last executing test programs:

2m13.969440648s ago: executing program 4 (id=92):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r1 = dup(r0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r1, 0x5000)
r2 = syz_open_dev$dri(&(0x7f0000000080), 0x0, 0x0)
mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r2, 0x100000)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x6)

2m13.931041s ago: executing program 4 (id=94):
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000080), 0x224900, 0x0)
r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
fchdir(r0)
syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0)
newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/file0\x00', 0x0, 0x1000)

2m13.702398477s ago: executing program 4 (id=97):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000004e80)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_GETXATTR(r0, &(0x7f0000000040)={0x18, 0x0, r1, {0x7}}, 0x18)
quotactl$Q_QUOTAON(0xffffffff80000202, &(0x7f0000000240)=@filename='./file0/../file0/file0\x00', 0x0, 0x0)

2m12.799105835s ago: executing program 4 (id=102):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0)
mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0)
mount$fuseblk(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x24000, 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)

2m11.822136676s ago: executing program 4 (id=105):
r0 = socket$inet6(0xa, 0x3, 0x7)
setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000000)=0x2, 0x4)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0xc, 0x4, 0x0, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8}, 0x94)
sendmmsg$inet6(r0, &(0x7f0000004580)=[{{&(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28}}], 0x1, 0x0)
ioctl$SIOCGSTAMPNS(r0, 0x8907, 0x0)
recvfrom$inet6(r0, 0x0, 0x0, 0x10000, &(0x7f0000000040)={0xa, 0x4e21, 0x9, @private0, 0x23}, 0x1c)

2m11.355924651s ago: executing program 4 (id=108):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @main=@item_4={0x3, 0x0, 0xb, "b2938f8d"}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @global=@item_4={0x3, 0x1, 0x5, "a90da1f6"}, @local=@item_4={0x3, 0x2, 0x0, "00000400"}]}}, 0x0}, 0x0)
r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0)
bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000100)=""/95)

2m11.120889818s ago: executing program 32 (id=108):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @main=@item_4={0x3, 0x0, 0xb, "b2938f8d"}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @global=@item_4={0x3, 0x1, 0x5, "a90da1f6"}, @local=@item_4={0x3, 0x2, 0x0, "00000400"}]}}, 0x0}, 0x0)
r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0)
bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0)
ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000100)=""/95)

1m43.161688233s ago: executing program 3 (id=330):
syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x1000000, &(0x7f00000000c0)={[{@overriderock}, {@overriderock}, {@map_off}, {@map_off}, {@nocompress}, {@hide}]}, 0x0, 0x3e9, &(0x7f0000000840)="$eJzs3E1PG8cfwPFZYv/Fn0qoUtRACIdJ0wM9xNldipGV03Y9NpOsd1cz6whOVVQgQoW0alKp4VJxSVupfRG59kX0HUXtO6DaB6c8GEx5iFH0/Uhoxt7fzPxmZc3IRrMCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIJ2y7rueISMf9VXmysG2S3inXB/19eqg4ZVwhnPxPTE6K2fKt2Zv/Xv6k7GSmfDUjJvNiUux+dOvjhzdrE4P2pyT0Xrx4tfvN0+3tje/PFF2Xtb/3C1ee2HvSVbG2ie4FXSW1TWSr2XQfrHSs7OhI2TWbqZ4MjQqyxMiF8HPptVqLUjXWkn7cbQeRGry5fN933aZ81EhVYGwSP3jUsOGKjiIdd4uY/HIes5x/EB/rTGYq6Em5ubW9sTgqyTzIO0uQPyrId33f83zfay61lpZdt+a7vjz0hnuEONZk/B9ajNclr+DA+e1X+z8AAAAAAPhwOcVv7Pn3/3rxO7wjOjpS7rjTAgAAAAAAl6j4z/9MXtTz2qxw+P4PAAAAAMCH5peDZ+z+P+yMnU03xZ9/CWPqzl66+pmzE+ThwY6oFe1uHO0x68w501UnRdGsVa9CNe/cLoNuD6LfVsXmqLN+zrEEqpGPJlCesNv/aUgC4jcxVwbNrZfl+uBKOcpUR0eqESbRQ08EwfREplazH55v/SiK6f8a96Ydsbm1vdH4+tvt9SKXvbyXvZ3qAMWxcxQn3wzx8t25x+Ezrhc/xFTjTpXjugfnP1E2n/gPY74Wd8qYO1NlOXV4/pP5mF7jpNlXWXgXnPlrMV/GzC/cy4t7C0Oy8Edl4R/M4lz34gxZLI7KYvGCWQDAuGyO2IWc4xv/OVa5y9vdT1/R75Yxd+eKhbU2N2RFd0et6O4Fd7c/jj0D4aQ9Nh/39yO76pu8wZsTx7WR7+S38MbLne/ErRevdu9v7Tx9tvFs47nvLzbdL1x3yRf1YhpVwd4DABhCmbfOVPazY4xOv/JaLS/IVpQ0SfhYGt3uKqnjTJlwJYi7SqYmyZIwifLKE91WVtp+miYmk53EyDSxerV48ousHv1iVS+IMx3aNFKBVTJM4iwIM9nWNpRp/8tI2xVlisY2VaHu6DDIdBJLm/RNqBpSWqUOBOq2ijPd0Xk1lqnRvcCsySdJ1O8p2VY2NDrNkrLDwVg67iSmV3TbGPfNBgDgmnj3BLuzV+pV0zO3GvMUAQDAEezSAAAAAAAAAAAAAAAAAAAAAABcf+c4/zfmiiOEuAZpUKFy2ZX/nfeDvX8F+Yx7ZQJw1f4JAAD//7CIqpQ=")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x14e174135c0b87af)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x40, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
syz_mount_image$fuse(&(0x7f00000001c0), &(0x7f00000002c0)='./bus\x00', 0x322020, &(0x7f0000000100)=ANY=[], 0x1, 0x0, 0x0)
removexattr(&(0x7f0000000580)='./file0\x00', &(0x7f0000000640)=@known='system.posix_acl_default\x00')

1m42.800545514s ago: executing program 3 (id=334):
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x220000, 0xc, 0x0, 0x2, 0xfffffffe})
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000100)=r1, 0x4)
sendmsg$IPCTNL_MSG_CT_GET_STATS(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0x5, 0x0, 0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x4040000}, 0x800)

1m42.61281641s ago: executing program 3 (id=336):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e21, 0x1, @loopback, 0x13}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_opts(r0, 0x29, 0x36, 0x0, 0x0)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000300)=@gcm_128={{0x303}, "fc674d000000f8f7", "c5998c867c22b401046a89606ffcf92e", "2c5be7ad", "a0ca05c0707e52f4"}, 0x28)

1m42.364586408s ago: executing program 3 (id=337):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x5}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x10000, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chdir(&(0x7f0000000040)='./file0\x00')
mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file5\x00', 0x400, 0x700)

1m41.801081146s ago: executing program 3 (id=342):
write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000d40)={0x16, 0x98, 0xfa00, {0x0, 0x2, 0xffffffffffffffff, 0x10, 0x1, @in={0x2, 0x4e21, @private=0xa010102}}}, 0xa0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000001740), r0)
sendmsg$NFC_CMD_VENDOR(r1, &(0x7f0000002a00)={0x0, 0x0, &(0x7f00000029c0)={&(0x7f0000000800)={0x14, r2, 0x1, 0x70bd2a, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x90}, 0x2400c800)
syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e5876e4040200516940a0000000109022400010000000009040000025883b200090585", @ANYRESHEX, @ANYRESOCT], 0x0)

1m40.342491372s ago: executing program 2 (id=352):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x2800000, &(0x7f0000000500)={[{@debug}, {@delalloc}, {@inlinecrypt}, {@test_dummy_encryption}, {@errors_continue}, {@errors_continue}, {@delalloc}, {@barrier}]}, 0x1, 0xbdd, &(0x7f0000000d40)="$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")
chdir(&(0x7f0000000000)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x20)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r0)
sendmsg$TIPC_CMD_SET_NETID(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r1, 0x8, 0x70bd2d, 0x25dfdbfe, {{}, {}, {0x8, 0x2, 0x9}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4c040}, 0x1)
ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0})

1m39.894480776s ago: executing program 3 (id=353):
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901)
fchdir(r0)
close(r0)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x4b800, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000002400)={{0x1, 0x1, 0xf2, 0xffffffffffffffff, {0x2}}, './file0\x00'})

1m39.558182467s ago: executing program 33 (id=353):
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901)
fchdir(r0)
close(r0)
mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x4b800, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r1, 0xc018937e, &(0x7f0000002400)={{0x1, 0x1, 0xf2, 0xffffffffffffffff, {0x2}}, './file0\x00'})

1m39.548884108s ago: executing program 2 (id=356):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$tipc(0x1e, 0x4, 0x0)
bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0xfffffe}}, 0x10)
r2 = socket$tipc(0x1e, 0x5, 0x0)
sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f00000001c0)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1000a8d0}, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

1m39.319302915s ago: executing program 2 (id=358):
syz_mount_image$fuse(0x0, &(0x7f0000000380)='./file0\x00', 0x342080, 0x0, 0x0, 0x0, 0x0)
mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000240), 0x200844, &(0x7f0000000280)=ANY=[@ANYBLOB='nr_inodes=t,gid=', @ANYRESHEX=0xee01, @ANYBLOB=',mode=00000000000000000127016,mpol=prefer'])
syz_mount_image$fuse(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x8a020, &(0x7f0000000280)=ANY=[], 0x1, 0x0, 0x0)
bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0)

1m39.181018479s ago: executing program 2 (id=360):
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x21008, 0x0, 0x0, 0x0, 0x0)
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x400, 0x0)
chroot(&(0x7f0000000100)='./file0\x00')
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000003c0)='./file0\x00', 0x0, 0x2a05004, 0x0)
pivot_root(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f0000000180)='./file0\x00')

1m38.927670487s ago: executing program 2 (id=362):
r0 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
r1 = fsmount(r0, 0x0, 0x8)
r2 = openat$cgroup(r1, &(0x7f00000000c0)='syz0\x00', 0x200002, 0x0)
r3 = openat$cgroup_ro(r2, &(0x7f0000000240)='pids.events\x00', 0x0, 0x0)
read$FUSE(r3, &(0x7f0000004000)={0x2020}, 0x2020)

1m38.368222185s ago: executing program 2 (id=366):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD64(r0, 0x400454a4, &(0x7f0000000040)=0x1)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1, 0x1}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf})
read$FUSE(r0, &(0x7f0000002440)={0x2020}, 0x20)

1m38.168336321s ago: executing program 34 (id=366):
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD64(r0, 0x400454a4, &(0x7f0000000040)=0x1)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1, 0x1}})
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf})
read$FUSE(r0, &(0x7f0000002440)={0x2020}, 0x20)

1m37.912264869s ago: executing program 1 (id=371):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={r2, 0x0, 0x0}, 0x10)

1m37.690183866s ago: executing program 1 (id=373):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="600000000206010800000000000000000000000005000400000000000900020073797a310000000014"], 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000300)={0x1, 0x8000, 0x0, 'queue1\x00'})
write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x2ab, @tick=0x14, 0xff, {}, 0x0, 0x0, 0xfb})

1m37.105844934s ago: executing program 1 (id=377):
r0 = syz_usb_connect$printer(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000)
pwrite64(r1, &(0x7f0000000040)="f6e80f", 0x3, 0x400)

1m35.104263297s ago: executing program 1 (id=385):
syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0x804000, &(0x7f0000000f00)=ANY=[], 0x2, 0xc2d, &(0x7f00000001c0)="$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")
creat(&(0x7f0000000100)='./bus\x00', 0x44)
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x301400, 0x0)
r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x47)
pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7a00, 0x0, 0x3)
renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x0)

1m34.198989236s ago: executing program 1 (id=388):
r0 = socket$netlink(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000)=0x2, 0x4)
setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000540)=0x73, 0x4)
recvmmsg(r0, &(0x7f0000000580)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=""/216, 0xd8}, 0x7}], 0x1, 0x2002, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000800)=@deltaction={0x14, 0x31, 0x4, 0x70bd2d, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20044805}, 0x20000800)

1m32.843990989s ago: executing program 1 (id=395):
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="66617374626f6f742c71756f7461000018bbdecde39739fcd1df176dde746ec834120600000000003b814e50a959736d6572462abc30ef5b65c70f73ecea54b5e5bea9836c319f653557e79a002208ce996dda659bd5ba0f4ce5c2080002223dc60000000000000044cd0a1e3686873600000000005493b4b874cd601d5b9fa9b40fe4d76afc3a989c6d60044e89eb96e44d01a1034e3797ffa86870b82939f41ffa0f3d726f085663c29cbdc4c766a7eb77cc36160191acf5ae7469c82ab4145b595b987d75912a0fcd1c061835294cc0c618aba204f8adaa20c80108d356cd88cc86177056b06e7068c40f807d9e539f8f5b64a8ee0725aa8d00000000007cb6020d90ea79b8027cf75964dd86c2ed2b5e75779677aa8c76b848dd03dab190b5f02ec52830a17b01eaae1c3df076000000000000000000000000000083a48a6b926c668b9b90195018ea3619f9d80a0b894e212178e1a19909d764666264fa29e2c055fd7f8e67c2acfb75f0a8d41692f4542a575ee42ed94a0014fba44985cca9df12fe93bfaccf0122a6e7e593613ac0111701b125cc6799224883d08ce470220a6decad26f0378072a571da000000b1a6bdf03fd56697e348b5b494f6fddb9f56142a47a40ef81690a7eca421bd0ad198afa58ce69d61c29deaa93c0efea0df04f20020ee84075b4e1a2ad43d1be1138de4668e7b6137545708790c501f1ed7f6a571d5000000000000007d2bee8ed5acba62b8ce6eee44e813220ebc37ad7d422bb972c33e626d4d13827d303ee15e254c75ee569a56fa9e"], 0x25, 0x55a8, &(0x7f00000014c0)="$eJzs3EtvG2UXAOAzTtP71y9CLNh1pAopkWqrTi+CFQVacRGtKi4LVuDYruXW9kSx64asumCJWPBPEEisWPIbWMASdogFiB1SkWcm0KQNtI3jqO3zSDNn5vj1mXdGlqUzYzmAZ9ZC+sdvSZyIIxExFxHHk8i3k3KJuBNxsRj7QkScjIjKPUtS5v9OHIyIoxFxYlK8qJmUL31xenzq/K9v//7t94cOHPvymx/29cSBffViRPRXi+3b/SJmnSLeKPONcTeP/XPjMq5uqdHPivzt9kpe4XZjc1wjj2c7xfhs9dZwEq/3Gs1J7HSv5/nVQXHA4bizWWfyhvRGYy3fb7VX8tgdZnnsbBTHXd8ovts2hqOiTqus90lePkajzVjk2+vt4nxWb+axORiV+aJu1mqvT+K4jOXhopn1Wvk8Vh7zIj8B3ukObq2n4/basJsN0vO1+ku1+oVqfS1rtUftc9VGv3XhXLrY6U2GVUftRv9iJ8s6vXatmfWX0sVOs1mt19PFS+2VbmOQ1uu1s7Uz1fNL5dbp9I2rH6S9Vro4ia91B7dG3d4wvZ6tpcU7ltLl2tmXl9JT9fS9K9fSa+9evnzl2vsfXfrw6qtX3nq9HHTftNLF5TPLy9X6mepyfekZOv9Py0k/wvknD07/9OPuLhsUdviAAbCz+/r/2N7/h/4fmLrd9P/9m+X+3vT/8TD9f0yz/5+0VPr//+5/K4/U/56YSv87H/r/PTx/2JXH6/8PTn0eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADM3M/zX72ZbywU+8fK/P/K1HPlfhIRlYi4+wBzcXBLzbmyzvwO4+e3zeG7JPIKk2McKpejEXGxXP78/15fBQAAAHh6fX3n5OdFt16sFvZ7QsxScdOmcvzjKdVLImJ+4ZcpVatMVs9PqVj++T4Q61Oqlt/AOjylYsUttwPTqvZQ5raEw/eEpAiVmU4HAACYia2dwGy7EAAAAGbps3999ZWZzYMZS2LzUebms+D8l/f/PBA8Mlnd3fbjfgAAAOBJkuz3BAAAAIA9l/f//v8PAAAAnm7F//8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBf7NzPjdpAFAfgZ4OB/FNQlHtayQ3KSAk55hgoIE1QAmkhDVADkXJICStYYc8ieRek1TLGWvR9ku2d8ernGeDyxtIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXfpbree/f375dWnObn+ZPLMBAAAATtlW63n9x7Rpv0v9H1LXp9QuIqKMiFO1+yBGrcxByqnO/H/1aAx/IuqEQ/84HW8j4ms67j52/SkAAADA7dosV7OmWm9OaQngX7+j4kqaRZvy/bdMeUVEVNP/mdLKw+lzprD69z2MH5nS6gWsSaawZsltePreKNdD2gaty8NMFvWXWLfKbp4LAAD0qV0JnKlCAAAAuAHf+x4A1/C0tC+Op+N7xnFzSS8E37RaAAAAwCtU9D0AAAAAoHN1/d/N/n+TF+3/V9j/DwAAALJr9v8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgS9tqPd8sV7Nz9xfPzNntL5NvRgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9+zPOwqEQBiEwd71ncnc/7DSoKGxSRUIH39jMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABvfveX/xNT40wy99pYeh5J1k6NrVNj79w4+sP4+jUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwsT8vKRACQRAFc8b/Tvr+h5UEPYMIEdDwqKIWDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwBf97pf/E1PjTDJ32lg6HknWrhpbV429B42jB+Pt3wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwsW//vm1UcQDA3/lspylUhIAiEUAFdYCFpm5p6YoQKGLgT0CKUqcEXAptBlpFlCxsKHMXBAsSQkigsOV/6NxIXcrWIUOQmBiC7lf6nJgmpO05TT8f6fl9/Xx5P86Wla/fHQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQWX83vNIo4zR7GCviqu32xuJsVq9tqzOry3cms5LFyUjVeuz1+mZ/oL0aPzk+MbyJAAAAcFgc2/WItMrvQwh3WyvTWd0Yy/P/VnVMlvP/UHaVlG3b8/61jcUj5UuTVf7/x+/3XtwaaCzNx8k6nZvvdU/tnEpz38t8wj236xHN/Mznv72k+RvS+HDphfVWfj6T727der+dhyN1zBYA2I+TVV0G1f9DWd0Z5sQAeGo0o8S7yv/TseHOCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKAO60vhmSpOQgiTzftxZm1jcXZQ/c3yncnVspy7eXM57jProhVCmJvvdU/VuJaDqzqb1z+b6fW6V65eqzs4HkIY8NKNvf15Wk7/P49phxD6Wk68NKCfj/cw1rZ+dgTlxzPUew5Hs/XtenDS15LsOOHvbRaG8QGoK2iU78/jGGK09ve9P6g+e4++5//zXTLyaL6SAAA41FplyTLRu62V6awtGQ9h88f+/P+NKA59ef/mjaKleL4a5f/3Pjl3Ox4rzv87Na3vSTC1cOmLqavXrr81f2nmYvdi9/O3T3fe6Zw5f/bs+an8t5KpudDwiwkAAAAPoV2WOP8fHbD/fzSKwwP2/4st4SL///L7ztfxWKn8f6D7m37DngkAAMDTqL0VPf/a338lA45I2u3w1czCwpVO8bj1/HTxWOt092mkLHH+n44Pe1YAAABAHdaXkr79/wtRHB6w/x9f///szy//GveZFtcWXA4hdE/OXu5dqG85B1r/Tb8/pY/jRuV8oPawVwoAAMCwjJYl3v9vjWf5f2PrkodGCOHNEyH8U97DH/aY/6cffPtLPFZ8/f+ZWld58DQmivOR1xMhNCeGPSMAAAAOsyNlyZL9P1sr05/+dvSjtuv/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOr2bwAAAP//aR4tAA==")
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183b41, 0x12b)
link(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file1\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0)
pwritev2(r0, &(0x7f0000003940)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0xc, 0x0, 0x14)

1m32.547862928s ago: executing program 35 (id=395):
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x25, 0x55a8, &(0x7f00000014c0)="$eJzs3EtvG2UXAOAzTtP71y9CLNh1pAopkWqrTi+CFQVacRGtKi4LVuDYruXW9kSx64asumCJWPBPEEisWPIbWMASdogFiB1SkWcm0KQNtI3jqO3zSDNn5vj1mXdGlqUzYzmAZ9ZC+sdvSZyIIxExFxHHk8i3k3KJuBNxsRj7QkScjIjKPUtS5v9OHIyIoxFxYlK8qJmUL31xenzq/K9v//7t94cOHPvymx/29cSBffViRPRXi+3b/SJmnSLeKPONcTeP/XPjMq5uqdHPivzt9kpe4XZjc1wjj2c7xfhs9dZwEq/3Gs1J7HSv5/nVQXHA4bizWWfyhvRGYy3fb7VX8tgdZnnsbBTHXd8ovts2hqOiTqus90lePkajzVjk2+vt4nxWb+axORiV+aJu1mqvT+K4jOXhopn1Wvk8Vh7zIj8B3ukObq2n4/basJsN0vO1+ku1+oVqfS1rtUftc9VGv3XhXLrY6U2GVUftRv9iJ8s6vXatmfWX0sVOs1mt19PFS+2VbmOQ1uu1s7Uz1fNL5dbp9I2rH6S9Vro4ia91B7dG3d4wvZ6tpcU7ltLl2tmXl9JT9fS9K9fSa+9evnzl2vsfXfrw6qtX3nq9HHTftNLF5TPLy9X6mepyfekZOv9Py0k/wvknD07/9OPuLhsUdviAAbCz+/r/2N7/h/4fmLrd9P/9m+X+3vT/8TD9f0yz/5+0VPr//+5/K4/U/56YSv87H/r/PTx/2JXH6/8PTn0eAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADM3M/zX72ZbywU+8fK/P/K1HPlfhIRlYi4+wBzcXBLzbmyzvwO4+e3zeG7JPIKk2McKpejEXGxXP78/15fBQAAAHh6fX3n5OdFt16sFvZ7QsxScdOmcvzjKdVLImJ+4ZcpVatMVs9PqVj++T4Q61Oqlt/AOjylYsUttwPTqvZQ5raEw/eEpAiVmU4HAACYia2dwGy7EAAAAGbps3999ZWZzYMZS2LzUebms+D8l/f/PBA8Mlnd3fbjfgAAAOBJkuz3BAAAAIA9l/f//v8PAAAAnm7F//8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBf7NzPjdpAFAfgZ4OB/FNQlHtayQ3KSAk55hgoIE1QAmkhDVADkXJICStYYc8ieRek1TLGWvR9ku2d8ernGeDyxtIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXfpbree/f375dWnObn+ZPLMBAAAATtlW63n9x7Rpv0v9H1LXp9QuIqKMiFO1+yBGrcxByqnO/H/1aAx/IuqEQ/84HW8j4ms67j52/SkAAADA7dosV7OmWm9OaQngX7+j4kqaRZvy/bdMeUVEVNP/mdLKw+lzprD69z2MH5nS6gWsSaawZsltePreKNdD2gaty8NMFvWXWLfKbp4LAAD0qV0JnKlCAAAAuAHf+x4A1/C0tC+Op+N7xnFzSS8E37RaAAAAwCtU9D0AAAAAoHN1/d/N/n+TF+3/V9j/DwAAALJr9v8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgS9tqPd8sV7Nz9xfPzNntL5NvRgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9+zPOwqEQBiEwd71ncnc/7DSoKGxSRUIH39jMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABvfveX/xNT40wy99pYeh5J1k6NrVNj79w4+sP4+jUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwsT8vKRACQRAFc8b/Tvr+h5UEPYMIEdDwqKIWDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwBf97pf/E1PjTDJ32lg6HknWrhpbV429B42jB+Pt3wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwsW//vm1UcQDA3/lspylUhIAiEUAFdYCFpm5p6YoQKGLgT0CKUqcEXAptBlpFlCxsKHMXBAsSQkigsOV/6NxIXcrWIUOQmBiC7lf6nJgmpO05TT8f6fl9/Xx5P86Wla/fHQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQWX83vNIo4zR7GCviqu32xuJsVq9tqzOry3cms5LFyUjVeuz1+mZ/oL0aPzk+MbyJAAAAcFgc2/WItMrvQwh3WyvTWd0Yy/P/VnVMlvP/UHaVlG3b8/61jcUj5UuTVf7/x+/3XtwaaCzNx8k6nZvvdU/tnEpz38t8wj236xHN/Mznv72k+RvS+HDphfVWfj6T727der+dhyN1zBYA2I+TVV0G1f9DWd0Z5sQAeGo0o8S7yv/TseHOCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKAO60vhmSpOQgiTzftxZm1jcXZQ/c3yncnVspy7eXM57jProhVCmJvvdU/VuJaDqzqb1z+b6fW6V65eqzs4HkIY8NKNvf15Wk7/P49phxD6Wk68NKCfj/cw1rZ+dgTlxzPUew5Hs/XtenDS15LsOOHvbRaG8QGoK2iU78/jGGK09ve9P6g+e4++5//zXTLyaL6SAAA41FplyTLRu62V6awtGQ9h88f+/P+NKA59ef/mjaKleL4a5f/3Pjl3Ox4rzv87Na3vSTC1cOmLqavXrr81f2nmYvdi9/O3T3fe6Zw5f/bs+an8t5KpudDwiwkAAAAPoV2WOP8fHbD/fzSKwwP2/4st4SL///L7ztfxWKn8f6D7m37DngkAAMDTqL0VPf/a338lA45I2u3w1czCwpVO8bj1/HTxWOt092mkLHH+n44Pe1YAAABAHdaXkr79/wtRHB6w/x9f///szy//GveZFtcWXA4hdE/OXu5dqG85B1r/Tb8/pY/jRuV8oPawVwoAAMCwjJYl3v9vjWf5f2PrkodGCOHNEyH8U97DH/aY/6cffPtLPFZ8/f+ZWld58DQmivOR1xMhNCeGPSMAAAAOsyNlyZL9P1sr05/+dvSjtuv/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOr2bwAAAP//aR4tAA==")
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183b41, 0x12b)
link(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file1\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0)
pwritev2(r0, &(0x7f0000003940)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0xc, 0x0, 0x14)

46.209341549s ago: executing program 8 (id=668):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x3)
ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000140)={0x1, 0x0, [{0x1, 0x4, 0x0, 0x8, 0x9, 0xfffffe01, 0x5}]})
ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000880)={"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"})

45.935595797s ago: executing program 8 (id=672):
syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f00000000c0)='./file0\x00', 0xa20008, &(0x7f0000000080)={[{@orlov}]}, 0x1, 0x7ad, &(0x7f00000007c0)="$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")
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, 0x0, 0x0)
r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x80840)
syz_usb_disconnect(r0)
syz_usb_connect(0x4, 0x24, &(0x7f00000000c0)=ANY=[], 0x0)
ioctl$EVIOCRMFF(r0, 0xc0085508, &(0x7f0000000080)=0x1d)

44.812462833s ago: executing program 8 (id=678):
socket$packet(0x11, 0x2, 0x300)
r0 = socket$inet6(0xa, 0x2, 0x3a)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e24, 0xb, @mcast2, 0x9}, 0x1c)
sendto$inet6(r0, &(0x7f0000000040)="800037bbfa9ba1ce", 0xffe9, 0x0, 0x0, 0x0)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, &(0x7f00000002c0)=0xd9, 0x4)
read(r0, &(0x7f0000002400)=""/4062, 0xffe9)

44.447567785s ago: executing program 8 (id=682):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
mount_setattr(r0, &(0x7f0000000200)='.\x00', 0x8000, &(0x7f0000001dc0)={0x81, 0x0, 0x80000}, 0x20)

44.27038268s ago: executing program 8 (id=683):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
r1 = inotify_init1(0x0)
inotify_add_watch(r1, &(0x7f0000000000)='.\x00', 0x50007a2)
write$binfmt_elf64(r0, &(0x7f0000000200)={{0x7f, 0x45, 0x4c, 0x46, 0x4, 0x4, 0xe, 0x0, 0x1, 0x3, 0x3e, 0xffffffeb, 0x200000294, 0x40, 0x0, 0x0, 0x8f2d, 0x38, 0x1, 0xfffe, 0x2, 0x7}, [{0x3, 0xf97, 0xc, 0xd, 0x0, 0xe5, 0x6, 0x14}]}, 0x78)
close(r0)
execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000)

43.576221592s ago: executing program 8 (id=687):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000300)="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", 0x193}], 0x1}, 0x40004)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
write$tun(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="000086dd0001110004000000a60c6eec00be00442fd3fe8000000000000000000000000000aaff020000000000000000000000000001042022eb"], 0xfdef)

43.180058805s ago: executing program 36 (id=687):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000300)="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", 0x193}], 0x1}, 0x40004)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
write$tun(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="000086dd0001110004000000a60c6eec00be00442fd3fe8000000000000000000000000000aaff020000000000000000000000000001042022eb"], 0xfdef)

4.967938154s ago: executing program 6 (id=932):
io_uring_setup(0x1b52, &(0x7f0000000100)={0x0, 0x3ae2, 0x20, 0x0, 0x2c1})
syz_mount_image$msdos(&(0x7f0000000580), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f00000006c0)=ANY=[], 0x3, 0x242, &(0x7f0000000300)="$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")
lgetxattr(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trus'], 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000004c0)='./file1\x00', 0x18000, &(0x7f0000003b40)=ANY=[], 0x8, 0x2f3, &(0x7f0000000800)="$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")
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0)

4.612909385s ago: executing program 6 (id=935):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$sierra_net(r0, &(0x7f0000000980)={0x14, &(0x7f0000000840)={0x40, 0xa, 0xea, {0xea, 0x1, "0ee94647c522b6bc9ebe2e8b91ed8152b8ac843d53dcba5b6838d94ab0bcad665b2a8661b3d9fdaf8489f7c1c296c4571d4c4b4091ca32405dcd7f1a491bc4e7f08800c476d00bdca028cbc31a3a1b1cec24a6ecb6061a973ceef38841190753445bd8806b6c61f5c3d98938b798d8f70a0285f843859a934081b2c1c1d9c143135aa5b33de84b558b047626914e38e6b166eecf7e5c5644e56f399614f70ec963e0b39ca7e25d7f6dc486bdc9017e2bcf5ce04932a49f494c1358829d84d495746444a13b60bdd723a2318ad0f5c04180edd52e2c011264925a3da1be6690626af87063ff1bb30e"}}, &(0x7f0000000940)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x400a}}}, &(0x7f0000000f40)={0x1c, &(0x7f00000009c0)={0x20, 0x31, 0x65, "aa993eaa7533137c62ac08c26a5468b6e57ecca9b039de82528b4c5ad2bea808e24736ecbf64476ddc7fcebd553c9763dd3924852f9994cbf9a4df8d01545fc2a838e0ebd0152049b6f13a19308bbab93b8d6fa86d308b6588111e53edfecbf5198b83817d"}, 0x0, &(0x7f0000000f00)})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000200)={0x0, 0xc, 0x4, "ca258375"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000000240)={0x40, 0x9, 0x4, "971185ab"}, 0x0, 0x0, 0x0, 0x0, 0x0})

4.235027697s ago: executing program 5 (id=939):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000004200)=ANY=[@ANYBLOB="12010000e2793b10d10501200010010203010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000086e"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000700)={0x44, &(0x7f0000000300)={0x40, 0x14, 0x2, "bb4f"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000009c0)={0x1c, &(0x7f0000000000)=ANY=[@ANYBLOB="2d0102"], 0x0, 0x0})

3.009965896s ago: executing program 7 (id=937):
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x400)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[<r1=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[<r3=>0x0], &(0x7f00000004c0), 0x1, r2})
ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000580)={0x401, 0x1, &(0x7f0000000180)=[r2], &(0x7f00000000c0)=[0x3], &(0x7f0000000640)=[r3], &(0x7f0000000340), 0x0, 0x3})

3.009017845s ago: executing program 0 (id=940):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB, @ANYRESHEX=r0])
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1)
sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={0x50, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5}, {0x5}, {0x5}, {0x5, 0x3, 0x80}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0xc082}, 0xc000)

2.941405078s ago: executing program 0 (id=941):
r0 = syz_usb_connect$printer(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000)
pwrite64(r1, &(0x7f0000000040)="f6e80f", 0x3, 0x400)

2.034422096s ago: executing program 7 (id=943):
r0 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syz_tun\x00', <r1=>0x0})
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x1000}, 0x4)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62)
sendto$packet(r0, &(0x7f00000000c0)="3f033608260812002c001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14)
syz_emit_ethernet(0x36, &(0x7f0000000140)={@random="3f0cb265933b", @remote, @val={@void, {0x8100, 0x0, 0x0, 0x7}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x1, 0x24, 0x66, 0x0, 0x3, 0x11, 0x0, @empty, @empty=0xe0000001}, {0x4e1f, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x6, 0x100}}}}}}}, 0x0)

1.880084631s ago: executing program 7 (id=944):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = epoll_create1(0x80000)
r2 = fcntl$dupfd(r0, 0x0, r0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)={0x40002010})
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0x10000014})
epoll_pwait(r1, &(0x7f0000000100)=[{}, {}], 0x2, 0x4, 0x0, 0x0)

1.782089554s ago: executing program 5 (id=946):
r0 = fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0)
mkdir(&(0x7f00000003c0)='./file0\x00', 0x21)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
statfs(&(0x7f0000000000)='./file0\x00', 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

1.686160227s ago: executing program 7 (id=947):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b80000001900010025bd7000ffdbdf25e00000020000000000000000000000000000000000000000120000000000000d0000e908000400000a000020870000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040fbffffffffffffff00000000000000000010000000000000000000000000000200000000000000000008"], 0xb8}, 0x1, 0x0, 0x0, 0x800}, 0x8008010)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x4004)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x9, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x200000000, 0x0, 0xffffffffffffffff}, 0x7}}, 0xb8}}, 0x10)

1.678918788s ago: executing program 9 (id=948):
openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x13, r0, 0x0)
preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x60, 0x0, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)

1.59443915s ago: executing program 6 (id=949):
syz_usb_control_io$rtl8150(0xffffffffffffffff, &(0x7f0000000300)={0x14, &(0x7f00000001c0)={0x40, 0x11, 0x5d, {0x5d, 0x3, "9536f61391ca016aa45bd171ccc991e3db46632701ff7372654779f595719c285b22993a056d373eb2f2d29fe3ff216ac92232e6dd0f5d3ec36a313d9c705f25e134f682feab2e0bc510f46958c8359cf92f79f1289ca626dbb5cb"}}, 0x0}, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000280), 0xa4f, 0x60040)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_user\x00', 0x275a, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8001}, 0x20050840)
write$binfmt_misc(r1, &(0x7f0000000040), 0xe09)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1d, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d00009520a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bc0007008019000000000000000000000000af1e4ccfb7b3cad80004010400", [0x1, 0x2000000000001]}})

1.59434215s ago: executing program 5 (id=950):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
syz_clone(0x2080, 0x0, 0x0, 0x0, 0x0, 0x0)
mremap(&(0x7f00003ff000/0xc00000)=nil, 0xc00000, 0x2000, 0x3, &(0x7f0000000000/0x2000)=nil)
fsopen(&(0x7f0000000000)='proc\x00', 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000008, 0x8031, 0xffffffffffffffff, 0x0)

1.488723623s ago: executing program 7 (id=951):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
ioctl$int_in(r0, 0x40000000af01, 0x0)
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000100))
r2 = dup(r1)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000040)={0x0, r2})

1.199395043s ago: executing program 5 (id=952):
r0 = socket$kcm(0x29, 0x2, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48)
r2 = socket$kcm(0x2, 0x1, 0x0)
sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000014)
ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1})
shutdown(r2, 0x0)

1.196277183s ago: executing program 9 (id=953):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [{0xc0010205, 0x0, 0x5}]})
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000040)={0x10000000000000cf, 0x0, [{}]})

1.196093363s ago: executing program 7 (id=954):
r0 = syz_usb_connect(0x2, 0x3f, &(0x7f00000007c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0xc0686611, &(0x7f0000000040)={0x68, 0x0, 0x17, 0x2000, &(0x7f0000ffd000/0x2000)=nil})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
ioctl$FS_IOC_GETVERSION(r1, 0xc0145b0d, &(0x7f0000000040))

1.108785126s ago: executing program 0 (id=955):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000002fc0)=ANY=[@ANYBLOB], 0x0}, 0x94)
r0 = syz_open_dev$evdev(&(0x7f0000000240), 0x20000, 0x0)
symlinkat(&(0x7f0000000000)='.\x02\x00', 0xffffffffffffffff, 0x0)
ioctl$EVIOCGLED(r0, 0x40284504, &(0x7f0000000000)=""/56)

894.112142ms ago: executing program 9 (id=956):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e)
r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000fedbdf25040000000800090002"], 0x34}, 0x1, 0x0, 0x0, 0x20008100}, 0x0)

886.888083ms ago: executing program 0 (id=966):
r0 = socket(0x400000000010, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}}, 0x24}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0)
sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="20000000010301010000000000000000030000000c0002"], 0x20}}, 0x0)

835.866204ms ago: executing program 6 (id=957):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000740)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10000, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x8, 0x10, 0x100000002, 0x0, 0xfff, 0xffffffffffffb473, 0xffffffffffffffff}, {0x1000000000, 0x2000000000000000, 0x2, 0xffffffffffffffff}, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x4004)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}}}, 0xb8}}, 0x4004)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x9, 0xfffffffffffffffd, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x2, 0x0, 0xffffffffffffffff}, 0x7}}, 0xb8}}, 0x10)

773.417026ms ago: executing program 0 (id=958):
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x4, &(0x7f0000000080)={[{@usrjquota_path={'usrjquota', 0x3d, './file1'}}, {@noauto_da_alloc}, {}]}, 0x1, 0x781, &(0x7f0000000800)="$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")
chdir(&(0x7f0000000240)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000480)='.\x00', 0x10000, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x8004587d, &(0x7f0000000300)={@id={0x2, 0x0, @a}})
ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000280)={0x1, 0x1, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0})

605.589151ms ago: executing program 6 (id=959):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x4)
r1 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r1, &(0x7f0000000000), 0x10)
sendto(r1, &(0x7f0000000280)="4e34c9855b9f55f368ad7b35b1dc0e572b9967a3e117d541c60cbafd308316081a8d79fd1460b8ed9f0baea2c92f912c1377020532ba45429d22bad90fea3dba5a2c8c789ec3af527fa5784386911c7ac50526f4e1eed8ff6099f864965d912bcb7c926ea76ceb000bff37f6e8516166ed1815f787324e3fa853ce9441", 0x7d, 0x4c0a4, 0x0, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
ioctl$VT_RESIZE(r0, 0x5609, &(0x7f0000000040)={0x8, 0x41})

600.494721ms ago: executing program 9 (id=970):
prctl$PR_SET_SECUREBITS(0x1c, 0x1d)
r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
setresgid(0xee00, 0xee01, 0x0)
setgroups(0x0, 0x0)
setuid(0xee01)
write$tcp_congestion(r0, 0x0, 0x0)

500.532875ms ago: executing program 9 (id=960):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48)
bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r1, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r0}, 0x20)
recvmmsg(r0, &(0x7f0000000fc0)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x13000, 0x0)

489.271885ms ago: executing program 9 (id=961):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$sierra_net(r0, &(0x7f0000000980)={0x14, &(0x7f0000000840)={0x40, 0xa, 0xea, {0xea, 0x1, "0ee94647c522b6bc9ebe2e8b91ed8152b8ac843d53dcba5b6838d94ab0bcad665b2a8661b3d9fdaf8489f7c1c296c4571d4c4b4091ca32405dcd7f1a491bc4e7f08800c476d00bdca028cbc31a3a1b1cec24a6ecb6061a973ceef38841190753445bd8806b6c61f5c3d98938b798d8f70a0285f843859a934081b2c1c1d9c143135aa5b33de84b558b047626914e38e6b166eecf7e5c5644e56f399614f70ec963e0b39ca7e25d7f6dc486bdc9017e2bcf5ce04932a49f494c1358829d84d495746444a13b60bdd723a2318ad0f5c04180edd52e2c011264925a3da1be6690626af87063ff1bb30e"}}, &(0x7f0000000940)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x400a}}}, &(0x7f0000000f40)={0x1c, &(0x7f00000009c0)={0x20, 0x31, 0x65, "aa993eaa7533137c62ac08c26a5468b6e57ecca9b039de82528b4c5ad2bea808e24736ecbf64476ddc7fcebd553c9763dd3924852f9994cbf9a4df8d01545fc2a838e0ebd0152049b6f13a19308bbab93b8d6fa86d308b6588111e53edfecbf5198b83817d"}, 0x0, &(0x7f0000000f00)})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x44, &(0x7f0000000200)={0x0, 0xc, 0x4, "ca258375"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000000240)={0x40, 0x9, 0x4, "971185ab"}, 0x0, 0x0, 0x0, 0x0, 0x0})

463.101976ms ago: executing program 6 (id=962):
r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
timer_create(0x0, &(0x7f0000000240)={0x0, 0x21}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0)
pread64(r0, 0x0, 0x0, 0x10000)

141.188586ms ago: executing program 5 (id=963):
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000140)={0x3, "6ada854c675580d6ca9fb4962d5e00ed4353cbeb41cff9ab0e1370606f04b4c5"})
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100"})
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x10007f, 0x20000006, 0x4d, 0x6, 0x3, 0x9, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x8000806e, 0x7, 0x17, 0x1, 0x7, 0x4000200, 0x3e, 0x88, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x1, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x7, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x1, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x43, 0x103], [0x7, 0xa, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x5, 0x0, 0x6, 0x5, 0x1, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0x6, 0x3a, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x1000000a, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x80000000, 0xb, 0x5, 0x93a, 0x6, 0x1000006, 0x7ff, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x10000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000000, 0x0, 0x4, 0xc8, 0x1, 0xfffff000, 0x10080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f00000002c0)=0x3)

95.843757ms ago: executing program 0 (id=964):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]})
r1 = syz_clone(0x40011, 0x0, 0x0, 0x0, 0x0, 0x0)
exit(0x5)
poll(&(0x7f0000000080)=[{r0, 0xd190}, {r0, 0x340}], 0x2, 0xffffffff)
wait4(r1, 0x0, 0x8, 0x0)

0s ago: executing program 5 (id=965):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x15}]}}}, {0x10, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa4}}, 0x0)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r1, 0xffffffffffffffff, 0x0)

kernel console output (not intermixed with test programs):

[ T4705] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  131.002899][ T4231] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  131.030013][  T154] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  131.127418][ T5568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  131.144599][ T4623] cp210x 6-1:0.0: failed to get vendor val 0x0010 size 3: -32
[  131.149543][ T5568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  131.183791][ T5568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  131.208461][ T5568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  131.219960][ T5568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  131.223933][ T4623] usb 6-1: cp210x converter now attached to ttyUSB0
[  131.231583][ T5568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  131.252335][ T4231] usb 1-1: Using ep0 maxpacket: 32
[  131.276761][ T5568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  131.319178][ T5568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  131.329420][ T5568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  131.340239][ T5824] loop6: detected capacity change from 0 to 512
[  131.348893][ T5568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  131.361348][ T5568] batman_adv: batadv0: Interface activated: batadv_slave_0
[  131.373618][ T4231] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  131.390600][ T4231] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  131.400643][ T4231] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00
[  131.423413][ T5824] EXT4-fs (loop6): Test dummy encryption mode enabled
[  131.430253][ T5824] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  131.434616][ T4231] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  131.482910][ T4231] usb 1-1: config 0 descriptor??
[  131.491647][ T5824] EXT4-fs error (device loop6): ext4_orphan_get:1432: comm syz.6.418: bad orphan inode 131083
[  131.496858][ T4282] usb 6-1: USB disconnect, device number 3
[  131.512786][ T5824] EXT4-fs (loop6): mounted filesystem without journal. Opts: test_dummy_encryption,init_itable,norecovery,,errors=continue. Quota mode: none.
[  131.517630][ T4282] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  131.555707][ T4282] cp210x 6-1:0.0: device disconnected
[  131.575274][ T4534] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  131.591914][ T4534] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  131.614415][ T5568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  131.629734][ T5568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  131.640783][ T5568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  131.653164][ T5568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  131.656539][ T5824] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni"
[  131.663206][ T5568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  131.682093][ T5568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  131.692086][ T5568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  131.703054][ T5568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  131.712968][ T5568] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  131.723624][ T5568] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  131.736545][ T5568] batman_adv: batadv0: Interface activated: batadv_slave_1
[  131.760830][ T4534] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  131.774995][ T4534] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  131.817546][ T5568] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  131.827601][ T5568] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  131.837126][ T5568] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  131.847418][ T5568] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  131.906212][  T154] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  131.983050][ T4231] koneplus 0003:1E7D:2D51.0007: unknown main item tag 0x0
[  131.990275][ T4231] koneplus 0003:1E7D:2D51.0007: unknown main item tag 0x0
[  132.010615][ T4231] koneplus 0003:1E7D:2D51.0007: unknown main item tag 0x0
[  132.033723][ T4231] koneplus 0003:1E7D:2D51.0007: unknown main item tag 0x0
[  132.040942][ T4231] koneplus 0003:1E7D:2D51.0007: unknown main item tag 0x0
[  132.066945][ T4231] koneplus 0003:1E7D:2D51.0007: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.0-1/input0
[  132.129703][  T154] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  132.207970][  T154] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  132.270032][ T4534] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  132.290295][ T4534] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  132.322106][  T154] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  132.370523][ T5843] input: syz0 as /devices/virtual/input/input10
[  132.394338][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  132.415578][ T4630] usb 1-1: USB disconnect, device number 9
[  132.480325][ T4534] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  132.494213][ T4534] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  132.515200][ T4715] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  132.573473][ T4231] Bluetooth: hci2: command 0x040f tx timeout
[  132.743351][ T5713] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  132.815905][ T5713] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  132.839299][ T5833] loop6: detected capacity change from 0 to 32768
[  132.862929][ T5854] netlink: 25 bytes leftover after parsing attributes in process `syz.5.422'.
[  132.886271][ T5713] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  132.907224][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  132.914714][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  132.963423][ T5713] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  133.005676][ T5833] JBD2: Ignoring recovery information on journal
[  133.170022][ T5833] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  133.241020][ T5863] fido_id[5863]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  133.334583][ T5833] (syz.6.419,5833,1):ocfs2_remount:624 ERROR: Cannot change heartbeat mode on remount
[  133.432984][ T5868] OCFS2: ERROR (device loop6): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #64 has an invalid bg_blkno of 190215511605312
[  133.503691][ T5868] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  133.547389][ T5871] loop5: detected capacity change from 0 to 128
[  133.602933][ T5868] OCFS2: File system is now read-only.
[  133.628820][ T5871] FAT-fs (loop5): bogus sectors per cluster 0
[  133.677703][ T5871] FAT-fs (loop5): Can't find a valid FAT filesystem
[  133.691839][ T5868] (syz.6.419,5868,0):ocfs2_test_suballoc_bit:2792 ERROR: read group 64 failed -30
[  133.716470][ T5713] 8021q: adding VLAN 0 to HW filter on device bond0
[  133.762472][ T5868] (syz.6.419,5868,0):ocfs2_test_suballoc_bit:2803 ERROR: status = -30
[  133.791295][ T5868] (syz.6.419,5868,0):ocfs2_test_inode_bit:2865 ERROR: test suballoc bit failed -30
[  133.859171][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  133.867402][ T5868] (syz.6.419,5868,0):ocfs2_test_inode_bit:2874 ERROR: status = -30
[  133.883070][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  133.888419][ T5868] (syz.6.419,5868,0):ocfs2_get_parent:166 ERROR: test inode bit failed -30
[  133.945260][ T5713] 8021q: adding VLAN 0 to HW filter on device team0
[  133.964323][ T5852] netlink: 8 bytes leftover after parsing attributes in process `syz.7.367'.
[  133.981920][ T5521] ocfs2: Unmounting device (7,6) on (node local)
[  134.024373][ T1254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  134.069126][ T1254] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  134.117414][ T1254] bridge0: port 1(bridge_slave_0) entered blocking state
[  134.124626][ T1254] bridge0: port 1(bridge_slave_0) entered forwarding state
[  134.165466][ T5885] loop6: detected capacity change from 0 to 1024
[  134.192762][ T1254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  134.195136][ T1254] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  134.195722][ T1254] bridge0: port 2(bridge_slave_1) entered blocking state
[  134.195796][ T1254] bridge0: port 2(bridge_slave_1) entered forwarding state
[  134.196512][ T1254] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  134.211653][ T1254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  134.217953][ T5885] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  134.221632][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  134.262024][ T5885] EXT4-fs (loop6): mounted filesystem without journal. Opts: user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,debug_want_extra_isize=0x0000000000000070,max_dir_size_kb=0x00000000000007b1,stripe=0x0000000000000020,bsdgroups,max_batch_time=0x00000000000003fe,user_xattr,noinit_itable,,errors=continue. Quota mode: none.
[  134.285426][ T5885] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters
[  134.313141][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  134.316663][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  134.317798][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  134.372377][ T4534] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  134.661794][ T5898] netlink: 4 bytes leftover after parsing attributes in process `syz.6.431'.
[  134.671123][ T4624] Bluetooth: hci2: command 0x0419 tx timeout
[  134.729568][ T5903] loop7: detected capacity change from 0 to 512
[  134.945864][ T4534] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  135.023503][ T4534] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  135.063232][ T4534] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  135.136209][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  135.148858][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  135.188414][ T5915] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  135.191369][ T5713] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  135.274094][ T5920] netlink: 'syz.0.440': attribute type 3 has an invalid length.
[  135.318834][ T5923] loop5: detected capacity change from 0 to 512
[  135.425519][ T5923] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  135.487542][ T5923] ext4 filesystem being mounted at /73/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  135.808548][ T5942] loop0: detected capacity change from 0 to 2048
[  135.842256][ T4231] usb 7-1: new full-speed USB device number 2 using dummy_hcd
[  135.935500][ T5942] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  135.982434][ T4705] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  136.001670][ T4705] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  136.021890][ T5953] netlink: 8 bytes leftover after parsing attributes in process `syz.5.450'.
[  136.065816][ T5713] 8021q: adding VLAN 0 to HW filter on device batadv0
[  136.212702][ T4231] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  136.242538][ T4231] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  136.292334][ T4231] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  136.324323][ T4231] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  136.511676][ T5971] loop0: detected capacity change from 0 to 512
[  136.592513][ T4231] usb 7-1: usb_control_msg returned -32
[  136.598181][ T4231] usbtmc 7-1:16.0: can't read capabilities
[  136.658693][ T5971] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled
[  136.775187][ T5971] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpquota,quota,quota,stripe=0x0000000000000003,jqfmt=vfsold,,errors=continue. Quota mode: writeback.
[  136.812623][ T5971] ext4 filesystem being mounted at /122/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  136.881583][ T4534] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  136.892821][ T4534] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  136.893596][ T5061] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  136.957037][  T154] device hsr_slave_0 left promiscuous mode
[  136.971819][  T154] device hsr_slave_1 left promiscuous mode
[  136.982784][ T5947] loop7: detected capacity change from 0 to 32768
[  136.996203][  T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  137.029474][  T154] batman_adv: batadv0: Removing interface: batadv_slave_0
[  137.041193][  T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  137.049500][  T154] batman_adv: batadv0: Removing interface: batadv_slave_1
[  137.063938][  T154] device bridge_slave_1 left promiscuous mode
[  137.085884][  T154] bridge0: port 2(bridge_slave_1) entered disabled state
[  137.099429][ T5947] 
[  137.099429][ T5947]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  137.099429][ T5947] 
[  137.110736][  T154] device bridge_slave_0 left promiscuous mode
[  137.117554][  T154] bridge0: port 1(bridge_slave_0) entered disabled state
[  137.165451][  T154] device hsr_slave_0 left promiscuous mode
[  137.189788][  T154] device hsr_slave_1 left promiscuous mode
[  137.210177][ T5947] jfs_lookup: dtSearch returned -5
[  137.210212][  T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  137.225803][  T154] batman_adv: batadv0: Removing interface: batadv_slave_0
[  137.249938][  T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  137.265749][  T154] batman_adv: batadv0: Removing interface: batadv_slave_1
[  137.279025][  T154] device bridge_slave_1 left promiscuous mode
[  137.290116][  T154] bridge0: port 2(bridge_slave_1) entered disabled state
[  137.311825][ T5568] 
[  137.311825][ T5568]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  137.311825][ T5568] 
[  137.326572][  T154] device bridge_slave_0 left promiscuous mode
[  137.333330][  T154] bridge0: port 1(bridge_slave_0) entered disabled state
[  137.341177][ T5568] 
[  137.341177][ T5568]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  137.341177][ T5568] 
[  137.355429][ T5061] usb 6-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  137.370047][ T5061] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  137.395833][ T5061] usb 6-1: config 0 descriptor??
[  137.402290][  T154] device veth1_macvtap left promiscuous mode
[  137.408388][  T154] device veth0_macvtap left promiscuous mode
[  137.418278][  T154] device veth1_vlan left promiscuous mode
[  137.430344][  T154] device veth0_vlan left promiscuous mode
[  137.448587][  T154] device veth1_macvtap left promiscuous mode
[  137.455406][ T4231] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  137.463248][  T154] device veth0_macvtap left promiscuous mode
[  137.463501][  T154] device veth1_vlan left promiscuous mode
[  137.490158][  T154] device veth0_vlan left promiscuous mode
[  137.733510][ T4231] usb 1-1: Using ep0 maxpacket: 32
[  137.762489][ T5061] [drm] vendor descriptor length:e0 data:00 00 00 00 00 00 00 00 00 00 00
[  137.771181][ T5061] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor
[  137.852614][ T4231] usb 1-1: config 0 has an invalid interface number: 184 but max is 0
[  137.862347][ T4630] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  137.871659][ T4231] usb 1-1: config 0 has no interface number 0
[  137.886345][ T4231] usb 1-1: config 0 interface 184 has no altsetting 0
[  137.898347][ T5061] [drm] Initialized udl 0.0.1 20120220 for 6-1:0.0 on minor 2
[  137.915547][ T5061] [drm] Initialized udl on minor 2
[  137.978832][  T154] team0 (unregistering): Port device team_slave_1 removed
[  137.997813][  T154] team0 (unregistering): Port device team_slave_0 removed
[  138.014449][  T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  138.035363][  T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  138.062615][ T4231] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  138.076316][ T4231] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  138.089177][ T4231] usb 1-1: Product: syz
[  138.099496][ T4231] usb 1-1: Manufacturer: syz
[  138.110430][ T4231] usb 1-1: SerialNumber: syz
[  138.118607][ T4630] usb 8-1: Using ep0 maxpacket: 16
[  138.136442][ T4231] usb 1-1: config 0 descriptor??
[  138.165312][  T154] bond0 (unregistering): Released all slaves
[  138.183563][ T4231] smsc75xx v1.0.0
[  138.230168][  T154] bond2 (unregistering): Released all slaves
[  138.244875][  T154] bond1 (unregistering): (slave lo): Releasing backup interface
[  138.254067][  T154] bond1 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed
[  138.268423][  T154] device lo left promiscuous mode
[  138.273707][ T5061] [drm:udl_get_edid_block] *ERROR* Read EDID byte 1 failed err ffffffb9
[  138.283430][  T154] bond1 (unregistering): Released all slaves
[  138.293934][ T5061] udl 6-1:0.0: [drm] Cannot find any crtc or sizes
[  138.316196][ T5061] usb 6-1: USB disconnect, device number 4
[  138.322820][ T5053] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9
[  138.343957][ T5053] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed
[  138.353390][ T5053] udl 6-1:0.0: [drm] Cannot find any crtc or sizes
[  138.403868][ T4630] usb 8-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00
[  138.422853][ T4630] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  138.431542][ T4630] usb 8-1: Product: syz
[  138.436314][ T4630] usb 8-1: Manufacturer: syz
[  138.441931][ T4630] usb 8-1: SerialNumber: syz
[  138.451349][ T4630] usb 8-1: config 0 descriptor??
[  138.497381][ T4630] ftdi_sio 8-1:0.0: FTDI USB Serial Device converter detected
[  138.513960][ T4630] usb 8-1: Detected FT-X
[  138.558564][  T154] team0 (unregistering): Port device team_slave_1 removed
[  138.577744][  T154] team0 (unregistering): Port device team_slave_0 removed
[  138.600715][  T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  138.642519][  T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  138.731230][ T5053] usb 7-1: USB disconnect, device number 2
[  138.733516][ T4630] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[  138.899757][ T5995] loop9: detected capacity change from 0 to 7
[  138.946945][ T5995]  loop9: [POWERTEC] p1
[  138.959407][ T5995] loop9: p1 start 1600481121 is beyond EOD, truncated
[  138.970905][  T154] bond0 (unregistering): Released all slaves
[  138.993407][ T5987] udc-core: couldn't find an available UDC or it's busy
[  139.010086][ T5987] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  139.115309][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  139.167694][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  139.186299][ T5713] device veth0_vlan entered promiscuous mode
[  139.208815][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  139.224968][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  139.249174][ T5713] device veth1_vlan entered promiscuous mode
[  139.355869][ T1254] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  139.371348][ T4630] usb 8-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  139.381256][ T1254] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  139.396084][ T1254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  139.433596][ T1254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  139.456033][ T5713] device veth0_macvtap entered promiscuous mode
[  139.482426][ T4231] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71
[  139.513986][ T5713] device veth1_macvtap entered promiscuous mode
[  139.533213][ T4231] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  139.570923][ T4630] usb 8-1: USB disconnect, device number 2
[  139.577578][ T4231] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  139.617069][ T4630] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  139.629302][ T5713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  139.657572][ T4231] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[  139.681379][ T5713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  139.700263][ T4630] ftdi_sio 8-1:0.0: device disconnected
[  139.707005][ T4231] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset
[  139.722392][ T5713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  139.742228][ T4231] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  139.751814][ T5713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  139.771466][ T4231] smsc75xx: probe of 1-1:0.184 failed with error -71
[  139.778855][ T5713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  139.813913][ T4231] usb 1-1: USB disconnect, device number 10
[  139.830071][ T5713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  139.876407][ T5713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  139.898860][ T5713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  139.956236][ T5713] batman_adv: batadv0: Interface activated: batadv_slave_0
[  139.986357][ T1254] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  140.020573][ T1254] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  140.055653][ T1254] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  140.081366][ T1254] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  140.263968][ T5713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  140.307546][ T5713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  140.352672][ T5713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  140.364371][ T5713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  140.381837][ T5713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  140.392614][ T5713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  140.412785][ T5713] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  140.432218][ T5713] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  140.452242][ T5713] batman_adv: batadv0: Interface activated: batadv_slave_1
[  140.461410][ T1254] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  140.485242][ T1254] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  140.518442][ T5713] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  140.535688][ T5713] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  140.548593][ T6045] loop7: detected capacity change from 0 to 256
[  140.561762][ T5713] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  140.590436][ T5713] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  140.912126][ T4705] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  140.920080][ T4705] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  140.995102][ T4534] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  141.100302][ T4284] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  141.118431][ T4284] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  141.166592][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  141.576880][ T6072] Invalid argument reading file caps for ./file0
[  141.873995][ T6081] dccp_xmit_packet: Payload too large (65475) for featneg.
[  141.914377][ T6082] loop5: detected capacity change from 0 to 2048
[  141.961408][ T6082] EXT4-fs (loop5): Journaled quota options ignored when QUOTA feature is enabled
[  142.026820][ T6082] EXT4-fs (loop5): mounted filesystem without journal. Opts: usrjquota=./file1,noauto_da_alloc,bsddf,,errors=continue. Quota mode: writeback.
[  142.049110][ T6082] ext4 filesystem being mounted at /85/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  142.280904][ T6082] EXT4-fs (loop5): shut down requested (2)
[  142.762394][ T4630] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  142.817978][ T6103] loop5: detected capacity change from 0 to 1024
[  143.294029][ T4630] usb 7-1: New USB device found, idVendor=0c45, idProduct=6005, bcdDevice=b5.55
[  143.323142][ T4630] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  143.349576][ T4630] usb 7-1: Product: syz
[  143.362233][ T4630] usb 7-1: Manufacturer: syz
[  143.372629][ T4630] usb 7-1: SerialNumber: syz
[  143.398780][ T4630] usb 7-1: config 0 descriptor??
[  143.454788][ T4630] gspca_main: sonixb-2.14.0 probing 0c45:6005
[  143.844207][ T6139] loop8: detected capacity change from 0 to 512
[  143.893769][ T4630] input: sonixb as /devices/platform/dummy_hcd.6/usb7/7-1/input/input11
[  144.006732][ T6139] EXT4-fs error (device loop8): ext4_orphan_get:1406: inode #15: comm syz.8.494: iget: bad i_size value: 38620345925642
[  144.133962][ T4282] usb 7-1: USB disconnect, device number 3
[  144.154339][ T6139] EXT4-fs error (device loop8): ext4_orphan_get:1411: comm syz.8.494: couldn't read orphan inode 15 (err -117)
[  144.176094][ T6139] EXT4-fs (loop8): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  144.300039][ T6155] EXT4-fs (loop8): shut down requested (1)
[  144.357025][ T6154] netlink: 'syz.0.497': attribute type 1 has an invalid length.
[  144.375150][ T6139] EXT4-fs error (device loop8): ext4_validate_block_bitmap:429: comm syz.8.494: bg 0: block 5: invalid block bitmap
[  144.518580][ T6156] EXT4-fs (loop8): ext4_writepages: jbd2_start: 9223372036854775807 pages, ino 18; err -5
[  144.860471][ T6175] loop6: detected capacity change from 0 to 1024
[  144.933208][ T6175] EXT4-fs (loop6): Ignoring removed bh option
[  144.997097][ T6175] EXT4-fs (loop6): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none.
[  145.152242][ T4232] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  145.412244][ T4232] usb 9-1: Using ep0 maxpacket: 8
[  145.687738][ T6207] loop0: detected capacity change from 0 to 256
[  145.722602][ T4232] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  145.731712][ T4232] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  145.799942][ T4232] usb 9-1: Product: syz
[  145.815216][ T6207] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x204dac4c, utbl_chksum : 0xe619d30d)
[  145.832236][ T4232] usb 9-1: Manufacturer: syz
[  145.844057][ T4232] usb 9-1: SerialNumber: syz
[  145.884178][ T4232] usb 9-1: config 0 descriptor??
[  146.142703][ T4232] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  146.810963][ T4231] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  146.872493][ T4232] dvb_usb_rtl28xxu: probe of 9-1:0.0 failed with error -32
[  146.895232][ T4232] usb 9-1: USB disconnect, device number 2
[  146.970973][ T6248] netlink: 16 bytes leftover after parsing attributes in process `syz.0.526'.
[  147.182610][ T4231] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  147.212331][ T4231] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024
[  147.227173][ T6258] loop6: detected capacity change from 0 to 1024
[  147.309956][ T6258] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  147.402461][ T4231] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  147.420709][ T4231] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  147.461592][ T4231] usb 6-1: Product: syz
[  147.482084][ T4231] usb 6-1: Manufacturer: syz
[  147.504992][ T4231] usb 6-1: SerialNumber: syz
[  147.557994][ T6270] input: syz1 as /devices/virtual/input/input12
[  147.573785][ T4231] cdc_mbim 6-1:1.0: skipping garbage
[  147.626853][ T6273] loop6: detected capacity change from 0 to 512
[  147.668695][ T6273] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem
[  147.693470][ T4178] udevd[4178]: setting owner of /dev/input/js0 to uid=0, gid=104 failed: No such file or directory
[  147.709615][ T6273] EXT4-fs (loop6): invalid journal inode
[  147.711790][ T6268] loop0: detected capacity change from 0 to 4096
[  147.772068][ T6273] EXT4-fs (loop6): can't get journal size
[  147.813618][ T6237] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  147.820973][ T6268] ntfs3: loop0: Different NTFS' sector size (4096) and media sector size (512)
[  147.859664][ T6283] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  147.870455][ T6283] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  147.881746][ T6273] EXT4-fs (loop6): 1 truncate cleaned up
[  147.909532][ T6273] EXT4-fs (loop6): mounted filesystem without journal. Opts: norecovery,,errors=continue. Quota mode: none.
[  148.337451][ T4188] ntfs3: loop0: ntfs_sync_fs r=1a failed, -22.
[  148.372728][ T4188] ntfs3: loop0: ntfs_evict_inode r=1a failed, -22.
[  148.409838][ T4188] ntfs3: loop0: Mark volume as dirty due to NTFS errors
[  148.467913][ T6297] option changes via remount are deprecated (pid=6296 comm=syz.6.540)
[  148.556033][ T6237] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  148.602533][ T4231] cdc_mbim 6-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048
[  148.623632][ T4231] cdc_mbim 6-1:1.0: setting rx_max = 2048
[  148.688225][ T6304] netlink: 'syz.0.541': attribute type 1 has an invalid length.
[  148.822610][ T4231] cdc_mbim 6-1:1.0: setting tx_max = 184
[  148.831387][ T4231] cdc_mbim 6-1:1.0: cdc-wdm0: USB WDM device
[  148.927643][ T4231] cdc_mbim 6-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.5-1, CDC MBIM, 22:d8:9b:28:2a:59
[  148.985862][ T4231] usb 6-1: USB disconnect, device number 5
[  149.018692][ T4231] cdc_mbim 6-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.5-1, CDC MBIM
[  149.540784][ T6336] loop6: detected capacity change from 0 to 1024
[  149.649441][ T6336] EXT4-fs (loop6): Ignoring removed orlov option
[  149.752759][ T6336] EXT4-fs (loop6): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none.
[  149.965176][ T6310] loop7: detected capacity change from 0 to 32768
[  150.062028][ T6316] loop8: detected capacity change from 0 to 32768
[  150.193526][ T6316] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode.
[  150.204298][ T6310] XFS (loop7): Mounting V5 Filesystem
[  150.441138][ T6310] XFS (loop7): Ending clean mount
[  150.529980][ T6310] XFS (loop7): Quotacheck needed: Please wait.
[  150.537703][ T5713] ocfs2: Unmounting device (7,8) on (node local)
[  150.770051][ T6310] XFS (loop7): Quotacheck: Done.
[  150.973809][   T26] audit: type=1800 audit(1779236966.261:7): pid=6310 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.543" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop7" ino=4430 res=0 errno=0
[  151.032714][ T6373] loop5: detected capacity change from 0 to 8192
[  151.093859][ T5568] XFS (loop7): Unmounting Filesystem
[  151.153255][ T6373] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal
[  151.195645][ T6373] REISERFS (device loop5): using ordered data mode
[  151.224467][ T6373] reiserfs: using flush barriers
[  151.249569][ T6373] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  151.272718][ T6373] REISERFS (device loop5): checking transaction log (loop5)
[  151.356722][ T6388] input: syz1 as /devices/virtual/input/input13
[  151.672864][ T6373] REISERFS (device loop5): Using tea hash to sort names
[  151.680183][ T6373] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage.
[  152.587846][ T6423] loop5: detected capacity change from 0 to 512
[  152.819042][ T6428] loop0: detected capacity change from 0 to 32768
[  152.962428][ T6423] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpjquota=,max_dir_size_kb=0x0000000000000a30,grpquota,,errors=continue. Quota mode: writeback.
[  152.999388][ T6428] JBD2: Ignoring recovery information on journal
[  153.022862][ T6423] ext4 filesystem being mounted at /103/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  153.056559][ T6428] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  153.098775][ T6423] EXT4-fs (loop5): shut down requested (2)
[  153.112331][ T5061] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  153.146576][ T6428] overlayfs: upper fs does not support tmpfile.
[  153.159521][ T6428] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  153.178255][ T6428] overlayfs: upper fs missing required features.
[  153.471090][ T6441] loop8: detected capacity change from 0 to 1024
[  153.498439][ T4188] ocfs2: Unmounting device (7,0) on (node local)
[  153.587556][ T6441] EXT4-fs (loop8): Ignoring removed nomblk_io_submit option
[  153.642468][ T6441] EXT4-fs (loop8): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  153.700536][ T6421] loop7: detected capacity change from 0 to 32768
[  153.760587][ T6441] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003]
[  153.790682][ T6444] loop0: detected capacity change from 0 to 256
[  153.822304][ T6441] System zones: 0-1, 3-36
[  153.888160][ T6444] FAT-fs (loop0): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1)
[  153.909800][ T6441] EXT4-fs (loop8): mounted filesystem without journal. Opts: grpquota,delalloc,resuid=0x0000000000000000,debug,dioread_nolock,bsddf,nomblk_io_submit,noauto_da_alloc,,errors=continue. Quota mode: writeback.
[  154.028547][ T6421] XFS (loop7): Mounting V5 Filesystem
[  154.164335][ T6421] XFS (loop7): Ending clean mount
[  154.255413][ T6439] loop5: detected capacity change from 0 to 131072
[  154.275701][  T154] FAT-fs (loop0): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1)
[  154.288791][   T26] audit: type=1800 audit(1779236969.571:8): pid=6421 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.572" name="file1" dev="loop7" ino=4422 res=0 errno=0
[  154.311404][ T6421] XFS (loop7): User initiated shutdown received.
[  154.333165][ T6421] XFS (loop7): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x6d/0x150 (fs/xfs/xfs_fsops.c:495).  Shutting down filesystem.
[  154.358373][ T6421] XFS (loop7): Please unmount the filesystem and rectify the problem(s)
[  154.400289][ T6439] F2FS-fs (loop5): invalid crc value
[  154.437508][ T6439] F2FS-fs (loop5): Found nat_bits in checkpoint
[  154.472914][ T5568] XFS (loop7): Unmounting Filesystem
[  154.486703][ T6439] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4
[  154.495876][ T5061] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  154.511899][ T5061] usb 7-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  154.576959][ T5061] usb 7-1: config 0 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0
[  154.654430][ T5061] usb 7-1: config 0 interface 0 has no altsetting 0
[  154.661238][ T5061] usb 7-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00
[  154.711483][ T5061] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  154.730163][ T6469] loop0: detected capacity change from 0 to 256
[  154.771380][ T5061] usb 7-1: config 0 descriptor??
[  155.322016][ T5061] kye 0003:0458:5015.0008: unknown main item tag 0x0
[  155.377894][ T5061] kye 0003:0458:5015.0008: hidraw0: USB HID v0.04 Device [HID 0458:5015] on usb-dummy_hcd.6-1/input0
[  155.448032][ T5061] kye 0003:0458:5015.0008: tablet-enabling feature report not found
[  155.468084][ T5061] kye 0003:0458:5015.0008: tablet enabling failed
[  155.537123][ T5061] usb 7-1: USB disconnect, device number 4
[  155.734623][ T6485] fido_id[6485]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory
[  156.239089][ T6511] capability: warning: `syz.8.592' uses 32-bit capabilities (legacy support in use)
[  156.298113][ T6509] Illegal XDP return value 4294967274, expect packet loss!
[  156.852715][   T26] audit: type=1326 audit(1779236972.141:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6537 comm="syz.7.602" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd0eaa8fe59 code=0x0
[  156.888060][ T6543] loop0: detected capacity change from 0 to 16
[  157.001627][ T6543] erofs: (device loop0): mounted with root inode @ nid 36.
[  157.058579][ T6543] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  157.085640][ T5061] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  157.241491][ T6555] loop6: detected capacity change from 0 to 1024
[  157.353310][ T5061] usb 9-1: Using ep0 maxpacket: 32
[  157.395411][ T6555] EXT4-fs (loop6): mounted filesystem without journal. Opts: jqfmt=vfsv0,max_dir_size_kb=0x0000000000000007,barrier=0x0000000000000008,delalloc,noblock_validity,usrquota,errors=remount-ro,. Quota mode: writeback.
[  157.420756][ T6555] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  157.449807][ T6555] EXT4-fs error (device loop6): ext4_map_blocks:741: inode #15: comm syz.6.606: lblock 0 mapped to illegal pblock 0 (length 1)
[  157.468782][ T6555] EXT4-fs (loop6): Remounting filesystem read-only
[  157.614087][ T6575] loop6: detected capacity change from 0 to 256
[  157.671565][ T6575] FAT-fs (loop6): bogus sectors per cluster 223
[  157.678641][ T5061] usb 9-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[  157.693105][ T6571] loop5: detected capacity change from 0 to 2048
[  157.701769][ T5061] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  157.727660][ T6575] FAT-fs (loop6): Can't find a valid FAT filesystem
[  157.749810][ T5061] usb 9-1: Product: syz
[  157.762217][ T5061] usb 9-1: Manufacturer: syz
[  157.786730][ T5061] usb 9-1: SerialNumber: syz
[  157.792114][ T6571] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024)
[  157.835012][ T5061] usb 9-1: config 0 descriptor??
[  158.002240][ T6582] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  158.144074][ T6587] loop0: detected capacity change from 0 to 2048
[  158.179944][ T6587] EXT4-fs (loop0): Journaled quota options ignored when QUOTA feature is enabled
[  158.244800][ T6587] EXT4-fs (loop0): mounted filesystem without journal. Opts: usrjquota=./file1,noauto_da_alloc,bsddf,,errors=continue. Quota mode: writeback.
[  158.284323][ T6587] ext4 filesystem being mounted at /162/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  158.354862][ T5061] airspy 9-1:0.0: Board ID: 00
[  158.359754][ T5061] airspy 9-1:0.0: Firmware version: 
[  158.723488][ T6605] loop6: detected capacity change from 0 to 16
[  158.790313][ T6605] erofs: (device loop6): mounted with root inode @ nid 36.
[  158.865792][ T6605] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  159.441797][ T6618] netlink: 'syz.7.622': attribute type 5 has an invalid length.
[  159.483222][ T6602] loop5: detected capacity change from 0 to 131072
[  159.496994][ T6618] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  159.505820][ T6618] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  159.514856][ T6618] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  159.523651][ T6618] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  159.534977][ T6618] netdevsim netdevsim7 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  159.543987][ T6618] netdevsim netdevsim7 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  159.552996][ T6618] netdevsim netdevsim7 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  159.561898][ T6618] netdevsim netdevsim7 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  159.581488][ T6602] F2FS-fs (loop5): invalid crc value
[  159.659153][ T6602] F2FS-fs (loop5): Found nat_bits in checkpoint
[  159.694005][ T6624] loop6: detected capacity change from 0 to 512
[  159.724205][ T6602] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4
[  159.752285][ T5061] airspy 9-1:0.0: usb_control_msg() failed -71 request 0f
[  159.783616][ T5061] airspy 9-1:0.0: Registered as swradio24
[  159.789405][ T5061] airspy 9-1:0.0: SDR API is still slightly experimental and functionality changes may follow
[  159.813016][ T6618] netlink: 'syz.7.622': attribute type 5 has an invalid length.
[  159.884513][ T6618] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  159.893446][ T6618] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  159.902249][ T6618] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  159.911087][ T6618] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  159.922308][ T6624] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  159.940377][ T6624] ext4 filesystem being mounted at /45/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  159.963533][ T5061] usb 9-1: USB disconnect, device number 3
[  160.034626][   T26] audit: type=1800 audit(1779236975.321:10): pid=6624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.623" name="file2" dev="loop6" ino=16 res=0 errno=0
[  160.083523][ T6618] netdevsim netdevsim7 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  160.092624][ T6618] netdevsim netdevsim7 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  160.101527][ T6618] netdevsim netdevsim7 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  160.110534][ T6618] netdevsim netdevsim7 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  160.426800][ T6647] loop8: detected capacity change from 0 to 128
[  160.476883][ T6647] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  161.319237][ T6644] loop0: detected capacity change from 0 to 32768
[  161.390469][ T6664] loop7: detected capacity change from 0 to 256
[  161.476105][ T6664] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  161.514818][ T6664] exFAT-fs (loop7): Medium has reported failures. Some data may be lost.
[  161.639692][ T6644] XFS (loop0): Mounting V5 Filesystem
[  161.740522][ T6658] loop5: detected capacity change from 0 to 32768
[  161.928615][ T6664] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c91aa, utbl_chksum : 0xe619d30d)
[  161.942391][ T6658] XFS (loop5): Mounting V5 Filesystem
[  162.854194][ T6644] XFS (loop0): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50.
[  163.040768][ T6644] XFS (loop0): Tail block (0x29) overwrite detected. Updated to 0x30
[  163.056332][ T6658] XFS (loop5): Ending clean mount
[  163.085615][ T6697] loop8: detected capacity change from 0 to 40427
[  163.097369][ T6658] XFS (loop5): Quotacheck needed: Please wait.
[  163.155061][ T6644] XFS (loop0): Ending clean mount
[  163.170781][ T6697] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12
[  163.196554][ T6697] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock
[  163.327957][ T6697] F2FS-fs (loop8): invalid crc value
[  163.371174][ T6658] XFS (loop5): Quotacheck: Done.
[  163.423574][ T4188] XFS (loop0): Unmounting Filesystem
[  163.481241][ T6697] F2FS-fs (loop8): Found nat_bits in checkpoint
[  163.579131][ T6723] loop6: detected capacity change from 0 to 1024
[  163.746178][ T6723] EXT4-fs (loop6): Ignoring removed bh option
[  163.797876][ T6697] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0
[  163.807513][ T6697] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5
[  163.821559][   T26] audit: type=1800 audit(1779236979.101:11): pid=6724 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.631" name="file1" dev="loop5" ino=9286 res=0 errno=0
[  163.954570][ T4559] XFS (loop5): Unmounting Filesystem
[  163.969506][ T6723] EXT4-fs (loop6): mounted filesystem without journal. Opts: nobarrier,dioread_lock,barrier=0x0000000000000004,nolazytime,debug_want_extra_isize=0x0000000000000080,lazytime,errors=remount-ro,stripe=0x0000000000000010,bh,init_itable,. Quota mode: none.
[  164.106386][ T6697] attempt to access beyond end of device
[  164.106386][ T6697] loop8: rw=2049, want=45104, limit=40427
[  164.767034][ T6749] loop0: detected capacity change from 0 to 256
[  165.021918][ T6754] loop6: detected capacity change from 0 to 512
[  165.106847][ T6754] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  165.627620][ T4630] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  165.877454][ T4630] usb 7-1: Using ep0 maxpacket: 8
[  165.951287][ T6749] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  165.992032][ T6749] exFAT-fs (loop0): Medium has reported failures. Some data may be lost.
[  166.002489][ T4630] usb 7-1: config index 0 descriptor too short (expected 301, got 45)
[  166.016024][ T4630] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  166.076924][ T4630] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  166.107262][ T4630] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  166.112807][ T6777] netlink: 24 bytes leftover after parsing attributes in process `syz.7.647'.
[  166.135706][ T4630] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  166.150956][ T6749] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c91aa, utbl_chksum : 0xe619d30d)
[  166.224512][ T4630] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  166.238728][ T6777] device macsec1 entered promiscuous mode
[  166.265098][ T4630] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  166.500834][ T6785] loop7: detected capacity change from 0 to 512
[  166.582326][ T4630] usb 7-1: GET_CAPABILITIES returned 0
[  166.588090][ T4630] usbtmc 7-1:16.0: can't read capabilities
[  166.851894][ T6785] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  166.914336][ T6785] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  167.206126][ T5568] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[  167.217971][ T6773] loop5: detected capacity change from 0 to 32768
[  167.230826][ T6799] usbtmc 7-1:16.0: usb_bulk_msg returned -71
[  167.299913][ T6773] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 scanned by syz.5.641 (6773)
[  167.441244][ T6773] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm
[  167.462352][ T6773] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  167.481077][ T4625] usb 7-1: USB disconnect, device number 5
[  167.540053][ T6773] BTRFS info (device loop5): use zstd compression, level 3
[  167.570839][ T6773] BTRFS info (device loop5): using free space tree
[  167.604209][ T6773] BTRFS info (device loop5): has skinny extents
[  167.940060][ T6824] loop7: detected capacity change from 0 to 64
[  167.964444][ T6787] loop8: detected capacity change from 0 to 32768
[  168.249199][ T6828] loop6: detected capacity change from 0 to 32768
[  168.332038][ T6828] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 scanned by syz.6.653 (6828)
[  168.361231][ T6773] BTRFS info (device loop5): enabling ssd optimizations
[  168.436827][ T6828] BTRFS info (device loop6): using crc32c (crc32c-intel) checksum algorithm
[  168.446478][ T6828] BTRFS info (device loop6): setting nodatacow, compression disabled
[  168.454907][ T6828] BTRFS info (device loop6): enabling auto defrag
[  168.461791][ T6828] BTRFS info (device loop6): max_inline at 0
[  168.467950][ T6828] BTRFS info (device loop6): using free space tree
[  168.475281][ T6828] BTRFS info (device loop6): has skinny extents
[  168.534607][ T6835] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input14
[  168.549059][   T26] audit: type=1800 audit(1779236983.831:12): pid=6773 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.641" name="file1" dev="loop5" ino=260 res=0 errno=0
[  169.618125][ T6871] loop0: detected capacity change from 0 to 32768
[  170.341099][ T6894] loop5: detected capacity change from 0 to 1764
[  170.720861][ T6900] loop7: detected capacity change from 0 to 40427
[  170.767870][ T6900] F2FS-fs (loop7): Small segment_count (9 < 1 * 24)
[  170.774693][ T6900] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[  170.840114][ T6900] F2FS-fs (loop7): Found nat_bits in checkpoint
[  170.946613][ T6900] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0
[  170.953811][ T6900] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  170.991233][   T26] audit: type=1800 audit(1779236986.271:13): pid=6900 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.663" name="bus" dev="loop7" ino=10 res=0 errno=0
[  171.014302][ T6906] attempt to access beyond end of device
[  171.014302][ T6906] loop7: rw=2049, want=45104, limit=40427
[  172.231397][ T6955] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  172.240223][ T6955] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  172.249037][ T6955] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  172.257843][ T6955] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  172.396504][ T6959] loop8: detected capacity change from 0 to 2048
[  172.422943][ T6955] netdevsim netdevsim6 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  172.432999][ T6955] netdevsim netdevsim6 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  172.442706][ T6955] netdevsim netdevsim6 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  172.451691][ T6955] netdevsim netdevsim6 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  173.208199][ T6954] loop7: detected capacity change from 0 to 40427
[  173.332435][ T6954] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12
[  173.350114][ T6954] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[  173.447718][ T6954] F2FS-fs (loop7): invalid crc value
[  173.530172][ T6954] F2FS-fs (loop7): Found nat_bits in checkpoint
[  173.803458][ T6954] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0
[  173.827931][ T6954] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[  173.927002][ T6998] netlink: 'syz.0.680': attribute type 1 has an invalid length.
[  173.954036][ T6998] netlink: 'syz.0.680': attribute type 2 has an invalid length.
[  173.982471][ T6998] netlink: 252 bytes leftover after parsing attributes in process `syz.0.680'.
[  174.011861][ T6998] bridge0: port 1(bridge_slave_0) entered disabled state
[  174.191438][ T6954] attempt to access beyond end of device
[  174.191438][ T6954] loop7: rw=2049, want=45104, limit=40427
[  175.091842][ T7028] IPv6: sit1: Disabled Multicast RS
[  175.621627][ T7041] bridge0: port 2(bridge_slave_1) entered disabled state
[  175.629378][ T7041] bridge0: port 1(bridge_slave_0) entered disabled state
[  176.212961][ T7065] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  176.893617][ T7052] chnl_net:caif_netlink_parms(): no params data found
[  177.096920][ T7037] loop0: detected capacity change from 0 to 32768
[  177.211353][ T7037] XFS (loop0): Mounting V5 Filesystem
[  177.281366][ T7052] bridge0: port 1(bridge_slave_0) entered blocking state
[  177.309190][ T7052] bridge0: port 1(bridge_slave_0) entered disabled state
[  177.318854][ T7052] device bridge_slave_0 entered promiscuous mode
[  177.328509][ T7052] bridge0: port 2(bridge_slave_1) entered blocking state
[  177.336012][ T7052] bridge0: port 2(bridge_slave_1) entered disabled state
[  177.345148][ T7052] device bridge_slave_1 entered promiscuous mode
[  177.371489][ T7052] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  177.390407][ T7052] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  177.431073][ T7052] team0: Port device team_slave_0 added
[  177.444313][ T7110] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  177.689472][ T7110] batman_adv: batadv0: Removing interface: batadv_slave_0
[  177.783367][ T7052] team0: Port device team_slave_1 added
[  177.892860][ T7052] batman_adv: batadv0: Adding interface: batadv_slave_0
[  177.899887][ T7052] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  177.942490][ T7085] loop6: detected capacity change from 0 to 32768
[  177.992169][ T7052] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  178.051181][ T5065] Bluetooth: hci2: command 0x0409 tx timeout
[  178.072376][ T7052] batman_adv: batadv0: Adding interface: batadv_slave_1
[  178.107117][ T7052] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  178.143564][ T7085] XFS (loop6): Mounting V5 Filesystem
[  178.204088][ T7052] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  178.288177][ T7052] device hsr_slave_0 entered promiscuous mode
[  178.308795][ T7052] device hsr_slave_1 entered promiscuous mode
[  178.323229][ T7052] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  178.341158][ T7052] Cannot create hsr debugfs directory
[  178.488884][ T7085] XFS (loop6): Ending clean mount
[  178.523131][ T7085] XFS (loop6): Quotacheck needed: Please wait.
[  178.533537][ T7037] XFS (loop0): Ending clean mount
[  178.661867][ T7037] XFS (loop0): Quotacheck needed: Please wait.
[  178.757055][ T7085] XFS (loop6): Quotacheck: Done.
[  178.956641][ T7037] XFS (loop0): Quotacheck: Done.
[  179.009965][ T4188] XFS (loop0): Unmounting Filesystem
[  179.058124][ T7136] loop5: detected capacity change from 0 to 256
[  179.146881][ T5521] XFS (loop6): Unmounting Filesystem
[  179.175983][ T7141] loop7: detected capacity change from 0 to 256
[  179.208693][ T7052] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  179.271224][ T7052] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  179.303891][ T7052] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  179.361129][ T7052] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  179.698904][ T7052] 8021q: adding VLAN 0 to HW filter on device bond0
[  179.820757][ T4534] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  179.843370][ T7141] FAT-fs (loop7): Directory bread(block 64) failed
[  179.850043][ T7141] FAT-fs (loop7): Directory bread(block 65) failed
[  179.890308][ T4534] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  179.922379][ T7141] FAT-fs (loop7): Directory bread(block 66) failed
[  179.929349][ T7141] FAT-fs (loop7): Directory bread(block 67) failed
[  179.955236][ T7052] 8021q: adding VLAN 0 to HW filter on device team0
[  180.005930][ T4705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  180.025437][ T7141] FAT-fs (loop7): Directory bread(block 68) failed
[  180.033519][ T4705] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  180.070771][ T7141] FAT-fs (loop7): Directory bread(block 69) failed
[  180.081521][ T4705] bridge0: port 1(bridge_slave_0) entered blocking state
[  180.088700][ T4705] bridge0: port 1(bridge_slave_0) entered forwarding state
[  180.090042][ T7141] FAT-fs (loop7): Directory bread(block 70) failed
[  180.132619][ T7148] device batadv_slave_1 entered promiscuous mode
[  180.152768][ T7147] netlink: 4 bytes leftover after parsing attributes in process `syz.5.716'.
[  180.166045][ T4630] Bluetooth: hci2: command 0x041b tx timeout
[  180.198794][ T7147] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  180.227375][ T7141] FAT-fs (loop7): Directory bread(block 71) failed
[  180.247862][ T7141] FAT-fs (loop7): Directory bread(block 72) failed
[  180.292279][ T7141] FAT-fs (loop7): Directory bread(block 73) failed
[  180.453284][ T7147] device batadv_slave_1 left promiscuous mode
[  180.459660][ T7147] batman_adv: batadv0: Removing interface: batadv_slave_1
[  180.574377][ T4705] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  180.595051][ T4705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  180.633007][ T4705] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  180.658952][ T4705] bridge0: port 2(bridge_slave_1) entered blocking state
[  180.666110][ T4705] bridge0: port 2(bridge_slave_1) entered forwarding state
[  180.727409][ T4705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  180.746766][ T4705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  180.794932][ T4705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  180.805835][ T4705] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  180.851198][ T4705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  180.873093][ T4705] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  180.925138][ T4705] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  180.934849][ T4705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  180.982044][ T4705] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  181.019614][ T4705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  181.048633][ T4705] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  181.071349][ T7052] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  181.304302][ T4282] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  181.341703][   T26] audit: type=1326 audit(1779236996.621:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7177 comm="syz.5.723" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f790538fe59 code=0x7ffc0000
[  181.429750][ T7176] netlink: 8 bytes leftover after parsing attributes in process `syz.7.722'.
[  181.445512][   T26] audit: type=1326 audit(1779236996.621:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7177 comm="syz.5.723" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f790538fe59 code=0x7ffc0000
[  181.485197][   T26] audit: type=1326 audit(1779236996.671:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7177 comm="syz.5.723" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f790538fe59 code=0x7ffc0000
[  181.582387][ T4282] usb 7-1: Using ep0 maxpacket: 32
[  181.592508][   T26] audit: type=1326 audit(1779236996.671:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7177 comm="syz.5.723" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f790538fe59 code=0x7ffc0000
[  181.699017][  T154] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  181.712448][ T4282] usb 7-1: config 0 has an invalid interface number: 51 but max is 0
[  181.734071][ T4282] usb 7-1: config 0 has no interface number 0
[  181.752539][   T26] audit: type=1326 audit(1779236996.671:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7177 comm="syz.5.723" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f790538fe59 code=0x7ffc0000
[  181.846067][ T4534] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  181.855903][   T26] audit: type=1326 audit(1779236996.671:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7177 comm="syz.5.723" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f790538fe59 code=0x7ffc0000
[  181.860849][ T4534] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  181.907701][ T7191] vcan0: tx drop: invalid sa for name 0x0000000000000001
[  181.932996][ T4282] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  181.949542][    C1] vcan0: j1939_tp_rxtimer: 0xffff88805ee31c00: rx timeout, send abort
[  181.955494][ T4282] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  181.988424][ T7052] 8021q: adding VLAN 0 to HW filter on device batadv0
[  181.992352][   T26] audit: type=1326 audit(1779236996.671:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7177 comm="syz.5.723" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f790538fe59 code=0x7ffc0000
[  182.012645][ T4282] usb 7-1: Product: syz
[  182.041739][  T154] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  182.062325][ T4282] usb 7-1: Manufacturer: syz
[  182.075077][ T4282] usb 7-1: SerialNumber: syz
[  182.104944][ T4282] usb 7-1: config 0 descriptor??
[  182.121258][   T26] audit: type=1326 audit(1779236996.681:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7177 comm="syz.5.723" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f790538fe59 code=0x7ffc0000
[  182.146862][ T4282] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  182.156388][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805ee31c00: 0x20000: (3) A timeout occurred and this is the connection abort to close the session.
[  182.184383][   T26] audit: type=1326 audit(1779236996.701:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7177 comm="syz.5.723" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f790538fe59 code=0x7ffc0000
[  182.252414][ T4625] Bluetooth: hci2: command 0x040f tx timeout
[  182.255496][   T26] audit: type=1326 audit(1779236996.701:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7177 comm="syz.5.723" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f790538fe59 code=0x7ffc0000
[  182.296868][  T154] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  182.355974][ T4282] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  182.393437][ T4282] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  182.417655][  T154] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  182.452454][ T4626] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  182.702319][ T4626] usb 8-1: Using ep0 maxpacket: 16
[  182.747612][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  182.769222][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  182.783335][ T4282] usb 7-1: USB disconnect, device number 6
[  182.792201][    C0] usb 7-1: qt2_read_bulk_callback - non-zero urb status: -71
[  182.812487][ T4282] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  182.836685][ T4626] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  182.861885][ T4626] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  182.876925][ T4282] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  182.898398][ T4626] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  182.909465][ T4282] quatech2 7-1:0.51: device disconnected
[  182.948420][ T4626] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  182.966877][ T4626] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  183.004989][ T7212] bridge0: port 2(bridge_slave_1) entered disabled state
[  183.062836][ T7052] device veth0_vlan entered promiscuous mode
[  183.072669][ T4626] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  183.092616][ T4626] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  183.117256][ T4705] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  183.127574][ T4705] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  183.132905][ T4626] usb 8-1: Manufacturer: syz
[  183.156258][ T4626] usb 8-1: config 0 descriptor??
[  183.166602][ T4705] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  183.220855][ T4705] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  183.255942][ T7223] loop0: detected capacity change from 0 to 128
[  183.259346][ T7052] device veth1_vlan entered promiscuous mode
[  183.302451][ T4282] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  183.377774][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  183.387244][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  183.421044][ T7052] device veth0_macvtap entered promiscuous mode
[  183.457665][ T7052] device veth1_macvtap entered promiscuous mode
[  183.542238][ T4626] rc_core: IR keymap rc-hauppauge not found
[  183.552246][ T4282] usb 6-1: Using ep0 maxpacket: 8
[  183.558762][ T4626] Registered IR keymap rc-empty
[  183.572744][ T7052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  183.600072][ T4626] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  183.622482][ T7052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  183.664425][ T4626] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  183.672484][ T4282] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  183.690706][ T7052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  183.704452][ T4626] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0
[  183.724394][ T4282] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  183.754446][ T4282] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  183.762691][ T7052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  183.784176][ T4626] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/rc/rc0/input15
[  183.798377][ T7052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  183.823176][ T4282] usb 6-1: config 0 descriptor??
[  183.839909][ T7052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  183.851297][ T4626] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  183.869525][ T7052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  183.883101][ T7052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  183.893351][ T4626] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  183.905303][ T7052] batman_adv: batadv0: Interface activated: batadv_slave_0
[  183.915854][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  183.923826][ T4626] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  183.968219][ T4626] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  183.976268][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  183.993666][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  184.004073][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  184.012617][ T4626] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  184.040152][ T7052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  184.051562][ T4626] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  184.073757][ T7052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  184.088774][ T4626] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  184.124834][ T4282] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  184.142577][ T4626] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  184.150035][ T7052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  184.174362][ T4626] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  184.226479][ T7052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  184.237303][ T4626] mceusb 8-1:0.0: Error: mce write submit urb error = -90
[  184.267969][ T7052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  184.284332][ T4626] mceusb 8-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  184.305003][ T4626] mceusb 8-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  184.319833][ T7052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  184.362189][ T7052] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  184.394257][ T7052] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  184.404945][ T4626] Bluetooth: hci2: command 0x0419 tx timeout
[  184.434996][ T7052] batman_adv: batadv0: Interface activated: batadv_slave_1
[  184.470725][ T4626] usb 6-1: USB disconnect, device number 6
[  184.588966][ T7239] netlink: 8 bytes leftover after parsing attributes in process `syz.6.735'.
[  184.643897][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  184.653227][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  184.665715][ T7052] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  184.693570][ T7052] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  184.727548][ T7052] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  184.761436][ T7052] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  185.021944][ T7245] vcan0: tx drop: invalid sa for name 0x0000000000000001
[  185.058319][ T4246] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  185.088837][ T4246] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  185.110909][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  185.162672][ T4246] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  185.170566][ T4246] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  185.222497][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  185.354036][ T7241] loop0: detected capacity change from 0 to 40427
[  185.511598][ T7241] F2FS-fs (loop0): Found nat_bits in checkpoint
[  185.715445][ T4627] usb 8-1: USB disconnect, device number 3
[  185.837856][ T7241] F2FS-fs (loop0): Cannot turn on quotas: -2 on 0
[  185.890382][ T7241] F2FS-fs (loop0): Start checkpoint disabled!
[  186.110433][ T7241] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  186.175657][ T7278] loop6: detected capacity change from 0 to 128
[  186.592238][ T4705] attempt to access beyond end of device
[  186.592238][ T4705] loop0: rw=2049, want=45104, limit=40427
[  186.814909][  T154] device hsr_slave_0 left promiscuous mode
[  186.816992][ T7297] loop6: detected capacity change from 0 to 64
[  186.902561][  T154] device hsr_slave_1 left promiscuous mode
[  187.011935][  T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  187.034469][  T154] batman_adv: batadv0: Removing interface: batadv_slave_0
[  187.067890][  T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  187.108126][  T154] batman_adv: batadv0: Removing interface: batadv_slave_1
[  187.130571][ T7297] hfs: request for non-existent node 131072 in B*Tree
[  187.166720][  T154] device bridge_slave_1 left promiscuous mode
[  187.183608][  T154] bridge0: port 2(bridge_slave_1) entered disabled state
[  187.193785][ T7297] hfs: request for non-existent node 131072 in B*Tree
[  187.239290][  T154] device bridge_slave_0 left promiscuous mode
[  187.279222][  T154] bridge0: port 1(bridge_slave_0) entered disabled state
[  187.299503][   T26] kauditd_printk_skb: 18 callbacks suppressed
[  187.299519][   T26] audit: type=1326 audit(1779237002.581:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7307 comm="syz.9.754" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6779adbe59 code=0x7ffc0000
[  187.389323][  T154] device veth1_macvtap left promiscuous mode
[  187.411781][  T154] device veth0_macvtap left promiscuous mode
[  187.422753][   T26] audit: type=1326 audit(1779237002.621:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7307 comm="syz.9.754" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6779adbe59 code=0x7ffc0000
[  187.443281][  T154] device veth1_vlan left promiscuous mode
[  187.503483][  T154] device veth0_vlan left promiscuous mode
[  187.554815][   T26] audit: type=1326 audit(1779237002.631:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7307 comm="syz.9.754" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6779adbe59 code=0x7ffc0000
[  187.579596][ T7313] vcan0: tx drop: invalid sa for name 0x0000000000000001
[  187.689822][   T26] audit: type=1326 audit(1779237002.631:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7307 comm="syz.9.754" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f6779adbe59 code=0x7ffc0000
[  187.765714][   T26] audit: type=1326 audit(1779237002.681:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7307 comm="syz.9.754" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6779adbe59 code=0x7ffc0000
[  187.875508][   T26] audit: type=1326 audit(1779237002.711:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7307 comm="syz.9.754" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6779adbe59 code=0x7ffc0000
[  187.943212][   T26] audit: type=1326 audit(1779237002.721:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7310 comm="syz.9.754" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6779a9c68e code=0x7ffc0000
[  188.031578][   T26] audit: type=1326 audit(1779237002.741:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7307 comm="syz.9.754" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6779adbe59 code=0x7ffc0000
[  188.112257][   T26] audit: type=1326 audit(1779237002.741:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7307 comm="syz.9.754" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f6779adbe59 code=0x7ffc0000
[  188.192248][   T26] audit: type=1326 audit(1779237002.741:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7307 comm="syz.9.754" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6779adbe59 code=0x7ffc0000
[  188.490195][ T7320] loop0: detected capacity change from 0 to 256
[  188.531885][  T154] team0 (unregistering): Port device team_slave_1 removed
[  188.654571][  T154] team0 (unregistering): Port device team_slave_0 removed
[  188.725597][  T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  188.810681][ T7317] loop9: detected capacity change from 0 to 40427
[  188.828320][  T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  188.977278][ T7317] F2FS-fs (loop9): Invalid log_blocksize (268), supports only 12
[  189.007670][ T7317] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock
[  189.068981][ T7329] loop6: detected capacity change from 0 to 2048
[  189.155854][ T7317] F2FS-fs (loop9): Found nat_bits in checkpoint
[  189.287220][  T154] bond0 (unregistering): Released all slaves
[  189.291720][ T7329] EXT4-fs (loop6): mounted filesystem without journal. Opts: nobarrier,noinit_itable,i_version,init_itable,,errors=continue. Quota mode: none.
[  189.335420][ T7317] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0
[  189.342815][ T7317] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e5
[  189.413955][ T7329] ext4 filesystem being mounted at /79/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  189.432056][ T5040] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  189.562326][ T7302] device batadv_slave_1 entered promiscuous mode
[  189.591899][ T7302] device batadv_slave_1 left promiscuous mode
[  189.664644][ T7303] netlink: 4 bytes leftover after parsing attributes in process `syz.7.752'.
[  189.675744][ T7303] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  189.806188][ T7303] batman_adv: batadv0: Removing interface: batadv_slave_1
[  189.828608][ T7321] loop5: detected capacity change from 0 to 40427
[  190.068880][ T5040] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  190.100876][ T7321] F2FS-fs (loop5): Found nat_bits in checkpoint
[  190.101901][ T5040] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  190.182203][ T5040] usb 1-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[  190.215936][ T5040] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  190.259676][ T5040] usb 1-1: config 0 descriptor??
[  190.374929][ T7321] F2FS-fs (loop5): Cannot turn on quotas: -2 on 0
[  190.435223][ T7321] F2FS-fs (loop5): Start checkpoint disabled!
[  190.496369][ T7359] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  190.596812][ T7321] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[  190.768328][ T7367] loop7: detected capacity change from 0 to 64
[  190.884223][ T5040] playstation 0003:054C:0DF2.0009: unknown main item tag 0x0
[  190.891714][ T5040] playstation 0003:054C:0DF2.0009: unknown main item tag 0x0
[  190.938896][ T5040] playstation 0003:054C:0DF2.0009: unknown main item tag 0x0
[  190.950863][ T7367] hfs: request for non-existent node 131072 in B*Tree
[  190.964980][ T7367] hfs: request for non-existent node 131072 in B*Tree
[  190.987640][ T5040] playstation 0003:054C:0DF2.0009: unknown main item tag 0x0
[  191.012196][ T5040] playstation 0003:054C:0DF2.0009: unknown main item tag 0x0
[  191.092789][ T5040] playstation 0003:054C:0DF2.0009: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.0-1/input0
[  191.115619][ T4246] attempt to access beyond end of device
[  191.115619][ T4246] loop5: rw=2049, want=45104, limit=40427
[  191.693238][ T5040] playstation 0003:054C:0DF2.0009: Failed to retrieve feature with reportID 5: -71
[  191.702651][ T5040] playstation 0003:054C:0DF2.0009: Failed to retrieve DualSense calibration info: -71
[  191.763390][ T5040] playstation 0003:054C:0DF2.0009: Failed to get calibration data from DualSense
[  191.832178][ T5040] playstation 0003:054C:0DF2.0009: Failed to create dualsense.
[  191.867591][ T5040] playstation: probe of 0003:054C:0DF2.0009 failed with error -71
[  191.952192][ T5040] usb 1-1: USB disconnect, device number 11
[  192.185368][ T7402] fido_id[7402]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  192.286185][ T7410] device bond1 entered promiscuous mode
[  192.334387][ T7416] loop0: detected capacity change from 0 to 64
[  192.379785][ T7410] 8021q: adding VLAN 0 to HW filter on device bond1
[  192.468671][ T7420] loop7: detected capacity change from 0 to 512
[  192.480383][ T7414] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  192.587651][ T7416] hfs: request for non-existent node 131072 in B*Tree
[  192.630153][ T7414] 8021q: adding VLAN 0 to HW filter on device bond1
[  192.638806][ T7420] EXT4-fs (loop7): Mount option "nouser_xattr" will be removed by 3.5
[  192.638806][ T7420] Contact linux-ext4@vger.kernel.org if you think we should keep it.
[  192.638806][ T7420] 
[  192.670219][ T7416] hfs: request for non-existent node 131072 in B*Tree
[  192.684554][ T7414] device lo entered promiscuous mode
[  192.717408][ T7414] bond1: (slave lo): Enslaving as an active interface with an up link
[  192.785047][ T7414] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  192.841760][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready
[  192.911581][ T7420] EXT4-fs (loop7): mounted filesystem without journal. Opts: nouser_xattr,usrjquota=,,errors=continue. Quota mode: writeback.
[  192.942365][ T7431] loop9: detected capacity change from 0 to 64
[  192.974626][ T7420] ext4 filesystem being mounted at /87/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  193.261529][ T7431] hfs: request for non-existent node 131072 in B*Tree
[  193.281211][ T7431] hfs: request for non-existent node 131072 in B*Tree
[  193.737607][ T5040] usb 1-1: new full-speed USB device number 12 using dummy_hcd
[  194.295881][ T5040] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[  194.322065][ T5040] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  194.349897][ T1422] ieee802154 phy0 wpan0: encryption failed: -22
[  194.358460][ T1422] ieee802154 phy1 wpan1: encryption failed: -22
[  194.366419][ T5040] usb 1-1: config 0 interface 0 has no altsetting 0
[  194.373523][ T5040] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  194.413629][ T5040] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  194.440555][ T5040] usb 1-1: config 0 descriptor??
[  194.616539][ T7473] loop5: detected capacity change from 0 to 128
[  194.709095][ T7476] device bond1 entered promiscuous mode
[  194.747869][ T7476] 8021q: adding VLAN 0 to HW filter on device bond1
[  194.781720][ T7473] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  194.814083][ T7473] hpfs: filesystem error: improperly stopped
[  194.833410][ T7473] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  194.841220][ T7473] hpfs: You really don't want any checks? You are crazy...
[  194.892514][ T7473] hpfs: Code page index out of array
[  194.897875][ T7473] hpfs: code page support is disabled
[  194.934769][ T7478] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  194.990453][ T7473] hpfs: hpfs_map_4sectors(): unaligned read
[  195.012565][ T5040] elan 0003:04F3:0755.000A: unknown main item tag 0x3
[  195.025957][ T7478] 8021q: adding VLAN 0 to HW filter on device bond1
[  195.056175][ T5040] elan 0003:04F3:0755.000A: unknown main item tag 0x3
[  195.065697][ T5040] elan 0003:04F3:0755.000A: unknown main item tag 0x2
[  195.088100][ T7473] hpfs: hpfs_map_4sectors(): unaligned read
[  195.092312][ T5040] elan 0003:04F3:0755.000A: unknown main item tag 0x0
[  195.101043][ T5040] elan 0003:04F3:0755.000A: item 0 0 0 11 parsing failed
[  195.122456][ T7473] hpfs: filesystem error: unable to find root dir
[  195.128966][ T5040] elan 0003:04F3:0755.000A: Hid Parse failed
[  195.129020][ T5040] elan: probe of 0003:04F3:0755.000A failed with error -22
[  195.167687][ T7478] device lo entered promiscuous mode
[  195.180003][ T7478] bond1: (slave lo): Enslaving as an active interface with an up link
[  195.272418][ T5040] usb 1-1: USB disconnect, device number 12
[  195.319749][ T7478] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  195.420737][  T144] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready
[  195.440452][ T7490] netlink: 4 bytes leftover after parsing attributes in process `syz.6.799'.
[  195.750827][ T7502] loop9: detected capacity change from 0 to 512
[  195.873100][ T7502] EXT4-fs (loop9): Mount option "nouser_xattr" will be removed by 3.5
[  195.873100][ T7502] Contact linux-ext4@vger.kernel.org if you think we should keep it.
[  195.873100][ T7502] 
[  196.035396][ T7509] loop5: detected capacity change from 0 to 136
[  196.086288][ T7502] EXT4-fs (loop9): mounted filesystem without journal. Opts: nouser_xattr,usrjquota=,,errors=continue. Quota mode: writeback.
[  196.127699][ T7502] ext4 filesystem being mounted at /12/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  196.412236][ T4627] Bluetooth: hci0: command 0x0406 tx timeout
[  196.808060][ T7531] tls_set_device_offload_rx: netdev not found
[  197.089609][ T7537] loop9: detected capacity change from 0 to 256
[  197.245621][ T7537] exFAT-fs (loop9): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d)
[  197.627867][ T7547] loop9: detected capacity change from 0 to 128
[  197.705999][ T7545] device bond1 entered promiscuous mode
[  197.706707][ T7526] loop0: detected capacity change from 0 to 40427
[  197.726470][ T7545] 8021q: adding VLAN 0 to HW filter on device bond1
[  197.781803][ T7547] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  197.796242][ T7549] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  197.837246][    C0] vcan0: j1939_tp_rxtimer: 0xffff888062292c00: rx timeout, send abort
[  197.845940][    C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888062292c00: 0x20000: (3) A timeout occurred and this is the connection abort to close the session.
[  197.849511][ T7547] hpfs: filesystem error: improperly stopped
[  197.881934][ T7526] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  197.911391][ T7547] 
[  197.913865][ T7547] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  197.921794][ T7526] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  197.935965][ T7547] hpfs: You really don't want any checks? You are crazy...
[  197.955468][ T7549] 8021q: adding VLAN 0 to HW filter on device bond1
[  197.962720][ T7547] hpfs: Code page index out of array
[  197.968253][ T7547] hpfs: code page support is disabled
[  197.980083][ T7526] F2FS-fs (loop0): Found nat_bits in checkpoint
[  197.987738][ T7547] hpfs: hpfs_map_4sectors(): unaligned read
[  198.025504][ T7549] device lo entered promiscuous mode
[  198.026276][ T7547] hpfs: hpfs_map_4sectors(): unaligned read
[  198.039768][ T7547] hpfs: filesystem error: unable to find root dir
[  198.067852][ T7549] bond1: (slave lo): Enslaving as an active interface with an up link
[  198.128571][ T7549] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  198.166024][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready
[  198.175503][ T7553] netlink: 'syz.7.814': attribute type 1 has an invalid length.
[  198.188771][ T7526] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  198.199429][ T7526] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  198.278964][ T7553] 8021q: adding VLAN 0 to HW filter on device bond1
[  198.413985][ T7557] 8021q: adding VLAN 0 to HW filter on device bond1
[  198.462780][ T7557] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[  198.516645][ T7557] bond1: (slave vxcan3): Error -22 calling dev_set_mtu
[  199.051149][ T7596] loop0: detected capacity change from 0 to 512
[  199.098473][ T7596] EXT4-fs (loop0): Mount option "nouser_xattr" will be removed by 3.5
[  199.098473][ T7596] Contact linux-ext4@vger.kernel.org if you think we should keep it.
[  199.098473][ T7596] 
[  199.200285][ T7596] EXT4-fs (loop0): mounted filesystem without journal. Opts: nouser_xattr,usrjquota=,,errors=continue. Quota mode: writeback.
[  199.217381][ T7596] ext4 filesystem being mounted at /196/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  199.230840][ T7605] loop7: detected capacity change from 0 to 256
[  199.249658][ T7605] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d)
[  199.292300][ T5065] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  199.293633][ T7603] loop9: detected capacity change from 0 to 4096
[  199.399856][ T7603] EXT4-fs (loop9): inline encryption not supported
[  199.423118][ T7603] EXT4-fs (loop9): Test dummy encryption mode enabled
[  199.516201][ T7603] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[  199.557350][ T7603] System zones: 0-5
[  199.606416][ T7603] EXT4-fs (loop9): mounted filesystem without journal. Opts: debug,delalloc,inlinecrypt,test_dummy_encryption,errors=continue,errors=continue,delalloc,barrier,,errors=continue. Quota mode: writeback.
[  199.700801][ T5065] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  199.717835][ T5065] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  199.779798][ T7603] EXT4-fs error (device loop9): ext4_validate_block_bitmap:438: comm syz.9.824: bg 0: block 32: padding at end of block bitmap is not set
[  199.802240][ T5065] usb 6-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[  199.818013][ T7620] device bond2 entered promiscuous mode
[  199.840937][ T5065] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  199.841496][ T7620] 8021q: adding VLAN 0 to HW filter on device bond2
[  199.892618][ T5065] usb 6-1: config 0 descriptor??
[  199.918404][ T7622] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  199.976778][ T7603] fs-verity (loop9, inode 13): ext4_end_enable_verity() failed with err -28
[  200.027240][ T7622] 8021q: adding VLAN 0 to HW filter on device bond2
[  200.056593][ T7622] device lo entered promiscuous mode
[  200.095867][ T7622] bond2: (slave lo): Enslaving as an active interface with an up link
[  200.141902][ T7622] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check.
[  200.178340][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready
[  200.235064][ T7631] loop9: detected capacity change from 0 to 256
[  200.357260][   T26] kauditd_printk_skb: 46 callbacks suppressed
[  200.357277][   T26] audit: type=1326 audit(1779237015.641:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7633 comm="syz.9.832" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6779adbe59 code=0x7ffc0000
[  200.421552][ T5065] playstation 0003:054C:0DF2.000B: unknown main item tag 0x0
[  200.439414][ T5065] playstation 0003:054C:0DF2.000B: unknown main item tag 0x0
[  200.457631][ T5065] playstation 0003:054C:0DF2.000B: unknown main item tag 0x0
[  200.481291][ T5065] playstation 0003:054C:0DF2.000B: unknown main item tag 0x0
[  200.505866][   T26] audit: type=1326 audit(1779237015.681:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7633 comm="syz.9.832" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f6779adbe59 code=0x7ffc0000
[  200.530202][ T5065] playstation 0003:054C:0DF2.000B: unknown main item tag 0x0
[  200.588975][ T5065] playstation 0003:054C:0DF2.000B: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.5-1/input0
[  200.607716][ T7616] loop6: detected capacity change from 0 to 40427
[  200.618084][   T26] audit: type=1326 audit(1779237015.711:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7633 comm="syz.9.832" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6779adbe59 code=0x7ffc0000
[  200.676672][ T7640] loop7: detected capacity change from 0 to 128
[  200.683584][ T7616] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12
[  200.705899][ T7616] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[  200.730736][   T26] audit: type=1326 audit(1779237015.721:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7633 comm="syz.9.832" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f6779adbe59 code=0x7ffc0000
[  200.805785][ T7640] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  200.836843][ T7616] F2FS-fs (loop6): Found nat_bits in checkpoint
[  200.862891][ T7640] hpfs: filesystem error: improperly stopped
[  200.882244][   T26] audit: type=1326 audit(1779237015.721:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7633 comm="syz.9.832" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6779adbe59 code=0x7ffc0000
[  200.887490][ T7640] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  200.973717][   T26] audit: type=1326 audit(1779237015.741:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7633 comm="syz.9.832" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f6779adbe59 code=0x7ffc0000
[  200.992537][ T7640] hpfs: You really don't want any checks? You are crazy...
[  201.025094][ T7616] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[  201.050824][ T7640] hpfs: Code page index out of array
[  201.051021][ T7616] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  201.067146][ T7640] hpfs: code page support is disabled
[  201.085178][   T26] audit: type=1326 audit(1779237015.741:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7636 comm="syz.9.832" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6779a9c68e code=0x7ffc0000
[  201.088481][ T7640] hpfs: hpfs_map_4sectors(): unaligned read
[  201.166437][ T7640] hpfs: hpfs_map_4sectors(): unaligned read
[  201.204178][   T26] audit: type=1326 audit(1779237015.891:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7636 comm="syz.9.832" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f6779adbe59 code=0x7ffc0000
[  201.228722][ T7640] hpfs: filesystem error: unable to find root dir
[  201.233865][ T5065] playstation 0003:054C:0DF2.000B: Failed to retrieve feature with reportID 5: -71
[  201.262282][ T5065] playstation 0003:054C:0DF2.000B: Failed to retrieve DualSense calibration info: -71
[  201.322801][ T5065] playstation 0003:054C:0DF2.000B: Failed to get calibration data from DualSense
[  201.355286][ T5065] playstation 0003:054C:0DF2.000B: Failed to create dualsense.
[  201.400454][ T5065] playstation: probe of 0003:054C:0DF2.000B failed with error -71
[  201.461328][ T5065] usb 6-1: USB disconnect, device number 7
[  201.663135][ T7663] fido_id[7663]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[  201.907877][ T7677] netlink: 'syz.0.843': attribute type 1 has an invalid length.
[  201.970738][ T7676] loop7: detected capacity change from 0 to 4096
[  201.994733][ T7677] 8021q: adding VLAN 0 to HW filter on device bond1
[  202.053256][ T7676] EXT4-fs (loop7): inline encryption not supported
[  202.081018][ T7676] EXT4-fs (loop7): Test dummy encryption mode enabled
[  202.093519][ T7681] 8021q: adding VLAN 0 to HW filter on device bond1
[  202.109718][ T7681] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address
[  202.121429][ T7681] bond1: (slave vxcan3): Error -22 calling dev_set_mtu
[  202.150089][ T7676] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[  202.176441][ T7676] System zones: 0-5
[  202.196797][ T7676] EXT4-fs (loop7): mounted filesystem without journal. Opts: debug,delalloc,inlinecrypt,test_dummy_encryption,errors=continue,errors=continue,delalloc,barrier,,errors=continue. Quota mode: writeback.
[  202.224766][ T7690] loop6: detected capacity change from 0 to 512
[  202.243175][ T7690] EXT4-fs (loop6): Mount option "nouser_xattr" will be removed by 3.5
[  202.243175][ T7690] Contact linux-ext4@vger.kernel.org if you think we should keep it.
[  202.243175][ T7690] 
[  202.338445][ T7690] EXT4-fs (loop6): mounted filesystem without journal. Opts: nouser_xattr,usrjquota=,,errors=continue. Quota mode: writeback.
[  202.352504][ T7690] ext4 filesystem being mounted at /102/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  202.397469][ T7676] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.842: bg 0: block 32: padding at end of block bitmap is not set
[  202.505740][ T7676] fs-verity (loop7, inode 13): ext4_end_enable_verity() failed with err -28
[  202.571079][ T7698] netlink: 24 bytes leftover after parsing attributes in process `syz.0.846'.
[  202.866449][ T7704] loop9: detected capacity change from 0 to 128
[  203.009673][ T7704] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  203.054358][ T7704] hpfs: filesystem error: improperly stopped
[  203.060420][ T7704] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  203.145373][ T7704] hpfs: You really don't want any checks? You are crazy...
[  203.165627][ T7704] hpfs: Code page index out of array
[  203.170969][ T7704] hpfs: code page support is disabled
[  203.178375][ T7713] loop6: detected capacity change from 0 to 4096
[  203.192944][ T7704] hpfs: hpfs_map_4sectors(): unaligned read
[  203.199024][ T7704] hpfs: hpfs_map_4sectors(): unaligned read
[  203.208259][ T7704] hpfs: filesystem error: unable to find root dir
[  203.568596][ T5521] ntfs3: loop6: ntfs_evict_inode r=5 failed, -22.
[  203.638022][ T5521] ntfs3: loop6: Mark volume as dirty due to NTFS errors
[  203.872433][ T4625] usb 10-1: new high-speed USB device number 2 using dummy_hcd
[  204.059232][ T7757] loop5: detected capacity change from 0 to 512
[  204.116256][ T7757] EXT4-fs (loop5): Mount option "nouser_xattr" will be removed by 3.5
[  204.116256][ T7757] Contact linux-ext4@vger.kernel.org if you think we should keep it.
[  204.116256][ T7757] 
[  204.224339][ T7757] EXT4-fs (loop5): mounted filesystem without journal. Opts: nouser_xattr,usrjquota=,,errors=continue. Quota mode: writeback.
[  204.242464][ T4625] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  204.292360][ T7757] ext4 filesystem being mounted at /148/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  204.302799][ T4625] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  204.302899][ T4625] usb 10-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[  204.302925][ T4625] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  204.330790][ T4625] usb 10-1: config 0 descriptor??
[  204.681236][ T7779] device syzkaller1 entered promiscuous mode
[  204.820106][ T4625] playstation 0003:054C:0DF2.000C: unknown main item tag 0x0
[  204.843387][ T4625] playstation 0003:054C:0DF2.000C: unknown main item tag 0x0
[  204.865430][ T4625] playstation 0003:054C:0DF2.000C: unknown main item tag 0x0
[  204.900733][ T4625] playstation 0003:054C:0DF2.000C: unknown main item tag 0x0
[  204.926800][ T4625] playstation 0003:054C:0DF2.000C: unknown main item tag 0x0
[  204.939812][ T7790] input: syz0 as /devices/virtual/input/input16
[  204.957262][ T4625] playstation 0003:054C:0DF2.000C: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.9-1/input0
[  205.215380][ T7810] input: syz0 as /devices/virtual/input/input17
[  205.362248][ T4630] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  205.451036][ T7818] loop0: detected capacity change from 0 to 2048
[  205.544467][ T4625] playstation 0003:054C:0DF2.000C: Failed to retrieve feature with reportID 5: -71
[  205.564775][ T4625] playstation 0003:054C:0DF2.000C: Failed to retrieve DualSense calibration info: -71
[  205.586251][ T4625] playstation 0003:054C:0DF2.000C: Failed to get calibration data from DualSense
[  205.606354][ T7818] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  205.615513][ T4630] usb 8-1: Using ep0 maxpacket: 16
[  205.622324][ T5065] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  205.625475][ T4625] playstation 0003:054C:0DF2.000C: Failed to create dualsense.
[  205.681452][ T4625] playstation: probe of 0003:054C:0DF2.000C failed with error -71
[  205.736804][ T4630] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  205.772522][ T4630] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3
[  205.811524][ T4625] usb 10-1: USB disconnect, device number 2
[  205.941202][ T7844] fido_id[7844]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory
[  206.012514][ T4630] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  206.026231][ T4630] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  206.042591][ T5065] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  206.044013][ T4630] usb 8-1: Product: syz
[  206.062787][ T5065] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  206.102376][ T4630] usb 8-1: Manufacturer: syz
[  206.109722][ T5065] usb 7-1: config 0 descriptor??
[  206.133173][ T4630] usb 8-1: SerialNumber: syz
[  206.163777][ T5065] cp210x 7-1:0.0: cp210x converter detected
[  206.317891][ T4188] UDF-fs: error (device loop0): udf_read_inode: (ino 1317) failed !bh
[  206.352076][ T4188] UDF-fs: error (device loop0): udf_read_inode: (ino 1317) failed !bh
[  206.493243][ T4630] usb 8-1: 0:2 : does not exist
[  206.536331][ T4630] usb 8-1: USB disconnect, device number 4
[  206.597803][ T5065] cp210x 7-1:0.0: failed to get vendor val 0x0010 size 3: -32
[  206.651835][ T5065] usb 7-1: cp210x converter now attached to ttyUSB0
[  206.783372][ T4375] udevd[4375]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  206.860761][ T5065] usb 7-1: USB disconnect, device number 7
[  206.874501][ T5065] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  206.934150][ T5065] cp210x 7-1:0.0: device disconnected
[  207.442729][ T4625] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[  207.510084][ T7898] input: syz0 as /devices/virtual/input/input18
[  207.722210][ T4625] usb 8-1: Using ep0 maxpacket: 32
[  207.836235][ T7886] chnl_net:caif_netlink_parms(): no params data found
[  207.843105][ T4625] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  207.843146][ T4625] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  207.843186][ T4625] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00
[  207.939202][ T4625] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  207.968132][ T4625] usb 8-1: config 0 descriptor??
[  208.055031][ T7886] bridge0: port 1(bridge_slave_0) entered blocking state
[  208.062664][ T7886] bridge0: port 1(bridge_slave_0) entered disabled state
[  208.071117][ T7886] device bridge_slave_0 entered promiscuous mode
[  208.081044][ T7886] bridge0: port 2(bridge_slave_1) entered blocking state
[  208.089166][ T7886] bridge0: port 2(bridge_slave_1) entered disabled state
[  208.101613][ T7886] device bridge_slave_1 entered promiscuous mode
[  208.131707][ T7886] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  208.145441][ T7886] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  208.185041][ T7886] team0: Port device team_slave_0 added
[  208.194519][ T7886] team0: Port device team_slave_1 added
[  208.225228][ T7886] batman_adv: batadv0: Adding interface: batadv_slave_0
[  208.232701][ T7886] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  208.270558][ T7886] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  208.306604][ T7886] batman_adv: batadv0: Adding interface: batadv_slave_1
[  208.322360][ T7886] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  208.384824][ T7886] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  208.475194][ T4625] koneplus 0003:1E7D:2D51.000D: unknown main item tag 0x0
[  208.509034][ T4625] koneplus 0003:1E7D:2D51.000D: unknown main item tag 0x0
[  208.522365][ T4625] koneplus 0003:1E7D:2D51.000D: unknown main item tag 0x0
[  208.529591][ T4625] koneplus 0003:1E7D:2D51.000D: unknown main item tag 0x0
[  208.532554][ T7886] device hsr_slave_0 entered promiscuous mode
[  208.567525][ T7886] device hsr_slave_1 entered promiscuous mode
[  208.573414][ T4625] koneplus 0003:1E7D:2D51.000D: unknown main item tag 0x0
[  208.584821][ T7886] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  208.585275][ T4625] koneplus 0003:1E7D:2D51.000D: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.7-1/input0
[  208.611456][ T7886] Cannot create hsr debugfs directory
[  208.657090][ T7904] loop9: detected capacity change from 0 to 32768
[  208.848894][ T7915] loop5: detected capacity change from 0 to 32768
[  208.922213][ T7915] JBD2: Ignoring recovery information on journal
[  208.937742][ T7904] XFS (loop9): Mounting V5 Filesystem
[  208.962008][ T5061] usb 8-1: USB disconnect, device number 5
[  209.131504][ T7904] XFS (loop9): Ending clean mount
[  209.187197][ T7915] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  209.228032][ T7052] XFS (loop9): Unmounting Filesystem
[  209.379489][ T4627] Bluetooth: hci0: command 0x0409 tx timeout
[  209.474369][ T7915] (syz.5.899,7915,0):ocfs2_remount:624 ERROR: Cannot change heartbeat mode on remount
[  209.509282][ T7955] OCFS2: ERROR (device loop5): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #64 has an invalid bg_blkno of 190215511605312
[  209.571960][ T7886] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  209.586850][ T7955] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  209.613798][ T7955] OCFS2: File system is now read-only.
[  209.619417][ T7955] (syz.5.899,7955,1):ocfs2_test_suballoc_bit:2792 ERROR: read group 64 failed -30
[  209.629110][ T7955] (syz.5.899,7955,1):ocfs2_test_suballoc_bit:2803 ERROR: status = -30
[  209.637924][ T7955] (syz.5.899,7955,1):ocfs2_test_inode_bit:2865 ERROR: test suballoc bit failed -30
[  209.647623][ T7955] (syz.5.899,7955,1):ocfs2_test_inode_bit:2874 ERROR: status = -30
[  209.655905][ T7955] (syz.5.899,7955,1):ocfs2_get_parent:166 ERROR: test inode bit failed -30
[  209.727712][ T4559] ocfs2: Unmounting device (7,5) on (node local)
[  209.913409][ T7886] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  210.111331][ T7886] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  210.268490][ T7886] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  210.352428][ T4233] usb 10-1: new high-speed USB device number 3 using dummy_hcd
[  210.473037][ T7886] netdevsim netdevsim0 netdevsim0: renamed from eth0
[  210.491867][ T7886] netdevsim netdevsim0 netdevsim1: renamed from eth1
[  210.515631][ T7886] netdevsim netdevsim0 netdevsim2: renamed from eth2
[  210.535259][ T7886] netdevsim netdevsim0 netdevsim3: renamed from eth3
[  210.699892][ T7886] 8021q: adding VLAN 0 to HW filter on device bond0
[  210.722387][ T4233] usb 10-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  210.731603][ T4233] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  210.760096][ T7886] 8021q: adding VLAN 0 to HW filter on device team0
[  210.775930][ T4233] usb 10-1: config 0 descriptor??
[  210.788931][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  210.800628][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  210.816734][ T4233] cp210x 10-1:0.0: cp210x converter detected
[  210.827001][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  210.843598][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  210.859561][ T4246] bridge0: port 1(bridge_slave_0) entered blocking state
[  210.866773][ T4246] bridge0: port 1(bridge_slave_0) entered forwarding state
[  210.881422][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  210.898336][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  210.911466][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  210.927321][ T4246] bridge0: port 2(bridge_slave_1) entered blocking state
[  210.934540][ T4246] bridge0: port 2(bridge_slave_1) entered forwarding state
[  210.959947][ T4534] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  210.970070][ T4534] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  211.001985][ T4534] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  211.020724][ T4534] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  211.034427][ T4534] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  211.051022][ T4534] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  211.069664][ T4534] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  211.085567][ T4534] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  211.100236][ T4534] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  211.112690][ T4534] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  211.121653][ T4534] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  211.144755][ T7886] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  211.252522][ T4233] cp210x 10-1:0.0: failed to get vendor val 0x0010 size 3: -32
[  211.306145][ T4233] usb 10-1: cp210x converter now attached to ttyUSB0
[  211.345837][ T4534] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  211.369282][ T4534] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  211.400171][ T7886] 8021q: adding VLAN 0 to HW filter on device batadv0
[  211.433791][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  211.443720][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  211.452504][ T4625] Bluetooth: hci0: command 0x041b tx timeout
[  211.488233][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  211.499572][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  211.515807][ T4233] usb 10-1: USB disconnect, device number 3
[  211.515858][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  211.536605][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  211.546955][ T4233] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  211.560649][ T7886] device veth0_vlan entered promiscuous mode
[  211.571610][ T4233] cp210x 10-1:0.0: device disconnected
[  211.587978][ T7886] device veth1_vlan entered promiscuous mode
[  211.635988][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  211.653854][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  211.663048][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  211.671864][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  211.684657][ T7886] device veth0_macvtap entered promiscuous mode
[  211.704329][ T7886] device veth1_macvtap entered promiscuous mode
[  211.729681][ T7886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  211.748738][ T7886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  211.759541][ T7886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  211.778146][ T7886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  211.789376][ T7886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  211.807614][ T7886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  211.820303][ T7886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  211.846585][ T7886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  211.868780][ T7886] batman_adv: batadv0: Interface activated: batadv_slave_0
[  211.879937][ T4534] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  211.896532][ T4534] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[  211.909188][ T4534] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  211.926663][ T4534] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  211.943943][ T7886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  211.959755][ T7886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  211.970664][ T7886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  211.986925][ T7886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  211.997028][ T7886] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  212.007686][ T7886] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  212.019514][ T7886] batman_adv: batadv0: Interface activated: batadv_slave_1
[  212.030448][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  212.040827][  T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  212.056599][ T7886] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  212.077074][ T7886] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  212.086763][ T7886] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  212.098241][ T7886] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  212.210580][ T8008] input: syz0 as /devices/virtual/input/input19
[  212.445137][ T4246] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  212.474592][ T4246] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  212.487932][ T8013] loop5: detected capacity change from 0 to 512
[  212.528910][ T4534] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  212.621492][  T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  212.662061][  T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  212.694913][ T8013] EXT4-fs (loop5): Mount option "nouser_xattr" will be removed by 3.5
[  212.694913][ T8013] Contact linux-ext4@vger.kernel.org if you think we should keep it.
[  212.694913][ T8013] 
[  212.711742][ T4246] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  212.779934][ T8022] netlink: 'syz.7.913': attribute type 3 has an invalid length.
[  212.940248][ T8013] EXT4-fs (loop5): mounted filesystem without journal. Opts: nouser_xattr,usrjquota=,,errors=continue. Quota mode: writeback.
[  212.993570][ T8013] ext4 filesystem being mounted at /158/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  213.028857][ T8040] netlink: 8 bytes leftover after parsing attributes in process `syz.7.918'.
[  213.246545][ T8053] loop7: detected capacity change from 0 to 1024
[  213.288642][ T8055] loop6: detected capacity change from 0 to 512
[  213.381995][ T8053] EXT4-fs (loop7): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  213.432319][ T5056] usb 10-1: new full-speed USB device number 4 using dummy_hcd
[  213.455404][ T8053] EXT4-fs (loop7): mounted filesystem without journal. Opts: user_xattr,noquota,dioread_nolock,jqfmt=vfsv1,debug_want_extra_isize=0x0000000000000070,max_dir_size_kb=0x00000000000007b1,stripe=0x0000000000000020,bsdgroups,max_batch_time=0x00000000000003fe,user_xattr,noinit_itable,,errors=continue. Quota mode: none.
[  213.500325][ T8053] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters
[  213.537087][ T4625] Bluetooth: hci0: command 0x040f tx timeout
[  213.845540][ T5056] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  213.868562][ T5056] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  213.899049][ T5056] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  213.908704][ T5056] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  214.012737][ T5061] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  214.202511][ T5056] usb 10-1: usb_control_msg returned -32
[  214.213567][ T5056] usbtmc 10-1:16.0: can't read capabilities
[  214.282200][ T5061] usb 7-1: Using ep0 maxpacket: 32
[  214.302216][ T4233] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  214.347630][ T8098] loop9: detected capacity change from 0 to 7
[  214.358792][ T5145]  loop9: [POWERTEC] p1
[  214.366693][ T5145] loop9: p1 start 1600481121 is beyond EOD, truncated
[  214.380736][ T8098]  loop9: [POWERTEC] p1
[  214.390910][ T8098] loop9: p1 start 1600481121 is beyond EOD, truncated
[  214.422549][ T5061] usb 7-1: config 0 has an invalid interface number: 184 but max is 0
[  214.438807][ T5061] usb 7-1: config 0 has no interface number 0
[  214.452209][ T5061] usb 7-1: config 0 interface 184 has no altsetting 0
[  214.548764][ T4233] usb 6-1: Using ep0 maxpacket: 16
[  214.606537][ T8109] netlink: 4 bytes leftover after parsing attributes in process `syz.7.931'.
[  214.622543][ T5061] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  214.641993][ T5061] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  214.658039][ T5061] usb 7-1: Product: syz
[  214.663474][ T5061] usb 7-1: Manufacturer: syz
[  214.671030][ T5061] usb 7-1: SerialNumber: syz
[  214.679632][ T5061] usb 7-1: config 0 descriptor??
[  214.745057][ T5061] smsc75xx v1.0.0
[  214.753547][ T8114] loop7: detected capacity change from 0 to 512
[  214.832536][ T4233] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00
[  214.841640][ T4233] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  214.863103][ T8114] EXT4-fs (loop7): Quota format mount options ignored when QUOTA feature is enabled
[  214.868689][ T4233] usb 6-1: Product: syz
[  214.877281][ T4233] usb 6-1: Manufacturer: syz
[  214.881913][ T4233] usb 6-1: SerialNumber: syz
[  214.920006][ T4233] usb 6-1: config 0 descriptor??
[  214.938322][ T8114] EXT4-fs (loop7): mounted filesystem without journal. Opts: grpquota,quota,quota,stripe=0x0000000000000003,jqfmt=vfsold,,errors=continue. Quota mode: writeback.
[  214.964018][ T4233] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected
[  214.973781][ T4233] usb 6-1: Detected FT-X
[  215.008911][ T8114] ext4 filesystem being mounted at /123/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  215.172578][ T4233] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[  215.426146][ T8082] udc-core: couldn't find an available UDC or it's busy
[  215.438091][ T8082] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  215.612400][ T4630] Bluetooth: hci0: command 0x0419 tx timeout
[  215.628781][ T4626] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  215.686454][ T4233] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  215.872357][ T4626] usb 1-1: Using ep0 maxpacket: 32
[  215.889984][ T4233] usb 6-1: USB disconnect, device number 8
[  215.916511][ T4233] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  215.929862][ T4233] ftdi_sio 6-1:0.0: device disconnected
[  215.992335][ T4626] usb 1-1: config index 0 descriptor too short (expected 29220, got 36)
[  216.001428][ T4626] usb 1-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  216.010634][ T4626] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 81
[  216.020871][ T4626] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  216.031149][ T4626] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  216.041451][ T4626] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  216.055386][ T4626] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  216.064911][ T4626] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  216.082332][ T5061] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71
[  216.090938][ T4626] usb 1-1: config 0 descriptor??
[  216.107684][ T5061] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  216.132400][ T5061] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  216.150241][ T5061] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[  216.179258][ T5061] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset
[  216.228548][ T5061] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  216.251855][ T5061] smsc75xx: probe of 7-1:0.184 failed with error -71
[  216.265774][ T5061] usb 7-1: USB disconnect, device number 8
[  216.290181][ T5065] usb 10-1: USB disconnect, device number 4
[  216.354520][ T4626] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 13 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  216.577481][ T5056] usb 1-1: USB disconnect, device number 13
[  216.612813][ T5056] usblp0: removed
[  216.722328][ T8193] loop9: detected capacity change from 0 to 7
[  216.758471][ T8193]  loop9: [POWERTEC] p1
[  216.771736][ T8193] loop9: p1 start 1600481121 is beyond EOD, truncated
[  217.395963][ T8224] netlink: 24 bytes leftover after parsing attributes in process `syz.9.956'.
[  217.403644][ T4626] usb 8-1: new full-speed USB device number 6 using dummy_hcd
[  217.617028][ T8229] loop0: detected capacity change from 0 to 2048
[  217.776376][ T8229] EXT4-fs (loop0): Journaled quota options ignored when QUOTA feature is enabled
[  217.838159][ T8229] EXT4-fs (loop0): mounted filesystem without journal. Opts: usrjquota=./file1,noauto_da_alloc,bsddf,,errors=continue. Quota mode: writeback.
[  217.877074][ T8229] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  217.919188][ T4626] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  217.941086][ T8229] EXT4-fs (loop0): shut down requested (2)
[  217.949993][ T8229] fs-verity: sha256 using implementation "sha256-avx2"
[  217.965757][ T4626] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  218.052203][ T4626] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  218.122371][ T4626] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  218.322115][    C0] ==================================================================
[  218.331753][    C0] BUG: KASAN: use-after-free in __nft_trace_packet+0x135/0x150
[  218.339697][    C0] Read of size 2 at addr ffff8880685c8e40 by task syz.5.965/8252
[  218.347622][    C0] 
[  218.350203][    C0] CPU: 0 PID: 8252 Comm: syz.5.965 Not tainted syzkaller #0
[  218.357537][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  218.367826][    C0] Call Trace:
[  218.371158][    C0]  <IRQ>
[  218.374054][    C0]  dump_stack_lvl+0x188/0x250
[  218.378968][    C0]  ? show_regs_print_info+0x20/0x20
[  218.384238][    C0]  ? _printk+0xda/0x130
[  218.388450][    C0]  ? __nft_trace_packet+0x135/0x150
[  218.393888][    C0]  ? load_image+0x400/0x400
[  218.398580][    C0]  ? nft_synproxy_do_eval+0x304/0x570
[  218.404029][    C0]  print_address_description+0x60/0x2d0
[  218.409765][    C0]  ? __nft_trace_packet+0x135/0x150
[  218.415041][    C0]  kasan_report+0xdf/0x130
[  218.419660][    C0]  ? __nft_trace_packet+0x135/0x150
[  218.425056][    C0]  __nft_trace_packet+0x135/0x150
[  218.430155][    C0]  nft_do_chain+0x12a5/0x14f0
[  218.434898][    C0]  ? 0xffffffffa001a000
[  218.439114][    C0]  ? nft_fwd_dup_netdev_offload+0x120/0x120
[  218.445387][    C0]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  218.451454][    C0]  ? nf_nat_inet_fn+0x8a3/0xad0
[  218.456348][    C0]  nft_do_chain_inet+0x25c/0x340
[  218.461728][    C0]  ? nft_do_chain_arp+0xf0/0xf0
[  218.466988][    C0]  ? nf_nat_ipv4_local_in+0x209/0x5b0
[  218.472414][    C0]  ? nft_do_chain_arp+0xf0/0xf0
[  218.477298][    C0]  nf_hook_slow+0xb9/0x200
[  218.481968][    C0]  ? NF_HOOK+0x390/0x390
[  218.486254][    C0]  NF_HOOK+0x1f2/0x390
[  218.490467][    C0]  ? NF_HOOK+0x390/0x390
[  218.494766][    C0]  ? ip_local_deliver+0x1a0/0x1a0
[  218.499823][    C0]  ? ip_rcv_finish_core+0xd8b/0x1bc0
[  218.505276][    C0]  ? NF_HOOK+0x390/0x390
[  218.509665][    C0]  ? ip_local_deliver+0x11e/0x1a0
[  218.515332][    C0]  ? ip_rcv_core+0xb60/0xb60
[  218.520099][    C0]  NF_HOOK+0x303/0x390
[  218.524225][    C0]  ? ip_rcv_core+0xb60/0xb60
[  218.528865][    C0]  ? ip_local_deliver+0x1a0/0x1a0
[  218.533930][    C0]  ? ip_rcv_core+0xb60/0xb60
[  218.538563][    C0]  ? ip_local_deliver_finish+0x320/0x320
[  218.544240][    C0]  ? ip_local_deliver_finish+0x320/0x320
[  218.549899][    C0]  __netif_receive_skb+0xcc/0x290
[  218.555085][    C0]  process_backlog+0x370/0x790
[  218.559941][    C0]  ? rps_trigger_softirq+0x210/0x210
[  218.565270][    C0]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  218.571443][    C0]  ? lock_chain_count+0x20/0x20
[  218.576372][    C0]  __napi_poll+0xc0/0x430
[  218.580747][    C0]  ? net_rx_action+0x307/0xa10
[  218.585552][    C0]  net_rx_action+0x4d4/0xa10
[  218.590181][    C0]  ? net_tx_action+0x880/0x880
[  218.594979][    C0]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  218.601267][    C0]  ? lock_chain_count+0x20/0x20
[  218.606251][    C0]  handle_softirqs+0x339/0x830
[  218.611038][    C0]  ? do_softirq+0x142/0x210
[  218.615568][    C0]  ? do_softirq+0x210/0x210
[  218.620111][    C0]  do_softirq+0x142/0x210
[  218.624452][    C0]  </IRQ>
[  218.627487][    C0]  <TASK>
[  218.630448][    C0]  ? __local_bh_enable_ip+0x1c0/0x1c0
[  218.635979][    C0]  ? lockdep_hardirqs_on_prepare+0x770/0x770
[  218.642119][    C0]  ? __local_bh_enable_ip+0xd7/0x1c0
[  218.647454][    C0]  ? lockdep_hardirqs_off+0x70/0x100
[  218.652787][    C0]  ? local_bh_enable+0x5/0x20
[  218.657524][    C0]  __local_bh_enable_ip+0x180/0x1c0
[  218.662768][    C0]  ? _local_bh_enable+0xa0/0xa0
[  218.667841][    C0]  netlink_release+0x7e1/0x17b0
[  218.672724][    C0]  ? netlink_sock_destruct+0x190/0x190
[  218.678218][    C0]  sock_close+0xd5/0x240
[  218.682486][    C0]  ? sock_mmap+0x90/0x90
[  218.686751][    C0]  __fput+0x234/0x930
[  218.690769][    C0]  task_work_run+0x125/0x1a0
[  218.695391][    C0]  exit_to_user_mode_loop+0x10f/0x130
[  218.700791][    C0]  exit_to_user_mode_prepare+0xee/0x180
[  218.706356][    C0]  syscall_exit_to_user_mode+0x16/0x40
[  218.711841][    C0]  do_syscall_64+0x58/0xa0
[  218.716277][    C0]  ? clear_bhb_loop+0x30/0x80
[  218.720994][    C0]  ? clear_bhb_loop+0x30/0x80
[  218.725715][    C0]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  218.731659][    C0] RIP: 0033:0x7f790538fe59
[  218.736114][    C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  218.755746][    C0] RSP: 002b:00007f79035e9028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  218.764191][    C0] RAX: 0000000000000000 RBX: 00007f7905608fa0 RCX: 00007f790538fe59
[  218.772189][    C0] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000000
[  218.780191][    C0] RBP: 00007f7905425d6f R08: 0000000000000000 R09: 0000000000000000
[  218.788187][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  218.796197][    C0] R13: 00007f7905609038 R14: 00007f7905608fa0 R15: 00007fff15d3e668
[  218.804264][    C0]  </TASK>
[  218.807321][    C0] 
[  218.809686][    C0] Allocated by task 3561:
[  218.814040][    C0]  __kasan_slab_alloc+0x9c/0xd0
[  218.818931][    C0]  slab_post_alloc_hook+0x4c/0x380
[  218.824091][    C0]  kmem_cache_alloc_node+0x12d/0x2d0
[  218.829403][    C0]  __alloc_skb+0xf4/0x750
[  218.833760][    C0]  synproxy_send_client_synack+0x16f/0xde0
[  218.839605][    C0]  nft_synproxy_eval_v4+0x347/0x4e0
[  218.844841][    C0]  nft_synproxy_do_eval+0x304/0x570
[  218.850381][    C0]  nft_do_chain+0x48c/0x14f0
[  218.855018][    C0]  nft_do_chain_inet+0x25c/0x340
[  218.859988][    C0]  nf_hook_slow+0xb9/0x200
[  218.864513][    C0]  NF_HOOK+0x1f2/0x390
[  218.868688][    C0]  NF_HOOK+0x303/0x390
[  218.872857][    C0]  __netif_receive_skb+0xcc/0x290
[  218.877904][    C0]  process_backlog+0x370/0x790
[  218.882683][    C0]  __napi_poll+0xc0/0x430
[  218.887034][    C0]  net_rx_action+0x4d4/0xa10
[  218.891648][    C0]  handle_softirqs+0x339/0x830
[  218.896559][    C0]  __irq_exit_rcu+0x13b/0x230
[  218.901278][    C0]  irq_exit_rcu+0x5/0x20
[  218.905568][    C0]  sysvec_apic_timer_interrupt+0xa0/0xc0
[  218.911248][    C0]  asm_sysvec_apic_timer_interrupt+0x16/0x20
[  218.917262][    C0] 
[  218.919608][    C0] Freed by task 8252:
[  218.923623][    C0]  kasan_set_track+0x4b/0x70
[  218.928272][    C0]  kasan_set_free_info+0x1f/0x40
[  218.933247][    C0]  ____kasan_slab_free+0xd5/0x110
[  218.938315][    C0]  slab_free_freelist_hook+0xea/0x170
[  218.943713][    C0]  kmem_cache_free+0x8f/0x210
[  218.948443][    C0]  nft_synproxy_eval_v4+0x34f/0x4e0
[  218.953902][    C0]  nft_synproxy_do_eval+0x304/0x570
[  218.959144][    C0]  nft_do_chain+0x48c/0x14f0
[  218.963793][    C0]  nft_do_chain_inet+0x25c/0x340
[  218.968781][    C0]  nf_hook_slow+0xb9/0x200
[  218.973423][    C0]  NF_HOOK+0x1f2/0x390
[  218.977529][    C0]  NF_HOOK+0x303/0x390
[  218.981747][    C0]  __netif_receive_skb+0xcc/0x290
[  218.986819][    C0]  process_backlog+0x370/0x790
[  218.991625][    C0]  __napi_poll+0xc0/0x430
[  218.996000][    C0]  net_rx_action+0x4d4/0xa10
[  219.000606][    C0]  handle_softirqs+0x339/0x830
[  219.005400][    C0]  do_softirq+0x142/0x210
[  219.009773][    C0]  __local_bh_enable_ip+0x180/0x1c0
[  219.015024][    C0]  netlink_release+0x7e1/0x17b0
[  219.019930][    C0]  sock_close+0xd5/0x240
[  219.024214][    C0]  __fput+0x234/0x930
[  219.028243][    C0]  task_work_run+0x125/0x1a0
[  219.032866][    C0]  exit_to_user_mode_loop+0x10f/0x130
[  219.038260][    C0]  exit_to_user_mode_prepare+0xee/0x180
[  219.043863][    C0]  syscall_exit_to_user_mode+0x16/0x40
[  219.049450][    C0]  do_syscall_64+0x58/0xa0
[  219.053901][    C0]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  219.059812][    C0] 
[  219.062155][    C0] The buggy address belongs to the object at ffff8880685c8dc0
[  219.062155][    C0]  which belongs to the cache skbuff_head_cache of size 232
[  219.077408][    C0] The buggy address is located 128 bytes inside of
[  219.077408][    C0]  232-byte region [ffff8880685c8dc0, ffff8880685c8ea8)
[  219.091025][    C0] The buggy address belongs to the page:
[  219.096807][    C0] page:ffffea0001a17200 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x685c8
[  219.107060][    C0] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff)
[  219.114669][    C0] raw: 00fff00000000200 0000000000000000 0000000800000001 ffff88801bbe5140
[  219.123632][    C0] raw: 0000000000000000 00000000000c000c 00000001ffffffff 0000000000000000
[  219.132243][    C0] page dumped because: kasan: bad access detected
[  219.138680][    C0] page_owner tracks the page as allocated
[  219.144516][    C0] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 5061, ts 126602254371, free_ts 125586405781
[  219.161070][    C0]  get_page_from_freelist+0x1bbd/0x1ca0
[  219.166673][    C0]  __alloc_pages+0x1ee/0x480
[  219.171640][    C0]  new_slab+0xc0/0x4b0
[  219.176131][    C0]  ___slab_alloc+0x80a/0xdd0
[  219.180957][    C0]  kmem_cache_alloc_node+0x1c3/0x2d0
[  219.186857][    C0]  __alloc_skb+0xf4/0x750
[  219.191741][    C0]  mld_newpack+0x12f/0xb90
[  219.196611][    C0]  add_grhead+0x5a/0x240
[  219.200904][    C0]  add_grec+0x1341/0x15d0
[  219.205424][    C0]  mld_ifc_work+0x6e7/0xb40
[  219.210052][    C0]  process_one_work+0x85f/0x1010
[  219.215114][    C0]  worker_thread+0xaa6/0x1290
[  219.219854][    C0]  kthread+0x436/0x520
[  219.224575][    C0]  ret_from_fork+0x1f/0x30
[  219.229198][    C0] page last free stack trace:
[  219.233972][    C0]  free_unref_page_prepare+0x637/0x6c0
[  219.239454][    C0]  free_unref_page+0x8f/0x2a0
[  219.244363][    C0]  __vunmap+0x8b9/0xa50
[  219.248746][    C0]  kcov_close+0x27/0x50
[  219.252988][    C0]  __fput+0x234/0x930
[  219.257178][    C0]  task_work_run+0x125/0x1a0
[  219.261937][    C0]  do_exit+0x626/0x20c0
[  219.266146][    C0]  do_group_exit+0x12e/0x300
[  219.270773][    C0]  __x64_sys_exit_group+0x3b/0x40
[  219.275912][    C0]  do_syscall_64+0x4c/0xa0
[  219.280534][    C0]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  219.286554][    C0] 
[  219.288893][    C0] Memory state around the buggy address:
[  219.294731][    C0]  ffff8880685c8d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc
[  219.302874][    C0]  ffff8880685c8d80: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb
[  219.311174][    C0] >ffff8880685c8e00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  219.319265][    C0]                                            ^
[  219.325459][    C0]  ffff8880685c8e80: fb fb fb fb fb fc fc fc fc fc fc fc fc fc fc fc
[  219.333545][    C0]  ffff8880685c8f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  219.341626][    C0] ==================================================================
[  219.349767][    C0] Disabling lock debugging due to kernel taint
[  219.356182][    C0] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  219.363406][    C0] CPU: 0 PID: 8252 Comm: syz.5.965 Tainted: G    B             syzkaller #0
[  219.372131][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[  219.382325][    C0] Call Trace:
[  219.385653][    C0]  <IRQ>
[  219.388537][    C0]  dump_stack_lvl+0x188/0x250
[  219.393350][    C0]  ? show_regs_print_info+0x20/0x20
[  219.398585][    C0]  ? load_image+0x400/0x400
[  219.403152][    C0]  panic+0x2e5/0x810
[  219.407191][    C0]  ? bpf_jit_dump+0xd0/0xd0
[  219.411749][    C0]  ? _raw_spin_unlock_irqrestore+0xbc/0x120
[  219.417700][    C0]  ? _raw_spin_unlock_irqrestore+0xc1/0x120
[  219.423666][    C0]  ? _raw_spin_unlock+0x40/0x40
[  219.428572][    C0]  ? print_memory_metadata+0x314/0x400
[  219.434104][    C0]  ? __nft_trace_packet+0x135/0x150
[  219.439459][    C0]  check_panic_on_warn+0x80/0xa0
[  219.444561][    C0]  ? __nft_trace_packet+0x135/0x150
[  219.449826][    C0]  end_report+0x6d/0xf0
[  219.454020][    C0]  kasan_report+0x102/0x130
[  219.458573][    C0]  ? __nft_trace_packet+0x135/0x150
[  219.463824][    C0]  __nft_trace_packet+0x135/0x150
[  219.468889][    C0]  nft_do_chain+0x12a5/0x14f0
[  219.473693][    C0]  ? 0xffffffffa001a000
[  219.478129][    C0]  ? nft_fwd_dup_netdev_offload+0x120/0x120
[  219.484108][    C0]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  219.490459][    C0]  ? nf_nat_inet_fn+0x8a3/0xad0
[  219.495368][    C0]  nft_do_chain_inet+0x25c/0x340
[  219.500363][    C0]  ? nft_do_chain_arp+0xf0/0xf0
[  219.505261][    C0]  ? nf_nat_ipv4_local_in+0x209/0x5b0
[  219.510686][    C0]  ? nft_do_chain_arp+0xf0/0xf0
[  219.515820][    C0]  nf_hook_slow+0xb9/0x200
[  219.520293][    C0]  ? NF_HOOK+0x390/0x390
[  219.524687][    C0]  NF_HOOK+0x1f2/0x390
[  219.528823][    C0]  ? NF_HOOK+0x390/0x390
[  219.533113][    C0]  ? ip_local_deliver+0x1a0/0x1a0
[  219.538186][    C0]  ? ip_rcv_finish_core+0xd8b/0x1bc0
[  219.543526][    C0]  ? NF_HOOK+0x390/0x390
[  219.547832][    C0]  ? ip_local_deliver+0x11e/0x1a0
[  219.552905][    C0]  ? ip_rcv_core+0xb60/0xb60
[  219.557626][    C0]  NF_HOOK+0x303/0x390
[  219.561742][    C0]  ? ip_rcv_core+0xb60/0xb60
[  219.566384][    C0]  ? ip_local_deliver+0x1a0/0x1a0
[  219.571461][    C0]  ? ip_rcv_core+0xb60/0xb60
[  219.576092][    C0]  ? ip_local_deliver_finish+0x320/0x320
[  219.581766][    C0]  ? ip_local_deliver_finish+0x320/0x320
[  219.587443][    C0]  __netif_receive_skb+0xcc/0x290
[  219.592540][    C0]  process_backlog+0x370/0x790
[  219.597409][    C0]  ? rps_trigger_softirq+0x210/0x210
[  219.602736][    C0]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  219.608766][    C0]  ? lock_chain_count+0x20/0x20
[  219.613684][    C0]  __napi_poll+0xc0/0x430
[  219.618158][    C0]  ? net_rx_action+0x307/0xa10
[  219.623105][    C0]  net_rx_action+0x4d4/0xa10
[  219.627951][    C0]  ? net_tx_action+0x880/0x880
[  219.632763][    C0]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  219.638805][    C0]  ? lock_chain_count+0x20/0x20
[  219.643717][    C0]  handle_softirqs+0x339/0x830
[  219.648532][    C0]  ? do_softirq+0x142/0x210
[  219.653081][    C0]  ? do_softirq+0x210/0x210
[  219.657663][    C0]  do_softirq+0x142/0x210
[  219.662030][    C0]  </IRQ>
[  219.664999][    C0]  <TASK>
[  219.667957][    C0]  ? __local_bh_enable_ip+0x1c0/0x1c0
[  219.673370][    C0]  ? lockdep_hardirqs_on_prepare+0x770/0x770
[  219.679402][    C0]  ? __local_bh_enable_ip+0xd7/0x1c0
[  219.684723][    C0]  ? lockdep_hardirqs_off+0x70/0x100
[  219.690228][    C0]  ? local_bh_enable+0x5/0x20
[  219.694947][    C0]  __local_bh_enable_ip+0x180/0x1c0
[  219.700193][    C0]  ? _local_bh_enable+0xa0/0xa0
[  219.705083][    C0]  netlink_release+0x7e1/0x17b0
[  219.709975][    C0]  ? netlink_sock_destruct+0x190/0x190
[  219.715871][    C0]  sock_close+0xd5/0x240
[  219.720164][    C0]  ? sock_mmap+0x90/0x90
[  219.724578][    C0]  __fput+0x234/0x930
[  219.728623][    C0]  task_work_run+0x125/0x1a0
[  219.733367][    C0]  exit_to_user_mode_loop+0x10f/0x130
[  219.739021][    C0]  exit_to_user_mode_prepare+0xee/0x180
[  219.744616][    C0]  syscall_exit_to_user_mode+0x16/0x40
[  219.750146][    C0]  do_syscall_64+0x58/0xa0
[  219.754714][    C0]  ? clear_bhb_loop+0x30/0x80
[  219.759437][    C0]  ? clear_bhb_loop+0x30/0x80
[  219.764155][    C0]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  219.770107][    C0] RIP: 0033:0x7f790538fe59
[  219.774562][    C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  219.794211][    C0] RSP: 002b:00007f79035e9028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  219.802766][    C0] RAX: 0000000000000000 RBX: 00007f7905608fa0 RCX: 00007f790538fe59
[  219.810921][    C0] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000000
[  219.818960][    C0] RBP: 00007f7905425d6f R08: 0000000000000000 R09: 0000000000000000
[  219.827095][    C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  219.835221][    C0] R13: 00007f7905609038 R14: 00007f7905608fa0 R15: 00007fff15d3e668
[  219.843248][    C0]  </TASK>
[  219.846551][    C0] Kernel Offset: disabled
[  219.850913][    C0] Rebooting in 86400 seconds..