last executing test programs:

3.426195414s ago: executing program 1 (id=1861):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10)

3.12196616s ago: executing program 1 (id=1865):
write$USERIO_CMD_SET_PORT_TYPE(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
sendto$inet6(r0, &(0x7f0000000040)='l', 0xa10c, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x1a, 0x0, &(0x7f00000001c0))

2.974110274s ago: executing program 0 (id=1867):
r0 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1})
madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x12)
syz_clone(0x87800600, 0x0, 0x0, 0x0, 0x0, 0x0)

2.70639463s ago: executing program 2 (id=1869):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x4044, &(0x7f00000000c0), 0x64, 0x50a, &(0x7f0000000e40)="$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")
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
getrandom(&(0x7f0000000600)=""/274, 0xffffff4f, 0x0)
execve(&(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000780))

2.679301081s ago: executing program 0 (id=1870):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x90)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x75}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x4, 0x100, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r1}, 0x10)

2.473009489s ago: executing program 4 (id=1871):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', <r2=>0x0})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)={0x30, r1, 0x777326d861789ced, 0x0, 0x2, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x14, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x10, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x4}, @NL80211_TXRATE_HT={0x6, 0x2, [{0x5, 0x8}, {0x5}]}]}]}]}, 0x30}}, 0x0)

2.354825825s ago: executing program 0 (id=1872):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000100)={0x1f, 0x1}, 0xe)
getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@dev, 0x0, 0x2}, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
ioctl$FS_IOC_GETFSLABEL(r1, 0x400452c8, &(0x7f0000000100))

2.115864677s ago: executing program 4 (id=1873):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0, <r1=>0xffffffffffffffff}, 0x4)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xc, 0x20, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)

2.065696025s ago: executing program 1 (id=1874):
ioprio_set$pid(0x1, 0x0, 0x6000)
openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
acct(&(0x7f0000000040)='\xe9\x1fq\x89Y\x1e\x923aK\x00')
acct(0x0)

1.907848219s ago: executing program 4 (id=1875):
unshare(0x600)
r0 = fanotify_init(0x200, 0x0)
r1 = memfd_create(&(0x7f0000000040)='-B\xd5NI\xc5j\x9appp\xf0\b\x84\xa2m\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xcc\x82n=\x7f=\xcdJx\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x1d\xa1\xce\x8b\x19\xea\xef\xe3', 0x4)
r2 = dup(r1)
fanotify_mark(r0, 0x1, 0x48001078, r2, 0x0)

1.835235434s ago: executing program 1 (id=1876):
r0 = syz_usbip_server_init(0x3)
write$usbip_server(r0, &(0x7f0000002940)=ANY=[@ANYBLOB="00000003"], 0x22d0)
write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c)
socket$nl_route(0x10, 0x3, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000c40), 0x0)

1.7285447s ago: executing program 4 (id=1877):
r0 = epoll_create1(0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
r2 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000080))
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f000086fff4))

1.561795656s ago: executing program 2 (id=1878):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, <r2=>0xffffffffffffffff}, &(0x7f0000000580), &(0x7f0000000540)}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x19, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000007300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x70000000, 0xfffffffffffffee1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.536918824s ago: executing program 4 (id=1879):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10)
bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x7c, &(0x7f0000000140), &(0x7f0000000080)=0x8)

1.420860371s ago: executing program 5 (id=1880):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000027c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
epoll_create1(0x0)
sync()
sync()

1.409452816s ago: executing program 2 (id=1881):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x5, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x2, 0x3, 0x401, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x14, 0x1, 0x3, 0x301}, 0x14}}, 0x0)

1.328331284s ago: executing program 2 (id=1882):
pipe(&(0x7f00000000c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc)
r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
r2 = dup(r1)
mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r1])

1.25795975s ago: executing program 0 (id=1883):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r1 = openat$cgroup_devices(r0, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0)
write$cgroup_devices(r1, &(0x7f00000000c0)=ANY=[], 0x5)

1.240749747s ago: executing program 3 (id=1884):
timer_create(0x3, 0x0, &(0x7f0000001400))
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x3938700}, {0x0, 0x9}}, 0x0)
mkdir(&(0x7f0000000580)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000400)={{}, {0x77359400}}, &(0x7f00000006c0))

1.137961128s ago: executing program 0 (id=1885):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan1\x00', <r2=>0x0})
r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/ipc\x00')
sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000640)={0x30, r1, 0xd66771a5e8224ded, 0x0, 0x0, {{}, {@void, @void, @val={0xc}}}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r2}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r3}]}, 0x30}}, 0x0)

1.05917851s ago: executing program 1 (id=1886):
socket$xdp(0x2c, 0x3, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x400000000000004)
socket$xdp(0x2c, 0x3, 0x0)
writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="480000001400190d7ebdeb75fd0d8c562c84d8c0a2bc000000000000800100000020000000040000000000000078581acb6cc5dcfa094eb3a410545b99935500ffffffff00000053", 0x48}], 0x1)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0)

985.899318ms ago: executing program 5 (id=1887):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10)
bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x7d, &(0x7f0000000300), 0x8)

953.4277ms ago: executing program 0 (id=1888):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0xf, {[@main=@item_4={0x3, 0x0, 0x0, "a8407a73"}, @local=@item_4={0x3, 0x2, 0x0, "93bf0280"}, @main=@item_4={0x3, 0x0, 0x0, "00000080"}]}}, 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0)
ioctl$HIDIOCGUCODE(r1, 0xc018480d, &(0x7f0000000040)={0x2, 0x200, 0x7, 0x7ff, 0x3, 0x89})

915.066354ms ago: executing program 1 (id=1889):
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000940)='./bus\x00', 0x8, &(0x7f00000004c0)={[{@autodefrag}, {@acl}, {@max_inline={'max_inline', 0x3d, [0x54]}}, {@ssd}, {@compress_algo={'compress', 0x3d, 'lzo'}}, {@ssd}, {@noenospc_debug}, {@barrier}, {@nodiscard}, {@acl}]}, 0x1, 0x55a4, &(0x7f000000ac40)="$eJzs3X9snHUdB/DnruvaFdeWMOuArGwDJFtEOjdNCCR2bNNpYTnphE3I+gNH0DmtY8NVCCtinIERijWMwQoLbn9MEYqucyiJBewqul8IJtNFBbPFNWOkOBExYTG9u+d299zaHhMpwuu1tM/zvc/z/d73njx/3PvW73MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABEHwx+N3TL/t3roJ26+ru++8a85e+2D3kuMX3rq1avND20v2dTz31aNVq1qPLF1w0/2JpkfW93d3BkEs2S+W7t9w2fwrr69vuKI0HLDxc6ltZeVQT5nq+mKqMTbnwcF+uT9NQRAURwYoSm/npXfiOQNkdlfkDzisayf1tE4dP69x28qujc8uu3xL/ktnUOloT2C0pK+rgyeupdrk73jkiEw769KL5Vyiqf7RC+4deREAwFtSk0huMm9H029xM+22aD3Sro202yPt8B1Ce3bjVKTGHTvUPCdH66M0z9pUVCgZcp6Revr8Z9qJaP9IOxI13sI8cw9NR5rSoebZEqmP1jwBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3k0uuH5m/d49D7/8ldbf/u7h17/16sePrGq8ZaC7/qJ1ix/v2PG9vx2tWtV6ZOmCm+5PND2yvr+7Mwgqk/1iqe6xZ6ri8ZkDddseu6e3puFDC9cUpccNt2OyDg72hzsXVwRBc1blYDhsf3kQJHILyWawIb/wpeTOZ8ICAAAA7yVnJn/HM+1UHCzOaceSaTKW/BdKhcVrJ/W0Th0/r3Hbyq6Nzy67fMupj5cYYrzak46XaVee+IllBeMw/kbHO1EPD12RN87woiNG8/zpx/qnNdfdUHrl7gsWzphdv+XS4CfTD3csX3TfhBfHL9nXXpOX/yuHz//hmZP/AQAA+G/I/9FxhjdS/m+uqZh0cOp3ix67rur44fkP/Lyz7/kn4w8VD3Q//dLYcbf9cnVe/p+c85R5+T+ccZj/48Gp5X8AAAB4N/tf5//avHGGN1L+/8X+zZ//98pvTDk84187Xnj69xdvnVI+/7WyGTe8+cSCVxp2tf0pL//XFJb/x2RPO3xwVzjhZRVBUFP4SQUAAAByhP/vfuKjhTCvpz45iOb1y+4qe3LXG+tvjJ/V8o8zFvfPqv7i7tVf37ApNrChc92O5XNX5OX/2sLyf/E783IBAACAAvxm+y13V395ydYtew7N2XFnYvPYS+a+uuennVf1vXwsUfT8zX15+T9RWP4vGZ2XAwAAAJzEU+MmPnfo0UNfm7177YS9q9rmPD5t3+qFD/xz9t+veOnPxzddWJ6X/xsLy/9l6W165UOq087wrxA6KoKgdHCnJVXoC9o/mSkAAAAAb5Mwpzc1revduX7MrNfOPvzDNSuW/2rvpd++a2P1zQd+XXX7ucf2996Yl/9bhr//f3ing3D9f879//LW/2cVUnf9u8SNAQAAAHg/yl/PH94eP/XNBUN9/36h6/8/euaBko7m8ysnx7dVz3rig31Xra1+fVHHRZ/YfusbH46V//VTefm/rbD8X5S9fTu//w8AAABOwf/b9/8tzhtneCPd/79v3DPnrPnsPT+o/WbZU+e+eXfzd9oPTj9v87QzPlJ0fvecmX/4fl7+by8s/4fb07JfXk94fm6vCIKJgzvpuwluDae7LFLoKs4qpE58pEd92CNd6CrJKiS1RHp8rCIIpgzutEUKp4eF9khhoDxd2BQp7A0L6eshU3g0UugJr7R7y9PTjRZ+FhbSCyy6whUUp2WWRER6HBuqx2DhpD0OZJ4cAADgfSUMz+ksW5zbDKJRtis20gFlIx0QH+mAopEOGBM5IHrgUI8HjbmF8PEfz+1e+so1D9b1Xt1w9KzZe5bc0faBnkW9O7/wo55z/nL1Cws/nZf/NxWW/8NTMTa1GWr9fxCu/09/r2Fm/X9jWKiMFLrCQiJ6x4BE+BypsHtn+ByViXSPgYmZAgAAALynhZ8LFI3yPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/sHfvcVJVd4LATzf9oJum6YgBY4ygRkR3aZomGEQcUXRXo4tNJKtjhtAIjXZoAwq4YsyKr3GV6GLUmBjZwY+jJg6r+CDqRIXoiElGJfE5Kz4HnciqS9BR45gs++m+dYqqW112IaC0+/3+0XWqfud569H33HvrFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/P/hsiX3Nrw58H9965ffW/f697409TdTD9m8y19uqHt3yDlPbT5ocN0tbw1asPCNtklnXtsyffk1G1YuDaGlq1xZUrzsoUHl5aP/cMxdt13xcNO0wVPOrcrUm4mHfp1/yjN3Loytvto/hLvLQqhIB0bUJYHKzP26WN8edSF8LmwJZEu01SYl0g2Hh2tCWBa2BLJV3VsTQl1OYMoTD666rDNxVU0I+4YQqtNtvFCdtFGTDgyrSgK16cCciiTw/uZENnBPeRKAbRbfDNkX/YqW/AwN3Zcr8vqr3G4d+3Slh9cnJhqK53vrsB3cqRxV6QdatulpK6iOHaLg7bHau60XvNsKtvMST1vujlRmD2XzllB11x7Q9AUd8+Mj5aGxsU+xmnbQ87xu0zkztibda16HsQMN2+V1+EDtpPrL3p548MqT/3j6vvPXTt3Wbj6Xs0lz0ztadZjZNqvzNddrnsdogs+TXvD2K9hLGmqnK4Rw/J8+X/bMnJd23/jBqydOvP2Fi6+etvCaKROfHfSLsf947S53T7u8YP7f8NHz//hyjrflebljqx/WJ3Pz+EhdTGysT+bmAAAA0Gv0hqOmXx396kunPnT3oheXH1fx3XG/Omm3+oqzv99x/K4rx3/x0ivbH9+lYP4/tLTz//GUf13uaFeHMKErccGAEHbrejwJ/Cx25+QBIezVlWrJDxyWCqwO4Qtdif2zVaVK9I0lhqYCv6/PBCakAmtioCUVuDEGlqQCF8bAilRgRgysTgUOj4HQnj+OA+oz4yg5UBMDrclGXBGvQninPraW2lbrslUBAABsJ5nZYWX+3ZxrHbY1Q5xerqjpKUO8ArtohupUDekZbHZaVbSGip5qKO+phuy4F3308AtqLuup5oLLMMryM3w45DvlAybu/aO7bhxxU/OLE7/77tjjv/LnN99dvf8//fd7zpl/3QEF8/+mj57/V3fTkbKC8/8hTO76G3OXZyId2XhrS14GAAAAYBtc9djSJ2844Kj/c9/L9935pWtvKF999df/7ysbL9h71HHDy/r+3bdXFMz/J5R2/X88JtInJ3N4NB6GmD0ghKb8QFLtwYWB5Kx3v0wAAAAAeoPs+fjsufD2zG1yiXZ6Pl2Yv2Ur88cT/xO6zX/5pr9+9svXPnniwmH7bLjiv535Qdnnx/5ul2PXjnz8rT2H/UND38Lr/1tKu/6/Nv826cSa2IsrB4TQNyfwSOxlZ6DL0Bh4+dD8QGb8a+IGWByrylyYkK1qcSzRGgNNqcCyYiV+my2xW34g82RlG78gO472TImcAAAAAHzi4uGAeF4+Xv9/z+QDvrT/oJfGvLjnvQtfm7D0hFNrf7jPLbu+PqBj0pgDJxxyxDMF8//Wrbv+v2seXHB5f0e/EEZWhNAn/cWAR2uThQFjoK4sk7i/NqmrT7qq82pDGN85sHRVr2TW/69IrzH4RE1SVQzstvdPNw3rTNxQE8LI3MAz37x+TGdifiqQbfwbNSEM6RxtuvGVfZPGK9ONX9M3hD1zAtmqTu4bQmdjVemqHqzO/I5BuqrbqkMYmBPIVnVgdQgLAwC9VPxXOjP3wXkLz549vaOj7YwdmIjH8GvCrPaOtsYZczpmVhfp08xUn/OWMTqvcEyl/vLN85kliqYOuX14Kens9wSbctvKHMcvuHAwcz/uC1V2jbO5Mu/u6PSQh+9T2ETI2ZMqNuTyHTzk2txKtjyJBfXH/FWhX+i7YF7bGY1nTZ8//4xRyd9Sszcnf+NppmRbjUpvq9ru+lbCy6PoalkpH3db7Zdbycj5p80dOW/h2SPaT5t+Stspbd9pHjuquXnMV8eOaR7ZOaqm5G8PQ92vu6pTQ918fYnj2o5D3b0ip5JP4lNDQkKityWmLyk7f8K0X9//rT3WnHbWSXv8/R4zR5z0V5f/Zu6JjYdM/tX1f7m2YP4/96Pn//FTJ37yZ9ZnKHb+vyGe5k8e33KavzUGlpV6/r+h2Nn87IUBQ1OBRTGwyGl+AAAAPhvi4ch4NDMelb6u7p/uPnLmjEPe/+UJU67+27HjTj1r/b4NF1997JL/sP6dJauOeLtg/r+otO//b6f1/7NL13+t2DL/+8cSTcXW/08v859d/39RsfX/08v8Z9f/X/YprP+/IBtIbZJ3rP8PAAB8Fnxy6//3uLx/+gcCCjL0uLx/+gcCCjL0uIx/qT8QsNXr/8/p+IvaQZfPGXfoiLk/fmTV3ksG3val5yf+ep+lB424d+Ut7426tWD+v6S0+b+F+wEAAGDn8dAv+3774neH3f/UI+8fWXbpbzfedPxftR1wyB8GNp8y+eia79/0bwXz/2Wlzf8/+fX/QrHr/4cWC7QUWxjQ+n8AAAD0UsXW/7t54MtDV88fceNjP3/zlpdafzFz/Gv/bskPvjJ9WNPNa9b9pmHG+oL5/4rS5v/xsovyvNyxNx/WJ2vahfSadhvrs18ZAAAAgN6hPDQ2VpaYN29l1MM+fpvrMkuBflQ619P3DVq1oPyhq8qqN/7gkmmHNJ577Jlzjrxo/fdrn/xJ7dTG6jMK5v+rS5v/530v44HaSfWXvT3x4A9XnvzH0/edv3bqlvP/AAAAwI5T6nEJAAAAAAAAAAAAAADg0/dU69KDPhh19Bsz9xr1p28c+8IPFn/xm4/8zbV/PvPnh9+3V/vmYVMKvv8fJneVK/b9//i7f/H7Bbvm5Y6t9rz+X+b+lGNuXdi1ZOGj9SHskxuYff7sz4XMb/PvlxtYNXX/wZ2J89Ml7nvx8Nc6E9PSgaNG7PJeZ2J8KtAaF0n8QjoQf1Xxvf6pQFxe8cl0IG6PFelAVSZwSf9kHGXpbbWhLtlWZelt9VxdCANyAtltdXdd0kZZeoBXpQLZAZ6eDsQBTsoEytO9urVf0qsYqItF/6Zf0isAAHZacS+wMsxq72hrirvw8Xb3ivzbKG/JsvMKqy0rsfnnM0uTTR1y+/BS0n3S+6Jbfmu8MlR3DmFUwe5qbpayrlFun1p62HS7FhlyT6u9lRcpl7a1m66q+IhqkhE1zpjTMbOyx4GP7jlLc0WPWUYVTHZys5R3bdISaimhLyWMqMRtU0KX4/3y0NjYJ5VrXAw2hDw9vSJK/b5+7jp/xV4FuXn+tubaS/sM7vP+v42/6KEHB1R2nDq57aLdH/vngaNm/viHD7Ze8/uC+X9DafP/6txxvZf5MYBF8Zf1Dh4QQmuJIwIAAIDPvv957vI7TpyzZsOs1RXP/u53s8uPO7Fy8zl3nXP2Rc/dv/ioS/79zdsaX1H21KYT39h01l+/8ZOvXPfwWS8dPuOsuyatO2R9W/WN3/2L5acOKZj/Dy1t/h+PYGVOBSdHO1bH3/+/YEAIXT+t35AEfhaHe/KAEPbqSrXEEskP6n8tlmhKAj+LB0z2jyVaW/Kr6hsDK1KB39dnAqtTgTUxkDlK8dOQOZRzRX0IY7pSk/NLzI0lGlKB42JgaCrQGANNqUD/GJiQCrzZPxNoSQX+MQZCe/62urN/ZlsBAABsjcw8qzL/bkjP81ZU9JShrKcMtT1lKO8pQ3VPGYqNIt6/I2aoTF28UpaTqTJda02qloIM8cfwt7pfBRnCb/NzpgsWNB2vP8heb1CWn2HcD+9oPehr83686eIfPX7kgRceueTKty89ut/gK5/93+3n9uu/qbZg/t9U2vy/Nv82aX1NnP9v+f2/JPBI7N6V8dLxoTHw8qH5gcyBgTVxsrs4W1VLpkRm0r44lpgQA0NTgbkxMCEVaJ2cCSwbnB/IzLSzjV+Qbbw9UyInAAAAAJ+4eIAgHqaJ8/+V48I7exz5fvPuVw6cO+7xR847YnrNrtU1/zx+7dLxl1Y/tF/fgvn/hNLm/7G9frmNXRh782r/EO4u29KbbGBEXRKIxzHq4tfj96gL4XM5BziyJdpqkxJVqYbDwzXJN9Sr0lXdW5OsMRDvT3niwVWXdSauqglh35yjL9k2XqhO2qhJB4ZVJYHadGBORRKIR36ygXvKkwBss+xRwfiCylzqktXQfbkir7/Pym+CpodXcAy0m3zdfedqR6lOP5A5ppq1dU9bQXXsEAVvj9Xebb3x3dbg3Za7I5XZQ9m8JVQdyme2zZq+oGN+fCT3m6wFdtDznPst1VLS2+F1uOjj97Zn1ekONKU+Ppq6L9f967AsVvdA7aT6y96eePDKk/94+r7z104tuRtFxC8KH3zr3AOey9m8O1p1yLzmet3nSYvPk974b2Copy2EsPyCWU8+8S/vP1+xvvm/HDh2+W1vPrb8Jwc9MGvEFzZc8uWNb717VMH8v6W0+X9F6rbLB3FjzhsQwvCcjfto3PwTBySfgzmB5FNyYGEgOeW+vr7oJycAAABsb9nDHdnjBe2Z2+SC8PQ8uTB/y1bmj8crJnSbv9R+DxzzD9879KrXv/H19btf/ujSp9b9pzdfOWLaoQ9senrFytebj/380wXz/9aPnv/3TXXT+X/n/9lBnP/v1s5+KLpv+oFF23QouqA6dgjn/7u1s7/bnP/vlvP/zv93x/n/Hjj/362d/Wkr2Euaa6crhNA64Ibbf1E7fXi/K8751oy1P3/6naZxL9Sde/Sd/+PwxeGa81b9uWD+P7e0+b/1/7pftC+7/l9rsfX/5hZb/2+R9f8AAIAdqshCc+l5XsHqfQUZ0qv3FWTocYHAHpcYtP7fVq//V3vS2Se9Uv/WXtdMvP0/3zn9wudPOvHZffs8f8LtJ9w08urhL315Q8H8f1Fp8//4cuiX23pvWf9v6OQiVS2JgbkWBgQAAGBnVOwAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ+uFQ8u/uLmxfscdNOzn7/p8H9dtmbW3r86YPPoMSc3Dl88sOzKv/uXtwYtWPhG26Qzr22ZvvyaDSuXhtDeVa4sKV720KDy8tF/OOau2654uGna4CnnVmfqrczcfjEvd2z1w/oQluU8UhcTG+s772wJTDnm1oUVnYlH60PYJzcw+/zZn+tM3Fgfwn65gVVT9x/cmTg/XeK+Fw9/rTMxLR04asQu73UmxmcCZenuXtc/6W5ZuruX9Q9hQE4g291v98+vKtvGf8wEytNt3FyXtBEDdbHoj+qSNmKgI5Zo7xvCyIoQ+qSr+nV1UlWfdFV/X51U1Sdd1X+tDmF8CKEiXdWLVUlVFemRr61KqoqB3fb+6aZhnYllVSGMzA08883rx3QmTk8Fso1/vSqEIZ0vmXTjd1QmjVemG7+qMoQ9QwhV6RL/WpGUqEqXeKUihIE5gWzjp1aEsDDwmRA/fGbmPjhv4dmzp3d0tJ2xAxNVmbZqwqz2jrbGGXM6Zlan+lRMWU5683kff+zPbzpnRuft1CG3Dy8lXZEpV9nV5ebKvLujd/bex37V5lay5fkoqD/mrwr9Qt8F89rOaDxr+vz5Z4xK/paavTn52ycTTbbVqN6yrfbLrWTk/NPmjpy38OwR7adNP6XtlLbvNI8d1dw85qtjxzSP7BxVU/J3ewz1+k9+qLtX5FTySXwASEhI9LZEed6nW9PO/kFesKO/paOVobrrA7pgWpGbpaxrlNtj0Id9zBF/nP2UHkc0qmDiUJCluecsowsmE1uy1CRZuvbrCiaHuTWVd23SeL88NDb2KbYdGvLv5m7et7Zh867LbLpS0wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/jx04EAAAAAAA8n9thKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqirswIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQeOBQAAAACE+VuH0bMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABcCgAA//9aTM01")
mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
chdir(&(0x7f0000000240)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0, 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020660b, &(0x7f0000000000)={0x0, 0xffffffff004})

902.545487ms ago: executing program 3 (id=1890):
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002)
r1 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0xffffffff, 0xfffffffe}, 0xc)
write$binfmt_script(r1, 0x0, 0x0)
write$binfmt_aout(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="03070000b5"], 0xc8)

795.784742ms ago: executing program 5 (id=1891):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x75c, 0x0, @private2}]}, &(0x7f0000000180)=0x10)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x10, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8)

698.042179ms ago: executing program 3 (id=1892):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
fcntl$notify(r0, 0x402, 0x5)
preadv(r0, 0x0, 0x0, 0x0, 0x0)
preadv2(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

524.865474ms ago: executing program 4 (id=1893):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x14d802, 0x0)
r1 = dup(r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000002, 0x28011, r1, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)

486.225307ms ago: executing program 3 (id=1894):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200408c4, &(0x7f0000000200)={0x2, 0x4e21, @local}, 0x10)
shutdown(r0, 0x1)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000080)=0x40)

485.527773ms ago: executing program 5 (id=1895):
r0 = fsopen(&(0x7f0000000000)='sysfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x0)
capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080))
openat(r1, &(0x7f0000000300)='./file0\x00', 0x105841, 0x8)

329.946692ms ago: executing program 2 (id=1896):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r0, 0xfff)
setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000140)=0x3, 0x4)
syz_emit_ethernet(0x4a, &(0x7f00000003c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0)

291.781858ms ago: executing program 5 (id=1897):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000140)=@framed={{}, [@printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xca}}]}, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
mq_open(0x0, 0x2, 0x80, &(0x7f0000000180)={0x1, 0x80000000001, 0x800000000000})
mq_notify(0xffffffffffffffff, &(0x7f0000000140))
r0 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000280)={r0, r0, r0}, &(0x7f00000000c0)=""/83, 0x53, 0x0)

255.287331ms ago: executing program 3 (id=1898):
r0 = socket$inet6(0xa, 0x3, 0x3)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1001}, 0xc)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in=@local, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in=@dev={0xac, 0x14, 0x14, 0x42}, 0x0, 0x6c}, 0xa, @in6=@loopback, 0x0, 0x4}}, 0xe8)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c)

137.719451ms ago: executing program 2 (id=1899):
syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000040)='./bus\x00', 0x2008410, &(0x7f0000000500)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x553b, &(0x7f000000ac00)="$eJzs3EtvG1UUAOA7TtPSJxFiwa4jVUiJVFt12lSwC9CKh0gV8ViwAsd2LLe2J4odJ2SFBEvEgn+CQGLFkt/AgjU7xALEDgnkuWNKKI9WduKk/T5pfGbujM+cO7ISnRnLAXhiLaS//pyES+FsCGEuhHAhCfl6Uiy51RieCyFcDiGU/rIkxfifA6dDCOdCCJdGyWPOpNj1+dXhlZWf3vjlm+/OnDr/xdffz27WwKw9H0LobsX13W6MWSvGu8V4bdjOY/fGsIhxR/desZ3FuNvcyDPs1sbH1fJ4vRWPz7Z2+qO42anVR7HV3szHt3rxhP1ha5wnf8Pd2na+3Whu5LHdz/LY2o917e3Hv237/UHM0yjyfZinD4PBOMbx5l4zzmfrXh7rvUExHvNmjebeKA6LWJwu1LNOI69jY5Irfby92e7t7KXD5na/nfXSlUr1hUr1Zrm6nTWag+aNcq3buHkjXWx1RoeVB81ad7WVZa1Os1LPukvpYqteL1er6eKt5ka71kur1cr1yrXyylKxdjV99c67aaeRLo7iy+3ezul2p59uZttpfMdSuly5/uJSeqWavr22nq6/dfv22vo77996785La6+/Uhz0QFnp4vK15eVy9Vp5ubp0DOY/+r/7kPMfTDL/T4qiH2H+yWSXB/6bDxjAI3ug/w/6f+DwnfT+P0yz/x+1VPr//+9/S5P3/xP1v8e1/z/B84eJ6P8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ5YP8x/+Vq+shC3zxfjF4uhZ4rtJIRQCiH8/g/mwukDOeeKPPP/cvz832r4Ngl5htE5zhTLuRDCarH89vRhXwUAAAB4fH310eXPYrceXxZmXRBHKd60KV34YEr5khDC/MKPU8pWGr08O6Vk+ef7VNibUrb8BtZTU0oWb7mdmla2hzI3Dh9fvD+YTyiJoXSk5QAAAEdi7kA42i4EAACAo/TprAtgNpIwfpQ5fhacf/P+/qPNswf2AQAAACdQMusCAAAAgEOX9/9+/w8AAAAeb/H3/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4g537uU0ciOIA/GwwsP+0aLX3bWVvUEZKyDHHQAFpghJIC2mAGsgtJUQQYY+QHIEUiXGsoO+TPM7Y0W9mgMsbSwYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6NJztZ4/3v97uDRnt79MntUAAAAAp2yr9bz+Y9r0f6Trv9KlP6lfREQZEadq90GMWpmDlFOd+f/q3RyeIuqEwxjjdHyPiP/peP3d9acAAAAA12uzXM2aar1ppn1PiM/UbNqUP28y5RURUU1fMqWVh+ZvprD69z2Mu0xp9QbWJFNYs+U2PH1vlGuQtkHrlFYyWdRfYt0ruxkXAADoU7sSOFOFAAAAcAVu+54A/SiOzfE547g5pQeC31o9AAAA4Asq+p4AAAAA0Lm6/vf+PwAAALhuzfv/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6NK2Ws83y9Xs3P3FB3N2+8vkWxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwBv7844CIRAGYbB3fWcy9z+sNGhobFIFwsffGAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAm9/95f/E1DiTzL02lp5HkrVTY+vU2Ds3jv4wvn4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXOzPSwqEQBBEwZzxv5O+/2ElQc8gQgQ0PKqoRQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBFv/vl/8TUOJPMnTaWjkeStavG1lVj70Hj6MF4+zcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXOzcP28cRRQA8Hd7t5c/gDAGuTCgIFFAQ+xLSEgJBcii4CMgWc45GC4EEhckskBuoEKu0yAoEUICmS7fIXUspQldChdGogbt3u5lkxhyiszuEv9+0uy8Pa9m3uydLD/P2gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAafedeCkp4m52mBnH5Wu39jZWsn7ngT5zY+v2fNayuPOoib55++CTb7eXqycn5ionX9WfDAAAAIdDt6zvI+JOur2U9clMXv+n5TVZzf/9M+O4rOcfrPt39jaOFl+aL+v/3369+8JkopnxPNmgq2uj4eLDqfT+oyW23rOPvKKX3/n8dy/d/A1J3t98fjfN72fn25s33+3n4ZE6sgUAHsfJsi+C8uehrB80mRgAh0avUniX9X93ptmcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOqwuxlPlXEnIuZ79+LMzt7Gyn79ja3b82U7e/36VnXMbIg0IlbXRsO0xrW03ZWr1z5ZHo2Gl+sPTkREc7MXwYdTXBPx79cUH89obhX/HHTakUajQVK8P23J5yCD8rN38CM39A0JAIAnVlq0rK6/k24vZa91ZiP++uH++v+1ShxT1v93Pzp7qzpXtf4f1LbC9ltYv/jZwpWr195Yu7h8YXhh+OmbpwZvDU6fO3Pm3EJ2rxYXViMZLjadJgAAAP9j/aJV6/9k9uH9/+OVOKas/z//bvBlda6u+n9f9zb9ms4EAADgMOpPoude+fOPzj5XdPr9+GJ5ff3yYHycnJ8aH2tN9zEdKVq1/u/ONp0VAAAAUIfdzc59+//nK3FMuf//9I8v/lwdsxsRxyIuRcTw5Mql0fn6ltNqdfyhcj5Rv+mVAgAA0JRjRavu/6f58//J5JGHJCJef3Ucl//rapr6v/ve1z9V56o+/3+6viW2UjI3vh95PxfRm2s6IwAAAJ5kR4uWFfu/p9tLH/9y/IO+5/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6vZ3AAAA//+pzDYD")
open(&(0x7f0000000200)='./file0\x00', 0x4008040, 0x0)
link(&(0x7f0000001240)='./file0\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
creat(&(0x7f00000008c0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
rename(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./bus\x00')

16.02248ms ago: executing program 5 (id=1900):
r0 = fanotify_init(0x200, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0)
fanotify_mark(r0, 0x101, 0x48001051, r1, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fdinfo/3\x00')
pread64(r2, &(0x7f0000001200)=""/99, 0x63, 0x0)

0s ago: executing program 3 (id=1901):
socket$netlink(0x10, 0x3, 0x0)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000380)='./file0\x00', 0x804, &(0x7f00000001c0)={[{@uni_xlateno}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'koi8-r'}}, {@rodir}, {@utf8no}, {@rodir}, {@uni_xlateno}, {@utf8no}, {@fat=@codepage={'codepage', 0x3d, '855'}}, {@uni_xlateno}, {@fat=@codepage={'codepage', 0x3d, '855'}}, {@iocharset={'iocharset', 0x3d, 'cp936'}}, {@utf8no}, {@uni_xlateno}, {@utf8}, {@uni_xlate}]}, 0x1, 0x276, &(0x7f0000000640)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000)
syz_open_dev$mouse(0x0, 0x2a9f, 0x20200)

kernel console output (not intermixed with test programs):

usb-dummy_hcd.2-1/input0
[  168.743669][ T1843] input: Wacom Intuos5 touch L Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:0028.0009/input/input13
[  169.017946][ T7438] netlink: 'syz.4.791': attribute type 1 has an invalid length.
[  169.042974][   T46] usb 3-1: USB disconnect, device number 4
[  169.049759][ T7438] netlink: 9324 bytes leftover after parsing attributes in process `syz.4.791'.
[  169.077638][ T7438] netlink: 'syz.4.791': attribute type 1 has an invalid length.
[  169.237950][ T7440] loop1: detected capacity change from 0 to 4096
[  169.263628][ T7440] ntfs3: loop1: Different NTFS sector size (4096) and media sector size (512).
[  169.273083][ T6199] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  169.480005][ T7440] ntfs3: loop1: ino=0, ntfs_iget5
[  169.485277][ T7440] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  170.133004][ T7477] netlink: 'syz.3.808': attribute type 1 has an invalid length.
[  170.178810][ T7477] netlink: 9328 bytes leftover after parsing attributes in process `syz.3.808'.
[  170.230666][ T7477] netlink: 16 bytes leftover after parsing attributes in process `syz.3.808'.
[  170.322361][    T8] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  170.518252][ T7495] syz.1.816[7495] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  170.520001][ T7495] syz.1.816[7495] is installing a program with bpf_probe_write_user helper that may corrupt user memory!
[  170.541889][    T8] usb 6-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  170.577410][    T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  170.631869][    T8] usb 6-1: config 0 descriptor??
[  170.657842][    T8] gspca_main: cpia1-2.14.0 probing 0813:0001
[  170.818072][ T7510] netlink: 'syz.3.824': attribute type 29 has an invalid length.
[  170.873403][ T7510] netlink: 'syz.3.824': attribute type 29 has an invalid length.
[  170.919803][ T7510] netlink: 'syz.3.824': attribute type 29 has an invalid length.
[  170.943685][ T7512] loop2: detected capacity change from 0 to 64
[  171.484776][    T8] gspca_cpia1: usb_control_msg 02, error -71
[  171.491641][    T8] gspca_cpia1: usb_control_msg 05, error -71
[  171.503635][ T7535] tap0: tun_chr_ioctl cmd 1074025677
[  171.513798][    T8] gspca_cpia1: usb_control_msg 04, error -71
[  171.522907][ T7535] tap0: linktype set to 774
[  171.529337][    T8] cpia1 6-1:0.0: probe with driver cpia1 failed with error -71
[  171.557087][    T8] usb 6-1: USB disconnect, device number 2
[  171.699979][ T7543] program syz.2.839 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  171.702905][ T7544] loop4: detected capacity change from 0 to 1024
[  171.771324][ T7548] program syz.1.842 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  172.450674][ T7574] netlink: 4 bytes leftover after parsing attributes in process `syz.0.856'.
[  172.733362][ T7586] netlink: 186996 bytes leftover after parsing attributes in process `syz.2.859'.
[  172.781271][ T7586] netlink: 22856 bytes leftover after parsing attributes in process `syz.2.859'.
[  172.949741][    T8] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  173.159694][    T8] usb 1-1: Using ep0 maxpacket: 32
[  173.176506][    T8] usb 1-1: config 0 has no interfaces?
[  173.226158][    T8] usb 1-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5
[  173.259735][    T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  173.267758][    T8] usb 1-1: Product: syz
[  173.296212][    T8] usb 1-1: Manufacturer: syz
[  173.309634][    T8] usb 1-1: SerialNumber: syz
[  173.323641][    T8] usb 1-1: config 0 descriptor??
[  173.438202][ T7602] netlink: 20 bytes leftover after parsing attributes in process `syz.3.868'.
[  173.537768][ T7587] loop5: detected capacity change from 0 to 32768
[  173.557349][    T8] usb 1-1: USB disconnect, device number 5
[  173.959840][ T7593] loop4: detected capacity change from 0 to 32768
[  174.016384][ T7593] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  174.173510][ T7593] XFS (loop4): Ending clean mount
[  174.389126][ T5232] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  174.539616][ T5295] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  174.762576][ T5295] usb 2-1: Using ep0 maxpacket: 32
[  174.780504][ T5295] usb 2-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7
[  174.790081][ T5295] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  174.815334][ T5295] usb 2-1: config 0 descriptor??
[  174.842322][ T5295] gspca_main: sq930x-2.14.0 probing 041e:403c
[  174.865884][ T7635] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  174.865884][ T7635] The task syz.0.879 (7635) triggered the difference, watch for misbehavior.
[  175.238524][ T7625] loop2: detected capacity change from 0 to 32768
[  175.354478][ T7625] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  175.559421][ T7655] sp0: Synchronizing with TNC
[  175.635968][ T7658] program syz.3.888 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  175.701797][ T5295] gspca_sq930x: reg_w 0105 bf00 failed -71
[  175.728092][ T5229] ocfs2: Unmounting device (7,2) on (node local)
[  175.779962][ T5295] sq930x 2-1:0.0: probe with driver sq930x failed with error -71
[  175.811864][ T5295] usb 2-1: USB disconnect, device number 5
[  175.922618][ T7664] loop5: detected capacity change from 0 to 256
[  175.986421][ T7666] netlink: 56 bytes leftover after parsing attributes in process `syz.0.893'.
[  176.017957][ T7666] netlink: 56 bytes leftover after parsing attributes in process `syz.0.893'.
[  176.928631][ T7705] loop1: detected capacity change from 0 to 512
[  176.945313][   T29] audit: type=1326 audit(1726350439.176:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7703 comm="syz.0.910" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9daff7def9 code=0x0
[  176.954815][ T7705] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  177.022730][ T7708] binder: 7707:7708 ioctl c018620b 0 returned -14
[  177.047921][ T7705] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #16: comm syz.1.911: invalid indirect mapped block 4294967295 (level 0)
[  177.060222][ T7714] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave
[  177.088362][ T7714] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[  177.089643][ T7705] EXT4-fs (loop1): Remounting filesystem read-only
[  177.146556][ T7705] EXT4-fs (loop1): 1 orphan inode deleted
[  177.210729][ T7705] EXT4-fs (loop1): 1 truncate cleaned up
[  177.226370][ T7719] process 'syz.2.917' launched './file1' with NULL argv: empty string added
[  177.234428][ T7705] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  177.431918][ T5228] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  177.565000][ T1162] IPVS: starting estimator thread 0...
[  177.689834][ T7731] IPVS: using max 16 ests per chain, 38400 per kthread
[  178.748371][ T7771] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  178.775455][ T7724] loop4: detected capacity change from 0 to 40427
[  178.784591][ T7768] x_tables: eb_tables: AUDIT.0 target: invalid size 8 (kernel) != (user) 1
[  178.855627][ T7724] F2FS-fs (loop4): Found nat_bits in checkpoint
[  178.865116][ T7739] loop1: detected capacity change from 0 to 32768
[  179.005476][ T7739] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  179.124297][ T7724] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  179.311482][ T5232] syz-executor: attempt to access beyond end of device
[  179.311482][ T5232] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  179.312585][ T5228] ocfs2: Unmounting device (7,1) on (node local)
[  179.360987][ T5232] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  179.748686][ T7803] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  180.787851][ T7827] netlink: 8 bytes leftover after parsing attributes in process `syz.1.962'.
[  180.862377][ T7827] netlink: 8 bytes leftover after parsing attributes in process `syz.1.962'.
[  181.273231][ T7846] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[  181.387081][   T29] audit: type=1326 audit(1726350443.616:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7847 comm="syz.2.971" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7835b7def9 code=0x0
[  181.460846][ T7850] netlink: 8 bytes leftover after parsing attributes in process `syz.4.973'.
[  181.652671][ T7854] loop1: detected capacity change from 0 to 4096
[  181.683501][ T7854] ntfs3: loop1: Different NTFS sector size (1024) and media sector size (512).
[  181.778868][ T7854] ntfs3: loop1: Failed to load $Extend (-22).
[  181.793671][ T7854] ntfs3: loop1: Failed to initialize $Extend.
[  181.893386][   T29] audit: type=1804 audit(1726350444.116:30): pid=7854 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.976" name=2F6E6577726F6F742F3137302F131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D3382F627573 dev="loop1" ino=33 res=1 errno=0
[  181.939318][ T7854] ntfs3: loop1: ino=21, "bus" fiemap is not supported for compressed file (cp -r)
[  182.093390][ T7874] netlink: 32 bytes leftover after parsing attributes in process `syz.5.983'.
[  182.140357][ T7874] netem: unknown loss type 13
[  182.160499][ T7874] netem: change failed
[  182.209391][ T7878] ax25_connect(): syz.4.987 uses autobind, please contact jreuter@yaina.de
[  182.351675][ T7883] loop2: detected capacity change from 0 to 512
[  182.362696][ T7885] wlan0 speed is unknown, defaulting to 1000
[  182.393697][ T7885] wlan0 speed is unknown, defaulting to 1000
[  182.428239][ T7885] wlan0 speed is unknown, defaulting to 1000
[  182.516860][ T7886] siw: device registration error -23
[  182.528826][ T7889] netlink: 830 bytes leftover after parsing attributes in process `syz.1.990'.
[  182.545441][ T7883] EXT4-fs error (device loop2): __ext4_iget:4985: inode #15: block 1803188595: comm syz.2.988: invalid block
[  182.596827][ T7883] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.988: couldn't read orphan inode 15 (err -117)
[  182.614060][ T7885] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  182.627052][ T7883] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  182.652250][ T7885] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  182.707148][ T7883] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.988: invalid indirect mapped block 234881024 (level 0)
[  182.835884][ T7885] wlan0 speed is unknown, defaulting to 1000
[  182.860899][ T7885] wlan0 speed is unknown, defaulting to 1000
[  182.878878][ T7885] wlan0 speed is unknown, defaulting to 1000
[  182.904479][ T7885] wlan0 speed is unknown, defaulting to 1000
[  182.941614][ T7885] wlan0 speed is unknown, defaulting to 1000
[  182.949297][ T7885] wlan0 speed is unknown, defaulting to 1000
[  182.980767][ T5229] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  182.996855][ T7885] wlan0 speed is unknown, defaulting to 1000
[  183.084857][ T7898] loop1: detected capacity change from 0 to 4096
[  183.115985][ T7900] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  183.161594][ T7904] loop2: detected capacity change from 0 to 128
[  183.528147][ T7919] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1002'.
[  183.575169][ T7919] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1002'.
[  183.853083][ T7930] loop2: detected capacity change from 0 to 512
[  183.896700][ T7930] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  183.960212][ T7930] EXT4-fs (loop2): 1 truncate cleaned up
[  184.003891][ T7930] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  184.343440][ T5229] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  184.730633][ T7956] netlink: 105120 bytes leftover after parsing attributes in process `syz.4.1017'.
[  184.886873][ T7922] loop5: detected capacity change from 0 to 32768
[  184.929968][ T7922] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1003 (7922)
[  184.952818][ T7922] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  184.952919][ T7922] BTRFS info (device loop5): using sha256 (sha256-ni) checksum algorithm
[  184.952957][ T7922] BTRFS info (device loop5): using free-space-tree
[  185.250966][ T1843] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  185.289929][ T6199] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  185.459817][ T1843] usb 3-1: Using ep0 maxpacket: 16
[  185.486981][ T1843] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  185.513460][ T1843] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  185.553975][ T1843] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  185.599227][ T1843] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  185.634116][ T1843] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  185.646626][ T7951] loop1: detected capacity change from 0 to 32768
[  185.666487][ T1843] usb 3-1: config 0 descriptor??
[  185.792127][ T7951] ERROR: (device loop1): dbAllocNext: Corrupt dmap page
[  185.792127][ T7951] 
[  185.822261][ T7951] ERROR: (device loop1): remounting filesystem as read-only
[  185.867516][ T7951] blkno = 0, nblocks = 1
[  185.900516][ T7951] ERROR: (device loop1): dbFree: block to be freed is outside the map
[  185.900516][ T7951] 
[  185.920046][ T7951] ialloc: diAlloc returned -5!
[  185.930620][ T7962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  185.999958][ T7962] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  186.027318][ T7951] ERROR: (device loop1): dbAllocNext: Corrupt dmap page
[  186.027318][ T7951] 
[  186.222381][ T1843] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0
[  186.252845][ T1843] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0
[  186.279955][ T1843] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0
[  186.301422][ T1843] microsoft 0003:045E:07DA.000A: unknown main item tag 0x0
[  186.322023][ T1843] microsoft 0003:045E:07DA.000A: No inputs registered, leaving
[  186.343835][ T1843] microsoft 0003:045E:07DA.000A: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0
[  186.359198][ T1843] microsoft 0003:045E:07DA.000A: no inputs found
[  186.367337][ T1843] microsoft 0003:045E:07DA.000A: could not initialize ff, continuing anyway
[  186.426399][ T5295] usb 3-1: USB disconnect, device number 5
[  186.489618][   T46] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  186.691144][   T46] usb 6-1: Using ep0 maxpacket: 32
[  186.707709][   T46] usb 6-1: config 0 has no interfaces?
[  186.727088][   T46] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  186.759280][   T46] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  186.785207][   T46] usb 6-1: config 0 descriptor??
[  187.061664][ T5295] usb 6-1: USB disconnect, device number 3
[  187.197748][ T8023] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1042'.
[  188.043978][ T8051] sctp: [Deprecated]: syz.2.1051 (pid 8051) Use of int in maxseg socket option.
[  188.043978][ T8051] Use struct sctp_assoc_value instead
[  188.046446][ T8050] loop5: detected capacity change from 0 to 164
[  188.127804][ T8053] loop1: detected capacity change from 0 to 16
[  188.192182][ T8053] erofs: (device loop1): mounted with root inode @ nid 36.
[  188.226041][ T8053] overlay: filesystem on ./file0 is read-only
[  188.539727][ T8063] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1059'.
[  188.861394][ T8076] loop2: detected capacity change from 0 to 1024
[  189.359120][ T5229] hfsplus: bad catalog entry type
[  189.441993][ T8097] loop5: detected capacity change from 0 to 64
[  190.012128][ T8114] loop5: detected capacity change from 0 to 64
[  190.155487][ T2958] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  190.166544][   T29] audit: type=1800 audit(1726350452.376:31): pid=8114 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1083" name="bus" dev="loop5" ino=21 res=0 errno=0
[  190.250928][ T8114] hfs: request for non-existent node 237 in B*Tree
[  190.257745][ T8114] hfs: request for non-existent node 237 in B*Tree
[  190.386385][ T2958] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  190.435290][ T2977] hfs: request for non-existent node 237 in B*Tree
[  190.459807][ T2977] hfs: request for non-existent node 237 in B*Tree
[  190.638632][ T2958] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  190.700962][ T8125] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1088'.
[  190.872980][ T2958] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  190.965949][ T8109] loop4: detected capacity change from 0 to 32768
[  190.976999][ T8109] XFS: ikeep mount option is deprecated.
[  191.110151][ T8109] XFS (loop4): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  191.159721][   T46] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  191.256077][ T2958] bridge_slave_1: left allmulticast mode
[  191.279587][ T2958] bridge_slave_1: left promiscuous mode
[  191.285433][ T2958] bridge0: port 2(bridge_slave_1) entered disabled state
[  191.301173][ T5250] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  191.331067][ T5250] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  191.349704][ T5250] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  191.359847][   T46] usb 6-1: Using ep0 maxpacket: 8
[  191.365693][ T5250] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  191.369983][ T8109] XFS (loop4): Ending clean mount
[  191.390570][ T5250] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  191.399954][ T5250] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  191.433119][ T8109] XFS (loop4): Quotacheck needed: Please wait.
[  191.441051][   T46] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  191.470889][ T2958] bridge_slave_0: left allmulticast mode
[  191.479859][   T46] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  191.500248][ T2958] bridge_slave_0: left promiscuous mode
[  191.506049][ T2958] bridge0: port 1(bridge_slave_0) entered disabled state
[  191.523658][   T46] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  191.550614][   T46] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  191.604004][   T46] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  191.622390][ T8109] XFS (loop4): Quotacheck: Done.
[  191.625071][   T46] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  191.886644][   T46] usb 6-1: GET_CAPABILITIES returned 0
[  191.900084][   T46] usbtmc 6-1:16.0: can't read capabilities
[  191.972047][ T5232] XFS (loop4): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  192.139790][ T5379] usb 6-1: USB disconnect, device number 4
[  192.656334][ T2958] bond0 (unregistering): left allmulticast mode
[  192.662897][ T2958] bond_slave_0: left allmulticast mode
[  192.679095][ T2958] bond_slave_1: left allmulticast mode
[  192.691161][ T2958] bond0 (unregistering): left promiscuous mode
[  192.704030][ T2958] bond_slave_0: left promiscuous mode
[  192.718883][ T2958] bond_slave_1: left promiscuous mode
[  192.778404][ T8162] loop5: detected capacity change from 0 to 128
[  192.796573][ T2958] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  192.801431][ T8162] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  192.822658][ T8162] ext4 filesystem being mounted at /98/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  192.833818][ T2958] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  192.850764][ T2958] bond0 (unregistering): Released all slaves
[  192.876307][ T8162] EXT4-fs warning (device loop5): verify_group_input:137: Cannot add at group 9 (only 1 groups)
[  192.976438][ T6199] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  193.047992][ T8144] wlan0 speed is unknown, defaulting to 1000
[  193.175732][ T8168] program syz.5.1106 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  193.295383][ T8166] syz_tun: refused to change device tx_queue_len
[  193.310509][ T8166] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  193.461296][ T5237] Bluetooth: hci4: command tx timeout
[  193.528797][ T8174] binder: 8173:8174 ioctl c018620c 200005c0 returned -1
[  193.795883][ T1264] ieee802154 phy1 wpan1: encryption failed: -22
[  193.886107][ T2958] hsr_slave_0: left promiscuous mode
[  193.904241][ T2958] hsr_slave_1: left promiscuous mode
[  193.917524][ T2958] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  193.948653][ T2958] batman_adv: batadv0: Removing interface: batadv_slave_0
[  193.991444][ T2958] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  193.998865][ T2958] batman_adv: batadv0: Removing interface: batadv_slave_1
[  194.107846][ T2958] net veth1_virt_wifi virt_wifi0: left promiscuous mode
[  194.132925][ T2958] veth1_macvtap: left promiscuous mode
[  194.146846][ T2958] veth0_macvtap: left promiscuous mode
[  194.152662][ T2958] veth1_vlan: left promiscuous mode
[  194.158099][ T2958] veth0_vlan: left promiscuous mode
[  194.563689][ T2958] team0 (unregistering): Port device macvlan3 removed
[  195.227058][ T8202] loop4: detected capacity change from 0 to 32768
[  195.279078][ T8202] XFS (loop4): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  195.426653][ T8202] XFS (loop4): Ending clean mount
[  195.444888][ T2958] team0 (unregistering): Port device team_slave_1 removed
[  195.460022][ T8202] XFS (loop4): Quotacheck needed: Please wait.
[  195.537596][ T8202] XFS (loop4): Quotacheck: Done.
[  195.547494][ T5245] Bluetooth: hci4: command tx timeout
[  195.563407][ T2958] team0 (unregistering): Port device team_slave_0 removed
[  195.709931][ T5232] XFS (loop4): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  195.869660][   T54] Bluetooth: hci3: command 0x0406 tx timeout
[  195.869781][ T5241] Bluetooth: hci0: command 0x0406 tx timeout
[  195.875816][ T5245] Bluetooth: hci5: command 0x0406 tx timeout
[  196.517137][ T8200] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  196.547378][ T8200] macvtap1: entered promiscuous mode
[  196.568921][ T8200] macvtap1: entered allmulticast mode
[  196.577789][ T8200] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  196.853948][ T5237] Bluetooth: hci2: unexpected event 0x05 length: 12 > 4
[  196.985937][ T8144] chnl_net:caif_netlink_parms(): no params data found
[  197.334856][ T2958] IPVS: stop unused estimator thread 0...
[  197.468241][ T8144] bridge0: port 1(bridge_slave_0) entered blocking state
[  197.481656][ T8144] bridge0: port 1(bridge_slave_0) entered disabled state
[  197.499093][ T8144] bridge_slave_0: entered allmulticast mode
[  197.508592][ T8144] bridge_slave_0: entered promiscuous mode
[  197.522837][ T8144] bridge0: port 2(bridge_slave_1) entered blocking state
[  197.530277][ T8144] bridge0: port 2(bridge_slave_1) entered disabled state
[  197.537546][ T8144] bridge_slave_1: entered allmulticast mode
[  197.585501][ T8144] bridge_slave_1: entered promiscuous mode
[  197.640527][ T5237] Bluetooth: hci4: command tx timeout
[  197.817367][ T8144] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  197.884915][ T8144] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  197.913987][ T8224] loop1: detected capacity change from 0 to 32768
[  197.982981][ T8266] netlink: 'syz.5.1142': attribute type 25 has an invalid length.
[  197.998595][ T8266] netlink: 'syz.5.1142': attribute type 7 has an invalid length.
[  198.025608][ T8144] team0: Port device team_slave_0 added
[  198.081312][ T8144] team0: Port device team_slave_1 added
[  198.227312][ T8272] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  198.302731][ T8144] batman_adv: batadv0: Adding interface: batadv_slave_0
[  198.348014][ T8144] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  198.419600][ T8144] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  198.468314][ T8144] batman_adv: batadv0: Adding interface: batadv_slave_1
[  198.489624][ T8144] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  198.552170][ T8144] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  198.897091][ T8144] hsr_slave_0: entered promiscuous mode
[  198.960517][ T8144] hsr_slave_1: entered promiscuous mode
[  198.985167][ T8144] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  199.017739][ T8144] Cannot create hsr debugfs directory
[  199.030742][ T8299] netlink: 180 bytes leftover after parsing attributes in process `syz.3.1161'.
[  199.254806][ T8305] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  199.300633][ T8305] batman_adv: batadv0: Removing interface: batadv_slave_0
[  199.333953][ T8305] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  199.349735][ T8305] batman_adv: batadv0: Removing interface: batadv_slave_1
[  199.419445][ T8316] loop1: detected capacity change from 0 to 256
[  199.470185][ T8316] exFAT-fs (loop1): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  199.699957][ T4618] Bluetooth: hci4: command 0x0419 tx timeout
[  199.832096][ T8325] loop1: detected capacity change from 0 to 1024
[  199.881039][ T8325] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  200.043197][ T5228] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  200.470631][ T8344] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1179'.
[  200.517545][ T8144] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  200.556039][ T8144] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  200.610671][ T8144] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  200.670752][ T8144] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  200.699915][ T5379] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  200.896748][ T5379] usb 2-1: Using ep0 maxpacket: 32
[  200.912560][ T5379] usb 2-1: config 0 has an invalid interface number: 126 but max is 0
[  200.939965][ T5379] usb 2-1: config 0 has no interface number 0
[  200.948483][ T8144] 8021q: adding VLAN 0 to HW filter on device bond0
[  200.958539][ T5379] usb 2-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023
[  200.971764][   T46] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  200.989699][ T5379] usb 2-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8
[  201.020550][ T5379] usb 2-1: config 0 interface 126 has no altsetting 0
[  201.032864][ T8144] 8021q: adding VLAN 0 to HW filter on device team0
[  201.056070][ T5379] usb 2-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c
[  201.080804][ T5379] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  201.101677][   T63] bridge0: port 1(bridge_slave_0) entered blocking state
[  201.108856][   T63] bridge0: port 1(bridge_slave_0) entered forwarding state
[  201.109167][ T5379] usb 2-1: Product: syz
[  201.132462][ T5379] usb 2-1: Manufacturer: syz
[  201.137085][ T5379] usb 2-1: SerialNumber: syz
[  201.163555][ T5379] usb 2-1: config 0 descriptor??
[  201.180245][   T63] bridge0: port 2(bridge_slave_1) entered blocking state
[  201.187487][   T63] bridge0: port 2(bridge_slave_1) entered forwarding state
[  201.200453][ T8345] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  201.207733][ T8345] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  201.220277][   T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  201.238990][   T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  201.261445][   T46] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  201.330406][   T46] usb 4-1: New USB device found, idVendor=258a, idProduct=0036, bcdDevice= 0.00
[  201.362908][   T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  201.398465][   T46] usb 4-1: config 0 descriptor??
[  201.780299][ T5250] Bluetooth: hci4: command 0x0419 tx timeout
[  201.802075][ T5379] ir_usb 2-1:0.126: IR Dongle converter detected
[  201.848285][   T46] glorious 0003:258A:0036.000B: unknown main item tag 0x0
[  201.907514][   T46] glorious 0003:258A:0036.000B: hidraw0: USB HID v0.00 Device [Glorious Model O] on usb-dummy_hcd.3-1/input0
[  202.015252][ T5379] usb 2-1: IR Dongle converter now attached to ttyUSB0
[  202.032377][ T8144] 8021q: adding VLAN 0 to HW filter on device batadv0
[  202.090661][    T8] usb 4-1: USB disconnect, device number 5
[  202.190969][ T8380] tun0: tun_chr_ioctl cmd 1074025680
[  202.289914][ T5379] usb 2-1: USB disconnect, device number 6
[  202.296904][ T8144] veth0_vlan: entered promiscuous mode
[  202.321276][ T5379] ir-usb ttyUSB0: IR Dongle converter now disconnected from ttyUSB0
[  202.346174][ T8144] veth1_vlan: entered promiscuous mode
[  202.351525][ T5379] ir_usb 2-1:0.126: device disconnected
[  202.503112][ T8144] veth0_macvtap: entered promiscuous mode
[  202.545274][ T8144] veth1_macvtap: entered promiscuous mode
[  202.630698][ T8144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  202.666300][ T8144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  202.706905][ T8144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  202.738174][ T8144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  202.784171][ T8144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  202.829643][ T8144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  202.859660][ T8144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  202.919789][ T8144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  202.963618][ T8144] batman_adv: batadv0: Interface activated: batadv_slave_0
[  203.041750][ T8144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  203.055900][ T8376] loop5: detected capacity change from 0 to 32768
[  203.073216][ T8144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  203.111987][ T8144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  203.159583][ T8144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  203.200155][ T8144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  203.238941][ T8144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  203.265169][ T8144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  203.299090][ T8144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  203.332348][ T8144] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  203.353160][ T8144] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  203.402700][ T8144] batman_adv: batadv0: Interface activated: batadv_slave_1
[  203.436213][ T8144] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  203.459194][ T8144] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  203.472179][ T8144] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  203.491130][ T8144] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  203.502124][ T8382] loop4: detected capacity change from 0 to 32768
[  203.527693][ T8382] 
[  203.527693][ T8382]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  203.527693][ T8382] 
[  203.574651][ T8382] 
[  203.574651][ T8382]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  203.574651][ T8382] 
[  203.611321][ T8382] 
[  203.611321][ T8382]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  203.611321][ T8382] 
[  203.645154][ T8382] 
[  203.645154][ T8382]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  203.645154][ T8382] 
[  203.666217][ T8400] 
[  203.666217][ T8400]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  203.666217][ T8400] 
[  203.686618][ T8382] 
[  203.686618][ T8382]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  203.686618][ T8382] 
[  203.747331][  T111] 
[  203.747331][  T111]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  203.747331][  T111] 
[  203.766341][ T8402] bridge0: port 2(bridge_slave_1) entered blocking state
[  203.773570][ T8402] bridge0: port 2(bridge_slave_1) entered listening state
[  203.781093][ T8402] bridge0: port 1(bridge_slave_0) entered blocking state
[  203.788272][ T8402] bridge0: port 1(bridge_slave_0) entered listening state
[  203.799658][   T25] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  203.820883][ T8402] bridge0: entered promiscuous mode
[  203.835026][ T8400] 
[  203.835026][ T8400]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  203.835026][ T8400] 
[  203.857222][   T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  203.866575][   T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  203.885931][ T8400] jfs: Unrecognized mount option "ÿÿÿÿÿÿÿÿÿÿ¤	Z*¬ð¿Ë m˜.Dc�8�'ñ@Ø×C9Gö9œùõ?À9†Så¦{»1Ÿ¿JÆöÌÕ¬¿á5æÒÔŒöÀ‰Ýöqqÿ³±Yˆç³”ÅÚóá" or missing value
[  203.965594][ T8382] 
[  203.965594][ T8382]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  203.965594][ T8382] 
[  203.988372][   T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  204.002331][   T25] usb 1-1: Using ep0 maxpacket: 8
[  204.040051][ T8382] 
[  204.040051][ T8382]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  204.040051][ T8382] 
[  204.044695][   T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  204.059186][   T25] usb 1-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4
[  204.083245][ T8382] 
[  204.083245][ T8382]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  204.083245][ T8382] 
[  204.099152][   T25] usb 1-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3
[  204.130097][ T8382] 
[  204.130097][ T8382]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  204.130097][ T8382] 
[  204.130858][   T25] usb 1-1: Product: syz
[  204.155445][   T25] usb 1-1: Manufacturer: syz
[  204.189966][   T25] usb 1-1: SerialNumber: syz
[  204.202235][   T25] usb 1-1: config 0 descriptor??
[  204.203941][  T112] 
[  204.203941][  T112]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  204.203941][  T112] 
[  204.244005][   T25] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd
[  204.349659][ T5232] 
[  204.349659][ T5232]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  204.349659][ T5232] 
[  204.430114][ T5232] 
[  204.430114][ T5232]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  204.430114][ T5232] 
[  204.587300][ T8397] loop1: detected capacity change from 0 to 32768
[  204.692503][ T8397] XFS (loop1): Mounting V5 Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6
[  204.875939][   T25] input: gspca_zc3xx as /devices/platform/dummy_hcd.0/usb1/1-1/input/input16
[  204.998997][ T8397] XFS (loop1): Ending clean mount
[  205.079687][ T8423] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1210'.
[  205.126237][ T1162] usb 1-1: USB disconnect, device number 6
[  205.241122][ T5228] XFS (loop1): Unmounting Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6
[  205.369646][   T46] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  205.389794][ T8433] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check.
[  205.589698][   T46] usb 3-1: Using ep0 maxpacket: 8
[  205.602695][   T46] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  205.627159][   T46] usb 3-1: config 0 has no interface number 0
[  205.649887][   T46] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  205.687897][   T46] usb 3-1: config 0 interface 1 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  205.719715][   T46] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  205.747632][   T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  205.814132][   T46] usb 3-1: config 0 descriptor??
[  205.841104][   T46] iowarrior 3-1:0.1: no interrupt-in endpoint found
[  206.069060][    T8] usb 3-1: USB disconnect, device number 6
[  206.357977][ T8457] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1224'.
[  206.379139][ T8457] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1224'.
[  206.741247][ T8469] bridge0: port 2(bridge_slave_1) entered disabled state
[  206.875862][   T29] audit: type=1326 audit(1726350469.106:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8476 comm="syz.2.1232" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f221f17def9 code=0x0
[  207.077095][ T8481] option changes via remount are deprecated (pid=8480 comm=syz.0.1235)
[  207.232698][ T8494] loop5: detected capacity change from 0 to 1024
[  207.247039][ T8491] tun0: tun_chr_ioctl cmd 1074025675
[  207.257763][ T8491] tun0: persist disabled
[  207.263923][ T8494] EXT4-fs (loop5): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  207.284245][ T8494] EXT4-fs (loop5): revision level too high, forcing read-only mode
[  207.318330][ T8494] EXT4-fs (loop5): orphan cleanup on readonly fs
[  207.345250][ T8494] EXT4-fs error (device loop5): ext4_free_blocks:6590: comm syz.5.1240: Freeing blocks not in datazone - block = 0, count = 4096
[  207.377265][ T8494] EXT4-fs (loop5): 1 orphan inode deleted
[  207.406984][ T8494] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  207.529223][ T6199] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  207.653138][ T8511] loop1: detected capacity change from 0 to 128
[  207.717326][ T8511] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  208.365354][ T8529] loop2: detected capacity change from 0 to 512
[  208.405300][ T8529] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found
[  208.427398][ T8529] UDF-fs: Scanning with blocksize 512 failed
[  208.440802][ T8532] netlink: 'syz.4.1258': attribute type 1 has an invalid length.
[  208.479306][ T8529] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found
[  208.519594][ T8529] UDF-fs: Scanning with blocksize 1024 failed
[  208.562028][ T8529] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found
[  208.612412][ T8529] UDF-fs: Scanning with blocksize 2048 failed
[  208.626887][ T8529] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  208.658525][ T8529] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  208.957973][ T8544] loop2: detected capacity change from 0 to 64
[  209.401836][ T8553] block nbd4: shutting down sockets
[  209.507911][ T8561] binder: BC_ATTEMPT_ACQUIRE not supported
[  209.533559][ T8561] binder: 8556:8561 ioctl c0306201 20000480 returned -22
[  209.809870][ T8570] netlink: 'syz.0.1274': attribute type 1 has an invalid length.
[  209.847486][ T8570] netlink: 'syz.0.1274': attribute type 3 has an invalid length.
[  209.901724][ T8570] netlink: 216 bytes leftover after parsing attributes in process `syz.0.1274'.
[  209.953961][ T8570] NCSI netlink: No device for ifindex 813332851
[  210.649531][    C1] sched: RT throttling activated
[  210.938405][ T8566] loop1: detected capacity change from 0 to 131072
[  210.960669][ T8566] F2FS-fs (loop1): invalid crc value
[  211.009707][ T8566] F2FS-fs (loop1): Found nat_bits in checkpoint
[  211.083842][   T29] audit: type=1326 audit(1726350473.316:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8597 comm="syz.3.1285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70ef77def9 code=0x7ffc0000
[  211.117745][ T8566] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  211.187578][ T8566] F2FS-fs (loop1): access invalid blkaddr:150994944
[  211.194863][ T8566] CPU: 1 UID: 0 PID: 8566 Comm: syz.1.1270 Not tainted 6.11.0-rc7-syzkaller-00149-g0babf683783d #0
[  211.205553][ T8566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  211.215624][ T8566] Call Trace:
[  211.218917][ T8566]  <TASK>
[  211.221863][ T8566]  dump_stack_lvl+0x241/0x360
[  211.226577][ T8566]  ? __pfx_dump_stack_lvl+0x10/0x10
[  211.231802][ T8566]  ? __pfx_f2fs_get_dnode_of_data+0x10/0x10
[  211.237737][ T8566]  ? __pfx_f2fs_lookup_read_extent_cache_block+0x10/0x10
[  211.244783][ T8566]  ? __filemap_get_folio+0x946/0xc10
[  211.250203][ T8566]  __f2fs_is_valid_blkaddr+0xe16/0x1460
[  211.255803][ T8566]  f2fs_get_read_data_page+0x410/0x750
[  211.261305][ T8566]  ? __pfx_f2fs_get_read_data_page+0x10/0x10
[  211.267333][ T8566]  ? srso_alias_return_thunk+0x5/0xfbef5
[  211.273010][ T8566]  ? srso_alias_return_thunk+0x5/0xfbef5
[  211.278679][ T8566]  f2fs_find_data_page+0x92/0x370
[  211.283744][ T8566]  __f2fs_find_entry+0x619/0xcc0
[  211.288739][ T8566]  ? srso_alias_return_thunk+0x5/0xfbef5
[  211.294405][ T8566]  ? f2fs_prepare_lookup+0x487/0x590
[  211.299740][ T8566]  ? __pfx___f2fs_find_entry+0x10/0x10
[  211.305227][ T8566]  ? d_alloc_parallel+0x14a8/0x1600
[  211.310451][ T8566]  f2fs_lookup+0x310/0xa60
[  211.314879][ T8566]  ? __pfx_f2fs_lookup+0x10/0x10
[  211.319823][ T8566]  ? __pfx_d_alloc_parallel+0x10/0x10
[  211.325212][ T8566]  ? srso_alias_return_thunk+0x5/0xfbef5
[  211.330861][ T8566]  ? __init_waitqueue_head+0xae/0x150
[  211.336257][ T8566]  __lookup_slow+0x28e/0x3f0
[  211.340877][ T8566]  ? __pfx___lookup_slow+0x10/0x10
[  211.346018][ T8566]  ? srso_alias_return_thunk+0x5/0xfbef5
[  211.351668][ T8566]  ? try_to_unlazy+0x35c/0x5b0
[  211.356452][ T8566]  ? srso_alias_return_thunk+0x5/0xfbef5
[  211.362107][ T8566]  lookup_slow+0x53/0x70
[  211.366354][ T8566]  walk_component+0x2e1/0x410
[  211.371050][ T8566]  path_lookupat+0x16f/0x450
[  211.375669][ T8566]  filename_lookup+0x256/0x610
[  211.380457][ T8566]  ? __pfx_filename_lookup+0x10/0x10
[  211.385789][ T8566]  ? srso_alias_return_thunk+0x5/0xfbef5
[  211.391441][ T8566]  ? strncpy_from_user+0x1a4/0x2e0
[  211.396584][ T8566]  ? getname_flags+0x1e3/0x540
[  211.401371][ T8566]  user_path_at+0x3a/0x60
[  211.405706][ T8566]  bpf_obj_get_user+0xb9/0x4d0
[  211.410527][ T8566]  ? __pfx_bpf_obj_get_user+0x10/0x10
[  211.415935][ T8566]  ? srso_alias_return_thunk+0x5/0xfbef5
[  211.421593][ T8566]  __sys_bpf+0x639/0x810
[  211.425852][ T8566]  ? __pfx___sys_bpf+0x10/0x10
[  211.430730][ T8566]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  211.436729][ T8566]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  211.443074][ T8566]  ? do_syscall_64+0x100/0x230
[  211.447854][ T8566]  __x64_sys_bpf+0x7c/0x90
[  211.452284][ T8566]  do_syscall_64+0xf3/0x230
[  211.456801][ T8566]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  211.462705][ T8566] RIP: 0033:0x7ffb4997def9
[  211.467121][ T8566] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  211.486733][ T8566] RSP: 002b:00007ffb4a742038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  211.495157][ T8566] RAX: ffffffffffffffda RBX: 00007ffb49b35f80 RCX: 00007ffb4997def9
[  211.503137][ T8566] RDX: 0000000000000018 RSI: 00000000200004c0 RDI: 0000000000000007
[  211.511118][ T8566] RBP: 00007ffb499f0b76 R08: 0000000000000000 R09: 0000000000000000
[  211.519087][ T8566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  211.527063][ T8566] R13: 0000000000000000 R14: 00007ffb49b35f80 R15: 00007ffde579ebf8
[  211.535058][ T8566]  </TASK>
[  211.640875][   T29] audit: type=1326 audit(1726350473.346:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8597 comm="syz.3.1285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70ef77def9 code=0x7ffc0000
[  211.765008][   T29] audit: type=1326 audit(1726350473.396:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8597 comm="syz.3.1285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f70ef77def9 code=0x7ffc0000
[  211.834491][   T29] audit: type=1326 audit(1726350473.396:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8597 comm="syz.3.1285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70ef77def9 code=0x7ffc0000
[  211.926815][   T29] audit: type=1326 audit(1726350473.396:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8597 comm="syz.3.1285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70ef77def9 code=0x7ffc0000
[  212.002813][   T29] audit: type=1326 audit(1726350473.396:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8597 comm="syz.3.1285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f70ef77def9 code=0x7ffc0000
[  212.095590][   T29] audit: type=1326 audit(1726350473.396:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8597 comm="syz.3.1285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70ef77def9 code=0x7ffc0000
[  212.179902][   T29] audit: type=1326 audit(1726350473.396:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8597 comm="syz.3.1285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70ef77def9 code=0x7ffc0000
[  212.270724][   T29] audit: type=1326 audit(1726350473.406:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8597 comm="syz.3.1285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f70ef77def9 code=0x7ffc0000
[  212.356974][   T29] audit: type=1326 audit(1726350473.406:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8597 comm="syz.3.1285" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f70ef77def9 code=0x7ffc0000
[  212.429299][ T8625] dvmrp0: entered allmulticast mode
[  212.480401][ T8625] dvmrp0: left allmulticast mode
[  213.256163][ T8645] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[  213.486297][ T8655] netlink: 'syz.5.1312': attribute type 2 has an invalid length.
[  213.520366][ T8655] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check.
[  213.714976][ T8662] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1292'.
[  213.828442][ T8663] gretap0: entered promiscuous mode
[  213.862996][ T8663] erspan0: entered promiscuous mode
[  214.317024][ T8681] ieee802154 phy1 wpan1: encryption failed: -90
[  214.451203][ T8648] loop2: detected capacity change from 0 to 32768
[  214.483345][ T8648] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1308 (8648)
[  214.552147][ T8648] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  214.595695][ T8648] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  214.627016][ T8648] BTRFS info (device loop2): using free-space-tree
[  215.086730][ T8144] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  215.149707][   T46] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  215.394790][   T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  215.413667][   T46] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  215.440399][   T46] usb 2-1: New USB device found, idVendor=258a, idProduct=6a88, bcdDevice= 0.00
[  215.471837][   T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  215.508219][   T46] usb 2-1: config 0 descriptor??
[  215.792906][ T8747] loop2: detected capacity change from 0 to 256
[  215.811445][ T8747] exfat: Deprecated parameter 'namecase'
[  215.843366][ T8747] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x2eabf3fa, utbl_chksum : 0xe619d30d)
[  215.938847][   T46] itetech 0003:258A:6A88.000C: item fetching failed at offset 0/1
[  215.957608][ T8752] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1349'.
[  215.967306][   T46] itetech 0003:258A:6A88.000C: probe with driver itetech failed with error -22
[  216.224492][ T5295] usb 2-1: USB disconnect, device number 7
[  216.591328][ T1162] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  216.749912][ T2958] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  216.804251][ T1162] usb 6-1: Using ep0 maxpacket: 8
[  216.831342][ T1162] usb 6-1: config 135 has an invalid interface number: 230 but max is 0
[  216.858230][ T1162] usb 6-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config
[  216.875628][ T1162] usb 6-1: config 135 has no interface number 0
[  216.892645][ T1162] usb 6-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  216.916877][ T1162] usb 6-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a
[  216.938351][ T1162] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  216.958110][ T2958] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  216.958795][ T1162] usb 6-1: Product: syz
[  217.003607][ T1162] usb 6-1: Manufacturer: syz
[  217.021043][ T1162] usb 6-1: SerialNumber: syz
[  217.046312][ T1162] usb 6-1: Found UVC 0.00 device syz (18ec:3288)
[  217.063678][ T1162] usb 6-1: No valid video chain found.
[  217.189368][ T2958] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  217.363458][ T1162] usb 6-1: USB disconnect, device number 5
[  217.529065][ T2958] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  217.650270][ T8782] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1365'.
[  217.790452][ T4618] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  217.801005][ T4618] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  217.808907][ T4618] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  217.821954][ T4618] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  217.830140][ T4618] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  217.840109][ T4618] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  217.916589][ T2958] bridge_slave_1: left allmulticast mode
[  217.958051][ T2958] bridge_slave_1: left promiscuous mode
[  217.965881][ T2958] bridge0: port 2(bridge_slave_1) entered disabled state
[  217.997450][ T2958] bridge_slave_0: left allmulticast mode
[  218.009724][ T2958] bridge_slave_0: left promiscuous mode
[  218.015494][ T2958] bridge0: port 1(bridge_slave_0) entered disabled state
[  218.107554][ T8794] loop5: detected capacity change from 0 to 1024
[  218.188174][ T8794] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  218.474249][ T6199] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  218.648621][ T8812] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1377'.
[  219.138357][ T2958] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  219.152094][ T2958] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  219.167679][ T2958] bond0 (unregistering): Released all slaves
[  219.215063][ T8812] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1377'.
[  219.229910][ T8783] wlan0 speed is unknown, defaulting to 1000
[  219.389865][    C1] bridge0: port 1(bridge_slave_0) entered learning state
[  219.397953][    C1] bridge0: port 2(bridge_slave_1) entered learning state
[  219.516122][ T8822] loop5: detected capacity change from 0 to 1024
[  219.747881][ T8836] loop4: detected capacity change from 0 to 24
[  219.767147][ T8836] MTD: Attempt to mount non-MTD device "/dev/loop4"
[  219.809982][ T8836] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  219.941128][ T5250] Bluetooth: hci4: command tx timeout
[  220.035677][ T8843] loop5: detected capacity change from 0 to 256
[  220.071560][ T8843] MINIX-fs: mounting file system with errors, running fsck is recommended
[  220.106868][ T8783] chnl_net:caif_netlink_parms(): no params data found
[  220.118561][ T8843] Trying to free block not in datazone
[  220.148013][ T8843] Trying to free block not in datazone
[  220.269092][ T2958] hsr_slave_0: left promiscuous mode
[  220.320590][ T2958] hsr_slave_1: left promiscuous mode
[  220.359017][ T2958] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  220.379156][ T2958] batman_adv: batadv0: Removing interface: batadv_slave_0
[  220.405678][ T2958] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  220.419063][ T2958] batman_adv: batadv0: Removing interface: batadv_slave_1
[  220.487743][ T2958] veth1_macvtap: left promiscuous mode
[  220.512711][ T2958] veth0_macvtap: left promiscuous mode
[  220.525934][ T2958] veth1_vlan: left promiscuous mode
[  220.531825][ T2958] veth0_vlan: left promiscuous mode
[  220.738559][ T8841] loop1: detected capacity change from 0 to 32768
[  220.776409][ T8841] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  220.844043][ T8841] XFS (loop1): Ending clean mount
[  221.036168][ T5228] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  221.071098][   T46] XFS (loop1): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_bnobt block 0x8 
[  221.085046][   T46] XFS (loop1): Unmount and run xfs_repair
[  221.091021][   T46] XFS (loop1): First 128 bytes of corrupted metadata buffer:
[  221.099482][   T46] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff  AB3B............
[  221.108931][   T46] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10  ................
[  221.121118][   T46] 00000020: a2 f8 2a ab 77 f8 42 86 af d4 a8 f7 00 a7 4b ab  ..*.w.B.......K.
[  221.130232][   T46] 00000030: 00 00 00 00 5b fd 4f dd 00 00 00 05 00 00 00 01  ....[.O.........
[  221.140598][   T46] 00000040: 00 00 02 36 00 00 0d ca 00 00 00 00 00 00 00 00  ...6............
[  221.149833][   T46] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  221.158954][   T46] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  221.167971][   T46] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  221.179050][ T1162] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x8 len 8 error 74
[  221.234182][ T1162] XFS (loop1): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x663/0xad0 (fs/xfs/xfs_trans_buf.c:296).  Shutting down filesystem.
[  221.252688][ T1162] XFS (loop1): Please unmount the filesystem and rectify the problem(s)
[  221.647551][ T8877] loop1: detected capacity change from 0 to 1024
[  221.668825][ T8877] hfsplus: catalog searching failed
[  221.732959][ T2958] team0 (unregistering): Port device team_slave_1 removed
[  221.803362][ T2958] team0 (unregistering): Port device team_slave_0 removed
[  222.029989][ T5250] Bluetooth: hci4: command tx timeout
[  222.384266][ T8871] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1400'.
[  222.411966][ T8871] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1400'.
[  222.466168][ T8871] bridge1: the hash_elasticity option has been deprecated and is always 16
[  222.499618][ T8879] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1402'.
[  222.848494][ T8899] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  222.876379][ T8783] bridge0: port 1(bridge_slave_0) entered blocking state
[  222.897904][ T8783] bridge0: port 1(bridge_slave_0) entered disabled state
[  222.914217][ T8783] bridge_slave_0: entered allmulticast mode
[  222.922458][ T8783] bridge_slave_0: entered promiscuous mode
[  222.943771][ T8783] bridge0: port 2(bridge_slave_1) entered blocking state
[  222.972884][ T8783] bridge0: port 2(bridge_slave_1) entered disabled state
[  222.984855][ T8783] bridge_slave_1: entered allmulticast mode
[  223.027445][ T8783] bridge_slave_1: entered promiscuous mode
[  223.049714][   T25] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  223.194513][ T8783] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  223.218042][ T8783] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  223.249827][   T25] usb 2-1: Using ep0 maxpacket: 8
[  223.270745][   T25] usb 2-1: config 0 has an invalid interface number: 11 but max is 0
[  223.291434][   T25] usb 2-1: config 0 has no interface number 0
[  223.313819][   T25] usb 2-1: New USB device found, idVendor=06f8, idProduct=e000, bcdDevice=9d.0f
[  223.328700][   T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  223.336931][   T25] usb 2-1: Product: syz
[  223.341605][   T25] usb 2-1: Manufacturer: syz
[  223.347594][   T25] usb 2-1: SerialNumber: syz
[  223.360161][   T25] usb 2-1: config 0 descriptor??
[  223.405403][ T8783] team0: Port device team_slave_0 added
[  223.460035][ T8783] team0: Port device team_slave_1 added
[  223.608105][ T8783] batman_adv: batadv0: Adding interface: batadv_slave_0
[  223.631069][ T8783] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  223.664990][   T46] usb 2-1: USB disconnect, device number 8
[  223.712947][ T8783] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  223.746835][ T8783] batman_adv: batadv0: Adding interface: batadv_slave_1
[  223.780195][ T8783] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  223.853095][ T8783] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  224.068816][ T8783] hsr_slave_0: entered promiscuous mode
[  224.092702][ T8783] hsr_slave_1: entered promiscuous mode
[  224.114991][ T5250] Bluetooth: hci4: command tx timeout
[  224.115041][ T8783] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  224.167794][ T8783] Cannot create hsr debugfs directory
[  224.347968][ T8911] loop5: detected capacity change from 0 to 32768
[  224.394231][ T8911] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1416 (8911)
[  224.459240][ T8911] BTRFS info (device loop5): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  224.479740][ T8911] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm
[  224.530025][ T8911] BTRFS info (device loop5): using free-space-tree
[  224.781710][ T8951] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1426'.
[  224.852176][ T8953] loop1: detected capacity change from 0 to 512
[  224.877563][   T29] audit: type=1800 audit(1726350487.106:43): pid=8911 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1416" name="file1" dev="loop5" ino=260 res=0 errno=0
[  225.011264][ T8953] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  225.082385][ T8953] ext4 filesystem being mounted at /246/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  225.255445][ T6199] BTRFS info (device loop5): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  225.277596][ T5228] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  225.501568][ T8975] input: syz1 as /devices/virtual/input/input17
[  225.681181][ T8977] loop1: detected capacity change from 0 to 1024
[  225.788028][ T8783] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  225.876719][ T8783] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  225.936218][ T8783] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  225.993482][ T8783] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  226.180353][ T5250] Bluetooth: hci4: command tx timeout
[  226.321623][ T8992] wlan0 speed is unknown, defaulting to 1000
[  226.626914][ T8783] 8021q: adding VLAN 0 to HW filter on device bond0
[  226.783400][ T8783] 8021q: adding VLAN 0 to HW filter on device team0
[  227.071812][ T2977] bridge0: port 1(bridge_slave_0) entered blocking state
[  227.080659][ T2977] bridge0: port 1(bridge_slave_0) entered forwarding state
[  227.163176][ T2977] bridge0: port 2(bridge_slave_1) entered blocking state
[  227.170418][ T2977] bridge0: port 2(bridge_slave_1) entered forwarding state
[  227.409116][   T46] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  227.639783][   T46] usb 1-1: Using ep0 maxpacket: 16
[  227.648157][   T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  227.680536][   T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  227.719728][   T46] usb 1-1: New USB device found, idVendor=1532, idProduct=010d, bcdDevice= 0.00
[  227.739081][   T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  227.790436][   T46] usb 1-1: config 0 descriptor??
[  227.965535][ T8783] 8021q: adding VLAN 0 to HW filter on device batadv0
[  228.195930][ T8783] veth0_vlan: entered promiscuous mode
[  228.218665][   T46] razer 0003:1532:010D.000D: unknown main item tag 0x0
[  228.247628][   T46] razer 0003:1532:010D.000D: unknown main item tag 0x0
[  228.267839][   T46] razer 0003:1532:010D.000D: unknown main item tag 0x0
[  228.299807][   T46] razer 0003:1532:010D.000D: unknown main item tag 0x0
[  228.314401][ T8783] veth1_vlan: entered promiscuous mode
[  228.321701][   T46] razer 0003:1532:010D.000D: unknown main item tag 0x0
[  228.328580][   T46] razer 0003:1532:010D.000D: unknown main item tag 0x0
[  228.376388][   T46] razer 0003:1532:010D.000D: hidraw0: USB HID v0.00 Device [HID 1532:010d] on usb-dummy_hcd.0-1/input0
[  228.416015][   T46] usb 1-1: USB disconnect, device number 7
[  228.474278][ T8783] veth0_macvtap: entered promiscuous mode
[  228.523785][ T8783] veth1_macvtap: entered promiscuous mode
[  228.611107][ T8783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  228.638839][ T8783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  228.660222][ T8783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  228.674220][ T8783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  228.691847][ T8783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  228.702599][ T8783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  228.712760][ T8783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  228.723410][ T8783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  228.762675][ T8783] batman_adv: batadv0: Interface activated: batadv_slave_0
[  228.787664][ T8783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  228.834102][ T8783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  228.864874][ T8783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  228.894772][ T8783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  228.934000][ T8783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  228.946773][ T9060] loop5: detected capacity change from 0 to 512
[  228.957470][ T8783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  228.957499][ T8783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  228.957520][ T8783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  228.957539][ T8783] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  228.957559][ T8783] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  228.964239][ T8783] batman_adv: batadv0: Interface activated: batadv_slave_1
[  228.978416][ T9060] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem
[  229.037049][ T8783] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  229.066512][ T8783] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  229.092611][ T8783] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  229.107426][ T9060] EXT4-fs (loop5): warning: checktime reached, running e2fsck is recommended
[  229.154175][ T8783] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  229.186274][ T9060] EXT4-fs error (device loop5): ext4_validate_block_bitmap:432: comm syz.5.1473: bg 0: block 18: invalid block bitmap
[  229.219917][   T29] audit: type=1326 audit(1726350491.446:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9067 comm="syz.0.1476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9daff7def9 code=0x7ffc0000
[  229.297501][ T9060] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6551: Corrupt filesystem
[  229.320328][   T29] audit: type=1326 audit(1726350491.446:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9067 comm="syz.0.1476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9daff7def9 code=0x7ffc0000
[  229.342492][    C0] vkms_vblank_simulate: vblank timer overrun
[  229.354727][ T9060] EXT4-fs (loop5): 1 truncate cleaned up
[  229.366002][ T9060] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  229.379994][   T29] audit: type=1326 audit(1726350491.446:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9067 comm="syz.0.1476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9daff7def9 code=0x7ffc0000
[  229.434844][ T9060] ext2 filesystem being mounted at /168/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  229.449667][   T29] audit: type=1326 audit(1726350491.446:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9067 comm="syz.0.1476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9daff7def9 code=0x7ffc0000
[  229.508149][   T29] audit: type=1326 audit(1726350491.446:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9067 comm="syz.0.1476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9daff7def9 code=0x7ffc0000
[  229.544064][ T9060] EXT4-fs error (device loop5): ext4_map_blocks:609: inode #2: block 3: comm syz.5.1473: lblock 0 mapped to illegal pblock 3 (length 1)
[  229.575403][   T29] audit: type=1326 audit(1726350491.446:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9067 comm="syz.0.1476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9daff7def9 code=0x7ffc0000
[  229.634610][   T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  229.651627][   T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  229.664908][   T29] audit: type=1326 audit(1726350491.476:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9067 comm="syz.0.1476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9daff7def9 code=0x7ffc0000
[  229.706892][ T6199] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  229.770634][ T2958] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  229.778482][ T2958] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  229.809125][   T29] audit: type=1326 audit(1726350491.486:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9067 comm="syz.0.1476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9daff74ea7 code=0x7ffc0000
[  229.912892][   T29] audit: type=1326 audit(1726350491.486:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9067 comm="syz.0.1476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9daff19869 code=0x7ffc0000
[  229.956099][ T9048] loop4: detected capacity change from 0 to 32768
[  229.958349][ T9080] sctp: [Deprecated]: syz.3.1482 (pid 9080) Use of int in max_burst socket option.
[  229.958349][ T9080] Use struct sctp_assoc_value instead
[  230.002578][   T29] audit: type=1326 audit(1726350491.486:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9067 comm="syz.0.1476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9daff74ea7 code=0x7ffc0000
[  230.104464][ T9048] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  230.114383][   T29] audit: type=1326 audit(1726350491.486:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9067 comm="syz.0.1476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9daff19869 code=0x7ffc0000
[  230.152743][   T29] audit: type=1326 audit(1726350491.486:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9067 comm="syz.0.1476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9daff74ea7 code=0x7ffc0000
[  230.176681][   T29] audit: type=1326 audit(1726350491.486:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9067 comm="syz.0.1476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9daff19869 code=0x7ffc0000
[  230.209970][   T46] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  230.279771][   T29] audit: type=1326 audit(1726350491.486:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9067 comm="syz.0.1476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9daff74ea7 code=0x7ffc0000
[  230.366055][   T29] audit: type=1326 audit(1726350491.486:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9067 comm="syz.0.1476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9daff19869 code=0x7ffc0000
[  230.381913][ T9048] XFS (loop4): Ending clean mount
[  230.405379][ T9048] XFS (loop4): Quotacheck needed: Please wait.
[  230.450985][   T46] usb 6-1: Using ep0 maxpacket: 8
[  230.466283][   T29] audit: type=1326 audit(1726350491.486:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9067 comm="syz.0.1476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9daff74ea7 code=0x7ffc0000
[  230.479269][   T46] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  230.522683][ T9106] loop2: detected capacity change from 0 to 1024
[  230.554835][   T29] audit: type=1326 audit(1726350491.486:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9067 comm="syz.0.1476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f9daff19869 code=0x7ffc0000
[  230.563507][   T46] usb 6-1: config 0 has no interface number 0
[  230.576910][    C0] vkms_vblank_simulate: vblank timer overrun
[  230.613542][ T9048] XFS (loop4): Quotacheck: Done.
[  230.650245][   T46] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  230.673566][ T9108] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3)
[  230.680618][ T9108] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  230.698810][   T29] audit: type=1326 audit(1726350491.486:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9067 comm="syz.0.1476" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9daff74ea7 code=0x7ffc0000
[  230.726322][ T9106] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  230.745146][   T46] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  230.756316][   T46] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  230.760526][ T9117] sch_tbf: burst 0 is lower than device lo mtu (65550) !
[  230.785823][   T46] usb 6-1: config 0 descriptor??
[  230.797194][   T46] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  230.797745][ T9108] vhci_hcd vhci_hcd.0: Device attached
[  230.893363][ T5232] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  230.906415][ T9118] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(6)
[  230.912943][ T9118] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  230.956595][ T1162] vhci_hcd: vhci_device speed not set
[  230.972525][ T8783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  230.976841][ T9118] vhci_hcd vhci_hcd.0: Device attached
[  231.040330][ T1162] usb 9-1: new full-speed USB device number 2 using vhci_hcd
[  231.059120][   T46] usb 6-1: USB disconnect, device number 6
[  231.076720][   T46] iowarrior 6-1:0.1: I/O-Warror #0 now disconnected
[  231.118222][ T9126] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(11)
[  231.124848][ T9126] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  231.136052][ T9108] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(5)
[  231.142582][ T9108] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  231.154234][ T9126] vhci_hcd vhci_hcd.0: Device attached
[  231.208475][ T9108] vhci_hcd vhci_hcd.0: Device attached
[  231.241049][ T9109] vhci_hcd: connection reset by peer
[  231.249371][ T9127] vhci_hcd: connection closed
[  231.250834][ T9119] vhci_hcd: connection closed
[  231.287374][ T4051] vhci_hcd: stop threads
[  231.331709][ T4051] vhci_hcd: release socket
[  231.349614][ T4051] vhci_hcd: disconnect device
[  231.366584][ T4051] vhci_hcd: stop threads
[  231.371835][ T9125] vhci_hcd: connection closed
[  231.373755][ T4051] vhci_hcd: release socket
[  231.409466][ T4051] vhci_hcd: disconnect device
[  231.415722][ T4051] vhci_hcd: stop threads
[  231.441036][ T4051] vhci_hcd: release socket
[  231.449839][ T4051] vhci_hcd: disconnect device
[  231.459322][ T4051] vhci_hcd: stop threads
[  231.464317][   T25] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  231.481262][ T4051] vhci_hcd: release socket
[  231.496088][ T4051] vhci_hcd: disconnect device
[  231.669823][   T25] usb 2-1: Using ep0 maxpacket: 32
[  231.687545][   T25] usb 2-1: config 0 has an invalid interface number: 126 but max is 0
[  231.706546][   T25] usb 2-1: config 0 has no interface number 0
[  231.729898][   T25] usb 2-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023
[  231.762701][   T25] usb 2-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8
[  231.789748][   T25] usb 2-1: config 0 interface 126 has no altsetting 0
[  231.806904][   T25] usb 2-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c
[  231.826387][   T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  231.848068][   T25] usb 2-1: Product: syz
[  231.879719][   T25] usb 2-1: Manufacturer: syz
[  231.884386][   T25] usb 2-1: SerialNumber: syz
[  231.928117][   T25] usb 2-1: config 0 descriptor??
[  231.950273][ T9133] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  231.978205][ T9133] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  232.048658][ T9162] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1510'.
[  232.237237][    T8] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  232.439626][    T8] usb 1-1: Using ep0 maxpacket: 32
[  232.450221][   T25] ir_usb 2-1:0.126: IR Dongle converter detected
[  232.452270][    T8] usb 1-1: New USB device found, idVendor=1557, idProduct=8150, bcdDevice=29.ed
[  232.469742][ T9174] loop2: detected capacity change from 0 to 512
[  232.492246][    T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  232.515298][    T8] usb 1-1: Product: syz
[  232.520145][ T9174] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  232.539168][    T8] usb 1-1: Manufacturer: syz
[  232.544326][    T8] usb 1-1: SerialNumber: syz
[  232.562628][    T8] usb 1-1: config 0 descriptor??
[  232.573396][ T9174] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec01c, mo2=0002]
[  232.604250][ T9174] System zones: 1-12
[  232.624618][ T9174] EXT4-fs (loop2): 1 truncate cleaned up
[  232.648783][ T9174] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  232.670351][   T25] usb 2-1: IRDA class descriptor not found, device not bound
[  232.908027][   T46] usb 2-1: USB disconnect, device number 9
[  232.923586][ T8783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  233.219791][ T5236] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  233.227938][    T8] (unnamed net_device) (uninitialized): Assigned a random MAC address: 6a:5a:e5:76:2f:a8
[  233.306025][    T8] rtl8150 1-1:0.0: eth1: rtl8150 is detected
[  233.314426][    T8] usb 1-1: USB disconnect, device number 8
[  233.428166][ T9184] vlan2: entered promiscuous mode
[  233.450123][ T5236] usb 4-1: Using ep0 maxpacket: 16
[  233.461215][ T9184] mac80211_hwsim hwsim14 wlan0: entered promiscuous mode
[  233.481140][ T5236] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  233.504609][ T9184] mac80211_hwsim hwsim14 wlan0: left promiscuous mode
[  233.523188][ T5236] usb 4-1: New USB device found, idVendor=0b57, idProduct=2bbd, bcdDevice=e7.cc
[  233.538790][ T5236] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  233.566174][ T5236] usb 4-1: Product: syz
[  233.575050][ T5236] usb 4-1: Manufacturer: syz
[  233.595036][ T5236] usb 4-1: SerialNumber: syz
[  233.615513][ T5236] usb 4-1: config 0 descriptor??
[  233.634525][ T5236] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[  233.728921][ T9190] syz.1.1523 (9190): /proc/9189/oom_adj is deprecated, please use /proc/9189/oom_score_adj instead.
[  233.775432][ T9182] loop2: detected capacity change from 0 to 32768
[  233.865714][ T9182] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode.
[  233.872720][    T9] usb 4-1: USB disconnect, device number 6
[  234.047774][ T8783] ocfs2: Unmounting device (7,2) on (node local)
[  234.118503][ T9204] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1529'.
[  234.139728][ T9204] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1529'.
[  234.179731][ T5236] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  234.400182][ T5236] usb 2-1: Using ep0 maxpacket: 16
[  234.417703][ T5236] usb 2-1: config 0 has an invalid interface number: 214 but max is 0
[  234.438466][ T5236] usb 2-1: config 0 has no interface number 0
[  234.468916][ T5236] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64
[  234.502724][ T5236] usb 2-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5
[  234.512459][ T5236] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  234.536426][ T5236] usb 2-1: Product: syz
[  234.550154][ T5236] usb 2-1: Manufacturer: syz
[  234.554818][ T5236] usb 2-1: SerialNumber: syz
[  234.580351][ T5236] usb 2-1: config 0 descriptor??
[  234.742099][    C1] bridge0: port 2(bridge_slave_1) entered forwarding state
[  234.749392][    C1] bridge0: topology change detected, propagating
[  234.756846][    C1] bridge0: port 1(bridge_slave_0) entered forwarding state
[  234.764104][    C1] bridge0: topology change detected, propagating
[  235.059032][ T9202] loop5: detected capacity change from 0 to 32768
[  235.093151][ T9202] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1527 (9202)
[  235.129850][ T9202] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  235.147151][ T9201] loop4: detected capacity change from 0 to 32768
[  235.155307][ T9202] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm
[  235.165624][ T9201] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1528 (9201)
[  235.178475][ T9202] BTRFS info (device loop5): using free-space-tree
[  235.190583][ T9201] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  235.209102][ T9201] BTRFS info (device loop4): using sha256 (sha256-ni) checksum algorithm
[  235.224045][ T9201] BTRFS info (device loop4): using free-space-tree
[  235.230485][ T5236] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.214/input/input19
[  235.278680][ T9226] tun0: tun_chr_ioctl cmd 1074025678
[  235.313079][ T9226] tun0: group set to 0
[  235.369727][ T5408] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  235.415313][ T6199] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  235.521910][   T46] usb 2-1: USB disconnect, device number 10
[  235.577032][ T5408] usb 1-1: Using ep0 maxpacket: 32
[  235.591200][ T5408] usb 1-1: config 0 has an invalid interface number: 84 but max is 0
[  235.623859][ T5408] usb 1-1: config 0 has no interface number 0
[  235.667022][ T5408] usb 1-1: New USB device found, idVendor=12d1, idProduct=1003, bcdDevice= 0.00
[  235.688480][ T5232] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  235.709941][ T5408] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  235.717956][ T5408] usb 1-1: Product: syz
[  235.740833][ T5408] usb 1-1: Manufacturer: syz
[  235.745450][ T5408] usb 1-1: SerialNumber: syz
[  235.782749][ T5408] usb 1-1: config 0 descriptor??
[  235.809146][ T5408] usb-storage 1-1:0.84: USB Mass Storage device detected
[  236.031858][ T5408] usb 1-1: USB disconnect, device number 9
[  236.180285][ T1162] vhci_hcd: vhci_device speed not set
[  236.248653][ T9266] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1544'.
[  236.453996][ T9271] loop2: detected capacity change from 0 to 1024
[  236.560874][ T9271] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  236.808819][ T9271] fscrypt (loop2, inode 18): Unsupported encryption flags (0x10)
[  236.968044][ T8783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  237.203895][ T9262] loop5: detected capacity change from 0 to 32768
[  237.249005][ T9298] MPI: mpi too large (187712 bits)
[  237.368499][ T9262] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  237.603192][ T6199] ocfs2: Unmounting device (7,5) on (node local)
[  237.894735][ T9319] tipc: Started in network mode
[  237.900189][ T9319] tipc: Node identity 7f000001, cluster identity 4711
[  237.914688][ T9319] tipc: Enabled bearer <udp:syz1>, priority 10
[  237.946800][ T5236] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  238.130293][ T5236] usb 4-1: Using ep0 maxpacket: 16
[  238.154472][ T5236] usb 4-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice=93.b9
[  238.185098][ T5236] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  238.224964][ T5236] usb 4-1: Product: syz
[  238.229235][ T5236] usb 4-1: Manufacturer: syz
[  238.235591][ T5236] usb 4-1: SerialNumber: syz
[  238.252708][ T5236] usb 4-1: config 0 descriptor??
[  238.479746][ T1162] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  238.515882][ T5236] speedtch 4-1:0.0: speedtch_bind: wrong device class 141
[  238.534099][ T5236] speedtch 4-1:0.0: usbatm_usb_probe: bind failed: -19!
[  238.688033][ T1162] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  238.714876][ T1162] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  238.773451][ T1162] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  238.792698][ T9310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  238.810020][ T1162] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  238.829733][ T9310] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  238.839961][ T1162] usb 3-1: config 0 descriptor??
[  238.853700][ T5299] usb 4-1: USB disconnect, device number 7
[  239.022243][ T9352] Bluetooth: hci3: unsupported parameter 64512
[  239.041910][ T5297] tipc: Node number set to 2130706433
[  239.060543][ T9352] Bluetooth: hci3: invalid length 0, exp 2 for type 29
[  239.131672][ T9326] loop5: detected capacity change from 0 to 32768
[  239.185015][ T9326] XFS (loop5): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[  239.273230][ T1162] plantronics 0003:047F:FFFF.000E: No inputs registered, leaving
[  239.311841][ T9326] XFS (loop5): Ending clean mount
[  239.317795][ T9370] loop1: detected capacity change from 0 to 764
[  239.327721][ T1162] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  239.370158][ T5299] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  239.396007][ T6199] XFS (loop5): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[  239.569747][    T8] usb 3-1: USB disconnect, device number 7
[  239.590288][ T5299] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  239.619578][ T5299] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  239.648917][ T5299] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  239.689799][ T5299] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  239.720691][ T5299] usb 5-1: config 0 descriptor??
[  239.893342][ T9381] sit0: entered promiscuous mode
[  239.900257][ T5297] kernel write not supported for file /snd/seq (pid: 5297 comm: kworker/1:5)
[  239.967023][ T9381] netlink: 'syz.5.1582': attribute type 1 has an invalid length.
[  240.003153][ T9381] netlink: 1 bytes leftover after parsing attributes in process `syz.5.1582'.
[  240.038388][ T5297] usb 5-1: USB disconnect, device number 8
[  241.425971][ T4618] Bluetooth: hci2: unexpected event for opcode 0x042c
[  241.943607][ T4618] Bluetooth: hci6: command 0x0406 tx timeout
[  242.053047][ T9416] loop4: detected capacity change from 0 to 40427
[  242.114810][ T9416] F2FS-fs (loop4): Found nat_bits in checkpoint
[  242.232736][ T9471] loop5: detected capacity change from 0 to 512
[  242.292302][ T9471] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2240: inode #15: comm syz.5.1625: corrupted in-inode xattr: invalid ea_ino
[  242.294248][ T9416] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  242.335292][ T9471] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.1625: couldn't read orphan inode 15 (err -117)
[  242.401318][ T9471] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  242.660852][ T5232] syz-executor: attempt to access beyond end of device
[  242.660852][ T5232] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  242.711787][ T5232] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  242.730640][ T9480] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1628'.
[  242.746242][ T6199] EXT4-fs error (device loop5): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0
[  242.750704][ T9480] openvswitch: netlink: Multiple metadata blocks provided
[  242.868849][ T6199] EXT4-fs error (device loop5): ext4_lookup:1815: inode #2: comm syz-executor: deleted inode referenced: 15
[  242.914478][ T9484] loop1: detected capacity change from 0 to 64
[  242.940173][ T6199] EXT4-fs error (device loop5): ext4_lookup:1815: inode #2: comm syz-executor: deleted inode referenced: 15
[  243.392228][ T6199] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  243.848329][ T2958] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  244.086409][ T2958] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  244.242515][ T2958] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  244.399657][ T5408] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  244.588569][ T2958] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  244.620256][ T5408] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  244.651470][ T5408] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  244.702065][ T5408] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  244.736700][ T5408] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  244.778075][ T5408] usb 5-1: SerialNumber: syz
[  245.036655][ T5408] usb 5-1: 0:2 : does not exist
[  245.070238][ T2958] bridge_slave_1: left allmulticast mode
[  245.110331][ T2958] bridge_slave_1: left promiscuous mode
[  245.116122][ T2958] bridge0: port 2(bridge_slave_1) entered disabled state
[  245.190630][ T2958] bridge_slave_0: left allmulticast mode
[  245.197290][ T5237] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1
[  245.208518][ T5237] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9
[  245.217632][ T2958] bridge_slave_0: left promiscuous mode
[  245.223551][ T5237] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9
[  245.239660][ T2958] bridge0: port 1(bridge_slave_0) entered disabled state
[  245.256310][ T5237] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4
[  245.269476][ T5237] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3
[  245.288722][ T5237] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2
[  245.450196][ T5408] usb 5-1: USB disconnect, device number 9
[  246.492010][ T2958] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  246.522570][ T2958] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  246.538631][ T2958] bond0 (unregistering): Released all slaves
[  246.563992][ T9530] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1652'.
[  246.731817][ T9517] wlan0 speed is unknown, defaulting to 1000
[  246.807775][ T9542] loop2: detected capacity change from 0 to 512
[  246.869198][ T9542] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2240: inode #15: comm syz.2.1658: corrupted in-inode xattr: invalid ea_ino
[  246.884615][ T9542] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.1658: couldn't read orphan inode 15 (err -117)
[  246.902391][ T9542] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  246.935125][ T9550] loop1: detected capacity change from 0 to 256
[  246.984527][ T9550] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  247.010660][ T9542] EXT4-fs (loop2): shut down requested (2)
[  247.064814][ T5237] Bluetooth: hci1: command 0x0406 tx timeout
[  247.101860][ T8783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  247.142549][ T5299] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  247.233595][ T5236] wlan0 speed is unknown, defaulting to 1000
[  247.371519][ T5299] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  247.382553][ T5250] Bluetooth: hci6: command tx timeout
[  247.391284][ T5299] usb 1-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d
[  247.413268][ T5299] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  247.425904][ T5299] usb 1-1: config 0 descriptor??
[  247.510421][ T9564] loop2: detected capacity change from 0 to 16
[  247.513427][   T25] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  247.526874][ T9564] erofs: (device loop2): mounted with root inode @ nid 36.
[  247.546988][   T25] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0
[  247.592816][   T25] hid-generic 0000:0000:0000.000F: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[  247.606970][ T2958] hsr_slave_0: left promiscuous mode
[  247.607949][ T9564] erofs: (device loop2): erofs_fill_dentries: bogus dirent @ nid 36
[  247.627833][ T2958] hsr_slave_1: left promiscuous mode
[  247.651683][ T2958] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  247.670469][ T2958] batman_adv: batadv0: Removing interface: batadv_slave_0
[  247.698207][   T25] usb 1-1: USB disconnect, device number 10
[  247.717173][ T2958] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  247.735767][ T2958] batman_adv: batadv0: Removing interface: batadv_slave_1
[  247.824263][ T2958] veth1_macvtap: left promiscuous mode
[  247.844690][ T2958] veth0_macvtap: left promiscuous mode
[  247.859340][ T2958] veth1_vlan: left promiscuous mode
[  247.869838][ T2958] veth0_vlan: left promiscuous mode
[  248.737335][ T9609] loop2: detected capacity change from 0 to 128
[  248.785419][ T9609] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  248.840194][ T9609] ext4 filesystem being mounted at /37/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  248.871847][    C0] vkms_vblank_simulate: vblank timer overrun
[  249.099247][ T8783] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  249.460890][ T5250] Bluetooth: hci6: command tx timeout
[  249.601576][ T9636] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1697'.
[  249.648314][ T9636] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1697'.
[  250.003519][   T46] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  250.061224][ T9626] loop2: detected capacity change from 0 to 32768
[  250.075873][ T9626] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1692 (9626)
[  250.117428][ T9626] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  250.135225][ T9626] BTRFS info (device loop2): using sha256 (sha256-ni) checksum algorithm
[  250.154278][ T2958] team0 (unregistering): Port device team_slave_1 removed
[  250.187623][ T9626] BTRFS info (device loop2): using free-space-tree
[  250.193938][   T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  250.207105][   T46] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  250.225660][   T46] usb 5-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00
[  250.267062][   T46] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  250.305883][   T46] usb 5-1: config 0 descriptor??
[  250.324125][ T2958] team0 (unregistering): Port device team_slave_0 removed
[  250.507061][ T9646] loop1: detected capacity change from 0 to 32768
[  250.526621][ T9646] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1702 (9646)
[  250.580192][ T9646] BTRFS info (device loop1): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  250.600627][ T9646] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[  250.622829][ T9646] BTRFS info (device loop1): using free-space-tree
[  250.776972][   T46] microsoft 0003:045E:009D.0010: unbalanced delimiter at end of report description
[  250.786457][ T9662] BTRFS warning (device loop2): failed to trim 1 block group(s), last error -512
[  250.829868][ T8783] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  250.838760][   T46] microsoft 0003:045E:009D.0010: parse failed
[  250.864210][   T46] microsoft 0003:045E:009D.0010: probe with driver microsoft failed with error -22
[  251.029767][   T46] usb 5-1: USB disconnect, device number 10
[  251.198419][ T5228] BTRFS info (device loop1): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  251.542981][ T5250] Bluetooth: hci6: command tx timeout
[  251.906879][ T9679] loop2: detected capacity change from 0 to 32768
[  251.918741][ T9679] XFS: attr2 mount option is deprecated.
[  251.961478][ T9679] XFS (loop2): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  252.031009][ T9517] chnl_net:caif_netlink_parms(): no params data found
[  252.092878][ T9695] loop1: detected capacity change from 0 to 256
[  252.117162][ T9679] XFS (loop2): Ending clean mount
[  252.147457][ T9679] XFS (loop2): Quotacheck needed: Please wait.
[  252.154374][ T9695] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3962bc8b, utbl_chksum : 0xe619d30d)
[  252.272890][ T9679] XFS (loop2): Quotacheck: Done.
[  252.713574][ T8783] XFS (loop2): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  252.782886][ T9517] bridge0: port 1(bridge_slave_0) entered blocking state
[  252.827330][ T9517] bridge0: port 1(bridge_slave_0) entered disabled state
[  252.889828][ T9517] bridge_slave_0: entered allmulticast mode
[  252.897556][ T9517] bridge_slave_0: entered promiscuous mode
[  252.929139][ T9721] loop4: detected capacity change from 0 to 1024
[  252.973786][ T9517] bridge0: port 2(bridge_slave_1) entered blocking state
[  252.989234][ T9517] bridge0: port 2(bridge_slave_1) entered disabled state
[  253.009278][ T9517] bridge_slave_1: entered allmulticast mode
[  253.047963][ T9517] bridge_slave_1: entered promiscuous mode
[  253.049062][ T9721] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  253.333292][ T9517] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  253.358905][ T9517] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  253.540779][ T9517] team0: Port device team_slave_0 added
[  253.558995][ T9517] team0: Port device team_slave_1 added
[  253.575988][   T29] kauditd_printk_skb: 49 callbacks suppressed
[  253.576007][   T29] audit: type=1326 audit(1726350515.806:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9733 comm="syz.2.1724" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f316a57def9 code=0x0
[  253.633070][ T5250] Bluetooth: hci6: command tx timeout
[  253.740294][ T5299] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  253.765252][ T9517] batman_adv: batadv0: Adding interface: batadv_slave_0
[  253.790912][ T9517] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  253.860210][ T9517] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  253.893193][ T9517] batman_adv: batadv0: Adding interface: batadv_slave_1
[  253.910673][ T9517] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  253.969717][ T9517] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  253.992230][ T5299] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  254.013849][ T5299] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  254.036194][ T5299] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  254.055457][ T5299] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  254.086387][ T5299] usb 2-1: SerialNumber: syz
[  254.191792][ T9517] hsr_slave_0: entered promiscuous mode
[  254.210431][ T9517] hsr_slave_1: entered promiscuous mode
[  254.353264][ T5299] usb 2-1: 0:2 : does not exist
[  254.385804][ T5299] usb 2-1: 5:0: failed to get current value for ch 1 (-22)
[  254.451199][ T5299] usb 2-1: 5:0: cannot get min/max values for control 2 (id 5)
[  254.498816][ T5299] usb 2-1: 5:0: cannot get min/max values for control 2 (id 5)
[  254.572422][ T5299] usb 2-1: 5:0: cannot get min/max values for control 4 (id 5)
[  254.618348][ T5299] usb 2-1: USB disconnect, device number 11
[  254.800546][ T5408] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  254.864711][ T9757] tun0: tun_chr_ioctl cmd 1074025675
[  254.871764][ T9757] tun0: persist enabled
[  254.893330][ T9757] tun0: tun_chr_ioctl cmd 1074025675
[  254.898647][ T9757] tun0: persist enabled
[  255.006202][ T5408] usb 3-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7
[  255.016827][ T5408] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  255.024922][ T5408] usb 3-1: Product: syz
[  255.029929][ T5408] usb 3-1: Manufacturer: syz
[  255.034537][ T5408] usb 3-1: SerialNumber: syz
[  255.049580][ T5408] usb 3-1: config 0 descriptor??
[  255.226595][ T1264] ieee802154 phy1 wpan1: encryption failed: -22
[  255.317617][ T9517] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  255.335986][ T9517] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  255.365436][ T9517] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  255.391025][   T46] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  255.402241][ T9517] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  255.458796][ T9776] futex_wake_op: syz.4.1743 tries to shift op by 32; fix this program
[  255.591998][   T46] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  255.608931][   T46] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  255.642483][   T46] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  255.645427][ T9780] netlink: 'syz.1.1745': attribute type 14 has an invalid length.
[  255.661213][   T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  255.669318][   T46] usb 4-1: SerialNumber: syz
[  255.744632][ T9517] 8021q: adding VLAN 0 to HW filter on device bond0
[  255.804630][ T9517] 8021q: adding VLAN 0 to HW filter on device team0
[  255.839564][   T63] bridge0: port 1(bridge_slave_0) entered blocking state
[  255.846774][   T63] bridge0: port 1(bridge_slave_0) entered forwarding state
[  255.907555][ T5408] usb 3-1: f81604_write: reg: 105 data: f2 failed: -EPROTO
[  255.908790][   T62] bridge0: port 2(bridge_slave_1) entered blocking state
[  255.921385][   T46] usb 4-1: 0:2 : does not exist
[  255.922307][   T62] bridge0: port 2(bridge_slave_1) entered forwarding state
[  255.938590][ T5408] f81604 3-1:0.0: Setting termination of CH#1 failed: -EPROTO
[  255.949606][ T5408] f81604 3-1:0.0: probe with driver f81604 failed with error -71
[  255.978244][ T5408] usb 3-1: USB disconnect, device number 8
[  256.060127][   T46] usb 4-1: USB disconnect, device number 8
[  256.126326][ T9517] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  256.210972][ T5299] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  256.402919][ T5299] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  256.427146][ T5299] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  256.455678][ T5299] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  256.463551][ T9517] 8021q: adding VLAN 0 to HW filter on device batadv0
[  256.480201][ T5299] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  256.502527][ T9785] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  256.535092][ T5299] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  256.781672][ T5299] usb 2-1: USB disconnect, device number 12
[  257.100654][ T9517] veth0_vlan: entered promiscuous mode
[  257.149868][ T9517] veth1_vlan: entered promiscuous mode
[  257.220765][ T9517] veth0_macvtap: entered promiscuous mode
[  257.243789][ T9517] veth1_macvtap: entered promiscuous mode
[  257.300103][ T9517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  257.318142][ T9517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  257.338910][ T9517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  257.389673][ T9517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  257.412864][ T9517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  257.428633][ T9517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  257.439138][ T9517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  257.460152][ T9517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  257.491902][ T9517] batman_adv: batadv0: Interface activated: batadv_slave_0
[  257.529229][ T9517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  257.570885][ T9517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  257.594155][ T9517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  257.622262][ T9517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  257.651843][ T9517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  257.680978][ T9517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  257.722579][ T9517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  257.753313][ T9517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  257.783156][ T9517] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  257.824948][ T9517] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  257.862736][ T9517] batman_adv: batadv0: Interface activated: batadv_slave_1
[  257.958459][ T9517] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  257.999491][ T9517] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  258.035749][ T9517] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  258.069967][ T9517] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  258.150279][ T9809] loop4: detected capacity change from 0 to 32768
[  258.228110][ T9809] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  258.278471][ T9835] Process accounting resumed
[  258.292404][ T9835] kernel write not supported for file /asound/timers (pid: 9835 comm: syz.2.1763)
[  258.362836][ T2977] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  258.428769][ T2977] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  258.514782][ T9809] XFS (loop4): Ending clean mount
[  258.533535][ T9809] XFS (loop4): Quotacheck needed: Please wait.
[  258.564515][   T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  258.581376][   T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  258.607451][ T9809] XFS (loop4): Quotacheck: Done.
[  258.936015][ T5232] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  259.004318][ T9854] input: syz0 as /devices/virtual/input/input21
[  259.440630][ T9863] bridge0: port 3(gretap0) entered blocking state
[  259.469453][ T9863] bridge0: port 3(gretap0) entered disabled state
[  259.476833][ T9863] gretap0: entered allmulticast mode
[  259.547762][ T9863] gretap0: entered promiscuous mode
[  259.569714][ T9863] bridge0: port 3(gretap0) entered blocking state
[  259.577006][ T9863] bridge0: port 3(gretap0) entered forwarding state
[  259.640189][ T9864] gretap0: left allmulticast mode
[  259.650893][ T9864] gretap0: left promiscuous mode
[  259.672259][ T9864] bridge0: port 3(gretap0) entered disabled state
[  260.499623][ T9861] loop5: detected capacity change from 0 to 32768
[  260.529325][ T9861] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1772 (9861)
[  260.588074][ T9861] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  260.627980][ T9861] BTRFS info (device loop5): using sha256 (sha256-ni) checksum algorithm
[  260.666234][ T9861] BTRFS info (device loop5): using free-space-tree
[  260.984322][ T9517] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  261.287598][ T9877] loop2: detected capacity change from 0 to 32768
[  261.369788][ T9877] XFS (loop2): Mounting V5 Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6
[  261.809817][ T9877] XFS (loop2): Ending clean mount
[  261.817069][ T9930] kernel read not supported for file /eth0 (pid: 9930 comm: syz.0.1793)
[  261.853309][   T29] audit: type=1800 audit(1726350524.086:112): pid=9930 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1793" name="eth0" dev="mqueue" ino=24980 res=0 errno=0
[  262.054346][ T8783] XFS (loop2): Unmounting Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6
[  262.520388][ T9945] 9pnet_virtio: no channels available for device @
[  262.552377][ T9910] loop1: detected capacity change from 0 to 32768
[  262.637431][ T9910] XFS (loop1): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  262.844236][ T9910] XFS (loop1): Ending clean mount
[  262.946158][ T9971] sctp: [Deprecated]: syz.0.1806 (pid 9971) Use of struct sctp_assoc_value in delayed_ack socket option.
[  262.946158][ T9971] Use struct sctp_sack_info instead
[  263.040615][ T5236] XFS (loop1): Metadata CRC error detected at xfs_allocbt_read_verify+0x41/0xd0, xfs_bnobt block 0x4 
[  263.041931][   T46] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  263.052005][ T5236] XFS (loop1): Unmount and run xfs_repair
[  263.077756][ T5236] XFS (loop1): First 128 bytes of corrupted metadata buffer:
[  263.111964][ T5236] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff  AB3B............
[  263.140249][ T5236] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10  ................
[  263.149212][ T5236] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a  .7.nt.N..._.'K.:
[  263.165218][ T5236] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01  .....;%.........
[  263.192433][ T5236] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0  ........... ....
[  263.226011][ T5236] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  263.255567][ T5236] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  263.286006][ T5236] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  263.292250][   T46] usb 4-1: Using ep0 maxpacket: 16
[  263.302520][ T2977] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x36f/0x5b0" at daddr 0x4 len 4 error 74
[  263.334156][   T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  263.341905][ T2977] XFS (loop1): page discard on page ffffea0001464000, inode 0x1809, pos 1099511627776.
[  263.361871][ T9980] loop2: detected capacity change from 0 to 1024
[  263.367106][   T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  263.394316][ T5228] XFS (loop1): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  263.398347][ T9982] netlink: 160 bytes leftover after parsing attributes in process `syz.5.1813'.
[  263.409647][ T5297] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  263.416142][ T9982] netlink: 160 bytes leftover after parsing attributes in process `syz.5.1813'.
[  263.434963][   T46] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  263.451039][   T46] usb 4-1: New USB device found, idVendor=045e, idProduct=0001, bcdDevice= 0.00
[  263.459944][ T5228] XFS (loop1): Uncorrected metadata errors detected; please run xfs_repair.
[  263.472230][   T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  263.483807][   T46] usb 4-1: config 0 descriptor??
[  263.521188][ T9980] hfsplus: bad catalog entry type
[  263.581004][   T62] hfsplus: b-tree write err: -5, ino 4
[  263.650745][ T5297] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  263.677923][ T5297] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  263.704521][ T5297] usb 1-1: Product: syz
[  263.711059][ T5297] usb 1-1: Manufacturer: syz
[  263.716491][ T5297] usb 1-1: SerialNumber: syz
[  263.734573][ T5297] usb 1-1: config 0 descriptor??
[  263.928446][   T46] hid-generic 0003:045E:0001.0011: unknown main item tag 0x0
[  263.938975][   T46] hid-generic 0003:045E:0001.0011: ignoring exceeding usage max
[  263.978798][   T46] hid-generic 0003:045E:0001.0011: unknown main item tag 0x0
[  263.998189][ T9994] loop2: detected capacity change from 0 to 512
[  263.999424][   T46] hid-generic 0003:045E:0001.0011: unbalanced collection at end of report description
[  264.036722][   T46] hid-generic 0003:045E:0001.0011: probe with driver hid-generic failed with error -22
[  264.089019][ T9994] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  264.103823][ T9994] ext4 filesystem being mounted at /52/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  264.159364][ T9994] EXT4-fs (loop2): shut down requested (0)
[  264.232495][T10002] loop1: detected capacity change from 0 to 4096
[  264.270460][    T8] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  264.295269][   T25] usb 4-1: USB disconnect, device number 9
[  264.355508][ T8783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  264.388328][   T63] Quota error (device loop2): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync!
[  264.476315][    T8] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  264.508509][    T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  264.535226][    T8] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  264.577715][    T8] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  264.598566][ T5297] usb 1-1: Firmware version (0.0) predates our first public release.
[  264.600191][    T8] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  264.627068][ T5297] usb 1-1: Please update to version 0.2 or newer
[  264.632986][    T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  264.672194][    T8] usb 6-1: config 0 descriptor??
[  264.678061][ T9995] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22
[  264.751045][ T5297] usb 1-1: USB disconnect, device number 11
[  264.768771][T10016] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1823'.
[  264.985290][T10017] loop2: detected capacity change from 0 to 4096
[  265.010259][T10017] ntfs3: loop2: Different NTFS sector size (4096) and media sector size (512).
[  265.077306][T10017] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  265.099783][T10017] ntfs3: loop2: Failed to load $UpCase (-22).
[  265.135162][    T8] plantronics 0003:047F:FFFF.0012: unknown main item tag 0xd
[  265.180696][    T8] plantronics 0003:047F:FFFF.0012: No inputs registered, leaving
[  265.202994][    T8] plantronics 0003:047F:FFFF.0012: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
[  265.494851][T10029] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  265.531474][ T5297] usb 6-1: USB disconnect, device number 7
[  265.561426][   T29] audit: type=1326 audit(1726350527.796:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10032 comm="syz.0.1831" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9daff7def9 code=0x0
[  265.648074][T10007] loop4: detected capacity change from 0 to 40427
[  265.664543][T10007] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504)
[  265.685855][T10007] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  265.722250][T10007] F2FS-fs (loop4): build fault injection attr: rate: 17008, type: 0x1fffff
[  265.753525][T10007] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x6
[  265.781010][T10007] F2FS-fs (loop4): invalid crc value
[  265.811759][T10007] F2FS-fs (loop4): Found nat_bits in checkpoint
[  265.867478][T10044] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1835'.
[  266.006550][T10007] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  266.021825][T10007] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  266.092539][T10007] syz.4.1822: attempt to access beyond end of device
[  266.092539][T10007] loop4: rw=10241, sector=53248, nr_sectors = 8 limit=40427
[  266.517741][ T5232] syz-executor: attempt to access beyond end of device
[  266.517741][ T5232] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  266.571356][ T5232] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  266.596930][   T25] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  266.825809][   T25] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  266.869808][   T25] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  266.903047][   T25] usb 6-1: config 1 interface 1 altsetting 1 has an endpoint descriptor with address 0x64, changing to 0x4
[  266.943439][T10039] loop1: detected capacity change from 0 to 32768
[  266.959778][   T25] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[  266.990723][T10039] XFS: ikeep mount option is deprecated.
[  267.017141][   T25] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.36
[  267.065387][   T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  267.126616][T10039] XFS (loop1): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  267.135713][   T25] usb 6-1: Product: syz
[  267.155978][   T25] usb 6-1: Manufacturer: syz
[  267.177362][   T25] usb 6-1: SerialNumber: syz
[  267.359335][T10039] XFS (loop1): Ending clean mount
[  267.415967][T10039] XFS (loop1): Quotacheck needed: Please wait.
[  267.549562][ T5237] Bluetooth: hci2: command 0x0405 tx timeout
[  267.574109][T10039] XFS (loop1): Quotacheck: Done.
[  267.591446][T10054] loop2: detected capacity change from 0 to 40427
[  267.632213][T10054] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  267.652115][T10054] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  267.718580][T10054] F2FS-fs (loop2): Found nat_bits in checkpoint
[  267.840199][ T5228] XFS (loop1): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  267.980728][T10054] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  268.030150][T10054] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  268.280561][   T25] cdc_ncm 6-1:1.0: bind() failure
[  268.318858][   T25] cdc_ncm 6-1:1.1: probe with driver cdc_ncm failed with error -71
[  268.372995][   T25] cdc_mbim 6-1:1.1: probe with driver cdc_mbim failed with error -71
[  268.411854][   T25] usbtest 6-1:1.1: probe with driver usbtest failed with error -71
[  268.462227][   T25] usb 6-1: USB disconnect, device number 8
[  268.678206][T10090] input: syz1 as /devices/virtual/input/input23
[  269.067199][T10077] loop4: detected capacity change from 0 to 32768
[  269.102483][T10077] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1840 (10077)
[  269.114495][T10102] loop5: detected capacity change from 0 to 128
[  269.157453][T10102] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002]
[  269.172247][T10104] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1857'.
[  269.179416][T10102] System zones: 1-3, 19-19, 35-36
[  269.195465][T10077] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  269.196148][T10102] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  269.218915][T10104] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1857'.
[  269.240584][T10077] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm
[  269.252950][T10102] ext4 filesystem being mounted at /11/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  269.290139][T10077] BTRFS info (device loop4): using free-space-tree
[  269.396352][T10112] loop1: detected capacity change from 0 to 1024
[  269.426110][ T9517] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  269.612838][ T2977] hfsplus: b-tree write err: -5, ino 4
[  269.735414][ T5232] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  270.463003][T10148] loop2: detected capacity change from 0 to 512
[  270.539697][ T1843] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  270.601865][T10148] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1869: bg 0: block 248: padding at end of block bitmap is not set
[  270.627564][T10148] Quota error (device loop2): write_blk: dquota write failed
[  270.639293][T10148] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  270.654522][T10148] EXT4-fs error (device loop2): ext4_acquire_dquot:6848: comm syz.2.1869: Failed to acquire dquot type 1
[  270.682890][T10148] EXT4-fs (loop2): 1 truncate cleaned up
[  270.693881][T10148] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  270.713091][T10148] ext4 filesystem being mounted at /62/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  270.739727][ T1843] usb 4-1: Using ep0 maxpacket: 32
[  270.747598][ T1843] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  270.769445][ T1843] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  270.788891][ T1843] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  270.798292][ T1843] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  270.826062][ T1843] hub 4-1:4.0: USB hub found
[  271.024361][ T1843] hub 4-1:4.0: 31 ports detected
[  271.039841][ T1843] usb 4-1: selecting invalid altsetting 1
[  271.055805][ T1843] hub 4-1:4.0: Using single TT (err -22)
[  271.068769][T10163] Process accounting resumed
[  271.084577][ T1843] hub 4-1:4.0: insufficient power available to use all downstream ports
[  271.226493][ T1843] hub 4-1:4.0: hub_hub_status failed (err = -71)
[  271.254930][ T1843] hub 4-1:4.0: config failed, can't get hub status (err -71)
[  271.320829][ T1843] usb 4-1: USB disconnect, device number 10
[  271.353173][T10167] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3)
[  271.359838][T10167] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  271.393581][T10167] vhci_hcd vhci_hcd.0: Device attached
[  271.417533][T10168] vhci_hcd: connection closed
[  271.431506][   T11] vhci_hcd: stop threads
[  271.440938][   T11] vhci_hcd: release socket
[  271.448759][ T8783] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  271.458010][   T11] vhci_hcd: disconnect device
[  272.394736][T10205] sctp: [Deprecated]: syz.5.1891 (pid 10205) Use of struct sctp_assoc_value in delayed_ack socket option.
[  272.394736][T10205] Use struct sctp_sack_info instead
[  272.500434][    T8] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  272.722407][    T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  272.760182][    T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  272.789634][    T8] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  272.852872][    T8] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  272.887418][    T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  272.926786][    T8] usb 1-1: config 0 descriptor??
[  272.956945][T10199] loop1: detected capacity change from 0 to 32768
[  272.999878][T10199] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1889 (10199)
[  273.053162][T10199] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  273.085216][T10199] BTRFS info (device loop1): using sha256 (sha256-ni) checksum algorithm
[  273.111699][T10199] BTRFS info (device loop1): using free-space-tree
[  273.150221][   T30] INFO: task syz.3.238:5998 blocked for more than 143 seconds.
[  273.179098][   T30]       Not tainted 6.11.0-rc7-syzkaller-00149-g0babf683783d #0
[  273.212562][   T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  273.244273][   T30] task:syz.3.238       state:D stack:23760 pid:5998  tgid:5997  ppid:5226   flags:0x00004004
[  273.299691][   T30] Call Trace:
[  273.312680][   T30]  <TASK>
[  273.331252][   T30]  __schedule+0x1800/0x4a60
[  273.354395][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  273.377398][   T30]  ? __pfx___schedule+0x10/0x10
[  273.378653][    T8] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0
[  273.394111][   T30]  ? __blk_flush_plug+0x449/0x500
[  273.409282][   T30]  ? __pfx_lock_release+0x10/0x10
[  273.420918][    T8] plantronics 0003:047F:FFFF.0013: unknown main item tag 0x0
[  273.422008][   T30]  ? __blk_flush_plug+0x449/0x500
[  273.430318][    T8] plantronics 0003:047F:FFFF.0013: No inputs registered, leaving
[  273.452305][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  273.476635][    T8] plantronics 0003:047F:FFFF.0013: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  273.476856][   T30]  ? __pfx___blk_flush_plug+0x10/0x10
[  273.521146][   T30]  ? schedule+0x90/0x320
[  273.533758][   T30]  schedule+0x14b/0x320
[  273.551177][   T30]  io_schedule+0x8d/0x110
[  273.565179][   T30]  folio_wait_bit_common+0x882/0x12b0
[  273.583175][   T30]  ? __pfx_folio_wait_bit_common+0x10/0x10
[  273.598310][   T30]  ? __pfx_wake_page_function+0x10/0x10
[  273.620028][   T30]  ? do_raw_spin_unlock+0x13c/0x8b0
[  273.625278][   T30]  z_erofs_runqueue+0xa8c/0x2010
[  273.644328][   T30]  ? __pfx_z_erofs_runqueue+0x10/0x10
[  273.659736][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  273.665416][   T30]  ? _raw_spin_unlock+0x28/0x50
[  273.665592][    T8] usb 1-1: USB disconnect, device number 12
[  273.679581][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  273.685262][   T30]  ? lockref_put_or_lock+0x75/0xc0
[  273.699799][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  273.705480][   T30]  z_erofs_readahead+0xbae/0xf00
[  273.719621][   T30]  ? __pfx_z_erofs_readahead+0x10/0x10
[  273.725145][   T30]  ? __pfx_lock_release+0x10/0x10
[  273.732911][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  273.746429][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  273.759555][   T30]  ? blk_start_plug+0x70/0x1b0
[  273.764356][   T30]  read_pages+0x180/0x840
[  273.768720][   T30]  ? __pfx_lru_add_fn+0x10/0x10
[  273.786919][   T30]  ? __pfx_read_pages+0x10/0x10
[  273.806499][   T30]  ? filemap_add_folio+0x26d/0x650
[  273.824126][   T30]  ? __pfx_filemap_add_folio+0x10/0x10
[  273.832306][T10222] loop2: detected capacity change from 0 to 40427
[  273.836136][   T30]  page_cache_ra_unbounded+0x6ce/0x7f0
[  273.849266][   T30]  force_page_cache_ra+0x280/0x2f0
[  273.855064][   T30]  generic_fadvise+0x528/0x840
[  273.860213][T10222] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  273.868015][   T30]  ? __pfx_generic_fadvise+0x10/0x10
[  273.874953][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  273.881049][T10222] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  273.889376][   T30]  ? __fget_files+0x3f6/0x470
[  273.895557][   T30]  ? __fget_files+0x29/0x470
[  273.902896][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  273.908587][   T30]  __x64_sys_fadvise64+0x145/0x190
[  273.914531][   T30]  do_syscall_64+0xf3/0x230
[  273.919076][   T30]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  273.926222][   T30] RIP: 0033:0x7f6c1d37def9
[  273.930781][   T30] RSP: 002b:00007f6c1e1c6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000dd
[  273.941192][   T30] RAX: ffffffffffffffda RBX: 00007f6c1d535f80 RCX: 00007f6c1d37def9
[  273.952160][   T30] RDX: 0000000000004101 RSI: 0000000000e0ffff RDI: 0000000000000004
[  273.960912][   T30] RBP: 00007f6c1d3f0b76 R08: 0000000000000000 R09: 0000000000000000
[  273.968985][T10222] F2FS-fs (loop2): Found nat_bits in checkpoint
[  273.996128][   T30] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000
[  274.016504][   T30] R13: 0000000000000000 R14: 00007f6c1d535f80 R15: 00007ffd721fef58
[  274.036862][   T30]  </TASK>
[  274.040104][   T30] 
[  274.040104][   T30] Showing all locks held in the system:
[  274.068223][   T30] 1 lock held by khungtaskd/30:
[  274.087470][   T30]  #0: ffffffff8e938320 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0
[  274.114003][   T30] 3 locks held by kworker/u8:6/2958:
[  274.120657][T10222] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  274.127710][T10222] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  274.139553][   T30] 2 locks held by getty/4981:
[  274.144248][   T30]  #0: ffff8880306bb0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  274.189592][   T30]  #1: ffffc9000312b2f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6ac/0x1e00
[  274.203041][   T30] 1 lock held by syz-executor/5228:
[  274.208519][   T30]  #0: ffffffff8e93d6f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830
[  274.221711][   T30] 1 lock held by syz.3.238/5998:
[  274.226669][   T30]  #0: ffff88805b6f4330 (mapping.invalidate_lock#7){.+.+}-{3:3}, at: page_cache_ra_unbounded+0xf7/0x7f0
[  274.251631][   T30] 7 locks held by syz.2.1899/10222:
[  274.259233][   T30]  #0: ffff8880b883e9d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140
[  274.270045][   T30]  #1: ffff8880b8828948 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x441/0x770
[  274.282025][   T30]  #2: ffff8880b8928948 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_change+0xfd/0x280
[  274.293613][   T30]  #3: ffff88805b66b3e8 (&dentry->d_lock){+.+.}-{2:2}, at: fast_dput+0x208/0x420
[  274.306407][   T30]  #4: ffff88805f4743a8 (&sbi->cp_rwsem){++++}-{3:3}, at: f2fs_write_checkpoint+0x4bb/0x1c90
[  274.318134][   T30]  #5: ffff88805f474440 (&sbi->node_write){++++}-{3:3}, at: f2fs_write_checkpoint+0xd0d/0x1c90
[  274.342180][   T30]  #6: ffff88805f474440 (&sbi->node_write){++++}-{3:3}, at: f2fs_write_checkpoint+0xd0d/0x1c90
[  274.352799][   T30] 
[  274.355647][   T30] =============================================
[  274.355647][   T30] 
[  274.387847][   T30] NMI backtrace for cpu 0
[  274.392212][   T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc7-syzkaller-00149-g0babf683783d #0
[  274.402730][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  274.412798][   T30] Call Trace:
[  274.416082][   T30]  <TASK>
[  274.419016][   T30]  dump_stack_lvl+0x241/0x360
[  274.423711][   T30]  ? __pfx_dump_stack_lvl+0x10/0x10
[  274.428918][   T30]  ? __pfx__printk+0x10/0x10
[  274.433513][   T30]  ? vprintk_emit+0x667/0x7c0
[  274.438200][   T30]  ? __pfx_vprintk_emit+0x10/0x10
[  274.443244][   T30]  nmi_cpu_backtrace+0x49c/0x4d0
[  274.448201][   T30]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  274.453673][   T30]  ? _printk+0xd5/0x120
[  274.457834][   T30]  ? __pfx__printk+0x10/0x10
[  274.462431][   T30]  ? __wake_up_klogd+0xcc/0x110
[  274.467296][   T30]  ? __pfx__printk+0x10/0x10
[  274.471893][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  274.477542][   T30]  ? __rcu_read_unlock+0xa1/0x110
[  274.482579][   T30]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  274.488571][   T30]  nmi_trigger_cpumask_backtrace+0x198/0x320
[  274.494578][   T30]  watchdog+0xff4/0x1040
[  274.498839][   T30]  ? watchdog+0x1ea/0x1040
[  274.503279][   T30]  ? __pfx_watchdog+0x10/0x10
[  274.507976][   T30]  kthread+0x2f2/0x390
[  274.512053][   T30]  ? __pfx_watchdog+0x10/0x10
[  274.516748][   T30]  ? __pfx_kthread+0x10/0x10
[  274.521345][   T30]  ret_from_fork+0x4d/0x80
[  274.525777][   T30]  ? __pfx_kthread+0x10/0x10
[  274.530375][   T30]  ret_from_fork_asm+0x1a/0x30
[  274.535171][   T30]  </TASK>
[  274.540364][   T30] Sending NMI from CPU 0 to CPUs 1:
[  274.545593][    C1] NMI backtrace for cpu 1
[  274.545607][    C1] CPU: 1 UID: 0 PID: 2958 Comm: kworker/u8:6 Not tainted 6.11.0-rc7-syzkaller-00149-g0babf683783d #0
[  274.545632][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  274.545647][    C1] Workqueue: bat_events batadv_iv_send_outstanding_bat_ogm_packet
[  274.545678][    C1] RIP: 0010:batadv_iv_ogm_schedule+0x728/0x10a0
[  274.545705][    C1] Code: ff c6 48 8b 84 24 98 00 00 00 42 0f b6 04 30 84 c0 48 8b 54 24 20 75 17 8b 02 48 39 c6 73 33 48 89 f3 e8 1b b6 14 f6 48 89 d8 <e9> b7 fc ff ff 89 d1 80 e1 07 80 c1 03 38 c1 7c dd 48 8b 7c 24 20
[  274.545724][    C1] RSP: 0018:ffffc90009cef9c0 EFLAGS: 00000293
[  274.545742][    C1] RAX: 0000000000000134 RBX: 0000000000000134 RCX: ffff8880315cda00
[  274.545758][    C1] RDX: 0000000000000000 RSI: 0000000000000134 RDI: ffffffff8c608f40
[  274.545774][    C1] RBP: ffffc90009cefaf8 R08: ffffffff9018766f R09: 1ffffffff2030ecd
[  274.545791][    C1] R10: dffffc0000000000 R11: fffffbfff2030ece R12: ffff88807bf33000
[  274.545808][    C1] R13: ffff88805dd7a280 R14: dffffc0000000000 R15: ffff88805de48998
[  274.545829][    C1] FS:  0000000000000000(0000) GS:ffff8880b8900000(0000) knlGS:0000000000000000
[  274.545848][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  274.545864][    C1] CR2: 0000001b302f3ff8 CR3: 0000000029b96000 CR4: 0000000000350ef0
[  274.545882][    C1] Call Trace:
[  274.545890][    C1]  <NMI>
[  274.545899][    C1]  ? nmi_cpu_backtrace+0x3c2/0x4d0
[  274.545929][    C1]  ? __pfx_lock_acquire+0x10/0x10
[  274.545971][    C1]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  274.546001][    C1]  ? nmi_handle+0x2a/0x5a0
[  274.546037][    C1]  ? nmi_cpu_backtrace_handler+0xc/0x20
[  274.546066][    C1]  ? nmi_handle+0x151/0x5a0
[  274.546089][    C1]  ? nmi_handle+0x2a/0x5a0
[  274.546113][    C1]  ? batadv_iv_ogm_schedule+0x728/0x10a0
[  274.546137][    C1]  ? default_do_nmi+0x63/0x160
[  274.546169][    C1]  ? exc_nmi+0x123/0x1f0
[  274.546199][    C1]  ? end_repeat_nmi+0xf/0x53
[  274.546240][    C1]  ? batadv_iv_ogm_schedule+0x728/0x10a0
[  274.546267][    C1]  ? batadv_iv_ogm_schedule+0x728/0x10a0
[  274.546294][    C1]  ? batadv_iv_ogm_schedule+0x728/0x10a0
[  274.546320][    C1]  </NMI>
[  274.546327][    C1]  <TASK>
[  274.546342][    C1]  ? batadv_iv_ogm_schedule+0x41e/0x10a0
[  274.546373][    C1]  ? __pfx_batadv_iv_ogm_schedule+0x10/0x10
[  274.546397][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  274.546430][    C1]  ? batadv_send_skb_packet+0x41b/0x670
[  274.546467][    C1]  batadv_iv_send_outstanding_bat_ogm_packet+0x6fe/0x810
[  274.546509][    C1]  ? process_scheduled_works+0x945/0x1830
[  274.546540][    C1]  process_scheduled_works+0xa2e/0x1830
[  274.546595][    C1]  ? __pfx_process_scheduled_works+0x10/0x10
[  274.546634][    C1]  ? assign_work+0x364/0x3d0
[  274.546669][    C1]  worker_thread+0x870/0xd30
[  274.546705][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  274.546740][    C1]  ? srso_alias_return_thunk+0x5/0xfbef5
[  274.546773][    C1]  ? _raw_spin_unlock_irqrestore+0xdd/0x140
[  274.546814][    C1]  ? __kthread_parkme+0x169/0x1d0
[  274.546850][    C1]  ? __pfx_worker_thread+0x10/0x10
[  274.546882][    C1]  kthread+0x2f2/0x390
[  274.546902][    C1]  ? __pfx_worker_thread+0x10/0x10
[  274.546933][    C1]  ? __pfx_kthread+0x10/0x10
[  274.546955][    C1]  ret_from_fork+0x4d/0x80
[  274.546990][    C1]  ? __pfx_kthread+0x10/0x10
[  274.547011][    C1]  ret_from_fork_asm+0x1a/0x30
[  274.547058][    C1]  </TASK>
[  274.557409][   T30] Kernel panic - not syncing: hung_task: blocked tasks
[  274.557426][   T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-rc7-syzkaller-00149-g0babf683783d #0
[  274.557456][   T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024
[  274.557472][   T30] Call Trace:
[  274.557483][   T30]  <TASK>
[  274.557494][   T30]  dump_stack_lvl+0x241/0x360
[  274.557529][   T30]  ? __pfx_dump_stack_lvl+0x10/0x10
[  274.557559][   T30]  ? __pfx__printk+0x10/0x10
[  274.557583][   T30]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  274.557628][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  274.557666][   T30]  ? vscnprintf+0x5d/0x90
[  274.557703][   T30]  panic+0x349/0x860
[  274.557728][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  274.557768][   T30]  ? nmi_trigger_cpumask_backtrace+0x244/0x320
[  274.557806][   T30]  ? __pfx_panic+0x10/0x10
[  274.557828][   T30]  ? tick_nohz_tick_stopped+0x82/0xb0
[  274.557859][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  274.557897][   T30]  ? __irq_work_queue_local+0x137/0x410
[  274.557936][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  274.557973][   T30]  ? preempt_schedule_thunk+0x1a/0x30
[  274.558002][   T30]  ? nmi_trigger_cpumask_backtrace+0x244/0x320
[  274.558037][   T30]  ? nmi_trigger_cpumask_backtrace+0x2d4/0x320
[  274.558075][   T30]  ? srso_alias_return_thunk+0x5/0xfbef5
[  274.558113][   T30]  ? nmi_trigger_cpumask_backtrace+0x2d9/0x320
[  274.558153][   T30]  watchdog+0x1033/0x1040
[  274.558194][   T30]  ? watchdog+0x1ea/0x1040
[  274.558244][   T30]  ? __pfx_watchdog+0x10/0x10
[  274.558281][   T30]  kthread+0x2f2/0x390
[  274.558306][   T30]  ? __pfx_watchdog+0x10/0x10
[  274.558343][   T30]  ? __pfx_kthread+0x10/0x10
[  274.558369][   T30]  ret_from_fork+0x4d/0x80
[  274.558406][   T30]  ? __pfx_kthread+0x10/0x10
[  274.558432][   T30]  ret_from_fork_asm+0x1a/0x30
[  274.558488][   T30]  </TASK>
[  274.564915][   T30] Kernel Offset: disabled
[  275.055710][   T30] Rebooting in 86400 seconds..