last executing test programs:

3m5.337317691s ago: executing program 2 (id=279):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socket(0x10, 0x3, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10)
r0 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
lseek(r0, 0x5, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = syz_open_dev$dri(0x0, 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_ADDFB(r3, 0xc01c64ae, &(0x7f00000002c0)={0x0, 0x8, 0x0, 0x7, 0x8, 0x8, 0xfffffffc})
ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r4, &(0x7f0000000580)=ANY=[@ANYBLOB="5200000002"], 0x8)

3m4.219602238s ago: executing program 2 (id=283):
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000002030300"/18], 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl(r0, 0x8b2c, &(0x7f0000000040))

3m2.742100142s ago: executing program 2 (id=287):
pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x80)
r1 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe)
keyctl$KEYCTL_WATCH_KEY(0x20, r1, r0, 0x3b)
ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(r0, 0xc01064c2, 0x0)
r2 = add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000240)={0x0, "2b4e1d28be2fbed2ace38646015f21917de9da37f19686edc98acd58b04f268ed6bfa83a4fd841b4f61c5ae84aa6fe23132a5b031093cc145ed0e67715abcf03", 0x31}, 0x48, r1)
keyctl$unlink(0x9, r2, r1)

3m2.398699687s ago: executing program 2 (id=290):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x4}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x804}, 0x0)
tkill(0x0, 0x4000012)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x10000000, @void, @value}, 0x94)
sched_setscheduler(r0, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_AD_ACTOR_SYS_PRIO={0x6, 0x18, 0xfff}, @IFLA_BOND_AD_LACP_RATE={0x5}, @IFLA_BOND_MODE={0x5, 0x1, 0x4}]}}}]}, 0x4c}}, 0x0)

3m1.889978541s ago: executing program 4 (id=295):
r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dddb)
close(r0)
r1 = open(&(0x7f0000000480)='./file0\x00', 0x80, 0x8)
fcntl$setlease(r1, 0x400, 0x1)
execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)

3m0.901536231s ago: executing program 4 (id=298):
r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x10, &(0x7f0000000080)=0xffff, 0x4)
getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000000), &(0x7f00000000c0)=0x14)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fsmount(r0, 0x0, 0x1)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000086}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
getpgrp(0xffffffffffffffff)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
rmdir(0x0)
r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x200, 0xa401)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, 0x0)
syz_open_procfs(0x0, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0)
ioctl$USBDEVFS_REAPURBNDELAY(r4, 0x4008550d, 0x0)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"})
ioctl$USBDEVFS_CLEAR_HALT(r2, 0x80045515, 0x0)

3m0.001355748s ago: executing program 4 (id=302):
r0 = socket(0x28, 0x1, 0x0)
r1 = syz_io_uring_setup(0x112, &(0x7f0000000280)={0x0, 0x408c, 0x100, 0x8, 0x40}, &(0x7f0000000240)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0, 0x2121, 0x0, {0x3}})
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
io_uring_enter(r1, 0x47f6, 0xb277, 0x0, 0x0, 0x0)

2m59.276355612s ago: executing program 2 (id=306):
mkdir(&(0x7f00000000c0)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
mkdir(&(0x7f0000000440)='./file0\x00', 0x0)
r0 = openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29, r1}, './file0\x00'})

2m58.956335793s ago: executing program 2 (id=308):
r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dddb)
close(r0)
r1 = open(&(0x7f0000000480)='./file0\x00', 0x80, 0x8)
fcntl$setlease(r1, 0x400, 0x1)
execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)

2m58.76220696s ago: executing program 1 (id=309):
socketpair$unix(0x1, 0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sched_setscheduler(0x0, 0x5, 0x0)
openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ptrace(0x10, 0x1)

2m57.625048909s ago: executing program 1 (id=311):
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000000203030000000000000000000000000508"], 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl(r0, 0x8b2c, &(0x7f0000000040))

2m57.116431438s ago: executing program 1 (id=313):
io_setup(0x4, 0x0)
mkdir(0x0, 0x21)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(0x0, 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket$pppoe(0x18, 0x1, 0x0)
connect$pppoe(r1, &(0x7f0000000000)={0x18, 0x0, {0x7, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x35}, 'macvlan1\x00'}}, 0x1e)

2m57.055522268s ago: executing program 4 (id=314):
syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000005700)=ANY=[@ANYBLOB="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"], 0x1, 0x550f, &(0x7f00000001c0)="$eJzs3M9rI+UbAPAn7XZ/f/dbxIO3HViEFjZh0x+L3qru4g/sUlY9eNI0SUN2k0xp0rT25MGjePA/EQVPHv0bPHj2Jh4Ub0IlM1PdqgtC08RtPx+YPPO+efPM84Zl4ZkpCeDcmk9+/bkUN+JKRMxGxPWI7LxUHJm1PLwQETcjYuaJo1TM/zFxMSKuRsSNUfI8Z6l46/Pbw1urP731yzffXbpw7Yuvv5/eroFpezEiutv5+V43j2krj4+K+dqwncXuyrCI+Rvdx8U4zeNeczPLsFc7WlfL4nIrX59u7/ZHcatTq49iq72VzW/38gv2h62jPNkHHtV2snGjuZnFdj/NYusgr2v/IP+/7aA/yPM0inwfZeljMDiK+Xxzv5nvZ/txFuu9QTGf500bzf1RHBaxuFzU004jq2PzJN/0f9vb7d7ufjJs7vTbaS9ZrVRfqlTvlqs7aaM5aK6Ua93G3ZVkodUZLSsPmrXuWitNW51mpZ52F5OFVr1erlaThXvNzXatl1SrleXKnfLqYnF2O3n9wXtJp5EsjOKr7d7uoN3pJ1vpTpJ/YjFZqiy/vJjcqibvrG8kGw/v31/feDfuvf/glfU3XysW/a2sZGHpztJSuXqnvFRdPIP7/+Ap+/+kKHqM+4cTKU27AIBnj/4fmIbT6/93HsbhYTZ/mv1/6P/HYlz97+Ek+t/z3v+fwv7hRPT/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADn1g9zX76Rnczn42vF/P+KqeeKcSkiZiLi8B/MxsVjOWeLPHNPWT/3lxq+LUWWYXSNS8VxNSLWiuO3/5/2twAAAABn11cf3/ws79bzl/lpF8Qk5TdtZq5/OKZ8pYiYm/9xTNlmRi/PjylZ9u/7QuyPKVt2A+vymJLlt9wujCvbvzJ7LFx+IpTyMDPRcgAAgIk43glMtgsBAABgkj6ddgFMRymOHmUePQvO/vL+zweCV46NAAAAgGdQadoFAAAAAKcu6//9/h8AAACcbfnv/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/M7O/dyoDURxAH62cSD/FBTlnla4QRkpIcccIwpIE5RAWkgD1EBuKSGCFR4vWlbsaiWP7d3V90kwjAU/ZhA+zBtpAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOjT33q7+v3z66+uOYdjN3lmAwAAAFyzr7er5sU89d+31z+2lz63/SIiyoi4tnav4s1FZtXm1A+8v743hj8RTcLpO6bt411ELKqIRUT8/9T3rwAAAACv1269WabVenqajz0ghpSKNuWHb5nyioio5/8ypZWnvC+Zwpr/9yR+ZEprClizTGGp5DbJlfYkze1+rtrN7jRFasrHP59t7gAAwICqi2bYVQgAAABD+j72ABhHEbdbmeetwGlq2u29txc9AAAA4AUqxh4AAAAA0Ltm/f+sz/8L5/8BAABAV+n8PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPq0r7er3Xqz7JpzOHaTZzYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3LA/7ygQAmEQBnvXdyZz/8NKg6amJlUgfPyNwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAb373l/8TU+NMMvfaWHoeSdZOja1TY+/cOPrD+Po1AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAxf68pEAIBEEUzBn/O+n7H1YS9AwiREDDo4paNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAX/e6X/xNT40wyd9pYOh5J1q4aW1eNvQeNowfj7d8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAxc79u0ZSxQEAfzOzs/FOxTXKFhFRsNDGy+2dd14nFkqw8E8QQm7vjLcqnim84xDS2Enqa0RLEUGJ3f0PVyeQJnYptohgYbUyszPJ5Ae4/prZZD8fePO+Owzzvm8WQr7zXgIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKXh24dxkh064zguzm3tP1jJ+u1jfebRxs5C1rI4qjPps+HF6oeo21wiAAAAzI6krO9DCLvp5lLWx528/k/La7Ka/9unx3FZzx+v+8u+rP2z9svPe88fDNQZj5Pd9NbqoH/5ZCqt/2+W0+2Zv7yilT/5/N1Lkn8h8Xvrzw3T/HlGXz9+/E47D+fqyBYA+CculX0RlL8PZX2vycQAmBmtSuFd1v9Jp9mcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOowXA9PlnEUQlhoHcaZ7f0HK6f1jzZ2Fsp2/eHDjeo9s1ukIYRbq4P+5RrnMu0+v3f/zvJg0L9bf/BSCKGp0d8qpn/ngwkuDqGR5yP4j4K4+LKnJZ+zETT4QwkAgHMpLVpW1++mm0vZuWg+hNF3R+v/VytxmLD+3/vw+lZ1rGr936tthg2am+yyxbU/RqPRvfuvr368fLt/u//JG1d6b/au3rh27cZi/q5k0RsTAAAA/p120ar1fzx/cv3/YiUOE9b/n33T+7I6VjJr9f+EDhf9ms4EAABgtj378u+/Raecj9rt8MXy2trd3vh48PnK+NhAqn/bXNGq9X8y33RWAAAAQB2G69GR9f+blThMuP7/1Pcv/Fi9ZxJCuFCs/19a+XRws77pTLU6/py46TkCAADQrAtFq67/p/n+//hgy0McQnjtlXFc/BvAier/5N2vfqiOVd3/f7W+KU6luDt+HnnfDaHVbTojAAAAzrMnipYV+7+mm0sf/XTx/bb9/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB1+zMAAP//H1NCtw==")
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mkdir(&(0x7f0000000080)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f0000000140)='./bus\x00')
open(&(0x7f0000000140)='./bus\x00', 0x64842, 0x21)

2m56.989944898s ago: executing program 1 (id=315):
syz_open_dev$usbfs(0x0, 0x206, 0x20182)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0e000000040000000800000006"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000e00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='kfree\x00', r1}, 0x10)
r2 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', <r4=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0x6}, {0xffffffffffffff7f, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD_MASK={0x5, 0xb, 0x1}, @TCA_FQ_CODEL_LIMIT={0x8, 0x2, 0x2}, @TCA_FQ_CODEL_INTERVAL={0x8, 0x3, 0xf384}, @TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0xffffffff}, @TCA_FQ_CODEL_FLOWS={0x8}, @TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8}, @TCA_FQ_CODEL_ECN={0x8}]}}, @TCA_RATE={0x6, 0x5, {0x4}}]}, 0x78}}, 0x0)

2m56.202183849s ago: executing program 1 (id=318):
mkdir(&(0x7f00000000c0)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
mkdir(&(0x7f0000000440)='./file0\x00', 0x0)
r0 = openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0)
r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc018937e, &(0x7f0000000200)={{0x1, 0x1, 0x29, r1}, './file0\x00'})

2m56.074072376s ago: executing program 1 (id=319):
r0 = dup(0xffffffffffffffff)
ioctl$TCGETA(r0, 0x5405, 0x0)
r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
shutdown(r1, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
connect$bt_rfcomm(r1, &(0x7f0000005dc0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x15}, 0xa)

2m54.258976133s ago: executing program 4 (id=323):
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000000203030000000000000000000000000508"], 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl(r0, 0x8b2c, &(0x7f0000000040))

2m52.954060205s ago: executing program 4 (id=325):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = getpid()
sched_setscheduler(r3, 0x1, &(0x7f00000001c0)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000080)={'veth1_to_batadv\x00', {0x2, 0x0, @remote}})
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$9p_rdma(&(0x7f0000000000), &(0x7f0000000180)='.\x00', &(0x7f0000000200), 0x800, &(0x7f0000000b80)={'trans=rdma,', {'port', 0x3d, 0x4e22}})

2m52.56123519s ago: executing program 32 (id=325):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r3 = getpid()
sched_setscheduler(r3, 0x1, &(0x7f00000001c0)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000080)={'veth1_to_batadv\x00', {0x2, 0x0, @remote}})
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount$9p_rdma(&(0x7f0000000000), &(0x7f0000000180)='.\x00', &(0x7f0000000200), 0x800, &(0x7f0000000b80)={'trans=rdma,', {'port', 0x3d, 0x4e22}})

2m43.900654473s ago: executing program 33 (id=308):
r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dddb)
close(r0)
r1 = open(&(0x7f0000000480)='./file0\x00', 0x80, 0x8)
fcntl$setlease(r1, 0x400, 0x1)
execve(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)

2m40.765276113s ago: executing program 34 (id=319):
r0 = dup(0xffffffffffffffff)
ioctl$TCGETA(r0, 0x5405, 0x0)
r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
shutdown(r1, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
connect$bt_rfcomm(r1, &(0x7f0000005dc0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x15}, 0xa)

2m1.956336479s ago: executing program 7 (id=434):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000440)=ANY=[], 0x3c}}, 0x0)
unshare(0x22020400)
socket$inet6(0xa, 0x80002, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0)
sendmsg$nl_route(r1, 0x0, 0x0)
getsockopt$WPAN_WANTACK(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
socket$tipc(0x1e, 0x5, 0x0)
r2 = socket$inet6(0xa, 0x40000080806, 0x0)
bind$inet6(r2, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback, 0xfffffffc}, 0x1c)
listen(r2, 0x20000005)
r3 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x6, @empty}, 0x1c)
r4 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$inet6(r4, &(0x7f00000001c0)=[{{0x0, 0x9b4c, 0x0}}], 0x500, 0x0)

2m1.708294716s ago: executing program 7 (id=436):
r0 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e24, 0x1ff, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2a}}, 0x6}, 0x1c)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000003d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000000c0)="a60991f3927645088b7d44d771c39612e52b2e4b4a86bb410b222573155178b074709db5a37459d8b59a7684a80f", 0x2e}, {&(0x7f0000000800)}], 0x2}}], 0x1, 0x4001c00)

2m0.640582802s ago: executing program 7 (id=440):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, 0x0)
r2 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=<r3=>0x0, &(0x7f0000000280)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0)

1m56.258084902s ago: executing program 7 (id=450):
signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x80000001]}, 0x8, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000100)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@dioread_lock}, {@errors_remount}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x55a, &(0x7f0000000480)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0)
creat(&(0x7f0000000340)='./bus\x00', 0x1c)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r1 = open(&(0x7f0000000500)='./bus\x00', 0x0, 0x42)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x13, 0x0, "ef359f41a4ae6dddfbd1ce5d29c2ee5e5c9d000ff8ee09e737ff0edf110ff4eb4b78c66ee677df701905b9aafab4ffffffff00", "cba3d625780820d1cbf7db71038259ca171ce1a311ef97e4298d1e14ef01060000e9009600fdff00000000000000000000000000000000000400", "d300e6d6ae9ef30bea2a004000"})
pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000300)="ff", 0x1}], 0x1, 0xe7b, 0xfffffffc, 0x0)

1m56.224747397s ago: executing program 5 (id=451):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000004000000000000000000850000002300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='sched_switch\x00', r1}, 0x10)
ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000080)=0xb0000)
semget$private(0x0, 0x2, 0x0)
syz_read_part_table(0x5fd, &(0x7f0000001a40)="$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")
mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil)

1m55.762400394s ago: executing program 5 (id=452):
syz_mount_image$squashfs(&(0x7f0000000840), &(0x7f0000000200)='./file0\x00', 0xc8808, &(0x7f0000000240), 0x1, 0x1a1, &(0x7f0000000880)="$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")
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e20, 0x6, @empty, 0x4}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
getpid()
open(0x0, 0x0, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x8070587c, 0x0)
r2 = syz_open_dev$sg(&(0x7f0000000240), 0x0, 0x500)
ioctl$SG_IO(r2, 0x2285, &(0x7f0000000300)={0x53, 0xfffffffffffffffc, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f00000008c0)="52ef12c9e843", 0x0, 0x0, 0x0, 0x0, 0x0})
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000180)=0x3, 0x4)
ioctl$MON_IOCT_RING_SIZE(0xffffffffffffffff, 0x9204, 0xdd218)
write(0xffffffffffffffff, &(0x7f0000000280)="7cc03ea653eb908275df653f52da32cd3bec28281f7f91fe7285cb532f1e307e57e934bd887bf5abfddf5e1b07b5b7612d24d7a21dd050a0cdd995c3913152f7e7ac429bb3d91f2276221680", 0x4c)
bind$packet(0xffffffffffffffff, 0x0, 0x14)

1m54.842103689s ago: executing program 7 (id=455):
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r1=>0x0})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000240), &(0x7f00000003c0)=r5}, 0x20)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000200)={r4, r1, 0x25, 0x2, @val=@tcx={@void, @value}}, 0x1c)
syz_emit_ethernet(0x0, 0x0, 0x0)

1m53.954177139s ago: executing program 7 (id=460):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x0, 0x0, 0x0)

1m52.936467116s ago: executing program 35 (id=460):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(0xffffffffffffffff, 0x4040aea0, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x0, 0x0, 0x0)

1m52.91972332s ago: executing program 5 (id=466):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001fc0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r0}, &(0x7f0000000000), &(0x7f00000005c0)=r1}, 0x20)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff0000000000000000000600", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0)

1m52.178049981s ago: executing program 5 (id=468):
syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000b80)=ANY=[@ANYRES16=0x0, @ANYRESDEC, @ANYRESHEX, @ANYRESDEC, @ANYRES8=0x0, @ANYRES64, @ANYBLOB="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", @ANYRES8=0x0, @ANYRES32=0x0], 0x1, 0x1e9, &(0x7f0000000980)="$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")
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080)='devpts\x00', 0x0, 0x0)

1m50.914235365s ago: executing program 5 (id=470):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[], 0x114}}, 0x0)

1m48.686099486s ago: executing program 5 (id=475):
r0 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e24, 0x1ff, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2a}}, 0x6}, 0x1c)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000003d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000000c0)="a60991f3927645088b7d44d771c39612e52b2e4b4a86bb410b222573155178b074709db5a37459d8b59a7684a80f", 0x2e}, {&(0x7f0000000800)="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", 0x2c0}], 0x2}}], 0x1, 0x4001c00)

1m47.77044666s ago: executing program 36 (id=475):
r0 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e24, 0x1ff, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2a}}, 0x6}, 0x1c)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000003d00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000000c0)="a60991f3927645088b7d44d771c39612e52b2e4b4a86bb410b222573155178b074709db5a37459d8b59a7684a80f", 0x2e}, {&(0x7f0000000800)="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", 0x2c0}], 0x2}}], 0x1, 0x4001c00)

18.749782834s ago: executing program 0 (id=675):
r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x10, &(0x7f0000000080)=0xffff, 0x4)
getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000000), &(0x7f00000000c0)=0x14)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fsmount(r0, 0x0, 0x1)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000086}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
getpgrp(0xffffffffffffffff)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0)
rmdir(0x0)
r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, 0x0)
syz_open_procfs(0x0, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0)
ioctl$USBDEVFS_REAPURBNDELAY(0xffffffffffffffff, 0x4008550d, 0x0)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"})
ioctl$USBDEVFS_CLEAR_HALT(r2, 0x80045515, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2c000011)

16.567190805s ago: executing program 0 (id=677):
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b70500000000000061"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e0b010510"], 0xe)

16.556472874s ago: executing program 8 (id=678):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000004c0)={[{@delalloc}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x2}}, {@nombcache}, {@data_err_ignore}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@oldalloc}, {@grpquota}, {@noload}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001080)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0)
lseek(r0, 0xfffffffffffffffc, 0x2)
getdents(r0, 0x0, 0x54)

16.382145415s ago: executing program 0 (id=679):
r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd4)
write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[], 0x69)
r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000004c0)=[0x7], &(0x7f0000000500)=[0x2], 0x0, 0x1}}, 0x40)
r3 = memfd_create(&(0x7f0000000040)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t%\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\xec\xd4D\x8a\x1f\x1b\xf6\x18\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbeQ\xee\xf0\x99\x1e|C\xd8\x01\xd0\xf5\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajnW\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0)
execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)

16.203226764s ago: executing program 0 (id=681):
bpf$MAP_CREATE(0x0, 0x0, 0x50)
socket$nl_route(0x10, 0x3, 0x0)
syz_clone(0x1800000, 0x0, 0xffffffffffffff8b, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000570000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})
r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0)
setxattr$security_capability(&(0x7f0000000280)='./file1\x00', 0x0, &(0x7f0000000300)=@v2, 0x14, 0x0)
fchmodat(r1, &(0x7f00000000c0)='./file1\x00', 0x0)

16.026009244s ago: executing program 8 (id=682):
ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f0000000240)={0x0})
ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, 0x0)
r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0xfffffffb, 0xffdffffe}, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_open_dev$usbmon(0x0, 0x4, 0x181)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x3, 0x2000, @fd_index=0x2, 0x4, &(0x7f0000000440)=[{&(0x7f0000000340)}, {&(0x7f00000000c0)="78d88714c50173fbee80e8143ba799d9c8df6c7fb6f36b8668c7562dbd1076787260aa6d85c6bcacf7b85858679caf1b6d8b92594cdd7c3658a268d0b19a", 0x3e}], 0x2, 0x5, 0x1, {0x2}})
io_uring_enter(r0, 0x47f4, 0x0, 0x1, 0x0, 0x0)

15.796331867s ago: executing program 0 (id=684):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x995e1000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000a80), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x18, r4, 0x301, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x4}]}, 0x18}}, 0x4004810)

14.534709283s ago: executing program 9 (id=685):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r3 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r4=>0x0}, 0x0)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000380)={0x7, 0x80, 0x1, 0x7, 0xb5, 0x6, 0x655, 0x8, r4}, &(0x7f00000003c0)=0x20)
syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22)
r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000100)=0x80000)
syz_emit_vhci(0x0, 0x7)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780})
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000200), 0xfc, 0x56d, &(0x7f00000013c0)="$eJzs3c9rHFUcAPDvTJI2/aFJoRT1IIEerNRumsQfFTzUo2ixoHcNyTaUbLoluylNLNge7MWLFEHEgujdu8fiP+BfUdBCkRL00MvKbGbTbbObX910t93PB6Z9b2Y273135vv2zc4uG0DfGsv+SSNejYjvkoiRpm2DkW8cW9tv9cG1mWxJolb77J8kknxdY/8k//9QXnklIv74JuJkurHdyvLK/HSpVFzM6+PVhcvjleWVUxcXpueKc8VLk1NTZ96Zmnz/vXc7Fuub5//78dM7H5359vjqD7/dO3IribNxON/WHMdTuN5cGYux/DkZirNP7DjRgcZ6SdLtDrArA3meD0U2BozEQJ71LdVGnmXXgD32dZbWQJ9K5D/0qcY8oHFt36Hr4OfG/Q/XLoA2xj+49t5IDNevjQ6uJo9dGWXXu6MdaD9r4/e/b9/Klujc+xAAW7p+IyJODw5uHP+SfPzbvdPb2OfJNox/8OzcyeY/b7Wa/6Tr859oMf851CJ3d2Pr/E/vdaCZtrL53wct57/rN61GB/LaS/U531By4WKpmI1tL0fEiRjan9U3uZ/zZbp6t9ZuY/P8L1uy9htzwbwf9wb3P/6Y2enq9FMF3eT+jYjXWs5/k/Xjn7Q4/tnzcX6bbRwr3n693bat499btV8i3mh5/B/d0Uo2vz85Xj8fxhtnxUb/3jz2Z7v2ux1/dvwPbh7/aNJ8v7ay8zZ+Hn5YbLdtt+f/vuTzenlfvu7qdLW6OBGxL/lk4/rJR49t1Bv7Z/GfOL75+Nfq/D+QJfY247959GbzrsM7i39vZfHP7uj477xw9+OvfmrX/vaO/9v10ol8zXbGv+128GmeOwAAAAAAAOg1aUQcjiQtrJfTtFBY+3zH0TiYlsqV6skL5aVLs1H/ruxoDKWNO90jTZ+HmMg/D9uoTz5Rn4qIIxHx/cCBer0wUy7Ndjt4AAAAAAAAAAAAAAAAAAAA6BGHIoZbff8/89dAt3sH7LlNfvIbeMG1z/98Syd+6QnoSV7/oX/Jf+hfu8z/WttfNQWeG17/oX/Jf+hf8h/6l/yH/rWT/P/13B52BAAAAAAAAAAAAAAAAAAAAAAAAAAAAF4M58+dy5ba6oNrM1l99sry0nz5yqnZYmW+sLA0U5gpL14uzJXLc6ViYaa8sNXfK5XLlycmY+nqeLVYqY5Xlle+WCgvXXpYW1MceiZRAQAAAAAAAAAAAAAAAAAAwPOlsrwyP10qFRcVFHZVGOyNbnShkOY51Cv96WyhywMTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADT5PwAA//9RjD5B")
r6 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0)
pwrite64(r6, &(0x7f0000000080)='\r', 0x1, 0x8000c61)
rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000100)='./file0/file0\x00')

14.153014015s ago: executing program 6 (id=686):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
dup3(r1, r1, 0x0)
r2 = socket(0x1d, 0x2, 0x6)
r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000040))
openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
r4 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65)
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r4, 0xc0884113, &(0x7f0000000240)={0x1, 0x1400000, 0x0, 0x10001, 0x0, 0xfffffffffffffffe, 0x480, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000002240)={'ip6tnl0\x00', <r5=>0x0, 0x2f, 0x9, 0x4, 0xe, 0x2, @empty, @local, 0x700, 0x8000, 0x5, 0x4}})
sendmsg$nl_route_sched_retired(r2, &(0x7f0000003000)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000022c0)=@newtclass={0xd28, 0x28, 0x200, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x9, 0xd}, {0x10, 0x6}, {0x4, 0x10}}, [@c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5, 0x4, 0x5}}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5, 0x4, 0x2}}}, @c_cbq={{0x8}, {0x86c, 0x2, [@TCA_CBQ_LSSOPT={0x18, 0x1, {0x3c, 0x1, 0x18, 0x92, 0x9, 0x1, 0xffff1225, 0xffffffff}}, @TCA_CBQ_RATE={0x10, 0x5, {0x9, 0x1, 0xe, 0x9, 0x0, 0x4}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0xfff1}, 0x5, 0x8}}, @TCA_CBQ_RTAB={0x404, 0x6, [0xfffffffa, 0x0, 0xfffffff9, 0x1, 0x8, 0x6, 0x5, 0x7fff, 0xffffffff, 0x6, 0x1ff, 0x6, 0x1, 0x3, 0x8, 0x3, 0x637, 0x0, 0x6, 0x400, 0x400, 0x6, 0x8, 0x80000001, 0x400, 0xfffffffe, 0xd, 0x6, 0x4, 0xb0, 0x9, 0x3, 0x5, 0x40, 0x80000000, 0x5, 0x7f, 0x0, 0x1, 0x4aaffa28, 0x4, 0x8, 0x9, 0x2, 0x5, 0x5, 0x10000, 0x10000, 0x7, 0x3ff, 0x1, 0x5, 0x2, 0x0, 0x6, 0x1, 0xaa42, 0x4bf, 0x6, 0xf, 0x5, 0xde11, 0x0, 0x3ff, 0x2, 0x1, 0xff, 0x8, 0xe698, 0x101, 0xfffffffb, 0x10001, 0xe, 0x81, 0xfb91, 0xfffffff4, 0x6, 0x4, 0x7, 0x9, 0x1, 0x7, 0x9, 0xfff, 0xfffffffb, 0x1, 0xffffffff, 0x401, 0x128c7c96, 0x2c, 0x8, 0x9, 0x3, 0x10000, 0x8, 0x2, 0x5, 0x5, 0xbe, 0xd, 0x0, 0x1, 0x8, 0xef3, 0x80000000, 0x10001, 0x1, 0x4, 0x2, 0x6, 0x9, 0x5, 0x1, 0x255, 0x80, 0x6, 0x7, 0x4, 0x0, 0x5, 0x5, 0xf, 0xe2, 0x1, 0x3, 0x3, 0x2, 0x0, 0x0, 0x81, 0x5, 0xffff33b4, 0x0, 0x590, 0x4, 0xe8d, 0x9, 0x3, 0x0, 0x2, 0x8000, 0x5, 0x3, 0x7, 0x6, 0x6, 0x9, 0x893, 0x2, 0x7, 0x8, 0x44a, 0xa, 0x8, 0xfffffffd, 0x30000, 0x0, 0x22, 0x8, 0x0, 0x10000, 0x6, 0x2, 0x1, 0xfc000000, 0xf, 0x3, 0x80000001, 0x7, 0x6, 0x5, 0x10001, 0x3, 0xa, 0x80000001, 0x6, 0x0, 0x8, 0x3, 0x0, 0x2, 0x6, 0x3, 0x0, 0xa, 0x4, 0x5, 0x3, 0x9, 0x1000, 0x5, 0x81, 0x9, 0x7, 0x7, 0x9, 0x77, 0x7a, 0x5, 0xffffffff, 0x1, 0x0, 0x1, 0x6, 0xffffffff, 0x8, 0x8, 0xb62, 0x1, 0xfd, 0x52ae, 0x2957, 0xc4, 0x7, 0x4, 0x8, 0x7fffffff, 0xa, 0xfffffffa, 0x7f, 0x3, 0x1, 0x6, 0x6, 0x1ff, 0x7e7, 0xfffffff8, 0x2, 0x1, 0x4, 0x4, 0x2, 0x10001, 0xffffffff, 0x4, 0x3, 0x4, 0xffff, 0x7, 0xe, 0x9c8a, 0x0, 0x9, 0xbe2, 0x6, 0xb1e, 0x3, 0x378, 0xfffffffd, 0x1, 0x800, 0x3, 0x40, 0x9, 0x30, 0xb5]}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x2c, 0x3, 0x1b, 0x8, 0x2, 0x6, 0x200, 0x4}}, @TCA_CBQ_RTAB={0x404, 0x6, [0x1, 0xee, 0x0, 0x0, 0x40, 0x3ff, 0x7fff, 0x37e8a01, 0x100, 0x2, 0x9a, 0xa2, 0x2, 0x0, 0x18, 0x1, 0x7fffffff, 0x5, 0x3c2, 0x800, 0x7, 0x3, 0xa94, 0x4, 0x0, 0x0, 0x324, 0x2, 0x2, 0x2, 0x4, 0xfffffffa, 0xcf, 0x9, 0x5, 0x6, 0x1, 0xdb, 0x4, 0x4, 0x8, 0xdc, 0xcfa, 0x85d, 0x400, 0x2, 0xffff, 0x73, 0x0, 0x40100000, 0x8, 0x8, 0x4, 0x0, 0x82ce, 0x2, 0x8001, 0xc7, 0x9, 0x4a3, 0x1, 0x1, 0xfd, 0x4196, 0x7ff, 0x4, 0x4, 0x5, 0xff, 0x2, 0x2, 0xfff, 0x6, 0xfffff5d3, 0x3, 0x0, 0x0, 0xc06, 0x2, 0x2, 0x7, 0x5, 0x4, 0x8, 0x20000000, 0x2, 0x8, 0x76c, 0x9, 0x2ae2, 0x9, 0xfff, 0x5, 0x6, 0x10001, 0x8, 0x10001, 0x6, 0x5, 0x8, 0x7ff, 0x4, 0x1, 0x3, 0x3ff, 0xb, 0x2, 0x1, 0x81, 0x3, 0x21ab, 0x19, 0xc0fe, 0x101, 0x3, 0x3, 0xd, 0x5, 0xfffffffe, 0x4, 0x2, 0x100, 0x8, 0x5, 0x7, 0x1000, 0x0, 0xa, 0x9, 0x6, 0xc, 0xff, 0x80, 0x1479, 0x40, 0x7f, 0x5, 0x2, 0x802, 0x0, 0xfff, 0x9, 0x5, 0x400, 0x5, 0x2a482465, 0x3f0, 0x6, 0xb, 0xe0e, 0x10000, 0x7fff, 0x441c, 0xffffd30b, 0x8, 0x4, 0x10001, 0x5, 0x9, 0xffffffff, 0x0, 0x2, 0x0, 0x10, 0x88, 0x4, 0x7, 0xffffffc0, 0x9, 0xbab, 0x2, 0x4, 0x3c, 0xc, 0x40, 0x3, 0x8, 0x40, 0x2, 0x10, 0x2, 0x7, 0xfff, 0x8, 0x2, 0x8, 0xd, 0x5000000, 0x7fb, 0x5, 0x6, 0x8, 0x3, 0x5, 0x0, 0x8, 0x6, 0x7f, 0x9, 0x8000, 0x7, 0x800, 0x10, 0x19b, 0x1, 0x8824, 0x1, 0x61, 0xa, 0xc76, 0x6, 0x80000, 0x3, 0x5, 0x8, 0xe5c, 0x3, 0x4, 0x8, 0x7f4, 0x2, 0x8, 0xffffff80, 0xc2, 0x0, 0x0, 0x10001, 0x10, 0x3, 0xf6, 0x10000, 0x7fff, 0x7, 0xffff, 0xa61, 0x200, 0x9, 0xfffffffb, 0x8001, 0x2, 0x9, 0x412, 0x112, 0x5, 0x8c, 0x0, 0x6, 0x8, 0x75dd, 0x9, 0x3, 0x5, 0x8, 0x1ff, 0x101, 0x5]}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x4, 0x5, 0x6, 0x0, 0x0, 0x8}}]}}, @c_cbq={{0x8}, {0x458, 0x2, [@TCA_CBQ_LSSOPT={0x18, 0x1, {0x6, 0x3, 0x4, 0xd, 0x9ba, 0x0, 0xc9b8, 0xd01a}}, @TCA_CBQ_RATE={0x10, 0x5, {0x1, 0x2, 0x10, 0x1, 0x5, 0x4}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0xffe0, 0xc}, 0x3, 0x7}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x3f, 0x0, 0xa, 0x3, 0xfff, 0x3a, 0xffffffff, 0x8}}, @TCA_CBQ_RTAB={0x404, 0x6, [0x9, 0xfffffffc, 0x6, 0x100, 0xfffffff8, 0xffffffff, 0x5, 0x8, 0xd69, 0x3, 0xef, 0x4, 0x54, 0x5, 0x8, 0x1, 0x2d6, 0x5, 0x3, 0x9582, 0x9, 0x0, 0x2, 0x9, 0x101, 0x8001, 0x1, 0x9, 0xe7c2, 0x80, 0x3, 0x5, 0x9, 0x7, 0x40, 0x2, 0x1, 0x1, 0x7, 0x4, 0x9, 0x400, 0x0, 0x4, 0x1, 0x8e, 0x400, 0x1c000, 0xe, 0x2, 0x5, 0x5, 0x4, 0x400, 0x1ff, 0x3, 0xfffffffb, 0x4, 0x7, 0x8001, 0x5, 0x3, 0x1, 0x7bc9, 0x996, 0x0, 0x8, 0xa7c4, 0x101, 0x8, 0xf62, 0xe, 0xff, 0x6, 0x40, 0x51, 0x1, 0x2, 0x7, 0x10000, 0xfffffffb, 0x7, 0x7, 0x5, 0xb, 0x9, 0x7f, 0xfffffe3d, 0x3, 0xe5, 0x5, 0x0, 0x4, 0x0, 0x12227dc6, 0x752, 0x7, 0x8, 0xe, 0xfffffff7, 0x80000001, 0x7, 0x3ca, 0x4, 0xc0c, 0x4, 0x1, 0x0, 0x0, 0xa5, 0x38000000, 0x6, 0x3, 0x9c0, 0x9, 0x1, 0x5, 0x9, 0xfc, 0x10000, 0x81, 0x8e, 0xd, 0x3, 0x7, 0x3d3, 0xfffffff8, 0xe, 0x4, 0x4, 0x7, 0x2cf, 0x3, 0x9, 0x5, 0x3, 0x110, 0x0, 0x8, 0x3, 0x8, 0xce, 0x4, 0xb7, 0x40, 0x800000, 0x9, 0xb42d, 0x1, 0x0, 0x6, 0x7, 0x5, 0x6, 0x8000, 0xfb58, 0x8, 0x7fffffff, 0x957, 0x3f, 0xffffffff, 0x10001, 0x80000001, 0xa, 0x2, 0x3, 0x3, 0x8, 0x4, 0xef14, 0x1, 0x1, 0x2, 0x1a0e, 0x4, 0xffff8000, 0x5, 0x0, 0x2, 0xffff0001, 0xff800000, 0xd6, 0x6, 0xa3, 0x1, 0x0, 0x1000, 0x7, 0x88, 0x5, 0xfffffffd, 0x2800000, 0x3ff, 0x7, 0xd, 0x7f, 0x6df3, 0x101, 0xa43, 0x3, 0x3, 0x8, 0x8, 0x3, 0x5, 0x6, 0x5, 0x401, 0x2, 0x56be29ca, 0x7fff, 0x8001, 0x0, 0x7, 0x0, 0x1, 0x7, 0x8, 0x5, 0x7, 0x91, 0x8, 0x9, 0xb6f1, 0x7f3, 0x5, 0x4, 0x4e, 0x80000000, 0x5, 0x4, 0x100, 0x602, 0x3, 0x6, 0x6a6, 0x1, 0x5, 0xe, 0xb0b0, 0xf8a6, 0x7, 0x4, 0x0, 0x3, 0x1, 0x5, 0x0, 0xfffffffe, 0x0, 0x2, 0x8, 0xffff, 0xfff, 0x36b122d2, 0x8]}]}}]}, 0xd28}, 0x1, 0x0, 0x0, 0x20000800}, 0x4880)
r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000080)={0x0, "4fcb813dd28b42bee2b094a3de6dbfd30a74457bcd1cfd5feffe5c019f45d57f"})
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PACKETS_PER_SLAVE={0x8}]}}}]}, 0x3c}}, 0x0)
dup(0xffffffffffffffff)

11.662266332s ago: executing program 9 (id=687):
r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x10, &(0x7f0000000080)=0xffff, 0x4)
getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000000), &(0x7f00000000c0)=0x14)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fsmount(r0, 0x0, 0x1)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000086}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
getpgrp(0xffffffffffffffff)
rmdir(0x0)
r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x200, 0xa401)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, 0x0)
syz_open_procfs(0x0, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0)
ioctl$USBDEVFS_REAPURBNDELAY(r4, 0x4008550d, 0x0)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"})
ioctl$USBDEVFS_CLEAR_HALT(r2, 0x80045515, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2c000011)

11.653839323s ago: executing program 3 (id=688):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='rseq_update\x00', r0}, 0x18)
rseq(&(0x7f0000000080), 0x20, 0x0, 0x0)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r2 = eventfd2(0x0, 0x0)
read$eventfd(r2, &(0x7f0000000040), 0x8)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
socket(0x5, 0x1, 0x0)
syz_open_procfs(0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
close(0xffffffffffffffff)

10.246746797s ago: executing program 3 (id=689):
r0 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xd0f, 0x470bd2d, 0xfffffffd, {0x60, 0x0, 0x0, r2, {0x0, 0xfff2}, {0xfff1, 0xffff}, {0xfff1, 0xfff3}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xcf}]}, 0x38}}, 0x40081)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4000)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0)

10.19841717s ago: executing program 9 (id=690):
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000000)='./bus\x00', 0x8, &(0x7f00000009c0)={[{@flushoncommit}, {@space_cache}, {@nobarrier}, {@fragment_all}, {@metadata_ratio={'metadata_ratio', 0x3d, 0x9}}, {@nossd_spread}, {@nobarrier}, {@rescan_uuid_tree}, {@clear_cache}, {@enospc_debug}, {@thread_pool={'thread_pool', 0x3d, 0x3}}, {@discard}, {@commit}]}, 0x3, 0x55a3, &(0x7f0000005640)="$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")
r0 = socket(0x2, 0x80805, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000840)=0x7)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
syz_mount_image$jfs(&(0x7f0000000400), &(0x7f0000000380)='./file1\x00', 0x1c802, &(0x7f0000002740)=ANY=[], 0x3, 0x5f4f, &(0x7f0000009040)="$eJzs3V1vHFf9B/DfPnj90H/TqPqrChEXbgqlpTTPCZSnplxwAUggoVyTyHWrQFpQEhCtIuIqF4gLHl4C3PSGi76RIvEKEC+ASAlXlaAMGvucZDxeex1i76x9Ph/JmfntmfGeydfj2fXM7AkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIL7z7R+e6UXElV+kB45G/F8MIvoRi3W9HPXMpbz8MCKOxXpzPBcRg/mIev31f56JOB8RHx+JuP/g9kr98Nld9uPC6Vs3Pv3ut/7269/fPfbjN3/0Ybv9B/9/7qPf3Ik4+v3XPvr0zt5sOwAAAJSiqqqql97mH0/v7/tddwoAmIp8/K+S/LharVar97T+XX+2+qMutG6qxrvTLCJirblO/ZrB6XgAOGDW4pOuu0CH5F+0YUQ81XUngJnW67oD7Iv7D26v9FK+vebxYHmjPf+dclP+a72H93dsN52kfY3JtH6+7sYgnt2mP4tT6sMsyfn32/lf2WgfpeX2O/9p2S7/0catT8XJ+Q/a+bdsyv8PEXFg8++Pzb9UOf/h4+S/NjjA+7/8AQAAAAA4/PLf/492fP53/sk3ZVd2Ov+7PKU+AAAAAAAAAMBee9Lx/x4y/h8AAADMrPq9eu2PRx49tt1nsdWPX+5FPN1aHihMullmqet+AAAAAAAAAAAAAEBJhhvX8F7uRcxFxNNLS1VV1V9N7fpxPen6B13p2w8l6/qXPAAAbPj4SOte/l7EQkRcTp/1N7e0tFRVC4tL1VK1OJ9fz47mF6rFxvvaPK0fmx/t4gXxcFTV32yhsV7TpPfLk9rb369+rlE12EXHpqPDwAEgIjaORvcdkQ6Zqnomun6Vw8Fg/z987P/sRtc/pwAAAMD+q6qq6qWP8z6ezvn3u+4UADANC/n43z4voFar1Wq1+vDVTdV4d5pFRKw116lfMxiOHwAOmLX4pOsu0CH5F20YEce67gQw03pdd4B9cf/B7ZVeyrfXPB6k8d3ztSCb8l/rra+X1x83naR9jcm0fr7uxiCe3aY/z02pD7Mk599v539lo32Ultvv/Kdlu/zr7TzaQX+6lvMftPNvOTz598fmX6qc//Cx8h/IHwAAAAAAZlj++//Rcs//DnJ/lqfUBwAAAAAAAADYa/cf3F7J973m8/+fHbNcrznn/s9DI+ff23X+7v89THL+/Xb+rQtyBo35e288yv+fD26vfHjrH5/J05nPf24wqp97rtcfDNM1P9XcW3EtrsdqnN6y/HBT+5kt7XOb2s9OaD+3pX1Uty/m9pOxEj+N6/Hmw/b5CRdGLUxorya05/wH9v8i5fyHja86/6XU3mtNa/c+6G/Z75vTcc9z6c//fnHr3jV9d2PwcNua6u070UF/1v9PnhrFz2+u3jj5y6u3bt04E2my6dGzkSZ7LOc/l75y/i+9sNGef+8399d7H4weO/9ZcTeG2+b/QmO+3t6Xp9y3LuT8R+kr55+PQOP3/4Oc//b7/ysd9AcAAAAAAAAAAAAAAAB2UlXV+i2ilyLiYrr/p6t7MwGAqfrt99JMlYRarVar1epDWzdV473eLGJh8zoXI+JX474ZADDL/hMRf++6E3RG/gXLn/dXTz/XdWeAqbr53vs/uXr9+uqNm133BAAAAAAAAAD4X+XxP5cb4z+vXwfUGjd60/ivb8TygR3/sz8arI91njbo+dh5/O8TsfP438MJzzc3oX00oX1+QvvChPaxN3o05PyfTxnn/I+nDStp/NeXOuhP13L+J9JYzzn/L7SWa+Zf/ekg59/flP+pW+/87NTN995/9do7V99efXv13TOnL54/d+H8uQsXTr117frq6Y1/O+zx/sr557GvXQdalpx/zlz+Zcn5fz7V8i9Lzv/FVMu/LDn//HpP/mXJ+ef3PvIvS87/5VTLvyw5/y+mWv5lyfm/kmr5lyXn/6VUy78sOf9XUy3/suT8T6Za/mXJ+Z9KtfzLkvPPZ7jkX5acf76yQf5lyfmfTbX8y5LzP5dq+Zcl538+1fIvS87/QqrlX5ac/8VUy78sOf8vp1r+Zcn5fyXV8i9Lzv+1VMu/LDn/r6Za/mXJ+X8t1fIvS87/66mWf1ly/t9ItfzLkvP/ZqrlX5ac/+upln9ZHn3+v5kpz/zrLxEz0A0zpc68+9edlun6NxMAAAAAAAAAAAAA0DaNK4273kYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+C87cCAAAAAAAOT/2ghVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV2IEDAQAAAAAg/9dGqKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsLe3cXIVd5nAD/7Za8NCW4ghBAnrI0BA4t311/gEINJQkpJm1IS0qYlNY69Nk78Ve86AYTKUmhLFKQitRf0omkSpVGktgJFkZpKNEJqpPauXCXiJmolLiwVKgcllVIFtjpz3vfdmdnZmfXH4jnn/H4I/70zZ2beOXNmdp+1nhkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaLbhY9N/PpBlWf5/4491WXZp/vc12Z78y7mdF3uFAAAAwPl6q/HnP1yWTtizjAs1bfNvH/qP78/Pz89nX3jz9Nt/OT+fzhjLsqHVWdY4L/r3X/5ivnmb4KlsdGCw6evBHjc/1OP84R7nj/Q4f1WP81f3OH+0x/mLdsAia4rfxzSubFPjr+uKXZpdkY00ztvU4VJPDaweHIy/y2kYaFxmfuRgdjg7kk1nk4suM9D4L8te2pDf1j1ZvK3Bpttan2XZmZ89vj+uYSDs401Zy401ND92b9yVjb35s8f3f2f29fd3mj13w6KVZtnmjfk6n86yhV9XZQPZ6rRP4joHm9a5vsM6h1rWOdC4XP739nWeWeY64/0eDet8pcs614fTHrk2y7K5bMlt2j2VDWZr22417e/R4ojIryN/KN+TDZ/VcbJhGcdJfpnXrm09TtqPybj/N4R9MrzEGpofjjeeXLVov5/rcZLf6344VvPrvi+/0dHR5l+tthyr+TaPX7f0MdDxsetwDKRjuekY2NjrGBhcNdQ4BgYX1ryx5RiYWnSZwWygcVunr+t+DEzMHj0xMfPoY7ccPrrv0PSh6WNTkzu3b9uxfduOHRMHDx+Zniz+PLtdWiJrs8F0DG4MrzXxGLyhbdvmQ3L+mxfueTDaJ8+D/L5/5vp8QZcOZksc4/k2T28+/+dB+r7f9DwYbnoedHxN7fA8GF7G8yDf5szm5X3PHG76v9MaVuq1cF3TMXAxvx/mt/ngjUu/Fq4P63rmprP9fji06BiId2sgPPfyU9LPe6O3hf2y+Li4Oj/jklXZqZnpk1se2Tc7e3IqC+MdcXnTY9V+vKxtuk/ZouNl8KyPlz1//6vrr+5w+rqwr0Zv7v5Y5dtsH+/+WDVe3Vv356qs2J8tp27NwrjA3un92em7Wb4/U5bosj/zbZ6+5fx/Fky5pOn1b6TX69/QyHDx+jeU9sZIy+vf4odmqLGyLDtzy/Je/0bC/+/0698VffL6l++rB7d0PwbybZ6ZONtjYLjr69+1YQ6E9dwYEsNoU+5/u3H+XHGYNj2WPY+b4eGRcNwMx1tsPW62LbpMfm35bW+ePLfjZvO1rY9Vy88tFTxu8n31V5Pdj5t8m5enzv+1Y038a9Nrx6pex8DI0Kp8vSPpIChe7+bXxGNgS7Y/O54dyQ6ky+SPcn5b41uXdwysCv+/068dV/XJMZDvq+e3dj8G8m1+tO3C/uy0OZyStmn62an99wtLZf6rhxeur323XejMn6/z4z/+VDqtU4bIt3l9+9nmjO776eZwyiUd9lP782epY/pA9s7sp6vCOo/s6P67qXybK3Yu83jak2XZq1OvNn7fFX6/+71TP/5+y+99O/1O+dWpV++duP8nZ7N+AADO3duNP+dWFT9rNv2L9XL+/R8AAAAohZj7B8NM5H8AAACojJj7h8JM5H8AAACojJj7h8NMapL/H75t1wtvPZGldwOcD+L5cTfcd0exXex4z4Wvx+YX5Kd/9NsjL3z1ieXd9mCWZb+69wMdt3/4jriuwom4zg+3nr7IVdcs6/YfemBhu+b3Tzizq7j+eH+WexjErvJLE1sb1zv26FRjvnxv1pj3zz3zVHH9xddx+9Pbiu3/JrxpyZ6DAy2X3xzWsynMsfCeMvftWdgP+YyXe2H9h/718s8u3F683MDGdzfu5vN/XFxvfI+o5y4vto/3e6n1/8vXvvtCvv0j13Ve/xODndd/Olzva2H+cnexffM+/2rT+v80rD/eXrzclm/9sOP6X3xfsf2L4bj4Rpjt67/rLz74VqfHK97OntuLy8Xbn/zf7Y3LxeuL19++/tEnplr2R/v1v/xmcT27v/zzoebt4+nxdqKHbm89vgfC49vSI8+y7Lt/lrXs5+wjxeX+uW398fpO3N55/Te3rfPEwDWNyy/cn3Ut9+vrf7e14/2N69nzj+ta7s9zd4f99+bEj/LrPX1/OB7D+f/3SnF97e9l+uLdra83cftvrCuet/H6JtrW/1zb+ueuyfdd7/Xf82ax/hfvXN2y/j2fCMfTPcXstf5Df3tZy+W/+Z3i8Tj5lfFjx2dOHT7QtFebn8erR9esveTSd737svBa2v713uOzD0+fHJscm8yysRK+ZeBKr/9bYf5PMeYu/C0UfvLz4rh79pPF960bflF8/Vw4/aHweMbvj1//65GW47X9cZ+7s5jnu/6bwjqW631f+69rlrXh6c+/dOqf/uT19p8L4v058d7Rxv17fsOVjfMGXi7Ob3+96uU/39v6vP7p8GRj/iDs1/nwzswbryxur/3643uTPPvp4vkbf5KLl8/a3k9k3VDr/Tjf9f80/Bzzw6taX//i8fGDJ9rezXldNpAvYS68PmRzxflxq7i/nz1zZcfbi+/Dk829/2yWuaSZR2cmjhw+duqRidnpmdmJmUcf23v0+Kljs3sb712694u9Lr/w/F7beH4fmN65PWs8248XY4Vd7PWfeGD/gVsnrz8wfXDfqYOzD5yYPnlo/8zM/ukDM9fvO3hw+iu9Ln/4wO6prbu23bp1/NDhA7tv27Vr267xw8eO58soFtXDzskvjR87ubdxkZnd23dN7dixfXL86PED07tvnZwcP9Xr8o3vTeP5pb88fnL6yL7Zw0enx2cOPza9e2rXzp1be77749ETB2fGJk6eOjZxamb65ERxX8ZmGyfn3/t6XZ56mDkeXu/aDISfzj938870/ri5bz+55FUVm7T+eJq9Ed4LKn5/6/V1zP0jYSY1yf8AAABQBzH3hzf+XzhD/gcAAIDKiLl/dZiJ/A8AAACVEXN/kfxH08e/1yX/X6j+/5P6/w36//r/mf5/ov+v/5/p/+v/96D/r/9f5vXr/+v/01u/9f9D7s/WZJl//wcAAICKirl/bZiJ/A8AAACVEXP/JWEm8j8AAABURsz9l4aZ1CT/+/x//X/9/279/7it/n+m/98P/f9N/63/v4j+v/5/pv9/zi52f77s6+/D/v8a/X/6Tb/1/2Puf1eYSU3yPwAAANRBzP3vDjOR/wEAAKAyYu6/LMxE/gcAAIDKiLl/XZhJTfK//r/+v/6/z//X/y9N/9/n/3eg/6//n+n/n7OL3Z8v+/r7sP/v8//pO/3W/4+5/9fCTGqS/wEAAKAOYu5/T5iJ/A8AAACVEXP/5WEm8j8AAABURsz9V4SZ1CT/17P//1qWZfr/mf6//n/bOvX/9f9Xgv6//n83+v/6/2Vev/6//j+99Vv/P+b+94aZ1CT/AwAAQB3E3H9lmIn8DwAAAJURc//7wkzkfwAAAKiMmPuvCjOpSf6vZ//f5//r/xf0/1vXqf+v/78S9P/1/7vR/9f/L/P69f/1/+mt3/r/Mfe/P8ykJvkfAAAA6iDm/qvDTOR/AAAAqIyY+z8QZiL/AwAAQGXE3L8+zKQm+V//X/9f/1//X/9f/38llav/P7jkOfr/Bf3/Vheu/z+3sAD9/9KsX/9f/5/e+q3/H3P/B8NMapL/AQAAoA5i7v9QmIn8DwAAAJURc/81YSbyPwAAAFRGzP1jYSY1yf/6//r/+v/6//r/+v8rqVz9/6Xp/xf0/1v5/H/9f/1//X+667f+f8z9G8JMapL/AQAAoA5i7t8YZiL/AwAAQGXE3H9tmIn8DwAAAJURc/+mMJOa5H/9f/1//X/9f/1//f+VpP+v/9+N/r/+f5nXr/+v/09v/db/j7n/ujCTmuR/AAAAqIOY+68PM5H/AQAAoDJi7r8hzET+BwAAgMqIuX9zmElN8r/+v/6//n+J+/9D+v+Z/n/f0//X/+9G/1//v8zr1//X/6e3fuv/x9x/Y5hJTfI/AAAA1EHM/TeFmcj/AAAAUBkx998cZiL/AwAAQGXE3D8eZlKT/K//r/+v/1/i/r/P/29Zv/5/f9L/L0v/f6T1S/3/ZdH/1//X/9f/p7t+6//H3H9LmElN8j8AAADUQcz9W8JM5H8AAACojJj7J8JM5H8AAACojJj7J8NMapL/9f/1//X/9f/1//X/V5L+f1n6/230/5dF/1//X/9f/5/u+q3/H3P/VJhJTfI/AAAA1EHM/VvDTOR/AAAAqIyY+7eFmcj/AAAAUBkx928PM6lJ/i9J/39LKkDp/+v/6//r/+v/l4r+v/5/N/r/+v9lXr/+v/4/rQY7nNZv/f+Y+3eEmdQk/wMAAEAdxNy/M8xE/gcAAIDKiLn/1jAT+R8AAAAqI+b+28JMapL/S9L/9/n/+v/6/030//X/y0T/X/+/G/1//f8yr1//X/+f3vqt/x9z/64wk5rkfwAAAKiDmPs/HGYi/wMAAEBlxNx/e5iJ/A8AAACl0ulzCKOY+z8SZlKT/K//X/X+//xq/X/9f/3/7uvX/19Z+v/6/93o/+v/l3n9+v/6//TWb/3/mPt3h5nUJP8DAABAHcTcf0eYifwPAAAAlRFz/51hJvI/AAAAVEbM/XvCTGqS//X/q97/9/n/+v/6/73Wr/+/svT/9f+70f8vZ/8//Nii/99H/f/8GNL/px/1W/8/5v67wkxqkv8BAACgDmLu/2iYifwPAAAAlRFz/8fCTOR/AAAAqIyY+z8eZlKT/K//r/+v/6//r/+v/7+S9P9XrP/feCnU/y/o/5+bi92fL/v6+6n/7/P/6Vf91v+Puf/uMJOa5H8AAACog5j7PxFmIv8DAABAZcTc/+thJvI/AAAAVEbM/feEmdQk/+v/6//r/+v/6//r/68k/X+f/9+N/r/+f5nXr/+v/09v/db/j7n/N8JMapL/AQAAoA5i7r83zET+BwAAgMqIuf+TYSbyPwAAAJTMqiXPibn/N8NMapL/y9f/Hytl/38wXb/+v/6//r/+v/7/haT/r/+f6f+fs4vdny/7+vX/9f/prd/6/zH3/1aYSU3yPwAAANRBzP2fCjOR/wEAAKAyYu7/7TAT+R8AAAAqI+b++8JMapL/L3T/v/3y3fj8f/3/TP9f/1//X///POn/6/9n+v/n7GL350u8/vijiP6//j899Fv/P+b+3wkzqUn+BwAAgDqIuf/+MBP5HwAAAPrUw2d9iZj7Px1mIv8DAABAZcTc/5kwk5rk//J9/r/+v/6//r/+v/5/mej/6/93o/+v/1/m9fv8f/1/euu3/n/M/Q+EmdQk/wMAAEAdxNz/2TAT+R8AAAAqI+b+3w0zkf8BAACgMmLu/70wk5rkf/1//X/9f/1//X/9/5Wk/7+4/5+/hun/F/T/9f/LvH79f/1/euu3/n/M/Z8LM6lJ/gcAAIA6iLn/98NM5H8AAACojJj7/yDMRP4HAACAyoi5/8Ewk5rkf/1//X/9f/1//X/9/5Wk/+/z/7vR/9f/L/P69f/1/+mt3/r/Mfd/PsykJvkfAAAA6iDm/j8MM5H/AQAAoDJi7t8bZiL/AwAAQGXE3P9QmElN8r/+v/6//r/+v/6//v9K0v/X/+9G/1//v8zr1//X/6e3fuv/x9y/L8xkT+vNAAAAAOUVc/8Xwkxq8u//AAAAUAcx9+8PM5H/AQAAoDJi7j8QZlKT/K//r/+v/6//r/+v/7+S9P/1/7vR/9f/L/P69f/1/+mt3/r/MfdPh5nUJP8DAABAHcTcfzDMRP4HAACAyoi5/1CYifwPAAAAlRFz/8NhJjXJ//r/+v/6/7Xt/7/yvbZ16v/r/68E/X/9/270//X/y7x+/X/9f3rrt/5/zP2Hw0xqkv8BAACgDmLu/2KYifwPAAAAlRFz/5fCTOR/AAAAqIyY+4+EmdQk/+v/6//r/9e2/7+8z/9fs3C7+v/6/+dC/1//vxv9f/3/Mq9f/1//n976rf8fc//RMJOa5H8AAACog5j7j4WZyP8AAABQGTH3Hw8zkf8BAACgMmLuPxFmUpP8r/9/dv3/gSW6gfr/ndev/1+B/n8T/X/9/3Oh/6//343+v/5/mdev/6//T2/91v+Puf+Pwkxqkv8BAACgDmLuPxlmIv8DAABAZcTcPxNmIv8DAABAZcTcPxtmUpP8r//v8//1//X/9f/1/1eS/r/+fzf6//r/ZV6//r/+P731W/8/5v5TYSY1yf8A8P/s3XeuXlfVx/HndV6Do4g5RMyAETAExoCEGAK9JPTQIfTeQm+hQ+i99x56b4HQqwTK9Vor2Nx7zrV9H3ufvT6fP7LCDSg7SpD4yXx1AAA6yN1/v7jF/gcAAIBp5O6/f9xi/wMAAMA0cvc/IG5psv/1//p//b/+X/+v/98n/b/+f4n+X/+/5ffr//X/rBut/8/d/8C4pcn+BwAAgA5y9z8obrH/AQAAYBq5+x8ct9j/AAAAMI3c/Q+JW5rsf/2//l//r//X/+v/90n/r/9fov/X/2/5/fp//T/rRuv/c/c/NG5psv8BAACgg9z9D4tb7H8AAACYRu7+h8ct9j8AAABMI3f/dXFLk/2v/9f/6/832P//v/5f/78d+n/9/xL9v/5/y+/X/+v/WTda/5+7//q4pcn+BwAAgA5y9z8ibrH/AQAAYHPuft/Df567/5Fxi/0PAAAA08jd/6i4pcn+1//r//X/G+z/ff9f/78h+n/9/xL9v/5/y+/X/+v/WTda/5+7/9FxS5P9DwAAAB3k7n9M3GL/AwAAwDRy9z82brH/AQAAYOtO5+/k7n9c3NJk/+v/9f/6f/2//l//v0/6f/3/Ev2//n/L79f/6/9Zt/f+/143HNzj9v+5+2+IW5rsfwAAAOggd//j4xb7HwAAAKaRu/8JcYv9DwAAANPI3f/EuKXJ/tf/6//v7P///X/6f/2//v/On+v/T4b+X/+/RP+v/9/y+/X/+n/W7b3/X+n9z//XufufFLc02f8AAADQQe7+J8ct9j8AAABMI3f/U+IW+x8AAACmkbv/qXFLk/2v/9f/+/6//l//r//fJ/3/sP3/+f/VO5f+/1j0//r/o/r/ex7j/fp/Ohit/8/d/7S4pcn+BwAAgA5y9z89brH/AQAAYBq5+2+MW+x/AAAAmEbu/mfELU32v/5f/6//1/+f2/+fatn/3/Ez/f9+6P+H7f+X6f+PRf+v//f9f/0/y0br/3P3PzNuabL/AQAAoIPc/c+KW+x/AAAAmEbu/mfHLfY/AAAATCN3/3Pilib7X/+v/9f/6/8v6fv/V83R//v+//7o//X/S/T/+v8tv1//r/9n3Wj9f+7+58YtTfY/AAAATO/Urnb/8+IW+x8AAACmkbv/+XGL/Q8AAADTyN3/grilyf7X/+v/9f/6/0vq/yf5/r/+f3/0//r/Jcft/3f6//pr0f+P8379v/6fdaP1/7n7Xxi3NNn/AAAA0EHu/hfFLfY/AAAATCN3/4vjFvsfAAAAppG7/yVxS5P9r//X/+v/9f/6f/3/Pun/9f9LfP9f/7/l9+v/9f+sG63/z93/0rilyf4HAACADnL3vyxusf8BAABgGrn7Xx632P8AAAAwjdz9r4hbzt//py7nqy4f/b/+X/+v/9f/6//3Sf+v/1+i/z+8/z9zxJ9P/z/W+/X/+n/Wjdb/5+6/KW7x6/8AAAAwjdz9r4xb7H8AAACYRu7+V8Ut9j8AAABMI3f/q+OWJvv/qP7/9mvO/nH9//Ho/w9/v/5f/6//1//r//X/S/T/vv+/5ffr//X/rBut/8/d/5q4pcn+BwAAgA5y9782brH/AQAAYBq5+18Xt9j/AAAAMI3c/a+PW5rs/5P//v+1+n/9v/4/rv5f/6//1//r/5fp//X/W36//l//z7rR+v/c/W+IW5rsfwAAAOggd/8b4xb7HwAAAKaRu/9NcYv9DwAAANPI3f/muKXJ/j/5/t/3//X/F9j/n9L/J/1//H3V/+v/L4D+X/+/0/9ftCvdz2/9/fp//T/rRuv/c/fffDD1+u1/AAAA6ODmg9+e2b0lbrH/AQAAYBq5+98at9j/AAAAMI3c/W+LW5rsf/2//v+K9/++/1/0//H3Vf+v/78A+n/9/07/f9GudD+/9ffr//X/rBut/8/d//a4pcn+BwAAgA5y978jbrH/AQAAYBqx+8/+n9/tfwAAAJjSOw9+e2b3rrilyf5v3P9fe6n9/9X/9fv6/8Pfr/8/kf7/5vP/2dP/6/+3RP+v/1+i/9f/b/n94/T/8YPr9P+MZ7T+P3f/u+OWJvsfAAAAOsjd/564xf4HAACAaeTuvyVusf8BAABgGrn73xu3NNn/jfv/Sb7/f+/b4gX6/3n7f9//j6v/1/8fRv8/Qf9/x//80v/Xn1//v533j9P/+/4/4xqt/8/d/764pcn+BwAAgA5y978/brH/AQAAYBq5+z8Qt9j/AAAAMI3c/R+MW5rsf/3/1vt/3//X/+v/9f9j0//r/5f4/r/+f8vv1//r/1k3Wv+fu/9DcUuT/Q8AAAAd5O7/cNxi/wMAAMA0cvd/JG6x/wEAAGAaufs/Grc02f/6f/3/vvr/O/4k+v8m/f/1+v+d/v9I+n/9/xL9v/5/y+/X/+v/WTda/5+7/2NxS5P9DwAAAB3k7v943GL/AwAAwDRy938ibrH/AQAAYBq5+z8ZN9zjblfuSSfr9BE/j95c/6//9/1//b/v/+v/90n/r/9fov/X/2/5/fp//T/rRuv/c/d/Km7x6/8AAAAwjdz9n45b7H8AAACYRu7+z8Qt9j8AAABMI3f/Z+OWJvtf/6//1/9vtv+/Wv9/7vv1/2PS/+v/l+j/9f9bfv+x+/9bD//P6//pYLT+P3f/5+KWJvsfAAAAOsjd//m4xf4HAACAaeTu/0LcYv8DAADANHL3fzFuabL/9f/6f/3/Zvt/3/8/7/36/zHp//X/S/T/+v8tv9/3//X/rBut/8/d/6W4pcn+BwAAgA5y9385brH/AQAAYBq5+78St9j/AAAAMI3c/V+NW5rsf/2//l//r//X/+v/90n/r/9fov/X/2/5/fp//T/rRuv/c/d/LW5psv8BAACgg9z9X49b7H8AAACYRu7+b8Qt9j8AAABMI3f/N+OWJvt/5v5/6d+m/z9L/6//3+n/9f97pv/X/y/R/+v/t/x+/b/+n3Wj9f+5+78VtzTZ/wAAANBB7v5vxy32PwAAAEwjd/+tcYv9DwAAANPI3f+duKXJ/p+5/1+i/z9L/6//3+n/9f97pv/X/y/R/+v/t/x+/b/+n3VXqP8/vTui/8/d/924pcn+BwAAgA5y938vbrH/AQAAYBq5+78ft9j/AAAAMI3c/T+IW+bZ//e5ZeEP6v9PvP8/+IdI/6//3+n/9f/6/wP6f/3/Ev2//n/L79f/6/9ZN9r3/3P3/zBumWf/AwAAQHu5+38Ut9j/AAAAMI3c/T+OW+x/AAAAmEbu/p/ELU32v/7f9//1/636/6t2+n/9/2Wm/9f/L9H/6/+3/H79v/6fdaP1/7n7fxq35PC75mL+KgEAAICR5O7/WdzS5Nf/AQAAoIPc/T+PW+x/AAAAmEbu/l/ELU32v/5f/6//b9X/+/6//v+y0//r/5fo//X/W35/9v/5z53+X//P/xqt/8/d/8u4pcn+BwAAgA5y9/8qbrH/AQAAYBq5+38dt9j/AAAAMI3c/b+JW5rsf/2//l//r//X/+v/90n/r/9fov/X/2/5/b7/r/9n3Wj9f+7+2+KWJvsfAAAAOsjd/9u4xf4HAACAaeTu/13cYv8DAADANHL33x63NNn/+n/9/5T9/131//p//f8o9P/6/yX6f/3/lt+v/9f/s260/j93/+/jlib7HwAAADrI3f+HuMX+BwAAgGnk7v9j3GL/AwAAwDRy9/8pbmmy//X/+v8L7/9P11/3sP2/7//r//X/w5i3/7+L/v+w/v/Mhb2/e/9/401nf6z/3+b79f/6f9aN1v/n7v9z3NJk/wMAAEAHufv/ErfY/wAAADCN3P1/jVvsfwAAAJhG7v6/xS1N9r/+X/8/5ff/9f/6f/3/MObt/33/3/f/ff9f/6//1/+zZrT+P3f/3+OWJvsfAAAAOsjd/4+4xf4HAACAaeTu/2fcYv8DAADANHL3/ytuabL/9f/6f/2//l//r//fJ/2//n+J/l//v+X36//1/6wbrf/P3f+fAAAA///vXi84")
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r2 = syz_open_dev$MSR(&(0x7f0000000900), 0x0, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000000880), 0x3, 0x4022c0)
ioctl$EVIOCGABS20(r3, 0x80184560, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$eJzs3T9oM2UcB/DvXRJf+75BXnURxD8gIloor5vg8rooFKQUEUGFioiL0gq1xa1xcnHQWaWTSxE3q6N0KS6K4FS1Q10ELQ4WBx0iybVS24ja1Jz0Ph+43l3vee73HLnvkyyXBGisq0muJ2klmU7SSVIcb3B3tVw93F2f2l5I+v0nfiqG7ar9ylG/K0l6SR5KslUWeamdrG4+s/fLzmP3vbnSuff9zaenJnqRh/b3dh8/eG/ujY9mH1z94qsf5opcT/dP13X+ihH/axfJLf9Fsf+Jol33CPgn5l/78OtB7m9Ncs8w/52UqV68t5Zv2OrkgXf/qu/bP355+yTHCpy/fr8zeA/s9YHGKZN0U5QzSartspyZqT7Df9O6XL68tPzq9ItLK4sv1D1TAeelm+w++smlj6+cyP/3rSr/wMU1yP+T8xvfDrYPWnWPBpiIO6rVIP/Tz63dH/mHxpF/aC75h+aSf2gu+Yfmkn9oLvmHC6xztNEbeVj+obnkH5pL/qG5jucfAGiW/qW6n0AG6lL3/AMAAAAAAAAAAAAAAAAAAJy2PrW9cLRMquZn7yT7jyRpj6rfGv4ecXLj8O/ln4tBsz8UVbexPHvXmCcY0wc1P31903f11v/8znrrry0mvdeTXGu3T99/xeH9d3Y3/83xzvNjFviXihP7Dz812fon/bZRb/3ZneTTwfxzbdT8U+a24Xr0/NM9/hXLZ/TKr2OeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIn5PQAA//8PK23M")
r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000080)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000000)={@host})
ioctl$IOCTL_VMCI_NOTIFY_RESOURCE(r4, 0x7a5, &(0x7f0000000140)={{@any, 0xffffffff}, 0x1, 0x2, 0x1})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000980)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@typedef={0x4, 0x0, 0x0, 0x7}]}, {0x0, [0x0, 0x0, 0xda]}}, 0x0, 0x29, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28)
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
ioctl$FITHAW(r0, 0xc0045878)

9.894984707s ago: executing program 8 (id=691):
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$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")
mremap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x7ffffffff002, 0x3, &(0x7f0000ffc000/0x4000)=nil)
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@ipv4_newrule={0x30, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_GENERIC_POLICY=@FRA_IIFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x30}}, 0x0)

9.865864978s ago: executing program 3 (id=692):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
sched_setaffinity(0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a005124deacb12e68d5b042fd94802e899d13e0374769b03ac3273b6ab1188023b587e473253682146a9f24b52e89b42d3c836c1702078fbba099e45a9ddb039922f65e595e5fb3172b8fc94fe9185633ff84974096e32e8d6ce93ad1488698052714e15b7763bfe3d117e145752db35e4553df3a7d153ee8c2", @ANYRES32, @ANYBLOB], 0x40}}, 0x0)

8.695418431s ago: executing program 8 (id=693):
r0 = socket$key(0xf, 0x3, 0x2)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$nl_route(0x10, 0x3, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x208000, &(0x7f0000000300), 0xfc, 0x55c, &(0x7f0000000600)="$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")
syz_open_dev$mouse(0x0, 0x10, 0x10000)
fcntl$getownex(r2, 0x10, &(0x7f0000000100)={0x0, <r3=>0x0})
prlimit64(r3, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
ioctl$KVM_PRE_FAULT_MEMORY(0xffffffffffffffff, 0xc040aed5, &(0x7f0000000140)={0x5000, 0x8000})
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6)
socket$nl_netfilter(0x10, 0x3, 0xc)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000180)=ANY=[@ANYRES16, @ANYRES64=r5, @ANYRES8, @ANYRES64=r0], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffe38, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r7)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)={0x14, r8, 0x1, 0x70bd25}, 0x14}, 0x1, 0x0, 0x0, 0x404c095}, 0x40000)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000000308010100000000000000000000000005000300ff0000000c0004"], 0x28}}, 0x0)

8.044861329s ago: executing program 6 (id=694):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000004000000000000000000850000002300000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='sched_switch\x00', r3}, 0x10)
msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6)
r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x1a0)
write$cgroup_int(r4, &(0x7f0000000040)=0x1f00, 0x12)

8.037991312s ago: executing program 3 (id=695):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000200009500"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r2 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', <r3=>0x0})
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000008000000000000000000000181100", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r1, r3, 0x25, 0x0, @val=@netfilter}, 0x40)
sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x74, r3, {0x0, 0x7}, {0x0, 0x4}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0)

6.202176953s ago: executing program 8 (id=696):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x5, &(0x7f0000000180)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socket(0x10, 0x3, 0x0)
r0 = openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
lseek(r0, 0x5, 0x4)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = syz_open_dev$dri(0x0, 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_ADDFB(r4, 0xc01c64ae, &(0x7f00000002c0)={0x0, 0x8, 0x0, 0x7, 0x8, 0x8, 0xfffffffc})
ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x11)
r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r5, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r5, &(0x7f0000000580)=ANY=[@ANYBLOB="5200000002"], 0x8)

5.849612006s ago: executing program 6 (id=697):
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0)
r3 = socket$inet(0x2, 0x80001, 0x84)
getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r4=>0x0}, 0x0)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000380)={0x7, 0x80, 0x1, 0x7, 0xb5, 0x6, 0x655, 0x8, r4}, &(0x7f00000003c0)=0x20)
syz_emit_vhci(&(0x7f0000000540)=ANY=[@ANYBLOB="043e1f0a"], 0x22)
r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f0000000100)=0x80000)
syz_emit_vhci(0x0, 0x7)
syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000480)='./file0\x00', 0x0, 0x29c780})
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000200), 0xfc, 0x56d, &(0x7f00000013c0)="$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")
r6 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0)
pwrite64(r6, &(0x7f0000000080)='\r', 0x1, 0x8000c61)
rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000100)='./file0/file0\x00')

5.848363143s ago: executing program 9 (id=698):
r0 = syz_usb_connect(0x3, 0x2d, &(0x7f00000003c0)={{0x12, 0x1, 0x0, 0x5a, 0xe4, 0xc4, 0x10, 0x596, 0x1, 0x5f5, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xd6, 0x0, 0x1, 0xb5, 0xe1, 0x45, 0x0, [], [{{0x9, 0x5, 0x83, 0x0, 0x3ff, 0x3, 0x7, 0x4}}]}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)

5.785978267s ago: executing program 0 (id=699):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='rseq_update\x00', r0}, 0x18)
rseq(&(0x7f0000000080), 0x20, 0x0, 0x0)
r1 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r2 = eventfd2(0x0, 0x0)
read$eventfd(r2, &(0x7f0000000040), 0x8)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
socket(0x5, 0x1, 0x0)
syz_open_procfs(0x0, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
close(0xffffffffffffffff)

5.755891052s ago: executing program 3 (id=700):
r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r1, 0x6, 0x10, &(0x7f0000000080)=0xffff, 0x4)
getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000000), &(0x7f00000000c0)=0x14)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
fsmount(r0, 0x0, 0x1)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000086}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
getpgrp(0xffffffffffffffff)
rmdir(0x0)
r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x200, 0xa401)
r5 = fcntl$dupfd(r4, 0x0, r4)
ioctl$USBDEVFS_SUBMITURB(r5, 0x8038550a, 0x0)
syz_open_procfs(0x0, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0)
ioctl$USBDEVFS_REAPURBNDELAY(r4, 0x4008550d, 0x0)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"})
ioctl$USBDEVFS_CLEAR_HALT(r2, 0x80045515, 0x0)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2c000011)

3.980912114s ago: executing program 8 (id=701):
r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000840)={0x2c, &(0x7f00000005c0)={0x40}, 0x0, 0x0, 0x0, 0x0})

2.213976483s ago: executing program 6 (id=702):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x109942, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000580))
ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x50, 0x8, 0x0, 0x8865}, {0x6}]})
write$ppp(r0, &(0x7f00000002c0)="4daf8a728e19", 0x6)

2.095663414s ago: executing program 9 (id=703):
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x236, &(0x7f0000000300)="$eJzs3TFoM2UcBvDnLomf/b4gVRdBUEFEtFDqJrjURaEgpYgIKlREXJRWqC1urZOLg84qnVyKuFkdpUtxUQSnqh3qImhxsDjoELlcK9VGFFNz8t3vB5fcJe97//e4e95kOS5Aa00nmU/SSTKTpJekON/grnqZPt3cntpfTgaDx38shu3q7dpZv2tJtpI8mGSvLPJiN9nYffro54NH731jvXfPe7tPTU30IE8dHx0+dvLu4usfLjyw8fmX3y8WmU//D8d1+YoRn3WL5Jb/otj/RNFtegT8E0uvfvBVlftbk9w9zH8vZeqT9+baDXu93P/OX/V964cvbp/kWIHLNxj0qt/ArQHQOmWSfopyNkm9Xpazs/V/+K87V8uXVtdemXlhdX3l+aZnKuCy9JPDRz6+8tG1P+X/u06df+D6VeX/iaWdb6r1k07TowEmqcr/zLOb90X+oXXkH9pL/qG95B/aS/6hveQf2kv+ob3kH9pL/qG95B/a63z+AYB2GVxp+g5koClNzz8AAAAAAAAAAAAAAAAAAMBF21P7y2fLpGp++nZy/HCS7qj6neHziJMbh69XfyqqZr8r6m5jeebOMXcwpvcbvvv6pm+brf/ZHc3W31xJtl5LMtftXrz+itPr79+7+W++7z03ZoExPfRks/V/3Wm2/sJB8kk1/8yNmn/K3DZ8Hz3/9KvzN2b9l38ZcwcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABMzG8BAAD//8n0bSk=")
mremap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x7ffffffff002, 0x3, &(0x7f0000ffc000/0x4000)=nil)
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@ipv4_newrule={0x30, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@FRA_GENERIC_POLICY=@FRA_IIFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x30}}, 0x0)

2.045946743s ago: executing program 3 (id=704):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
dup3(r1, r1, 0x0)
r2 = socket(0x1d, 0x2, 0x6)
r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000040))
openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
r4 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65)
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r4, 0xc0884113, &(0x7f0000000240)={0x1, 0x1400000, 0x0, 0x10001, 0x0, 0xfffffffffffffffe, 0x480, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000002240)={'ip6tnl0\x00', <r5=>0x0, 0x2f, 0x9, 0x4, 0xe, 0x2, @empty, @local, 0x700, 0x8000, 0x5, 0x4}})
sendmsg$nl_route_sched_retired(r2, &(0x7f0000003000)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000022c0)=@newtclass={0xd28, 0x28, 0x200, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r5, {0x9, 0xd}, {0x10, 0x6}, {0x4, 0x10}}, [@c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5, 0x4, 0x5}}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5, 0x4, 0x2}}}, @c_cbq={{0x8}, {0x86c, 0x2, [@TCA_CBQ_LSSOPT={0x18, 0x1, {0x3c, 0x1, 0x18, 0x92, 0x9, 0x1, 0xffff1225, 0xffffffff}}, @TCA_CBQ_RATE={0x10, 0x5, {0x9, 0x1, 0xe, 0x9, 0x0, 0x4}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0xfff1}, 0x5, 0x8}}, @TCA_CBQ_RTAB={0x404, 0x6, [0xfffffffa, 0x0, 0xfffffff9, 0x1, 0x8, 0x6, 0x5, 0x7fff, 0xffffffff, 0x6, 0x1ff, 0x6, 0x1, 0x3, 0x8, 0x3, 0x637, 0x0, 0x6, 0x400, 0x400, 0x6, 0x8, 0x80000001, 0x400, 0xfffffffe, 0xd, 0x6, 0x4, 0xb0, 0x9, 0x3, 0x5, 0x40, 0x80000000, 0x5, 0x7f, 0x0, 0x1, 0x4aaffa28, 0x4, 0x8, 0x9, 0x2, 0x5, 0x5, 0x10000, 0x10000, 0x7, 0x3ff, 0x1, 0x5, 0x2, 0x0, 0x6, 0x1, 0xaa42, 0x4bf, 0x6, 0xf, 0x5, 0xde11, 0x0, 0x3ff, 0x2, 0x1, 0xff, 0x8, 0xe698, 0x101, 0xfffffffb, 0x10001, 0xe, 0x81, 0xfb91, 0xfffffff4, 0x6, 0x4, 0x7, 0x9, 0x1, 0x7, 0x9, 0xfff, 0xfffffffb, 0x1, 0xffffffff, 0x401, 0x128c7c96, 0x2c, 0x8, 0x9, 0x3, 0x10000, 0x8, 0x2, 0x5, 0x5, 0xbe, 0xd, 0x0, 0x1, 0x8, 0xef3, 0x80000000, 0x10001, 0x1, 0x4, 0x2, 0x6, 0x9, 0x5, 0x1, 0x255, 0x80, 0x6, 0x7, 0x4, 0x0, 0x5, 0x5, 0xf, 0xe2, 0x1, 0x3, 0x3, 0x2, 0x0, 0x0, 0x81, 0x5, 0xffff33b4, 0x0, 0x590, 0x4, 0xe8d, 0x9, 0x3, 0x0, 0x2, 0x8000, 0x5, 0x3, 0x7, 0x6, 0x6, 0x9, 0x893, 0x2, 0x7, 0x8, 0x44a, 0xa, 0x8, 0xfffffffd, 0x30000, 0x0, 0x22, 0x8, 0x0, 0x10000, 0x6, 0x2, 0x1, 0xfc000000, 0xf, 0x3, 0x80000001, 0x7, 0x6, 0x5, 0x10001, 0x3, 0xa, 0x80000001, 0x6, 0x0, 0x8, 0x3, 0x0, 0x2, 0x6, 0x3, 0x0, 0xa, 0x4, 0x5, 0x3, 0x9, 0x1000, 0x5, 0x81, 0x9, 0x7, 0x7, 0x9, 0x77, 0x7a, 0x5, 0xffffffff, 0x1, 0x0, 0x1, 0x6, 0xffffffff, 0x8, 0x8, 0xb62, 0x1, 0xfd, 0x52ae, 0x2957, 0xc4, 0x7, 0x4, 0x8, 0x7fffffff, 0xa, 0xfffffffa, 0x7f, 0x3, 0x1, 0x6, 0x6, 0x1ff, 0x7e7, 0xfffffff8, 0x2, 0x1, 0x4, 0x4, 0x2, 0x10001, 0xffffffff, 0x4, 0x3, 0x4, 0xffff, 0x7, 0xe, 0x9c8a, 0x0, 0x9, 0xbe2, 0x6, 0xb1e, 0x3, 0x378, 0xfffffffd, 0x1, 0x800, 0x3, 0x40, 0x9, 0x30, 0xb5]}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x2c, 0x3, 0x1b, 0x8, 0x2, 0x6, 0x200, 0x4}}, @TCA_CBQ_RTAB={0x404, 0x6, [0x1, 0xee, 0x0, 0x0, 0x40, 0x3ff, 0x7fff, 0x37e8a01, 0x100, 0x2, 0x9a, 0xa2, 0x2, 0x0, 0x18, 0x1, 0x7fffffff, 0x5, 0x3c2, 0x800, 0x7, 0x3, 0xa94, 0x4, 0x0, 0x0, 0x324, 0x2, 0x2, 0x2, 0x4, 0xfffffffa, 0xcf, 0x9, 0x5, 0x6, 0x1, 0xdb, 0x4, 0x4, 0x8, 0xdc, 0xcfa, 0x85d, 0x400, 0x2, 0xffff, 0x73, 0x0, 0x40100000, 0x8, 0x8, 0x4, 0x0, 0x82ce, 0x2, 0x8001, 0xc7, 0x9, 0x4a3, 0x1, 0x1, 0xfd, 0x4196, 0x7ff, 0x4, 0x4, 0x5, 0xff, 0x2, 0x2, 0xfff, 0x6, 0xfffff5d3, 0x3, 0x0, 0x0, 0xc06, 0x2, 0x2, 0x7, 0x5, 0x4, 0x8, 0x20000000, 0x2, 0x8, 0x76c, 0x9, 0x2ae2, 0x9, 0xfff, 0x5, 0x6, 0x10001, 0x8, 0x10001, 0x6, 0x5, 0x8, 0x7ff, 0x4, 0x1, 0x3, 0x3ff, 0xb, 0x2, 0x1, 0x81, 0x3, 0x21ab, 0x19, 0xc0fe, 0x101, 0x3, 0x3, 0xd, 0x5, 0xfffffffe, 0x4, 0x2, 0x100, 0x8, 0x5, 0x7, 0x1000, 0x0, 0xa, 0x9, 0x6, 0xc, 0xff, 0x80, 0x1479, 0x40, 0x7f, 0x5, 0x2, 0x802, 0x0, 0xfff, 0x9, 0x5, 0x400, 0x5, 0x2a482465, 0x3f0, 0x6, 0xb, 0xe0e, 0x10000, 0x7fff, 0x441c, 0xffffd30b, 0x8, 0x4, 0x10001, 0x5, 0x9, 0xffffffff, 0x0, 0x2, 0x0, 0x10, 0x88, 0x4, 0x7, 0xffffffc0, 0x9, 0xbab, 0x2, 0x4, 0x3c, 0xc, 0x40, 0x3, 0x8, 0x40, 0x2, 0x10, 0x2, 0x7, 0xfff, 0x8, 0x2, 0x8, 0xd, 0x5000000, 0x7fb, 0x5, 0x6, 0x8, 0x3, 0x5, 0x0, 0x8, 0x6, 0x7f, 0x9, 0x8000, 0x7, 0x800, 0x10, 0x19b, 0x1, 0x8824, 0x1, 0x61, 0xa, 0xc76, 0x6, 0x80000, 0x3, 0x5, 0x8, 0xe5c, 0x3, 0x4, 0x8, 0x7f4, 0x2, 0x8, 0xffffff80, 0xc2, 0x0, 0x0, 0x10001, 0x10, 0x3, 0xf6, 0x10000, 0x7fff, 0x7, 0xffff, 0xa61, 0x200, 0x9, 0xfffffffb, 0x8001, 0x2, 0x9, 0x412, 0x112, 0x5, 0x8c, 0x0, 0x6, 0x8, 0x75dd, 0x9, 0x3, 0x5, 0x8, 0x1ff, 0x101, 0x5]}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x4, 0x5, 0x6, 0x0, 0x0, 0x8}}]}}, @c_cbq={{0x8}, {0x458, 0x2, [@TCA_CBQ_LSSOPT={0x18, 0x1, {0x6, 0x3, 0x4, 0xd, 0x9ba, 0x0, 0xc9b8, 0xd01a}}, @TCA_CBQ_RATE={0x10, 0x5, {0x1, 0x2, 0x10, 0x1, 0x5, 0x4}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0xffe0, 0xc}, 0x3, 0x7}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x3f, 0x0, 0xa, 0x3, 0xfff, 0x3a, 0xffffffff, 0x8}}, @TCA_CBQ_RTAB={0x404, 0x6, [0x9, 0xfffffffc, 0x6, 0x100, 0xfffffff8, 0xffffffff, 0x5, 0x8, 0xd69, 0x3, 0xef, 0x4, 0x54, 0x5, 0x8, 0x1, 0x2d6, 0x5, 0x3, 0x9582, 0x9, 0x0, 0x2, 0x9, 0x101, 0x8001, 0x1, 0x9, 0xe7c2, 0x80, 0x3, 0x5, 0x9, 0x7, 0x40, 0x2, 0x1, 0x1, 0x7, 0x4, 0x9, 0x400, 0x0, 0x4, 0x1, 0x8e, 0x400, 0x1c000, 0xe, 0x2, 0x5, 0x5, 0x4, 0x400, 0x1ff, 0x3, 0xfffffffb, 0x4, 0x7, 0x8001, 0x5, 0x3, 0x1, 0x7bc9, 0x996, 0x0, 0x8, 0xa7c4, 0x101, 0x8, 0xf62, 0xe, 0xff, 0x6, 0x40, 0x51, 0x1, 0x2, 0x7, 0x10000, 0xfffffffb, 0x7, 0x7, 0x5, 0xb, 0x9, 0x7f, 0xfffffe3d, 0x3, 0xe5, 0x5, 0x0, 0x4, 0x0, 0x12227dc6, 0x752, 0x7, 0x8, 0xe, 0xfffffff7, 0x80000001, 0x7, 0x3ca, 0x4, 0xc0c, 0x4, 0x1, 0x0, 0x0, 0xa5, 0x38000000, 0x6, 0x3, 0x9c0, 0x9, 0x1, 0x5, 0x9, 0xfc, 0x10000, 0x81, 0x8e, 0xd, 0x3, 0x7, 0x3d3, 0xfffffff8, 0xe, 0x4, 0x4, 0x7, 0x2cf, 0x3, 0x9, 0x5, 0x3, 0x110, 0x0, 0x8, 0x3, 0x8, 0xce, 0x4, 0xb7, 0x40, 0x800000, 0x9, 0xb42d, 0x1, 0x0, 0x6, 0x7, 0x5, 0x6, 0x8000, 0xfb58, 0x8, 0x7fffffff, 0x957, 0x3f, 0xffffffff, 0x10001, 0x80000001, 0xa, 0x2, 0x3, 0x3, 0x8, 0x4, 0xef14, 0x1, 0x1, 0x2, 0x1a0e, 0x4, 0xffff8000, 0x5, 0x0, 0x2, 0xffff0001, 0xff800000, 0xd6, 0x6, 0xa3, 0x1, 0x0, 0x1000, 0x7, 0x88, 0x5, 0xfffffffd, 0x2800000, 0x3ff, 0x7, 0xd, 0x7f, 0x6df3, 0x101, 0xa43, 0x3, 0x3, 0x8, 0x8, 0x3, 0x5, 0x6, 0x5, 0x401, 0x2, 0x56be29ca, 0x7fff, 0x8001, 0x0, 0x7, 0x0, 0x1, 0x7, 0x8, 0x5, 0x7, 0x91, 0x8, 0x9, 0xb6f1, 0x7f3, 0x5, 0x4, 0x4e, 0x80000000, 0x5, 0x4, 0x100, 0x602, 0x3, 0x6, 0x6a6, 0x1, 0x5, 0xe, 0xb0b0, 0xf8a6, 0x7, 0x4, 0x0, 0x3, 0x1, 0x5, 0x0, 0xfffffffe, 0x0, 0x2, 0x8, 0xffff, 0xfff, 0x36b122d2, 0x8]}]}}]}, 0xd28}, 0x1, 0x0, 0x0, 0x20000800}, 0x4880)
r6 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f0000000080)={0x0, "4fcb813dd28b42bee2b094a3de6dbfd30a74457bcd1cfd5feffe5c019f45d57f"})
r7 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PACKETS_PER_SLAVE={0x8}]}}}]}, 0x3c}}, 0x0)
dup(0xffffffffffffffff)

738.082332ms ago: executing program 9 (id=705):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
getpid()
sched_setaffinity(0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYRES32=0x0, @ANYBLOB="81ffffff00000000180012800e0001007769726567756172640000000400028008000a005124deacb12e68d5b042fd94802e899d13e0374769b03ac3273b6ab1188023b587e473253682146a9f24b52e89b42d3c836c1702078fbba099e45a9ddb039922f65e595e5fb3172b8fc94fe9185633ff84974096e32e8d6ce93ad1488698052714e15b7763bfe3d117e145752db35e4553df3a7d153ee8c2", @ANYRES32, @ANYBLOB], 0x40}}, 0x0)

270.216529ms ago: executing program 6 (id=706):
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$tipc(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd", 0xb}], 0x1, 0x0, 0x0, 0x8010}, 0x0)
r2 = dup2(r1, r0)
recvfrom$inet_nvme(r2, &(0x7f0000000140)=""/10, 0xa, 0x10023, 0x0, 0x0)

0s ago: executing program 6 (id=707):
r0 = fanotify_init(0x1, 0x2)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
fanotify_mark(r0, 0x40, 0x3b, r1, 0x0)
fanotify_mark(r0, 0x41, 0x8000038, r1, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
socket$inet(0x10, 0x3, 0xc)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00'}, 0x10)
ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, &(0x7f0000000240))
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x15d74000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, 0x0, 0x0)
pread64(r5, 0x0, 0x0, 0x7ff)
r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TIOCSETD(r6, 0x5423, &(0x7f00000000c0)=0xf)
ioctl$TCFLSH(r6, 0x400455c8, 0x20000000008)
r7 = fsopen(&(0x7f0000000040)='selinuxfs\x00', 0x0)
fsconfig$FSCONFIG_SET_PATH_EMPTY(r7, 0x4, &(0x7f0000000080)='+%\x00', &(0x7f00000000c0)='./bus\x00', 0xffffffffffffff9c)
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

kernel console output (not intermixed with test programs):

r parsing attributes in process `syz.0.84'.
[  133.492131][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  133.507160][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  134.357467][   T25] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  134.381624][ T6229] netlink: 'syz.3.89': attribute type 4 has an invalid length.
[  134.521925][   T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  134.543159][   T25] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  134.570987][   T25] usb 5-1: New USB device found, idVendor=046d, idProduct=c534, bcdDevice= 0.00
[  134.607370][   T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  134.628677][   T25] usb 5-1: config 0 descriptor??
[  134.717789][ T6240] loop2: detected capacity change from 0 to 1024
[  134.746059][ T6240] hfsplus: failed to load root directory
[  135.087532][   T25] logitech-djreceiver 0003:046D:C534.0002: hidraw0: USB HID v0.00 Device [HID 046d:c534] on usb-dummy_hcd.4-1/input0
[  135.254905][   T25] usb 5-1: USB disconnect, device number 3
[  135.316821][ T6248] netlink: 4 bytes leftover after parsing attributes in process `syz.0.97'.
[  135.348871][ T6248] bridge_slave_1: left allmulticast mode
[  135.364804][ T6248] bridge_slave_1: left promiscuous mode
[  135.382523][ T6236] loop3: detected capacity change from 0 to 32768
[  135.383546][ T6248] bridge0: port 2(bridge_slave_1) entered disabled state
[  135.407127][ T5884] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  135.459321][ T6236] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.92 (6236)
[  135.475726][ T6248] bridge_slave_0: left allmulticast mode
[  135.484021][ T6248] bridge_slave_0: left promiscuous mode
[  135.517534][ T6248] bridge0: port 1(bridge_slave_0) entered disabled state
[  135.541047][ T6236] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  135.556348][ T6236] BTRFS info (device loop3): using crc32c (crc32c-x86_64) checksum algorithm
[  135.565522][ T6236] BTRFS info (device loop3): using free-space-tree
[  135.611482][ T5884] usb 3-1: Using ep0 maxpacket: 8
[  135.619435][ T5884] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  135.631499][ T5884] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  135.647511][ T5884] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  135.658287][ T5884] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  135.672913][ T5884] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  135.683329][ T5884] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  136.003362][ T6236] BTRFS info (device loop3): rebuilding free space tree
[  136.132235][ T5884] usb 3-1: GET_CAPABILITIES returned 0
[  136.138458][ T5884] usbtmc 3-1:16.0: can't read capabilities
[  136.178512][ T5884] usb 3-1: USB disconnect, device number 4
[  136.315257][ T6271] hsr_slave_0: left promiscuous mode
[  136.342290][ T6271] hsr_slave_1: left promiscuous mode
[  136.700700][ T5835] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  137.854580][ T6290] loop2: detected capacity change from 0 to 8
[  137.904388][ T6290] unable to read inode lookup table
[  138.152578][ T6297] netlink: 'syz.3.102': attribute type 4 has an invalid length.
[  138.517678][   T29] audit: type=1400 audit(1739211326.589:2): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=6289 comm="syz.0.106"
[  139.218086][  T970] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  140.024411][  T970] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  140.083915][  T970] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  140.124882][  T970] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  140.150763][  T970] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  140.399532][ T6308] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  140.423160][ T6317] loop3: detected capacity change from 0 to 1024
[  140.447331][  T970] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  140.464385][ T6317] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  140.489654][ T6317] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[  140.770154][ T6301] loop2: detected capacity change from 0 to 32768
[  140.814206][ T5835] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  140.977228][ T6308] syz.0.112 uses obsolete (PF_INET,SOCK_PACKET)
[  141.533217][   T25] usb 1-1: USB disconnect, device number 3
[  141.655172][ T6340] netlink: 'syz.3.123': attribute type 4 has an invalid length.
[  141.888663][ T6346] loop4: detected capacity change from 0 to 256
[  141.924124][ T6346] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  142.170636][ T6350] sctp: [Deprecated]: syz.4.129 (pid 6350) Use of int in maxseg socket option.
[  142.170636][ T6350] Use struct sctp_assoc_value instead
[  142.235474][ T6354] loop1: detected capacity change from 0 to 1024
[  142.284138][ T6354] EXT4-fs: Ignoring removed orlov option
[  142.336156][ T6354] EXT4-fs (loop1): Test dummy encryption mode enabled
[  142.494197][ T5842] Bluetooth: hci1: command tx timeout
[  142.514219][ T6344] loop3: detected capacity change from 0 to 32768
[  142.517182][ T6354] EXT4-fs (loop1): stripe (7) is not aligned with cluster size (16), stripe is disabled
[  142.533586][ T6344] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.126 (6344)
[  142.762542][ T6354] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  142.845775][ T6344] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  142.868173][ T6344] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  142.890883][ T6344] BTRFS info (device loop3): using free-space-tree
[  142.916955][    C0] hrtimer: interrupt took 51713 ns
[  143.824963][ T5841] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  144.029834][ T6388] netlink: 12 bytes leftover after parsing attributes in process `syz.1.135'.
[  144.068678][ T6388] xfrm1: entered promiscuous mode
[  144.087065][ T6388] xfrm1: entered allmulticast mode
[  144.236579][ T6390] netlink: 'syz.2.136': attribute type 4 has an invalid length.
[  145.193154][ T5835] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  146.557063][ T5929] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  146.729562][ T5929] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  146.771148][ T5929] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  146.813882][ T5929] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  146.859725][ T5929] usb 2-1: config 0 descriptor??
[  146.890691][ T5929] pwc: Askey VC010 type 2 USB webcam detected.
[  147.145654][ T6397] loop4: detected capacity change from 0 to 32768
[  147.166373][ T6397] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.140 (6397)
[  147.218826][ T6397] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  147.249563][ T6397] BTRFS info (device loop4): using crc32c (crc32c-x86_64) checksum algorithm
[  147.267104][ T6397] BTRFS info (device loop4): using free-space-tree
[  147.302522][ T5929] pwc: recv_control_msg error -32 req 02 val 2b00
[  147.323939][ T5929] pwc: recv_control_msg error -32 req 02 val 2700
[  147.334466][ T5929] pwc: recv_control_msg error -32 req 02 val 2c00
[  147.349494][ T5929] pwc: recv_control_msg error -32 req 04 val 1000
[  147.367159][ T5929] pwc: recv_control_msg error -32 req 04 val 1300
[  147.380445][ T5929] pwc: recv_control_msg error -32 req 04 val 1400
[  147.398450][ T5929] pwc: recv_control_msg error -32 req 02 val 2000
[  147.416203][ T5929] pwc: recv_control_msg error -32 req 02 val 2100
[  147.436519][ T5929] pwc: recv_control_msg error -32 req 04 val 1500
[  147.453046][ T5929] pwc: recv_control_msg error -32 req 02 val 2500
[  147.477529][ T6397] BTRFS info (device loop4): rebuilding free space tree
[  147.520793][ T5929] pwc: recv_control_msg error -32 req 02 val 2400
[  147.640029][ T5929] pwc: recv_control_msg error -32 req 02 val 2600
[  147.952943][ T5929] pwc: recv_control_msg error -71 req 02 val 2800
[  148.066366][ T5929] pwc: recv_control_msg error -71 req 04 val 1100
[  148.101987][ T5929] pwc: recv_control_msg error -71 req 04 val 1200
[  148.175319][ T5929] pwc: Registered as video103.
[  148.182922][ T5929] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input8
[  148.204012][ T5929] usb 2-1: USB disconnect, device number 2
[  148.340636][ T5847] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  148.351812][ T6443] netlink: 'syz.0.148': attribute type 4 has an invalid length.
[  150.386284][ T6461] loop2: detected capacity change from 0 to 2048
[  150.600810][ T6461] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  151.331399][ T5839] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  151.937710][ T6487] loop3: detected capacity change from 0 to 4096
[  152.897969][ T6498] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  153.223666][ T6504] evm: overlay not supported
[  153.496579][ T6512] netlink: 8 bytes leftover after parsing attributes in process `syz.4.159'.
[  153.538761][ T5885] IPVS: starting estimator thread 0...
[  153.698914][ T6513] IPVS: using max 22 ests per chain, 52800 per kthread
[  155.231084][ T6508] loop2: detected capacity change from 0 to 32768
[  155.378017][   T29] audit: type=1400 audit(1739211343.729:3): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=6527 comm="syz.1.176"
[  156.243694][ T6508] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,norecovery,nojournal_transaction_names,reconstruct_alloc,no_data_io
[  156.323248][ T6508] bcachefs (loop2): recovering from clean shutdown, journal seq 10
[  156.331708][  T908] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  156.357604][ T6508] bcachefs (loop2): Version upgrade required:
[  156.357604][ T6508] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[  156.357604][ T6508] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.20: directory_size
[  156.357604][ T6508]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,set_fs_needs_rebalance
[  156.557413][  T908] usb 1-1: config index 0 descriptor too short (expected 1170, got 146)
[  156.605098][  T908] usb 1-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config
[  156.623833][  T908] usb 1-1: config 255 has no interfaces?
[  156.696940][  T908] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  156.706149][  T908] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  156.787175][  T908] usb 1-1: SerialNumber: syz
[  156.818007][ T6508] bcachefs (loop2): dropping and reconstructing all alloc info
[  157.142680][ T6508] bcachefs (loop2): accounting_read... done
[  157.187025][ T6508] bcachefs (loop2): alloc_read... done
[  157.215240][ T6508] bcachefs (loop2): stripes_read... done
[  157.245198][ T6508] bcachefs (loop2): snapshots_read... done
[  157.275538][ T6508] bcachefs (loop2): done starting filesystem
[  157.324552][ T6557] dvmrp0: entered allmulticast mode
[  157.425258][ T6533] loop3: detected capacity change from 0 to 32768
[  157.450992][ T5839] bcachefs (loop2): shutting down
[  157.540686][  T908] usb 1-1: USB disconnect, device number 4
[  157.589224][ T6533] JBD2: Ignoring recovery information on journal
[  157.701996][ T5839] bcachefs (loop2): shutdown complete
[  157.796610][ T6533] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  157.941092][ T6533] OCFS2: ERROR (device loop3): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #32 has an invalid bg_blkno of 0
[  158.019140][ T6533] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  158.085990][ T6533] OCFS2: File system is now read-only.
[  158.121301][ T6533] (syz.3.178,6533,1):ocfs2_search_chain:1814 ERROR: status = -30
[  158.161672][ T6533] (syz.3.178,6533,1):ocfs2_search_chain:1926 ERROR: status = -30
[  158.193109][ T6533] (syz.3.178,6533,1):ocfs2_claim_suballoc_bits:1995 ERROR: status = -30
[  158.277054][ T6533] (syz.3.178,6533,0):ocfs2_claim_suballoc_bits:2038 ERROR: status = -30
[  158.285555][ T6533] (syz.3.178,6533,0):__ocfs2_claim_clusters:2412 ERROR: status = -30
[  158.345905][ T6567] input: syz1 as /devices/virtual/input/input9
[  158.458607][ T6533] (syz.3.178,6533,0):__ocfs2_claim_clusters:2420 ERROR: status = -30
[  158.558454][ T6533] (syz.3.178,6533,0):ocfs2_block_group_alloc_contig:437 ERROR: status = -30
[  158.653873][ T6533] (syz.3.178,6533,0):ocfs2_block_group_alloc:709 ERROR: status = -30
[  158.760791][ T6533] (syz.3.178,6533,0):ocfs2_block_group_alloc:762 ERROR: status = -30
[  158.867270][ T6564] OCFS2: ERROR (device loop3): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #32 has an invalid bg_blkno of 0
[  158.976102][ T6533] (syz.3.178,6533,1):ocfs2_reserve_suballoc_bits:837 ERROR: status = -30
[  159.036338][ T6533] (syz.3.178,6533,1):ocfs2_reserve_suballoc_bits:854 ERROR: status = -30
[  159.040105][ T6564] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  159.054956][ T6564] (syz.3.178,6564,0):ocfs2_group_extend:326 ERROR: status = -30
[  159.105426][ T6533] (syz.3.178,6533,1):ocfs2_reserve_new_metadata_blocks:994 ERROR: status = -30
[  159.131925][ T6533] (syz.3.178,6533,1):ocfs2_reserve_new_metadata_blocks:1017 ERROR: status = -30
[  159.141559][ T6533] (syz.3.178,6533,1):ocfs2_expand_inline_dir:2839 ERROR: status = -30
[  159.167031][ T6533] (syz.3.178,6533,1):ocfs2_extend_dir:3203 ERROR: status = -30
[  159.176280][ T6533] (syz.3.178,6533,1):ocfs2_prepare_dir_for_insert:4308 ERROR: status = -30
[  159.208963][ T6533] (syz.3.178,6533,1):ocfs2_mknod:298 ERROR: status = -30
[  159.216076][ T6533] (syz.3.178,6533,1):ocfs2_mknod:502 ERROR: status = -30
[  159.233691][ T6533] (syz.3.178,6533,1):ocfs2_create:675 ERROR: status = -30
[  159.346188][ T6533] syz.3.178 (6533) used greatest stack depth: 16984 bytes left
[  159.504813][ T5835] ocfs2: Unmounting device (7,3) on (node local)
[  160.391979][   T29] audit: type=1400 audit(1739211348.739:4): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=6578 comm="syz.4.190"
[  161.069633][ T6583] warning: `syz.0.191' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  164.938195][ T6617] loop2: detected capacity change from 0 to 8
[  165.848944][   T29] audit: type=1400 audit(1739211354.199:5): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=6619 comm="syz.0.202"
[  166.486153][ T6627] loop4: detected capacity change from 0 to 2048
[  166.508458][ T6627] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  167.899032][ T5842] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  167.908397][ T5842] Bluetooth: hci1: Injecting HCI hardware error event
[  168.324063][ T5842] Bluetooth: hci1: hardware error 0x00
[  168.367838][ T5929] kernel write not supported for file /sequencer (pid: 5929 comm: kworker/1:6)
[  171.349135][ T5842] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  171.519024][ T6664] loop2: detected capacity change from 0 to 8
[  172.402457][   T29] audit: type=1400 audit(1739211360.169:6): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=6661 comm="syz.3.215"
[  172.463122][   T25] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  172.697702][   T25] usb 5-1: Using ep0 maxpacket: 32
[  172.942154][   T25] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  172.995260][   T25] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  173.048876][   T25] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  173.104250][   T25] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  173.145563][   T25] hub 5-1:4.0: USB hub found
[  173.357528][   T25] hub 5-1:4.0: 2 ports detected
[  174.466180][   T25] hub 5-1:4.0: hub_hub_status failed (err = -32)
[  174.490635][   T25] hub 5-1:4.0: config failed, can't get hub status (err -32)
[  175.469267][   T25] usb 5-1: USB disconnect, device number 4
[  176.057119][ T5887] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  176.274110][ T5887] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x16, changing to 0x6
[  176.298338][ T5887] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 8386, setting to 1024
[  176.331385][ T6680] netlink: 'syz.3.221': attribute type 21 has an invalid length.
[  176.340130][ T6680] netlink: 'syz.3.221': attribute type 20 has an invalid length.
[  176.354810][ T5887] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1024
[  176.379289][ T5887] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  176.395175][ T6680] IPv6: NLM_F_CREATE should be specified when creating new route
[  176.434673][ T5887] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  176.446820][ T6706] loop1: detected capacity change from 0 to 8
[  176.452191][ T5887] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  176.464868][ T5887] usb 5-1: Product: syz
[  176.476154][ T5887] usb 5-1: Manufacturer: syz
[  176.481212][ T5887] usb 5-1: SerialNumber: syz
[  176.491497][ T6698] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  176.509623][ T6707] netlink: 'syz.0.231': attribute type 10 has an invalid length.
[  177.220771][ T6707] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  177.237389][ T6698] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  177.885815][ T6698] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  178.294692][ T5887] cdc_mbim 5-1:1.0: MAC-Address: 42:42:42:42:42:42
[  178.344059][ T5887] cdc_mbim 5-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048
[  178.416613][ T5887] cdc_mbim 5-1:1.0: setting rx_max = 2048
[  178.664028][ T5887] cdc_mbim 5-1:1.0: setting tx_max = 184
[  178.680705][ T5887] cdc_ncm 5-1:1.1: probe with driver cdc_ncm failed with error -71
[  178.695272][ T5887] cdc_mbim 5-1:1.1: probe with driver cdc_mbim failed with error -71
[  178.767203][ T5887] usbtest 5-1:1.1: probe with driver usbtest failed with error -71
[  178.779910][ T5887] usb 5-1: USB disconnect, device number 5
[  181.162122][ T6741] loop2: detected capacity change from 0 to 64
[  181.231762][ T6743] loop3: detected capacity change from 0 to 1024
[  181.292132][ T6743] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  182.404177][ T6754] loop2: detected capacity change from 0 to 2048
[  182.418052][ T6754] UDF-fs: warning (device loop2): udf_fill_super: No partition found (2)
[  183.130441][ T6759] netlink: 8 bytes leftover after parsing attributes in process `syz.3.243'.
[  183.869005][ T5835] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  183.897081][ T5887] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  184.195114][ T5887] usb 1-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x16, changing to 0x6
[  184.207372][ T5887] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 8386, setting to 1024
[  184.219577][ T5887] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1024
[  184.229817][ T5887] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  184.951013][ T5887] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  185.003430][ T5887] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  185.013258][ T5887] usb 1-1: Product: syz
[  185.017784][ T5887] usb 1-1: Manufacturer: syz
[  185.022628][ T5887] usb 1-1: SerialNumber: syz
[  185.032301][ T6757] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  185.207984][ T5842] block nbd2: Receive control failed (result -32)
[  185.237804][ T5842] block nbd2: Receive control failed (result -32)
[  185.257414][ T6757] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  185.292139][ T6761] block nbd2: shutting down sockets
[  185.931792][ T6757] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  186.197579][ T5887] cdc_mbim 1-1:1.0: failed to get mac address
[  186.218203][ T5887] cdc_mbim 1-1:1.0: bind() failure
[  186.857258][ T5887] cdc_ncm 1-1:1.1: probe with driver cdc_ncm failed with error -71
[  186.947931][ T5887] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -71
[  187.067071][ T5887] usbtest 1-1:1.1: probe with driver usbtest failed with error -71
[  187.216883][ T5887] usb 1-1: USB disconnect, device number 5
[  187.618569][ T6795] netlink: 148 bytes leftover after parsing attributes in process `syz.4.258'.
[  187.685229][ T6795] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[  187.694975][ T6797] loop3: detected capacity change from 0 to 1024
[  187.767912][ T6797] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  187.807042][  T970] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  187.980100][  T970] usb 3-1: Using ep0 maxpacket: 16
[  187.997211][  T970] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  188.033701][  T970] usb 3-1: config 0 has no interface number 0
[  188.086784][  T970] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  188.123898][  T970] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  188.176169][  T970] usb 3-1: Product: syz
[  188.201054][  T970] usb 3-1: Manufacturer: syz
[  188.223360][  T970] usb 3-1: SerialNumber: syz
[  188.257803][  T970] usb 3-1: config 0 descriptor??
[  188.287692][  T970] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  188.448373][ T6806] netlink: 76 bytes leftover after parsing attributes in process `syz.1.261'.
[  188.569418][ T6818] netlink: 8 bytes leftover after parsing attributes in process `syz.3.259'.
[  189.864334][ T5835] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  190.109926][ T6835] Bluetooth: MGMT ver 1.23
[  190.934798][ T6836] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem
[  191.087794][  T970] gspca_spca1528: reg_r err -71
[  191.092810][  T970] spca1528 3-1:0.1: probe with driver spca1528 failed with error -71
[  191.143360][  T970] usb 3-1: USB disconnect, device number 5
[  193.090200][ T6878] netlink: 76 bytes leftover after parsing attributes in process `syz.2.277'.
[  195.053209][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  195.059669][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  196.480721][ T6927] netlink: 76 bytes leftover after parsing attributes in process `syz.3.289'.
[  197.190991][ T6949] netlink: 'syz.0.296': attribute type 1 has an invalid length.
[  198.320555][ T6961] loop1: detected capacity change from 0 to 512
[  198.599138][ T6961] EXT4-fs (loop1): orphan cleanup on readonly fs
[  198.649739][ T6961] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.299: bg 0: block 248: padding at end of block bitmap is not set
[  198.697957][ T6961] Quota error (device loop1): write_blk: dquota write failed
[  198.705967][ T6961] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  198.898496][ T6961] EXT4-fs error (device loop1): ext4_acquire_dquot:6927: comm syz.1.299: Failed to acquire dquot type 1
[  198.969144][ T6961] EXT4-fs (loop1): 1 truncate cleaned up
[  198.991452][ T6961] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  199.181598][ T5841] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  199.202291][ T6972] netlink: 76 bytes leftover after parsing attributes in process `syz.0.303'.
[  199.656730][ T5842] Bluetooth: hci4: link tx timeout
[  199.669672][ T5842] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa
[  199.814508][ T6967] loop3: detected capacity change from 0 to 32768
[  199.927369][ T6982] netlink: 4 bytes leftover after parsing attributes in process `syz.0.307'.
[  200.138580][ T6982] hsr_slave_1 (unregistering): left promiscuous mode
[  200.447737][ T6995] ptrace attach of "./syz-executor exec"[5841] was attempted by "./syz-executor exec"[6995]
[  200.843556][ T6996] netlink: 'syz.0.310': attribute type 1 has an invalid length.
[  201.140193][ T6967] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names
[  201.187953][ T6967] bcachefs (loop3): initializing new filesystem
[  201.200721][ T6967] bcachefs (loop3): going read-write
[  201.236224][ T6967] bcachefs (loop3): marking superblocks
[  201.365005][ T6967] bcachefs (loop3): initializing freespace
[  201.422338][ T6967] bcachefs (loop3): done initializing freespace
[  201.462112][ T6967] bcachefs (loop3): reading snapshots table
[  201.480876][ T6967] bcachefs (loop3): reading snapshots done
[  201.612866][ T6967] bcachefs (loop3): done starting filesystem
[  201.747067][ T5838] Bluetooth: hci4: command 0x0406 tx timeout
[  202.371354][ T6967] syz.3.301 (6967) used greatest stack depth: 12560 bytes left
[  202.404590][ T7012] netlink: 76 bytes leftover after parsing attributes in process `syz.1.315'.
[  202.432655][ T5835] bcachefs (loop3): shutting down
[  202.438373][ T5835] bcachefs (loop3): going read-only
[  202.444322][ T5835] bcachefs (loop3): finished waiting for writes to stop
[  202.474251][ T5835] bcachefs (loop3): flushing journal and stopping allocators, journal seq 2
[  202.605894][ T5835] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 3
[  202.663001][ T5835] bcachefs (loop3): clean shutdown complete, journal seq 4
[  202.672094][ T5835] bcachefs (loop3): marking filesystem clean
[  202.731801][ T5835] bcachefs (loop3): shutdown complete
[  203.530679][ T7014] loop4: detected capacity change from 0 to 40427
[  203.760076][ T7014] F2FS-fs (loop4): invalid crc value
[  203.915794][ T7014] F2FS-fs (loop4): Found nat_bits in checkpoint
[  204.293926][ T7014] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  204.395692][ T7030] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  204.447668][   T29] audit: type=1800 audit(1739211392.809:7): pid=7014 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.314" name="bus" dev="overlay" ino=25 res=0 errno=0
[  204.495064][ T5847] syz-executor: attempt to access beyond end of device
[  204.495064][ T5847] loop4: rw=524288, sector=45064, nr_sectors = 8 limit=40427
[  204.523616][ T5847] syz-executor: attempt to access beyond end of device
[  204.523616][ T5847] loop4: rw=0, sector=45064, nr_sectors = 8 limit=40427
[  204.623091][ T7032] netlink: 'syz.0.322': attribute type 1 has an invalid length.
[  204.905676][  T980] kworker/u8:6: attempt to access beyond end of device
[  204.905676][  T980] loop4: rw=2049, sector=40960, nr_sectors = 32 limit=40427
[  205.089472][  T980] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  205.096735][  T980] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  205.120896][  T980] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  205.131633][  T980] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  205.317382][   T25] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  205.487237][   T25] usb 4-1: Using ep0 maxpacket: 16
[  205.515113][   T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  205.546806][   T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  205.568082][   T25] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  205.590174][   T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  205.633013][   T25] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  205.647151][   T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  205.668648][   T25] usb 4-1: config 0 descriptor??
[  205.713732][   T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  205.843720][   T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  205.966500][   T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  206.146624][   T25] microsoft 0003:045E:07DA.0003: ignoring exceeding usage max
[  206.191067][   T25] HID 045e:07da: Invalid code 65791 type 1
[  206.206094][   T25] HID 045e:07da: Invalid code 768 type 1
[  206.217388][   T25] HID 045e:07da: Invalid code 769 type 1
[  206.233874][   T25] HID 045e:07da: Invalid code 770 type 1
[  206.254148][   T25] HID 045e:07da: Invalid code 771 type 1
[  206.266998][   T25] HID 045e:07da: Invalid code 772 type 1
[  206.272692][   T25] HID 045e:07da: Invalid code 773 type 1
[  206.303525][   T25] HID 045e:07da: Invalid code 774 type 1
[  206.309354][   T25] HID 045e:07da: Invalid code 775 type 1
[  206.315152][   T25] HID 045e:07da: Invalid code 776 type 1
[  206.354563][   T25] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0003/input/input10
[  206.385347][   T12] bridge_slave_1: left allmulticast mode
[  206.410503][   T12] bridge_slave_1: left promiscuous mode
[  206.418666][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  206.454188][   T12] bridge_slave_0: left allmulticast mode
[  206.461746][   T25] microsoft 0003:045E:07DA.0003: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0
[  206.467007][   T12] bridge_slave_0: left promiscuous mode
[  206.500337][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  206.577373][   T25] usb 4-1: USB disconnect, device number 3
[  207.156774][ T5143] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  207.171623][ T5143] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  207.194923][ T5143] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  207.217844][ T5143] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  207.245378][ T5143] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  207.263142][ T5143] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  207.833683][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  207.846881][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  207.859292][   T12] bond0 (unregistering): Released all slaves
[  207.890029][   T12] bond1 (unregistering): Released all slaves
[  208.442958][ T7044] chnl_net:caif_netlink_parms(): no params data found
[  208.508812][ T7057] overlayfs: failed to resolve './file2': -2
[  208.515391][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  208.524696][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  208.556442][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  208.572961][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  208.708843][   T12] veth1_macvtap: left promiscuous mode
[  208.715010][   T12] veth0_macvtap: left promiscuous mode
[  208.738408][   T12] veth1_vlan: left promiscuous mode
[  208.746662][   T12] veth0_vlan: left promiscuous mode
[  208.977109][ T5883] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  209.129179][ T5883] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  209.147009][ T5883] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  209.167380][ T5883] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  209.194221][ T5883] usb 4-1: config 0 descriptor??
[  209.203827][ T5883] pwc: Askey VC010 type 2 USB webcam detected.
[  209.337614][ T5838] Bluetooth: hci4: command tx timeout
[  209.607699][ T5883] pwc: recv_control_msg error -32 req 02 val 2b00
[  209.615248][ T5883] pwc: recv_control_msg error -32 req 02 val 2700
[  209.630847][ T5883] pwc: recv_control_msg error -32 req 02 val 2c00
[  209.638248][ T5883] pwc: recv_control_msg error -32 req 04 val 1000
[  209.657058][ T5883] pwc: recv_control_msg error -32 req 04 val 1300
[  209.677182][ T5883] pwc: recv_control_msg error -32 req 04 val 1400
[  209.684677][ T5883] pwc: recv_control_msg error -32 req 02 val 2000
[  209.694802][ T5883] pwc: recv_control_msg error -32 req 02 val 2100
[  209.711912][ T5883] pwc: recv_control_msg error -32 req 04 val 1500
[  209.730489][ T5883] pwc: recv_control_msg error -32 req 02 val 2500
[  209.747150][ T5883] pwc: recv_control_msg error -32 req 02 val 2400
[  209.764821][ T5883] pwc: recv_control_msg error -32 req 02 val 2600
[  209.915248][   T12] team0 (unregistering): Port device team_slave_1 removed
[  209.992565][ T5883] pwc: recv_control_msg error -71 req 02 val 2800
[  210.002699][   T12] team0 (unregistering): Port device team_slave_0 removed
[  210.014735][ T5883] pwc: recv_control_msg error -71 req 04 val 1100
[  210.034893][ T5883] pwc: recv_control_msg error -71 req 04 val 1200
[  210.053151][ T5883] pwc: Registered as video103.
[  210.081185][ T5883] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input11
[  210.113993][ T5883] usb 4-1: USB disconnect, device number 4
[  210.855956][ T7066] loop3: detected capacity change from 0 to 4096
[  210.966199][ T7066] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  210.978863][ T7066] ntfs3(loop3): Failed to load $Extend (-22).
[  210.985003][ T7066] ntfs3(loop3): Failed to initialize $Extend.
[  211.430695][ T5836] Bluetooth: hci4: command tx timeout
[  211.523839][ T7063] IPv6: NLM_F_CREATE should be specified when creating new route
[  211.695188][ T7066] 9pnet_fd: Insufficient options for proto=fd
[  212.148443][ T5836] Bluetooth: hci0: command 0x0406 tx timeout
[  212.154769][ T5836] Bluetooth: hci3: command 0x0406 tx timeout
[  212.222630][ T7044] bridge0: port 1(bridge_slave_0) entered blocking state
[  212.273350][ T7044] bridge0: port 1(bridge_slave_0) entered disabled state
[  212.287556][ T7044] bridge_slave_0: entered allmulticast mode
[  212.295365][ T7044] bridge_slave_0: entered promiscuous mode
[  212.355715][ T7044] bridge0: port 2(bridge_slave_1) entered blocking state
[  212.378927][ T7044] bridge0: port 2(bridge_slave_1) entered disabled state
[  212.386253][ T7044] bridge_slave_1: entered allmulticast mode
[  212.393632][ T7074] netlink: 'syz.0.334': attribute type 1 has an invalid length.
[  212.427064][ T7044] bridge_slave_1: entered promiscuous mode
[  212.662283][ T7044] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  212.715182][   T12] IPVS: stop unused estimator thread 0...
[  212.776563][ T7044] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  213.063175][ T7044] team0: Port device team_slave_0 added
[  213.095914][ T7044] team0: Port device team_slave_1 added
[  213.156202][ T7044] batman_adv: batadv0: Adding interface: batadv_slave_0
[  213.165692][ T7044] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  213.194731][ T7044] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  213.222493][ T7044] batman_adv: batadv0: Adding interface: batadv_slave_1
[  213.229596][ T7044] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  213.270042][ T7044] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  213.425992][ T7044] hsr_slave_0: entered promiscuous mode
[  213.675809][ T5143] Bluetooth: hci4: command tx timeout
[  213.684095][ T7044] hsr_slave_1: entered promiscuous mode
[  213.708600][ T7044] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  213.716240][ T7044] Cannot create hsr debugfs directory
[  214.690573][ T7094] overlayfs: failed to resolve './file2': -2
[  215.152983][ T7044] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  215.295697][ T7044] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  216.273106][ T5143] Bluetooth: hci4: command tx timeout
[  216.480553][ T7044] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  216.636392][ T7044] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  218.032288][ T5838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  218.053248][ T5838] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  218.067258][ T5838] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  218.079703][ T5838] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  218.084634][  T980] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  218.100309][ T5838] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  218.117844][ T5838] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  218.381611][  T980] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  218.619434][  T980] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  219.009385][  T980] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  219.054100][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  219.078419][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  219.090307][ T5838] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  219.106336][ T5838] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  219.116136][ T5838] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  219.125204][ T5838] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  220.187865][ T7044] 8021q: adding VLAN 0 to HW filter on device bond0
[  220.195260][  T980] bridge_slave_1: left allmulticast mode
[  220.202168][  T980] bridge_slave_1: left promiscuous mode
[  220.222951][  T980] bridge0: port 2(bridge_slave_1) entered disabled state
[  220.237215][ T5143] Bluetooth: hci2: command tx timeout
[  220.253245][  T980] bridge_slave_0: left allmulticast mode
[  220.262503][  T980] bridge_slave_0: left promiscuous mode
[  220.277365][  T980] bridge0: port 1(bridge_slave_0) entered disabled state
[  221.081281][ T7134] loop3: detected capacity change from 0 to 128
[  221.178974][ T5143] Bluetooth: hci3: command tx timeout
[  221.297801][   T29] audit: type=1804 audit(1739211409.659:8): pid=7137 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.349" name="/newroot/70/file0/bus" dev="loop3" ino=6 res=1 errno=0
[  221.336074][   T29] audit: type=1800 audit(1739211409.659:9): pid=7137 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.349" name="bus" dev="loop3" ino=6 res=0 errno=0
[  221.344072][ T7136] overlayfs: failed to resolve './file2': -2
[  222.334750][ T5143] Bluetooth: hci2: command tx timeout
[  223.300914][ T5143] Bluetooth: hci3: command tx timeout
[  223.413201][ T7149] loop3: detected capacity change from 0 to 2048
[  223.428534][ T7149] UDF-fs: warning (device loop3): udf_fill_super: No partition found (2)
[  224.406538][ T5143] Bluetooth: hci2: command tx timeout
[  225.150315][ T7160] loop3: detected capacity change from 0 to 1024
[  225.205550][  T980] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  225.225357][  T980] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  225.265160][ T7160] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  225.283211][  T980] bond0 (unregistering): Released all slaves
[  225.311259][  T980] bond1 (unregistering): Released all slaves
[  225.347140][ T5143] Bluetooth: hci3: command tx timeout
[  225.633030][ T7044] 8021q: adding VLAN 0 to HW filter on device team0
[  225.781952][ T7112] chnl_net:caif_netlink_parms(): no params data found
[  225.813627][ T5937] bridge0: port 1(bridge_slave_0) entered blocking state
[  225.820930][ T5937] bridge0: port 1(bridge_slave_0) entered forwarding state
[  225.859809][ T5937] bridge0: port 2(bridge_slave_1) entered blocking state
[  225.867084][ T5937] bridge0: port 2(bridge_slave_1) entered forwarding state
[  226.029838][ T7166] netlink: 8 bytes leftover after parsing attributes in process `syz.3.356'.
[  226.717509][ T5143] Bluetooth: hci2: command tx timeout
[  226.829787][ T5835] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  227.287079][ T7175] can0: slcan on pts0.
[  227.417329][ T5143] Bluetooth: hci3: command tx timeout
[  227.466613][ T7112] bridge0: port 1(bridge_slave_0) entered blocking state
[  227.502690][ T7112] bridge0: port 1(bridge_slave_0) entered disabled state
[  227.511240][ T7112] bridge_slave_0: entered allmulticast mode
[  227.537437][ T7112] bridge_slave_0: entered promiscuous mode
[  227.598361][  T980] hsr_slave_0: left promiscuous mode
[  227.614999][  T980] hsr_slave_1: left promiscuous mode
[  227.623486][ T7174] can0 (unregistered): slcan off pts0.
[  227.631688][  T980] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  227.913566][  T980] batman_adv: batadv0: Removing interface: batadv_slave_0
[  227.922556][  T980] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  227.931980][  T980] batman_adv: batadv0: Removing interface: batadv_slave_1
[  228.914100][  T980] veth1_macvtap: left promiscuous mode
[  228.927117][  T980] veth0_macvtap: left promiscuous mode
[  229.115762][  T980] veth1_vlan: left promiscuous mode
[  229.127401][  T980] veth0_vlan: left promiscuous mode
[  229.273861][ T7191] loop3: detected capacity change from 0 to 2048
[  229.281401][ T7191] udf: Unknown parameter ' B”RÉ“d³éCK•÷—â™Ï»ÚH¯QXLs©boútâ°ÙõÕï œµô&
‚¢ÙÈÊ­1Ù²vêk£ŠyöÔxħ½Ì"E‚0]¿*rW¶N«!{2ãÛ*†¯÷«ØÍn|<åÚ–Ð&èö'%ØÍ>è¹þO¹b™>¸æwÜaQ¡t)²hø€öûѦ@ý'
[  229.669364][ T7191] loop3: detected capacity change from 0 to 32768
[  229.882164][ T7191] XFS (loop3): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  230.051346][ T7191] XFS (loop3): Starting recovery (logdev: internal)
[  230.108160][ T7191] XFS (loop3): Metadata CRC error detected at xfs_inobt_read_verify+0x41/0xd0, xfs_finobt block 0x8 
[  230.119288][ T7191] XFS (loop3): Unmount and run xfs_repair
[  230.125040][ T7191] XFS (loop3): First 128 bytes of corrupted metadata buffer:
[  230.132592][ T7191] 00000000: 46 49 42 54 00 00 00 03 ff ff ff ff ff ff ff ff  FIBT............
[  230.141552][ T7191] 00000010: 00 00 00 00 00 00 00 08 00 00 00 01 00 00 00 10  ................
[  230.152684][ T7191] 00000020: ed 37 bf 6e 74 ea 4e 01 af ba 5f ee 27 4b 0f 3a  .7.nt.N..._.'K.:
[  230.161717][ T7191] 00000030: 00 00 00 00 ea d5 90 f3 00 00 00 07 00 00 00 01  ................
[  230.170698][ T7191] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0  ........... ....
[  230.179752][ T7191] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  230.188954][ T7191] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  230.198271][ T7191] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  230.210219][ T7191] XFS (loop3): Filesystem has been shut down due to log error (0x2).
[  230.219392][ T7191] XFS (loop3): Please unmount the filesystem and rectify the problem(s).
[  230.229291][ T7191] XFS (loop3): log mount/recovery failed: error -74
[  230.249953][ T7191] XFS (loop3): log mount failed
[  231.111640][  T980] team0 (unregistering): Port device team_slave_1 removed
[  231.176058][  T980] team0 (unregistering): Port device team_slave_0 removed
[  231.850754][ T7112] bridge0: port 2(bridge_slave_1) entered blocking state
[  231.858478][ T7112] bridge0: port 2(bridge_slave_1) entered disabled state
[  231.874248][ T7112] bridge_slave_1: entered allmulticast mode
[  231.911103][ T7112] bridge_slave_1: entered promiscuous mode
[  231.967223][ T7193] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  232.258295][ T7112] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  232.298848][ T7115] chnl_net:caif_netlink_parms(): no params data found
[  232.341674][ T7112] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  233.316194][ T7112] team0: Port device team_slave_0 added
[  233.358749][ T7112] team0: Port device team_slave_1 added
[  233.956131][ T7112] batman_adv: batadv0: Adding interface: batadv_slave_0
[  233.977051][ T7112] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  234.008255][ T7112] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  234.063266][ T7115] bridge0: port 1(bridge_slave_0) entered blocking state
[  234.072438][ T7115] bridge0: port 1(bridge_slave_0) entered disabled state
[  234.099746][ T7115] bridge_slave_0: entered allmulticast mode
[  234.107044][ T7115] bridge_slave_0: entered promiscuous mode
[  234.135085][ T7112] batman_adv: batadv0: Adding interface: batadv_slave_1
[  234.143742][ T7112] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  234.170985][ T7112] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  234.192444][ T7115] bridge0: port 2(bridge_slave_1) entered blocking state
[  234.201178][ T7115] bridge0: port 2(bridge_slave_1) entered disabled state
[  234.215447][ T7115] bridge_slave_1: entered allmulticast mode
[  234.225910][ T7115] bridge_slave_1: entered promiscuous mode
[  234.368185][  T980] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  234.393353][ T7115] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  234.405644][ T7115] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  234.431352][ T7112] hsr_slave_0: entered promiscuous mode
[  234.438593][ T7112] hsr_slave_1: entered promiscuous mode
[  234.444813][ T7112] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  234.452484][ T7112] Cannot create hsr debugfs directory
[  234.506377][  T980] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  234.601785][ T7115] team0: Port device team_slave_0 added
[  234.635433][  T980] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  234.668503][ T7115] team0: Port device team_slave_1 added
[  234.750003][  T980] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  234.767590][ T7115] batman_adv: batadv0: Adding interface: batadv_slave_0
[  234.774684][ T7115] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  234.801121][ T7115] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  234.815043][ T7115] batman_adv: batadv0: Adding interface: batadv_slave_1
[  234.822079][ T7115] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  234.848062][ T7115] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  234.928449][ T7044] 8021q: adding VLAN 0 to HW filter on device batadv0
[  235.109349][ T7115] hsr_slave_0: entered promiscuous mode
[  235.116315][ T7115] hsr_slave_1: entered promiscuous mode
[  235.145305][ T7115] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  235.155142][ T7115] Cannot create hsr debugfs directory
[  235.598227][ T7243] netlink: 4 bytes leftover after parsing attributes in process `syz.0.371'.
[  235.814230][  T980] bridge_slave_1: left allmulticast mode
[  235.822878][  T980] bridge_slave_1: left promiscuous mode
[  235.836136][  T980] bridge0: port 2(bridge_slave_1) entered disabled state
[  235.852367][  T980] bridge_slave_0: left allmulticast mode
[  235.858257][  T980] bridge_slave_0: left promiscuous mode
[  235.864194][  T980] bridge0: port 1(bridge_slave_0) entered disabled state
[  236.743098][  T980] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  236.754234][  T980] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  236.764495][  T980] bond0 (unregistering): Released all slaves
[  236.795160][ T7247] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR
[  236.969297][ T7255] loop3: detected capacity change from 0 to 1024
[  237.049851][ T7255] hfsplus: failed to load root directory
[  237.253429][ T7112] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  237.351054][ T7112] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  237.425907][ T7112] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  237.444594][ T7112] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  237.558905][ T7044] veth0_vlan: entered promiscuous mode
[  237.626550][  T980] hsr_slave_0: left promiscuous mode
[  237.651088][  T980] hsr_slave_1: left promiscuous mode
[  237.659186][  T980] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  237.667293][  T980] batman_adv: batadv0: Removing interface: batadv_slave_0
[  237.680851][  T980] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  237.688428][  T980] batman_adv: batadv0: Removing interface: batadv_slave_1
[  237.708384][  T980] veth1_macvtap: left promiscuous mode
[  237.713948][  T980] veth0_macvtap: left promiscuous mode
[  237.719680][  T980] veth1_vlan: left promiscuous mode
[  237.725640][  T980] veth0_vlan: left promiscuous mode
[  238.099285][ T7271] netlink: 4 bytes leftover after parsing attributes in process `syz.0.379'.
[  238.432025][  T980] team0 (unregistering): Port device team_slave_1 removed
[  238.481893][  T980] team0 (unregistering): Port device team_slave_0 removed
[  238.999873][ T7044] veth1_vlan: entered promiscuous mode
[  239.348116][ T7115] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  239.370796][ T7115] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  239.392177][ T7115] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  239.459689][ T7115] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  239.486502][ T7044] veth0_macvtap: entered promiscuous mode
[  239.513094][ T7044] veth1_macvtap: entered promiscuous mode
[  239.585396][ T7044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  239.596645][ T7044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  239.606764][ T7044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  239.618543][ T7044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  239.633325][ T7044] batman_adv: batadv0: Interface activated: batadv_slave_0
[  239.667749][ T7044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  239.679594][ T7044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  239.690177][ T7044] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  239.700935][ T7044] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  239.712254][ T7044] batman_adv: batadv0: Interface activated: batadv_slave_1
[  239.743140][ T7112] 8021q: adding VLAN 0 to HW filter on device bond0
[  239.764272][ T7044] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  239.774287][ T7044] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  239.785132][ T7044] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  239.793965][ T7044] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  239.889806][ T7112] 8021q: adding VLAN 0 to HW filter on device team0
[  239.962372][  T969] bridge0: port 1(bridge_slave_0) entered blocking state
[  239.969614][  T969] bridge0: port 1(bridge_slave_0) entered forwarding state
[  239.985811][ T5940] bridge0: port 2(bridge_slave_1) entered blocking state
[  239.993063][ T5940] bridge0: port 2(bridge_slave_1) entered forwarding state
[  240.078039][ T7115] 8021q: adding VLAN 0 to HW filter on device bond0
[  240.129756][  T969] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  240.161214][  T969] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  240.265243][ T5940] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  240.278800][ T5940] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  240.295783][ T7115] 8021q: adding VLAN 0 to HW filter on device team0
[  240.354147][  T980] bridge0: port 1(bridge_slave_0) entered blocking state
[  240.361385][  T980] bridge0: port 1(bridge_slave_0) entered forwarding state
[  240.386454][  T969] bridge0: port 2(bridge_slave_1) entered blocking state
[  240.393731][  T969] bridge0: port 2(bridge_slave_1) entered forwarding state
[  240.902346][ T7291] loop3: detected capacity change from 0 to 128
[  240.941939][ T7112] 8021q: adding VLAN 0 to HW filter on device batadv0
[  240.992417][ T7291] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  241.014233][ T7291] ext4 filesystem being mounted at /89/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  241.565346][ T7115] 8021q: adding VLAN 0 to HW filter on device batadv0
[  241.673813][ T7308] loop5: detected capacity change from 0 to 1024
[  241.721500][ T7308] hfsplus: failed to load root directory
[  242.758753][ T7318] netlink: 4 bytes leftover after parsing attributes in process `syz.5.387'.
[  243.017203][ T7318] hsr_slave_1 (unregistering): left promiscuous mode
[  243.456506][ T7115] veth0_vlan: entered promiscuous mode
[  243.464609][ T5835] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  243.596634][ T7112] veth0_vlan: entered promiscuous mode
[  243.633467][ T7115] veth1_vlan: entered promiscuous mode
[  243.694281][ T7112] veth1_vlan: entered promiscuous mode
[  243.792907][ T7115] veth0_macvtap: entered promiscuous mode
[  243.823208][ T7115] veth1_macvtap: entered promiscuous mode
[  243.903182][ T7112] veth0_macvtap: entered promiscuous mode
[  243.951929][ T7115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  243.977296][ T7115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  243.997465][ T7115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  244.017028][ T7115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  244.036975][ T7115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  244.056979][ T7115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  244.069238][ T7115] batman_adv: batadv0: Interface activated: batadv_slave_0
[  244.089804][ T7112] veth1_macvtap: entered promiscuous mode
[  244.121838][ T7115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  244.154962][ T7115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  244.175330][ T7115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  244.197153][ T7115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  244.212032][ T7115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  244.231660][ T7115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  244.245911][ T7115] batman_adv: batadv0: Interface activated: batadv_slave_1
[  244.282379][ T7332] loop5: detected capacity change from 0 to 2048
[  244.288650][ T7115] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  244.302176][ T7115] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  244.311305][ T7115] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  244.322568][ T7115] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  244.328923][ T7332] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  244.345555][ T7112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  244.349370][ T7332] ext4 filesystem being mounted at /4/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  244.369525][ T7112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  244.380940][ T7112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  244.392215][ T7112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  244.402149][ T7112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  244.412738][ T7112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  244.422723][ T7112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  244.434144][ T7112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  244.445968][ T7112] batman_adv: batadv0: Interface activated: batadv_slave_0
[  244.498351][ T7112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  244.509989][ T7112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  244.520472][ T7112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  244.531925][ T7112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  244.542920][ T7112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  244.553844][ T7112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  244.563738][ T7112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  244.574536][ T7112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  244.588839][ T7112] batman_adv: batadv0: Interface activated: batadv_slave_1
[  244.638539][ T7112] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  244.668627][ T7112] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  244.677959][ T7112] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  244.689862][ T7112] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  244.854929][   T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  244.881514][   T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  245.006236][   T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  245.033499][   T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  245.051469][ T7044] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  245.166383][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  245.200275][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  245.855990][  T980] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  245.876580][  T980] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  245.973967][ T7347] netlink: 'syz.7.345': attribute type 1 has an invalid length.
[  246.294592][ T7348] loop5: detected capacity change from 0 to 512
[  246.446514][ T7348] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  246.490528][ T7348] EXT4-fs (loop5): 1 truncate cleaned up
[  246.522624][ T7348] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  246.680613][  T908] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  246.936640][  T908] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  246.989591][  T908] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  247.026517][  T908] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  247.045987][  T908] usb 7-1: config 0 descriptor??
[  247.067465][  T908] pwc: Askey VC010 type 2 USB webcam detected.
[  247.331235][ T7044] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  247.476393][  T908] pwc: recv_control_msg error -32 req 02 val 2b00
[  247.491120][  T908] pwc: recv_control_msg error -32 req 02 val 2700
[  247.507274][  T908] pwc: recv_control_msg error -32 req 02 val 2c00
[  247.518019][  T908] pwc: recv_control_msg error -32 req 04 val 1000
[  247.533661][  T908] pwc: recv_control_msg error -32 req 04 val 1300
[  247.545390][  T908] pwc: recv_control_msg error -32 req 04 val 1400
[  247.561340][  T908] pwc: recv_control_msg error -32 req 02 val 2000
[  247.571410][  T908] pwc: recv_control_msg error -32 req 02 val 2100
[  247.603146][  T908] pwc: recv_control_msg error -32 req 04 val 1500
[  247.621274][  T908] pwc: recv_control_msg error -32 req 02 val 2500
[  247.635612][  T908] pwc: recv_control_msg error -32 req 02 val 2400
[  247.645692][  T908] pwc: recv_control_msg error -32 req 02 val 2600
[  247.923430][  T908] pwc: recv_control_msg error -71 req 02 val 2800
[  247.929861][ T7370] netlink: 'syz.7.398': attribute type 21 has an invalid length.
[  247.938062][ T7370] netlink: 'syz.7.398': attribute type 20 has an invalid length.
[  247.946309][ T7370] IPv6: NLM_F_CREATE should be specified when creating new route
[  247.995252][  T908] pwc: recv_control_msg error -71 req 04 val 1100
[  248.056070][  T908] pwc: recv_control_msg error -71 req 04 val 1200
[  248.306716][  T908] pwc: Registered as video103.
[  248.359638][  T908] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input12
[  248.427483][  T908] usb 7-1: USB disconnect, device number 2
[  248.476359][ T7374] loop3: detected capacity change from 0 to 4096
[  248.564618][ T7374] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  248.635936][ T7374] ntfs3(loop3): Failed to load $Extend (-22).
[  248.647042][ T7374] ntfs3(loop3): Failed to initialize $Extend.
[  250.217637][ T7399] loop5: detected capacity change from 0 to 2048
[  250.236208][ T7399] UDF-fs: warning (device loop5): udf_fill_super: No partition found (2)
[  250.527912][ T7397] wireguard0: entered promiscuous mode
[  250.533464][ T7397] wireguard0: entered allmulticast mode
[  251.304452][ T7412] loop7: detected capacity change from 0 to 8
[  251.890518][ T7422] loop3: detected capacity change from 0 to 1024
[  251.913838][ T7422] hfsplus: failed to load root directory
[  252.180150][ T7426] openvswitch: netlink: Actions may not be safe on all matching packets
[  253.715688][ T7434] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  254.139882][ T7438] loop3: detected capacity change from 0 to 8
[  254.286699][ T7438] SQUASHFS error: xz decompression failed, data probably corrupt
[  254.326590][ T7438] SQUASHFS error: Failed to read block 0x108: -5
[  254.349588][ T7438] SQUASHFS error: Unable to read metadata cache entry [106]
[  254.398148][ T7438] SQUASHFS error: Unable to read inode 0x11f
[  255.075044][ T7444] loop7: detected capacity change from 0 to 2048
[  255.091239][ T7444] UDF-fs: warning (device loop7): udf_fill_super: No partition found (2)
[  255.716539][ T7449] wireguard1: entered promiscuous mode
[  255.722459][ T7449] wireguard1: entered allmulticast mode
[  256.366851][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  256.374923][   T62] Bluetooth: (null): Invalid header checksum
[  256.381696][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  256.391760][   T62] Bluetooth: (null): Invalid header checksum
[  256.398896][   T62] Bluetooth: (null): Invalid header checksum
[  256.405568][   T62] Bluetooth: (null): Invalid header checksum
[  256.411746][   T62] Bluetooth: (null): Invalid header checksum
[  256.437650][   T62] Bluetooth: (null): Invalid header checksum
[  256.460117][   T62] Bluetooth: (null): Invalid header checksum
[  256.479213][   T62] Bluetooth: (null): Invalid header checksum
[  256.590423][ T7459] loop6: detected capacity change from 0 to 1024
[  256.680460][ T7459] hfsplus: failed to load root directory
[  256.836707][ T7462] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  257.001828][ T7471] loop3: detected capacity change from 0 to 8
[  258.496235][ T7483] loop5: detected capacity change from 0 to 2048
[  258.631715][ T7483]  loop5: p1 < > p4
[  258.657661][ T7483] loop5: p4 size 8388608 extends beyond EOD, truncated
[  259.427708][ T7495] netlink: 32 bytes leftover after parsing attributes in process `syz.3.442'.
[  259.537826][ T7499] loop5: detected capacity change from 0 to 1024
[  259.556536][ T7499] hfsplus: failed to load root directory
[  259.769232][ T7502] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  260.068510][ T7507] loop6: detected capacity change from 0 to 128
[  260.141130][ T7507] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  260.315209][ T7507] ext4 filesystem being mounted at /9/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  262.560014][ T7518] wireguard0: entered promiscuous mode
[  262.565763][ T7518] wireguard0: entered allmulticast mode
[  262.820033][ T7525] loop5: detected capacity change from 0 to 2048
[  262.853224][ T7523] loop7: detected capacity change from 0 to 1024
[  262.878539][ T7525]  loop5: p1 < > p4
[  262.878569][ T7523] EXT4-fs: Ignoring removed nobh option
[  262.888788][ T7525] loop5: p4 size 8388608 extends beyond EOD, truncated
[  262.992799][ T7523] EXT4-fs: Ignoring removed bh option
[  263.108081][ T7523] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  263.208742][ T7530] loop5: detected capacity change from 0 to 8
[  263.222707][ T7112] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  263.308107][ T7523] loop7: detected capacity change from 1024 to 64
[  263.669692][ T7532] syz.7.450: attempt to access beyond end of device
[  263.669692][ T7532] loop7: rw=2049, sector=226, nr_sectors = 2 limit=64
[  263.735778][ T7538] netlink: 32 bytes leftover after parsing attributes in process `syz.3.454'.
[  263.758495][ T7532] EXT4-fs warning (device loop7): ext4_end_bio:346: I/O error 10 writing to inode 15 starting block 113)
[  263.777628][ T7532] syz.7.450: attempt to access beyond end of device
[  263.777628][ T7532] loop7: rw=2049, sector=230, nr_sectors = 2 limit=64
[  263.799559][ T7532] EXT4-fs warning (device loop7): ext4_end_bio:346: I/O error 10 writing to inode 15 starting block 115)
[  263.812665][ T7532] Buffer I/O error on device loop7, logical block 115
[  263.820121][ T7532] Buffer I/O error on device loop7, logical block 113
[  263.880081][ T7115] EXT4-fs warning (device loop7): ext4_empty_dir:3097: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  263.896609][ T7115] EXT4-fs warning (device loop7): ext4_empty_dir:3097: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  263.912040][ T7115] EXT4-fs warning (device loop7): ext4_empty_dir:3097: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  263.932704][ T7115] EXT4-fs warning (device loop7): ext4_empty_dir:3097: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  263.951295][ T7115] EXT4-fs warning (device loop7): ext4_empty_dir:3097: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  263.975389][ T7115] EXT4-fs warning (device loop7): ext4_empty_dir:3097: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  263.995059][ T7115] EXT4-fs warning (device loop7): ext4_empty_dir:3097: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  264.020134][ T7115] EXT4-fs warning (device loop7): ext4_empty_dir:3097: inode #11: lblock 0: comm syz-executor: error -12 reading directory block
[  264.375329][ T7540] loop3: detected capacity change from 0 to 1024
[  264.468894][ T7540] hfsplus: failed to load root directory
[  264.577315][ T7115] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  264.625631][ T7527] kmmpd-loop7: attempt to access beyond end of device
[  264.625631][ T7527] loop7: rw=14337, sector=128, nr_sectors = 2 limit=64
[  264.648572][ T7542] openvswitch: netlink: Duplicate or invalid key (type 0).
[  264.685569][ T7527] Buffer I/O error on dev loop7, logical block 64, lost sync page write
[  264.694131][ T7542] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  264.797645][ T5937] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  265.119952][ T5937] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  265.204556][ T7548] overlayfs: missing 'lowerdir'
[  265.450052][ T5937] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  265.610524][ T5937] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  265.987688][ T7556] netlink: 32 bytes leftover after parsing attributes in process `syz.5.466'.
[  266.052897][ T7559] netlink: 'syz.6.464': attribute type 1 has an invalid length.
[  266.253751][ T5937] bridge_slave_1: left allmulticast mode
[  266.264797][ T5937] bridge_slave_1: left promiscuous mode
[  266.277563][ T5937] bridge0: port 2(bridge_slave_1) entered disabled state
[  267.300721][ T5937] bridge_slave_0: left allmulticast mode
[  267.414811][ T5937] bridge_slave_0: left promiscuous mode
[  267.427312][ T5937] bridge0: port 1(bridge_slave_0) entered disabled state
[  267.568914][ T7566] loop5: detected capacity change from 0 to 8
[  267.780685][ T7569] loop6: detected capacity change from 0 to 512
[  267.845188][ T7044] SQUASHFS error: Unable to read directory block [631:72]
[  267.854122][ T7569] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  267.908980][ T7044] SQUASHFS error: Unable to read inode 0xe3
[  267.957214][ T7044] SQUASHFS error: Unable to read inode 0xe3
[  268.314573][ T7569] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  268.362538][ T7569] EXT4-fs (loop6): 1 truncate cleaned up
[  268.409081][ T7569] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  268.528121][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  268.546678][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  268.567133][   T29] audit: type=1800 audit(1739211456.929:10): pid=7569 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.469" name="file1" dev="loop6" ino=15 res=0 errno=0
[  268.567188][ T5838] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  268.639510][ T5838] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  268.670586][ T5838] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  268.679221][ T5838] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  268.986042][ T7112] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  269.208048][ T7578] openvswitch: netlink: Duplicate or invalid key (type 0).
[  269.215352][ T7578] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  269.319943][ T5937] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  269.347621][ T5937] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  269.359209][ T5937] bond0 (unregistering): Released all slaves
[  269.393676][ T7570] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR
[  269.468599][ T7574] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR
[  270.114413][ T7585] overlayfs: missing 'lowerdir'
[  270.777745][ T5143] Bluetooth: hci3: command tx timeout
[  270.908973][ T5937] hsr_slave_0: left promiscuous mode
[  270.941786][ T5937] hsr_slave_1: left promiscuous mode
[  270.952991][ T5937] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  271.007061][ T5937] batman_adv: batadv0: Removing interface: batadv_slave_0
[  271.028495][ T5937] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  271.035946][ T5937] batman_adv: batadv0: Removing interface: batadv_slave_1
[  271.181418][ T5937] veth1_macvtap: left promiscuous mode
[  271.197185][ T5937] veth0_macvtap: left promiscuous mode
[  271.223334][ T5937] veth1_vlan: left promiscuous mode
[  271.242652][ T5937] veth0_vlan: left promiscuous mode
[  272.225763][ T7602] loop6: detected capacity change from 0 to 4096
[  272.322838][ T5838] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  272.342664][ T5838] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  272.351936][ T5838] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  272.373369][ T5838] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  272.383203][ T5838] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  272.392265][ T5838] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  272.527442][ T7605] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  272.814412][   T29] audit: type=1804 audit(1739211461.159:11): pid=7602 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.479" name="/newroot/18/file0/bus" dev="loop6" ino=18 res=1 errno=0
[  272.830525][ T7608] netlink: 4 bytes leftover after parsing attributes in process `syz.3.480'.
[  272.871231][ T5838] Bluetooth: hci3: command tx timeout
[  273.761918][ T5937] team0 (unregistering): Port device team_slave_1 removed
[  274.131196][ T5937] team0 (unregistering): Port device team_slave_0 removed
[  274.235647][ T7613] loop6: detected capacity change from 0 to 2048
[  274.261598][ T7613] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024)
[  274.297196][ T7614] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  274.319635][ T7613] NILFS (loop6): bad btree root (ino=2): level = 255, flags = 0xff, nchildren = 0
[  274.331552][ T7613] NILFS (loop6): error -5 getting root inode
[  274.457170][ T5838] Bluetooth: hci4: command tx timeout
[  275.157083][ T5838] Bluetooth: hci3: command tx timeout
[  276.081706][ T7608] hsr_slave_1 (unregistering): left promiscuous mode
[  276.099764][ T7621] wireguard0: entered promiscuous mode
[  276.105307][ T7621] wireguard0: entered allmulticast mode
[  276.537209][ T5838] Bluetooth: hci4: command tx timeout
[  276.767242][ T7628] overlayfs: missing 'lowerdir'
[  276.913959][ T7575] chnl_net:caif_netlink_parms(): no params data found
[  277.180649][ T5838] Bluetooth: hci3: command tx timeout
[  278.053875][ T7575] bridge0: port 1(bridge_slave_0) entered blocking state
[  278.086837][ T7575] bridge0: port 1(bridge_slave_0) entered disabled state
[  278.117202][ T7575] bridge_slave_0: entered allmulticast mode
[  278.124975][ T7575] bridge_slave_0: entered promiscuous mode
[  278.153755][ T7603] chnl_net:caif_netlink_parms(): no params data found
[  278.199643][ T7575] bridge0: port 2(bridge_slave_1) entered blocking state
[  278.217900][ T7575] bridge0: port 2(bridge_slave_1) entered disabled state
[  278.234264][ T7575] bridge_slave_1: entered allmulticast mode
[  278.248868][ T7575] bridge_slave_1: entered promiscuous mode
[  278.579875][ T7659] netlink: 4 bytes leftover after parsing attributes in process `syz.3.492'.
[  278.627035][ T5838] Bluetooth: hci4: command tx timeout
[  278.677150][ T5937] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  278.730925][ T7575] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  278.767927][ T7575] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  278.908698][ T5937] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  279.313548][ T7668] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  279.349650][ T5937] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  279.431812][ T7575] team0: Port device team_slave_0 added
[  279.621532][ T7575] team0: Port device team_slave_1 added
[  279.802022][ T5937] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  279.894867][ T7603] bridge0: port 1(bridge_slave_0) entered blocking state
[  279.995110][ T7603] bridge0: port 1(bridge_slave_0) entered disabled state
[  280.008945][ T7603] bridge_slave_0: entered allmulticast mode
[  280.028832][ T7603] bridge_slave_0: entered promiscuous mode
[  280.101375][ T7671] wireguard1: entered promiscuous mode
[  280.106887][ T7671] wireguard1: entered allmulticast mode
[  281.267062][ T5838] Bluetooth: hci4: command tx timeout
[  281.334691][ T7603] bridge0: port 2(bridge_slave_1) entered blocking state
[  281.367167][ T7603] bridge0: port 2(bridge_slave_1) entered disabled state
[  281.374655][ T7603] bridge_slave_1: entered allmulticast mode
[  281.390611][ T7603] bridge_slave_1: entered promiscuous mode
[  281.429627][ T7575] batman_adv: batadv0: Adding interface: batadv_slave_0
[  281.443050][ T7575] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  281.478488][ T7575] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  281.638545][ T7575] batman_adv: batadv0: Adding interface: batadv_slave_1
[  281.655812][ T7575] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  281.713050][ T7575] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  281.897688][ T7683] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore
[  281.906643][ T7683] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  281.980063][ T7603] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  282.203028][ T7603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  283.207974][ T7575] hsr_slave_0: entered promiscuous mode
[  283.214882][ T7575] hsr_slave_1: entered promiscuous mode
[  283.237588][ T7698] netlink: 4 bytes leftover after parsing attributes in process `syz.6.502'.
[  283.238569][ T7575] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  283.284945][ T7575] Cannot create hsr debugfs directory
[  283.338585][ T7603] team0: Port device team_slave_0 added
[  283.550607][ T7698] hsr_slave_1 (unregistering): left promiscuous mode
[  283.602061][ T7603] team0: Port device team_slave_1 added
[  284.195423][ T5937] bridge_slave_1: left allmulticast mode
[  284.210725][ T5937] bridge_slave_1: left promiscuous mode
[  284.221557][ T5937] bridge0: port 2(bridge_slave_1) entered disabled state
[  284.288268][ T5937] bridge_slave_0: left allmulticast mode
[  284.293958][ T5937] bridge_slave_0: left promiscuous mode
[  284.317977][ T7704] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  284.324744][ T5937] bridge0: port 1(bridge_slave_0) entered disabled state
[  286.397649][ T5937] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  286.413585][ T5937] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  286.429815][ T5937] bond0 (unregistering): Released all slaves
[  286.689925][ T7721] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore
[  286.737127][ T7721] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  286.765336][ T7706] sch_tbf: burst 19872 is lower than device lo mtu (11337746) !
[  287.168595][ T7603] batman_adv: batadv0: Adding interface: batadv_slave_0
[  287.317951][ T7603] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  287.370994][ T7603] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  287.419816][ T7603] batman_adv: batadv0: Adding interface: batadv_slave_1
[  287.426783][ T7603] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  287.466445][ T7603] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  287.585741][ T7732] loop3: detected capacity change from 0 to 256
[  287.604641][ T7732] vfat: Unknown parameter 'uni_xlateèÚŽXn1…íT×'
[  288.489207][ T7603] hsr_slave_0: entered promiscuous mode
[  288.515655][ T7603] hsr_slave_1: entered promiscuous mode
[  288.519987][ T7732] syz.3.512: vmalloc error: size 536870912, failed to allocated page array size 1048576, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  288.531074][ T7603] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  288.567785][ T7603] Cannot create hsr debugfs directory
[  288.576996][ T7732] CPU: 0 UID: 0 PID: 7732 Comm: syz.3.512 Not tainted 6.14.0-rc2-next-20250210-syzkaller #0
[  288.577021][ T7732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  288.577036][ T7732] Call Trace:
[  288.577044][ T7732]  <TASK>
[  288.577052][ T7732]  dump_stack_lvl+0x241/0x360
[  288.577083][ T7732]  ? __pfx_dump_stack_lvl+0x10/0x10
[  288.577102][ T7732]  ? __pfx__printk+0x10/0x10
[  288.577136][ T7732]  ? cpuset_print_current_mems_allowed+0x1f/0x350
[  288.577157][ T7732]  ? cpuset_print_current_mems_allowed+0x31e/0x350
[  288.577181][ T7732]  warn_alloc+0x278/0x410
[  288.577214][ T7732]  ? __pfx_warn_alloc+0x10/0x10
[  288.577247][ T7732]  ? translate_table+0x174/0x2260
[  288.577269][ T7732]  ? __get_vm_area_node+0x1c8/0x2d0
[  288.577290][ T7732]  ? __get_vm_area_node+0x25c/0x2d0
[  288.577323][ T7732]  __vmalloc_node_range_noprof+0x62f/0x1380
[  288.577391][ T7732]  ? rcu_is_watching+0x15/0xb0
[  288.577411][ T7732]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  288.577435][ T7732]  ? rcu_is_watching+0x15/0xb0
[  288.577461][ T7732]  ? trace_kmalloc+0x1f/0xd0
[  288.577478][ T7732]  ? __kmalloc_node_noprof+0x2ad/0x4d0
[  288.577498][ T7732]  ? __kvmalloc_node_noprof+0x72/0x190
[  288.577525][ T7732]  __kvmalloc_node_noprof+0x142/0x190
[  288.577548][ T7732]  ? translate_table+0x174/0x2260
[  288.577573][ T7732]  translate_table+0x174/0x2260
[  288.577642][ T7732]  ? __pfx_translate_table+0x10/0x10
[  288.577666][ T7732]  ? __might_fault+0xaa/0x120
[  288.577690][ T7732]  ? __pfx_lock_release+0x10/0x10
[  288.577724][ T7732]  ? __virt_addr_valid+0x183/0x530
[  288.577752][ T7732]  ? __might_fault+0xaa/0x120
[  288.577773][ T7732]  ? __might_fault+0xc6/0x120
[  288.577806][ T7732]  ? copy_from_sockptr_offset+0x6b/0xb0
[  288.577834][ T7732]  do_ipt_set_ctl+0xe3d/0x1250
[  288.577867][ T7732]  ? nf_setsockopt+0x240/0x2c0
[  288.577886][ T7732]  ? do_ip_setsockopt+0x1f44/0x3cd0
[  288.577908][ T7732]  ? __pfx_do_ipt_set_ctl+0x10/0x10
[  288.577932][ T7732]  ? rcu_is_watching+0x15/0xb0
[  288.577952][ T7732]  ? trace_contention_end+0x3c/0x120
[  288.578002][ T7732]  ? __mutex_unlock_slowpath+0x227/0x800
[  288.578044][ T7732]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  288.578077][ T7732]  ? __pfx___mutex_lock+0x10/0x10
[  288.578119][ T7732]  nf_setsockopt+0x295/0x2c0
[  288.578143][ T7732]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  288.578171][ T7732]  smc_setsockopt+0x275/0xe50
[  288.578207][ T7732]  ? __pfx_smc_setsockopt+0x10/0x10
[  288.578231][ T7732]  ? aa_sock_opt_perm+0xfd/0x1b0
[  288.578265][ T7732]  ? __pfx_smc_setsockopt+0x10/0x10
[  288.578288][ T7732]  do_sock_setsockopt+0x3af/0x720
[  288.578318][ T7732]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  288.578346][ T7732]  ? __fget_files+0x395/0x410
[  288.578366][ T7732]  ? __fget_files+0x2a/0x410
[  288.578401][ T7732]  __x64_sys_setsockopt+0x1ee/0x280
[  288.578432][ T7732]  do_syscall_64+0xf3/0x230
[  288.578451][ T7732]  ? clear_bhb_loop+0x35/0x90
[  288.578487][ T7732]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  288.578517][ T7732] RIP: 0033:0x7fc703d8cde9
[  288.578538][ T7732] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  288.578552][ T7732] RSP: 002b:00007fc704bfb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  288.578571][ T7732] RAX: ffffffffffffffda RBX: 00007fc703fa5fa0 RCX: 00007fc703d8cde9
[  288.578584][ T7732] RDX: 0000000000000040 RSI: 0004000000000000 RDI: 0000000000000003
[  288.578595][ T7732] RBP: 00007fc703e0e2a0 R08: 00000000000002a0 R09: 0000000000000000
[  288.578606][ T7732] R10: 00004000000003c0 R11: 0000000000000246 R12: 0000000000000000
[  288.578617][ T7732] R13: 0000000000000000 R14: 00007fc703fa5fa0 R15: 00007ffebe60a058
[  288.578655][ T7732]  </TASK>
[  288.578662][ T7732] Mem-Info:
[  288.977162][ T7732] active_anon:16627 inactive_anon:0 isolated_anon:0
[  288.977162][ T7732]  active_file:16921 inactive_file:38409 isolated_file:0
[  288.977162][ T7732]  unevictable:768 dirty:96 writeback:0
[  288.977162][ T7732]  slab_reclaimable:10886 slab_unreclaimable:96736
[  288.977162][ T7732]  mapped:30965 shmem:14057 pagetables:740
[  288.977162][ T7732]  sec_pagetables:0 bounce:0
[  288.977162][ T7732]  kernel_misc_reclaimable:0
[  288.977162][ T7732]  free:1297984 free_pcp:1487 free_cma:0
[  289.026124][ T5937] hsr_slave_0: left promiscuous mode
[  289.044727][ T5937] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  289.074729][ T5937] batman_adv: batadv0: Removing interface: batadv_slave_0
[  289.077238][ T7732] Node 0 active_anon:55808kB inactive_anon:0kB active_file:67684kB inactive_file:153560kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:123860kB dirty:384kB writeback:0kB shmem:44092kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10916kB pagetables:2960kB sec_pagetables:0kB all_unreclaimable? no
[  289.136604][ T7732] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  289.156578][ T5937] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  289.185074][ T5937] batman_adv: batadv0: Removing interface: batadv_slave_1
[  289.215289][ T5937] veth1_macvtap: left promiscuous mode
[  289.226475][ T5937] veth0_macvtap: left promiscuous mode
[  289.234687][ T7732] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  289.263093][ T5937] veth1_vlan: left promiscuous mode
[  289.287177][ T5937] veth0_vlan: left promiscuous mode
[  289.353058][ T7732] lowmem_reserve[]: 0 2490 2491 0 0
[  289.384523][ T7732] Node 0 DMA32 free:1265476kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB active_anon:68760kB inactive_anon:0kB active_file:67684kB inactive_file:152980kB unevictable:1536kB writepending:392kB present:3129332kB managed:2550780kB mlocked:0kB bounce:0kB free_pcp:7468kB local_pcp:1100kB free_cma:0kB
[  289.477212][ T7732] lowmem_reserve[]: 0 0 0 0 0
[  289.482007][ T7732] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:580kB unevictable:0kB writepending:4kB present:1048580kB managed:620kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  289.819618][ T7732] lowmem_reserve[]: 0 0 0 0 0
[  289.902421][ T7732] Node 1 Normal free:3907516kB boost:0kB min:55708kB low:69632kB high:83556kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:104kB local_pcp:0kB free_cma:0kB
[  290.257151][ T7732] lowmem_reserve[]: 0 0 0 0 0
[  290.281559][ T7732] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  290.323903][ T7732] Node 0 DMA32: 8*4kB (ME) 11*8kB (UME) 7*16kB (E) 38*32kB (UE) 160*64kB (UME) 187*128kB (UME) 75*256kB (UME) 28*512kB (UME) 11*1024kB (UM) 5*2048kB (M) 287*4096kB (M) = 1266216kB
[  290.362526][ T7732] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  290.407004][ T7732] Node 1 Normal: 171*4kB (UE) 44*8kB (UME) 43*16kB (UME) 196*32kB (UME) 76*64kB (UME) 35*128kB (UME) 18*256kB (UME) 9*512kB (UME) 2*1024kB (UM) 2*2048kB (UE) 946*4096kB (M) = 3907516kB
[  290.460136][ T7732] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  290.502817][ T7732] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  290.543038][ T7732] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  290.587519][ T7732] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  290.626220][ T7732] 72595 total pagecache pages
[  290.647114][ T7732] 0 pages in swap cache
[  290.664088][ T7732] Free swap  = 124736kB
[  290.691167][ T7732] Total swap = 124996kB
[  290.714606][ T7732] 2097051 pages RAM
[  290.739047][ T7732] 0 pages HighMem/MovableOnly
[  290.759603][ T7732] 427570 pages reserved
[  290.779537][ T7732] 0 pages cma reserved
[  291.802035][ T7753] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore
[  291.847145][ T7753] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  292.868169][ T5937] team0 (unregistering): Port device team_slave_1 removed
[  293.139610][ T5937] team0 (unregistering): Port device team_slave_0 removed
[  296.638123][ T7779] overlayfs: missing 'lowerdir'
[  296.979107][ T7785] block device autoloading is deprecated and will be removed.
[  298.187280][ T5887] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  298.407827][ T7575] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  298.468185][ T7575] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  298.497566][ T5887] usb 7-1: device descriptor read/64, error -71
[  298.501843][ T7575] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  298.552174][ T7575] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  298.747942][ T5887] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  298.917155][ T5887] usb 7-1: device descriptor read/64, error -71
[  299.045926][ T5887] usb usb7-port1: attempt power cycle
[  299.123769][ T7603] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  299.227850][ T7603] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  299.377098][ T7603] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  299.449960][ T5887] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  299.465015][ T7603] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  299.487799][ T5887] usb 7-1: device descriptor read/8, error -71
[  299.940256][ T5887] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  299.970028][ T7575] 8021q: adding VLAN 0 to HW filter on device bond0
[  300.261049][ T5887] usb 7-1: device not accepting address 6, error -71
[  300.291749][ T5887] usb usb7-port1: unable to enumerate USB device
[  300.812006][ T7575] 8021q: adding VLAN 0 to HW filter on device team0
[  300.906140][  T969] bridge0: port 1(bridge_slave_0) entered blocking state
[  300.913426][  T969] bridge0: port 1(bridge_slave_0) entered forwarding state
[  301.037860][ T5940] bridge0: port 2(bridge_slave_1) entered blocking state
[  301.045069][ T5940] bridge0: port 2(bridge_slave_1) entered forwarding state
[  301.194113][ T7603] 8021q: adding VLAN 0 to HW filter on device bond0
[  301.296075][ T7603] 8021q: adding VLAN 0 to HW filter on device team0
[  301.458086][   T62] bridge0: port 1(bridge_slave_0) entered blocking state
[  301.465393][   T62] bridge0: port 1(bridge_slave_0) entered forwarding state
[  301.489458][   T62] bridge0: port 2(bridge_slave_1) entered blocking state
[  301.496700][   T62] bridge0: port 2(bridge_slave_1) entered forwarding state
[  301.718457][ T7603] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  302.756042][ T7575] 8021q: adding VLAN 0 to HW filter on device batadv0
[  303.008658][ T7603] 8021q: adding VLAN 0 to HW filter on device batadv0
[  303.551592][ T7842] loop3: detected capacity change from 0 to 1024
[  303.575663][ T7575] veth0_vlan: entered promiscuous mode
[  303.579870][ T7839] overlayfs: missing 'lowerdir'
[  303.625795][ T7575] veth1_vlan: entered promiscuous mode
[  303.652125][ T7842] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  304.275683][ T7854] netlink: 8 bytes leftover after parsing attributes in process `syz.3.539'.
[  304.630218][ T7575] veth0_macvtap: entered promiscuous mode
[  304.642890][ T7575] veth1_macvtap: entered promiscuous mode
[  304.754856][ T7575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  304.927776][ T7575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  304.957111][ T7575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  304.967665][ T7575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  304.987021][ T7575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  305.007003][ T7575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  305.024372][ T5835] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  305.029006][ T7575] batman_adv: batadv0: Interface activated: batadv_slave_0
[  305.095488][ T7603] veth0_vlan: entered promiscuous mode
[  305.124220][ T7858] 9pnet_fd: Insufficient options for proto=fd
[  305.149389][ T7575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  305.167001][ T7575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  305.176841][ T7575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  305.205253][ T7575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  305.227070][ T7575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  305.257180][ T7575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  305.274037][ T7575] batman_adv: batadv0: Interface activated: batadv_slave_1
[  305.294473][ T7603] veth1_vlan: entered promiscuous mode
[  305.366756][ T7575] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  305.385785][ T7575] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  305.397460][ T7575] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  305.427478][ T7575] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  305.583353][ T7603] veth0_macvtap: entered promiscuous mode
[  305.630713][ T7603] veth1_macvtap: entered promiscuous mode
[  305.706310][ T7863] loop3: detected capacity change from 0 to 4096
[  305.760290][ T7603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  305.781376][ T7603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  305.875597][ T7603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  306.135624][ T7603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  306.146278][ T7603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  306.156877][ T7603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  306.166776][ T7603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  306.177273][ T7603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  306.189592][ T7603] batman_adv: batadv0: Interface activated: batadv_slave_0
[  306.245361][ T7603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  306.267320][ T7603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  306.286961][ T7603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  306.306975][ T7603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  306.316998][ T7603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  306.327707][ T7603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  306.346969][ T7603] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  306.367101][ T7603] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  306.380731][ T7603] batman_adv: batadv0: Interface activated: batadv_slave_1
[  306.411615][ T7603] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  306.429119][ T7603] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  306.449218][ T7603] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  306.475482][ T7603] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  306.534545][ T5937] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  306.548289][ T5937] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  306.694213][  T969] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  306.725848][  T969] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  306.907434][ T5883] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  306.956466][ T5940] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  306.964980][ T5940] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  307.066581][  T969] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  307.077544][ T5883] usb 4-1: Using ep0 maxpacket: 16
[  307.095307][  T969] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  307.125738][ T5883] usb 4-1: config 0 has an invalid interface number: 214 but max is 0
[  307.138736][ T5883] usb 4-1: config 0 has no interface number 0
[  307.155115][ T5883] usb 4-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64
[  307.195302][ T5883] usb 4-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5
[  307.205833][ T5883] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  307.227127][ T5883] usb 4-1: Product: syz
[  307.234582][ T5883] usb 4-1: Manufacturer: syz
[  307.249673][ T5883] usb 4-1: SerialNumber: syz
[  307.300309][ T5883] usb 4-1: config 0 descriptor??
[  307.544480][ T7880] loop8: detected capacity change from 0 to 2048
[  307.644275][ T7880]  loop8: p1 < > p4
[  307.650361][ T7880] loop8: p4 size 8388608 extends beyond EOD, truncated
[  307.968031][ T7885] loop9: detected capacity change from 0 to 128
[  308.017711][ T5883] usbtouchscreen 4-1:0.214: probe with driver usbtouchscreen failed with error -71
[  308.059244][ T5883] usb 4-1: USB disconnect, device number 5
[  308.108559][ T7885] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  308.154361][ T7885] ext4 filesystem being mounted at /0/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  308.209485][ T7883] overlayfs: missing 'lowerdir'
[  308.731719][ T7895] netlink: 48 bytes leftover after parsing attributes in process `syz.8.550'.
[  308.814347][ T7895] netlink: 12 bytes leftover after parsing attributes in process `syz.8.550'.
[  309.151056][ T7603] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  310.139830][ T7904] loop8: detected capacity change from 0 to 4096
[  310.301679][ T7913] loop3: detected capacity change from 0 to 2048
[  310.311980][ T7913] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[  310.430354][ T7915] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  310.483233][ T7913] NILFS (loop3): bad btree root (ino=2): level = 255, flags = 0xff, nchildren = 0
[  310.494002][ T7913] NILFS (loop3): error -5 getting root inode
[  312.357309][ T5922] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  312.379412][ T7932] overlayfs: missing 'workdir'
[  312.569205][ T5922] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  312.599437][ T5922] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  312.641406][ T5922] usb 1-1: New USB device found, idVendor=054c, idProduct=09cc, bcdDevice= 0.00
[  312.725284][ T5922] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  312.775438][ T5922] usb 1-1: config 0 descriptor??
[  313.291313][ T7944] netlink: 48 bytes leftover after parsing attributes in process `syz.3.564'.
[  313.340000][ T7944] netlink: 12 bytes leftover after parsing attributes in process `syz.3.564'.
[  313.443149][ T5922] playstation 0003:054C:09CC.0004: hidraw0: USB HID v0.00 Device [HID 054c:09cc] on usb-dummy_hcd.0-1/input0
[  313.604003][ T5922] playstation 0003:054C:09CC.0004: Invalid reportID received, expected 18 got 0
[  313.644206][ T5922] playstation 0003:054C:09CC.0004: Failed to retrieve DualShock4 pairing info: -22
[  313.668162][ T5922] playstation 0003:054C:09CC.0004: Failed to get MAC address from DualShock4
[  313.700602][ T5922] playstation 0003:054C:09CC.0004: Failed to create dualshock4.
[  313.751540][ T5922] playstation 0003:054C:09CC.0004: probe with driver playstation failed with error -22
[  313.921586][    T8] usb 1-1: USB disconnect, device number 6
[  314.229994][ T7954] loop6: detected capacity change from 0 to 2048
[  314.257241][ T7954] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024)
[  314.287986][ T7954] NILFS (loop6): bad btree root (ino=2): level = 255, flags = 0xff, nchildren = 0
[  314.288008][ T7956] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  314.308352][ T7954] NILFS (loop6): error -5 getting root inode
[  315.299102][ T7965] loop8: detected capacity change from 0 to 2048
[  315.391974][ T7965] UDF-fs: error (device loop8): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  315.521545][ T7969] overlayfs: missing 'workdir'
[  315.647729][ T7971] loop9: detected capacity change from 0 to 164
[  315.947136][ T7971] isofs_fill_super: root inode is not a directory. Corrupted media?
[  316.482588][ T7979] loop9: detected capacity change from 0 to 1024
[  316.853740][   T29] audit: type=1800 audit(1739211505.219:12): pid=7971 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.574" name="bus" dev="loop9" ino=26 res=0 errno=0
[  317.077699][ T7983] netlink: 8 bytes leftover after parsing attributes in process `syz.0.575'.
[  317.609298][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  317.615676][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  317.911721][   T12] hfsplus: b-tree write err: -5, ino 4
[  318.084793][  T969] Bluetooth: (null): Invalid header checksum
[  318.127124][  T969] Bluetooth: (null): Invalid header checksum
[  318.133279][  T969] Bluetooth: (null): Invalid header checksum
[  318.195994][  T969] Bluetooth: (null): Invalid header checksum
[  318.301939][  T969] Bluetooth: (null): Invalid header checksum
[  318.411727][  T969] Bluetooth: (null): Invalid header checksum
[  318.442423][ T7995] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  318.525659][   T12] Bluetooth: (null): Invalid header checksum
[  318.630653][   T11] Bluetooth: (null): Invalid header checksum
[  318.728314][ T7997] loop9: detected capacity change from 0 to 128
[  318.750363][   T62] Bluetooth: (null): Invalid header checksum
[  318.794143][ T7997] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  318.817839][ T7997] ext4 filesystem being mounted at /5/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  319.768168][ T7603] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  320.029881][ T8011] loop3: detected capacity change from 0 to 2048
[  320.046296][ T8011] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[  320.278772][ T8011] NILFS (loop3): bad btree root (ino=2): level = 255, flags = 0xff, nchildren = 0
[  320.288543][ T8011] NILFS (loop3): error -5 getting root inode
[  320.634744][ T8010] loop9: detected capacity change from 0 to 4096
[  321.300040][ T8010] ntfs3(loop9): Mark volume as dirty due to NTFS errors
[  321.327400][ T8010] ntfs3(loop9): Failed to load $Extend (-22).
[  321.333531][ T8010] ntfs3(loop9): Failed to initialize $Extend.
[  321.429275][ T8020] overlayfs: missing 'workdir'
[  321.545492][ T8024] loop3: detected capacity change from 0 to 2048
[  321.619296][ T8024] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  322.070388][ T8027] loop8: detected capacity change from 0 to 1024
[  322.930778][ T8027] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  323.638954][ T8043] netlink: 8 bytes leftover after parsing attributes in process `syz.8.588'.
[  324.589210][ T8047] loop9: detected capacity change from 0 to 128
[  324.739636][ T8047] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  324.791992][ T8047] ext4 filesystem being mounted at /9/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  325.013455][ T7575] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  325.607638][ T5940] Bluetooth: (null): Invalid header checksum
[  325.613787][ T5940] Bluetooth: (null): Invalid header checksum
[  325.816645][ T8055] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  325.983430][ T5940] Bluetooth: (null): Invalid header checksum
[  325.992802][ T5940] Bluetooth: (null): Invalid header checksum
[  326.008608][ T5940] Bluetooth: (null): Invalid header checksum
[  326.023020][ T7603] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  326.269241][ T5940] Bluetooth: (null): Invalid header checksum
[  326.275425][ T5940] Bluetooth: (null): Invalid header checksum
[  326.347096][ T5940] Bluetooth: (null): Invalid header checksum
[  326.833564][ T8064] loop6: detected capacity change from 0 to 2048
[  326.858754][ T8064] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024)
[  326.888555][ T8066] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  326.900490][ T8064] NILFS (loop6): bad btree root (ino=2): level = 255, flags = 0xff, nchildren = 0
[  326.910179][ T8064] NILFS (loop6): error -5 getting root inode
[  327.238469][ T8071] loop8: detected capacity change from 0 to 2048
[  327.967423][ T8071] UDF-fs: error (device loop8): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  330.787706][ T8092] loop8: detected capacity change from 0 to 1024
[  330.808502][ T8095] loop6: detected capacity change from 0 to 128
[  330.888632][ T8095] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  330.959983][ T8095] ext4 filesystem being mounted at /56/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  331.139965][ T8092] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  332.332817][ T8117] netlink: 8 bytes leftover after parsing attributes in process `syz.8.604'.
[  333.337962][ T7575] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  333.518984][ T8122] loop3: detected capacity change from 0 to 2048
[  333.547159][ T8122] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[  333.610415][ T8122] NILFS (loop3): bad btree root (ino=2): level = 255, flags = 0xff, nchildren = 0
[  333.619860][ T8122] NILFS (loop3): error -5 getting root inode
[  333.714589][ T7112] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  338.193689][ T8161] loop8: detected capacity change from 0 to 128
[  338.294255][ T8161] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  338.448371][ T8161] ext4 filesystem being mounted at /18/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  338.636303][ T8168] loop9: detected capacity change from 0 to 2048
[  338.671916][ T8168] NILFS (loop9): broken superblock, retrying with spare superblock (blocksize = 1024)
[  338.722826][ T8170] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  338.737600][ T8168] NILFS (loop9): bad btree root (ino=2): level = 255, flags = 0xff, nchildren = 0
[  338.747395][ T8168] NILFS (loop9): error -5 getting root inode
[  339.478331][ T8159] netlink: 8 bytes leftover after parsing attributes in process `syz.0.622'.
[  339.745619][ T7575] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  339.947148][ T5922] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  340.052100][ T8179] loop9: detected capacity change from 0 to 2048
[  340.100040][ T8179] UDF-fs: warning (device loop9): udf_fill_super: No partition found (2)
[  340.142217][ T5922] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  340.173222][ T5922] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  340.204427][ T5922] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  340.241197][ T5922] usb 7-1: config 0 descriptor??
[  340.302132][ T5922] pwc: Askey VC010 type 2 USB webcam detected.
[  340.891345][ T5922] pwc: recv_control_msg error -32 req 02 val 2b00
[  341.000536][ T5922] pwc: recv_control_msg error -32 req 02 val 2700
[  341.058353][ T5922] pwc: recv_control_msg error -32 req 02 val 2c00
[  341.116759][ T5922] pwc: recv_control_msg error -32 req 04 val 1000
[  341.185610][ T5922] pwc: recv_control_msg error -32 req 04 val 1300
[  341.255946][ T5922] pwc: recv_control_msg error -32 req 04 val 1400
[  341.297605][ T5922] pwc: recv_control_msg error -32 req 02 val 2000
[  341.347821][ T5922] pwc: recv_control_msg error -32 req 02 val 2100
[  341.379943][ T5922] pwc: recv_control_msg error -32 req 04 val 1500
[  341.407159][ T5922] pwc: recv_control_msg error -32 req 02 val 2500
[  341.447761][ T5922] pwc: recv_control_msg error -32 req 02 val 2400
[  341.485191][ T5922] pwc: recv_control_msg error -32 req 02 val 2600
[  341.720727][ T5922] pwc: recv_control_msg error -71 req 02 val 2800
[  341.822225][ T5922] pwc: recv_control_msg error -71 req 04 val 1100
[  341.844442][ T5922] pwc: recv_control_msg error -71 req 04 val 1200
[  341.875579][ T5922] pwc: Registered as video103.
[  341.899265][ T5922] input: PWC snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/input/input14
[  341.955823][ T5922] usb 7-1: USB disconnect, device number 7
[  343.005633][ T8196] loop8: detected capacity change from 0 to 2048
[  343.084793][ T8196] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  343.187224][ T8196] ext4 filesystem being mounted at /21/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  343.648174][ T8211] loop3: detected capacity change from 0 to 1024
[  344.117753][ T8211] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  344.168400][ T8211] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[  345.317062][ T5838] Bluetooth: hci2: command 0x0406 tx timeout
[  345.339299][ T7575] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  345.895541][ T5835] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  346.212744][  T970] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  346.384035][  T970] usb 10-1: Using ep0 maxpacket: 16
[  346.413242][  T970] usb 10-1: config 0 has an invalid interface number: 1 but max is 0
[  346.445719][  T970] usb 10-1: config 0 has no interface number 0
[  346.481453][  T970] usb 10-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  346.724885][  T970] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  346.733868][  T970] usb 10-1: Product: syz
[  346.738200][  T970] usb 10-1: Manufacturer: syz
[  346.743017][  T970] usb 10-1: SerialNumber: syz
[  346.756879][  T970] usb 10-1: config 0 descriptor??
[  346.770191][  T970] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  347.777207][  T970] gspca_spca1528: reg_w err -110
[  347.821896][  T970] spca1528 10-1:0.1: probe with driver spca1528 failed with error -110
[  347.871927][ T8238] netlink: 8 bytes leftover after parsing attributes in process `syz.0.642'.
[  348.344275][  T970] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  348.610831][  T970] usb 7-1: Using ep0 maxpacket: 8
[  348.696281][  T970] usb 7-1: New USB device found, idVendor=1004, idProduct=61aa, bcdDevice=d2.b4
[  348.726395][  T970] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  348.741633][  T970] usb 7-1: Product: syz
[  348.745850][  T970] usb 7-1: Manufacturer: syz
[  348.768889][  T970] usb 7-1: SerialNumber: syz
[  348.792031][  T970] usb 7-1: bad CDC descriptors
[  348.815070][ T5929] usb 10-1: USB disconnect, device number 2
[  348.993239][    T8] usb 7-1: USB disconnect, device number 8
[  349.841114][ T8264] loop8: detected capacity change from 0 to 512
[  349.881979][ T8264] EXT4-fs: Ignoring removed bh option
[  349.926728][ T8264] EXT4-fs (loop8): Test dummy encryption mode enabled
[  350.105990][ T8264] EXT4-fs error (device loop8): ext4_xattr_inode_iget:436: comm syz.8.650: Parent and EA inode have the same ino 15
[  350.129131][ T8269] loop6: detected capacity change from 0 to 128
[  350.167286][ T8264] EXT4-fs (loop8): Remounting filesystem read-only
[  350.173992][ T8264] EXT4-fs (loop8): 1 orphan inode deleted
[  350.306156][ T8273] loop9: detected capacity change from 0 to 1024
[  350.614142][ T8269] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  350.649832][ T8264] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  350.683356][ T8273] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  350.749346][ T8273] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[  351.091876][ T8269] ext4 filesystem being mounted at /68/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  351.134782][ T7575] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  351.175752][ T8277] 9pnet: p9_errstr2errno: server reported unknown error loc_per
[  352.497149][ T5143] Bluetooth: hci4: command tx timeout
[  352.852910][ T7603] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  354.844348][ T7112] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  355.265617][ T8315] netlink: 'syz.6.663': attribute type 1 has an invalid length.
[  355.290204][ T8315] netlink: 56 bytes leftover after parsing attributes in process `syz.6.663'.
[  355.379410][ T8317] loop9: detected capacity change from 0 to 2048
[  355.409480][ T8317] NILFS (loop9): broken superblock, retrying with spare superblock (blocksize = 1024)
[  355.755230][ T8322] NILFS (loop9): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  355.802845][ T8321] loop6: detected capacity change from 0 to 1024
[  355.862655][ T8321] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  355.916187][ T8322] NILFS (loop9): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  355.927863][ T8322] NILFS error (device loop9): nilfs_bmap_propagate: broken bmap (inode number=4)
[  355.970739][ T8322] Remounting filesystem read-only
[  356.002378][ T7603] NILFS (loop9): disposed unprocessed dirty file(s) when stopping log writer
[  356.610627][ T8334] Zero length message leads to an empty skb
[  358.250610][ T8335] netlink: 8 bytes leftover after parsing attributes in process `syz.6.666'.
[  359.880471][ T8346] loop9: detected capacity change from 0 to 128
[  359.986532][ T5836] Bluetooth: hci0: command 0x0406 tx timeout
[  360.076692][ T8346] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  360.191829][ T8346] ext4 filesystem being mounted at /25/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  362.264097][ T5836] Bluetooth: hci0: unexpected event for opcode 0x1005
[  362.321712][ T8368] loop8: detected capacity change from 0 to 1024
[  362.384237][ T8368] EXT4-fs: Ignoring removed oldalloc option
[  362.407240][ T8368] EXT4-fs: Ignoring removed bh option
[  362.427578][ T5922] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  362.485464][ T8368] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  362.519122][ T7603] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  362.597007][ T5922] usb 4-1: Using ep0 maxpacket: 16
[  362.618697][ T5922] usb 4-1: config 0 has an invalid interface number: 214 but max is 0
[  362.637006][ T5922] usb 4-1: config 0 has no interface number 0
[  362.643304][ T5922] usb 4-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64
[  362.693399][ T5922] usb 4-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5
[  362.707281][ T5922] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  362.725329][ T7575] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  362.738882][ T5922] usb 4-1: Product: syz
[  362.743075][ T5922] usb 4-1: Manufacturer: syz
[  362.749520][ T8376] netlink: 4 bytes leftover after parsing attributes in process `syz.9.680'.
[  362.758128][ T5922] usb 4-1: SerialNumber: syz
[  362.800440][ T5922] usb 4-1: config 0 descriptor??
[  362.902585][ T7112] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  363.032824][ T8376] hsr_slave_1 (unregistering): left promiscuous mode
[  363.044893][ T5922] usbtouchscreen 4-1:0.214: Failed to read FW rev: -32
[  363.107345][ T5922] usbtouchscreen 4-1:0.214: probe with driver usbtouchscreen failed with error -32
[  365.379955][ T8398] loop9: detected capacity change from 0 to 1024
[  365.394236][ T5836] Bluetooth: hci4: Ignoring HCI_Connection_Complete for existing connection
[  366.291987][ T8398] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  366.319636][ T8398] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[  367.074220][ T5887] usb 4-1: USB disconnect, device number 6
[  367.246396][ T7603] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  368.990321][ T8418] loop8: detected capacity change from 0 to 128
[  369.033786][ T8418] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  369.084968][ T8418] ext4 filesystem being mounted at /31/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  370.100686][ T7575] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  370.558009][ T8425] loop8: detected capacity change from 0 to 1024
[  370.569260][ T8414] loop9: detected capacity change from 0 to 32768
[  370.576656][ T8414] btrfs: Unknown parameter 'fragment'
[  370.642244][ T8425] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  371.356224][ T8434] netlink: 8 bytes leftover after parsing attributes in process `syz.8.693'.
[  372.530315][ T8438] netlink: 4 bytes leftover after parsing attributes in process `syz.3.695'.
[  372.571711][ T7575] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  374.296413][ T8449] loop6: detected capacity change from 0 to 1024
[  374.669442][ T5887] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[  374.793208][ T8449] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  374.846028][ T8449] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[  376.457130][ T5838] Bluetooth: hci2: command 0x0406 tx timeout
[  376.511473][ T5887] usb 10-1: Using ep0 maxpacket: 16
[  376.518881][ T5887] usb 10-1: config 0 has an invalid interface number: 214 but max is 0
[  376.547106][ T5887] usb 10-1: config 0 has no interface number 0
[  376.548486][ T7112] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  376.553324][ T5887] usb 10-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64
[  376.642220][ T5887] usb 10-1: string descriptor 0 read error: -71
[  376.648718][ T5887] usb 10-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5
[  376.658075][ T5887] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  376.672395][ T5887] usb 10-1: config 0 descriptor??
[  376.678331][ T5887] usb 10-1: can't set config #0, error -71
[  376.719763][ T5887] usb 10-1: USB disconnect, device number 3
[  376.822187][ T8472] loop9: detected capacity change from 0 to 128
[  376.835620][ T8472] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  376.867140][ T5883] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  376.887712][ T8472] ext4 filesystem being mounted at /31/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  377.050592][ T5883] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  377.065596][ T5883] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  377.085104][ T5883] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  377.118574][ T5883] usb 9-1: config 0 descriptor??
[  377.153654][ T5883] pwc: Askey VC010 type 2 USB webcam detected.
[  378.006032][ T5883] pwc: recv_control_msg error -32 req 02 val 2b00
[  378.021647][ T5883] pwc: recv_control_msg error -32 req 02 val 2700
[  378.035354][ T5883] pwc: recv_control_msg error -32 req 02 val 2c00
[  378.036443][ T7603] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  378.080839][ T5883] pwc: recv_control_msg error -32 req 04 val 1000
[  378.116662][ T5883] pwc: recv_control_msg error -32 req 04 val 1300
[  378.148551][ T5883] pwc: recv_control_msg error -32 req 04 val 1400
[  378.169816][ T5883] pwc: recv_control_msg error -32 req 02 val 2000
[  378.192654][ T5883] pwc: recv_control_msg error -32 req 02 val 2100
[  378.204103][ T5883] pwc: recv_control_msg error -32 req 04 val 1500
[  378.225353][ T5883] pwc: recv_control_msg error -32 req 02 val 2500
[  378.240195][ T5883] pwc: recv_control_msg error -32 req 02 val 2400
[  378.253263][ T5883] pwc: recv_control_msg error -32 req 02 val 2600
[  378.473195][ T5883] pwc: recv_control_msg error -71 req 02 val 2800
[  378.493948][ T5883] pwc: recv_control_msg error -71 req 04 val 1100
[  378.519339][ T5883] pwc: recv_control_msg error -71 req 04 val 1200
[  378.547847][ T5883] pwc: Registered as video103.
[  378.555894][ T5883] input: PWC snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/input/input16
[  378.628305][ T5883] usb 9-1: USB disconnect, device number 2
[  379.027165][ T1295] ieee802154 phy0 wpan0: encryption failed: -22
[  379.057225][ T1295] ieee802154 phy1 wpan1: encryption failed: -22
[  379.837596][ T8488] Oops: general protection fault, probably for non-canonical address 0xdffffc000000002b: 0000 [#1] PREEMPT SMP KASAN PTI
[  379.850391][ T8488] KASAN: null-ptr-deref in range [0x0000000000000158-0x000000000000015f]
[  379.858815][ T8488] CPU: 1 UID: 0 PID: 8488 Comm: syz.6.707 Not tainted 6.14.0-rc2-next-20250210-syzkaller #0
[  379.869128][ T8488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024
[  379.879187][ T8488] RIP: 0010:qca_close+0x72/0x2e0
[  379.884119][ T8488] Code: e4 ca f4 f8 48 89 2c 24 42 80 7c 2d 00 00 74 08 4c 89 f7 e8 10 c6 5b f9 4d 8b 26 49 8d bc 24 5a 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 28 84 c0 4c 89 eb 0f 85 de 01 00 00 45 0f b6 ac 24 5a
[  379.903723][ T8488] RSP: 0018:ffffc9000cd37b90 EFLAGS: 00010206
[  379.909782][ T8488] RAX: 000000000000002b RBX: ffff88803243a800 RCX: ffff888066e65a00
[  379.917747][ T8488] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000015a
[  379.925721][ T8488] RBP: 1ffff11006487537 R08: ffffffff81880e93 R09: 1ffffffff2863137
[  379.933769][ T8488] R10: dffffc0000000000 R11: ffffffff88cabe90 R12: 0000000000000000
[  379.941734][ T8488] R13: dffffc0000000000 R14: ffff88803243a9b8 R15: 0000000000000000
[  379.949688][ T8488] FS:  0000555572d04500(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
[  379.958601][ T8488] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  379.965167][ T8488] CR2: 00007f2386cf97ba CR3: 000000001cbe8000 CR4: 00000000003526f0
[  379.973140][ T8488] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  379.981104][ T8488] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  379.989054][ T8488] Call Trace:
[  379.992333][ T8488]  <TASK>
[  379.995248][ T8488]  ? __die_body+0x5f/0xb0
[  379.999564][ T8488]  ? die_addr+0xb0/0xe0
[  380.003701][ T8488]  ? exc_general_protection+0x3dd/0x5d0
[  380.009240][ T8488]  ? asm_exc_general_protection+0x26/0x30
[  380.014940][ T8488]  ? __pfx_qca_close+0x10/0x10
[  380.019684][ T8488]  ? enable_work+0x2e3/0x360
[  380.024254][ T8488]  ? qca_close+0x72/0x2e0
[  380.028565][ T8488]  hci_uart_tty_close+0x205/0x290
[  380.033574][ T8488]  tty_ldisc_kill+0xa3/0x1a0
[  380.038155][ T8488]  tty_ldisc_release+0x1a1/0x200
[  380.043076][ T8488]  tty_release_struct+0x2b/0xe0
[  380.047905][ T8488]  tty_release+0xd06/0x12c0
[  380.052400][ T8488]  ? __pfx_tty_release+0x10/0x10
[  380.057317][ T8488]  __fput+0x3e9/0x9f0
[  380.061292][ T8488]  task_work_run+0x24f/0x310
[  380.065879][ T8488]  ? _raw_spin_unlock+0x28/0x50
[  380.070720][ T8488]  ? __pfx_task_work_run+0x10/0x10
[  380.075836][ T8488]  ? syscall_exit_to_user_mode+0xa3/0x340
[  380.081546][ T8488]  syscall_exit_to_user_mode+0x13f/0x340
[  380.087525][ T8488]  do_syscall_64+0x100/0x230
[  380.092104][ T8488]  ? clear_bhb_loop+0x35/0x90
[  380.096764][ T8488]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  380.102641][ T8488] RIP: 0033:0x7f6b9838cde9
[  380.107035][ T8488] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  380.126624][ T8488] RSP: 002b:00007ffc76d06118 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  380.135020][ T8488] RAX: 0000000000000000 RBX: 00007f6b985a7ba0 RCX: 00007f6b9838cde9
[  380.142981][ T8488] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  380.150937][ T8488] RBP: 00007f6b985a7ba0 R08: 0000000000000230 R09: 0000001b76d0640f
[  380.158906][ T8488] R10: 00007f6b985a7ac0 R11: 0000000000000246 R12: 000000000005cb0b
[  380.166870][ T8488] R13: 00007f6b985a6240 R14: ffffffffffffffff R15: 00007ffc76d06230
[  380.174830][ T8488]  </TASK>
[  380.177832][ T8488] Modules linked in:
[  380.182490][ T8488] ---[ end trace 0000000000000000 ]---
[  380.187980][ T8488] RIP: 0010:qca_close+0x72/0x2e0
[  380.192910][ T8488] Code: e4 ca f4 f8 48 89 2c 24 42 80 7c 2d 00 00 74 08 4c 89 f7 e8 10 c6 5b f9 4d 8b 26 49 8d bc 24 5a 01 00 00 48 89 f8 48 c1 e8 03 <42> 0f b6 04 28 84 c0 4c 89 eb 0f 85 de 01 00 00 45 0f b6 ac 24 5a
[  380.212526][ T8488] RSP: 0018:ffffc9000cd37b90 EFLAGS: 00010206
[  380.218619][ T8488] RAX: 000000000000002b RBX: ffff88803243a800 RCX: ffff888066e65a00
[  380.226576][ T8488] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000015a
[  380.234558][ T8488] RBP: 1ffff11006487537 R08: ffffffff81880e93 R09: 1ffffffff2863137
[  380.242538][ T8488] R10: dffffc0000000000 R11: ffffffff88cabe90 R12: 0000000000000000
[  380.250513][ T8488] R13: dffffc0000000000 R14: ffff88803243a9b8 R15: 0000000000000000
[  380.258476][ T8488] FS:  0000555572d04500(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000
[  380.267717][ T8488] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  380.274288][ T8488] CR2: 00007f2386cf97ba CR3: 000000001cbe8000 CR4: 00000000003526f0
[  380.282264][ T8488] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  380.290240][ T8488] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  380.298312][ T8488] Kernel panic - not syncing: Fatal exception
[  380.304626][ T8488] Kernel Offset: disabled
[  380.308941][ T8488] Rebooting in 86400 seconds..