last executing test programs:

15.793866155s ago: executing program 1 (id=361):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f00000000c0)=0x7b, 0x4)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10)
sendto$inet(r0, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0)

13.401177968s ago: executing program 1 (id=365):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, 0x0, 0x0)

13.187569402s ago: executing program 3 (id=366):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$FOU_CMD_GET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x40, r2, 0x19, 0x0, 0x0, {}, [@FOU_ATTR_IFINDEX={0x8}, @FOU_ATTR_PEER_PORT={0x6}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x40}}, 0x0)
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, r2, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e23}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e22}, @FOU_ATTR_PEER_V6={0x14, 0x9, @mcast2}, @FOU_ATTR_IPPROTO={0x5, 0x3, 0x32}, @FOU_ATTR_PEER_V6={0x14, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8100}, 0x4801)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r3, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0x20000000)

13.126565192s ago: executing program 2 (id=367):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_to_hsr\x00', <r2=>0x0})
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
socket$inet6_sctp(0xa, 0x1, 0x84)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r3}, 0x10)
sendto$llc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
truncate(&(0x7f0000000140)='./file2\x00', 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r2}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0)

12.473170168s ago: executing program 0 (id=369):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f00000000c0)=0x7b, 0x4)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10)
recvmsg(r0, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x437aba2}], 0x1, 0x0, 0x46, 0x407006}, 0x104)

12.470051276s ago: executing program 1 (id=370):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000280)={[{@jqfmt_vfsv1}, {}, {@alloc_mode_def}, {@two_active_logs}, {@inline_xattr}, {@noflush_merge}, {@noextent_cache}, {@nouser_xattr}, {@checkpoint_diasble}, {@user_xattr}, {@fsync_mode_strict}, {@age_extent_cache}, {@discard}, {@memory_low}]}, 0xfd, 0x5505, &(0x7f0000002480)="$eJzs3E1rY9UbAPAn7XTe//Mv4sLdXBiEFiZh0nlBd6PO4At2KKMuXGmapCEzSW5p0rR25cKluPCbiIIrl34GF67diQvFnaDknlud+gJC08ZOfz+4ee45OXnuc8Iw8NxbEsCptZj9/GMlrsSFiJiPiMsRxXmlPAp3U3guIq5GxNwTR6Wc/33ibERcjIgrk+QpZ6V869Pr42u3f3jjp6++OXfm0mdffju7XQOz9nxE9DfT+U4/xbyT4qNyvjHuFrF/a1zG9Eb/cTnOU9xprxcZdhr76xpFvNlJ6/PN7eEkbvQazUnsdDeK+c1BuuBw3NnPU3zgUWOrGLfa60XsDvMidvZSXbt76f+2veEo5WmV+T4o0sdotB/TfHu3nfaz+biIzcGonE9581Z7dxLHZSwvF8281yrqWD/MN/3f9mZ3sL2bjdtbw24+yG7X6i/U6neq9a281R61b1Ub/dadW9lSpzdZVh21G/27nTzv9Nq1Zt5fzpY6zWa1Xs+W7rXXu41BVq/XbtZuVG8vl2fXs1cfvJP1WtnSJL7cHWyPur1htpFvZekTy9lK7eaLy9m1evbW6lq29vD+/dW1t9+79+6Dl1Zff6Vc9JeysqWVGysr1fqN6kp9+RTt/6Oy6CnuHw6lMusCAE4e/T8wC0fX/289jDj6/j/0/1Nxovrf097/H8H+4VD0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp9Z3C5+/VpwspvGlcv5/5dQz5bgSEXMR8evfmI+zB3LOl3kW/mH9wp9q+LoSRYbJNc6Vx8WIuFsev/z/qL8FAAAAeHp98eHVT1K3nl4WZ10QxyndtJm7/P6U8lUiYmHx+yllm5u8PDulZMW/7zOxO6VsxQ2s81NKlm65nZlWtn9l/kA4/0SopDB3rOUAAADH4mAncLxdCAAAAMfp41kXwGxUYv9R5v6z4OIv7/94IHjhwAgAAAA4gSqzLgAAAAA4ckX/7/f/AAAA4OmWfv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfmPnfm4TB6I4AD8bvLD/tGi1921lb1DGlrDHPUYUkCYoIAfSQhqgBnJLCRFEeBwCEYdIHttK9H2SMxnL/HiD4DAz0gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF26r9aL26vf121zdvt28owGAAAAuGRbrRf1P7PU/9rc/97c+tn0i4goI+LS3H0Un84yR01O9fL8zenz1asa7iLqhMN7TJrrS0T8aa7HH11/CgAAAPBxbZareZqtpz+zoQuiT2nRpvz2N1NeERHV7CFTWnnI+5UprP5+j+N/prR6AWuaKSwtuY1zpb1J/XM/rtpNT5oiNeXFlx2LzDZ2AACgR6Ozpt9ZCAAAAH36N3QBDKOI563M41bgJDXN9t7nsx4AAADwDhVDFwAAAAB0rp7/93T+3975fwAAADCMdP4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXdpW68VmuZq3zdnt28kzGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhif95RIATCIAz2ru9M5v6HlQZNTU2qQPj4G4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIv9eUmBEAiCKJgz/nfS9z+sJOgZRIiAhkcVtWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIud+3mNo4oDAP5mZmdrq+IaZQ8RUfCgF7vd1tbexIMSPPgnCCHd1titP9ocbCliLt4k515EjyKCEm/9H3JOIJd4y2EPETwrMzuTnfwA118zm+TzgTfvu8Mw7/tmIeQ77yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACURm9P4iQ7dMZxXJzb3Hu4lPVbh/rM47Xt+axlcVRn0ifDi9UPUbe5RAAAADg7krK+DyHspOsLWR938vo/La/Jav5vnx7HZT1/uO4v+7L2z9ovP+8+vz9QZzxOdtOby8PBpaOptP6/Wc62Z/7yilb+5PN3L0n+hcTvrT43SvPnGX29sfFOOw/P1ZEtAPBPXCz7Iih/H8r6fpOJAXBmtCqFd1n/J51mcwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACow2g1PFnGUQhhvjWJM1t7D5eO6x+vbc+X7dqjR2vhy8k9s1ukIYSby8PBpVpnM9vu3X9we3E4HNytP3gphNDU6G8V07/9wRQXh9DI8xH8R0FcfNmzks/JCBr8oQQAwKmUFi2r63fS9YXsXDQXwh/fHaz/X63EYcr6f/fDa5vVsar1f7+2Gc6+3sqdT3v37j94ffnO4q3BrcHHb1zuv9m/cv3q1eu9/F1JzxsTAAAA/p120ar1fzx3dP3/QiUOU9b/n33T/6I6VqL+P9Zk0a/pTAAAAM62Z1/+/bfomPNRux0+X1xZudsfH/c/Xx4fG0j1bztXtGr9n8w1nRUAAABQh9FqdGD9/0YlDlOu/z/1/Qs/Vu+ZhBDOF+v/F5c+Gd6obzozrY4/J256jgAAADTrfNGq6/9pvv8/3t/yEIcQXntlHBf/BnCq+j9596sfqmNV9/9fqW+KMynujp9H3ndDaHWbzggAAIDT7ImiZcX+r+n6wkc/XXi/bf8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQN3+DAAA//962D6S")
mkdir(&(0x7f0000000000)='./file0\x00', 0x185)

12.039146304s ago: executing program 3 (id=371):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)

11.278057195s ago: executing program 2 (id=372):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', <r3=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={@private2, 0x0, r3})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r4)
socket$inet_sctp(0x2, 0x1, 0x84)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
connect$inet6(r5, &(0x7f0000000300)={0xa, 0x0, 0x0, @private1}, 0x1c)

11.109379463s ago: executing program 0 (id=373):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000940)='htcp\x00', 0x5)
sendmmsg$inet(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000002c0)="316f825a3d29f96a2093a917017b4cd300000000bee70035ed313e19d6dd1fb41a20baf7f7030067fd40cdd4b16742e94b62f4eb1c5d9faab7f3028100ae8180db94b9de7456ae62b0e6fe7766a0842912179154a96fa88e161d4adf77a486e10d1d1d0b90c8997e6917226fa4bb5d77e857", 0x72}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)="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", 0x168}, {&(0x7f00000003c0)="37842d5edb6e752a243befa54cd1056206f046402c6ca1c5bbc12b80de0a0fa490942bda9690a1873dd474d7863f4d25", 0x30}, {&(0x7f0000000180)="30da2a8d8ed3c1f829b87506a1629f7ac7275e4b6ed4cdda90edace4c9c9323c9b2e956adc30b2d631f7ff4fc672e132165bb20ba21657", 0x37}, {&(0x7f0000000c40)="4e00b67bf43bc38a2724cc46e6d0391548fa278f6752bcc4abaa6563dae76431bcb953b63a56313f57959e8aeb1548f59bcda6bd7f6a198509894ef5587dfbae6fd59993f5b79f0b06640a2af615399670baeda3acda097659b8abe9ebdf20a16511f72439be6a1ea9cd9b3e01400000000000009e9e2db88aa196e09bb4f898718cc1376c26d9ad3747f94f2078499aacb8e53d479728f01e", 0x99}, {&(0x7f0000000700)="a64a222530eeaa0395ab5bdbdbe97111884813a20f30206cb8a57a90a00f7d3762815262efd2fabefe2fb86e92", 0x2d}], 0x5}}], 0x2, 0x80c0)

10.584912853s ago: executing program 3 (id=375):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0xa, &(0x7f00000000c0)=0x7b, 0x4)
bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10)
sendto$inet(r0, &(0x7f0000000700)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff959bcecc7a95425a3a07e758044ab4ea6f7c555d88fecf90b037511bf746bec66ba", 0x994b6e03113064ae, 0x0, 0x0, 0x0)
recvmsg(r0, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x437aba2}], 0x1, 0x0, 0x46, 0x407006}, 0x104)

10.402388613s ago: executing program 1 (id=377):
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r0, 0x2000012, 0x0, 0x0, 0x0, 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

9.926368952s ago: executing program 0 (id=378):
rseq(&(0x7f0000000400), 0x20, 0x0, 0x0)
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000280)={[{@acl}, {@heartbeat_none}, {@nouser_xattr}, {@coherency_full}, {@data_writeback}, {@localalloc={'localalloc', 0x3d, 0x1}}, {@acl}, {@noacl}, {@localalloc}]}, 0x1, 0x442d, &(0x7f0000004480)="$eJzs3c9PHGUfAPBnBvoW+rZ9oW8PfZM3cRObaNQQ6EmliZTSUmixptrGeNkusG3RhW1gMR56wFsTTyYejIdGE2+cGg5e65/gxWM9N9GDFxOTRszuzgIz7IaVsGDr53NgmOc3fGeefeYw+8SJyp25pdzcUq6wkCvP3Fo6k/u4XFqeL4Z4nzTt/9D+9U97OnGdHPS190929fzFd2+cCeH72R+frK+vr4eq7tDU0Jbff/v13szWY0OcqVNtt3lre+WDEMLJbeOq6gohvP9dCFEI4VySNpoce0MIx0I978a9z27m9mg0Dx8Xz+afTt1fGz49ufpgrfXfHoXwVel/r92e//nFruGfXtmj7gEAAAAAAAAAAAAAAAAAeMaNX7t6/Z3BofAoCt2r0fb3dceTY6v3Y9f3zAsh9HX+7wUAAAAAAAAAAAAAAAAAAIC/o833/3PRiSbv/48lx5EW9dff6vwY6ZyJt6+OXRgcSvZ/j7blv54k/XKuK/Q32fc9u//7uUz95vu/b+9ntxrja/TbF6J4IHUexwMDIXyTbPx+KjoSl8pLlVdvlZcXZvdsGM+sdPzru/enopNs6N9u/Ecz7Xd+////bruaquc39+4Se66l49/Vsty3n0Ztxf98pt5+xJ/dS8e/u5bWu7XASH0CqMb/8+6d4z+Wab9T8T8eQshF1bHmUjNAdQ1TTW+1XiEtHf9DtbTU1Jn8I1vd/79n4n8h0/5Bzf8r2Q8imkrH/1+1tJ5Uic37vz/e+f6/mGn/IOJfHf+Kz/+2pON/uJ7YnSpS+0+2O/+PZ9rvVPyvx8k4j0epK2A1qqe3+r460tLx79mWv/n8F7e1/ruUqb9fz3+NfhvPf43p/+Wo/vxHc+n497Ys1+79P5Gp1+n5f6S2/mO30vE/UktLr53rX8rZbvwnM+13Kv61VUlPI/6b88kfh+vpX1v/tSUd/3/XE+OtJVZqP2vrv2jn9f/lTPsHsf6rjn8l7myvz4t0/I+2LFeN/w9tfP5fydTrfPxDGLTW37V0/I+1LFe7/3t2jv9Upl6n4/9SJxsHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeAaMJse+EMUDqfM4HhgI4XxyfiociaYLs/npUnnmo6UQxpL0XDgR3S6Vpwul/NxCebaYL5RK5ZkQLiT5J0NPtFQqV/LzhbsXN9rqje4UC4uV6WKhEkIYT9L/H4412pqeq8wX7oYQLm3k/ScuL969U1jIz84tvjk4ODgYJjbG0B8VP6kUFyr13uu5IUxu1O2Ltgyuln15YyxHow/Ly4sLhVIt/cqWOqXyTKG0pc5UkvdF6I8qi8sLM4VKMV8q3270d5BGkuPYxLX3rl0Z2pZ/M6ofR/d3WAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8RY+G3/gyhNBdP4tDCCONX6Jm5R8+Lp7NP526vzZ8enL1wdqTVuUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgT3bgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwS8coDQRRGIDfjIXaeQyrZbezXVFEC1cET6DH8DB6FC/hHVKkSJsiBJJZCJtd2Capvq95MD8z78E8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYJ6n9+7jrW4iUlxtLiP+vv4Xh/lLqT/34/cvzjAjp/P82j081k3593SU35WjZZt36Xr1/Rkjtfc72JPhPu31fa4n55rat6n5+r43kXIVEW3Jb1POVTXvLQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAtO3AgAAAAAADk/9oIVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVdiBYwEAAAAAYf7WUfRtAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPwKAAD//+UFHyA=")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x40942, 0x0)
syncfs(r0)

9.877641938s ago: executing program 4 (id=379):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', <r1=>0x0})
bind$packet(r0, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14)
r2 = syz_io_uring_setup(0x10b, &(0x7f00000003c0)={0x0, 0x5885}, &(0x7f0000000340)=<r3=>0x0, &(0x7f0000000000)=<r4=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0})
io_uring_enter(r2, 0x1512, 0x2000, 0x0, 0x0, 0x0)

8.870131812s ago: executing program 4 (id=380):
socket$nl_netfilter(0x10, 0x3, 0xc)
mkdir(0x0, 0x0)
syz_emit_vhci(0x0, 0xd)
ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0xc0182101, 0x20000000)
syz_emit_vhci(0x0, 0x0)
openat$audio(0xffffffffffffff9c, 0x0, 0x109842, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10)
preadv(0xffffffffffffffff, 0x0, 0x0, 0x111, 0x0)
setsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000900)={0x0, 0x0, 0x2, 0x7, 0x2000, 0x2}, 0x14)
listen(r1, 0x1ff)
r2 = socket$inet_sctp(0x2, 0x1, 0x84)
sendto$inet(r2, &(0x7f0000000500)="ab", 0x1fff8, 0x40, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10)

8.603253384s ago: executing program 2 (id=381):
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth1_to_bridge\x00', <r1=>0x0})
ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000140)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, @private2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8a0202})
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000540)={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r1})
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000540)={@remote, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, r1})

7.688767708s ago: executing program 2 (id=382):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
r3 = socket$can_j1939(0x1d, 0x2, 0x7)
getsockopt$SO_J1939_ERRQUEUE(r3, 0x6b, 0x4, 0x0, 0x0)
r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000340), 0x8)
recvfrom$unix(r4, 0x0, 0x0, 0x122, &(0x7f0000000480)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r5 = socket$inet(0x2, 0x4000000000000001, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
r6 = io_uring_setup(0x37de, &(0x7f0000000500)={0x0, 0x9fac, 0x1000, 0x0, 0x36e, 0x0, r5})
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r6, 0x7, &(0x7f0000000580), 0x1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)

2.584986541s ago: executing program 1 (id=383):
r0 = socket$inet6(0xa, 0x806, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c)
listen(r0, 0x3)
r1 = socket$inet_dccp(0x2, 0x6, 0x0)
r2 = accept4(r0, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f0000004680)=[{{0x0, 0x0, 0x0}, 0x7}], 0xfb, 0xa6c4bff032b9d811, 0x0)
close(r2)

2.505958371s ago: executing program 2 (id=384):
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$pppoe(0x18, 0x1, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0)
connect$pppoe(r0, 0x0, 0x0)
sendmmsg(r0, 0x0, 0x0, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r1)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r2, 0x0)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r4 = accept(r1, 0x0, 0x0)
sendmsg$AUDIT_USER_AVC(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)=ANY=[], 0x454}}, 0x0)

1.969766222s ago: executing program 4 (id=385):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0)

1.756156297s ago: executing program 3 (id=386):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x2}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, @void, @value}, 0x94)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b18, &(0x7f0000000000)={'wlan1\x00'})

1.376640337s ago: executing program 0 (id=387):
mkdir(&(0x7f0000000000)='./file0\x00', 0x185)

1.325265699s ago: executing program 3 (id=388):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000940)='htcp\x00', 0x5)
sendmmsg$inet(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000002c0)="316f825a3d29f96a2093a917017b4cd300000000bee70035ed313e19d6dd1fb41a20baf7f7030067fd40cdd4b16742e94b62f4eb1c5d9faab7f3028100ae8180db94b9de7456ae62b0e6fe7766a0842912179154a96fa88e161d4adf77a486e10d1d1d0b90c8997e6917226fa4bb5d77e857", 0x72}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)="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", 0x168}, {&(0x7f00000003c0)="37842d5edb6e752a243befa54cd1056206f046402c6ca1c5bbc12b80de0a0fa490942bda9690a1873dd474d7863f4d25", 0x30}, {&(0x7f0000000180)="30da2a8d8ed3c1f829b87506a1629f7ac7275e4b6ed4cdda90edace4c9c9323c9b2e956adc30b2d631f7ff4fc672e132165bb20ba21657", 0x37}, {&(0x7f0000000c40)="4e00b67bf43bc38a2724cc46e6d0391548fa278f6752bcc4abaa6563dae76431bcb953b63a56313f57959e8aeb1548f59bcda6bd7f6a198509894ef5587dfbae6fd59993f5b79f0b06640a2af615399670baeda3acda097659b8abe9ebdf20a16511f72439be6a1ea9cd9b3e01400000000000009e9e2db88aa196e09bb4f898718cc1376c26d9ad3747f94f2078499aacb8e53d479728f01e", 0x99}, {&(0x7f0000000700)="a64a222530eeaa0395ab5bdbdbe97111884813a20f30206cb8a57a90a00f7d3762815262efd2fabefe2fb86e92", 0x2d}], 0x5}}], 0x2, 0x80c0)

1.26006904s ago: executing program 4 (id=389):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x20000840, 0x0, 0x0)

1.258280701s ago: executing program 1 (id=390):
socket$nl_netfilter(0x10, 0x3, 0xc)
mkdir(0x0, 0x0)
syz_emit_vhci(0x0, 0xd)
ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0xc0182101, 0x20000000)
syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_pkt_type_change={{0x1d, 0x5}, {0x4, 0xc9, 0x9e}}}, 0x8)
socket$kcm(0x10, 0x2, 0x0)
r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0)
write$dsp(r0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
syz_emit_vhci(0x0, 0x0)
r2 = socket$inet_sctp(0x2, 0x5, 0x84)
bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10)
preadv(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}], 0x1, 0x111, 0x0)
setsockopt$inet_sctp_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000900)={0x0, 0x0, 0x2, 0x7, 0x2000, 0x2}, 0x14)
listen(r2, 0x1ff)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
sendto$inet(r3, &(0x7f0000000500)="ab", 0x1, 0x40, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10)

1.093526449s ago: executing program 2 (id=391):
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', <r3=>0x0})
ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={@private2, 0x0, r3})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r4)
socket$inet_sctp(0x2, 0x1, 0x84)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
connect$inet6(r5, &(0x7f0000000300)={0xa, 0x0, 0x0, @private1}, 0x1c)

979.618254ms ago: executing program 0 (id=392):
bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000eeff00000000000000000000711205000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x6, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, @cgroup_sock_addr=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)

644.856573ms ago: executing program 4 (id=393):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
bind$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x20)
syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[], 0x0)
recvfrom$l2tp6(r0, 0x0, 0x0, 0x162, 0x0, 0x0)

144.429039ms ago: executing program 4 (id=394):
r0 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$TIPC_NL_BEARER_ADD(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d00)={0x14, r0, 0x4c1dad3e3d6a7499, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20000880}, 0x20000000)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe)
r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000340)={r1, r1, 0x8, 0x0, 0x0, 0x2, 0x11, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz0\x00'})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0)

107.315558ms ago: executing program 3 (id=395):
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'hsr0\x00', <r1=>0x0})
sendto$packet(r0, 0x0, 0x0, 0x1, &(0x7f0000000540)={0xc9, 0x8100, r1, 0x1, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, 0x14)

0s ago: executing program 0 (id=396):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b", 0x4, 0x840, 0x0, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000500)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x11000, 0x0, 0x0}, &(0x7f0000000000)=0x40)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.0.117' (ED25519) to the list of known hosts.
[  172.180697][ T5772] cgroup: Unknown subsys name 'net'
[  172.335524][ T5772] cgroup: Unknown subsys name 'cpuset'
[  172.349084][ T5772] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[  217.743100][ T5772] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[  219.081154][ T1283] ieee802154 phy0 wpan0: encryption failed: -22
[  219.088328][ T1283] ieee802154 phy1 wpan1: encryption failed: -22
[  221.687298][ T5791] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  221.704948][ T5794] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  221.715435][ T5794] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  221.723699][ T5794] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  221.732458][ T5796] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  221.741745][ T5796] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  221.754328][ T5798] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  221.762338][ T5798] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  221.773084][ T5798] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  221.793238][ T5798] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  221.801482][ T5798] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  221.808283][ T5801] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  221.812182][ T5798] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  221.817598][ T5801] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  221.831814][ T5798] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3
[  221.831937][ T5801] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  221.849812][ T5801] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  221.860022][ T5801] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  221.861306][ T5794] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  221.875960][ T5801] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  221.894591][ T5802] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  221.907454][ T5791] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  221.907795][ T5801] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  221.917993][ T5791] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  221.931954][ T5801] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  221.935620][ T5791] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  221.960605][ T5791] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  221.986816][ T5791] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  222.028627][ T5796] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  222.038251][ T5796] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  222.961531][ T5800] chnl_net:caif_netlink_parms(): no params data found
[  223.520775][ T5789] chnl_net:caif_netlink_parms(): no params data found
[  223.903264][ T5793] chnl_net:caif_netlink_parms(): no params data found
[  223.931136][ T5800] bridge0: port 1(bridge_slave_0) entered blocking state
[  223.939063][ T5800] bridge0: port 1(bridge_slave_0) entered disabled state
[  223.947005][ T5800] bridge_slave_0: entered allmulticast mode
[  223.956181][ T5800] bridge_slave_0: entered promiscuous mode
[  224.023290][ T5798] Bluetooth: hci2: command tx timeout
[  224.029252][ T5798] Bluetooth: hci1: command tx timeout
[  224.035289][ T5798] Bluetooth: hci0: command tx timeout
[  224.079025][ T5800] bridge0: port 2(bridge_slave_1) entered blocking state
[  224.086922][ T5800] bridge0: port 2(bridge_slave_1) entered disabled state
[  224.094327][ T5796] Bluetooth: hci3: command tx timeout
[  224.094827][ T5800] bridge_slave_1: entered allmulticast mode
[  224.108985][ T5800] bridge_slave_1: entered promiscuous mode
[  224.254377][ T5796] Bluetooth: hci4: command tx timeout
[  224.277263][ T5788] chnl_net:caif_netlink_parms(): no params data found
[  224.358019][ T5789] bridge0: port 1(bridge_slave_0) entered blocking state
[  224.366425][ T5789] bridge0: port 1(bridge_slave_0) entered disabled state
[  224.374308][ T5789] bridge_slave_0: entered allmulticast mode
[  224.383054][ T5789] bridge_slave_0: entered promiscuous mode
[  224.403540][ T5800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  224.429584][ T5789] bridge0: port 2(bridge_slave_1) entered blocking state
[  224.439400][ T5789] bridge0: port 2(bridge_slave_1) entered disabled state
[  224.447465][ T5789] bridge_slave_1: entered allmulticast mode
[  224.456798][ T5789] bridge_slave_1: entered promiscuous mode
[  224.483560][ T5804] chnl_net:caif_netlink_parms(): no params data found
[  224.513112][ T5800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  224.821455][ T5800] team0: Port device team_slave_0 added
[  224.849509][ T5789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  224.868617][ T5800] team0: Port device team_slave_1 added
[  224.976148][ T5789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  225.093432][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_0
[  225.101011][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  225.127579][ T5800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  225.242595][ T5800] batman_adv: batadv0: Adding interface: batadv_slave_1
[  225.251643][ T5800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  225.279203][ T5800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  225.293282][ T5793] bridge0: port 1(bridge_slave_0) entered blocking state
[  225.301813][ T5793] bridge0: port 1(bridge_slave_0) entered disabled state
[  225.309673][ T5793] bridge_slave_0: entered allmulticast mode
[  225.321407][ T5793] bridge_slave_0: entered promiscuous mode
[  225.338145][ T5789] team0: Port device team_slave_0 added
[  225.346010][ T5793] bridge0: port 2(bridge_slave_1) entered blocking state
[  225.353683][ T5793] bridge0: port 2(bridge_slave_1) entered disabled state
[  225.362086][ T5793] bridge_slave_1: entered allmulticast mode
[  225.371117][ T5793] bridge_slave_1: entered promiscuous mode
[  225.527082][ T5789] team0: Port device team_slave_1 added
[  225.602083][ T5788] bridge0: port 1(bridge_slave_0) entered blocking state
[  225.609898][ T5788] bridge0: port 1(bridge_slave_0) entered disabled state
[  225.617926][ T5788] bridge_slave_0: entered allmulticast mode
[  225.626981][ T5788] bridge_slave_0: entered promiscuous mode
[  225.779333][ T5793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  225.824963][ T5788] bridge0: port 2(bridge_slave_1) entered blocking state
[  225.832804][ T5788] bridge0: port 2(bridge_slave_1) entered disabled state
[  225.841926][ T5788] bridge_slave_1: entered allmulticast mode
[  225.851275][ T5788] bridge_slave_1: entered promiscuous mode
[  225.861154][ T5804] bridge0: port 1(bridge_slave_0) entered blocking state
[  225.869252][ T5804] bridge0: port 1(bridge_slave_0) entered disabled state
[  225.877321][ T5804] bridge_slave_0: entered allmulticast mode
[  225.886481][ T5804] bridge_slave_0: entered promiscuous mode
[  225.938319][ T5793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  226.009231][ T5804] bridge0: port 2(bridge_slave_1) entered blocking state
[  226.019221][ T5804] bridge0: port 2(bridge_slave_1) entered disabled state
[  226.027341][ T5804] bridge_slave_1: entered allmulticast mode
[  226.036243][ T5804] bridge_slave_1: entered promiscuous mode
[  226.048346][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_0
[  226.055804][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  226.083004][ T5789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  226.096657][ T5796] Bluetooth: hci0: command tx timeout
[  226.102328][ T5796] Bluetooth: hci1: command tx timeout
[  226.109489][ T5798] Bluetooth: hci2: command tx timeout
[  226.161877][ T5800] hsr_slave_0: entered promiscuous mode
[  226.171847][ T5800] hsr_slave_1: entered promiscuous mode
[  226.177792][ T5791] Bluetooth: hci3: command tx timeout
[  226.215551][ T5789] batman_adv: batadv0: Adding interface: batadv_slave_1
[  226.222780][ T5789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  226.249255][ T5789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  226.329557][ T5788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  226.339049][ T5791] Bluetooth: hci4: command tx timeout
[  226.398683][ T5793] team0: Port device team_slave_0 added
[  226.463625][ T5788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  226.482563][ T5804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  226.532266][ T5793] team0: Port device team_slave_1 added
[  226.584950][ T5788] team0: Port device team_slave_0 added
[  226.633554][ T5804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  226.699771][ T5788] team0: Port device team_slave_1 added
[  226.826892][ T5789] hsr_slave_0: entered promiscuous mode
[  226.838393][ T5789] hsr_slave_1: entered promiscuous mode
[  226.847601][ T5789] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  226.855586][ T5789] Cannot create hsr debugfs directory
[  226.915656][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_0
[  226.922844][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  226.949281][ T5793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  226.977852][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_1
[  226.985293][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  227.011795][ T5793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  227.191738][ T5804] team0: Port device team_slave_0 added
[  227.235727][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_0
[  227.243242][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  227.270391][ T5788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  227.303431][ T5804] team0: Port device team_slave_1 added
[  227.401564][ T5788] batman_adv: batadv0: Adding interface: batadv_slave_1
[  227.409976][ T5788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  227.436934][ T5788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  227.517972][ T5793] hsr_slave_0: entered promiscuous mode
[  227.529353][ T5793] hsr_slave_1: entered promiscuous mode
[  227.537904][ T5793] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  227.546068][ T5793] Cannot create hsr debugfs directory
[  227.602300][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_0
[  227.609710][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  227.636197][ T5804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  227.714759][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_1
[  227.721935][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  227.748406][ T5804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  227.946262][ T5788] hsr_slave_0: entered promiscuous mode
[  227.956773][ T5788] hsr_slave_1: entered promiscuous mode
[  227.965906][ T5788] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  227.973655][ T5788] Cannot create hsr debugfs directory
[  228.174193][ T5791] Bluetooth: hci2: command tx timeout
[  228.179849][ T5791] Bluetooth: hci1: command tx timeout
[  228.183389][ T5798] Bluetooth: hci0: command tx timeout
[  228.255519][ T5798] Bluetooth: hci3: command tx timeout
[  228.326237][ T5804] hsr_slave_0: entered promiscuous mode
[  228.337357][ T5804] hsr_slave_1: entered promiscuous mode
[  228.346170][ T5804] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  228.353872][ T5804] Cannot create hsr debugfs directory
[  228.414547][ T5798] Bluetooth: hci4: command tx timeout
[  228.549127][ T5800] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  228.654191][ T5800] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  228.686184][ T5800] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  228.706071][ T5800] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  229.049220][ T5789] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  229.144539][ T5789] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  229.239411][ T5789] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  229.339027][ T5793] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  229.371885][ T5789] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  229.415190][ T5793] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  229.482304][ T5793] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  229.547977][ T5793] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  229.719012][ T5788] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  229.776388][ T5788] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  229.856168][ T5788] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  229.911842][ T5804] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  229.947986][ T5788] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  229.973552][ T5804] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  230.004886][ T5804] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  230.076555][ T5804] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  230.275388][ T5798] Bluetooth: hci0: command tx timeout
[  230.275484][ T5796] Bluetooth: hci1: command tx timeout
[  230.280944][ T5798] Bluetooth: hci2: command tx timeout
[  230.334328][ T5798] Bluetooth: hci3: command tx timeout
[  230.434812][ T5800] 8021q: adding VLAN 0 to HW filter on device bond0
[  230.494892][ T5798] Bluetooth: hci4: command tx timeout
[  230.595684][ T5800] 8021q: adding VLAN 0 to HW filter on device team0
[  230.708678][ T3751] bridge0: port 1(bridge_slave_0) entered blocking state
[  230.716535][ T3751] bridge0: port 1(bridge_slave_0) entered forwarding state
[  230.837090][ T3751] bridge0: port 2(bridge_slave_1) entered blocking state
[  230.844960][ T3751] bridge0: port 2(bridge_slave_1) entered forwarding state
[  230.931522][ T5793] 8021q: adding VLAN 0 to HW filter on device bond0
[  231.113446][ T5789] 8021q: adding VLAN 0 to HW filter on device bond0
[  231.184827][ T5793] 8021q: adding VLAN 0 to HW filter on device team0
[  231.304956][ T3663] bridge0: port 1(bridge_slave_0) entered blocking state
[  231.312626][ T3663] bridge0: port 1(bridge_slave_0) entered forwarding state
[  231.389699][ T5789] 8021q: adding VLAN 0 to HW filter on device team0
[  231.432606][ T3663] bridge0: port 2(bridge_slave_1) entered blocking state
[  231.440392][ T3663] bridge0: port 2(bridge_slave_1) entered forwarding state
[  231.484526][ T5788] 8021q: adding VLAN 0 to HW filter on device bond0
[  231.539210][ T5804] 8021q: adding VLAN 0 to HW filter on device bond0
[  231.652823][ T3751] bridge0: port 1(bridge_slave_0) entered blocking state
[  231.661383][ T3751] bridge0: port 1(bridge_slave_0) entered forwarding state
[  231.706026][ T5788] 8021q: adding VLAN 0 to HW filter on device team0
[  231.839214][ T3751] bridge0: port 2(bridge_slave_1) entered blocking state
[  231.847229][ T3751] bridge0: port 2(bridge_slave_1) entered forwarding state
[  231.942924][ T5804] 8021q: adding VLAN 0 to HW filter on device team0
[  232.013037][ T3751] bridge0: port 1(bridge_slave_0) entered blocking state
[  232.021046][ T3751] bridge0: port 1(bridge_slave_0) entered forwarding state
[  232.046422][ T3751] bridge0: port 2(bridge_slave_1) entered blocking state
[  232.054315][ T3751] bridge0: port 2(bridge_slave_1) entered forwarding state
[  232.208059][ T5789] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  232.219619][ T5789] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  232.262364][ T3751] bridge0: port 1(bridge_slave_0) entered blocking state
[  232.270168][ T3751] bridge0: port 1(bridge_slave_0) entered forwarding state
[  232.292257][ T3751] bridge0: port 2(bridge_slave_1) entered blocking state
[  232.300084][ T3751] bridge0: port 2(bridge_slave_1) entered forwarding state
[  232.554542][ T5788] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  232.750747][ T5804] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  233.181172][ T5800] 8021q: adding VLAN 0 to HW filter on device batadv0
[  233.794850][ T5793] 8021q: adding VLAN 0 to HW filter on device batadv0
[  234.327040][ T5789] 8021q: adding VLAN 0 to HW filter on device batadv0
[  234.387973][ T5793] veth0_vlan: entered promiscuous mode
[  234.503248][ T5793] veth1_vlan: entered promiscuous mode
[  234.657531][ T5788] 8021q: adding VLAN 0 to HW filter on device batadv0
[  234.695254][ T5804] 8021q: adding VLAN 0 to HW filter on device batadv0
[  234.948277][ T5793] veth0_macvtap: entered promiscuous mode
[  235.040410][ T5793] veth1_macvtap: entered promiscuous mode
[  235.160883][ T5789] veth0_vlan: entered promiscuous mode
[  235.273119][ T5789] veth1_vlan: entered promiscuous mode
[  235.321482][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_0
[  235.354655][ T5804] veth0_vlan: entered promiscuous mode
[  235.414531][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_1
[  235.492420][ T5793] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  235.503377][ T5793] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  235.513675][ T5793] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  235.525447][ T5793] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  235.560804][ T5788] veth0_vlan: entered promiscuous mode
[  235.601338][ T5804] veth1_vlan: entered promiscuous mode
[  235.734745][ T5788] veth1_vlan: entered promiscuous mode
[  235.800976][ T5789] veth0_macvtap: entered promiscuous mode
[  235.886039][ T5789] veth1_macvtap: entered promiscuous mode
[  236.047923][ T5804] veth0_macvtap: entered promiscuous mode
[  236.131130][ T5804] veth1_macvtap: entered promiscuous mode
[  236.143813][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  236.155508][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  236.169905][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_0
[  236.278827][ T5789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  236.290082][ T5789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  236.304975][ T5789] batman_adv: batadv0: Interface activated: batadv_slave_1
[  236.384928][ T5800] veth0_vlan: entered promiscuous mode
[  236.403456][ T5788] veth0_macvtap: entered promiscuous mode
[  236.447784][ T5789] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  236.458234][ T5789] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  236.467711][ T5789] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  236.477224][ T5789] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  236.496354][ T5804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  236.507230][ T5804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  236.517527][ T5804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  236.528413][ T5804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  236.543010][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_0
[  236.577036][ T5788] veth1_macvtap: entered promiscuous mode
[  236.609669][ T5800] veth1_vlan: entered promiscuous mode
[  236.806968][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  236.820871][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  236.832022][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  236.844139][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  236.855709][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  236.867416][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  236.881948][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_0
[  236.907481][ T5804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  236.918557][ T5804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  236.929957][ T5804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  236.940805][ T5804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  236.955266][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_1
[  237.113259][ T5800] veth0_macvtap: entered promiscuous mode
[  237.157451][ T5804] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  237.167189][ T5804] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  237.178710][ T5804] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  237.188752][ T5804] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  237.221581][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  237.236294][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  237.248249][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  237.260531][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  237.272897][ T5788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  237.285013][ T5788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  237.301183][ T5788] batman_adv: batadv0: Interface activated: batadv_slave_1
[  237.311747][ T5800] veth1_macvtap: entered promiscuous mode
[  237.500929][ T5800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  237.513028][ T5800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  237.523330][ T5800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  237.535535][ T5800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  237.545822][ T5800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  237.559262][ T5800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  237.570974][ T5800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  237.582520][ T5800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  237.596957][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_0
[  237.621549][ T5788] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  237.630835][ T5788] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  237.640453][ T5788] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  237.649886][ T5788] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  237.796792][ T5800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  237.807650][ T5800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  237.817949][ T5800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  237.828880][ T5800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  237.839217][ T5800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  237.850108][ T5800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  237.861221][ T5800] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  237.872288][ T5800] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  237.886651][ T5800] batman_adv: batadv0: Interface activated: batadv_slave_1
[  238.210800][ T5800] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  238.221108][ T5800] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  238.231419][ T5800] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  238.241661][ T5800] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  242.687800][ T4654] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  242.698248][ T4654] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  243.017516][   T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  243.027016][   T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  243.259095][ T5793] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[  243.883381][ T4109] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  243.892020][ T4109] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  244.051675][ T5968] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[  244.072170][ T3663] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  244.083040][ T3663] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  244.303100][ T3620] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  244.315384][ T3620] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  244.370960][ T4148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  244.380194][ T4148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  244.484507][   T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  244.484606][   T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  244.566767][ T4654] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  244.566863][ T4654] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  244.674751][ T5970] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  245.018528][ T5976] loop1: detected capacity change from 0 to 64
[  245.060499][ T5977] loop3: detected capacity change from 0 to 512
[  245.075427][ T5979] loop2: detected capacity change from 0 to 128
[  245.080632][ T5977] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  245.080713][ T5977] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  245.420145][ T5977] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2863: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  245.421049][ T5977] EXT4-fs (loop3): 1 truncate cleaned up
[  245.501399][ T5977] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  245.512693][ T4148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  245.512786][ T4148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  245.521372][ T5970] loop0: detected capacity change from 0 to 4096
[  245.660934][ T5977] FAULT_INJECTION: forcing a failure.
[  245.660934][ T5977] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  245.661104][ T5977] CPU: 1 UID: 0 PID: 5977 Comm: syz.3.4 Not tainted 6.13.0-rc1-syzkaller #0
[  245.661281][ T5977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  245.661391][ T5977] Call Trace:
[  245.661450][ T5977]  <TASK>
[  245.661501][ T5977]  dump_stack_lvl+0x216/0x2d0
[  245.661722][ T5977]  dump_stack+0x1e/0x24
[  245.661884][ T5977]  should_fail_ex+0x748/0x7f0
[  245.662083][ T5977]  should_fail+0x2a/0x40
[  245.662233][ T5977]  should_fail_usercopy+0x2e/0x40
[  245.662412][ T5977]  _copy_to_user+0x34/0x120
[  245.662575][ T5977]  simple_read_from_buffer+0x199/0x340
[  245.662776][ T5977]  proc_fail_nth_read+0x1e5/0x2c0
[  245.662938][ T5977]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  245.663088][ T5977]  vfs_read+0x29d/0xf50
[  245.663260][ T5977]  ? kmsan_get_metadata+0x13e/0x1c0
[  245.663427][ T5977]  ? kmsan_internal_set_shadow_origin+0x69/0x100
[  245.663685][ T5977]  ksys_read+0x240/0x4b0
[  245.663857][ T5977]  ? kmsan_get_metadata+0x13e/0x1c0
[  245.664002][ T5977]  __x64_sys_read+0x93/0xe0
[  245.664171][ T5977]  x64_sys_call+0x314c/0x3c30
[  245.664364][ T5977]  do_syscall_64+0xcd/0x1e0
[  245.664552][ T5977]  ? clear_bhb_loop+0x25/0x80
[  245.664728][ T5977]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  245.664916][ T5977] RIP: 0033:0x7f416af7f25c
[  245.665039][ T5977] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 8e 02 00 48
[  245.665167][ T5977] RSP: 002b:00007f416bcff050 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  245.665339][ T5977] RAX: ffffffffffffffda RBX: 00007f416b145fa0 RCX: 00007f416af7f25c
[  245.665480][ T5977] RDX: 000000000000000f RSI: 00007f416bcff0b0 RDI: 0000000000000005
[  245.665586][ T5977] RBP: 00007f416bcff0a0 R08: 0000000000000000 R09: 0000000000000000
[  245.665700][ T5977] R10: 0000000000000700 R11: 0000000000000246 R12: 0000000000000002
[  245.665795][ T5977] R13: 0000000000000000 R14: 00007f416b145fa0 R15: 00007ffc7bdd2d58
[  245.665918][ T5977]  </TASK>
[  245.765359][   T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  245.765455][   T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  245.868591][ T5986] loop2: detected capacity change from 0 to 1705
[  245.871964][ T5986] udf: Unknown parameter 'ÿÿÿÿ00000000000000000000'
[  246.100760][ T5984] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  246.302375][ T5804] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  246.570190][ T5992] loop3: detected capacity change from 0 to 256
[  247.125433][ T5992] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  247.125629][ T5992] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  247.125800][ T5992] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  247.133796][ T5992] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  247.147346][   T29] audit: type=1800 audit(1733118518.224:2): pid=5992 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.7" name="file1" dev="loop3" ino=1048600 res=0 errno=0
[  247.372762][ T5992] syz.3.7 (5992) used greatest stack depth: 4008 bytes left
[  247.452312][ T6004] FAULT_INJECTION: forcing a failure.
[  247.452312][ T6004] name failslab, interval 1, probability 0, space 0, times 1
[  247.452449][ T6004] CPU: 1 UID: 0 PID: 6004 Comm: syz.2.10 Not tainted 6.13.0-rc1-syzkaller #0
[  247.452601][ T6004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  247.452683][ T6004] Call Trace:
[  247.452734][ T6004]  <TASK>
[  247.452785][ T6004]  dump_stack_lvl+0x216/0x2d0
[  247.452982][ T6004]  dump_stack+0x1e/0x24
[  247.453144][ T6004]  should_fail_ex+0x748/0x7f0
[  247.453325][ T6004]  should_failslab+0x17f/0x210
[  247.453477][ T6004]  __kmalloc_noprof+0x176/0x1230
[  247.453658][ T6004]  ? kmsan_get_metadata+0x13e/0x1c0
[  247.453798][ T6004]  ? tomoyo_encode+0x5f8/0xa40
[  247.453979][ T6004]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  247.454126][ T6004]  ? kmsan_get_metadata+0x13e/0x1c0
[  247.454267][ T6004]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  247.454422][ T6004]  tomoyo_encode+0x5f8/0xa40
[  247.454622][ T6004]  tomoyo_realpath_from_path+0x9dd/0xaa0
[  247.454840][ T6004]  tomoyo_path_number_perm+0x1d9/0x8f0
[  247.455021][ T6004]  ? kmsan_internal_set_shadow_origin+0x69/0x100
[  247.455221][ T6004]  ? kmsan_get_metadata+0x13e/0x1c0
[  247.455365][ T6004]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  247.455545][ T6004]  tomoyo_file_ioctl+0x3f/0x50
[  247.455687][ T6004]  security_file_ioctl+0x145/0x590
[  247.455856][ T6004]  __se_sys_ioctl+0xd0/0x440
[  247.456043][ T6004]  __x64_sys_ioctl+0x96/0xe0
[  247.456219][ T6004]  x64_sys_call+0x19f0/0x3c30
[  247.456406][ T6004]  do_syscall_64+0xcd/0x1e0
[  247.456591][ T6004]  ? clear_bhb_loop+0x25/0x80
[  247.456762][ T6004]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  247.456937][ T6004] RIP: 0033:0x7fed65f80849
[  247.457039][ T6004] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  247.457163][ T6004] RSP: 002b:00007fed66e04058 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  247.457308][ T6004] RAX: ffffffffffffffda RBX: 00007fed66145fa0 RCX: 00007fed65f80849
[  247.457417][ T6004] RDX: 0000000020000a40 RSI: 0000000080089203 RDI: 0000000000000003
[  247.457515][ T6004] RBP: 00007fed66e040a0 R08: 0000000000000000 R09: 0000000000000000
[  247.457611][ T6004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  247.457703][ T6004] R13: 0000000000000000 R14: 00007fed66145fa0 R15: 00007ffcea1d2b98
[  247.457823][ T6004]  </TASK>
[  247.458330][ T6004] ERROR: Out of memory at tomoyo_realpath_from_path.
[  247.822059][ T5998] loop4: detected capacity change from 0 to 32768
[  247.907432][ T5998] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.5 (5998)
[  248.460407][ T6001] loop1: detected capacity change from 0 to 4096
[  248.469699][ T6001] =======================================================
[  248.469699][ T6001] WARNING: The mand mount option has been deprecated and
[  248.469699][ T6001]          and is ignored by this kernel. Remove the mand
[  248.469699][ T6001]          option from the mount to silence this warning.
[  248.469699][ T6001] =======================================================
[  248.619252][ T6006] loop2: detected capacity change from 0 to 32768
[  248.701216][ T5998] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  248.701487][ T5998] BTRFS info (device loop4): using sha256 (sha256-generic) checksum algorithm
[  248.703881][ T5998] BTRFS info (device loop4): using free-space-tree
[  248.704415][ T5998] workqueue: max_active 3940 requested for btrfs-worker is out of range, clamping between 1 and 2048
[  248.711267][ T6006] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.11 (6006)
[  248.726819][ T6006] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  248.727089][ T6006] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  248.727882][ T6006] BTRFS info (device loop2): using free-space-tree
[  248.735876][ T5998] workqueue: max_active 3940 requested for btrfs-delalloc is out of range, clamping between 1 and 2048
[  248.835040][ T5998] workqueue: max_active 3940 requested for btrfs-endio is out of range, clamping between 1 and 2048
[  248.871150][ T5998] workqueue: max_active 3940 requested for btrfs-endio-meta is out of range, clamping between 1 and 2048
[  248.880171][ T5998] workqueue: max_active 3940 requested for btrfs-rmw is out of range, clamping between 1 and 2048
[  248.974580][ T5998] workqueue: max_active 3940 requested for btrfs-endio-write is out of range, clamping between 1 and 2048
[  249.319708][ T6031] raw_sendmsg: syz.3.13 forgot to set AF_INET. Fix it!
[  249.365354][ T5998] workqueue: max_active 3940 requested for btrfs-compressed-write is out of range, clamping between 1 and 2048
[  249.567702][ T6036] loop1: detected capacity change from 0 to 512
[  249.660073][ T6036] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  249.792635][ T6006] BTRFS info (device loop2): rebuilding free space tree
[  249.829018][   T58] BTRFS warning (device loop4): checksum verify failed on logical 5341184 mirror 1 wanted 0x0a5a7a5ae10eed219743b156b36184dc5a58d72503dc57b157a62f9528df24e9 found 0x4ac259164c41466a002ab2be670540c912fd8ef5eeb6e4f4b1cda3620f966d6c level 0
[  249.865457][ T5998] BTRFS error (device loop4): failed to load root free space
[  249.995554][ T6036] EXT4-fs (loop1): 1 truncate cleaned up
[  250.003322][ T6036] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  250.017845][   T29] audit: type=1800 audit(1733118521.114:3): pid=6006 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.11" name="file1" dev="loop2" ino=260 res=0 errno=0
[  250.028515][ T6006] program syz.2.11 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  250.081741][ T5998] BTRFS error (device loop4): open_ctree failed
[  250.617364][ T5789] BTRFS info (device loop2): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  250.856927][ T6049] loop0: detected capacity change from 0 to 16
[  251.109067][ T6049] erofs (device loop0): mounted with root inode @ nid 36.
[  251.678811][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  251.719860][ T6051] loop4: detected capacity change from 0 to 512
[  251.797243][ T6049] erofs (device loop0): corrupted dir block 0 @ nid 36
[  252.107130][ T6051] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  252.121339][ T6051] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  252.268230][ T6051] EXT4-fs error (device loop4): ext4_ext_check_inode:524: inode #12: comm syz.4.17: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  252.632995][ T6056] loop1: detected capacity change from 0 to 4096
[  252.854387][ T6051] EXT4-fs error (device loop4): ext4_ext_check_inode:524: inode #12: comm syz.4.17: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  253.073733][ T6060] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.17: bg 0: block 248: padding at end of block bitmap is not set
[  253.183878][ T6063] netlink: 8 bytes leftover after parsing attributes in process `syz.3.20'.
[  253.286125][ T6060] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem
[  253.554374][ T6068] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  253.981792][ T5800] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  254.022998][ T6075] loop2: detected capacity change from 0 to 24
[  254.175657][ T5849] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  254.242832][ T6077] loop4: detected capacity change from 0 to 2048
[  254.494885][ T5849] usb 4-1: Using ep0 maxpacket: 8
[  254.510041][ T5849] usb 4-1: config 0 has no interfaces?
[  254.516487][ T5849] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  254.528585][ T5849] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  254.565434][ T6077] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  254.578569][ T6077] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  254.597026][ T5849] usb 4-1: config 0 descriptor??
[  254.764584][ T5869] usb 1-1: new low-speed USB device number 2 using dummy_hcd
[  254.802127][ T5800] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  254.925686][ T5869] usb 1-1: Invalid ep0 maxpacket: 64
[  254.965117][ T5849] usb 4-1: USB disconnect, device number 2
[  255.124499][ T5869] usb 1-1: new low-speed USB device number 3 using dummy_hcd
[  255.325747][ T5869] usb 1-1: Invalid ep0 maxpacket: 64
[  255.353814][ T6093] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  255.395232][ T5869] usb usb1-port1: attempt power cycle
[  255.420307][ T6083] loop1: detected capacity change from 0 to 64
[  255.485126][   T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  255.612423][ T6083] netlink: 32 bytes leftover after parsing attributes in process `syz.1.26'.
[  255.669428][   T10] usb 5-1: Using ep0 maxpacket: 16
[  255.702599][   T10] usb 5-1: config 0 has an invalid interface number: 105 but max is 0
[  255.711602][   T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  255.722160][   T10] usb 5-1: config 0 has no interface number 0
[  255.755071][ T5869] usb 1-1: new low-speed USB device number 4 using dummy_hcd
[  255.833612][   T10] usb 5-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28
[  255.844236][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  255.852714][   T10] usb 5-1: Product: syz
[  255.857991][   T10] usb 5-1: Manufacturer: syz
[  255.862852][   T10] usb 5-1: SerialNumber: syz
[  255.966572][   T10] usb 5-1: config 0 descriptor??
[  256.052728][ T5869] usb 1-1: Invalid ep0 maxpacket: 64
[  256.189345][   T10] usb 5-1: USB disconnect, device number 2
[  256.274914][ T5869] usb 1-1: new low-speed USB device number 5 using dummy_hcd
[  256.320627][ T5869] usb 1-1: Invalid ep0 maxpacket: 64
[  256.346749][ T5869] usb usb1-port1: unable to enumerate USB device
[  257.082558][ T6111] loop4: detected capacity change from 0 to 2048
[  257.170045][ T6115] loop3: detected capacity change from 0 to 128
[  257.267582][ T6111] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  257.280350][ T6111] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  257.383623][ T6117] loop2: detected capacity change from 0 to 512
[  257.391047][ T6115] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  257.427268][ T6111] fs-verity: sha256 using implementation "sha256-generic"
[  257.470505][ T6115] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  257.500220][ T6121] loop1: detected capacity change from 0 to 64
[  257.509740][ T6111] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.36: bg 0: block 345: padding at end of block bitmap is not set
[  257.539428][ T6117] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found
[  257.547301][ T6117] UDF-fs: Scanning with blocksize 512 failed
[  257.564173][ T6111] fs-verity (loop4, inode 13): Error -117 writing Merkle tree block 0
[  257.565788][ T6117] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found
[  257.572741][ T6111] fs-verity (loop4, inode 13): Error -117 building Merkle tree
[  257.580473][ T6117] UDF-fs: Scanning with blocksize 1024 failed
[  257.628649][ T6117] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found
[  257.636817][ T6117] UDF-fs: Scanning with blocksize 2048 failed
[  257.645896][ T6117] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  257.681463][ T6117] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  258.053578][ T5800] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  258.075899][ T5804] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  259.365277][ T6130] loop0: detected capacity change from 0 to 32768
[  259.604939][ T6139] loop3: detected capacity change from 0 to 256
[  259.702681][ T6139] vfat: Unknown parameter ''
[  260.333116][ T6145] loop1: detected capacity change from 0 to 4096
[  260.443621][ T6147] loop0: detected capacity change from 0 to 2048
[  260.731026][ T6150] syz.4.49: attempt to access beyond end of device
[  260.731026][ T6150] loop4: rw=2048, sector=0, nr_sectors = 8 limit=0
[  260.745050][ T6150] SQUASHFS error: Failed to read block 0x0: -5
[  260.751743][ T6150] unable to read squashfs_super_block
[  260.970078][ T6147] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  260.983153][ T6147] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  261.465235][ T6145] ntfs3(loop1): Failed to load $Extend (-22).
[  261.471619][ T6145] ntfs3(loop1): Failed to initialize $Extend.
[  261.531026][ T6160] loop4: detected capacity change from 0 to 2048
[  261.686830][ T5793] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  261.986741][ T6164] FAULT_INJECTION: forcing a failure.
[  261.986741][ T6164] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  262.000474][ T6164] CPU: 1 UID: 0 PID: 6164 Comm: syz.2.54 Not tainted 6.13.0-rc1-syzkaller #0
[  262.009573][ T6164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  262.019880][ T6164] Call Trace:
[  262.023356][ T6164]  <TASK>
[  262.026467][ T6164]  dump_stack_lvl+0x216/0x2d0
[  262.031446][ T6164]  dump_stack+0x1e/0x24
[  262.035876][ T6164]  should_fail_ex+0x748/0x7f0
[  262.040981][ T6164]  should_fail+0x2a/0x40
[  262.045544][ T6164]  should_fail_usercopy+0x2e/0x40
[  262.050969][ T6164]  _copy_from_user+0x35/0x110
[  262.056253][ T6164]  do_replace+0x108/0x8a0
[  262.060904][ T6164]  ? kmsan_get_metadata+0x13e/0x1c0
[  262.066519][ T6164]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  262.072668][ T6164]  do_ebt_set_ctl+0x389/0x24a0
[  262.077717][ T6164]  ? filter_irq_stacks+0x60/0x1a0
[  262.083026][ T6164]  ? kmsan_get_metadata+0x13e/0x1c0
[  262.088492][ T6164]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  262.094566][ T6164]  ? do_ip_setsockopt+0xa1/0x48d0
[  262.099879][ T6164]  ? kmsan_get_metadata+0x13e/0x1c0
[  262.105514][ T6164]  ? kmsan_get_metadata+0x13e/0x1c0
[  262.110970][ T6164]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  262.117078][ T6164]  ? kmsan_get_metadata+0x13e/0x1c0
[  262.122539][ T6164]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  262.128645][ T6164]  ? __pfx_do_ebt_set_ctl+0x10/0x10
[  262.134124][ T6164]  ? __pfx_do_ebt_set_ctl+0x10/0x10
[  262.139593][ T6164]  nf_setsockopt+0x497/0x4f0
[  262.144465][ T6164]  ip_setsockopt+0x1f1/0x210
[  262.149350][ T6164]  ? __pfx_ip_setsockopt+0x10/0x10
[  262.154752][ T6164]  tcp_setsockopt+0x153/0x190
[  262.159690][ T6164]  ? __pfx_tcp_setsockopt+0x10/0x10
[  262.165155][ T6164]  sock_common_setsockopt+0xf9/0x140
[  262.170744][ T6164]  do_sock_setsockopt+0x4bb/0x7d0
[  262.176033][ T6164]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  262.182234][ T6164]  __x64_sys_setsockopt+0x33d/0x4f0
[  262.187710][ T6164]  x64_sys_call+0x30b9/0x3c30
[  262.193211][ T6164]  do_syscall_64+0xcd/0x1e0
[  262.198004][ T6164]  ? clear_bhb_loop+0x25/0x80
[  262.203157][ T6164]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  262.209423][ T6164] RIP: 0033:0x7fed65f80849
[  262.214152][ T6164] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  262.234143][ T6164] RSP: 002b:00007fed66e04058 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  262.242888][ T6164] RAX: ffffffffffffffda RBX: 00007fed66145fa0 RCX: 00007fed65f80849
[  262.251105][ T6164] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000003
[  262.259298][ T6164] RBP: 00007fed66e040a0 R08: 00000000000001f0 R09: 0000000000000000
[  262.267523][ T6164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  262.275774][ T6164] R13: 0000000000000000 R14: 00007fed66145fa0 R15: 00007ffcea1d2b98
[  262.284011][ T6164]  </TASK>
[  262.309650][ T6160] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  262.322610][ T6160] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  262.787037][ T6176] loop2: detected capacity change from 0 to 8
[  262.924631][ T6170] loop3: detected capacity change from 0 to 1024
[  263.594266][ T5800] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  263.791163][ T6185] loop1: detected capacity change from 0 to 2048
[  263.826680][ T6187] FAULT_INJECTION: forcing a failure.
[  263.826680][ T6187] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[  263.841865][ T6187] CPU: 0 UID: 0 PID: 6187 Comm: syz.0.62 Not tainted 6.13.0-rc1-syzkaller #0
[  263.850964][ T6187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  263.861290][ T6187] Call Trace:
[  263.864782][ T6187]  <TASK>
[  263.867915][ T6187]  dump_stack_lvl+0x216/0x2d0
[  263.872974][ T6187]  dump_stack+0x1e/0x24
[  263.877452][ T6187]  should_fail_ex+0x748/0x7f0
[  263.882514][ T6187]  should_fail_alloc_page+0x235/0x2b0
[  263.888224][ T6187]  __alloc_pages_noprof+0x343/0xe00
[  263.893802][ T6187]  alloc_pages_mpol_noprof+0x299/0x990
[  263.899592][ T6187]  ? kmsan_get_metadata+0x13e/0x1c0
[  263.905205][ T6187]  vma_alloc_folio_noprof+0x454/0x7f0
[  263.910920][ T6187]  handle_mm_fault+0xa40e/0xdcc0
[  263.916275][ T6187]  ? kmsan_get_metadata+0x13e/0x1c0
[  263.921825][ T6187]  exc_page_fault+0x41b/0x700
[  263.926849][ T6187]  asm_exc_page_fault+0x2b/0x30
[  263.932051][ T6187] RIP: 0033:0x7fd9358418e3
[  263.936740][ T6187] Code: 1f 84 00 00 00 00 00 3d 00 01 00 00 75 29 45 31 f6 48 83 c4 18 44 89 f0 5b 5d 41 5c 41 5d 41 5e 41 5f c3 0f 1f 40 00 49 8b 0f <44> 88 34 01 49 83 47 10 01 eb 92 66 90 8d 90 ff fe ff ff 83 fa 1c
[  263.956797][ T6187] RSP: 002b:00007fd9367494c0 EFLAGS: 00010202
[  263.963168][ T6187] RAX: 0000000000011000 RBX: 00007fd936749560 RCX: 00007fd92b200000
[  263.971480][ T6187] RDX: 00007fd936749700 RSI: 0000000000000019 RDI: 00007fd936749600
[  263.979769][ T6187] RBP: 0000000000000048 R08: 0000000000000006 R09: 0000000000000021
[  263.988002][ T6187] R10: 0000000000000028 R11: 00007fd936749560 R12: 0000000000000001
[  263.996234][ T6187] R13: 00007fd935a08320 R14: 0000000000000001 R15: 00007fd936749600
[  264.004570][ T6187]  </TASK>
[  264.029409][ T6187] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF
[  264.046162][ T6187] loop0: detected capacity change from 0 to 256
[  264.078615][ T6183] loop2: detected capacity change from 0 to 4096
[  264.092522][ T6183] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512).
[  264.102644][ T3620] hfsplus: b-tree write err: -5, ino 4
[  264.325649][ T6185] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  264.339175][ T6185] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  264.774823][ T5869] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  264.974977][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  264.984814][ T5869] usb 5-1: Using ep0 maxpacket: 32
[  265.006264][ T5869] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  265.017766][ T5869] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  265.028715][ T5869] usb 5-1: New USB device found, idVendor=0079, idProduct=1801, bcdDevice= 0.00
[  265.038304][ T5869] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  265.080422][ T5869] usb 5-1: config 0 descriptor??
[  265.640449][ T6189] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (128 ns). Using initial count to start timer.
[  265.758563][ T6189] loop4: detected capacity change from 0 to 2048
[  265.831002][ T6189] EXT4-fs: Ignoring removed mblk_io_submit option
[  265.869982][ T6189] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  265.888444][ T6189] syz.4.61 uses obsolete (PF_INET,SOCK_PACKET)
[  265.901314][ T6189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  265.912692][ T6189] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  266.181845][ T5869] usbhid 5-1:0.0: can't add hid device: -71
[  266.188723][ T5869] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  266.211984][ T5869] usb 5-1: USB disconnect, device number 3
[  266.761596][ T5800] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  272.148305][ T6203] loop0: detected capacity change from 0 to 4096
[  272.318570][ T6203] ntfs3(loop0): Different NTFS sector size (2048) and media sector size (512).
[  272.548095][ T6217] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.66'.
[  272.561174][ T6214] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.66'.
[  272.892251][ T6221] loop1: detected capacity change from 0 to 2048
[  273.080409][ T6221] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  273.093486][ T6221] ext4 filesystem being mounted at /12/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  273.252780][ T6230] FAULT_INJECTION: forcing a failure.
[  273.252780][ T6230] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  273.267093][ T6230] CPU: 0 UID: 0 PID: 6230 Comm: syz.2.74 Not tainted 6.13.0-rc1-syzkaller #0
[  273.276173][ T6230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  273.286502][ T6230] Call Trace:
[  273.289976][ T6230]  <TASK>
[  273.293117][ T6230]  dump_stack_lvl+0x216/0x2d0
[  273.298129][ T6230]  dump_stack+0x1e/0x24
[  273.302592][ T6230]  should_fail_ex+0x748/0x7f0
[  273.307589][ T6230]  should_fail+0x2a/0x40
[  273.312150][ T6230]  should_fail_usercopy+0x2e/0x40
[  273.317608][ T6230]  _copy_to_user+0x34/0x120
[  273.322506][ T6230]  simple_read_from_buffer+0x199/0x340
[  273.328312][ T6230]  proc_fail_nth_read+0x1e5/0x2c0
[  273.333659][ T6230]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  273.339511][ T6230]  vfs_read+0x29d/0xf50
[  273.344013][ T6230]  ? kmsan_get_metadata+0x13e/0x1c0
[  273.349508][ T6230]  ? kmsan_internal_set_shadow_origin+0x69/0x100
[  273.356206][ T6230]  ksys_read+0x240/0x4b0
[  273.360767][ T6230]  ? kmsan_get_metadata+0x13e/0x1c0
[  273.366273][ T6230]  __x64_sys_read+0x93/0xe0
[  273.371111][ T6230]  x64_sys_call+0x314c/0x3c30
[  273.376143][ T6230]  do_syscall_64+0xcd/0x1e0
[  273.380974][ T6230]  ? clear_bhb_loop+0x25/0x80
[  273.385980][ T6230]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  273.392209][ T6230] RIP: 0033:0x7fed65f7f25c
[  273.396876][ T6230] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 8e 02 00 48
[  273.416806][ T6230] RSP: 002b:00007fed66e04050 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  273.425563][ T6230] RAX: ffffffffffffffda RBX: 00007fed66145fa0 RCX: 00007fed65f7f25c
[  273.433808][ T6230] RDX: 000000000000000f RSI: 00007fed66e040b0 RDI: 0000000000000006
[  273.442036][ T6230] RBP: 00007fed66e040a0 R08: 0000000000000000 R09: 0000000000000000
[  273.450727][ T6230] R10: 0000000020000180 R11: 0000000000000246 R12: 0000000000000001
[  273.459412][ T6230] R13: 0000000000000000 R14: 00007fed66145fa0 R15: 00007ffcea1d2b98
[  273.467676][ T6230]  </TASK>
[  273.514320][ T6221] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.72: bg 0: block 345: padding at end of block bitmap is not set
[  273.734569][ T6221] fs-verity (loop1, inode 13): Error -117 writing Merkle tree block 0
[  273.743366][ T6221] fs-verity (loop1, inode 13): Error -117 building Merkle tree
[  274.046328][ T6234] loop3: detected capacity change from 0 to 2048
[  274.406677][ T6234] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  274.427018][ T6234] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  274.532161][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  274.642429][ T5849] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  274.837793][ T6247] loop4: detected capacity change from 0 to 1024
[  274.848066][ T6247] EXT4-fs: Ignoring removed nomblk_io_submit option
[  274.892195][ T6247] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  274.993038][ T5849] usb 1-1: config 0 has an invalid interface number: 100 but max is 0
[  275.001924][ T5849] usb 1-1: config 0 has 2 interfaces, different from the descriptor's value: 1
[  275.011476][ T5849] usb 1-1: config 0 has no interface number 1
[  275.018065][ T5849] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  275.034955][ T5849] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  275.048338][ T5849] usb 1-1: too many endpoints for config 0 interface 100 altsetting 7: 237, using maximum allowed: 30
[  275.059860][ T5849] usb 1-1: config 0 interface 100 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 237
[  275.073740][ T5849] usb 1-1: config 0 interface 100 has no altsetting 0
[  275.204431][ T6247] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  275.320136][ T5849] usb 1-1: New USB device found, idVendor=04bb, idProduct=0901, bcdDevice=55.ba
[  275.329818][ T5849] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  275.344826][ T5849] usb 1-1: Product: syz
[  275.349261][ T5849] usb 1-1: Manufacturer: syz
[  275.356357][ T5849] usb 1-1: SerialNumber: syz
[  275.366120][ T5849] usb 1-1: config 0 descriptor??
[  275.630458][ T6247] EXT4-fs error (device loop4): ext4_ext_check_inode:524: inode #11: comm syz.4.80: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 32512(32512)
[  275.733662][ T6247] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.80: couldn't read orphan inode 11 (err -117)
[  275.785504][ T5849] kaweth 1-1:0.0: Firmware present in device.
[  275.937403][ T6247] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  276.105357][ T5804] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  276.119160][ T5849] kaweth 1-1:0.0: Error reading configuration (-71), no net device created
[  276.130343][ T5849] kaweth 1-1:0.0: probe with driver kaweth failed with error -5
[  276.200047][ T6255] netlink: 20 bytes leftover after parsing attributes in process `syz.4.80'.
[  276.225623][ T5849] kaweth 1-1:0.100: Firmware present in device.
[  276.286487][ T5849] kaweth 1-1:0.100: Error reading configuration (-71), no net device created
[  276.297053][ T5849] kaweth 1-1:0.100: probe with driver kaweth failed with error -5
[  276.495424][ T5849] usb 1-1: USB disconnect, device number 6
[  276.531902][ T6247] overlayfs: workdir and upperdir must reside under the same mount
[  276.897466][ T6262] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[  276.909420][ T6262] xt_CHECKSUM: unsupported CHECKSUM operation 68
[  277.312962][ T6258] loop1: detected capacity change from 0 to 32768
[  277.356938][ T6258] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.83 (6258)
[  277.403269][ T6255] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:483: comm syz.4.80: Invalid block bitmap block 0 in block_group 0
[  277.453002][ T6255] Quota error (device loop4): write_blk: dquota write failed
[  277.461217][ T6255] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  277.472178][ T6255] EXT4-fs error (device loop4): ext4_acquire_dquot:6938: comm syz.4.80: Failed to acquire dquot type 0
[  277.609271][ T6258] BTRFS info (device loop1): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  277.619934][ T6258] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[  277.630219][ T6258] BTRFS info (device loop1): using free-space-tree
[  277.910135][ T5800] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  278.182861][ T6258] BTRFS info (device loop1): rebuilding free space tree
[  278.480141][   T29] audit: type=1800 audit(1733118549.524:4): pid=6258 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.83" name="file1" dev="loop1" ino=260 res=0 errno=0
[  278.863147][ T5844] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  278.885850][ T5788] BTRFS info (device loop1): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  278.990448][ T6297] loop4: detected capacity change from 0 to 2048
[  279.095896][ T5844] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  279.105500][ T5844] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  279.152856][ T5844] usb 4-1: config 0 descriptor??
[  279.176262][ T5844] cp210x 4-1:0.0: cp210x converter detected
[  279.666059][ T6297] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  279.679455][ T6297] ext4 filesystem being mounted at /13/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  279.885333][ T5844] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32
[  280.038779][   T29] audit: type=1800 audit(1733118551.134:5): pid=6297 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.89" name="file0" dev="loop4" ino=13 res=0 errno=0
[  280.358597][ T5844] usb 4-1: cp210x converter now attached to ttyUSB0
[  280.443354][ T6315] loop0: detected capacity change from 0 to 24
[  280.485235][ T6308] loop1: detected capacity change from 0 to 2048
[  280.532040][ T1283] ieee802154 phy0 wpan0: encryption failed: -22
[  280.539526][ T1283] ieee802154 phy1 wpan1: encryption failed: -22
[  280.641896][ T5800] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  280.661727][ T6308] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  280.674988][ T6308] ext4 filesystem being mounted at /15/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  280.774386][   T10] usb 4-1: USB disconnect, device number 3
[  280.800116][   T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  280.875804][   T10] cp210x 4-1:0.0: device disconnected
[  281.205376][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  281.871650][ T6316] loop2: detected capacity change from 0 to 4096
[  282.129049][ T6333] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  283.070882][ T6343] loop3: detected capacity change from 0 to 1024
[  283.411682][ T6347] loop0: detected capacity change from 0 to 2048
[  283.567279][ T6347] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  283.580250][ T6347] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  283.666989][ T6355] loop1: detected capacity change from 0 to 128
[  283.725746][ T6355] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  283.759287][ T6355] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  283.859508][ T6349] loop4: detected capacity change from 0 to 2048
[  284.446420][ T5788] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  284.477037][ T6349] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  284.490247][ T6349] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  284.582074][ T5793] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  284.724180][   T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  284.918552][   T10] usb 4-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05
[  284.928202][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  284.998089][   T10] usb 4-1: config 0 descriptor??
[  285.039050][   T10] ums-usbat 4-1:0.0: USB Mass Storage device detected
[  285.128589][   T10] ums-usbat 4-1:0.0: Quirks match for vid 0781 pid 0005: 1
[  285.137332][   T10] ums-usbat 4-1:0.0: This device (0781,0005,0005 S 06 P 00) has an unneeded SubClass entry in unusual_devs.h (kernel 6.13.0-rc1-syzkaller)
[  285.137332][   T10]    Please send a copy of this message to <linux-usb@vger.kernel.org> and <usb-storage@lists.one-eyed-alien.net>
[  285.283039][   T10] usb 4-1: USB disconnect, device number 4
[  285.345273][ T5800] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  285.862016][ T6379] loop4: detected capacity change from 0 to 128
[  285.926936][ T6379] EXT4-fs: Ignoring removed nobh option
[  286.056172][ T6379] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  286.110130][ T6377] loop1: detected capacity change from 0 to 2048
[  286.189245][ T6377] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  286.202262][ T6377] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  286.202465][ T6379] ext4 filesystem being mounted at /17/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  286.532563][ T6377] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.116: bg 0: block 345: padding at end of block bitmap is not set
[  286.667764][ T6391] ieee802154 phy0 wpan0: encryption failed: -22
[  286.696364][ T6377] fs-verity (loop1, inode 13): Error -117 writing Merkle tree block 0
[  286.712858][ T6377] fs-verity (loop1, inode 13): Error -117 building Merkle tree
[  286.727663][ T6379] fscrypt (loop4, inode 12): Unsupported log2_data_unit_size in encryption policy: 227
[  287.074352][ T3059] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  287.147447][ T6383] loop2: detected capacity change from 0 to 2048
[  287.295484][ T3059] usb 5-1: Using ep0 maxpacket: 16
[  287.385088][ T3059] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  287.396342][ T3059] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  287.652305][ T3059] usb 5-1: New USB device found, idVendor=1286, idProduct=2046, bcdDevice=b4.5b
[  287.662051][ T3059] usb 5-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3
[  287.670734][ T3059] usb 5-1: Product: syz
[  287.675298][ T3059] usb 5-1: Manufacturer: syz
[  287.680151][ T3059] usb 5-1: SerialNumber: syz
[  287.769583][ T3059] usb 5-1: config 0 descriptor??
[  287.786086][ T6383] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  287.799115][ T6383] ext4 filesystem being mounted at /31/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  287.889235][ T3059] usb 5-1: NFC: intf ffff88804e55cc00 id ffffffff91b2ec00
[  287.991998][ T3059] usb 5-1: USB disconnect, device number 4
[  288.275894][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  288.330032][ T6399] loop0: detected capacity change from 0 to 512
[  288.425943][ T6399] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  288.930888][ T6399] EXT4-fs (loop0): 1 truncate cleaned up
[  288.949197][ T6399] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  289.042016][ T5800] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  290.219627][ T6409] loop1: detected capacity change from 0 to 2048
[  290.370402][ T5793] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  290.477045][ T6411] loop4: detected capacity change from 0 to 128
[  290.489153][ T6225] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm ext4lazyinit: bg 0: block 345: padding at end of block bitmap is not set
[  290.623621][ T6411] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  290.638924][ T6409] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  290.651948][ T6409] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  290.744847][ T6411] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  291.006778][ T5789] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  291.106653][ T6422] loop0: detected capacity change from 0 to 256
[  291.163631][ T6422] exFAT-fs (loop0): error, invalid access to FAT (entry 0x00000005) bogus content (0x00000001)
[  291.174858][ T6422] exFAT-fs (loop0): Filesystem has been set read-only
[  291.181856][ T6422] exFAT-fs (loop0): failed to load upcase table
[  291.188550][ T6422] exFAT-fs (loop0): failed to recognize exfat type
[  291.321684][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  291.563336][ T5800] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  291.652206][ T6422] Zero length message leads to an empty skb
[  292.100734][ T6429] loop3: detected capacity change from 0 to 2048
[  292.357521][ T6429] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  292.370369][ T6429] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  292.607794][ T6429] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.132: bg 0: block 345: padding at end of block bitmap is not set
[  292.689748][ T6429] fs-verity (loop3, inode 13): Error -117 writing Merkle tree block 0
[  292.698796][ T6429] fs-verity (loop3, inode 13): Error -117 building Merkle tree
[  294.468315][ T6429] syz.3.132 (6429) used greatest stack depth: 3968 bytes left
[  294.547998][ T5804] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  294.763708][ T6456] loop1: detected capacity change from 0 to 128
[  294.884877][ T6458] loop0: detected capacity change from 0 to 8
[  294.939249][ T6456] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  294.990909][ T6458] SQUASHFS error: zlib decompression failed, data probably corrupt
[  295.000384][ T6458] SQUASHFS error: Failed to read block 0x9b: -5
[  295.007608][ T6458] SQUASHFS error: Unable to read metadata cache entry [99]
[  295.015208][ T6458] SQUASHFS error: Unable to read inode 0x127
[  295.036361][ T6456] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  295.079810][ T6458] netlink: 40 bytes leftover after parsing attributes in process `syz.0.142'.
[  295.128936][ T6458] netlink: 40 bytes leftover after parsing attributes in process `syz.0.142'.
[  295.146921][ T6452] loop4: detected capacity change from 0 to 2048
[  295.165514][ T6458] tmpfs: Bad value for 'mpol'
[  295.251784][ T6452] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  295.264793][ T6452] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  295.435525][ T6452] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.139: bg 0: block 345: padding at end of block bitmap is not set
[  295.516853][ T5788] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  295.570802][ T6452] fs-verity (loop4, inode 13): Error -117 writing Merkle tree block 0
[  295.571028][ T6452] fs-verity (loop4, inode 13): Error -117 building Merkle tree
[  296.091539][ T6476] loop1: detected capacity change from 0 to 512
[  296.100325][ T5800] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  296.115963][ T6476] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  296.151985][ T6476] EXT4-fs (loop1): 1 truncate cleaned up
[  296.293429][ T6476] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  296.501743][ T6479] loop0: detected capacity change from 0 to 1024
[  297.003839][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  298.696293][    C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[  298.868427][ T6503] syzkaller0: entered promiscuous mode
[  298.874542][ T6503] syzkaller0: entered allmulticast mode
[  299.069290][ T6509] netlink: 40 bytes leftover after parsing attributes in process `syz.0.159'.
[  299.150038][ T6508] netlink: 40 bytes leftover after parsing attributes in process `syz.0.159'.
[  299.175890][ T6509] netlink: 40 bytes leftover after parsing attributes in process `syz.0.159'.
[  299.807689][ T6513] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  300.099768][ T6527] netlink: 72 bytes leftover after parsing attributes in process `syz.1.167'.
[  300.390459][ T6529] xt_cluster: node mask cannot exceed total number of nodes
[  301.054985][ T5798] Bluetooth: hci0: command 0x0401 tx timeout
[  301.080235][ T6545] netlink: 4 bytes leftover after parsing attributes in process `syz.4.173'.
[  301.228287][ T6549] netlink: 40 bytes leftover after parsing attributes in process `syz.3.174'.
[  301.574813][ T6554] netlink: 8 bytes leftover after parsing attributes in process `syz.4.175'.
[  301.680340][ T6554] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  301.910320][ T6554] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  302.088194][ T6554] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  302.198285][ T6554] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  302.503981][ T6554] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  302.530041][ T6554] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  302.555962][ T6554] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  302.583294][ T6554] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  303.512637][ T6570] vxcan1: tx drop: invalid sa for name 0xffffffffffffffff
[  303.996007][ T6578] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  304.198567][ T5844] IPVS: starting estimator thread 0...
[  304.304702][ T6580] IPVS: using max 240 ests per chain, 12000 per kthread
[  304.775664][ T6591] dccp_close: ABORT with 2 bytes unread
[  305.318699][ T6596] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  305.354972][ T6596] batadv_slave_0: entered promiscuous mode
[  305.679780][ T6601] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.195'.
[  306.205741][ T6609] syzkaller1: entered promiscuous mode
[  306.211693][ T6609] syzkaller1: entered allmulticast mode
[  307.637183][ T6624] netlink: 'syz.4.205': attribute type 4 has an invalid length.
[  307.930105][ T6629] IPVS: set_ctl: invalid protocol: 53 127.0.0.1:20000
[  308.996698][ T6644] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5
[  309.554641][ T6656] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  309.730687][ T6658] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  312.739709][ T6708] loop3: detected capacity change from 0 to 512
[  312.850979][ T6708] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  312.888415][ T6708] EXT4-fs (loop3): invalid journal inode
[  312.894772][ T6708] EXT4-fs (loop3): can't get journal size
[  312.985638][ T6708] EXT4-fs (loop3): 1 truncate cleaned up
[  312.993492][ T6708] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  313.046144][ T6717] Bluetooth: MGMT ver 1.23
[  313.509373][ T5804] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  313.560503][ T6724] syz.1.243: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  313.575884][ T6724] CPU: 0 UID: 0 PID: 6724 Comm: syz.1.243 Not tainted 6.13.0-rc1-syzkaller #0
[  313.585042][ T6724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  313.595332][ T6724] Call Trace:
[  313.598791][ T6724]  <TASK>
[  313.601894][ T6724]  dump_stack_lvl+0x216/0x2d0
[  313.606877][ T6724]  dump_stack+0x1e/0x24
[  313.611316][ T6724]  warn_alloc+0x455/0x650
[  313.615932][ T6724]  ? kmsan_get_metadata+0x13e/0x1c0
[  313.621393][ T6724]  ? __vmalloc_node_range_noprof+0xd6/0x26b0
[  313.627678][ T6724]  __vmalloc_node_range_noprof+0x130/0x26b0
[  313.633871][ T6724]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  313.639969][ T6724]  ? kmsan_get_metadata+0x13e/0x1c0
[  313.645436][ T6724]  ? kmsan_get_metadata+0x13e/0x1c0
[  313.650911][ T6724]  ? kmsan_get_metadata+0x13e/0x1c0
[  313.656381][ T6724]  ? __kmalloc_cache_noprof+0x932/0xdf0
[  313.662259][ T6724]  ? kmsan_get_metadata+0x13e/0x1c0
[  313.667740][ T6724]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  313.673819][ T6724]  vmalloc_user_noprof+0x90/0xb0
[  313.679036][ T6724]  ? xskq_create+0x105/0x270
[  313.683929][ T6724]  xskq_create+0x105/0x270
[  313.688648][ T6724]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  313.694742][ T6724]  xsk_init_queue+0x115/0x1f0
[  313.699731][ T6724]  xsk_setsockopt+0x710/0xcc0
[  313.705244][ T6724]  do_sock_setsockopt+0x4bb/0x7d0
[  313.710540][ T6724]  ? __pfx_xsk_setsockopt+0x10/0x10
[  313.716043][ T6724]  __x64_sys_setsockopt+0x33d/0x4f0
[  313.721528][ T6724]  x64_sys_call+0x30b9/0x3c30
[  313.726516][ T6724]  do_syscall_64+0xcd/0x1e0
[  313.731333][ T6724]  ? clear_bhb_loop+0x25/0x80
[  313.736312][ T6724]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  313.742525][ T6724] RIP: 0033:0x7fa4a1180849
[  313.747181][ T6724] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  313.767073][ T6724] RSP: 002b:00007fa4a1f92058 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  313.775784][ T6724] RAX: ffffffffffffffda RBX: 00007fa4a1345fa0 RCX: 00007fa4a1180849
[  313.783997][ T6724] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003
[  313.792189][ T6724] RBP: 00007fa4a11f3986 R08: 0000000000000004 R09: 0000000000000000
[  313.800383][ T6724] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000
[  313.808578][ T6724] R13: 0000000000000000 R14: 00007fa4a1345fa0 R15: 00007fff742557c8
[  313.816808][ T6724]  </TASK>
[  313.822281][ T6724] Mem-Info:
[  313.826056][ T6724] active_anon:6924 inactive_anon:0 isolated_anon:0
[  313.826056][ T6724]  active_file:11159 inactive_file:38232 isolated_file:0
[  313.826056][ T6724]  unevictable:768 dirty:234 writeback:0
[  313.826056][ T6724]  slab_reclaimable:4829 slab_unreclaimable:23635
[  313.826056][ T6724]  mapped:28922 shmem:4857 pagetables:638
[  313.826056][ T6724]  sec_pagetables:0 bounce:0
[  313.826056][ T6724]  kernel_misc_reclaimable:0
[  313.826056][ T6724]  free:381950 free_pcp:6321 free_cma:0
[  313.873085][ T6724] Node 0 active_anon:27696kB inactive_anon:0kB active_file:44636kB inactive_file:152856kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:115688kB dirty:932kB writeback:0kB shmem:17892kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:5344kB pagetables:2552kB sec_pagetables:0kB all_unreclaimable? no
[  313.906376][ T6724] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:0kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  313.938238][ T6724] Node 0 DMA free:4096kB boost:0kB min:160kB low:200kB high:240kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:4096kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  313.966095][ T6724] lowmem_reserve[]: 0 891 1204 0 0
[  313.971819][ T6724] Node 0 DMA32 free:550436kB boost:0kB min:36084kB low:45104kB high:54124kB reserved_highatomic:0KB active_anon:12460kB inactive_anon:0kB active_file:36972kB inactive_file:72596kB unevictable:0kB writepending:360kB present:3129332kB managed:951424kB mlocked:0kB bounce:0kB free_pcp:17912kB local_pcp:14604kB free_cma:0kB
[  314.002721][ T6724] lowmem_reserve[]: 0 0 312 0 0
[  314.008303][ T6724] Node 0 Normal free:19196kB boost:0kB min:12672kB low:15840kB high:19008kB reserved_highatomic:0KB active_anon:15296kB inactive_anon:0kB active_file:7664kB inactive_file:80260kB unevictable:1536kB writepending:504kB present:1048580kB managed:320496kB mlocked:0kB bounce:0kB free_pcp:1184kB local_pcp:824kB free_cma:0kB
[  314.039949][ T6724] lowmem_reserve[]: 0 0 0 0 0
[  314.045692][ T6724] Node 1 Normal free:954016kB boost:0kB min:41188kB low:51484kB high:61780kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:4kB present:4194300kB managed:1041668kB mlocked:0kB bounce:0kB free_pcp:6020kB local_pcp:1620kB free_cma:0kB
[  314.075611][ T6724] lowmem_reserve[]: 0 0 0 0 0
[  314.081400][ T6724] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 1*4096kB (M) = 4096kB
[  314.095400][ T6724] Node 0 DMA32: 527*4kB (UME) 339*8kB (UME) 269*16kB (UME) 266*32kB (UME) 157*64kB (UME) 66*128kB (UM) 21*256kB (UM) 10*512kB (UME) 2*1024kB (UM) 1*2048kB (M) 122*4096kB (UM) = 550436kB
[  314.116006][ T6724] Node 0 Normal: 162*4kB (UM) 86*8kB (UME) 58*16kB (UME) 37*32kB (UME) 20*64kB (UM) 10*128kB (UM) 5*256kB (UE) 3*512kB (UME) 2*1024kB (ME) 0*2048kB 2*4096kB (M) = 19064kB
[  314.135157][ T6724] Node 1 Normal: 6*4kB (UM) 13*8kB (UME) 16*16kB (UME) 11*32kB (UME) 17*64kB (UME) 7*128kB (UME) 4*256kB (UM) 6*512kB (UM) 5*1024kB (UME) 4*2048kB (UM) 228*4096kB (UM) = 954016kB
[  314.156227][ T6724] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  314.166648][ T6724] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  314.176478][ T6724] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  314.186446][ T6724] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  314.196146][ T6724] 54147 total pagecache pages
[  314.201019][ T6724] 0 pages in swap cache
[  314.205463][ T6724] Free swap  = 124984kB
[  314.209801][ T6724] Total swap = 124996kB
[  314.214252][ T6724] 2097051 pages RAM
[  314.218256][ T6724] 0 pages HighMem/MovableOnly
[  314.223121][ T6724] 1517630 pages reserved
[  314.227716][ T6724] 0 pages cma reserved
[  314.925492][ T6743] bridge0: port 3(gretap0) entered blocking state
[  314.932684][ T6743] bridge0: port 3(gretap0) entered disabled state
[  314.939986][ T6743] gretap0: entered allmulticast mode
[  314.950623][ T6743] gretap0: entered promiscuous mode
[  314.958368][ T6743] bridge0: port 3(gretap0) entered blocking state
[  314.966049][ T6743] bridge0: port 3(gretap0) entered forwarding state
[  314.982986][ T6743] gretap0: left allmulticast mode
[  314.988498][ T6743] gretap0: left promiscuous mode
[  314.994675][ T6743] bridge0: port 3(gretap0) entered disabled state
[  317.990836][ T6762] netlink: 'syz.4.252': attribute type 10 has an invalid length.
[  318.037675][ T6762] 8021q: adding VLAN 0 to HW filter on device team0
[  318.052648][ T6762] bond0: (slave team0): Enslaving as an active interface with an up link
[  318.220994][ T6766] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6
[  318.691184][ T6764] infiniband syz2: set active
[  318.696295][ T6764] infiniband syz2: added bond0
[  318.801538][ T6771] netlink: 'syz.1.254': attribute type 29 has an invalid length.
[  318.817898][ T6771] netlink: 'syz.1.254': attribute type 29 has an invalid length.
[  318.842355][ T6764] RDS/IB: syz2: added
[  318.843153][ T6771] netlink: 'syz.1.254': attribute type 29 has an invalid length.
[  318.846667][ T6764] smc: adding ib device syz2 with port count 1
[  318.862758][ T6764] smc:    ib device syz2 port 1 has pnetid 
[  319.309456][ T6775] netlink: 'syz.1.254': attribute type 29 has an invalid length.
[  321.142740][ T6781] process 'syz.1.258' launched '/dev/fd/3' with NULL argv: empty string added
[  323.674912][    T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!!
[  324.381835][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  324.996366][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  325.374355][ T5796] Bluetooth: hci4: command 0x0405 tx timeout
[  325.917863][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  326.225014][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  326.634683][    T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!!
[  326.839410][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  327.044315][    T0] NOHZ tick-stop error: local softirq work is pending, handler #246!!!
[  327.454247][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[  327.788298][ T6840] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7
[  328.381089][ T6857] loop4: detected capacity change from 0 to 512
[  328.410883][ T6857] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  328.454372][ T6859] loop0: detected capacity change from 0 to 512
[  328.468056][ T6857] EXT4-fs (loop4): invalid journal inode
[  328.475421][ T6857] EXT4-fs (loop4): can't get journal size
[  328.508942][ T6859] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[  328.539460][ T6857] EXT4-fs (loop4): 1 truncate cleaned up
[  328.544245][ T6859] EXT4-fs (loop0): invalid journal inode
[  328.547523][ T6857] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  328.551243][ T6859] EXT4-fs (loop0): can't get journal size
[  328.618088][ T6859] EXT4-fs (loop0): 1 truncate cleaned up
[  328.625998][ T6859] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  328.827931][ T3059] IPVS: starting estimator thread 0...
[  329.027148][ T5793] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  329.064861][ T6867] IPVS: using max 240 ests per chain, 12000 per kthread
[  329.156115][ T5800] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  330.604415][ T6892] loop0: detected capacity change from 0 to 512
[  330.669835][ T6892] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[  330.715695][ T6892] EXT4-fs (loop0): invalid journal inode
[  330.721914][ T6892] EXT4-fs (loop0): can't get journal size
[  330.864624][ T6892] EXT4-fs (loop0): 1 truncate cleaned up
[  330.872197][ T6892] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  331.474494][ T5793] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  332.452527][ T6887] loop3: detected capacity change from 0 to 32768
[  332.530678][ T6887] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.297 (6887)
[  332.654524][ T6887] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  332.665428][ T6887] BTRFS info (device loop3): using sha256 (sha256-generic) checksum algorithm
[  332.678029][ T6887] BTRFS info (device loop3): using free-space-tree
[  332.796660][ T6914] loop0: detected capacity change from 0 to 512
[  332.946643][ T6914] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[  332.965201][ T6887] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR
[  332.966225][ T6887] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR
[  332.976836][ T6887] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR
[  332.987840][ T6887] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR
[  332.998443][ T6887] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR
[  333.008307][ T6887] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR
[  333.018770][ T6887] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR
[  333.029691][ T6887] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR
[  333.040374][ T6887] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR
[  333.123596][ T6887] BTRFS error (device loop3): open_ctree failed
[  333.184169][ T6914] EXT4-fs (loop0): invalid journal inode
[  333.196914][ T6914] EXT4-fs (loop0): can't get journal size
[  333.229484][ T6914] EXT4-fs (loop0): 1 truncate cleaned up
[  333.237187][ T6914] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  333.459970][ T5793] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  333.620356][ T6935] loop1: detected capacity change from 0 to 512
[  333.639708][ T6935] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  333.681120][ T6935] EXT4-fs (loop1): invalid journal inode
[  333.688024][ T6935] EXT4-fs (loop1): can't get journal size
[  333.708578][ T6935] EXT4-fs (loop1): 1 truncate cleaned up
[  333.716495][ T6935] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  334.094594][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  336.104978][ T6943] loop3: detected capacity change from 0 to 32768
[  336.114694][ T6943] XFS: attr2 mount option is deprecated.
[  336.120664][ T6943] XFS: ikeep mount option is deprecated.
[  336.205251][ T6943] XFS (loop3): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  336.338256][ T6981] loop1: detected capacity change from 0 to 512
[  336.384071][ T6981] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  336.425302][ T6981] EXT4-fs (loop1): invalid journal inode
[  336.431338][ T6981] EXT4-fs (loop1): can't get journal size
[  336.457716][ T6981] EXT4-fs (loop1): 1 truncate cleaned up
[  336.467017][ T6981] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  336.500423][ T6943] XFS (loop3): Ending clean mount
[  336.589512][ T6943] XFS (loop3): Quotacheck needed: Please wait.
[  336.905470][ T5788] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  337.019009][ T6943] XFS (loop3): Quotacheck: Done.
[  337.944460][ T5804] XFS (loop3): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  337.985424][ T7008] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8
[  341.968837][ T1283] ieee802154 phy0 wpan0: encryption failed: -22
[  341.975816][ T1283] ieee802154 phy1 wpan1: encryption failed: -22
[  342.171432][ T7028] loop2: detected capacity change from 0 to 32768
[  342.237002][ T7028] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.342 (7028)
[  342.392252][ T7028] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  342.407220][ T7028] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  342.422453][ T7028] BTRFS info (device loop2): using free-space-tree
[  342.551796][ T3059] IPVS: starting estimator thread 0...
[  342.558347][ T7054] netlink: 36 bytes leftover after parsing attributes in process `syz.1.353'.
[  342.571810][ T7054] netlink: 16 bytes leftover after parsing attributes in process `syz.1.353'.
[  342.585666][ T7054] netlink: 36 bytes leftover after parsing attributes in process `syz.1.353'.
[  342.598834][ T7054] netlink: 36 bytes leftover after parsing attributes in process `syz.1.353'.
[  342.664352][ T7065] IPVS: using max 240 ests per chain, 12000 per kthread
[  342.970539][ T7073] loop1: detected capacity change from 0 to 128
[  343.115723][ T7076] loop3: detected capacity change from 0 to 1024
[  343.145734][ T7076] EXT4-fs: Ignoring removed nomblk_io_submit option
[  343.210526][ T7076] EXT4-fs (loop3): couldn't mount as ext3 due to feature incompatibilities
[  343.385121][ T5798] Bluetooth: hci4: command 0x0405 tx timeout
[  343.528546][ T5789] BTRFS info (device loop2): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  345.892033][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  346.221056][ T7081] sctp: failed to load transform for md5: -2
[  349.552353][ T5791] Bluetooth: hci1: command 0x0406 tx timeout
[  349.566173][ T5791] Bluetooth: hci0: command 0x0401 tx timeout
[  349.585037][ T5796] Bluetooth: hci2: command 0x0406 tx timeout
[  349.591867][ T5796] Bluetooth: hci3: command 0x0406 tx timeout
[  351.200740][ T7111] netlink: 36 bytes leftover after parsing attributes in process `syz.3.366'.
[  351.217820][ T7111] netlink: 16 bytes leftover after parsing attributes in process `syz.3.366'.
[  351.229706][ T7111] netlink: 36 bytes leftover after parsing attributes in process `syz.3.366'.
[  351.239014][ T7111] netlink: 36 bytes leftover after parsing attributes in process `syz.3.366'.
[  351.310927][ T7113] netlink: 4 bytes leftover after parsing attributes in process `syz.2.367'.
[  351.690532][ T7113] hsr_slave_1 (unregistering): left promiscuous mode
[  352.511336][ T7118] loop1: detected capacity change from 0 to 40427
[  352.548520][ T7118] F2FS-fs (loop1): invalid crc value
[  352.590505][ T7118] F2FS-fs (loop1): Found nat_bits in checkpoint
[  352.926125][ T7118] F2FS-fs (loop1): Start checkpoint disabled!
[  352.989512][ T7118] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  354.042129][ T1850] kworker/u8:7: attempt to access beyond end of device
[  354.042129][ T1850] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  354.058227][ T1850] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  356.509619][ T7145] sctp: failed to load transform for md5: -2
[  362.309404][ T7167] warning: `syz.3.386' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  362.473746][    C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[  363.848022][ T7187] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input9
[  363.991691][ T7189] =====================================================
[  363.999180][ T7189] BUG: KMSAN: uninit-value in hsr_forward_skb+0x9ee/0x3b10
[  364.006769][ T7189]  hsr_forward_skb+0x9ee/0x3b10
[  364.011873][ T7189]  hsr_dev_xmit+0x2f0/0x350
[  364.016696][ T7189]  dev_hard_start_xmit+0x247/0xa20
[  364.022026][ T7189]  __dev_queue_xmit+0x366a/0x57d0
[  364.027334][ T7189]  packet_xmit+0x9c/0x6c0
[  364.031828][ T7189]  packet_sendmsg+0x91ae/0xa6f0
[  364.036937][ T7189]  __sock_sendmsg+0x30f/0x380
[  364.041821][ T7189]  __sys_sendto+0x594/0x750
[  364.046620][ T7189]  __x64_sys_sendto+0x125/0x1d0
[  364.051647][ T7189]  x64_sys_call+0x346a/0x3c30
[  364.056646][ T7189]  do_syscall_64+0xcd/0x1e0
[  364.061357][ T7189]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  364.067519][ T7189] 
[  364.069921][ T7189] Uninit was created at:
[  364.074509][ T7189]  kmem_cache_alloc_node_noprof+0x907/0xe00
[  364.080645][ T7189]  kmalloc_reserve+0x13d/0x4a0
[  364.085640][ T7189]  __alloc_skb+0x363/0x7b0
[  364.090222][ T7189]  alloc_skb_with_frags+0xc8/0xd00
[  364.095547][ T7189]  sock_alloc_send_pskb+0xa81/0xbf0
[  364.100922][ T7189]  packet_sendmsg+0x74c6/0xa6f0
[  364.106012][ T7189]  __sock_sendmsg+0x30f/0x380
[  364.110874][ T7189]  __sys_sendto+0x594/0x750
[  364.115594][ T7189]  __x64_sys_sendto+0x125/0x1d0
[  364.120605][ T7189]  x64_sys_call+0x346a/0x3c30
[  364.125560][ T7189]  do_syscall_64+0xcd/0x1e0
[  364.130451][ T7189]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  364.136652][ T7189] 
[  364.139079][ T7189] CPU: 1 UID: 0 PID: 7189 Comm: syz.3.395 Not tainted 6.13.0-rc1-syzkaller #0
[  364.148219][ T7189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  364.158539][ T7189] =====================================================
[  364.165667][ T7189] Disabling lock debugging due to kernel taint
[  364.171937][ T7189] Kernel panic - not syncing: kmsan.panic set ...
[  364.178487][ T7189] CPU: 1 UID: 0 PID: 7189 Comm: syz.3.395 Tainted: G    B              6.13.0-rc1-syzkaller #0
[  364.189008][ T7189] Tainted: [B]=BAD_PAGE
[  364.193258][ T7189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  364.203447][ T7189] Call Trace:
[  364.206837][ T7189]  <TASK>
[  364.209869][ T7189]  dump_stack_lvl+0x216/0x2d0
[  364.214750][ T7189]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  364.220742][ T7189]  dump_stack+0x1e/0x24
[  364.225086][ T7189]  panic+0x4e2/0xcf0
[  364.229163][ T7189]  ? kmsan_get_metadata+0xd1/0x1c0
[  364.234452][ T7189]  kmsan_report+0x2c7/0x2d0
[  364.239135][ T7189]  ? kmsan_get_metadata+0x13e/0x1c0
[  364.244510][ T7189]  ? filter_irq_stacks+0x60/0x1a0
[  364.249720][ T7189]  ? __msan_warning+0x95/0x120
[  364.254693][ T7189]  ? hsr_forward_skb+0x9ee/0x3b10
[  364.259933][ T7189]  ? hsr_dev_xmit+0x2f0/0x350
[  364.264799][ T7189]  ? dev_hard_start_xmit+0x247/0xa20
[  364.270251][ T7189]  ? __dev_queue_xmit+0x366a/0x57d0
[  364.275614][ T7189]  ? packet_xmit+0x9c/0x6c0
[  364.280269][ T7189]  ? packet_sendmsg+0x91ae/0xa6f0
[  364.285494][ T7189]  ? __sock_sendmsg+0x30f/0x380
[  364.290545][ T7189]  ? __sys_sendto+0x594/0x750
[  364.295375][ T7189]  ? __x64_sys_sendto+0x125/0x1d0
[  364.300561][ T7189]  ? x64_sys_call+0x346a/0x3c30
[  364.305621][ T7189]  ? do_syscall_64+0xcd/0x1e0
[  364.310510][ T7189]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  364.316783][ T7189]  ? kmsan_internal_set_shadow_origin+0x69/0x100
[  364.323332][ T7189]  ? kmsan_get_metadata+0x13e/0x1c0
[  364.328696][ T7189]  ? kmsan_get_metadata+0x13e/0x1c0
[  364.334063][ T7189]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  364.340046][ T7189]  ? kmsan_get_metadata+0x13e/0x1c0
[  364.345410][ T7189]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  364.351393][ T7189]  ? hsr_get_node+0x7b5/0xd30
[  364.356267][ T7189]  ? kmsan_get_metadata+0x13e/0x1c0
[  364.361630][ T7189]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  364.367610][ T7189]  ? __pfx_hsr_fill_frame_info+0x10/0x10
[  364.373468][ T7189]  __msan_warning+0x95/0x120
[  364.378293][ T7189]  hsr_forward_skb+0x9ee/0x3b10
[  364.383382][ T7189]  hsr_dev_xmit+0x2f0/0x350
[  364.388083][ T7189]  ? __pfx_hsr_dev_xmit+0x10/0x10
[  364.393295][ T7189]  dev_hard_start_xmit+0x247/0xa20
[  364.398592][ T7189]  __dev_queue_xmit+0x366a/0x57d0
[  364.403800][ T7189]  ? __dev_queue_xmit+0x3d6/0x57d0
[  364.409118][ T7189]  packet_xmit+0x9c/0x6c0
[  364.413613][ T7189]  packet_sendmsg+0x91ae/0xa6f0
[  364.418698][ T7189]  ? kmsan_get_metadata+0x13e/0x1c0
[  364.424070][ T7189]  ? kmsan_get_shadow_origin_ptr+0x4d/0xb0
[  364.430055][ T7189]  ? aa_label_sk_perm+0x677/0x7b0
[  364.435266][ T7189]  ? filter_irq_stacks+0x60/0x1a0
[  364.440484][ T7189]  ? kmsan_get_metadata+0x13e/0x1c0
[  364.445903][ T7189]  ? __pfx_packet_sendmsg+0x10/0x10
[  364.451296][ T7189]  ? __pfx_packet_sendmsg+0x10/0x10
[  364.456692][ T7189]  __sock_sendmsg+0x30f/0x380
[  364.461578][ T7189]  __sys_sendto+0x594/0x750
[  364.466250][ T7189]  ? do_futex+0x341/0x4a0
[  364.470740][ T7189]  ? kmsan_get_metadata+0x13e/0x1c0
[  364.476140][ T7189]  __x64_sys_sendto+0x125/0x1d0
[  364.481174][ T7189]  x64_sys_call+0x346a/0x3c30
[  364.486064][ T7189]  do_syscall_64+0xcd/0x1e0
[  364.490784][ T7189]  ? clear_bhb_loop+0x25/0x80
[  364.495659][ T7189]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  364.501767][ T7189] RIP: 0033:0x7f416af80849
[  364.506322][ T7189] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  364.526119][ T7189] RSP: 002b:00007f416bcff058 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  364.534712][ T7189] RAX: ffffffffffffffda RBX: 00007f416b145fa0 RCX: 00007f416af80849
[  364.542843][ T7189] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[  364.550953][ T7189] RBP: 00007f416aff3986 R08: 0000000020000540 R09: 0000000000000014
[  364.559064][ T7189] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000
[  364.567167][ T7189] R13: 0000000000000000 R14: 00007f416b145fa0 R15: 00007ffc7bdd2d58
[  364.575300][ T7189]  </TASK>
[  364.578698][ T7189] Kernel Offset: disabled
[  364.583085][ T7189] Rebooting in 86400 seconds..