last executing test programs:

6.234081523s ago: executing program 1 (id=435):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec850000006d000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='block_plug\x00', r0}, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
write$cgroup_type(r1, &(0x7f0000000180), 0x40000)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='qgroup_meta_free_all_pertrans\x00', r0}, 0x10)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x4, 0x1000, &(0x7f0000000300)=""/4096}, 0x80)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001540)={r2, 0xe0, &(0x7f0000000480)={0x0, <r3=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10)
r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r3}, 0x4)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001300)={r4, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, <r5=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffe56, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0)
write$cgroup_subtree(r6, &(0x7f0000000040)=ANY=[], 0x34100)
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0xa, &(0x7f00000013c0)=ANY=[@ANYBLOB="1800000040000000000000000000000018430000ffffffff00000000000000002e13ffeaffffffff8cbb0c20fcffffff1868000000000000000064170400000085d25218f4200000030000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x40f00, 0x6, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x0, 0x2}, 0x8, 0x10, &(0x7f00000001c0)={0x0, 0x0, 0xfff, 0xea6c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r6, 0xffffffffffffffff, r7]}, 0x80)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0xa, &(0x7f00000013c0)=ANY=[@ANYBLOB="1800000040000000000000000000000018430000ffffffff00000000000000002e13ffeaffffffff8cbb0c20fcffffff1868000000000000000064170400000085d25218f4200000030000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x40f00, 0x6, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x0, 0x2}, 0x8, 0x10, &(0x7f00000001c0)={0x0, 0x0, 0xfff, 0xea6c}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000240)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80)
openat$cgroup_ro(r1, &(0x7f00000016c0)='hugetlb.1GB.usage_in_bytes\x00', 0x0, 0x0)
r8 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb4, 0x7f}, 0x48)
r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x6, 0x10001, 0x9, 0x1}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x9, &(0x7f00000000c0)=@framed={{0x18, 0x8}, [@map_fd={0x18, 0x0, 0x1, 0x0, r9}, @map_fd={0x18, 0x0, 0x1, 0x0, r8}, @map_fd={0x18, 0x0, 0x1, 0x0, r8}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238}, 0x80)
r10 = bpf$ITER_CREATE(0x21, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0xe0, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000440)=[0x0, 0x0], ""/16, <r11=>0x0, 0x0, 0x0, 0x0, 0x5, 0x5, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000500)=[{}], 0x8, 0x10, &(0x7f0000000540), 0x0, 0x0, 0x10, 0x8, 0x8, &(0x7f0000000680)}}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x1d, 0x7, &(0x7f00000006c0)=ANY=[@ANYRES32, @ANYBLOB="0000009100985f"], &(0x7f00000003c0)='GPL\x00', 0x7ede, 0x0, 0x0, 0x41000, 0x8, '\x00', r11, 0x19, 0xffffffffffffffff, 0x8, &(0x7f0000000800)={0x4}, 0x8, 0x10, &(0x7f0000000840)={0x0, 0x0, 0x8}, 0x10, 0xffffffffffffffff, r10, 0x0, &(0x7f0000000900)=[0xffffffffffffffff, 0xffffffffffffffff, r10, 0xffffffffffffffff]}, 0x90)
r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000031c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0)
r13 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb4, 0x7f}, 0x48)
r14 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x6, 0x10001, 0x9, 0x1}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x11, 0x9, &(0x7f00000000c0)=@framed={{0x18, 0x8}, [@map_fd={0x18, 0x0, 0x1, 0x0, r14}, @map_fd={0x18, 0x0, 0x1, 0x0, r13}, @map_fd={0x18, 0x0, 0x1, 0x0, r13}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xee, &(0x7f0000000340)=""/238}, 0x80)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000032c0)={0x11, 0x4, &(0x7f0000003080)=@raw=[@btf_id={0x18, 0x6, 0x3, 0x0, 0x4}, @jmp={0x5, 0x0, 0x8, 0x8, 0x7, 0xfffffffffffffff4, 0xffffffffffffffff}, @call={0x85, 0x0, 0x0, 0x6b}], &(0x7f00000030c0)='syzkaller\x00', 0xfffffffb, 0xaf, &(0x7f0000003100)=""/175, 0x41000, 0x0, '\x00', r11, 0x0, r12, 0x8, &(0x7f0000003200)={0x4, 0x4}, 0x8, 0x10, &(0x7f0000003240)={0x0, 0x10, 0x1, 0x6}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000003280)=[r8, r13]}, 0x80)

5.983658111s ago: executing program 1 (id=440):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv6_getaddrlabel={0x1c, 0x4a, 0x1}, 0x1c}}, 0x0)

5.879554027s ago: executing program 1 (id=441):
syz_mount_image$vfat(&(0x7f00000014c0), &(0x7f00000002c0)='./bus\x00', 0x1800800, &(0x7f0000001540)=ANY=[@ANYBLOB="73686f72746e616d653d6d697865642c666c7573682c757466383d302c296f636861727365743d63703836302c616c6c6f775f7574696d653d30303030303030303030303030303030303034363233362c696f636861727365743d63703836362c726f6469722c73686f72746e616d653d6d697865642c7365706167653d3935302c756e695f786c6174653d312c757466383d302c73686f72746e616d653d77696e39352c0007d17c3172fb8ec02ae9f24698f0a209156aa4d4442c5aced16805d473f875567dd8a98800051ddd9e46797fe247a30285b6c0ab94e4c3dc29b4ed4cc2b82a74c202a34ee2a5c400f84e6c2bf3c3e8cf3ec7e2c3e0c1965e1f6888af4b956f2edd3a548e04430d1019a30db449886ce7b0aec53d2c"], 0x1, 0x362, &(0x7f0000000900)="$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")
socket$inet6_tcp(0xa, 0x1, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file0\x00', 0x1000801, &(0x7f0000000080)=ANY=[@ANYRES16=0x0], 0x0, 0x1ca, &(0x7f00000008c0)="$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")
mount$overlay(0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={[], [], 0x2f})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080))
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
futex(0x0, 0xb, 0x200000, &(0x7f00000005c0), &(0x7f0000048000), 0x2)
chdir(&(0x7f0000000140)='./file0\x00')
newfstatat(0xffffffffffffff9c, &(0x7f0000003980)='./file0\x00', &(0x7f00000039c0), 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
getdents64(r3, &(0x7f0000000380)=""/4109, 0x100d)
socket$inet6(0xa, 0x3, 0xff)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000280)={0x5, 0x2, 0x1, 0x2000, &(0x7f00001e4000/0x2000)=nil})
syz_open_procfs(0x0, &(0x7f00000020c0)='net/wireless\x00')

4.991701603s ago: executing program 1 (id=451):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)
ppoll(0x0, 0x0, 0x0, &(0x7f0000000100), 0x8)

4.931048013s ago: executing program 1 (id=452):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x268, 0x0, 0x80000000000}]})

4.902737327s ago: executing program 1 (id=453):
ptrace(0x10, 0x1)
r0 = inotify_init1(0x0)
fcntl$setown(r0, 0x8, 0xffffffffffffffff)
fcntl$getownex(r0, 0x10, &(0x7f0000000380)={0x0, <r1=>0x0})
r2 = getpgid(r1)
ptrace$peeksig(0x4, r2, &(0x7f0000000040)={0x0, 0x0, 0xffffffffffffff59}, 0x0)

4.396618335s ago: executing program 3 (id=455):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "00000100ebffffff", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', "006e34e400"}, 0x28)
r1 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_udp_int(r1, 0x11, 0x66, &(0x7f00000004c0)=0x9, 0x4)
bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c)
syz_emit_ethernet(0x46, &(0x7f0000000480)=ANY=[@ANYBLOB="ffffffffffe3ffffffffffff86dd600111fa00101100fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000e22"], 0x0)
sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137)

4.36632101s ago: executing program 3 (id=456):
r0 = socket(0x0, 0x0, 0x0)
sendmsg$netlink(r0, 0x0, 0x0)
syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file2\x00', 0x0, &(0x7f0000000100)={[{@nouser_xattr}, {@four_active_logs}, {@four_active_logs}, {@noquota}, {@fastboot}, {@fastboot}, {@prjjquota={'prjjquota', 0x3d, '-{'}}, {@jqfmt_vfsv1}, {@extent_cache}, {@fastboot}]}, 0x1, 0x54f9, &(0x7f000000ab40)="$eJzs3E1rY9UbAPAn7XTe//Mv4sLdXBiEFiZh0nlBd6PO4At2KKMuXGmapCEzSW5p0rR25cKluPCbiIIrl34GF67diQvFnaDknlud+gJC08ZOfz+4ee45OXnuc8Iw8NxbEsCptZj9/GMlrsSFiJiPiMsRxXmlPAp3U3guIq5GxNwTR6Wc/33ibERcjIgrk+QpZ6V869Pr42u3f3jjp6++OXfm0mdffju7XQOz9nxE9DfT+U4/xbyT4qNyvjHuFrF/a1zG9Eb/cTnOU9xprxcZdhr76xpFvNlJ6/PN7eEkbvQazUnsdDeK+c1BuuBw3NnPU3zgUWOrGLfa60XsDvMidvZSXbt76f+2veEo5WmV+T4o0sdotB/TfHu3nfaz+biIzcGonE9581Z7dxLHZSwvF8281yrqWD/MN/3f9mZ3sL2bjdtbw24+yG7X6i/U6neq9a281R61b1Ub/dadW9lSpzdZVh21G/27nTzv9Nq1Zt5fzpY6zWa1Xs+W7rXXu41BVq/XbtZuVG8vl2fXs1cfvJP1WtnSJL7cHWyPur1htpFvZekTy9lK7eaLy9m1evbW6lq29vD+/dW1t9+79+6Dl1Zff6Vc9JeysqWVGysr1fqN6kp9+RTt/6Oy6CnuHw6lMusCAE4e/T8wC0fX/289jDj6/j/0/1Nxovrf097/H8H+4VD0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp9Z3C5+/VpwspvGlcv5/5dQz5bgSEXMR8evfmI+zB3LOl3kW/mH9wp9q+LoSRYbJNc6Vx8WIuFsev/z/qL8FAAAAeHp98eHVT1K3nl4WZ10QxyndtJm7/P6U8lUiYmHx+yllm5u8PDulZMW/7zOxO6VsxQ2s81NKlm65nZlWtn9l/kA4/0SopDB3rOUAAADH4mAncLxdCAAAAMfp41kXwGxUYv9R5v6z4OIv7/94IHjhwAgAAAA4gSqzLgAAAAA4ckX/7/f/AAAA4OmWfv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfmPnfm4TB6I4AD8bvLD/tGi1921lb1DGlrDHPUYUkCYogbSQBqiB3FJCBBEeB4WIRJE8thX0fZIZxoIfMwgO80YaAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgS3fVenFz9fu6bc5u306e2QAAAADnbKv1on4yS/2vzf3vza2fTb+IiDIizq3dR/HpJHPU5FSvvL56MYbbiDrh8BmT5voSEX+a6+FH198CAAAAXK7NcjVPq/X0MBt6QPQpFW3Kb38z5RURUc3uM6WVh7xfmcLq3/c4/mdKqwtY00xhqeQ2zpX2LvXf/Vi1mz5ritSUb78/29wBAIAejU6aflchAAAA9Onf0ANgGEU8bWUetwInqWm29z6f9AAAAIAPqBh6AAAAAEDn6vW/8/8AAADgsqXz/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOjStlovNsvVvG3Obt9OntkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI/szzsKhEAYhMHe9Z3J3P+w0qCpqUkVCB9/YzAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvPndX/5PTI0zydxrY+l5JFk7NbZOjb1z4+gP4+vXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcLE/LykQAkEQBXPG/076/oeVBD2DCBHQ8KiiFg0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABf9Ltf/k9MjTPJ3Glj6XgkWbtqbF019h40jh6Mt38DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcLFzP69xVHEAwN/M7GxtVVyj7CEiCh70Yrfb2tqbeFCCB/8EIaTbGrv1R5uDLUXIxZvknIvoUURQ4i3/Q84J5BJvOewhgmdlZmeSyQ9w/dGZTfL5wJv33WGY932zEPKd9xIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgNLo3YM4yQ6dcRwX5zb3Hi9k/daRPrO+sj2btSyO6kz6dHi5+iHqNpcIAAAA50dS1vchhJ10bS7r405e/6flNVnN/92z47is54/W/WVf1v5Z+/WX3Rf3B+qMx8luentxOLhyPJXWk5vldHvub69o5U8+f/eS5F9I/MHyC6M0f57RNxsb77Xz8EId2QIA/8blsi+C8vehrO83mRgA50arUniX9X/SaTYnAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgDqMlsPTZRyFEGZbB3Fma+/xwkn9+sr2bNlurK6uVO+Z3SINIdxeHA6u1DiXaffg4aO788Ph4H79wSshhKZGf6eY/t2PJrg4hEaej+B/CuLiy56WfE5H0OAPJQAAzqS0aFldv5OuzWXnopkQ/vz+cP3/eiUOE9b/ux/f2KyOVa3/+7XNcPr1lu593nvw8NGbi/fm7wzuDD5962r/7f61m9ev3+zl70p63pgAAADw37SLVq3/45nj6/+XKnGYsP7/4tv+V9WxEvX/iQ4W/ZrOBAAA4Hx7/tU/fo9OOB+12+HL+aWl+/3xcf/z1fGxgVT/sQtFq9b/yUzTWQEAAAB1GC1Hh9b/b1XiMOH6/zM/vPRT9Z5JCOFisf5/eeGz4a36pjPV6vhz4qbnCAAAQLMuFq26/p/m+//j/S0PcQjhjdfGcfFvACeq/5P3v/6xOlZ1//+1+qY4leLu+HnkfTeEVrfpjAAAADjLnipaVuz/lq7NffLzpQ/b9v8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA1O2vAAAA//+END5e")
r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
ftruncate(r1, 0x81fd)
r2 = open(&(0x7f0000000100)='./bus\x00', 0x141042, 0x0)
fallocate(r2, 0x20, 0x0, 0x10000)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x0, 0x0)
ioctl$F2FS_IOC_SET_PIN_FILE(r3, 0x4004f50d, &(0x7f0000000000)=0x1)
r4 = open(&(0x7f0000000000)='./bus\x00', 0x4c37e, 0x0)
fallocate(r4, 0x0, 0x0, 0x9000f4)

3.690409323s ago: executing program 4 (id=459):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x7, 0xfff, 0x5}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
nanosleep(&(0x7f0000000080), 0x0)
mkdir(&(0x7f0000000140)='./control\x00', 0x0)
socket$inet6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000100)=@raw={'raw\x00', 0x3c1, 0x3, 0x2f8, 0x280, 0x150, 0x150, 0x0, 0xf8010000, 0x398, 0x238, 0x238, 0x398, 0x238, 0x3, 0x0, {[{{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'macvlan1\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @multicast1}, [], [], 'batadv_slave_0\x00', 'gre0\x00'}, 0x0, 0xa8, 0x118}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "decb585218ebf5805f7356720db1714438ea1c4e4d4388cf67108f218b895e9936aa46525113c03de9cfdfa043d27bdb73687ca94feda3275eefade1197a320d"}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x358)
r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r5, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"})
ioctl$USBDEVFS_CLEAR_HALT(r5, 0xc0105502, &(0x7f0000000340)={0x1, 0x1})
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
r6 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r6, 0xc0306201, &(0x7f0000000480)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0})
inotify_add_watch(0xffffffffffffffff, &(0x7f0000000040)='./control\x00', 0x5000410)

3.283860325s ago: executing program 3 (id=460):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)
ppoll(0x0, 0x0, 0x0, &(0x7f0000000100), 0x8)

2.449564223s ago: executing program 4 (id=466):
r0 = userfaultfd(0x80001)
fchmod(0xffffffffffffffff, 0x0)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000))
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r1}, 0x10)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map}, 0x10)
read(r0, &(0x7f0000000240)=""/136, 0x88)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000580)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1})
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, &(0x7f0000000200), 0x200000, 0x4)
ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000080)={{&(0x7f00008c4000/0x1000)=nil, 0x1000}})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

2.396704642s ago: executing program 3 (id=468):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=@ipv6_deladdr={0x40, 0x15, 0x1, 0x0, 0x0, {}, [@IFA_ADDRESS={0x14, 0x1, @private1}, @IFA_LOCAL={0x14, 0x2, @private2}]}, 0x40}}, 0x0)

2.185687964s ago: executing program 3 (id=470):
r0 = socket(0x1, 0x803, 0x0)
getsockopt$SO_BINDTODEVICE(r0, 0x1, 0xb, &(0x7f0000000000), 0x20000000)

2.160805938s ago: executing program 3 (id=471):
socket$inet6_tcp(0xa, 0x1, 0x0)
listen(0xffffffffffffffff, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
openat$ashmem(0xffffffffffffff9c, 0x0, 0x0, 0x0)
getsockopt$IP_VS_SO_GET_TIMEOUT(0xffffffffffffffff, 0x0, 0x14, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
getrandom(&(0x7f0000000600)=""/274, 0xffffff4f, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xf, &(0x7f0000000340)=@ringbuf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48)
bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r0, &(0x7f0000000740)="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", 0x20000000}, 0x20)
r1 = syz_btf_id_by_name$bpf_lsm(&(0x7f00000001c0)='bpf_lsm_fs_context_parse_param\x00')
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x5, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x85}, [@map_idx={0x18, 0xc, 0x5, 0x0, 0x5}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
syz_mount_image$f2fs(&(0x7f00000004c0), &(0x7f0000000080)='./file0\x00', 0x450, &(0x7f0000005f80)=ANY=[@ANYBLOB="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", @ANYRES32], 0x2, 0x5558, &(0x7f0000000a00)="$eJzs3EtvG9UXAPBju2n/ff4jxIJdR6qQEqm26vQh2BVoxUO0qngsWIFju5Zb2xPFrhOyQoIlYsE3QSCxQmLDZ2DBmh1iAWKHBPLMmBLCo5XdOGl/P2l85t65PnPvyEp0ZiwH8MRaTn75qRRn4nhEVCLiVCmy/VKxZa7m4ZmIOBsR5T9tpaL/j46jEXEiIs5Mkkd8PczHTA59en587vKPr/381bfHjpz87MvvFrdqYNGejYj+Rr6/1c9j2snjnaK/Me5msX9pXMT8QP9u0U7zuNVezzJsNabjGlm82MnHpxv3hpN4u9doTmKnezvr3xjkJxyOO9M82RvuNDazdqu9nsXuMM1iZyef1/ZO/vdyZzjK87SKfO9n6WM0msa8v73dztezcTeLzcGo6M/zpq329iSOi1icLpppr5XNY32WK32wvd4d3NtOxu3NYTcdJJdr9edq9SvV+mbaao/al6qNfuvKpWSl05sMq47ajf7VTpp2eu1aM+2vJiudZrNarycr19rr3cYgqddrF2sXqpdXi73zycs33056rWRlEl/sDu4d7faGye10M8nfsZqs1S4+v5qcqydv3riV3Hrj+vUbt95699o7N1+48epLxaA900pW1i6srVXrF6pr9dUDsP7J/90HXP9olvV/VEz6IdZfmu3ywL/zAQN4aHvq/5hv/V8J9T+w12Gv/2Oe9f+kpFL//3f9W569/p+p/j2o9f8hXj/MRP0PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDE+n7p81eyneW8fbLoP110PVW0SxFRjojf/kYlju7KWSnyLP3D+KW/zOGbUmQZJuc4VmwnIuJqsf36/0d9FQAAAODx9cUHZz/Jq/X8ZXnRE2I/5Tdtyqfem1O+UkQsLf8wp2zlycvTc0qWfb6PxPacsmU3sP43p2T5Lbcj88r2QCrT8OHp+53Zgkp5KO/rdAAAgH1R2RX2twoBAABgP3286AmwGKWYPsqcPgvOvnl//9Hm8V3HAAAAgEOotOgJAAAAAI9cVv/7/T8AAAB4vOW//wcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPzOzv3kpg1EcQB+NhjoPxVV3fcq3cExeoQuuywcoJfgCPQKuQBnILvss4kgwh4hOQIpCuNYoO+TbDM2+s0MsHljYQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOjSfbWe///749+lObv9ZfLMBgAAADhlW63n9Ytp0/6Uzn9Jp76ldhERZUScqt0HMWplDlJOdeb91Ysx3EXUCYc+xmn7GBE/0/b0tetPAQAAAG7XZrmaNdV6s5v2PSDeU7NoU37+lSmviIhq+pAprTzsvmcKq3/fw/iTKa1ewJpkCmuW3Ianr41yddI2aB3STCaL+kusW2U3/QIAAH1qVwJnqhAAAABuwO++B0A/iuPueJ9x3BzSDcEPrRYAAABwhYq+BwAAAAB0rq7/r+H5f4/+lgAAAABv1jz/DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgC5tq/V8s1zNzl1fvDJnt79MvhkBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8sz/3KBACYQxAs4u/ncz9DysRLa1t3oOBkDDFBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8OZ3v/yfcDVHkqltw9x6JFk6NaydGrbODXs/jK+vAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABO9uclBUIgCKJgzvjfSd//sJKgZxAhAhoeVdSiAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC+6He//J+YGmeSudPG0vFIsnbV2Lpq7D1oHD0Yb/8GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAudu6fN24yDAD4c77z9Q8gQkAZAqhIDLDQ5FpaOsIAihj4CEhReimBK4U2A60iUBaYUOYuCEaEkEBh63fo3EhdytYhQ5CYQfbZV7e90qM09tH8ftJ773O2877P67OiPLETAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKO2+Ey8lRdzOXmaGcbntxt7GStbv3NNnrm3dnM9aFrceNtE3bz/+5Kfby9U3x+Yqb76qPxkAAAAOhnZZ30fErXR7KeuTmbz+T8tjspr/+2eGcVnP31v37+xtHC52zZf1/2+/3n5hNNHMcJ5s0NW1QX/x/lQ6+7TEqffsQ4/o5Gc+/91LO/9Akvc3n99N8/PZ+vb69Xe7eXiojmwBgEdxvOyLoPx5KOt7TSYGwIHRqRTeZf3fnmk2JwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA67G7GU2Xcioj5zp04s7O3sTKuv7Z1c75sp69e3aqOmQ2RRsTq2qCf1riWaXfp8pVPlgeD/sWxQcQDd/334FhE7M/IDwhizK4PJ/jyiH8+prg8o55V/LugNR1pNBokxedTbOnWe9Xtb1Bee49/5Ia+IQEA8MRKi5bV9bfS7aVsW2s24q8f7q7/X6vEMWH9f/uj0zeqc1Xr/15tK5x+C+vnP1u4dPnKG2vnl8/1z/U/ffNE763eyTOnTp1ZyM7V4sJqJP3FptMEAADgf6xbtGr9n8zef///aCWOCev/z7/rfVmdq63+H+vOTb+mMwEAADiIuqPouVf+/KM15ohWtxtfLK+vX+wNX0fvTwxfa033ER0qWrX+b882nRUAAABQh93N1l33/89W4pjw/v/TP774c3XMdkQcibgQEf3jKxcGZ+tbzlSr4w+V84m6Ta8UAACAphwpWvX+f5o//5+MHnlIIuL1V4dx+b+uJqn/2+99/VN1rurz/yfrW+JUSuaG5yPv5yI6c01nBAAAwJPscNGyYv/3dHvp41+OftD1/D8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA3f4OAAD//1AjNPw=")
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0)
ioctl$F2FS_IOC_SET_PIN_FILE(r2, 0x4004f50d, &(0x7f0000000180)=0xfffffff9)
r3 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
fallocate(r3, 0x0, 0x0, 0x2000402)
ftruncate(r2, 0x2)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0)
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000))
mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000001480)=ANY=[@ANYBLOB='huge=always'])
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
brk(0x80000001)

1.925172094s ago: executing program 2 (id=473):
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x50}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x0, 0x0, 0x0, 0x4, 0x5}, 0x48)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/12], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@nfs_export_off}, {@index_on}, {@nfs_export_on}, {@metacopy_on}, {@xino_auto}]})
mknodat$loop(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0)
linkat(0xffffffffffffffff, &(0x7f0000001180)='./file1\x00', 0xffffffffffffffff, 0x0, 0x0)
creat(&(0x7f0000000080)='./file0\x00', 0x0)

1.651653526s ago: executing program 2 (id=474):
socket(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0)
sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, 0x0, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x290, 0xd0, 0x111, 0x4b4, 0xd0, 0xd4feffff, 0x1c0, 0x20a, 0x278, 0x1c0, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @mcast2, [], [], 'ipvlan0\x00', 'pimreg0\x00', {}, {}, 0x6}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28}}, {{@ipv6={@mcast2, @private0, [], [], 'virt_wifi0\x00', 'bond_slave_1\x00'}, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2f0)

1.600566534s ago: executing program 0 (id=476):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x20a0}, 0x10)
write(r0, &(0x7f0000000680)="240000001e005f0214fffffffffffff8070000001d000000000000000800000000000000", 0x24)

1.589116295s ago: executing program 4 (id=477):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x48)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000b80)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @printk={@ld}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000a80)='ext4_writepages\x00', r1}, 0x10)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
write$cgroup_type(r2, &(0x7f0000000000), 0x9)

1.572989198s ago: executing program 2 (id=478):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0)
ppoll(0x0, 0x0, 0x0, &(0x7f0000000100), 0x8)

1.562902089s ago: executing program 0 (id=479):
r0 = socket$inet6_icmp(0xa, 0x2, 0x3a)
getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, 0x0, &(0x7f0000000700))

1.550590271s ago: executing program 2 (id=480):
r0 = epoll_create1(0x0)
r1 = epoll_create1(0x0)
close(r0)
mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0)
open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0)
creat(0x0, 0x0)
rename(&(0x7f0000000200)='./file0\x00', &(0x7f0000000f00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000))
epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)={0x77540947ad9a168d})

1.537776673s ago: executing program 0 (id=481):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a00)={0x34, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}, [@NL80211_ATTR_IE={0xa, 0x2a, [@chsw_timing={0x68, 0x3}]}]}, 0x34}}, 0x0)

1.529929205s ago: executing program 4 (id=482):
ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x19, 0x4, 0x0, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @remote, {[@timestamp={0x44, 0x1c, 0x0, 0x0, 0x0, [0x401, 0x0, 0x0, 0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x24, 0x0, 0x3, 0x0, [{@dev}, {@dev}, {}, {@broadcast, 0x52b3}]}, @noop, @noop, @lsrr={0x83, 0xb, 0x0, [@multicast2, @rand_addr]}]}}}}})
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0)
r3 = dup(r1)
sendmmsg(0xffffffffffffffff, &(0x7f00000030c0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x1}], 0x1}}], 0x1, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10e, &(0x7f0000000280)={[{@errors_remount}, {@nodelalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x10000}}, {@block_validity}, {@quota}]}, 0x3, 0x44d, &(0x7f0000000a40)="$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")
chdir(&(0x7f0000000000)='./file0\x00')
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000})
ioctl$KVM_NMI(r4, 0xae9a)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

1.512811987s ago: executing program 0 (id=483):
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000080000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_ext_show_extent\x00', r0}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000180)='ext4_ext_show_extent\x00', r2}, 0x10)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_type(r3, &(0x7f0000000000), 0x248800)

1.470795104s ago: executing program 0 (id=484):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
timer_create(0x0, &(0x7f0000533fa0), 0x0)
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000000140), 0x10)
sendmsg$can_bcm(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f00000009c0)={0x5, 0x802, 0x0, {0x0, 0x2710}, {0x0, 0xea60}, {0x0, 0x0, 0x1}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "f33d8e7b847ec8b36f1107e036dd98fc469107485e371bcf5c6b77db54f3d984795c49eca9b92241dc9fc39f976ad52e581942d9fc2178681e6866aa6ef10d06"}}, 0x80}}, 0x0)
sendmsg$can_bcm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x5, 0xd80, 0x0, {0x77359400}, {0x77359400}, {0x0, 0x0, 0x1}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "645b6048a2e4931133f6d9919fd48557d76811cd874f3c107bbfc1c8831026d40798a2be4cc414e02216198977dc3d41ed0880c64c39e5f4059bae641ed15112"}}, 0x80}}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x6)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f00000003c0)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="8000000000010104000000090000000002000000240001801400018008000100e0c6000108000200e00000010c000280050001000000000024000280140001800800010000000000080002007f0000010c00028005000100000000000800074000000000080003400000100e14000f"], 0x80}}, 0x0)

1.456783616s ago: executing program 2 (id=485):
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x50}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x0, 0x0, 0x0, 0x4, 0x5}, 0x48)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/12], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000280)={[{@nfs_export_off}, {@index_on}, {@nfs_export_on}, {@metacopy_on}, {@xino_auto}]})
mknodat$loop(0xffffffffffffffff, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0)
linkat(0xffffffffffffffff, &(0x7f0000001180)='./file1\x00', 0xffffffffffffffff, 0x0, 0x0)
creat(&(0x7f0000000080)='./file0\x00', 0x0)

1.328533846s ago: executing program 4 (id=486):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000280)={[{@noblock_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@errors_continue}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f0000000680)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH")
chdir(&(0x7f0000000000)='./file0\x00')
creat(&(0x7f0000000040)='./bus\x00', 0x0)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0)
mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r0, 0x0)
readv(0xffffffffffffffff, &(0x7f0000001f80)=[{0x0}, {0x0}, {0xffffffffffffffff}], 0x3)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)

269.116768ms ago: executing program 0 (id=487):
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
dup(0xffffffffffffffff)
sched_setscheduler(0x0, 0x0, 0x0)
getsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0xffffffffffffffff, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$int_in(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1b96, 0xa, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000d40)={0x2c, &(0x7f0000000780)=ANY=[@ANYBLOB='\x00\x00\a\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hidraw(&(0x7f0000000280), 0x0, 0x4a141)
syz_open_dev$hidraw(&(0x7f0000000940), 0x0, 0x0)
pwritev(r1, &(0x7f0000000000)=[{&(0x7f0000000080)="56e5566b207cb0c7c4b17f87617ed8cb", 0xfffffe5e}], 0x1, 0xf739, 0x0)

225.289495ms ago: executing program 2 (id=488):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kfree\x00', r1}, 0x10)
syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}}}}}]}}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x0, 0x0, 0x0, 0xff, 0x0, 0x1}, 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r2 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0)
sendfile(r2, r0, 0x0, 0x3a)

0s ago: executing program 4 (id=489):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x20a0}, 0x10)
write(r0, &(0x7f0000000680)="240000001e005f0214fffffffffffff8070000001d000000000000000800000000000000", 0x24)

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.19' (ED25519) to the list of known hosts.
[   26.013591][   T23] audit: type=1400 audit(1719478857.460:66): avc:  denied  { mounton } for  pid=346 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1925 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   26.015752][  T346] cgroup1: Unknown subsys name 'net'
[   26.036071][   T23] audit: type=1400 audit(1719478857.460:67): avc:  denied  { mount } for  pid=346 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   26.064271][  T346] cgroup1: Unknown subsys name 'net_prio'
[   26.070058][  T346] cgroup1: Unknown subsys name 'devices'
[   26.076432][   T23] audit: type=1400 audit(1719478857.520:68): avc:  denied  { unmount } for  pid=346 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   26.241681][  T346] cgroup1: Unknown subsys name 'hugetlb'
[   26.247347][  T346] cgroup1: Unknown subsys name 'rlimit'
[   26.474396][   T23] audit: type=1400 audit(1719478857.920:69): avc:  denied  { setattr } for  pid=346 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=819 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   26.497388][   T23] audit: type=1400 audit(1719478857.920:70): avc:  denied  { mounton } for  pid=346 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   26.522006][   T23] audit: type=1400 audit(1719478857.920:71): avc:  denied  { mount } for  pid=346 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[   26.530215][  T347] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
[   26.549103][   T23] audit: type=1400 audit(1719478858.000:72): avc:  denied  { read } for  pid=144 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[   26.575098][   T23] audit: type=1400 audit(1719478858.000:73): avc:  denied  { relabelto } for  pid=347 comm="mkswap" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
Setting up swapspace version 1, size = 127995904 bytes
[   26.600450][   T23] audit: type=1400 audit(1719478858.000:74): avc:  denied  { write } for  pid=347 comm="mkswap" path="/root/swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   26.636598][   T23] audit: type=1400 audit(1719478858.080:75): avc:  denied  { read } for  pid=346 comm="syz-executor" name="swap-file" dev="sda1" ino=1928 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   26.671497][  T346] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   27.016361][  T353] bridge0: port 1(bridge_slave_0) entered blocking state
[   27.023384][  T353] bridge0: port 1(bridge_slave_0) entered disabled state
[   27.030864][  T353] device bridge_slave_0 entered promiscuous mode
[   27.050137][  T355] bridge0: port 1(bridge_slave_0) entered blocking state
[   27.057005][  T355] bridge0: port 1(bridge_slave_0) entered disabled state
[   27.064624][  T355] device bridge_slave_0 entered promiscuous mode
[   27.073644][  T355] bridge0: port 2(bridge_slave_1) entered blocking state
[   27.080543][  T355] bridge0: port 2(bridge_slave_1) entered disabled state
[   27.087933][  T355] device bridge_slave_1 entered promiscuous mode
[   27.094369][  T353] bridge0: port 2(bridge_slave_1) entered blocking state
[   27.101239][  T353] bridge0: port 2(bridge_slave_1) entered disabled state
[   27.108710][  T353] device bridge_slave_1 entered promiscuous mode
[   27.121108][  T356] bridge0: port 1(bridge_slave_0) entered blocking state
[   27.127949][  T356] bridge0: port 1(bridge_slave_0) entered disabled state
[   27.135574][  T356] device bridge_slave_0 entered promiscuous mode
[   27.145263][  T356] bridge0: port 2(bridge_slave_1) entered blocking state
[   27.152163][  T356] bridge0: port 2(bridge_slave_1) entered disabled state
[   27.159605][  T356] device bridge_slave_1 entered promiscuous mode
[   27.254411][  T357] bridge0: port 1(bridge_slave_0) entered blocking state
[   27.261428][  T357] bridge0: port 1(bridge_slave_0) entered disabled state
[   27.269002][  T357] device bridge_slave_0 entered promiscuous mode
[   27.276102][  T357] bridge0: port 2(bridge_slave_1) entered blocking state
[   27.283319][  T357] bridge0: port 2(bridge_slave_1) entered disabled state
[   27.290791][  T357] device bridge_slave_1 entered promiscuous mode
[   27.341704][  T358] bridge0: port 1(bridge_slave_0) entered blocking state
[   27.348619][  T358] bridge0: port 1(bridge_slave_0) entered disabled state
[   27.355907][  T358] device bridge_slave_0 entered promiscuous mode
[   27.401508][  T358] bridge0: port 2(bridge_slave_1) entered blocking state
[   27.408389][  T358] bridge0: port 2(bridge_slave_1) entered disabled state
[   27.415839][  T358] device bridge_slave_1 entered promiscuous mode
[   27.497745][  T353] bridge0: port 2(bridge_slave_1) entered blocking state
[   27.504703][  T353] bridge0: port 2(bridge_slave_1) entered forwarding state
[   27.511850][  T353] bridge0: port 1(bridge_slave_0) entered blocking state
[   27.518680][  T353] bridge0: port 1(bridge_slave_0) entered forwarding state
[   27.571565][  T357] bridge0: port 2(bridge_slave_1) entered blocking state
[   27.578521][  T357] bridge0: port 2(bridge_slave_1) entered forwarding state
[   27.585656][  T357] bridge0: port 1(bridge_slave_0) entered blocking state
[   27.592504][  T357] bridge0: port 1(bridge_slave_0) entered forwarding state
[   27.616202][  T356] bridge0: port 2(bridge_slave_1) entered blocking state
[   27.623057][  T356] bridge0: port 2(bridge_slave_1) entered forwarding state
[   27.630228][  T356] bridge0: port 1(bridge_slave_0) entered blocking state
[   27.637051][  T356] bridge0: port 1(bridge_slave_0) entered forwarding state
[   27.651598][  T355] bridge0: port 2(bridge_slave_1) entered blocking state
[   27.658468][  T355] bridge0: port 2(bridge_slave_1) entered forwarding state
[   27.665560][  T355] bridge0: port 1(bridge_slave_0) entered blocking state
[   27.672356][  T355] bridge0: port 1(bridge_slave_0) entered forwarding state
[   27.695200][  T124] bridge0: port 1(bridge_slave_0) entered disabled state
[   27.702604][  T124] bridge0: port 1(bridge_slave_0) entered disabled state
[   27.710341][  T124] bridge0: port 2(bridge_slave_1) entered disabled state
[   27.717363][  T124] bridge0: port 2(bridge_slave_1) entered disabled state
[   27.725308][  T124] bridge0: port 1(bridge_slave_0) entered disabled state
[   27.732363][  T124] bridge0: port 2(bridge_slave_1) entered disabled state
[   27.739543][  T124] bridge0: port 1(bridge_slave_0) entered disabled state
[   27.746522][  T124] bridge0: port 2(bridge_slave_1) entered disabled state
[   27.754898][  T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   27.762265][  T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   27.819894][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   27.828234][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   27.836803][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   27.843667][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   27.852023][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   27.860227][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   27.867143][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   27.874399][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   27.882517][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   27.889363][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   27.896545][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   27.904622][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   27.911462][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   27.940616][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   27.948489][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   27.956361][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   27.965105][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   27.972625][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   27.980664][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   27.987483][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   27.994873][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   28.003025][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.009866][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   28.041467][   T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   28.049159][   T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   28.056466][   T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   28.066404][   T74] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   28.074835][   T74] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.081776][   T74] bridge0: port 1(bridge_slave_0) entered forwarding state
[   28.090584][   T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   28.098803][   T74] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   28.106869][   T74] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.113759][   T74] bridge0: port 2(bridge_slave_1) entered forwarding state
[   28.120949][   T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   28.129185][   T74] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   28.136960][   T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   28.144981][   T74] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   28.163963][   T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   28.171988][   T74] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   28.206753][   T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   28.215026][   T74] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   28.223128][   T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   28.231121][   T74] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   28.239095][   T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   28.247483][   T74] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   28.263431][  T360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   28.270836][  T360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   28.291349][  T360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   28.299834][  T360] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   28.307905][  T360] bridge0: port 1(bridge_slave_0) entered blocking state
[   28.314985][  T360] bridge0: port 1(bridge_slave_0) entered forwarding state
[   28.322948][  T360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   28.331846][  T360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   28.340078][  T360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   28.348273][  T360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   28.356561][  T360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   28.364947][  T360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   28.373527][  T360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   28.382077][  T360] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   28.390281][  T360] bridge0: port 2(bridge_slave_1) entered blocking state
[   28.397098][  T360] bridge0: port 2(bridge_slave_1) entered forwarding state
[   28.404362][  T360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   28.412509][  T360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   28.420500][  T360] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   28.440210][  T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   28.449005][  T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   28.456804][  T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   28.464786][  T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   28.482885][  T360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   28.491512][  T360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   28.505086][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   28.513302][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   28.521513][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   28.529813][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   28.555257][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   28.563172][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   28.571368][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   28.580245][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   28.588875][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   28.596899][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   28.619858][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   28.627991][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   28.637313][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   28.645686][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   28.659071][   T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   28.667128][   T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   28.675486][   T74] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   28.683807][   T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   28.692602][   T74] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   28.700812][   T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   28.720831][  T360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   28.729261][  T360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   28.737228][  T360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   28.746279][  T360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   28.768746][   T74] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   28.777165][   T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   28.786178][   T74] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   28.794735][   T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   28.848458][  T360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   28.857000][  T360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   28.923759][  T376] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   28.932281][  T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   28.934835][  T382] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue
[   29.013646][   T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   29.119676][   T18] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   29.192159][   T18] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   29.217952][  T391] usb usb8: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[   29.238161][  T388] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   29.261381][  T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   29.277026][  T388] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   29.285593][  T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   29.336830][  T382] syz.1.2 (382) used greatest stack depth: 22776 bytes left
[   29.389882][  T399] ======================================================
[   29.389882][  T399] WARNING: the mand mount option is being deprecated and
[   29.389882][  T399]          will be removed in v5.15!
[   29.389882][  T399] ======================================================
[   29.535015][  T399] EXT4-fs (loop3): 1 orphan inode deleted
[   29.540713][  T399] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,
[   29.560501][  T399] ext4 filesystem being mounted at /root/syzkaller.B7LWDD/0/file1 supports timestamps until 2038 (0x7fffffff)
[   29.613915][  T395] F2FS-fs (loop2): Found nat_bits in checkpoint
[   29.635244][  T399] EXT4-fs error (device loop3): __ext4_get_inode_loc:4710: comm syz.3.4: Invalid inode table block 0 in block_group 0
[   29.648181][  T399] EXT4-fs (loop3): Remounting filesystem read-only
[   29.654881][  T399] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6099: Corrupt filesystem
[   29.693554][  T355] EXT4-fs error (device loop3): ext4_map_blocks:617: inode #2: block 3: comm syz-executor: lblock 0 mapped to illegal pblock 3 (length 1)
[   29.743656][  T395] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   29.795998][  T357] attempt to access beyond end of device
[   29.795998][  T357] loop2: rw=2049, want=45104, limit=40427
[   29.812993][  T355] syz-executor (355) used greatest stack depth: 20760 bytes left
[   30.046000][  T430] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.053227][  T430] bridge0: port 1(bridge_slave_0) entered disabled state
[   30.061363][  T430] device bridge_slave_0 entered promiscuous mode
[   30.070577][  T430] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.077477][  T430] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.095260][  T430] device bridge_slave_1 entered promiscuous mode
[   30.283618][  T360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   30.301434][  T360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   30.397898][  T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   30.406573][  T376] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   30.428721][  T376] bridge0: port 1(bridge_slave_0) entered blocking state
[   30.435567][  T376] bridge0: port 1(bridge_slave_0) entered forwarding state
[   30.443583][  T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   30.450250][  T444] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue
[   30.452189][  T376] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   30.478832][  T376] bridge0: port 2(bridge_slave_1) entered blocking state
[   30.485699][  T376] bridge0: port 2(bridge_slave_1) entered forwarding state
[   30.501928][  T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   30.514337][  T376] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   30.522883][  T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   30.531318][  T376] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   30.541712][  T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   30.550973][  T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   30.559763][  T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   30.567885][  T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   30.576605][  T376] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   30.606994][  T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   30.615307][  T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   30.710563][  T356] FAT-fs (loop0): error, corrupted directory (invalid entries)
[   30.718222][  T356] FAT-fs (loop0): Filesystem has been set read-only
[   30.725051][  T356] FAT-fs (loop0): error, corrupted directory (invalid entries)
[   30.738594][  T388] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   30.746775][  T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   30.764545][  T388] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   30.774790][  T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   30.849870][  T453] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19'.
[   30.964634][    T9] device bridge_slave_1 left promiscuous mode
[   30.974717][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[   30.989250][    T9] device bridge_slave_0 left promiscuous mode
[   30.995288][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[   31.210173][  T456] F2FS-fs (loop3): Invalid Fs Meta Ino: node(1) meta(2) root(0)
[   31.220782][  T456] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[   31.230892][  T456] F2FS-fs (loop3): invalid crc value
[   31.257208][  T456] F2FS-fs (loop3): Found nat_bits in checkpoint
[   31.268415][  T124] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   31.364513][  T456] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[   31.371725][  T456] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   31.384041][  T468] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.391283][  T468] bridge0: port 1(bridge_slave_0) entered disabled state
[   31.399200][  T468] device bridge_slave_0 entered promiscuous mode
[   31.410995][  T468] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.417984][  T468] bridge0: port 2(bridge_slave_1) entered disabled state
[   31.425751][  T468] device bridge_slave_1 entered promiscuous mode
[   31.458780][  T121] cfg80211: failed to load regulatory.db
[   31.483932][  T456] attempt to access beyond end of device
[   31.483932][  T456] loop3: rw=2049, want=45152, limit=40427
[   31.504602][  T430] attempt to access beyond end of device
[   31.504602][  T430] loop3: rw=2049, want=45160, limit=40427
[   31.518507][  T124] usb 5-1: Using ep0 maxpacket: 8
[   31.574157][  T468] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.581172][  T468] bridge0: port 2(bridge_slave_1) entered forwarding state
[   31.588398][  T468] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.595244][  T468] bridge0: port 1(bridge_slave_0) entered forwarding state
[   31.637182][  T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   31.644767][  T124] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   31.656819][  T124] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   31.678658][  T124] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice=80.00
[   31.687503][  T124] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   31.697847][  T124] usb 5-1: config 0 descriptor??
[   31.702997][  T393] bridge0: port 1(bridge_slave_0) entered disabled state
[   31.710488][  T393] bridge0: port 2(bridge_slave_1) entered disabled state
[   31.729121][  T376] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   31.747626][  T376] bridge0: port 1(bridge_slave_0) entered blocking state
[   31.754520][  T376] bridge0: port 1(bridge_slave_0) entered forwarding state
[   31.779274][  T376] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   31.787314][  T376] bridge0: port 2(bridge_slave_1) entered blocking state
[   31.794167][  T376] bridge0: port 2(bridge_slave_1) entered forwarding state
[   31.819235][  T360] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   31.827120][  T360] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   31.872042][  T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   31.888787][  T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   31.919149][  T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   31.921379][   T23] kauditd_printk_skb: 57 callbacks suppressed
[   31.921391][   T23] audit: type=1400 audit(1719478863.370:133): avc:  denied  { setopt } for  pid=482 comm="syz.3.30" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   31.950485][  T360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   31.961673][  T360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   32.052705][  T486] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue
[   32.122766][  T492] EXT4-fs (loop0): quotafile must be on filesystem root
[   32.169202][    T9] device bridge_slave_1 left promiscuous mode
[   32.175315][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[   32.180372][  T124] kone 0003:1E7D:2CED.0001: collection stack underflow
[   32.189147][  T124] kone 0003:1E7D:2CED.0001: item 0 1 0 12 parsing failed
[   32.189218][    T9] device bridge_slave_0 left promiscuous mode
[   32.196313][  T124] kone 0003:1E7D:2CED.0001: parse failed
[   32.202954][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[   32.207930][  T124] kone: probe of 0003:1E7D:2CED.0001 failed with error -22
[   32.251070][   T23] audit: type=1400 audit(1719478863.700:134): avc:  denied  { read } for  pid=490 comm="syz.0.32" name="kvm" dev="devtmpfs" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[   32.251818][  T492] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[   32.282131][   T23] audit: type=1400 audit(1719478863.700:135): avc:  denied  { open } for  pid=490 comm="syz.0.32" path="/dev/kvm" dev="devtmpfs" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[   32.358230][   T23] audit: type=1400 audit(1719478863.700:136): avc:  denied  { ioctl } for  pid=490 comm="syz.0.32" path="/dev/kvm" dev="devtmpfs" ino=96 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[   32.391853][  T393] usb 5-1: USB disconnect, device number 2
[   32.416883][   T23] audit: type=1400 audit(1719478863.770:137): avc:  denied  { bind } for  pid=495 comm="syz.2.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   32.435812][   T23] audit: type=1400 audit(1719478863.770:138): avc:  denied  { name_bind } for  pid=495 comm="syz.2.33" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1
[   32.457909][   T23] audit: type=1400 audit(1719478863.770:139): avc:  denied  { node_bind } for  pid=495 comm="syz.2.33" saddr=ff02::1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1
[   32.483108][   T23] audit: type=1400 audit(1719478863.780:140): avc:  denied  { write } for  pid=495 comm="syz.2.33" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   32.540876][  T502] EXT4-fs (loop2): 1 orphan inode deleted
[   32.546592][  T502] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,
[   32.565718][  T502] ext4 filesystem being mounted at /root/syzkaller.ysHcyE/10/file1 supports timestamps until 2038 (0x7fffffff)
[   32.567761][   T23] audit: type=1400 audit(1719478864.020:141): avc:  denied  { mounton } for  pid=501 comm="syz.0.34" path="/root/syzkaller.YOXY3J/2/file0" dev="sda1" ino=1977 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=file permissive=1
[   32.627214][   T23] audit: type=1400 audit(1719478864.070:142): avc:  denied  { create } for  pid=501 comm="syz.0.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   32.669010][  T515] cgroup1: noprefix used incorrectly
[   32.675609][  T502] EXT4-fs error (device loop2): __ext4_get_inode_loc:4710: comm syz.2.35: Invalid inode table block 0 in block_group 0
[   32.691687][  T502] EXT4-fs (loop2): Remounting filesystem read-only
[   32.698236][  T502] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6099: Corrupt filesystem
[   32.714034][  T357] EXT4-fs error (device loop2): ext4_map_blocks:617: inode #2: block 3: comm syz-executor: lblock 0 mapped to illegal pblock 3 (length 1)
[   33.147878][  T529] bridge0: port 1(bridge_slave_0) entered blocking state
[   33.155212][  T529] bridge0: port 1(bridge_slave_0) entered disabled state
[   33.162762][  T529] device bridge_slave_0 entered promiscuous mode
[   33.171579][  T529] bridge0: port 2(bridge_slave_1) entered blocking state
[   33.178755][  T529] bridge0: port 2(bridge_slave_1) entered disabled state
[   33.186479][  T529] device bridge_slave_1 entered promiscuous mode
[   33.213801][  T536] EXT4-fs (loop4): quotafile must be on filesystem root
[   33.251689][  T536] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   33.293721][  T540] 
[   33.295934][  T540] **********************************************************
[   33.334012][  T540] **   NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE   **
[   33.343022][  T540] **                                                      **
[   33.350626][  T540] ** trace_printk() being used. Allocating extra memory.  **
[   33.357921][  T540] **                                                      **
[   33.366501][  T529] bridge0: port 2(bridge_slave_1) entered blocking state
[   33.373397][  T529] bridge0: port 2(bridge_slave_1) entered forwarding state
[   33.380513][  T529] bridge0: port 1(bridge_slave_0) entered blocking state
[   33.387340][  T529] bridge0: port 1(bridge_slave_0) entered forwarding state
[   33.394893][  T540] ** This means that this is a DEBUG kernel and it is     **
[   33.403348][  T540] ** unsafe for production use.                           **
[   33.414384][  T540] **                                                      **
[   33.430882][  T540] ** If you see this message and you are not debugging    **
[   33.452416][  T540] ** the kernel, report this immediately to your vendor!  **
[   33.465818][  T540] **                                                      **
[   33.473148][  T540] **   NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE   **
[   33.480520][  T540] **********************************************************
[   33.489100][   T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   33.509285][   T74] bridge0: port 1(bridge_slave_0) entered disabled state
[   33.516453][   T74] bridge0: port 2(bridge_slave_1) entered disabled state
[   33.546294][   T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   33.554810][   T74] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   33.569808][   T74] bridge0: port 1(bridge_slave_0) entered blocking state
[   33.576767][   T74] bridge0: port 1(bridge_slave_0) entered forwarding state
[   33.584425][   T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   33.591003][  T553] cgroup1: noprefix used incorrectly
[   33.593101][   T74] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   33.607250][   T74] bridge0: port 2(bridge_slave_1) entered blocking state
[   33.614156][   T74] bridge0: port 2(bridge_slave_1) entered forwarding state
[   33.621752][   T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   33.630331][   T74] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   33.641385][   T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   33.649521][   T74] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   33.695211][  T564] netlink: 8 bytes leftover after parsing attributes in process `syz.1.58'.
[   33.700396][  T121] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   33.712669][  T121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   33.733628][   T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   33.741795][   T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   33.758816][  T121] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   33.767383][  T121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   33.778674][    T9] device bridge_slave_1 left promiscuous mode
[   33.785888][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[   33.793952][    T9] device bridge_slave_0 left promiscuous mode
[   33.800304][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[   33.807645][  T566] EXT4-fs (loop1): quotafile must be on filesystem root
[   33.881714][  T121] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   33.890410][  T121] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   33.909427][  T124] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   33.917714][  T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   33.941269][  T393] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   33.963048][  T566] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   33.972336][  T575] netlink: 12 bytes leftover after parsing attributes in process `syz.2.54'.
[   34.054835][  T579] EXT4-fs (loop2): 1 orphan inode deleted
[   34.060539][  T579] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,
[   34.080604][  T579] ext4 filesystem being mounted at /root/syzkaller.uHHdZU/1/file1 supports timestamps until 2038 (0x7fffffff)
[   34.114419][  T579] EXT4-fs error (device loop2): __ext4_get_inode_loc:4710: comm syz.2.63: Invalid inode table block 0 in block_group 0
[   34.127000][  T579] EXT4-fs (loop2): Remounting filesystem read-only
[   34.133366][  T579] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6099: Corrupt filesystem
[   34.147428][  T529] EXT4-fs error (device loop2): ext4_map_blocks:617: inode #2: block 3: comm syz-executor: lblock 0 mapped to illegal pblock 3 (length 1)
[   34.198441][  T393] usb 1-1: Using ep0 maxpacket: 8
[   34.199427][  T594] netlink: 8 bytes leftover after parsing attributes in process `syz.3.69'.
[   34.297825][  T599] netlink: 12 bytes leftover after parsing attributes in process `syz.3.73'.
[   34.328659][  T393] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   34.347477][  T393] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   34.357335][  T393] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice=80.00
[   34.366452][  T393] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   34.381429][  T393] usb 1-1: config 0 descriptor??
[   34.464466][  T608] EXT4-fs (loop3): quotafile must be on filesystem root
[   34.483890][  T600] bridge0: port 1(bridge_slave_0) entered blocking state
[   34.491660][  T600] bridge0: port 1(bridge_slave_0) entered disabled state
[   34.499195][  T600] device bridge_slave_0 entered promiscuous mode
[   34.507655][  T600] bridge0: port 2(bridge_slave_1) entered blocking state
[   34.515543][  T600] bridge0: port 2(bridge_slave_1) entered disabled state
[   34.523186][  T600] device bridge_slave_1 entered promiscuous mode
[   34.584130][  T608] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   34.644941][  T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   34.653954][  T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   34.665437][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   34.673886][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   34.682139][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   34.689012][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   34.702729][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   34.719314][  T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   34.727747][  T124] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   34.736591][  T124] bridge0: port 2(bridge_slave_1) entered blocking state
[   34.743466][  T124] bridge0: port 2(bridge_slave_1) entered forwarding state
[   34.757330][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   34.825594][    T9] device bridge_slave_1 left promiscuous mode
[   34.831706][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[   34.839241][    T9] device bridge_slave_0 left promiscuous mode
[   34.845286][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[   34.853757][  T393] kone 0003:1E7D:2CED.0002: collection stack underflow
[   34.860607][  T393] kone 0003:1E7D:2CED.0002: item 0 1 0 12 parsing failed
[   34.867894][  T393] kone 0003:1E7D:2CED.0002: parse failed
[   34.873833][  T393] kone: probe of 0003:1E7D:2CED.0002 failed with error -22
[   34.895037][  T628] netlink: 12 bytes leftover after parsing attributes in process `syz.1.83'.
[   34.964429][  T376] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   34.999445][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   35.008089][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   35.016002][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   35.039292][  T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   35.064374][  T124] usb 1-1: USB disconnect, device number 2
[   35.082942][  T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   36.124687][  T691] netlink: 148 bytes leftover after parsing attributes in process `syz.3.106'.
[   36.137560][  T691] netlink: 'syz.3.106': attribute type 4 has an invalid length.
[   36.441915][  T393] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   36.478297][  T717] netlink: 148 bytes leftover after parsing attributes in process `syz.2.119'.
[   36.491140][  T717] netlink: 'syz.2.119': attribute type 4 has an invalid length.
[   36.556562][  T728] xt_socket: unknown flags 0xc
[   36.571005][  T728] netlink: 'syz.2.123': attribute type 4 has an invalid length.
[   36.588199][  T728] syz.2.123 (728) used greatest stack depth: 19320 bytes left
[   36.708402][  T393] usb 2-1: Using ep0 maxpacket: 8
[   36.808836][  T734] netlink: 8 bytes leftover after parsing attributes in process `syz.2.124'.
[   36.839115][  T734] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[   36.848522][  T734] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[   36.879091][  T393] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   36.951158][  T393] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   36.963591][  T393] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice=80.00
[   36.974011][  T393] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   36.988095][  T393] usb 2-1: config 0 descriptor??
[   37.106244][  T742] EXT4-fs (loop4): quotafile must be on filesystem root
[   37.163468][  T753] netlink: 148 bytes leftover after parsing attributes in process `syz.3.131'.
[   37.175799][  T753] netlink: 'syz.3.131': attribute type 4 has an invalid length.
[   37.211037][  T742] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[   37.263008][  T766] cgroup1: noprefix used incorrectly
[   37.427963][   T23] kauditd_printk_skb: 34 callbacks suppressed
[   37.427975][   T23] audit: type=1326 audit(1719478868.870:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=781 comm="syz.0.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb202e60b29 code=0x7ffc0000
[   37.480325][  T393] kone 0003:1E7D:2CED.0003: collection stack underflow
[   37.487118][  T393] kone 0003:1E7D:2CED.0003: item 0 1 0 12 parsing failed
[   37.500998][  T393] kone 0003:1E7D:2CED.0003: parse failed
[   37.506500][  T393] kone: probe of 0003:1E7D:2CED.0003 failed with error -22
[   37.514778][   T23] audit: type=1326 audit(1719478868.950:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=781 comm="syz.0.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb202e60b29 code=0x7ffc0000
[   37.539758][   T23] audit: type=1326 audit(1719478868.950:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=781 comm="syz.0.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb202e60b29 code=0x7ffc0000
[   37.576931][  T788] netlink: 148 bytes leftover after parsing attributes in process `syz.0.143'.
[   37.590722][  T788] netlink: 'syz.0.143': attribute type 4 has an invalid length.
[   37.600218][   T23] audit: type=1326 audit(1719478868.950:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=781 comm="syz.0.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb202e60b29 code=0x7ffc0000
[   37.631221][   T23] audit: type=1326 audit(1719478868.950:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=781 comm="syz.0.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb202e60b29 code=0x7ffc0000
[   37.675028][   T23] audit: type=1326 audit(1719478868.950:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=781 comm="syz.0.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb202e60b29 code=0x7ffc0000
[   37.690130][  T796] cgroup1: noprefix used incorrectly
[   37.710235][  T393] usb 2-1: USB disconnect, device number 2
[   37.728529][   T23] audit: type=1326 audit(1719478868.950:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=781 comm="syz.0.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb202e60b29 code=0x7ffc0000
[   37.759376][  T762] F2FS-fs (loop3): Found nat_bits in checkpoint
[   37.799322][   T23] audit: type=1326 audit(1719478868.950:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=781 comm="syz.0.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb202e60b29 code=0x7ffc0000
[   37.848731][   T23] audit: type=1326 audit(1719478868.950:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=781 comm="syz.0.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb202e60b29 code=0x7ffc0000
[   37.873696][   T23] audit: type=1326 audit(1719478868.950:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=781 comm="syz.0.142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb202e60b29 code=0x7ffc0000
[   37.897725][  T762] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   37.999359][  T811] EXT4-fs (loop4): 1 orphan inode deleted
[   38.005378][  T430] attempt to access beyond end of device
[   38.005378][  T430] loop3: rw=2049, want=45104, limit=40427
[   38.007556][  T811] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue
[   38.031449][  T811] ext4 filesystem being mounted at /root/syzkaller.R5TMmr/25/file0 supports timestamps until 2038 (0x7fffffff)
[   38.131946][  T825] netlink: 8 bytes leftover after parsing attributes in process `syz.0.155'.
[   38.142827][  T825] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[   38.152209][  T825] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[   38.304079][  T811] EXT4-fs (loop4): Online resizing not supported with sparse_super2
[   38.322864][  T358] EXT4-fs error (device loop4): ext4_map_blocks:617: inode #2: block 3: comm syz-executor: lblock 0 mapped to illegal pblock 3 (length 1)
[   38.342718][  T358] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6099: Corrupt filesystem
[   38.355804][  T358] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6099: Corrupt filesystem
[   38.651510][  T835] EXT4-fs (loop1): Unsupported blocksize for fs encryption
[   38.672803][  T835] input: syz1 as /devices/virtual/input/input7
[   38.919989][  T831] bridge0: port 1(bridge_slave_0) entered blocking state
[   38.966982][  T831] bridge0: port 1(bridge_slave_0) entered disabled state
[   38.998083][  T831] device bridge_slave_0 entered promiscuous mode
[   39.008155][  T831] bridge0: port 2(bridge_slave_1) entered blocking state
[   39.017301][  T831] bridge0: port 2(bridge_slave_1) entered disabled state
[   40.105800][  T831] device bridge_slave_1 entered promiscuous mode
[   40.217774][  T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   40.225641][  T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   40.237726][  T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   40.246218][  T124] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   40.255048][  T124] bridge0: port 1(bridge_slave_0) entered blocking state
[   40.261937][  T124] bridge0: port 1(bridge_slave_0) entered forwarding state
[   40.269830][  T124] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   40.280761][  T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   40.289343][  T442] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   40.297487][  T442] bridge0: port 2(bridge_slave_1) entered blocking state
[   40.304368][  T442] bridge0: port 2(bridge_slave_1) entered forwarding state
[   40.322543][  T855] FAT-fs (loop2): Directory bread(block 64) failed
[   40.341496][  T855] FAT-fs (loop2): Directory bread(block 65) failed
[   40.351319][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   40.359909][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   40.381024][  T855] FAT-fs (loop2): Directory bread(block 66) failed
[   40.387980][  T855] FAT-fs (loop2): Directory bread(block 67) failed
[   40.394754][  T855] FAT-fs (loop2): Directory bread(block 68) failed
[   40.417263][  T524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   40.427892][  T524] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   40.435768][  T855] FAT-fs (loop2): Directory bread(block 69) failed
[   40.446850][  T855] FAT-fs (loop2): Directory bread(block 70) failed
[   40.454068][  T855] FAT-fs (loop2): Directory bread(block 71) failed
[   40.460578][  T855] FAT-fs (loop2): Directory bread(block 72) failed
[   40.466922][  T855] FAT-fs (loop2): Directory bread(block 73) failed
[   40.486440][  T524] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   40.495761][  T524] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   40.513894][  T874] EXT4-fs (loop0): Unsupported blocksize for fs encryption
[   40.522110][  T396] device bridge_slave_1 left promiscuous mode
[   40.537920][  T396] bridge0: port 2(bridge_slave_1) entered disabled state
[   40.551924][  T396] device bridge_slave_0 left promiscuous mode
[   40.558101][  T396] bridge0: port 1(bridge_slave_0) entered disabled state
[   40.627486][  T874] input: syz1 as /devices/virtual/input/input8
[   40.658883][  T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   40.666768][  T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   40.703215][  T887] xt_socket: unknown flags 0xc
[   40.744286][  T887] netlink: 'syz.1.182': attribute type 4 has an invalid length.
[   40.773041][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   40.796199][  T442] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   40.977117][  T892] netlink: 8 bytes leftover after parsing attributes in process `syz.3.180'.
[   40.987749][  T892] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2
[   40.997225][  T892] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[   41.017346][  T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   41.025849][  T442] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   41.049167][  T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   41.114749][  T896] EXT4-fs (loop1): 1 orphan inode deleted
[   41.121256][  T896] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue
[   41.132024][  T896] ext4 filesystem being mounted at /root/syzkaller.RK685r/34/file0 supports timestamps until 2038 (0x7fffffff)
[   41.434329][  T896] EXT4-fs (loop1): Online resizing not supported with sparse_super2
[   41.451362][  T353] EXT4-fs error (device loop1): ext4_map_blocks:617: inode #2: block 3: comm syz-executor: lblock 0 mapped to illegal pblock 3 (length 1)
[   41.467999][  T353] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6099: Corrupt filesystem
[   41.478799][  T353] EXT4-fs error (device loop1) in ext4_reserve_inode_write:6099: Corrupt filesystem
[   41.586795][  T908] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=9814c018, mo2=0002]
[   41.603170][  T908] EXT4-fs (loop3): mounted filesystem without journal. Opts: user_xattr,barrier=0x0000000000000004,abort,data_err=abort,grpquota,lazytime,noblock_validity,debug,nobarrier,,errors=continue
[   41.713869][  T916] FAT-fs (loop3): Directory bread(block 64) failed
[   41.720409][  T916] FAT-fs (loop3): Directory bread(block 65) failed
[   41.726820][  T916] FAT-fs (loop3): Directory bread(block 66) failed
[   41.736833][  T916] FAT-fs (loop3): Directory bread(block 67) failed
[   41.744029][  T916] FAT-fs (loop3): Directory bread(block 68) failed
[   41.751098][  T916] FAT-fs (loop3): Directory bread(block 69) failed
[   41.757528][  T916] FAT-fs (loop3): Directory bread(block 70) failed
[   41.763799][  T916] FAT-fs (loop3): Directory bread(block 71) failed
[   41.770244][  T916] FAT-fs (loop3): Directory bread(block 72) failed
[   41.777224][  T916] FAT-fs (loop3): Directory bread(block 73) failed
[   41.797231][  T920] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=108 sclass=netlink_route_socket pid=920 comm=syz.4.191
[   41.935371][  T919] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[   42.070796][  T914] bridge0: port 1(bridge_slave_0) entered blocking state
[   42.077980][  T914] bridge0: port 1(bridge_slave_0) entered disabled state
[   42.121885][  T914] device bridge_slave_0 entered promiscuous mode
[   42.138215][  T914] bridge0: port 2(bridge_slave_1) entered blocking state
[   42.146449][  T914] bridge0: port 2(bridge_slave_1) entered disabled state
[   42.191407][  T914] device bridge_slave_1 entered promiscuous mode
[   42.206965][  T929] EXT4-fs (loop4): Unsupported blocksize for fs encryption
[   42.260428][  T914] bridge0: port 2(bridge_slave_1) entered blocking state
[   42.267335][  T914] bridge0: port 2(bridge_slave_1) entered forwarding state
[   42.274748][  T914] bridge0: port 1(bridge_slave_0) entered blocking state
[   42.281612][  T914] bridge0: port 1(bridge_slave_0) entered forwarding state
[   42.315017][  T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   42.322906][  T929] input: syz1 as /devices/virtual/input/input9
[   42.329083][  T442] bridge0: port 1(bridge_slave_0) entered disabled state
[   42.336388][  T442] bridge0: port 2(bridge_slave_1) entered disabled state
[   42.351569][  T405] udevd[405]: setting owner of /dev/input/event3 to uid=0, gid=104 failed: No such file or directory
[   42.367919][  T442] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   42.376537][  T442] bridge0: port 1(bridge_slave_0) entered blocking state
[   42.383402][  T442] bridge0: port 1(bridge_slave_0) entered forwarding state
[   42.391144][  T442] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   42.399401][  T442] bridge0: port 2(bridge_slave_1) entered blocking state
[   42.406249][  T442] bridge0: port 2(bridge_slave_1) entered forwarding state
[   42.416529][  T933] FAT-fs (loop4): Directory bread(block 64) failed
[   42.424015][  T933] FAT-fs (loop4): Directory bread(block 65) failed
[   42.430892][  T933] FAT-fs (loop4): Directory bread(block 66) failed
[   42.437442][  T933] FAT-fs (loop4): Directory bread(block 67) failed
[   42.444012][  T933] FAT-fs (loop4): Directory bread(block 68) failed
[   42.450417][  T933] FAT-fs (loop4): Directory bread(block 69) failed
[   42.450807][  T442] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   42.456817][  T933] FAT-fs (loop4): Directory bread(block 70) failed
[   42.470828][  T933] FAT-fs (loop4): Directory bread(block 71) failed
[   42.477258][  T933] FAT-fs (loop4): Directory bread(block 72) failed
[   42.483532][  T933] FAT-fs (loop4): Directory bread(block 73) failed
[   42.488226][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   42.499106][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   42.509482][  T396] device bridge_slave_1 left promiscuous mode
[   42.515825][  T396] bridge0: port 2(bridge_slave_1) entered disabled state
[   42.523749][  T396] device bridge_slave_0 left promiscuous mode
[   42.532517][  T396] bridge0: port 1(bridge_slave_0) entered disabled state
[   42.671740][  T937] cgroup: syz.3.195 (937) created nested cgroup for controller "memory" which has incomplete hierarchy support. Nested cgroups may change behavior in the future.
[   42.704314][  T937] cgroup: "memory" requires setting use_hierarchy to 1 on the root
[   42.705771][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   42.723274][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   42.736239][   T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   42.744051][   T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   42.760517][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   42.769275][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   42.799412][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   42.807758][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   42.811502][  T942] EXT4-fs (loop2): 1 orphan inode deleted
[   42.819004][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   42.821839][  T942] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue
[   42.830769][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   42.838494][  T942] ext4 filesystem being mounted at /root/syzkaller.dDXBUz/22/file0 supports timestamps until 2038 (0x7fffffff)
[   42.890318][  T942] EXT4-fs (loop2): Online resizing not supported with sparse_super2
[   42.902785][  T600] EXT4-fs error (device loop2): ext4_map_blocks:617: inode #2: block 3: comm syz-executor: lblock 0 mapped to illegal pblock 3 (length 1)
[   42.923152][  T600] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6099: Corrupt filesystem
[   42.933649][  T600] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6099: Corrupt filesystem
[   43.076719][  T962] EXT4-fs (loop1): Unsupported blocksize for fs encryption
[   43.151340][  T962] input: syz1 as /devices/virtual/input/input10
[   43.200235][  T965] bridge0: port 1(bridge_slave_0) entered blocking state
[   43.207084][  T965] bridge0: port 1(bridge_slave_0) entered disabled state
[   43.215145][  T965] device bridge_slave_0 entered promiscuous mode
[   43.222300][  T965] bridge0: port 2(bridge_slave_1) entered blocking state
[   43.229149][  T965] bridge0: port 2(bridge_slave_1) entered disabled state
[   43.236678][  T965] device bridge_slave_1 entered promiscuous mode
[   43.308839][  T965] bridge0: port 2(bridge_slave_1) entered blocking state
[   43.315789][  T965] bridge0: port 2(bridge_slave_1) entered forwarding state
[   43.322938][  T965] bridge0: port 1(bridge_slave_0) entered blocking state
[   43.329795][  T965] bridge0: port 1(bridge_slave_0) entered forwarding state
[   43.357875][   T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   43.365841][   T74] bridge0: port 1(bridge_slave_0) entered disabled state
[   43.373392][   T74] bridge0: port 2(bridge_slave_1) entered disabled state
[   43.399601][   T74] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   43.407674][   T74] bridge0: port 1(bridge_slave_0) entered blocking state
[   43.414535][   T74] bridge0: port 1(bridge_slave_0) entered forwarding state
[   43.421932][   T74] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   43.430035][   T74] bridge0: port 2(bridge_slave_1) entered blocking state
[   43.436857][   T74] bridge0: port 2(bridge_slave_1) entered forwarding state
[   43.444201][   T74] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   43.452160][   T74] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   43.495292][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   43.504059][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   43.523826][  T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   43.532470][  T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   43.561980][  T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   43.571383][  T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   43.598071][   T74] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   43.611278][   T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   43.620266][   T74] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   43.629797][   T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   43.643585][  T988] netlink: 40 bytes leftover after parsing attributes in process `syz.3.214'.
[   43.678684][  T396] device bridge_slave_1 left promiscuous mode
[   43.684680][  T396] bridge0: port 2(bridge_slave_1) entered disabled state
[   43.709907][  T396] device bridge_slave_0 left promiscuous mode
[   43.715976][  T396] bridge0: port 1(bridge_slave_0) entered disabled state
[   43.785207][  T998] EXT4-fs (loop4): Unsupported blocksize for fs encryption
[   43.810584][  T998] input: syz1 as /devices/virtual/input/input11
[   44.040360][ T1011] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue
[   44.088680][  T376] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   44.239884][ T1025] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue
[   44.248963][ T1025] ext4 filesystem being mounted at /root/syzkaller.o7QEl8/4/file1 supports timestamps until 2038 (0x7fffffff)
[   44.263732][ T1025] capability: warning: `syz.2.225' uses deprecated v2 capabilities in a way that may be insecure
[   44.538419][  T376] usb 4-1: Using ep0 maxpacket: 8
[   44.638439][  T442] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   44.658499][  T376] usb 4-1: config 0 contains an unexpected descriptor of type 0x2, skipping
[   44.667132][  T376] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   44.677354][  T376] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[   44.686392][  T376] usb 4-1: New USB device found, idVendor=056a, idProduct=00b5, bcdDevice= 0.00
[   44.695408][  T376] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   44.704046][  T376] usb 4-1: config 0 descriptor??
[   44.782871][ T1036] netlink: 40 bytes leftover after parsing attributes in process `syz.4.228'.
[   44.878433][  T442] usb 3-1: Using ep0 maxpacket: 8
[   44.911674][ T1047] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue
[   44.951456][  T388] usb 4-1: USB disconnect, device number 2
[   45.008597][  T442] usb 3-1: config 0 has an invalid interface number: 171 but max is 0
[   45.016860][  T442] usb 3-1: config 0 has no interface number 0
[   45.022968][  T442] usb 3-1: too many endpoints for config 0 interface 171 altsetting 190: 149, using maximum allowed: 30
[   45.034223][  T442] usb 3-1: config 0 interface 171 altsetting 190 has 0 endpoint descriptors, different from the interface descriptor's value: 149
[   45.048041][  T442] usb 3-1: config 0 interface 171 has no altsetting 0
[   45.054836][  T442] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[   45.069423][  T442] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   45.081866][  T442] usb 3-1: config 0 descriptor??
[   45.176751][ T1059] FAT-fs (loop1): Directory bread(block 64) failed
[   45.183453][ T1059] FAT-fs (loop1): Directory bread(block 65) failed
[   45.189830][ T1059] FAT-fs (loop1): Directory bread(block 66) failed
[   45.196099][ T1059] FAT-fs (loop1): Directory bread(block 67) failed
[   45.202511][ T1059] FAT-fs (loop1): Directory bread(block 68) failed
[   45.209834][ T1059] FAT-fs (loop1): Directory bread(block 69) failed
[   45.216212][ T1059] FAT-fs (loop1): Directory bread(block 70) failed
[   45.222537][ T1059] FAT-fs (loop1): Directory bread(block 71) failed
[   45.229085][ T1059] FAT-fs (loop1): Directory bread(block 72) failed
[   45.235522][ T1059] FAT-fs (loop1): Directory bread(block 73) failed
[   45.428465][  T442] usb 3-1: string descriptor 0 read error: -71
[   45.448691][  T442] asix 3-1:0.171 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[   45.463002][  T442] asix: probe of 3-1:0.171 failed with error -71
[   45.470219][  T442] usb 3-1: USB disconnect, device number 2
[   45.519002][ T1063] FAT-fs (loop1): Directory bread(block 64) failed
[   45.525236][ T1066] netlink: 4 bytes leftover after parsing attributes in process `syz.3.239'.
[   45.525637][ T1063] FAT-fs (loop1): Directory bread(block 65) failed
[   45.541248][ T1063] FAT-fs (loop1): Directory bread(block 66) failed
[   45.542553][ T1066] netlink: 4 bytes leftover after parsing attributes in process `syz.3.239'.
[   45.547924][ T1063] FAT-fs (loop1): Directory bread(block 67) failed
[   45.548031][ T1063] FAT-fs (loop1): Directory bread(block 68) failed
[   45.569583][ T1063] FAT-fs (loop1): Directory bread(block 69) failed
[   45.576006][ T1063] FAT-fs (loop1): Directory bread(block 70) failed
[   45.582471][ T1063] FAT-fs (loop1): Directory bread(block 71) failed
[   45.589055][ T1063] FAT-fs (loop1): Directory bread(block 72) failed
[   45.595528][ T1063] FAT-fs (loop1): Directory bread(block 73) failed
[   45.702269][ T1069] netlink: 40 bytes leftover after parsing attributes in process `syz.3.240'.
[   46.056967][   T23] kauditd_printk_skb: 75 callbacks suppressed
[   46.056979][   T23] audit: type=1400 audit(1719478877.500:262): avc:  denied  { read } for  pid=1075 comm="syz.3.245" name="ppp" dev="devtmpfs" ino=9277 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   46.073551][ T1079] netlink: 40 bytes leftover after parsing attributes in process `syz.2.244'.
[   46.096095][   T23] audit: type=1400 audit(1719478877.550:263): avc:  denied  { open } for  pid=1075 comm="syz.3.245" path="/dev/ppp" dev="devtmpfs" ino=9277 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   46.119451][   T23] audit: type=1400 audit(1719478877.550:264): avc:  denied  { ioctl } for  pid=1075 comm="syz.3.245" path="/dev/ppp" dev="devtmpfs" ino=9277 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[   46.293857][   T23] audit: type=1326 audit(1719478877.730:265): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1088 comm="syz.2.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb297531b29 code=0x7ffc0000
[   46.317580][   T23] audit: type=1326 audit(1719478877.730:266): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1088 comm="syz.2.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb297531b29 code=0x7ffc0000
[   46.335358][ T1091] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=108 sclass=netlink_route_socket pid=1091 comm=syz.2.248
[   46.353254][   T23] audit: type=1326 audit(1719478877.730:267): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1088 comm="syz.2.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb297531b29 code=0x7ffc0000
[   46.442454][   T23] audit: type=1326 audit(1719478877.730:268): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1088 comm="syz.2.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fb297531b29 code=0x7ffc0000
[   46.468065][   T23] audit: type=1326 audit(1719478877.730:269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1088 comm="syz.2.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb297531b29 code=0x7ffc0000
[   46.496026][   T23] audit: type=1326 audit(1719478877.730:270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1088 comm="syz.2.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=299 compat=0 ip=0x7fb297531b29 code=0x7ffc0000
[   46.582249][   T23] audit: type=1326 audit(1719478878.030:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1088 comm="syz.2.248" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb297531b29 code=0x7ffc0000
[   46.632456][ T1094] FAT-fs (loop1): Directory bread(block 64) failed
[   46.638944][ T1094] FAT-fs (loop1): Directory bread(block 65) failed
[   46.639466][ T1089] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[   46.645368][ T1094] FAT-fs (loop1): Directory bread(block 66) failed
[   46.668333][ T1094] FAT-fs (loop1): Directory bread(block 67) failed
[   46.675591][ T1094] FAT-fs (loop1): Directory bread(block 68) failed
[   46.687100][ T1094] FAT-fs (loop1): Directory bread(block 69) failed
[   46.694270][ T1094] FAT-fs (loop1): Directory bread(block 70) failed
[   46.701288][ T1094] FAT-fs (loop1): Directory bread(block 71) failed
[   46.707756][ T1094] FAT-fs (loop1): Directory bread(block 72) failed
[   46.714454][ T1094] FAT-fs (loop1): Directory bread(block 73) failed
[   46.738621][ T1100] netlink: 40 bytes leftover after parsing attributes in process `syz.3.252'.
[   46.749065][ T1101] netlink: 4 bytes leftover after parsing attributes in process `syz.2.251'.
[   46.764574][ T1101] netlink: 4 bytes leftover after parsing attributes in process `syz.2.251'.
[   46.793338][ T1101] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.803592][ T1101] device bridge_slave_0 left promiscuous mode
[   46.810098][ T1101] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.940273][ T1106] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue
[   46.949127][ T1106] ext4 filesystem being mounted at /root/syzkaller.o7QEl8/9/file1 supports timestamps until 2038 (0x7fffffff)
[   47.214129][ T1123] FAT-fs (loop4): Directory bread(block 64) failed
[   47.220727][ T1123] FAT-fs (loop4): Directory bread(block 65) failed
[   47.227222][ T1123] FAT-fs (loop4): Directory bread(block 66) failed
[   47.233736][ T1123] FAT-fs (loop4): Directory bread(block 67) failed
[   47.238418][  T376] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   47.240279][ T1123] FAT-fs (loop4): Directory bread(block 68) failed
[   47.254053][ T1123] FAT-fs (loop4): Directory bread(block 69) failed
[   47.260452][ T1123] FAT-fs (loop4): Directory bread(block 70) failed
[   47.266788][ T1123] FAT-fs (loop4): Directory bread(block 71) failed
[   47.273222][ T1123] FAT-fs (loop4): Directory bread(block 72) failed
[   47.279573][ T1123] FAT-fs (loop4): Directory bread(block 73) failed
[   47.391847][ T1127] EXT4-fs: Warning: mounting with data=journal disables delayed allocation and O_DIRECT support!
[   47.411900][ T1127] EXT4-fs error (device loop4) in ext4_do_update_inode:5534: error 27
[   47.420707][ T1127] EXT4-fs error (device loop4) in ext4_do_update_inode:5534: error 27
[   47.429857][ T1127] EXT4-fs error (device loop4) in ext4_do_update_inode:5534: error 27
[   47.438178][ T1127] EXT4-fs error (device loop4) in ext4_do_update_inode:5534: error 27
[   47.446877][ T1127] EXT4-fs error (device loop4) in ext4_do_update_inode:5534: error 27
[   47.455195][ T1127] EXT4-fs error (device loop4) in ext4_orphan_del:3211: error 27
[   47.463281][ T1127] EXT4-fs error (device loop4) in ext4_do_update_inode:5534: error 27
[   47.471623][ T1127] EXT4-fs error (device loop4) in ext4_orphan_cleanup:2816: error 27
[   47.480192][ T1127] EXT4-fs (loop4): 1 truncate cleaned up
[   47.485695][ T1127] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue
[   47.488417][  T376] usb 3-1: Using ep0 maxpacket: 8
[   47.494552][ T1127] ext4 filesystem being mounted at /root/syzkaller.i3teM3/26/file1 supports timestamps until 2038 (0x7fffffff)
[   47.603103][ T1136] netlink: 12 bytes leftover after parsing attributes in process `syz.4.264'.
[   47.618484][  T376] usb 3-1: config 0 has an invalid interface number: 171 but max is 0
[   47.626625][  T376] usb 3-1: config 0 has no interface number 0
[   47.643660][  T376] usb 3-1: too many endpoints for config 0 interface 171 altsetting 190: 149, using maximum allowed: 30
[   47.658232][  T376] usb 3-1: config 0 interface 171 altsetting 190 has 0 endpoint descriptors, different from the interface descriptor's value: 149
[   47.672184][  T376] usb 3-1: config 0 interface 171 has no altsetting 0
[   47.679454][  T376] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[   47.688989][  T376] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   47.689960][  T376] usb 3-1: config 0 descriptor??
[   48.089418][ T1153] FAT-fs (loop1): Directory bread(block 64) failed
[   48.096049][ T1153] FAT-fs (loop1): Directory bread(block 65) failed
[   48.102809][ T1153] FAT-fs (loop1): Directory bread(block 66) failed
[   48.109320][ T1153] FAT-fs (loop1): Directory bread(block 67) failed
[   48.115770][ T1153] FAT-fs (loop1): Directory bread(block 68) failed
[   48.122292][ T1153] FAT-fs (loop1): Directory bread(block 69) failed
[   48.128838][ T1153] FAT-fs (loop1): Directory bread(block 70) failed
[   48.135203][ T1153] FAT-fs (loop1): Directory bread(block 71) failed
[   48.141576][ T1153] FAT-fs (loop1): Directory bread(block 72) failed
[   48.148177][ T1153] FAT-fs (loop1): Directory bread(block 73) failed
[   48.218455][  T376] usb 3-1: string descriptor 0 read error: -71
[   48.248704][  T376] asix 3-1:0.171 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[   48.259089][  T376] asix: probe of 3-1:0.171 failed with error -71
[   48.266443][  T376] usb 3-1: USB disconnect, device number 3
[   48.431123][ T1179] EXT4-fs error (device loop1) in ext4_do_update_inode:5534: error 27
[   48.439665][ T1179] EXT4-fs error (device loop1) in ext4_do_update_inode:5534: error 27
[   48.448575][ T1179] EXT4-fs error (device loop1) in ext4_do_update_inode:5534: error 27
[   48.456748][ T1179] EXT4-fs error (device loop1) in ext4_do_update_inode:5534: error 27
[   48.465142][ T1179] EXT4-fs error (device loop1) in ext4_do_update_inode:5534: error 27
[   48.473881][ T1179] EXT4-fs error (device loop1) in ext4_orphan_del:3211: error 27
[   48.481840][ T1179] EXT4-fs error (device loop1) in ext4_do_update_inode:5534: error 27
[   48.490276][ T1179] EXT4-fs error (device loop1) in ext4_orphan_cleanup:2816: error 27
[   48.498836][ T1179] EXT4-fs (loop1): 1 truncate cleaned up
[   48.504291][ T1179] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue
[   48.513150][ T1179] ext4 filesystem being mounted at /root/syzkaller.roQEKz/26/file1 supports timestamps until 2038 (0x7fffffff)
[   48.670173][ T1188] FAT-fs (loop3): Directory bread(block 64) failed
[   48.676575][ T1188] FAT-fs (loop3): Directory bread(block 65) failed
[   48.683315][ T1188] FAT-fs (loop3): Directory bread(block 66) failed
[   48.689676][ T1188] FAT-fs (loop3): Directory bread(block 67) failed
[   48.696027][ T1188] FAT-fs (loop3): Directory bread(block 68) failed
[   48.702357][ T1188] FAT-fs (loop3): Directory bread(block 69) failed
[   48.708720][ T1188] FAT-fs (loop3): Directory bread(block 70) failed
[   48.714982][ T1188] FAT-fs (loop3): Directory bread(block 71) failed
[   48.721406][ T1188] FAT-fs (loop3): Directory bread(block 72) failed
[   48.727665][ T1188] FAT-fs (loop3): Directory bread(block 73) failed
[   48.880048][ T1200] FAT-fs (loop3): bogus logical sector size 0
[   48.888034][ T1200] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[   48.897457][ T1200] FAT-fs (loop3): Can't find a valid FAT filesystem
[   49.116245][ T1218] __nla_validate_parse: 1 callbacks suppressed
[   49.116252][ T1218] netlink: 8 bytes leftover after parsing attributes in process `syz.4.297'.
[   49.439342][ T1222] FAT-fs (loop1): Directory bread(block 64) failed
[   49.445698][ T1222] FAT-fs (loop1): Directory bread(block 65) failed
[   49.454009][ T1222] FAT-fs (loop1): Directory bread(block 66) failed
[   49.460782][ T1222] FAT-fs (loop1): Directory bread(block 67) failed
[   49.467241][ T1222] FAT-fs (loop1): Directory bread(block 68) failed
[   49.473777][ T1222] FAT-fs (loop1): Directory bread(block 69) failed
[   49.480717][ T1222] FAT-fs (loop1): Directory bread(block 70) failed
[   49.487130][ T1222] FAT-fs (loop1): Directory bread(block 71) failed
[   49.494589][ T1222] FAT-fs (loop1): Directory bread(block 72) failed
[   49.501265][ T1222] FAT-fs (loop1): Directory bread(block 73) failed
[   50.008250][ T1237] FAT-fs (loop1): Directory bread(block 64) failed
[   50.022293][ T1237] FAT-fs (loop1): Directory bread(block 65) failed
[   50.033033][ T1237] FAT-fs (loop1): Directory bread(block 66) failed
[   50.033581][ T1242] FAT-fs (loop2): bogus logical sector size 0
[   50.040706][ T1237] FAT-fs (loop1): Directory bread(block 67) failed
[   50.053896][ T1242] FAT-fs (loop2): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[   50.063247][ T1242] FAT-fs (loop2): Can't find a valid FAT filesystem
[   50.069456][ T1237] FAT-fs (loop1): Directory bread(block 68) failed
[   50.077192][ T1237] FAT-fs (loop1): Directory bread(block 69) failed
[   50.085766][ T1237] FAT-fs (loop1): Directory bread(block 70) failed
[   50.092492][ T1237] FAT-fs (loop1): Directory bread(block 71) failed
[   50.099227][ T1237] FAT-fs (loop1): Directory bread(block 72) failed
[   50.105616][ T1237] FAT-fs (loop1): Directory bread(block 73) failed
[   50.274192][ T1249] netlink: 12 bytes leftover after parsing attributes in process `syz.2.309'.
[   50.343304][ T1247] F2FS-fs (loop3): Found nat_bits in checkpoint
[   50.563853][ T1247] F2FS-fs (loop3): Cannot turn on quotas: -2 on 2
[   50.572704][ T1247] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   50.614517][ T1261] netlink: 4 bytes leftover after parsing attributes in process `syz.4.310'.
[   50.644785][ T1261] netlink: 4 bytes leftover after parsing attributes in process `syz.4.310'.
[   51.149309][  T430] attempt to access beyond end of device
[   51.149309][  T430] loop3: rw=2049, want=45104, limit=40427
[   51.247755][ T1283] capability: warning: `syz.1.318' uses 32-bit capabilities (legacy support in use)
[   51.260669][ T1267] bridge0: port 1(bridge_slave_0) entered blocking state
[   51.267525][ T1267] bridge0: port 1(bridge_slave_0) entered disabled state
[   51.289101][ T1267] device bridge_slave_0 entered promiscuous mode
[   51.296116][ T1267] bridge0: port 2(bridge_slave_1) entered blocking state
[   51.318025][ T1267] bridge0: port 2(bridge_slave_1) entered disabled state
[   51.332476][ T1267] device bridge_slave_1 entered promiscuous mode
[   51.390930][   T23] kauditd_printk_skb: 54 callbacks suppressed
[   51.390943][   T23] audit: type=1400 audit(1719478882.840:322): avc:  denied  { ioctl } for  pid=1290 comm="syz.1.320" path="socket:[19299]" dev="sockfs" ino=19299 ioctlcmd=0x52c8 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   51.472545][ T1267] bridge0: port 2(bridge_slave_1) entered blocking state
[   51.479439][ T1267] bridge0: port 2(bridge_slave_1) entered forwarding state
[   51.486711][ T1267] bridge0: port 1(bridge_slave_0) entered blocking state
[   51.493588][ T1267] bridge0: port 1(bridge_slave_0) entered forwarding state
[   51.555314][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   51.563557][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   51.571344][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   51.776600][  T102] blk_update_request: I/O error, dev loop3, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 0
[   51.831553][  T442] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   51.841367][  T442] bridge0: port 1(bridge_slave_0) entered blocking state
[   51.848205][  T442] bridge0: port 1(bridge_slave_0) entered forwarding state
[   51.857040][  T442] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   51.865440][  T442] bridge0: port 2(bridge_slave_1) entered blocking state
[   51.872316][  T442] bridge0: port 2(bridge_slave_1) entered forwarding state
[   51.891679][  T376] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   51.900138][  T376] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   51.921831][   T23] audit: type=1400 audit(1719478883.370:323): avc:  denied  { setattr } for  pid=1297 comm="syz.3.316" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   51.943874][  T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   51.945397][   T23] audit: type=1400 audit(1719478883.370:324): avc:  denied  { unmount } for  pid=430 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[   51.953009][  T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   51.991241][  T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   52.022300][  T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   52.047179][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   52.090187][    T7] device bridge_slave_1 left promiscuous mode
[   52.096427][    T7] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.119543][    T7] device bridge_slave_0 left promiscuous mode
[   52.125668][    T7] bridge0: port 1(bridge_slave_0) entered disabled state
[   52.220932][ T1311] netlink: 4 bytes leftover after parsing attributes in process `syz.4.323'.
[   52.232327][ T1314] netlink: 12 bytes leftover after parsing attributes in process `syz.2.324'.
[   52.243481][ T1306] netlink: 4 bytes leftover after parsing attributes in process `syz.4.323'.
[   52.485387][ T1341] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491
[   52.530247][   T23] audit: type=1400 audit(1719478883.980:325): avc:  denied  { bind } for  pid=1343 comm="syz.1.335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   52.768268][ T1365] netlink: 4 bytes leftover after parsing attributes in process `syz.4.345'.
[   52.981803][  T102] blk_update_request: I/O error, dev loop3, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 0
[   53.029941][ T1365] netlink: 4 bytes leftover after parsing attributes in process `syz.4.345'.
[   53.171033][ T1381] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491
[   53.273594][ T1388] mmap: syz.2.354 (1388): VmData 45850624 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data.
[   53.502434][ T1389] bridge0: port 1(bridge_slave_0) entered blocking state
[   53.509338][ T1389] bridge0: port 1(bridge_slave_0) entered disabled state
[   53.516959][ T1389] device bridge_slave_0 entered promiscuous mode
[   53.525149][ T1389] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.650072][ T1389] bridge0: port 2(bridge_slave_1) entered disabled state
[   53.662957][ T1389] device bridge_slave_1 entered promiscuous mode
[   53.871142][ T1409] netlink: 4 bytes leftover after parsing attributes in process `syz.1.360'.
[   53.979523][ T1389] bridge0: port 2(bridge_slave_1) entered blocking state
[   53.986402][ T1389] bridge0: port 2(bridge_slave_1) entered forwarding state
[   53.993556][ T1389] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.000434][ T1389] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.028509][ T1406] F2FS-fs (loop2): Found nat_bits in checkpoint
[   54.066362][  T360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   54.074759][  T360] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.082236][  T360] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.094723][ T1406] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2
[   54.101590][  T376] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   54.109969][  T376] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.116801][  T376] bridge0: port 1(bridge_slave_0) entered forwarding state
[   54.124731][ T1406] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   54.124745][  T376] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   54.147109][  T376] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.154071][  T376] bridge0: port 2(bridge_slave_1) entered forwarding state
[   54.256068][  T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[   54.268902][  T376] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   54.276901][  T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[   54.285720][  T376] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   54.555492][ T1425] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491
[   54.558948][  T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[   54.572532][  T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   54.581345][  T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[   54.589766][  T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   54.611496][  T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[   54.620491][  T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   54.642236][  T442] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   54.650934][  T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   54.660743][  T442] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   54.669722][  T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   54.733829][    T9] device bridge_slave_1 left promiscuous mode
[   54.740789][    T9] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.748170][    T9] device bridge_slave_0 left promiscuous mode
[   54.778521][    T9] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.811823][  T965] attempt to access beyond end of device
[   54.811823][  T965] loop2: rw=2049, want=45104, limit=40427
[   54.819579][   T23] audit: type=1400 audit(1719478886.260:326): avc:  denied  { mount } for  pid=1440 comm="syz.0.370" name="/" dev="ramfs" ino=21026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[   54.883860][   T23] audit: type=1400 audit(1719478886.280:327): avc:  denied  { shutdown } for  pid=1442 comm="syz.4.372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   55.135543][  T125] blk_update_request: I/O error, dev loop3, sector 0 op 0x1:(WRITE) flags 0x800 phys_seg 0 prio class 0
[   55.152679][ T1448] overlayfs: missing 'lowerdir'
[   55.252787][   T23] audit: type=1400 audit(1719478886.280:328): avc:  denied  { write } for  pid=1442 comm="syz.4.372" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   56.137276][   T23] audit: type=1400 audit(1719478887.580:329): avc:  denied  { unmount } for  pid=1267 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[   56.316382][   T23] audit: type=1400 audit(1719478887.760:330): avc:  denied  { read write } for  pid=1469 comm="syz.0.382" name="uhid" dev="devtmpfs" ino=9310 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[   56.342950][   T13] hid-generic 0000:0000:0000.0004: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[   56.441815][   T23] audit: type=1400 audit(1719478887.760:331): avc:  denied  { open } for  pid=1469 comm="syz.0.382" path="/dev/uhid" dev="devtmpfs" ino=9310 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[   56.481323][   T23] audit: type=1400 audit(1719478887.920:332): avc:  denied  { create } for  pid=1478 comm="syz.4.386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   56.526248][ T1481] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491
[   56.537855][ T1474] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue
[   56.546784][ T1474] ext4 filesystem being mounted at /root/syzkaller.lZeWD0/14/file1 supports timestamps until 2038 (0x7fffffff)
[   56.651135][   T23] audit: type=1400 audit(1719478888.100:333): avc:  denied  { create } for  pid=1491 comm="syz.2.390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   56.655309][ T1492] __nla_validate_parse: 1 callbacks suppressed
[   56.655319][ T1492] netlink: 12 bytes leftover after parsing attributes in process `syz.2.390'.
[   56.701856][   T23] audit: type=1326 audit(1719478888.150:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1491 comm="syz.2.390" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb297531b29 code=0x0
[   56.778235][ T1472] F2FS-fs (loop1): Found nat_bits in checkpoint
[   56.811860][ T1472] F2FS-fs (loop1): Cannot turn on quotas: -2 on 2
[   56.818916][ T1472] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   56.848408][   T13] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   57.268455][  T914] attempt to access beyond end of device
[   57.268455][  T914] loop1: rw=2049, want=45104, limit=40427
[   57.308384][   T13] usb 1-1: Using ep0 maxpacket: 8
[   57.391518][  T442] hid-generic 0000:0000:0000.0005: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[   57.428498][   T13] usb 1-1: config 0 has an invalid interface number: 171 but max is 0
[   57.436608][   T13] usb 1-1: config 0 has no interface number 0
[   57.442901][   T13] usb 1-1: too many endpoints for config 0 interface 171 altsetting 190: 149, using maximum allowed: 30
[   57.460417][   T13] usb 1-1: config 0 interface 171 altsetting 190 has 0 endpoint descriptors, different from the interface descriptor's value: 149
[   57.477339][   T13] usb 1-1: config 0 interface 171 has no altsetting 0
[   57.484555][   T13] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[   57.505790][   T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   57.514924][   T13] usb 1-1: config 0 descriptor??
[   57.601969][ T1512] FAT-fs (loop2): Directory bread(block 64) failed
[   57.608328][ T1512] FAT-fs (loop2): Directory bread(block 65) failed
[   57.615309][ T1512] FAT-fs (loop2): Directory bread(block 66) failed
[   57.621869][ T1512] FAT-fs (loop2): Directory bread(block 67) failed
[   57.628235][ T1512] FAT-fs (loop2): Directory bread(block 68) failed
[   57.635561][ T1512] FAT-fs (loop2): Directory bread(block 69) failed
[   57.642151][ T1512] FAT-fs (loop2): Directory bread(block 70) failed
[   57.648844][ T1512] FAT-fs (loop2): Directory bread(block 71) failed
[   57.658855][ T1512] FAT-fs (loop2): Directory bread(block 72) failed
[   57.667922][ T1512] FAT-fs (loop2): Directory bread(block 73) failed
[   57.711019][ T1523] netlink: 12 bytes leftover after parsing attributes in process `syz.1.400'.
[   57.731141][   T23] audit: type=1400 audit(1719478889.180:335): avc:  denied  { ioctl } for  pid=1522 comm="syz.1.400" path="socket:[21836]" dev="sockfs" ino=21836 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   57.784504][   T23] audit: type=1400 audit(1719478889.230:336): avc:  denied  { read } for  pid=1522 comm="syz.1.400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   57.828406][   T23] audit: type=1400 audit(1719478889.230:337): avc:  denied  { bind } for  pid=1522 comm="syz.1.400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   57.878475][   T13] usb 1-1: string descriptor 0 read error: -71
[   57.898494][   T13] asix 1-1:0.171 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[   57.908814][   T13] asix: probe of 1-1:0.171 failed with error -71
[   57.916447][   T13] usb 1-1: USB disconnect, device number 3
[   57.967271][ T1519] F2FS-fs (loop4): Found nat_bits in checkpoint
[   58.022643][ T1519] F2FS-fs (loop4): Cannot turn on quotas: -2 on 2
[   58.029482][ T1519] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[   58.105946][ T1389] attempt to access beyond end of device
[   58.105946][ T1389] loop4: rw=2049, want=45104, limit=40427
[   58.119681][ T1527] F2FS-fs (loop1): Found nat_bits in checkpoint
[   58.167033][ T1527] F2FS-fs (loop1): Cannot turn on quotas: -2 on 2
[   58.174001][ T1527] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   58.658791][  T124] hid-generic 0000:0000:0000.0006: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[   58.730289][  T914] attempt to access beyond end of device
[   58.730289][  T914] loop1: rw=2049, want=45104, limit=40427
[   58.767119][   T23] audit: type=1400 audit(1719478890.210:338): avc:  denied  { write } for  pid=1558 comm="syz.2.412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   58.767734][ T1559] tipc: Started in network mode
[   58.792437][ T1559] tipc: Own node identity fec0ffffffffffff0000000000000001, cluster identity 4711
[   58.801912][ T1559] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[   58.808797][   T23] audit: type=1400 audit(1719478890.210:339): avc:  denied  { read } for  pid=1558 comm="syz.2.412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   58.922520][ T1561] overlayfs: missing 'lowerdir'
[   59.136909][ T1565] netlink: 12 bytes leftover after parsing attributes in process `syz.4.408'.
[   59.147280][   T23] audit: type=1326 audit(1719478890.590:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1564 comm="syz.4.408" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f28dd179b29 code=0x0
[   59.808424][  T124] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   59.972610][  T388] hid-generic 0000:0000:0000.0007: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[   60.048602][  T124] usb 2-1: Using ep0 maxpacket: 16
[   60.166004][ T1589] F2FS-fs (loop4): Found nat_bits in checkpoint
[   60.178480][  T124] usb 2-1: config index 0 descriptor too short (expected 65138, got 92)
[   60.186763][  T124] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   60.196660][  T124] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[   60.211403][ T1597] FAT-fs (loop2): Directory bread(block 64) failed
[   60.217803][ T1597] FAT-fs (loop2): Directory bread(block 65) failed
[   60.224158][  T124] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   60.226398][ T1589] F2FS-fs (loop4): Cannot turn on quotas: -2 on 2
[   60.234877][ T1597] FAT-fs (loop2): Directory bread(block 66) failed
[   60.241984][ T1589] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[   60.247498][ T1597] FAT-fs (loop2): Directory bread(block 67) failed
[   60.261277][ T1597] FAT-fs (loop2): Directory bread(block 68) failed
[   60.267605][ T1597] FAT-fs (loop2): Directory bread(block 69) failed
[   60.274057][ T1597] FAT-fs (loop2): Directory bread(block 70) failed
[   60.280581][ T1597] FAT-fs (loop2): Directory bread(block 71) failed
[   60.286997][ T1597] FAT-fs (loop2): Directory bread(block 72) failed
[   60.293325][ T1597] FAT-fs (loop2): Directory bread(block 73) failed
[   60.449072][  T124] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   60.458587][  T124] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   60.466647][  T124] usb 2-1: Product: syz
[   60.471335][  T124] usb 2-1: Manufacturer: syz
[   60.475905][  T124] usb 2-1: SerialNumber: syz
[   60.699200][  T124] cdc_ncm 2-1:1.0: bind() failure
[   60.877354][ T1614] overlayfs: missing 'lowerdir'
[   60.976190][  T376] usb 2-1: USB disconnect, device number 3
[   61.072050][ T1389] attempt to access beyond end of device
[   61.072050][ T1389] loop4: rw=2049, want=45104, limit=40427
[   61.154013][ T1620] netlink: 12 bytes leftover after parsing attributes in process `syz.0.431'.
[   61.537604][   T23] kauditd_printk_skb: 4 callbacks suppressed
[   61.537618][   T23] audit: type=1400 audit(1719478892.980:345): avc:  denied  { map } for  pid=1630 comm="syz.4.434" path="socket:[21454]" dev="sockfs" ino=21454 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   61.604119][   T23] audit: type=1400 audit(1719478893.010:346): avc:  denied  { read } for  pid=1630 comm="syz.4.434" path="socket:[21454]" dev="sockfs" ino=21454 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[   61.689652][   T23] audit: type=1400 audit(1719478893.140:347): avc:  denied  { wake_alarm } for  pid=1639 comm="syz.4.438" capability=35  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   61.789302][ T1642] EXT4-fs (loop4): mounted filesystem without journal. Opts: nombcache,abort,dioread_lock,norecovery,discard,lazytime,noload,usrquota,noauto_da_alloc,,errors=continue
[   61.834850][   T23] audit: type=1400 audit(1719478893.280:348): avc:  denied  { create } for  pid=1641 comm="syz.4.439" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[   61.876238][   T23] audit: type=1400 audit(1719478893.310:349): avc:  denied  { write } for  pid=1641 comm="syz.4.439" name="bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[   61.898240][   T23] audit: type=1400 audit(1719478893.310:350): avc:  denied  { add_name } for  pid=1641 comm="syz.4.439" name="memory.events" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1
[   61.942816][ T1652] xt_TCPMSS: Only works on TCP SYN packets
[   61.997924][ T1649] FAT-fs (loop1): Unrecognized mount option ")ocharset=cp860" or missing value
[   62.092789][  T430] syz-executor (430) used greatest stack depth: 18808 bytes left
[   62.170690][ T1649] erofs: (device loop1): mounted with opts: , root inode @ nid 36.
[   62.197702][ T1659] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.205177][ T1659] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.212998][ T1659] device bridge_slave_0 entered promiscuous mode
[   62.236904][ T1659] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.250057][ T1659] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.257706][ T1659] device bridge_slave_1 entered promiscuous mode
[   62.266556][ T1637] F2FS-fs (loop2): Found nat_bits in checkpoint
[   62.360865][ T1637] F2FS-fs (loop2): Cannot turn on quotas: -2 on 2
[   62.367692][ T1637] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   62.433733][  T965] attempt to access beyond end of device
[   62.433733][  T965] loop2: rw=2049, want=45104, limit=40427
[   62.454702][ T1659] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.461576][ T1659] bridge0: port 2(bridge_slave_1) entered forwarding state
[   62.468733][ T1659] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.484974][ T1659] bridge0: port 1(bridge_slave_0) entered forwarding state
[   62.508393][  T376] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   62.526044][  T360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   62.543991][ T1677] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop1 ino=46
[   62.552846][ T1677] SELinux: inode_doinit_use_xattr:  getxattr returned 117 for dev=loop1 ino=46
[   62.562117][ T1677] erofs: (device loop1): erofs_fill_dentries: bogus dirent @ nid 36
[   62.588679][  T360] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.595990][  T360] bridge0: port 2(bridge_slave_1) entered disabled state
[   62.655662][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   62.664196][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.671173][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   62.698491][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   62.748983][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   62.755847][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   62.798600][  T376] usb 1-1: Using ep0 maxpacket: 16
[   62.859164][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   62.887145][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   62.930316][  T376] usb 1-1: config index 0 descriptor too short (expected 65138, got 92)
[   62.941724][  T376] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   62.955410][  T376] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[   62.964452][  T376] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   62.973972][ T1678] bridge0: port 1(bridge_slave_0) entered blocking state
[   62.983196][ T1678] bridge0: port 1(bridge_slave_0) entered disabled state
[   62.991040][ T1678] device bridge_slave_0 entered promiscuous mode
[   63.007520][  T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   63.016059][  T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   63.033837][ T1678] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.041349][ T1678] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.049040][ T1678] device bridge_slave_1 entered promiscuous mode
[   63.056449][   T74] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   63.067764][    T7] device bridge_slave_1 left promiscuous mode
[   63.073848][    T7] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.081557][    T7] device bridge_slave_0 left promiscuous mode
[   63.087495][    T7] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.129186][  T376] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   63.138064][  T376] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   63.150567][  T376] usb 1-1: Product: syz
[   63.154538][  T376] usb 1-1: Manufacturer: syz
[   63.159004][  T376] usb 1-1: SerialNumber: syz
[   63.187471][  T124] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[   63.200599][  T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   63.219187][  T376] cdc_ncm 1-1:1.0: bind() failure
[   63.236358][  T124] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[   63.249215][  T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   63.427559][  T442] usb 1-1: USB disconnect, device number 4
[   63.483365][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[   63.495188][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[   63.539131][  T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[   63.547406][  T376] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[   63.588690][  T376] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.595542][  T376] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.628472][  T376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[   63.636945][  T376] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[   63.688766][  T376] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.695618][  T376] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.759483][  T376] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[   63.789072][  T376] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[   63.798766][  T376] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[   63.831231][   T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[   63.840153][    T7] tipc: Left network mode
[   63.849932][  T442] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[   63.877436][ T1704] F2FS-fs (loop3): Found nat_bits in checkpoint
[   63.889604][  T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[   63.909426][  T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[   63.928247][  T124] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[   63.995044][ T1704] F2FS-fs (loop3): Cannot turn on quotas: -2 on 2
[   64.017472][ T1704] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   64.155092][ T1718] overlayfs: missing 'lowerdir'
[   64.446687][ T1659] attempt to access beyond end of device
[   64.446687][ T1659] loop3: rw=2049, want=45104, limit=40427
[   64.894399][   T23] audit: type=1400 audit(1719478896.330:351): avc:  denied  { create } for  pid=1728 comm="syz.2.462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   64.913837][   T23] audit: type=1400 audit(1719478896.330:352): avc:  denied  { read } for  pid=1728 comm="syz.2.462" path="socket:[22976]" dev="sockfs" ino=22976 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   64.963190][ T1732] xt_TCPMSS: Only works on TCP SYN packets
[   65.318819][    T7] device bridge_slave_1 left promiscuous mode
[   65.326277][    T7] bridge0: port 2(bridge_slave_1) entered disabled state
[   65.363223][   T23] audit: type=1400 audit(1719478896.810:353): avc:  denied  { getopt } for  pid=1743 comm="syz.2.467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1
[   65.461242][ T1748] EXT4-fs (loop2): Ignoring removed orlov option
[   65.479369][ T1748] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option
[   65.523892][ T1748] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue
[   65.596687][   T23] audit: type=1400 audit(1719478897.040:354): avc:  denied  { setattr } for  pid=1747 comm="syz.2.469" name="file0" dev="loop2" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   66.122766][ T1765] xt_TCPMSS: Only works on TCP SYN packets
[   67.318557][ T1795] netlink: 16 bytes leftover after parsing attributes in process `syz.0.484'.
[   67.320117][ T1793] overlayfs: missing 'lowerdir'
[   67.550800][ T1798] EXT4-fs (loop4): Ignoring removed orlov option
[   67.564679][ T1755] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[   67.572956][ T1798] EXT4-fs (loop4): Ignoring removed nomblk_io_submit option
[   67.580933][ T1755] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[   67.591100][ T1755] F2FS-fs (loop3): invalid crc value
[   67.597713][ T1755] F2FS-fs (loop3): Found nat_bits in checkpoint
[   67.605402][ T1798] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,errors=continue,noauto_da_alloc,nomblk_io_submit,,errors=continue
[   67.643960][ T1755] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[   67.645543][   T23] audit: type=1400 audit(1719478899.090:355): avc:  denied  { map } for  pid=1797 comm="syz.4.486" path="/root/syzkaller.kCbYvh/35/file1/file0/bus" dev="devtmpfs" ino=9215 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[   67.650851][ T1755] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[   67.696975][ T1812] EXT4-fs error (device loop4): get_max_inline_xattr_value_size:68: inode #12: comm syz.4.486: corrupt xattr in inline inode
[   67.711090][ T1812] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2221: inode #12: comm syz.4.486: corrupted in-inode xattr
[   67.724096][ T1755] attempt to access beyond end of device
[   67.724096][ T1755] loop3: rw=0, want=49160, limit=40427
[   67.736869][   T23] audit: type=1400 audit(1719478899.190:356): avc:  denied  { rmdir } for  pid=1389 comm="syz-executor" name="lost+found" dev="loop4" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   67.759586][   T23] audit: type=1400 audit(1719478899.190:357): avc:  denied  { unlink } for  pid=1389 comm="syz-executor" name="file0" dev="loop4" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[   67.759898][ T1389] ==================================================================
[   67.782223][  T376] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   67.789711][ T1389] BUG: KASAN: use-after-free in ext4_xattr_delete_inode+0xc1f/0xc30
[   67.789730][ T1389] Read of size 4 at addr ffff8881e6eec000 by task syz-executor/1389
[   67.803181][   T23] audit: type=1400 audit(1719478899.190:358): avc:  denied  { unlink } for  pid=1389 comm="syz-executor" name="file1" dev="loop4" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1
[   67.804773][ T1389] 
[   67.812967][   T23] audit: type=1400 audit(1719478899.190:359): avc:  denied  { unmount } for  pid=1389 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[   67.835259][ T1389] CPU: 1 PID: 1389 Comm: syz-executor Not tainted 5.4.274-syzkaller-00002-g6f97bd951d82 #0
[   67.835265][ T1389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024
[   67.835268][ T1389] Call Trace:
[   67.835289][ T1389]  dump_stack+0x1d8/0x241
[   67.835303][ T1389]  ? nf_ct_l4proto_log_invalid+0x258/0x258
[   67.835313][ T1389]  ? printk+0xd1/0x111
[   67.835332][ T1389]  ? ext4_xattr_delete_inode+0xc1f/0xc30
[   67.837722][   T23] audit: type=1400 audit(1719478899.210:360): avc:  denied  { unlink } for  pid=1389 comm="syz-executor" name="bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[   67.857158][ T1389]  print_address_description+0x8c/0x600
[   67.857175][ T1389]  ? ext4_xattr_delete_inode+0xc1f/0xc30
[   67.857184][ T1389]  __kasan_report+0xf3/0x120
[   67.857194][ T1389]  ? ext4_xattr_delete_inode+0xc1f/0xc30
[   67.857204][ T1389]  kasan_report+0x30/0x60
[   67.857215][ T1389]  ext4_xattr_delete_inode+0xc1f/0xc30
[   67.857229][ T1389]  ? check_preemption_disabled+0x9f/0x320
[   67.857241][ T1389]  ? ext4_expand_extra_isize_ea+0x1bb0/0x1bb0
[   67.857255][ T1389]  ? __ext4_journal_start_sb+0x295/0x460
[   67.857267][ T1389]  ext4_evict_inode+0x1378/0x1ac0
[   67.857281][ T1389]  ? ext4_truncate_restart_trans+0xe0/0xe0
[   67.857293][ T1389]  ? wb_io_lists_depopulated+0x85/0x170
[   67.857302][ T1389]  ? ext4_truncate_restart_trans+0xe0/0xe0
[   67.857313][ T1389]  evict+0x29b/0x6a0
[   67.857325][ T1389]  vfs_rmdir+0x24b/0x3c0
[   67.857336][ T1389]  do_rmdir+0x2c1/0x580
[   67.857348][ T1389]  ? d_delete_notify+0xc0/0xc0
[   67.857360][ T1389]  ? _raw_spin_unlock_irq+0x4a/0x60
[   67.857373][ T1389]  do_syscall_64+0xca/0x1c0
[   67.857391][ T1389]  entry_SYSCALL_64_after_hwframe+0x5c/0xc1
[   67.875822][ T1755] tmpfs: Bad value for 'huge'
[   67.877155][ T1389] RIP: 0033:0x7f28dd1791a7
[   68.034879][ T1389] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   68.054480][ T1389] RSP: 002b:00007fff599dad58 EFLAGS: 00000207 ORIG_RAX: 0000000000000107
[   68.062724][ T1389] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007f28dd1791a7
[   68.070797][ T1389] RDX: 0000000000000200 RSI: 00007fff599dbf00 RDI: 00000000ffffff9c
[   68.078608][ T1389] RBP: 00007f28dd1e764a R08: 0000000000000000 R09: 0000000000000000
[   68.086415][ T1389] R10: 0000000000000100 R11: 0000000000000207 R12: 00007fff599dbf00
[   68.094429][ T1389] R13: 00007f28dd1e764a R14: 0000000000010740 R15: 00007fff599de0e0
[   68.102277][ T1389] 
[   68.104400][ T1389] Allocated by task 414:
[   68.108511][ T1389]  __kasan_kmalloc+0x171/0x210
[   68.113083][ T1389]  kmem_cache_alloc+0xd9/0x250
[   68.117686][ T1389]  __sigqueue_alloc+0x19b/0x2e0
[   68.122374][ T1389]  __send_signal+0x1ee/0xbe0
[   68.126799][ T1389]  do_send_sig_info+0xe0/0x130
[   68.131402][ T1389]  bpf_send_signal+0x2a8/0x3b0
[   68.135999][ T1389]  bpf_prog_a1d19f868c11d610+0x11f/0x1000
[   68.141558][ T1389]  bpf_trace_run2+0x101/0x2d0
[   68.146763][ T1389]  syscall_slow_exit_work+0x370/0x400
[   68.152066][ T1389]  do_syscall_64+0x19d/0x1c0
[   68.156516][ T1389]  entry_SYSCALL_64_after_hwframe+0x5c/0xc1
[   68.162204][ T1389] 
[   68.164374][ T1389] Freed by task 414:
[   68.168113][ T1389]  __kasan_slab_free+0x1b5/0x270
[   68.172923][ T1389]  kmem_cache_free+0x10b/0x2c0
[   68.177574][ T1389]  __dequeue_signal+0x54f/0x630
[   68.182292][ T1389]  dequeue_signal+0x10c/0x520
[   68.186781][ T1389]  signalfd_read+0x3a9/0x1330
[   68.191284][ T1389]  __vfs_read+0x103/0x730
[   68.195449][ T1389]  vfs_read+0x148/0x360
[   68.199442][ T1389]  ksys_read+0x199/0x2c0
[   68.203521][ T1389]  do_syscall_64+0xca/0x1c0
[   68.207970][ T1389]  entry_SYSCALL_64_after_hwframe+0x5c/0xc1
[   68.213681][ T1389] 
[   68.215856][ T1389] The buggy address belongs to the object at ffff8881e6eec000
[   68.215856][ T1389]  which belongs to the cache sigqueue of size 80
[   68.229402][ T1389] The buggy address is located 0 bytes inside of
[   68.229402][ T1389]  80-byte region [ffff8881e6eec000, ffff8881e6eec050)
[   68.242628][ T1389] The buggy address belongs to the page:
[   68.248088][ T1389] page:ffffea00079bbb00 refcount:1 mapcount:0 mapping:ffff8881f5d07900 index:0x0
[   68.257986][ T1389] flags: 0x8000000000000200(slab)
[   68.262952][ T1389] raw: 8000000000000200 dead000000000100 dead000000000122 ffff8881f5d07900
[   68.271502][ T1389] raw: 0000000000000000 0000000000240024 00000001ffffffff 0000000000000000
[   68.279901][ T1389] page dumped because: kasan: bad access detected
[   68.286468][ T1389] page_owner tracks the page as allocated
[   68.292102][ T1389] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_HARDWALL)
[   68.305297][ T1389]  prep_new_page+0x18f/0x370
[   68.309795][ T1389]  get_page_from_freelist+0x2d13/0x2d90
[   68.315190][ T1389]  __alloc_pages_nodemask+0x393/0x840
[   68.320394][ T1389]  alloc_slab_page+0x39/0x3c0
[   68.325065][ T1389]  new_slab+0x97/0x440
[   68.328980][ T1389]  ___slab_alloc+0x2fe/0x490
[   68.333408][ T1389]  __slab_alloc+0x62/0xa0
[   68.337661][ T1389]  kmem_cache_alloc+0x109/0x250
[   68.342351][ T1389]  __sigqueue_alloc+0x19b/0x2e0
[   68.347034][ T1389]  __send_signal+0x1ee/0xbe0
[   68.351461][ T1389]  do_send_sig_info+0xe0/0x130
[   68.356061][ T1389]  bpf_send_signal+0x2a8/0x3b0
[   68.360674][ T1389]  bpf_prog_a1d19f868c11d610+0x11f/0x1000
[   68.366221][ T1389]  bpf_trace_run2+0x101/0x2d0
[   68.370731][ T1389]  syscall_slow_exit_work+0x370/0x400
[   68.376549][ T1389]  do_syscall_64+0x19d/0x1c0
[   68.380975][ T1389] page last free stack trace:
[   68.385501][ T1389]  free_unref_page_prepare+0x297/0x380
[   68.390784][ T1389]  __free_pages+0xaf/0x140
[   68.395035][ T1389]  __free_slab+0x221/0x2e0
[   68.399288][ T1389]  __slab_free+0x34b/0x360
[   68.403550][ T1389]  qlist_free_all+0x43/0xb0
[   68.407879][ T1389]  quarantine_reduce+0x1d9/0x210
[   68.412652][ T1389]  __kasan_kmalloc+0x41/0x210
[   68.417177][ T1389]  kmem_cache_alloc+0xd9/0x250
[   68.421874][ T1389]  getname_flags+0xb8/0x4e0
[   68.426193][ T1389]  do_sys_open+0x357/0x810
[   68.430449][ T1389]  do_syscall_64+0xca/0x1c0
[   68.434792][ T1389]  entry_SYSCALL_64_after_hwframe+0x5c/0xc1
[   68.440511][ T1389] 
[   68.442686][ T1389] Memory state around the buggy address:
[   68.448157][ T1389]  ffff8881e6eebf00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   68.456155][ T1389]  ffff8881e6eebf80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[   68.464137][ T1389] >ffff8881e6eec000: fb fb fb fb fb fb fb fb fb fb fc fc fc fc fb fb
[   68.472116][ T1389]                    ^
[   68.476022][ T1389]  ffff8881e6eec080: fb fb fb fb fb fb fb fb fc fc fc fc fb fb fb fb
[   68.484102][ T1389]  ffff8881e6eec100: fb fb fb fb fb fb fc fc fc fc fb fb fb fb fb fb
[   68.491989][ T1389] ==================================================================
[   68.499889][ T1389] Disabling lock debugging due to kernel taint
[   68.565966][ T1659] attempt to access beyond end of device
[   68.565966][ T1659] loop3: rw=2051, want=77824, limit=40427
[   68.578129][ T1659] attempt to access beyond end of device
[   68.578129][ T1659] loop3: rw=2051, want=86016, limit=40427
[   68.589531][  T378] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   68.590082][ T1659] attempt to access beyond end of device
[   68.590082][ T1659] loop3: rw=2051, want=53248, limit=40427
[   68.608976][ T1659] F2FS-fs (loop3): Issue discard(7168, 7168, 2560) failed, ret: -5
[   68.608997][ T1659] F2FS-fs (loop3): Issue discard(10240, 10240, 512) failed, ret: -5
[   68.616982][ T1659] F2FS-fs (loop3): Issue discard(6145, 6145, 511) failed, ret: -5
[   68.658456][  T376] usb 1-1: Using ep0 maxpacket: 32
[   68.800819][  T376] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   68.811911][  T376] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   68.821761][  T376] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[   68.828517][  T378] usb 3-1: Using ep0 maxpacket: 16
[   68.835965][  T376] usb 1-1: New USB device found, idVendor=1b96, idProduct=000a, bcdDevice= 0.00
[   68.850060][  T376] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   68.861967][  T376] usb 1-1: config 0 descriptor??
[   68.958551][  T378] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   68.969299][  T378] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   68.978910][  T378] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[   68.988444][  T378] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
[   68.997943][  T378] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[   69.007533][  T378] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0
[   69.168513][  T378] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   69.177383][  T378] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   69.185201][  T378] usb 3-1: Product: syz
[   69.189346][  T378] usb 3-1: Manufacturer: syz
[   69.193895][  T378] usb 3-1: SerialNumber: syz
[   69.349886][  T376] ntrig 0003:1B96:000A.0008: unknown main item tag 0x0
[   69.356583][  T376] ntrig 0003:1B96:000A.0008: unknown main item tag 0x0
[   69.363527][  T376] ntrig 0003:1B96:000A.0008: unknown main item tag 0x0
[   69.370446][  T376] ntrig 0003:1B96:000A.0008: unknown main item tag 0x0
[   69.377200][  T376] ntrig 0003:1B96:000A.0008: unknown main item tag 0x0
[   69.385193][  T376] ntrig 0003:1B96:000A.0008: hidraw0: USB HID v0.00 Device [HID 1b96:000a] on usb-dummy_hcd.0-1/input0
[   69.468510][  T378] cdc_ncm 3-1:1.0: bind() failure
[   69.474652][  T378] cdc_ncm 3-1:1.1: bind() failure
[   69.481651][  T378] usb 3-1: USB disconnect, device number 4
[   69.618629][ T1802] ntrig 0003:1B96:000A.0008: pid 1802 passed too large report
[   69.630571][  T376] usb 1-1: USB disconnect, device number 5