last executing test programs:

6.906514744s ago: executing program 2 (id=874):
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000002380)='./file0\x00', 0x4040, &(0x7f00000023c0)=ANY=[], 0x1, 0x6eb, &(0x7f0000000900)="$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")
fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
mkdir(&(0x7f0000000300)='./file0\x00', 0x1d5)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/diskstats\x00', 0x0, 0x0)
preadv(r3, &(0x7f0000000000)=[{&(0x7f0000002100)=""/4112, 0x1010}], 0x1, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x9, 0x8, &(0x7f0000000600)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sock=0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x9}, 0x10, 0x0, r3, 0x0, 0x0, 0x0, 0x10, 0xd16, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000300))
ioctl$FS_IOC_GETFLAGS(r5, 0x5437, 0x0)

6.709198551s ago: executing program 1 (id=875):
socket$nl_netfilter(0x10, 0x3, 0xc)
r0 = syz_open_dev$vbi(&(0x7f00000001c0), 0x3, 0x2)
ioctl$VIDIOC_G_SLICED_VBI_CAP(r0, 0xc0745645, &(0x7f0000000040)={0x0, [0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6, 0x0, 0x0, 0x0, 0x2, 0x2000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9], 0x4})
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/disk', 0x169a82, 0x0)
sendfile(r1, r1, 0x0, 0x7)
setsockopt(0xffffffffffffffff, 0x84, 0x80, &(0x7f00000002c0)="1a00000002000000", 0x8)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d1d7a440041601801f44010203010902120001000000000904"], 0x0)
syz_open_dev$sndctrl(&(0x7f0000000000), 0xdc3, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x2, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000003c00000000000000000000000400000000000000c3170000000000139500000000000000bcf886da84e672a6d24d3493697e92f871bad3f8a5a85340acc60e171ba096090c202db9ab7f2e1fc444274be099e152f8af96918d23121de11fba4f92a4d40a3425d751f1ab2fa7eb18238a6c6cf495405cba6cc77606d1ac39938db00e78df7a3ae18559dbc3a65729a05be8c72c6dd4024732c047b8f7ee14b1a1c0f6be9149716bd9f73094fe69de"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x93, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x17, &(0x7f00000006c0)=ANY=[@ANYBLOB="460a00000000000079109800000000001801000020756c2500000000002020207b1af8ff00000000bfa10000000000000000f8ffffffb702000008000000b7030000000400008500000006000000851000000300000018540000080000000000000000000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000008500000006000000dd7afefffcffffff95000000000000000000"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r2 = socket$netlink(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000006800)={&(0x7f0000000080)={0x1c, r3, 0x615, 0x0, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x26}]}, 0x1c}, 0x5}, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"/2832], &(0x7f0000000340)='syzkaller\x00', 0x2a9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xfffffffc}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76389e147583ddd0569ba56a5cfd", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50)
r5 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_FD_FRAMES(r5, 0x65, 0x8, &(0x7f0000000040), &(0x7f00000023c0)=0x5a9295544b4f400d)
socket$inet_udp(0x2, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="01000000040000000800000008000000000000009bbb1ee26abcd772de76a42cf09aa0eb7fb705c3e95b3b73256f4b5222c715b64c5db7b213b133cd54938059dba7618d5af6f8c4c3347cc8dbe8c591405932f3a73d07c4192c943fb07e15601682a621db503aaeda2358f889beadcd19f419a103eabd2599d8cdfcdeb1faeb94fdae38005503e6b64af1909595a8a970824897", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{0x1}, 0x0, 0x0}, 0x20)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
bind$inet6(r6, &(0x7f00000001c0)={0xa, 0x0, 0x3000000, @loopback}, 0x1c)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_audit(0x10, 0x3, 0x9)
mount$bind(0x0, 0x0, 0x0, 0x101091, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
creat(0x0, 0x35c34b82265c31c5)

6.17636519s ago: executing program 0 (id=878):
r0 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000008000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r6, &(0x7f0000000100)={0x1f, 0x2000, @fixed, 0x4, 0x2}, 0xe)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_group_source_req(r7, 0x0, 0x2e, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @local}}}, 0x108)
preadv(r0, &(0x7f0000002240)=[{&(0x7f0000000480)=""/21, 0x15}], 0x1, 0x5d, 0x0)

5.912213254s ago: executing program 2 (id=879):
r0 = syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file1\x00', 0x1008810, &(0x7f0000000340)=ANY=[], 0x1, 0x5f4, &(0x7f000001f6c0)="$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")
r1 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e1e, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1e}}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f00000014c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, 0x0, 0x0, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00')
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001280)=ANY=[@ANYBLOB=',\x00\x00', @ANYRES16, @ANYBLOB="010000000000fbdbdf251e000cbe69a6424632c8020076657468315f746f5f6272696467"], 0x2c}, 0x1, 0x0, 0x0, 0x44}, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4)
r6 = socket$netlink(0x10, 0x3, 0x8000000004)
r7 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r7, &(0x7f0000000000)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd00000010000100090808004149004006040820", 0x58}], 0x1)
writev(r6, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1)

5.460726725s ago: executing program 4 (id=880):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff}, 0x111, 0x5}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000440)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000340)=0x1, r1, 0x0, 0x1, 0x4}}, 0x20)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=<r3=>0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="000000000000000004000000ff00000000000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000000000000000000000847ba2d8b90c2dcaf17e982ca7024bb2e4f86cd15d6ee0e80484e8c4657a29de1b2b1e646581453901c7340a9950f4c60e5c636a0e0700000032ca31", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYRESOCT=r3], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x68, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9, @void, @value}, 0x94)
socket$netlink(0x10, 0x3, 0x0)
openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4)
mkdir(&(0x7f00000020c0)='./file0\x00', 0x0)
mount$tmpfs(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000080), 0x0, 0x0)
mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x2a00a9, &(0x7f0000000080)=ANY=[@ANYBLOB='nr_blkcks=8,nr_inodVs=\x00,\x00'])
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f00000003c0)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0200000004000000060000000500000000100000", @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000063d0aac81401a27148b09f2ef8f5418fc5b790", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000001900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffe9c, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x0)

5.175745631s ago: executing program 0 (id=881):
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4)
sendmmsg$inet6(r0, &(0x7f0000005580)=[{{&(0x7f0000000080)={0xa, 0x4e03, 0x3000, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}, {{&(0x7f0000000880)={0xa, 0x4e22, 0x2, @remote, 0x3}, 0x1c, 0x0, 0x0, &(0x7f0000001200)=[@dstopts_2292={{0x18, 0x29, 0x4, {0xc}}}], 0x18}}], 0x2, 0x4004880)

5.07045786s ago: executing program 0 (id=882):
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b00000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r2, &(0x7f0000000440)=ANY=[@ANYBLOB="b0"], 0xb0)
mount$9p_fd(0xff00, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@access_user}]}})

4.384368742s ago: executing program 2 (id=883):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1b7)
write$binfmt_elf64(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="7f454c4600000000000000000000000003003e0000000000000000007c80000040000000000000000000000000f80000000000000000380001"], 0x75)
close(r0)
execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0)

4.328878808s ago: executing program 1 (id=884):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={{0x14}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x22}]}}}]}]}], {0x14}}, 0x9c}}, 0x40) (fail_nth: 12)

4.328317688s ago: executing program 0 (id=885):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
rt_sigprocmask(0x0, &(0x7f0000000480)={[0xfffffffffffffffd]}, 0x0, 0x8)
open_tree(0xffffffffffffffff, &(0x7f0000000640)='\x00', 0x81000)

4.274989122s ago: executing program 4 (id=887):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000080)=ANY=[@ANYBLOB="0100000000000f0096000040"])

4.061237871s ago: executing program 0 (id=888):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000dc0), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)={0x54, r1, 0xb71e4421039a9265, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x40, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x8003, {'gcm(aes)\x00', 0x14, "1b9a02291f7bbb0b5b3405d19d5a2e1c5cde6a3d"}}]}]}, 0x54}}, 0x0)
syz_mount_image$jfs(&(0x7f0000000080), &(0x7f0000000280)='./bus\x00', 0x2218c81, &(0x7f0000000680)=ANY=[@ANYBLOB="646973636172642c6e6f71756f74612c6572726f72733d636f6e74696e75652c696f636861727365743d63703737352c726573697a653d3078666666666666666666666666666634632c75737271756f74612c67727071756f74610300727071756f74612c71756f74612c67727071756f74612c75737271756f74612c726573697a652c646973636172642c6572726f72733d72656d6f756e742d726f2c6e6f71756f74612c00"], 0x1, 0x60f6, &(0x7f000000c4c0)="$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")
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
r3 = syz_init_net_socket$ax25(0x3, 0x3, 0x7)
fstat(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, <r4=>0x0})
getsockopt$IP_VS_SO_GET_DESTS(r2, 0x0, 0x484, &(0x7f0000000000)=""/178, &(0x7f00000000c0)=0xb2)
setresuid(0xee00, r4, 0x0)
bind$ax25(r3, &(0x7f0000000540)={{0x3, @default}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x48)

3.804730795s ago: executing program 1 (id=889):
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000002380)='./file0\x00', 0x4040, &(0x7f00000023c0)=ANY=[], 0x1, 0x6eb, &(0x7f0000000900)="$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")
fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
mkdir(&(0x7f0000000300)='./file0\x00', 0x1d5)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/diskstats\x00', 0x0, 0x0)
preadv(r3, &(0x7f0000000000)=[{&(0x7f0000002100)=""/4112, 0x1010}], 0x1, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x9, 0x8, &(0x7f0000000600)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sock=0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x9}, 0x10, 0x0, r3, 0x0, 0x0, 0x0, 0x10, 0xd16, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000300))
ioctl$FS_IOC_GETFLAGS(r5, 0x5437, 0x0)

3.7560649s ago: executing program 2 (id=890):
r0 = socket(0x10, 0x3, 0x0)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000100)={0x0, r0}, 0x8)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7fc, 0x0, 0x0, @void, @value, @void, @value}, 0x50)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bd2)
getpgid(0xffffffffffffffff)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x5, &(0x7f0000000080)=0x6)
futex(&(0x7f000000cffc), 0x6, 0x3d, 0x0, 0x0, 0x2)
r2 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0)
r3 = socket(0x2000000000000021, 0x2, 0x10000000000002)
connect$rxrpc(r3, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24)
sendmmsg(r3, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800ff7f000000000000000001820a7410000000000063"], 0x18, 0x7000000}, 0xf401}], 0x1, 0x0)
sendmmsg(r3, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0x7000000}, 0xf401}], 0x1, 0x0)
sendto$inet(r2, 0x0, 0x0, 0x200007ed, &(0x7f0000008400)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x43}}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f00000002c0)='highspeed\x00', 0xa)
write$binfmt_elf64(r2, &(0x7f0000000040)=ANY=[], 0xa89)
r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0)
write$sndseq(r4, &(0x7f00000005c0)=[{0x6, 0x0, 0x0, 0x0, @time, {0x7}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"272be5806cd46d7b9ff797a0"}}, {}], 0x70)
r5 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r6=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x150, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x146, 0x2, [@TCA_RED_PARMS={0x14}, @TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_MAX_P={0x8}]}}]}, 0x150}}, 0x0)

3.727578872s ago: executing program 4 (id=891):
r0 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00')
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0)
sched_setscheduler(0x0, 0x1, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000008000000850000008200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r5}, 0x10)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
connect$bt_l2cap(r6, &(0x7f0000000100)={0x1f, 0x2000, @fixed, 0x4, 0x2}, 0xe)
r7 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_group_source_req(r7, 0x0, 0x2e, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @local}}}, 0x108)
preadv(r0, &(0x7f0000002240)=[{&(0x7f0000000480)=""/21, 0x15}], 0x1, 0x5d, 0x0)

3.454448137s ago: executing program 3 (id=893):
r0 = syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file1\x00', 0x1008810, &(0x7f0000000340)=ANY=[], 0x1, 0x5f4, &(0x7f000001f6c0)="$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")
r1 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e1e, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1e}}}, 0x1c)
sendmmsg$inet6(r1, &(0x7f00000014c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40000000000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, 0x0, 0x0, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080)='./file2\x00')
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r5, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001280)=ANY=[@ANYBLOB=',\x00\x00', @ANYRES16, @ANYBLOB="010000000000fbdbdf251e000cbe69a6424632c8020076657468315f746f5f6272696467"], 0x2c}, 0x1, 0x0, 0x0, 0x44}, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000240)=0x9, 0x4)
r6 = socket$netlink(0x10, 0x3, 0x8000000004)
r7 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r7, &(0x7f0000000000)=[{&(0x7f0000000440)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f64009400050028925a01000000000000008000f0fffeffe809000000fff5dd00000010000100090808004149004006040820", 0x58}], 0x1)
writev(r6, &(0x7f0000000180)=[{&(0x7f00000001c0)="580000001500add427323b472545b4560a117fffffff81000e220e227f000001925aa80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1)

2.801513986s ago: executing program 1 (id=894):
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
r1 = syz_io_uring_complete(0x0)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000280)=0xebd68d0e6ad35255, 0x4)
ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000180)={'vxcan0\x00', <r4=>0x0})
bind$can_j1939(r3, &(0x7f0000000240)={0x1d, r4, 0x2}, 0x18)
connect$can_j1939(r3, &(0x7f0000000200)={0x1d, r4, 0x3, {0x2, 0x0, 0x4}}, 0x18)
r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r5}, 0x10)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
pipe2$9p(&(0x7f0000000240)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r7, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffffed7a000008003950323030302e4c"], 0x15)
r8 = dup(r7)
write$FUSE_BMAP(r8, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r8, &(0x7f0000000740)=ANY=[@ANYBLOB="5001"], 0x150)
write$FUSE_OPEN(r8, &(0x7f0000000280)={0x35}, 0x20)
getresuid(&(0x7f00000000c0), &(0x7f00000001c0), &(0x7f0000000180)=<r9=>0x0)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r8, @ANYBLOB=',privport,access=', @ANYRESDEC=r9])
chdir(&(0x7f0000000080)='./file0\x00')
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x60, r2, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x44, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x11}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r10 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$nfc_llcp(r10, 0x6, 0x1a, 0x0, 0x2000e881)
prctl$PR_SET_SECCOMP(0x16, 0x1, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x7, 0x3, 0x5, 0xb7}, {0xf9f, 0x8, 0x9, 0xcbf}]})
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f00000007c0)={'vxcan1\x00', <r13=>0x0})
sendmsg$nl_route(r12, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000900)=@can_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {}, [@CGW_DST_IF={0x8, 0xa, r13}, @CGW_SRC_IF={0x8, 0x9, r13}]}, 0x24}}, 0x0)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4)

2.510809622s ago: executing program 0 (id=895):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000200)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c696e74722c6e6f61636c2c00cca95d9508800817f8254b73447649b206b05a00815372e7c7713b4e67be5e222c5d2019012909a42442df3433324596781a5ddeeee07b8da9c3c8b4af28922a1ab0e86562ec9366ce02ae485a9a12eb0fd600b5d190f8b6d77dcf83d81a87561f00aa19b1f1788849412b24a71f5933704df847f0be1a06302aba16"], 0x1, 0x442a, &(0x7f0000008940)="$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")
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write$binfmt_misc(r0, &(0x7f0000000000), 0xfffffecc)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000000c0), 0x4)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000080)="27641f6df1c746084fea2f9ee7706666", 0x10)

2.509957803s ago: executing program 3 (id=896):
syz_mount_image$ext4(&(0x7f0000000800)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x2040d0, &(0x7f00000002c0)={[{@jqfmt_vfsv0}, {@abort}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1000005}}, {@grpjquota}, {@test_dummy_encryption}, {@nomblk_io_submit}]}, 0xfb, 0x49f, &(0x7f0000001440)="$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")
r0 = add_key$user(&(0x7f0000000100), 0x0, 0x0, 0x0, 0xffffffffffffffff)
keyctl$set_timeout(0xf, r0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000180)='./file0\x00', 0x5000, &(0x7f0000001240)=ANY=[], 0xfe, 0xc3e, &(0x7f0000001900)="$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")
r2 = syz_open_dev$vbi(&(0x7f00000001c0), 0x3, 0x2)
ioctl$VIDIOC_G_SLICED_VBI_CAP(r2, 0xc0745645, &(0x7f0000000200)={0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0xc})
r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_int(r3, 0x0, 0xb, &(0x7f00000000c0)=0x50f, 0x24)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x1a, &(0x7f0000000200)={0x0, 'netdevsim0\x00'}, 0x18)
syz_emit_ethernet(0x0, 0x0, 0x0)
syz_open_dev$video4linux(&(0x7f0000000000), 0x0, 0x0)
ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r2, 0xc0305602, &(0x7f0000000080)={0x0, 0x74b3, 0x1015})
r4 = syz_open_procfs(0x0, &(0x7f0000000280)='net/icmp6\x00')
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
write$binfmt_script(0xffffffffffffffff, 0x0, 0xffffffffffffffa9)
accept4$packet(r4, &(0x7f0000000e00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000e40)=0x14, 0x80000)
writev(0xffffffffffffffff, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10, 0xffffffffffffffff, 0x0)
ftruncate(0xffffffffffffffff, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
getpid()

2.20828035s ago: executing program 4 (id=897):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000e00)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="009b7e91bf18cd9430f4e1ee26870d4e291b10f3af9c21afd779d0ef023223a551f81042fa1b4a3eac3fa71eab99124c75f5a0d624ae9caeb800"], 0x1, 0xdab, &(0x7f0000000e80)="$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")
syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000000))
chdir(&(0x7f00000003c0)='./bus\x00')
mknod$loop(&(0x7f0000000140)='./file0\x00', 0x2000, 0x0)
unlink(&(0x7f0000000040)='./file0\x00')
write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff"], 0x15)
r2 = mq_open(&(0x7f0000000040)='!\x7f\x00\xca\x00\x00\x00\f\x00\x00\x01E!T\xeeux\x00', 0x6e93ebbbcc0884f2, 0x0, 0x0)
mq_timedreceive(r2, 0x0, 0xfffffffffffffee3, 0x1, 0x0)
mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0)
r3 = dup(r1)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0b9bd7f52b00001e0805000000000000050000002590d7db692bce3681f89fb2becceb507c8e6944eeaa2b2ae3b20d230c864f64b0d796b37ea6bf89fe9dd43733e79e45ba055583b75592cc4315c0d6a02f8fa4a58795f77a9c7d867cefe49954c81bc358a47e52cbca954630c05401633e8e6d839be3100ef40a7817038ca2", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000100000000000000fe0018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10)
mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r3])
write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18)
ioctl$DRM_IOCTL_RES_CTX(r3, 0xc0106426, &(0x7f0000000300)={0x7, &(0x7f0000000200)=[{<r7=>0x0}, {}, {}, {}, {}, {}, {}]})
ioctl$DRM_IOCTL_UNLOCK(r6, 0x4008642b, &(0x7f0000000340)={r7, 0x20})
write$FUSE_DIRENTPLUS(r3, &(0x7f0000000540)=ANY=[@ANYBLOB="a8"], 0xa8)
connect$netrom(r3, &(0x7f0000000280)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x7}, [@bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @default, @null, @default, @null]}, 0x48)
write$FUSE_DIRENTPLUS(r3, &(0x7f00000007c0)=ANY=[@ANYBLOB="6801"], 0x168)
write$FUSE_BMAP(r3, &(0x7f00000000c0)={0x18}, 0x18)
write$FUSE_INIT(r3, &(0x7f0000000580)={0x50}, 0x50)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r3])
openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x10400, 0x0)

1.793744237s ago: executing program 4 (id=898):
r0 = socket(0xa, 0x3, 0x3a)
syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x400, 0x0, 0x0, 0x0, &(0x7f0000000000))
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x8000, &(0x7f0000000300)={[{@redirect_dir_off}, {@upperdir={'upperdir', 0x3d, './file2'}}, {@nfs_export_on}, {@userxattr}], [], 0x2c})
bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000063018c00000000009500000001000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.current\x00', 0x7a05, 0x1700)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0)
write$cgroup_pid(r1, &(0x7f0000000a80), 0x12)
ioctl$SIOCSIFHWADDR(r1, 0x40086602, &(0x7f0000000540)={'\x00', @dev})
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e40)={0x11, 0x5, &(0x7f0000000440)=@raw=[@ldst={0x2, 0x3, 0x0, 0x6, 0x9, 0xfffffffffffffff0, 0x4}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, @map_fd={0x18, 0x5}], &(0x7f00000004c0)='GPL\x00', 0x9, 0x0, 0x0, 0x41100, 0x51, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000900)={0x3, 0x4, 0x5, 0x7}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000a00)=[0xffffffffffffffff], &(0x7f0000000bc0)=[{0x0, 0x4, 0xb, 0xa}, {0x1, 0x3, 0x8}, {0x4, 0x1, 0x8, 0xa}, {0x1, 0x5, 0x6, 0xa}, {0x3, 0x1}, {0x1, 0x1, 0x7, 0xb}, {0x2, 0x1, 0x3}], 0x10, 0x9, @void, @value}, 0x90)
setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, 0x0, 0x0)

1.679239678s ago: executing program 1 (id=899):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
rt_sigprocmask(0x0, &(0x7f0000000480)={[0xfffffffffffffffd]}, 0x0, 0x8)
open_tree(0xffffffffffffffff, &(0x7f0000000640)='\x00', 0x81000)

1.591427425s ago: executing program 3 (id=900):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x400000}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") (async)
syz_mount_image$hfs(&(0x7f0000002c80), &(0x7f0000000080)='./file1\x00', 0x0, &(0x7f0000002cc0)=ANY=[], 0xfd, 0x278, &(0x7f0000000200)="$eJzs3c9qE1EUx/HfnaRttKVO/4ggrqoFV9LWjbgpSN/AjStRmwjFUEErqKvqWnwA976CD+DSlbgW3LnyAbKL3DM3ZpJmMnFoOkn6/UBC0rln5tzMnd57ppQIwLl1b+/X59u//cNJFVUk3ZUiSTWpKumyrtReHR4dHDUb9WE7qliEfzglke5Em/3DxqBQH2cRQezfVbWU/hnGo/ZTx2XngPLZ1T9AJC2Eq9O21848s/E474PetdTSay2XnQcAoFxh/o/CPL8U1u9RJG2Gab93/p/yCbRVdgJj9jVne2r+tyqr7fz5vWSbuvWelXB+e9SpEovkMq9kZPUsMF1eVWm5RBeeHjQbt/afN+uR3ms3mOs2W7fnejJ0O9LZvju5640BtekQxfu+aH2Y833YSeefarJ2ukfM57657+6hi/VJ9X/rv2rb+dNkZyruO1NJ/lvZe7RezstaZfRyxQ5yNRwhGNrLijIqEnVG1Ip6bxDEeXla1GpfVNK77ZyotYFROzlR6/1R3dGcHTlu7qN74Db0R1+0l1r/R/7T3tQoV6ZvYy3DyBjan6q1jG0+CVfd8bWBLaOiPUIBH/REd7T88s3bZ4+bzcaLmX3hr8QJSGOiXnQGwaTkM7Mv/IdcytE7807x/ZT2mwlnqHvS/zOQv83MCr/uckn9l6pXtmyx5p/i3nX6Qjq2nbfz1B63M2qDVXu+mF3B9XB262Exu4Ibtea6flO6McoRE3HIc/LsFglye/qhR9z/BwAAAAAAAAAAAAAAAAAAmDan9y8HNWVtKruPAAAAAAAAAAAAAAAAAAAAAABMu4n7/t/7St7x/b/A2P0NAAD//1Bodro=") (async, rerun: 64)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) (async, rerun: 64)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a1c000000000a030000000000000000000100000008000240000000013c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800064000000000300000000c0a01010000000000000000010000000900020073797a3200000000040003800900010073797a3000000000140000001004010000000000000000000000000a"], 0xb0}}, 0x0)
sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r3) (async)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async, rerun: 32)
syz_emit_ethernet(0x76, 0x0, 0x0) (async, rerun: 32)
listen(r4, 0x0) (async)
setsockopt$sock_int(r4, 0x1, 0x20, &(0x7f0000000700), 0x4)
r5 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) (async, rerun: 64)
r6 = accept(r3, 0x0, 0x0) (rerun: 64)
sendmsg$TEAM_CMD_OPTIONS_SET(r6, &(0x7f0000000ac0)={0x0, 0x5, &(0x7f0000000a80)={&(0x7f0000000140)=ANY=[@ANYRES8], 0xfffffdef}, 0x1, 0x0, 0x0, 0x85}, 0x20000800) (async)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) (async)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x5, 0x11, r2, 0x0) (async)
openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r7 = syz_io_uring_setup(0xf00, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)=<r8=>0x0, &(0x7f0000000180)=<r9=>0x0)
syz_io_uring_submit(r8, r9, &(0x7f0000000380)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) (async)
io_uring_enter(r7, 0x2, 0x0, 0x0, 0x0, 0x0) (async)
write$FUSE_WRITE(r0, &(0x7f00000000c0)={0x18}, 0xfffffdef) (async)
truncate(&(0x7f0000000000)='./file1\x00', 0x5e02)
creat(&(0x7f0000000000)='./bus\x00', 0x0)
quotactl$Q_SETQUOTA(0xffffffff80000801, &(0x7f0000000240)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}) (async)
syz_mount_image$xfs(&(0x7f0000009600), &(0x7f0000009640)='./file0\x00', 0x200800, &(0x7f00000000c0)={[{@bsdgroups}, {@uqnoenforce}, {@swalloc}, {@filestreams}, {@grpquota}, {@allocsize={'allocsize', 0x3d, [0x30, 0x39, 0x6d]}}, {@gquota}], [{@flag='nomand'}]}, 0x4, 0x9606, &(0x7f0000012cc0)="$eJzs2gm8pnPhuP/nDGOXMVRSaiqiRdYsUc0MZigkS7QjS8pSUqESSgoVEe3Zt2xlCWVrJdlbKCFUskRabMP8X8ecYYyLb/36/l++dV3X63XO8zz3c9/3+Tyf972cw2wyaYOJg8Ecg2mNG8zceddOnjLm6nXvOGrz+Y9d5tR7DnjsiouOH3mcMPI4cTAYjBp5e2jasrGD004fNZj14eWPNveccw3NOxgsO/JyZD+DFac9zHvF9PWmztTMAx169Ns+074ebr7hHzH85PAD9jpiMBiMmWH7ocFgaPfHfVBpm0yYPOlRq0fchq1Gjzyf8Wu2aV/zXjwYzHvmgI+PGdcdego+0vDP3P0l545e9yn42f9xbTJh8loz+Q+fi7OMLFtx+Byf+Rw0NvNxfttim648MoUPH2+DwfAl7jHnyn9Em0yYtPbgia/zg6NWuXCfqdOum7MPpt0o5hwMBnONXF/neapd6t9rwsTlHr5nT389wj79WN6djosT3n7yQ8M36cFgsMBgMHbN6feCqqqq+s9owsTlVoP7/xxPdv8/5ZSFz+z+X1VV9Z/bWhMmLjd8r5/p/j/Pk93/d1z4oj2n/bf/8StO2+qhp/ZDVFVV1b/UpLXw/j/mye7/K6522drd/6uqqv5zW3+dh+//88x0/1/wye7/bzl5lUVG1pv+e8ODM+xyaIb/n/DADMtnmWH5/TMsHz3DfmZcf7YZlt87w/LZh9+D9ccNBmOn/3vBKY8uHjtu+L2R5ffNsHz8o/9OZ9HVZ1g+YYblk2ZYPnFkrMPLJ8+wfPIM66/5JFNdVVX1f6b1l5u02mCGf2c/snih6e/T/f+Cs65b8qkab1VVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVf1n9tAdZ587GAyGBoPBqMFgymDk+YyPg6lTp04dfn3K+Zdf/pQN9P9GQ+ddO3nKmKvXveOozec/dplT7zng0Vn6j+0//xPUv9Ow/xzHjxsMtt/oqR5KPQV1/rvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+4h+44+9yRY2DUYDBlMPJ89+mPZ+3/5reOrLryxqfedfCjWy46fpuRZ+ddO3nKNk/B2J+ChoY/65ir173jqM3nP3aZU+854L/g7PnP/wT17/Sw/zZDg8HI+T1m+Fxed8L6Gy4xGAwOvuvUjVcYPPLeSsPvrTJ2lsEsD2+6xMPf11iUd7z7mtMexw9/W/CRfZzy8P7XmnrYLEMzDWKGXnXejUe9a5N7lp/5cfEn/hyjpj854voz7p46derUxywcaY4n2Hj6/qd/lpnP85GxLzE89qV22u69S71/l12X3Ga7zbbecustt19muZWWX2HZZVZY+RVLbbXNtlsuPe37E8zZuIe/r/bPzNk8M8/ZHRNmnLOZP9sTzdm4J5+zh/c4ZdehDafP2az/4pyt9uRzNm6bkR+06PjRg00fnpqhwWDR1UcPdh5+sczsg8Gia4ysu9DwuquOHTUY7P/oBx1+Nvsjx+DQ7sPrbDJpg4mPjuzxn/Bx1+nHrLjo+JHHCSOPE6cNcdzg0UNx7OC000cNz8VjpnnuOecamncwWHbk5ch+BiuPvHvo9PWmztTMAx169Ns+074ebr7hnQw/effSZ18zfC7OtP3/H/0/Xf8f57XS0CMTNTTyNbLONK8Jk9d69Gc9PA3DczfLyLIVh01mnrP/zR433nGzDsY8yXgnrTVxueHFM83/9E3w+LpzsQs/PO3YGr/itK0e+n9GofHO8yTjXWsCjneeJxvv8R+59PRpu/pfG+9M17q1H/4+/p+51g2e/Fo3C+1gy0sWmfla97onHuJjzuPpczT7TCs90bVu50OW3X14/+Of/Fq39vDYRz/mWjdqMFh0tenXuuEL36TRg/2HXyw7/GLy6MGxwy+We/jFnIPzh1+8/J07bLvF8II1p8/J0sP7HT926GH3C1e8dfGpB06duvrIWMaPfexYR46PcTPezyeMnTaZ07edvt/hVafv95ZnTntv0sh+J/wL+52+LY33rvmmvTd5ZL8TZ9rv6CfZ7/RtH3c+LDH0yIXrCa43k2a63oz8jTP9xz3ma7ZpX/NePBjMeyb5zrTu/3jNpPN3jicZ74SJy602PL6Zzt9HDkc6fy+dfPXwvWLewWCwwGAwds3pY/8XG3qi8c765OOdCOOd9cnGe+Vx263zvzDewQzjfcxxtsn6046VNUeOs8n/wvE7fduZr2OjH3532mV/zX/mOjbucdexPWYZNdNkz9AT/c62Baw/7flCj/6ee+1Jx0yf+9Ez7fd/+p1ths8yBNexMTP9PT9qzRsGQzTnux+/6mVDBz35nI8ePPZvi+lzPn3bJ5vzyf/MnD/nyef8n/09eYkXTnt/9Ezjn3HO19vv2ftOn/PZZtrv/zTnk5/83vH4OR8/GE1zvvT90+btya6nTzTn07edPufDH3GVsbMO1hi+Z43M+aR/Zs4X+t85zueC9ac93/KRReccdeobp8/5zHP8P835pH91zsc9cpwv+vB7Lxg1mG22wc6b7bTTjstM+z795bLTvvO16N5rp83zk91Ln8ho+rZPdl6s/s8YjfmnjIb+J6OFZ30io0dPrSN32PEZ/6/XotX/VaMBX4uuPmbavD3Z70VPNOfTt6X74IIzbD/z36Hrr/Pw793zzHQfnL4J3gfPOWvtvafvcmSzB2ca5vT76gMzLJ9lhuX3z7B89Az7mXH92WZYfu8My4c/wmwzrD+dddzw37wjy6c8uvrY4V+exo0sv2+G5eMf3XbR1WdYPmGG5ZNmWD7x0UNj0ckzLJ88w/prDv7Fpv836W1mvsjXP1v//ddd/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+4h+44+9yRY2DUYDBlMO350MjjYPeh9W5/zfDjYDAYveKJU9d7qsf7FDd03rWTp4y5et07jtp8/mOXOfWeA/4Lzp7//E9Q/04P+28zNBiMnN9jthkMButOWH/DJQaDwXpTT1xx1OCR9xYafm/VsaMGg/2HHrOD2R9ZZ2j34XU2mbTBxMFgjpE1xj3uhz7uPHrMiouOH3mcMPI4cdr1adzg0eN17OC000cNZn14+aPNPedcQ/MOBsuOvBzZz2DFaQ/zXjF9vakzNfNAhx79ts+0r4ebb/hHDD/ZeevJzx2eq5m2/z/T9Gv1NqP+x1U7/93l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u/jX/jpb/thJ1l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5i3vojrPPHTkGRg0GUwbTng/tPvI4GDr5tBePHCKjd7nq6MOe6vE+xQ2dd+3kKWOuXveOozaf/9hlTr3ngP+Cs+c//xPUv9PD/tsMDQYj5/eYbQaDwboT1t9wicFgcNjRV+0yavDIewsNv7fq2FGDwf5Dj9nB7I+sM7T78DqbTNpg4mAwx8ga4x73Qx93Hj1mxUXHjzxOGHmcOO36NG7w6PE6dnDa6aMGsz68/NHmnnOuoXkHg2VHXo7sZ7DitId5r5i+3tSZmnmgQ49+22fa18PNN/wjhp/sNc+1Jw/P1Uzb/59p+rV6m1H/46qd/+7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5S/uoTvOPnfkGBg1GEwZTHs+auRxaPebb9ptw+HH4dfzr7n3tU/1eJ/ihs67dvKUMVeve8dRm89/7DKn3nPAf8HZ85//Cerfadh/juPHDQbbb/RUD6Wegjr/3eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/d/m7y99d/u7yd5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+bvLX9xDd5x97sjTUY8uHbV7xwU2dN61k6eMuXrdO47afP5jlzn1ngOe6gH9uz2B/x75Yxb/PfPHLP4fzx+z+H8if8ziv1f+mMX/k/ljFv+988cs/p/KH7P4fzp/zOK/T/6YxX/f/DGL/375Yxb/z+SPWfw/mz9m8f9c/pjFf//8MYv/AfljFv/P549Z/A/MH7P4H5Q/ZvH/Qv6Yxf/g/DGL/yH5Yxb/L+aPWfy/lD9m8f9y/pjF/yv5Yxb/r+aPWfy/lj9m8f96/pjF/xv5Yxb/Q/PHLP6H5Y9Z/A/PH7P4H5E/ZvE/Mn/M4n9U/pjF/+j8MYv/MfljFv9j88cs/sflj1n8j88fs/h/M3/M4n9C/pjF/8T8MYv/SfljFv+T88cs/qfkj1n8v5U/ZvH/dv6Yxf/U/DGL/2n5Yxb/0/PHLP5n5I9Z/L+TP2bxPzN/zOJ/Vv6Yxf/s/DGL/3fzxyz+38sfs/ifkz9m8T83f8zif17+mMX//Pwxi/8F+WMW/+/nj1n8f5A/ZvH/Yf6Yxf9H+WMW/x/nj1n8f5I/ZvG/MH/M4n9R/pjF/6f5Yxb/i/PHLP4/yx+z+F+SP2bxvzR/zOJ/Wf6Yxf/y/DGL/xX5Yxb/K/PHLP5X5Y9Z/H+eP2bx/0X+mMX/l/ljFv9f5Y9Z/K/OH7P4X5M/ZvH/df6Yxf83+WMW/2vzxyz+v80fs/hflz9m8b8+f8zif0P+mMX/d/ljFv8b88cs/jflj1n8b84fs/j/Pn/M4v+H/DGL/x/zxyz+t+SPWfz/lD9m8b81f8zif1v+mMX/9vwxi/8d+WMW/z/nj1n878wfs/jflT9m8f9L/pjF/+78MYv/X/PHLP5/yx+z+P89f8zi/4/8MYv/PfljFv9788cs/vflj1n8788fs/g/kD9m8Z+SP2bxfzB/zOL/UP6YxX9q/pjEf5ZB/pjFfyh/zOI/Kn/M4j9L/pjFf9b8MYv/6Pwxi/9s+WMW/9nzxyz+c+SPWfznzB+z+M+VP2bxnzt/zOI/T/6YxX/e/DGL/9Pyxyz+8+WPWfzH5I9Z/OfPH7P4j80fs/gvkD9m8V8wf8zi//T8MYv/M/LHLP7PzB+z+C+UP2bxf1b+mMV/4fwxi/+z88cs/s/JH7P4L5I/ZvF/bv6Yxf95+WMW/3H5Yxb/5+ePWfxfkP/jmnXk0eD/wvwxy/m/aP6YxX+x/DGL/4vyxyz+i+ePWfyXyB+z+L84f8zi/5L8MYv/S/PHLP4vyx+z+C+ZP2bxf3n+mMV/qfwxi//S+WMW/2Xyxyz+y+aPWfyXyx+z+C+fP2bxf0X+mMV/hfwxi/+K+WMW/5Xyxyz+K+ePWfxfmT9m8V8lf8ziv2r+mMX/VfljFv9X549Z/F+TP2bxH58/ZvGfkD9m8Z+YP2bxXy1/zOK/ev6YxX+N/DGL/6T8MYv/ZJX/LP/0mhb/NVX+/3wW/7Xyxyz+r80fs/i/Ln/M4r92/pjFf538MYv/uvljFv/X549Z/NfLH7P4vyF/zOK/fv6YxX+D/DGL/4b5Yxb/jfLHLP5vzB+z+G+cP2bx3yR/zOL/pvwxi/+b88cs/m/JH7P4vzV/zOL/tvwxi//b88cs/u/IH7P4b5o/ZvHfLH/M4r95/pjF/535Yxb/LfLHLP5b5o9Z/LfKH7P4b50/ZvF/V/6YxX+b/DGL/7vzxyz+78kfs/hvmz9m8d8uf8ziv33+mMV/h/wxi/9788cs/u/LH7P475g/ZvF/f/6YxX+n/DGL/wfyxyz+H8wfs/h/KH/M4r9z/pjFf5f8MYv/rvljFv8P549Z/D+SP2bx/2j+mMV/t/wxi//H8scs/rvnj1n898gfs/jvmT9m8f94/pjF/xP5Yxb/vfLHLP6fzB+z+O+dP2bx/1T+mMX/0/ljFv998scs/vvmj1n898sfs/h/Jn/M4v/Z/DGL/+fyxyz+++ePWfwPyB+z+H8+f8zif2D+mMX/oPwxi/8X8scs/gfnj1n8D8kfs/h/MX/M4v+l/DGL/5fzxyz+X8kfs/h/NX/M4v+1/DGL/9fzxyz+38gfs/gfmj9m8T8sf8zif3j+mMX/iPwxi/+R+WMW/6Pyxyz+R+ePWfyPyR+z+B+bP2bxPy5/zOJ/fP6Yxf+b+WMW/xPyxyz+J+aPWfxPyh+z+J+cP2bxPyV/zOL/rfwxi/+388cs/qfmj1n8T8sfs/ifnj9m8T8jf8zi/538MYv/mfljFv+z8scs/mfnj1n8v5s/ZvH/Xv6Yxf+c/DGL/7n5Yxb/8/LHLP7n549Z/C/IH7P4fz9/zOL/g/wxi/8P88cs/j/KH7P4/zh/zOL/k/wxi/+F+WMW/4vyxyz+P80fs/hfnD9m8f9Z/pjF/5L8MYv/pfljFv/L8scs/pfnj1n8r8gfs/hfmT9m8b8qf8zi//P8MYv/L/LHLP6/zB+z+P8qf8zif3X+mMX/mvwxi/+v88cs/r/JH7P4X5s/ZvH/bf6Yxf+6/DGL//X5Yxb/G/LHLP6/yx+z+N+YP2bxvyl/zOJ/c/6Yxf/3+WMW/z/kj1n8/5g/ZvG/JX/M4v+n/DGL/635Yxb/2/LHLP63549Z/O/IH7P4/zl/zOJ/Z/6Yxf+u/DGL/1/yxyz+d+ePWfz/mj9m8f9b/pjF/+/5Yxb/f+SPWfzvyR+z+N+bP2bxvy9/zOJ/f/6Yxf+B/DGL/5T8MYv/g/ljFv+H8scs/lPzxyT+sw7yxyz+Q/ljFv9R+WMW/1nyxyz+s+aPWfxH549Z/GfLH7P4z54/ZvGfI3/M4j9n/pjFf678MYv/3PljFv958scs/vPmj1n8n5Y/ZvGfL3/M4j8mf8ziP3/+mMV/bP6YxX+B/DGL/4L5Yxb/p+ePWfyfkT9m8X9m/pjFf6H8MYv/s/LHLP4L549Z/J+dP2bxf07+mMV/kfwxi/9z88cs/s/LH7P4j8sfs/g/P3/M4v+C/DGL/wvzxyz+i+aPWfwXyx+z+L8of8ziv3j+mMV/ifwxi/+L88cs/i/JH7P4vzR/zOL/svwxi/+S+WMW/5fnj1n8l8ofs/gvnT9m8V8mf8ziv2z+mMV/ufwxi//y+WMW/1fkj1n8V8gfs/ivmD9m8V8pf8ziv3L+mMX/lfljFv9V8scs/qvmj1n8X5U/ZvF/df6Yxf81+WMW//H5Yxb/CfljFv+J+WMW/9Xyxyz+q+ePWfzXyB+z+E/KH7P4T84fs/ivmT9m8V8rf8zi/9r8MYv/6/LHLP5r549Z/NfJH7P4r5s/ZvF/ff6YxX+9/DGL/xsGl+cPWfzX7/zHLP4b5I9Z/DfMH7P4b5Q/ZvF/Y/6YxX/j/DGL/yb5Yxb/N+WPWfzfnD9m8X9L/pjF/635Yxb/t+WPWfzfnj9m8X9H/pjFf9P8MYv/ZvljFv/N88cs/u/MH7P4b5E/ZvHfMn/M4r9V/pjFf+v8MYv/u/LHLP7b5I9Z/N+dP2bxf0/+mMV/2/wxi/92+WMW/+3zxyz+O+SPWfzfmz9m8X9f/pjFf8f8MYv/+/PHLP475Y9Z/D+QP2bx/2D+mMX/Q/ljFv+d88cs/rvkj1n8d80fs/h/OH/M4v+R/DGL/0fzxyz+u+WPWfw/lj9m8d89f8ziv0f+mMV/z/wxi//H88cs/p/IH7P475U/ZvH/ZP6YxX/v/DGL/6fyxyz+n84fs/jvkz9m8d83f8ziv1/+mMX/M/ljFv/P5o9Z/D+XP2bx3z9/zOJ/QP6Yxf/z+WMW/wPzxyz+B+WPWfy/kD9m8T84f8zif0j+mMX/i/ljFv8v5Y9Z/L+cP2bx/0r+mMX/q/ljFv+v5Y9Z/L+eP2bx/0b+mMX/0Pwxi/9h+WMW/8Pzxyz+R+SPWfyPzB+z+B+VP2bxPzp/zOJ/TP6Yxf/Y/DGL/3H5Yxb/4/PHLP7fzB+z+J+QP2bxPzF/zOJ/Uv6Yxf/k/DGL/yn5Yxb/b+WPWfy/nT9m8T81f8zif1r+mMX/9Pwxi/8Z+WMW/+/kj1n8z8wfs/iflT9m8T87f8zi/938MYv/9/LHLP7n5I9Z/M/NH7P4n5c/ZvE/P3/M4n9B/pjF//v5Yxb/H+SPWfx/mD9m8f9R/pjF/8f5Yxb/n+SPWfwvzB+z+F+UP2bx/2n+mMX/4vwxi//P8scs/pfkj1n8L80fs/hflj9m8b88f8zif0X+mMX/yvwxi/9V+WMW/5/nj1n8f5E/ZvH/Zf6Yxf9X+WMW/6vzxyz+1+SPWfx/nT9m8f9N/pjF/9r8MYv/b/PHLP7X5Y9Z/K/PH7P435A/ZvH/Xf6Yxf/G/DGL/035Yxb/m/PHLP6/zx+z+P8hf8zi/8f8MYv/LfljFv8/5Y9Z/G/NH7P435Y/ZvG/PX/M4n9H/pjF/8/5Yxb/O/PHLP535Y9Z/P+SP2bxvzt/zOL/1/wxi//f8scs/n/PH7P4/yN/zOJ/T/6Yxf/e/DGL/335Yxb/+/PHLP4P5I9Z/Kfkj1n8H8wfs/g/lD9m8Z+aPybxHz3IH7P4D+WPWfxH5Y9Z/GfJH7P4z5o/ZvEfnT9m8Z8tf8ziP3v+mMV/jvwxi/+c+WMW/7nyxyz+c+ePWfznyR+z+M+bP2bxf1r+mMV/vvwxi/+Y/DGL//z5Yxb/sfljFv8F8scs/gvmj1n8n54/ZvF/Rv6Yxf+Z+WMW/4Xyxyz+z8ofs/gvnD9m8X92/pjF/zn5Yxb/RfLHLP7PzR+z+D8vf8ziPy5/zOL//Pwxi/8L8scs/i/MH7P4L5o/ZvFfLH/M4v+i/DGL/+L5Yxb/JfLHLP4vzh+z+L8kf8zi/9L8MYv/y/LHLP5L5o9Z/F+eP2bxXyp/zOK/dP6YxX+Z/DGL/7L5Yxb/5fLHLP7L549Z/F+RP2bxXyF/zOK/Yv6YxX+l/DGL/8r5Yxb/V+aPWfxXyR+z+K+aP2bxf1X+mMX/1fljFv/X5I9Z/Mfnj1n8J+SPWfwn5o9Z/FfLH7P4r54/ZvFfI3/M4j8pf8ziPzl/zOK/Zv6YxX+t/DGL/2vzxyz+r8sfs/ivnT9m8V8nf8ziv27+mMX/9fljFv/18scs/m/IH7P4r58/ZvHfIH/M4r9h/pjFf6P8MYv/G/PHLP4b549Z/DfJH7P4vyl/zOL/5vwxi/9b8scs/m/NH7P4vy1/zOL/9vwxi/878scs/pvmj1n8N8sfs/hvnj9m8X9n/pjFf4v8MYv/lvljFv+t8scs/lvnj1n835U/ZvHfJn/M4v/u/DGL/3vyxyz+2+aPWfy3yx+z+G+fP2bx3yF/zOL/3vwxi//78scs/jvmj1n8358/ZvHfKX/M4v+B/DGL/wfzxyz+H8ofs/jvnD9m8d8lf8ziv2v+mMX/w/ljFv+P5I9Z/D+aP2bx3y1/zOL/sfwxi//u+WMW/z3yxyz+e+aPWfw/nj9m8f9E/pjFf6/8MYv/J/PHLP57549Z/D+VP2bx/3T+mMV/n/wxi/+++WMW//3yxyz+n8kfs/h/Nn/M4v+5/DGL//75Yxb/A/LHLP6fzx+z+B+YP2bxPyh/zOL/hfwxi//B+WMW/0Pyxyz+X8wfs/h/KX/M4v/l/DGL/1fyxyz+X80fs/h/LX/M4v/1/DGL/zfyxyz+h+aPWfwPyx+z+B+eP2bxPyJ/zOJ/ZP6Yxf+o/DGL/9H5Yxb/Y/LHLP7H5o9Z/I/LH7P4H58/ZvH/Zv6Yxf+E/DGL/4n5Yxb/k/LHLP4n549Z/E/JH7P4fyt/zOL/7fwxi/+p+WMW/9Pyxyz+p+ePWfzPyB+z+H8nf8zif2b+mMX/rPwxi//Z+WMW/+/mj1n8v5c/ZvE/J3/M4n9u/pjF/7z8MYv/+fljFv8L8scs/t/PH7P4/yB/zOL/w/wxi/+P8scs/j/OH7P4/yR/zOJ/Yf6Yxf+i/DGL/0/zxyz+F+ePWfx/lj9m8b8kf8zif2n+mMX/svwxi//l+WMW/yvyxyz+V+aPWfyvyh+z+P88f8zi/4v8MYv/L/PHLP6/yh+z+F+dP2bxvyZ/zOL/6/wxi/9v8scs/tfmj1n8f5s/ZvG/Ln/M4n99/pjF/4b8MYv/7/LHLP435o9Z/G/KH7P435w/ZvH/ff6Yxf8P+WMW/z/mj1n8b8kfs/j/KX/M4n9r/pjF/7b8MYv/7fljFv878scs/n/OH7P435k/ZvG/K3/M4v+X/DGL/935Yxb/v+aPWfz/lj9m8f97/pjF/x/5Yxb/e/LHLP735o9Z/O/LH7P4358/ZvF/IH/M4j8lf8zi/2D+mMX/ofwxi//U/DGJ/2yD/DGL/1D+mMV/VP6YxX+W/DGL/6z5Yxb/0fljFv/Z8scs/rPnj1n858gfs/jPmT9m8Z8rf8ziP3f+mMV/nvwxi/+8+WMW/6flj1n858sfs/iPyR+z+M+fP2bxH5s/ZvFfIH/M4r9g/pjF/+n5Yxb/Z+SPWfyfmT9m8V8of8zi/6z8MYv/wvljFv9n549Z/J+TP2bxXyR/zOL/3Pwxi//z8scs/uPyxyz+z88fs/i/IH/M4v/C/DGL/6L5Yxb/xfLHLP4vyh+z+C+eP2bxXyJ/zOL/4vwxi/9L8scs/i/NH7P4vyx/zOK/ZP6Yxf/l+WMW/6Xyxyz+S+ePWfyXyR+z+C+bP2bxXy5/zOK/fP6Yxf8V+WMW/xXyxyz+K+aPWfxXyh+z+K+cP2bxf2X+mMV/lfwxi/+q+WMW/1flj1n8X50/ZvF/Tf6YxX98/pjFf0L+mMV/Yv6YxX+1/DGL/+r5Yxb/NfLHLP6T8scs/pPzxyz+a+aPWfzXyh+z+L82f8zi/7r8MYv/2vljFv918scs/uvmj1n8X58/ZvFfL3/M4v+G/DGL//r5Yxb/DfLHLP4b5o9Z/DfKH7P4vzF/zOK/cf6YxX+T/DGL/5vyxyz+b84fs/i/JX/M4v/W/DGL/9vyxyz+b88fs/i/I3/M4r9p/pjFf7P8MYv/5vljFv935o9Z/LfIH7P4b5k/ZvHfKn/M4r91/pjF/135Yxb/bfLHLP7vzh+z+L8nf8ziv23+mMV/u/wxi//2+WMW/x3yxyz+780fs/i/L3/M4r9j/pjF//35Yxb/nfLHLP4fyB+z+H8wf8zi/6H8MYv/zvljFv9d8scs/rvmj1n8P5w/ZvH/SP6Yxf+j+WMW/93yxyz+H8sfs/jvnj9m8d8jf8ziv2f+mMX/4/ljFv9P5I9Z/PfKH7P4fzJ/zOK/d/6Yxf9T+WMW/0/nj1n898kfs/jvmz9m8d8vf8zi/5n8MYv/Z/PHLP6fyx+z+O+fP2bxPyB/zOL/+fwxi/+B+WMW/4Pyxyz+X8gfs/gfnD9m8T8kf8zi/8X8MYv/l/LHLP5fzh+z+H8lf8zi/9X8MYv/1/LHLP5fzx+z+H8jf8zif2j+mMX/sPwxi//h+WMW/yPyxyz+R+aPWfyPyh+z+B+dP2bxPyZ/zOJ/bP6Yxf+4/DGL//H5Yxb/b+aPWfxPyB+z+J+YP2bxPyl/zOJ/cv6Yxf+U/DGL/7fyxyz+384fs/ifmj9m8T8tf8zif3r+mMX/jPwxi/938scs/mfmj1n8z8ofs/ifnT9m8f9u/pjF/3v5Yxb/c/LHLP7n5o9Z/M/LH7P4n58/ZvG/IH/M4v/9/DGL/w/yxyz+P8wfs/j/KH/M4v/j/DGL/0/yxyz+F+aPWfwvyh+z+P80f8zif3H+mMX/Z/ljFv9L8scs/pfmj1n8L8sfs/hfnj9m8b8if8zif2X+mMX/qvwxi//P88cs/r/IH7P4/zJ/zOL/q/wxi//V+WMW/2vyxyz+v84fs/j/Jn/M4n9t/pjF/7f5Yxb/6/LHLP7X549Z/G/IH7P4/y5/zOJ/Y/6Yxf+m/DGL/835Yxb/3+ePWfz/kD9m8f9j/pjF/5b8MYv/n/LHLP635o9Z/G/LH7P4354/ZvG/I3/M4v/n/DGL/535Yxb/u/LHLP5/yR+z+N+dP2bx/2v+mMX/b/ljFv+/549Z/P+RP2bxvyd/zOJ/b/6Yxf++/DGL//35Yxb/B/LHLP5T8scs/g/mj1n8H8ofs/hPzR+T+M8+yB+z+A/lj1n8R+WPWfxnyR+z+M+aP2bxH50/ZvGfLX/M4j97/pjFf478MYv/nPljFv+58scs/nPnj1n858kfs/jPmz9m8X9a/pjFf778MYv/mPwxi//8+WMW/7H5Yxb/BfLHLP4L5o9Z/J+eP2bxf0b+mMX/mfljFv+F8scs/s/KH7P4L5w/ZvF/dv6Yxf85+WMW/0Xyxyz+z80fs/g/L3/M4j8uf8zi//z8MYv/C/LHLP4vzB+z+C+aP2bxXyx/zOL/ovwxi//i+WMW/yXyxyz+L84fs/i/JH/M4v/S/DGL/8vyxyz+S+aPWfxfnj9m8V8qf8ziv3T+mMV/mfwxi/+y+WMW/+Xyxyz+y+ePWfxfkT9m8V8hf8ziv2L+mMV/pfwxi//K+WMW/1fmj1n8V8kfs/ivmj9m8X9V/pjF/9X5Yxb/1+SPWfzH549Z/Cfkj1n8J+aPWfxXyx+z+K+eP2bxXyN/zOI/KX/M4j85f8ziv2b+mMV/rfwxi/9r88cs/q/LH7P4r50/ZvFfJ3/M4r9u/pjF//X5Yxb/9fLHLP5vyB+z+K+fP2bx3yB/zOK/Yf6YxX+j/DGL/xvzxyz+G+ePWfw3yR+z+L8pf8zi/+b8MYv/W/LHLP5vzR+z+L8tf8zi//b8MYv/O/LHLP6b5o9Z/DfLH7P4b54/ZvF/Z/6YxX+L/DGL/5b5Yxb/rfLHLP5b549Z/N+VP2bx3yZ/zOL/7vwxi/978scs/tvmj1n8t8sfs/hvnz9m8d8hf8zi/978MYv/+/LHLP475o9Z/N+fP2bx3yl/zOL/gfwxi/8H88cs/h/KH7P475w/ZvHfJX/M4r9r/pjF/8P5Yxb/j+SPWfw/mj9m8d8tf8zi/7H8MYv/7vljFv898scs/nvmj1n8P54/ZvH/RP6YxX+v/DGL/yfzxyz+e+ePWfw/lT9m8f90/pjFf5/8MYv/vvljFv/98scs/p/JH7P4fzZ/zOL/ufwxi//++WMW/wPyxyz+n88fs/gfmD9m8T8of8zi/4X8MYv/wfljFv9D8scs/l/MH7P4fyl/zOL/5fwxi/9X8scs/l/NH7P4fy1/zOL/9fwxi/838scs/ofmj1n8D8sfs/gfnj9m8T8if8zif2T+mMX/qPwxi//R+WMW/2Pyxyz+x+aPWfyPyx+z+B+fP2bx/2b+mMX/hPwxi/+J+WMW/5Pyxyz+J+ePWfxPyR+z+H8rf8zi/+38MYv/qfljFv/T8scs/qfnj1n8z8gfs/h/J3/M4n9m/pjF/6z8MYv/2fljFv/v5o9Z/L+XP2bxPyd/zOJ/bv6Yxf+8/DGL//n5Yxb/C/LHLP7fzx+z+P8gf8zi/8P8MYv/j/LHLP4/zh+z+P8kf8zif2H+mMX/ovwxi/9P88cs/hfnj1n8f5Y/ZvG/JH/M4n9p/pjF/7L8MYv/5fljFv8r8scs/lfmj1n8r8ofs/j/PH/M4v+L/DGL/y/zxyz+v8ofs/hfnT9m8b8mf8zi/+v8MYv/b/LHLP7X5o9Z/H+bP2bxvy5/zOJ/ff6Yxf+G/DGL/+/yxyz+N+aPWfxvyh+z+N+cP2bx/33+mMX/D/ljFv8/5o9Z/G/JH7P4/yl/zOJ/a/6Yxf+2/DGL/+35Yxb/O/LHLP5/zh+z+N+ZP2bxvyt/zOL/l/wxi//d+WMW/7/mj1n8/5Y/ZvH/e/6Yxf8f+WMW/3vyxyz+9+aPWfzvyx+z+N+fP2bxfyB/zOI/JX/M4v9g/pjF/6H8MYv/1Pwxif8cg/wxi/9Q/pjFf1T+mMV/lvwxi/+s+WMW/9H5Yxb/2fLHLP6z549Z/OfIH7P4z5k/ZvGfK3/M4j93/pjFf578MYv/vPljFv+n5Y9Z/OfLH7P4j8kfs/jPnz9m8R+bP2bxXyB/zOK/YP6Yxf/p+WMW/2fkj1n8n5k/ZvFfKH/M4v+s/DGL/8L5Yxb/Z+ePWfyfkz9m8V8kf8zi/9z8MYv/8/LHLP7j8scs/s/PH7P4vyB/zOL/wvwxi/+i+WMW/8Xyxyz+L8ofs/gvnj9m8V8if8zi/+L8MYv/S/LHLP4vzR+z+L8sf8ziv2T+mMX/5fljFv+l8scs/kvnj1n8l8kfs/gvmz9m8V8uf8ziv3z+mMX/FfljFv8V8scs/ivmj1n8V8ofs/ivnD9m8X9l/pjFf5X8MYv/qvljFv9X5Y9Z/F+dP2bxf03+mMV/fP6YxX9C/pjFf2L+mMV/tfwxi//q+WMW/zXyxyz+k/LHLP6T88cs/mvmj1n818ofs/i/Nn/M4v+6/DGL/9r5Yxb/dfLHLP7r5o9Z/F+fP2bxXy9/zOL/hvwxi//6+WMW/w3yxyz+G+aPWfw3yh+z+L8xf8ziv3H+mMV/k/wxi/+b8scs/m/OH7P4vyV/zOL/1vwxi//b8scs/m/PH7P4vyN/zOK/af6YxX+z/DGL/+b5Yxb/d+aPWfy3yB+z+G+ZP2bx3yp/zOK/df6Yxf9d+WMW/23yxyz+784fs/i/J3/M4r9t/pjFf7v8MYv/9vljFv8d8scs/u/NH7P4vy9/zOK/Y/6Yxf/9+WMW/53yxyz+H8gfs/h/MH/M4v+h/DGL/875Yxb/XfLHLP675o9Z/D+cP2bx/0j+mMX/o/ljFv/d8scs/h/LH7P4754/ZvHfI3/M4r9n/pjF/+P5Yxb/T+SPWfz3yh+z+H8yf8ziv3f+mMX/U/ljFv9P549Z/PfJH7P475s/ZvHfL3/M4v+Z/DGL/2fzxyz+n8sfs/jvnz9m8T8gf8zi//n8MYv/gfljFv+D8scs/l/IH7P4H5w/ZvE/JH/M4v/F/DGL/5fyxyz+X84fs/h/JX/M4v/V/DGL/9fyxyz+X88fs/h/I3/M4n9o/pjF/7D8MYv/4fljFv8j8scs/kfmj1n8j8ofs/gfnT9m8T8mf8zif2z+mMX/uPwxi//x+WMW/2/mj1n8T8gfs/ifmD9m8T8pf8zif3L+mMX/lPwxi/+38scs/t/OH7P4n5o/ZvE/LX/M4n96/pjF/4z8MYv/d/LHLP5n5o9Z/M/KH7P4n50/ZvH/bv6Yxf97+WMW/3Pyxyz+5+aPWfzPyx+z+J+fP2bxvyB/zOL//fwxi/8P8scs/j/MH7P4/yh/zOL/4/wxi/9P8scs/hfmj1n8L8ofs/j/NH/M4n9x/pjF/2f5Yxb/S/LHLP6X5o9Z/C/LH7P4X54/ZvG/In/M4n9l/pjF/6r8MYv/z/PHLP6/yB+z+P8yf8zi/6v8MYv/1fljFv9r8scs/r/OH7P4/yZ/zOJ/bf6Yxf+3+WMW/+vyxyz+1+ePWfxvyB+z+P8uf8zif2P+mMX/pvwxi//N+WMW/9/nj1n8/5A/ZvH/Y/6Yxf+W/DGL/5/yxyz+t+aPWfxvyx+z+N+eP2bxvyN/zOL/5/wxi/+d+WMW/7vyxyz+f8kfs/jfnT9m8f9r/pjF/2/5Yxb/v+ePWfz/kT9m8b8nf8zif2/+mMX/vvwxi//9+WMW/wfyxyz+U/LHLP4P5o9Z/B/KH7P4T80fk/jPOcgfs/gP5Y9Z/Eflj1n8Z8kfs/jPmj9m8R+dP2bxny1/zOI/e/6YxX+O/DGL/5z5Yxb/ufLHLP5z549Z/OfJH7P4z5s/ZvF/Wv6YxX++/DGL/5j8MYv//PljFv+x+WMW/wXyxyz+C+aPWfyfnj9m8X9G/pjF/5n5Yxb/hfLHLP7Pyh+z+C+cP2bxf3b+mMX/OfljFv9F8scs/s/NH7P4Py9/zOI/Ln/M4v/8/DGL/wvyxyz+L8wfs/gvmj9m8V8sf8zi/6L8MYv/4vljFv8l8scs/i/OH7P4vyR/zOL/0vwxi//L8scs/kvmj1n8X54/ZvFfKn/M4r90/pjFf5n8MYv/svljFv/l8scs/svnj1n8X5E/ZvFfIX/M4r9i/pjFf6X8MYv/yvljFv9X5o9Z/FfJH7P4r5o/ZvF/Vf6Yxf/V+WMW/9fkj1n8x+ePWfwn5I9Z/Cfmj1n8V8sfs/ivnj9m8V8jf8ziPyl/zOI/OX/M4r9m/pjFf638MYv/a/PHLP6vyx+z+K+dP2bxXyd/zOK/bv6Yxf/1+WMW//Xyxyz+b8gfs/ivnz9m8d8gf8ziv2H+mMV/o/wxi/8b88cs/hvnj1n8N8kfs/i/KX/M4v/m/DGL/1vyxyz+b80fs/i/LX/M4v/2/DGL/zvyxyz+m+aPWfw3yx+z+G+eP2bxf2f+mMV/i/wxi/+W+WMW/63yxyz+W+ePWfzflT9m8d8mf8zi/+78MYv/e/LHLP7b5o9Z/LfLH7P4b58/ZvHfIX/M4v/e/DGL//vyxyz+O+aPWfzfnz9m8d8pf8zi/4H8MYv/B/PHLP4fyh+z+O+cP2bx3yV/zOK/a/6Yxf/D+WMW/4/kj1n8P5o/ZvHfLX/M4v+x/DGL/+75Yxb/PfLHLP575o9Z/D+eP2bx/0T+mMV/r/wxi/8n88cs/nvnj1n8P5U/ZvH/dP6YxX+f/DGL/775Yxb//fLHLP6fyR+z+H82f8zi/7n8MYv//vljFv8D8scs/p/PH7P4H5g/ZvE/KH/M4v+F/DGL/8H5Yxb/Q/LHLP5fzB+z+H8pf8zi/+X8MYv/V/LHLP5fzR+z+H8tf8zi//X8MYv/N/LHLP6H5o9Z/A/LH7P4H54/ZvE/In/M4n9k/pjF/6j8MYv/0fljFv9j8scs/sfmj1n8j8sfs/gfnz9m8f9m/pjF/4T8MYv/ifljFv+T8scs/ifnj1n8T8kfs/h/K3/M4v/t/DGL/6n5Yxb/0/LHLP6n549Z/M/IH7P4fyd/zOJ/Zv6Yxf+s/DGL/9n5Yxb/7+aPWfy/lz9m8T8nf8zif27+mMX/vPwxi//5+WMW/wvyxyz+388fs/j/IH/M4v/D/DGL/4/yxyz+P84fs/j/JH/M4n9h/pjF/6L8MYv/T/PHLP4X549Z/H+WP2bxvyR/zOJ/af6Yxf+y/DGL/+X5Yxb/K/LHLP5X5o9Z/K/KH7P4/zx/zOL/i/wxi/8v88cs/r/KH7P4X50/ZvG/Jn/M4v/r/DGL/2/yxyz+1+aPWfx/mz/2WP/RT/Vw/v2ewP+6/DHL+X99/pjF/4b8MYv/7/LHLP435o9Z/G/KH7P435w/ZvH/ff6Yxf8P+WMW/z/mj1n8b8kfs/j/KX/M4n9r/pjF/7b8MYv/7fljFv878scs/n/OH7P435k/ZvG/K3/M4v+X/DGL/935Yxb/v+aPWfz/lj9m8f97/pjF/x/5Yxb/e/LHLP735o9Z/O/LH7P4358/ZvF/IH/M4j8lf8zi/2D+mMX/ofwxi//U/DGJ/1yD/DGL/1D+mMV/VP6YxX+W/DGL/6z5Yxb/0fljFv/Z8scs/rPnj1n858gfs/jPmT9m8Z8rf+y/33+OR97K//H99/s/3Fzz5I9Z/OfNH7P4Py1/zOI/X/6YxX9M/pjFf/78MYv/2Pwxi/8C+WMW/wXzxyz+T88fs/g/I3/M4v/M/DGL/0L5Yxb/Z+WPWfwXzh+z+D87f8zi/5z8MYv/IvljFv/n5o9Z/J+XP2bxH5c/ZvF/fv6Yxf8F+WMW/xfmj1n8F80fs/gvlj9m8X9R/pjFf/H8MYv/EvljFv8X549Z/F+SP2bxf2n+mMX/ZfljFv8l88cs/i/PH7P4L5U/ZvFfOn/M4r9M/pjFf9n8MYv/cvljFv/l88cs/q/IH7P4r5A/ZvFfMX/M4r9S/pjFf+X8MYv/K/PHLP6r5I9Z/FfNH7P4vyp/zOL/6vwxi/9r8scs/uPzxyz+E/LHLP4T88cs/qvlj1n8V88fs/ivkT9m8Z+UP2bxn5w/ZvFfM3/M4r9W/pjF/7X5Yxb/1+WPWfzXzh+z+K+TP2bxXzd/zOL/+vwxi/96+WMW/zfkj1n8188fs/hvkD9m8d8wf8ziv1H+mMX/jfljFv+N88cs/pvkj1n835Q/ZvF/c/6Yxf8t+WMW/7fmj1n835Y/ZvF/e/6Yxf8d+WMW/03zxyz+m+WPWfw3zx+z+L8zf8ziv0X+mMV/y/wxi/9W+WMW/63zxyz+78ofs/hvkz9m8X93/pjF/z35Yxb/bfPHLP7b5Y9Z/LfPH7P475A/ZvF/b/6Yxf99+WMW/x3zxyz+788fs/jvlD9m8f9A/pjF/4P5Yxb/D+WPWfx3zh+z+O+SP2bx3zV/zOL/4fwxi/9H8scs/h/NH7P475Y/ZvH/WP6YxX/3/DGL/x75Yxb/PfPHLP4fzx+z+H8if8ziv1f+mMX/k/ljFv+988cs/p/KH7P4fzp/zOK/T/6YxX/f/DGL/375Yxb/z+SPWfw/mz9m8f9c/pjFf//8MYv/AfljFv/P549Z/A/MH7P4H5Q/ZvH/Qv6Yxf/g/DGL/yH5Yxb/L+aPWfy/lD9m8f9y/pjF/yv5Yxb/r+aPWfy/lj9m8f96/pjF/xv5Yxb/Q/PHLP6H5Y9Z/A/PH7P4H5E/ZvE/Mn/M4n9U/pjF/+j8MYv/MfljFv9j88cs/sflj1n8j88fs/h/M3/M4n9C/pjF/8T8MYv/SfljFv+T88cs/qfkj1n8v5U/ZvH/dv6Yxf/U/DGL/2n5Yxb/0/PHLP5n5I9Z/L+TP2bxPzN/zOJ/Vv6Yxf/s/DGL/3fzxyz+38sfs/ifkz9m8T83f8zif17+mMX//Pwxi/8F+WMW/+/nj1n8f5A/ZvH/Yf6Yxf9H+WMW/x/nj1n8f5I/ZvG/MH/M4n9R/pjF/6f5Yxb/i/PHLP4/yx+z+F+SP2bxvzR/zOJ/Wf6Yxf/y/DGL/xX5Yxb/K/PHLP5X5Y9Z/H+eP2bx/0X+mMX/l/ljFv9f5Y9Z/K/OH7P4X5M/ZvH/df6Yxf83+WMW/2vzxyz+v80fs/hflz9m8b8+f8zif0P+mMX/d/ljFv8b88cs/jflj1n8b84fs/j/Pn/M4v+H/DGL/x/zxyz+t+SPWfz/lD9m8b81f8zif1v+mMX/9vwxi/8d+WMW/z/nj1n878wfs/jflT9m8f9L/pjF/+78MYv/X/PHLP5/yx+z+P89f8zi/4/8MYv/PfljFv9788cs/vflj1n8788fs/g/kD9m8Z+SP2bxfzB/zOL/UP6YxX9q/pjEf+5B/pjFfyh/zOI/Kn/M4j9L/pjFf9b8MYv/6Pwxi/9s+WMW/9nzxyz+c+SPWfznzB+z+M+VP2bxnzt/zOI/T/6YxX/e/DGL/9Pyxyz+8+WPWfzH5I9Z/OfPH7P4j80fs/gvkD9m8V8wf8zi//T8MYv/M/LHLP7PzB+z+C+UP2bxf1b+mMV/4fwxi/+z88cs/s/JH7P4L5I/ZvF/bv6Yxf95+WMW/3H5Yxb/5+ePWfxfkD9m8X9h/pjFf9H8MYv/YvljFv8X5Y9Z/BfPH7P4L5E/ZvF/cf6Yxf8l+WMW/5fmj1n8X5Y/ZvFfMn/M4v/y/DGL/1L5Yxb/pfPHLP7L5I9Z/JfNH7P4L5c/ZvFfPn/M4v+K/DGL/wr5Yxb/FfPHLP4r5Y9Z/FfOH7P4vzJ/zOK/Sv6YxX/V/DGL/6vyxyz+r84fs/i/Jn/M4j8+f8ziPyF/zOI/MX/M4r9a/pjFf/X8MYv/GvljFv9J+WMW/8n5Yxb/NfPHLP5r5Y9Z/F+bP2bxf13+mMV/7fwxi/86+WMW/3Xzxyz+r88fs/ivlz9m8X9D/pjFf/38MYv/BvljFv8N88cs/hvlj1n835g/ZvHfOH/M4r9J/pjF/035Yxb/N+ePWfzfkj9m8X9r/pjF/235Yxb/t+ePWfzfkT9m8d80f8ziv1n+mMV/8/wxi/8788cs/lvkj1n8t8wfs/hvlT9m8d86f8zi/678MYv/NvljFv93549Z/N+TP2bx3zZ/zOK/Xf6YxX/7/DGL/w75Yxb/9+aPWfzflz9m8d8xf8zi//78MYv/TvljFv8P5I9Z/D+YP2bx/1D+mMV/5/wxi/8u+WMW/13zxyz+H84fs/h/JH/M4v/R/DGL/275Yxb/j+WPWfx3zx+z+O+RP2bx3zN/zOL/8fwxi/8n8scs/nvlj1n8P5k/ZvHfO3/M4v+p/DGL/6fzxyz+++SPWfz3zR+z+O+XP2bx/0z+mMX/s/ljFv/P5Y9Z/PfPH7P4H5A/ZvH/fP6Yxf/A/DGL/0H5Yxb/L+SPWfwPzh+z+B+SP2bx/2L+mMX/S/ljFv8v549Z/L+SP2bx/2r+mMX/a/ljFv+v549Z/L+RP2bxPzR/zOJ/WP6Yxf/w/DGL/xH5Yxb/I/PHLP5H5Y9Z/I/OH7P4H5M/ZvE/Nn/M4n9c/pjF//j8MYv/N/PHLP4n5I9Z/E/MH7P4n5Q/ZvE/OX/M4n9K/pjF/1v5Yxb/b+ePWfxPzR+z+J+WP2bxPz1/zOJ/Rv6Yxf87+WMW/zPzxyz+Z+WPWfzPzh+z+H83f8zi/738MYv/OfljFv9z88cs/uflj1n8z88fs/hfkD9m8f9+/pjF/wf5Yxb/H+aPWfx/lD9m8f9x/pjF/yf5Yxb/C/PHLP4X5Y9Z/H+aP2bxvzh/zOL/s/wxi/8l+WMW/0vzxyz+l+WPWfwvzx+z+F+RP2bxvzJ/zOJ/Vf6Yxf/n+WMW/1/kj1n8f5k/ZvH/Vf6Yxf/q/DGL/zX5Yxb/X+ePWfx/kz9m8b82f8zi/9v8MYv/dfljFv/r88cs/jfkj1n8f5c/ZvG/MX/M4n9T/pjF/+b8MYv/7/PHLP5/yB+z+P8xf8zif0v+mMX/T/ljFv9b88cs/rflj1n8b88fs/jfkT9m8f9z/pjF/878MYv/XfljFv+/5I9Z/O/OH7P4/zV/zOL/t/wxi//f88cs/v/IH7P435M/ZvG/N3/M4n9f/pjF//78MYv/A/ljFv8p+WMW/wfzxyz+D+WPWfyn5o9J/OcZ5I9Z/Ifyxyz+o/LHLP6z5I9Z/GfNH7P4j84fs/jPlj9m8Z89f8ziP0f+mMV/zvwxi/9c+WMW/7nzxyz+8+SPWfznzR+z+D8tf8ziP1/+mMV/TP6YxX/+/DGL/9j8MYv/AvljFv8F88cs/k/PH7P4PyN/zOL/zPwxi/9C+WMW/2flj1n8F84fs/g/O3/M4v+c/DGL/yL5Yxb/5+aPWfyflz9m8R+XP2bxf37+mMX/BfljFv8X5o9Z/BfNH7P4L5Y/ZvF/Uf6YxX/x/DGL/xL5Yxb/F+ePWfxfkj9m8X9p/pjF/2X5Yxb/JfPHLP4vzx+z+C+VP2bxXzp/zOK/TP6YxX/Z/DGL/3L5Yxb/5fPHLP6vyB+z+K+QP2bxXzF/zOK/Uv6YxX/l/DGL/yvzxyz+q+SPWfxXzR+z+L8qf8zi/+r8MYv/a/LHLP7j88cs/hPyxyz+E/PHLP6r5Y9Z/FfPH7P4r5E/ZvGflD9m8Z+cP2bxXzN/zOK/Vv6Yxf+1+WMW/9flj1n8184fs/ivkz9m8V83f8zi//r8MYv/evljFv835I9Z/NfPH7P4b5A/ZvHfMH/M4r9R/pjF/435Yxb/jfPHLP6b5I9Z/N+UP2bxf3P+mMX/LfljFv+35o9Z/N+WP2bxf3v+mMX/HfljFv9N88cs/pvlj1n8N88fs/i/M3/M4r9F/pjFf8v8MYv/VvljFv+t88cs/u/KH7P4b5M/ZvF/d/6Yxf89+WMW/23zxyz+2+WPWfy3zx+z+O+QP/aI/1Yn/1f7vzd/zHL+vy9/zOK/Y/6Yxf/9+WMW/53yxyz+H8gfs/h/MH/M4v+h/DGL/875Yxb/XfLHLP675o9Z/D+cP2bx/0j+mMX/o/ljFv/d8scs/h/LH7P4754/ZvHfI3/M4r9n/pjF/+P5Yxb/T+SPWfz3yh+z+H8yf8ziv3f+mMX/U/ljFv9P549Z/PfJH7P475s/ZvHfL3/M4v+Z/DGL/2fzxyz+n8sfs/jvnz9m8T8gf8zi//n8MYv/gfljFv+D8scs/l/IH7P4H5w/ZvE/JH/M4v/F/DGL/5fyxyz+X84fs/h/JX/M4v/V/DGL/9fyxyz+X88fs/h/I3/M4n9o/pjF/7D8MYv/4fljFv8j8scs/kfmj1n8j8ofs/gfnT9m8T8mf8zif2z+mMX/uPwxi//x+WMW/2/mj1n8T8gfs/ifmD9m8T8pf8zif3L+mMX/lPwxi/+38scs/t/OH7P4n5o/ZvE/LX/M4n96/pjF/4z8MYv/d/LHLP5n5o9Z/M/KH7P4n50/ZvH/bv6Yxf97+WMW/3Pyxyz+5+aPWfzPyx+z+J+fP2bxvyB/zOL//fwxi/8P8scs/j/MH7P4/yh/zOL/4/wxi/9P8scs/hfmj1n8L8ofs/j/NH/M4n9x/pjF/2f5Yxb/S/LHLP6X5o9Z/C/LH7P4X54/ZvG/In/M4n9l/pjF/6r8MYv/z/PHLP6/yB+z+P8yf8zi/6v8MYv/1fljFv9r8scs/r/OH7P4/yZ/zOJ/bf6Yxf+3+WMW/+vyxyz+1+ePWfxvyB+z+P8uf8zif2P+mMX/pvwxi//N+WMW/9/nj1n8/5A/ZvH/Y/6Yxf+W/DGL/5/yxyz+t+aPWfxvyx+z+N+eP2bxvyN/zOL/5/wxi/+d+WMW/7vyxyz+f8kfs/jfnT9m8f9r/pjF/2/5Yxb/v+ePWfz/kT9m8b8nf8zif2/+mMX/vvwxi//9+WMW/wfyxyz+U/LHLP4P5o9Z/B/KH7P4T80fk/jPO8gfs/gP5Y9Z/Eflj1n8Z8kfs/jPmj9m8R+dP2bxny1/zOI/e/6YxX+O/DGL/5z5Yxb/ufLHLP5z549Z/OfJH7P4z5s/ZvF/Wv6YxX++/DGL/5j8MYv//PljFv+x+WMW/wXyxyz+C+aPWfyfnj9m8X9G/pjF/5n5Yxb/hfLHLP7Pyh+z+C+cP2bxf3b+mMX/OfljFv9F8scs/s/NH7P4Py9/zOI/Ln/M4v/8/DGL/wvyxyz+L8wfs/gvmj9m8V8sf8zi/6L8MYv/4vljFv8l8scs/i/OH7P4vyR/zOL/0vwxi//L8scs/kvmj1n8X54/ZvFfKn/M4r90/pjFf5n8MYv/svljFv/l8scs/svnj1n8X5E/ZvFfIX/M4r9i/pjFf6X8MYv/yvljFv9X5o9Z/FfJH7P4r5o/ZvF/Vf6Yxf/V+WMW/9fkj1n8x+ePWfwn5I9Z/Cfmj1n8V8sfs/ivnj9m8V8jf8ziPyl/zOI/OX/M4r9m/pjFf638MYv/a/PHLP6vyx+z+K+dP2bxXyd/zOK/bv6Yxf/1+WMW//Xyxyz+b8gfs/ivnz9m8d8gf8ziv2H+mMV/o/wxi/8b88cs/hvnj1n8N8kfs/i/KX/M4v/m/DGL/1vyxyz+b80fs/i/LX/M4v/2/DGL/zvyxyz+m+aPWfw3yx+z+G+eP2bxf2f+mMV/i/wxi/+W+WMW/63yxyz+W+ePWfzflT9m8d8mf8zi/+78MYv/e/LHLP7b5o9Z/LfLH7P4b58/ZvHfIX/M4v/e/DGL//vyxyz+O+aPWfzfnz9m8d8pf8zi/4H8MYv/B/PHLP4fyh+z+O+cP2bx3yV/zOK/a/6Yxf/D+WMW/4/kj1n8P5o/ZvHfLX/M4v+x/DGL/+75Yxb/PfLHLP575o9Z/D+eP2bx/0T+mMV/r/wxi/8n88cs/nvnj1n8P5U/ZvH/dP6YxX+f/DGL/775Yxb//fLHLP6fyR+z+H82f8zi/7n8MYv//vljFv8D8scs/p/PH7P4H5g/ZvE/KH/M4v+F/DGL/8H5Yxb/Q/LHLP5fzB+z+H8pf8zi/+X8MYv/V/LHLP5fzR+z+H8tf8zi//X8MYv/N/LHLP6H5o9Z/A/LH7P4H54/ZvE/In/M4n9k/pjF/6j8MYv/0fljFv9j8scs/sfmj1n8j8sfs/gfnz9m8f9m/pjF/4T8MYv/ifljFv+T8scs/ifnj1n8T8kfs/h/K3/M4v/t/DGL/6n5Yxb/0/LHLP6n549Z/M/IH7P4fyd/zOJ/Zv6Yxf+s/DGL/9n5Yxb/7+aPWfy/lz9m8T8nf8zif27+mMX/vPwxi//5+WMW/wvyxyz+388fs/j/IH/M4v/D/DGL/4/yxyz+P84fs/j/JH/M4n9h/pjF/6L8MYv/T/PHLP4X549Z/H+WP2bxvyR/zOJ/af6Yxf+y/DGL/+X5Yxb/K/LHLP5X5o9Z/K/KH7P4/zx/zOL/i/wxi/8v88cs/r/KH7P4X50/ZvG/Jn/M4v/r/DGL/2/yxyz+1+aPWfx/mz9m8b8uf8zif33+mMX/hvwxi//v8scs/jfmj1n8b8ofs/jfnD9m8f99/pjF/w/5Yxb/P+aPWfxvyR+z+P8pf8zif2v+mMX/tvwxi//t+WMW/zvyxyz+f84fs/jfmT9m8b8rf8zi/5f8MYv/3fljFv+/5o9Z/P+WP2bx/3v+mMX/H/ljFv978scs/vfmj1n878sfs/jfnz9m8X8gf8ziPyV/zOL/YP6Yxf+h/DGL/9T8MYn/0wb5Yxb/ofwxi/+o/DGL/yz5Yxb/WfPHLP6j88cs/rPlj1n8Z88fs/jPkT9m8Z8zf8ziP1f+mMV/7vwxi/88+WMW/3nzxyz+T8sfs/jPlz9m8R+TP2bxnz9/zOI/Nn/M4r9A/pjFf8H8MYv/0/PHLP7PyB+z+D8zf8ziv1D+mMX/WfljFv+F88cs/s/OH7P4Pyd/zOK/SP6Yxf+5+WMW/+flj1n8x+WPWfyfnz9m8X9B/pjF/4X5Yxb/RfPHLP6L5Y9Z/F+UP2bxXzx/zOK/RP6Yxf/F+WMW/5fkj1n8X5o/ZvF/Wf6YxX/J/DGL/8vzxyz+S+WPWfyXzh+z+C+TP2bxXzZ/zOK/XP6YxX/5/DGL/yvyxyz+K+SPWfxXzB+z+K+UP2bxXzl/zOL/yvwxi/8q+WMW/1Xzxyz+r8ofs/i/On/M4v+a/DGL//j8MYv/hPwxi//E/DGL/2r5Yxb/1UX+c/wL61r81xD5/ytZ/Cflj1n8J+ePWfzXzB+z+K+VP2bxf23+mMX/dfljFv+188cs/uvkj1n8180fs/i/Pn/M4r9e/pjF/w35Yxb/9fPHLP4b5I9Z/DfMH7P4b5Q/ZvF/Y/6YxX/j/DGL/yb5Yxb/N+WPWfzfnD9m8X9L/pjF/635Yxb/t+WPWfzfnj9m8X9H/pjFf9P8MYv/ZvljFv/N88cs/u/MH7P4b5E/ZvHfMn/M4r9V/pjFf+v8MYv/u/LHLP7b5I9Z/N+dP2bxf0/+mMV/2/wxi/92+WMW/+3zxyz+O+SPWfzfmz9m8X9f/pjFf8f8MYv/+/PHLP475Y9Z/D+QP2bx/2D+mMX/Q/ljFv+d88cs/rvkj1n8d80fs/h/OH/M4v+R/DGL/0fzxyz+u+WPWfw/lj9m8d89f8ziv0f+mMV/z/wxi//H88cs/p/IH7P475U/ZvH/ZP6YxX/v/DGL/6fyxyz+n84fs/jvkz9m8d83f8ziv1/+mMX/M/ljFv/P5o9Z/D+XP2bx3z9/zOJ/QP6Yxf/z+WMW/wPzxyz+B+WPWfy/kD9m8T84f8zif0j+mMX/i/ljFv8v5Y9Z/L+cP2bx/0r+mMX/q/ljFv+v5Y9Z/L+eP2bx/0b+mMX/0Pwxi/9h+WMW/8Pzxyz+R+SPWfyPzB+z+B+VP2bxPzp/zOJ/TP6Yxf/Y/DGL/3H5Yxb/4/PHLP7fzB+z+J+QP2bxPzF/zOJ/Uv6Yxf/k/DGL/yn5Yxb/b+WPWfy/nT9m8T81f8zif1r+mMX/9Pwxi/8Z+WMW/+/kj1n8z8wfs/iflT9m8T87f8zi/938MYv/9/LHLP7n5I9Z/M/NH7P4n5c/ZvE/P3/M4n9B/pjF//v5Yxb/H+SPWfx/mD9m8f9R/pjF/8f5Yxb/n+SPWfwvzB+z+F+UP2bx/2n+mMX/4vwxi//P8scs/pfkj1n8L80fs/hflj9m8b88f8zif0X+mMX/yvwxi/9V+WMW/5/nj1n8f5E/ZvH/Zf6Yxf9X+WMW/6vzxyz+1+SPWfx/nT9m8f9N/pjF/9r8MYv/b/PHLP7X5Y9Z/K/PH7P435A/ZvH/Xf6Yxf/G/DGL/035Yxb/m/PHLP6/zx+z+P8hf8zi/8f8MYv/LfljFv8/5Y9Z/G/NH7P435Y/ZvG/PX/M4n9H/pjF/8/5Yxb/O/PHLP535Y9Z/P+SP2bxvzt/zOL/1/wxi//f8scs/n/PH7P4/yN/zOJ/T/6Yxf/e/DGL/335Yxb/+/PHLP4P5I9Z/Kfkj1n8H8wfs/g/lD9m8Z+aPybxn2+QP2bxH8ofs/iPyh+z+M+SP2bxnzX/xzTLyKPFf3T+mMV/tvwxi//s+WMW/znyxyz+c+aPWfznyh+z+M+dP2bxnyd/zOI/b/6Yxf9p+WMW//nyxyz+Y/LHLP7z549Z/Mfmj1n8F8gfs/gvmD9m8X96/pjF/xn5Yxb/Z+aPWfwXyh+z+D8rf8ziv3D+mMX/2fljFv/n5I9Z/BfJH7P4Pzd/zOL/vPwxi/+4/DGL//Pzxyz+L8gfs/i/MH/M4r9o/pjFf7H8MYv/i/LHLP6L549Z/JfIH7P4vzh/zOL/kvwxi/9L88cs/i/LH7P4L5k/ZvF/ef6YxX+p/DGL/9L5Yxb/ZfLHLP7L5o9Z/JfLH7P4L58/ZvF/Rf6YxX+F/DGL/4r5Yxb/lfLHLP4r549Z/F+ZP2bxXyV/zOK/av6Yxf9V+WMW/1fnj1n8X5M/ZvEfnz9m8Z+QP2bxn5g/ZvFfLX/M4r96/pjFf438MYv/pPwxi//k/DGL/5r5Yxb/tfLHLP6vzR+z+L8uf8ziv3b+mMV/nfwxi/+6+WMW/9fnj1n818sfs/i/IX/M4r9+/pjFf4P8MYv/hvljFv+N8scs/m/MH7P4b5w/ZvHfJH/M4v+m/DGL/5vzxyz+b8kfs/i/NX/M4v+2/DGL/9vzxyz+78gfs/hvmj9m8d8sf8ziv3n+mMX/nfljFv8t8scs/lvmj1n8t8ofs/hvnT9m8X9X/pjFf5v8MYv/u/PHLP7vyR+z+G+bP2bx3y5/zOK/ff6YxX+H/DGL/3vzxyz+78sfs/jvmD9m8X9//pjFf6f8MYv/B/LHLP4fzB+z+H8of8ziv3P+mMV/l/wxi/+u+WMW/w/nj1n8P5I/ZvH/aP6YxX+3/DGL/8fyxyz+u+ePWfz3yB+z+O+ZP2bx///Yo6cEUAgACIDZeNm2bdu2bdv1kW3btm3btm3zAnuCduYKc6D/qOX/IP9Ry//B/qOW/0P8Ry3/h/qPWv4P8x+1/B/uP2r5P8J/1PJ/pP+o5f8o/1HL/9H+o5b/Y/xHLf/H+o9a/o/zH7X8H+8/avk/wX/U8n+i/6jl/yT/Ucv/yf6jlv9T/Ect/6f6j1r+T/Mftfyf7j9q+T/Df9Tyf6b/qOX/LP9Ry//Z/qOW/3P8Ry3/5/qPWv7P8x+1/J/vP2r5v8B/1PJ/of+o5f8i/1HL/8X+o5b/S/xHLf+X+o9a/i/zH7X8X+4/avm/wn/U8n+l/6jl/yr/Ucv/1f6jlv9r/Ect/9f6j1r+r/Mftfxf7z9q+b/Bf9Tyf6P/qOX/Jv9Ry//N/qOW/1v8Ry3/t/qPWv5v8x+1/N/uP2r5v8N/1PJ/p/+o5f8u/1HL/93+o5b/e/xHLf/3+o9a/u/zH7X83+8/avl/wH/U8v+g/6jl/yH/Ucv/w/6jlv9H/Ect/4/6j1r+H/Mftfw/7j9q+X/Cf9Ty/6T/qOX/Kf9Ry//T/qOW/2f8Ry3/z/qPWv6f8x+1/D/vP2r5f8F/1PL/ov+o5f8l/1HL/8v+o5b/V/xHLf+v+o9a/l/zH7X8v+4/avl/w3/U8v+m/6jl/y3/Ucv/2/6jlv93/Ect/+/6j1r+3/Mftfy/7z9q+f/Af9Ty/6H/qOX/I/9Ry//H/qOW/0/8Ry3/n/qPWv4/8x+1/H/uP2r5/8J/1PL/pf+o5f8r/1HL/9f+o5b/b/xHLf/f+o9a/r/zH7X8f+8/avn/wX/U8v+j/6jl/yf/Ucv/z/6jlv9f/Ect/7/6j1r+f/Mftfz/7j9q+f/Df9Ty/6f/qOX/L/9Ry//f/qOW/3/8Ry3///qPSv4HDOQ/avkf2H/U8j+I/6jlf1D/Ucv/YP6jlv/B/Uct/0P4j1r+h/QftfwP5T9q+R/af9TyP4z/qOV/WP9Ry/9w/qOW/+H9Ry3/I/iPWv5H9B+1/A/wH7X8j+Q/avkf2X/U8j+K/6jlf1T/Ucv/aP6jlv/R/Uct/2P4j1r+x/QftfyP5T9q+R/bf9TyP47/qOV/XP9Ry/94/qOW//H9Ry3/E/iPWv4n9B+1/E/kP2r5n9h/1PI/if+o5X9S/1HL/2T+o5b/yf1HLf9T+I9a/qf0H7X8T+U/avmf2n/U8j+N/6jlf1r/Ucv/dP6jlv/p/Uct/zP4j1r+Z/QftfzP5D9q+Z/Zf9TyP4v/qOV/Vv9Ry/9s/qOW/9n9Ry3/c/iPWv7n9B+1/M/lP2r5n9t/1PI/j/+o5X9e/1HL/3z+o5b/+f1HLf8L+I9a/hf0H7X8L+Q/avlf2H/U8r+I/6jlf1H/Ucv/Yv6jlv/F/Uct/0v4j1r+l/Qftfwv5T9q+V/af9Tyv4z/qOV/Wf9Ry/9y/qOW/+X9Ry3/K/iPWv5X9B+1/K/kP2r5X9l/1PK/iv+o5X9V/1HL/2r+o5b/1f1HLf9r+I9a/tf0H7X8r+U/avlf23/U8r+O/6jlf13/Ucv/ev6jlv/1/Uct/xv4j1r+N/Qftfxv5D9q+d/Yf9Tyv4n/qOV/U/9Ry/9m/qOW/839Ry3/W/iPWv639B+1/G/lP2r539p/1PK/jf+o5X9b/1HL/3b+o5b/7f1HLf87+I9a/nf0H7X87+Q/avnf2X/U8r+L/6jlf1f/Ucv/bv6jlv/d/Uct/3v4j1r+9/Qftfzv5T9q+d/bf9Tyv4//qOV/X/9Ry/9+/qOW//39Ry3/B/iP/nf/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAf+zbbWydZeHH8bvbOsb+/JMRF1yGJptcKCTCbPeQ8YKwydhWB914HgMc3dqNjXabXYddAffwYhIhPEgyyRIlypahhJnQSAwEK4ho0EVNNPgAiEIUjRMh6Ja4WHPa09Ieu8Zz1etalM/nRc+577Pfva3Jd/e9wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/ns1NC48Mr5m2KnxQw8+eLil73XO0ZU3H/htz4UDr+WPl41wyXFDD3p7e3vnPDd7R/nwlKIoSj/bzvLxpMpx6fo767/Q2X8UFvS8tOT4lJ83Hjmw5vRH6rqP3l/bd7a2uGndhtaWj40rinBxbdFZOqirKYqwuLa4r3RQXzpYUls8UjqY3XdwavHt0sH5aze3NpdOLI3+nsH/iobGncX4YcUWw/40GNr/zvpv3TnwOsolB642oSj3f0XX99+q+GzACfofuH5YWNl/1b9B4ISq6/+FBQOvo1zyX+7/k59a9cpIn524/4Hrh4/rH9IZ4fl/WKOVz/0Vz/8zRrjk4P6qmq7jpf4vve3ZmeVTE/6d5/93rx8urux/3LDn/9Jz/KKB5/9TiiJcMsZvB7ynNDTuOjLa/X/0/idMr9jUDO3/jPbN+0v9P77ke0+UT9VW2f+iUe7/45ZW/FqB6jQ0frm34v5fRf/FR0a45GD/bz/x64dL/T/2+wfOHPJZNf1fUtn/rI62LbO2bu86b0Nb0/qW9S2b6mbPnzOvvm7eBXNn9T0S9H8d43cF3hvGdv8vJldsaoqiZXB/TfeBp0v9z33wwTnlU5Oq7H/xqPf/Ge7/MKIPjSsmTiw6mzo62uv6vw4c1vd/7f9hI/Rfxd//zzqn/MNqy681RTFtcH/XmXevKPX/zqFnd5dPTayy/yWj9r9g8OcFIozx/t9csRnW/8FDL/U9/y+79+AZ5VPV/v1/6aj9v+r+D2PR0FjxP/z8h5X631VcFtlpaPDf/yCdHP0/9s4NPXHr8An9Qzo5+v/d546eG7cOy/QP6eTof8LGB56PW4dL9Q/p5Oh/+dT5K+LW4TL9Qzo5+l/76rl/jluHRv1DOjn6P+dLuzvj1mG5/iGdHP0/1D5nW9w6rNA/pJOj/5+e9tBrcetwuf4hnRz9Hzt2z41x63CF/iGdHP137zn7B3HrcKX+IZ0c/V++bmGIW4er9A/p5Oh/+rQ/Ph63DlfrH9LJ0f+8P/39tLh1uEb/kE6O/u/4/Ip9cetwrf4hnRz9j7/+lRfj1mGl/iGdHP0vPXvbwrh1uE7/kE6O/pt/0twbtw6r9A/p5Oh/1td/tCFuHa7XP6STo//Dyx/dE7cON+gf0snR/566YkrcOtyof0gnR/9f++7ph+LW4ZP6h3Ry9P+bp56cH7cOq/UP6eTo/7kP3P6NuHW4Sf+QTo7+713z4llx69Ckf0gnR/8P733+i3HrsEb/kE6O/t94o+3/4tZhrf4hnRz9T5506utx69Csf0gnR/8Lb/1Ke9w6tOgf0snRf9vu7h/GrcM6/UM6Ofr/8PFpq+LWYb3+IZ0c/a+cu/f9cetws/4hnRz9v2/Zhbvi1mGD/iGdHP1f1PPRi+LWYaP+IZ0c/Xc889mvxq3DLfqHdHL0v3fma4vj1qFV/5BOjv5fXr30x3Hr0KZ/SCdH/289et2muHXYpH9IJ0f/T/7s7WNx67BZ/5BOjv7//4JFf41bhy36h3Ry9L94yZtr49bhU/qHdHL0v7H7Hy/HrUO7/iGdHP3PPHz1srh12Kp/SCdH/985r25/3Dp06B/SydH/nVfuq49bh236h3Ry9L//4F13x63DrfqHdHL0/+YvZkyPW4dP6x/SydH//VMOXRu3Dp36h3Ry9P/LTbXPxK3Ddv1DOjn6/9u+qTvi1qFL/5BOjv6ffr3nD3HrcJv+IZ0c/a+e8KuJcetwu/4hnRz9T+3acl/cOtyhf0gnR//z72k6P24dPqN/SCdH/1v/8sI349Zhh/4hna3bu25pam1taffGG2+8GXxzsv9kAlJ7N/qT/SsBAAAAAAAAAAAAAABOJMc/JzrZv0cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+yQ4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRV24FgAAAAAQJi/dRC9GwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBXAAAA//+O1eBI")

1.500441884s ago: executing program 4 (id=901):
syz_open_dev$loop(&(0x7f0000000080), 0x3, 0x800)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="9b194a0000ff000000000000000024d300000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000340)=ANY=[@ANYRESDEC=r0, @ANYRES64=r1, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'})
write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000140)={0x16f, @time, 0x0, {}, 0x9})
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
socket$pppl2tp(0x18, 0x1, 0x1)
connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
ioctl$TCSETSW(0xffffffffffffffff, 0x5403, 0x0)
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000400)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c696e74722c6e6f61636c2c007b23f83b1254aa27ee01a5d3fb36df0fe06af4bca006363cfed6a170dd76fea284b59300e43294bb43ff4a1eb45e24b74945419b2b3c69d86e5870ed0a232e76304a"], 0x1, 0x442a, &(0x7f0000008940)="$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")
open(&(0x7f0000000040)='./bus\x00', 0x145142, 0x0)
symlink(&(0x7f00000049c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000059c0)='./file0\x00')
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x1a4243c, &(0x7f000000b6c0)=ANY=[@ANYRES16, @ANYRES64, @ANYBLOB="12a4095a2aac12f0bfcb206d982e44066381388d27f14002d8d7431d3947f6399c7ff9f5193fc0398653e5a67bbb319f02bf4ac6f6ccd5acbfe1350cc3a6d2d48cf6c089ddf67171ffb3b15988e7b394c5daf3e12ca05e4dbdad7edd45f10cbc296a53a530d4c2d203ee650d5fff3a9b5aae78794fe84327e508172cdd72eeff5af4d6db9379bef20dde8e64b91d31a84ce8a7598bb78cc85108874811fc650f0520a5", @ANYRESOCT, @ANYRESDEC, @ANYRES16, @ANYRESDEC=0x0, @ANYBLOB="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", @ANYRES8, @ANYRESOCT], 0x0, 0x0, &(0x7f0000000000))
rename(&(0x7f00000001c0)='./bus\x00', &(0x7f0000000240)='./file0\x00')
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x1a4243c, &(0x7f0000000a00)=ANY=[@ANYRES16, @ANYRESOCT, @ANYRESOCT, @ANYRES8, @ANYRESOCT=0x0, @ANYBLOB="defdd6f24cb9acb7fe0b0dc92a093135912ebef426731ffe88138f2b03791edb32e2ba3924188f2c07da77a1d75290af3db49e3aeedbaabdfc897ff5feb67e05cb1f923278506034c99285994c8d2a07e7732f9e4666bedc57efbc75eda531e10945eab9810dce4df5cb4468fee9df15bad908ce6d2cf900c4541ebe94681428ac2202f0132ddfd00bb4d24ace8c513914431814c2", @ANYRES32, @ANYRESOCT, @ANYRES16, @ANYRESOCT], 0x0, 0x0, &(0x7f0000000000))
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
setsockopt$bt_BT_DEFER_SETUP(r6, 0x112, 0x7, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0)
syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x73, 0x86, 0x40, 0x20, 0xc72, 0x14, 0x39ac, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0xa, [{{0x9, 0x4, 0x1d, 0xf3, 0x1, 0x71, 0x6c, 0x75, 0x0, [], [{{0x9, 0x5, 0x1, 0x8, 0x40, 0xe, 0x3, 0xf}}]}}]}}]}}, 0x0)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_debug_messages', 0x0, 0x0)

1.387863254s ago: executing program 1 (id=902):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, &(0x7f00000000c0)})
mincore(&(0x7f0000f0c000/0x3000)=nil, 0x0, &(0x7f0000afaf0a)=""/246)
openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0))
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="a0010000100013070000000000000000ac1414aa0000000000000000000000000000000000000000000000000000000100"/64, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac141400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000110000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000960000000000000048000200656362286369706865595347826c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0017000000000000000000000000000000000000000000000000004c0014006469676573745f6e756c6c0000714df65087c87ba300"/337], 0x1a0}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
socket$inet(0x2, 0x3, 0x8)
syz_emit_ethernet(0x100, &(0x7f0000000100)={@broadcast, @random="48ed16350a46", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x2, 0x0, 0xf2, 0x74, 0x0, 0x2, 0x8, 0x0, @rand_addr=0x64010100, @broadcast}, "1cc39ae47c59c4f36acc6a8b58db393d81c8d5d929843d33118ef03f7c8f3941c7622a23a86dfb9b1bab9e6517051a632680ba5b7fe8717f00b399d97c1b4d6d2f6c0bead245b2d55f48800e38767427b22069b70f98021b4bc0dcc9da660b35c969742956e2ebc3174358587a6546a9e394bfd0b6ec7f4cd09f1113d2d0ead91426bc25b80d8b64056ffbec13103de795625b8124191c0dd560eac963299a7285e32579b5775264c2d1e51d8708481c00b8f998df2a02f7870b92d9a8b063da5cb716887faef92552a3b35ac52d3a00"/222}}}}, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='veno\x00', 0x5)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1000000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="0000f0ffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000100"], 0x48)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x128}}, 0x40)

1.179521143s ago: executing program 3 (id=903):
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file0\x00', 0x1000801, &(0x7f0000000080)=ANY=[@ANYRES16=0x0], 0x0, 0x1ca, &(0x7f00000008c0)="$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")
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
futex(0x0, 0x0, 0x0, &(0x7f00000005c0), 0x0, 0x2)
newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r3 = syz_open_procfs(0x0, 0x0)
preadv(r3, 0x0, 0x0, 0x0, 0x0)
syz_open_dev$usbmon(0x0, 0x0, 0x0)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes-aesni)\x00'}, 0x58)
r5 = accept4(r4, 0x0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000080)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
sendmmsg$inet6(r5, &(0x7f0000003b80)=[{{0x0, 0xd, &(0x7f00000003c0)=[{&(0x7f00000000c0)="e6", 0x2}], 0x1}, 0xff03}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000440)='&', 0x23fff}], 0x1}}], 0x4000070, 0x8000)
recvmmsg(r5, &(0x7f00000018c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000005c0)=@caif=@rfm, 0x80, 0x0, 0x0, &(0x7f0000000fc0)=""/214, 0xd6}}, {{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000001140)=""/192, 0xc0}, {&(0x7f00000013c0)=""/65, 0x41}, {&(0x7f0000001440)=""/233, 0xe9}], 0x3, &(0x7f00000015c0)=""/246, 0xf6}}, {{0x0, 0x0, &(0x7f00000016c0)}}], 0x4, 0x0, 0x0)
socket$key(0xf, 0x3, 0x2)
r6 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x154, 0x10, 0x713, 0x0, 0x0, {{@in=@remote, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in=@multicast2, 0x0, 0x32}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2, 0x4}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x4, {0x2, 0x0, 0x0, @in=@multicast1}}]}, 0x154}}, 0x0)

500.008945ms ago: executing program 2 (id=904):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000ff0000000000000c00080003000000000000000000000204"], 0x0, 0x27, 0x0, 0x2, 0x4, 0x0, @void, @value}, 0x28)
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0xa00008, &(0x7f0000000100), 0xf9, 0x7c0, &(0x7f0000000f80)="$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")
r1 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0)
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x580000a, 0x13, r1, 0x0)
pwritev2(r1, &(0x7f0000000500)=[{&(0x7f0000000340)='\b', 0x1}], 0x1, 0x0, 0x0, 0x0)
mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[])
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
fadvise64(r1, 0x0, 0x0, 0x4)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000000c0)={r0, 0x0, 0xfffffffffffffffe}, 0x10)

360.851527ms ago: executing program 2 (id=905):
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000002380)='./file0\x00', 0x4040, &(0x7f00000023c0)=ANY=[], 0x1, 0x6eb, &(0x7f0000000900)="$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")
fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
mkdir(&(0x7f0000000300)='./file0\x00', 0x1d5)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, 0x0, 0x0, 0x2, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/diskstats\x00', 0x0, 0x0)
preadv(r3, &(0x7f0000000000)=[{&(0x7f0000002100)=""/4112, 0x1010}], 0x1, 0x0, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x9, 0x8, &(0x7f0000000600)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @cgroup_sock=0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x9}, 0x10, 0x0, r3, 0x0, 0x0, 0x0, 0x10, 0xd16, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r5, &(0x7f0000000300))
ioctl$FS_IOC_GETFLAGS(r5, 0x5437, 0x0)

32.025457ms ago: executing program 3 (id=906):
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet(0xa, 0x801, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), r0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9000007f", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000c00060003000000000000000c0002000000000000000000040007800c000800000000000000000008000a00000000004400078008000100", @ANYRES32, @ANYBLOB="38000100", @ANYRES32=r2, @ANYBLOB="64800400", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="080001"], 0x90}}, 0x0)

0s ago: executing program 3 (id=907):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x6)
socket(0xa, 0x80000, 0x135)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f00000007c0)={[{@usrjquota}, {}, {@nojournal_checksum}, {@dax}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@resuid}, {@nodelalloc}, {@acl}, {@noinit_itable}], [{@context={'context', 0x3d, 'staff_u'}}]}, 0xfc, 0x579, &(0x7f0000000cc0)="$eJzs3V1rHNUbAPBnNpv09f9vCqWoF1LohZXaTZP4UkFovRQtFvS+Lsk0lGy6JbspTSzYXtgbb6QIIhbED+C9l8Uv4KcoaKFICXohQmQ2s+k22c1bt+62+/vBJOfszOTMs2eeyTk7u2wAA+tY9qMQ8XJEfJ1EHGpZV4x85bHV7ZYf3ZjKliRWVj75I4kkf6y5fZL/PpBXXoqIX76MOFnY2G5tcWm2XKmk83l9rD53day2uHTq8lx5Jp1Jr0xMTp55a3Li3Xfe7lqsr1/467uP731w5qvjy9/+9ODwnSTOxcF8XWscT+Fma+VY+Z+8NBzn1m043oXG+knS6wNgV4byPB+O7BpwKIbyrAdefF9ExAowoBL5DwOqOQ5ozu27NA9+bjx8f3UC1Ih9pDX+4uprI7G3MTfav5w8MTPK5rujXWg/a+Pn3+/eyZbY/HWIfVvUAXbk5q2IOF0sbrz+J/n1b/dON1483tz6Ngbt/w/00r1s/PNGu/FfYW38E23GPwfa5O5ubJ3/hQddaKajbPz3Xtvx79qla3Qor/2vMeYbTi5drqSnI+L/EXEihvdk9c3u55xZvr/SaV3r+C9bsvabY8H8OB4U9zy5z3S5Xo6IkaeJu+nhrYhXiu3iT9b6P2nT/9nzcWGbbRxN777aad3W8T9bKz9GvNa2/x/f0Uo2vz851jgfxppnxUZ/3j76a6f2ex1/1v/7N49/NGm9X1vbeRs/7P077bRut+f/SPJpo9xMguvlen1+PGIk+Wjj4xOP923Wm9tn8Z84vvn1r935n02+Pttm/LeP3O64aT/0//SO+n/nhfsffv59p/a31/9vNkon8kfy6197+bmy3QN82ucPAAAAAAAA+kkhIg5GUiitlQuFUmn1/R1HYn+hUq3VT16qLlyZjsZnZUdjuNC8032o5f0Q4/n7YZv1iXX1yYg4HBHfDO1r1EtT1cp0r4MHAAAAAAAAAAAAAAAAAACAPnGgw+f/M78N9frogGeu8cUGe3p9FEAvbPmV/934piegL22Z/8ALS/7D4JL/MLjkPwwu+Q+DS/7D4JL/MLjkPwAAAAAAAAAAAAAAAAAAAAAAAAAAAHTVhfPns2Vl+dGNqaw+fW1xYbZ67dR0WpstzS1Mlaaq81dLM9XqTCUtTVXntvp7lWr16vhELFwfq6e1+lhtceniXHXhSv3i5bnyTHoxHf5PogIAAAAAAAAAAAAAAAAAAIDnS21xabZcqaTzA1CI2N3uZ6MPDv5ZFs7mJ8Oudi/2SxQKHQq38u7d2V49vCgBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwDr/BgAA//+ouDGS")
open$dir(0x0, 0x301480, 0x1)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000080)='./file0\x00', 0xa08886, &(0x7f0000000040)=ANY=[@ANYRES32=0x0], 0x1, 0x2a8, &(0x7f0000000500)="$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")
ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f0000000080))
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f00000007c0), 0xffffffffffffffff)
r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3)
ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000001680)=0x7d)
ioctl$TIOCSTI(r5, 0x5412, &(0x7f00000000c0)=0x7d)
sendmsg$ETHTOOL_MSG_EEE_GET(r4, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0)
ioctl$sock_bt_hci(r0, 0x400448c9, &(0x7f00000000c0)="81fdfc012812f0c64c")
syz_mount_image$vfat(&(0x7f0000000700), &(0x7f00000003c0)='./file0\x00', 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB='iocharset=cp865,utf8=1,utf8=0,utf8=1,iocharset=utf8,sys_immutable\x00\x00\x00\x00\x00\x00\x00\x00te=0,uni_xlate=1,uni_xlate=1,gid=', @ANYRESHEX, @ANYBLOB='A\x00'], 0x1, 0x1a4, &(0x7f0000000440)="$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")

kernel console output (not intermixed with test programs):

 netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  242.070109][ T5727] loop3: detected capacity change from 0 to 512
[  242.081193][ T5723] loop0: detected capacity change from 0 to 2048
[  242.234695][ T5729] loop1: detected capacity change from 0 to 1024
[  242.452821][ T5727] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  243.750444][ T3614] Bluetooth: hci1: command 0x0409 tx timeout
[  243.975762][ T4561] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  243.985798][ T5727] EXT4-fs (loop3): 1 truncate cleaned up
[  243.997047][ T5727] EXT4-fs (loop3): mounted filesystem without journal. Opts: i_version,nombcache,debug_want_extra_isize=0x0000000000000006,lazytime,noblock_validity,quota,,errors=continue. Quota mode: writeback.
[  244.211262][ T5723] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  244.761885][ T3960] hfsplus: b-tree write err: -5, ino 4
[  244.787521][ T5739] loop4: detected capacity change from 0 to 1024
[  245.691896][ T5719] chnl_net:caif_netlink_parms(): no params data found
[  245.741246][ T5749] dlm: no locking on control device
[  245.812769][ T5757] loop3: detected capacity change from 0 to 256
[  245.884226][ T5749] netlink: 292 bytes leftover after parsing attributes in process `syz.1.518'.
[  245.910796][ T5761] loop4: detected capacity change from 0 to 1024
[  245.990238][ T3614] Bluetooth: hci1: command 0x041b tx timeout
[  246.277550][ T5719] bridge0: port 1(bridge_slave_0) entered blocking state
[  246.319108][ T5719] bridge0: port 1(bridge_slave_0) entered disabled state
[  246.340007][ T5719] device bridge_slave_0 entered promiscuous mode
[  246.372912][ T5719] bridge0: port 2(bridge_slave_1) entered blocking state
[  246.382913][ T5719] bridge0: port 2(bridge_slave_1) entered disabled state
[  246.427969][ T5778] loop1: detected capacity change from 0 to 1024
[  246.431255][ T5719] device bridge_slave_1 entered promiscuous mode
[  249.523597][ T3622] Bluetooth: hci1: command 0x040f tx timeout
[  249.881599][ T3778] hfsplus: b-tree write err: -5, ino 4
[  249.952859][ T5719] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  249.967801][ T5719] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  249.989771][ T5791] loop3: detected capacity change from 0 to 1024
[  250.072419][ T5792] loop1: detected capacity change from 0 to 1024
[  250.072830][ T5719] team0: Port device team_slave_0 added
[  250.124122][ T5719] team0: Port device team_slave_1 added
[  250.214341][ T5719] batman_adv: batadv0: Adding interface: batadv_slave_0
[  250.302671][ T5719] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  250.330821][ T5792] EXT4-fs (loop1): DAX enabled. Warning: EXPERIMENTAL, use at your own risk
[  250.342793][ T5792] EXT4-fs (loop1): Unrecognized mount option "context=staff_u" or missing value
[  251.076241][ T3779] hfsplus: b-tree write err: -5, ino 4
[  251.079365][ T5719] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  251.103810][ T5802] loop0: detected capacity change from 0 to 1024
[  251.113731][ T5719] batman_adv: batadv0: Adding interface: batadv_slave_1
[  251.163322][ T5719] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  251.170806][ T5792] loop1: detected capacity change from 0 to 128
[  251.239476][ T5719] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  251.528646][ T5719] device hsr_slave_0 entered promiscuous mode
[  251.576025][ T5719] device hsr_slave_1 entered promiscuous mode
[  251.584104][ T5719] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  251.592765][ T3622] Bluetooth: hci1: command 0x0419 tx timeout
[  251.607652][ T5719] Cannot create hsr debugfs directory
[  252.002523][ T4561] device hsr_slave_0 left promiscuous mode
[  252.023855][ T4561] device hsr_slave_1 left promiscuous mode
[  252.050514][ T4561] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  252.058600][ T4561] batman_adv: batadv0: Removing interface: batadv_slave_0
[  252.085388][ T4561] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  252.098641][ T3779] hfsplus: b-tree write err: -5, ino 4
[  252.127529][ T4561] batman_adv: batadv0: Removing interface: batadv_slave_1
[  252.143708][ T5825] loop1: detected capacity change from 0 to 1024
[  252.151220][ T4561] device bridge_slave_1 left promiscuous mode
[  252.158272][ T4561] bridge0: port 2(bridge_slave_1) entered disabled state
[  252.168704][ T4561] device bridge_slave_0 left promiscuous mode
[  252.200320][ T4561] bridge0: port 1(bridge_slave_0) entered disabled state
[  252.227604][ T4561] device veth1_macvtap left promiscuous mode
[  252.236485][ T5833] loop4: detected capacity change from 0 to 512
[  252.243627][ T4561] device veth0_macvtap left promiscuous mode
[  252.253389][ T4561] device veth1_vlan left promiscuous mode
[  252.261235][ T4561] device veth0_vlan left promiscuous mode
[  252.275957][ T5825] EXT4-fs (loop1): DAX enabled. Warning: EXPERIMENTAL, use at your own risk
[  252.294476][ T5833] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  252.297079][ T5825] EXT4-fs (loop1): Unrecognized mount option "context=staff_u" or missing value
[  252.377698][ T5833] EXT4-fs (loop4): 1 truncate cleaned up
[  252.422197][ T5825] loop1: detected capacity change from 0 to 128
[  252.426344][ T5833] EXT4-fs (loop4): mounted filesystem without journal. Opts: i_version,nombcache,debug_want_extra_isize=0x0000000000000006,lazytime,noblock_validity,quota,,errors=continue. Quota mode: writeback.
[  253.217855][ T5845] loop4: detected capacity change from 0 to 1024
[  253.230319][ T5848] loop3: detected capacity change from 0 to 512
[  253.231169][ T5847] loop1: detected capacity change from 0 to 1024
[  253.257095][ T5848] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option
[  253.447374][ T5847] EXT4-fs (loop1): DAX enabled. Warning: EXPERIMENTAL, use at your own risk
[  253.456430][ T5847] EXT4-fs (loop1): Unrecognized mount option "context=staff_u" or missing value
[  253.458919][ T5848] EXT4-fs (loop3): orphan cleanup on readonly fs
[  253.492810][ T5848] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.531: bg 0: block 248: padding at end of block bitmap is not set
[  253.521415][ T5848] __quota_error: 58 callbacks suppressed
[  253.521431][ T5848] Quota error (device loop3): write_blk: dquota write failed
[  253.531616][ T1211] hfsplus: b-tree write err: -5, ino 4
[  253.534894][ T5848] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[  253.552026][ T5848] EXT4-fs error (device loop3): ext4_acquire_dquot:6196: comm syz.3.531: Failed to acquire dquot type 1
[  253.577703][ T5848] EXT4-fs (loop3): 1 truncate cleaned up
[  253.601643][ T5847] loop1: detected capacity change from 0 to 128
[  253.636628][ T5848] EXT4-fs (loop3): mounted filesystem without journal. Opts: nombcache,grpquota,quota,noblock_validity,usrquota,nomblk_io_submit,,errors=continue. Quota mode: writeback.
[  253.914235][ T4561] team0 (unregistering): Port device team_slave_1 removed
[  253.958607][ T4561] team0 (unregistering): Port device team_slave_0 removed
[  254.567124][ T4561] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  254.662141][ T5855] loop0: detected capacity change from 0 to 1024
[  254.736257][ T4561] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  254.916092][ T5855] EXT4-fs (loop0): DAX enabled. Warning: EXPERIMENTAL, use at your own risk
[  254.940755][ T5855] EXT4-fs (loop0): Unrecognized mount option "context=staff_u" or missing value
[  255.650864][ T5863] loop3: detected capacity change from 0 to 256
[  255.702319][ T1389] ieee802154 phy0 wpan0: encryption failed: -22
[  255.708650][ T1389] ieee802154 phy1 wpan1: encryption failed: -22
[  255.773533][ T5855] loop0: detected capacity change from 0 to 128
[  255.828831][ T4561] bond0 (unregistering): Released all slaves
[  256.884732][ T5873] loop0: detected capacity change from 0 to 512
[  256.961166][ T5875] loop3: detected capacity change from 0 to 1024
[  257.023956][ T5873] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  257.200530][ T5873] EXT4-fs (loop0): 1 truncate cleaned up
[  257.206219][ T5873] EXT4-fs (loop0): mounted filesystem without journal. Opts: i_version,nombcache,debug_want_extra_isize=0x0000000000000006,lazytime,noblock_validity,quota,,errors=continue. Quota mode: writeback.
[  257.659590][ T5890] loop0: detected capacity change from 0 to 1024
[  258.229366][ T5719] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  258.253891][ T5904] loop1: detected capacity change from 0 to 256
[  258.285376][ T5719] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  258.384457][ T5719] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  258.449957][ T5719] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  261.077044][ T5925] loop0: detected capacity change from 0 to 1024
[  261.121881][ T5719] 8021q: adding VLAN 0 to HW filter on device bond0
[  261.163845][ T5925] EXT4-fs (loop0): DAX enabled. Warning: EXPERIMENTAL, use at your own risk
[  261.188034][ T3960] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  261.196747][ T3960] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  261.205842][ T5925] EXT4-fs (loop0): Unrecognized mount option "context=staff_u" or missing value
[  261.241593][ T5719] 8021q: adding VLAN 0 to HW filter on device team0
[  261.248351][ T5927] vhci_hcd: invalid port number 0
[  261.264156][ T2698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  261.282656][ T2698] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  261.304524][ T2698] bridge0: port 1(bridge_slave_0) entered blocking state
[  261.311663][ T2698] bridge0: port 1(bridge_slave_0) entered forwarding state
[  261.359158][ T5925] loop0: detected capacity change from 0 to 128
[  261.564825][ T2698] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  261.600884][ T2698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  261.762092][ T2698] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  261.880706][ T2698] bridge0: port 2(bridge_slave_1) entered blocking state
[  261.887957][ T2698] bridge0: port 2(bridge_slave_1) entered forwarding state
[  261.917520][ T5635] hfsplus: b-tree write err: -5, ino 4
[  261.996209][ T2698] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  262.057436][ T2698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  262.413247][ T5719] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  262.423986][ T5719] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  262.458629][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  262.467939][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  262.476948][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  262.555705][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  262.599006][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  262.971418][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  263.271392][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  263.309267][ T5956] loop1: detected capacity change from 0 to 2048
[  263.318147][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  263.371015][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  263.441087][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  263.449052][ T5959] loop0: detected capacity change from 0 to 1024
[  263.675009][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  263.692404][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  263.711155][ T5956] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  263.724543][ T5719] 8021q: adding VLAN 0 to HW filter on device batadv0
[  263.894444][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  263.925358][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  263.997110][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  264.016968][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  264.108949][ T5719] device veth0_vlan entered promiscuous mode
[  264.701011][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  264.739111][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  264.849482][ T5719] device veth1_vlan entered promiscuous mode
[  265.007328][ T5719] device veth0_macvtap entered promiscuous mode
[  265.179781][ T3779] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  265.210965][ T3779] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  265.273053][ T3779] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  265.696925][ T5994] loop3: detected capacity change from 0 to 128
[  266.029558][ T5719] device veth1_macvtap entered promiscuous mode
[  266.109044][ T5998] loop1: detected capacity change from 0 to 1024
[  266.119861][ T5719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  266.174100][ T5719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  266.193530][ T5719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  266.208879][ T5719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  266.226405][ T6006] loop4: detected capacity change from 0 to 256
[  266.239446][ T5719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  266.262603][ T5719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  266.284964][ T5719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  266.307296][ T5719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  266.324815][ T5719] batman_adv: batadv0: Interface activated: batadv_slave_0
[  266.333962][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  266.361764][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  266.375632][ T5719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  266.389692][ T5719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  266.460737][ T5719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  266.515922][ T5719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  266.573564][ T5719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  266.588614][ T5719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  266.611594][ T5719] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  266.633967][ T5719] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  266.653634][ T5719] batman_adv: batadv0: Interface activated: batadv_slave_1
[  266.654474][ T5998] EXT4-fs (loop1): DAX enabled. Warning: EXPERIMENTAL, use at your own risk
[  266.675023][ T3960] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  266.683573][ T5998] EXT4-fs (loop1): Unrecognized mount option "context=staff_u" or missing value
[  266.713420][ T3960] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  266.782163][ T5719] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  266.806978][ T5719] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  266.836773][ T5719] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  266.891303][ T5719] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  266.928889][ T6021] tipc: Started in network mode
[  266.937587][ T6026] loop3: detected capacity change from 0 to 1024
[  266.940678][ T6021] tipc: Node identity aaaaaaaaaa1, cluster identity 4711
[  266.988033][ T5998] loop1: detected capacity change from 0 to 128
[  266.995705][ T6021] tipc: Enabled bearer <eth:gretap0>, priority 10
[  267.158967][ T6030] loop0: detected capacity change from 0 to 1024
[  267.904404][ T6038] loop4: detected capacity change from 0 to 2048
[  267.948409][ T3960] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  268.010223][ T3960] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  268.051221][ T3960] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  268.075050][ T3960] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  268.085541][ T4386] tipc: Node number set to 12233386
[  268.200673][ T3960] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  268.435858][ T3778] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  268.525425][ T6038] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  270.534694][ T3960] hfsplus: b-tree write err: -5, ino 4
[  273.687762][ T6083] loop0: detected capacity change from 0 to 256
[  273.872341][ T6091] loop2: detected capacity change from 0 to 1024
[  274.008729][ T6091] EXT4-fs (loop2): DAX enabled. Warning: EXPERIMENTAL, use at your own risk
[  274.020556][ T6091] EXT4-fs (loop2): Unrecognized mount option "context=staff_u" or missing value
[  274.909427][ T6109] capability: warning: `syz.0.581' uses deprecated v2 capabilities in a way that may be insecure
[  275.011148][ T6091] loop2: detected capacity change from 0 to 128
[  275.017751][ T6107] loop3: detected capacity change from 0 to 1024
[  276.474527][ T6113] loop0: detected capacity change from 0 to 2048
[  277.621719][ T6113] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  278.554461][ T5635] hfsplus: b-tree write err: -5, ino 4
[  278.913271][ T6152] dlm: no locking on control device
[  278.978763][ T6152] netlink: 292 bytes leftover after parsing attributes in process `syz.3.591'.
[  278.982426][ T6128] loop4: detected capacity change from 0 to 32768
[  280.356510][ T6164] loop3: detected capacity change from 0 to 256
[  281.241827][ T6168] dlm: no locking on control device
[  281.248338][ T6168] netlink: 292 bytes leftover after parsing attributes in process `syz.1.595'.
[  281.276482][ T6172] dlm: no locking on control device
[  282.189550][ T6172] netlink: 292 bytes leftover after parsing attributes in process `syz.0.603'.
[  282.237531][ T6177] loop4: detected capacity change from 0 to 1024
[  282.369077][ T6177] EXT4-fs (loop4): DAX enabled. Warning: EXPERIMENTAL, use at your own risk
[  282.379372][ T6181] FAULT_INJECTION: forcing a failure.
[  282.379372][ T6181] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  282.400448][ T6177] EXT4-fs (loop4): Unrecognized mount option "context=staff_u" or missing value
[  282.401118][ T6181] CPU: 1 PID: 6181 Comm: syz.3.598 Not tainted 5.15.167-syzkaller #0
[  282.417542][ T6181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  282.427679][ T6181] Call Trace:
[  282.430945][ T6181]  <TASK>
[  282.433858][ T6181]  dump_stack_lvl+0x1e3/0x2d0
[  282.438534][ T6181]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[  282.444149][ T6181]  ? panic+0x860/0x860
[  282.448207][ T6181]  should_fail+0x38a/0x4c0
[  282.452608][ T6181]  _copy_from_user+0x2d/0x170
[  282.457268][ T6181]  __sys_bpf+0x1d5/0x670
[  282.461556][ T6181]  ? bpf_link_show_fdinfo+0x2d0/0x2d0
[  282.466959][ T6181]  ? syscall_enter_from_user_mode+0x2e/0x240
[  282.472934][ T6181]  ? lockdep_hardirqs_on+0x94/0x130
[  282.478125][ T6181]  __x64_sys_bpf+0x78/0x90
[  282.482536][ T6181]  do_syscall_64+0x3b/0xb0
[  282.486933][ T6181]  ? clear_bhb_loop+0x15/0x70
[  282.491599][ T6181]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  282.497475][ T6181] RIP: 0033:0x7f050a5d5ff9
[  282.501900][ T6181] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  282.521492][ T6181] RSP: 002b:00007f0508a4e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  282.529886][ T6181] RAX: ffffffffffffffda RBX: 00007f050a78df80 RCX: 00007f050a5d5ff9
[  282.537837][ T6181] RDX: 0000000000000047 RSI: 000000002000e000 RDI: 0000000000000005
[  282.545791][ T6181] RBP: 00007f0508a4e090 R08: 0000000000000000 R09: 0000000000000000
[  282.553743][ T6181] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  282.561693][ T6181] R13: 0000000000000001 R14: 00007f050a78df80 R15: 00007ffc0d469088
[  282.569678][ T6181]  </TASK>
[  282.649845][ T6179] loop1: detected capacity change from 0 to 2048
[  282.699268][ T6177] loop4: detected capacity change from 0 to 128
[  282.890316][   T13] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  282.943550][ T6179] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  284.681464][   T13] usb 4-1: Using ep0 maxpacket: 8
[  284.860328][   T13] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  284.870789][   T13] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  284.995461][   T13] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  285.104672][   T13] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  285.189733][   T13] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  285.253577][   T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  285.420272][ T3614] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  285.474586][ T6206] loop0: detected capacity change from 0 to 512
[  285.531462][ T6206] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  285.536220][   T13] usb 4-1: GET_CAPABILITIES returned 0
[  285.563648][   T13] usbtmc 4-1:16.0: can't read capabilities
[  285.581575][ T6206] EXT4-fs (loop0): 1 truncate cleaned up
[  285.587239][ T6206] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  285.790588][ T3614] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  285.836673][ T3614] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  286.480454][ T3614] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  286.491161][ T3614] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  286.499179][ T3614] usb 3-1: SerialNumber: syz
[  286.619210][ T6227] loop4: detected capacity change from 0 to 1024
[  286.639657][ T6230] netlink: 4 bytes leftover after parsing attributes in process `syz.1.614'.
[  286.656363][ T6227] EXT4-fs (loop4): DAX enabled. Warning: EXPERIMENTAL, use at your own risk
[  286.679369][ T6227] EXT4-fs (loop4): Unrecognized mount option "context=staff_u" or missing value
[  286.711640][ T6230] team0 (unregistering): Port device team_slave_0 removed
[  286.737745][ T6230] team0 (unregistering): Port device team_slave_1 removed
[  286.777463][ T6227] loop4: detected capacity change from 0 to 128
[  286.782586][ T3614] usb 3-1: 0:2 : does not exist
[  286.803130][ T3614] usb 3-1: unit 255 not found!
[  286.826581][ T2698] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  286.957303][ T2698] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  287.020794][ T3614] usb 3-1: 5:0: cannot get min/max values for control 2 (id 5)
[  287.032759][ T2698] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  287.060235][ T4390] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  287.320170][ T4390] usb 2-1: Using ep0 maxpacket: 8
[  287.385641][ T3614] usb 3-1: USB disconnect, device number 3
[  287.490527][ T4390] usb 2-1: config 0 has an invalid interface number: 7 but max is 0
[  287.498596][ T4390] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  287.522760][ T3681] udevd[3681]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  287.539016][ T4390] usb 2-1: config 0 has no interface number 0
[  287.542072][ T2698] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  287.575169][ T4390] usb 2-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=20.9d
[  287.608348][ T4390] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  287.658588][ T4390] usb 2-1: config 0 descriptor??
[  287.742557][ T6239] dlm: no locking on control device
[  287.838131][ T6239] netlink: 292 bytes leftover after parsing attributes in process `syz.2.618'.
[  287.860513][ T3614] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  287.928574][ T4390] usb 2-1: USB disconnect, device number 3
[  288.017283][ T6236] chnl_net:caif_netlink_parms(): no params data found
[  288.110469][ T3614] usb 5-1: Using ep0 maxpacket: 16
[  288.206678][ T6236] bridge0: port 1(bridge_slave_0) entered blocking state
[  288.214370][ T6236] bridge0: port 1(bridge_slave_0) entered disabled state
[  288.232865][ T6236] device bridge_slave_0 entered promiscuous mode
[  288.254918][ T6236] bridge0: port 2(bridge_slave_1) entered blocking state
[  288.262507][ T6236] bridge0: port 2(bridge_slave_1) entered disabled state
[  288.277740][ T6236] device bridge_slave_1 entered promiscuous mode
[  288.389416][ T6236] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  288.390617][ T3614] usb 5-1: New USB device found, idVendor=506f, idProduct=be92, bcdDevice=b8.ea
[  288.421734][ T3614] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  288.424532][ T6236] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  288.490355][ T3614] usb 5-1: Product: syz
[  288.509984][ T3614] usb 5-1: Manufacturer: syz
[  288.534575][ T3614] usb 5-1: SerialNumber: syz
[  288.549183][ T3614] usb 5-1: config 0 descriptor??
[  288.559150][ T1302] Bluetooth: hci5: command 0x0406 tx timeout
[  288.669561][ T6236] team0: Port device team_slave_0 added
[  288.679585][ T6236] team0: Port device team_slave_1 added
[  288.734697][ T6236] batman_adv: batadv0: Adding interface: batadv_slave_0
[  288.745353][ T6236] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  288.772608][ T6236] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  288.794402][ T1077] usb 5-1: USB disconnect, device number 4
[  288.829973][ T6236] batman_adv: batadv0: Adding interface: batadv_slave_1
[  288.837167][ T6236] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  288.863821][ T6236] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  288.920384][ T1302] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  288.996195][ T6236] device hsr_slave_0 entered promiscuous mode
[  289.017268][ T6236] device hsr_slave_1 entered promiscuous mode
[  289.029337][ T6236] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  289.037625][ T6236] Cannot create hsr debugfs directory
[  289.079328][ T2698] device hsr_slave_0 left promiscuous mode
[  289.093048][ T2698] device hsr_slave_1 left promiscuous mode
[  289.100891][ T2698] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  289.108339][ T2698] batman_adv: batadv0: Removing interface: batadv_slave_0
[  289.125847][ T2698] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  289.133864][ T2698] batman_adv: batadv0: Removing interface: batadv_slave_1
[  289.152962][ T2698] device bridge_slave_1 left promiscuous mode
[  289.159975][ T2698] bridge0: port 2(bridge_slave_1) entered disabled state
[  289.178518][ T2698] device bridge_slave_0 left promiscuous mode
[  289.185845][ T2698] bridge0: port 1(bridge_slave_0) entered disabled state
[  289.216505][ T2698] device veth1_macvtap left promiscuous mode
[  289.238059][ T2698] device veth0_macvtap left promiscuous mode
[  289.244566][ T2698] device veth1_vlan left promiscuous mode
[  289.252599][ T2698] device veth0_vlan left promiscuous mode
[  289.302027][ T1302] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[  289.314250][ T1302] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  289.391980][ T1302] usb 2-1: config 0 descriptor??
[  289.392205][ T6280] trusted_key: encrypted_key: insufficient parameters specified
[  289.442609][ T1302] gspca_main: STV06xx-2.14.0 probing 046d:0870
[  289.510330][ T1077] Bluetooth: hci2: command 0x0409 tx timeout
[  289.714513][ T2698] team0 (unregistering): Port device team_slave_1 removed
[  289.747693][ T2698] team0 (unregistering): Port device team_slave_0 removed
[  289.784319][ T2698] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  289.807682][ T2698] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  289.952662][ T2698] bond0 (unregistering): Released all slaves
[  290.190392][ T3615] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  290.800382][ T6183] usbtmc 4-1:16.0: usb_control_msg returned -110
[  290.975589][ T6268] netlink: 'syz.1.621': attribute type 21 has an invalid length.
[  291.078052][ T3622] usb 4-1: USB disconnect, device number 4
[  291.080222][ T3615] usb 5-1: Using ep0 maxpacket: 8
[  291.085570][ T6305] loop2: detected capacity change from 0 to 1024
[  291.139215][ T6312] loop3: detected capacity change from 0 to 1024
[  291.186343][ T6305] EXT4-fs (loop2): DAX enabled. Warning: EXPERIMENTAL, use at your own risk
[  291.198947][ T6312] EXT4-fs (loop3): Can't support bigalloc feature without extents feature
[  291.198947][ T6312] 
[  291.209258][ T6305] EXT4-fs (loop2): Unrecognized mount option "context=staff_u" or missing value
[  291.231829][ T6309] loop1: detected capacity change from 0 to 4096
[  291.257992][ T6312] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities
[  291.353606][ T6309] ntfs: volume version 3.1.
[  291.384922][ T3615] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  291.408952][ T3615] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  291.415568][ T6268] ntfs: (device loop1): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set cp866.  You might want to try to use the mount option nls=utf8.
[  291.443507][ T6268] ntfs: (device loop1): ntfs_filldir(): Skipping unrepresentable inode 0x4.
[  291.539646][ T6317] loop2: detected capacity change from 0 to 128
[  291.563972][ T1302] usb 2-1: USB disconnect, device number 4
[  291.607134][ T3622] Bluetooth: hci2: command 0x041b tx timeout
[  291.761029][ T6317] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  292.060245][ T3615] usb 5-1: Product: syz
[  292.064538][ T3615] usb 5-1: Manufacturer: syz
[  292.069229][ T3615] usb 5-1: SerialNumber: syz
[  292.085558][ T3615] usb 5-1: config 0 descriptor??
[  292.256865][ T6321] loop3: detected capacity change from 0 to 1024
[  292.370572][ T3615] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  292.421422][ T6321] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled
[  292.440563][ T6321] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem
[  292.506795][ T6321] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  292.593313][ T6321] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (59422!=20869)
[  292.617621][ T6323] loop2: detected capacity change from 0 to 256
[  292.653985][ T6321] journal_init_common: Cannot get buffer for journal superblock
[  292.668584][ T6236] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  292.671234][ T6321] EXT4-fs (loop3): Could not load journal inode
[  292.740774][ T6236] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  292.796890][ T6236] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  292.866198][ T6236] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  293.045930][ T6339] loop3: detected capacity change from 0 to 512
[  293.146280][ T6236] 8021q: adding VLAN 0 to HW filter on device bond0
[  293.178616][ T6236] 8021q: adding VLAN 0 to HW filter on device team0
[  293.195016][ T6339] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  293.208277][ T3779] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  293.218346][ T3779] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  293.263454][ T3779] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  293.281193][ T6339] EXT4-fs (loop3): 1 truncate cleaned up
[  293.287109][ T6339] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  293.340720][ T3779] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  293.413797][ T3779] bridge0: port 1(bridge_slave_0) entered blocking state
[  293.420947][ T3779] bridge0: port 1(bridge_slave_0) entered forwarding state
[  293.460692][ T3779] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  293.491962][ T3779] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  293.519510][ T3779] bridge0: port 2(bridge_slave_1) entered blocking state
[  293.526671][ T3779] bridge0: port 2(bridge_slave_1) entered forwarding state
[  293.590212][ T3779] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  293.646530][ T3779] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  293.661728][ T3779] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  293.678452][ T3779] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  293.681322][ T1077] Bluetooth: hci2: command 0x040f tx timeout
[  293.707124][ T3779] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  293.725971][ T3779] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  293.741168][ T6291] udc-core: couldn't find an available UDC or it's busy
[  293.748192][ T6291] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  293.813403][ T3779] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  293.844130][ T3779] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  293.862451][ T3779] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  293.881005][ T3779] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  293.896578][ T6340] loop2: detected capacity change from 0 to 32768
[  293.914089][ T3779] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  293.938848][ T3779] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  293.964339][ T6236] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  294.031084][ T6340] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop2 scanned by syz.2.631 (6340)
[  294.176466][ T6340] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  294.233487][ T6340] BTRFS info (device loop2): using free space tree
[  294.262841][ T6340] BTRFS info (device loop2): has skinny extents
[  294.438567][ T3779] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  294.541848][ T3615] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -71
[  294.685518][ T3779] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  294.701747][ T3615] usb 5-1: USB disconnect, device number 5
[  295.140406][ T6236] 8021q: adding VLAN 0 to HW filter on device batadv0
[  295.268273][ T6400] netlink: 28 bytes leftover after parsing attributes in process `syz.4.640'.
[  295.310971][ T6340] BTRFS info (device loop2): enabling ssd optimizations
[  295.376051][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  295.416606][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  295.495831][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  295.512113][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  295.554717][ T6236] device veth0_vlan entered promiscuous mode
[  295.579256][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  295.594096][ T1211] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  295.627300][ T6236] device veth1_vlan entered promiscuous mode
[  295.632278][ T6417] loop1: detected capacity change from 0 to 22
[  295.680445][ T3615] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  295.732842][ T5635] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  295.750232][ T1302] Bluetooth: hci2: command 0x0419 tx timeout
[  295.759681][ T5635] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  295.785617][ T5635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  295.820584][ T5635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  295.858094][ T6236] device veth0_macvtap entered promiscuous mode
[  295.883156][ T6236] device veth1_macvtap entered promiscuous mode
[  295.941309][ T3615] usb 4-1: Using ep0 maxpacket: 32
[  295.948678][ T6236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  295.994993][ T6236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  296.028046][ T6236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  296.065327][ T6236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  296.081286][ T3615] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  296.103027][ T6236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  296.110139][ T3615] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  296.120572][ T6426] loop1: detected capacity change from 0 to 4096
[  296.130262][ T6236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  296.140156][ T3615] usb 4-1: New USB device found, idVendor=28bd, idProduct=0934, bcdDevice= 0.00
[  296.140184][ T3615] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  296.142055][ T3615] usb 4-1: config 0 descriptor??
[  296.159951][ T6236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  296.174351][ T6236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  296.196416][ T6236] batman_adv: batadv0: Interface activated: batadv_slave_0
[  296.206445][ T6426] ntfs: (device loop1): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1.
[  296.219673][ T5635] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  296.244651][ T5635] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  296.258961][ T5635] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  296.311999][ T6426] ntfs: volume version 3.1.
[  296.314332][ T5635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  296.347494][ T6236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  296.379880][ T6236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  296.389847][ T6236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  296.402741][ T6236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  296.412630][ T6236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  296.423175][ T6236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  296.444104][ T6236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  296.455865][ T6236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  296.488157][ T6236] batman_adv: batadv0: Interface activated: batadv_slave_1
[  296.574937][ T6442] loop4: detected capacity change from 0 to 1024
[  296.612608][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  296.631801][ T3698] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  296.669620][ T6236] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  296.685950][ T3615] hid-generic 0003:28BD:0934.0001: unknown main item tag 0x0
[  296.729551][ T6236] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  296.730889][ T3615] hid-generic 0003:28BD:0934.0001: hidraw0: USB HID v0.00 Device [HID 28bd:0934] on usb-dummy_hcd.3-1/input0
[  296.773847][ T6236] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  296.824698][ T6236] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  296.895172][ T6408] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability
[  297.054465][ T3614] usb 4-1: USB disconnect, device number 5
[  297.289678][ T3779] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  297.318380][ T3779] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  297.522631][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  297.544228][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  297.657459][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  297.941086][ T6457] loop1: detected capacity change from 0 to 131072
[  297.945880][ T3779] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  298.393221][ T6457] F2FS-fs (loop1): Found nat_bits in checkpoint
[  298.518647][ T6457] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  298.783079][ T6479] loop4: detected capacity change from 0 to 256
[  298.861772][ T6479] exfat: Deprecated parameter 'utf8'
[  298.972752][ T6481] dlm: no locking on control device
[  298.994561][ T6479] exfat: Deprecated parameter 'utf8'
[  299.024598][ T6481] netlink: 292 bytes leftover after parsing attributes in process `syz.3.651'.
[  299.053532][ T6476] loop0: detected capacity change from 0 to 4096
[  299.092911][ T6479] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  299.141341][ T6476] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512)
[  299.245924][ T6448] loop2: detected capacity change from 0 to 32768
[  299.480306][ T3622] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  299.505989][ T6448] XFS (loop2): Mounting V5 Filesystem
[  299.620070][ T6496] loop0: detected capacity change from 0 to 2048
[  299.654554][ T6448] XFS (loop2): Ending clean mount
[  299.694116][ T3681] udevd[3681]: incorrect nilfs2 checksum on /dev/loop0
[  299.730317][ T3622] usb 5-1: Using ep0 maxpacket: 16
[  299.760651][ T6496] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[  299.763162][ T5719] XFS (loop2): Unmounting Filesystem
[  299.850424][ T3622] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  299.941486][ T6502] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  300.486298][ T6504] loop1: detected capacity change from 0 to 131072
[  300.530323][ T3622] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d
[  300.549775][ T3622] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  300.598772][ T3622] usb 5-1: Product: syz
[  300.610037][ T6504] F2FS-fs (loop1): Found nat_bits in checkpoint
[  300.648182][ T3622] usb 5-1: Manufacturer: syz
[  300.664452][ T3622] usb 5-1: SerialNumber: syz
[  300.693724][   T26] audit: type=1800 audit(1728150467.472:629): pid=6496 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.652" name="bus" dev="loop0" ino=18 res=0 errno=0
[  300.714423][ T6504] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  300.741378][ T3622] usb 5-1: config 0 descriptor??
[  300.840291][ T3622] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  300.878769][ T6509] NILFS error (device loop0): nilfs_bmap_lookup_contig: broken bmap (inode number=18)
[  300.902257][ T6509] Remounting filesystem read-only
[  301.073865][ T6516] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  301.081667][ T6516] IPv6: NLM_F_CREATE should be set when creating new route
[  301.088890][ T6516] IPv6: NLM_F_CREATE should be set when creating new route
[  301.097365][ T6516] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  301.189778][ T6236] NILFS (loop0): discard dirty page: offset=4096, ino=6
[  301.210309][ T6236] NILFS (loop0): discard dirty block: blocknr=39, size=1024
[  301.217817][ T6236] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[  301.228063][ T6236] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[  301.237298][ T6236] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[  301.251815][ T6236] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer
[  301.263084][ T6236] NILFS (loop0): discard dirty page: offset=0, ino=18
[  301.270027][ T6236] NILFS (loop0): discard dirty block: blocknr=0, size=1024
[  301.295241][ T6236] NILFS (loop0): discard dirty block: blocknr=0, size=1024
[  301.333860][ T6236] NILFS (loop0): discard dirty block: blocknr=0, size=1024
[  301.342174][ T6236] NILFS (loop0): discard dirty block: blocknr=0, size=1024
[  301.349835][ T6236] NILFS (loop0): discard dirty page: offset=4096, ino=18
[  301.357518][ T6236] NILFS (loop0): discard dirty block: blocknr=0, size=1024
[  301.365102][ T6236] NILFS (loop0): discard dirty block: blocknr=0, size=1024
[  301.372874][ T6236] NILFS (loop0): discard dirty block: blocknr=0, size=1024
[  301.380727][ T6236] NILFS (loop0): discard dirty block: blocknr=0, size=1024
[  301.437826][ T6236] NILFS (loop0): discard dirty page: offset=0, ino=3
[  301.450246][ T6236] NILFS (loop0): discard dirty block: blocknr=42, size=1024
[  301.475350][ T6236] NILFS (loop0): discard dirty block: blocknr=43, size=1024
[  301.505770][ T6236] NILFS (loop0): discard dirty block: blocknr=44, size=1024
[  301.518013][ T6236] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[  301.540293][ T6236] NILFS (loop0): discard dirty page: offset=65536, ino=3
[  301.552099][ T6236] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[  301.575784][ T6236] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[  301.596431][ T6236] NILFS (loop0): discard dirty block: blocknr=0, size=1024
[  301.605095][ T6236] NILFS (loop0): discard dirty block: blocknr=18446744073709551615, size=1024
[  301.940350][ T2698] usb 5-1: Failed to submit usb control message: -110
[  301.951946][ T2698] usb 5-1: unable to send the bmi data to the device: -110
[  301.973633][ T2698] usb 5-1: unable to get target info from device
[  301.993503][ T2698] usb 5-1: could not get target info (-110)
[  302.017172][ T2698] usb 5-1: could not probe fw (-110)
[  302.217722][ T1077] usb 5-1: USB disconnect, device number 6
[  302.219469][ T6521] loop1: detected capacity change from 0 to 32768
[  302.328528][ T6521] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.654 (6521)
[  302.372591][ T6531] loop4: detected capacity change from 0 to 1024
[  302.411572][ T6515] loop2: detected capacity change from 0 to 32768
[  302.426026][ T6521] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  302.449332][ T6521] BTRFS info (device loop1): using free space tree
[  302.461138][ T6515] XFS: noikeep mount option is deprecated.
[  302.613621][ T6521] BTRFS info (device loop1): has skinny extents
[  302.675328][ T6515] XFS (loop2): Mounting V5 Filesystem
[  302.772935][ T6527] loop3: detected capacity change from 0 to 32768
[  302.818711][ T6515] XFS (loop2): Ending clean mount
[  302.829690][ T6521] BTRFS info (device loop1): enabling ssd optimizations
[  302.854832][ T6515] XFS (loop2): Quotacheck needed: Please wait.
[  302.888323][ T6521] BTRFS info (device loop1): scrub: started on devid 1
[  303.009531][ T6521] BTRFS info (device loop1): scrub: finished on devid 1 with status: 0
[  303.874366][ T6515] XFS (loop2): Quotacheck: Done.
[  304.857205][ T6572] loop0: detected capacity change from 0 to 131072
[  304.882958][ T5719] XFS (loop2): Unmounting Filesystem
[  304.963188][ T6572] F2FS-fs (loop0): Found nat_bits in checkpoint
[  305.040432][ T6574] loop4: detected capacity change from 0 to 32768
[  305.047095][ T6572] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  305.349927][ T6574] XFS (loop4): Mounting V5 Filesystem
[  305.444422][ T6574] XFS (loop4): Ending clean mount
[  305.667090][ T6618] loop2: detected capacity change from 0 to 1024
[  305.697377][ T4158] XFS (loop4): Unmounting Filesystem
[  306.280233][ T6429] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  306.348783][ T6625] loop3: detected capacity change from 0 to 4096
[  306.373934][ T6627] loop4: detected capacity change from 0 to 8192
[  306.405876][ T6625] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512)
[  306.434184][ T6627] REISERFS (device loop4): found reiserfs format "3.6" with non-standard journal
[  306.481271][ T6627] REISERFS (device loop4): using ordered data mode
[  306.518490][ T6429] usb 1-1: device descriptor read/64, error -71
[  306.542184][ T6627] reiserfs: using flush barriers
[  306.573357][ T6627] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  306.600819][ T6627] REISERFS (device loop4): checking transaction log (loop4)
[  306.804749][ T6627] REISERFS (device loop4): Using tea hash to sort names
[  306.830358][ T6429] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  306.848657][ T6627] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage.
[  307.040469][ T6429] usb 1-1: device descriptor read/64, error -71
[  307.170531][ T6429] usb usb1-port1: attempt power cycle
[  308.590641][ T6429] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  308.796855][ T6660] loop3: detected capacity change from 0 to 128
[  308.891323][ T6660] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  308.936055][ T6429] usb 1-1: device descriptor read/8, error -71
[  308.968748][ T6662] loop1: detected capacity change from 0 to 2048
[  309.138151][ T6666] loop4: detected capacity change from 0 to 256
[  309.168506][ T6662] EXT4-fs (loop1): Invalid log block size: 589826
[  309.170510][ T6667] loop0: detected capacity change from 0 to 1024
[  309.353422][ T6662] netlink: 16 bytes leftover after parsing attributes in process `syz.1.689'.
[  310.065569][ T6687] binder: 6686:6687 unknown command 1078485779
[  310.105904][ T6688] loop1: detected capacity change from 0 to 8192
[  310.114604][ T6689] binder: 6686:6689 ioctl ab08 0 returned -22
[  310.148241][ T6687] binder: 6686:6687 ioctl c0306201 200001c0 returned -22
[  310.233072][ T6688] REISERFS (device loop1): found reiserfs format "3.6" with non-standard journal
[  310.269699][ T6688] REISERFS (device loop1): using ordered data mode
[  310.316435][ T6697] loop2: detected capacity change from 0 to 128
[  310.334435][ T6688] reiserfs: using flush barriers
[  310.408736][ T6688] REISERFS (device loop1): journal params: device loop1, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  310.453804][ T6688] REISERFS (device loop1): checking transaction log (loop1)
[  310.499364][   T26] audit: type=1804 audit(1728150477.272:630): pid=6697 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.701" name="/newroot/24/file2/file0" dev="loop2" ino=1048614 res=1 errno=0
[  310.564991][ T6699] FAULT_INJECTION: forcing a failure.
[  310.564991][ T6699] name failslab, interval 1, probability 0, space 0, times 1
[  310.577681][ T6699] CPU: 1 PID: 6699 Comm: syz.4.700 Not tainted 5.15.167-syzkaller #0
[  310.585751][ T6699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  310.595800][ T6699] Call Trace:
[  310.599076][ T6699]  <TASK>
[  310.602004][ T6699]  dump_stack_lvl+0x1e3/0x2d0
[  310.606685][ T6699]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[  310.612309][ T6699]  ? panic+0x860/0x860
[  310.616376][ T6699]  ? __might_sleep+0xc0/0xc0
[  310.620967][ T6699]  should_fail+0x38a/0x4c0
[  310.625387][ T6699]  should_failslab+0x5/0x20
[  310.629887][ T6699]  slab_pre_alloc_hook+0x53/0xc0
[  310.634823][ T6699]  kmem_cache_alloc_trace+0x49/0x290
[  310.640129][ T6699]  ? alloc_fs_context+0x64/0x840
[  310.645066][ T6699]  alloc_fs_context+0x64/0x840
[  310.649830][ T6699]  ? _raw_read_unlock+0x36/0x40
[  310.654675][ T6699]  ? get_fs_type+0x3f9/0x470
[  310.659263][ T6699]  do_new_mount+0x15c/0xb40
[  310.663763][ T6699]  ? do_move_mount_old+0x160/0x160
[  310.668874][ T6699]  ? user_path_at_empty+0x12b/0x180
[  310.674072][ T6699]  __se_sys_mount+0x2d5/0x3c0
[  310.678754][ T6699]  ? asm_sysvec_reschedule_ipi+0x16/0x20
[  310.684385][ T6699]  ? __x64_sys_mount+0xc0/0xc0
[  310.689233][ T6699]  ? syscall_enter_from_user_mode+0x37/0x240
[  310.695209][ T6699]  ? __x64_sys_mount+0x1c/0xc0
[  310.700000][ T6699]  do_syscall_64+0x3b/0xb0
[  310.704531][ T6699]  ? clear_bhb_loop+0x15/0x70
[  310.709201][ T6699]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  310.715097][ T6699] RIP: 0033:0x7f5609c24ff9
[  310.719515][ T6699] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  310.739117][ T6699] RSP: 002b:00007f560805b038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  310.747536][ T6699] RAX: ffffffffffffffda RBX: 00007f5609ddd130 RCX: 00007f5609c24ff9
[  310.755502][ T6699] RDX: 00000000200004c0 RSI: 0000000020000440 RDI: 0000000000000000
[  310.763468][ T6699] RBP: 00007f560805b090 R08: 0000000020000500 R09: 0000000000000000
[  310.771437][ T6699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  310.779400][ T6699] R13: 0000000000000000 R14: 00007f5609ddd130 R15: 00007ffd474e9b48
[  310.787378][ T6699]  </TASK>
[  310.970903][   T26] audit: type=1804 audit(1728150477.672:631): pid=6697 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.701" name="/newroot/24/file2/file0" dev="loop2" ino=1048614 res=1 errno=0
[  311.009819][ T6700] attempt to access beyond end of device
[  311.009819][ T6700] loop2: rw=2049, want=129, limit=128
[  311.067730][ T6700] Buffer I/O error on dev loop2, logical block 128, lost async page write
[  311.080574][ T6688] REISERFS (device loop1): Using tea hash to sort names
[  311.094282][ T6688] REISERFS (device loop1): Created .reiserfs_priv - reserved for xattr storage.
[  311.195602][ T6704] syz.4.702 uses obsolete (PF_INET,SOCK_PACKET)
[  311.249491][ T5719] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000100)
[  311.294387][ T5719] FAT-fs (loop2): Filesystem has been set read-only
[  311.308285][ T6691] loop0: detected capacity change from 0 to 32768
[  311.396383][ T6691] XFS: ikeep mount option is deprecated.
[  311.413178][ T6691] XFS: noikeep mount option is deprecated.
[  311.463378][ T6691] XFS (loop0): Mounting V5 Filesystem
[  312.033724][ T6691] XFS (loop0): Ending clean mount
[  312.158172][ T6691] XFS (loop0): Quotacheck needed: Please wait.
[  312.184901][ T6725] FAULT_INJECTION: forcing a failure.
[  312.184901][ T6725] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  312.227287][ T6725] CPU: 1 PID: 6725 Comm: syz.4.707 Not tainted 5.15.167-syzkaller #0
[  312.235404][ T6725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  312.245469][ T6725] Call Trace:
[  312.248753][ T6725]  <TASK>
[  312.251698][ T6725]  dump_stack_lvl+0x1e3/0x2d0
[  312.256395][ T6725]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[  312.262037][ T6725]  ? panic+0x860/0x860
[  312.266111][ T6725]  ? __lock_acquire+0x1295/0x1ff0
[  312.271177][ T6725]  should_fail+0x38a/0x4c0
[  312.275582][ T6725]  _copy_from_user+0x2d/0x170
[  312.280247][ T6725]  ___sys_recvmsg+0x150/0x690
[  312.284945][ T6725]  ? __sys_recvmsg+0x260/0x260
[  312.289728][ T6725]  ? __fdget+0x191/0x220
[  312.293954][ T6725]  ? do_recvmmsg+0x16b/0x8f0
[  312.298527][ T6725]  do_recvmmsg+0x36f/0x8f0
[  312.302930][ T6725]  ? __sys_recvmmsg+0x270/0x270
[  312.307778][ T6725]  ? __lock_acquire+0x1ff0/0x1ff0
[  312.312809][ T6725]  __x64_sys_recvmmsg+0x195/0x240
[  312.317838][ T6725]  ? do_recvmmsg+0x8f0/0x8f0
[  312.322428][ T6725]  ? syscall_enter_from_user_mode+0x2e/0x240
[  312.328391][ T6725]  ? lockdep_hardirqs_on+0x94/0x130
[  312.333580][ T6725]  ? syscall_enter_from_user_mode+0x2e/0x240
[  312.339564][ T6725]  do_syscall_64+0x3b/0xb0
[  312.343961][ T6725]  ? clear_bhb_loop+0x15/0x70
[  312.348622][ T6725]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  312.354495][ T6725] RIP: 0033:0x7f5609c24ff9
[  312.358892][ T6725] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  312.378489][ T6725] RSP: 002b:00007f560809d038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  312.386917][ T6725] RAX: ffffffffffffffda RBX: 00007f5609ddcf80 RCX: 00007f5609c24ff9
[  312.387507][ T6691] XFS (loop0): Quotacheck: Done.
[  312.394895][ T6725] RDX: 0000000000000004 RSI: 00000000200018c0 RDI: 0000000000000004
[  312.394910][ T6725] RBP: 00007f560809d090 R08: 0000000000000000 R09: 0000000000000000
[  312.394920][ T6725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  312.394930][ T6725] R13: 0000000000000000 R14: 00007f5609ddcf80 R15: 00007ffd474e9b48
[  312.394953][ T6725]  </TASK>
[  312.522083][ T6731] loop4: detected capacity change from 0 to 512
[  312.564751][ T6731] EXT4-fs (loop4): Mount option "noacl" will be removed by 3.5
[  312.564751][ T6731] Contact linux-ext4@vger.kernel.org if you think we should keep it.
[  312.564751][ T6731] 
[  312.594143][ T6734] loop3: detected capacity change from 0 to 1024
[  312.763341][ T6731] EXT4-fs (loop4): 1 orphan inode deleted
[  312.769754][ T6731] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,noacl,usrquota,,errors=continue. Quota mode: writeback.
[  312.774005][ T6236] XFS (loop0): Unmounting Filesystem
[  312.800242][ T6731] ext4 filesystem being mounted at /134/file1 supports timestamps until 2038 (0x7fffffff)
[  313.553276][ T4386] libceph: connect (1)[c::]:6789 error -101
[  313.575668][ T4386] libceph: mon0 (1)[c::]:6789 connect error
[  313.600155][ T4386] libceph: connect (1)[c::]:6789 error -101
[  313.641487][ T6734] EXT4-fs (loop3): DAX enabled. Warning: EXPERIMENTAL, use at your own risk
[  313.661955][ T6734] EXT4-fs (loop3): Unrecognized mount option "context=staff_u" or missing value
[  313.718165][ T6745] ceph: No mds server is up or the cluster is laggy
[  313.728623][ T4386] libceph: mon0 (1)[c::]:6789 connect error
[  313.880782][ T6761] loop4: detected capacity change from 0 to 512
[  313.957118][ T6734] loop3: detected capacity change from 0 to 128
[  313.961199][ T6761] EXT4-fs (loop4): Mount option "noacl" will be removed by 3.5
[  313.961199][ T6761] Contact linux-ext4@vger.kernel.org if you think we should keep it.
[  313.961199][ T6761] 
[  314.278898][ T6761] EXT4-fs (loop4): 1 orphan inode deleted
[  314.872893][ T6761] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,noacl,usrquota,,errors=continue. Quota mode: writeback.
[  315.227609][ T6761] ext4 filesystem being mounted at /135/file1 supports timestamps until 2038 (0x7fffffff)
[  315.423419][ T6776] loop1: detected capacity change from 0 to 2048
[  315.741700][ T6776] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsv0,errors=remount-ro,. Quota mode: none.
[  316.122312][ T6790] binder: BINDER_SET_CONTEXT_MGR already set
[  316.129023][ T6790] binder: 6784:6790 ioctl 4018620d 20000040 returned -16
[  316.137711][ T6790] binder: 6784:6790 ioctl c0306201 20000140 returned -14
[  316.382719][ T6792] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  316.408996][ T6792] CIFS mount error: No usable UNC path provided in device string!
[  316.408996][ T6792] 
[  316.419390][ T6792] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  316.910321][ T6794] capability: warning: `syz.3.723' uses 32-bit capabilities (legacy support in use)
[  317.050777][ T6796] netlink: 12 bytes leftover after parsing attributes in process `syz.1.722'.
[  317.112862][ T1389] ieee802154 phy0 wpan0: encryption failed: -22
[  317.119249][ T1389] ieee802154 phy1 wpan1: encryption failed: -22
[  317.679823][ T6789] loop0: detected capacity change from 0 to 32768
[  317.732936][ T6815] Process accounting resumed
[  317.861446][ T6789] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz.0.713 (6789)
[  317.881678][ T6826] FAULT_INJECTION: forcing a failure.
[  317.881678][ T6826] name failslab, interval 1, probability 0, space 0, times 0
[  317.895864][ T6826] CPU: 0 PID: 6826 Comm: syz.3.730 Not tainted 5.15.167-syzkaller #0
[  317.903952][ T6826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  317.914014][ T6826] Call Trace:
[  317.917308][ T6826]  <TASK>
[  317.920251][ T6826]  dump_stack_lvl+0x1e3/0x2d0
[  317.924936][ T6826]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[  317.930581][ T6826]  ? panic+0x860/0x860
[  317.934672][ T6826]  should_fail+0x38a/0x4c0
[  317.939100][ T6826]  should_failslab+0x5/0x20
[  317.943615][ T6826]  slab_pre_alloc_hook+0x53/0xc0
[  317.948566][ T6826]  ? __sigqueue_alloc+0x3be/0x4d0
[  317.953601][ T6826]  kmem_cache_alloc+0x3f/0x280
[  317.958386][ T6826]  __sigqueue_alloc+0x3be/0x4d0
[  317.963352][ T6826]  __send_signal+0x21f/0xd40
[  317.967949][ T6826]  group_send_sig_info+0x260/0x2d0
[  317.973054][ T6826]  ? lockdep_assert_task_sighand_held+0x280/0x280
[  317.979467][ T6826]  ? read_lock_is_recursive+0x10/0x10
[  317.984826][ T6826]  bpf_send_signal_common+0x2d8/0x420
[  317.990189][ T6826]  ? rcu_lock_release+0x20/0x20
[  317.995032][ T6826]  ? read_lock_is_recursive+0x10/0x10
[  318.000391][ T6826]  ? __context_tracking_exit+0x4c/0x80
[  318.005844][ T6826]  bpf_send_signal+0x15/0x20
[  318.010421][ T6826]  bpf_prog_8cc4ff36b5985b6a+0x15/0x584
[  318.015947][ T6826]  bpf_trace_run2+0x19e/0x340
[  318.020610][ T6826]  ? bpf_trace_run1+0x2f0/0x2f0
[  318.025444][ T6826]  ? print_irqtrace_events+0x210/0x210
[  318.030883][ T6826]  ? vtime_user_exit+0x2d1/0x400
[  318.035810][ T6826]  __bpf_trace_sys_enter+0x60/0x70
[  318.040907][ T6826]  syscall_enter_from_user_mode+0x202/0x240
[  318.046804][ T6826]  do_syscall_64+0x1e/0xb0
[  318.051304][ T6826]  ? clear_bhb_loop+0x15/0x70
[  318.055984][ T6826]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  318.061881][ T6826] RIP: 0033:0x7f050a5d5ff9
[  318.066290][ T6826] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  318.085997][ T6826] RSP: 002b:00007f0508a4e038 EFLAGS: 00000246 ORIG_RAX: 000000000000004e
[  318.094417][ T6826] RAX: ffffffffffffffda RBX: 00007f050a78df80 RCX: 00007f050a5d5ff9
[  318.102373][ T6826] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffff
[  318.110344][ T6826] RBP: 00007f0508a4e090 R08: 0000000000000000 R09: 0000000000000000
[  318.118307][ T6826] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  318.126257][ T6826] R13: 0000000000000000 R14: 00007f050a78df80 R15: 00007ffc0d469088
[  318.134244][ T6826]  </TASK>
[  318.163567][ T6789] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  318.192764][ T6789] BTRFS info (device loop0): using free space tree
[  318.199523][ T6789] BTRFS info (device loop0): has skinny extents
[  318.620231][ T6586] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  319.010440][ T6586] usb 4-1: Using ep0 maxpacket: 16
[  319.181165][ T6586] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  319.393507][ T6586] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  319.407075][ T6586] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  319.416541][ T6586] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  319.426663][ T6586] usb 4-1: config 0 descriptor??
[  320.221077][ T6586] microsoft 0003:045E:07DA.0002: No inputs registered, leaving
[  320.381094][ T6586] microsoft 0003:045E:07DA.0002: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0
[  320.396641][ T6586] microsoft 0003:045E:07DA.0002: no inputs found
[  320.404005][ T6586] microsoft 0003:045E:07DA.0002: could not initialize ff, continuing anyway
[  320.419244][ T6868] dlm: no locking on control device
[  320.521846][ T6868] netlink: 292 bytes leftover after parsing attributes in process `syz.1.736'.
[  320.610945][ T6789] BTRFS error (device loop0): open_ctree failed
[  320.644479][ T6881] loop2: detected capacity change from 0 to 256
[  320.894730][ T3622] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  321.140215][ T3622] usb 5-1: Using ep0 maxpacket: 16
[  321.260412][ T3622] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  321.275186][ T3622] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  321.289203][ T3622] usb 5-1: New USB device found, idVendor=056a, idProduct=032f, bcdDevice= 0.00
[  321.299282][ T3622] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  321.333168][ T3622] usb 5-1: config 0 descriptor??
[  321.806590][ T3622] wacom 0003:056A:032F.0003: unknown main item tag 0x0
[  321.814037][ T3622] wacom 0003:056A:032F.0003: unknown main item tag 0x0
[  321.821795][ T3622] wacom 0003:056A:032F.0003: unknown main item tag 0x0
[  321.835954][ T3622] wacom 0003:056A:032F.0003: hidraw1: USB HID v0.00 Device [HID 056a:032f] on usb-dummy_hcd.4-1/input0
[  322.097884][ T6429] usb 5-1: USB disconnect, device number 7
[  322.106745][ T3622] usb 4-1: USB disconnect, device number 6
[  322.136953][ T6907] loop3: detected capacity change from 0 to 128
[  322.150309][ T6900] loop0: detected capacity change from 0 to 512
[  322.823456][ T6900] EXT4-fs (loop0): Invalid journal IO priority (must be 0-7)
[  322.826097][ T6907] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  323.053820][ T6907] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  323.400457][ T6433] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  323.845218][ T6433] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  323.859475][ T6918] loop2: detected capacity change from 0 to 8192
[  323.882894][ T6433] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  323.883918][ T6927] loop0: detected capacity change from 0 to 1024
[  323.926298][ T6918] REISERFS (device loop2): found reiserfs format "3.5" with non-standard journal
[  323.944841][ T6918] REISERFS (device loop2): using ordered data mode
[  323.974765][ T6918] reiserfs: using flush barriers
[  323.990558][ T6433] usb 2-1: New USB device found, idVendor=056a, idProduct=032c, bcdDevice= 0.00
[  324.013822][ T6918] REISERFS (device loop2): journal params: device loop2, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  324.042725][ T6918] REISERFS (device loop2): checking transaction log (loop2)
[  324.056734][ T6433] usb 2-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0
[  324.112480][ T6433] usb 2-1: Product: syz
[  324.112914][ T6931] dlm: no locking on control device
[  324.135032][ T6918] REISERFS (device loop2): Using r5 hash to sort names
[  324.168252][ T6433] usb 2-1: config 0 descriptor??
[  324.217135][ T6918] reiserfs: enabling write barrier flush mode
[  324.237755][ T6933] loop3: detected capacity change from 0 to 2048
[  324.241212][ T6931] netlink: 292 bytes leftover after parsing attributes in process `syz.4.752'.
[  324.269075][ T6918] REISERFS (device loop2): Created .reiserfs_priv - reserved for xattr storage.
[  324.340234][ T6933] EXT4-fs (loop3): mounted filesystem without journal. Opts: acl,,errors=continue. Quota mode: none.
[  324.675981][ T6942] FAULT_INJECTION: forcing a failure.
[  324.675981][ T6942] name failslab, interval 1, probability 0, space 0, times 0
[  324.690530][ T6942] CPU: 0 PID: 6942 Comm: syz.3.755 Not tainted 5.15.167-syzkaller #0
[  324.698632][ T6942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  324.708767][ T6942] Call Trace:
[  324.712036][ T6942]  <TASK>
[  324.714947][ T6942]  dump_stack_lvl+0x1e3/0x2d0
[  324.719611][ T6942]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[  324.725227][ T6942]  ? panic+0x860/0x860
[  324.729276][ T6942]  ? validate_chain+0x112/0x5930
[  324.734193][ T6942]  ? arch_stack_walk+0xf3/0x140
[  324.739038][ T6942]  should_fail+0x38a/0x4c0
[  324.743614][ T6942]  should_failslab+0x5/0x20
[  324.748099][ T6942]  slab_pre_alloc_hook+0x53/0xc0
[  324.753048][ T6942]  ? vm_area_alloc+0x20/0xe0
[  324.757621][ T6942]  kmem_cache_alloc+0x3f/0x280
[  324.762380][ T6942]  vm_area_alloc+0x20/0xe0
[  324.766793][ T6942]  mmap_region+0xad4/0x1670
[  324.771289][ T6942]  ? file_mmap_ok+0x150/0x150
[  324.775944][ T6942]  ? cap_mmap_addr+0x15e/0x2d0
[  324.780689][ T6942]  ? bpf_lsm_mmap_addr+0x5/0x10
[  324.785523][ T6942]  ? get_unmapped_area+0x317/0x380
[  324.790615][ T6942]  do_mmap+0x78d/0xe00
[  324.794671][ T6942]  vm_mmap_pgoff+0x1ca/0x2d0
[  324.799255][ T6942]  ? account_locked_vm+0xe0/0xe0
[  324.804172][ T6942]  ? __lock_acquire+0x1ff0/0x1ff0
[  324.809181][ T6942]  ksys_mmap_pgoff+0x13e/0x780
[  324.813926][ T6942]  ? print_irqtrace_events+0x210/0x210
[  324.819367][ T6942]  ? mmap_region+0x1670/0x1670
[  324.824110][ T6942]  ? syscall_enter_from_user_mode+0x2e/0x240
[  324.830069][ T6942]  ? lockdep_hardirqs_on+0x94/0x130
[  324.835264][ T6942]  do_syscall_64+0x3b/0xb0
[  324.839659][ T6942]  ? clear_bhb_loop+0x15/0x70
[  324.844315][ T6942]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  324.850189][ T6942] RIP: 0033:0x7f050a5d6033
[  324.854587][ T6942] Code: f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 89 ca 41 f7 c1 ff 0f 00 00 75 14 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 25 c3 0f 1f 40 00 48 c7 c0 a8 ff ff ff 64 c7
[  324.874175][ T6942] RSP: 002b:00007f0508a4de18 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  324.882573][ T6942] RAX: ffffffffffffffda RBX: 00000000000050f9 RCX: 00007f050a5d6033
[  324.890523][ T6942] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000
[  324.898493][ T6942] RBP: 000000002000a2c2 R08: 00000000ffffffff R09: 0000000000000000
[  324.906459][ T6942] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000004
[  324.914427][ T6942] R13: 00007f0508a4def0 R14: 00007f0508a4deb0 R15: 0000000020000140
[  324.922401][ T6942]  </TASK>
[  324.940408][ T6433] usbhid 2-1:0.0: can't add hid device: -71
[  324.947058][ T6433] usbhid: probe of 2-1:0.0 failed with error -71
[  324.970313][ T6433] usb 2-1: USB disconnect, device number 5
[  325.048999][ T3779] hfsplus: b-tree write err: -5, ino 8
[  325.214087][ T6950] loop0: detected capacity change from 0 to 512
[  325.314102][ T6950] EXT4-fs (loop0): Mount option "noacl" will be removed by 3.5
[  325.314102][ T6950] Contact linux-ext4@vger.kernel.org if you think we should keep it.
[  325.314102][ T6950] 
[  325.485312][ T6950] EXT4-fs (loop0): 1 orphan inode deleted
[  325.532449][ T6950] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_nolock,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,noacl,usrquota,,errors=continue. Quota mode: writeback.
[  325.690410][ T6950] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038 (0x7fffffff)
[  325.916731][ T6961] loop2: detected capacity change from 0 to 128
[  326.295685][ T6961] FAT-fs (loop2): error, invalid access to FAT (entry 0x000006d4)
[  326.313326][ T6961] FAT-fs (loop2): Filesystem has been set read-only
[  326.432022][ T6947] loop3: detected capacity change from 0 to 32768
[  326.450668][ T5719] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 0, start 0000ac9a)
[  326.475065][ T6947] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.758 (6947)
[  326.490890][ T5719] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 0, start 0000ac9a)
[  326.588890][ T6967] loop1: detected capacity change from 0 to 1024
[  326.618684][ T6947] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  326.644655][ T6947] BTRFS info (device loop3): setting nodatacow, compression disabled
[  326.663220][ T6947] BTRFS info (device loop3): setting datacow
[  326.674198][ T6947] BTRFS info (device loop3): doing ref verification
[  326.684688][ T6947] BTRFS info (device loop3): force clearing of disk cache
[  326.695471][ T6947] BTRFS info (device loop3): turning off barriers
[  326.707843][ T6947] BTRFS info (device loop3): enabling ssd optimizations
[  326.724323][ T6947] BTRFS info (device loop3): using spread ssd allocation scheme
[  326.734601][ T6947] BTRFS info (device loop3): not using ssd optimizations
[  326.757349][ T6967] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  326.788745][ T6947] BTRFS info (device loop3): not using spread ssd allocation scheme
[  326.793788][ T6963] loop4: detected capacity change from 0 to 32768
[  326.808726][ T6947] BTRFS info (device loop3): using free space tree
[  326.815878][ T6947] BTRFS info (device loop3): has skinny extents
[  327.096109][ T6963] JBD2: Ignoring recovery information on journal
[  327.121952][ T6947] BTRFS info (device loop3): clearing free space tree
[  327.151609][ T6947] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  327.204491][ T6947] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  327.279587][ T6963] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  327.327139][ T6947] BTRFS info (device loop3): creating free space tree
[  327.359264][ T6947] BTRFS info (device loop3): setting compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  327.410493][ T6947] BTRFS info (device loop3): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  327.458080][   T26] audit: type=1800 audit(1728150494.232:632): pid=6963 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.762" name="file0" dev="loop4" ino=17058 res=0 errno=0
[  327.577482][   T26] audit: type=1800 audit(1728150494.312:633): pid=6948 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.758" name="bus" dev="loop3" ino=263 res=0 errno=0
[  327.678411][ T4158] ocfs2: Unmounting device (7,4) on (node local)
[  327.975151][ T6994] chnl_net:caif_netlink_parms(): no params data found
[  328.167932][ T6994] bridge0: port 1(bridge_slave_0) entered blocking state
[  328.179588][ T7012] loop4: detected capacity change from 0 to 1024
[  328.207154][ T6994] bridge0: port 1(bridge_slave_0) entered disabled state
[  328.217847][ T6994] device bridge_slave_0 entered promiscuous mode
[  328.273201][ T6994] bridge0: port 2(bridge_slave_1) entered blocking state
[  328.288405][ T6994] bridge0: port 2(bridge_slave_1) entered disabled state
[  328.316323][ T6994] device bridge_slave_1 entered promiscuous mode
[  328.339393][ T7012] hfsplus: catalog searching failed
[  328.384820][ T6994] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  328.414859][ T6994] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  328.661813][ T3779] hfsplus: b-tree write err: -5, ino 4
[  328.914828][ T6994] team0: Port device team_slave_0 added
[  328.945254][ T6994] team0: Port device team_slave_1 added
[  329.021558][ T7031] Cannot find set identified by id 0 to match
[  329.032397][ T6994] batman_adv: batadv0: Adding interface: batadv_slave_0
[  329.039354][ T6994] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  329.077847][ T6994] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  329.110591][ T6994] batman_adv: batadv0: Adding interface: batadv_slave_1
[  329.126421][ T6994] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  329.176417][ T6994] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  329.240233][ T6587] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  329.283098][ T6994] device hsr_slave_0 entered promiscuous mode
[  329.298005][ T6994] device hsr_slave_1 entered promiscuous mode
[  329.321476][ T6994] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  329.336442][ T6994] Cannot create hsr debugfs directory
[  329.430354][ T1077] Bluetooth: hci1: command 0x0409 tx timeout
[  329.459700][ T7022] loop4: detected capacity change from 0 to 32768
[  329.480617][ T6587] usb 2-1: Using ep0 maxpacket: 8
[  329.496628][ T7022] (syz.4.772,7022,1):ocfs2_parse_options:1447 ERROR: Unrecognized mount option "��" or missing value
[  329.530916][ T6587] usb 2-1: too many configurations: 46, using maximum allowed: 8
[  329.539422][ T7022] (syz.4.772,7022,1):ocfs2_fill_super:1177 ERROR: status = -22
[  329.550293][ T6994] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  329.626231][ T6994] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  329.660472][ T6587] usb 2-1: unable to read config index 0 descriptor/start: -61
[  329.668074][ T6587] usb 2-1: can't read configurations, error -61
[  329.840342][ T6587] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  329.868169][ T6994] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  329.972914][ T6994] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  330.056191][ T7033] loop3: detected capacity change from 0 to 65536
[  330.080301][ T6587] usb 2-1: Using ep0 maxpacket: 8
[  330.120527][ T6587] usb 2-1: too many configurations: 46, using maximum allowed: 8
[  330.249375][ T7040] loop0: detected capacity change from 0 to 4096
[  330.289171][ T7033] XFS (loop3): Mounting V5 Filesystem
[  330.295028][ T6587] usb 2-1: unable to read config index 0 descriptor/start: -61
[  330.300221][ T6994] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  330.307083][ T6587] usb 2-1: can't read configurations, error -61
[  330.315944][ T6587] usb usb2-port1: attempt power cycle
[  330.329370][ T6994] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  330.363012][ T7033] XFS (loop3): Ending clean mount
[  330.436388][ T6994] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  330.454466][ T6994] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  330.595562][ T6994] 8021q: adding VLAN 0 to HW filter on device bond0
[  330.644159][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  330.653216][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  330.674269][ T6994] 8021q: adding VLAN 0 to HW filter on device team0
[  330.686004][ T3779] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  330.711491][ T3779] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  330.730548][ T6587] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  330.740705][ T3779] bridge0: port 1(bridge_slave_0) entered blocking state
[  330.747795][ T3779] bridge0: port 1(bridge_slave_0) entered forwarding state
[  330.756791][ T4687] XFS (loop3): Unmounting Filesystem
[  330.776665][ T3779] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  330.801171][ T3779] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  330.821736][ T6587] usb 2-1: Using ep0 maxpacket: 8
[  330.829085][ T3779] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  330.848378][ T3779] bridge0: port 2(bridge_slave_1) entered blocking state
[  330.855529][ T3779] bridge0: port 2(bridge_slave_1) entered forwarding state
[  330.863385][ T6587] usb 2-1: too many configurations: 46, using maximum allowed: 8
[  330.919201][ T3779] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  330.945228][ T3779] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  330.955241][ T3779] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  330.982684][ T3779] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  331.004993][ T6587] usb 2-1: unable to read config index 0 descriptor/start: -61
[  331.013288][ T6587] usb 2-1: can't read configurations, error -61
[  331.020649][ T3779] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  331.032095][ T3779] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  331.041447][ T3779] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  331.049948][ T3779] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  331.092009][ T6994] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  331.122280][ T6994] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  331.150998][ T3779] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  331.161874][ T3779] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  331.167693][ T7056] loop4: detected capacity change from 0 to 32768
[  331.170512][ T6587] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  331.191387][ T3779] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  331.250201][ T7056] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop4 scanned by syz.4.782 (7056)
[  331.290364][ T6587] usb 2-1: Using ep0 maxpacket: 8
[  331.300653][ T7056] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  331.330560][ T6587] usb 2-1: too many configurations: 46, using maximum allowed: 8
[  331.340137][ T7056] BTRFS info (device loop4): using free space tree
[  331.346692][ T7056] BTRFS info (device loop4): has skinny extents
[  331.456536][ T4561] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  331.464376][ T6587] usb 2-1: unable to read config index 0 descriptor/start: -61
[  331.473486][ T4561] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  331.481660][ T6587] usb 2-1: can't read configurations, error -61
[  331.498157][ T6587] usb usb2-port1: unable to enumerate USB device
[  331.535517][ T6994] 8021q: adding VLAN 0 to HW filter on device batadv0
[  331.543901][ T6587] Bluetooth: hci1: command 0x041b tx timeout
[  331.608830][ T3700] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  331.629801][ T3700] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  331.640318][ T7056] BTRFS info (device loop4): enabling ssd optimizations
[  331.669249][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  331.693684][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  331.734869][ T6994] device veth0_vlan entered promiscuous mode
[  331.768321][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  331.787560][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  331.851028][ T6994] device veth1_vlan entered promiscuous mode
[  332.004088][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  332.023794][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  332.101011][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  332.131943][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  332.179768][ T6994] device veth0_macvtap entered promiscuous mode
[  332.219529][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  332.233112][ T6994] device veth1_macvtap entered promiscuous mode
[  332.304891][ T6994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  332.327104][ T6994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  332.351667][ T6994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  332.372822][ T6994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  332.393308][ T6994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  332.424352][ T6994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  332.444958][ T6994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  332.467222][ T6994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  332.490203][ T6994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  332.505576][ T6994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  332.534016][ T6994] batman_adv: batadv0: Interface activated: batadv_slave_0
[  332.564387][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  332.615878][ T4531] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  332.652005][ T7090] netlink: 24 bytes leftover after parsing attributes in process `syz.3.786'.
[  332.692100][ T7094] loop0: detected capacity change from 0 to 1024
[  332.726562][ T6994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  332.746061][ T6994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  332.784338][ T6994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  332.812582][ T6994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  332.822915][ T6994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  332.833943][ T6994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  332.844302][ T6994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  332.857237][ T6994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  332.893384][ T6994] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  332.912225][ T6994] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  332.952947][ T6994] batman_adv: batadv0: Interface activated: batadv_slave_1
[  332.993164][ T7100] loop1: detected capacity change from 0 to 256
[  332.993736][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  333.051624][ T7100] FAT-fs (loop1): Unrecognized mount option "ioCharset=iso8859-3" or missing value
[  333.082730][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  333.121508][ T6994] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  333.133306][ T6994] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  333.142478][ T6994] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  333.164624][ T6994] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  333.238958][ T7100] netlink: 28 bytes leftover after parsing attributes in process `syz.1.788'.
[  333.333190][ T3574] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  333.731070][ T3574] usb 4-1: Using ep0 maxpacket: 32
[  334.035132][ T7110] Bluetooth: hci1: command 0x040f tx timeout
[  334.180261][ T3574] usb 4-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[  334.199668][ T3574] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  334.209826][ T3574] usb 4-1: Product: syz
[  334.214033][ T3574] usb 4-1: Manufacturer: syz
[  334.237870][ T1211] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  334.281096][ T7118] dlm: no locking on control device
[  334.290255][ T7119] netlink: 'syz.1.792': attribute type 15 has an invalid length.
[  334.299046][ T1211] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  334.330855][ T3574] usb 4-1: SerialNumber: syz
[  334.371131][ T3574] usb 4-1: config 0 descriptor??
[  334.417413][ T7118] netlink: 292 bytes leftover after parsing attributes in process `syz.4.787'.
[  334.428838][ T3574] gspca_main: stk1135-2.14.0 probing 174f:6a31
[  334.430779][ T7122] nvme_fabrics: missing parameter 'transport=%s'
[  334.449961][ T7122] nvme_fabrics: missing parameter 'nqn=%s'
[  334.456404][ T3778] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  334.504005][    T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  334.523577][    T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  334.548716][ T3700] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  334.603930][ T7128] loop4: detected capacity change from 0 to 2048
[  334.658644][ T7132] loop1: detected capacity change from 0 to 1024
[  334.726445][ T7128] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  335.230306][ T3574] gspca_stk1135: reg_w 0x3 err -71
[  335.276352][ T3574] gspca_stk1135: serial bus timeout: status=0x00
[  335.306240][ T3574] gspca_stk1135: Sensor write failed
[  335.327752][ T3574] gspca_stk1135: serial bus timeout: status=0x00
[  335.426040][ T3574] gspca_stk1135: Sensor write failed
[  335.442078][ T3574] gspca_stk1135: serial bus timeout: status=0x00
[  335.462110][ T3574] gspca_stk1135: Sensor read failed
[  335.498564][ T3574] gspca_stk1135: serial bus timeout: status=0x00
[  335.519893][ T3574] gspca_stk1135: Sensor read failed
[  335.566840][ T3574] gspca_stk1135: Detected sensor type unknown (0x0)
[  335.615434][ T3574] gspca_stk1135: serial bus timeout: status=0x00
[  335.647811][ T3574] gspca_stk1135: Sensor read failed
[  335.669331][ T3574] gspca_stk1135: serial bus timeout: status=0x00
[  335.699683][ T3574] gspca_stk1135: Sensor read failed
[  335.723597][ T3574] gspca_stk1135: serial bus timeout: status=0x00
[  335.753295][ T3574] gspca_stk1135: Sensor write failed
[  335.770794][ T3574] gspca_stk1135: serial bus timeout: status=0x00
[  335.790062][ T3574] gspca_stk1135: Sensor write failed
[  335.803716][ T3574] stk1135: probe of 4-1:0.0 failed with error -71
[  335.869239][ T3574] usb 4-1: USB disconnect, device number 7
[  335.911144][ T7152] netlink: 8 bytes leftover after parsing attributes in process `syz.3.801'.
[  335.945730][ T3700] hfsplus: b-tree write err: -5, ino 4
[  336.070911][ T7111] Bluetooth: hci1: command 0x0419 tx timeout
[  336.092245][ T7156] hsr0: VLAN not yet supported
[  336.514959][ T7174] dlm: no locking on control device
[  336.560601][ T7174] netlink: 292 bytes leftover after parsing attributes in process `syz.2.804'.
[  336.805474][ T7182] loop3: detected capacity change from 0 to 2048
[  336.933594][ T7182] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  337.427922][ T7173] loop1: detected capacity change from 0 to 32768
[  337.606389][ T7192] netlink: 8 bytes leftover after parsing attributes in process `syz.0.812'.
[  337.632637][ T7173] XFS (loop1): Mounting V5 Filesystem
[  337.661820][ T7192] FAULT_INJECTION: forcing a failure.
[  337.661820][ T7192] name failslab, interval 1, probability 0, space 0, times 0
[  337.802799][ T7173] XFS (loop1): Ending clean mount
[  337.808128][ T7192] CPU: 1 PID: 7192 Comm: syz.0.812 Not tainted 5.15.167-syzkaller #0
[  337.816228][ T7192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  337.826276][ T7192] Call Trace:
[  337.826970][ T7173] XFS (loop1): Quotacheck needed: Please wait.
[  337.829555][ T7192]  <TASK>
[  337.829594][ T7192]  dump_stack_lvl+0x1e3/0x2d0
[  337.843305][ T7192]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[  337.848952][ T7192]  ? panic+0x860/0x860
[  337.853036][ T7192]  ? __might_sleep+0xc0/0xc0
[  337.857642][ T7192]  ? genl_rcv_msg+0x1050/0x14a0
[  337.862514][ T7192]  should_fail+0x38a/0x4c0
[  337.866963][ T7192]  should_failslab+0x5/0x20
[  337.871483][ T7192]  slab_pre_alloc_hook+0x53/0xc0
[  337.876437][ T7192]  kmem_cache_alloc_node+0x49/0x2c0
[  337.879506][ T7173] XFS (loop1): Quotacheck: Done.
[  337.881641][ T7192]  ? __alloc_skb+0xdd/0x590
[  337.881666][ T7192]  ? mark_lock+0x98/0x340
[  337.881685][ T7192]  __alloc_skb+0xdd/0x590
[  337.881700][ T7192]  ? __lock_acquire+0x1295/0x1ff0
[  337.881719][ T7192]  netlink_ack+0x33c/0xb10
[  337.881747][ T7192]  ? netlink_dump+0xca0/0xca0
[  337.914080][ T7192]  netlink_rcv_skb+0x24c/0x410
[  337.918855][ T7192]  ? genl_bind+0x420/0x420
[  337.923260][ T7192]  ? netlink_ack+0xb10/0xb10
[  337.927842][ T7192]  ? down_read+0x1b3/0x2e0
[  337.932240][ T7192]  ? genl_rcv+0x9/0x40
[  337.936290][ T7192]  genl_rcv+0x24/0x40
[  337.940251][ T7192]  netlink_unicast+0x7b6/0x980
[  337.945040][ T7192]  ? netlink_detachskb+0x90/0x90
[  337.949963][ T7192]  ? __virt_addr_valid+0x3bb/0x460
[  337.955063][ T7192]  ? 0xffffffff81000000
[  337.959220][ T7192]  ? __check_object_size+0x300/0x410
[  337.964509][ T7192]  ? bpf_lsm_netlink_send+0x5/0x10
[  337.969604][ T7192]  netlink_sendmsg+0xa30/0xd60
[  337.974362][ T7192]  ? netlink_getsockopt+0x5b0/0x5b0
[  337.979546][ T7192]  ? aa_sock_msg_perm+0x91/0x150
[  337.984465][ T7192]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  337.989837][ T7192]  ? security_socket_sendmsg+0x7d/0xa0
[  337.995301][ T7192]  ? netlink_getsockopt+0x5b0/0x5b0
[  338.000481][ T7192]  ____sys_sendmsg+0x59e/0x8f0
[  338.005226][ T7192]  ? iovec_from_user+0x300/0x390
[  338.010151][ T7192]  ? __sys_sendmsg_sock+0x30/0x30
[  338.015164][ T7192]  ___sys_sendmsg+0x252/0x2e0
[  338.019823][ T7192]  ? __sys_sendmsg+0x260/0x260
[  338.024586][ T7192]  ? __fdget+0x191/0x220
[  338.028812][ T7192]  __se_sys_sendmsg+0x19a/0x260
[  338.033647][ T7192]  ? __x64_sys_sendmsg+0x80/0x80
[  338.038573][ T7192]  ? syscall_enter_from_user_mode+0x2e/0x240
[  338.044531][ T7192]  ? lockdep_hardirqs_on+0x94/0x130
[  338.049710][ T7192]  ? syscall_enter_from_user_mode+0x2e/0x240
[  338.055673][ T7192]  do_syscall_64+0x3b/0xb0
[  338.060076][ T7192]  ? clear_bhb_loop+0x15/0x70
[  338.064743][ T7192]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  338.070617][ T7192] RIP: 0033:0x7f45c2f0fff9
[  338.075018][ T7192] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  338.094650][ T7192] RSP: 002b:00007f45c1388038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  338.103050][ T7192] RAX: ffffffffffffffda RBX: 00007f45c30c7f80 RCX: 00007f45c2f0fff9
[  338.111010][ T7192] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000005
[  338.118964][ T7192] RBP: 00007f45c1388090 R08: 0000000000000000 R09: 0000000000000000
[  338.126914][ T7192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  338.134864][ T7192] R13: 0000000000000000 R14: 00007f45c30c7f80 R15: 00007fff179dfc18
[  338.142857][ T7192]  </TASK>
[  338.242131][ T6585] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  338.499158][ T7207] loop4: detected capacity change from 0 to 512
[  338.729069][ T7207] EXT4-fs warning (device loop4): ext4_fill_super:3981: metadata_csum and uninit_bg are redundant flags; please run fsck.
[  338.760395][ T7207] EXT4-fs (loop4): VFS: Found ext4 filesystem with unknown checksum algorithm.
[  338.770152][ T6585] usb 2-1: Using ep0 maxpacket: 32
[  339.150322][ T6585] usb 2-1: config 2 contains an unexpected descriptor of type 0x1, skipping
[  339.162562][ T6585] usb 2-1: config 2 has an invalid interface number: 73 but max is 2
[  339.170969][ T6585] usb 2-1: config 2 has an invalid interface number: 127 but max is 2
[  339.179682][ T6585] usb 2-1: config 2 has no interface number 0
[  339.185922][ T6585] usb 2-1: config 2 has no interface number 2
[  339.193992][ T6585] usb 2-1: config 2 interface 1 altsetting 3 endpoint 0x3 has invalid maxpacket 1024, setting to 64
[  339.206265][ T6585] usb 2-1: config 2 interface 1 altsetting 3 bulk endpoint 0x4 has invalid maxpacket 1024
[  339.216640][ T6585] usb 2-1: config 2 interface 1 altsetting 3 endpoint 0x8F has invalid maxpacket 512, setting to 64
[  339.248104][ T6585] usb 2-1: config 2 interface 1 altsetting 3 has an invalid endpoint with address 0x0, skipping
[  339.266430][ T6585] usb 2-1: config 2 interface 1 altsetting 3 has a duplicate endpoint with address 0x4, skipping
[  339.277978][ T6585] usb 2-1: config 2 interface 1 has no altsetting 0
[  339.284994][ T6585] usb 2-1: config 2 interface 73 has no altsetting 0
[  339.293031][ T6585] usb 2-1: config 2 interface 127 has no altsetting 0
[  339.476200][ T4287] XFS (loop1): Unmounting Filesystem
[  339.481792][ T6585] usb 2-1: New USB device found, idVendor=15ba, idProduct=0004, bcdDevice=10.f3
[  339.497679][ T6585] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  339.531034][ T6585] usb 2-1: Product: 꼩罅ꟹ⦗恱镗趆͏첋⟻肢烛꩏縋媞陼賮㣎ް儋넠듳瞪澰ᵺ蔙৩ꜽ䒢䫾콍થ图汪柧꠷옓᪆攵驶둫鱧⺄౰鯄ꎩ뀢荊
[  339.560153][ T3574] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  339.604474][ T6585] usb 2-1: Manufacturer: 㠁
[  339.672149][ T6585] usb 2-1: can't set config #2, error -71
[  339.684301][ T6585] usb 2-1: USB disconnect, device number 10
[  339.871487][ T7215] loop0: detected capacity change from 0 to 40427
[  339.937839][ T7215] F2FS-fs (loop0): Invalid Fs Meta Ino: node(0) meta(0) root(83886083)
[  339.949710][ T7215] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock
[  339.960601][ T3574] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  339.980701][ T7215] F2FS-fs (loop0): invalid crc value
[  339.980735][ T3574] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  340.005258][ T3574] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00
[  340.017037][ T3574] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  340.114909][ T3574] usb 4-1: config 0 descriptor??
[  340.138397][ T7215] F2FS-fs (loop0): Found nat_bits in checkpoint
[  340.255910][ T7237] loop1: detected capacity change from 0 to 512
[  340.362116][ T7215] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0
[  340.369181][ T7215] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  340.414114][ T7215] attempt to access beyond end of device
[  340.414114][ T7215] loop0: rw=524288, want=45072, limit=40427
[  340.452666][ T7237] EXT4-fs (loop1): 1 orphan inode deleted
[  340.458453][ T7237] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback.
[  340.460789][ T7215] attempt to access beyond end of device
[  340.460789][ T7215] loop0: rw=0, want=45072, limit=40427
[  340.521304][ T7237] ext4 filesystem being mounted at /145/file1 supports timestamps until 2038 (0x7fffffff)
[  340.567622][ T7248] loop3: detected capacity change from 0 to 256
[  340.577620][ T7246] loop4: detected capacity change from 0 to 2048
[  340.680734][ T3574] usbhid 4-1:0.0: can't add hid device: -71
[  340.687257][ T3574] usbhid: probe of 4-1:0.0 failed with error -71
[  340.697296][ T3574] usb 4-1: USB disconnect, device number 8
[  340.708036][ T7215] F2FS-fs (loop0) : inject slab alloc in f2fs_kmem_cache_alloc of new_inode_pseudo+0x60/0x210
[  340.743739][ T6236] attempt to access beyond end of device
[  340.743739][ T6236] loop0: rw=2049, want=45112, limit=40427
[  341.128053][ T7246] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  341.737068][ T7258] loop3: detected capacity change from 0 to 24
[  341.830378][ T7260] device syzkaller0 entered promiscuous mode
[  341.922138][ T6585] syzkaller0: tun_net_xmit 48
[  342.172943][ T6585] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  342.201339][ T7270] loop4: detected capacity change from 0 to 8
[  342.216630][ T7272] loop0: detected capacity change from 0 to 256
[  342.224291][ T6585] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  342.301545][ T6585] hid-generic 0000:0000:0000.0004: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz0
[  342.366349][ T7277] loop3: detected capacity change from 0 to 2048
[  342.429240][ T7277] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  342.965016][ T7279] loop2: detected capacity change from 0 to 32768
[  343.311551][ T7279] XFS (loop2): Mounting V5 Filesystem
[  343.421475][ T7279] XFS (loop2): Ending clean mount
[  343.503268][ T7279] XFS (loop2): Quotacheck needed: Please wait.
[  343.658201][ T7279] XFS (loop2): Quotacheck: Done.
[  343.663900][ T7311] loop1: detected capacity change from 0 to 32768
[  343.692216][ T7314] loop4: detected capacity change from 0 to 2048
[  343.997338][ T6994] XFS (loop2): Unmounting Filesystem
[  344.065010][ T7314] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  344.086641][ T7311] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  344.107311][   T26] audit: type=1800 audit(1728150510.882:634): pid=7311 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.840" name="bus" dev="loop1" ino=17058 res=0 errno=0
[  344.312114][ T7311] (syz.1.840,7311,0):ocfs2_parse_options:1447 ERROR: Unrecognized mount option "�����������	Z*��� m�.Dc�8�'�@��C9G�9���?�9�S�{�1��J���լ��5æ�Ԍ�����qq���Y�糔����" or missing value
[  344.348302][ T7311] FAULT_INJECTION: forcing a failure.
[  344.348302][ T7311] name failslab, interval 1, probability 0, space 0, times 0
[  344.362463][ T7311] CPU: 0 PID: 7311 Comm: syz.1.840 Not tainted 5.15.167-syzkaller #0
[  344.370554][ T7311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  344.380613][ T7311] Call Trace:
[  344.383893][ T7311]  <TASK>
[  344.386817][ T7311]  dump_stack_lvl+0x1e3/0x2d0
[  344.391494][ T7311]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[  344.397125][ T7311]  ? panic+0x860/0x860
[  344.401195][ T7311]  ? read_lock_is_recursive+0x10/0x10
[  344.406577][ T7311]  should_fail+0x38a/0x4c0
[  344.410998][ T7311]  should_failslab+0x5/0x20
[  344.415504][ T7311]  slab_pre_alloc_hook+0x53/0xc0
[  344.420443][ T7311]  kmem_cache_alloc_trace+0x49/0x290
[  344.425725][ T7311]  ? bdi_split_work_to_wbs+0x4d9/0x8c0
[  344.431186][ T7311]  bdi_split_work_to_wbs+0x4d9/0x8c0
[  344.436480][ T7311]  ? sync_inodes_sb+0xab0/0xab0
[  344.441324][ T7311]  ? rwsem_write_trylock+0x166/0x210
[  344.446606][ T7311]  ? read_lock_is_recursive+0x10/0x10
[  344.451977][ T7311]  ? do_raw_write_lock+0x143/0x4e0
[  344.457092][ T7311]  sync_inodes_sb+0x286/0xab0
[  344.461763][ T7311]  ? I_BDEV+0x9/0x20
[  344.465657][ T7311]  ? filemap_fdatawrite_wbc+0x15f/0x230
[  344.471206][ T7311]  ? try_to_writeback_inodes_sb+0xb0/0xb0
[  344.476924][ T7311]  ? filemap_fdatawrite_range+0x1b0/0x1b0
[  344.482638][ T7311]  ? ocfs2_sync_fs+0x239/0x380
[  344.487410][ T7311]  ? cpumask_next+0xc3/0xf0
[  344.491912][ T7311]  ? get_nr_dirty_inodes+0x25f/0x2e0
[  344.497198][ T7311]  sync_filesystem+0x16b/0x220
[  344.501964][ T7311]  ocfs2_remount+0xff/0xc30
[  344.506460][ T7311]  ? __list_lru_walk_one+0x4e7/0x580
[  344.511749][ T7311]  ? ocfs2_statfs+0xa40/0xa40
[  344.516431][ T7311]  ? list_lru_count_node+0x18/0x60
[  344.521540][ T7311]  ? shrink_dcache_sb+0x3be/0x410
[  344.526573][ T7311]  ? dentry_lru_isolate+0x2f0/0x2f0
[  344.531765][ T7311]  ? kmem_cache_alloc_trace+0x143/0x290
[  344.537318][ T7311]  reconfigure_super+0x43a/0x870
[  344.542260][ T7311]  path_mount+0xceb/0x10a0
[  344.546690][ T7311]  ? user_path_at_empty+0x12b/0x180
[  344.551891][ T7311]  __se_sys_mount+0x2d5/0x3c0
[  344.556570][ T7311]  ? __x64_sys_mount+0xc0/0xc0
[  344.561335][ T7311]  ? syscall_enter_from_user_mode+0x2e/0x240
[  344.567319][ T7311]  ? lockdep_hardirqs_on+0x94/0x130
[  344.572513][ T7311]  ? __x64_sys_mount+0x1c/0xc0
[  344.577275][ T7311]  do_syscall_64+0x3b/0xb0
[  344.581684][ T7311]  ? clear_bhb_loop+0x15/0x70
[  344.586352][ T7311]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  344.592247][ T7311] RIP: 0033:0x7f6634aee79a
[  344.596659][ T7311] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  344.616257][ T7311] RSP: 002b:00007f6632f43e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  344.624670][ T7311] RAX: ffffffffffffffda RBX: 00007f6632f43ef0 RCX: 00007f6634aee79a
[  344.632639][ T7311] RDX: 0000000020000180 RSI: 0000000020000100 RDI: 0000000000000000
[  344.640604][ T7311] RBP: 0000000020000180 R08: 00007f6632f43ef0 R09: 0000000001a4243c
[  344.648570][ T7311] R10: 0000000001a4243c R11: 0000000000000246 R12: 0000000020000100
[  344.656533][ T7311] R13: 00007f6632f43eb0 R14: 0000000000000000 R15: 0000000020000a00
[  344.664519][ T7311]  </TASK>
[  344.696515][ T7311] (syz.1.840,7311,0):ocfs2_parse_options:1447 ERROR: Unrecognized mount option "��0177777777777777777777701777777777777777777777�00000000000000000000000����L�����*	15�.��&s���+y�2�9$�" or missing value
[  345.056855][ T4287] ocfs2: Unmounting device (7,1) on (node local)
[  345.312630][ T7334] loop4: detected capacity change from 0 to 256
[  345.349292][ T7335] netlink: 8 bytes leftover after parsing attributes in process `syz.2.843'.
[  345.509025][ T7335] overlayfs: overlapping lowerdir path
[  345.645456][ T7335] overlayfs: unrecognized mount option "verity=off" or missing value
[  345.937546][ T7344] FAULT_INJECTION: forcing a failure.
[  345.937546][ T7344] name failslab, interval 1, probability 0, space 0, times 0
[  345.959769][ T7344] CPU: 0 PID: 7344 Comm: syz.4.850 Not tainted 5.15.167-syzkaller #0
[  345.967964][ T7344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  345.978027][ T7344] Call Trace:
[  345.981316][ T7344]  <TASK>
[  345.984253][ T7344]  dump_stack_lvl+0x1e3/0x2d0
[  345.988947][ T7344]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[  345.994588][ T7344]  ? panic+0x860/0x860
[  345.998678][ T7344]  should_fail+0x38a/0x4c0
[  346.003108][ T7344]  should_failslab+0x5/0x20
[  346.007620][ T7344]  slab_pre_alloc_hook+0x53/0xc0
[  346.012567][ T7344]  ? __alloc_file+0x26/0x240
[  346.017165][ T7344]  kmem_cache_alloc+0x3f/0x280
[  346.021934][ T7344]  ? alloc_file_pseudo+0x248/0x2f0
[  346.027051][ T7344]  __alloc_file+0x26/0x240
[  346.031471][ T7344]  alloc_empty_file+0x92/0x180
[  346.036251][ T7344]  alloc_file+0x5b/0x4f0
[  346.040511][ T7344]  alloc_file_pseudo+0x259/0x2f0
[  346.045454][ T7344]  ? do_raw_spin_unlock+0x137/0x8b0
[  346.050669][ T7344]  ? alloc_empty_file_noaccount+0x80/0x80
[  346.056396][ T7344]  ? alloc_fd+0x598/0x630
[  346.060741][ T7344]  __anon_inode_getfd+0x2aa/0x430
[  346.065773][ T7344]  ? anon_inode_getfd+0x40/0x40
[  346.070626][ T7344]  ? security_bpf_map+0x75/0x90
[  346.075494][ T7344]  map_create+0x18bb/0x2070
[  346.080012][ T7344]  __sys_bpf+0x276/0x670
[  346.084264][ T7344]  ? bpf_link_show_fdinfo+0x2d0/0x2d0
[  346.089746][ T7344]  ? syscall_enter_from_user_mode+0x2e/0x240
[  346.095744][ T7344]  ? lockdep_hardirqs_on+0x94/0x130
[  346.100932][ T7344]  __x64_sys_bpf+0x78/0x90
[  346.105331][ T7344]  do_syscall_64+0x3b/0xb0
[  346.109724][ T7344]  ? clear_bhb_loop+0x15/0x70
[  346.114384][ T7344]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  346.120260][ T7344] RIP: 0033:0x7f5609c24ff9
[  346.124676][ T7344] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  346.144260][ T7344] RSP: 002b:00007f560809d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  346.152656][ T7344] RAX: ffffffffffffffda RBX: 00007f5609ddcf80 RCX: 00007f5609c24ff9
[  346.160612][ T7344] RDX: 0000000000000048 RSI: 0000000020000440 RDI: 0100000000000000
[  346.168598][ T7344] RBP: 00007f560809d090 R08: 0000000000000000 R09: 0000000000000000
[  346.176558][ T7344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  346.184516][ T7344] R13: 0000000000000001 R14: 00007f5609ddcf80 R15: 00007ffd474e9b48
[  346.192477][ T7344]  </TASK>
[  346.211966][ T7325] loop3: detected capacity change from 0 to 65536
[  346.438231][ T7325] XFS (loop3): Mounting V5 Filesystem
[  346.492753][ T7338] loop1: detected capacity change from 0 to 32768
[  346.617970][ T7325] XFS (loop3): Ending clean mount
[  346.696499][ T7338] XFS (loop1): Mounting V5 Filesystem
[  346.781746][ T7351] loop2: detected capacity change from 0 to 32768
[  346.787542][ T7338] XFS (loop1): Ending clean mount
[  346.796884][ T7338] XFS (loop1): Quotacheck needed: Please wait.
[  346.844147][ T7351]  loop2: p1 p3 < p5 p6 >
[  346.847079][ T7338] XFS (loop1): Quotacheck: Done.
[  346.860237][ T6433] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  346.892933][ T7338] XFS (loop1): User initiated shutdown received.
[  346.899895][ T4687] XFS (loop3): Unmounting Filesystem
[  346.904448][ T7338] XFS (loop1): Log I/O Error (0x6) detected at xfs_fs_goingdown+0xde/0x150 (fs/xfs/xfs_fsops.c:491).  Shutting down filesystem.
[  346.971015][ T7338] XFS (loop1): Please unmount the filesystem and rectify the problem(s)
[  347.003345][ T4388] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  347.062922][ T4287] XFS (loop1): Unmounting Filesystem
[  347.154519][ T6433] usb 1-1: Using ep0 maxpacket: 32
[  347.227886][ T3650] udevd[3650]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory
[  347.251939][ T3837] udevd[3837]: inotify_add_watch(7, /dev/loop2p5, 10) failed: No such file or directory
[  347.263887][ T3976] udevd[3976]: inotify_add_watch(7, /dev/loop2p6, 10) failed: No such file or directory
[  347.277031][ T3681] udevd[3681]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[  347.287525][ T4388] usb 5-1: Using ep0 maxpacket: 16
[  347.293496][ T6433] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  347.315811][ T6433] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  347.355428][ T6433] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00
[  347.371622][ T6433] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  347.395820][ T6433] usb 1-1: config 0 descriptor??
[  347.420856][ T4388] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 128, changing to 11
[  347.440147][ T4388] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  347.479481][ T4388] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  347.505878][ T7378] loop3: detected capacity change from 0 to 512
[  347.512814][ T4388] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  347.530486][ T4388] usb 5-1: config 0 descriptor??
[  347.552267][ T7380] loop2: detected capacity change from 0 to 2048
[  347.565128][ T7378] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  347.621687][ T7378] EXT4-fs (loop3): 1 truncate cleaned up
[  347.649415][ T7378] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  347.705891][ T7380] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  347.762139][ T7389] loop1: detected capacity change from 0 to 512
[  347.962672][ T7393] binder: Unknown parameter 'fsmagic'
[  348.896846][ T7370] udc-core: couldn't find an available UDC or it's busy
[  348.940821][ T7370] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  348.960738][ T7370] udc-core: couldn't find an available UDC or it's busy
[  348.974728][ T7370] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  349.171682][ T7389] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpjquota=,errors=continue,abort,bsdgroups,,errors=continue. Quota mode: writeback.
[  349.187873][ T6433] lua 0003:1E7D:2C2E.0005: item fetching failed at offset 5/7
[  349.199569][ T6433] lua 0003:1E7D:2C2E.0005: parse failed
[  349.205256][ T6433] lua: probe of 0003:1E7D:2C2E.0005 failed with error -22
[  349.224063][ T7389] ext4 filesystem being mounted at /151/file0 supports timestamps until 2038 (0x7fffffff)
[  349.432044][ T7409] usb usb8: usbfs: process 7409 (syz.3.859) did not claim interface 0 before use
[  349.462251][ T7408] loop2: detected capacity change from 0 to 1024
[  349.469718][ T6585] usb 1-1: USB disconnect, device number 6
[  349.519003][ T7412] loop3: detected capacity change from 0 to 128
[  349.696423][ T7412] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  349.732767][ T7412] ext4 filesystem being mounted at /127/mnt supports timestamps until 2038 (0x7fffffff)
[  350.836646][ T3698] hfsplus: b-tree write err: -5, ino 4
[  350.837213][ T7421] loop1: detected capacity change from 0 to 32768
[  350.899681][ T7426] loop4: detected capacity change from 0 to 1024
[  350.929656][ T4388] usbhid 5-1:0.0: can't add hid device: -71
[  350.939803][ T4388] usbhid: probe of 5-1:0.0 failed with error -71
[  350.963230][ T4388] usb 5-1: USB disconnect, device number 8
[  350.976343][ T7433] loop2: detected capacity change from 0 to 512
[  350.981269][ T7421] XFS (loop1): Mounting V5 Filesystem
[  350.998030][ T7436] loop0: detected capacity change from 0 to 8
[  351.024838][ T7433] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[  351.038993][ T7426] EXT4-fs (loop4): Ignoring removed bh option
[  351.265008][ T7426] EXT4-fs (loop4): can't mount with data=, fs mounted w/o journal
[  351.330138][ T7421] XFS (loop1): Ending clean mount
[  351.344275][ T7433] EXT4-fs (loop2): orphan cleanup on readonly fs
[  351.355534][ T7433] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.864: bad orphan inode 15
[  351.385376][ T7433] ext4_test_bit(bit=14, block=18) = 1
[  351.395783][ T7433] is_bad_inode(inode)=0
[  351.400008][ T7433] NEXT_ORPHAN(inode)=1023
[  351.405063][ T7433] max_ino=32
[  351.408385][ T7433] i_nlink=0
[  351.427097][ T7433] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2931: inode #15: comm syz.2.864: corrupted xattr block 19
[  351.453857][ T7433] EXT4-fs warning (device loop2): ext4_evict_inode:302: xattr delete (err -117)
[  351.470242][ T7433] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  351.566081][ T7421] XFS (loop1): Quotacheck needed: Please wait.
[  351.683899][   T26] audit: type=1326 audit(1728150518.462:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7451 comm="syz.4.870" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5609c24ff9 code=0x0
[  351.689380][ T7421] XFS (loop1): Quotacheck: Done.
[  351.734870][ T7454] syz.4.870 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  351.901359][ T7457] sock: sock_timestamping_bind_phc: sock not bind to device
[  351.963685][ T4287] XFS (loop1): Unmounting Filesystem
[  352.000730][ T7460] loop2: detected capacity change from 0 to 256
[  352.230339][ T6585] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  352.238062][ T7111] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  352.388925][ T7463] loop2: detected capacity change from 0 to 1024
[  352.490235][ T6585] usb 1-1: Using ep0 maxpacket: 16
[  352.611404][ T7111] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  352.622782][ T6585] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  352.655312][ T6585] usb 1-1: config 0 interface 0 has no altsetting 0
[  352.662417][ T7111] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  352.682067][ T6585] usb 1-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00
[  352.697476][ T7111] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  352.709403][ T6585] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  352.718803][ T7111] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  352.736216][ T6585] usb 1-1: config 0 descriptor??
[  352.746598][ T7111] usb 4-1: config 0 descriptor??
[  352.900217][ T7110] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  353.080561][ T6585] usbhid 1-1:0.0: can't add hid device: -71
[  353.087740][ T6585] usbhid: probe of 1-1:0.0 failed with error -71
[  353.108288][ T6585] usb 1-1: USB disconnect, device number 7
[  353.327368][    T9] hfsplus: b-tree write err: -5, ino 4
[  353.450825][ T7110] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  353.499212][ T7110] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  353.557702][ T7110] usb 2-1: Product: syz
[  353.568386][ T7110] usb 2-1: Manufacturer: syz
[  353.570325][ T7485] loop2: detected capacity change from 0 to 1024
[  353.576415][ T7110] usb 2-1: SerialNumber: syz
[  353.587545][ T7110] usb 2-1: config 0 descriptor??
[  353.896674][ T7110] usb 2-1: USB disconnect, device number 11
[  353.919530][ T7488] tmpfs: Unknown parameter 'nr_blkcks'
[  354.850374][ T7111] usbhid 4-1:0.0: can't add hid device: -71
[  354.856663][ T7111] usbhid: probe of 4-1:0.0 failed with error -71
[  354.865438][ T7496] FAULT_INJECTION: forcing a failure.
[  354.865438][ T7496] name failslab, interval 1, probability 0, space 0, times 0
[  354.904817][ T7496] CPU: 1 PID: 7496 Comm: syz.1.884 Not tainted 5.15.167-syzkaller #0
[  354.909255][ T7111] usb 4-1: USB disconnect, device number 9
[  354.912912][ T7496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  354.912941][ T7496] Call Trace:
[  354.912948][ T7496]  <TASK>
[  354.912955][ T7496]  dump_stack_lvl+0x1e3/0x2d0
[  354.912980][ T7496]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[  354.912997][ T7496]  ? panic+0x860/0x860
[  354.913013][ T7496]  ? __lock_acquire+0x1295/0x1ff0
[  354.913040][ T7496]  should_fail+0x38a/0x4c0
[  354.913065][ T7496]  should_failslab+0x5/0x20
[  354.949398][ T7500] loop3: detected capacity change from 0 to 1024
[  354.954396][ T7496]  slab_pre_alloc_hook+0x53/0xc0
[  354.954426][ T7496]  ? skb_clone+0x1bb/0x350
[  354.954444][ T7496]  kmem_cache_alloc+0x3f/0x280
[  354.954460][ T7496]  ? read_lock_is_recursive+0x10/0x10
[  354.954479][ T7496]  skb_clone+0x1bb/0x350
[  354.954498][ T7496]  __netlink_deliver_tap+0x375/0x760
[  354.954527][ T7496]  netlink_deliver_tap+0x16c/0x180
[  354.954545][ T7496]  netlink_sendskb+0x5c/0x120
[  354.954571][ T7496]  netlink_unicast+0x3a1/0x980
[  355.013140][ T7496]  ? netlink_detachskb+0x90/0x90
[  355.018090][ T7496]  ? skb_put+0x110/0x1f0
[  355.022342][ T7496]  ? netlink_ack+0x56b/0xb10
[  355.026947][ T7496]  netlink_ack+0x834/0xb10
[  355.031389][ T7496]  ? netlink_dump+0xca0/0xca0
[  355.036181][ T7496]  ? nfnetlink_rcv+0xf2f/0x25f0
[  355.041045][ T7496]  ? nfnetlink_rcv+0xf90/0x25f0
[  355.045912][ T7496]  nfnetlink_rcv+0x2228/0x25f0
[  355.050859][ T7496]  ? lockdep_hardirqs_on_prepare+0x7a0/0x7a0
[  355.056883][ T7496]  ? nfnetlink_net_exit_batch+0xa0/0xa0
[  355.062479][ T7496]  ? rcu_lock_release+0x5/0x20
[  355.067350][ T7496]  netlink_unicast+0x7b6/0x980
[  355.072126][ T7496]  ? netlink_detachskb+0x90/0x90
[  355.077071][ T7496]  ? __virt_addr_valid+0x3bb/0x460
[  355.082182][ T7496]  ? 0xffffffff81000000
[  355.086333][ T7496]  ? __check_object_size+0x300/0x410
[  355.091619][ T7496]  ? bpf_lsm_netlink_send+0x5/0x10
[  355.097002][ T7496]  netlink_sendmsg+0xa30/0xd60
[  355.101759][ T7496]  ? netlink_getsockopt+0x5b0/0x5b0
[  355.106940][ T7496]  ? aa_sock_msg_perm+0x91/0x150
[  355.111865][ T7496]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  355.117155][ T7496]  ? security_socket_sendmsg+0x7d/0xa0
[  355.122611][ T7496]  ? netlink_getsockopt+0x5b0/0x5b0
[  355.127791][ T7496]  ____sys_sendmsg+0x59e/0x8f0
[  355.132544][ T7496]  ? iovec_from_user+0x300/0x390
[  355.137491][ T7496]  ? __sys_sendmsg_sock+0x30/0x30
[  355.142517][ T7496]  ___sys_sendmsg+0x252/0x2e0
[  355.147245][ T7496]  ? __sys_sendmsg+0x260/0x260
[  355.152060][ T7496]  ? __fdget+0x191/0x220
[  355.156303][ T7496]  __se_sys_sendmsg+0x19a/0x260
[  355.161145][ T7496]  ? __x64_sys_sendmsg+0x80/0x80
[  355.166094][ T7496]  ? syscall_enter_from_user_mode+0x2e/0x240
[  355.172084][ T7496]  ? lockdep_hardirqs_on+0x94/0x130
[  355.177293][ T7496]  ? syscall_enter_from_user_mode+0x2e/0x240
[  355.183279][ T7496]  do_syscall_64+0x3b/0xb0
[  355.187700][ T7496]  ? clear_bhb_loop+0x15/0x70
[  355.192374][ T7496]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  355.198271][ T7496] RIP: 0033:0x7f6634aecff9
[  355.202692][ T7496] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  355.222303][ T7496] RSP: 002b:00007f6632f65038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  355.230735][ T7496] RAX: ffffffffffffffda RBX: 00007f6634ca4f80 RCX: 00007f6634aecff9
[  355.238718][ T7496] RDX: 0000000000000040 RSI: 00000000200000c0 RDI: 0000000000000003
[  355.246698][ T7496] RBP: 00007f6632f65090 R08: 0000000000000000 R09: 0000000000000000
[  355.254682][ T7496] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  355.262672][ T7496] R13: 0000000000000000 R14: 00007f6634ca4f80 R15: 00007ffc77d669b8
[  355.270865][ T7496]  </TASK>
[  355.353735][ T7506] loop1: detected capacity change from 0 to 1024
[  355.394397][ T4561] hfsplus: b-tree write err: -5, ino 4
[  355.721811][ T7515] dlm: no locking on control device
[  355.795552][ T7520] loop3: detected capacity change from 0 to 1024
[  355.833391][ T7515] netlink: 292 bytes leftover after parsing attributes in process `syz.2.890'.
[  356.138972][ T7502] loop0: detected capacity change from 0 to 32768
[  356.420787][ T3779] hfsplus: b-tree write err: -5, ino 4
[  356.789277][ T7529] loop3: detected capacity change from 0 to 512
[  356.809983][   T26] audit: type=1326 audit(1728150523.582:636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7524 comm="syz.1.894" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6634aecff9 code=0x0
[  356.896122][ T7529] EXT4-fs (loop3): Test dummy encryption mode enabled
[  356.916790][ T7529] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option
[  357.007872][ T7529] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #17: comm syz.3.896: iget: bogus i_mode (0)
[  357.062965][ T7534] loop4: detected capacity change from 0 to 4096
[  357.066504][ T7529] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.896: couldn't read orphan inode 17 (err -117)
[  357.152870][ T7535] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  357.168484][ T7529] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsv0,abort,max_dir_size_kb=0x0000000001000005,grpjquota=,test_dummy_encryption,nomblk_io_submit,,errors=continue. Quota mode: none.
[  357.568504][ T7540] overlayfs: conflicting options: userxattr,redirect_dir=off
[  357.760928][ T7545] loop3: detected capacity change from 0 to 512
[  357.945758][ T7550] loop4: detected capacity change from 0 to 32768
[  357.961326][ T7552] netlink: 176 bytes leftover after parsing attributes in process `syz.1.902'.
[  358.023480][ T7550] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  358.042353][   T26] audit: type=1800 audit(1728150524.822:637): pid=7550 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.901" name="bus" dev="loop4" ino=17058 res=0 errno=0
[  358.102740][ T7550] (syz.4.901,7550,0):ocfs2_parse_options:1447 ERROR: Unrecognized mount option "�����������	Z*��� m�.Dc�8�'�@��C9G�9���?�9�S�{�1��J���լ��5æ�Ԍ�����qq���Y�糔����" or missing value
[  358.156998][ T7528] loop0: detected capacity change from 0 to 32768
[  358.258190][ T7550] (syz.4.901,7550,0):ocfs2_parse_options:1447 ERROR: Unrecognized mount option "��0177777777777777777777701777777777777777777777�00000000000000000000000����L�����*	15�.��&s���+y�2�9$�" or missing value
[  358.541106][ T7528] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present!
[  358.660340][ T7110] usb 5-1: new full-speed USB device number 9 using dummy_hcd
[  358.701410][ T7563] loop2: detected capacity change from 0 to 2048
[  358.725395][ T7563] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  358.739767][ T7528] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  358.846669][ T7570] loop2: detected capacity change from 0 to 1024
[  359.081089][ T7110] usb 5-1: config 0 has an invalid interface number: 29 but max is 0
[  359.085488][ T7571] overlayfs: upper fs does not support tmpfile.
[  359.091165][ T7110] usb 5-1: config 0 has no interface number 0
[  359.113750][ T7110] usb 5-1: config 0 interface 29 has no altsetting 0
[  359.115255][ T7571] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  359.135237][ T7571] 
[  359.137583][ T7571] ======================================================
[  359.144599][ T7571] WARNING: possible circular locking dependency detected
[  359.151621][ T7571] 5.15.167-syzkaller #0 Not tainted
[  359.156817][ T7571] ------------------------------------------------------
[  359.163841][ T7571] syz.0.895/7571 is trying to acquire lock:
[  359.169729][ T7571] ffff888061e1a648 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{3:3}, at: ocfs2_xattr_set+0xe96/0x1930
[  359.181930][ T7571] 
[  359.181930][ T7571] but task is already holding lock:
[  359.189296][ T7571] ffff888061e1bff8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x62f/0x1930
[  359.198799][ T7571] 
[  359.198799][ T7571] which lock already depends on the new lock.
[  359.198799][ T7571] 
[  359.209206][ T7571] 
[  359.209206][ T7571] the existing dependency chain (in reverse order) is:
[  359.218219][ T7571] 
[  359.218219][ T7571] -> #2 (&oi->ip_xattr_sem){++++}-{3:3}:
[  359.226138][ T7571]        lock_acquire+0x1db/0x4f0
[  359.231174][ T7571]        down_read+0x45/0x2e0
[  359.235863][ T7571]        ocfs2_init_acl+0x398/0x930
[  359.241084][ T7571]        ocfs2_mknod+0x1e8f/0x2cd0
[  359.246202][ T7571]        ocfs2_create+0x194/0x430
[  359.251228][ T7571]        path_openat+0x130a/0x2f20
[  359.256334][ T7571]        do_filp_open+0x21c/0x460
[  359.261360][ T7571]        do_sys_openat2+0x13b/0x4f0
[  359.266561][ T7571]        __x64_sys_openat+0x243/0x290
[  359.271938][ T7571]        do_syscall_64+0x3b/0xb0
[  359.276879][ T7571]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  359.283296][ T7571] 
[  359.283296][ T7571] -> #1 (jbd2_handle){++++}-{0:0}:
[  359.290642][ T7571]        lock_acquire+0x1db/0x4f0
[  359.295671][ T7571]        jbd2_journal_lock_updates+0xa1/0x370
[  359.301738][ T7571]        __ocfs2_flush_truncate_log+0x2e7/0x11c0
[  359.308070][ T7571]        ocfs2_flush_truncate_log+0x4b/0x60
[  359.313971][ T7571]        ocfs2_sync_fs+0x121/0x380
[  359.319089][ T7571]        sync_filesystem+0x1bc/0x220
[  359.324378][ T7571]        ocfs2_remount+0xff/0xc30
[  359.329397][ T7571]        reconfigure_super+0x43a/0x870
[  359.334842][ T7571]        path_mount+0xceb/0x10a0
[  359.339770][ T7571]        __se_sys_mount+0x2d5/0x3c0
[  359.344950][ T7571]        do_syscall_64+0x3b/0xb0
[  359.349876][ T7571]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  359.356283][ T7571] 
[  359.356283][ T7571] -> #0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{3:3}:
[  359.366896][ T7571]        validate_chain+0x1649/0x5930
[  359.372282][ T7571]        __lock_acquire+0x1295/0x1ff0
[  359.377662][ T7571]        lock_acquire+0x1db/0x4f0
[  359.382691][ T7571]        down_write+0x38/0x60
[  359.387365][ T7571]        ocfs2_xattr_set+0xe96/0x1930
[  359.392737][ T7571]        __vfs_setxattr+0x3e7/0x420
[  359.397931][ T7571]        __vfs_setxattr_noperm+0x12a/0x5e0
[  359.403737][ T7571]        vfs_setxattr+0x21d/0x420
[  359.408760][ T7571]        ovl_get_workdir+0xa7d/0x1350
[  359.414128][ T7571]        ovl_fill_super+0x1b85/0x2a20
[  359.419499][ T7571]        mount_nodev+0x52/0xe0
[  359.424252][ T7571]        legacy_get_tree+0xeb/0x180
[  359.429447][ T7571]        vfs_get_tree+0x88/0x270
[  359.434377][ T7571]        do_new_mount+0x2ba/0xb40
[  359.439392][ T7571]        __se_sys_mount+0x2d5/0x3c0
[  359.444583][ T7571]        do_syscall_64+0x3b/0xb0
[  359.449515][ T7571]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  359.455925][ T7571] 
[  359.455925][ T7571] other info that might help us debug this:
[  359.455925][ T7571] 
[  359.466142][ T7571] Chain exists of:
[  359.466142][ T7571]   &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5 --> jbd2_handle --> &oi->ip_xattr_sem
[  359.466142][ T7571] 
[  359.481966][ T7571]  Possible unsafe locking scenario:
[  359.481966][ T7571] 
[  359.489675][ T7571]        CPU0                    CPU1
[  359.495295][ T7571]        ----                    ----
[  359.500826][ T7571]   lock(&oi->ip_xattr_sem);
[  359.505517][ T7571]                                lock(jbd2_handle);
[  359.512361][ T7571]                                lock(&oi->ip_xattr_sem);
[  359.519468][ T7571]   lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5);
[  359.526749][ T7571] 
[  359.526749][ T7571]  *** DEADLOCK ***
[  359.526749][ T7571] 
[  359.534967][ T7571] 4 locks held by syz.0.895/7571:
[  359.539982][ T7571]  #0: ffff8880782c60e0 (&type->s_umount_key#72/1){+.+.}-{3:3}, at: alloc_super+0x210/0x940
[  359.550199][ T7571]  #1: ffff88814258c460 (sb_writers#29){.+.+}-{0:0}, at: mnt_want_write+0x3b/0x80
[  359.559431][ T7571]  #2: ffff888061e1c2c8 (&sb->s_type->i_mutex_key#37){+.+.}-{3:3}, at: vfs_setxattr+0x1dd/0x420
[  359.569878][ T7571]  #3: ffff888061e1bff8 (&oi->ip_xattr_sem){++++}-{3:3}, at: ocfs2_xattr_set+0x62f/0x1930
[  359.579793][ T7571] 
[  359.579793][ T7571] stack backtrace:
[  359.585671][ T7571] CPU: 1 PID: 7571 Comm: syz.0.895 Not tainted 5.15.167-syzkaller #0
[  359.593728][ T7571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  359.603778][ T7571] Call Trace:
[  359.607050][ T7571]  <TASK>
[  359.609974][ T7571]  dump_stack_lvl+0x1e3/0x2d0
[  359.614649][ T7571]  ? io_uring_drop_tctx_refs+0x1a0/0x1a0
[  359.620279][ T7571]  ? print_circular_bug+0x12b/0x1a0
[  359.625476][ T7571]  check_noncircular+0x2f8/0x3b0
[  359.630411][ T7571]  ? add_chain_block+0x850/0x850
[  359.635345][ T7571]  ? lockdep_lock+0x11f/0x2a0
[  359.640022][ T7571]  validate_chain+0x1649/0x5930
[  359.644880][ T7571]  ? stack_trace_save+0x113/0x1c0
[  359.649905][ T7571]  ? reacquire_held_locks+0x660/0x660
[  359.655275][ T7571]  ? stack_trace_snprint+0xe0/0xe0
[  359.660387][ T7571]  ? look_up_lock_class+0x77/0x120
[  359.665586][ T7571]  ? register_lock_class+0x100/0x9a0
[  359.671003][ T7571]  ? is_dynamic_key+0x1f0/0x1f0
[  359.675934][ T7571]  ? mark_lock+0x98/0x340
[  359.680269][ T7571]  __lock_acquire+0x1295/0x1ff0
[  359.685121][ T7571]  lock_acquire+0x1db/0x4f0
[  359.689613][ T7571]  ? ocfs2_xattr_set+0xe96/0x1930
[  359.694636][ T7571]  ? read_lock_is_recursive+0x10/0x10
[  359.700001][ T7571]  ? ocfs2_xattr_block_find+0x17c/0x750
[  359.705543][ T7571]  ? __might_sleep+0xc0/0xc0
[  359.710127][ T7571]  ? rwsem_write_trylock+0x166/0x210
[  359.715406][ T7571]  ? ocfs2_inode_lock_atime+0x5a0/0x5a0
[  359.720947][ T7571]  ? ocfs2_xattr_ibody_find+0x9c0/0x9c0
[  359.726490][ T7571]  ? ocfs2_xattr_ibody_find+0xd0/0x9c0
[  359.731945][ T7571]  down_write+0x38/0x60
[  359.736098][ T7571]  ? ocfs2_xattr_set+0xe96/0x1930
[  359.741115][ T7571]  ocfs2_xattr_set+0xe96/0x1930
[  359.745963][ T7571]  ? __ocfs2_xattr_set_handle+0x1060/0x1060
[  359.751856][ T7571]  ? finish_lock_switch+0x8f/0x100
[  359.756975][ T7571]  ? finish_task_switch+0x1e7/0x630
[  359.762174][ T7571]  ? vprintk_emit+0xbf/0x150
[  359.766759][ T7571]  ? __lock_acquire+0x1295/0x1ff0
[  359.771780][ T7571]  ? aa_get_newest_label+0xf9/0x6c0
[  359.776980][ T7571]  ? posix_xattr_acl+0xa5/0xd0
[  359.781825][ T7571]  ? evm_protect_xattr+0x33b/0xa70
[  359.787114][ T7571]  ? ocfs2_xattr_trusted_get+0x40/0x40
[  359.792572][ T7571]  __vfs_setxattr+0x3e7/0x420
[  359.797260][ T7571]  __vfs_setxattr_noperm+0x12a/0x5e0
[  359.802545][ T7571]  vfs_setxattr+0x21d/0x420
[  359.807048][ T7571]  ? xattr_permission+0x4f0/0x4f0
[  359.812073][ T7571]  ? preempt_schedule_thunk+0x16/0x18
[  359.817448][ T7571]  ovl_get_workdir+0xa7d/0x1350
[  359.822301][ T7571]  ? ovl_get_upper+0x5f0/0x5f0
[  359.827069][ T7571]  ? __kmalloc+0x168/0x300
[  359.831488][ T7571]  ovl_fill_super+0x1b85/0x2a20
[  359.836355][ T7571]  ? ovl_mount+0x30/0x30
[  359.840684][ T7571]  ? sget+0x4b8/0x4d0
[  359.844660][ T7571]  ? free_anon_bdev+0x20/0x20
[  359.849331][ T7571]  ? ovl_mount+0x30/0x30
[  359.853571][ T7571]  mount_nodev+0x52/0xe0
[  359.857902][ T7571]  legacy_get_tree+0xeb/0x180
[  359.862572][ T7571]  ? virtio_fs_zero_page_range+0x170/0x170
[  359.868375][ T7571]  vfs_get_tree+0x88/0x270
[  359.872789][ T7571]  do_new_mount+0x2ba/0xb40
[  359.877303][ T7571]  ? do_move_mount_old+0x160/0x160
[  359.882411][ T7571]  ? user_path_at_empty+0x12b/0x180
[  359.887607][ T7571]  __se_sys_mount+0x2d5/0x3c0
[  359.892282][ T7571]  ? __x64_sys_mount+0xc0/0xc0
[  359.897045][ T7571]  ? syscall_enter_from_user_mode+0x2e/0x240
[  359.903042][ T7571]  ? lockdep_hardirqs_on+0x94/0x130
[  359.908248][ T7571]  ? __x64_sys_mount+0x1c/0xc0
[  359.913017][ T7571]  do_syscall_64+0x3b/0xb0
[  359.917437][ T7571]  ? clear_bhb_loop+0x15/0x70
[  359.922112][ T7571]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  359.928008][ T7571] RIP: 0033:0x7f45c2f0fff9
[  359.932444][ T7571] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  359.952043][ T7571] RSP: 002b:00007f45c1367038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  359.960462][ T7571] RAX: ffffffffffffffda RBX: 00007f45c30c8058 RCX: 00007f45c2f0fff9
[  359.968515][ T7571] RDX: 0000000020000000 RSI: 0000000020000040 RDI: 0000000000000000
[  359.976479][ T7571] RBP: 00007f45c2f82296 R08: 0000000020000100 R09: 0000000000000000
[  359.984442][ T7571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  359.992415][ T7571] R13: 0000000000000000 R14: 00007f45c30c8058 R15: 00007fff179dfc18
[  360.000390][ T7571]  </TASK>
[  360.197035][ T4561] hfsplus: b-tree write err: -5, ino 4
[  360.217396][ T7571] overlayfs: upper fs missing required features.
[  360.239503][ T7110] usb 5-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac
[  360.243437][ T7574] netlink: 12 bytes leftover after parsing attributes in process `syz.1.902'.
[  360.258674][ T7110] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  360.266801][ T7110] usb 5-1: Product: syz
[  360.272778][ T6236] ocfs2: Unmounting device (7,0) on (node local)
[  360.279153][ T7110] usb 5-1: Manufacturer: syz
[  360.285871][ T7110] usb 5-1: SerialNumber: syz
[  360.293614][ T7110] usb 5-1: config 0 descriptor??
[  361.570254][ T7110] peak_usb 5-1:0.29 can0: unable to request usb[type=0 value=1] err=-71
[  361.578731][ T7110] peak_usb 5-1:0.29: unable to read PCAN-USB X6 firmware info (err -71)
[  361.618207][ T4158] ocfs2: Unmounting device (7,4) on (node local)
[  361.640871][ T7110] peak_usb: probe of 5-1:0.29 failed with error -71
[  361.651878][ T7110] usb 5-1: USB disconnect, device number 9