to HW filter on device batadv0
[  468.650550][T10777] ERROR: (device loop3): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 1
[  468.650550][T10777] 
[  468.688339][T10777] ERROR: (device loop3): remounting filesystem as read-only
[  468.702235][T10777] ERROR: (device loop3): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 3
[  468.702235][T10777] 
[  468.755247][T10777] ERROR: (device loop3): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 4
[  468.755247][T10777] 
[  468.789504][T10777] ERROR: (device loop3): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 5
[  468.789504][T10777] 
[  468.835948][T10777] ERROR: (device loop3): jfs_readdir: JFS:Dtree error: ino = 2, bn=0, index = 6
[  468.835948][T10777] 
[  469.064739][T11144] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  470.083005][T12567] loop3: detected capacity change from 0 to 32768
[  470.140505][T12567] XFS (loop3): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  470.205584][T12567] XFS (loop3): Ending clean mount
[  470.509879][T10777] XFS (loop3): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  473.153876][T12588] loop3: detected capacity change from 0 to 256
[  475.009454][T12570] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'.
[  475.030756][T12571] netlink: 'syz-executor.1': attribute type 4 has an invalid length.
[  475.048156][T12571] netlink: 'syz-executor.1': attribute type 5 has an invalid length.
[  475.279909][T12233] veth0_vlan: entered promiscuous mode
[  475.284817][   T29] audit: type=1804 audit(1717418915.009:2718): pid=12615 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2567330533/syzkaller.2Mqr6T/73/file0" dev="sda1" ino=1958 res=1 errno=0
[  475.327240][   T29] audit: type=1804 audit(1717418915.009:2719): pid=12615 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir2567330533/syzkaller.2Mqr6T/73/file0" dev="sda1" ino=1958 res=1 errno=0
[  475.376203][T12233] veth1_vlan: entered promiscuous mode
[  475.388179][   T29] audit: type=1804 audit(1717418915.049:2720): pid=12615 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir2567330533/syzkaller.2Mqr6T/73/file0" dev="sda1" ino=1958 res=1 errno=0
[  580.528581][    C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks:
[  580.535600][    C0] rcu: 	1-...!: (1 GPs behind) idle=aeb4/1/0x4000000000000000 softirq=54938/54939 fqs=4
[  580.548518][    C0] rcu: 	(detected by 0, t=10502 jiffies, g=74661, q=465 ncpus=2)
[  580.556265][    C0] Sending NMI from CPU 0 to CPUs 1:
[  580.561568][    C1] NMI backtrace for cpu 1
[  580.561591][    C1] CPU: 1 PID: 12233 Comm: syz-executor.4 Not tainted 6.10.0-rc2-syzkaller #0
[  580.561608][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024
[  580.561619][    C1] RIP: 0010:__lock_acquire+0x3e8/0x1fd0
[  580.561643][    C1] Code: 29 90 7e 31 db 85 c0 0f 95 c3 01 db 48 8b 44 24 50 48 8d b8 c4 0a 00 00 48 89 f8 48 c1 e8 03 48 89 44 24 60 0f b6 04 30 84 c0 <44> 8b 74 24 38 48 89 7c 24 18 0f 85 59 13 00 00 31 c0 83 bc 24 e8
[  580.561656][    C1] RSP: 0018:ffffc90000a18a70 EFLAGS: 00000046
[  580.561671][    C1] RAX: 0000000000000000 RBX: 0000000000000002 RCX: ffffffff9476a603
[  580.561682][    C1] RDX: 0000000000000002 RSI: dffffc0000000000 RDI: ffff88802c5ce4c4
[  580.561693][    C1] RBP: 000000000000000a R08: ffff88802c5ce4e0 R09: 0000000000000001
[  580.561704][    C1] R10: dffffc0000000000 R11: fffffbfff1f5833e R12: ffff8880b952c898
[  580.561716][    C1] R13: 0000000000000067 R14: 000000000000000a R15: 0000000000000000
[  580.561726][    C1] FS:  000055556e832480(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000
[  580.561740][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  580.561752][    C1] CR2: 00007fde147ded58 CR3: 000000005120c000 CR4: 00000000003506f0
[  580.561767][    C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  580.561777][    C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  580.561787][    C1] Call Trace:
[  580.561799][    C1]  <NMI>
[  580.561809][    C1]  ? nmi_cpu_backtrace+0x3c2/0x4d0
[  580.561831][    C1]  ? __pfx_lock_acquire+0x10/0x10
[  580.561848][    C1]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  580.561875][    C1]  ? nmi_cpu_backtrace_handler+0xc/0x20
[  580.561893][    C1]  ? nmi_handle+0x14f/0x5a0
[  580.561913][    C1]  ? nmi_handle+0x2a/0x5a0
[  580.561933][    C1]  ? __lock_acquire+0x3e8/0x1fd0
[  580.561948][    C1]  ? default_do_nmi+0x63/0x160
[  580.561968][    C1]  ? exc_nmi+0x123/0x1f0
[  580.561987][    C1]  ? end_repeat_nmi+0xf/0x53
[  580.562009][    C1]  ? __lock_acquire+0x3e8/0x1fd0
[  580.562024][    C1]  ? __lock_acquire+0x3e8/0x1fd0
[  580.562041][    C1]  ? __lock_acquire+0x3e8/0x1fd0
[  580.562056][    C1]  </NMI>
[  580.562062][    C1]  <IRQ>
[  580.562075][    C1]  lock_acquire+0x1ed/0x550
[  580.562090][    C1]  ? __hrtimer_run_queues+0x670/0xd50
[  580.562111][    C1]  ? advance_sched+0xa02/0xca0
[  580.562135][    C1]  ? __pfx_lock_acquire+0x10/0x10
[  580.562153][    C1]  ? do_raw_spin_unlock+0x13c/0x8b0
[  580.562173][    C1]  ? taprio_set_budgets+0x32c/0x370
[  580.562190][    C1]  ? advance_sched+0xa02/0xca0
[  580.562206][    C1]  ? advance_sched+0xa02/0xca0
[  580.562226][    C1]  _raw_spin_lock_irq+0xd3/0x120
[  580.562244][    C1]  ? __hrtimer_run_queues+0x670/0xd50
[  580.562263][    C1]  ? __pfx__raw_spin_lock_irq+0x10/0x10
[  580.562285][    C1]  __hrtimer_run_queues+0x670/0xd50
[  580.562304][    C1]  ? ktime_get_update_offsets_now+0x3c/0x250
[  580.562328][    C1]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  580.562348][    C1]  ? ktime_get_update_offsets_now+0x22d/0x250
[  580.562367][    C1]  hrtimer_interrupt+0x396/0x990
[  580.562396][    C1]  __sysvec_apic_timer_interrupt+0x110/0x3f0
[  580.562418][    C1]  sysvec_apic_timer_interrupt+0xa1/0xc0
[  580.562435][    C1]  </IRQ>
[  580.562441][    C1]  <TASK>
[  580.562447][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  580.562465][    C1] RIP: 0010:unwind_next_frame+0x29a/0x2a00
[  580.562484][    C1] Code: b0 20 00 00 44 8b 3b 89 e8 ff c0 48 8d 1c 85 50 64 d2 90 48 89 d8 48 c1 e8 03 42 0f b6 04 30 84 c0 0f 85 aa 20 00 00 44 8b 23 <41> ff c4 4b 8d 04 7f 48 8d 8c 00 e4 77 29 90 48 c7 c0 4e 64 d2 90
[  580.562497][    C1] RSP: 0018:ffffc900030b67a8 EFLAGS: 00000246
[  580.562510][    C1] RAX: 0000000000000000 RBX: ffffffff90fc58e8 RCX: 00000000000ac001
[  580.562521][    C1] RDX: ffff88802c5cda00 RSI: 00000000000a7d25 RDI: 00000000000ac000
[  580.562532][    C1] RBP: 00000000000a7d25 R08: ffffffff8140e1a4 R09: ffffc900030b6970
[  580.562543][    C1] R10: 0000000000000003 R11: ffffffff8181cee0 R12: 00000000001afb06
[  580.562554][    C1] R13: 00000000000ac001 R14: dffffc0000000000 R15: 00000000001afb04
[  580.562567][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  580.562583][    C1]  ? unwind_next_frame+0x244/0x2a00
[  580.562605][    C1]  ? unwind_next_frame+0x244/0x2a00
[  580.562625][    C1]  ? do_syscall_64+0xf2/0x230
[  580.562642][    C1]  ? do_syscall_64+0xf3/0x230
[  580.562658][    C1]  ? do_syscall_64+0xf3/0x230
[  580.562674][    C1]  ? __kernel_text_address+0xd/0x40
[  580.562693][    C1]  ? do_syscall_64+0xf3/0x230
[  580.562709][    C1]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  580.562724][    C1]  arch_stack_walk+0x151/0x1b0
[  580.562748][    C1]  ? do_syscall_64+0xf3/0x230
[  580.562766][    C1]  stack_trace_save+0x118/0x1d0
[  580.562782][    C1]  ? __pfx_stack_trace_save+0x10/0x10
[  580.562800][    C1]  ? __pfx_validate_chain+0x10/0x10
[  580.562820][    C1]  kasan_save_track+0x3f/0x80
[  580.562841][    C1]  ? kasan_save_track+0x3f/0x80
[  580.562858][    C1]  ? __kasan_kmalloc+0x98/0xb0
[  580.562878][    C1]  ? __kmalloc_noprof+0x1f9/0x400
[  580.562895][    C1]  ? fib_create_info+0xa3f/0x2510
[  580.562914][    C1]  ? fib_table_insert+0x1f6/0x1f30
[  580.562928][    C1]  ? fib_magic+0x3d8/0x620
[  580.562944][    C1]  ? fib_add_ifaddr+0x14c/0x5e0
[  580.562960][    C1]  ? fib_inetaddr_event+0x167/0x1f0
[  580.562978][    C1]  ? notifier_call_chain+0x19f/0x3e0
[  580.562993][    C1]  ? blocking_notifier_call_chain+0x69/0x90
[  580.563008][    C1]  ? __inet_insert_ifa+0x9d4/0xc30
[  580.563024][    C1]  ? inet_rtm_newaddr+0xbda/0x1af0
[  580.563039][    C1]  ? rtnetlink_rcv_msg+0x89b/0x10d0
[  580.563057][    C1]  ? netlink_rcv_skb+0x1e3/0x430
[  580.563072][    C1]  ? netlink_unicast+0x7ea/0x980
[  580.563085][    C1]  ? netlink_sendmsg+0x8db/0xcb0
[  580.563101][    C1]  ? __sock_sendmsg+0x221/0x270
[  580.563118][    C1]  ? __sys_sendto+0x3a4/0x4f0
[  580.563142][    C1]  ? __x64_sys_sendto+0xde/0x100
[  580.563160][    C1]  ? do_syscall_64+0xf3/0x230
[  580.563192][    C1]  __kasan_kmalloc+0x98/0xb0
[  580.563212][    C1]  ? fib_create_info+0xa3f/0x2510
[  580.563230][    C1]  __kmalloc_noprof+0x1f9/0x400
[  580.563249][    C1]  fib_create_info+0xa3f/0x2510
[  580.563279][    C1]  fib_table_insert+0x1f6/0x1f30
[  580.563299][    C1]  ? __pfx_lock_acquire+0x10/0x10
[  580.563314][    C1]  ? l3mdev_fib_table+0x18/0x160
[  580.563330][    C1]  ? __schedule+0x179e/0x49d0
[  580.563351][    C1]  ? __pfx_fib_table_insert+0x10/0x10
[  580.563367][    C1]  ? fib_new_table+0x120/0x2d0
[  580.563386][    C1]  fib_magic+0x3d8/0x620
[  580.563406][    C1]  ? __pfx_fib_magic+0x10/0x10
[  580.563423][    C1]  ? queue_work_on+0x25f/0x380
[  580.563444][    C1]  ? preempt_schedule_notrace+0x100/0x140
[  580.563462][    C1]  ? __pfx_preempt_schedule_notrace+0x10/0x10
[  580.563479][    C1]  ? addr_event+0x343/0x460
[  580.563500][    C1]  fib_add_ifaddr+0x14c/0x5e0
[  580.563521][    C1]  fib_inetaddr_event+0x167/0x1f0
[  580.563542][    C1]  notifier_call_chain+0x19f/0x3e0
[  580.563561][    C1]  blocking_notifier_call_chain+0x69/0x90
[  580.563578][    C1]  __inet_insert_ifa+0x9d4/0xc30
[  580.563601][    C1]  ? __pfx___inet_insert_ifa+0x10/0x10
[  580.563623][    C1]  inet_rtm_newaddr+0xbda/0x1af0
[  580.563645][    C1]  ? __pfx_inet_rtm_newaddr+0x10/0x10
[  580.563669][    C1]  ? __pfx_inet_rtm_newaddr+0x10/0x10
[  580.563685][    C1]  rtnetlink_rcv_msg+0x89b/0x10d0
[  580.563706][    C1]  ? rtnetlink_rcv_msg+0x208/0x10d0
[  580.563724][    C1]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  580.563744][    C1]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  580.563761][    C1]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  580.563780][    C1]  ? __local_bh_enable_ip+0x168/0x200
[  580.563794][    C1]  ? lockdep_hardirqs_on+0x99/0x150
[  580.563811][    C1]  ? __local_bh_enable_ip+0x168/0x200
[  580.563825][    C1]  ? dev_hard_start_xmit+0x773/0x7e0
[  580.563839][    C1]  ? __dev_queue_xmit+0x2d2/0x3d30
[  580.563854][    C1]  ? __pfx___local_bh_enable_ip+0x10/0x10
[  580.563872][    C1]  ? __dev_queue_xmit+0x2d2/0x3d30
[  580.563887][    C1]  ? __dev_queue_xmit+0x16c9/0x3d30
[  580.563909][    C1]  ? __dev_queue_xmit+0x2d2/0x3d30
[  580.563929][    C1]  ? ref_tracker_free+0x643/0x7e0
[  580.563950][    C1]  netlink_rcv_skb+0x1e3/0x430
[  580.563967][    C1]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  580.563985][    C1]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  580.564011][    C1]  ? netlink_deliver_tap+0x2e/0x1b0
[  580.564028][    C1]  netlink_unicast+0x7ea/0x980
[  580.564047][    C1]  ? __pfx_netlink_unicast+0x10/0x10
[  580.564060][    C1]  ? __virt_addr_valid+0x183/0x520
[  580.564081][    C1]  ? __check_object_size+0x49c/0x900
[  580.564099][    C1]  ? bpf_lsm_netlink_send+0x9/0x10
[  580.564120][    C1]  netlink_sendmsg+0x8db/0xcb0
[  580.564147][    C1]  ? __pfx_netlink_sendmsg+0x10/0x10
[  580.564162][    C1]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  580.564181][    C1]  ? bpf_lsm_socket_sendmsg+0x9/0x10
[  580.564195][    C1]  ? security_socket_sendmsg+0x87/0xb0
[  580.564214][    C1]  ? __pfx_netlink_sendmsg+0x10/0x10
[  580.564229][    C1]  __sock_sendmsg+0x221/0x270
[  580.564249][    C1]  __sys_sendto+0x3a4/0x4f0
[  580.564271][    C1]  ? __pfx___sys_sendto+0x10/0x10
[  580.564302][    C1]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  580.564320][    C1]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  580.564338][    C1]  __x64_sys_sendto+0xde/0x100
[  580.564360][    C1]  do_syscall_64+0xf3/0x230
[  580.564376][    C1]  ? clear_bhb_loop+0x35/0x90
[  580.564394][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  580.564410][    C1] RIP: 0033:0x7fc9b9c7ebdc
[  580.564429][    C1] Code: 1a 51 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 60 51 02 00 48 8b
[  580.564442][    C1] RSP: 002b:00007ffd718009e0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c
[  580.564457][    C1] RAX: ffffffffffffffda RBX: 00007fc9ba8e4620 RCX: 00007fc9b9c7ebdc
[  580.564469][    C1] RDX: 0000000000000028 RSI: 00007fc9ba8e4670 RDI: 0000000000000003
[  580.564480][    C1] RBP: 0000000000000000 R08: 00007ffd71800a34 R09: 000000000000000c
[  580.564490][    C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003
[  580.564500][    C1] R13: 0000000000000000 R14: 00007fc9ba8e4670 R15: 0000000000000000
[  580.564517][    C1]  </TASK>
[  580.564563][    C0] rcu: rcu_preempt kthread starved for 10494 jiffies! g74661 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0
[  581.544420][    C0] rcu: 	Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior.
[  581.554397][    C0] rcu: RCU grace-period kthread stack dump:
[  581.560286][    C0] task:rcu_preempt     state:R  running task     stack:26576 pid:17    tgid:17    ppid:2      flags:0x00004000
[  581.572050][    C0] Call Trace:
[  581.575422][    C0]  <TASK>
[  581.578368][    C0]  __schedule+0x1796/0x49d0
[  581.582911][    C0]  ? __pfx___schedule+0x10/0x10
[  581.587774][    C0]  ? __pfx_lock_release+0x10/0x10
[  581.592816][    C0]  ? __asan_memset+0x23/0x50
[  581.597424][    C0]  ? __pfx_lockdep_init_map_type+0x10/0x10
[  581.603261][    C0]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  581.609623][    C0]  ? schedule+0x90/0x320
[  581.613885][    C0]  schedule+0x14b/0x320
[  581.618060][    C0]  schedule_timeout+0x1be/0x310
[  581.622923][    C0]  ? __pfx_schedule_timeout+0x10/0x10
[  581.628309][    C0]  ? __pfx_process_timeout+0x10/0x10
[  581.633614][    C0]  ? prepare_to_swait_event+0x32e/0x350
[  581.639178][    C0]  rcu_gp_fqs_loop+0x2df/0x1330
[  581.644049][    C0]  ? __pfx_rcu_implicit_dynticks_qs+0x10/0x10
[  581.650144][    C0]  ? __pfx_rcu_gp_fqs_loop+0x10/0x10
[  581.655435][    C0]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  581.661358][    C0]  ? finish_swait+0xd4/0x1e0
[  581.665968][    C0]  rcu_gp_kthread+0xa7/0x3b0
[  581.670569][    C0]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  581.675772][    C0]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  581.681688][    C0]  ? __kthread_parkme+0x169/0x1d0
[  581.686734][    C0]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  581.691940][    C0]  kthread+0x2f0/0x390
[  581.696021][    C0]  ? __pfx_rcu_gp_kthread+0x10/0x10
[  581.701226][    C0]  ? __pfx_kthread+0x10/0x10
[  581.705832][    C0]  ret_from_fork+0x4b/0x80
[  581.710257][    C0]  ? __pfx_kthread+0x10/0x10
[  581.714864][    C0]  ret_from_fork_asm+0x1a/0x30
[  581.719653][    C0]  </TASK>
[  581.722675][    C0] rcu: Stack dump where RCU GP kthread last ran:
[  581.729015][    C0] CPU: 0 PID: 11 Comm: kworker/u8:0 Not tainted 6.10.0-rc2-syzkaller #0
[  581.737429][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024
[  581.747490][    C0] Workqueue: events_unbound toggle_allocation_gate
[  581.754089][    C0] RIP: 0010:smp_call_function_many_cond+0x1865/0x29d0
[  581.760897][    C0] Code: 89 e6 83 e6 01 31 ff e8 99 09 0c 00 41 83 e4 01 49 bc 00 00 00 00 00 fc ff df 75 07 e8 44 05 0c 00 eb 38 f3 90 42 0f b6 04 23 <84> c0 75 11 41 f7 45 00 01 00 00 00 74 1e e8 28 05 0c 00 eb e4 44
[  581.780508][    C0] RSP: 0018:ffffc90000107700 EFLAGS: 00000293
[  581.786589][    C0] RAX: 0000000000000000 RBX: 1ffff110172a88a1 RCX: ffff888016ef3c00
[  581.794674][    C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000
[  581.802661][    C0] RBP: ffffc900001078e0 R08: ffffffff818a1037 R09: 1ffffffff25ee4b0
[  581.810904][    C0] R10: dffffc0000000000 R11: fffffbfff25ee4b1 R12: dffffc0000000000
[  581.818883][    C0] R13: ffff8880b9544508 R14: ffff8880b943f8c0 R15: 0000000000000001
[  581.826867][    C0] FS:  0000000000000000(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000
[  581.835802][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  581.842387][    C0] CR2: 0000001b3192a000 CR3: 000000000e132000 CR4: 00000000003506f0
[  581.850364][    C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  581.858338][    C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  581.866396][    C0] Call Trace:
[  581.869715][    C0]  <IRQ>
[  581.872573][    C0]  ? rcu_check_gp_kthread_starvation+0x278/0x310
[  581.879008][    C0]  ? print_other_cpu_stall+0x1470/0x15a0
[  581.884673][    C0]  ? __pfx_print_other_cpu_stall+0x10/0x10
[  581.890486][    C0]  ? __pfx_lock_release+0x10/0x10
[  581.895524][    C0]  ? kvm_check_and_clear_guest_paused+0x6a/0xd0
[  581.901775][    C0]  ? rcu_sched_clock_irq+0x9f4/0x10a0
[  581.907161][    C0]  ? __pfx_rcu_sched_clock_irq+0x10/0x10
[  581.912799][    C0]  ? hrtimer_run_queues+0x16c/0x460
[  581.918006][    C0]  ? acct_account_cputime+0x207/0x210
[  581.923385][    C0]  ? update_process_times+0x1ce/0x230
[  581.928764][    C0]  ? tick_nohz_handler+0x37c/0x500
[  581.933890][    C0]  ? __pfx_tick_nohz_handler+0x10/0x10
[  581.939363][    C0]  ? __hrtimer_run_queues+0x551/0xd50
[  581.944741][    C0]  ? ktime_get_update_offsets_now+0x3c/0x250
[  581.950745][    C0]  ? __pfx___hrtimer_run_queues+0x10/0x10
[  581.956475][    C0]  ? ktime_get_update_offsets_now+0x22d/0x250
[  581.962551][    C0]  ? hrtimer_interrupt+0x396/0x990
[  581.967695][    C0]  ? __sysvec_apic_timer_interrupt+0x110/0x3f0
[  581.973859][    C0]  ? sysvec_apic_timer_interrupt+0xa1/0xc0
[  581.979682][    C0]  </IRQ>
[  581.982616][    C0]  <TASK>
[  581.985552][    C0]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  581.991718][    C0]  ? smp_call_function_many_cond+0x1847/0x29d0
[  581.997883][    C0]  ? smp_call_function_many_cond+0x1865/0x29d0
[  582.004049][    C0]  ? kmem_cache_alloc_bulk_noprof+0x146/0x770
[  582.010128][    C0]  ? __pfx_do_sync_core+0x10/0x10
[  582.015159][    C0]  ? kmem_cache_alloc_bulk_noprof+0x146/0x770
[  582.021256][    C0]  ? __pfx_smp_call_function_many_cond+0x10/0x10
[  582.027590][    C0]  ? __pfx___might_resched+0x10/0x10
[  582.032881][    C0]  ? __mutex_trylock_common+0x183/0x2e0
[  582.038434][    C0]  ? __pfx___might_resched+0x10/0x10
[  582.043727][    C0]  ? __pfx_do_sync_core+0x10/0x10
[  582.048757][    C0]  on_each_cpu_cond_mask+0x3f/0x80
[  582.053879][    C0]  text_poke_bp_batch+0x352/0xb30
[  582.058922][    C0]  ? __pfx_text_poke_bp_batch+0x10/0x10
[  582.064476][    C0]  ? __pfx___mutex_lock+0x10/0x10
[  582.069515][    C0]  ? arch_jump_label_transform_queue+0x9b/0x100
[  582.075770][    C0]  text_poke_finish+0x30/0x50
[  582.080450][    C0]  arch_jump_label_transform_apply+0x1c/0x30
[  582.086435][    C0]  static_key_enable_cpuslocked+0x136/0x260
[  582.092341][    C0]  static_key_enable+0x1a/0x20
[  582.097114][    C0]  toggle_allocation_gate+0xb5/0x250
[  582.102404][    C0]  ? __pfx_toggle_allocation_gate+0x10/0x10
[  582.108304][    C0]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  582.114649][    C0]  ? process_scheduled_works+0x945/0x1830
[  582.120371][    C0]  process_scheduled_works+0xa2c/0x1830
[  582.125956][    C0]  ? __pfx_process_scheduled_works+0x10/0x10
[  582.131951][    C0]  ? assign_work+0x364/0x3d0
[  582.136638][    C0]  worker_thread+0x86d/0xd70
[  582.141249][    C0]  ? __kthread_parkme+0x169/0x1d0
[  582.146284][    C0]  ? __pfx_worker_thread+0x10/0x10
[  582.151407][    C0]  kthread+0x2f0/0x390
[  582.155492][    C0]  ? __pfx_worker_thread+0x10/0x10
[  582.160605][    C0]  ? __pfx_kthread+0x10/0x10
[  582.165301][    C0]  ret_from_fork+0x4b/0x80
[  582.169727][    C0]  ? __pfx_kthread+0x10/0x10
[  582.174324][    C0]  ret_from_fork_asm+0x1a/0x30
[  582.179112][    C0]  </TASK>