last executing test programs:

2m20.168755166s ago: executing program 1 (id=1277):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0)
bpf$TOKEN_CREATE(0x24, 0x0, 0x0)

2m19.954564594s ago: executing program 1 (id=1281):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000000c00)=@raw={'raw\x00', 0x4001, 0x3, 0x248, 0x0, 0x720d, 0x148, 0x0, 0x148, 0x1b0, 0x240, 0x240, 0x1b0, 0x240, 0x7fffffe, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x4, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff, 0x0, 'veth1_macvtap\x00', 'pim6reg1\x00', {}, {0xff}, 0x1d, 0x3, 0x49}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x0, 0x0, 0x5, 0x1, 0x3], 0x2}, {0xffffffffffffffff, [0x1, 0xb2cc575b459b5b33, 0x7, 0x2, 0x2]}}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@rand_addr=0x64010900, 'pim6reg0\x00', {0x80000001}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a8)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
setsockopt$ALG_SET_AEAD_AUTHSIZE(r4, 0x117, 0x5, 0x0, 0x100000000008)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, 0x0, 0x0)
syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f0000000140)={[{@norecovery}]}, 0xee, 0x474, &(0x7f00000004c0)="$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")
r5 = creat(&(0x7f0000000100)='./bus\x00', 0x0)
write$cgroup_type(r5, &(0x7f0000000200), 0x175d9003)
syz_emit_ethernet(0x7a, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6092c01f00442f00fe8000000800000d00000000000000bb0000000000000000000000000000000124200829a6275f1c06b04526900b060000000000000057000086dd080088be00000000100000000100000000000000080022eb00000000200000000200000000000000000000000800655800000000"], 0x0)
r6 = syz_usb_connect(0x0, 0x24, 0x0, 0x0)
syz_usb_control_io(r6, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="000001000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0)
open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x20)
ioctl$FS_IOC_ENABLE_VERITY(r7, 0x8004587d, &(0x7f0000000140)={0x2, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0})

2m16.471413427s ago: executing program 1 (id=1289):
bind$alg(0xffffffffffffffff, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d4", 0x5)
r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x20040081}, 0x0)
recvmsg$qrtr(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000180)=""/227, 0xe3}], 0x1}, 0x38, 0x0)

2m16.115705484s ago: executing program 1 (id=1292):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000980)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@oldalloc}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}, {@bh}, {@init_itable}]}, 0xff, 0x551, &(0x7f0000000cc0)="$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")
r0 = socket$inet_udp(0x2, 0x2, 0x0)
fcntl$F_SET_RW_HINT(r0, 0xf, &(0x7f0000000280)=0x8556d616a06ff02b)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f00000008c0)={[{@bsdgroups}, {@nodiscard}, {@data_writeback}, {@grpjquota}, {@minixdf}, {@orlov}, {@abort}, {@delalloc}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}]}, 0x64, 0x50a, &(0x7f0000000200)="$eJzs3VFrHFsdAPD/bHZr06Y3ueqDXvB6tZW0aHeTxrbBh1pB9Kmg1vcak00I2WRDdtM2oWiKH0AQUcEnffFF8AMIUvDFRxEK+qyoKKKtPvigncvuTtI03U227TabZn8/mMw5Z2b2f86GmZ0zc5gJYGC9FxHXI+JJmqYXImI0K89lU2y1psZ6jx/dm21MSaTpzX8mkWRl25+VZPPT2WYnI+JrX474ZvJ83NrG5tJMpVJey/Kl+vJqqbaxeXFxeWahvFBemZqavDJ9dfry9ERP2nkmIq598a8/+O7PvnTtV5+586dbfz//rUa1RrLlu9vxgvL7LWw1vdD8LnZvsPaSwY6ifLOFmeF2aww9V3L/NdcJAID2Guf4H4yIT0bEhRiNof1PZwEAAIA3UPr5kfhfEpG2d6JDOQAAAPAGyTXHwCa5YjYWYCRyuWKxNYb3w3EqV6nW6p+er66vzLXGyo5FITe/WClPZGOFx6KQNPKTzfTT/KU9+amIeDsivj863MwXZ6uVuX5f/AAAAIABcXpP//8/o63+PwAAAHDMjPW7AgAAAMBrp/8PAAAAx5/+PwAAABxrX7lxozGl2++/nru9sb5UvX1xrlxbKi6vzxZnq2urxYVqdaH5zL7lgz6vUq2ufjZW1u+W6uVavVTb2Ly1XF1fqd9afOYV2AAAAMAhevvjD/6QRMTW54abU8OJ7jbtcjXgqMrvpJJs3ma3/uNbrflfDqlSwKEY6ncFgL7J97sCQN8U+l0BoO+SA5Z3HLzz22z+id7WBwAA6L3xj3a+/5/bd8ut/RcDR56dGAaX+/8wuJr3/7sdyetkAY6VgjMAGHivfP//QGn6QhUCAAB6bqQ5JblidnlvJHK5YjHiTPO1AIVkfrFSnoiItyLi96OFDzTyk80tkwP7DAAAAAAAAAAAAAAAAAAAAAAAAABAS5omkQIAAADHWkTub8mvW8/yHx89N7L3+sCJ5L+jkb0i9M6Pb/7w7ky9vjbZKP/XTnn9R1n5pX5cwQAAAICB8EIv8N/up2/34wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACglx4/uje7PR1m3H98ISLG2sXPx8nm/GQUIuLUv5PI79ouiYihHsQfbvz5SLv4SaNaOyHbxR/uQfyt+/vGj7HsW2gX/3QP4sMge9A4/lxvt//l4r3mvP3+l494Jv+yOh//Yuf4N9Rh/z/TZYx3Hv6i1DH+/Yh38u2PP9vxkw7xz3YZ/xtf39zstCz9ScR429+f5JlYpfryaqm2sXlxcXlmobxQXpmamrwyfXX68vREaX6xUs7+to3xvY/98sl+7T/VIf7YAe0/12X7///w7qMPtZKFdvHPn20T/zc/zdZ4Pn4u++37VJZuLB/fTm+10ru9+/Pfvbtf++c6tP+g///5Ltt/4avf+XOXqwIAh6C2sbk0U6mU145totFLPwLVkDiCiW/39APTNE0b+9QrfE4SR+FraSb6fWQCAAB67elJf79rAgAAAAAAAAAAAAAAAAAAAIPrMB4ntjfm1k4q6cUjtAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeuL9AAAA//+GAdlV")
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000a600ffff00000000000000001473af20547bef9d1fc5604917a242ae604111e069b6df9acf3ea023f39c89a7163b25f31fbc11"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="85000000080000004e00000000000000850000007d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r5 = socket(0x1e, 0x5, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000003c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00', 0x0, 0x201000, 0x0)
syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00')
r6 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mount$bind(&(0x7f0000000300)='./file0/../file0/../file0\x00', &(0x7f0000000340)='./file0/../file0\x00', 0x0, 0x41008, 0x0)
mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r6}})
mount(0x0, &(0x7f0000000040)='./file0/../file0/../file0\x00', &(0x7f0000000100)='devpts\x00', 0x0, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f00000011c0)={&(0x7f00000010c0)={0x1e, 0x3}, 0x10, &(0x7f0000001180)={0x0, 0x600}}, 0x0)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r4, 0x5, 0x0, 0x0, @void, @value}, 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20)
sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x0, 0x0}, 0x0)
r7 = socket$kcm(0x2, 0x200000000000001, 0x106)
setsockopt$sock_timeval(r7, 0x1, 0x43, &(0x7f0000000040)={0x0, 0x2710}, 0x10)
syz_mount_image$btrfs(&(0x7f0000000200), &(0x7f0000005600)='./file0\x00', 0x800, &(0x7f0000000040), 0x0, 0x562f, &(0x7f0000010240)="$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")
ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000000)=0x7fffffff)

2m12.511060185s ago: executing program 1 (id=1302):
bind$alg(0xffffffffffffffff, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d4", 0x5)
r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x20040081}, 0x0)
recvmsg$qrtr(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000180)=""/227, 0xe3}], 0x1}, 0x38, 0x0)

2m12.109761518s ago: executing program 1 (id=1303):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d4", 0x5)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x240488d0}, 0x14000052)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r1, 0x0, 0x0)
recvmsg$qrtr(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000180)=""/227, 0xe3}], 0x1}, 0x38, 0x0)

2m11.781552033s ago: executing program 32 (id=1303):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000540)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d4", 0x5)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$alg(r1, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x240488d0}, 0x14000052)
sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r1, 0x0, 0x0)
recvmsg$qrtr(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000180)=""/227, 0xe3}], 0x1}, 0x38, 0x0)

13.339578754s ago: executing program 2 (id=1617):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x21, 0x24, 0x24, 0x2, [@struct={0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffff}, @ptr, @restrict={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28)

13.215881336s ago: executing program 2 (id=1619):
fchdir(0xffffffffffffffff)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=<r0=>0x0)
prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0xe}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
timer_settime(0x0, 0x0, 0x0, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
r5 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2)
ioctl$VIDIOC_S_TUNER(r5, 0x4054561e, &(0x7f0000000240)={0x0, "a7efecb15a82f0a41abb088fd9e3b4daf5b5e6b8f7eb3846cbe6bbb98ea7a36b"})
sendmsg$nl_route(r4, 0x0, 0x0)
syz_open_procfs(0x0, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYRESHEX=r3, @ANYRESHEX, @ANYRESHEX=0x0])
r6 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r6, &(0x7f0000000140)={0x0, 0x63, &(0x7f0000000100)={&(0x7f0000001200)={0x20, 0x1418, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x0, 0x3e, 0x3}]}, 0x20}, 0x1, 0xf00, 0x0, 0x4884d}, 0x10)
syz_mount_image$xfs(&(0x7f00000000c0), &(0x7f0000009780)='./file0\x00', 0x0, &(0x7f00000001c0), 0x1, 0x9730, &(0x7f0000012f40)="$eJzs3QeYJHWhcP1ZYMkZRERRVFSMRAkiShAQCRIVFBAkSw5KUJKIBEVBQMk555xzzjnnnHPOfM+yu4rrget93/t+3HvPOc+zO9PVVTXV/1931cxUT/eS8yw258DA6ANDm2JgxG69a86FNt5xziv33WmvU6cYc/zJh00etsCkwy5OOmjYx5EGBgZGGraeYdPGeuykk0caGOW96f9orDHGHDTOwMB0wy7OPuzjTEM/TPT48PneHaERN3TQ3y8O2n7ov/cab8iXGPLJ0rdcdO7AwMD471t+yCLT/MsNlbbkHPPO8w+rv7sNsRo87PP3/xt16L+JHhwYmOi+Ab5/vH/eQR/BTRryNcff8aHR1/0Ivvb/uJacY975RvAf8lgcedi0mYY8xkd8DBob8X5+yyqz7jFsCN+7vw0MDNnF/dNj5X9ES84xzwIDH7yfH3hkzHHPfPe9/eZYzw0MjPX8wMBYLwwMjPXiwMBYLw0MjPXyR+1S/3fNMef0cw55vA+/PIx9+H15fLpf7Lv6S/sMDAyMNnSesd4ZerwYe4rhx4Sqqqr6790cc04/Fxz/R/+w4/9WW89xW8f/qqqq/7nNN8ec0w85jo9w/B/7w47/P7jppjWG/u5/9pmGLvXOR3sjqqqq6j/VPPPh8X/8Dzv+j7fDDQd0/K+qqvqf26ILvnf8H3uE4//EH3b8X2P+uy4fNt/w7xveft8q33v+2LDpb75v+sjvm/7G+6YPft963j//qO+b/tr7po8+MDDWY8Omv/WPyWM9N2SZf13PWK/84/k4k47yvumvvm/6qO+b/tqwbRoyfbT3TX/7ffOP/o/pYw/5b4phX/f1Dxnqqqqq/zYtOv08cw2873n2wyYPf2I/Pi/02GO3vvuj2t6qqqqqqqqq+s/3ztNnnPOPv/n+9MD7/nb173/DOuz3AoOOO++66z6yDf3v0aB//X3IFh/1Nv3fNsR59COmGBhYa4mPelPqI+h/zN+q1/+T8neXv7v83eXvLn93+bvL313+7vJ3l7+7/N3l7y5/cR9w/v/vf/8/cN9Xdhg26yyT3XX/Yv9YctKB1YZ9dutdcy602kew7R9B/1vP/w+sNmhgYJjv+EMsF5pj0cWnGhgYWOz+uyabceDv18085LpZJxz5vT/mHBiY6r3/B0/6AWse9i4L7725w8R/X8dx761/vnf3H3nQCBvxvmY794GDV13y1RlG/PilD74df39/iaVe2X/K4X/LMtIIM43+AQsPX//w2zKi87Btn2rItk+9wZrrTL3+xpt8fbU1l19lpVVWWmu66aadYfoZZ5jum7NMvfJqa6w0zdD/P2DMhr51xcj/zpiNPeKYPT3H+8dsxNs2wSkH45j967t6/NMq3lvj+bM9csXwMRvl3xyz4V9v5A8fsylWG/aFJh0YPLDce0MzaGBg0lEGD2w05MK0ow0MTDp42LyTDpn32xOONDCw4z9u6KBhLzY6dJ5BWwyZ57/Z+5bMMmxENh0+34ivsz7ihv5H71ty4ti73DXC+5b8v+r/6Pj/L14zD/r7QA1/A4Rh8wz1+ojfZ+JftneKUd47yH3Q9n7I6+K8F92/1lz18SX+q14Xh7Z37A/Z3g95Hb8P3N6ppn12z6Gr+i/b3hH2dQsMvfLf2dcNfPi+bmRafqWrJx9xXzf/B2/iPz2Oh4/RaCPM9EH7uh3nP3/zIesf+PB93QKrDXvxgH/s60YaGJh05OH7uiE7vlEHD+w45MJ0Qy6MNnjgsCEXpn/vwhgD5w258I0V1l5jxUHvvczAsPVOM2S9s084aOgD6OaDVx1tl3ffHWXYtrwy1j9v67D7xxTvP57PMeGwwRy27PD1Dpl1+Hpf22bodaMOW++r/4n1Dl+WtnfSs4deN9qw9b42wnoHf8h6hy/7L4+HqQb90xNVYX/zkb6vET1+R/+Q7f2Q1+HG+9t77lMu+8h/wetwD/qg7R3lw7f3g9435AO394krntzvv+p1w+l+dt++Q+8row+7n739n7j/Dl92xP3Y0BcCGbrbH/3f2Y9N8S/7sS1HHmmEwX5fH/R97oow/7BHxN/XtuJBr642fOwHj7De/+j73PfdlkGwHxt/hJ/nBm2+38AgGvPH1nhxw3d2/vAxHzzwzz9bDB/z4ct+2JiP9u+M+ac+fMxH/D75g8Z8qs8PvX7wCNv//jFfZLfZbx4+5qOOsN7/aMxH+/Bjx7+O+cDAYBrzHScbOm4ftj/9oDEfvuzwMR/ydWadcJSBuQcGBqYcNuaj/jtjPul/zf18TJh/6Ocr/X3SczMu/LXhYz7iGP9HYz7qf3LMN7vv7/fzKd+77nMjDYw66sBGy2+wwXrTDv1/+MXphv7P+6LnVhw6zh92LP0go+HLftjjYpR/x2j8f8to0H9kNNkoH2T0j4fWyAcv+vz/6b5olP+s0Xm8Lzpt3qHj9mHfF33QmA9flo6DE79v+RF/Dv2Q18/C2/Te+My/7fCf9/47vH7W8J93/0e+ftbw30muNuJOvv7d+v2/u/zd5e8uf3f5i/uA8/9TDD///+7YB04y7IfOwVfPfNvsH/X2fsT9rz7/P8z3n87/z37bzFcP+dFq2HUfen526Dz/Lc/PzjT0w0SPD59vxPODI27of3R+dt9dN7j6/6fzs/9HDX+s/hs/F7f/d5e/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+Yv7gPP/0wx/HsDDiy/0w2EnQgdvOu3Rm37U2/sR97/6/P8w3386/7/p0dNuOtLA36/70PP/Q+dxnP9/YMHNl/nvfP5/+GO18//1H5S/u/zd5e8uf3f5u8vfXf7u8neXv7v83eXvLn93+Yv7gPP/sw9/HsCRs839heHPB7hxu/33/Ki39yPuf+v5/97/31v7f3f5u8vfXf7u8neXv7v83eXvLn93+bvL313+7vJ3l7+4Yef/B0Z4m8SFu19gcP7/f3Yf4L9I/pjFf9H8MYv/YvljFv/F88cs/kvkj1n8f5Q/ZvH/cf6YxX/J/DGL/1L5Yxb/n+SPWfx/mj9m8V86f8ziv0z+mMV/2fwxi//P8scs/svlj1n8l88fs/j/PH/M4r9C/pjFf8X8MYv/SvljFv+V88cs/qvkj1n8V80fs/ivlj9m8f9F/pjFf/X8MYv/GvljFv8188cs/mvlj1n8184fs/ivkz9m8V83f8ziv17+mMV//fwxi/8G+WMW/1/mj1n8f5U/ZvHfMH/M4r9R/pjFf+P8MYv/JvljFv9f549Z/H+TP2bx3zR/zOK/Wf6YxX/z/DGL/xb5Yxb/LfPHLP6/zR+z+G+VP2bx/13+mMV/6/wxi//v88cs/tvkj1n8t80fs/hvlz9m8d8+f8zi/4f8MYv/H/PHLP475I9Z/P+UP2bx/3P+mMV/x/wxi/9O+WMW/7/kj1n8d84fs/jvkj9m8d81f8zi/9f8MYv/3/LHLP675Y9Z/HfPH7P475E/ZvHfM3/M4r9X/pjFf+/8MYv/PvljFv9988cs/vvlj1n8988fs/gfkD9m8T8wf8zif1D+mMX/4Pwxi/8h+WMW/0Pzxyz+h+WPWfwPzx+z+B+RP2bxPzJ/zOJ/VP6Yxf/o/DGL/zH5Yxb/Y/PHLP7H5Y9Z/I/PH7P4n5A/ZvE/MX/M4n9S/pjF/+T8MYv/KfljFv9T88cs/qflj1n8T88fs/ifkT9m8T8zf8zif1b+mMX/7Pwxi/85+WMW/3Pzxyz+5+WPWfzPzx+z+F+QP2bxvzB/zOJ/Uf6Yxf/i/DGL/yX5Yxb/S/PHLP6X5Y9Z/C/PH7P4X5E/ZvG/Mn/M4n9V/pjF/+r8MYv/NfljFv9r88cs/tflj1n8r88fs/jfkD9m8b8xf8zif1P+mMX/5vwxi/8t+WMW/1vzxyz+t+WPWfxvzx+z+N+RP2bxvzN/zOJ/V/6Yxf/u/DGL/z35Yxb/e/PHLP735Y9Z/O/PH7P4P5A/ZvF/MH/M4v9Q/pjF/+H8MYv/I/ljFv9H88cs/o/lj1n8H88fs/g/kT9m8X8yf8zi/1T+mMX/6fwxi/8z+WMW/2fzxyz+z+WPWfyfzx+z+L+QP2bxfzF/zOL/Uv6Yxf/l/DGL/yv5Yxb/V/PHLP6v5Y9Z/F/PH7P4v5E/ZvF/M3/M4v9W/pjF/+38MYv/O/ljFv9388ck/oMG8scs/oPyxyz+I+WPWfxHzh+z+I+SP2bxH5w/ZvEfNX/M4j9a/pjFf/T8MYv/GPljFv8x88cs/mPlj1n8x84fs/iPkz9m8R83f8ziP17+mMV//Pwxi/8E+WMW/wnzxyz+E+WPWfwnzh+z+H8sf8ziP0n+mMX/4/ljFv9J88cs/p/IH7P4T5Y/ZvH/ZP6Yxf9T+WMW/8nzxyz+n84fs/h/Jn/M4j9F/pjF/7P5Yxb/z+WPWfw/nz9m8Z8yf8zi/4X8MYv/F/PHLP5fyh+z+E+VP2bx/3L+mMX/K/ljFv+v5o9Z/L+WP2bx/3r+mMX/G/ljFv+p88cs/tPkj1n8p80fs/hPlz9m8Z8+f8ziP0P+mMX/m/ljFv8Z88cs/jPlj1n8Z84fs/jPkj9m8f9W/pjFf9b8MYv/t/PHLP6z5Y9Z/L+TP2bx/27+mMV/9vwxi/8c+WMW/znzxyz+c+WPWfy/lz9m8Z87f8ziP0/+mMV/3vwxi//388cs/vPlj1n8f5A/ZvGfP3/M4r9A/pjFf8H8MYv/QvljFv8f5o9Z/BfOH7P4L5I/ZvFfNH/M4r9Y/pjFf/H8MYv/EvljFv8f5Y9Z/H+cP2bxXzJ/zOK/VP6Yxf8n+WMW/5/mj1n8l84fs/gvkz9m8V82f8zi/7P8MYv/cvljFv/l88cs/j/PH7P4r5A/ZvFfMX/M4r9S/pjFf+X8MYv/KvljFv9V88cs/qvlj1n8f5E/ZvFfPX/M4r9G/pjFf838MYv/WvljFv+188cs/uvkj1n8180fs/ivlz9m8V8/f8ziv0H+mMX/l/ljFv9f5Y9Z/DfMH7P4b5Q/ZvHfOH/M4r9J/pjF/9f5Yxb/3+SPWfw3zR+z+G+WP2bx3zx/zOK/Rf6YxX/L/DGL/2/zxyz+W+WPWfx/lz9m8d86f8zi//v8MYv/NvljFv9t88cs/tvlj1n8t88fs/j/IX/M4v/H/DGL/w75Yxb/P+WPWfz/nD9m8d8xf8ziv1P+mMX/L/ljFv+d88cs/rvkj1n8d80fs/j/NX/M4v+3/DGL/275Yxb/3fPHLP575I9Z/PfMH7P475U/ZvHfO3/M4r9P/pjFf9/8MYv/fvljFv/988cs/gfkj1n8D8wfs/gflD9m8T84f8zif0j+mMX/0Pwxi/9h+WMW/8Pzxyz+R+SPWfyPzB+z+B+VP2bxPzp/zOJ/TP6Yxf/Y/DGL/3H5Yxb/4/PHLP4n5I9Z/E/MH7P4n5Q/ZvE/OX/M4n9K/pjF/9T8MYv/afljFv/T88cs/mfkj1n8z8wfs/iflT9m8T87f8zif07+mMX/3Pwxi/95+WMW//Pzxyz+F+SPWfwvzB+z+F+UP2bxvzh/zOJ/Sf6Yxf/S/DGL/2X5Yxb/y/PHLP5X5I9Z/K/MH7P4X5U/ZvG/On/M4n9N/pjF/9r8MYv/dfljFv/r88cs/jfkj1n8b8wfs/jflD9m8b85f8zif0v+mMX/1vwxi/9t+WMW/9vzxyz+d+SPWfzvzB+z+N+VP2bxvzt/zOJ/T/6Yxf/e/DGL/335Yxb/+/PHLP4P5I9Z/B/MH7P4P5Q/ZvF/OH/M4v9I/pjF/9H8MYv/Y/ljFv/H88cs/k/kj1n8n8wfs/g/lT9m8X86f8zi/0z+mMX/2fwxi/9z+WMW/+fzxyz+L+SPWfxfzB+z+L+UP2bxfzl/zOL/Sv6Yxf/V/DGL/2v5Yxb/1/PHLP5v5I9Z/N/MH7P4v5U/ZvF/O3/M4v9O/pjF/938MYn/e5/m/69Z/Aflj1n8R8ofs/iPnD9m8R8lf8ziPzh/zOI/av6YxX+0/DGL/+j5Yxb/MfLHLP5j5o9Z/MfKH7P4j50/ZvEfJ3/M4j9u/pjFf7z8MYv/+PljFv8J8scs/hPmj1n8J8ofs/hPnD9m8f9Y/pjFf5L8MYv/x/PHLP6T5o9Z/D+RP2bxnyx/zOL/yfwxi/+n8scs/pPnj1n8P50/ZvH/TP6YxX+K/DGL/2fzxyz+n8sfs/h/Pn/M4j9l/pjF/wv5Yxb/L+aPWfy/lD9m8Z8qf8zi/+X8MYv/V/LHLP5fzR+z+H8tf8zi//X8MYv/N/LHLP5T549Z/KfJH7P4T5s/ZvGfLn/M4j99/pjFf4b8MYv/N/PHLP4z5o9Z/GfKH7P4z5w/ZvGfJX/M4v+t/DGL/6z5Yxb/b+ePWfxnyx+z+H8nf8zi/938MYv/7PljFv858scs/nPmj1n858ofs/h/L3/M4j93/pjFf578MYv/vPljFv/v549Z/OfLH7P4/yB/zOI/f/6YxX+B/DGL/4L5Yxb/hfLHLP4/zB+z+C+cP2bxXyR/zOK/aP6YxX+x/DGL/+L5Yxb/JfLHLP4/yh+z+P84f8ziv2T+mMV/qfwxi/9P8scs/j/NH7P4L50/ZvFfJn/M4r9s/pjF/2f5Yxb/5fLHLP7L549Z/H+eP2bxXyF/zOK/Yv6YxX+l/DGL/8r5Yxb/VfLHLP6r5o9Z/FfLH7P4/yJ/zOK/ev6YxX+N/DGL/5r5Yxb/tfLHLP5r549Z/NfJH7P4r5s/ZvFfL3/M4r9+/pjFf4P8MYv/L/PHLP6/yh+z+G+YP2bx3yh/zOK/cf6YxX+T/DGL/6/zxyz+v8kfs/hvmj9m8d8sf8ziv3n+mMV/i/wxi/+W+WMW/9/mj1n8t8ofs/j/Ln/M4r91/pjF//f5Yxb/bfLHLP7b5o9Z/LfLH7P4b58/ZvH/Q/6Yxf+P+WMW/x3yxyz+f8ofs/j/OX/M4r9j/pjFf6f8MYv/X/LHLP47549Z/HfJH7P475o/ZvH/a/6Yxf9v+WMW/93yxyz+u+ePWfz3yB+z+O+ZP2bx3yt/zOK/d/6YxX+f/DGL/775Yxb//fLHLP77549Z/A/IH7P4H5g/ZvE/KH/M4n9w/pjF/5D8MYv/ofljFv/D8scs/ofnj1n8j8gfs/gfmT9m8T8qf8zif3T+mMX/mPwxi/+x+WMW/+Pyxyz+x+ePWfxPyB+z+J+YP2bxPyl/zOJ/cv6Yxf+U/DGL/6n5Yxb/0/LHLP6n549Z/M/IH7P4n5k/ZvE/K3/M4n92/pjF/5z8MYv/ufljFv/z8scs/ufnj1n8L8gfs/hfmD9m8b8of8zif3H+mMX/kvwxi/+l+WMW/8vyxyz+l+ePWfyvyB+z+F+ZP2bxvyp/zOJ/df6Yxf+a/DGL/7X5Yxb/6/LHLP7X549Z/G/IH7P435g/ZvG/KX/M4n9z/pjF/5b8MYv/rfljFv/b8scs/rfnj1n878gfs/jfmT9m8b8rf8zif3f+mMX/nvwxi/+9+WMW//vyxyz+9+ePWfwfyB+z+D+YP2bxfyh/zOL/cP6Yxf+R/DGL/6P5Yxb/x/LHLP6P549Z/J/IH7P4P5k/ZvF/Kn/M4v90/pjF/5n8MYv/s/ljFv/n8scs/s/nj1n8X8gfs/i/mD9m8X8pf8zi/3L+mMX/lfwxi/+r+WMW/9fyxyz+r+ePWfzfyB+z+L+ZP2bxfyt/zOL/dv6Yxf+d/DGL/7v5YxL/kQfyxyz+g/LHLP4j5Y9Z/EfOH7P4j5I/ZvEfnD9m8R81f8ziP1r+mMV/9Pwxi/8Y+WMW/zHzxyz+Y+WPWfzHzh+z+I+TP2bxHzd/zOI/Xv6YxX/8/DGL/wT5Yxb/CfPHLP4T5Y9Z/CfOH7P4fyx/zOI/Sf6Yxf/j+WMW/0nzxyz+n8gfs/hPlj9m8f9k/pjF/1P5Yxb/yfPHLP6fzh+z+H8mf8ziP0X+mMX/s/ljFv/P5Y9Z/D+fP2bxnzJ/zOL/hfwxi/8X88cs/l/KH7P4T5U/ZvH/cv6Yxf8r+WMW/6/mj1n8v5Y/ZvH/ev6Yxf8b+WMW/6nzxyz+0+SPWfynzR+z+E+XP2bxnz5/zOI/Q/6Yxf+b+WMW/xnzxyz+M+WPWfxnzh+z+M+SP2bx/1b+mMV/1vwxi/+388cs/rPlj1n8v5M/ZvH/bv6YxX/2/DGL/xz5Yxb/OfPHLP5z5Y9Z/L+XP2bxnzt/zOI/T/6YxX/e/DGL//fzxyz+8+WPWfx/kD9m8Z8/f8ziv0D+mMV/wfwxi/9C+WMW/x/mj1n8F84fs/gvkj9m8V80f8ziv1j+mMV/8fwxi/8S+WMW/x/lj1n8f5w/ZvFfMn/M4r9U/pjF/yf5Yxb/n+aPWfyXzh+z+C+TP2bxXzZ/zOL/s/wxi/9y+WMW/+Xzxyz+P88fs/ivkD9m8V8xf8ziv1L+mMV/5fwxi/8q+WMW/1Xzxyz+q+WPWfx/kT9m8V89f8ziv0b+mMV/zfwxi/9a+WMW/7Xzxyz+6+SPWfzXzR+z+K+XP2bxXz9/zOK/Qf6Yxf+X+WMW/1/lj1n8N8wfs/hvlD9m8d84f8ziv0n+mMX/1/ljFv/f5I9Z/DfNH7P4b5Y/ZvHfPH/M4r9F/pjFf8v8MYv/b/PHLP5b5Y9Z/H+XP2bx3zp/zOL/+/wxi/82+WMW/23zxyz+2+WPWfy3zx+z+P8hf8zi/8f8MYv/DvljFv8/5Y9Z/P+cP2bx3zF/zOK/U/6Yxf8v+WMW/53zxyz+u+SPWfx3zR+z+P81f8zi/7f8MYv/bvljFv/d88cs/nvkj1n898wfs/jvlT9m8d87f8ziv0/+mMV/3/wxi/9++WMW//3zxyz+B+SPWfwPzB+z+B+UP2bxPzh/zOJ/SP6Yxf/Q/DGL/2H5Yxb/w/PHLP5H5I9Z/I/MH7P4H5U/ZvE/On/M4n9M/pjF/9j8MYv/cfljFv/j88cs/ifkj1n8T8wfs/iflD9m8T85f8zif0r+mMX/1Pwxi/9p+WMW/9Pzxyz+Z+SPWfzPzB+z+J+VP2bxPzt/zOJ/Tv6Yxf/c/DGL/3n5Yxb/8/PHLP4X5I9Z/C/MH7P4X5Q/ZvG/OH/M4n9J/pjF/9L8MYv/ZfljFv/L88cs/lfkj1n8r8wfs/hflT9m8b86f8zif03+mMX/2vwxi/91+WMW/+vzxyz+N+SPWfxvzB+z+N+UP2bxvzl/zOJ/S/6Yxf/W/DGL/235Yxb/2/PHLP535I9Z/O/MH7P435U/ZvG/O3/M4n9P/pjF/978MYv/ffljFv/788cs/g/kj1n8H8wfs/g/lD9m8X84f8zi/0j+mMX/0fwxi/9j+WMW/8fzxyz+T+SPWfyfzB+z+D+VP2bxfzp/zOL/TP6Yxf/Z/DGL/3P5Yxb/5/PHLP4v5I9Z/F/MH7P4v5Q/ZvF/OX/M4v9K/pjF/9X8MYv/a/ljFv/X88cs/m/kj1n838wfs/i/lT9m8X87f8zi/07+mMX/3fwxif8oA/ljFv9B+WMW/5Hyxyz+I+ePWfxHyR+z+A/OH7P4j5o/ZvEfLX/M4j96/pjFf4z8MYv/mPljFv+x8scs/mPnj1n8x8kfs/iPmz9m8R8vf8ziP37+mMV/gvwxi/+E+WMW/4nyxyz+E+ePWfw/lj9m8Z8kf8zi//H8MYv/pPljFv9P5I9Z/CfLH7P4fzJ/zOL/qfwxi//k+WMW/0/nj1n8P5M/ZvGfIn/M4v/Z/DGL/+fyxyz+n88fs/hPmT9m8f9C/pjF/4v5Yxb/L+WPWfynyh+z+H85f8zi/5X8MYv/V/PHLP5fyx+z+H89f8zi/438MYv/1PljFv9p8scs/tPmj1n8p8sfs/hPnz9m8Z8hf8zi/838MYv/jPljFv+Z8scs/jPnj1n8Z8kfs/h/K3/M4j9r/pjF/9v5Yxb/2fLHLP7fyR+z+H83f8ziP3v+mMV/jvwxi/+c+WMW/7nyxyz+38sfs/jPnT9m8Z8nf8ziP2/+mMX/+/ljFv/58scs/j/IH7P4z58/ZvFfIH/M4r9g/pjFf6H8MYv/D/PHLP4L549Z/BfJH7P4L5o/ZvFfLH/M4r94/pjFf4n8MYv/j/LHLP4/zh+z+C+ZP2bxXyp/zOL/k/wxi/9P88cs/kvnj1n8l8kfs/gvmz9m8f9Z/pjFf7n8MYv/8vljFv+f549Z/FfIH7P4r5g/ZvFfKX/M4r9y/pjFf5X8MYv/qvljFv/V8scs/r/IH7P4r54/ZvFfI3/M4r9m/pjFf638MYv/2vljFv918scs/uvmj1n818sfs/ivnz9m8d8gf8zi/8v8MYv/r/LHLP4b5o9Z/DfKH7P4b5w/ZvHfJH/M4v/r/DGL/2/yxyz+m+aPWfw3yx+z+G+eP2bx3yJ/zOK/Zf6Yxf+3+WMW/63yxyz+v8sfs/hvnT9m8f99/pjFf5v8MYv/tvljFv/t8scs/tvnj1n8/5A/ZvH/Y/6YxX+H/DGL/5/yxyz+f84fs/jvmD9m8d8pf8zi/5f8MYv/zvljFv9d8scs/rvmj1n8/5o/ZvH/W/6YxX+3/DGL/+75Yxb/PfLHLP575o9Z/PfKH7P4750/ZvHfJ3/M4r9v/pjFf7/8MYv//vljFv8D8scs/gfmj1n8D8ofs/gfnD9m8T8kf8zif2j+mMX/sPwxi//h+WMW/yPyxyz+R+aPWfyPyh+z+B+dP2bxPyZ/zOJ/bP6Yxf+4/DGL//H5Yxb/E/LHLP4n5o9Z/E/KH7P4n5w/ZvE/JX/M4n9q/pjF/7T8MYv/6fljFv8z8scs/mfmj1n8z8ofs/ifnT9m8T8nf8zif27+mMX/vPwxi//5+WMW/wvyxyz+F+aPWfwvyh+z+F+cP2bxvyR/zOJ/af6Yxf+y/DGL/+X5Yxb/K/LHLP5X5o9Z/K/KH7P4X50/ZvG/Jn/M4n9t/pjF/7r8MYv/9fljFv8b8scs/jfmj1n8b8ofs/jfnD9m8b8lf8zif2v+mMX/tvwxi//t+WMW/zvyxyz+d+aPWfzvyh+z+N+dP2bxvyd/zOJ/b/6Yxf++/DGL//35Yxb/B/LHLP4P5o9Z/B/KH7P4P5w/ZvF/JH/M4v9o/pjF/7H8MYv/4/ljFv8n8scs/k/mj1n8n8ofs/g/nT9m8X8mf8zi/2z+mMX/ufwxi//z+WMW/xfyxyz+L+aPWfxfyh+z+L+cP2bxfyV/zOL/av6Yxf+1/DGL/+v5Yxb/N/LHLP5v5o9Z/N/KH7P4v50/ZvF/J3/M4v9u/pjEf/BA/pjFf1D+mMV/pPwxi//I+WMW/1Hyxyz+g/PHLP6j5o9Z/EfLH7P4j54/ZvEfI3/M4j9m/pjFf6z8MYv/2PljFv9x8scs/uPmj1n8x8sfs/iPnz9m8Z8gf8ziP2H+mMV/ovwxi//E+WMW/4/lj1n8J8kfs/h/PH/M4j9p/pjF/xP5Yxb/yfLHLP6fzB+z+H8qf8ziP3n+mMX/0/ljFv/P5I9Z/KfIH7P4fzZ/zOL/ufwxi//n88cs/lPmj1n8v5A/ZvH/Yv6Yxf9L+WMW/6nyxyz+X84fs/h/JX/M4v/V/DGL/9fyxyz+X88fs/h/I3/M4j91/pjFf5r8MYv/tPljFv/p8scs/tPnj1n8Z8gfs/h/M3/M4j9j/pjFf6b8MYv/zPljFv9Z8scs/t/KH7P4z5o/ZvH/dv6YxX+2/DGL/3fyxyz+380fs/jPnj9m8Z8jf8ziP2f+mMV/rvwxi//38scs/nPnj1n858kfs/jPmz9m8f9+/pjFf778MYv/D/LHLP7z549Z/BfIH7P4L5g/ZvFfKH/M4v/D/DGL/8L5Yxb/RfLHLP6L5o9Z/BfLH7P4L54/ZvFfIn/M4v+j/DGL/4/zxyz+S+aPWfyXyh+z+P8kf8zi/9P8MYv/0vljFv9l8scs/svmj1n8f5Y/ZvFfLn/M4r98/pjF/+f5Yxb/FfLHLP4r5o9Z/FfKH7P4r5w/ZvFfJX/M4r9q/pjFf7X8MYv/L/LHLP6r549Z/NfIH7P4r5k/ZvFfK3/M4r92/pjFf538MYv/uvljFv/18scs/uvnj1n8N8gfs/j/Mn/M4v+r/DGL/4b5Yxb/jfLHLP4b549Z/DfJH7P4/zp/zOL/m/wxi/+m+WMW/83yxyz+m+ePWfy3yB+z+G+ZP2bx/23+mMV/q/wxi//v8scs/lvnj1n8f58/ZvHfJn/M4r9t/pjFf7v8MYv/9vljFv8/5I9Z/P+YP2bx3yF/zOL/p/wxi/+f88cs/jvmj1n8d8ofs/j/JX/M4r9z/pjFf5f8MYv/rvljFv+/5o9Z/P+WP2bx3y1/zOK/e/6YxX+P/DGL/575Yxb/vfLHLP57549Z/PfJH7P475s/ZvHfL3/M4r9//pjF/4D8MYv/gfljFv+D8scs/gfnj1n8D8kfs/gfmj9m8T8sf8zif3j+mMX/iPwxi/+R+WMW/6Pyxyz+R+ePWfyPyR+z+B+bP2bxPy5/zOJ/fP6Yxf+E/DGL/4n5Yxb/k/LHLP4n549Z/E/JH7P4n5o/ZvE/LX/M4n96/pjF/4z8MYv/mfljFv+z8scs/mfnj1n8z8kfs/ifmz9m8T8vf8zif37+mMX/gvwxi/+F+WMW/4vyxyz+F+ePWfwvyR+z+F+aP2bxvyx/zOJ/ef6Yxf+K/DGL/5X5Yxb/q/LHLP5X549Z/K/JH7P4X5s/ZvG/Ln/M4n99/pjF/4b8MYv/jfljFv+b8scs/jfnj1n8b8kfs/jfmj9m8b8tf8zif3v+mMX/jvwxi/+d+WMW/7vyxyz+d+ePWfzvyR+z+N+bP2bxvy9/zOJ/f/6Yxf+B/DGL/4P5Yxb/h/LHLP4P549Z/B/JH7P4P5o/ZvF/LH/M4v94/pjF/4n8MYv/k/ljFv+n8scs/k/nj1n8n8kfs/g/mz9m8X8uf8zi/3z+mMX/hfwxi/+L+WMW/5fyxyz+L+ePWfxfyR+z+L+aP2bxfy1/zOL/ev6Yxf+N/DGL/5v5Yxb/t/LHLP5v549Z/N/JH7P4v5s/JvEfdSB/zOI/KH/M4j9S/pjFf+T8MYv/KPljFv/B+WMW/1Hzxyz+o+WPWfxHzx+z+I+RP2bxHzN/zOI/Vv6YxX/s/DGL/zj5Yxb/cfPHLP7j5Y9Z/MfPH7P4T5A/ZvGfMH/M4j9R/pjFf+L8MYv/x/LHLP6T5I9Z/D+eP2bxnzR/zOL/ifwxi/9k+WMW/0/mj1n8P5U/ZvGfPH/M4v/p/DGL/2fyxyz+U+SPWfw/mz9m8f9c/pjF//P5Yxb/KfPHLP5fyB+z+H8xf8zi/6X8MYv/VPljFv8v549Z/L+SP2bx/2r+mMX/a/ljFv+v549Z/L+RP2bxnzp/zOI/Tf6YxX/a/DGL/3T5Yxb/6fPHLP4z5I9Z/L+ZP2bxnzF/zOI/U/6YxX/m/DGL/yz5Yxb/b+WPWfxnzR+z+H87f8ziP1v+mMX/O/ljFv/v5o9Z/GfPH7P4z5E/ZvGfM3/M4j9X/pjF/3v5Yxb/ufPHLP7z5I9Z/OfNH7P4fz9/zOI/X/6Yxf8H+WMW//nzxyz+C+SPWfwXzB+z+C+UP2bx/2H+mMV/4fwxi/8i+WMW/0Xzxyz+i+WPWfwXzx+z+C+RP2bx/1H+mMX/x/ljFv8l88cs/kvlj1n8f5I/ZvH/af6YxX/p/DGL/zL5Yxb/ZfPHLP4/yx+z+C+XP2bxXz5/zOL/8/wxi/8K+WMW/xXzxyz+K+WPWfxXzh+z+K+SP2bxXzV/zOK/Wv6Yxf8X+WMW/9Xzxyz+a+SPWfzXzB+z+K+VP2bxXzt/zOK/Tv6YxX/d/DGL/3r5Yxb/9fPHLP4b5I9Z/H+ZP2bx/1X+mMV/w/wxi/9G+WMW/43zxyz+m+SPWfx/nT9m8f9N/pjFf9P8MYv/ZvljFv/N88cs/lvkj1n8t8wfs/j/Nn/M4r9V/pjF/3f5Yxb/rfPHLP6/zx+z+G+TP2bx3zZ/zOK/Xf6YxX/7/DGL/x/yxyz+f8wfs/jvkD9m8f9T/pjF/8/5Yxb/HfPHLP475Y9Z/P+SP2bx3zl/zOK/S/6YxX/X/DGL/1/zxyz+f8sfs/jvlj9m8d89f8ziv0f+mMV/z/wxi/9e+WMW/73zxyz+++SPWfz3zR+z+O+XP2bx3z9/zOJ/QP6Yxf/A/DGL/0H5Yxb/g/PHLP6H5I9Z/A/NH7P4H5Y/ZvE/PH/M4n9E/pjF/8j8MYv/UfljFv+j88cs/sfkj1n8j80fs/gflz9m8T8+f8zif0L+mMX/xPwxi/9J+WMW/5Pzxyz+p+SPWfxPzR+z+J+WP2bxPz1/zOJ/Rv6Yxf/M/DGL/1n5Yxb/s/PHLP7n5I9Z/M/NH7P4n5c/ZvE/P3/M4n9B/pjF/8L8MYv/RfljFv+L88cs/pfkj1n8L80fs/hflj9m8b88f8zif0X+mMX/yvwxi/9V+WMW/6vzxyz+1+SPWfyvzR+z+F+XP2bxvz5/zOJ/Q/6Yxf/G/DGL/035Yxb/m/PHLP635I9Z/G/NH7P435Y/ZvG/PX/M4n9H/pjF/878MYv/XfljFv+788cs/vfkj1n8780fs/jflz9m8b8/f8zi/0D+mMX/wfwxi/9D+WMW/4fzxyz+j+SPWfwfzR+z+D+WP2bxfzx/zOL/RP6Yxf/J/DGL/1P5Yxb/p/PHLP7P5I9Z/J/NH7P4P5c/ZvF/Pn/M4v9C/pjF/8X8MYv/S/ljFv+X88cs/q/kj1n8X80fs/i/lj9m8X89f8zi/0b+mMX/zfwxi/9b+WMW/7fzxyz+7+SPWfzfzR+T+I82kD9m8R+UP2bxHyl/zOI/cv6YxX+U/DGL/+D8MYv/qPljFv/R8scs/qPnj1n8x8gfs/iPmT9m8R8rf8ziP3b+mMV/nPwxi/+4+WMW//Hyxyz+4+ePWfwnyB+z+E+YP2bxnyh/zOI/cf6Yxf9j+WMW/0nyxyz+H88fs/hPmj9m8f9E/pjFf7L8MYv/J/PHLP6fyh+z+E+eP2bx/3T+mMX/M/ljFv8p8scs/p/NH7P4fy5/zOL/+fwxi/+U+WMW/y/kj1n8v5g/ZvH/Uv6YxX+q/DGL/5fzxyz+X8kfs/h/NX/M4v+1/DGL/9fzxyz+38gfs/hPnT9m8Z8mf8ziP23+mMV/uvwxi//0+WMW/xnyxyz+38wfs/jPmD9m8Z8pf8ziP3P+mMV/lvwxi/+38scs/rPmj1n8v50/ZvGfLX/M4v+d/DGL/3fzxyz+s+ePWfznyB+z+M+ZP2bxnyt/zOL/vfwxi//c+WMW/3nyxyz+8+aPWfy/nz9m8Z8vf8zi/4P8MYv//PljFv8F8scs/gvmj1n8F8ofs/j/MH/M4r9w/pjFf5H8MYv/ovljFv/F8scs/ovnj1n8l8gfs/j/KH/M4v/j/DGL/5L5Yxb/pfLHLP4/yR+z+P80f8ziv3T+mMV/mfwxi/+y+WMW/5/lj1n8l8sfs/gvnz9m8f95/pjFf4X8MYv/ivljFv+V8scs/ivnj1n8V8kfs/ivmj9m8V8tf8zi/4v8MYv/6vljFv818scs/mvmj1n818ofs/ivnT9m8V8nf8ziv27+mMV/vfwxi//6+WMW/w3yxyz+v8wfs/j/Kn/M4r9h/pjFf6P8MYv/xvljFv9N8scs/r/OH7P4/yZ/zOK/af6YxX+z/DGL/+b5Yxb/LfLHLP5b5o9Z/H+bP2bx3yp/zOL/u/wxi//W+WMW/9/nj1n8t8kfs/hvmz9m8d8uf8ziv33+mMX/D/ljFv8/5o9Z/HfIH7P4/yl/zOL/5/wxi/+O+WMW/53yxyz+f8kfs/jvnD9m8d8lf8ziv2v+mMX/r/ljFv+/5Y9Z/HfLH7P4754/ZvHfI3/M4r9n/pjFf6/8MYv/3vljFv998scs/vvmj1n898sfs/jvnz9m8T8gf8zif2D+mMX/oPwxi//B+WMW/0Pyxyz+h+aPWfwPyx+z+B+eP2bxPyJ/zOJ/ZP6Yxf+o/DGL/9H5Yxb/Y/LHLP7H5o9Z/I/LH7P4H58/ZvE/IX/M4n9i/pjF/6T8MYv/yfljFv9T8scs/qfmj1n8T8sfs/ifnj9m8T8jf8zif2b+mMX/rPwxi//Z+WMW/3Pyxyz+5+aPWfzPyx+z+J+fP2bxvyB/zOJ/Yf6Yxf+i/DGL/8X5Yxb/S/LHLP6X5o9Z/C/LH7P4X54/ZvG/In/M4n9l/pjF/6r8MYv/1fljFv9r8scs/tfmj1n8r8sfs/hfnz9m8b8hf8zif2P+mMX/pvwxi//N+WMW/1vyxyz+t+aPWfxvyx+z+N+eP2bxvyN/zOJ/Z/6Yxf+u/DGL/935Yxb/e/LHLP735o9Z/O/LH7P4358/ZvF/IH/M4v9g/pjF/6H8MYv/w/ljFv9H8scs/o/mj1n8H8sfs/g/nj9m8X8if8zi/2T+mMX/qfwxi//T+WMW/2fyxyz+z+aPWfyfyx+z+D+fP2bxfyF/zOL/Yv6Yxf+l/DGL/8v5Yxb/V/LHLP6v5o9Z/F/LH7P4v54/ZvF/I3/M4v9m/pjF/638MYv/2/ljFv938scs/u/mj0n8Rx/IH7P4D8ofs/iPlD9m8R85f8ziP0r+mMV/cP6YxX/U/DGL/2j5Yxb/0fPHLP5j5I9Z/MfMH7P4j5U/ZvEfO3/M4j9O/pjFf9z8MYv/ePljFv/x88cs/hPkj1n8J8wfs/hPlD9m8Z84f8zi/7H8MYv/JPljFv+P549Z/CfNH7P4fyJ/zOI/Wf6Yxf+T+WMW/0/lj1n8J88fs/h/On/M4v+Z/DGL/xT5Yxb/z+aPWfw/lz9m8f98/pjFf8r8MYv/F/LHLP5fzB+z+H8pf8ziP1X+mMX/y/ljFv+v5I9Z/L+aP2bx/1r+mMX/6/ljFv9v5I9Z/KfOH7P4T5M/ZvGfNn/M4j9d/pjFf/r8MYv/DPljFv9v5o9Z/GfMH7P4z5Q/ZvGfOX/M4j9L/pjF/1v5Yxb/WfPHLP7fzh+z+M+WP2bx/07+mMX/u/ljFv/Z88cs/nPkj1n858wfs/jPlT9m8f9e/pjFf+78MYv/PPljFv9588cs/t/PH7P4z5c/ZvH/Qf6YxX/+/DGL/wL5Yxb/BfPHLP4L5Y9Z/H+YP2bxXzh/zOK/SP6YxX/R/DGL/2L5Yxb/xfPHLP5L5I9Z/H+UP2bx/3H+mMV/yfwxi/9S+WMW/5/kj1n8f5o/ZvFfOn/M4r9M/pjFf9n8MYv/z/LHLP7L5Y9Z/JfPH7P4/zx/zOK/Qv6YxX/F/DGL/0r5Yxb/lfPHLP6r5I9Z/FfNH7P4r5Y/ZvH/Rf6YxX/1/DGL/xr5Yxb/NfPHLP5r5Y9Z/NfOH7P4r5M/ZvFfN3/M4r9e/pjFf/38MYv/BvljFv9f5o9Z/H+VP2bx3zB/zOK/Uf6YxX/j/DGL/yb5Yxb/X+ePWfx/kz9m8d80f8ziv1n+mMV/8/wxi/8W+WMW/y3zxyz+v80fs/hvlT9m8f9d/pjFf+v8MYv/7/PHLP7b5I9Z/LfNH7P4b5c/ZvHfPn/M4v+H/DGL/x/zxyz+O+SPWfz/lD9m8f9z/pjFf8f8MYv/TvljFv+/5I9Z/HfOH7P475I/ZvHfNX/M4v/X/DGL/9/yxyz+u+WPWfx3zx+z+O+RP2bx3zN/zOK/V/6YxX/v/DGL/z75Yxb/ffPHLP775Y9Z/PfPH7P4H5A/ZvE/MH/M4n9Q/pjF/+D8MYv/IfljFv9D88cs/oflj1n8D88fs/gfkT9m8T8yf8zif1T+mMX/6Pwxi/8x+WMW/2Pzxyz+x+WPWfyPzx+z+J+QP2bxPzF/zOJ/Uv6Yxf/k/DGL/yn5Yxb/U/PHLP6n5Y9Z/E/PH7P4n5E/ZvE/M3/M4n9W/pjF/+z8MYv/OfljFv9z88cs/uflj1n8z88fs/hfkD9m8b8wf8zif1H+mMX/4vwxi/8l+WMW/0vzxyz+l+WPWfwvzx+z+F+RP2bxvzJ/zOJ/Vf6Yxf/q/DGL/zX5Yxb/a/PHLP7X5Y9Z/K/PH7P435A/ZvG/MX/M4n9T/pjF/+b8MYv/LfljFv9b88cs/rflj1n8b88fs/jfkT9m8b8zf8zif1f+mMX/7vwxi/89+WMW/3vzxyz+9+WPWfzvzx+z+D+QP2bxfzB/zOL/UP6Yxf/h/DGL/yP5Yxb/R/PHLP6P5Y9Z/B/PH7P4P5E/ZvF/Mn/M4v9U/pjF/+n8MYv/M/ljFv9n88cs/s/lj1n8n88fs/i/kD9m8X8xf8zi/1L+mMX/5fwxi/8r+WMW/1fzxyz+r+WPWfxfzx+z+L+RP2bxfzN/zOL/Vv6Yxf/t/DGL/zv5Yxb/d/PHJP5jDOSPWfwH5Y9Z/EfKH7P4j5w/ZvEfJX/M4j84f8ziP2r+mMV/tPwxi//o+WMW/zHyxyz+Y+aPWfzHyh+z+I+dP2bxHyd/zOI/bv6YxX+8/DGL//j5Yxb/CfLHLP4T5o9Z/CfKH7P4T5w/ZvH/WP6YxX+S/DGL/8fzxyz+k+aPWfw/kT9m8Z8sf8zi/8n8MYv/p/LHLP6T549Z/D+dP2bx/0z+mMV/ivwxi/9n88cs/p/LH7P4fz5/zOI/Zf6Yxf8L+WMW/y/mj1n8v5Q/ZvGfKn/M4v/l/DGL/1fyxyz+X80fs/h/LX/M4v/1/DGL/zfyxyz+U+ePWfynyR+z+E+bP2bxny5/zOI/ff6YxX+G/DGL/zfzxyz+M+aPWfxnyh+z+M+cP2bxnyV/zOL/rfwxi/+s+WMW/2/nj1n8Z8sfs/h/J3/M4v/d/DGL/+z5Yxb/OfLHLP5z5o9Z/OfKH7P4fy9/zOI/d/6YxX+e/DGL/7z5Yxb/7+ePWfznyx+z+P8gf8ziP3/+mMV/gfwxi/+C+WMW/4Xyxyz+P8wfs/gvnD9m8V8kf8ziv2j+mMV/sfwxi//i+WMW/yXyxyz+P8ofs/j/OH/M4r9k/pjFf6n8MYv/T/LHLP4/zR+z+C+dP2bxXyZ/zOK/bP6Yxf9n+WMW/+Xyxyz+y+ePWfx/nj9m8V8hf8ziv2L+mMV/pfwxi//K+WMW/1Xyxyz+q+aPWfxXyx+z+P8if8ziv3r+mMV/jfwxi/+a+WMW/7Xyxyz+a+ePWfzXyR+z+K+bP2bxXy9/zOK/fv6YxX+D/DGL/y/zxyz+v8ofs/hvmD9m8d8of8ziv3H+mMV/k/wxi/+v88cs/r/JH7P4b5o/ZvHfLH/M4r95/pjFf4v8MYv/lvljFv/f5o9Z/LfKH7P4/y5/zOK/df6Yxf/3+WMW/23yxyz+2+aPWfy3yx+z+G+fP2bx/0P+mMX/j/ljFv8d8scs/n/KH7P4/zl/zOK/Y/6YxX+n/DGL/1/yxyz+O+ePWfx3yR+z+O+aP2bx/2v+mMX/b/ljFv/d8scs/rvnj1n898gfs/jvmT9m8d8rf8ziv3f+mMV/n/wxi/+++WMW//3yxyz+++ePWfwPyB+z+B+YP2bxPyh/zOJ/cP6Yxf+Q/DGL/6H5Yxb/w/LHLP6H549Z/I/IH7P4H5k/ZvE/Kn/M4n90/pjF/5j8MYv/sfljFv/j8scs/sfnj1n8T8gfs/ifmD9m8T8pf8zif3L+mMX/lPwxi/+p+WMW/9Pyxyz+p+ePWfzPyB+z+J+ZP2bxPyt/zOJ/dv6Yxf+c/DGL/7n5Yxb/8/LHLP7n549Z/C/IH7P4X5g/ZvG/KH/M4n9x/pjF/5L8MYv/pfljFv/L8scs/pfnj1n8r8gfs/hfmT9m8b8qf8zif3X+mMX/mvwxi/+1+WMW/+vyxyz+1+ePWfxvyB+z+N+YP2bxvyl/zOJ/c/6Yxf+W/DGL/635Yxb/2/LHLP63549Z/O/IH7P435k/ZvG/K3/M4n93/pjF/578MYv/vfljFv/78scs/vfnj1n8H8gfs/g/mD9m8X8of8zi/3D+mMX/kfwxi/+j+WMW/8fyxyz+j+ePWfyfyB+z+D+ZP2bxfyp/zOL/dP6Yxf+Z/DGL/7P5Yxb/5/LHLP7P549Z/F/IH7P4v5g/ZvF/KX/M4v9y/pjF/5X8MYv/q/ljFv/X8scs/q/nj1n838gfs/i/mT9m8X8rf8zi/3b+mMX/nfwxi/+7+WMS/zEH8scs/oPyxyz+I+WPWfxHzh+z+I+SP2bxH5w/ZvEfNX/M4j9a/pjFf/T8MYv/GPljFv8x88cs/mPlj1n8x84fs/iPkz9m8R83f8ziP17+mMV//Pwxi/8E+WMW/wnzxyz+E+WPWfwnzh+z+H8sf8ziP0n+mMX/4/ljFv9J88cs/p/IH7P4T5Y/ZvH/ZP6Yxf9T+WMW/8nzxyz+n84fs/h/Jn/M4j9F/pjF/7P5Yxb/z+WPWfw/nz9m8Z8yf8zi/4X8MYv/F/PHLP5fyh+z+E+VP2bx/3L+mMX/K/ljFv+v5o9Z/L+WP2bx/3r+mMX/G/ljFv+p88cs/tPkj1n8p80fs/hPlz9m8Z8+f8ziP0P+mMX/m/ljFv8Z88cs/jPlj1n8Z84fs/jPkj9m8f9W/pjFf9b8MYv/t/PHLP6z5Y9Z/L+TP2bx/27+mMV/9vwxi/8c+WMW/znzxyz+c+WPWfy/lz9m8Z87f8ziP0/+mMV/3vwxi//388cs/vPlj1n8f5A/ZvGfP3/M4r9A/pjFf8H8MYv/QvljFv8f5o9Z/BfOH7P4L5I/ZvFfNH/M4r9Y/pjFf/H8MYv/EvljFv8f5Y9Z/H+cP2bxXzJ/zOK/VP6Yxf8n+WMW/5/mj1n8l84fs/gvkz9m8V82f8zi/7P8MYv/cvljFv/l88cs/j/PH7P4r5A/ZvFfMX/M4r9S/pjFf+X8MYv/KvljFv9V88cs/qvlj1n8f5E/ZvFfPX/M4r9G/pjFf838MYv/WvljFv+188cs/uvkj1n8180fs/ivlz9m8V8/f8ziv0H+mMX/l/ljFv9f5Y9Z/DfMH7P4b5Q/ZvHfOH/M4r9J/pjF/9f5Yxb/3+SPWfw3zR+z+G+WP2bx3zx/zOK/Rf6YxX/L/DGL/2/zxyz+W+WPWfx/lz9m8d86f8zi//v8MYv/NvljFv9t88cs/tvlj1n8t88fs/j/IX/M4v/H/DGL/w75Yxb/P+WPWfz/nD9m8d8xf8ziv1P+mMX/L/ljFv+d88cs/rvkj1n8d80fs/j/NX/M4v+3/DGL/275Yxb/3fPHLP575I9Z/PfMH7P475U/ZvHfO3/M4r9P/pjFf9/8MYv/fvljFv/988cs/gfkj1n8D8wfs/gflD9m8T84f8zif0j+mMX/0Pwxi/9h+WMW/8Pzxyz+R+SPWfyPzB+z+B+VP2bxPzp/zOJ/TP6Yxf/Y/DGL/3H5Yxb/4/PHLP4n5I9Z/E/MH7P4n5Q/ZvE/OX/M4n9K/pjF/9T8MYv/afljFv/T88cs/mfkj1n8z8wfs/iflT9m8T87f8zif07+mMX/3Pwxi/95+WMW//Pzxyz+F+SPWfwvzB+z+F+UP2bxvzh/zOJ/Sf6Yxf/S/DGL/2X5Yxb/y/PHLP5X5I9Z/K/MH7P4X5U/ZvG/On/M4n9N/pjF/9r8MYv/dfljFv/r88cs/jfkj1n8b8wfs/jflD9m8b85f8zif0v+mMX/1vwxi/9t+WMW/9vzxyz+d+SPWfzvzB+z+N+VP2bxvzt/zOJ/T/6Yxf/e/DGL/335Yxb/+/PHLP4P5I9Z/B/MH7P4P5Q/ZvF/OH/M4v9I/pjF/9H8MYv/Y/ljFv/H88cs/k/kj1n8n8wfs/g/lT9m8X86f8zi/0z+mMX/2fwxi/9z+WMW/+fzxyz+L+SPWfxfzB+z+L+UP2bxfzl/zOL/Sv6Yxf/V/DGL/2v5Yxb/1/PHLP5v5I9Z/N/MH7P4v5U/ZvF/O3/M4v9O/pjF/938MYn/WAP5Yxb/QfljFv+R8scs/iPnj1n8R8kfs/gPzh+z+I+aP2bxHy1/zOI/ev6YxX+M/DGL/5j5Yxb/sfLHLP5j549Z/MfJH7P4j5s/ZvEfL3/M4j9+/pjFf4L8MYv/hPljFv+J8scs/hPnj1n8P5Y/ZvGfJH/M4v/x/DGL/6T5Yxb/T+SPWfwnyx+z+H8yf8zi/6n8MYv/5PljFv9P549Z/D+TP2bxnyJ/zOL/2fwxi//n8scs/p/PH7P4T5k/ZvH/Qv6Yxf+L+WMW/y/lj1n8p8ofs/h/OX/M4v+V/DGL/1fzxyz+X8sfs/h/PX/M4v+N/DGL/9T5Yxb/afLHLP7T5o9Z/KfLH7P4T58/ZvGfIX/M4v/N/DGL/4z5Yxb/mfLHLP4z549Z/GfJH7P4fyt/zOI/a/6Yxf/b+WMW/9nyxyz+38kfs/h/N3/M4j97/pjFf478MYv/nPljFv+58scs/t/LH7P4z50/ZvGfJ3/M4j9v/pjF//v5Yxb/+fLHLP4/yB+z+M+fP2bxXyB/zOK/YP6YxX+h/DGL/w/zxyz+C+ePWfwXyR+z+C+aP2bxXyx/zOK/eP6YxX+J/DGL/4/yxyz+P84fs/gvmT9m8V8qf8zi/5P8MYv/T/PHLP5L549Z/JfJH7P4L5s/ZvH/Wf6YxX+5/DGL//L5Yxb/n+ePWfxXyB+z+K+YP2bxXyl/zOK/cv6YxX+V/DGL/6r5Yxb/1fLHLP6/yB+z+K+eP2bxXyN/zOK/Zv6YxX+t/DGL/9r5Yxb/dfLHLP7r5o9Z/NfLH7P4r58/ZvHfIH/M4v/L/DGL/6/yxyz+G+aPWfw3yh+z+G+cP2bx3yR/zOL/6/wxi/9v8scs/pvmj1n8N8sfs/hvnj9m8d8if8ziv2X+mMX/t/ljFv+t8scs/r/LH7P4b50/ZvH/ff6YxX+b/DGL/7b5Yxb/7fLHLP7b549Z/P+QP2bx/2P+mMV/h/wxi/+f8scs/n/OH7P475g/ZvHfKX/M4v+X/DGL/875Yxb/XfLHLP675o9Z/P+aP2bx/1v+mMV/t/wxi//u+WMW/z3yxyz+e+aPWfz3yh+z+O+dP2bx3yd/zOK/b/6YxX+//DGL//75Yxb/A/LHLP4H5o9Z/A/KH7P4H5w/ZvE/JH/M4n9o/pjF/7D8MYv/4fljFv8j8scs/kfmj1n8j8ofs/gfnT9m8T8mf8zif2z+mMX/uPwxi//x+WMW/xPyxyz+J+aPWfxPyh+z+J+cP2bxPyV/zOJ/av6Yxf+0/DGL/+n5Yxb/M/LHLP5n5o9Z/M/KH7P4n50/ZvE/J3/M4n9u/pjF/7z8MYv/+fljFv8L8scs/hfmj1n8L8ofs/hfnD9m8b8kf8zif2n+mMX/svwxi//l+WMW/yvyxyz+V+aPWfyvyh+z+F+dP2bxvyZ/zOJ/bf6Yxf+6/DGL//X5Yxb/G/LHLP435o9Z/G/KH7P435w/ZvG/JX/M4n9r/pjF/7b8MYv/7fljFv878scs/nfmj1n878ofs/jfnT9m8b8nf8zif2/+mMX/vvwxi//9+WMW/wfyxyz+D+aPWfwfyh+z+D+cP2bxfyR/zOL/aP6Yxf+x/DGL/+P5Yxb/J/LHLP5P5o9Z/J/KH7P4P50/ZvF/Jn/M4v9s/pjF/7n8MYv/8/ljFv8X8scs/i/mj1n8X8ofs/i/nD9m8X8lf8zi/2r+mMX/tfwxi//r+WMW/zfyxyz+b+aPWfzfyh+z+L+dP2bxfyd/zOL/bv6YxH/sgfwxi/+g/DGL/0j5Yxb/kfPHLP6j5I9Z/Afnj1n8R80fs/iPlj9m8R89f8ziP0b+mMV/zPwxi/9Y+WMW/7Hzxyz+4+SPWfzHzR+z+I+XP2bxHz9/zOI/Qf6YxX/C/DGL/0T5Yxb/ifPHLP4fyx+z+E+SP2bx/3j+mMV/0vwxi/8n8scs/pPlj1n8P5k/ZvH/VP6YxX/y/DGL/6fzxyz+n8kfs/hPkT9m8f9s/pjF/3P5Yxb/z+ePWfynzB+z+H8hf8zi/8X8MYv/l/LHLP5T5Y9Z/L+cP2bx/0r+mMX/q/ljFv+v5Y9Z/L+eP2bx/0b+mMV/6vwxi/80+WMW/2nzxyz+0+WPWfynzx+z+M+QP2bx/2b+mMV/xvwxi/9M+WMW/5nzxyz+s+SPWfy/lT9m8Z81f8zi/+38MYv/bPljFv/v5I9Z/L+bP2bxnz1/zOI/R/6YxX/O/DGL/1z5Yxb/7+WPWfznzh+z+M+TP2bxnzd/zOL//fwxi/98+WMW/x/kj1n8588fs/gvkD9m8V8wf8ziv1D+mMX/h/ljFv+F88cs/ovkj1n8F80fs/gvlj9m8V88f8ziv0T+mMX/R/ljFv8f549Z/JfMH7P4L5U/ZvH/Sf6Yxf+n+WMW/6Xzxyz+y+SPWfyXzR+z+P8sf8ziv1z+mMV/+fwxi//P88cs/ivkj1n8V8wfs/ivlD9m8V85f8ziv0r+mMV/1fwxi/9q+WMW/1/kj1n8V88fs/ivkT9m8V8zf8ziv1b+mMV/7fwxi/86+WMW/3Xzxyz+6+WPWfzXzx+z+G+QP2bx/2X+mMX/V/ljFv8N88cs/hvlj1n8N84fs/hvkj9m8f91/pjF/zf5Yxb/TfPHLP6b5Y9Z/DfPH7P4b5E/ZvHfMn/M4v/b/DGL/1b5Yxb/3+WPWfy3zh+z+P8+f8ziv03+mMV/2/wxi/92+WMW/+3zxyz+f8gfs/j/MX/M4r9D/pjF/0/5Yxb/P+ePWfx3zB+z+O+UP2bx/0v+mMV/5/wxi/8u+WMW/13zxyz+f80fs/j/LX/M4r9b/pjFf/f8MYv/HvljFv8988cs/nvlj1n8984fs/jvkz9m8d83f8ziv1/+mMV///wxi/8B+WMW/wPzxyz+B+WPWfwPzh+z+B+SP2bxPzR/zOJ/WP6Yxf/w/DGL/xH5Yxb/I/PHLP5H5Y9Z/I/OH7P4H5M/ZvE/Nn/M4n9c/pjF//j8MYv/CfljFv8T88cs/iflj1n8T84fs/ifkj9m8T81f8zif1r+mMX/9Pwxi/8Z+WMW/zPzxyz+Z+WPWfzPzh+z+J+TP2bxPzd/zOJ/Xv6Yxf/8/DGL/wX5Yxb/C/PHLP4X5Y9Z/C/OH7P4X5I/ZvG/NH/M4n9Z/pjF//L8MYv/FfljFv8r88cs/lflj1n8r84fs/hfkz9m8b82f8zif13+mMX/+vwxi/8N+WMW/xvzxyz+N+WPWfxvzh+z+N+SP2bxvzV/zOJ/W/6Yxf/2/DGL/x35Yxb/O/PHLP535Y9Z/O/OH7P435M/ZvG/N3/M4n9f/pjF//78MYv/A/ljFv8H88cs/g/lj1n8H84fs/g/kj9m8X80f8zi/1j+mMX/8fwxi/8T+WMW/yfzxyz+T+WPWfyfzh+z+D+TP2bxfzZ/zOL/XP6Yxf/5/DGL/wv5Yxb/F/PHLP4v5Y9Z/F/OH7P4v5I/ZvF/NX/M4v9a/pjF//X8MYv/G/ljFv8388cs/m/lj1n8384fs/i/kz9m8X83f0ziP85A/pjFf1D+mMV/pPwxi//I+WMW/1Hyxyz+g/PHLP6j5o9Z/EfLH7P4j54/ZvEfI3/M4j9m/pjFf6z8MYv/2PljFv9x8scs/uPmj1n8x8sfs/iPnz9m8Z8gf8ziP2H+mMV/ovwxi//E+WMW/4/lj1n8J8kfs/h/PH/M4j9p/pjF/xP5Yxb/yfLHLP6fzB+z+H8qf8ziP3n+mMX/0/ljFv/P5I9Z/KfIH7P4fzZ/zOL/ufwxi//n88cs/lPmj1n8v5A/ZvH/Yv6Yxf9L+WMW/6nyxyz+X84fs/h/JX/M4v/V/DGL/9fyxyz+X88fs/h/I3/M4j91/pjFf5r8MYv/tPljFv/p8scs/tPnj1n8Z8gfs/h/M3/M4j9j/pjFf6b8MYv/zPljFv9Z8scs/t/KH7P4z5o/ZvH/dv6YxX+2/DGL/3fyxyz+380fs/jPnj9m8Z8jf8ziP2f+mMV/rvwxi//38scs/nPnj1n858kfs/jPmz9m8f9+/pjFf778MYv/D/LHLP7z549Z/BfIH7P4L5g/ZvFfKH/M4v/D/DGL/8L5Yxb/RfLHLP6L5o9Z/BfLH7P4L54/ZvFfIn/M4v+j/DGL/4/zxyz+S+aPWfyXyh+z+P8kf8zi/9P8MYv/0vljFv9l8scs/svmj1n8f5Y/ZvFfLn/M4r98/pjF/+f5Yxb/FfLHLP4r5o9Z/FfKH7P4r5w/ZvFfJX/M4r9q/pjFf7X8MYv/L/LHLP6r549Z/NfIH7P4r5k/ZvFfK3/M4r92/pjFf538MYv/uvljFv/18scs/uvnj1n8N8gfs/j/Mn/M4v+r/DGL/4b5Yxb/jfLHLP4b549Z/DfJH7P4/zp/zOL/m/wxi/+m+WMW/83yxyz+m+ePWfy3yB+z+G+ZP2bx/23+mMV/q/wxi//v8scs/lvnj1n8f58/ZvHfJn/M4r9t/pjFf7v8MYv/9vljFv8/5I9Z/P+YP2bx3yF/zOL/p/wxi/+f88cs/jvmj1n8d8ofs/j/JX/M4r9z/pjFf5f8MYv/rvljFv+/5o9Z/P+WP2bx3y1/zOK/e/6YxX+P/DGL/575Yxb/vfLHLP57549Z/PfJH7P475s/ZvHfL3/M4r9//pjF/4D8MYv/gfljFv+D8scs/gfnj1n8D8kfs/gfmj9m8T8sf8zif3j+mMX/iPwxi/+R+WMW/6Pyxyz+R+ePWfyPyR+z+B+bP2bxPy5/zOJ/fP6Yxf+E/DGL/4n5Yxb/k/LHLP4n549Z/E/JH7P4n5o/ZvE/LX/M4n96/pjF/4z8MYv/mfljFv+z8scs/mfnj1n8z8kfs/ifmz9m8T8vf8zif37+mMX/gvwxi/+F+WMW/4vyxyz+F+ePWfwvyR+z+F+aP2bxvyx/zOJ/ef6Yxf+K/DGL/5X5Yxb/q/LHLP5X549Z/K/JH7P4X5s/ZvG/Ln/M4n99/pjF/4b8MYv/jfljFv+b8scs/jfnj1n8b8kfs/jfmj9m8b8tf8zif3v+mMX/jvwxi/+d+WMW/7vyxyz+d+ePWfzvyR+z+N+bP2bxvy9/zOJ/f/6Yxf+B/DGL/4P5Yxb/h/LHLP4P549Z/B/JH7P4P5o/ZvF/LH/M4v94/pjF/4n8MYv/k/ljFv+n8scs/k/nj1n8n8kfs/g/mz9m8X8uf8zi/3z+mMX/hfwxi/+L+WMW/5fyxyz+L+ePWfxfyR+z+L+aP2bxfy1/zOL/ev6Yxf+N/DGL/5v5Yxb/t/LHLP5v549Z/N/JH7P4v5s/JvEfdyB/zOI/KH/M4j9S/pjFf+T8MYv/KPljFv/B+WMW/1Hzxyz+o+WPWfxHzx+z+I+RP2bxHzN/zOI/Vv6YxX/s/DGL/zj5Yxb/cfPHLP7j5Y9Z/MfPH7P4T5A/ZvGfMH/M4j9R/pjFf+L8MYv/x/LHLP6T5I9Z/D+eP2bxnzR/zOL/ifwxi/9k+WMW/0/mj1n8P5U/ZvGfPH/M4v/p/DGL/2fyxyz+U+SPWfw/mz9m8f9c/pjF//P5Yxb/KfPHLP5fyB+z+H8xf8zi/6X8MYv/VPljFv8v549Z/L+SP2bx/2r+mMX/a/ljFv+v549Z/L+RP2bxnzp/zOI/Tf6YxX/a/DGL/3T5Yxb/6fPHLP4z5I9Z/L+ZP2bxnzF/zOI/U/6YxX/m/DGL/yz5Yxb/b+WPWfxnzR+z+H87f8ziP1v+mMX/O/ljFv/v5o9Z/GfPH7P4z5E/ZvGfM3/M4j9X/pjF/3v5Yxb/ufPHLP7z5I9Z/OfNH7P4fz9/zOI/X/6Yxf8H+WMW//nzxyz+C+SPWfwXzB+z+C+UP2bx/2H+mMV/4fwxi/8i+WMW/0Xzxyz+i+WPWfwXzx+z+C+RP2bx/1H+mMX/x/ljFv8l88cs/kvlj1n8f5I/ZvH/af6YxX/p/DGL/zL5Yxb/ZfPHLP4/yx+z+C+XP2bxXz5/zOL/8/wxi/8K+WMW/xXzxyz+K+WPWfxXzh+z+K+SP2bxXzV/zOK/Wv6Yxf8X+WMW/9Xzxyz+a+SPWfzXzB+z+K+VP2bxXzt/zOK/Tv6YxX/d/DGL/3r5Yxb/9fPHLP4b5I9Z/H+ZP2bx/1X+mMV/w/wxi/9G+WMW/43zxyz+m+SPWfx/nT9m8f9N/pjFf9P8MYv/ZvljFv/N88cs/lvkj1n8t8wfs/j/Nn/M4r9V/pjF/3f5Yxb/rfPHLP6/zx+z+G+TP2bx3zZ/zOK/Xf6YxX/7/DGL/x/yxyz+f8wfs/jvkD9m8f9T/pjF/8/5Yxb/HfPHLP475Y9Z/P+SP2bx3zl/zOK/S/6YxX/X/DGL/1/zxyz+f8sfs/jvlj9m8d89f8ziv0f+mMV/z/wxi/9e+WMW/73zxyz+++SPWfz3zR+z+O+XP2bx3z9/zOJ/QP6Yxf/A/DGL/0H5Yxb/g/PHLP6H5I9Z/A/NH7P4H5Y/ZvE/PH/M4n9E/pjF/8j8MYv/UfljFv+j88cs/sfkj1n8j80fs/gflz9m8T8+f8zif0L+mMX/xPwxi/9J+WMW/5Pzxyz+p+SPWfxPzR+z+J+WP2bxPz1/zOJ/Rv6Yxf/M/DGL/1n5Yxb/s/PHLP7n5I9Z/M/NH7P4n5c/ZvE/P3/M4n9B/pjF/8L8MYv/RfljFv+L88cs/pfkj1n8L80fs/hflj9m8b88f8zif0X+mMX/yvwxi/9V+WMW/6vzxyz+1+SPWfyvzR+z+F+XP2bxvz5/zOJ/Q/6Yxf/G/DGL/035Yxb/m/PHLP635I9Z/G/NH7P435Y/ZvG/PX/M4n9H/pjF/878MYv/XfljFv+788cs/vfkj1n8780fs/jflz9m8b8/f8zi/0D+mMX/wfwxi/9D+WMW/4fzxyz+j+SPWfwfzR+z+D+WP2bxfzx/zOL/RP6Yxf/J/DGL/1P5Yxb/p/PHLP7P5I9Z/J/NH7P4P5c/ZvF/Pn/M4v9C/pjF/8X8MYv/S/ljFv+X88cs/q/kj1n8X80fs/i/lj9m8X89f8zi/0b+mMX/zfwxi/9b+WMW/7fzxyz+7+SPWfzfzR+T+I83kD9m8R+UP2bxHyl/zOI/cv6YxX+U/DGL/+D8MYv/qPljFv/R8scs/qPnj1n8x8gfs/iPmT9m8R8rf8ziP3b+mMV/nPwxi/+4+WMW//Hyxyz+4+ePWfwnyB+z+E+YP2bxnyh/zOI/cf6Yxf9j+WMW/0nyxyz+H88fs/hPmj9m8f9E/pjFf7L8MYv/J/PH/j/26MEADAQAAtjbGuBt27Zt27Zt27Zt27ZtW3UXuAl6yQpp+Z/Yf9TyP4n/qOV/Uv9Ry/9k/qOW/8n9Ry3/U/iPWv6n9B+1/E/lP2r5n9p/1PI/jf+o5X9a/1HL/3T+o5b/6f1HLf8z+I9a/mf0H7X8z+Q/avmf2X/U8j+L/6jlf1b/Ucv/bP6jlv/Z/Uct/3P4j1r+5/QftfzP5T9q+Z/bf9TyP4//qOV/Xv9Ry/98/qOW//n9Ry3/C/iPWv4X9B+1/C/kP2r5X9h/1PK/iP+o5X9R/1HL/2L+o5b/xf1HLf9L+I9a/pf0H7X8L+U/avlf2n/U8r+M/6jlf1n/Ucv/cv6jlv/l/Uct/yv4j1r+V/Qftfyv5D9q+V/Zf9Tyv4r/qOV/Vf9Ry/9q/qOW/9X9Ry3/a/iPWv7X9B+1/K/lP2r5X9t/1PK/jv+o5X9d/1HL/3r+o5b/9f1HLf8b+I9a/jf0H7X8b+Q/avnf2H/U8r+J/6jlf1P/Ucv/Zv6jlv/N/Uct/1v4j1r+t/Qftfxv5T9q+d/af9Tyv43/qOV/W/9Ry/92/qOW/+39Ry3/O/iPWv539B+1/O/kP2r539l/1PK/i/+o5X9X/1HL/27+o5b/3f1HLf97+I9a/vf0H7X87+U/avnf23/U8r+P/6jlf1//Ucv/fv6jlv/9/Uct/wf4j1r+D/Qftfwf5D9q+T/Yf9Tyf4j/qOX/UP9Ry/9h/qOW/8P9Ry3/R/iPWv6P9B+1/B/lP2r5P9p/1PJ/jP+o5f9Y/1HL/3H+o5b/4/1HLf8n+I9a/k/0H7X8n+Q/avk/2X/U8n+K/6jl/1T/Ucv/af6jlv/T/Uct/2f4j1r+z/Qftfyf5T9q+T/bf9Tyf47/qOX/XP9Ry/95/qOW//P9Ry3/F/iPWv4v9B+1/F/kP2r5v9h/1PJ/if+o5f9S/1HL/2X+o5b/y/1HLf9X+I9a/q/0H7X8X+U/avm/2n/U8n+N/6jl/1r/Ucv/df6jlv/r/Uct/zf4j1r+b/Qftfzf5D9q+b/Zf9Tyf4v/qOX/Vv9Ry/9t/qOW/9v9Ry3/d/iPWv7v9B+1/N/lP2r5v9t/1PJ/j/+o5f9e/1HL/33+o5b/+/1HLf8P+I9a/h/0H7X8P+Q/avl/2H/U8v+I/6jl/1H/Ucv/Y/6jlv/H/Uct/0/4j1r+n/Qftfw/5T9q+X/af9Ty/4z/qOX/Wf9Ry/9z/qOW/+f9Ry3/L/iPWv5f9B+1/L/kP2r5f9l/1PL/iv+o5f9V/1HL/2v+o5b/1/1HLf9v+I9a/t/0H7X8v+U/avl/23/U8v+O/6jl/13/Ucv/e/6jlv/3/Uct/x/4j1r+P/Qftfx/5D9q+f/Yf9Ty/4n/qOX/U/9Ry/9n/qOW/8/9Ry3/X/iPWv6/9B+1/H/lP2r5/9p/1PL/jf+o5f9b/1HL/3f+o5b/7/1HLf8/+I9a/n/0H7X8/+Q/avn/2X/U8v+L/6jl/1f/Ucv/b/6jlv/f/Uct/3/4j1r+//Qftfz/5T9q+f/bf9Ty/4//qOX/X/9Ry/9//qOW///9Ry3/A/xHLf8D/Uct/4P8Ry3/g/1HLf9D/Ect/0P9Ry3/w/xHJf8TjeQ/avkf2X/U8j+K/6jlf1T/Ucv/aP6jlv/R/Uct/2P4j1r+x/QftfyP5T9q+R/bf9TyP47/qOV/XP9Ry/94/qOW//H9Ry3/E/iPWv4n9B+NcP8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADCcvbuNzass/Dh+urZ7+rN/N+fwGjIYbLqJK1u7MhlsPtTHgqk6FgMmkC2sjEph7iG4gVoNSgzGMBkJIuo2dRNIjBkvhgkIK4lKnIrGiWiIQ1AXMTVMZETjUnO3vUt7r23Wq17XXuzzedHe55Tf6bbku3PK1gwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgpc3bbrlhbUdH2yYvvPDCi4EXp/p3JiC116I/1T8SAAAAAAAAAAAAAABgJDm+nehU/xwBAAAAAOB009L6ru7qqiGnqgcfzPl5W+/7plevvH7P84+vLL/v//Dlw1xywuCDnp6enpeau2b2H04qiqL02ab3H0+uHJeu39l1+fa+o1D89tnm1m3bmw/u/MrXH547dfqc2t6ztcWa69o72pZMKIpQXVtsLR00VBVFmFhbbC8dNJYOJtUW95cOlvYeTCkOlA4uvHZDx7rSiRM+NZx2Wlo/W1QPKbYY8rvB4P47uzbtKr8f5ZLlq9UU/f3XNf9wb8XHykbov3z9UFXZ/5h/gsCIxtb/7QvL70e55An3/0fb61YN97GR+y9fP0zQP6QzzPP/kEZ7n/f37J8xwvP/3GEuObD/6V9WdpX6v+mXL9T3n6o5mef/0ufrOwrVlf1PGPL8X3qOryk//08qilA7zl8OOK20tH6ue7T7f2X3Q/uvOatiUzW4/6Or9lSX+j981wPv7z9Ve1L9D1w/1Ixy/6/6zIGhP1ZgbFpad/dU3P/H0H+xYJhLDvQ/f/exq0r9n7HzyL5BHxtL/7WV/S/ecuMnFm/edkt9+41r17etb7upsbGhaemypsaLli/ufSToezvOXxU4PYzv/l9MrdhUFUXbwH7Rh5e9VOr/4Ln/+Fv/qclj7H/iqPf/59z/YVjnTygmTiy2rt2yZVND39vyYWPf277/bJj+T/z6f8T+55X/P2D56+7SF+QD+9+886sfKfV/76RVD/SfmjjG/ieN1n/na58XiDDO+/+6is2Q/ttf/c66Uv9/euX4of5TY/36f/Ko/e9y/4fxaGmt+As//2Ol/lf/6/Bwf05wEsIUf/4H6eTof+u0X3wzbh2m6h/SydH/0s1tkX/ZNvyf/iGdHP3/akfVkbh1OEP/kE6O/r/W/eDGuHWYpn9IJ0f/+2c/8lTcOvy//iGdHP0fXz/9qrh1qNM/pJOj/8u+tHd13DpM1z+kk6P/qlemPRG3DjP0D+nk6L++6uxPxa3D6/QP6eTo/7rOh1+MW4eZ+od0cvT/+Z2/jvw+nfB6/UM6Ofp/6o9bd8Stwyz9Qzo5+n9hVnt93DqcqX9IJ0f/99/wxCNx6/AG/UM6Ofp/+lsfPBa3DkH/kE6O/r/x7JE1ceswW/+QTo7+9y089oe4dThL/5BOjv7//dGrPxC3Dm/UP6STo/+wf/l349bhbP1DOjn6v+LJuxri1mGO/iGdHP13rrjtzrh1OEf/kE6O/puaF86OW4dz9Q/p5Oh/xp//fnfcOszVP6STo/+P3ffeyn/3+ySF8/QP6eTo/+YNqx+NW4fz9Q/p5Oh/5YyeC+LWYZ7+IZ0c/R8+et+P4tZhvv4hnRz9333nkivi1uFN+od0cvT/g1vP645bhzfrH9LJ0f/LtXfcGrcOC/QP6eTo/8s/q1kWtw4L9Q/p5Oj/xw99f1fcOrxF/5BOjv5ffN9j58StwwX6h3Ry9L/74llfjFuHt+of0snR/7uf2bg+bh0W6R/SydH/5L2/Pxq3DvX6h3Ry9D9/1cEPxa3DhfqHdHL0v2HRmt/FrcNi/UM6Ofp/5sDTh+LWYYn+IZ0c/e947NPNcevQoH9IJ0f/j1/W8Z+4dWjUP6STo/9/Nv3k43HrsFT/kE6O/s889O0vxK1Dk/4hnRz9X/3g5Jlx63CR/iGdHP1vvGb29+LWYZn+IZ0c/V8y96FL49bhbfqHdHL0/56/rrg5bh0u1j+kk6P/unvueS5uHZbrH9LJ0f+8a2+/Jm4dLtE/pJOj/+vn1D8Ztw6X6h/SydH/HcdbFsStwwr9Qzo5+u+67fl9ceuwUv+QTo7+uz/5cl3cOrxd/5BOjv73Trny3rh1eIf+AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOC/7MCBAAAAAACQ/2sjVFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWEHDmQAAAAAhPlb59F+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAnwIAAP//r0PLXg==")
r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000500)='cpuacct.stat\x00', 0x275a, 0x0)
r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.numa_stat\x00', 0x275a, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r8, 0x8004587d, &(0x7f00000003c0)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0)
syz_mount_image$hfs(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="6362656c616e642c696463686172f365743d6370316c0bdebc7b56653235352c00"/45], 0x7, 0x358, &(0x7f0000000100)="$eJzs3U9P1EwcB/DvtPun+0B4+gBPSDwZlMQTATxovEgM8eIb8GAICEskVEwAEyUxomdjvJmYePTm2ehb0IvxDeiJg/GkF+LBmplOt9Mys7slwLr4/STu1tn585t2pu0sgYKI/lpX5j6/Or8r/4kqAB/ApQAegACoAPgfY8Hd9a2OFfmtLYGkpNiXZ2m9aSsaQJfQQvm/CgbNNDoacRzHXzrm+q7fgyOPh3pDmDPY4AF1PTvV5ydlBOwk/ep/wnKSjB15jSMs9rCHexg6sriIiKgv6Ou/p68Sg/r+3fOACX0f3u/X/9z9zV7v4ui9BeP67yVJsZD751+5KeR6b3Urai4nSzh59L10lWirzjom4mx315CMLH+g7rUSjVbsVCxeY2U1ak7uqAoe47JmZBtVr8uAZyS6oq0lb+OWtWkb7fre3oDqQ1X2YcYR/0i7Fq0L4Hdf8dze3PyHLmIS78VHMS9CvMBydv9n7L2wMFWS+KfcNapehkmuXC+z8P+TL5VT6RF4+zrrZcO1XwP4MhYbWYso3r+HaZzPau5SGEb+a4Wkd9Pu3qlSI0BFqFWDWWqmlemntdRosa3GSjVqTi7diVyD/nBZV3TiqbguxvENbzBn3P97MvcE3DMzN8uFyqlHRr4/hbNBReV0HMccNQRvl5qZpFy1Huj2nuAmLmJo8/722mIUNTd6v5FOlQMWP33I8SQDUQ9HmSLfjTwI5EYVwL7is/aaPRRT5ELdSPkVx7E1ngq6itnPR1h2o6q6euFl1uXttUWhz3n5zOkk77YJeeZsbmymVxn50aw7M4BZADpFlGzL3HjYKlXPKuyq+A+5L1WKfUCmUR3DBEmbyn3koy4Du9WpeOMAjV57sLYYlT+lUP/JDjrGbvQ6GOoFeVIWyfrPWK9MqbOOfAmz9U+1WNb1TXOLUeO0YwU0rF7/6W4F16rWeZ84kG50WHOdOQecLbToIW3xUbHaUMeJP/GnkuV/lCHm8AkL/P6fiIiIiIiIiIiIiIiIiIiIiIiIiKjflP1thIP8OkG+xd0T8oc3iIiIiIiIiIiIiIiIiIiIiIiIiIiIiIiOj/H8X8BXT4ypwfL8X/uTmow/he0nT34JDuP5v34Xz/8VOyV7SkRFvwMAAP//aBJVLA==")
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x400800, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0)

13.100766766s ago: executing program 5 (id=1620):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000fc0), 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x44, 0x0, &(0x7f0000000500)=[@reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

12.856775433s ago: executing program 5 (id=1623):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x200000, &(0x7f0000000a40)={[{@minixdf}, {}, {@barrier_val={'barrier', 0x3d, 0x1ff}}, {@data_err_abort}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@grpquota}, {@nodelalloc}, {@noblock_validity}, {@nobh}]}, 0x0, 0x56f, &(0x7f0000000b00)="$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")
syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x3024814, &(0x7f0000002440)=ANY=[], 0x1, 0xc1b, &(0x7f0000001580)="$eJzs3U9sHNd9OPDvG5IiJf+Q7M+xZCc1grULOKrSqCQVWzYYoFbNEk2j2KwpJm3dg1cipW5FkQuScmQjTdSTDy1QNgV6aQoUKFIYPQQsihyaU4oW6JUocisKqGnquigK7CFGLoVZzOxbcflHFiuKomR9PoD0nZ35vpk3741mZuftQAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAARPzSL58ZHkkHXQsA4F56eerV4VHXfwB4qJzz/R8AAAAAAAAAAAAAAO53KYp4L1J87cl2er363DF0tjl/9dr0+MTOxQ6nqmRflV/+GRoZPfX5Z587/Xw3fnj5u+2T8crUuTP1lxautBZnl5ZmZ+rT880LCzOzu17DXstvdaJqgPqVy1dnLl5cqo+ePLVp8bXau4OPHKuNnR557Wg3d3p8YmKqJ6d/4I63vs2t3vA4FEVcjBSX33kvNSKiiL23xYcfO39/h3uwa4ernThR7cT0+ES1I3PNxvxyuXCy2xBFRK2n0IvdNroHfbEn9YjrZfXLCp8od2+q1VhsnJ+brU82Fpeby82F+cnUqW2q0ot4PkW0IqI9uH11A1HENyLF299up/MR0ddth89WLwbfvj7FPuzjLvRHRG0gYq14APrsPjYYRXw3Unzrm8NxIbdr1WzPRHy5jMcirpbxRsRKGT8dkcoD5LGI93c4nniw9EcRvx8pfjLWTjPdvq/OK2e/Uv/i/MWFntzueWV/rw/77vA93dp9fm4aiiIa1Rm/ne78ZgcAAAAAgPtPEX8UKZ764fHUit4xxeb8pfq5xvm5zlPh7rP/ei61vr6+XkudOJzjZI6tHFdyXM1xrYyxsYJakcvnOJljK8eVHFdzXMuxnWOtL5fPcTLHVo4rOa7muJZjO8dafy6f42R/VbPrrfx5JcfVHNdybPcfRD8BAAAAAAAAwK0NRBFfjRTP/MIb1XvFUb2X/vGx06+e/NXed8afuM16ytyTEbFa7O6d3EP51eHJNJnSAb1DTOf9v9/N7//93kFXBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOFBFFPF0pHjje+0UKSLqEa9HJ94YPOjaAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAd8NQKuL9SPEnXxqqPq8VEb8ZER+sf7AeETc+WL/bDnqPAQAAAAAAAOAjKBXxZqR4+tV2qkXEtdq7g48cq42dHnntaF/0RSpTevNfmTp3pv7SwpXW4uzS0uxMfXq+eWFhZna3mxs625y/em16fGJfdua2Du9z/Q8PvbTQenOxeem3l3dcfmTozPml5cXGhZ0Xx+EoIuq9c05UFZ4en6gqPddszFdFJ9NuawwAAAAAAADAw2AgFfFBpHj7L9+5Oe7c3xnz79+a+50vRBR5ejyPP98chq5+N/Cx6ncDnemPj53+tdFP9U7vOGR9ohpQr0+PT0xM9czuH9ieOpS3O7y3XaZH2f/LkeIP/qyensrzNvd/383c73x9o7+vb13RLfr8/9D/m3q82///v2deuc2UivjrSPEzv/5EPFXV80hs+81EzvtSpPiN1SdzXhwq857Oyx+t/h662JybHS5zr0WKv7u6OfeZnPuJjdyR3bbrg6Ls/6cjxX/91urNtsn9n3tgo9d6+/9TW4+Ovff/jv/+H+2ZV8vb/dm7s+tExNKbb11uzM3NLj6ME333RzVMmNh5Iq4f3NYP+szEvVBe/78aKb7/x/98834nX///X1S3VRv3fz/9xsb1f2zrivbp+v+Jnnlj+W5koD9iaPlKa+DxiKGlN9/6XPNK49Lspdn5U6dfeG50+IWR4VMDh7o3dxtTW7e87fvNw6js/9+JFN/90V/FZ/K8zfd/O9//H9m6on3q/8d65h3ZdL+y510n9///RIp/HP9BHM/ztt3/f3+wM/n1je//x/NN+M37833q/6M986rveB+L+LmeecePRnzkvpQBAADAXZZSET/I46nDtxlP/YdI8dZ//nzOS8fKvBfz8lr199DLC/OfOzM3t3Chsdw4Pzdbn2o1LsyWZX8cKdp/8WQuW1Tjq93x5s4Y78ZY7D9Fihd+pZvbGYvtPpt6bCN3pMw9GSn+8OXNud3nGEc3ckfL3H+JFCOv7Zx7bCP3VJn7H5Hip39a7+YeKXO/kHMf38g9eWFhbmYfugUAAAAAAPZkIBXxXKT421P9qft8eze//9z20Huffv/3eM+8mXv0vsqeGxUA7nPl9f94eVX/xT+/OZa/+fq/8Z5M7/V/q97/N+BW03dy/a/dnd0EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeOikKGIhUnztyXa6MVh+7hg625y/em16fGLnYodTVbKvyi//DI2Mnvr8s8+dfr4bP7z83fbJeGXq3Jn6SwtXWouzS0uzM/Xp+eaFhZnZXa9hr+W3OlE1QP3K5aszFy9GjJ48tWnxtdq7g48cq42dHnntaDd3enxiYqonp3/gjre+Tbdfiy3zD0UR/x0pLr/zXvrXwbx8j21xm2Nnvx2OIv4mIsqdmB6fqHZkrtmYXy4XTvY0RK2n0IvdNroHfbEn9YjrZfXLCp8od2+q1VhsnJ+brU82Fpeby82F+cnUqW2q0ot4PkW0IqI9uH11A1HEQKR4+9vt9KPBiL5uO3z25alXh0dvUYmhjcmtB9Q90h8RtYGIteIB6LP72GAU8Wyk+NY3h+PfBjvtWjXbMxFfLuOxiKtlvBGxUsZPR6TyAHks4v0djiceLP1RxKOR4idj7fTjwdz31Xnl7FfqX5y/uNCT2z2vPPDXh3vpPj83DUUR71Vn/Hb6d/+eAQAAAAA+Qop4IlI89cPjqRofvDmm2Jy/VD/XOD/XeazfffZfz6XW19fXa6kTh3OczLGV40qOqzmu5djOsVbk8jlO5tjKcSXH1RzXcmznWOvL5XOczLGV40qOqzmu5djOsdafy+c4mWMrx5UcV3Ncy7Hdf5D9BQAAAAAAALCzIor4TKR443vttD7YGeB9PTrxhveBPvL+NwAA///HVFJS")
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000180)=[{0x6, 0x2}]}, 0x10)
sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0xc, 0x82)
ioctl$USBDEVFS_CLAIM_PORT(r2, 0x80045518, &(0x7f0000000480)=0x1)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000002c0), &(0x7f00000003c0)=ANY=[], 0x361, 0x0)
lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f0000000500)={{}, {}, [{}, {}, {}, {}, {}], {}, [{}, {}]}, 0x5c, 0x0)
stat(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, <r3=>0x0, <r4=>0x0})
lsetxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="020000000100b6170000000002000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=r3, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="0400000000000ffe0801047178895569aa9b986d90fc8a0deb25c2d32cbcb9e576d8b3a3503e32fd8e6d894ea2e4ca2d7de943e8966700f1a7ce5cae93446fe661d0232def3cb35e19290000", @ANYRES32=r4, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="10000700000000002000000000000000"], 0x5c, 0x0)
syz_open_dev$tty20(0xc, 0x4, 0x0)
r5 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10)
connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
sendto$inet(r5, &(0x7f0000000000)='%', 0x1, 0x4004001, 0x0, 0x0)
fcntl$setown(r5, 0x8, 0xffffffffffffffff)
sendmmsg$inet(r5, &(0x7f000000a2c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000480)="9a", 0x1}], 0x1}}], 0x1, 0x40805)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r6, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8)
setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r6, 0x84, 0x16, 0x0, 0x0)

10.211527924s ago: executing program 2 (id=1628):
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200"/56, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00'/40], 0xfc}}, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
sendmmsg(r0, &(0x7f0000000480), 0x21, 0x0)

10.102527096s ago: executing program 4 (id=1629):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_mr_cache\x00')
preadv2(r1, &(0x7f00000030c0)=[{&(0x7f0000000000)=""/51, 0x33}], 0x1, 0x0, 0x0, 0x0)
lseek(r1, 0x2000000, 0x0)
ioctl$int_in(r0, 0x5452, &(0x7f00000001c0)=0x6)
arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0xa)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10)
sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x241)

10.070586284s ago: executing program 3 (id=1630):
umount2(&(0x7f00000001c0)='./file0\x00', 0x1)
uname(0x0)
uname(&(0x7f0000000100)=""/181)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
r7 = getpgrp(0x0)
getpid()
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0)
r8 = syz_pidfd_open(r7, 0x0)
pidfd_send_signal(r8, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010010000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000048000000160a0100000000000000001f010000000900010073797a30000000000900020073797a30000000001c000380080001400000000008000240000abf00080002400000000138000000160a0101000b00000000000001000000"], 0xe4}}, 0x0)

9.928163895s ago: executing program 5 (id=1631):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000000500)=@framed={{0x18, 0x8, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0xfffffffd}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socket$can_raw(0x1d, 0x3, 0x1)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r0 = socket$inet(0x2, 0x3, 0x2)
socket$kcm(0x10, 0x2, 0x4)
socket$igmp(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc)
setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00'})
close(r0)
sendmsg$nl_route(r1, 0x0, 0x20008040)

8.892872942s ago: executing program 4 (id=1632):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000300)=""/26, &(0x7f0000000340)=0x1a)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000400)='sys_exit\x00', r0}, 0x10)
clock_gettime(0x0, 0x0)
fsopen(&(0x7f0000005880)='zonefs\x00', 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000071123b000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000040)='cgroup.threads\x00', 0x2, 0x0)
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000002c0)={<r6=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r5, 0x0, 0x0)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r5, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x40000, @loopback}, {0xa, 0x0, 0x0, @remote}, r6}}, 0x48)

8.892202069s ago: executing program 3 (id=1633):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

8.832306234s ago: executing program 5 (id=1634):
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x2000400, &(0x7f00000000c0)=ANY=[], 0x6, 0x6c5, &(0x7f0000000940)="$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")
syz_emit_ethernet(0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000480), 0xf2ef, 0x0)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000100)={&(0x7f0000000180)="4185768b1c2f94f9ea405a0f05005021c33e", 0x42, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000200)={&(0x7f00000001c0)=[r2], 0x1, 0x80800})
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8)
write$UHID_CREATE2(0xffffffffffffffff, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a00000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119)
socket$alg(0x26, 0x5, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0xff, 0x0, 0x7fff7ffc}]})
syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042)
close_range(r3, 0xffffffffffffffff, 0x0)

8.831745754s ago: executing program 2 (id=1635):
socket$packet(0x11, 0x3, 0x300)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18)
r3 = accept4(r2, 0x0, 0x0, 0x0)
recvmmsg(r3, &(0x7f0000001fc0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000300)=""/96, 0x60}], 0x1}, 0xc}, {{0x0, 0x0, 0x0}, 0x9}, {{&(0x7f0000000380)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000800)=""/213, 0xd5}, {0x0}], 0x2}, 0x7e0}], 0x3, 0x60002000, 0x0) (fail_nth: 1)
sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000007640)=ANY=[], 0x3aa0}}, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
openat$audio(0xffffffffffffff9c, 0x0, 0x9e966e64318092aa, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0)
socket$nl_route(0x10, 0x3, 0x0)

8.551616621s ago: executing program 3 (id=1636):
syz_emit_ethernet(0x166, &(0x7f00000002c0)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x130, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x18, 0x18, "00540200a600828dadce42ce3d02d319e0cabb0171499f7642598cf1a1d40ca51300988c260ed2c4af88bdac1fc3925f5acb8e09cece04229969a0aee0537e1cc71b3009ab18767945d27594b37cd8abb99636a90bca4c54c3ce345b74a5344d2cdda99627bb20ea64b77b50c6dd7ac0ce2c39bcfef13daaef4db59a4483f2894602231daf4f31b82654278904b95919abbb34b324bdfc5ea17efe35444c3cc8f5cb729268ea2d5032fee7123364eac506f32a93621cf58e9f47d53114fb"}, {0x18, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af1802"}, {0x0, 0x1, "005ff9297d00001392000100"}]}}}}}}, 0x0)

7.777227952s ago: executing program 4 (id=1638):
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket$kcm(0x29, 0x2, 0x0)
r4 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0)
r5 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_INIT(r5, 0x29, 0xc8, 0x0, 0x0)
setsockopt$MRT6_FLUSH(r5, 0x29, 0xd4, 0x0, 0x0)
pwritev(r4, &(0x7f0000000040)=[{&(0x7f0000000480)="db", 0x1}], 0x1, 0x4000001, 0x0)
sendfile(r3, r4, 0x0, 0x8000fb00)
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0)

7.506272191s ago: executing program 3 (id=1639):
r0 = socket(0x2a, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
syz_usb_connect(0x5, 0x0, 0x0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0})
open(&(0x7f0000000280)='./file0\x00', 0x200000, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
socket$unix(0x1, 0x1, 0x0)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001040)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x1001}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x2, 0x0, 0x0, 0x0, 0x61, 0x11, 0x2c}, [@ldst={0x5, 0x0, 0x4, 0x0, 0x0, 0x0, 0xab}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x16, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x21)
r5 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@delqdisc={0x2c, 0x25, 0x800, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x10}, {0x0, 0x5}, {0xfff1, 0x8}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x874}, 0x12000090)
getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB="44000000100001042abd70000000000000000000", @ANYRES32=r6, @ANYBLOB="28800100000000000500110001000000140003006272696467655f736c4176655f30"], 0x44}, 0x1, 0x0, 0x0, 0x48010}, 0x0)
bind$l2tp6(r5, &(0x7f0000000140)={0xa, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x4, 0x4}, 0x20)

7.502658871s ago: executing program 5 (id=1640):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x8c}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x90, 0x0, @void, @value}, 0x80)

6.441392094s ago: executing program 4 (id=1641):
socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000240)={0x3, 0x4, 0x3, 0x6}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
connect$unix(r2, 0x0, 0x0)
sendmmsg$unix(r3, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x0, 0x10023, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
r4 = syz_open_dev$radio(&(0x7f0000000040), 0x3, 0x2)
ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r4, 0xc040564a, &(0x7f0000000300)={0x88fc, 0x0, 0x3017, 0x0, 0x0, 0x2, 0xff, 0x1})
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x303}, "41328ac34a4ad2ba", "e8582491a0c4050000000000f6542a9b6800000000000000003967d2daa45b4e", "61241765", "89b06aff130000fd"}, 0x38)
pipe2$9p(&(0x7f00000001c0)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r6, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15)
r7 = dup(r6)
write$FUSE_BMAP(r7, &(0x7f0000000000)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r7, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0)
write$FUSE_GETXATTR(r7, &(0x7f00000000c0)={0x18}, 0x18)
r8 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB="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", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r8, &(0x7f00000021c0)={0x2020, 0x0, <r9=>0x0}, 0x2020)
write$FUSE_INIT(r7, &(0x7f0000000200)={0x50, 0x0, r9, {0x7, 0x29, 0x20200}}, 0x50)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@cache_fscache}]}})
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)

4.108104102s ago: executing program 5 (id=1642):
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SNDCTL_DSP_RESET(0xffffffffffffffff, 0x5000, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f00000003c0)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578ac0109029c"], 0x0)
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r0, 0x0, 0x0)
syz_open_dev$vcsu(0x0, 0x9, 0x2000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6)
r1 = getpid()
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x1)
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0xfffffffffffffc33, &(0x7f0000000280)=0x2)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0xffffff5b)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0100000005000000fd0900008400000005010000", @ANYRES32, @ANYBLOB="0000008c92c000"/23, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r4}, 0x38)
bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, &(0x7f0000000840)=""/121, 0x0, &(0x7f0000000540), 0x6c, r4}, 0x38)
bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280\x00'}, 0x58)
r5 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
bind$bt_hci(r5, &(0x7f0000000000)={0x27}, 0x62)
listen(r5, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="b70500000000000061106a00000000009500000000000000556af1953d62ebbb7de5c56d778aceada06469b9c2b9d22cfd0b6d4e1f8310fecaac71a3564d351c7e056c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r6 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1)
bind$bt_hci(r6, &(0x7f0000000000)={0x27}, 0x74)

3.373608684s ago: executing program 3 (id=1643):
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x1, 0x803, 0x0)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, 0x0, 0x0)
prctl$PR_SET_MM(0x23, 0x3, &(0x7f0000ffb000/0x2000)=nil)
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
sendmsg$nl_route_sched(r0, 0x0, 0x4000004)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$sndmidi(0x0, 0x3ff, 0x191000)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x20a000, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r5 = dup(r4)
write$6lowpan_enable(r5, &(0x7f0000000000)='0', 0xfffffd2c)
shmctl$SHM_INFO(0x0, 0xe, 0x0)
r6 = syz_io_uring_setup(0x110d, &(0x7f00000003c0)={0x0, 0x80d5, 0x0, 0x0, 0x40000000}, 0x0, &(0x7f0000000280))
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x3, &(0x7f0000000040)=[{0x35, 0x0, 0x1, 0xffffffff}, {0x5}, {0x6, 0x2c}]})
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4)
r7 = openat$udambuf(0xffffffffffffff9c, 0x0, 0x2)
ftruncate(0xffffffffffffffff, 0xffff)
fcntl$addseals(0xffffffffffffffff, 0x409, 0x7)
r8 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r8, 0x0, 0xca, &(0x7f0000000340)={0x0, 0x4, 0x6, 0x3, @vifc_lcl_addr=@private=0xa010102, @private=0xa010102}, 0x10)
ioctl$SIOCGETMIFCNT_IN6(r8, 0x89e0, &(0x7f0000000000))
ioctl$UDMABUF_CREATE(r7, 0x40187542, 0x0)
io_uring_enter(r6, 0x3f72, 0x74f1, 0x0, 0x0, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000100)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
mq_notify(0xffffffffffffffff, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4242}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}, @IFLA_VLAN_EGRESS_QOS={0x4}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x600}, 0x0)

3.288598951s ago: executing program 4 (id=1644):
umount2(&(0x7f00000001c0)='./file0\x00', 0x1)
uname(0x0)
uname(&(0x7f0000000100)=""/181)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0)
r7 = getpgrp(0x0)
getpid()
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0)
r8 = syz_pidfd_open(r7, 0x0)
pidfd_send_signal(r8, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a00)=ANY=[@ANYBLOB="140000001000010010000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000048000000160a0100000000000000001f010000000900010073797a30000000000900020073797a30000000001c000380080001400000000008000240000abf00080002400000000138000000160a0101000b000000000000010000"], 0xe4}}, 0x0)

3.169190385s ago: executing program 0 (id=1645):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x3, &(0x7f0000000500)=@framed={{0x18, 0x8, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0xfffffffd}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socket$can_raw(0x1d, 0x3, 0x1)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
r0 = socket$inet(0x2, 0x3, 0x2)
socket$kcm(0x10, 0x2, 0x4)
socket$igmp(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc)
setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00'})
close(r0)
sendmsg$nl_route(r1, 0x0, 0x20008040)

3.088309659s ago: executing program 2 (id=1646):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

1.992502742s ago: executing program 0 (id=1647):
r0 = syz_open_dev$loop(&(0x7f0000000600), 0x6, 0x4000)
fremovexattr(r0, &(0x7f0000000180)=@known='trusted.overlay.nlink\x00')
pipe(&(0x7f0000000b40))
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000003180)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf84, 0x3}, 0x1c)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10)
connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10)
sendmmsg(r2, &(0x7f0000007fc0), 0x2d, 0x0)
syz_emit_ethernet(0x42, &(0x7f00000004c0)={@remote, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@arp={0x806, @ether_ipv6={0x1, 0x86dd, 0x6, 0x10, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @mcast1, @broadcast, @local}}}}, 0x0)

1.939778449s ago: executing program 2 (id=1648):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000380)='numa_maps\x00')
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
socket$key(0xf, 0x3, 0x2)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x670, 0x5, 0x488, 0xf8, 0x220, 0xfeffffff, 0x0, 0x220, 0x3f0, 0x3f0, 0xffffffff, 0x3f0, 0x3f0, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0xffffffff, 0x0, 'veth0_to_bond\x00', 'caif0\x00', {}, {}, 0x6}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x4, 0x10}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x0, 0x0, 0x6]}}}, @common=@set={{0x40}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0xc, @local, @multicast2, @icmp_id=0x67, @gre_key=0x8001}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0xc0, 0xf8, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x2, 0x5, [0x4e24, 0x4e23, 0x4e24, 0x4e21, 0x4e26, 0x4e23, 0x4e21, 0x4e20, 0x4e20, 0x4e23, 0x4e21, 0x4e24, 0x4e21, 0x4e23], [0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0xff, 0x1]}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id}}}}, {{@ip={@broadcast, @broadcast, 0x0, 0xffffffff, 'pim6reg0\x00', 'wlan0\x00', {0xff}}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv4=@dev, @port, @gre_key}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4e8)
r2 = syz_mount_image$btrfs(&(0x7f0000000200), &(0x7f0000005600)='./file0\x00', 0x800, &(0x7f0000000740), 0x0, 0x559e, &(0x7f0000005680)="$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")
getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0xce, &(0x7f0000000000), &(0x7f00000000c0)=0x4)
ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r2, 0x4008941a, &(0x7f0000000080)=0x2)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
ioctl$BTRFS_IOC_SEND(r2, 0x40489426, &(0x7f00000000c0)={{}, 0x0, 0x0})
lseek(r0, 0x1000000, 0x2)

1.913802196s ago: executing program 4 (id=1649):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000001600), 0x0, 0x559e, &(0x7f0000005680)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xb635773f04ebbeec, 0x10, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
r4 = gettid()
sched_getparam(r4, &(0x7f0000000080))
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)={0x14, 0x25, 0x1, 0x70bd27, 0x25dfdbfc, {0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x40000)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_FLOW={0x8, 0xb, 0xf3}]}, 0x24}}, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15)
r8 = dup(0xffffffffffffffff)
write$FUSE_BMAP(r8, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r8, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX, @ANYBLOB=',wfdno=', @ANYRESHEX=r8])
keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, r8, 0x66)
sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x1c}}, 0x0)
r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r0)
sendmsg$NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r9, 0x30d}, 0x14}, 0x1, 0x2000000}, 0x0)
syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000200), r0)

1.80817836s ago: executing program 0 (id=1650):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x40800, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000080)={0x4e00, 0x0, 0x0, 0xbdff, 0x0, "fdffffffffffffff"})
ioctl$KVM_GET_PIT2(r2, 0x4020aeb2, &(0x7f0000000080))
r3 = dup(r0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x95df, @void, @value}, 0x94)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000e00)={&(0x7f0000000980)='sys_exit\x00', r4}, 0x10)
setresgid(0x0, 0x0, 0x0)
ioctl$TIOCL_SETSEL(r3, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0xa00, 0x0, 0x101, 0x100}})
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0xb, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x48, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8}, @TCA_SKBEDIT_PTYPE={0x6, 0x63}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0x60}}}}]}]}, 0x70}}, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e)

1.618788833s ago: executing program 0 (id=1651):
r0 = socket$inet_dccp(0x2, 0x6, 0x0)
getsockopt$inet_int(r0, 0x10d, 0xc5, &(0x7f0000000940), &(0x7f0000000080)=0x58)

1.375701838s ago: executing program 0 (id=1652):
r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84) (async)
r2 = socket(0x2, 0x80805, 0x0) (async)
ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000040)={0x4, <r3=>0x0, 0x2})
ioctl$DRM_IOCTL_AGP_UNBIND(r0, 0x40106437, &(0x7f00000000c0)={r3, 0x1200000}) (async, rerun: 32)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) (async, rerun: 32)
getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r4=>0x0}, &(0x7f0000001080)=0x8)
r5 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x101042)
writev(r5, &(0x7f0000003600)=[{0x0, 0xf5}, {&(0x7f00000000c0)="d6", 0x1}], 0x2)
r6 = socket$can_j1939(0x1d, 0x2, 0x7) (async)
r7 = eventfd2(0x9, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0) (async)
r9 = dup3(r0, r7, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r9, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) (async)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4)
ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000000)={'vcan0\x00', <r10=>0x0})
bind$can_j1939(0xffffffffffffffff, &(0x7f0000000240)={0x1d, r10, 0x0, {0x0, 0xff}}, 0x18)
sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(r9, &(0x7f000009de80)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[], 0x4c}}, 0x0) (async, rerun: 32)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000009c0)={'vcan0\x00', <r11=>0x0}) (async, rerun: 32)
r12 = socket$can_j1939(0x1d, 0x2, 0x7)
bind$can_j1939(r12, &(0x7f0000000080)={0x1d, r11, 0x0, {0x0, 0xf0}}, 0x18)
sendmsg$can_j1939(r12, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {}, 0xfe}, 0x18, &(0x7f0000000180)={&(0x7f00000005c0)="8021fd38ece7021d70", 0x9}, 0x1, 0x0, 0x0, 0x4}, 0x0)
setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000000)={0xfffc, 0xa, 0x0, 0xffffff49, 0x0, 0x6c0e4b02, 0x2, 0x1, r4}, 0x20) (async)
r13 = socket$inet6_sctp(0xa, 0x1, 0x84) (async)
r14 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r14, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e22, @broadcast}]}, &(0x7f00000002c0)=0x10)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r14, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r15=>0x0}, &(0x7f0000000300)=0x8)
getsockopt$inet_sctp6_SCTP_RTOINFO(r13, 0x84, 0x0, &(0x7f0000001000)={r15, 0x7, 0x0, 0x6}, &(0x7f0000000200)=0x10) (async)
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3014850, &(0x7f00000001c0)={[{@quota}, {@barrier_val={'barrier', 0x3d, 0x1000}}, {@grpjquota}, {@norecovery}, {@dioread_lock}]}, 0x3, 0x4d1, &(0x7f0000000b80)="$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") (async)
socket$unix(0x1, 0x1, 0x0)

1.272217736s ago: executing program 3 (id=1653):
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00008, 0x0, 0x50032, 0xffffffffffffffff, 0x0)
socket$inet6_sctp(0xa, 0x801, 0x84)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001700)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10)
syz_emit_ethernet(0x6a, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x10, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0xfffd, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "6d4dfdeb8cf7bbfe143803bec2ce783e04cd32308cdd8dde", "c71cb8adfce542a4bc5a026c208fd0c45787e4aa384e3d26b21ea41cc128364c"}}}}}}, 0x0)
bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xa00, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)
r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xe501, 0x3, 0x470, 0x300, 0x6affffff, 0x3403000b, 0x0, 0x7, 0x3d8, 0x230, 0x230, 0x3d8, 0x223, 0x3, 0x0, {[{{@ip={@remote, @private=0xa010102, 0x0, 0xffffff00, 'veth1_macvtap\x00', 'veth1_to_team\x00', {}, {}, 0x1}, 0x0, 0x2d8, 0x300, 0x0, {0x1000000}, [@common=@unspec=@bpf0={{0x230}, {0x1, [{0x6}, {}, {}, {0x0, 0xff}, {0x0, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x5}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {0x1}, {}, {0x8b6}, {}, {0x8000}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x3}, {0x0, 0x0, 0x0, 0x400}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {0x0, 0x0, 0x91}, {}, {0xb}]}}, @common=@unspec=@time={{0x38}, {0xfffffffc}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0x2}}}, {{@ip={@private=0xa010100, @empty, 0xffffff00, 0xff, 'syzkaller1\x00', 'veth0_to_bridge\x00', {}, {}, 0x88, 0x3, 0x8}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4d0)

0s ago: executing program 0 (id=1654):
r0 = socket(0x10, 0x803, 0x0)
r1 = io_uring_setup(0x2f85, &(0x7f0000000080)={0x0, 0x4fa3, 0x4000, 0x1, 0x32})
r2 = socket$kcm(0x2, 0x5, 0x84)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018"], 0x0, 0x32, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20)
setsockopt$sock_attach_bpf(r2, 0x84, 0x10, &(0x7f0000000000), 0xc)
io_uring_setup(0x4d63, &(0x7f0000000100)={0x0, 0x1989, 0x303, 0x3, 0x222, 0x0, r1})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB="540000001400b5950000", @ANYRES32, @ANYBLOB="14000200"], 0x54}}, 0x0)

kernel console output (not intermixed with test programs):

ged:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  567.930532][T12973] lowmem_reserve[]: 0 2491 2492 0 0
[  567.937687][T12973] Node 0 DMA32 free:1366456kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB active_anon:14504kB inactive_anon:0kB active_file:71976kB inactive_file:153252kB unevictable:1536kB writepending:772kB present:3129332kB managed:2551340kB mlocked:0kB bounce:0kB free_pcp:21616kB local_pcp:20388kB free_cma:0kB
[  567.987049][T12973] lowmem_reserve[]: 0 0 0 0 0
[  567.998313][T12972] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback.
[  567.999366][T12973] Node 0 
[  568.030587][ T5945] usb 4-1: config 0 descriptor??
[  568.038698][T12973] Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:576kB unevictable:0kB writepending:0kB present:1048580kB managed:620kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB
[  568.343245][T12972] EXT4-fs: Ignoring removed orlov option
[  568.349297][T12972] EXT4-fs: Remounting file system with no journal so ignoring journalled data option
[  568.352528][T12973] lowmem_reserve[]: 0 0 0 0 0
[  568.372191][T12972] EXT4-fs error (device loop1): __ext4_remount:6738: comm syz.1.1292: Abort forced by user
[  568.384015][T12972] EXT4-fs (loop1): Remounting filesystem read-only
[  568.427071][T12972] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-001000000000 r/w. Quota mode: writeback.
[  568.516588][T12973] Node 1 Normal free:3905608kB boost:0kB min:55708kB low:69632kB high:83556kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:2048kB local_pcp:0kB free_cma:0kB
[  568.648658][T12973] lowmem_reserve[]: 0 0 0 0 0
[  568.691482][T12973] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  568.814127][T12973] Node 0 DMA32: 983*4kB (UME) 1044*8kB (UME) 648*16kB (UME) 339*32kB (UME) 515*64kB (UME) 354*128kB (UME) 160*256kB (UME) 42*512kB (UME) 23*1024kB (UME) 8*2048kB (UME) 283*4096kB (UM) = 1373340kB
[  569.017112][T12973] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  569.046299][T12973] Node 1 Normal: 228*4kB (U) 57*8kB (UME) 45*16kB (UME) 243*32kB (UME) 97*64kB (UME) 39*128kB (UME) 14*256kB (UME) 8*512kB (UM) 4*1024kB (UME) 5*2048kB (UME) 943*4096kB (M) = 3905608kB
[  569.097620][T12973] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  569.135540][T12973] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB
[  569.165599][T12973] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  569.192948][T12973] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  569.223084][T12973] 59468 total pagecache pages
[  569.233270][T12973] 0 pages in swap cache
[  569.248639][T12973] Free swap  = 124748kB
[  569.276312][T12973] Total swap = 124996kB
[  569.290067][ T5945] usb 4-1: USB disconnect, device number 7
[  569.297649][T12973] 2097051 pages RAM
[  569.346270][T12973] 0 pages HighMem/MovableOnly
[  569.351081][T12973] 427430 pages reserved
[  569.356440][T12973] 0 pages cma reserved
[  569.565427][T12991] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1297'.
[  569.575471][T12991] netlink: 'syz.4.1297': attribute type 3 has an invalid length.
[  570.160533][T13002] loop4: detected capacity change from 0 to 512
[  570.732138][T13002] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  570.806596][T13002] EXT4-fs (loop4): invalid journal inode
[  570.812857][T13002] EXT4-fs (loop4): can't get journal size
[  570.955114][T13002] EXT4-fs (loop4): 1 truncate cleaned up
[  570.961709][T13002] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  571.055995][T10355] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-001000000000.
[  571.101840][T13008] EXT4-fs (loop4): shut down requested (2)
[  571.109342][   T29] audit: type=1800 audit(1736674120.100:20): pid=13002 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1299" name="bus" dev="loop4" ino=18 res=0 errno=0
[  571.329053][   T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  571.475145][   T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  571.665646][   T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  571.863646][   T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  572.228576][   T11] bridge_slave_1: left allmulticast mode
[  572.248157][   T11] bridge_slave_1: left promiscuous mode
[  572.266629][   T11] bridge0: port 2(bridge_slave_1) entered disabled state
[  572.303445][   T11] bridge_slave_0: left allmulticast mode
[  572.323027][   T11] bridge_slave_0: left promiscuous mode
[  573.157606][   T11] bridge0: port 1(bridge_slave_0) entered disabled state
[  573.204027][ T7495] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  573.228953][ T5835] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  573.243893][ T7495] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  573.253954][ T7495] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  573.261870][ T7495] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  573.272340][ T7495] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  573.279928][ T7495] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  573.901131][T13034] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1309'.
[  573.910562][T13034] netlink: 'syz.0.1309': attribute type 3 has an invalid length.
[  574.546827][   T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  574.560413][   T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  574.581375][   T11] bond0 (unregistering): Released all slaves
[  574.621731][T13019] lo speed is unknown, defaulting to 1000
[  574.851207][T13027] pim6reg1: entered allmulticast mode
[  574.935335][   T11] fώ: left promiscuous mode
[  575.061170][T13019] chnl_net:caif_netlink_parms(): no params data found
[  575.328642][ T5841] Bluetooth: hci4: command tx timeout
[  576.265349][T13019] bridge0: port 1(bridge_slave_0) entered blocking state
[  576.293494][T13019] bridge0: port 1(bridge_slave_0) entered disabled state
[  576.325414][T13019] bridge_slave_0: entered allmulticast mode
[  576.368256][T13019] bridge_slave_0: entered promiscuous mode
[  576.385514][T13019] bridge0: port 2(bridge_slave_1) entered blocking state
[  576.589098][T13019] bridge0: port 2(bridge_slave_1) entered disabled state
[  576.626475][T13019] bridge_slave_1: entered allmulticast mode
[  576.652088][T13019] bridge_slave_1: entered promiscuous mode
[  577.446273][ T5841] Bluetooth: hci4: command tx timeout
[  577.530177][T13077] loop0: detected capacity change from 0 to 256
[  577.548303][T13079] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1321'.
[  577.557742][T13079] netlink: 'syz.2.1321': attribute type 3 has an invalid length.
[  577.629426][T13077] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8
[  577.733088][T13080] loop4: detected capacity change from 0 to 512
[  577.743627][T13019] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  577.839114][   T11] hsr_slave_0: left promiscuous mode
[  577.844927][   T11] hsr_slave_1: left promiscuous mode
[  577.854663][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  577.897306][   T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[  577.917640][T13080] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  577.967241][   T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  577.973463][T13080] EXT4-fs (loop4): invalid journal inode
[  577.991585][   T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[  578.043533][T13080] EXT4-fs (loop4): can't get journal size
[  578.062541][   T11] veth1_macvtap: left promiscuous mode
[  578.072663][   T11] veth0_macvtap: left promiscuous mode
[  578.090142][T13080] EXT4-fs (loop4): 1 truncate cleaned up
[  578.097135][T13080] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  578.098064][   T11] veth1_vlan: left promiscuous mode
[  578.126393][   T11] veth0_vlan: left promiscuous mode
[  578.968053][T13093] FAULT_INJECTION: forcing a failure.
[  578.968053][T13093] name failslab, interval 1, probability 0, space 0, times 0
[  579.074953][T13093] CPU: 0 UID: 0 PID: 13093 Comm: syz.0.1324 Not tainted 6.13.0-rc6-next-20250107-syzkaller #0
[  579.074986][T13093] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  579.075000][T13093] Call Trace:
[  579.075008][T13093]  <TASK>
[  579.075018][T13093]  dump_stack_lvl+0x241/0x360
[  579.075040][T13093]  ? __pfx_dump_stack_lvl+0x10/0x10
[  579.075056][T13093]  ? __pfx__printk+0x10/0x10
[  579.075081][T13093]  ? kmem_cache_alloc_noprof+0x48/0x380
[  579.075097][T13093]  ? __pfx___might_resched+0x10/0x10
[  579.075118][T13093]  should_fail_ex+0x40a/0x550
[  579.075146][T13093]  should_failslab+0xac/0x100
[  579.075171][T13093]  ? security_file_alloc+0x32/0x310
[  579.075186][T13093]  kmem_cache_alloc_noprof+0x70/0x380
[  579.075204][T13093]  security_file_alloc+0x32/0x310
[  579.075220][T13093]  init_file+0x91/0x280
[  579.075238][T13093]  alloc_empty_file+0xb8/0x1d0
[  579.075257][T13093]  alloc_file_pseudo+0x1da/0x290
[  579.075275][T13093]  ? __pfx_alloc_file_pseudo+0x10/0x10
[  579.075302][T13093]  create_pipe_files+0x33e/0x700
[  579.075331][T13093]  __do_pipe_flags+0x48/0x2d0
[  579.075356][T13093]  do_pipe2+0xd4/0x310
[  579.075372][T13093]  ? __pfx_do_pipe2+0x10/0x10
[  579.075384][T13093]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  579.075406][T13093]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  579.075427][T13093]  ? do_syscall_64+0x100/0x230
[  579.075448][T13093]  __x64_sys_pipe2+0x5a/0x70
[  579.075471][T13093]  do_syscall_64+0xf3/0x230
[  579.075488][T13093]  ? clear_bhb_loop+0x35/0x90
[  579.075518][T13093]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  579.075538][T13093] RIP: 0033:0x7f78ac385d29
[  579.075552][T13093] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  579.075564][T13093] RSP: 002b:00007f78ad25f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000125
[  579.075580][T13093] RAX: ffffffffffffffda RBX: 00007f78ac575fa0 RCX: 00007f78ac385d29
[  579.075591][T13093] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000000020000280
[  579.075601][T13093] RBP: 00007f78ad25f090 R08: 0000000000000000 R09: 0000000000000000
[  579.075610][T13093] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  579.075619][T13093] R13: 0000000000000001 R14: 00007f78ac575fa0 R15: 00007fff1763c288
[  579.075639][T13093]  </TASK>
[  579.548102][ T5841] Bluetooth: hci4: command tx timeout
[  579.977007][   T29] audit: type=1800 audit(1736674128.960:21): pid=13094 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1317" name="bus" dev="loop4" ino=18 res=0 errno=0
[  580.712534][ T5835] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  580.761780][T13105] loop2: detected capacity change from 0 to 32768
[  581.083218][T13105] JBD2: Ignoring recovery information on journal
[  581.310506][T13105] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  581.458856][   T11] team0 (unregistering): Port device team_slave_1 removed
[  581.576317][ T5841] Bluetooth: hci4: command tx timeout
[  582.195733][   T11] team0 (unregistering): Port device team_slave_0 removed
[  584.048588][    T9] usb 5-1: new full-speed USB device number 9 using dummy_hcd
[  584.082772][T13120] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1332'.
[  584.104021][T13120] netlink: 'syz.3.1332': attribute type 3 has an invalid length.
[  584.237764][    T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  584.252070][    T9] usb 5-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99
[  584.265649][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  584.276197][    T9] usb 5-1: Product: syz
[  584.280424][    T9] usb 5-1: Manufacturer: syz
[  584.285066][    T9] usb 5-1: SerialNumber: syz
[  584.308615][    T9] usb 5-1: config 0 descriptor??
[  585.506312][T13019] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  585.705755][T13019] team0: Port device team_slave_0 added
[  585.724882][T13019] team0: Port device team_slave_1 added
[  585.743899][T11746] ocfs2: Unmounting device (7,2) on (node local)
[  585.903442][T13019] batman_adv: batadv0: Adding interface: batadv_slave_0
[  585.970384][T13019] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  586.065141][T13139] siw: device registration error -23
[  586.243473][T13019] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  586.630198][T13019] batman_adv: batadv0: Adding interface: batadv_slave_1
[  586.738824][T13019] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  586.781907][ T5923] usb 5-1: USB disconnect, device number 9
[  586.783291][T13019] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  587.055734][T13146] loop4: detected capacity change from 0 to 256
[  587.110842][T13019] hsr_slave_0: entered promiscuous mode
[  587.129719][T13019] hsr_slave_1: entered promiscuous mode
[  587.139320][T13019] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  587.150300][T13019] Cannot create hsr debugfs directory
[  587.504931][T13146] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input10
[  588.215122][T13136] loop0: detected capacity change from 0 to 40427
[  588.250271][T13136] F2FS-fs (loop0): invalid crc value
[  588.308453][T13019] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  588.325918][T13019] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  588.338793][T13136] F2FS-fs (loop0): Found nat_bits in checkpoint
[  588.586322][T13160] loop4: detected capacity change from 0 to 40427
[  588.600901][T13160] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  588.609968][T13160] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  588.626799][T13160] F2FS-fs (loop4): invalid crc value
[  588.635808][T13160] F2FS-fs (loop4): Found nat_bits in checkpoint
[  588.680514][T13160] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  588.687785][T13160] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  588.943895][T13019] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  589.145514][T13168] syz.4.1344: attempt to access beyond end of device
[  589.145514][T13168] loop4: rw=2049, sector=77824, nr_sectors = 520 limit=40427
[  589.990807][T13019] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  590.362080][T13019] 8021q: adding VLAN 0 to HW filter on device bond0
[  590.397236][T13019] 8021q: adding VLAN 0 to HW filter on device team0
[  590.468088][ T2889] bridge0: port 1(bridge_slave_0) entered blocking state
[  590.475228][ T2889] bridge0: port 1(bridge_slave_0) entered forwarding state
[  590.576391][ T2889] bridge0: port 2(bridge_slave_1) entered blocking state
[  590.583530][ T2889] bridge0: port 2(bridge_slave_1) entered forwarding state
[  591.020647][T13183] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1346'.
[  591.029848][T13183] netlink: 'syz.4.1346': attribute type 3 has an invalid length.
[  591.338213][T13019] 8021q: adding VLAN 0 to HW filter on device batadv0
[  591.708161][T13194] loop0: detected capacity change from 0 to 32768
[  592.521774][T13194] XFS (loop0): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  592.600400][T13194] XFS (loop0): Ending clean mount
[  592.611797][T13194] XFS (loop0): Quotacheck needed: Please wait.
[  592.718617][T13194] XFS (loop0): Quotacheck: Done.
[  592.886939][T13212] loop3: detected capacity change from 0 to 256
[  592.954832][T13212] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  593.185232][T13218] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore
[  593.194287][T13218] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  594.475316][T13221] FAULT_INJECTION: forcing a failure.
[  594.475316][T13221] name failslab, interval 1, probability 0, space 0, times 0
[  594.518678][T13019] veth0_vlan: entered promiscuous mode
[  594.538821][ T5832] XFS (loop0): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  594.546337][T13221] CPU: 1 UID: 0 PID: 13221 Comm: syz.3.1355 Not tainted 6.13.0-rc6-next-20250107-syzkaller #0
[  594.546369][T13221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  594.546382][T13221] Call Trace:
[  594.546390][T13221]  <TASK>
[  594.546400][T13221]  dump_stack_lvl+0x241/0x360
[  594.546432][T13221]  ? __pfx_dump_stack_lvl+0x10/0x10
[  594.546454][T13221]  ? __pfx__printk+0x10/0x10
[  594.546491][T13221]  ? kmem_cache_alloc_noprof+0x48/0x380
[  594.546514][T13221]  ? __pfx___might_resched+0x10/0x10
[  594.546544][T13221]  should_fail_ex+0x40a/0x550
[  594.546584][T13221]  should_failslab+0xac/0x100
[  594.546618][T13221]  ? getname_flags+0xb7/0x540
[  594.546639][T13221]  kmem_cache_alloc_noprof+0x70/0x380
[  594.546667][T13221]  getname_flags+0xb7/0x540
[  594.546688][T13221]  ? __might_fault+0xc6/0x120
[  594.546717][T13221]  user_path_at+0x24/0x60
[  594.546745][T13221]  __se_sys_mount+0x297/0x3c0
[  594.546773][T13221]  ? __pfx___se_sys_mount+0x10/0x10
[  594.546797][T13221]  ? do_syscall_64+0x100/0x230
[  594.546824][T13221]  ? __x64_sys_mount+0x20/0xc0
[  594.546849][T13221]  do_syscall_64+0xf3/0x230
[  594.546873][T13221]  ? clear_bhb_loop+0x35/0x90
[  594.546906][T13221]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  594.546935][T13221] RIP: 0033:0x7f655d5874ca
[  594.546956][T13221] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  594.546982][T13221] RSP: 002b:00007f655e478e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  594.547006][T13221] RAX: ffffffffffffffda RBX: 00007f655e478ef0 RCX: 00007f655d5874ca
[  594.547022][T13221] RDX: 00000000200003c0 RSI: 0000000020000100 RDI: 0000000000000000
[  594.547037][T13221] RBP: 00000000200003c0 R08: 00007f655e478ef0 R09: 0000000001b6643c
[  594.547051][T13221] R10: 0000000001b6643c R11: 0000000000000246 R12: 0000000020000100
[  594.547065][T13221] R13: 00007f655e478eb0 R14: 0000000000000000 R15: 0000000020001d00
[  594.547096][T13221]  </TASK>
[  594.609252][T13019] veth1_vlan: entered promiscuous mode
[  594.977634][T13223] loop4: detected capacity change from 0 to 40427
[  594.997422][T13223] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  595.005206][T13223] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  595.023636][T13223] F2FS-fs (loop4): invalid crc value
[  595.032596][T13223] F2FS-fs (loop4): Found nat_bits in checkpoint
[  595.072894][T13223] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  595.080232][T13223] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  595.270733][T13019] veth0_macvtap: entered promiscuous mode
[  595.280028][T13019] veth1_macvtap: entered promiscuous mode
[  595.393647][T13230] syz.4.1358: attempt to access beyond end of device
[  595.393647][T13230] loop4: rw=2049, sector=77824, nr_sectors = 520 limit=40427
[  595.487387][T13019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  595.636189][T13019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  595.646070][T13019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  595.714049][T13019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  595.744552][T13019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  595.786335][T13019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  595.822198][T13019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  595.864339][T13019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  595.894773][T13233] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1360'.
[  595.928340][T13019] batman_adv: batadv0: Interface activated: batadv_slave_0
[  595.951526][T13233] netlink: 'syz.3.1360': attribute type 3 has an invalid length.
[  596.058223][T13019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  596.096273][T13019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  596.126421][T13019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  596.165510][T13019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  596.212949][T13019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  596.223901][T13019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  596.234043][T13019] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  596.245176][T13019] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  596.256581][T13019] batman_adv: batadv0: Interface activated: batadv_slave_1
[  596.328680][T13019] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  596.349843][T13019] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  596.393621][T13019] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  596.436594][T13019] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  596.685187][   T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  596.706363][   T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  596.757107][   T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  596.776285][   T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  598.996396][ T5886] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  600.148732][T13261] ip6gretap1: entered allmulticast mode
[  600.183497][ T5886] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  600.193168][ T5886] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  601.154042][ T5886] usb 6-1: Product: syz
[  601.158416][ T5886] usb 6-1: Manufacturer: syz
[  601.163188][ T5886] usb 6-1: SerialNumber: syz
[  601.209954][ T5886] usb 6-1: can't set config #1, error -71
[  601.221483][ T5886] usb 6-1: USB disconnect, device number 2
[  601.793160][T13276] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1371'.
[  601.851854][T13276] netlink: 'syz.0.1371': attribute type 3 has an invalid length.
[  602.028916][T13271] loop2: detected capacity change from 0 to 40427
[  602.048703][T13271] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  602.056568][T13271] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  602.066950][T13271] F2FS-fs (loop2): invalid crc value
[  602.734079][    T8] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  603.376240][    T8] usb 5-1: Using ep0 maxpacket: 8
[  603.383285][    T8] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  603.394171][    T8] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x49, changing to 0x9
[  603.465979][T13271] F2FS-fs (loop2): Found nat_bits in checkpoint
[  604.153540][    T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 0, changing to 7
[  604.165505][    T8] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  604.309589][    T8] usb 5-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=e2.d0
[  604.319175][    T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  604.329616][T13271] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  604.336822][T13271] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  604.351051][    T8] usb 5-1: Product: syz
[  604.355289][    T8] usb 5-1: Manufacturer: syz
[  604.360171][    T8] usb 5-1: SerialNumber: syz
[  604.375996][    T8] usb 5-1: config 0 descriptor??
[  604.734233][T13300] syz.2.1370: attempt to access beyond end of device
[  604.734233][T13300] loop2: rw=2049, sector=77824, nr_sectors = 520 limit=40427
[  605.554372][T13302] xt_limit: Overflow, try lower: 4294967295/4294966784
[  607.109222][    T8] usb 5-1: probing VID:PID(0424:012C)   
[  607.152722][    T8] usb 5-1: vub300 testing UNKNOWN EndPoint(0) 09
[  607.196257][    T8] usb 5-1: vub300 ignoring EndPoint(0) 09
[  607.202078][    T8] usb 5-1: Could not find two sets of bulk-in/out endpoint pairs
[  607.250233][    T8] vub300 5-1:0.0: probe with driver vub300 failed with error -22
[  607.336491][    T8] usb 5-1: USB disconnect, device number 10
[  607.747195][T13320] loop3: detected capacity change from 0 to 256
[  608.639705][T13320] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input11
[  608.750252][T13334] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1387'.
[  610.367936][T13344] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1388'.
[  611.471217][T13356] FAULT_INJECTION: forcing a failure.
[  611.471217][T13356] name failslab, interval 1, probability 0, space 0, times 0
[  611.484728][T13356] CPU: 0 UID: 0 PID: 13356 Comm: syz.5.1395 Not tainted 6.13.0-rc6-next-20250107-syzkaller #0
[  611.484756][T13356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  611.484768][T13356] Call Trace:
[  611.484776][T13356]  <TASK>
[  611.484786][T13356]  dump_stack_lvl+0x241/0x360
[  611.484817][T13356]  ? __pfx_dump_stack_lvl+0x10/0x10
[  611.484848][T13356]  ? __pfx__printk+0x10/0x10
[  611.484896][T13356]  should_fail_ex+0x40a/0x550
[  611.484937][T13356]  should_failslab+0xac/0x100
[  611.484974][T13356]  ? skb_clone+0x20c/0x390
[  611.485004][T13356]  kmem_cache_alloc_noprof+0x70/0x380
[  611.485027][T13356]  ? mark_lock+0x9a/0x360
[  611.485062][T13356]  skb_clone+0x20c/0x390
[  611.485086][T13356]  ? dev_queue_xmit_nit+0x4f8/0xca0
[  611.485124][T13356]  dev_queue_xmit_nit+0x249/0xca0
[  611.485167][T13356]  ? dev_queue_xmit_nit+0x2b/0xca0
[  611.485233][T13356]  dev_hard_start_xmit+0x15f/0x7d0
[  611.485286][T13356]  sch_direct_xmit+0x29c/0x5d0
[  611.485316][T13356]  ? __pfx_sch_direct_xmit+0x10/0x10
[  611.485350][T13356]  __dev_queue_xmit+0x1a8f/0x3f50
[  611.485394][T13356]  ? __dev_queue_xmit+0x2f4/0x3f50
[  611.485424][T13356]  ? __pfx___dev_queue_xmit+0x10/0x10
[  611.485449][T13356]  ? read_seqbegin+0x1cf/0x2c0
[  611.485485][T13356]  ? read_seqbegin+0x1d3/0x2c0
[  611.485512][T13356]  ? read_seqbegin+0x200/0x2c0
[  611.485542][T13356]  ? __pfx_read_seqbegin+0x10/0x10
[  611.485567][T13356]  ? neigh_resolve_output+0x2e5/0x740
[  611.485594][T13356]  ? eth_header+0x11c/0x1f0
[  611.485721][T13356]  ? __asan_memcpy+0x40/0x70
[  611.485766][T13356]  ? eth_header+0x11c/0x1f0
[  611.485798][T13356]  ? __pfx_eth_header+0x10/0x10
[  611.485821][T13356]  ? neigh_resolve_output+0x61f/0x740
[  611.485861][T13356]  ? ip_finish_output2+0x44c/0x12b0
[  611.485888][T13356]  ip_finish_output2+0xdc9/0x12b0
[  611.485915][T13356]  ? __pfx_nf_hook+0x10/0x10
[  611.485938][T13356]  ? ip_finish_output2+0x44c/0x12b0
[  611.485964][T13356]  ? __pfx_ip_finish_output+0x10/0x10
[  611.485993][T13356]  ? __pfx_ip_finish_output2+0x10/0x10
[  611.486019][T13356]  ? ip_fast_csum+0x1f4/0x2b0
[  611.486047][T13356]  ? ip_skb_dst_mtu+0x6ba/0x9b0
[  611.486074][T13356]  ? __ip_finish_output+0x349/0x400
[  611.486104][T13356]  ip_send_skb+0x74/0x100
[  611.486128][T13356]  udp_send_skb+0xab6/0x1630
[  611.486169][T13356]  udp_sendmsg+0x1c30/0x2a90
[  611.486225][T13356]  ? __pfx_ip_generic_getfrag+0x10/0x10
[  611.486253][T13356]  ? __pfx_udp_sendmsg+0x10/0x10
[  611.486489][T13356]  ? inet_sendmsg+0x2ba/0x390
[  611.486553][T13356]  __sock_sendmsg+0x1a6/0x270
[  611.486601][T13356]  ____sys_sendmsg+0x52a/0x7e0
[  611.486652][T13356]  ? __pfx_____sys_sendmsg+0x10/0x10
[  611.486677][T13356]  ? __fget_files+0x2a/0x410
[  611.486704][T13356]  ? __fget_files+0x2a/0x410
[  611.486739][T13356]  __sys_sendmmsg+0x36a/0x720
[  611.486783][T13356]  ? __pfx___sys_sendmmsg+0x10/0x10
[  611.486829][T13356]  ? __pfx_lock_release+0x10/0x10
[  611.486869][T13356]  ? kstrtouint_from_user+0x128/0x190
[  611.486927][T13356]  ? ksys_write+0x22a/0x2b0
[  611.486955][T13356]  ? __pfx_lock_release+0x10/0x10
[  611.486985][T13356]  ? sb_end_write+0xe9/0x1c0
[  611.487009][T13356]  ? vfs_write+0x7fa/0xd10
[  611.487040][T13356]  ? __mutex_unlock_slowpath+0x227/0x800
[  611.487100][T13356]  ? lockdep_hardirqs_on_prepare+0x43d/0x780
[  611.487133][T13356]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  611.487175][T13356]  ? do_syscall_64+0x100/0x230
[  611.487236][T13356]  __x64_sys_sendmmsg+0xa0/0xb0
[  611.487269][T13356]  do_syscall_64+0xf3/0x230
[  611.487294][T13356]  ? clear_bhb_loop+0x35/0x90
[  611.487328][T13356]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  611.487357][T13356] RIP: 0033:0x7fe292f85d29
[  611.487377][T13356] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  611.487395][T13356] RSP: 002b:00007fe293e9c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  611.487419][T13356] RAX: ffffffffffffffda RBX: 00007fe293175fa0 RCX: 00007fe292f85d29
[  611.487434][T13356] RDX: 000000000800001d RSI: 0000000020007fc0 RDI: 0000000000000003
[  611.487448][T13356] RBP: 00007fe293e9c090 R08: 0000000000000000 R09: 0000000000000000
[  611.487461][T13356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  611.487474][T13356] R13: 0000000000000000 R14: 00007fe293175fa0 R15: 00007ffe1dd74b48
[  611.487508][T13356]  </TASK>
[  612.126242][T13354] loop2: detected capacity change from 0 to 128
[  612.133380][T13354] hpfs: Bad value for 'errors'
[  612.367208][T13354] x_tables: duplicate underflow at hook 2
[  612.687551][ T5886] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  612.865690][ T5886] usb 3-1: config 0 has an invalid interface number: 120 but max is 0
[  612.880366][ T5886] usb 3-1: config 0 has no interface number 0
[  612.885154][T13361] loop4: detected capacity change from 0 to 40427
[  612.908572][ T5886] usb 3-1: config 0 interface 120 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  612.920841][ T5886] usb 3-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58
[  612.928155][T13361] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x1fffff
[  612.932057][ T5886] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  612.953547][ T5886] usb 3-1: config 0 descriptor??
[  612.971203][T13361] F2FS-fs (loop4): invalid crc value
[  613.000341][T13361] F2FS-fs (loop4): Found nat_bits in checkpoint
[  613.141371][ T5886] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.120/input/input12
[  613.510314][T13354] Cannot find del_set index 3 as target
[  613.520368][T13361] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  613.603651][ T5886] usb 3-1: USB disconnect, device number 6
[  613.726616][T13422] loop3: detected capacity change from 0 to 256
[  613.773224][T13422] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input13
[  613.952183][ T5923] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  614.023186][T13431] FAULT_INJECTION: forcing a failure.
[  614.023186][T13431] name failslab, interval 1, probability 0, space 0, times 0
[  614.036765][T13431] CPU: 1 UID: 0 PID: 13431 Comm: syz.5.1404 Not tainted 6.13.0-rc6-next-20250107-syzkaller #0
[  614.036823][T13431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  614.036869][T13431] Call Trace:
[  614.036876][T13431]  <TASK>
[  614.036885][T13431]  dump_stack_lvl+0x241/0x360
[  614.036917][T13431]  ? __pfx_dump_stack_lvl+0x10/0x10
[  614.036938][T13431]  ? __pfx__printk+0x10/0x10
[  614.036973][T13431]  ? __kmalloc_cache_noprof+0x48/0x390
[  614.037010][T13431]  ? __pfx___might_resched+0x10/0x10
[  614.037041][T13431]  should_fail_ex+0x40a/0x550
[  614.037081][T13431]  should_failslab+0xac/0x100
[  614.037118][T13431]  __kmalloc_cache_noprof+0x70/0x390
[  614.037138][T13431]  ? fuse_lookup_name+0x149/0x8f0
[  614.037171][T13431]  fuse_lookup_name+0x149/0x8f0
[  614.037208][T13431]  ? __pfx_fuse_lookup_name+0x10/0x10
[  614.037236][T13431]  ? __pfx___mutex_lock+0x10/0x10
[  614.037285][T13431]  fuse_lookup+0x182/0x600
[  614.037318][T13431]  ? __pfx_fuse_lookup+0x10/0x10
[  614.037345][T13431]  ? do_raw_spin_lock+0x14f/0x370
[  614.037390][T13431]  ? _raw_spin_unlock+0x28/0x50
[  614.037421][T13431]  ? d_alloc+0x142/0x190
[  614.037452][T13431]  lookup_one_qstr_excl+0x11f/0x260
[  614.037480][T13431]  filename_create+0x297/0x540
[  614.037515][T13431]  ? __pfx_filename_create+0x10/0x10
[  614.037544][T13431]  ? __pfx_lock_release+0x10/0x10
[  614.037585][T13431]  do_mknodat+0x18b/0x5b0
[  614.037615][T13431]  ? __pfx_do_mknodat+0x10/0x10
[  614.037643][T13431]  ? getname_flags+0x1e3/0x540
[  614.037669][T13431]  __x64_sys_mknodat+0xa7/0xc0
[  614.037701][T13431]  do_syscall_64+0xf3/0x230
[  614.037725][T13431]  ? clear_bhb_loop+0x35/0x90
[  614.037759][T13431]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  614.037788][T13431] RIP: 0033:0x7fe292f85d29
[  614.037808][T13431] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  614.037827][T13431] RSP: 002b:00007fe293e7b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000103
[  614.037849][T13431] RAX: ffffffffffffffda RBX: 00007fe293176080 RCX: 00007fe292f85d29
[  614.037865][T13431] RDX: 000000003b9ac9ff RSI: 0000000020000000 RDI: ffffffffffffff9c
[  614.037880][T13431] RBP: 00007fe293e7b090 R08: 0000000000000000 R09: 0000000000000000
[  614.037892][T13431] R10: 000000000000008c R11: 0000000000000246 R12: 0000000000000001
[  614.037905][T13431] R13: 0000000000000000 R14: 00007fe293176080 R15: 00007ffe1dd74b48
[  614.037938][T13431]  </TASK>
[  614.316256][ T5923] usb 5-1: Using ep0 maxpacket: 8
[  614.323527][ T5923] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[  614.331678][ T5923] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  614.343038][ T5923] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  614.354832][ T5923] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 101, changing to 10
[  614.366357][ T5923] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  614.379662][ T5923] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[  614.387394][ T5923] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  614.399417][ T5923] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  614.411832][ T5923] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 101, changing to 10
[  614.423241][ T5923] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  614.436763][ T5923] usb 5-1: config 168 descriptor has 1 excess byte, ignoring
[  614.444225][ T5923] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  614.456676][ T5923] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  614.468389][ T5923] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 101, changing to 10
[  614.480144][ T5923] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  614.500913][ T5923] usb 5-1: string descriptor 0 read error: -22
[  614.507254][ T5923] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  614.517067][ T5923] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  614.537644][ T5923] adutux 5-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  614.750038][  T976] usb 5-1: USB disconnect, device number 11
[  614.970615][T13439] loop3: detected capacity change from 0 to 4096
[  614.971195][T13442] loop5: detected capacity change from 0 to 1024
[  615.063474][T13443] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  615.084568][   T29] audit: type=1800 audit(1736674164.070:22): pid=13439 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1407" name="file2" dev="loop3" ino=16 res=0 errno=0
[  615.106773][T13442] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  615.247091][T13442] EXT4-fs warning (device loop5): ext4_rmdir:3201: inode #11: comm syz.5.1408: empty directory 'file1' has too many links (111)
[  615.305492][T13439] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1407'.
[  615.378666][T13019] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  615.389508][T13453] loop2: detected capacity change from 0 to 1024
[  616.091910][  T976] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0
[  616.112320][  T976] hid-generic 0000:0000:0000.0002: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  616.165573][ T5835] syz-executor: attempt to access beyond end of device
[  616.165573][ T5835] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  616.354335][ T5835] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  616.641644][T13448] warn_alloc: 1 callbacks suppressed
[  616.641669][T13448] syz.0.1409: vmalloc error: size 536870912, failed to allocated page array size 1048576, mode:0x400cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1
[  616.682478][T13448] CPU: 0 UID: 0 PID: 13448 Comm: syz.0.1409 Not tainted 6.13.0-rc6-next-20250107-syzkaller #0
[  616.682506][T13448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  616.682520][T13448] Call Trace:
[  616.682528][T13448]  <TASK>
[  616.682536][T13448]  dump_stack_lvl+0x241/0x360
[  616.682565][T13448]  ? __pfx_dump_stack_lvl+0x10/0x10
[  616.682588][T13448]  ? __pfx__printk+0x10/0x10
[  616.682625][T13448]  ? cpuset_print_current_mems_allowed+0x1f/0x350
[  616.682649][T13448]  ? cpuset_print_current_mems_allowed+0x31e/0x350
[  616.682676][T13448]  warn_alloc+0x278/0x410
[  616.682708][T13448]  ? __pfx_warn_alloc+0x10/0x10
[  616.682742][T13448]  ? do_replace+0x298/0x5b0
[  616.682765][T13448]  ? __get_vm_area_node+0x1c8/0x2d0
[  616.682789][T13448]  ? __get_vm_area_node+0x25c/0x2d0
[  616.682820][T13448]  __vmalloc_node_range_noprof+0x62f/0x1380
[  616.682871][T13448]  ? lockdep_hardirqs_on+0x99/0x150
[  616.682893][T13448]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  616.682931][T13448]  ? do_replace+0x298/0x5b0
[  616.682952][T13448]  __vmalloc_noprof+0x79/0x90
[  616.682978][T13448]  ? do_replace+0x298/0x5b0
[  616.683001][T13448]  do_replace+0x298/0x5b0
[  616.683023][T13448]  ? mark_lock+0x9a/0x360
[  616.683055][T13448]  ? __pfx_aa_get_newest_label+0x10/0x10
[  616.683082][T13448]  ? __pfx_do_replace+0x10/0x10
[  616.683117][T13448]  ? bpf_lsm_capable+0x9/0x10
[  616.683142][T13448]  ? security_capable+0x7e/0x2d0
[  616.683174][T13448]  do_ebt_set_ctl+0x2d5/0x17d0
[  616.683197][T13448]  ? mark_lock+0x9a/0x360
[  616.683230][T13448]  ? __lock_acquire+0x1397/0x2100
[  616.683269][T13448]  ? __pfx_do_ebt_set_ctl+0x10/0x10
[  616.683321][T13448]  ? nf_setsockopt+0x240/0x2c0
[  616.683344][T13448]  ? do_ip_setsockopt+0x1f44/0x3cd0
[  616.683372][T13448]  ? __pfx_lock_release+0x10/0x10
[  616.683403][T13448]  ? rcu_is_watching+0x15/0xb0
[  616.683424][T13448]  ? trace_contention_end+0x3c/0x120
[  616.683445][T13448]  ? __mutex_lock+0x397/0x1010
[  616.683475][T13448]  ? do_ip_setsockopt+0x1f5f/0x3cd0
[  616.683506][T13448]  ? __mutex_unlock_slowpath+0x227/0x800
[  616.683540][T13448]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  616.683564][T13448]  ? aa_sk_perm+0x96d/0xab0
[  616.683595][T13448]  ? __pfx_aa_sk_perm+0x10/0x10
[  616.683622][T13448]  nf_setsockopt+0x295/0x2c0
[  616.683651][T13448]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  616.683685][T13448]  do_sock_setsockopt+0x3af/0x720
[  616.683715][T13448]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  616.683744][T13448]  ? __fget_files+0x395/0x410
[  616.683766][T13448]  ? __fget_files+0x2a/0x410
[  616.683798][T13448]  __x64_sys_setsockopt+0x1ee/0x280
[  616.683829][T13448]  do_syscall_64+0xf3/0x230
[  616.683854][T13448]  ? clear_bhb_loop+0x35/0x90
[  616.683889][T13448]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  616.683919][T13448] RIP: 0033:0x7f78ac385d29
[  616.683938][T13448] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  616.683957][T13448] RSP: 002b:00007f78ad25f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  616.683980][T13448] RAX: ffffffffffffffda RBX: 00007f78ac575fa0 RCX: 00007f78ac385d29
[  616.683997][T13448] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000003
[  616.684010][T13448] RBP: 00007f78ac401b08 R08: 0000000000000108 R09: 0000000000000000
[  616.684024][T13448] R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000000
[  616.684038][T13448] R13: 0000000000000000 R14: 00007f78ac575fa0 R15: 00007fff1763c288
[  616.684068][T13448]  </TASK>
[  616.684077][T13448] Mem-Info:
[  617.040355][T13448] active_anon:8638 inactive_anon:0 isolated_anon:0
[  617.040355][T13448]  active_file:18047 inactive_file:38526 isolated_file:0
[  617.040355][T13448]  unevictable:768 dirty:244 writeback:2
[  617.040355][T13448]  slab_reclaimable:11818 slab_unreclaimable:98114
[  617.040355][T13448]  mapped:28974 shmem:6654 pagetables:813
[  617.040355][T13448]  sec_pagetables:0 bounce:0
[  617.040355][T13448]  kernel_misc_reclaimable:0
[  617.040355][T13448]  free:1301513 free_pcp:5388 free_cma:0
[  617.040417][T13448] Node 0 active_anon:34552kB inactive_anon:0kB active_file:72188kB inactive_file:154032kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:115896kB dirty:976kB writeback:8kB shmem:25080kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10432kB pagetables:3252kB sec_pagetables:0kB all_unreclaimable? no
[  617.040483][T13448] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no
[  617.040531][T13448] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  617.040591][T13448] lowmem_reserve[]: 0 2491 2492 0 0
[  617.040644][T13448] Node 0 DMA32 free:1285080kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB active_anon:34512kB inactive_anon:0kB active_file:72188kB inactive_file:153456kB unevictable:1536kB writepending:984kB present:3129332kB managed:2551340kB mlocked:0kB bounce:0kB free_pcp:19500kB local_pcp:5604kB free_cma:0kB
[  617.040707][T13448] lowmem_reserve[]: 0 0 0 0 0
[  617.040753][T13448] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:576kB unevictable:0kB writepending:0kB present:1048580kB managed:620kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB
[  617.040813][T13448] lowmem_reserve[]: 0 0 0 0 0
[  617.040862][T13448] Node 1 Normal free:3905612kB boost:0kB min:55708kB low:69632kB high:83556kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:2048kB local_pcp:2048kB free_cma:0kB
[  617.040925][T13448] lowmem_reserve[]: 0 0 0 0 0
[  617.040975][T13448] Node 0 DMA: 0*4kB 0*8kB 0*16kB 
[  617.086052][    C1] vkms_vblank_simulate: vblank timer overrun
[  617.096245][T13467] tty tty1: ldisc open failed (-12), clearing slot 0
[  617.119336][    C1] vkms_vblank_simulate: vblank timer overrun
[  617.187847][T13448] 0*32kB 
[  617.214638][    C1] vkms_vblank_simulate: vblank timer overrun
[  617.247184][    C1] vkms_vblank_simulate: vblank timer overrun
[  617.281422][    C1] vkms_vblank_simulate: vblank timer overrun
[  617.336303][T13448] 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  617.336490][T13448] Node 0 DMA32: 2*4kB (UM) 2*8kB (ME) 88*16kB (UM) 72*32kB (ME) 406*64kB (ME) 176*128kB (UM) 90*256kB (UM) 36*512kB (ME) 19*1024kB (ME) 8*2048kB (UME) 282*4096kB (UM) = 1284632kB
[  617.336811][T13448] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB
[  617.336968][T13448] Node 1 Normal: 229*4kB (U) 57*8kB (UME) 45*16kB (UME) 243*32kB (UME) 97*64kB (UME) 39*128kB (UME) 14*256kB (UME) 8*512kB (UM) 4*1024kB (UME) 5*2048kB (UME) 943*4096kB (M) = 3905612kB
[  617.337228][T13448] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  617.337253][T13448] Node 0 hugepages_total=4 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  617.337284][T13448] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB
[  617.337305][T13448] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB
[  617.337325][T13448] 63146 total pagecache pages
[  617.337345][T13448] 0 pages in swap cache
[  617.337356][T13448] Free swap  = 124748kB
[  617.337366][T13448] Total swap = 124996kB
[  617.337378][T13448] 2097051 pages RAM
[  617.337388][T13448] 0 pages HighMem/MovableOnly
[  617.337399][T13448] 427430 pages reserved
[  617.337408][T13448] 0 pages cma reserved
[  620.746712][    T8] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  621.816330][    T8] usb 4-1: Using ep0 maxpacket: 32
[  621.823551][    T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  621.835717][    T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  621.846428][    T8] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  621.906493][    T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  621.927571][    T8] usb 4-1: config 0 descriptor??
[  621.949064][    T8] hub 4-1:0.0: USB hub found
[  622.169786][    T8] hub 4-1:0.0: 1 port detected
[  622.512991][T13535] loop2: detected capacity change from 0 to 164
[  622.546256][ T5887] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  622.673957][T13535] iso9660: Corrupted directory entry in block 4 of inode 1792
[  622.767392][ T5887] usb 1-1: Using ep0 maxpacket: 8
[  622.783550][ T5887] usb 1-1: config 0 has an invalid interface number: 29 but max is 0
[  622.806326][ T5887] usb 1-1: config 0 has no interface number 0
[  622.824216][ T5887] usb 1-1: config 0 interface 29 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  622.855954][ T5887] usb 1-1: config 0 interface 29 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83
[  622.886201][ T5887] usb 1-1: config 0 interface 29 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024
[  622.910269][ T5887] usb 1-1: config 0 interface 29 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024
[  622.941777][ T5887] usb 1-1: config 0 interface 29 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  622.972221][ T5887] usb 1-1: config 0 interface 29 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0
[  623.033032][ T5887] usb 1-1: config 0 interface 29 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  623.111972][    T8] hub 4-1:0.0: hub_hub_status failed (err = -71)
[  623.130954][    T8] hub 4-1:0.0: config failed, can't get hub status (err -71)
[  623.306596][    T8] usbhid 4-1:0.0: can't add hid device: -71
[  623.431312][ T5887] usb 1-1: New USB device found, idVendor=03f0, idProduct=0207, bcdDevice= 0.01
[  623.466987][    T8] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  623.536574][ T5887] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  623.616010][    T8] usb 4-1: USB disconnect, device number 8
[  623.664498][ T5887] usb 1-1: Product: syz
[  623.708676][ T5887] usb 1-1: Manufacturer: syz
[  623.826191][ T5887] usb 1-1: SerialNumber: syz
[  623.854325][ T5887] usb 1-1: config 0 descriptor??
[  623.984663][T13532] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  624.010815][T13545] FAULT_INJECTION: forcing a failure.
[  624.010815][T13545] name failslab, interval 1, probability 0, space 0, times 0
[  624.056252][T13545] CPU: 1 UID: 0 PID: 13545 Comm: syz.2.1438 Not tainted 6.13.0-rc6-next-20250107-syzkaller #0
[  624.056286][T13545] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  624.056299][T13545] Call Trace:
[  624.056307][T13545]  <TASK>
[  624.056316][T13545]  dump_stack_lvl+0x241/0x360
[  624.056347][T13545]  ? __pfx_dump_stack_lvl+0x10/0x10
[  624.056375][T13545]  ? __pfx__printk+0x10/0x10
[  624.056411][T13545]  ? __kmalloc_noprof+0xb5/0x4c0
[  624.056434][T13545]  ? __pfx___might_resched+0x10/0x10
[  624.056465][T13545]  should_fail_ex+0x40a/0x550
[  624.056503][T13545]  should_failslab+0xac/0x100
[  624.056539][T13545]  __kmalloc_noprof+0xdd/0x4c0
[  624.056559][T13545]  ? nla_strdup+0x9c/0x140
[  624.056581][T13545]  ? __kasan_kmalloc+0x98/0xb0
[  624.056615][T13545]  nla_strdup+0x9c/0x140
[  624.056642][T13545]  nf_tables_newflowtable+0xb5e/0x2480
[  624.056686][T13545]  ? __pfx_nf_tables_newflowtable+0x10/0x10
[  624.056714][T13545]  ? nfnl_pernet+0x23/0x240
[  624.056747][T13545]  ? __pfx_lock_release+0x10/0x10
[  624.056792][T13545]  ? __nla_parse+0x40/0x60
[  624.056821][T13545]  nfnetlink_rcv+0x14e3/0x2ab0
[  624.056878][T13545]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  624.056957][T13545]  ? netlink_deliver_tap+0x2e/0x1b0
[  624.056979][T13545]  ? skb_clone+0x240/0x390
[  624.057004][T13545]  ? __pfx_lock_release+0x10/0x10
[  624.057047][T13545]  ? netlink_deliver_tap+0x2e/0x1b0
[  624.057073][T13545]  netlink_unicast+0x7f6/0x990
[  624.057115][T13545]  ? __pfx_netlink_unicast+0x10/0x10
[  624.057145][T13545]  ? __virt_addr_valid+0x45f/0x530
[  624.057179][T13545]  ? __phys_addr_symbol+0x2f/0x70
[  624.057209][T13545]  ? __check_object_size+0x47a/0x730
[  624.057247][T13545]  netlink_sendmsg+0x8e4/0xcb0
[  624.057283][T13545]  ? __pfx_netlink_sendmsg+0x10/0x10
[  624.057312][T13545]  ? aa_sock_msg_perm+0x91/0x160
[  624.057343][T13545]  ? __pfx_netlink_sendmsg+0x10/0x10
[  624.057365][T13545]  __sock_sendmsg+0x221/0x270
[  624.057399][T13545]  ____sys_sendmsg+0x52a/0x7e0
[  624.057433][T13545]  ? __pfx_____sys_sendmsg+0x10/0x10
[  624.057455][T13545]  ? __fget_files+0x2a/0x410
[  624.057482][T13545]  ? __fget_files+0x2a/0x410
[  624.057513][T13545]  __sys_sendmsg+0x269/0x350
[  624.057543][T13545]  ? __pfx___sys_sendmsg+0x10/0x10
[  624.057581][T13545]  ? do_sys_openat2+0x17a/0x1d0
[  624.057632][T13545]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  624.057662][T13545]  ? do_syscall_64+0x100/0x230
[  624.057689][T13545]  ? do_syscall_64+0xb6/0x230
[  624.057714][T13545]  do_syscall_64+0xf3/0x230
[  624.057744][T13545]  ? clear_bhb_loop+0x35/0x90
[  624.057777][T13545]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  624.057804][T13545] RIP: 0033:0x7fd7d4785d29
[  624.057822][T13545] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  624.057838][T13545] RSP: 002b:00007fd7d553a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  624.057860][T13545] RAX: ffffffffffffffda RBX: 00007fd7d4975fa0 RCX: 00007fd7d4785d29
[  624.057874][T13545] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000004
[  624.057887][T13545] RBP: 00007fd7d553a090 R08: 0000000000000000 R09: 0000000000000000
[  624.057900][T13545] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  624.057913][T13545] R13: 0000000000000000 R14: 00007fd7d4975fa0 R15: 00007ffdc22dcd48
[  624.057945][T13545]  </TASK>
[  624.096496][ T5887] ums-usbat 1-1:0.29: USB Mass Storage device detected
[  624.097506][    C1] vkms_vblank_simulate: vblank timer overrun
[  624.405396][    C1] vkms_vblank_simulate: vblank timer overrun
[  624.411463][    C1] hrtimer: interrupt took 345384436 ns
[  624.481161][T13553] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1441'.
[  624.491552][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  624.498006][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  624.511523][    C1] vkms_vblank_simulate: vblank timer overrun
[  624.522505][T13553] bridge_slave_1: left allmulticast mode
[  624.530600][T13553] bridge_slave_1: left promiscuous mode
[  624.572938][T13553] bridge0: port 2(bridge_slave_1) entered disabled state
[  624.629180][ T5887] ums-usbat 1-1:0.29: probe with driver ums-usbat failed with error -5
[  624.669229][T13544] loop3: detected capacity change from 0 to 32768
[  624.670450][T13553] bridge_slave_0: left allmulticast mode
[  624.696768][T13553] bridge_slave_0: left promiscuous mode
[  624.702665][T13553] bridge0: port 1(bridge_slave_0) entered disabled state
[  624.711075][ T5887] usb 1-1: USB disconnect, device number 8
[  624.725556][T13544] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  624.734394][T13544] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  624.760501][T13544] gfs2: fsid=syz:syz.0: journal 0 mapped with 18 extents in 0ms
[  624.770570][    T9] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  624.851523][    T9] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  624.915981][    T9] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 64ms
[  624.924806][    T9] gfs2: fsid=syz:syz.0: jid=0: Done
[  624.956308][T13544] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  624.975660][T13544] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 7 2078, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 399
[  624.991877][T13544] gfs2: fsid=syz:syz.0: G:  s:EX n:2/81e f:aqobnN t:EX d:EX/0 a:0 v:0 r:2 m:20 p:1
[  625.006391][T13544] gfs2: fsid=syz:syz.0:  H: s:EX f:H e:0 p:0 [(none)] gfs2_fill_super+0x1bfa/0x24d0
[  625.022202][T13544] gfs2: fsid=syz:syz.0:  I: n:7/2078 t:8 f:0x00 d:0x00000000 s:0 p:0
[  625.030403][T13544] gfs2: fsid=syz:syz.0: about to withdraw this file system
[  625.043482][T13544] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount.
[  625.080392][T13544] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0
[  625.090938][T13544] gfs2: fsid=syz:syz.0: File system withdrawn
[  625.091415][T13566] fuse: Bad value for 'fd'
[  625.097077][T13544] CPU: 0 UID: 0 PID: 13544 Comm: syz.3.1437 Not tainted 6.13.0-rc6-next-20250107-syzkaller #0
[  625.097104][T13544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  625.097116][T13544] Call Trace:
[  625.097124][T13544]  <TASK>
[  625.097132][T13544]  dump_stack_lvl+0x241/0x360
[  625.097160][T13544]  ? __pfx_dump_stack_lvl+0x10/0x10
[  625.097181][T13544]  ? __pfx__printk+0x10/0x10
[  625.097213][T13544]  ? kobject_uevent_env+0x54d/0x8e0
[  625.097251][T13544]  gfs2_withdraw+0xefa/0x1460
[  625.097284][T13544]  ? __pfx_gfs2_withdraw+0x10/0x10
[  625.097302][T13544]  ? gfs2_meta_buffer+0x278/0x410
[  625.097342][T13544]  ? gfs2_consist_inode_i+0xf5/0x110
[  625.097367][T13544]  inode_go_instantiate+0xb2d/0x10e0
[  625.097408][T13544]  ? preempt_schedule_thunk+0x1a/0x30
[  625.097441][T13544]  ? __pfx_inode_go_instantiate+0x10/0x10
[  625.097480][T13544]  ? gfs2_glock_nq+0x136d/0x1aa0
[  625.097510][T13544]  gfs2_instantiate+0x190/0x260
[  625.097538][T13544]  gfs2_glock_wait+0x1df/0x2b0
[  625.097639][T13544]  init_per_node+0x2ad/0x3e0
[  625.097665][T13544]  ? __pfx_init_per_node+0x10/0x10
[  625.097697][T13544]  ? init_inodes+0x26d/0x320
[  625.097721][T13544]  gfs2_fill_super+0x1bfa/0x24d0
[  625.097767][T13544]  ? __pfx_gfs2_fill_super+0x10/0x10
[  625.097787][T13544]  ? snprintf+0xda/0x120
[  625.097817][T13544]  ? __pfx_lock_release+0x10/0x10
[  625.097845][T13544]  ? do_raw_spin_lock+0x14f/0x370
[  625.097870][T13544]  ? __pfx_snprintf+0x10/0x10
[  625.097909][T13544]  ? init_locking+0xbd/0x210
[  625.097929][T13544]  ? sb_set_blocksize+0x98/0xf0
[  625.097957][T13544]  ? setup_bdev_super+0x4e6/0x5d0
[  625.097992][T13544]  get_tree_bdev_flags+0x48c/0x5c0
[  625.098025][T13544]  ? __pfx_gfs2_fill_super+0x10/0x10
[  625.098048][T13544]  ? __pfx_get_tree_bdev_flags+0x10/0x10
[  625.098082][T13544]  ? rcu_is_watching+0x15/0xb0
[  625.098108][T13544]  gfs2_get_tree+0x54/0x220
[  625.098135][T13544]  vfs_get_tree+0x90/0x2b0
[  625.098168][T13544]  do_new_mount+0x2be/0xb40
[  625.098196][T13544]  ? __pfx_do_new_mount+0x10/0x10
[  625.098228][T13544]  __se_sys_mount+0x2d6/0x3c0
[  625.098256][T13544]  ? __pfx___se_sys_mount+0x10/0x10
[  625.098279][T13544]  ? exc_page_fault+0x590/0x8b0
[  625.098305][T13544]  ? __x64_sys_mount+0x20/0xc0
[  625.098329][T13544]  do_syscall_64+0xf3/0x230
[  625.098353][T13544]  ? clear_bhb_loop+0x35/0x90
[  625.098387][T13544]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  625.098417][T13544] RIP: 0033:0x7f655d5874ca
[  625.098436][T13544] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  625.098454][T13544] RSP: 002b:00007f655e499e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  625.098477][T13544] RAX: ffffffffffffffda RBX: 00007f655e499ef0 RCX: 00007f655d5874ca
[  625.098493][T13544] RDX: 00000000200004c0 RSI: 0000000020000480 RDI: 00007f655e499eb0
[  625.098508][T13544] RBP: 00000000200004c0 R08: 00007f655e499ef0 R09: 0000000000008c1b
[  625.098522][T13544] R10: 0000000000008c1b R11: 0000000000000246 R12: 0000000020000480
[  625.098536][T13544] R13: 00007f655e499eb0 R14: 00000000000127c5 R15: 0000000020000240
[  625.098577][T13544]  </TASK>
[  625.098592][T13544] gfs2: fsid=syz:syz.0: can't lock local "qc" file: -5
[  627.804977][T13584] loop2: detected capacity change from 0 to 40427
[  627.816175][T13584] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  627.824058][T13584] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  627.905415][T13584] F2FS-fs (loop2): Found nat_bits in checkpoint
[  628.085026][T13589] loop4: detected capacity change from 0 to 32768
[  628.125417][T13584] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  628.177851][T13584] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  628.696271][ T5886] usb 3-1: new low-speed USB device number 7 using dummy_hcd
[  628.887331][T13606] loop0: detected capacity change from 0 to 256
[  628.901091][ T5886] usb 3-1: string descriptor 0 read error: -22
[  628.910262][ T5886] usb 3-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f
[  628.926405][ T5886] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  628.938429][ T5886] usb 3-1: config 0 descriptor??
[  628.946351][ T5886] usbtest 3-1:0.0: FX2 device
[  628.951697][ T5886] usbtest 3-1:0.0: low-speed {control intr-in intr-out} tests (+alt)
[  629.286170][T13610] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1456'.
[  630.279403][T13624] loop5: detected capacity change from 0 to 1024
[  630.311385][ T5887] usb 3-1: USB disconnect, device number 7
[  630.347447][T13631] loop3: detected capacity change from 0 to 64
[  630.427302][   T29] audit: type=1800 audit(1736674179.370:23): pid=13631 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1460" name="file1" dev="loop3" ino=18 res=0 errno=0
[  632.407215][    T9] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0
[  632.433861][    T9] hid-generic 0000:0000:0000.0003: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  633.927766][T13649] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  634.154316][T13641] loop0: detected capacity change from 0 to 32768
[  634.303906][T13659] loop4: detected capacity change from 0 to 1024
[  634.311768][T13641] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  634.366056][T13641] gfs2: fsid=syz:syz: unknown hostdata (norecovery)
[  634.501526][T13662] loop5: detected capacity change from 0 to 512
[  634.521331][T13662] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[  634.537861][T13662] EXT4-fs (loop5): invalid journal inode
[  634.543835][T13662] EXT4-fs (loop5): can't get journal size
[  635.393812][T13662] EXT4-fs (loop5): 1 truncate cleaned up
[  635.404961][T13662] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  635.428078][  T976] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  635.437516][  T976] hid-generic 0000:0000:0000.0004: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  635.595657][T13666] EXT4-fs (loop5): shut down requested (2)
[  636.035069][   T29] audit: type=1800 audit(1736674185.020:24): pid=13662 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1467" name="bus" dev="loop5" ino=18 res=0 errno=0
[  636.128230][T13668] loop2: detected capacity change from 0 to 128
[  636.213491][T13668] loop2: detected capacity change from 0 to 512
[  636.227900][T13668] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal
[  636.355075][T13670] loop4: detected capacity change from 0 to 2048
[  636.470692][T13677] loop2: detected capacity change from 0 to 1024
[  636.542039][T13683] loop4: detected capacity change from 0 to 8
[  636.578814][T13683] SQUASHFS error: lzo decompression failed, data probably corrupt
[  636.595604][T13683] SQUASHFS error: Failed to read block 0x4ef: -5
[  636.608537][T13683] SQUASHFS error: Unable to read metadata cache entry [4ed]
[  636.622365][T13683] SQUASHFS error: Unable to read inode 0x5011f
[  636.681269][   T35] hfsplus: b-tree write err: -5, ino 4
[  637.016514][T13689] loop3: detected capacity change from 0 to 512
[  637.491717][T13689] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  637.549637][T13689] EXT4-fs (loop3): invalid journal inode
[  637.556267][T13689] EXT4-fs (loop3): can't get journal size
[  637.588358][T13689] EXT4-fs (loop3): 1 truncate cleaned up
[  637.595063][T13689] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  637.742898][T13689] EXT4-fs (loop3): shut down requested (2)
[  637.753159][   T29] audit: type=1800 audit(1736674186.730:25): pid=13689 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1474" name="bus" dev="loop3" ino=18 res=0 errno=0
[  637.806428][T13688] loop4: detected capacity change from 0 to 32768
[  637.814208][T13019] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  637.824045][T13688] bcachefs (/dev/loop4): error validating superblock: Bad number of member devices 0 (max 64)
[  637.834850][T13688] bcachefs: bch2_fs_get_tree() error: invalid_sb_too_many_members
[  638.056322][ T5887] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  638.499215][T13703] loop4: detected capacity change from 0 to 1024
[  638.968863][ T5887] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  638.979837][ T5887] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[  638.990996][ T5887] usb 3-1: config 1 has no interface number 0
[  638.997434][ T5887] usb 3-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  639.013315][ T5887] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  639.022708][ T5887] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  639.119215][ T5887] usb 3-1: Product: syz
[  639.123467][ T5887] usb 3-1: Manufacturer: syz
[  639.129276][ T5887] usb 3-1: SerialNumber: syz
[  639.740095][T10128] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  639.742402][ T5887] usb 3-1: selecting invalid altsetting 1
[  639.761065][T13707] program syz.0.1472 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  640.111682][T13716] loop4: detected capacity change from 0 to 256
[  640.164589][T13716] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  641.561506][T13730] openvswitch: netlink: Tunnel attr 6 has unexpected len 16 expected 0
[  642.406539][ T5887] cdc_ncm 3-1:1.1: failed GET_NTB_PARAMETERS
[  642.412628][ T5887] cdc_ncm 3-1:1.1: bind() failure
[  642.431426][ T5887] usb 3-1: USB disconnect, device number 8
[  643.413491][T13737] loop2: detected capacity change from 0 to 32768
[  643.438071][T13743] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1488'.
[  643.447381][T13743] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1488'.
[  644.078751][T13756] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1489'.
[  644.633505][T13757] loop4: detected capacity change from 0 to 1024
[  644.670897][T13737] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  644.773005][T13739] loop0: detected capacity change from 0 to 32768
[  644.913983][    T9] hid-generic 0000:0000:0000.0005: unknown main item tag 0x0
[  645.600834][T13770] loop5: detected capacity change from 0 to 512
[  645.641743][T13766] loop3: detected capacity change from 0 to 8
[  645.671814][T13766] SQUASHFS error: zlib decompression failed, data probably corrupt
[  645.682885][T13766] SQUASHFS error: Failed to read block 0x9b: -5
[  645.693522][T13766] SQUASHFS error: Unable to read metadata cache entry [99]
[  645.703878][T13766] SQUASHFS error: Unable to read inode 0x127
[  645.828885][T13737] XFS (loop2): Ending clean mount
[  645.874266][    T9] hid-generic 0000:0000:0000.0005: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  645.896377][T13739] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  645.916597][T13737] XFS (loop2): Quotacheck needed: Please wait.
[  645.989632][T13770] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  646.033503][T13737] XFS (loop2): Quotacheck: Done.
[  646.043853][T13770] ext4 filesystem being mounted at /33/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  646.091864][T11746] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  646.192182][T13019] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  646.285834][T13739] XFS (loop0): Ending clean mount
[  646.304128][T13786] loop3: detected capacity change from 0 to 1024
[  646.360274][T13739] XFS (loop0): Quotacheck needed: Please wait.
[  646.431104][T13739] XFS (loop0): Quotacheck: Done.
[  646.820137][ T5832] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  646.821669][  T976] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0
[  646.946563][ T5888] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  647.136573][ T5888] usb 6-1: Using ep0 maxpacket: 32
[  647.159243][  T976] hid-generic 0000:0000:0000.0006: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  647.170553][ T5888] usb 6-1: config 0 has an invalid interface number: 2 but max is 0
[  647.196288][ T5888] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  647.206707][ T5888] usb 6-1: config 0 has no interface number 0
[  647.213227][ T5888] usb 6-1: config 0 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  647.447182][ T5888] usb 6-1: New USB device found, idVendor=05ac, idProduct=b0c5, bcdDevice=61.c8
[  647.456805][ T5888] usb 6-1: New USB device strings: Mfr=1, Product=33, SerialNumber=3
[  647.464990][ T5888] usb 6-1: Product: syz
[  647.469504][ T5888] usb 6-1: Manufacturer: syz
[  647.474946][ T5888] usb 6-1: SerialNumber: syz
[  647.482137][ T5888] usb 6-1: config 0 descriptor??
[  647.510391][T13793] loop0: detected capacity change from 0 to 64
[  647.614357][T13797] loop4: detected capacity change from 0 to 512
[  647.641254][T13797] EXT4-fs: Ignoring removed orlov option
[  647.663822][T13797] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  647.789102][T13797] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  647.831545][T13797] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0022]
[  647.876487][ T5888] usb 6-1: USB disconnect, device number 3
[  647.919482][T13797] System zones: 0-1, 15-15, 18-18, 34-34
[  647.925796][T13797] EXT4-fs (loop4): orphan cleanup on readonly fs
[  648.043187][T13803] openvswitch: netlink: Tunnel attr 6 has unexpected len 16 expected 0
[  648.164157][T13797] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=0
[  648.706974][T13797] EXT4-fs warning (device loop4): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  648.843841][T13797] EXT4-fs (loop4): Cannot turn on quotas: error -22
[  649.022339][T13797] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1501: bg 0: block 40: padding at end of block bitmap is not set
[  649.149039][T13797] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6550: Corrupt filesystem
[  649.747355][T13797] EXT4-fs (loop4): 1 truncate cleaned up
[  649.779778][T13797] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  650.151716][T13816] loop2: detected capacity change from 0 to 40427
[  650.401984][T13816] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  650.409939][T13816] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  650.421820][T13797] EXT4-fs error (device loop4): ext4_encrypted_get_link:46: inode #16: comm syz.4.1501: bad symlink.
[  650.435092][T13816] F2FS-fs (loop2): invalid crc value
[  650.463232][T13816] F2FS-fs (loop2): Found nat_bits in checkpoint
[  650.597463][T13816] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  650.604581][T13816] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  650.854961][T13829] FAULT_INJECTION: forcing a failure.
[  650.854961][T13829] name failslab, interval 1, probability 0, space 0, times 0
[  650.869608][T13829] CPU: 1 UID: 0 PID: 13829 Comm: syz.3.1508 Not tainted 6.13.0-rc6-next-20250107-syzkaller #0
[  650.869636][T13829] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  650.869649][T13829] Call Trace:
[  650.869658][T13829]  <TASK>
[  650.869667][T13829]  dump_stack_lvl+0x241/0x360
[  650.869698][T13829]  ? __pfx_dump_stack_lvl+0x10/0x10
[  650.869721][T13829]  ? __pfx__printk+0x10/0x10
[  650.869758][T13829]  ? kmem_cache_alloc_lru_noprof+0x4d/0x390
[  650.869783][T13829]  ? __pfx___might_resched+0x10/0x10
[  650.869813][T13829]  should_fail_ex+0x40a/0x550
[  650.869854][T13829]  should_failslab+0xac/0x100
[  650.869889][T13829]  ? sock_alloc_inode+0x28/0xc0
[  650.869917][T13829]  kmem_cache_alloc_lru_noprof+0x75/0x390
[  650.869947][T13829]  sock_alloc_inode+0x28/0xc0
[  650.869976][T13829]  ? __pfx_sock_alloc_inode+0x10/0x10
[  650.870003][T13829]  alloc_inode+0x65/0x1a0
[  650.870028][T13829]  __sock_create+0x127/0xa30
[  650.870061][T13829]  ? mptcp_pm_nl_add_addr_doit+0x4f7/0x1bd0
[  650.870094][T13829]  mptcp_pm_nl_add_addr_doit+0x618/0x1bd0
[  650.870131][T13829]  ? __nla_validate_parse+0x26ce/0x3090
[  650.870154][T13829]  ? genl_rcv+0x28/0x40
[  650.870184][T13829]  ? __pfx_mptcp_pm_nl_add_addr_doit+0x10/0x10
[  650.870225][T13829]  ? __pfx___nla_validate_parse+0x10/0x10
[  650.870302][T13829]  ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290
[  650.870342][T13829]  genl_rcv_msg+0xb14/0xec0
[  650.870381][T13829]  ? __pfx_genl_rcv_msg+0x10/0x10
[  650.870441][T13829]  ? __pfx_lock_acquire+0x10/0x10
[  650.870470][T13829]  ? __pfx_mptcp_pm_nl_add_addr_doit+0x10/0x10
[  650.870498][T13829]  ? __pfx___might_resched+0x10/0x10
[  650.870534][T13829]  netlink_rcv_skb+0x1e3/0x430
[  650.870558][T13829]  ? __pfx_genl_rcv_msg+0x10/0x10
[  650.870589][T13829]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  650.870626][T13829]  ? __netlink_deliver_tap+0x7aa/0x7f0
[  650.870666][T13829]  genl_rcv+0x28/0x40
[  650.870693][T13829]  netlink_unicast+0x7f6/0x990
[  650.870735][T13829]  ? __pfx_netlink_unicast+0x10/0x10
[  650.870766][T13829]  ? __virt_addr_valid+0x45f/0x530
[  650.870800][T13829]  ? __phys_addr_symbol+0x2f/0x70
[  650.870831][T13829]  ? __check_object_size+0x47a/0x730
[  650.870870][T13829]  netlink_sendmsg+0x8e4/0xcb0
[  650.870907][T13829]  ? __pfx_netlink_sendmsg+0x10/0x10
[  650.870936][T13829]  ? aa_sock_msg_perm+0x91/0x160
[  650.870968][T13829]  ? __pfx_netlink_sendmsg+0x10/0x10
[  650.870991][T13829]  __sock_sendmsg+0x221/0x270
[  650.871025][T13829]  ____sys_sendmsg+0x52a/0x7e0
[  650.871060][T13829]  ? __pfx_____sys_sendmsg+0x10/0x10
[  650.871082][T13829]  ? __fget_files+0x2a/0x410
[  650.871108][T13829]  ? __fget_files+0x2a/0x410
[  650.871141][T13829]  __sys_sendmsg+0x269/0x350
[  650.871172][T13829]  ? __pfx___sys_sendmsg+0x10/0x10
[  650.871211][T13829]  ? do_sys_openat2+0x17a/0x1d0
[  650.871272][T13829]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  650.871304][T13829]  ? do_syscall_64+0x100/0x230
[  650.871332][T13829]  ? do_syscall_64+0xb6/0x230
[  650.871360][T13829]  do_syscall_64+0xf3/0x230
[  650.871383][T13829]  ? clear_bhb_loop+0x35/0x90
[  650.871417][T13829]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  650.871446][T13829] RIP: 0033:0x7f655d585d29
[  650.871466][T13829] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  650.871483][T13829] RSP: 002b:00007f655e458038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  650.871506][T13829] RAX: ffffffffffffffda RBX: 00007f655d776160 RCX: 00007f655d585d29
[  650.871522][T13829] RDX: 0000000000000000 RSI: 0000000020000400 RDI: 0000000000000007
[  650.871535][T13829] RBP: 00007f655e458090 R08: 0000000000000000 R09: 0000000000000000
[  650.871549][T13829] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  650.871561][T13829] R13: 0000000000000000 R14: 00007f655d776160 R15: 00007fff61730c68
[  650.871594][T13829]  </TASK>
[  650.981771][T13830] syz.2.1507: attempt to access beyond end of device
[  650.981771][T13830] loop2: rw=2049, sector=77824, nr_sectors = 520 limit=40427
[  650.985251][    C1] vkms_vblank_simulate: vblank timer overrun
[  651.267398][    C1] vkms_vblank_simulate: vblank timer overrun
[  651.275952][T13829] socket: no more sockets
[  651.485626][T13797] netlink: 'syz.4.1501': attribute type 1 has an invalid length.
[  651.527824][T13833] loop5: detected capacity change from 0 to 256
[  651.553749][T13833] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  651.622421][ T5835] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  651.950576][ T5841] Bluetooth: hci3: unexpected event for opcode 0x2010
[  652.000290][T13845] FAULT_INJECTION: forcing a failure.
[  652.000290][T13845] name failslab, interval 1, probability 0, space 0, times 0
[  652.000324][T13845] CPU: 1 UID: 0 PID: 13845 Comm: syz.4.1512 Not tainted 6.13.0-rc6-next-20250107-syzkaller #0
[  652.000347][T13845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  652.000360][T13845] Call Trace:
[  652.000367][T13845]  <TASK>
[  652.000375][T13845]  dump_stack_lvl+0x241/0x360
[  652.000401][T13845]  ? __pfx_dump_stack_lvl+0x10/0x10
[  652.000420][T13845]  ? __pfx__printk+0x10/0x10
[  652.000452][T13845]  ? kmem_cache_alloc_noprof+0x48/0x380
[  652.000472][T13845]  ? __pfx___might_resched+0x10/0x10
[  652.000498][T13845]  should_fail_ex+0x40a/0x550
[  652.000533][T13845]  should_failslab+0xac/0x100
[  652.000563][T13845]  ? vm_area_alloc+0x24/0x140
[  652.000590][T13845]  kmem_cache_alloc_noprof+0x70/0x380
[  652.000618][T13845]  vm_area_alloc+0x24/0x140
[  652.000648][T13845]  mmap_region+0x1aed/0x2e40
[  652.000696][T13845]  ? __pfx_mmap_region+0x10/0x10
[  652.000711][T13845]  ? unmapped_area_topdown+0x6c4/0x710
[  652.000786][T13845]  ? mm_get_unmapped_area_vmflags+0xb9/0xf0
[  652.000815][T13845]  ? thp_get_unmapped_area_vmflags+0x341/0x380
[  652.000846][T13845]  ? cap_mmap_addr+0xaa/0xf0
[  652.000867][T13845]  ? bpf_lsm_mmap_addr+0x9/0x10
[  652.000885][T13845]  ? security_mmap_addr+0x6f/0x250
[  652.000912][T13845]  do_mmap+0xecc/0x13a0
[  652.000938][T13845]  ? ima_file_mmap+0xd6/0x220
[  652.000963][T13845]  ? __pfx_do_mmap+0x10/0x10
[  652.000981][T13845]  ? down_write_killable+0x19e/0x260
[  652.001005][T13845]  ? vm_mmap_pgoff+0x182/0x430
[  652.001027][T13845]  ? __pfx_down_write_killable+0x10/0x10
[  652.001051][T13845]  ? apparmor_mmap_file+0xc3/0xe0
[  652.001073][T13845]  vm_mmap_pgoff+0x214/0x430
[  652.001105][T13845]  ? __pfx_vm_mmap_pgoff+0x10/0x10
[  652.001136][T13845]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  652.001163][T13845]  ? do_syscall_64+0x100/0x230
[  652.001183][T13845]  ? ksys_mmap_pgoff+0xdf/0x720
[  652.001205][T13845]  ? __x64_sys_mmap+0x7f/0x140
[  652.001235][T13845]  do_syscall_64+0xf3/0x230
[  652.001255][T13845]  ? clear_bhb_loop+0x35/0x90
[  652.001284][T13845]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  652.001309][T13845] RIP: 0033:0x7f593cf85d63
[  652.001325][T13845] Code: f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 41 89 ca 41 f7 c1 ff 0f 00 00 75 14 b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 25 c3 0f 1f 40 00 48 c7 c0 a8 ff ff ff 64 c7
[  652.001341][T13845] RSP: 002b:00007f593dd41e18 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[  652.001360][T13845] RAX: ffffffffffffffda RBX: 00000000000001e8 RCX: 00007f593cf85d63
[  652.001374][T13845] RDX: 0000000000000003 RSI: 0000000008400000 RDI: 0000000000000000
[  652.001385][T13845] RBP: 00000000200003c2 R08: 00000000ffffffff R09: 0000000000000000
[  652.001397][T13845] R10: 0000000000000022 R11: 0000000000000246 R12: 0000000000000008
[  652.001408][T13845] R13: 00007f593dd41ef0 R14: 00007f593dd41eb0 R15: 0000000020000840
[  652.001435][T13845]  </TASK>
[  652.057642][T13836] loop3: detected capacity change from 0 to 512
[  652.084202][T13836] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  652.084263][T13836] EXT4-fs (loop3): bad geometry: first data block is 0 with a 1k block and cluster size
[  652.496414][ T5886] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  652.765291][ T5886] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  652.765330][ T5886] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  652.767843][ T5886] usb 1-1: config 0 descriptor??
[  652.770684][ T5886] cp210x 1-1:0.0: cp210x converter detected
[  652.984305][T13844] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  652.984580][T13844] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  652.996611][T13841] ptm ptm0: ldisc open failed (-12), clearing slot 0
[  653.002722][ T5886] cp210x 1-1:0.0: failed to get vendor val 0x370b size 1: -121
[  653.211574][ T5886] cp210x 1-1:0.0: querying part number failed
[  653.226755][ T5886] usb 1-1: cp210x converter now attached to ttyUSB0
[  653.326965][T13860] loop5: detected capacity change from 0 to 64
[  653.353395][T13860] hfs: filesystem is marked locked, mounting read-only.
[  653.626228][ T5886] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  653.786289][ T5886] usb 6-1: Using ep0 maxpacket: 8
[  653.805748][ T5886] usb 6-1: New USB device found, idVendor=1870, idProduct=0001, bcdDevice=e6.7f
[  653.836388][ T5886] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  653.856335][ T5886] usb 6-1: Product: syz
[  653.869625][ T5886] usb 6-1: Manufacturer: syz
[  653.882890][ T5886] usb 6-1: SerialNumber: syz
[  653.897548][ T5886] usb 6-1: config 0 descriptor??
[  653.978963][T13865] loop3: detected capacity change from 0 to 32768
[  654.011115][T13865] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  654.075443][T13863] loop4: detected capacity change from 0 to 32768
[  654.103809][T13863] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  654.127234][T13863] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  654.127574][T13865] XFS (loop3): Ending clean mount
[  654.150592][T13865] XFS (loop3): Quotacheck needed: Please wait.
[  654.179778][T13863] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms
[  654.247919][T13863] gfs2: fsid=syz:syz.s: first mount done, others may mount
[  654.253645][T13865] XFS (loop3): Quotacheck: Done.
[  654.274897][T13860] kvm: requested 4190 ns i8254 timer period limited to 200000 ns
[  654.306251][    T9] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  654.351837][T13860] kvm: pic: level sensitive irq not supported
[  654.352691][T13860] kvm: pic: non byte read
[  654.372600][T13860] kvm: pic: level sensitive irq not supported
[  654.372693][T13860] kvm: pic: non byte read
[  654.384810][T13860] kvm: pic: level sensitive irq not supported
[  654.384893][T13860] kvm: pic: non byte read
[  654.490200][ T5886] usb 6-1: USB disconnect, device number 4
[  654.500467][    T9] usb 3-1: Using ep0 maxpacket: 16
[  654.508736][    T9] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  654.530986][    T9] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0
[  654.556154][    T9] usb 3-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  654.586444][    T9] usb 3-1: config 0 interface 0 has no altsetting 0
[  654.593304][    T9] usb 3-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00
[  654.616356][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  654.654637][    T9] usb 3-1: config 0 descriptor??
[  654.872253][T10128] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  654.998467][ T5923] usb 1-1: USB disconnect, device number 9
[  655.260340][ T5923] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  655.421696][ T5923] cp210x 1-1:0.0: device disconnected
[  655.757577][    T9] hid-generic 0003:045E:05DA.0007: ignoring exceeding usage max
[  655.768125][    T9] hid-generic 0003:045E:05DA.0007: item fetching failed at offset 33/34
[  655.779525][    T9] hid-generic 0003:045E:05DA.0007: probe with driver hid-generic failed with error -22
[  655.969762][ T5841] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0
[  655.975936][    T9] usb 3-1: USB disconnect, device number 9
[  655.984004][ T5841] Bluetooth: hci3: Injecting HCI hardware error event
[  655.999544][ T5841] Bluetooth: hci3: hardware error 0x00
[  656.120302][   T29] audit: type=1326 audit(1736674205.110:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13901 comm="syz.4.1530" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f593cf85d29 code=0x0
[  656.256414][   T29] audit: type=1326 audit(1736674205.180:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13901 comm="syz.4.1530" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f593cf85d29 code=0x0
[  656.295871][   T29] audit: type=1326 audit(1736674205.240:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13901 comm="syz.4.1530" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f593cf85d29 code=0x0
[  656.326719][ T5886] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  656.354769][   T29] audit: type=1326 audit(1736674205.340:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13901 comm="syz.4.1530" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f593cf85d29 code=0x0
[  656.571573][T13912] ieee802154 phy0 wpan0: encryption failed: -22
[  656.599381][T13912] loop0: detected capacity change from 0 to 16
[  656.666492][T13912] erofs (device loop0): mounted with root inode @ nid 36.
[  657.426309][ T5886] usb 6-1: Using ep0 maxpacket: 32
[  657.515920][T13914] loop4: detected capacity change from 0 to 128
[  657.572471][T13914] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  657.601490][T13914] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  657.633995][T13914] iommufd_mock iommufd_mock1: Adding to iommu group 1
[  657.659587][ T5886] usb 6-1: config 0 has an invalid interface number: 2 but max is 0
[  657.685804][ T5886] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  657.721195][ T5886] usb 6-1: config 0 has no interface number 0
[  657.732069][ T5886] usb 6-1: config 0 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  657.749352][T13929] loop3: detected capacity change from 0 to 16
[  657.758093][T13929] erofs (device loop3): mounted with root inode @ nid 36.
[  657.766988][ T5886] usb 6-1: New USB device found, idVendor=05ac, idProduct=b0c5, bcdDevice=61.c8
[  657.776522][ T5886] usb 6-1: New USB device strings: Mfr=1, Product=33, SerialNumber=3
[  657.790795][ T5886] usb 6-1: Product: syz
[  657.795532][ T5886] usb 6-1: Manufacturer: syz
[  657.825227][ T5886] usb 6-1: SerialNumber: syz
[  657.926253][ T5887] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  658.149520][ T5841] Bluetooth: hci3: Opcode 0x0c03 failed: -110
[  658.157589][ T5887] usb 3-1: Using ep0 maxpacket: 16
[  658.182014][ T5887] usb 3-1: config 0 has an invalid interface number: 251 but max is 0
[  658.252344][ T5887] usb 3-1: config 0 has no interface number 0
[  658.318803][ T5887] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16
[  658.397704][ T5887] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[  658.536646][ T5886] usb 6-1: config 0 descriptor??
[  658.715200][ T5887] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[  658.725824][ T5887] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  658.743991][ T5887] usb 3-1: Product: syz
[  658.944405][T13943] loop4: detected capacity change from 0 to 256
[  658.993147][T13943] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d)
[  659.196794][ T5887] usb 3-1: Manufacturer: syz
[  659.562572][ T5887] usb 3-1: SerialNumber: syz
[  659.668716][ T5887] usb 3-1: config 0 descriptor??
[  659.672802][ T5886] usb 6-1: USB disconnect, device number 5
[  659.690878][T13923] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  659.766484][T13923] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  660.860398][ T5887] asix 3-1:0.251: probe with driver asix failed with error -71
[  660.875470][ T5887] usb 3-1: USB disconnect, device number 10
[  660.881587][    T9] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  661.066303][    T9] usb 1-1: Using ep0 maxpacket: 32
[  661.073691][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  661.085990][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  661.108190][    T9] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  661.135471][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  661.174230][    T9] usb 1-1: config 0 descriptor??
[  661.223279][    T9] hub 1-1:0.0: USB hub found
[  661.582311][    T9] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19)
[  661.947885][T13945] 9pnet_fd: Insufficient options for proto=fd
[  662.373046][ T5841] Bluetooth: hci2: command 0x0406 tx timeout
[  662.475192][T13971] loop3: detected capacity change from 0 to 32768
[  662.490226][T13971] ocfs2: Unknown parameter 'erors'
[  662.698150][T13969] TCP: out of memory -- consider tuning tcp_mem
[  663.273649][T13945] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  663.422766][T14003] loop2: detected capacity change from 0 to 1024
[  663.442384][T14003] EXT4-fs: Ignoring removed oldalloc option
[  663.477997][T14003] EXT4-fs: Ignoring removed bh option
[  663.581164][T14003] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback.
[  663.596387][ T5923] hid-generic 0000:0000:0000.0008: unknown main item tag 0x0
[  663.694169][ T5923] hid-generic 0000:0000:0000.0008: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  663.714112][    T9] usbhid 1-1:0.0: can't add hid device: -71
[  663.720931][    T9] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[  663.760745][    T9] usb 1-1: USB disconnect, device number 10
[  663.849412][T14017] loop5: detected capacity change from 0 to 512
[  664.097737][T14017] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem
[  664.156322][T14017] EXT4-fs (loop5): invalid journal inode
[  664.162466][T14017] EXT4-fs (loop5): can't get journal size
[  664.350274][T14003] EXT4-fs: Ignoring removed orlov option
[  664.383071][T14003] EXT4-fs: Remounting file system with no journal so ignoring journalled data option
[  664.493431][T14003] EXT4-fs error (device loop2): __ext4_remount:6738: comm syz.2.1548: Abort forced by user
[  664.510199][T14003] EXT4-fs (loop2): Remounting filesystem read-only
[  664.517260][T14003] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-001000000000 r/w. Quota mode: writeback.
[  664.525104][T14017] EXT4-fs (loop5): 1 truncate cleaned up
[  664.537811][T14017] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  664.564390][ T5886] usb 5-1: new full-speed USB device number 12 using dummy_hcd
[  664.601941][T14019] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  664.612039][T14019] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  664.691956][T14024] EXT4-fs (loop5): shut down requested (2)
[  664.698412][T14019] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  664.707727][   T29] audit: type=1800 audit(1736674213.700:30): pid=14017 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1547" name="bus" dev="loop5" ino=18 res=0 errno=0
[  664.713682][T14019] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  664.753379][T14010] ieee802154 phy0 wpan0: encryption failed: -22
[  664.773120][T11746] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-001000000000.
[  664.783617][T14019] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  664.804597][T14019] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  664.891715][T14019] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  664.935022][T14019] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  664.970188][T14019] Bluetooth: hci4: Opcode 0x0406 failed: -4
[  665.898296][T14030] loop0: detected capacity change from 0 to 40427
[  665.935847][T14030] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  665.956328][T14030] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  665.971192][T14030] F2FS-fs (loop0): invalid crc value
[  666.019286][T14030] F2FS-fs (loop0): Found nat_bits in checkpoint
[  666.030953][T14032] loop3: detected capacity change from 0 to 32768
[  666.041370][T14032] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1556 (14032)
[  666.895262][ T5841] Bluetooth: hci0: command 0x0406 tx timeout
[  666.901747][ T5841] Bluetooth: hci1: command 0x0406 tx timeout
[  666.907895][ T5841] Bluetooth: hci2: command 0x0406 tx timeout
[  666.927673][ T7495] Bluetooth: hci4: command 0x0c1a tx timeout
[  666.943325][T14030] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  666.950772][T14030] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  666.965874][T13019] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  667.066208][T14032] BTRFS info (device loop3 state S): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  667.086287][ T5886] usb 5-1: unable to get BOS descriptor or descriptor too short
[  667.095010][ T5886] usb 5-1: no configurations
[  667.100834][ T5886] usb 5-1: can't read configurations, error -22
[  667.116322][T14032] BTRFS info (device loop3 state S): using crc32c (crc32c-x86_64) checksum algorithm
[  667.136316][T14032] BTRFS info (device loop3 state S): using free-space-tree
[  667.382567][   T52] BTRFS warning (device loop3 state S): checksum verify failed on logical 1052672 mirror 1 wanted 0x37e030f7 found 0xf6479a7e level 0, ignored
[  667.413820][T14063] loop4: detected capacity change from 0 to 128
[  667.421135][T10171] BTRFS warning (device loop3 state S): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xbeadaddc level 0, ignored
[  667.436782][T14064] loop5: detected capacity change from 0 to 512
[  667.436976][T10171] BTRFS warning (device loop3 state S): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0x32c165c1 level 0, ignored
[  667.444057][T14064] EXT4-fs: Ignoring removed bh option
[  667.463779][T10171] BTRFS warning (device loop3 state S): checksum verify failed on logical 5328896 mirror 1 wanted 0x51ec978b found 0x0bc7de37 level 0, ignored
[  667.464594][T14064] EXT4-fs: Ignoring removed mblk_io_submit option
[  667.635565][T14064] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  667.779114][T14032] BTRFS error (device loop3 state S): logical 6881280 len 1638400 found bg but no related chunk
[  667.789919][T14064] EXT4-fs (loop5): revision level too high, forcing read-only mode
[  667.799739][T14064] EXT4-fs (loop5): orphan cleanup on readonly fs
[  667.811055][T14064] Quota error (device loop5): v2_read_file_info: Free block number 524292 out of range (1, 6).
[  667.822928][T14064] EXT4-fs warning (device loop5): ext4_enable_quotas:7145: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  668.508872][T14064] EXT4-fs (loop5): Cannot turn on quotas: error -117
[  668.520371][T14064] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.1561: Invalid block bitmap block 0 in block_group 0
[  668.593868][T14064] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6550: Corrupt filesystem
[  668.610810][T14064] EXT4-fs (loop5): 1 orphan inode deleted
[  668.618690][T14064] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  668.933001][ T5841] Bluetooth: hci1: command 0x0406 tx timeout
[  668.949699][ T5841] Bluetooth: hci0: command 0x0406 tx timeout
[  669.013992][ T5841] Bluetooth: hci4: command 0x0c1a tx timeout
[  669.039377][T14077] EXT4-fs error (device loop5): ext4_lookup:1817: inode #2: comm syz.5.1561: deleted inode referenced: 12
[  669.137463][ T7495] Bluetooth: hci2: command 0x0406 tx timeout
[  669.237284][T14032] BTRFS error (device loop3 state S): open_ctree failed: -4
[  669.472358][T14079] x_tables: duplicate underflow at hook 2
[  669.566809][T13019] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  669.961791][T14092] loop5: detected capacity change from 0 to 256
[  669.969326][T14092] exfat: Unknown parameter '^ΎΠ†'
[  670.102594][T14087] loop2: detected capacity change from 0 to 40427
[  670.143253][T14087] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  670.151548][T14087] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  670.173020][T14087] F2FS-fs (loop2): invalid crc value
[  670.183772][T14087] F2FS-fs (loop2): Found nat_bits in checkpoint
[  670.285009][T14087] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  670.292560][T14087] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  671.260063][T13898] Bluetooth: hci4: command 0x0c1a tx timeout
[  672.246964][T14106] FAULT_INJECTION: forcing a failure.
[  672.246964][T14106] name failslab, interval 1, probability 0, space 0, times 0
[  672.260599][T14106] CPU: 1 UID: 0 PID: 14106 Comm: syz.3.1570 Not tainted 6.13.0-rc6-next-20250107-syzkaller #0
[  672.260624][T14106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  672.260635][T14106] Call Trace:
[  672.260642][T14106]  <TASK>
[  672.260650][T14106]  dump_stack_lvl+0x241/0x360
[  672.260675][T14106]  ? __pfx_dump_stack_lvl+0x10/0x10
[  672.260693][T14106]  ? __pfx__printk+0x10/0x10
[  672.260731][T14106]  should_fail_ex+0x40a/0x550
[  672.260761][T14106]  ? __pfx_ip6_dst_gc+0x10/0x10
[  672.260788][T14106]  should_failslab+0xac/0x100
[  672.260816][T14106]  ? dst_alloc+0x12b/0x190
[  672.260832][T14106]  kmem_cache_alloc_noprof+0x70/0x380
[  672.260849][T14106]  ? __pfx_rt6_find_cached_rt+0x10/0x10
[  672.260874][T14106]  ? __pfx_ip6_dst_gc+0x10/0x10
[  672.260900][T14106]  dst_alloc+0x12b/0x190
[  672.260921][T14106]  ip6_pol_route+0xb87/0x15d0
[  672.260942][T14106]  ? ip6_pol_route+0x198/0x15d0
[  672.260961][T14106]  ? __pfx_ip6_pol_route+0x10/0x10
[  672.260997][T14106]  fib6_rule_lookup+0x3c2/0x790
[  672.261018][T14106]  ? __pfx_ip6_pol_route_output+0x10/0x10
[  672.261037][T14106]  ? __pfx_fib6_rule_lookup+0x10/0x10
[  672.261062][T14106]  ? __lock_acquire+0x1397/0x2100
[  672.261096][T14106]  ? ip6_route_output_flags+0x30/0x610
[  672.261114][T14106]  ip6_route_output_flags+0x38e/0x610
[  672.261138][T14106]  ip6_dst_lookup_tail+0x290/0x14f0
[  672.261166][T14106]  ? __pfx_lock_acquire+0x10/0x10
[  672.261191][T14106]  ? __pfx_ip6_dst_lookup_tail+0x10/0x10
[  672.261215][T14106]  ? do_raw_spin_trylock+0xc8/0x1f0
[  672.261233][T14106]  ? __pfx_do_raw_spin_trylock+0x10/0x10
[  672.261253][T14106]  ? __pfx_make_kuid+0x10/0x10
[  672.261284][T14106]  icmpv6_echo_reply+0xcd2/0x1cc0
[  672.261309][T14106]  ? icmpv6_echo_reply+0xa7d/0x1cc0
[  672.261332][T14106]  ? __pfx_icmpv6_echo_reply+0x10/0x10
[  672.261346][T14106]  ? csum_partial+0x22f/0x2b0
[  672.261378][T14106]  ? __skb_checksum_complete+0xa8/0x470
[  672.261408][T14106]  ? __skb_checksum_complete+0x1a2/0x470
[  672.261436][T14106]  ? __pfx___skb_checksum_complete+0x10/0x10
[  672.261459][T14106]  ? __pfx_csum_partial_ext+0x10/0x10
[  672.261481][T14106]  ? __pfx_csum_block_add_ext+0x10/0x10
[  672.261504][T14106]  ? __xfrm_policy_check2+0x3de/0x7b0
[  672.261520][T14106]  ? csum_ipv6_magic+0x1e5/0x2f0
[  672.261548][T14106]  icmpv6_rcv+0x120f/0x19e0
[  672.261582][T14106]  ? __pfx_icmpv6_rcv+0x10/0x10
[  672.261609][T14106]  ? __pfx_tcp_v6_rcv+0x10/0x10
[  672.261632][T14106]  ip6_protocol_deliver_rcu+0x105b/0x1580
[  672.261677][T14106]  ? ip6_input_finish+0xdc/0x2d0
[  672.261699][T14106]  ip6_input_finish+0x187/0x2d0
[  672.261725][T14106]  ? __pfx_ip6_input_finish+0x10/0x10
[  672.261748][T14106]  NF_HOOK+0x3a4/0x450
[  672.261774][T14106]  ? NF_HOOK+0x9a/0x450
[  672.261795][T14106]  ? __pfx_NF_HOOK+0x10/0x10
[  672.261820][T14106]  ? __pfx_ip6_input_finish+0x10/0x10
[  672.261853][T14106]  ? __pfx_ip6_rcv_finish+0x10/0x10
[  672.261886][T14106]  NF_HOOK+0x3a4/0x450
[  672.261908][T14106]  ? skb_orphan+0x4b/0xd0
[  672.261932][T14106]  ? NF_HOOK+0x9a/0x450
[  672.261954][T14106]  ? __pfx_NF_HOOK+0x10/0x10
[  672.261978][T14106]  ? __pfx_ip6_rcv_finish+0x10/0x10
[  672.262008][T14106]  ? __pfx_ipv6_rcv+0x10/0x10
[  672.262031][T14106]  __netif_receive_skb+0x1ea/0x650
[  672.262056][T14106]  ? __pfx_lock_acquire+0x10/0x10
[  672.262077][T14106]  ? kasan_save_track+0x51/0x80
[  672.262099][T14106]  ? __pfx___netif_receive_skb+0x10/0x10
[  672.262121][T14106]  ? build_skb+0x52/0x2a0
[  672.262136][T14106]  ? tun_get_user+0x2173/0x48a0
[  672.262155][T14106]  ? tun_chr_write_iter+0x10d/0x1f0
[  672.262174][T14106]  ? do_syscall_64+0xf3/0x230
[  672.262192][T14106]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  672.262214][T14106]  ? tun_rx_batched+0x160/0x8f0
[  672.262233][T14106]  ? __pfx_lockdep_softirqs_off+0x10/0x10
[  672.262260][T14106]  ? netif_receive_skb+0x131/0x890
[  672.262280][T14106]  ? netif_receive_skb+0x131/0x890
[  672.262302][T14106]  netif_receive_skb+0x1e8/0x890
[  672.262324][T14106]  ? tun_rx_batched+0x160/0x8f0
[  672.262343][T14106]  ? __pfx_netif_receive_skb+0x10/0x10
[  672.262375][T14106]  ? tun_rx_batched+0x160/0x8f0
[  672.262394][T14106]  tun_rx_batched+0x1b7/0x8f0
[  672.262415][T14106]  ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10
[  672.262441][T14106]  ? __pfx_lock_acquire+0x10/0x10
[  672.262463][T14106]  ? __pfx_tun_rx_batched+0x10/0x10
[  672.262501][T14106]  tun_get_user+0x30cc/0x48a0
[  672.262521][T14106]  ? tun_get_user+0x2bba/0x48a0
[  672.262539][T14106]  ? tun_get_user+0x875/0x48a0
[  672.262576][T14106]  ? __pfx_tun_get_user+0x10/0x10
[  672.262613][T14106]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  672.262632][T14106]  ? tun_get+0x1e/0x2f0
[  672.262650][T14106]  ? __pfx_lock_release+0x10/0x10
[  672.262686][T14106]  ? tun_get+0x1e/0x2f0
[  672.262704][T14106]  ? tun_get+0x27d/0x2f0
[  672.262725][T14106]  tun_chr_write_iter+0x10d/0x1f0
[  672.262748][T14106]  vfs_write+0xacf/0xd10
[  672.262774][T14106]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  672.262795][T14106]  ? __pfx_vfs_write+0x10/0x10
[  672.262820][T14106]  ? __fget_files+0x2a/0x410
[  672.262841][T14106]  ? __fget_files+0x2a/0x410
[  672.262873][T14106]  ksys_write+0x18f/0x2b0
[  672.262898][T14106]  ? __pfx_ksys_write+0x10/0x10
[  672.262921][T14106]  ? do_syscall_64+0x100/0x230
[  672.262943][T14106]  ? do_syscall_64+0xb6/0x230
[  672.262964][T14106]  do_syscall_64+0xf3/0x230
[  672.262983][T14106]  ? clear_bhb_loop+0x35/0x90
[  672.263010][T14106]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  672.263034][T14106] RIP: 0033:0x7f655d5847df
[  672.263049][T14106] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  672.263063][T14106] RSP: 002b:00007f655e49a000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  672.263081][T14106] RAX: ffffffffffffffda RBX: 00007f655d775fa0 RCX: 00007f655d5847df
[  672.263094][T14106] RDX: 0000000000000046 RSI: 0000000020000180 RDI: 00000000000000c8
[  672.263105][T14106] RBP: 00007f655e49a090 R08: 0000000000000000 R09: 0000000000000000
[  672.263115][T14106] R10: 0000000000000046 R11: 0000000000000293 R12: 0000000000000001
[  672.263126][T14106] R13: 0000000000000000 R14: 00007f655d775fa0 R15: 00007fff61730c68
[  672.263154][T14106]  </TASK>
[  673.836215][T13898] Bluetooth: hci4: command 0x0c1a tx timeout
[  674.077825][T14114] loop4: detected capacity change from 0 to 512
[  674.364923][T14114] EXT4-fs error (device loop4): ext4_orphan_get:1389: inode #15: comm syz.4.1573: casefold flag without casefold feature
[  674.379214][T14114] EXT4-fs error (device loop4): ext4_orphan_get:1394: comm syz.4.1573: couldn't read orphan inode 15 (err -117)
[  674.394181][T14114] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  674.692791][ T5835] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  674.871804][T14116] loop0: detected capacity change from 0 to 32768
[  675.131697][T14116] XFS (loop0): Mounting V5 Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6
[  675.456215][T14146] loop4: detected capacity change from 0 to 40427
[  675.603070][T14146] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  675.611112][T14146] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  675.639143][T14146] F2FS-fs (loop4): invalid crc value
[  676.202516][T14146] F2FS-fs (loop4): Found nat_bits in checkpoint
[  676.562966][T14160] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1583'.
[  676.902980][T14116] XFS (loop0): Ending clean mount
[  676.959344][T14146] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  676.967268][T14146] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  677.401183][T14164] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1584'.
[  677.732514][T14166] syz.4.1582: attempt to access beyond end of device
[  677.732514][T14166] loop4: rw=2049, sector=77824, nr_sectors = 520 limit=40427
[  678.396860][ T5832] XFS (loop0): Unmounting Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6
[  679.173866][T14176] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1585'.
[  681.678525][T14190] loop2: detected capacity change from 0 to 512
[  681.706311][T14190] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  681.916291][ T5888] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  682.177754][T14190] FAULT_INJECTION: forcing a failure.
[  682.177754][T14190] name failslab, interval 1, probability 0, space 0, times 0
[  682.196973][ T5888] usb 6-1: Using ep0 maxpacket: 32
[  682.286551][ T5888] usb 6-1: config 0 has an invalid interface number: 2 but max is 0
[  682.372274][ T5888] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  682.411187][T14190] CPU: 1 UID: 0 PID: 14190 Comm: syz.2.1591 Not tainted 6.13.0-rc6-next-20250107-syzkaller #0
[  682.411238][T14190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  682.411252][T14190] Call Trace:
[  682.411260][T14190]  <TASK>
[  682.411271][T14190]  dump_stack_lvl+0x241/0x360
[  682.411302][T14190]  ? __pfx_dump_stack_lvl+0x10/0x10
[  682.411325][T14190]  ? __pfx__printk+0x10/0x10
[  682.411362][T14190]  ? fs_reclaim_acquire+0x93/0x130
[  682.411392][T14190]  ? __pfx___might_resched+0x10/0x10
[  682.411424][T14190]  should_fail_ex+0x40a/0x550
[  682.411464][T14190]  should_failslab+0xac/0x100
[  682.411500][T14190]  __kmalloc_noprof+0xdd/0x4c0
[  682.411520][T14190]  ? ext4_convert_inline_data_nolock+0x11a/0xe00
[  682.411557][T14190]  ext4_convert_inline_data_nolock+0x11a/0xe00
[  682.411593][T14190]  ? irqentry_exit+0x63/0x90
[  682.411622][T14190]  ? __pfx_ext4_convert_inline_data_nolock+0x10/0x10
[  682.411657][T14190]  ? ext4_convert_inline_data+0x4c1/0x620
[  682.411686][T14190]  ? ext4_convert_inline_data+0x4ca/0x620
[  682.411726][T14190]  ext4_convert_inline_data+0x4de/0x620
[  682.411754][T14190]  ? preempt_schedule_thunk+0x1a/0x30
[  682.411916][T14190]  ? __pfx_ext4_convert_inline_data+0x10/0x10
[  682.411959][T14190]  ? down_write+0x1de/0x220
[  682.412004][T14190]  ext4_fallocate+0xec/0x1ea0
[  682.412049][T14190]  ? __pfx_ext4_fallocate+0x10/0x10
[  682.412079][T14190]  vfs_fallocate+0x623/0x7a0
[  682.412111][T14190]  ? __rcu_read_unlock+0xa1/0x110
[  682.412220][T14190]  ? __pfx_vfs_fallocate+0x10/0x10
[  682.412272][T14190]  __x64_sys_fallocate+0xbc/0x110
[  682.412322][T14190]  do_syscall_64+0xf3/0x230
[  682.412348][T14190]  ? clear_bhb_loop+0x35/0x90
[  682.412384][T14190]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  682.412414][T14190] RIP: 0033:0x7fd7d4785d29
[  682.412434][T14190] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  682.412452][T14190] RSP: 002b:00007fd7d553a038 EFLAGS: 00000246 ORIG_RAX: 000000000000011d
[  682.412477][T14190] RAX: ffffffffffffffda RBX: 00007fd7d4975fa0 RCX: 00007fd7d4785d29
[  682.412493][T14190] RDX: 0000000000000000 RSI: 0000000000000020 RDI: 0000000000000006
[  682.412507][T14190] RBP: 00007fd7d553a090 R08: 0000000000000000 R09: 0000000000000000
[  682.412521][T14190] R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000000001
[  682.412535][T14190] R13: 0000000000000000 R14: 00007fd7d4975fa0 R15: 00007ffdc22dcd48
[  682.412569][T14190]  </TASK>
[  682.688655][ T5888] usb 6-1: config 0 has no interface number 0
[  682.694882][ T5888] usb 6-1: config 0 interface 2 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  682.710654][ T5888] usb 6-1: New USB device found, idVendor=05ac, idProduct=b0c5, bcdDevice=61.c8
[  682.721140][ T5888] usb 6-1: New USB device strings: Mfr=1, Product=33, SerialNumber=3
[  682.730238][ T5888] usb 6-1: Product: syz
[  682.734442][ T5888] usb 6-1: Manufacturer: syz
[  682.739532][ T5888] usb 6-1: SerialNumber: syz
[  682.746454][ T5888] usb 6-1: config 0 descriptor??
[  682.845278][T14202] binder: BINDER_SET_CONTEXT_MGR already set
[  682.851725][T14202] binder: 14201:14202 ioctl 4018620d 20004a80 returned -16
[  682.925777][T11746] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  683.110785][ T5888] usb 6-1: USB disconnect, device number 6
[  684.246150][T14209] loop3: detected capacity change from 0 to 32768
[  684.256821][T14209] BTRFS: device /dev/loop3 (7:3) using temp-fsid 7916f72f-9172-4c70-a68a-3016cd83cb03
[  684.266507][ T5886] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  684.266993][T14209] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1593 (14209)
[  684.290322][T14209] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  684.300728][T14209] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  684.348283][T14217] loop5: detected capacity change from 0 to 256
[  684.372246][T14217] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x4ca973fa, utbl_chksum : 0xe619d30d)
[  684.401024][T14223] loop0: detected capacity change from 0 to 256
[  684.411877][T14217] exFAT-fs (loop5): valid_size(100667392) is greater than size(4096)
[  684.424362][T14223] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x61a18cac, utbl_chksum : 0xe619d30d)
[  684.436900][ T5886] usb 3-1: Using ep0 maxpacket: 32
[  684.451074][ T5886] usb 3-1: config 0 has an invalid interface number: 250 but max is 0
[  684.464342][ T5886] usb 3-1: config 0 has no interface number 0
[  684.484117][ T5886] usb 3-1: too many endpoints for config 0 interface 250 altsetting 97: 255, using maximum allowed: 30
[  684.505724][   T29] audit: type=1800 audit(1736674233.490:31): pid=14223 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1599" name="bus" dev="loop0" ino=1048672 res=0 errno=0
[  684.546220][ T5886] usb 3-1: config 0 interface 250 altsetting 97 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  684.583344][T14209] BTRFS info (device loop3): rebuilding free space tree
[  684.611042][ T5886] usb 3-1: config 0 interface 250 has no altsetting 0
[  684.631055][ T5886] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[  684.653962][ T5886] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  684.666166][    T9] usb 5-1: new full-speed USB device number 14 using dummy_hcd
[  684.698705][T14209] BTRFS info (device loop3): disabling free space tree
[  684.701815][ T5886] usb 3-1: config 0 descriptor??
[  684.705670][T14209] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  684.720771][T14209] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  684.855383][   T29] audit: type=1800 audit(1736674233.840:32): pid=14205 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1593" name="file1" dev="loop3" ino=260 res=0 errno=0
[  685.197339][T14233] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1599'.
[  685.269104][ T5886] usb 3-1: string descriptor 0 read error: -71
[  685.279060][ T5886] gspca_main: nw80x-2.14.0 probing 055f:d001
[  685.286218][ T5886] gspca_nw80x: reg_w err -71
[  685.291028][ T5886] nw80x 3-1:0.250: probe with driver nw80x failed with error -71
[  685.313155][ T5887] IPVS: starting estimator thread 0...
[  685.313647][T14223] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  685.332177][ T5886] usb 3-1: USB disconnect, device number 11
[  685.391672][T10128] BTRFS info (device loop3): last unmount of filesystem 7916f72f-9172-4c70-a68a-3016cd83cb03
[  685.416656][T14235] IPVS: using max 22 ests per chain, 52800 per kthread
[  685.454732][    T9] usb 5-1: unable to get BOS descriptor or descriptor too short
[  685.463430][    T9] usb 5-1: not running at top speed; connect to a high speed hub
[  685.474064][    T9] usb 5-1: config 129 has an invalid interface number: 28 but max is 0
[  685.489331][    T9] usb 5-1: config 129 has no interface number 0
[  685.531443][    T9] usb 5-1: config 129 interface 28 altsetting 250 has an endpoint descriptor with address 0xFD, changing to 0x8D
[  685.551096][    T9] usb 5-1: config 129 interface 28 altsetting 250 endpoint 0x8D has invalid maxpacket 18502, setting to 64
[  685.584139][    T9] usb 5-1: config 129 interface 28 altsetting 250 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  685.618673][    T9] usb 5-1: config 129 interface 28 has no altsetting 0
[  685.629803][T14237] loop0: detected capacity change from 0 to 1024
[  685.638500][    T9] usb 5-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice=db.57
[  685.652034][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  685.682966][    T9] usb 5-1: Product: syz
[  685.702797][    T9] usb 5-1: Manufacturer: syz
[  685.714062][    T9] usb 5-1: SerialNumber: syz
[  685.727719][T14210] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  685.827146][T14239] FAULT_INJECTION: forcing a failure.
[  685.827146][T14239] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  685.840749][T14239] CPU: 0 UID: 0 PID: 14239 Comm: syz.3.1600 Not tainted 6.13.0-rc6-next-20250107-syzkaller #0
[  685.840778][T14239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  685.840793][T14239] Call Trace:
[  685.840800][T14239]  <TASK>
[  685.840809][T14239]  dump_stack_lvl+0x241/0x360
[  685.840840][T14239]  ? __pfx_dump_stack_lvl+0x10/0x10
[  685.840867][T14239]  ? __pfx__printk+0x10/0x10
[  685.840908][T14239]  ? snprintf+0xda/0x120
[  685.840941][T14239]  should_fail_ex+0x40a/0x550
[  685.840980][T14239]  _copy_to_user+0x31/0xb0
[  685.841015][T14239]  simple_read_from_buffer+0xca/0x150
[  685.841053][T14239]  proc_fail_nth_read+0x1e9/0x250
[  685.841089][T14239]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  685.841125][T14239]  ? rw_verify_area+0x243/0x630
[  685.841152][T14239]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  685.841187][T14239]  vfs_read+0x1f8/0xb40
[  685.841216][T14239]  ? fdget_pos+0x254/0x320
[  685.841240][T14239]  ? __pfx___mutex_lock+0x10/0x10
[  685.841266][T14239]  ? __pfx_vfs_read+0x10/0x10
[  685.841290][T14239]  ? do_sys_openat2+0x17a/0x1d0
[  685.841315][T14239]  ? __fget_files+0x2a/0x410
[  685.841339][T14239]  ? __fget_files+0x395/0x410
[  685.841360][T14239]  ? __fget_files+0x2a/0x410
[  685.841392][T14239]  ksys_read+0x18f/0x2b0
[  685.841422][T14239]  ? __pfx_ksys_read+0x10/0x10
[  685.841450][T14239]  ? do_syscall_64+0x100/0x230
[  685.841478][T14239]  ? do_syscall_64+0xb6/0x230
[  685.841504][T14239]  do_syscall_64+0xf3/0x230
[  685.841528][T14239]  ? clear_bhb_loop+0x35/0x90
[  685.841562][T14239]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  685.841591][T14239] RIP: 0033:0x7f655d58473c
[  685.841610][T14239] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  685.841628][T14239] RSP: 002b:00007f655e49a030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  685.841651][T14239] RAX: ffffffffffffffda RBX: 00007f655d775fa0 RCX: 00007f655d58473c
[  685.841666][T14239] RDX: 000000000000000f RSI: 00007f655e49a0a0 RDI: 0000000000000003
[  685.841679][T14239] RBP: 00007f655e49a090 R08: 0000000000000000 R09: 0000000000000000
[  685.841692][T14239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  685.841705][T14239] R13: 0000000000000000 R14: 00007f655d775fa0 R15: 00007fff61730c68
[  685.841744][T14239]  </TASK>
[  686.128092][T14237] hfsplus: xattr searching failed
[  686.181500][T14237] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1601'.
[  686.226654][ T1296] ieee802154 phy0 wpan0: encryption failed: -22
[  686.233394][ T1296] ieee802154 phy1 wpan1: encryption failed: -22
[  686.330453][    T9] etas_es58x 5-1:129.28: Starting syz syz (Serial Number syz)
[  686.331271][    T9] etas_es58x 5-1:129.28: could not retrieve the product info string
[  686.355402][    T9] usb 5-1: USB disconnect, device number 14
[  686.357066][    T9] etas_es58x 5-1:129.28: Disconnecting syz syz
[  686.460023][   T69] hfsplus: b-tree write err: -5, ino 3
[  686.685268][ T5887] usb 4-1: new full-speed USB device number 9 using dummy_hcd
[  686.713625][T14257] netlink: 'syz.4.1606': attribute type 1 has an invalid length.
[  686.721924][T14257] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1606'.
[  686.849234][ T5887] usb 4-1: device descriptor read/64, error -71
[  687.169133][ T5887] usb 4-1: new full-speed USB device number 10 using dummy_hcd
[  687.696415][ T5887] usb 4-1: device descriptor read/64, error -71
[  687.796578][ T5945] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  687.828993][ T5887] usb usb4-port1: attempt power cycle
[  687.976317][ T5945] usb 3-1: device descriptor read/64, error -71
[  688.214213][T14273] loop4: detected capacity change from 0 to 2048
[  688.221246][ T5945] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  688.290990][T14273]  loop4: p3 < > p4 < >
[  688.299155][T14273] loop4: partition table partially beyond EOD, truncated
[  688.326376][T14273] loop4: p3 start 4284289 is beyond EOD, truncated
[  688.366772][ T5945] usb 3-1: device descriptor read/64, error -71
[  688.429592][ T5887] usb 4-1: new full-speed USB device number 11 using dummy_hcd
[  688.482615][ T5945] usb usb3-port1: attempt power cycle
[  688.485337][ T5887] usb 4-1: device descriptor read/8, error -71
[  689.726246][ T5945] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  689.752756][T14281] binder: 14279:14281 ioctl c0c89425 20000240 returned -22
[  689.756987][ T5945] usb 3-1: device descriptor read/8, error -71
[  689.774279][T14281] binder: 14279:14281 ioctl 50009418 20001040 returned -22
[  690.615839][T14307] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1619'.
[  691.345840][T14308] loop5: detected capacity change from 0 to 1024
[  691.464032][T14307] loop2: detected capacity change from 0 to 32768
[  691.479738][T14307] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  691.511955][T14307] XFS (loop2): Ending clean mount
[  691.556507][T14305] loop4: detected capacity change from 0 to 1024
[  691.590032][T14308] EXT4-fs: Ignoring removed nobh option
[  691.712264][T14308] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  691.738792][T14303] vlan2: entered allmulticast mode
[  691.809832][T14303] bond0: entered allmulticast mode
[  691.821571][T14303] bond_slave_0: entered allmulticast mode
[  691.859673][T14325] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1624'.
[  691.872538][T14303] bond_slave_1: entered allmulticast mode
[  691.904003][T14303] bond0: left allmulticast mode
[  692.100007][T14303] bond_slave_0: left allmulticast mode
[  692.105953][T14303] bond_slave_1: left allmulticast mode
[  692.431919][T14334] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1625'.
[  692.901097][T14300] XFS (loop2): User initiated shutdown received.
[  692.909466][T14300] XFS (loop2): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x110/0x160 (fs/xfs/xfs_fsops.c:443).  Shutting down filesystem.
[  692.923684][T14300] XFS (loop2): Please unmount the filesystem and rectify the problem(s)
[  693.100858][T11746] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  693.103572][T14340] loop0: detected capacity change from 0 to 2048
[  693.163290][T14340] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  693.412665][T13019] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  693.652439][T14351] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1630'.
[  694.554475][T14360] binder: 14359:14360 ioctl c0306201 0 returned -14
[  694.568800][T14362] loop5: detected capacity change from 0 to 1024
[  695.516421][ T5832] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  695.695401][T14373] FAULT_INJECTION: forcing a failure.
[  695.695401][T14373] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  695.769862][T14373] CPU: 1 UID: 0 PID: 14373 Comm: syz.2.1635 Not tainted 6.13.0-rc6-next-20250107-syzkaller #0
[  695.769894][T14373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  695.769908][T14373] Call Trace:
[  695.769915][T14373]  <TASK>
[  695.769923][T14373]  dump_stack_lvl+0x241/0x360
[  695.769952][T14373]  ? __pfx_dump_stack_lvl+0x10/0x10
[  695.769974][T14373]  ? __pfx__printk+0x10/0x10
[  695.770009][T14373]  ? __pfx_lock_release+0x10/0x10
[  695.770044][T14373]  should_fail_ex+0x40a/0x550
[  695.770080][T14373]  _copy_from_user+0x2f/0xc0
[  695.770112][T14373]  copy_msghdr_from_user+0xae/0x680
[  695.770139][T14373]  ? __lock_acquire+0x1397/0x2100
[  695.770169][T14373]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[  695.770197][T14373]  ? __fget_files+0x2a/0x410
[  695.770223][T14373]  ? __fget_files+0x2a/0x410
[  695.770253][T14373]  do_recvmmsg+0x3bd/0xab0
[  695.770290][T14373]  ? __pfx_do_recvmmsg+0x10/0x10
[  695.770336][T14373]  ? ksys_write+0x22a/0x2b0
[  695.770363][T14373]  ? __pfx_lock_release+0x10/0x10
[  695.770397][T14373]  ? sb_end_write+0xe9/0x1c0
[  695.770419][T14373]  ? vfs_write+0x7fa/0xd10
[  695.770448][T14373]  ? __mutex_unlock_slowpath+0x227/0x800
[  695.770482][T14373]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  695.770513][T14373]  ? __fget_files+0x2a/0x410
[  695.770548][T14373]  __x64_sys_recvmmsg+0x199/0x250
[  695.770578][T14373]  ? __pfx___x64_sys_recvmmsg+0x10/0x10
[  695.770605][T14373]  ? do_syscall_64+0x100/0x230
[  695.770632][T14373]  ? do_syscall_64+0xb6/0x230
[  695.770658][T14373]  do_syscall_64+0xf3/0x230
[  695.770682][T14373]  ? clear_bhb_loop+0x35/0x90
[  695.770714][T14373]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  695.770742][T14373] RIP: 0033:0x7fd7d4785d29
[  695.770760][T14373] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  695.770778][T14373] RSP: 002b:00007fd7d54f8038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b
[  695.770800][T14373] RAX: ffffffffffffffda RBX: 00007fd7d4976160 RCX: 00007fd7d4785d29
[  695.770815][T14373] RDX: 0000000000000003 RSI: 0000000020001fc0 RDI: 0000000000000007
[  695.770828][T14373] RBP: 00007fd7d54f8090 R08: 0000000000000000 R09: 0000000000000000
[  695.770840][T14373] R10: 0000000060002000 R11: 0000000000000246 R12: 0000000000000001
[  695.770854][T14373] R13: 0000000000000000 R14: 00007fd7d4976160 R15: 00007ffdc22dcd48
[  695.770884][T14373]  </TASK>
[  696.025132][    C1] vkms_vblank_simulate: vblank timer overrun
[  696.950508][T14381] siw: device registration error -23
[  698.033246][T14380] fuse: Bad value for 'user_id'
[  698.038321][T14380] fuse: Bad value for 'user_id'
[  699.318855][T14391] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1637'.
[  700.385607][T14405] binder: 14404:14405 ioctl c0306201 0 returned -14
[  700.392904][ T5887] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  700.512235][T14410] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1644'.
[  701.260813][   T29] audit: type=1326 audit(1736674250.250:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14396 comm="syz.3.1643" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f655d585d29 code=0x0
[  701.326987][T14412] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  701.400221][T14416] xt_TCPMSS: Only works on TCP SYN packets
[  701.415965][T14397] pimreg: entered allmulticast mode
[  701.465184][ T5887] usb 6-1: Using ep0 maxpacket: 32
[  701.585333][T14397] vlan2: entered allmulticast mode
[  701.590349][ T5887] usb 6-1: config index 0 descriptor too short (expected 156, got 27)
[  701.598854][ T5887] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  701.599379][T14397] bond0: entered allmulticast mode
[  701.614847][ T5887] usb 6-1: config 0 has no interfaces?
[  701.642281][T14397] bond_slave_0: entered allmulticast mode
[  701.670063][T14397] bond_slave_1: entered allmulticast mode
[  701.670752][ T5887] usb 6-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  701.692773][ T5887] usb 6-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  701.702000][ T5887] usb 6-1: Product: syz
[  701.707449][ T5887] usb 6-1: Manufacturer: syz
[  701.712087][ T5887] usb 6-1: SerialNumber: syz
[  701.740868][ T5887] usb 6-1: config 0 descriptor??
[  701.752742][T14397] bond0: left allmulticast mode
[  701.800336][T14397] bond_slave_0: left allmulticast mode
[  701.806001][T14397] bond_slave_1: left allmulticast mode
[  703.223175][T14415] loop4: detected capacity change from 0 to 32768
[  703.231992][T14415] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1649 (14415)
[  703.316828][T14416] loop2: detected capacity change from 0 to 32768
[  703.326884][T14415] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  703.331720][T14416] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1648 (14416)
[  703.346543][T14415] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm
[  703.350463][T14416] ------------[ cut here ]------------
[  703.364346][T14416] ODEBUG: init active (active state 0) object: ffff888054d4d1f8 object type: percpu_counter hint: 0x0
[  703.375626][T14415] BTRFS info (device loop4): using free-space-tree
[  703.383105][T14416] WARNING: CPU: 0 PID: 14416 at lib/debugobjects.c:615 debug_print_object+0x17a/0x1f0
[  703.393164][T14416] Modules linked in:
[  703.395538][T14433] xt_CT: No such helper "syz0"
[  703.397614][T14416] CPU: 0 UID: 0 PID: 14416 Comm: syz.2.1648 Not tainted 6.13.0-rc6-next-20250107-syzkaller #0
[  703.397646][T14416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  703.397662][T14416] RIP: 0010:debug_print_object+0x17a/0x1f0
[  703.397693][T14416] Code: e8 7b 14 39 fd 4c 8b 0b 48 c7 c7 00 0e 60 8c 48 8b 74 24 08 48 89 ea 44 89 e1 4d 89 f8 ff 34 24 e8 cb 7f 93 fc 48 83 c4 08 90 <0f> 0b 90 90 ff 05 b8 87 2e 0b 48 83 c4 10 5b 41 5c 41 5d 41 5e 41
[  703.397714][T14416] RSP: 0018:ffffc9000fcff6b8 EFLAGS: 00010286
[  703.397740][T14416] RAX: 2a7d810ccbd72900 RBX: ffffffff8c626760 RCX: 0000000000080000
[  703.397768][T14416] RDX: ffffc9001b5cf000 RSI: 0000000000037658 RDI: 0000000000037659
[  703.397786][T14416] RBP: ffffffff8c600f80 R08: ffffffff817ff732 R09: fffffbfff1cfa188
[  703.397805][T14416] R10: dffffc0000000000 R11: fffffbfff1cfa188 R12: 0000000000000000
[  703.397823][T14416] R13: ffffffff8c600e98 R14: dffffc0000000000 R15: ffff888054d4d1f8
[  703.397843][T14416] FS:  00007fd7d553a6c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000
[  703.491035][T14438] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1654'.
[  703.497368][T14416] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  703.497393][T14416] CR2: 00007fd7d4769160 CR3: 000000006944a000 CR4: 00000000003526f0
[  703.497414][T14416] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  703.497429][T14416] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  703.497445][T14416] Call Trace:
[  703.497455][T14416]  <TASK>
[  703.497466][T14416]  ? __warn+0x165/0x4d0
[  703.497502][T14416]  ? debug_print_object+0x17a/0x1f0
[  703.497532][T14416]  ? report_bug+0x2b3/0x500
[  703.497553][T14416]  ? debug_print_object+0x17a/0x1f0
[  703.497581][T14416]  ? handle_bug+0x60/0x90
[  703.577457][T14416]  ? exc_invalid_op+0x1a/0x50
[  703.582194][T14416]  ? asm_exc_invalid_op+0x1a/0x20
[  703.587370][T14416]  ? __warn_printk+0x292/0x360
[  703.592246][T14416]  ? debug_print_object+0x17a/0x1f0
[  703.597548][T14416]  __debug_object_init+0x2b9/0x470
[  703.603144][T14416]  ? __pfx___debug_object_init+0x10/0x10
[  703.609520][T14416]  ? pcpu_alloc_noprof+0xfb8/0x1760
[  703.614823][T14416]  __percpu_counter_init_many+0x1c2/0x390
[  703.620690][T14416]  open_fs_devices+0xb5/0x12b0
[  703.625526][T14416]  ? kfree+0x4e/0x430
[  703.630364][T14416]  ? __pfx_devid_cmp+0x10/0x10
[  703.635731][T14416]  ? __pfx_list_sort+0x10/0x10
[  703.640657][T14416]  ? __pfx_btrfs_scan_one_device+0x10/0x10
[  703.649024][T14416]  ? __pfx_open_fs_devices+0x10/0x10
[  703.654882][T14416]  ? btrfs_open_devices+0x103/0x190
[  703.661412][T14416]  btrfs_get_tree+0x552/0x1a30
[  703.666782][T14416]  ? lockdep_init_map_type+0xa1/0x910
[  703.673362][T14416]  ? __pfx_btrfs_get_tree+0x10/0x10
[  703.678823][T14416]  ? __pfx_lockdep_init_map_type+0x10/0x10
[  703.685258][T14416]  ? rcu_is_watching+0x15/0xb0
[  703.690782][T14416]  vfs_get_tree+0x90/0x2b0
[  703.696688][T14416]  fc_mount+0x1b/0xb0
[  703.701608][T14416]  btrfs_get_tree+0x6b1/0x1a30
[  703.707777][T14416]  ? rcu_is_watching+0x15/0xb0
[  703.713139][T14416]  ? generic_parse_monolithic+0x387/0x400
[  703.721947][T14416]  ? __pfx_aa_get_newest_label+0x10/0x10
[  703.728466][T14416]  ? __pfx_btrfs_get_tree+0x10/0x10
[  703.735584][T14416]  ? rcu_is_watching+0x15/0xb0
[  703.740989][T14416]  ? apparmor_capable+0x13b/0x1b0
[  703.746240][T14416]  vfs_get_tree+0x90/0x2b0
[  703.750916][T14416]  do_new_mount+0x2be/0xb40
[  703.755611][T14416]  ? __pfx_do_new_mount+0x10/0x10
[  703.760880][T14416]  __se_sys_mount+0x2d6/0x3c0
[  703.765710][T14416]  ? __pfx___se_sys_mount+0x10/0x10
[  703.771009][T14416]  ? exc_page_fault+0x590/0x8b0
[  703.775906][T14416]  ? __x64_sys_mount+0x20/0xc0
[  703.780773][T14416]  do_syscall_64+0xf3/0x230
[  703.785319][T14416]  ? clear_bhb_loop+0x35/0x90
[  703.790174][T14416]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  703.796177][T14416] RIP: 0033:0x7fd7d47874ca
[  703.800634][T14416] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  703.821151][T14416] RSP: 002b:00007fd7d5539e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  703.830066][T14416] RAX: ffffffffffffffda RBX: 00007fd7d5539ef0 RCX: 00007fd7d47874ca
[  703.838154][T14416] RDX: 0000000020000200 RSI: 0000000020005600 RDI: 00007fd7d5539eb0
[  703.846288][T14416] RBP: 0000000020000200 R08: 00007fd7d5539ef0 R09: 0000000000000800
[  703.854279][T14416] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000020005600
[  703.862430][T14416] R13: 00007fd7d5539eb0 R14: 000000000000559e R15: 0000000020000740
[  703.870669][T14416]  </TASK>
[  703.873758][T14416] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  703.881071][T14416] CPU: 0 UID: 0 PID: 14416 Comm: syz.2.1648 Not tainted 6.13.0-rc6-next-20250107-syzkaller #0
[  703.891435][T14416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024
[  703.901517][T14416] Call Trace:
[  703.904903][T14416]  <TASK>
[  703.907968][T14416]  dump_stack_lvl+0x241/0x360
[  703.912783][T14416]  ? __pfx_dump_stack_lvl+0x10/0x10
[  703.918076][T14416]  ? __pfx__printk+0x10/0x10
[  703.922786][T14416]  ? vscnprintf+0x5d/0x90
[  703.927153][T14416]  panic+0x349/0x880
[  703.931075][T14416]  ? __warn+0x174/0x4d0
[  703.935250][T14416]  ? __pfx_panic+0x10/0x10
[  703.939730][T14416]  __warn+0x344/0x4d0
[  703.943730][T14416]  ? debug_print_object+0x17a/0x1f0
[  703.948949][T14416]  report_bug+0x2b3/0x500
[  703.953988][T14416]  ? debug_print_object+0x17a/0x1f0
[  703.959378][T14416]  handle_bug+0x60/0x90
[  703.963564][T14416]  exc_invalid_op+0x1a/0x50
[  703.968085][T14416]  asm_exc_invalid_op+0x1a/0x20
[  703.973045][T14416] RIP: 0010:debug_print_object+0x17a/0x1f0
[  703.978975][T14416] Code: e8 7b 14 39 fd 4c 8b 0b 48 c7 c7 00 0e 60 8c 48 8b 74 24 08 48 89 ea 44 89 e1 4d 89 f8 ff 34 24 e8 cb 7f 93 fc 48 83 c4 08 90 <0f> 0b 90 90 ff 05 b8 87 2e 0b 48 83 c4 10 5b 41 5c 41 5d 41 5e 41
[  703.998801][T14416] RSP: 0018:ffffc9000fcff6b8 EFLAGS: 00010286
[  704.004999][T14416] RAX: 2a7d810ccbd72900 RBX: ffffffff8c626760 RCX: 0000000000080000
[  704.012996][T14416] RDX: ffffc9001b5cf000 RSI: 0000000000037658 RDI: 0000000000037659
[  704.020988][T14416] RBP: ffffffff8c600f80 R08: ffffffff817ff732 R09: fffffbfff1cfa188
[  704.028976][T14416] R10: dffffc0000000000 R11: fffffbfff1cfa188 R12: 0000000000000000
[  704.036962][T14416] R13: ffffffff8c600e98 R14: dffffc0000000000 R15: ffff888054d4d1f8
[  704.044953][T14416]  ? __warn_printk+0x292/0x360
[  704.049762][T14416]  __debug_object_init+0x2b9/0x470
[  704.054999][T14416]  ? __pfx___debug_object_init+0x10/0x10
[  704.060661][T14416]  ? pcpu_alloc_noprof+0xfb8/0x1760
[  704.065984][T14416]  __percpu_counter_init_many+0x1c2/0x390
[  704.071915][T14416]  open_fs_devices+0xb5/0x12b0
[  704.076713][T14416]  ? kfree+0x4e/0x430
[  704.080718][T14416]  ? __pfx_devid_cmp+0x10/0x10
[  704.085503][T14416]  ? __pfx_list_sort+0x10/0x10
[  704.090322][T14416]  ? __pfx_btrfs_scan_one_device+0x10/0x10
[  704.096162][T14416]  ? __pfx_open_fs_devices+0x10/0x10
[  704.101483][T14416]  ? btrfs_open_devices+0x103/0x190
[  704.106895][T14416]  btrfs_get_tree+0x552/0x1a30
[  704.111702][T14416]  ? lockdep_init_map_type+0xa1/0x910
[  704.117110][T14416]  ? __pfx_btrfs_get_tree+0x10/0x10
[  704.122429][T14416]  ? __pfx_lockdep_init_map_type+0x10/0x10
[  704.128282][T14416]  ? rcu_is_watching+0x15/0xb0
[  704.133166][T14416]  vfs_get_tree+0x90/0x2b0
[  704.137614][T14416]  fc_mount+0x1b/0xb0
[  704.141617][T14416]  btrfs_get_tree+0x6b1/0x1a30
[  704.146509][T14416]  ? rcu_is_watching+0x15/0xb0
[  704.151416][T14416]  ? generic_parse_monolithic+0x387/0x400
[  704.157165][T14416]  ? __pfx_aa_get_newest_label+0x10/0x10
[  704.162823][T14416]  ? __pfx_btrfs_get_tree+0x10/0x10
[  704.168188][T14416]  ? rcu_is_watching+0x15/0xb0
[  704.173040][T14416]  ? apparmor_capable+0x13b/0x1b0
[  704.178123][T14416]  vfs_get_tree+0x90/0x2b0
[  704.182690][T14416]  do_new_mount+0x2be/0xb40
[  704.187251][T14416]  ? __pfx_do_new_mount+0x10/0x10
[  704.192333][T14416]  __se_sys_mount+0x2d6/0x3c0
[  704.197324][T14416]  ? __pfx___se_sys_mount+0x10/0x10
[  704.203036][T14416]  ? exc_page_fault+0x590/0x8b0
[  704.208112][T14416]  ? __x64_sys_mount+0x20/0xc0
[  704.213347][T14416]  do_syscall_64+0xf3/0x230
[  704.217884][T14416]  ? clear_bhb_loop+0x35/0x90
[  704.223233][T14416]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  704.229299][T14416] RIP: 0033:0x7fd7d47874ca
[  704.233734][T14416] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  704.253536][T14416] RSP: 002b:00007fd7d5539e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  704.261996][T14416] RAX: ffffffffffffffda RBX: 00007fd7d5539ef0 RCX: 00007fd7d47874ca
[  704.270003][T14416] RDX: 0000000020000200 RSI: 0000000020005600 RDI: 00007fd7d5539eb0
[  704.278003][T14416] RBP: 0000000020000200 R08: 00007fd7d5539ef0 R09: 0000000000000800
[  704.286018][T14416] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000020005600
[  704.294019][T14416] R13: 00007fd7d5539eb0 R14: 000000000000559e R15: 0000000020000740
[  704.302034][T14416]  </TASK>
[  704.305442][T14416] Kernel Offset: disabled
[  704.310046][T14416] Rebooting in 86400 seconds..