last executing test programs:

11.934938363s ago: executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0)
sendmsg$NL80211_CMD_SET_POWER_SAVE(r0, &(0x7f0000000340)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)={0x14, r1, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20000c80)
getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000040), &(0x7f0000000080)=0x4)
r2 = socket$kcm(0x10, 0x2, 0x0)
ioctl$sock_proto_private(r2, 0x89ea, &(0x7f0000000040))
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x17, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0xa0}, {0x4}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c00f0ffffff180e000a001400000002801687121f", 0x2e}], 0x1}, 0x0)
r4 = socket(0x1e, 0x4, 0x0)
connect$tipc(r4, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0)
sendmmsg$unix(r4, &(0x7f0000004400), 0x400000000000203, 0x0)

11.267821386s ago: executing program 1:
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)
socket$nl_netfilter(0x10, 0x3, 0xc)
recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0)
r2 = openat$cgroup_ro(r0, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
sendfile(r1, r2, 0x0, 0x7ffff000)

11.019980175s ago: executing program 1:
preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000001600), 0x0, 0x559e, &(0x7f0000005680)="$eJzs3X9sVeX9B/BzWwoN+C39jhUYfxAgBoMkyJYtjqB4MQa24eKlgsKcCEQlBivYRDcYqUWSZcaghU4EF5GQaDJjscM/FMywy7CMZfzY5hZjs4JSaZZsAzVrHDG69N77XO49l9tembNOXy/SnvPcz3me+9yT88d9X/qcGwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAURUcSc9+d0f3i0ZE1X77/Hz+e+OjGn4zfvX/roVvu23T/gjMjbto5a1nf+mlN8zdsbDjS/PS+ObdGUSLdL5Htf9u136q/88bbvlsdBly+MLOtrS31lJmuJzON4QUP9vcr/FkRRVFVbIDK7PbV7E5FwQC53cbiAQf0Tuui6O7J8ya1dT01bklyYU/xS6df9VBPYKhkr6ue89dSMv27InZErp136SUKLtFM//gF96m8CADgY5mZSm9yb0ezb3Fz7eZ4PdZOxtotsXZ4h9CS37gYmXGHl5rnpHh9iOaZzESFESXnGatnz3+unYr3j7VjUeNjzLPw0GykqS41z7Wx+lDNEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCzZOzxo2tWtD2y575fdtQceff9OVc+8KWOw22LT4y8eunKHWum/HTWsr7105rmb9jYcKT56X1zbo2i2nS/RKZ74kTL5b9NjZ3fvXfcG427n6vpq8yOG7bD8g6OXg87s0ZH0cq8Sk8Y9q81UZQqLKSb0Y7iwl3pnW+HAgAAAJ8nX0n/rsi1M3GwqqCdSKfJRPpfkAmL77Quiu6ePG9SW9dT45YkF/Zc/HipEuMlLzherl17/ieRF4xD/I2Pd74eDm0sGmdg8RHjef7SMWPefmty/eSvT5v7xA3PjOru+r8nZ2xJ/bGu5oUrru+tf/a6ovxfO3D+D2dO/gcAAOA/If/HxxnYYPn/jqVTt7z+i2Grft3a8MTB+h1/bv3OMzsXneq54Ud9L09N3v7o1UX5f1LBUxbl/zDjkP8roovL/wAAAPBZ9t/O/8micQY2WP5vONM3+wcHX6vr+PucxXt+9dAVi8+e/tv8U7t3DV9zR8v6uoeuLMr/M8vL/8Pypx0e/F2Y8OrRUTSz/JMKAAAAFAj/737+o4WQ1zOfHMTz+rX/vKp5380ffPMbD97zpzff/s2xA7MnrdteN/PgyzfVf1j5ve3dRfk/WV7+r/p0Xi4AAABQhuePrpw773jPucfPvtB18vDu3pMznjyzrqnvdOslLatXbTr2WlH+T5WX/0cMzcsBAAAALuDeO59bsfnVl/oe2H/X2Ck9FVc1XpK4ZduOqU0TPuq8tPfy7VuL8v/y8vL/yOw2u/Ih06kz/BVC6+goqu7fWZspHIparskVAAAAgE9IyOlbP1ixbOzOsb3jj59+rObQG4dn/2Vt55yN13RXdW/uXNZ4WdH9AkJiL3X//3Cng7D+v+D+f0Xr//MKmbv+zXZjAAAAAL6Iitfzh9vjZ765oNT375e7/n9J3cQTiba33lv11XMHzo1ZsP/7129aV9/be8+El37/wz9M/6i6KP83l5f/K/O3n+T3/wEAAMBF+F/7/r+lReMMbLD7/zdV9DWsWrd3+uota7csTCw7UH3qwdV731+w5l9Tb36+qea6A0X5v6W8/B+2o/JfXkc4P5tGR9H4/p3s3QR/Hqa7OlZor8orZE58rMeNoUe20D4ir5C2Ntbja6OjaHL/TnOs8P+h0BIrnK3JFnbFCsdCIXs95Ap7YoWOcKVtq8lON154MRSyCyzawwqKUbklEbEe75Xq0V+4YI+u3JMDAAB8oYTwnM2yVYXNKB5l2xODHTBysAMqBjugcrADhsUOiB9Y6vFoeWEhPH575yMbNjVMSb7y8NzHfvbms40T9j1+WV3v5g9f2XbvxJ3TW6YW5f9d5eX/cCqGZzal1v9HYf1/9nsNc+v/l4dCbazQHgqp+B0DUuE5MmH34fActalsj7PjcwUAAAD4XAufC1QO8TwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/s3evcdJVd0JAj/d9INumqaNE9GMk3TUgGakaWwNw+AoaoxGRZpZddxkNBBoEGmE8FgFURtQZxziZ3ztrJnoCAoiu+qHGFeDwUhcxIw6iWLiA/Cxjq7r+h6VGM2E/XTfOkXVrS67EFDa+X7/6DpVv/O89eg69946FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/xjuPfjlk4YunP0PHzace8nqqqmL/kfH6Mv+cNW3vvjUPy5b9G9h/i9GnLll3kEXHjd/wbR/6Vi++ogzQmjtKleWFC977oqvPtS613HP3jFw48wbb63fUpWpNxMP/Tr/lGfuXBxbfbF/CHeXhVCRDgypSwKVmft1sb5960LYI2wLZEu01SYl0g2HB2pCWBK2BbJVra4JoS4ncMqG+++7vDNxTU0IXwkhVKfbeKY6aaMmHRhUlQRq04HpFUngt1sT2cBPypMA7LD4Zsi+6Fe15mdo6L5ckddf5U7r2KcrPbw+MdFQPN/rR+3iTuWoSj/QukNPW0F17BIFb4+13m294N1WsJ2v8LTlfpHKfEPZui1UHcontk0aP6d9dnykPDQ19SlW0y56np9+e/6E7Un3mtdh7EDDTnkdXvrYiun9lo2+9OrNvxqz4ayaA3a0m0/lbNLc9K5WHTKvuV7zPEajfJ70grdfwbekRl+6Qghbzz17xtfnTDz7iD63PLnu1QcfrNty9pwFvzhz4nmLLj55w7/Pf6lg/t/w0fP/+HKOt+V5uWOrH9Ync/P4SF1MvFmfzM0BAACg1+gNe01Xnv/6X73+/bWtMxed/u23Dj73w71afz3i/gFVB7yxrqn1/I2ff6Vg/t9Y2vH/eMi/Lne0a0MY1ZVYNCCEvbseTwIrY3e+OyCEL3elWvMDR6UCa0PYpytxULaqVIm+sURjKvByfSYwKhVYHwOtqcDyGLgiFbg4BlalAhNiYG0qcHQMhCn54/hqfWYcJQdqYmBcshFXxbMQ3qmPraW21aZsVQAAADtJZnZYmX8351yHHc0Qp5eranrKEM/ALpqhOlVDegabnVYVraGipxrKe6ohO+6Ojx5+Qc1lPdVccBpGWX6GG9f85X2LXjzsC2P3mvj5xUMvmPKz8eGst++uerx5yYtv7XvEzesK5v/NHz3/r+6mI2UFx/9DGNv1N+Yuz0Tas/FxrXkZAAAAgB1w0R//xR61Lw85oGHT+2X3zl/7xKMrfrl5j1NOf3/c8a//8PCaxnsL5v+jSjv/P+4T6ZOTOTwSd0NMHRBCc34gqXZkYSA56t0vEwAAAIDeIHs8PnssfErmNjlFOz2fLszfup3544H/Ud3m//09/7P2jq3/+mLZBd89d0TNgKX/9GrHhBNOPvqW47/1zj4VB/yyvGD+31ra+f+1+bdJJ9bHXlw9IIS+OYEHYy87A10aY+D5I/MDmfGvjxtgcawqc2JCtqrFscS4GGhOBZYUK/FotsTe+YHMk5VtfFF2HFMyJXICAAAA8ImLuwPicfl4/n/LGSNO++vvzfrbha88eN7qCy75q+Ed80eedP/THzbMvXJp2PTmEQXz/3Hbd/5/1zy44PT+9n4hDK0IoU/6hwGP1CYLA8ZAXVkmcW9tUlefdFULa0MY2TmwdFUvZNb/r0ivMfh4TVJVDOy93y1vD+pMLKsJYWhu4IlvLz2sMzEnFcg2flpNCF/qHG268bv6Jo1Xphu/tm8IX8wJZKua0DeEzsaq0lX9r+rMdQzSVa2qDmHPnEC2quHVIcwNAPRW8X/pxNwHZ82dN3V8e3vbzF2YiDvxa8KkKe1tTROmt0+sLtKniak+561jtKBwTKVe+mZTZo2ixSsnV5aSzv5QsDm3rcyO/IIzBzP345ehyq5xHlKZd7clPeQD9y9sIuR8lSo25PJdPOTa3Eq2PYkF9cf8VaFf6DtnVtvMpvPGz549c1jyt9TshyR/43GmZFsNS2+r2u76VsLLo+hyWSkfd1sNyq1k6OxpM4bOmjtvyJRp4ye3TW47p+XQP2sZMXz410YM7RxUc/K3h5EO6q7m1Ei3Li1xWDtxpF+oyKnkk/jQkJCQ6G2J/f7L5odH77n+nOt/9tqPz+/3zdPu3fvImT889KqpD1Xve/ji24ccWDD/n/HR8//4qRM/+DPrMxQ7/t8QD/Mnj287zD8uBpaUevy/odjR/OyJAY2pQEcMdDjMDwAAwGdD3B0Z92bGndKbb1m/buOSlrk/aHin5dY17Utvuum+U39y58ATvjQ47LXhuhM+VzD/7yjt9/87af3/7NL1JxRb5v+gWKK52Pr/6WX+s+v/dxRb/z+9zH92/f8ln8L6/3OygdQmecf6/wAAwGfBJ7f+f4/L+6cvEFCQocfl/dMXCCjI0OMy/qVeIGC71/9f8+Bff6Wq35g7/qTlN/WXvPZ39xzWeuS6zTP/5Etb10+877qxt6wpmP9fUdr838L9AAAAsPv4z5ddU3H02Xff0bJu6sZxbw5+98m3lgzq80HF0Q+3j3xh4Bu3nlcw/19S2vz/k1//LxQ7/7+xWKC12MKA1v8DAACglyq2/t89Q1sa/zCm/x+eHvab5Q/ePPqnj/z898v3+/mJPyvfZ8Gxz8+8bFLB/H9VafP/eNpFeV7u2JsP65M17UJ6Tbs367M/GQAAAIDeoTw0NVWWmDdvYdSjPn6bT2eWAv2odK7vvXLt2ZtfmH7c46ev+7uaEwbvOWHaBasa/2b4gXd+ftQley7ddGrB/H9tafP/vN9lXPrYiun9lo2+9MOrN/9qzIazag7YdvwfAAAA2HVK3S8BAAAAAAAAAAAAAAB8+s7tWHzhI8uOfe+bt//F/kcseXXwbXcd+Lsh/V664qoHJq1648zJXy/4/X8Y21Wu2O//43X/4u8L/igvd2y15/X/MvdPOfH2uV1LFj5SH8L+uYGpC6fuETLX5h+cG7jvjIMGdiYWpkusefbolzoT30kHjh/yuS2dicNTgXFxkcR90oF4VcUt/VOBuLzi4+lA3B6r0oGqTOCy/sk4ytLb6pW6ZFuVpbfVxroQBuQEstvq7rqkjbL0AK9JBbID/F46EAd4ciZQnu7V7f2SXsVAXSx6Q7+kVwAA7Lbit8DKMGlKe1tz/Aofb79QkX8b5S1ZtqCw2rISm9+UWZps8crJlaWk+6S/i2671nhlqO4cwrCCr6u5Wcq6Rrlzaulh0/1RkSH3tNpbeZFyadu76aqKj6gmGVHThOntEyt7HHhLz1kOqegxy7CCyU5ulvKuTVpCLSX0pYQRlbhtSuhyvF8empr6pHL9eQw2hDw9vSJK/b1+7jp/xV4FuXluO/TKt758zE+f++CfP/9E/2+cVnP7rO+/e+KvX7//wEOOuG5C05otBfP/htLm/9W549qSuRhAR7yy3sgBIYwrcUQAAADw2XfbRbfecfr09a9MWlvx5GOPTS0fc3rl1vl3zp93ycZ7Fx9/2cErdjR+2Fm//f5vBu//b89e9dJPR+7zwA03/58nD3v8z3//8I8eeqduZZ+x7xXM/xtLm//HPViZQ8HJ3o618fr/iwaE0HVp/YYksDIO97sDQvhyV6o1lkguqH9CLNGcBFbGHSYHxRLjWvOr6hsDq1KBl+szgbWpwPoYyOyluCVkduVcWR/CYV2psfklZsQSDanAmBhoTAWaYqA5FegfA6NSgdf6ZwKtqcDDMRCm5G+rH/fPbCsAAIDtkZlnVebfDel53qqKnjKU9ZShtqcM5T1lqO4pQ7FRxPt3xAyVqZNXynIyVaZrrUnVUpAhXgx/u/tVkCE8mp8zXbCg6Xj+QfZ8g7L8DFf+4NlT1w+e/tDqzcd8beBt/zhkz4Obp9e9t+CGp3475pzrnv/TQQXz/+bS5v+1+bdJ6+vj/H/b9f+SwIOxe1fHU8cbY+D5I/MDmR0D6+Nkd3G2qtZMicykfXEsMSoGGlOBGTEwKhUYNzYTWDIwP5CZaWcbX5RtfEqmRE4AAAAAPnFxB0HcTRPn/zce9YOr3x8wccuyeTPvH9vyxMmjv3H1XT+6d/9ld767YvCAce99p2D+P6q0+X9sr19uYxfH3rzYP4S7y7b1JhsYUpcE4n6Muvjz+H3rQtgjZwdHtkRbbVKiKtVweKAm+YV6Vbqq1TXJGgPx/ikb7r/v8s7ENTUhfCVn70u2jWeqkzZq0oFBVUmgNh2YXpEE4p6fbOAn5UkAdlh2r2B8QWVOdclq6L5ckdffZ+WaoOnhFewD7SZfd7+52lWq0w9k9qlmbd/TVlAdu0TB22Otd1tvfLc1eLflfpHKfEPZui1UHcontk0aP6d9dnwk95esBXbR85z7K9VS0jvhddjx8Xvbs+p0B5pTHx/N3Zfr/nVYFqu79LEV0/stG33p1Zt/NWbDWTUHlNyNIuIPhX+05X9XPpWzeXe16pB5zfW6z5NWnye98d9Ao6cthHDZ9cfsu+TdX+/33A3Pnbqu7Maxr/7lrHs2Lf+bysNHrXv/yaGjLy+Y/7eWNv+vSN12+V3cmLMGhHBgzsZ9JG7+YwYkn4M5geRTcs/CQHLI/V/ri35yAgAAwM6W3d2R3V8wJXObnBCenicX5m/dzvxxf8WobvOX2u9j121cedLQN6474G8vOPGNv7/28Kceuv6ysnXL//vYD1avuXzxe08UzP/HffT8v2+qm47/O/7PLuL4f7d2913RfdMPdOzQruiC6tglHP/v1u7+bnP8v1uO/zv+3x3H/3vg+H+3dvenreBb0gxfujonwdff+fPfTbzpg7mN+x180lPPHDrxun+6quXuu0555b+de9601761uWD+P6O0+b/1/7pftC+7/t+4Yuv/zSi2/l+H9f8AAIBdqshCc+l5XsHqfQUZ0qv3FWTocYHAHpcYtP7fdq//t3Dkv1904Q+fb7n2nTvHXb5m07Fnvvr0utXPzFpx3Lnnv9V6112tBfP/jtLm//Hl0C+39d6y/l/j2CJVXREDMywMCAAAwO6o2A4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPl2HnvbO+5d8/R/aBv1ixc1/f+v/+7/P1q594JvfuGn4L6f86RllazZcM+LMLfMOuvC4+Qum/UvH8tVHnBHClK5yZUnxsueu+OpDrXsd9+wdAzfOvPHW+i3VmXorM7d/nJc7tvphfQhLch6pi4k36zvvbAuccuLtcys6E4/Uh7B/bmDqwql7dCaW14cwODdw3xkHDexMLEyXWPPs0S91Jr6TDhw/5HNbOhOHZwJl6e5e1z/pblm6u5f3D2FATiDb3bP751eVbeO4TKA83caKuqSNGKiLRa+tS9qIgfZYYkrfEIZWhNAnXdU/VydV9UlXdU91UlWfdFUXVYcwMoRQka7quaqkqor0yB+tSqqKgb33u+XtQZ2JpVUhDM0NPPHtpYd1JmamAtnG/1NVCF/qfMmkG/9xZdJ4Zbrx/1oZwhdDCFXpEu9VJCWq0iVeqAhhz5zAto1YEcLcwGdD/PSZmPvgrLnzpo5vb2+buQsTVZm2asKkKe1tTROmt0+sTvWpmLKc9NYFH3/sm96eP6HzdvHKyZWlpCsy5Sq7unxIZd7dlt2997FftbmVbHs+CuqP+atCv9B3zqy2mU3njZ89e+aw5G+p2Q9J/vbJRJNtNay3bKtBuZUMnT1txtBZc+cNmTJt/OS2yW3ntBz6Zy0jhg//2oihnYNqTv7ujJEu/eRH+oWKnEo+ife/hIREb0uU5326Ne/un+MFX/S3dbQyVHd9QBdMK3KzlHWNcmcM+qiPOeKP8zWlxxENK5g4FGQ5pOcsLQWTiW1ZapIsXV/rCiaHuTWVd23SeL88NDX1KbYdGvLv5m7e13dg8z6d2XSlpgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+P/swIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCwAAAAAIMzfOoyeDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4FAAA//8fSxmR")
chdir(&(0x7f0000000240)='./file0\x00')
open(&(0x7f0000000140)='./bus\x00', 0x143142, 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, "ef359f413bb90152f7d6d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a01000000000000004faa2ad9c084a003ea00", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00"})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x1a4243c, &(0x7f0000000440)=ANY=[@ANYRES16, @ANYRES8, @ANYRES8, @ANYRESOCT, @ANYRESOCT, @ANYRESOCT, @ANYRES64, @ANYRES32, @ANYRES8, @ANYRES8=0x0], 0x1, 0x0, &(0x7f0000000000))
syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x802053, 0x0, 0xfc, 0x0, &(0x7f00000000c0))

8.767795744s ago: executing program 1:
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f00000000c0))
timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x8}, {0x0, 0x989680}}, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0)
ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000ac0)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}, {0x0, @struct}})

8.135409941s ago: executing program 1:
ioctl$TCSETSF(0xffffffffffffffff, 0x5451, 0x0)

7.858775894s ago: executing program 1:
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0}, 0x0)
sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0)
ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0)
ioctl$HIDIOCGREPORT(r1, 0x501c4814, 0x0)

5.297297001s ago: executing program 3:
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000300)={[{@barrier_val={'barrier', 0x3d, 0x1ff}}, {@grpid}, {@noblock_validity}]}, 0x0, 0x502, &(0x7f0000001e40)="$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")
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x1c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder, @flat=@weak_binder}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})
syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="040e04000520"], 0x7)

4.860891698s ago: executing program 3:
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{}, {0x0, 0x3938700}}, 0x0)
poll(0x0, 0x0, 0x0)
pipe2$9p(&(0x7f0000000280)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RSETATTR(r1, &(0x7f0000000000)={0x7}, 0x69ff9a93bfc25838)
r2 = dup(r1)
write$P9_RGETATTR(r2, 0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x77359400}, {0x0, 0x3938700}}, 0x0)
close(r2)
r3 = socket(0xa, 0x2, 0x0)
connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)
sendto$packet(r3, 0x0, 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4)
rt_sigreturn()
mknod(&(0x7f0000000000)='./file0\x00', 0x1000, 0x0)
openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)

3.889859918s ago: executing program 3:
r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0)
fallocate(r0, 0x0, 0x0, 0x8020003)
fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0)
mkdirat(r0, &(0x7f00000000c0)='./file0\x00', 0x0)

3.755362349s ago: executing program 3:
r0 = memfd_create(&(0x7f0000000480)='\x00\xac=\x9d\xd2\xdb\x1a\'\xf8\n\xedcJ\x8e\x84\xd4N\x00\x9b\x1f\t\xbd\x11+\x86T\x16\xa3\xb3\xae0\x9f9?\xefo\xa4k\x012>\xa1\x9c\x86x\x1c\x9f\x84\x195\xde\x97_\t~\xf3Y\x12\"p^\x00\x02\xb4\xfd\xde\xe4\xb6\xbcK#^\x00}2\xc6:|R\x04\xc2\xb8I\xa3\xb9\xe2\xa2\xebw^I\x0f7i$\xf1\xd4\x9b\xc7\xb2\xbeD`\x8f\xc3\x96\xbc#4\x17\xf5\xb3\xc9\xb2\x94\xa8_f!\xdf\x90}\xba\xa3\x01\xe2\xcf\xb7\"S\a\x04ry\x00#4\x87m\xf7\xe3\xf5\xa7\xda\xb9\xcbU\xbe\x06]\xa9\xb6R~\xc9l}\xb7I\xfeH\xb3\x15\x8c\x06d\xf8c\xc0{\v\xd2\x9d\x8e\\\xae>\xf6qucC\xd42e9\xe0\xbf\xdd\xdc\x99\xf4\\\xd0\x96:\xfb\x8c\x12o\xcc-\x13\x14\xbev\xae\x80Zp\x95c]\x98\x8c\x01\x8fo\xafjN\xcb\x98\xdf\xd3[V\xbd[\xb9\x10v\xee\xdc\xc8G\xd0\xdc9\xccO\xf7\xb5\xbc\xcf\xfb\xe9\x14\x00\x00dU\x00\x00\x00\b\xfb\xb5Z\xb0-\xc8\xdb\xa3f\xf4W\xeb\x06\xc2\xd1\xb6\xd1%\xca\x8f\x013|\x8ez\x1eo\x18\xb6#@P&[\xad\xda\nmU\x823\\&P\xdc\xbcS\x80\xc1dJ!LH\xaa\a\x82\xf3\xde\x96\x85\xc5\xdd\xa8\x92\xc7\xcb\x91\xf2[Y\x06\x8a\x9fN\x10\xb9\xf4\xecq\xce\xd2\x17\x88\xae\xcc7r\xd7\xeaz\xcevR\xcau\r\xf1\t\xc2$k\xdf\x8f\xe2\xbe\xfe\x14AN\xf8\xc6\xa8`Fs[6kYH+\xa5\xdcxUY3<v\xf1\r\xaei\xa0Xam\vN\x7fR\x96.^\xd3\x01VbON\xc3P\xe7\x16\xcc\xca\xd6\xe5\xe8\r\x9b\x8d.\xdd\x1a\xaa\xa6*\xed\xcch\x7f\xfb\x17\xdcMmX\xea\xcf\xc40\x19\b\xe1\xb1\xf4\x7f\xca\xbeg\xb1bEm[\x04\tX8\x15#\x94\xa6M?\xe0\x871\x80\xc5~_\x12J\xeb \x00R\xa7=/\xfd:\xaf\xc3\x18\x10\f\xa1\x1a\xa7Yt\x151\xc7T', 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$TCSETS2(r1, 0x5452, 0x0)

3.650840955s ago: executing program 3:
timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100))
syz_open_procfs(0x0, 0x0)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]})

3.650195455s ago: executing program 4:
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000067dfb4a518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r2}, 0x10)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r3, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

3.598029953s ago: executing program 0:
r0 = msgget$private(0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg$unix(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x40000024)
msgrcv(r0, 0x0, 0x0, 0x0, 0x0)
pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, <r2=>0xffffffffffffffff}, 0x0)
write$P9_RSETATTR(r2, &(0x7f0000000000)={0x7}, 0x69ff9a93bfc25838)
write$P9_RLOPEN(r2, 0x0, 0x0)
rt_sigreturn()
msgctl$IPC_RMID(r0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff})
write$binfmt_elf32(r3, &(0x7f0000000240)=ANY=[], 0xfffffdb6)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000580), 0x0, 0x0)

3.579729346s ago: executing program 2:
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
close(0xffffffffffffffff)
socket$netlink(0x10, 0x3, 0x0)
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000040)={0x0, 0x0, 0x0, {0x0, 0xa}, {0x0, 0xfffd}})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x3}}, 0x0)
write$binfmt_misc(r0, &(0x7f0000000000)=ANY=[], 0xfffffecc)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000000f00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_procfs(0x0, &(0x7f00000000c0)='net/ipv6_route\x00')
sendmsg$TIPC_NL_MEDIA_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000200)={0x6c, r2, 0x1, 0xffffffff, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x13}, 0xf8}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @mcast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0)

3.534770684s ago: executing program 4:
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0)
fcntl$lock(r1, 0x26, &(0x7f0000000000))
fcntl$lock(r1, 0x7, &(0x7f00000006c0)={0x1})
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r3 = dup(r2)
dup3(r3, r1, 0x0)
rt_sigreturn()
futex(&(0x7f0000000700)=0x2, 0x0, 0x2, &(0x7f0000000740)={0x0, 0x3938700}, 0x0, 0x0)
rt_sigreturn()
mlockall(0x1)
mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil)
msync(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2)
timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)

3.301135839s ago: executing program 0:
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffff7f850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
close(r0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000010850000006d00000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000002c0)='ext4_da_write_pages_extent\x00', r0}, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
write$cgroup_devices(r1, &(0x7f0000000000)=ANY=[], 0x9)

3.240031789s ago: executing program 4:
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000300)={[{@barrier_val={'barrier', 0x3d, 0x1ff}}, {@grpid}, {@noblock_validity}]}, 0x0, 0x502, &(0x7f0000001e40)="$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")
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x1c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder, @flat=@weak_binder}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0})
syz_emit_vhci(&(0x7f0000000300)=ANY=[@ANYBLOB="040e04000520"], 0x7)

2.423592795s ago: executing program 2:
syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x8, &(0x7f0000000180)={[{@type={'type', 0x3d, "d0a8c62b"}}, {@dir_umask={'dir_umask', 0x3d, 0x6}}, {@uid}, {@umask={'umask', 0x3d, 0xaf}}, {@iocharset={'iocharset', 0x3d, 'koi8-r'}}, {@codepage={'codepage', 0x3d, 'maciceland'}}]}, 0x1, 0x2fc, &(0x7f00000008c0)="$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")
open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents(0xffffffffffffffff, &(0x7f0000000040)=""/104, 0x4d)

2.371708873s ago: executing program 0:
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10)
r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x60}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80)
r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, &(0x7f00000001c0), &(0x7f0000000280)=r2}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xe, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1807000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000009400850000002b000000b70000000000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

2.246697613s ago: executing program 2:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={0x0}, 0x10)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8946, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0), 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xa, 0x4, 0x3, 0x8}, 0x48)

2.145059209s ago: executing program 0:
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair$tipc(0x1e, 0x0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000280)={{}, 0x0, 0x0}, 0x20)
sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0)
recvmsg(0xffffffffffffffff, 0x0, 0x0)
write$cgroup_devices(0xffffffffffffffff, 0x0, 0xe)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
close(r0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{r0}, &(0x7f00000004c0), &(0x7f0000000500)='%pS    \x00'}, 0x20)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00', r3}, 0x10)
sendmsg$tipc(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0)

2.109341324s ago: executing program 4:
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)
bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffe}, 0x48)

2.035256775s ago: executing program 2:
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000004850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r0}, 0x10)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'vxcan1\x00', 0xf101})
write$cgroup_devices(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="1e030800dd5c9801288563"], 0xffdd)

1.916084944s ago: executing program 0:
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r1}, 0x10)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast})
close(r2)

1.829301207s ago: executing program 2:
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000067dfb4a518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r1}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000540)='inet_sock_set_state\x00', r2}, 0x10)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r3, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)

1.582953385s ago: executing program 2:
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0)
openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
ptrace$getregset(0x4204, r1, 0x4, &(0x7f00000001c0)={&(0x7f0000000240)=""/95, 0x5f})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x4000000000002df, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x2}, 0x0)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001200)=[{&(0x7f0000000200)="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", 0x383}], 0x1}, 0x0)
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b18, &(0x7f0000000000)={'wlan1\x00'})
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r5 = socket$inet6(0xa, 0x3, 0x8000000003c)
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x2000010, &(0x7f00000013c0)=ANY=[], 0xf, 0x693, &(0x7f00000000c0)="$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")
r6 = socket(0x200000100000011, 0x803, 0x0)
socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f00000007c0)={'batadv0\x00', <r7=>0x0})
bind$packet(r6, &(0x7f0000000000)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @broadcast}, 0x14)
write$binfmt_aout(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB="90030ee7ff072d2200000e210806000108000604"], 0x120)
connect$inet6(r5, 0x0, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)

1.547313941s ago: executing program 4:
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001200)={&(0x7f0000000040)='contention_end\x00'}, 0x10)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', <r1=>0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001940)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01dfffffff9a26000000210000000c00018008000100", @ANYRES32=r1], 0x20}}, 0x0)

1.290124761s ago: executing program 4:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6)
syz_mount_image$jfs(&(0x7f0000000080), &(0x7f0000005d40)='./file0\x00', 0x4044, &(0x7f0000000440)=ANY=[@ANYBLOB="71756f74612c646973636172642c646973636172642c696f636861727365743d6b6f69382d72752c646973636172642c00f4193eb3ba2a0d5ff2cd7374288ff89ec513a53e007345decb720900f8312da2463eb0edf52fad1a00ebd41c14b3ce75d0cffefd379624b16f7260c835713b263352e03b5cb8fa0c042bd1225ed4ded2b62e12fea4d7e61b738e40781e58d5fff112364ac140f419e5dafecd283b3fab6b142ddbc893b35a81fe9265591ef35fa2928e095fee4c10b22e4212378de59bca0307cc644b9620b63f0000007bbbd422d87856b71348b8f45398b9660b6b3e8ee8a8c32f3234cb46e2cd827ec25c1ca4d046bc004f8df7b1ee690a5e50510700d80c7fa65fa724d0e1b4369f1b64fe249a0312010000004ac983de925f52d735b03fea941b1e948ad8d19cfda5b799325fd69d14fcf6cdde7700a63150eb3699e5314e0827750e244150ec19f3f3f1d8be542c084b5e40bfaa8ad206d2a33b0ddbd7f8e07dc7d17174a4549ffaf5976949cb69658c42ec7cd9fe8ad82852cefb04646edb3a41eb514eb6a772b3ee9f21e25822b54ec33e592d5c040946721101d53aff21f90351c95aa0f73f1853d6afcbf9448b220e988466066fa5c09e6198fc4520d199b93bdedee87c4043815aa05668a06f8da96680ccc1a139ade90f5c79af46208f9762f54e7c29088d9de69bd2d51c6b9c42209ddc3880051303b855853407d959a5777dce25201c5ea1faa084c36e3e349915ebec53435eb2910c59394ee84ba3baf9c440ae5833c23f46b0eaac543ce0c80ba0603213e53ea59755070b18bc10b9224aa082d967206115b492d825751fcc00000000000000e63d51c5bffa4f712c2d7fafb9cf506c06e1ddad4fc19038407786fedb9afdfb11a5f182676dd84c919f71d5eee2f3b740b68ee7f6518eb9d8baa26f1c3871f863b134ee942eb3af92d19e70d8268839cd7b4637f0627299f99b1873ca165e410f8bd421e1a4859fd9bd6bb34d25c07e1a52b9668a530b10b8585d797124a6975a71aedbe557a17b06bbfe547aa553c3d08b8921a4b0d938c03687bd48a9a387b4c066c056f457fba5738775b900a1e82a89aae1494b05c4bb0fc8ed1a93688bf850a4f7b0942eda1f16ecf043efa6b8c1f9e0fba31f4a58ed0031180fb1b8a00e4a86826b170000002dd1272a3d1609bed545b86ca7a6bf569ed35d0000ca23b0de742f6008fdf20928370d88f8c04bc3b97b9a9e0062e8fc5fd2337d85a66bd20730f3153db2459fb34c134c06c19364e9645e83040dd16ee08f18f0ba69ac9ca3e25e62b1103ec49fc3d1214efebb15442b07000000d30d38a64613b535fa808a9b3bae00bc371271d45db200a5cbf433e2f6dd03b7c7fcc040781e5151c9badb787e7e1e2f39d60998919aa8dbd156f31a5b7fa5f9e5ec01e8c799edc322703c7fc4a81ab9bc02dd96714ee9d7e75d28d040ff3566404fd6db547a4b553197c1f316d20ea54f9459cd81351a510d101e90eabe6dc6c6ac3ffa189c073a5fb3fc382df620bf5af9e638819c77a051e6875866a849f6f578c068c0e4c7cfbc15033997efa853c96297b3201dd30ea40dc94d010a0c33da9f63a10b8f813dc789b80be3bb3f00ee58b30d5c03a6ddf914bed13f8806295495d41609478798396aeec06e8d342efd8ac6b422f6c23a011b1400000000000000bc2a02094e19a1ee8bb3c3c0c088ae8efaf68c85001faf7cf5426fb7c5c367ed93eb25c48a293549d15b91b59f1b574b3f6171f8e56a4026c56bdf51d90312b3ca5398f4050000007504be21456ec953bf06f12fff20c31e7c8b55fee5c49aa939830b09995ff149258118f9aae29206f9731288b56b10de51525665fdb4e289b1c177df97af3085f82045fbd012f1dde94ffecd90b7b63d8197d9c24a6fe5915ac7d7240847f6d0bf9099ee117c83e363f2ad36a4a9f4faa5734afe9770c38c565cae87a408d0acbb2db7db9174acab60a344814ee643fa82ba41706d2360269ed276e13dd83abbc258f07b0d58ab0b65200b18b7f9f871bcb43fec5a2e3789ecd0c1069d2da80b93c86dff8933e70c2108346003ddf60a17142db60379eee63b66e7341cdd8f87ed9f11894c9ae040976321d87405b492f419ebfa77eb367ca6e360b808451102f54893d7d1695c24bcc184b1e7d19940a2b6931ade8638dd2b85a86dc511dbb97f50520f91fbf7201fc9071d0aee9735d07ca024076e8581db332b1c5f135fe6b2e9d2c18c9d5d5a524d3d5b2657e4b28f1a09696bd5b076a1471c8b2ab2ca3ba57843af1d03590f4e8985e1c463c781bb03ad7ec816ea70bbe06411aae001e0ca72ee7e828ad14bb7a092d883ad000554bf7f00000000000075cc01f8a2e1802192f09e77bc488b3bd3f08a9ce88ba2e2bcc23cf5d7372b339ce1f5003db0ad70fa6e93aa908a2ced81f5514e23e2f94ff03c1c02f5a9195f4735563efd0a1fc7dafcfb3dae043fe0c172ec3a12747d7abf4382bf7453c13df994641017a0f461add956ef8f834b762af30408af6a61f317fd3c7b0816236a768601b7c6606ba52ff126eb13d33c915c5da99d118db488da3f3d7783a608282a93fcbe0910f0389c3ef91de7c84e23daa6554c42b2b3e9f70a9f790f29011a0b5101b23bfeba6e52877ed8a188958e39375dd203d434bef4dc82cc8a21fc40c6e6e6a2475f70bf1503beb9555036e63bdc937f8a4d61b21d06a9d3239d1df6f2e9ef16dee590b15ac028c6d873bb2965374b733d8e11ba763ab157ed91dd871b098c0543dcbba4cf67db8c83c84369dc67735fa4faa0fdcf34b1c6a862ccae9fe4fa28746504643b57f02623a2ef34ea90f2e7f7dd771f8f75217c799d978a3533fcfab6c6f5391b626d61b400f08172fc675e2a062d06c31b85452804f7b125c291f60a02a5d62271e96fe70d64bae36e28b42e197259169ebee8f64355544fbad8b83c1c8fad02cd1a2e56a6f6e82ec7719a48a1bea803546b8af7a89faf7cef94d8ada45fc0a98a79ba90c95262f0110725c6bf7c81237534dcd6a8a113bd8ac48b7db5526ab762cec103674742476cd6b92b8c7abcfb1f8e08f0a05c1b209187049f3206bd545e8c20f8db6d8a7cdd0c9ecbb9011b611a013cd581521dfcb028d59d5c69d286fb93e4c498b3aaff7e0cdcf1f41fec65ebdbe4c2bf453140251cdd94c32b87c4634d6500000000000000000000000000000000816e6c33f92dca3e031cce6d7e3882941a3a5157e666a8ad60ea41cc1cbc68862905ff2197f7f06cb6bcfe65222cb1ba17114b73eb7ca38768027c", @ANYRES32, @ANYRESOCT=0x0], 0xff, 0x5e2d, &(0x7f0000005d80)="$eJzs3cuOHFcZB/CvL9NzCXGsCEXGYuE4EBJCfLch3OKwYAELkJDX2JpMIoMDyDaIRBaeyAvEBngE2GTDIq/AA+QZEA+ApRlWWRAK1cw5dk1Nj3uMPV3dc34/aVz11emaPuX/1FT3VFWfAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADiB9//ydleRFz9TVpwNOJzMYjoRyzX9YmoZy7nxw8j4lhsNccLETFYjKjX3/rnuYgLEfHJkYiNzTur9eJz++zHxTO3b372w+/94/d/unfsZ2//9KN2+48/f/7jP9yNOPqjNz7+7O7T2XYAAAAoRVVVVS+9zT+e3t/3u+4UADAV+fhfJXm5Wq1Wq59q/cf+bPVHXWjdVI13t1lExHpznfo1g9PxADBn1uPTrrtAh+RftGFEPNN1J4CZ1uu6AxyIjc07q72Ub695PDix3Z7/Trkj//Xeg/s79ppO0r7GZFo/X/diEM9HxGhMf5an1IdZkvPvt/O/ut2e/58OOv9pyfm3jbZvfSpOzn/Qzr9lR/5/joi5zb8/Nv9S5fyHj5P/+mCO93/5AwAAAABw+OW//x/t+Pzv4pNvyr7sdf6v/3CTAQAAAAAAAGDuPOn4fw8Y/w8AAABmVv1evfaXIw+X7fVZbPXyK72IZ1uPBwqTbpZZ6bofAAAAAAAAAAAAAFCS4fY1vFd6EQsR8ezKSlVV9VdTu35cT7r+vCt9+6FkXf+SBwCAbZ8cad3L34tYiogr6bP+FlZWVqpqaXmlWqmWF/Pr2dHiUrXceF+bp/WyxdE+XhAPR1X9zZYa6zVNer88qb39/ernGlWDfXRsOjoMHAAiYvtotOGIdMhU1XPR9asc5oP9//Cx/7MfXf+cAgAAAAevqqqqlz7O+3g659/vulMAwFTk43/7vIBarVar1erDVzdV491tFhGx3lynfs1gOH4AmDPr8WnXXaBD8i/aMCKOdd0JYKb1uu4AB2Jj885qL+Xbax4P0vju+VqQHfmv97bWy+uPm07SvsZkWj9f92IQz+/Rnxem1IdZkvPvt/O/ut0+So876PynZa/86+082kF/upbzH7Tzbzk8+ffH5l+qnP/wsfIfyB8AAAAAAGZY/vv/Ued/8yYDAAAAAAAAwNzZ2Lyzmu97zef/vzjmcb3mnPs/D42cf2/f+bv/9zDJ+ffb+bcuyBk05u+/9TD/f2/eWf3o9r++kKczn//CYFQ/90KvPxima36qhXfietyItTiz6/HDHe1nd7Uv7Gg/N6H9/K72Ud2+nNtPxWr8Mm7E2w/aFydcGLU0ob2a0J7zH9j/i5TzHza+6vxXUnuvNa3d/7C/a79vTsc9z+W//efl3XvX9N2LwYNta6q372QH/dn6P3lmFL++tXbz1G+v3b5982ykyY6l5yJNnrKc/0L6yvm/8tJ2e/6939xf7384euz8Z8W9GO6Z/0uN+Xp7X51y37qQ8x+lr5x/PgKN3//nOf+99//XOugPAAAAAAAAAAAAAAAAPEpVVVu3iF6OiEvp/p+u7s0EAKYrH/+rJC9Xq9VqtVp9+Oqmarw3m0VE/L25Tv2a4XfjvhkAMMv+GxH/7LoTdEb+Bcuf91dPv9R1Z4CpuvX+Bz+/duPG2s1bXfcEAAAAAAAAAPh/5fE/TzTGf966Dqg1bvSO8V/fihNzO/5nfzTYGus8bdCL8ejxv0/Go8f/Hk54voUJ7aMJ7YsT2pcmtI+90aMh5/9iyjjnfzxtWEnjv77SQX+6lvM/mcZ6zvl/pfW4Zv7VX+c5//6O/E/ffu9Xp2+9/8Hr19+79u7au2u/OHvm0oXzFy+cv3jx9DvXb6yd2f63wx4frJx/HvvadaBlyfnnzOVflpz/l1Mt/7Lk/F9OtfzLkvPPr/fkX5acf37vI/+y5PxfTbX8y5Lz/2qq5V+WnP9rqZZ/WXL+X0u1/MuS83891fIvS87/VKrlX5ac/+lUy78sOf98hkv+Zcn55ysb5F+WnP+5VMu/LDn/86mWf1ly/hdSLf+y5Pwvplr+Zcn5X0q1/MuS8/96quVflpz/N1It/7Lk/N9ItfzLkvP/ZqrlX5ac/7dSLf+y5Py/nWr5lyXn/51Uy78sOf/vplr+Zcn5v5lq+Zfl4ef/mzFjxkye6fo3EwAAAAAAAAAAAADQNo3LibveRgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/sQMHAgAAAABA/q+NUFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYUdOBAAAAAAAPJ/bYSqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoq7N1bjFz1fQfwszd7bUhwA+EWB2xzM7Cwu76BQwwmCSklvVAS0qYlNY69Nk58q3eXm1DZFNoSBalI7QN9aJpEaRSprUBVpKYSjZAaqX1rnhrxErVSHvwAlYOSSqkCW52Z///vmdnZmfVlzMz5fz7I/nl3zpn5z5kzs/td9J0FAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGi08eMzfzZUFEX5p/bXuqK4uPz3mmJ3+eHCjvd6hQAAAMC5eqf2999fkj6xewU7NWzzb9f8x3cXFxcXiy+8ffLdv1hcTBdsKIqR1UVRuyz691/8fLFxm+C5YnxouOHj4S43P9Ll8tEul491uXxVl8tXd7l8vMvlSw7AEmvqP4+pXdn1tX+uqx/S4rJirHbZ9W32em5o9fBw/FlOzVBtn8WxA8Wh4nAxU0wt2Weo9l9RvLaxvK37i3hbww23tb4oilM/fWZfXMNQOMbXF003VtP42L11b7Hh7Z8+s+/bc29e1W52PQxLVloUmzeV63y+KE7/uKoYKlanYxLXOdywzvVt1jnStM6h2n7lv1vXeWqF64z3ezys84cd1rk+fO7J64qiWCiW3abVc8VwsbblVtPxHq+fEeV1lA/lB4rRMzpPNq7gPCn3+cl1zedJ6zkZj//GcExGl1lD48Px1pdXLTnuZ3uelPe6H87V8rofLG90fLzxR6tN52q5zTM3LH8OtH3s2pwD6VxuOAc2dTsHhleN1M6B4dNr3tR0Dkwv2We4GKrd1skbOp8Dk3NHjk/OPvX0bYeO7D04c3Dm6PTUjm1bt2/bun375IFDh2em6n+f2SEdIGuL4XQObgqvNfEcvKll28ZTcvEb5+95MN4nz4Pyvn/mxnJBFw8Xy5zj5TbPbz7350H6ut/wPBhteB60fU1t8zwYXcHzoNzm1OaVfc0cbfjTbg29ei1c13AOvJdfD8vbfOTm5V8L14d1vXDLmX49HFlyDsS7NRSee+Vn0vd743eG47L0vLi6vOCiVcX87MyJ25/cOzd3YroI44K4tOGxaj1f1jbcp2LJ+TJ8xufL7r/75Y1Xt/n8unCsxm/t/FiV22yb6PxY1V7d2x/Pps9uKcI4zy708Wz31aw8nilLdDie5TbP33bu3wumXNLw+jfW7fVvZGy0/vo3ko7GWNPr39KHZqS2sqI4ddvKXv/Gwp8L/fp3WZ+8/pXH6pHbO58D5TYvTJ7pOTDa8fXvujCHwnpuDolhvCH3v1u7fKF+mjY8ll3Pm9HRsXDejMZbbD5vti7Zp7y28rY3T53debP5uubHqun7lgqeN+Wx+supzudNuc3r0+f+2rEm/rPhtWNVt3NgbGRVud6xdBLUX+8W18Rz4PZiX3GsOFzsT/uUj3J5WxNbVnYOrAp/LvRrx5V9cg6Ux+rlLZ3PgXKbH2w9v987bQ6fSds0fO/U+vOF5TL/1aOnr6/1sJ3vzF+u8xPbOv9sqNzmzW1nmjM6H6dbw2cuanOcWp8/y53T+4sLc5yuDOs8vL3zz6bKbS7bscLzaXdRFG9Mv1H7eVf4+e4/zv/nd5t+7tvuZ8pvTL/xwORDPzqT9QMAcPberf29sKr+vWbD/7Feyf//BwAAAAZCzP3DYSbyPwAAAFRGzP0jYSbyPwAAAFRGzP2jYSaZ5P/H7tz5yjvPFundABeDeHk8DA/eXd8udrwXwscbFk8rP/+xb4298pVnV3bbw0VR/PKBD7Xd/rG747rqjsd1fqT580tcee2Kbv/Rh09v1/j+Cad21q8/3p+Vngaxq/za5Jba9W54aro2X3+gqM2HFl54rn799Y/j9ie31rf/6/CmJbsPDDXtvzms5/owN4T3lHlw9+njUM643yvrr/nXSz97+vbifkOb3l+7my//Uf1643tEvXRpfft4v5db/7989TuvlNs/eUP79T873H79J8P1/iTMX+yqb994zL/SsP4/CeuPtxf3u/2b32+7/levqG//ajgvvh5m6/rv/fMPv9Pu8Yq3s/uu+n7x9qf+d1ttv3h98fpb1z/+7HTT8Wi9/tffrl/Prsd/NtK4ffx8vJ3o0buaz++h8Pg29ciLovjOnxZNx7n4aH2/f25Zf7y+43e1X/+tLes8PnRtbf/T92dd0/362t9uaXt/43p2/8O6pvvz0n3h+L09+YPyek8+FM7HcPn//bB+fa3vZfrqfc2vN3H7r6+rP2/j9U22rP+llvUvXFseu+7rv//t+vpfvWd10/p3fzKcT/fXZ7f1H/ybS5r2/8a364/HiScmjh6bnT+0v+GoNj6PV4+vWXvRxe97/yXhtbT14z3H5h6bObFhasNUUWwYwLcM7PX6vxnm/9THwvm/hbof/ax+3r34qfrXrZt+Xv/4pfD5R8PjGb8+fu2vxprO19bHfeGe+jzX9d8S1rFSV3z1v69d0YYnP//a/D/98Zut3xfE+3P8g+O1+/fyxstrlw29Xr+89fWqm//6YPPz+sejU7X5vXBcF8M7M2+6vH57rdcf35vkxU/Xn7/xO7m4f9HyfiLrRprvx7mu/8fh+5jvX9n8+hfPj+892/JuzuuKoXIJC+H1oVioXx63isf7xVOXt729+D48xcJVZ7LMZc0+NTt5+NDR+Scn52Zm5yZnn3p6z5Fj80fn9tTeu3TPF7vtf/r5vbb2/N4/s2NbUXu2H6uPHnuv13/84X3775i6cf/Mgb3zB+YePj5z4uC+2dl9M/tnb9x74MDME932P7R/1/SWnVvv2DJx8ND+XXfu3Ll158Sho8fKZdQX1cWOqS9NHD2xp7bL7K5tO6e3b982NXHk2P6ZXXdMTU3Md9u/9rVpotz78YkTM4f3zh06MjMxe+jpmV3TO3fs2NL13R+PHD8wu2HyxPzRyfnZmROT9fuyYa726fJrX7f9ycPssfB612IofHf+uVt3pPfHLX3ry8teVX2T5m9Pi7fCe0HFr2/dPo65fyzMJJP8DwAAADmIuT+88f/pC+R/AAAAqIyY+1eHmcj/AAAAUBkx94+HmWSS//X/9f/1//X/9f/1/3tJ/1//vxP9f/3/QV6//r/+P931W/8/5v41RZFl/gcAAIAcxNy/NsxE/gcAAIDKiLn/ojAT+R8AAAAqI+b+i8NMMsn/+v/6//r/nfr/cVv9/0L/X///LOn/6/93ov+v/z/I6+/D/v8a/X/6Tb/1/2Puf1+YSSb5HwAAAHIQc//7w0zkfwAAAKiMmPsvCTOR/wEAAKAyYu5fF2aSSf7X/9f/1//3+//1//X/e0n/X/+/E/1//f9BXn8f9v/9/n/6Tr/1/2Pu/5Uwk0zyPwAAAOQg5v4PhJnI/wAAAFAZMfdfGmYi/wMAAEBlxNx/WZhJJvlf/1//X/9f/1//X/+/l/T/9f870f/X/x/k9ev/6//TXb/1/2Pu/2CYSSb5HwAAAHIQc//lYSbyPwAAAFRGzP1XhJnI/wAAAFAZMfdfGWaSSf7X/9f/1//X/9f/1//vJf1//f9O9P/1/wd5/fr/+v9012/9/5j7rwozyST/AwAAQA5i7r86zET+BwAAgMqIuf9DYSbyPwAAAFRGzP3rw0wyyf/6//r/+v/6//r/+v+9NFj9/+FlL9H/r9P/b6b/r/+v/6//T2f91v+Puf/DYSaZ5H8AAADIQcz914SZyP8AAABQGTH3XxtmIv8DAABAZcTcvyHMJJP8r/+v/6//r/+v/6//30uD1f9fnv5/nf5/M/1//X/9f/1/Ouu3/n/M/RvDTDLJ/wAAAJCDmPs3hZnI/wAAAFAZMfdfF2Yi/wMAAEBlxNx/fZhJJvlf/1//X/9f/1//X/+/l/T/9f870f/X/x/k9ev/6//TXb/1/2PuvyHMJJP8DwAAADmIuf/GMBP5HwAAACoj5v6bwkzkfwAAAKiMmPs3h5lkkv/1//X/9f/1//X/9f97Sf9f/78T/X/9/0Fev/6//j/d9Vv/P+b+m8NMMsn/AAAAkIOY+28JM5H/AQAAoDJi7r81zET+BwAAgMqIuX8izCST/K//r/+v/6//r/+v/99L+v/6/53o/+v/D/L69f/1/+mu3/r/MfffFmaSSf4HAACAHMTcf3uYifwPAAAAlRFz/2SYifwPAAAAlRFz/1SYSSb5X/9f/1//X/9f/1//v5f0//X/O9H/1/8f5PXr/+v/012/9f9j7p8OM8kk/wMAAEAOYu7fEmYi/wMAAEBlxNy/NcxE/gcAAIDKiLl/W5hJJvm/f/v/q5o+1v/X/2+3fv1//f9C/7/v6f/r/3ei/6//P8jr1//X/6fZcJvP9Vv/P+b+7WEmmeR/AAAAyEHM/TvCTOR/AAAAqIyY++8IM5H/AQAAoDJi7r8zzCST/N+//f+sfv9/arHo/+v/6//r/+v/nxn9f/3/Qv//rL3X/flBX7/+v/4/3fVb/z/m/p1hJpnkfwAAAMhBzP0fCTOR/wEAAKAyYu6/K8xE/gcAAICB0u73EEYx9380zCST/K//3xf9/x7+/v/F1fr/+v/6/53Xr//fW/r/+v+d6P/r/w/y+vX/9f/prt/6/zH37wozyST/AwAAQA5i7r87zET+BwAAgMqIuf+eMBP5HwAAACoj5v7dYSaZ5H/9/6r3//3+f/1//f9u69f/7y39f/3/TvT/B7P/H75t0f/vo/5/eQ7p/9OP+q3/H3P/vWEmmeR/AAAAyEHM/R8LM5H/AQAAoDJi7v94mIn8DwAAAJURc/8nwkwyyf/6//r/+v/6//r/+v+9pP+v/9+J/v9g9v8j/f/+6f/7/f/0q37r/8fcf1+YSSb5HwAAAHIQc/8nw0zkfwAAAKiMmPt/NcxE/gcAAIDKiLn//jCTTPK//r/+v/6//r/+v/5/L+n/6/93ov+v/z/I69f/1/+nu37r/8fc/2thJpnkfwAAAMhBzP0PhJnI/wAAAFAZMfd/KsxE/gcAAIDKiLn/18NMMsn/+v8Xpv8/nK5f/1//X/9f/1///3zS/9f/L/T/z9p73Z8f9PXr/+v/012/9f9j7v+NMJNM8j8AAADkIOb+3wwzkf8BAACgMmLu/60wE/kfAAAAKiPm/gfDTDLJ//r/fv+//r/+v/6//n8v6f/r/3ei/6//P8jr1//X/6e7fuv/x9z/22EmmeR/AAAAyEHM/Q+Fmcj/AAAAUBkx9386zET+BwAAgMqIuf8zYSaZ5H/9f/1//X/9f/1//f9e0v/X/+9E/1//f5DXr/+v/093/db/j7n/4TCTTPI/AAAA5CDm/s+Gmcj/AAAAUBkx9/9OmIn8DwAAAJURc//vhplkkv/1//X/9f/1//X/9f97Sf9/af+/fA3T/6/T/9f/H+T16//r/9Ndv/X/Y+7/XJhJJvkfAAAAchBz/++Fmcj/AAAAUBkx9/9+mIn8DwAAAJURc/8jYSaZ5H/9f/1//X/9f/1//f9e0v/3+/870f/X/x/k9ev/6//TXb/1/2Pu/3yYSSb5HwAAAHIQc/8fhJnI/wAAAFAZMffvCTOR/wEAAKAyYu5/NMwkk/yv/6//r/+v/6//r//fS/r/+v+d6P/r/w/y+vX/9f/prt/6/zH37w0zyST/AwAAQA5i7v9CmIn8DwAAAJURc/++MBP5HwAAACoj5v79YSaZ5H/9f/1//X/9f/1//f9e0v/X/+9E/1//f5DXr/+v/093/db/j7l/Jswkk/wPAAAAOYi5/0CYifwPAAAAlRFz/8EwE/kfAAAAKiPm/sfCTDLJ//r/+v/6//r/+v/6/72k/6//34n+v/7/IK9f/1//n+76rf8fc/+hMJNM8j8AAADkIOb+L4aZyP8AAABQGTH3fynMRP4HAACAyoi5/3CYSSb5X/9f/1//X/9f/1//v5f0//X/O9H/1/8f5PXr/+v/012/9f9j7j8SZpJJ/gcAAIAcxNx/NMxE/gcAAIDKiLn/WJiJ/A8AAACVEXP/8TCTTPK//r/+v/6//r/+v/5/L+n/6/93ov+v/z/I69f/1/+nu37r/8fc/4dhJpnkfwAAAMhBzP0nwkzkfwAAAKiMmPtnw0zkfwAAAKiMmPvnwkwyyf/6//r/+v/6//r/+v+9pP+v/9+J/r/+/yCvX/9f/5/u+q3/H3P/fJhJJvkfAAAAchBz/+NhJvI/AAAAVEbM/U+Emcj/AAAAUBkx9z8ZZpJJ/tf/1//X/9f/1//X/+8l/X/9/070//+fvbvM1Syr4jj8Ah8a0mEwjIAhMAaGgbs07u7u7u7u7k6jDY01mkBSvdbqTuXWOVWVe7h77/U8X1Zaktqpm1TyT+WXo/+f+f36f/0/+0br/3P33y9uabL/AQAAoIPc/fePW+x/AAAAWEbu/gfELfY/AAAALCN3/wPjlib7X/+v/9f/6//1//r/I+n/9f9b9P/6/5nfr//X/7NvtP4/d/+D4pYm+x8AAAA6yN3/4LjF/gcAAIBl5O5/SNxi/wMAAMAycvc/NG5psv/1//p//b/+X/+v/z+S/l//v0X/r/+f+f36f/0/+0br/3P3PyxuabL/AQAAoIPc/Q+PW+x/AAAAWEbu/kfELfY/AAAALCN3/yPjlib7X/+v/9f/6//1//r/I+n/9f9b9P/6/5nfr//X/7NvtP4/d/+j4pYm+x8AAAA6yN3/6LjF/gcAAIBl5O5/TNxi/wMAAMAycvc/Nm5psv/1//p//b/+X/+v/z+S/l//v0X/r/+f+f36f/0/+87o/y/9aXlu/f99brp0r7b/z91/U9zSZP8DAABAB7n7Hxe32P8AAACwjNz9j49b7H8AAABYRu7+J8QtTfa//l//f0f//9+76P/1//r/O/69/v986P/1/1v0//r/md+v/9f/s++M/v+Sc+v/d3r/y/85d/8T45Ym+x8AAAA6yN3/pLjF/gcAAIBl5O5/ctxi/wMAAMAycvc/JW5psv/1//p/3//X/+v/9f9H0v/r/7fo//X/M79/q/+/91W8X/9PB6P1/7n7nxq3NNn/AAAA0EHu/qfFLfY/AAAALCN3/9PjFvsfAAAAlpG7/xlxS5P9r//X/w/S/2fiqf/X/+v/9f/XRP+v/z/p/6/bRffzs7/f9//1/+wbrf/P3f/MuKXJ/gcAAIAOcvc/K26x/wEAAGAZufufHbfY/wAAALCM3P3PiVua7H/9v/5/kP7f9/9n7f/vpv/X/2/T/+v/t+j/9f8zv1//r/9n32j9f+7+58YtTfY/AAAAdJC7/3lxi/0PAAAAy8jd//y4xf4HAACAZeTuf0Hc0mT/6//1//p//b/v/+v/j6T/1/9v0f/r/2d+v/5f/8++0fr/3P0vjFua7H8AAADoIHf/i+IW+x8AAACWkbv/xXGL/Q8AAADLyN3/krilyf7X/+v/9f/6f/2//v9I+n/9/xb9v/5/5vfr//X/7But/8/d/9K4pcn+BwAAgA5y978sbrH/AQAAYBm5+18et9j/AAAAsIzc/a+IW5rsf/3/jP3/PU6nk/7/pP/X/1/2fv3/mPT/+v8t+v+z+/+7X+HX0/+P9X79v/6ffaP1/7n7Xxm3NNn/AAAA0EHu/lfFLfY/AAAALCN3/6vjFvsfAAAAlpG7/zVxS5P9f6X+/9Ybb//v+v+r4/v/Z79f/6//1//r//X/+v8t+n/f/5/5/fp//T/7Ruv/c/e/Nm5psv8BAACgg9z9r4tb7H8AAABYRu7+18ct9j8AAAAsI3f/G+KWJvvf9//1//p//b/+X/9/JP2//n+L/l//P/P79f/6f/aN1v/n7n9j3NJk/wMAAEAHufvfFLfY/wAAALCM3P1vjlvsfwAAAFhG7v63xC1N9r/+X/9/4f3/XfX/Sf8fP1f9v/7/Guj/9f8n/f91u+h+fvb36//1/+wbrf/P3f/WuKXJ/gcAAIAOcve/LW6x/wEAAGAZufvfHrfY/wAAALCM3P3viFua7H/9v/7/wvt/3/8v+v/4uer/9f/XQP+v/z/p/6/bRffzs79f/6//Z99o/X/u/nfGLU32PwAAAHSQu/9dcYv9DwAAAMvI3f/uuMX+BwAAgGXk7n9P3NJk/+v/9f/6f/2//l//fyT9v/5/i/5f/z/z+/X/+n/2jdb/5+5/b9zSZP8DAABAB7n73xe32P8AAACwjNz9749b7H8AAABYRu7+D8QtTfa//n/2/v++t8QL9P/6f/2//n9I+n/9/xb9v/5/5vfr//X/7But/8/d/8G4pcn+BwAAgA5y938obrH/AQAAYBm5+z8ct9j/AAAAsIzc/R+JW5rsf/3/7P2/7//r//X/+v+x6f/1/1v0//r/md+v/9f/s2+0/j93/0fjlib7HwAAADrI3f+xuMX+BwAAgGXk7v943GL/AwAAwDJy938ibmmy//X/+n/9v/5f/6//P5L+X/+/Rf+v/5/5/fp//T/7Ruv/c/d/Mm5psv8BAACgg9z9n4pb7H8AAABYRu7+T8ct9j8AAAAsI3f/Z+KGe93z4p70f6X/1//r//X/+n/9/5H0//r/Lfp//f/M79f/6//ZN1r/n7v/s3GLv/8HAACAZeTu/1zcYv8DAADAMnL3fz5usf8BAABgGbn7vxC3NNn/+n/9v/5f/6//1/8fSf+v/9+i/9f/z/x+/b/+n32j9f+5+78YtzTZ/wAAANBB7v4vxS32PwAAACwjd/+X4xb7HwAAAJaRu/8rcUuT/a//1//r//X/+n/9/5H0//r/Lfp//f/M79f/6//ZN1r/n7v/q3FLk/0PAAAAHeTu/1rcYv8DAADAMnL3fz1usf8BAABgGbn7vxG3NNn/+n/9v/5f/6//1/8fSf+v/9+i/9f/z/x+/b/+n32j9f+5+78ZtzTZ/wAAANBB7v5vxS32PwAAACwjd/+34xb7HwAAAJaRu/87cUuT/b9y/7/1v+n/b6f/1/+f9P/6/4Pp//X/W/T/+v+Z36//1/+zb7T+P3f/d+OWJvsfAAAAOsjd/724xf4HAACAZeTu/37cYv8DAADAMnL3/yBuabL/V+7/t1yp/0/6f/2//v+k/9f/nwv9v/5/i/5f/z/z+/X/+n/2jdb/5+7/YdzSZP8DAABAB7n7fxS32P8AAACwjNz9P45b7H8AAABYRu7+n8QtTfb/UP3/DXd61wX1/77/r//X/+v/k/7/fOj/9f9bZu//b75R/6//1//r/9kyWv+fu/+ncUuT/Q8AAAAd5O7/Wdxi/wMAAMAycvf/PG6x/wEAAGAZuft/Ebc02f9D9f93fpf+X/+v/9f/X/b7qf/X/59F/6//P/n+/3W76H5+9vfr//X/7But/8/d/8u4pcn+BwAAgA5y998ct9j/AAAAsIzc/b+KW+x/AAAAWEbu/l/HLU32v/5f/6//1//r//X/R9L/6/+36P/1/zO/X/+v/2ffaP1/7v7fxC1N9j8AAAB0kLv/t3GL/Q8AAADLyN3/u7jF/gcAAIBl5O7/fdzSZP/r//X/+n/9v/5f/38k/b/+f4v+X/8/8/v1//p/9o3W/+fuvyVuabL/AQAAoIPc/X+IW+x/AAAAWEbu/j/GLfY/AAAALCN3/61xS5P9r//X/y/Z/9+g/9f/6/9Hof/X/2/R/+v/Z36//l//z77R+v/c/X+KW5rsfwAAAOggd/+f4xb7HwAAAJaRu/8vcYv9DwAAAMvI3f/XuKXJ/tf/6/+X7P99/1//r/8fhv5f/79F/6//n/n9+n/9P/tG6/9z9/8tbmmy/wEAAKCD3P23xS32PwAAACwjd//f4xb7HwAAAJaRu/8fcUuT/a//1//r//X/+n/9/5H0//r/Lfp//f/M79f/6//ZN1r/n7v/n3FLk/0PAAAAHeTu/1fcYv8DAADAMnL3/ztusf8BAABgGbn7/xO3NNn/+n/9v/5f/6//v+r+/zb9/7XT/+v/t+j/9f8zv1//r/9n32j9f+7+/wUAAP//nxswJg==")
open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
getdents(0xffffffffffffffff, &(0x7f0000000340)=""/184, 0xb8)
sched_setaffinity(0x0, 0x0, 0x0)
r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0)
syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x2c09, &(0x7f0000002400)=ANY=[@ANYBLOB="646d61736b3d30303030303030303030303030303053303030000000002c696f636861727365743d63703835352c6572726f72733d72656d6f756e742d726f2c646d61736b3d303030303030303030303030303030262d303030303031312c756964431ffc33adce54bcc445e4701841af2a959531c70ce613f9052cb0ffa96af8e66dbde62fabeacffe7643218516fbc13440b21b013fd3a50d151d8cdd8e31e786075c8bf309f125307ce74b887bdd185d445bd9ac542b1a68a8cc77d4b230f38d5d8e11e89409a830832d0590396e8ec47f8903dd824fd300000000", @ANYRES32=r0, @ANYBLOB="f147fb4c3b2b0ec6fc6b7b09abb3cfd87ff02ff395cc3527f94153718cb1bf701dfe2cb8c8fbcd609e99ad0dea3f0644e22b0f52c236ab33b8c298d5b8442326b260943949cb2fa96afabe0a6a6f9ddbb8fe4e5f46c9c04b20d2ed1e"], 0x6, 0x151c, &(0x7f00000037c0)="$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")
socket$inet_tcp(0x2, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/schedstat\x00', 0x0, 0x0)
read$FUSE(r1, &(0x7f0000005500)={0x2020, 0x0, 0x0, <r2=>0x0, <r3=>0x0, <r4=>0x0}, 0x2020)
syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file0\x00', 0x20010080, &(0x7f0000000480)=ANY=[@ANYBLOB='allow_utime=00000000000000000000007,dmask=00000000000000001,iocharset=macroman,allow_utime=00000000000000000000002,uid=', @ANYRES64=r4, @ANYRESOCT=r2, @ANYBLOB="2a3a6dc4d70cd8504afe4f20df34ad3cf37d706dd73fa3d0", @ANYBLOB="00001b0087e1e85631dc26e7a9ce3c4396436bc6736574e997938c382c009cd0aeba477396b2cb852b9c7a6a4bf39e0368bfe3e9c44e297aeade0000000000fb4fffa3da2229249f9eae67b594fb156feb62be500e4840d9758d3d1f11577798871b0a2d0009ae68165160d703b90f86d96495fc48f43da2e2147ad08090", @ANYRESHEX=r3], 0x1, 0x14ee, &(0x7f0000004000)="$eJzs3Au0jtX2MPA511qPW9Kb5L7mmg9v2lgkSS5JckmSJElyS0iSJAmJTW5JSELuSe4hucVO7vdb7klyJEkSEpKsb+ic89ep842+b5y+z/8/9vyNscZecz97rneud77jfZ/n2WPvbzsOrlq/WqW6zAz/Efz7l1QAyAQA/QDgGgCIAKBU9lLZLx3PrDH1P3sQ8dd6aNqVrkBcSdL/9E36n75J/9M36X/6Jv1P36T/6Zv0P32T/guRnm2dnudaGel3yP3/9Ew+/9M36X/6Jv1P36T/6Zv0P32T/qdv0v/0Tfqfvkn/hUjPrvT95/85I+M/nrErXcdfO67wy08IIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghRDpxLlxmAOCf8ytdlxBCCCGEEEIIIf46IeOVrkAIIYQQQgghhBD/7yEo0GAgggyQETJBZsgCV0FWuBqywTWQgGshO1wHOeB6yAm5IDfkgbyQD/KDBQIHDDEUgIKQhBugENwIKVAYikBR8FAMisNNUAJuhpJwC5SCW6E03AZloCyUg/JwO1SAO6Ai3AmV4C6oDFWgKlSDu6E63AM14F6oCfdBLbgfzpX5e5V14SGoBw9DfXgEGsCj0BAaQWNoAk1/n48I8Jv82vAA1IEHf5f/InSFl6AbdIdU6AE94WXoBb2hD/SFfvAK9IdXYQC8BgNhEAyG12EIvAFD4U0YBsNhBLwFI2EUjIYxMBbGwXh4GybAOzAR3oVJMBmmwFSYBtNhBrwHM2EWzIb3YQ58AHNhHsyHBbAQPoRFsBjS4CNYAh/DUlgGy2EFrIRVsBrWwFpYB+thA2yETbAZtsBW+AS2wXbYATthF+yGPfAp7IXPYB98Dvvhi//L/LO/y++EgIAKFRo0mAEzYCbMhFkwC2bFrJgNs2ECE5gds//XiyU35sa8mBfzY34kJGRkLIAFMIlJLISFMAVTsAgWQY8ei2NxLIE3Y0ksiaWwFJbG0lgGy2JZLI/lsQJWwIpYESthJayMlbEqVsW78W68B2tgDayJNbEW1sLaWBvrYB2si3WxHtbD+lgfG2ADbIgNsTE2xqbYFJthM2yOzbEltsRW2ApbY2tsg22wLbbFdtgO22N77IAdsCN2xE7YGTvji/givoQvYXesrHpgT+yJvbAX9sG+2Bdfwf74Kr6Kr+FAHISD8XV8Hd/AoXgGh+FwHIEjsIIahaNxDLIah+NxPE7ACTgRJ+IknIyTcSpOw+k4A2fgTJyFs/B9nIMf4Ac4D+fhAlyIC3ERLsY0TMMleBaX4jJcjitwJa7ClbgG1+IaXI8bcD1uwk24BbfgJ/gJbsftuBN34m7cjZ/ip/gZfoYDcT/uxwN4AA/iQTyEh/AwHsYjeASP4lE8hsfwOB7HE3gST+FJPI2n8QyexXN4Ds/jebyAz+f9ut7uwusGgrrEKKMyqAwqk8qksqgsKqvKqrKpbCqhEiq7yq5yqBwqp8qpcqvcKq/Kq/Kr/IoUKVaxKqAKqKRKqkKqkEpRKaqIKqK88qq4Kq5KqBKqpCqpSqlbVWl1myqjyqoWvrwqryqolr6iulNVUpVUZVVFVVXVVDVVXVVXNVQNVVPVVLVULVVbPaDqqB7YBx9SlzpTXw3CBmowNlSNVGPVRL2Bj6lmaig2Vy1US/WEGo7DsLVq5tuop1VbNRrbqWfVGHxOdVDjsKN6QXVSnVUX9aLqqpr7bqq7moQ9VE81FXup3qqP6qtmYhV1qWNV1WtqoBqkBqvX1QJ8Qw1Vb6phargaod5SI9UoNVqNUWPVODVeva0mqHfURPWumqQmqylqqpqmpqsZ6j01U81Ss9X7ao76QM1V89R8tUAtVB+qRWqxSlMfqSXqY7VULVPL1Qq1Uq1Sq9UatVatU+vVBrVRbVKb1Ra1VX2itqntaofaqXap3WqP+lTtVZ+pfepztV99oQ4oTAX4Uh1SX6nD6mt1RH2jjqpv1TH1nTquvlcn1El1Sv2gTqsf1Zlf3xsBQP2sLqhf1EUVFGjUSmttdKQz6Iw6k86ss+irdFZ9tc6mr9EJfa3Orq/TOfT1OqfOpXPrPDqvzqfza6tJO8061gV0QZ3UN+hC+kadogvrIrqo9rqYLq5v0iX0zbqkvkWX0rfq0vo2XUaX1eV0eX27rqDv0BX1nbqSvktX1lV0VV1N362r63t0DX2vrqnv07X0/bq2fkDX0Q/quvohXU8/rOvrR3QD/ahuqBvpxrqJbqof083047q5bqFb6id0K/2kbq2f0m3007qtfka308/q9vo53UE/rzvqF3Qn3Vl30b/oizrobrq7TtU9dE/9su6le+s+uq/up1/R/fWreoB+TQ/Ug/Rg/boeot/QQ/Wbepgerkfot/RIPUqP1mP0WD1Oj9dv6wn6HT1Rv6sn6cl6ip6qp+npus8/Vpr9f5D/zr/JH/Dro2/RW/UnepvernfonXqX3q336D16r96r9+l9er/erw/oA/qgPqgP6UP6sD6sj+gj+qg+qo/pY/q4Pq5P6JP6J/2DPq1/1Gf0WX1W/6TP6/P6wj+eAzBolNHGmMhkMBlNJpPZZDFXmazmapPNXGMS5lqT3VxncpjrTU6Ty+Q2eUxek8/kN9aQcYZNbAqYgiZpbjCFzI0mxRQ2RUxR400xU9zc9B/n/1l9TU1T08w0M81Nc9PStDStTCvT2rQ2bUwb09a0Ne1MO9PetDcdTAfT0XQ0nUwn08V0MV1NV9PNdDOpJtX0NC+bXqa36WP6mn7mFdPf9DcDzAAz0Aw0g81gM8QMMUPNUDPMDDMjzAgz0ow0o81oM9aMNePNeDPBTDATzUQzyUwyU8wUM81MMzPMDDPTzDSzzWwzx8wxc81cM9/MNwvNQrPILDJpJs0sMUvMUrPMLDMrzAqzyqwya8was86sMxvMBrPJbDJLzVaz1Wwz28wOs8PsMrvMHrPH7DV7zT6zz+w3+80Bc8AcNAfNIXPIHDaHzRFzxBw1R80xc8wcN8fNCXPCnDKnzGlz2pwxZ8w5c86cN+fNBXPBXDQXL532RSpSkYlMlCHKEGWKMkVZoixR1ihrlC3KFiWiRJQ9yh7liK6Pcka5otxRnihvlC/KH9mIIhdxFEcFooJRMrohKhTdGKVEhaMiUdHIR8Wi4tFNUYno5qhkdEtUKro1Kh3dFpWJykblovLR7VGF6I6oYnRnVCm6K6ocVYmqRtWiu6Pq0T1RjejeqGZ0X1Qruj+qHT0Q1YkejOpGD0X1ooej+tEjUYPo0ahh1ChqHDWJmv6l64dwJtfjvpvtblNtD9vTvmx72d62j+1r+9lXbH/7qh1gX7MD7SA72L5uh9g37FD7ph1mh9sR9i070o6yo+0YO9aOs+Pt23aCfcdOtO/aSXaynWKn2ml2up1h37Mz7Sw7275v59gP7Fw7z863C+xC+6FdZBfbNPuRXWI/tkvtMrvcrrAr7Sq72q6xa+06u95usBvtJrvZbrFb7Sd2m91ud9iddpfdbffYT+1e+5ndZz+3++0X9oD9m1XwpT1kv7KH7df2iP3GHrXf2mP2O3vcfm9P2JP2lP3BnrY/2jP2rD1nf7Ln7c/2gv3FXrTh0sn9pY93MmQoA2WgTJSJslAWykpZKRtlowQlKDtlpxyUg3JSTspNuSkv5aX8lJ8uYWIqQAUoSUkqRIUohVKoCBUhT56KU3EqQSWoJJWkUlSKSlNpKkNlqByVo9vpdrqD7qA76U66i+6iKlSFqlE1qk7VqQbVoJpUk2pRLapNtakO1aG6VJfqUT2qT/WpATWghtSQGlNjakpNqRk1o+bUnFpSS2pFrag1taY21IbaUltqR+2oPbWnDtSBOlJH6kSdqAt1oa7UlbpRN0qlVOpJPakX9aI+1If6UT/qT/1pAA2ggTSQBtNgGkJDaCgNpWE0nEbQWzSSRtFoGkNjaRyNp/E0gSbQRJpIk2gSTaEpNI2m0QyaQTNpJs2m2TSH5tBcmkvzaT4tpIW0iBZRGqXRElpCS2kpLafltJJW0mpaTWtpLa2n9bSRNtJm2kxbaStto220g3bQLtpFe2gP7aW9tI/20X7aTwfoAB2kg3SIDtFhOkxH6AgdpaN0jI7RcTpOJ+gEnaJTdJpO0xk6Q+foHJ2nn+kC/UIXKVAml9llcVe5rO5ql81d434f53Z5XF6Xz+V31uV0uf4lJudciivsiriizrtirri76Q9xGVfWlXPl3e2ugrvDVfxDXN3d42q4e11Nd5+r5u7+l7iWu9/Vdo+4Ou5RV9c1cvVcE1ffPeIauEddQ9fINXZNXCv3pGvtnnJt3NOurXvmD/Eit9itdevcerfB7XWfuXPuJ3fUfevOu59dN9fd9XOvuP7uVTfAveYGukF/iEe4t9xIN8qNdmPcWDfuD/EUN9VNc9PdDPeem+lm/SFe6D50c1yam+vmufluwa/xpZrS3EduifvYLXXL3HK3wq10q9xqt+a/al3hNrnNbovb4z5129x2t8PtdLvc7l/jS/vY5z53+90X7oj7xh10X7pD7pg77L7+Nb60v2PuO3fcfe9OuJPulPvBnXY/ujPu7K/7v7T3H9wv7qILDhhZsWbDEWfgjJyJM3MWvoqz8tWcja/hBF/L2fk6zsHXc07Oxbk5D+flfJyfLRM7Zo65ABfkJN/AhfhGTuHCXISLsudiXJxv4hJ8M5fkW7gU38ql+TYuw2W5HJfn27kC38EV+U6uxHdxZa7CVbka383V+R6uwfdyTb6Pa/H9XJsf4Dr8INflh7geP8z1+RFuwI9yQ27EjbkJN+XHuBk/zs25BbfkJ7gVP8mt+Sluw09zW36G2/Gz3J6f4w78PHfkF7gTd+Yu/CJ35Ze4G3fnVO7BPfll7sW9uQ/35X78CvfnV3kAv8YDeRAP5td5CL/BQ/lNHsbDeQS/xSN5FI/mMTyWx/F4fpsn8Ds8kd/lSTyZp/BUnsbTeQa/xzN5Fs/m93kOf8BzeR7P5wW8kD/kRbyY0/gjXsIf81Jexst5Ba/kVbya1/BaXsfreQNv5E28mbfwVv6Et/F23sE7eRfv5j38Ke/lz3gff877+Qs+wH/jg/wlH+Kv+DB/zUf4Gz7K3/Ix/o6P8/d8gk/yKf6BT/OPfIbP8jn+ic/zz3yBf+GLHBhijFWsYxNHcYY4Y5wpzhxnia+Ks8ZXx9nia+JEfG2cPb4uzhFfH+eMc8W54zxx3jhfnD+2McUu5jiOC8QF42R8Q1wovjFOiQvHReKisY+LxcXjm+IS8c1xyfiWuFR8a1w6vi0uE5eNH7mvfHx7XCG+I64Y3xlXiu+KK8dV4qpxtfjuuHp8T1wjvjeuGd8Xl4zvj2vHD8R14gfjuvFDcb344bh+/EjcIH40bhg3ihvHTeKm8WNxs/jxuHncIm4ZPxG3ip+MW8dPxW3ip+O28TN/ejw17hH3jF+OX45DuFfPTy5ILkx+mFyUXJxMS36UXJL8OLk0uSy5PLkiuTK5Krk6uSa5NrkuuT65IbkxuSm5ObklGUK1jODRK6+98ZHP4DP6TD6zz+Kv8ln91T6bv8Yn/LU+u7/O5/DX+5w+l8/t8/i8Pp/P760n7zz72BfwBX3S3+AL+Rt9ii/si/ii3vtivrhv4pv6pr6Zf9w39y18S/+Ef8I/6Z/0T/mn/NO+rX/Gt/PP+vb+Od/BP++f9y/4Tr6z7+Jf9F39S76b7+5Tfarv6Xv6Xr6X7xOB7+f7+f6+vx/gB/iBfqAf7Af7IX6IH+qH+mF+mB/hR/iRfqQf7Uf7sX6sH+/H+wl+gp/oJ/pJfpKf4qf4aX6an+Fn+Jl+pp/tZ/s5KXP8XD/Xz/fz/UK/0C/yi3yaT/NL/BK/1C/1y/1yv9Kv9Kv9ar/Wr/Xr/Xq/0W/0m/1mv9Vv9dv8Nr/D7/C7/C6/x+/xe/1ev8/v8/v9fn/AH/AH/UF/yH/lD/uv/RH/jT/qv/XH/Hf+uP/en/An/Sn/gz/tf/Rn/Fl/zv/kz/uf/QX/i7/ogx+feDsxIfFOYmLi3cSkzJMTUxJTE9MS0xMzEu8lZiZmJWYn3k/MSXyQmJuYl5ifWJBYmPgwsSixOJGW+CixJPFxYmliWWJ5YkViZWJVIoR82+JQIBQMyXBDKBRuDCmhcCgSigYfioXi4aZQItwcSoZbQqlwaygdbgtlQtlQLjwaGoZGoXFoEpqGx0Kz8HhoHlqEluGJ0Co8GVqHp0Kb8HRoG54J7cKzoX14LnQIz4eO4YXQKXQOXcKLoWt4KXQL3UNq6BF6hpdDr9A79Al9Q7/wSugfXg0DwmthYBgUBofXw5DwRhga3gzDwvAwIrwVRoZRYXQYE8aGcWF8eDtMCO+EieHdMClMDlPC1DAtTA8zwnthZpgVZof3w5zwQZgb5oX5YUFYGD4Mi8LikBY+CkvCx2FpWBaWhxVhZVgVVoc1YW1YF9aHDWFj2BQ2hy1ha/gkbAvbw46wM+wKu8Oe8GnYGz4L+8LnYX/4IhwIfwsHw5fhUPgqHA5fhyPhm3A0fBuOhe/C8fB9OBFOhlPhh3A6/BjOhLPhXPgpnA8/hwvhl3Dx179Z636lbqILIYQQQvyPkfonx3v8m++pf4xLegLA1dvzHP7tcQ0AG3P+fd5b5W2VAICnu3d86J+jcuXU1H8+7lINUcF5AJC4nJ8BLsfLoCU8CW2gBZSAf/766rd6q87n+U/WT94KkOU3OZngcnx5/Zv/7f57q1Fz/nT9eQApBS/nZIbL8eX1S/5v1s/V7E/Wz/zleIDmv8nJCpfjy+sXh8fhGWjzLz8phBBCCCGEEEL8XW9Vrv2fXd9euj7Pay7nZITL8W+vz4UQQgghhBBCCPHf03Oduzz1WJs2LdrL5L/jZLe0SSZXZnKF35iEEEIIIYQQf7nLJ/1XuhIhhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEECL9+v/x78Su9B6FEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEKIK+1/BQAA///apiom")
rmdir(&(0x7f0000000100)='./control\x00')
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
listen(r5, 0x0)
r6 = syz_open_procfs(0x0, &(0x7f00000023c0)='net/tcp\x00')
close(r5)
read$FUSE(r6, &(0x7f0000004440)={0x2020}, 0x2020)

1.208791213s ago: executing program 0:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000004c0)={0xf000})
ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000500))

0s ago: executing program 3:
syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x8, &(0x7f0000000180)={[{@type={'type', 0x3d, "d0a8c62b"}}, {@dir_umask={'dir_umask', 0x3d, 0x6}}, {@uid}, {@umask={'umask', 0x3d, 0xaf}}, {@iocharset={'iocharset', 0x3d, 'koi8-r'}}, {@codepage={'codepage', 0x3d, 'maciceland'}}]}, 0x1, 0x2fc, &(0x7f00000008c0)="$eJzs3U9PE08cx/HPbFsof8Jvf4Ax8aJBSPRixD+JMSYY0pvh7smotCTEBiNgol5A403jA/Dmwafgg/CgxpsnPXnyAXBbM9PZsgvbLQ2UBXy/Eprt7Mzsd51uZ76b1BWAf9Z87efHq7/tn5FKKkm6KQWSqlJZ0imdrj5dWV9ebzbqeR2VXAv7Z9RqaXbVWVxpZDW17VwLL7TvyhpNlqE/oii6/avoIFA4d/VnCKRBfx26/dVDjqtfNqWzRcdw2JIDbLa0pWcaKzAcAMAR4Of/wE8To67IKAikGT/tn6j5f6voAA7Wteauoii3gZv/fwyPxZlXZOz4/ud2bed7LoWz+4M4S9xLMJUd7wfU+mSlFpimW1bpYgmGlpbLurT4UvVArzTnJapNutd666Mb6xLtVEZumqNzbxUtDLfOxq0od4pDWlpuNgbtRkb8E70dcX/e2FA/m2/mngn1XvX2+q8cGTtMbqTCHSMVVGz8lzv3OuJa2Vryaf+coiBV5X93kDP+CF6Xs6xmZyTJPuMbBJvtCPLidMceV/q2QuvsZru0mshqFbbfdWg1mWpVStwTyb2V0h/xKZp35q6Z0h99Ui2x/g9sfDNKXJl5X/XG1fSfjMXHzXp6ZBPKrma4a+bYvlzOtSPwBns+N0g93i17q4e6obG15y8elZrNxqrdeJCx8WR01fiSymsps07/N0rKqaPN7ZLI2oiivfYc9TP4iwfaof3+aJfYyyersr3K2iVB957jubqAMe3XxoY/pT4eovb1hPyLRZGUKlm49cXvOvDvJxxBayYefV8wVHBAOGx23WVa+Z9byftVnVuq2pcwZ52en2Qq1eNsO4NLLwXH3etwTxncSOcMLnHEKx1yRpdznb8gTScKjfwRNzK7DX2cJ4Sp6bvuc/8fAAAAAAAAAAAAAAAAAADguNnLTwUCSfv5pUHR5wgAAAAAAAAAAAAAAAAAAAAAwHE3Xxvo/fm/Wf9HvHv+b5j1/N8P16fvtLZ4/i9wpPwNAAD//9pfcAo=")
open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
getdents(0xffffffffffffffff, &(0x7f0000000040)=""/104, 0x4d)

kernel console output (not intermixed with test programs):

e syscall=202 compat=0 ip=0x7fdf1907cea9 code=0x7ffc0000
[  167.583322][   T26] audit: type=1326 audit(1718310300.480:8954): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5170 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fdf1907a627 code=0x7ffc0000
[  167.632097][   T26] audit: type=1326 audit(1718310300.480:8955): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5170 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fdf19040309 code=0x7ffc0000
[  167.642968][ T5197] loop2: detected capacity change from 0 to 1024
[  167.670076][   T26] audit: type=1326 audit(1718310300.480:8956): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5170 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=217 compat=0 ip=0x7fdf1907cea9 code=0x7ffc0000
[  167.782168][ T5197] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[  167.866230][ T5202] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[  168.039133][ T5202] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'.
[  168.236435][ T3577] Bluetooth: hci3: command tx timeout
[  170.074082][ T5174] chnl_net:caif_netlink_parms(): no params data found
[  170.223514][ T5212] loop2: detected capacity change from 0 to 1024
[  170.314389][   T48] Bluetooth: hci3: command tx timeout
[  170.380863][ T5174] bridge0: port 1(bridge_slave_0) entered blocking state
[  170.404155][ T5174] bridge0: port 1(bridge_slave_0) entered disabled state
[  170.437483][ T5174] device bridge_slave_0 entered promiscuous mode
[  170.463205][ T4169] device hsr_slave_0 left promiscuous mode
[  170.495131][    T9] hfsplus: b-tree write err: -5, ino 4
[  170.519702][ T4169] device hsr_slave_1 left promiscuous mode
[  170.565831][ T4169] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  170.593020][ T4169] batman_adv: batadv0: Removing interface: batadv_slave_0
[  170.626655][ T4169] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  170.643993][ T4169] batman_adv: batadv0: Removing interface: batadv_slave_1
[  170.662484][ T4169] device bridge_slave_1 left promiscuous mode
[  170.680834][ T4169] bridge0: port 2(bridge_slave_1) entered disabled state
[  170.748041][ T4169] device bridge_slave_0 left promiscuous mode
[  170.777332][ T4169] bridge0: port 1(bridge_slave_0) entered disabled state
[  170.867548][ T5207] loop0: detected capacity change from 0 to 32768
[  170.881826][ T4169] device veth1_macvtap left promiscuous mode
[  170.899173][ T5207] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (5207)
[  170.912872][ T4169] device veth0_macvtap left promiscuous mode
[  170.923756][ T4169] device veth1_vlan left promiscuous mode
[  170.939371][ T4169] device veth0_vlan left promiscuous mode
[  170.963366][ T5207] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  171.013827][ T5207] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  171.044866][ T5207] BTRFS info (device loop0): use zlib compression, level 3
[  171.063689][ T5207] BTRFS info (device loop0): using free space tree
[  171.264870][ T5207] BTRFS error (device loop0): open_ctree failed
[  171.712052][ T5247] loop1: detected capacity change from 0 to 16
[  171.737023][ T5247] erofs: (device loop1): mounted with root inode @ nid 36.
[  171.756745][ T5247] syz-executor.1: attempt to access beyond end of device
[  171.756745][ T5247] loop1: rw=0, sector=8, nr_sectors = 16 limit=16
[  171.983152][ T5247] syz-executor.1: attempt to access beyond end of device
[  171.983152][ T5247] loop1: rw=0, sector=8, nr_sectors = 16 limit=16
[  171.998325][ T5247] syz-executor.1: attempt to access beyond end of device
[  171.998325][ T5247] loop1: rw=0, sector=8, nr_sectors = 16 limit=16
[  172.014486][ T5247] syz-executor.1: attempt to access beyond end of device
[  172.014486][ T5247] loop1: rw=0, sector=8, nr_sectors = 16 limit=16
[  172.029634][ T5247] syz-executor.1: attempt to access beyond end of device
[  172.029634][ T5247] loop1: rw=0, sector=8, nr_sectors = 16 limit=16
[  172.090022][ T4169] team0 (unregistering): Port device team_slave_1 removed
[  172.131864][ T5250] loop0: detected capacity change from 0 to 256
[  172.167543][ T5250] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001)
[  172.184611][ T4169] team0 (unregistering): Port device team_slave_0 removed
[  172.203716][ T5250] FAT-fs (loop0): Filesystem has been set read-only
[  172.214518][ T4169] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  172.370012][ T5260] loop2: detected capacity change from 0 to 1024
[  172.377990][ T4169] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  172.394147][   T48] Bluetooth: hci3: command tx timeout
[  172.979380][ T4169] bond0 (unregistering): Released all slaves
[  173.495447][ T5266] loop1: detected capacity change from 0 to 128
[  173.506928][ T5266] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2
[  173.538316][ T5174] bridge0: port 2(bridge_slave_1) entered blocking state
[  173.551647][ T5174] bridge0: port 2(bridge_slave_1) entered disabled state
[  173.574980][ T5174] device bridge_slave_1 entered promiscuous mode
[  173.606884][ T5266] loop1: detected capacity change from 0 to 1024
[  173.637691][ T5270] loop4: detected capacity change from 0 to 1024
[  173.693287][ T5174] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  173.713861][ T5266] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  173.766548][ T5174] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  173.803754][ T5274] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  173.878480][   T40] hfsplus: b-tree write err: -5, ino 4
[  173.879748][ T5274] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  173.910141][ T5174] team0: Port device team_slave_0 added
[  173.936323][ T5174] team0: Port device team_slave_1 added
[  174.026731][ T5174] batman_adv: batadv0: Adding interface: batadv_slave_0
[  174.043744][ T5174] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  174.113316][ T5174] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  174.174455][ T5174] batman_adv: batadv0: Adding interface: batadv_slave_1
[  174.203703][ T5174] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  174.312087][ T5174] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  174.474045][   T48] Bluetooth: hci3: command tx timeout
[  174.482126][ T5268] loop2: detected capacity change from 0 to 32768
[  174.545217][ T5268] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by syz-executor.2 (5268)
[  174.564182][ T5174] device hsr_slave_0 entered promiscuous mode
[  174.590388][ T5268] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  174.601389][ T5174] device hsr_slave_1 entered promiscuous mode
[  174.615253][ T5174] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  174.634306][ T5268] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  174.638856][ T5174] Cannot create hsr debugfs directory
[  174.678447][ T5268] BTRFS info (device loop2): force clearing of disk cache
[  174.706224][ T5268] BTRFS info (device loop2): use zlib compression, level 3
[  174.743528][ T5268] BTRFS info (device loop2): using free space tree
[  174.763377][ T5276] loop0: detected capacity change from 0 to 32768
[  174.780047][ T5276] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (5276)
[  174.802731][ T5276] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  174.823469][ T5276] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm
[  174.834580][ T5276] BTRFS info (device loop0): use zlib compression, level 3
[  174.852552][ T5276] BTRFS info (device loop0): using free space tree
[  174.904982][ T5268] BTRFS info (device loop2): enabling ssd optimizations
[  174.915483][ T5268] BTRFS info (device loop2): rebuilding free space tree
[  174.967519][ T5276] BTRFS info (device loop0): enabling ssd optimizations
[  175.013776][   T26] kauditd_printk_skb: 329 callbacks suppressed
[  175.013792][   T26] audit: type=1804 audit(1718310308.230:9286): pid=5276 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir59175834/syzkaller.cqiw5W/79/file0/bus" dev="loop0" ino=263 res=1 errno=0
[  175.168981][   T26] audit: type=1804 audit(1718310308.360:9287): pid=5322 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir59175834/syzkaller.cqiw5W/79/file0/bus" dev="loop0" ino=263 res=1 errno=0
[  175.204911][   T26] audit: type=1804 audit(1718310308.370:9288): pid=5276 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir59175834/syzkaller.cqiw5W/79/file0/bus" dev="loop0" ino=263 res=1 errno=0
[  175.310804][ T5327] loop4: detected capacity change from 0 to 1024
[  175.440053][ T3586] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  175.776488][ T5174] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  175.802747][ T5174] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  175.836828][ T5174] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  175.870299][ T5174] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  177.400890][ T5174] 8021q: adding VLAN 0 to HW filter on device bond0
[  177.495356][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  177.523359][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  177.555624][ T5174] 8021q: adding VLAN 0 to HW filter on device team0
[  177.582373][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  177.611776][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  177.629741][ T5344] loop0: detected capacity change from 0 to 1024
[  177.638694][    T7] bridge0: port 1(bridge_slave_0) entered blocking state
[  177.645927][    T7] bridge0: port 1(bridge_slave_0) entered forwarding state
[  177.784838][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  177.823699][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  177.841138][ T5347] loop1: detected capacity change from 0 to 128
[  177.885712][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  177.905974][ T5124] hfsplus: b-tree write err: -5, ino 4
[  177.928216][ T5347] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2
[  177.930895][    T7] bridge0: port 2(bridge_slave_1) entered blocking state
[  177.943672][    T7] bridge0: port 2(bridge_slave_1) entered forwarding state
[  178.026872][ T5347] loop1: detected capacity change from 0 to 1024
[  178.039159][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  178.082877][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  178.138200][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  178.194041][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  178.247442][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  178.284218][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  178.321222][    T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  178.347775][ T5347] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  178.370109][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  178.386577][   T22] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  178.419264][ T5351] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  178.436959][ T5174] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  178.487082][ T5174] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  178.535746][ T5351] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  178.558277][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  178.584954][ T3629] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  178.727576][ T3580] BTRFS info (device loop2): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  179.229224][ T5341] loop4: detected capacity change from 0 to 40427
[  179.246602][ T5341] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  179.263093][ T5341] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  179.327422][ T5341] F2FS-fs (loop4): Found nat_bits in checkpoint
[  179.430369][ T3625] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  179.441349][ T3625] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  179.464369][ T5174] 8021q: adding VLAN 0 to HW filter on device batadv0
[  179.484392][ T5341] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  179.491494][ T5341] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  179.513770][ T5360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  179.529321][ T5360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  179.587407][ T5360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  179.611316][ T5360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  179.622082][ T3625] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  179.704675][ T3625] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  179.723029][ T5174] device veth0_vlan entered promiscuous mode
[  179.759262][ T5174] device veth1_vlan entered promiscuous mode
[  179.801431][ T5360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  179.818428][ T5360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  179.830041][ T5174] device veth0_macvtap entered promiscuous mode
[  179.849590][ T5174] device veth1_macvtap entered promiscuous mode
[  179.919591][ T5174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  180.088623][ T5174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  180.104619][ T5174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  180.129116][ T5174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  180.179872][ T5174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  180.190469][ T5174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  180.200389][ T5174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  180.211041][ T5174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  180.220944][ T5174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  180.231526][ T5174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  180.246233][ T5174] batman_adv: batadv0: Interface activated: batadv_slave_0
[  180.262637][ T5174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  180.273332][ T5174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  180.283262][ T5174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  180.296748][ T5174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  180.312330][ T5174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  180.343448][ T5174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  180.413473][ T5174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  180.464205][ T5174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  180.490829][ T5174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  180.560569][ T5174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  180.615454][ T5174] batman_adv: batadv0: Interface activated: batadv_slave_1
[  180.686660][ T5174] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  180.785205][ T5174] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  180.847205][ T5174] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  180.913908][ T5174] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  181.222345][ T3625] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  181.248862][ T3625] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  181.292351][ T3625] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  181.328896][ T3625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  181.362004][ T3625] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  181.398171][ T3625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  181.532644][ T3838] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  181.555959][ T3838] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  181.601767][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  181.636930][ T4169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  181.656074][ T4169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  181.682954][ T3292] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  182.207743][ T5397] loop1: detected capacity change from 0 to 1024
[  182.433053][ T3838] hfsplus: b-tree write err: -5, ino 4
[  183.070897][ T5406] loop3: detected capacity change from 0 to 32768
[  183.086489][ T5406] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by syz-executor.3 (5406)
[  183.121955][ T5406] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  183.148223][ T5406] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  183.169481][ T5406] BTRFS info (device loop3): force clearing of disk cache
[  183.185083][ T5406] BTRFS info (device loop3): use zlib compression, level 3
[  183.200213][ T5406] BTRFS info (device loop3): using free space tree
[  183.406402][ T5406] BTRFS info (device loop3): enabling ssd optimizations
[  183.421001][ T5406] BTRFS info (device loop3): rebuilding free space tree
[  183.561909][ T5418] loop1: detected capacity change from 0 to 40427
[  183.589968][ T5418] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  183.609031][ T5418] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  183.862394][ T5418] F2FS-fs (loop1): Found nat_bits in checkpoint
[  183.955121][ T5458] loop0: detected capacity change from 0 to 256
[  184.088227][ T5418] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  184.104870][ T5418] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  184.374875][ T5469] loop4: detected capacity change from 0 to 1024
[  184.547252][   T40] hfsplus: b-tree write err: -5, ino 4
[  185.211740][ T5477] loop2: detected capacity change from 0 to 512
[  185.235367][ T5477] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[  185.246370][ T5477] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[  185.269763][ T5477] EXT4-fs error (device loop2): __ext4_get_inode_loc:4495: comm syz-executor.2: Invalid inode table block 0 in block_group 0
[  185.300368][ T5477] EXT4-fs (loop2): get root inode failed
[  185.322192][ T5477] EXT4-fs (loop2): mount failed
[  185.544358][ T5487] EXT4-fs (sda1): re-mounted. Quota mode: none.
[  185.652140][ T5494] loop4: detected capacity change from 0 to 256
[  185.972363][ T5508] loop2: detected capacity change from 0 to 1024
[  186.156792][   T40] hfsplus: b-tree write err: -5, ino 4
[  186.968633][ T5174] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  188.326263][ T5547] loop2: detected capacity change from 0 to 1024
[  189.120918][   T40] hfsplus: b-tree write err: -5, ino 4
[  190.488472][ T5574] loop2: detected capacity change from 0 to 32768
[  190.805048][ T5574] XFS (loop2): Mounting V5 Filesystem
[  191.114398][ T5574] XFS (loop2): Ending clean mount
[  191.192461][   T48] Bluetooth: hci1: command 0x0406 tx timeout
[  191.199539][ T3593] Bluetooth: hci2: command 0x0406 tx timeout
[  191.199548][ T3582] Bluetooth: hci4: command 0x0406 tx timeout
[  191.250029][ T5569] loop1: detected capacity change from 0 to 32768
[  191.259012][ T5569] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 scanned by syz-executor.1 (5569)
[  191.286389][ T5569] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  191.302909][ T5569] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm
[  191.433799][ T5569] BTRFS info (device loop1): force clearing of disk cache
[  191.436849][ T3593] Bluetooth: hci0: command 0x0406 tx timeout
[  191.452368][ T5569] BTRFS info (device loop1): use zlib compression, level 3
[  191.458100][ T3580] XFS (loop2): Unmounting Filesystem
[  191.459811][ T5569] BTRFS info (device loop1): using free space tree
[  192.616462][ T5569] BTRFS error (device loop1): open_ctree failed
[  194.382926][ T1255] ieee802154 phy0 wpan0: encryption failed: -22
[  194.389306][ T1255] ieee802154 phy1 wpan1: encryption failed: -22
[  194.727458][ T5664] =======================================================
[  194.727458][ T5664] WARNING: The mand mount option has been deprecated and
[  194.727458][ T5664]          and is ignored by this kernel. Remove the mand
[  194.727458][ T5664]          option from the mount to silence this warning.
[  194.727458][ T5664] =======================================================
[  197.724023][ T5674] loop4: detected capacity change from 0 to 32768
[  197.752673][ T5674] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (5674)
[  198.080527][ T5674] BTRFS info (device loop4): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  198.143258][ T5674] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  198.227233][ T5674] BTRFS info (device loop4): force clearing of disk cache
[  198.297767][ T5674] BTRFS info (device loop4): use zlib compression, level 3
[  198.361644][ T5674] BTRFS info (device loop4): using free space tree
[  198.858933][ T5735] random: crng reseeded on system resumption
[  199.614064][ T5674] BTRFS error (device loop4): open_ctree failed
[  200.097066][   T26] audit: type=1326 audit(1718310333.320:9289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5774 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f01c1c7cea9 code=0x0
[  200.176778][ T5732] loop0: detected capacity change from 0 to 40427
[  200.185461][ T5732] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  200.216039][ T5732] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  200.259960][ T5732] F2FS-fs (loop0): Found nat_bits in checkpoint
[  200.323780][ T5732] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  200.331488][   T26] audit: type=1800 audit(1718310333.550:9290): pid=5793 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1967 res=0 errno=0
[  200.334776][ T5732] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  200.352749][ T5761] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  200.383350][   T26] audit: type=1800 audit(1718310333.550:9291): pid=5793 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=1967 res=0 errno=0
[  200.430969][ T5782] loop1: detected capacity change from 0 to 256
[  200.615160][ T5761] usb 3-1: device descriptor read/64, error -71
[  200.637037][ T5782] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000001)
[  200.646114][ T5782] FAT-fs (loop1): Filesystem has been set read-only
[  201.593783][ T5761] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  201.793670][ T5761] usb 3-1: device descriptor read/64, error -71
[  201.914198][ T5761] usb usb3-port1: attempt power cycle
[  201.983093][ T5840] loop1: detected capacity change from 0 to 128
[  202.018932][ T5840] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2
[  202.174600][   T26] audit: type=1326 audit(1718310335.400:9292): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5847 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f19c5c7cea9 code=0x0
[  202.963004][ T5854] loop1: detected capacity change from 0 to 1024
[  203.039374][ T5854] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  203.070108][ T5854] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  203.087585][ T5854] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  203.110835][ T5863] random: crng reseeded on system resumption
[  203.151524][ T5857] loop2: detected capacity change from 0 to 256
[  203.193729][ T5862] device wg2 entered promiscuous mode
[  203.208689][ T5857] FAT-fs (loop2): error, invalid access to FAT (entry 0x00000001)
[  203.224537][ T5857] FAT-fs (loop2): Filesystem has been set read-only
[  203.384775][ T5873] device wg2 entered promiscuous mode
[  203.447344][ T5875] device wg2 entered promiscuous mode
[  204.680180][ T5903] loop1: detected capacity change from 0 to 128
[  204.728160][ T5903] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2
[  204.974791][ T5906] loop1: detected capacity change from 0 to 1024
[  204.993723][ T5760] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  205.099475][ T5906] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  205.153864][ T5906] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  205.183860][ T5760] usb 1-1: device descriptor read/64, error -71
[  205.222836][ T5906] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  205.453706][ T5760] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  205.643731][ T5760] usb 1-1: device descriptor read/64, error -71
[  205.783877][ T5760] usb usb1-port1: attempt power cycle
[  207.966144][ T5931] loop2: detected capacity change from 0 to 512
[  208.142264][ T5931] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  208.160258][ T5931] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002]
[  208.295010][ T5931] System zones: 0-1, 15-15, 18-18, 34-34
[  208.400755][ T5931] EXT4-fs (loop2): orphan cleanup on readonly fs
[  208.556714][ T5931] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0
[  208.730639][ T5931] EXT4-fs warning (device loop2): ext4_enable_quotas:7012: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  208.863675][ T5931] EXT4-fs (loop2): Cannot turn on quotas: error -22
[  208.901241][ T5931] EXT4-fs error (device loop2): ext4_orphan_get:1422: comm syz-executor.2: bad orphan inode 16
[  208.989554][ T5931] ext4_test_bit(bit=15, block=18) = 1
[  208.995130][ T5931] is_bad_inode(inode)=0
[  208.995266][ T5937] loop3: detected capacity change from 0 to 128
[  208.999292][ T5931] NEXT_ORPHAN(inode)=0
[  209.023768][ T5931] max_ino=32
[  209.027004][ T5931] i_nlink=2
[  209.030195][ T5931] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  209.055267][ T5937] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2
[  209.115319][ T3580] EXT4-fs (loop2): unmounting filesystem.
[  209.288212][ T5938] loop3: detected capacity change from 0 to 1024
[  209.370206][ T5938] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[  209.404044][ T5938] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[  209.460658][ T5938] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'.
[  209.550017][ T5947] random: crng reseeded on system resumption
[  209.816449][ T5952] loop4: detected capacity change from 0 to 32768
[  209.928177][ T5952] XFS (loop4): Mounting V5 Filesystem
[  210.041262][ T5952] XFS (loop4): Ending clean mount
[  210.052467][ T5952] XFS (loop4): Quotacheck needed: Please wait.
[  210.146827][ T5952] XFS (loop4): Quotacheck: Done.
[  210.213446][ T5964] loop3: detected capacity change from 0 to 4096
[  210.253301][ T5964] NILFS (loop3): invalid segment: Checksum error in segment payload
[  210.273655][ T5964] NILFS (loop3): trying rollback from an earlier position
[  210.304435][ T3579] XFS (loop4): Unmounting Filesystem
[  210.345950][ T5964] NILFS (loop3): recovery complete
[  210.370370][ T5965] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  210.733935][   T14] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  211.080275][ T5967] syz-executor.3 (5967): drop_caches: 2
[  211.092555][   T14] usb 3-1: device descriptor read/64, error -71
[  211.253008][ T5951] loop1: detected capacity change from 0 to 32768
[  211.308812][ T5951] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz-executor.1 (5951)
[  211.383868][   T14] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  211.583919][   T14] usb 3-1: device descriptor read/64, error -71
[  211.735305][   T14] usb usb3-port1: attempt power cycle
[  211.903724][ T5951] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  211.943946][ T5951] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  211.986793][ T5951] BTRFS info (device loop1): using free space tree
[  212.119975][ T5996] loop3: detected capacity change from 0 to 1024
[  212.135920][ T5996] EXT4-fs: Ignoring removed nobh option
[  212.144006][   T14] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  212.145258][ T5996] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  212.228660][ T5951] BTRFS info (device loop1): enabling ssd optimizations
[  212.231377][ T5996] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none.
[  212.253851][   T14] usb 3-1: device descriptor read/8, error -71
[  212.446779][ T3576] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  212.523722][   T14] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  212.603764][   T14] usb 3-1: device descriptor read/8, error -71
[  212.681155][ T6020] loop0: detected capacity change from 0 to 512
[  212.723942][   T14] usb usb3-port1: unable to enumerate USB device
[  212.765052][ T6020] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found
[  212.797519][ T6020] UDF-fs: Scanning with blocksize 512 failed
[  212.832657][ T6020] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found
[  212.848791][ T6020] UDF-fs: Scanning with blocksize 1024 failed
[  212.874936][ T6020] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found
[  212.918719][ T6020] UDF-fs: Scanning with blocksize 2048 failed
[  212.937904][ T6020] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  212.973129][ T6020] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  214.127433][ T6033] loop1: detected capacity change from 0 to 32768
[  214.249561][ T3659] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  214.275059][ T6020] device syzkaller0 entered promiscuous mode
[  214.306834][ T3659] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  214.352158][ T3659] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  214.449975][ T3659] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  214.491066][ T6045] loop2: detected capacity change from 0 to 128
[  214.515975][ T3659] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  214.523377][ T3659] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  214.569277][ T6045] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  214.588671][ T6045] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  214.602661][ T3659] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  214.650607][ T3659] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  214.711091][ T3659] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  214.743757][ T3659] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  214.782949][ T3659] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  214.791478][ T3659] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  214.806102][ T3659] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  214.815949][ T3659] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  214.840938][ T3659] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  214.851291][ T3659] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  214.901561][ T3659] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  214.936801][ T3659] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  214.961177][ T3659] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  215.011127][ T3659] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  215.018640][ T3659] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0
[  215.038075][ T3659] hid-generic 0000:0000:0000.0001: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  215.085734][ T6033] XFS (loop1): Mounting V5 Filesystem
[  215.300722][ T6033] XFS (loop1): Ending clean mount
[  215.311990][ T5174] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 32: comm syz-executor.3: path /root/syzkaller-testdir687897698/syzkaller.yKQjyV/39/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  215.329560][ T6050] loop2: detected capacity change from 0 to 256
[  215.363780][ T6050] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fe7f, chksum : 0x39626d3b, utbl_chksum : 0xe619d30d)
[  215.382138][ T3623] XFS (loop1): Metadata CRC error detected at xfs_rmapbt_read_verify+0x39/0xc0, xfs_rmapbt block 0x14 
[  215.397055][ T3623] XFS (loop1): Unmount and run xfs_repair
[  215.402815][ T3623] XFS (loop1): First 128 bytes of corrupted metadata buffer:
[  215.410426][ T3623] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff  RMB3............
[  215.419467][ T3623] 00000010: 00 a7 50 00 00 00 00 14 00 00 00 01 00 00 00 80  ..P.............
[  215.428453][ T3623] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91  ..G...N..b..1...
[  215.437465][ T3623] 00000030: 00 00 00 00 5b af 3b 1d 00 00 00 00 00 00 00 01  ....[.;.........
[  215.446398][   T26] audit: type=1800 audit(1718310348.660:9293): pid=6052 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=1964 res=0 errno=0
[  215.468677][ T6052] loop0: detected capacity change from 0 to 256
[  215.475982][ T5174] EXT4-fs error (device loop3): ext4_empty_dir:3099: inode #11: block 32: comm syz-executor.3: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  215.496195][ T3623] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00  ................
[  215.506628][ T3623] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb  ................
[  215.515808][ T3623] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02  ................
[  215.524922][ T3623] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00  ................
[  215.536467][ T6033] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x26e/0x370" at daddr 0x14 len 4 error 74
[  215.547394][ T6052] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x02a07125, utbl_chksum : 0xe619d30d)
[  215.550338][ T5174] EXT4-fs warning (device loop3): ext4_empty_dir:3101: inode #11: comm syz-executor.3: directory missing '.'
[  215.576324][ T6033] XFS (loop1): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x1acd/0x2210 (fs/xfs/libxfs/xfs_defer.c:573).  Shutting down filesystem.
[  215.592482][ T6033] XFS (loop1): Please unmount the filesystem and rectify the problem(s)
[  215.603673][ T5174] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 32: comm syz-executor.3: path /root/syzkaller-testdir687897698/syzkaller.yKQjyV/39/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  215.631275][ T5174] EXT4-fs error (device loop3): ext4_empty_dir:3099: inode #11: block 32: comm syz-executor.3: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  215.697793][ T3576] XFS (loop1): Unmounting Filesystem
[  215.711256][ T5174] EXT4-fs warning (device loop3): ext4_empty_dir:3101: inode #11: comm syz-executor.3: directory missing '.'
[  215.738359][ T5174] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 32: comm syz-executor.3: path /root/syzkaller-testdir687897698/syzkaller.yKQjyV/39/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  215.785327][ T5174] EXT4-fs error (device loop3): ext4_empty_dir:3099: inode #11: block 32: comm syz-executor.3: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  215.837611][ T5174] EXT4-fs warning (device loop3): ext4_empty_dir:3101: inode #11: comm syz-executor.3: directory missing '.'
[  215.882431][ T5174] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 32: comm syz-executor.3: path /root/syzkaller-testdir687897698/syzkaller.yKQjyV/39/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  215.939629][ T5174] EXT4-fs error (device loop3): ext4_empty_dir:3099: inode #11: block 32: comm syz-executor.3: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  215.980877][ T5174] EXT4-fs warning (device loop3): ext4_empty_dir:3101: inode #11: comm syz-executor.3: directory missing '.'
[  216.003410][ T5174] EXT4-fs error (device loop3): ext4_readdir:260: inode #11: block 32: comm syz-executor.3: path /root/syzkaller-testdir687897698/syzkaller.yKQjyV/39/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  216.033958][ T5753] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  216.060698][ T5174] EXT4-fs error (device loop3): ext4_empty_dir:3099: inode #11: block 32: comm syz-executor.3: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  216.074898][ T6056] exFAT-fs (loop2): hint_cluster is invalid (17)
[  216.095424][ T5174] EXT4-fs warning (device loop3): ext4_empty_dir:3101: inode #11: comm syz-executor.3: directory missing '.'
[  216.112976][ T6056] exFAT-fs (loop2): error, invalid access to FAT (entry 0xffffffff)
[  216.116701][ T5174] EXT4-fs warning (device loop3): ext4_empty_dir:3101: inode #11: comm syz-executor.3: directory missing '.'
[  216.131844][ T6056] exFAT-fs (loop2): Filesystem has been set read-only
[  216.149271][ T5174] EXT4-fs warning (device loop3): ext4_empty_dir:3101: inode #11: comm syz-executor.3: directory missing '.'
[  216.150370][ T6056] exFAT-fs (loop2): error, invalid access to FAT (entry 0xffffffff)
[  216.192004][ T5174] EXT4-fs warning (device loop3): ext4_empty_dir:3101: inode #11: comm syz-executor.3: directory missing '.'
[  216.211072][ T5174] EXT4-fs warning (device loop3): ext4_empty_dir:3101: inode #11: comm syz-executor.3: directory missing '.'
[  216.230681][ T5174] EXT4-fs warning (device loop3): ext4_empty_dir:3101: inode #11: comm syz-executor.3: directory missing '.'
[  216.345314][ T5753] usb 1-1: Using ep0 maxpacket: 8
[  216.431707][ T6055] loop4: detected capacity change from 0 to 32768
[  216.447405][ T6055] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (6055)
[  216.471551][ T6055] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  216.484527][ T5753] usb 1-1: config 135 has an invalid interface number: 230 but max is 0
[  216.489780][ T6055] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  216.498756][ T5753] usb 1-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config
[  216.510656][ T6055] BTRFS info (device loop4): using free space tree
[  216.731963][ T6064] loop2: detected capacity change from 0 to 32768
[  216.742539][ T5753] usb 1-1: config 135 has no interface number 0
[  216.749563][ T5753] usb 1-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  216.803172][ T6064] BTRFS warning: duplicate device /dev/loop2 devid 1 generation 8 scanned by syz-executor.2 (6064)
[  216.916635][ T6084] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  216.943106][ T6055] BTRFS info (device loop4): enabling ssd optimizations
[  216.993833][ T5753] usb 1-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a
[  217.018326][ T5753] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  217.031320][ T5753] usb 1-1: Product: syz
[  217.035664][ T5753] usb 1-1: Manufacturer: syz
[  217.041403][ T5753] usb 1-1: SerialNumber: syz
[  217.135470][ T5174] EXT4-fs (loop3): unmounting filesystem.
[  217.150083][ T3579] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  217.185609][   T46] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  217.251797][ T5753] usb 1-1: Found UVC 0.00 device syz (18ec:3288)
[  217.263708][ T5753] usb 1-1: No valid video chain found.
[  217.309582][   T46] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  217.584404][ T5753] usb 1-1: USB disconnect, device number 5
[  218.380795][   T46] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  218.467487][   T46] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  218.562127][ T6105] loop0: detected capacity change from 0 to 32768
[  218.593726][ T3623] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  218.637468][ T6105] XFS (loop0): Mounting V5 Filesystem
[  218.753454][ T3593] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  218.763269][ T3593] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  218.771326][ T3593] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  218.780554][ T6105] XFS (loop0): Ending clean mount
[  218.781837][ T3593] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  218.797402][ T3593] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  218.823979][ T3593] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  218.844540][ T3623] usb 5-1: Using ep0 maxpacket: 16
[  218.856397][ T3625] XFS (loop0): Metadata CRC error detected at xfs_rmapbt_read_verify+0x39/0xc0, xfs_rmapbt block 0x14 
[  218.868105][ T3625] XFS (loop0): Unmount and run xfs_repair
[  218.874066][ T3625] XFS (loop0): First 128 bytes of corrupted metadata buffer:
[  218.881650][ T3625] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff  RMB3............
[  218.892209][ T3625] 00000010: 00 a7 50 00 00 00 00 14 00 00 00 01 00 00 00 80  ..P.............
[  218.901536][ T3625] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91  ..G...N..b..1...
[  218.911918][ T3625] 00000030: 00 00 00 00 5b af 3b 1d 00 00 00 00 00 00 00 01  ....[.;.........
[  218.916582][ T6119] Zero length message leads to an empty skb
[  218.920971][ T3625] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00  ................
[  218.942997][ T3625] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb  ................
[  218.952686][ T3625] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02  ................
[  218.961751][ T3625] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00  ................
[  218.972692][ T6105] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x26e/0x370" at daddr 0x14 len 4 error 74
[  218.992503][ T6105] XFS (loop0): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x1acd/0x2210 (fs/xfs/libxfs/xfs_defer.c:573).  Shutting down filesystem.
[  219.008734][ T6105] XFS (loop0): Please unmount the filesystem and rectify the problem(s)
[  219.015171][ T3623] usb 5-1: unable to get BOS descriptor or descriptor too short
[  219.101978][ T3586] XFS (loop0): Unmounting Filesystem
[  219.128078][ T3623] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  219.150419][ T3623] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  219.173058][ T3623] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  219.178399][ T6124] loop1: detected capacity change from 0 to 512
[  219.201341][ T6124] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  219.320397][ T6124] EXT4-fs (loop1): 1 truncate cleaned up
[  219.329221][ T6124] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none.
[  219.344066][ T3623] usb 5-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.40
[  219.363403][ T3623] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  219.381753][ T3623] usb 5-1: Product: syz
[  219.386492][ T3623] usb 5-1: Manufacturer: syz
[  219.391127][ T3623] usb 5-1: SerialNumber: syz
[  219.580006][ T6117] chnl_net:caif_netlink_parms(): no params data found
[  219.606777][ T3576] EXT4-fs (loop1): unmounting filesystem.
[  219.773964][ T3623] usbhid 5-1:1.0: can't add hid device: -71
[  219.780005][ T3623] usbhid: probe of 5-1:1.0 failed with error -71
[  219.927847][ T6133] loop1: detected capacity change from 0 to 32768
[  219.944990][ T6133] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz-executor.1 (6133)
[  219.974123][ T3623] usb 5-1: USB disconnect, device number 2
[  219.999573][ T6133] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  220.009875][ T6133] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  220.018550][ T6133] BTRFS info (device loop1): setting nodatacow, compression disabled
[  220.026660][ T6133] BTRFS info (device loop1): doing ref verification
[  220.033246][ T6133] BTRFS info (device loop1): turning on flush-on-commit
[  220.040245][ T6133] BTRFS info (device loop1): max_inline at 1398
[  220.046693][ T6133] BTRFS info (device loop1): allowing degraded mounts
[  220.053472][ T6133] BTRFS info (device loop1): using free space tree
[  220.180502][ T6117] bridge0: port 1(bridge_slave_0) entered blocking state
[  220.187770][ T6117] bridge0: port 1(bridge_slave_0) entered disabled state
[  220.195808][ T6117] device bridge_slave_0 entered promiscuous mode
[  220.259622][ T6131] loop0: detected capacity change from 0 to 8192
[  220.283711][ T6117] bridge0: port 2(bridge_slave_1) entered blocking state
[  220.335221][ T6117] bridge0: port 2(bridge_slave_1) entered disabled state
[  220.355240][ T6117] device bridge_slave_1 entered promiscuous mode
[  220.365878][ T6131] REISERFS warning (device loop0): super-6504 reiserfs_getopt: the option "usrjquota" requires an argument
[  220.365878][ T6131] 
[  220.428859][   T46] device hsr_slave_0 left promiscuous mode
[  220.466188][   T46] device hsr_slave_1 left promiscuous mode
[  220.474439][ T3576] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  220.501362][   T46] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  220.529323][   T46] batman_adv: batadv0: Removing interface: batadv_slave_0
[  220.647511][   T46] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  220.659701][   T46] batman_adv: batadv0: Removing interface: batadv_slave_1
[  220.712884][   T46] device bridge_slave_1 left promiscuous mode
[  220.721634][   T46] bridge0: port 2(bridge_slave_1) entered disabled state
[  220.792753][   T46] device bridge_slave_0 left promiscuous mode
[  220.817708][   T46] bridge0: port 1(bridge_slave_0) entered disabled state
[  220.875284][ T3587] Bluetooth: hci3: command tx timeout
[  220.884477][   T46] device veth1_macvtap left promiscuous mode
[  220.891746][   T46] device veth0_macvtap left promiscuous mode
[  220.914226][   T46] device veth1_vlan left promiscuous mode
[  220.940549][   T46] device veth0_vlan left promiscuous mode
[  222.295510][ T6171] loop2: detected capacity change from 0 to 4096
[  222.332726][ T6171] NILFS (loop2): invalid segment: Checksum error in segment payload
[  222.342214][ T6171] NILFS (loop2): trying rollback from an earlier position
[  222.366454][ T6173] loop0: detected capacity change from 0 to 512
[  222.378759][ T6171] NILFS (loop2): recovery complete
[  222.394449][ T6174] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  222.424652][ T6173] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found
[  222.438638][ T6173] UDF-fs: Scanning with blocksize 512 failed
[  222.440386][   T46] team0 (unregistering): Port device team_slave_1 removed
[  222.452962][ T6173] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found
[  222.460635][ T6173] UDF-fs: Scanning with blocksize 1024 failed
[  222.471318][ T6173] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found
[  222.480630][ T6173] UDF-fs: Scanning with blocksize 2048 failed
[  222.493056][ T6173] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  222.500868][   T46] team0 (unregistering): Port device team_slave_0 removed
[  222.514868][ T6173] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  222.636345][ T6176] syz-executor.2 (6176): drop_caches: 2
[  222.681627][   T46] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  222.696863][ T6165] loop1: detected capacity change from 0 to 32768
[  222.726517][ T6165] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz-executor.1 (6165)
[  222.753065][   T46] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  222.753329][ T6165] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  222.772254][ T6165] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  222.781038][ T6165] BTRFS info (device loop1): using free space tree
[  222.828430][ T6165] BTRFS info (device loop1): enabling ssd optimizations
[  222.876946][   T46] bond0 (unregistering): Released all slaves
[  222.948219][ T6117] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  222.953720][ T3587] Bluetooth: hci3: command tx timeout
[  222.991979][ T3576] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  222.999996][ T6117] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  223.262137][ T6117] team0: Port device team_slave_0 added
[  223.332191][ T6117] team0: Port device team_slave_1 added
[  223.414102][ T6117] batman_adv: batadv0: Adding interface: batadv_slave_0
[  223.421101][ T6117] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  223.582652][ T6117] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  223.596384][ T6117] batman_adv: batadv0: Adding interface: batadv_slave_1
[  223.606098][ T6117] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  223.632220][ T6117] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  223.800141][ T6216] loop0: detected capacity change from 0 to 2048
[  223.831468][ T6216] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  223.849250][ T6216] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  224.608882][ T6117] device hsr_slave_0 entered promiscuous mode
[  224.649637][ T6117] device hsr_slave_1 entered promiscuous mode
[  224.675910][ T6224] loop1: detected capacity change from 0 to 1024
[  224.677829][ T6117] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  224.702381][ T6117] Cannot create hsr debugfs directory
[  225.113819][ T3587] Bluetooth: hci3: command tx timeout
[  225.805675][    C0] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies.  Check SNMP counters.
[  226.104751][ T6211] loop4: detected capacity change from 0 to 32768
[  226.154811][ T6211] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (6211)
[  226.217098][ T6211] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  226.266217][ T6211] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  226.302629][ T6211] BTRFS info (device loop4): using free space tree
[  226.491563][ T6117] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  226.524243][ T6117] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  226.568304][ T6211] BTRFS error (device loop4): open_ctree failed
[  226.581041][ T6117] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  226.616366][ T6117] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  226.983552][ T6117] 8021q: adding VLAN 0 to HW filter on device bond0
[  227.055830][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  227.075878][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  227.118113][ T6117] 8021q: adding VLAN 0 to HW filter on device team0
[  227.149351][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  227.175704][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  227.198255][ T3587] Bluetooth: hci3: command tx timeout
[  227.202609][ T6262] loop4: detected capacity change from 0 to 512
[  227.235846][ T3659] bridge0: port 1(bridge_slave_0) entered blocking state
[  227.243060][ T3659] bridge0: port 1(bridge_slave_0) entered forwarding state
[  227.289574][ T6262] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found
[  227.301260][ T6240] loop0: detected capacity change from 0 to 32768
[  227.314152][ T6262] UDF-fs: Scanning with blocksize 512 failed
[  227.340745][ T6240] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (6240)
[  227.356410][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  227.382448][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  227.391152][ T6262] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found
[  227.412592][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  227.421117][ T6262] UDF-fs: Scanning with blocksize 1024 failed
[  227.462812][ T4417] bridge0: port 2(bridge_slave_1) entered blocking state
[  227.470170][ T4417] bridge0: port 2(bridge_slave_1) entered forwarding state
[  227.479289][ T6262] UDF-fs: warning (device loop4): udf_load_vrs: No VRS found
[  227.503726][ T6262] UDF-fs: Scanning with blocksize 2048 failed
[  227.513877][ T6262] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  227.514110][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  227.573386][ T6240] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  227.607022][ T5760] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  227.618870][ T6240] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  227.631326][ T5760] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  227.645693][ T6262] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  227.655589][ T6240] BTRFS info (device loop0): using free space tree
[  227.683460][ T5760] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  227.749483][ T5760] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  227.822565][ T5760] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  227.911369][ T6262] device syzkaller0 entered promiscuous mode
[  227.930350][   T40] hfsplus: b-tree write err: -5, ino 4
[  227.931178][ T5760] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  227.944495][ T5760] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  227.953252][ T5760] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  227.995605][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  228.004189][ T6240] BTRFS info (device loop0): enabling ssd optimizations
[  228.014558][ T3622] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  228.057024][ T6117] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  228.419496][ T6292] loop1: detected capacity change from 0 to 2048
[  228.468899][ T6292] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  228.487215][ T6292] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  229.168091][ T3586] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  229.318916][   T26] audit: type=1800 audit(1718310362.540:9294): pid=6296 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="sda1" ino=1959 res=0 errno=0
[  229.366616][ T6296] loop1: detected capacity change from 0 to 256
[  229.442067][ T6296] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x02a07125, utbl_chksum : 0xe619d30d)
[  229.793940][ T3659] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  229.874443][ T6302] loop4: detected capacity change from 0 to 32768
[  229.901996][ T6302] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (6302)
[  229.902439][    C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  229.940921][ T6302] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  229.951142][ T6302] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  229.959998][ T6302] BTRFS info (device loop4): setting nodatacow, compression disabled
[  229.968169][ T6302] BTRFS info (device loop4): doing ref verification
[  229.974827][ T6302] BTRFS info (device loop4): turning on flush-on-commit
[  229.981979][ T6302] BTRFS info (device loop4): max_inline at 1398
[  229.988433][ T6302] BTRFS info (device loop4): allowing degraded mounts
[  229.995361][ T6302] BTRFS info (device loop4): using free space tree
[  230.053783][ T3659] usb 2-1: Using ep0 maxpacket: 8
[  230.173892][ T3659] usb 2-1: config 135 has an invalid interface number: 230 but max is 0
[  230.183019][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  230.192128][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  230.203637][ T3659] usb 2-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config
[  230.236012][ T6117] 8021q: adding VLAN 0 to HW filter on device batadv0
[  230.260075][ T3659] usb 2-1: config 135 has no interface number 0
[  230.288386][ T3659] usb 2-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  230.326996][ T3625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  230.336595][ T3625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  230.395142][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  230.405939][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  230.424224][ T6160] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  230.437129][ T6117] device veth0_vlan entered promiscuous mode
[  230.455067][ T3579] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  230.467797][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  230.475619][ T3659] usb 2-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a
[  230.495108][ T3659] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  230.503234][ T3659] usb 2-1: Product: syz
[  230.512072][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  230.532412][ T6117] device veth1_vlan entered promiscuous mode
[  230.542391][ T3659] usb 2-1: Manufacturer: syz
[  230.558622][ T3659] usb 2-1: SerialNumber: syz
[  230.617080][ T3659] usb 2-1: Found UVC 0.00 device syz (18ec:3288)
[  230.640997][ T3659] usb 2-1: No valid video chain found.
[  230.648645][ T6117] device veth0_macvtap entered promiscuous mode
[  230.673116][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  230.697282][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  230.726932][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  230.744524][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  230.763291][ T6117] device veth1_macvtap entered promiscuous mode
[  230.790592][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  230.806883][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  230.841495][ T6117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  230.853914][ T6160] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  230.862135][ T4417] usb 2-1: USB disconnect, device number 3
[  230.886359][ T6117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  230.905230][ T6117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  230.921531][ T6117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  230.940139][ T6117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  230.971807][ T6117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  230.989630][ T6117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  231.001872][ T6117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  231.011907][ T6117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  231.022540][ T6117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  231.046702][ T6117] batman_adv: batadv0: Interface activated: batadv_slave_0
[  231.063273][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  231.073803][ T6160] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  231.080895][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  231.094805][ T6117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  231.096629][ T6160] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  231.116420][ T6117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  231.120539][ T6160] usb 1-1: Product: syz
[  231.137225][ T6117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  231.139031][ T6160] usb 1-1: Manufacturer: syz
[  231.155974][ T6117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  231.159434][ T6160] usb 1-1: SerialNumber: syz
[  231.175504][ T6117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  231.187671][ T6117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  231.205957][ T6117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  231.216722][ T6117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  231.229150][ T6117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  231.241111][ T6117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  231.252944][ T6117] batman_adv: batadv0: Interface activated: batadv_slave_1
[  231.261525][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  231.273528][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  231.285773][ T6117] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  231.297609][ T6117] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  231.308522][ T6117] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  231.317600][ T6117] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  231.471171][ T4171] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  231.487694][ T4171] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  231.509386][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  231.545588][   T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  231.550862][ T6340] EXT4-fs warning (device sda1): verify_group_input:151: Cannot add at group 1025 (only 8 groups)
[  231.567291][   T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  231.590241][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  231.662263][ T6336] loop4: detected capacity change from 0 to 32768
[  231.866237][ T6336] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (6336)
[  231.906118][ T6336] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  231.926901][ T6336] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  231.969162][ T6336] BTRFS info (device loop4): using free space tree
[  232.021281][ T6357] loop1: detected capacity change from 0 to 1024
[  232.096732][ T6336] BTRFS info (device loop4): enabling ssd optimizations
[  232.291066][ T3579] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  232.331107][ T6160] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42
[  232.340180][ T6160] cdc_ncm 1-1:1.0: setting rx_max = 16384
[  232.497651][ T6374] netlink: 'syz-executor.2': attribute type 10 has an invalid length.
[  232.533970][ T6160] cdc_ncm 1-1:1.0: setting tx_max = 184
[  232.680192][ T6374] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  232.756594][ T6160] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42
[  232.840184][ T6160] usb 1-1: USB disconnect, device number 6
[  232.866449][ T6160] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP)
[  233.264375][ T6382] loop2: detected capacity change from 0 to 32768
[  233.315519][ T6384] loop0: detected capacity change from 0 to 16
[  233.334216][ T6384] erofs: (device loop0): mounted with root inode @ nid 36.
[  233.347943][ T6384] syz-executor.0: attempt to access beyond end of device
[  233.347943][ T6384] loop0: rw=0, sector=8, nr_sectors = 16 limit=16
[  233.522414][ T6387] syz-executor.0: attempt to access beyond end of device
[  233.522414][ T6387] loop0: rw=0, sector=8, nr_sectors = 16 limit=16
[  233.616577][ T6390] syz-executor.0: attempt to access beyond end of device
[  233.616577][ T6390] loop0: rw=0, sector=8, nr_sectors = 16 limit=16
[  233.658994][ T6384] syz-executor.0: attempt to access beyond end of device
[  233.658994][ T6384] loop0: rw=0, sector=8, nr_sectors = 16 limit=16
[  233.690330][   T26] audit: type=1326 audit(1718310366.910:9295): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6383 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0be2c7cea9 code=0x7ffc0000
[  234.023034][   T26] audit: type=1326 audit(1718310366.910:9296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6383 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0be2c7cea9 code=0x7ffc0000
[  234.121780][   T26] audit: type=1326 audit(1718310367.100:9297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6383 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0be2c7cea9 code=0x7ffc0000
[  234.160299][ T4169] hfsplus: b-tree write err: -5, ino 4
[  234.218411][   T26] audit: type=1326 audit(1718310367.100:9298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6383 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0be2c7cea9 code=0x7ffc0000
[  234.312527][   T26] audit: type=1326 audit(1718310367.100:9299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6383 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0be2c7cea9 code=0x7ffc0000
[  234.350250][   T26] audit: type=1326 audit(1718310367.160:9300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6383 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0be2c7cea9 code=0x7ffc0000
[  234.380023][   T26] audit: type=1326 audit(1718310367.160:9301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6383 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0be2c7cea9 code=0x7ffc0000
[  234.417452][   T26] audit: type=1326 audit(1718310367.160:9302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6383 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0be2c7a627 code=0x7ffc0000
[  234.515793][   T26] audit: type=1326 audit(1718310367.160:9303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6383 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0be2c40309 code=0x7ffc0000
[  234.562321][   T26] audit: type=1326 audit(1718310367.160:9304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6383 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=217 compat=0 ip=0x7f0be2c7cea9 code=0x7ffc0000
[  234.597655][   T26] audit: type=1326 audit(1718310367.160:9305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6383 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0be2c7a627 code=0x7ffc0000
[  234.729858][   T26] audit: type=1326 audit(1718310367.160:9306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6383 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0be2c40309 code=0x7ffc0000
[  234.736613][ T6394] loop2: detected capacity change from 0 to 1024
[  234.776565][   T26] audit: type=1326 audit(1718310367.160:9307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6383 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f0be2c7a627 code=0x7ffc0000
[  234.819432][   T26] audit: type=1326 audit(1718310367.160:9308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6383 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0be2c40309 code=0x7ffc0000
[  234.837745][ T6394] EXT4-fs: Ignoring removed nobh option
[  234.902821][ T6394] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  234.915420][   T26] audit: type=1326 audit(1718310367.160:9309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6383 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0be2c7cea9 code=0x7ffc0000
[  234.995959][ T6394] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[  235.591521][ T6407] loop3: detected capacity change from 0 to 8192
[  235.881892][ T6416] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'.
[  236.203059][ T6422] loop1: detected capacity change from 0 to 512
[  236.289563][ T6422] EXT4-fs error (device loop1): ext4_find_inline_data_nolock:164: inode #12: comm syz-executor.1: inline data xattr refers to an external xattr inode
[  236.319371][ T6422] EXT4-fs error (device loop1): ext4_orphan_get:1401: comm syz-executor.1: couldn't read orphan inode 12 (err -117)
[  236.401590][ T6422] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback.
[  236.620325][ T3580] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 32: comm syz-executor.2: path /root/syzkaller-testdir1276746112/syzkaller.g8CYY5/146/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  236.677636][ T6430] loop3: detected capacity change from 0 to 512
[  236.678650][ T6432] loop0: detected capacity change from 0 to 1024
[  236.711523][ T3580] EXT4-fs error (device loop2): ext4_empty_dir:3099: inode #11: block 32: comm syz-executor.2: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  236.745593][ T6430] EXT4-fs error (device loop3): ext4_quota_enable:6964: comm syz-executor.3: Bad quota inum: 2, type: 2
[  236.768341][ T6430] EXT4-fs warning (device loop3): ext4_enable_quotas:7012: Failed to enable quota tracking (type=2, err=-117, ino=2). Please run e2fsck to fix.
[  236.804582][ T3580] EXT4-fs warning (device loop2): ext4_empty_dir:3101: inode #11: comm syz-executor.2: directory missing '.'
[  236.817626][ T3580] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 32: comm syz-executor.2: path /root/syzkaller-testdir1276746112/syzkaller.g8CYY5/146/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  236.841343][ T6430] EXT4-fs (loop3): mount failed
[  236.895699][ T3580] EXT4-fs error (device loop2): ext4_empty_dir:3099: inode #11: block 32: comm syz-executor.2: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  236.973790][ T3580] EXT4-fs warning (device loop2): ext4_empty_dir:3101: inode #11: comm syz-executor.2: directory missing '.'
[  237.003491][ T3576] EXT4-fs (loop1): unmounting filesystem.
[  237.016262][ T3580] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 32: comm syz-executor.2: path /root/syzkaller-testdir1276746112/syzkaller.g8CYY5/146/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  237.053427][ T3580] EXT4-fs error (device loop2): ext4_empty_dir:3099: inode #11: block 32: comm syz-executor.2: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  237.100614][ T3580] EXT4-fs warning (device loop2): ext4_empty_dir:3101: inode #11: comm syz-executor.2: directory missing '.'
[  237.131340][ T3580] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 32: comm syz-executor.2: path /root/syzkaller-testdir1276746112/syzkaller.g8CYY5/146/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  237.162026][ T3580] EXT4-fs error (device loop2): ext4_empty_dir:3099: inode #11: block 32: comm syz-executor.2: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  237.199228][ T3580] EXT4-fs warning (device loop2): ext4_empty_dir:3101: inode #11: comm syz-executor.2: directory missing '.'
[  237.228837][ T3580] EXT4-fs error (device loop2): ext4_readdir:260: inode #11: block 32: comm syz-executor.2: path /root/syzkaller-testdir1276746112/syzkaller.g8CYY5/146/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  237.275422][ T6448] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  237.293456][ T3580] EXT4-fs error (device loop2): ext4_empty_dir:3099: inode #11: block 32: comm syz-executor.2: bad entry in directory: inode out of bounds - offset=0, inode=134217739, rec_len=12, size=1024 fake=1
[  237.317516][ T6449] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  237.357653][ T3580] EXT4-fs warning (device loop2): ext4_empty_dir:3101: inode #11: comm syz-executor.2: directory missing '.'
[  237.394960][ T3580] EXT4-fs warning (device loop2): ext4_empty_dir:3101: inode #11: comm syz-executor.2: directory missing '.'
[  237.421949][ T3580] EXT4-fs warning (device loop2): ext4_empty_dir:3101: inode #11: comm syz-executor.2: directory missing '.'
[  237.462174][ T6448] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(10)
[  237.469105][ T6448] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  237.481494][ T3580] EXT4-fs warning (device loop2): ext4_empty_dir:3101: inode #11: comm syz-executor.2: directory missing '.'
[  237.512829][ T3580] EXT4-fs warning (device loop2): ext4_empty_dir:3101: inode #11: comm syz-executor.2: directory missing '.'
[  237.524491][ T6448] vhci_hcd vhci_hcd.0: Device attached
[  237.539650][ T3580] EXT4-fs warning (device loop2): ext4_empty_dir:3101: inode #11: comm syz-executor.2: directory missing '.'
[  237.602180][ T6448] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(12)
[  237.608833][ T6448] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed)
[  237.652224][ T6449] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  237.687606][ T6448] vhci_hcd vhci_hcd.0: Device attached
[  237.730225][ T6448] vhci_hcd vhci_hcd.0: pdev(4) rhport(4) sockfd(15)
[  237.736902][ T6448] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  237.793773][ T6160] usb 17-3: new high-speed USB device number 2 using vhci_hcd
[  237.802175][ T6448] vhci_hcd vhci_hcd.0: Device attached
[  237.876422][ T6449] vhci_hcd vhci_hcd.0: pdev(4) rhport(5) sockfd(20)
[  237.883063][ T6449] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  237.933741][ T6449] vhci_hcd vhci_hcd.0: Device attached
[  237.949914][ T6463] vhci_hcd: connection closed
[  237.954658][ T3709] vhci_hcd: stop threads
[  237.964986][ T6460] vhci_hcd: connection closed
[  237.965811][ T6455] vhci_hcd: connection closed
[  237.985416][ T6450] vhci_hcd: connection reset by peer
[  238.006734][ T3709] vhci_hcd: release socket
[  238.022700][ T3709] vhci_hcd: disconnect device
[  238.052495][ T3709] vhci_hcd: stop threads
[  238.073042][ T3709] vhci_hcd: release socket
[  238.088895][ T3709] vhci_hcd: disconnect device
[  238.108477][ T3709] vhci_hcd: stop threads
[  238.112969][ T3709] vhci_hcd: release socket
[  238.128955][ T3709] vhci_hcd: disconnect device
[  238.138076][ T3709] vhci_hcd: stop threads
[  238.142584][ T3709] vhci_hcd: release socket
[  238.152149][ T3709] vhci_hcd: disconnect device
[  238.268427][ T6469] loop1: detected capacity change from 0 to 8192
[  238.304469][ T3580] EXT4-fs (loop2): unmounting filesystem.
[  238.392954][ T3709] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  238.565062][ T3709] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  238.698810][ T3709] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  238.781168][ T6475] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'.
[  238.839147][ T3709] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  238.858985][  T102] hfsplus: b-tree write err: -5, ino 4
[  238.925269][   T52] block nbd3: Attempted send on invalid socket
[  238.931716][   T52] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  238.954166][ T6480] hpfs: hpfs_map_sector(): read error
[  239.160553][ T3709] tipc: Disabling bearer <udp:syz0>
[  239.179561][ T3709] tipc: Left network mode
[  239.356863][ T6484] loop3: detected capacity change from 0 to 32768
[  239.470758][ T6489] loop1: detected capacity change from 0 to 512
[  240.140588][ T6489] EXT4-fs error (device loop1): ext4_quota_enable:6964: comm syz-executor.1: Bad quota inum: 2, type: 2
[  240.161525][ T6489] EXT4-fs warning (device loop1): ext4_enable_quotas:7012: Failed to enable quota tracking (type=2, err=-117, ino=2). Please run e2fsck to fix.
[  240.186057][ T6489] EXT4-fs (loop1): mount failed
[  240.232685][ T3593] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  240.244183][ T3593] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  240.253095][ T3593] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  240.261088][ T3593] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  240.269977][ T3593] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  240.281884][ T3593] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  240.328564][ T3593] Bluetooth: hci0: unexpected event for opcode 0x2005
[  240.428807][ T6504] loop1: detected capacity change from 0 to 128
[  240.440482][ T6504] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2
[  240.588035][ T6506] loop1: detected capacity change from 0 to 1024
[  240.653546][ T6506] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  240.697563][ T3709] bond0: (slave wlan1): Releasing backup interface
[  240.784829][ T6506] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  240.795395][ T6506] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'.
[  240.939531][ T3709] device hsr_slave_0 left promiscuous mode
[  240.980664][ T3709] device hsr_slave_1 left promiscuous mode
[  240.997316][ T3709] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  241.026660][ T3709] batman_adv: batadv0: Removing interface: batadv_slave_0
[  241.058136][ T3709] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  241.071977][ T3709] batman_adv: batadv0: Removing interface: batadv_slave_1
[  241.092822][ T3709] device bridge_slave_1 left promiscuous mode
[  241.116252][ T3593] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[  241.125283][ T3593] Bluetooth: hci3: Injecting HCI hardware error event
[  241.134733][ T3587] Bluetooth: hci3: hardware error 0x00
[  241.152498][ T3709] bridge0: port 2(bridge_slave_1) entered disabled state
[  241.200989][ T3709] device bridge_slave_0 left promiscuous mode
[  241.259787][ T3709] bridge0: port 1(bridge_slave_0) entered disabled state
[  241.300342][ T3709] device veth1_macvtap left promiscuous mode
[  241.314039][ T3709] device veth0_macvtap left promiscuous mode
[  241.320196][ T3709] device veth1_vlan left promiscuous mode
[  241.369876][ T3709] device veth0_vlan left promiscuous mode
[  241.720865][ T6520] loop3: detected capacity change from 0 to 16
[  241.759891][ T6518] loop4: detected capacity change from 0 to 1024
[  241.778177][ T6520] erofs: (device loop3): mounted with root inode @ nid 36.
[  242.115175][ T3709] team0 (unregistering): Port device team_slave_1 removed
[  242.313835][ T3593] Bluetooth: hci1: command tx timeout
[  242.322025][ T3709] team0 (unregistering): Port device team_slave_0 removed
[  242.515336][ T3709] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  242.851646][ T3709] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  242.878817][ T6516] loop0: detected capacity change from 0 to 32768
[  242.953811][ T6160] vhci_hcd: vhci_device speed not set
[  243.003813][ T6516] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (6516)
[  243.194441][ T3587] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  243.204244][ T6516] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  243.235627][ T6516] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm
[  243.280469][ T6516] BTRFS info (device loop0): using free space tree
[  243.389964][ T3709] bond0 (unregistering): Released all slaves
[  243.535008][ T6497] chnl_net:caif_netlink_parms(): no params data found
[  243.542369][ T6516] BTRFS info (device loop0): enabling ssd optimizations
[  243.608357][ T6529] loop3: detected capacity change from 0 to 8192
[  243.723848][ T6516] loop0: detected capacity change from 32768 to 0
[  243.739189][ T3838] loop: Write error at byte offset 9223372036861657087, length 4096.
[  243.775683][    C1] I/O error, dev loop0, sector 13440 op 0x1:(WRITE) flags 0x1800 phys_seg 3 prio class 2
[  243.785946][    C1] BTRFS error (device loop0): bdev /dev/loop0 errs: wr 1, rd 0, flush 0, corrupt 0, gen 0
[  243.798264][ T6546] BTRFS: error (device loop0: state A) in __btrfs_run_delayed_items:1158: errno=-5 IO failure
[  243.827248][ T6546] BTRFS info (device loop0: state EA): forced readonly
[  243.867706][ T6497] bridge0: port 1(bridge_slave_0) entered blocking state
[  243.899722][ T6497] bridge0: port 1(bridge_slave_0) entered disabled state
[  243.914613][ T6546] BTRFS warning (device loop0: state EA): Skipping commit of aborted transaction.
[  243.948076][ T6497] device bridge_slave_0 entered promiscuous mode
[  243.983529][ T6497] bridge0: port 2(bridge_slave_1) entered blocking state
[  244.024928][ T6497] bridge0: port 2(bridge_slave_1) entered disabled state
[  244.057119][ T6497] device bridge_slave_1 entered promiscuous mode
[  244.144494][ T6497] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  244.199985][ T6497] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  244.209517][ T6546] BTRFS: error (device loop0: state EA) in cleanup_transaction:1991: errno=-5 IO failure
[  244.290418][ T6546] BTRFS error (device loop0: state EMA): Remounting read-write after error is not allowed
[  244.316100][ T4417] usb usb18-port1: attempt power cycle
[  244.337117][  T102] hfsplus: b-tree write err: -5, ino 4
[  244.530338][ T6558] loop1: detected capacity change from 0 to 32768
[  244.538104][ T3587] Bluetooth: hci1: command tx timeout
[  244.544886][ T3593] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  244.554734][ T3593] Bluetooth: hci0: Injecting HCI hardware error event
[  244.563447][ T3587] Bluetooth: hci0: hardware error 0x00
[  244.577781][ T6497] team0: Port device team_slave_0 added
[  244.692243][ T6497] team0: Port device team_slave_1 added
[  244.758588][ T3586] BTRFS info (device loop0: state EA): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  245.204621][ T4417] usb usb18-port1: unable to enumerate USB device
[  245.440319][ T6497] batman_adv: batadv0: Adding interface: batadv_slave_0
[  245.460582][ T6497] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  245.535744][ T6497] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  245.632626][ T6497] batman_adv: batadv0: Adding interface: batadv_slave_1
[  245.650843][ T6497] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  245.726695][ T6497] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  245.986229][ T6497] device hsr_slave_0 entered promiscuous mode
[  246.020632][ T6497] device hsr_slave_1 entered promiscuous mode
[  246.027655][ T6497] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  246.049594][ T6497] Cannot create hsr debugfs directory
[  246.641281][ T3587] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  246.648154][ T3593] Bluetooth: hci1: command tx timeout
[  246.942801][ T6580] loop3: detected capacity change from 0 to 8192
[  246.972105][ T6497] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  246.979356][ T3593] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  246.989479][ T3593] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  246.998438][ T6580] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  247.011591][ T3593] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  247.020336][ T3593] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  247.028146][ T3593] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  247.036707][ T3593] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  247.085100][ T6497] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  247.106849][ T6497] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  247.137285][ T6497] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  247.471971][ T6497] 8021q: adding VLAN 0 to HW filter on device bond0
[  247.509108][ T6581] chnl_net:caif_netlink_parms(): no params data found
[  247.544950][ T6497] 8021q: adding VLAN 0 to HW filter on device team0
[  247.552127][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  247.564595][ T3626] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  247.682722][ T3625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  247.705292][ T3625] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  247.733231][ T3625] bridge0: port 1(bridge_slave_0) entered blocking state
[  247.740437][ T3625] bridge0: port 1(bridge_slave_0) entered forwarding state
[  247.783184][ T3625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  247.800561][ T3625] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  247.811256][ T3625] bridge0: port 2(bridge_slave_1) entered blocking state
[  247.818409][ T3625] bridge0: port 2(bridge_slave_1) entered forwarding state
[  247.837308][ T3625] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  247.853162][ T3625] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  247.873787][ T4417] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  247.891352][ T5757] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  247.901492][ T5757] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  247.921269][ T5757] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  247.930991][ T5757] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  247.941168][ T5757] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  248.008204][ T6581] bridge0: port 1(bridge_slave_0) entered blocking state
[  248.023414][ T6581] bridge0: port 1(bridge_slave_0) entered disabled state
[  248.033519][ T6581] device bridge_slave_0 entered promiscuous mode
[  248.062252][ T6497] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  248.101207][ T6497] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  248.124282][ T5757] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  248.132288][ T5757] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  248.142120][ T5757] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  248.297456][ T6598] loop4: detected capacity change from 0 to 2048
[  248.380450][ T6598] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  248.408729][ T6598] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  248.517676][ T4417] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  248.589493][ T4417] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  248.683433][ T4417] usb 4-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00
[  248.714617][ T3593] Bluetooth: hci1: command tx timeout
[  248.793620][ T4417] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  248.845959][ T4417] usb 4-1: config 0 descriptor??
[  248.894991][ T5757] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  248.907061][ T5757] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  249.082641][ T6601] loop1: detected capacity change from 0 to 32768
[  249.093262][ T6581] bridge0: port 2(bridge_slave_1) entered blocking state
[  249.113787][ T3587] Bluetooth: hci4: command tx timeout
[  249.310383][ T6581] bridge0: port 2(bridge_slave_1) entered disabled state
[  249.684181][ T6581] device bridge_slave_1 entered promiscuous mode
[  249.717735][ T6375] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  249.772663][ T6581] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  249.804435][ T6581] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  249.931529][ T6581] team0: Port device team_slave_0 added
[  249.966880][ T6581] team0: Port device team_slave_1 added
[  250.046996][ T6611] loop4: detected capacity change from 0 to 16
[  250.072112][ T6581] batman_adv: batadv0: Adding interface: batadv_slave_0
[  250.073903][ T6611] erofs: (device loop4): mounted with root inode @ nid 36.
[  250.083943][ T6581] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  250.146683][ T6581] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  250.169035][ T6581] batman_adv: batadv0: Adding interface: batadv_slave_1
[  250.176715][ T6581] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  250.204521][ T6581] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  250.348577][ T3709] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  250.441686][ T5759] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  250.460932][ T5759] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  250.502600][ T3709] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  250.527230][ T6581] device hsr_slave_0 entered promiscuous mode
[  250.540399][ T6581] device hsr_slave_1 entered promiscuous mode
[  250.551277][ T6581] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  250.562538][ T6581] Cannot create hsr debugfs directory
[  250.572082][ T6497] 8021q: adding VLAN 0 to HW filter on device batadv0
[  250.607455][ T3709] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  250.688412][ T3709] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  250.743964][ T5759] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  250.759856][ T5759] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  250.835093][ T5759] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  250.848184][ T5759] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  250.869820][ T6497] device veth0_vlan entered promiscuous mode
[  250.912433][ T5757] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  250.921711][ T5757] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  250.973415][ T6497] device veth1_vlan entered promiscuous mode
[  251.101828][ T3709] tipc: Disabling bearer <udp:syz0>
[  251.121979][ T3709] tipc: Left network mode
[  251.193716][ T3587] Bluetooth: hci4: command tx timeout
[  251.303916][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  251.318472][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  251.331189][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  251.351334][   T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  251.359610][ T4417] usbhid 4-1:0.0: can't add hid device: -71
[  251.384026][ T4417] usbhid: probe of 4-1:0.0 failed with error -71
[  251.412789][ T6497] device veth0_macvtap entered promiscuous mode
[  251.427479][ T4417] usb 4-1: USB disconnect, device number 6
[  251.466711][ T6497] device veth1_macvtap entered promiscuous mode
[  251.578672][ T6497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  251.590236][ T6497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  251.619405][ T6497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  251.653678][ T6497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  251.689191][ T6497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  251.714268][ T6497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  251.725064][ T6497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  251.735871][ T6497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  251.745795][ T6497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  251.761647][ T6497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  251.782157][ T6497] batman_adv: batadv0: Interface activated: batadv_slave_0
[  251.812914][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  251.822610][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  251.835617][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  251.852735][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  251.869489][ T6497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  251.883333][ T6497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  251.894961][ T6497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  251.905865][ T6497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  251.917082][ T6497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  251.929316][ T6497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  251.939828][ T6497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  251.950714][ T6497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  251.972181][ T6497] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  252.017214][ T6497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  252.069031][ T6497] batman_adv: batadv0: Interface activated: batadv_slave_1
[  252.090543][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  252.110543][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  252.180006][ T6497] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  252.192991][ T6497] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  252.203195][ T6497] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  252.212198][ T6497] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  252.397852][ T6581] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  252.416518][  T102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  252.426596][ T6581] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  252.436690][  T102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  252.463286][ T6581] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  252.488083][ T5757] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  252.501198][ T6581] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  252.545086][ T3645] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  252.591862][ T3645] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  252.634652][ T6375] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  252.645821][ T5757] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  252.701542][ T3709] device hsr_slave_0 left promiscuous mode
[  252.726483][ T3709] device hsr_slave_1 left promiscuous mode
[  252.739948][ T3709] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  252.757760][ T6641] loop2: detected capacity change from 0 to 512
[  252.769773][ T3709] batman_adv: batadv0: Removing interface: batadv_slave_0
[  252.801819][ T3709] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  252.810675][ T3709] batman_adv: batadv0: Removing interface: batadv_slave_1
[  252.836893][ T6641] EXT4-fs error (device loop2): ext4_find_inline_data_nolock:164: inode #12: comm syz-executor.2: inline data xattr refers to an external xattr inode
[  252.840215][ T3709] device bridge_slave_1 left promiscuous mode
[  252.869406][ T6641] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz-executor.2: couldn't read orphan inode 12 (err -117)
[  252.895902][ T6641] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[  252.919832][ T3709] bridge0: port 2(bridge_slave_1) entered disabled state
[  252.960383][ T3709] device bridge_slave_0 left promiscuous mode
[  252.987403][ T3709] bridge0: port 1(bridge_slave_0) entered disabled state
[  252.993824][ T6375] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  253.013678][ T6375] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  253.031769][ T3709] device veth1_macvtap left promiscuous mode
[  253.033941][ T6375] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  253.063935][ T3709] device veth0_macvtap left promiscuous mode
[  253.063980][ T6375] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  253.085102][ T3709] device veth1_vlan left promiscuous mode
[  253.094789][ T3709] device veth0_vlan left promiscuous mode
[  253.111605][ T6375] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  253.131920][ T6375] usb 5-1: config 0 descriptor??
[  253.275799][ T3587] Bluetooth: hci4: command tx timeout
[  253.291220][ T6497] EXT4-fs (loop2): unmounting filesystem.
[  253.674191][ T6375] usbhid 5-1:0.0: can't add hid device: -71
[  253.681183][ T6375] usbhid: probe of 5-1:0.0 failed with error -71
[  253.702737][ T6657] loop2: detected capacity change from 0 to 128
[  253.709135][ T6652] loop3: detected capacity change from 0 to 32768
[  253.724701][ T6375] usb 5-1: USB disconnect, device number 3
[  253.728750][ T6652] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz-executor.3 (6652)
[  253.769750][ T6657] VFS: could not find a valid V7 on loop2.
[  253.787912][ T3709] team0 (unregistering): Port device team_slave_1 removed
[  253.797041][ T6652] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  253.808257][ T3709] team0 (unregistering): Port device team_slave_0 removed
[  253.826332][ T6652] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  253.852996][ T3709] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  253.881980][ T6652] BTRFS info (device loop3): using free space tree
[  253.905065][ T3709] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  254.172302][ T6652] BTRFS info (device loop3): enabling ssd optimizations
[  254.244943][ T6652] loop3: detected capacity change from 32768 to 0
[  254.288052][ T3709] bond0 (unregistering): Released all slaves
[  254.333433][    C1] TCP: request_sock_TCP: Possible SYN flooding on port 2. Sending cookies.  Check SNMP counters.
[  254.455236][ T3667] loop: Write error at byte offset 9223372036861661183, length 4096.
[  254.526537][    C1] I/O error, dev loop3, sector 13448 op 0x1:(WRITE) flags 0x1800 phys_seg 1 prio class 2
[  254.536477][    C1] BTRFS error (device loop3): bdev /dev/loop3 errs: wr 1, rd 0, flush 0, corrupt 0, gen 0
[  254.572630][ T6581] 8021q: adding VLAN 0 to HW filter on device bond0
[  254.606582][ T6117] BTRFS: error (device loop3: state A) in __btrfs_run_delayed_items:1158: errno=-5 IO failure
[  254.713846][ T6117] BTRFS info (device loop3: state EA): forced readonly
[  254.733734][ T6117] BTRFS warning (device loop3: state EA): Skipping commit of aborted transaction.
[  254.892714][ T6693] loop4: detected capacity change from 0 to 2048
[  255.354953][ T3587] Bluetooth: hci4: command tx timeout
[  255.558429][ T1255] ieee802154 phy0 wpan0: encryption failed: -22
[  255.562297][ T6117] BTRFS: error (device loop3: state EA) in cleanup_transaction:1991: errno=-5 IO failure
[  255.564830][ T1255] ieee802154 phy1 wpan1: encryption failed: -22
[  255.639419][ T5753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  255.648102][ T6117] BTRFS info (device loop3: state EA): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  255.664139][ T5753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  255.676527][ T6693] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  255.684321][ T6581] 8021q: adding VLAN 0 to HW filter on device team0
[  255.699017][ T6693] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  255.816093][ T6375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  255.829432][ T6375] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  255.864052][ T6375] bridge0: port 1(bridge_slave_0) entered blocking state
[  255.871199][ T6375] bridge0: port 1(bridge_slave_0) entered forwarding state
[  255.924588][ T6375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  255.933487][ T6375] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  255.998708][ T6375] bridge0: port 2(bridge_slave_1) entered blocking state
[  256.005961][ T6375] bridge0: port 2(bridge_slave_1) entered forwarding state
[  256.101747][ T5753] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  256.119396][ T5753] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  256.136353][ T5753] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  256.161973][ T5082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  256.215284][ T5082] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  256.268759][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  256.280743][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  256.300234][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  256.327824][ T6678] loop2: detected capacity change from 0 to 4096
[  256.332980][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  256.351206][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  256.365976][ T6581] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  256.404921][ T6581] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  256.416685][ T6700] netlink: 'syz-executor.1': attribute type 10 has an invalid length.
[  256.489930][   T26] kauditd_printk_skb: 53 callbacks suppressed
[  256.489947][   T26] audit: type=1800 audit(1718310389.710:9363): pid=6657 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=1951 res=0 errno=0
[  256.499017][ T6700] batman_adv: batadv0: Adding interface: team0
[  256.580149][ T6700] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  256.679405][ T6700] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active
[  256.725180][ T5082] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  256.742174][ T5082] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  257.393893][ T5753] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  257.396107][ T5082] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  257.428226][ T5082] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  257.457330][ T6581] 8021q: adding VLAN 0 to HW filter on device batadv0
[  257.508379][ T5082] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  257.524531][ T5082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  257.574543][ T5082] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  257.591252][ T5082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  257.614045][ T6581] device veth0_vlan entered promiscuous mode
[  257.635144][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  257.653285][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  257.690708][ T6581] device veth1_vlan entered promiscuous mode
[  257.736704][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  257.750811][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  257.764065][ T5753] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  257.796106][ T5753] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  257.821393][ T6581] device veth0_macvtap entered promiscuous mode
[  257.832534][ T5753] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  257.859982][ T6581] device veth1_macvtap entered promiscuous mode
[  257.873944][ T5753] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  257.902032][ T5753] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  257.916186][ T6581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  257.937746][ T5753] usb 5-1: config 0 descriptor??
[  257.948334][ T6581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  257.969356][ T6581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  257.982312][ T6720] loop1: detected capacity change from 0 to 32768
[  257.992254][ T6581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  258.016165][ T6720] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz-executor.1 (6720)
[  258.017030][ T6581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  258.064976][ T6581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  258.069813][ T6720] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  258.087826][ T6581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  258.110596][ T6581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  258.118831][ T6714] loop3: detected capacity change from 0 to 40427
[  258.131727][ T6581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  258.142417][ T6720] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm
[  258.153532][ T6581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  258.158185][ T6720] BTRFS info (device loop1): using free space tree
[  258.175431][ T6714] F2FS-fs (loop3): Invalid Fs Meta Ino: node(0) meta(2) root(0)
[  258.190993][ T6714] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  258.202456][ T6720] BTRFS info (device loop1): enabling ssd optimizations
[  258.205516][ T6581] batman_adv: batadv0: Interface activated: batadv_slave_0
[  258.225516][ T6714] F2FS-fs (loop3): invalid crc value
[  258.262426][ T6714] F2FS-fs (loop3): Found nat_bits in checkpoint
[  258.281408][ T5360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  258.293877][ T6720] loop1: detected capacity change from 32768 to 0
[  258.315709][ T5360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  258.335212][ T5360] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  258.362066][ T5360] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  258.390124][ T5360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  258.431511][ T6581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  258.447681][ T3667] loop: Write error at byte offset 9223372036861657087, length 4096.
[  258.487848][    C1] I/O error, dev loop1, sector 13440 op 0x1:(WRITE) flags 0x1800 phys_seg 3 prio class 2
[  258.489453][ T6581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  258.497857][    C1] BTRFS error (device loop1): bdev /dev/loop1 errs: wr 1, rd 0, flush 0, corrupt 0, gen 0
[  258.503225][ T6720] BTRFS: error (device loop1: state A) in __btrfs_run_delayed_items:1158: errno=-5 IO failure
[  258.518222][ T6581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  258.528640][ T6720] BTRFS info (device loop1: state EA): forced readonly
[  258.545895][ T5753] usbhid 5-1:0.0: can't add hid device: -71
[  258.552049][ T5753] usbhid: probe of 5-1:0.0 failed with error -71
[  258.560394][ T6720] BTRFS warning (device loop1: state EA): Skipping commit of aborted transaction.
[  258.570112][ T5753] usb 5-1: USB disconnect, device number 4
[  258.729823][ T6748] loop2: detected capacity change from 0 to 2048
[  258.744122][ T6720] BTRFS: error (device loop1: state EA) in cleanup_transaction:1991: errno=-5 IO failure
[  258.778721][ T6748] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  258.801625][ T6748] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  258.857723][ T6581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  259.024621][ T6581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  259.073875][ T6720] BTRFS error (device loop1: state EMA): unrecognized mount option 'ÿÿÿÿ017777777777777777777770177777777777777777777701777777777777777777777ÿÿÿÿÿÿÿÿÿÿÿÿÿ'
[  259.206692][ T6714] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  259.222854][ T6714] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[  259.230641][ T6581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  259.276302][ T6581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  259.315828][ T6714] syz-executor.3: attempt to access beyond end of device
[  259.315828][ T6714] loop3: rw=2051, sector=36912, nr_sectors = 8152 limit=40427
[  259.362794][ T6581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  259.373025][ T6581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  259.383694][ T6581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  259.395306][ T6581] batman_adv: batadv0: Interface activated: batadv_slave_1
[  259.405686][ T5757] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  259.414325][ T5757] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  259.423057][ T5757] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  259.433310][ T6714] syz-executor.3: attempt to access beyond end of device
[  259.433310][ T6714] loop3: rw=2051, sector=45096, nr_sectors = 20440 limit=40427
[  259.508222][ T3576] BTRFS info (device loop1: state EA): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  259.526482][ T6714] F2FS-fs (loop3): Issue discard(4614, 4614, 1019) failed, ret: -5
[  259.526526][ T6714] F2FS-fs (loop3): Issue discard(5637, 5637, 2555) failed, ret: -5
[  259.530857][ T6581] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  259.600889][ T6581] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  259.619328][ T6581] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  259.628350][ T6581] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  259.708292][    C0] TCP: request_sock_TCP: Possible SYN flooding on port 20002. Sending cookies.  Check SNMP counters.
[  259.990121][   T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  260.019058][   T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  260.052493][ T3659] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  260.073102][   T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  260.110393][   T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  260.157329][ T5757] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  260.688160][ T3593] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  260.698151][ T3593] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  260.706914][ T3593] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  260.716216][ T3593] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  260.725181][ T3593] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[  260.733377][ T3593] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  261.035649][ T6787] loop0: detected capacity change from 0 to 2048
[  261.099431][ T6787] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  261.117406][ T6787] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  261.828906][ T6800] tmpfs: Unknown parameter 'usrquota'
[  261.884570][ T6782] chnl_net:caif_netlink_parms(): no params data found
[  262.129469][ T6782] bridge0: port 1(bridge_slave_0) entered blocking state
[  262.177728][ T6782] bridge0: port 1(bridge_slave_0) entered disabled state
[  262.191147][ T6782] device bridge_slave_0 entered promiscuous mode
[  262.212601][ T6782] bridge0: port 2(bridge_slave_1) entered blocking state
[  262.251797][ T6782] bridge0: port 2(bridge_slave_1) entered disabled state
[  262.296285][ T6782] device bridge_slave_1 entered promiscuous mode
[  262.396726][ T6782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  262.438111][ T6782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  262.581025][ T6782] team0: Port device team_slave_0 added
[  262.603722][ T6782] team0: Port device team_slave_1 added
[  262.663512][ T6782] batman_adv: batadv0: Adding interface: batadv_slave_0
[  262.680358][ T6782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  262.742540][ T6782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  262.780461][ T6782] batman_adv: batadv0: Adding interface: batadv_slave_1
[  262.796161][ T3593] Bluetooth: hci0: command tx timeout
[  262.802157][ T6782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  262.907513][ T6782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  262.939884][ T6825] loop3: detected capacity change from 0 to 512
[  263.004702][ T6825] EXT4-fs error (device loop3): ext4_quota_enable:6964: comm syz-executor.3: Bad quota inum: 2, type: 2
[  263.050290][ T6782] device hsr_slave_0 entered promiscuous mode
[  263.060206][ T6825] EXT4-fs warning (device loop3): ext4_enable_quotas:7012: Failed to enable quota tracking (type=2, err=-117, ino=2). Please run e2fsck to fix.
[  263.093072][ T6782] device hsr_slave_1 entered promiscuous mode
[  263.121593][ T6825] EXT4-fs (loop3): mount failed
[  263.134149][ T6782] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  263.160489][ T6782] Cannot create hsr debugfs directory
[  263.508971][ T6782] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  263.671910][ T6782] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  263.867336][ T6782] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  263.973166][ T6782] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  264.076971][ T6856] loop2: detected capacity change from 0 to 512
[  264.145137][ T6856] EXT4-fs error (device loop2): ext4_quota_enable:6964: comm syz-executor.2: Bad quota inum: 2, type: 2
[  264.159148][ T6856] EXT4-fs warning (device loop2): ext4_enable_quotas:7012: Failed to enable quota tracking (type=2, err=-117, ino=2). Please run e2fsck to fix.
[  264.182521][ T6782] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  264.192131][ T6856] EXT4-fs (loop2): mount failed
[  264.201472][ T6782] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  264.224485][ T6782] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  264.255023][ T6782] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  264.299889][ T6871] loop0: detected capacity change from 0 to 64
[  264.435375][   T26] audit: type=1800 audit(1718310397.660:9364): pid=6878 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name=".log" dev="sda1" ino=1954 res=0 errno=0
[  264.456300][    C0] vkms_vblank_simulate: vblank timer overrun
[  264.580270][ T6782] 8021q: adding VLAN 0 to HW filter on device bond0
[  264.611836][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  264.631965][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  264.666482][ T6782] 8021q: adding VLAN 0 to HW filter on device team0
[  264.690270][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  264.709095][ T3628] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  264.744028][ T3628] bridge0: port 1(bridge_slave_0) entered blocking state
[  264.751246][ T3628] bridge0: port 1(bridge_slave_0) entered forwarding state
[  264.834118][ T6375] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  264.852450][ T6375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  264.874011][ T3593] Bluetooth: hci0: command tx timeout
[  264.894726][ T6375] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  264.914633][ T6375] bridge0: port 2(bridge_slave_1) entered blocking state
[  264.921842][ T6375] bridge0: port 2(bridge_slave_1) entered forwarding state
[  265.509080][ T6903] loop4: detected capacity change from 0 to 512
[  265.596117][ T6375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  265.605638][ T6901] tipc: Started in network mode
[  265.610583][ T6901] tipc: Node identity fe800000000000000000000000000013, cluster identity 4711
[  265.620326][ T6901] tipc: Enabled bearer <udp:syz0>, priority 10
[  265.641783][ T5757] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  265.663764][ T5757] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  265.673123][ T5757] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  265.685831][ T5757] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  265.694772][ T5757] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  265.703439][ T5757] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  265.712055][ T5757] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  265.755573][ T5757] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  265.761410][ T6906] loop2: detected capacity change from 0 to 64
[  265.779098][ T6903] EXT4-fs error (device loop4): ext4_quota_enable:6964: comm syz-executor.4: Bad quota inum: 2, type: 2
[  265.794403][ T5757] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  265.804238][ T6903] EXT4-fs warning (device loop4): ext4_enable_quotas:7012: Failed to enable quota tracking (type=2, err=-117, ino=2). Please run e2fsck to fix.
[  265.864802][ T6903] EXT4-fs (loop4): mount failed
[  265.872044][   T26] audit: type=1326 audit(1718310399.090:9365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6885 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7fa16ce7a627 code=0x0
[  265.956484][ T6782] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  265.966533][ T3593] Bluetooth: hci2: unexpected event for opcode 0x2005
[  266.015025][ T5360] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  266.097456][ T6096] tipc: Disabling bearer <udp:syz0>
[  266.103345][ T6096] tipc: Left network mode
[  266.437241][ T6921] device pim6reg1 entered promiscuous mode
[  266.743774][ T5082] tipc: Node number set to 4269801491
[  266.954133][ T3593] Bluetooth: hci0: command tx timeout
[  267.154492][ T6935] loop4: detected capacity change from 0 to 32768
[  267.319792][ T6937] loop2: detected capacity change from 0 to 1024
[  268.051564][ T6937] hfsplus: invalid extent btree flag
[  268.058089][ T6937] hfsplus: failed to load extents file
[  268.313818][   T48] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  268.322784][   T48] Bluetooth: hci1: Injecting HCI hardware error event
[  268.333131][ T3593] Bluetooth: hci1: hardware error 0x00
[  268.351757][ T6942] loop3: detected capacity change from 0 to 64
[  268.374929][ T6936] ==================================================================
[  268.383045][ T6936] BUG: KASAN: slab-out-of-bounds in cfg80211_wext_freq+0x1f1/0x230
[  268.390983][ T6936] Read of size 2 at addr ffff8880563a9140 by task syz-executor.2/6936
[  268.399153][ T6936] 
[  268.401505][ T6936] CPU: 0 PID: 6936 Comm: syz-executor.2 Not tainted 6.1.93-syzkaller #0
[  268.409857][ T6936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  268.419948][ T6936] Call Trace:
[  268.423251][ T6936]  <TASK>
[  268.426214][ T6936]  dump_stack_lvl+0x1e3/0x2cb
[  268.430924][ T6936]  ? nf_tcp_handle_invalid+0x642/0x642
[  268.436407][ T6936]  ? panic+0x764/0x764
[  268.440481][ T6936]  ? _printk+0xd1/0x111
[  268.444651][ T6936]  ? __virt_addr_valid+0x17f/0x520
[  268.449773][ T6936]  ? __virt_addr_valid+0x17f/0x520
[  268.454892][ T6936]  print_report+0x15f/0x4f0
[  268.459402][ T6936]  ? __virt_addr_valid+0x17f/0x520
[  268.464519][ T6936]  ? __virt_addr_valid+0x17f/0x520
[  268.469638][ T6936]  ? __virt_addr_valid+0x44a/0x520
[  268.474760][ T6936]  ? __phys_addr+0xb6/0x170
[  268.479274][ T6936]  ? cfg80211_wext_freq+0x1f1/0x230
[  268.484487][ T6936]  kasan_report+0x136/0x160
[  268.489020][ T6936]  ? cfg80211_wext_freq+0x1f1/0x230
[  268.494232][ T6936]  cfg80211_wext_freq+0x1f1/0x230
[  268.499273][ T6936]  cfg80211_wext_siwscan+0x4ee/0x10c0
[  268.504660][ T6936]  ioctl_standard_iw_point+0x780/0xca0
[  268.510130][ T6936]  ? cmp_bss+0xde0/0xde0
[  268.514390][ T6936]  ? iw_handler_get_iwstats+0x240/0x240
[  268.519948][ T6936]  ? wext_ioctl_dispatch+0xb9/0x460
[  268.525157][ T6936]  ? mutex_lock_nested+0x10/0x10
[  268.530102][ T6936]  ? apparmor_capable+0x12e/0x190
[  268.535133][ T6936]  ? full_name_hash+0x8f/0xe0
[  268.539815][ T6936]  ioctl_standard_call+0xc3/0x280
[  268.544848][ T6936]  ? cmp_bss+0xde0/0xde0
[  268.549090][ T6936]  ? cmp_bss+0xde0/0xde0
[  268.553332][ T6936]  wext_ioctl_dispatch+0x16f/0x460
[  268.558485][ T6936]  ? wext_ioctl_dispatch+0x460/0x460
[  268.563772][ T6936]  ? iw_handler_get_private+0x1e0/0x1e0
[  268.569331][ T6936]  wext_handle_ioctl+0x15b/0x260
[  268.574289][ T6936]  ? call_commit_handler+0xf0/0xf0
[  268.579418][ T6936]  sock_ioctl+0x13b/0x770
[  268.583757][ T6936]  ? sock_poll+0x410/0x410
[  268.588176][ T6936]  ? __fget_files+0x28/0x4a0
[  268.592771][ T6936]  ? __fget_files+0x435/0x4a0
[  268.597450][ T6936]  ? __fget_files+0x28/0x4a0
[  268.602050][ T6936]  ? bpf_lsm_file_ioctl+0x5/0x10
[  268.606992][ T6936]  ? security_file_ioctl+0x7d/0xa0
[  268.612105][ T6936]  ? sock_poll+0x410/0x410
[  268.616525][ T6936]  __se_sys_ioctl+0xf1/0x160
[  268.621129][ T6936]  do_syscall_64+0x3b/0xb0
[  268.625556][ T6936]  ? clear_bhb_loop+0x45/0xa0
[  268.630247][ T6936]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  268.636150][ T6936] RIP: 0033:0x7f977ee7cea9
[  268.640575][ T6936] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[  268.660193][ T6936] RSP: 002b:00007f977fbe00c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  268.668612][ T6936] RAX: ffffffffffffffda RBX: 00007f977efb4120 RCX: 00007f977ee7cea9
[  268.676586][ T6936] RDX: 0000000020000000 RSI: 0000000000008b18 RDI: 0000000000000007
[  268.684557][ T6936] RBP: 00007f977eeebff4 R08: 0000000000000000 R09: 0000000000000000
[  268.692530][ T6936] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  268.700503][ T6936] R13: 000000000000006e R14: 00007f977efb4120 R15: 00007ffc526d3448
[  268.708487][ T6936]  </TASK>
[  268.711506][ T6936] 
[  268.713829][ T6936] Allocated by task 6936:
[  268.718150][ T6936]  kasan_set_track+0x4b/0x70
[  268.722753][ T6936]  __kasan_kmalloc+0x97/0xb0
[  268.727340][ T6936]  __kmalloc+0xb2/0x230
[  268.731504][ T6936]  ioctl_standard_iw_point+0x4aa/0xca0
[  268.736965][ T6936]  ioctl_standard_call+0xc3/0x280
[  268.742011][ T6936]  wext_ioctl_dispatch+0x16f/0x460
[  268.747124][ T6936]  wext_handle_ioctl+0x15b/0x260
[  268.752065][ T6936]  sock_ioctl+0x13b/0x770
[  268.756393][ T6936]  __se_sys_ioctl+0xf1/0x160
[  268.760992][ T6936]  do_syscall_64+0x3b/0xb0
[  268.765415][ T6936]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  268.771312][ T6936] 
[  268.773634][ T6936] Last potentially related work creation:
[  268.779343][ T6936]  kasan_save_stack+0x3b/0x60
[  268.784031][ T6936]  __kasan_record_aux_stack+0xb0/0xc0
[  268.789418][ T6936]  kvfree_call_rcu+0x116/0x8c0
[  268.794186][ T6936]  drop_sysctl_table+0x317/0x460
[  268.799124][ T6936]  drop_sysctl_table+0x329/0x460
[  268.804079][ T6936]  unregister_sysctl_table+0x86/0x130
[  268.809458][ T6936]  neigh_sysctl_unregister+0x74/0x90
[  268.814749][ T6936]  inetdev_event+0x814/0x1490
[  268.819431][ T6936]  raw_notifier_call_chain+0xd0/0x170
[  268.824810][ T6936]  unregister_netdevice_many+0xec1/0x17a0
[  268.830583][ T6936]  unregister_netdevice_queue+0x2e6/0x350
[  268.836319][ T6936]  nsim_destroy+0x44/0x140
[  268.840744][ T6936]  __nsim_dev_port_del+0x153/0x1b0
[  268.845860][ T6936]  nsim_dev_reload_destroy+0x286/0x490
[  268.851322][ T6936]  nsim_drv_remove+0x5c/0x160
[  268.856004][ T6936]  device_release_driver_internal+0x4f3/0x880
[  268.862073][ T6936]  bus_remove_device+0x2e5/0x400
[  268.867023][ T6936]  device_del+0x6e2/0xbd0
[  268.871361][ T6936]  device_unregister+0x1c/0xc0
[  268.876130][ T6936]  del_device_store+0x35f/0x480
[  268.880987][ T6936]  kernfs_fop_write_iter+0x3a2/0x4f0
[  268.886285][ T6936]  vfs_write+0x7ae/0xba0
[  268.890528][ T6936]  ksys_write+0x19c/0x2c0
[  268.894856][ T6936]  do_syscall_64+0x3b/0xb0
[  268.899279][ T6936]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  268.905180][ T6936] 
[  268.907503][ T6936] The buggy address belongs to the object at ffff8880563a9000
[  268.907503][ T6936]  which belongs to the cache kmalloc-512 of size 512
[  268.921554][ T6936] The buggy address is located 320 bytes inside of
[  268.921554][ T6936]  512-byte region [ffff8880563a9000, ffff8880563a9200)
[  268.934825][ T6936] 
[  268.937146][ T6936] The buggy address belongs to the physical page:
[  268.943561][ T6936] page:ffffea000158ea00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x563a8
[  268.953715][ T6936] head:ffffea000158ea00 order:2 compound_mapcount:0 compound_pincount:0
[  268.962033][ T6936] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[  268.970024][ T6936] raw: 00fff00000010200 0000000000000000 dead000000000001 ffff888012441c80
[  268.978605][ T6936] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000
[  268.987181][ T6936] page dumped because: kasan: bad access detected
[  268.993602][ T6936] page_owner tracks the page as allocated
[  268.999311][ T6936] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 3579, tgid 3579 (syz-executor.4), ts 68258932313, free_ts 16735635697
[  269.020871][ T6936]  post_alloc_hook+0x18d/0x1b0
[  269.025648][ T6936]  get_page_from_freelist+0x31a1/0x3320
[  269.031216][ T6936]  __alloc_pages+0x28d/0x770
[  269.035809][ T6936]  alloc_slab_page+0x6a/0x150
[  269.040493][ T6936]  new_slab+0x84/0x2d0
[  269.044565][ T6936]  ___slab_alloc+0xc20/0x1270
[  269.049243][ T6936]  __kmem_cache_alloc_node+0x19f/0x260
[  269.054717][ T6936]  __kmalloc_node_track_caller+0xa0/0x220
[  269.060437][ T6936]  __alloc_skb+0x135/0x670
[  269.064860][ T6936]  netlink_sendmsg+0x6f8/0xd60
[  269.069623][ T6936]  __sys_sendto+0x480/0x600
[  269.074151][ T6936]  __x64_sys_sendto+0xda/0xf0
[  269.078839][ T6936]  do_syscall_64+0x3b/0xb0
[  269.083262][ T6936]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  269.089167][ T6936] page last free stack trace:
[  269.093832][ T6936]  free_unref_page_prepare+0xf63/0x1120
[  269.099395][ T6936]  free_unref_page+0x33/0x3e0
[  269.104071][ T6936]  free_contig_range+0x9a/0x150
[  269.108923][ T6936]  destroy_args+0xfe/0x997
[  269.113348][ T6936]  debug_vm_pgtable+0x416/0x46b
[  269.118209][ T6936]  do_one_initcall+0x265/0x8f0
[  269.122978][ T6936]  do_initcall_level+0x157/0x207
[  269.127934][ T6936]  do_initcalls+0x49/0x86
[  269.132276][ T6936]  kernel_init_freeable+0x45c/0x60f
[  269.137489][ T6936]  kernel_init+0x19/0x290
[  269.141828][ T6936]  ret_from_fork+0x1f/0x30
[  269.146260][ T6936] 
[  269.148585][ T6936] Memory state around the buggy address:
[  269.154223][ T6936]  ffff8880563a9000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  269.162286][ T6936]  ffff8880563a9080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[  269.170434][ T6936] >ffff8880563a9100: 00 00 00 00 00 00 00 04 fc fc fc fc fc fc fc fc
[  269.178490][ T6936]                                            ^
[  269.184638][ T6936]  ffff8880563a9180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  269.192698][ T6936]  ffff8880563a9200: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  269.200755][ T6936] ==================================================================
[  269.208898][    C0] vkms_vblank_simulate: vblank timer overrun
[  269.216428][ T6936] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  269.216957][   T48] Bluetooth: hci0: command tx timeout
[  269.229029][ T6936] CPU: 0 PID: 6936 Comm: syz-executor.2 Not tainted 6.1.93-syzkaller #0
[  269.237442][ T6936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024
[  269.247522][ T6936] Call Trace:
[  269.250812][ T6936]  <TASK>
[  269.253766][ T6936]  dump_stack_lvl+0x1e3/0x2cb
[  269.258460][ T6936]  ? nf_tcp_handle_invalid+0x642/0x642
[  269.263934][ T6936]  ? panic+0x764/0x764
[  269.268009][ T6936]  ? preempt_schedule_common+0xa6/0xd0
[  269.273481][ T6936]  ? vscnprintf+0x59/0x80
[  269.277817][ T6936]  panic+0x318/0x764
[  269.281714][ T6936]  ? check_panic_on_warn+0x1d/0xa0
[  269.286828][ T6936]  ? memcpy_page_flushcache+0xfc/0xfc
[  269.292205][ T6936]  ? _raw_spin_unlock_irqrestore+0x128/0x130
[  269.298192][ T6936]  ? _raw_spin_unlock+0x40/0x40
[  269.303062][ T6936]  ? print_report+0x4a3/0x4f0
[  269.307742][ T6936]  check_panic_on_warn+0x7e/0xa0
[  269.312697][ T6936]  ? cfg80211_wext_freq+0x1f1/0x230
[  269.317905][ T6936]  end_report+0x66/0x110
[  269.322145][ T6936]  kasan_report+0x143/0x160
[  269.326666][ T6936]  ? cfg80211_wext_freq+0x1f1/0x230
[  269.331897][ T6936]  cfg80211_wext_freq+0x1f1/0x230
[  269.336957][ T6936]  cfg80211_wext_siwscan+0x4ee/0x10c0
[  269.342394][ T6936]  ioctl_standard_iw_point+0x780/0xca0
[  269.347872][ T6936]  ? cmp_bss+0xde0/0xde0
[  269.352120][ T6936]  ? iw_handler_get_iwstats+0x240/0x240
[  269.357691][ T6936]  ? wext_ioctl_dispatch+0xb9/0x460
[  269.362892][ T6936]  ? mutex_lock_nested+0x10/0x10
[  269.367846][ T6936]  ? apparmor_capable+0x12e/0x190
[  269.372877][ T6936]  ? full_name_hash+0x8f/0xe0
[  269.377559][ T6936]  ioctl_standard_call+0xc3/0x280
[  269.382584][ T6936]  ? cmp_bss+0xde0/0xde0
[  269.386825][ T6936]  ? cmp_bss+0xde0/0xde0
[  269.391064][ T6936]  wext_ioctl_dispatch+0x16f/0x460
[  269.396177][ T6936]  ? wext_ioctl_dispatch+0x460/0x460
[  269.401461][ T6936]  ? iw_handler_get_private+0x1e0/0x1e0
[  269.407015][ T6936]  wext_handle_ioctl+0x15b/0x260
[  269.411955][ T6936]  ? call_commit_handler+0xf0/0xf0
[  269.417090][ T6936]  sock_ioctl+0x13b/0x770
[  269.421456][ T6936]  ? sock_poll+0x410/0x410
[  269.425889][ T6936]  ? __fget_files+0x28/0x4a0
[  269.430491][ T6936]  ? __fget_files+0x435/0x4a0
[  269.435176][ T6936]  ? __fget_files+0x28/0x4a0
[  269.439776][ T6936]  ? bpf_lsm_file_ioctl+0x5/0x10
[  269.444722][ T6936]  ? security_file_ioctl+0x7d/0xa0
[  269.449834][ T6936]  ? sock_poll+0x410/0x410
[  269.454263][ T6936]  __se_sys_ioctl+0xf1/0x160
[  269.458880][ T6936]  do_syscall_64+0x3b/0xb0
[  269.463316][ T6936]  ? clear_bhb_loop+0x45/0xa0
[  269.468012][ T6936]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  269.473925][ T6936] RIP: 0033:0x7f977ee7cea9
[  269.478350][ T6936] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48
[  269.497977][ T6936] RSP: 002b:00007f977fbe00c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  269.506403][ T6936] RAX: ffffffffffffffda RBX: 00007f977efb4120 RCX: 00007f977ee7cea9
[  269.514380][ T6936] RDX: 0000000020000000 RSI: 0000000000008b18 RDI: 0000000000000007
[  269.522351][ T6936] RBP: 00007f977eeebff4 R08: 0000000000000000 R09: 0000000000000000
[  269.530323][ T6936] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  269.538291][ T6936] R13: 000000000000006e R14: 00007f977efb4120 R15: 00007ffc526d3448
[  269.546276][ T6936]  </TASK>
[  269.549431][ T6936] Kernel Offset: disabled
[  269.553760][ T6936] Rebooting in 86400 seconds..