last executing test programs:

2m56.029836486s ago: executing program 4 (id=299):
capset(&(0x7f00000004c0)={0x19980330}, &(0x7f00000000c0)={0x200000, 0x200001, 0xfffffbff, 0xd})
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_RESIZE(r0, 0x5609, 0x0)

2m55.112598218s ago: executing program 4 (id=304):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = socket$xdp(0x2c, 0x3, 0x0)
bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x20}, 0x10)

2m54.978625672s ago: executing program 4 (id=307):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0xffffffff}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r5=>0x0})
r6 = socket$packet(0x11, 0x3, 0x300)
sendto$packet(r6, &(0x7f00000005c0)="ba", 0x1, 0x40, &(0x7f00000001c0)={0x11, 0x88a8, r5, 0x1, 0xd8, 0x6, @multicast}, 0x14)
r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
close_range(r7, 0xffffffffffffffff, 0x0)

2m53.988689001s ago: executing program 4 (id=311):
inotify_init()
socket$inet6_tcp(0xa, 0x1, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0))
socket$inet_tcp(0x2, 0x1, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x442, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff)
open(&(0x7f0000000080)='./file1\x00', 0x1c1882, 0x12)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
socket$inet6_sctp(0xa, 0x801, 0x84)
memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
socket$alg(0x26, 0x5, 0x0)
socket$alg(0x26, 0x5, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
inotify_init1(0x800)
r2 = memfd_create(&(0x7f0000000040)='%\x00', 0x2)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)=ANY=[@ANYRES32, @ANYRES32, @ANYRES8=r2], 0x20)

2m51.964455874s ago: executing program 4 (id=313):
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1)
r2 = eventfd(0x5f0)
ioctl$KVM_IOEVENTFD(r1, 0x40a0ae49, &(0x7f0000000080)={0x7fd, 0x100000, 0x0, r2})

2m51.716468949s ago: executing program 4 (id=314):
mmap(&(0x7f0000220000/0x3000)=nil, 0x3000, 0x300000e, 0x80010, 0xffffffffffffffff, 0x553f5000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r0 = dup(0xffffffffffffffff)
write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd2c)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f00000004c0)=0x4)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r1}, 0x18)
r2 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8)
r3 = gettid()
timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r3}, &(0x7f0000000080))
read$FUSE(r2, &(0x7f00000008c0)={0x2020}, 0xfffffef0)
timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0)
timer_getoverrun(0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000})

2m36.668180218s ago: executing program 32 (id=314):
mmap(&(0x7f0000220000/0x3000)=nil, 0x3000, 0x300000e, 0x80010, 0xffffffffffffffff, 0x553f5000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0)
r0 = dup(0xffffffffffffffff)
write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd2c)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f00000004c0)=0x4)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r1}, 0x18)
r2 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8)
r3 = gettid()
timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r3}, &(0x7f0000000080))
read$FUSE(r2, &(0x7f00000008c0)={0x2020}, 0xfffffef0)
timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0)
timer_getoverrun(0x0)
ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa05, &(0x7f0000000040)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, 0x3000})

18.412473756s ago: executing program 1 (id=727):
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000c00)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000160001"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
socket$igmp(0x2, 0x3, 0x2)
recvmmsg(r4, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}, 0xe}, {{0x0, 0x0, 0x0}, 0x2}], 0x2, 0x60, 0x0)

15.805185327s ago: executing program 1 (id=735):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r1 = openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000180)=0x7)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0xffffffffffffffff, 0x1a, 0x0, 0x2}, 0x28)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000100)=@req={0xffff, 0x0, 0x483, 0x2}, 0x10)
r5 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x42, 0x0)
write$vga_arbiter(r5, &(0x7f00000000c0)=ANY=[], 0xf)
socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x80, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x54, 0x3, 0x0, 0x1, [{0x50, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x44, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x10}]}}}, {0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x104}}, 0x0)
r7 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000101c1b001d00000000000109022400010037f300090400000103000000092100000400010000"], 0x0)
syz_usb_control_io(r7, 0x0, 0x0)
syz_usb_control_io$hid(r7, &(0x7f0000000200)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0)
write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="062064cdc1050001006e759d62b0c510b6280ab306fc4f3aa72c57b3b3809a054431d5385de20b1778d7bffab7ed9c882cb8c8764c7dac6ce85b3de105a90737787435fd6b98d6c06b35f87ed90fa8e7e9dbba4d66a9c2fd3d"], 0xa)
syz_open_dev$vim2m(&(0x7f0000000000), 0x82000000003, 0x2)

11.340211985s ago: executing program 3 (id=743):
setrlimit(0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00"/14], 0x48)
r3 = syz_open_dev$sndpcmc(&(0x7f0000000300), 0x0, 0x0)
mmap$snddsp_control(&(0x7f0000000000/0x3000)=nil, 0x1000, 0x1, 0x11, r3, 0x82000000)
ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r3, 0x40044103, &(0x7f0000000040)=0xad59)

11.176357521s ago: executing program 1 (id=745):
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000c00)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
r4 = socket(0x10, 0x3, 0x0)
sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000160001"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
socket$igmp(0x2, 0x3, 0x2)
recvmmsg(r4, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}, 0xe}, {{0x0, 0x0, 0x0}, 0x2}], 0x2, 0x60, 0x0)

10.053022554s ago: executing program 2 (id=746):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000240), 0x1, 0x4bf, &(0x7f0000000540)="$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")
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0)
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002340), 0x40800)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r4, 0xc058534f, &(0x7f0000002380)={{0x0, 0x1}, 0x0, 0x0, 0x2, {0x4, 0x1}, 0x3, 0x800})
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x195)
lsetxattr$system_posix_acl(&(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="02000000020000000000f400040000000000000020"], 0x1c, 0x1)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001180)={0xffffffffffffffff, 0x58, &(0x7f0000001100)}, 0x10)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x2, 0x2, 0x0, 0x2, 0xd, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "fd"}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0xa0000000}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}, @sadb_x_nat_t_type={0x1}]}, 0x68}, 0x1, 0x7}, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8001}, 0x8)
getsockopt$bt_hci(r5, 0x84, 0x7f, &(0x7f0000000080)=""/4057, 0x0)
chown(0x0, 0xee00, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)

9.036972606s ago: executing program 2 (id=748):
inotify_init()
r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00')
openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r1, &(0x7f0000006380)={0x2020, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f}}, 0x50)
syz_fuse_handle_req(r1, &(0x7f00000021c0)="d56cea33946c0eae3241d3604bfce89adddb2eb96960338db7572fa254eb7c69dc0cb526989630e26224c258c8d70ccacc5564d67723f4756c0399174c5460c4995942d24092c36dc820e97344798b5bb45423f853bf50e374323abacf0388cd091016b7a3d7843f4d3ae1658bd34d967e3323a64908442788dbc99c1f4248da53fb5be2c8001236b994ca594e3b3c588beaf3cb1c32c072d768b9e665e7d87044fdfc1fd6452593e6793963153f3850bf85042a5c139799ba8f6cb8d877fc436c4f1601270d6e29d60a4c80d6315e46f4219494ce897127d0b76f5d681e90f4e9282468ef7993cd92076aed266c1db8b81b93adc4969c9b89b32b8768c9f39f2d148e933dbb651746a9364f49986ef73b4c29f647b82b83216bb8179fe5346fdacdc5fda4bd48875cd2f1cf57a0c9a91e059446bac310a6d68948675c35a8e442168fd84d78d9800e5b05bdbce3a6eac65bee7279a3628f2a08931d3d52ce490652c20f8ae529eaf24bf421dad976c68b234ee6f6210c9f9aac3a55c6939d6aa3805b95619546264ff3ff82d0dc690e8ead61b6ed528c3c117cd771a3b7feb214ce8d720640d97f14b399b7f46dc4aad83117e8e642ccb117d13f345536fc3801c124cfaf8aa7aafff6c8df3fdd4469c077eccbd8ddacad80d9113dfde26ae67b226185743b2d53667fb3016fe114f87484ab614ddf0887c4b2c85351ab21a0ece6c066a154b38b4d7c1792d2db2cc5f8ceb42078187949d354b7a08d1529f3d10814757179c860db031dad4a3dc13ca01d1013238ed5f7a9674fcc77f0d34e2118fb851c970d86ecf9de1cfdb8d3ab197480e263c3207c3d7ebe17f9547c7c56b08e83de875294d0fd68df1926ecac24350b2c70bd73e14122ed480c564353d34049e67c26036fc35d04022cd35d6ac00756d3b8550bb22ae80a4bd630a00268d07fa249b0bf545dfbf01bea2f12b30738c6e13156244eb24e6d69ba7c3acdbbefe8bbc06b821aebf836ca07a3cc7b6b24686ed8f3b23085c893e72188b797651c5ab5cceb1465414a325f793a3af6d06eed7eb734ad05bc1f6619e8485259f570a482a67273ee01fe15dd938afce026f1111c7a38ed6d1aba34f009ce1e99140fd0db2de74150541fd48dd2ec5b1d15669de2ffe3a198184b6186ccda31aa64c585ff8cb65b67fe1455753895a88b6ab4c6bf1bb8329739178147e6f15801bfa707bd9ec9da662573ce07af684bb7c880a7d63b0a0a7300881408c44e95c679ea32b0eab845d0b333f245e8d6006258678704aa8cccdaf80cc46138d5b7a0804fdfa34c91d61a0d2fa6c62e7d1a675e5743f845ab40ea5df0182d6eb9781905c94751c75a411699a76f48433142c5f109d5dfddcc0b1dc6254efd5ea50d6ffbc7b9ca031e1a0123844b63c48b964645c6d24707582825e219bcd61677ed4fc45ee1f4be91b4c1b856d65a86acf22b8b0d588bc473248ac040326b1490c2fea24bc0c0a721e2ed63e39973cd4d38df1001dba9b9d995c229655dd26f3cd3d64077ec111e2c370717cb4cd068e0d3a52f1027d3df953e1f1ac768a7215a3695722b1b6714ce43801451a9532212b651d073c780d61712aebadd145c1cd95c1dc0dcf51850046ae5771e365f45858a36e48afe563ec0afee3803ff6a35bc25217b53eda39bb813b8d3d728c21a0b80d014003143666c0d1398cc46a01aaaf97117edda217f984010e7c5cf32535a669d4f11f6b70e3a3b823987ef7c9f878415063bf05205e13bcf7acb287bd0bb0fce77529a711f0ed145ea2ecf2194658dff17c5681cf8c7ad8521d235a705292af4878b3f124be2df661026c091d6c07aae1a74c919f7478d1083f70b3a0fe00c2e220ab998b4595268b6f7cabbfc85e59dfb6ab7a794cd3fd70d5cc4d70ca933a4452df5a345cb31f3267de53519ba39c915d492cd4652843f1d30a5fb311e3b5d868347969f013c5e3b4841b22240abcb61a14ff567186766ce8f6ae64877f672835dbff4fcf19c8230d8a402397630effb698a8b0c9a28ae028d7938ffde488fd64113085bce504cd0551e0eb3730c3f781cbecf0c41d2338766d3f6096661c1f1bec3162b8a0c4099fccd9480e821df8782c2e070530befb62bccd8539fe9dc7d8d3f9bded1bb34db3f2d6050885c8f1d57f5e603f629de7491f5fd9fafcceb565abeaec838b10a763a00a4607d4330bdcedc066d8cf9790d806e03c219866bb8f053a6e602645436d1f469df1d5008f5dcd4bdb7ce5b76ec015a8f4693cb2a63ceb2be00bcf221f0ca32db4efaf8f7022622b335fa8dea4afdd86be10be6c4d66e5f57416add4480509cb98cf31cdda84644eeb782eea041d4bc0e005a20bccc3c4a08cefcdb91cc2c61d9231c4e36e96f6edd2133f9b34e7da90ce20d1c60ff223c6a204bb942766a359b923573bbbaf2a827d79e4f649e79a840216ac4ddb3409c94e71ff08d109bc3f0cf6583219de7d7131a956f835ecf5c131a0b1e056a86d800a0204243f3b695029578c064306a31db53f28a8f0c0302486cd05970904e9b5c53100ac1aabb3110a89820e4d8307c3d46084999d0456c53fec61a9242b486eb41a90f3300fdfd0d8a472e8da7a842588721d1df1f5e4cc425efebc75a904ef4cc881346a4bc23eef4d492e3efccebab86ae4213f42671370579ee7f8341396e9515619e100a8fae2c5cba0139a088579ece7a603c8b8bab9998223fe862dff8480aeaa5970c90b894e5f71c2784e4dfd50ed3e9ed91036e8356c09464de13b4a95227203133b2c2c71cd6323492f083bda58ad7721b6666b9cd93f93f0288482813fd8aade02cca81cd35257e023504ac4f86be1c7a810b67c6d7077f5cdbd305b618a05c03d196894bfb1a6ff511e59ac8ce45d16cee95e1de0797a543728caaa43e5ae42a12b6bb7910d18d4e1ea89d264491287eb23a76095a12a39c46a7c85349e2969edaed3c1fa6a2150494f63f4c98c65fcdd650ac7424ac1ae64421294356ac1e4dbf9d4c817f081f4f7751ebf56788d799bac29dc0bfe83ead7ab3e338b8b84df4cad2b549aaac4e6048a6fa8f8f6f1f7e0e51c8b3c872f18c466e590222b03230f46bc8e9a0171bbd2096c7a480d6a6f29bd74b60105bebda42e59cc830c4b31f6c52687b4ec2ba869149ae363d711d099f94ceade1ada193e931ed9aea0a280ed5f25ad5ef2c24a28a0262c80a040187e052ea7d54a528b6fcc176ed3afc07fe6a661d050fb4a3a6abfa3dac5f3230540b45af060781cb5499c2894d6a4a2bf908ddd48d6b34207f56c31229e206c88db3552ceb6e82a0fa2bf7f97baf603d37d6a8b1f2b1f5f95b251129ed05351681908b7cf5cf6cc86dd854174cc19713b4d262b021952b6da5f20f57bbacca62f5b7124409aa625bbea59819baebc1bc2dd188feba48c998d0dbed60d44b8a4f0ac28f6c1c8c9998f7406f1a34e4ce902be2420f7ff51a5ab3b1faa86ab2ec1edbea2493cae090abde43ff27d685c993dedb24eb255772cc56fbd104f4f5275f10d54d7cacb8cbf188ae1a4d29ea880068fb2696b3ba6e8a7c15939e1f7c394ab4bd4c4bef2383121cbeb18646a8e013d570cee3eeecd7fbe84a619f8aa2e34f2e1e9b99d0c7d7d179d9df8d2e2f1cd7ba2c7e60166dc14e5e4ed9c41195935e2884b5bd0057ed0155a5d4c6482e8f554e4cd0d0aef7d6487801ab54d54eb41755d833ab83883b40f47595063ad2a0fee5c661f86b8ab04ad0047d988ad86b3c520eb78dc3d750a57e777f5d766349f1a687e090f744206cb5d048346061b414060f6826d8a884e93f73f1f1f4cb8bd6e8d1215d436d390dbda35b555f550e11e6d8008fce1c429bd9bbd04a1fbb9de28663c1be4d8d7e506bc681ada28a69014b972919b5f70cbb770349324c9af0b7ee7ff4cc8bfe807fb9faa0a69498448b22192d578a1e82582b943051beb543ddca8b643ee6c76ee32278aa8bc92b44a8439a24ed5040545349ab05e831d4511a8da03ca539659585b2267a73775f1cb7c2c5548d3508c896f99a8e5cb55160ab1267e320ac2d7c8f8b57079dd14d301636a1374e24541f8d453978998ed256b381bcf638bb372ce1ebefb341656c02f4092a7667ffec5505e4938dcb03d404654430e244f9f7f7d0fb4189a93f7c2bd7a4fcb3ccff79e41a98adcac3e4c19eebebaec15bd8cea1df0e509cdef62ae10c66734d162caf35a6e511baa717f769c2e449892224fa8ae78de9138cf6ea1d939998a8cb68b0e83cf604e03b99634796d3d495e4617f8fdd9764631e7ed6eafa797deb1159259777bf2915d48b63286f6d6528ad4ca5783609263d9a03aad41ec8ef1e2e1e77734d27229f801192be238468854945c20dab4e1baff9dd593361efda1de95e04561d33cd73a45dff5f85b2e85b0747a49345ac8d38add8ef9c14685eb3d3432f3f994e3ddd4e45b16005870485253afc4f08d8a6d8023b722284d11d56c6ff9209a5bacb7ce1708244bd21878b8cd5c13ab453bd589f6196322de9faede39ce6f94c75d008d2d7ced27a2375cc62c3d5c15c1c4301a01299d8f4c41e5a44e4130e9555a356d6b19728c7d3c86cb9a1ddf906ab63a9447f8233bcd09bd74cf9749f085f0c4689ef40dbc41a7a299f0f891d9d0d3e39409d4d774da53bfb6e8ce668ce50885558e909add2cb9bda2f7e9232541b1a7f742a99740f486ef4f7c98e4052f2da705c56a18d5a8289ae6cbb9dc7de13a8cf420b7a930abaae813b40517d84ae984dfc94cd1021e0e4a7a9e7de841018d474083ca28a829ee03fe625cafcbedadcdef6621ccd679fcd9c9a9ab2136211f8c9a679895aa39facf2d6668e5098b3dd8e0ad78d8caf250dc38f2c9518bccb353ef3418d3906827514c1959d58344ee11a0ef1c1424495cc1a9910187685a47d6dd91f07e5081c5ac3f1b6e363069694dd9072684c5ab0ba56157c10f5fa8409e5bc43b38b31f24a306ca5f7e3de9a392eac1984e877ecb3dfd044f1449b4ae9b586051b1780c0ce462919f4a4b54ad8011d013c3962fc6697d33c2dc6771fec664c82cb16144619b207deb4391866d6c1976b945c5959d19018f15376ce3b05666747743527f22b54171da4dabee2f4e469a5521067de4f92e2bad02e15e812b6cbd27ec88a9eccf600ce7f5643392da9ff6b6412f8e7c68d8c8b9e0006e41777e2a1363a9556befbbb110dff3a84b179da3838acde0b25f53798733a9fb463d76b630aef7c8a43f6219482b34b893fd99cf3a013ecefde7c5c6528e304c1868ff3fd8dd5aba348a05dc950b1c4c281cbb28b800d6d0da180fdee06ec3bad6f97180295ed1d77078156a885b5b0c501ea563e8871adb97dd6052de0ab369bf2d98f434bb2d172d9967bb73d3eba6b52bb8d55d8963bf58d310afedb51c0f94c7814b6da30fd8056ab7be74ac31b1b75c217e3ab93eadcb2d253e5d8bbe47c0f1a411a9e502cf4301d898d905cd5db828e56a722394fa11cca64a03a42e7fc1b3481b71ca0b6a3d9bd1fc8229f7f9d3e6aa0d48051942579fb759201d4715db9a2d399e0745a66dbbd571accf1f2e15573ce832e91bd1f042ab758d9ec13e354f38454cc42668c8d60358916f7e937015f6c38732bcf6131ecde001892cb20fe47153e7e23b1cd2fc4a22662e7bde09f7df10fcbf475783fe23a0fdcb2c3bd8b28453ce523ac19ff77e68c3e9fa0193b796ea68f44132b3a96adebc04181e503f52be4778ef422ce3e6ca38514fa18b500ca518590479e8c73a7942dc2e237d82cda953ae1b296b97ee8ed62e2e755d6ddea7c0334e1b8d76c278bdc454724003106cb6fdc85340d1e784ac8b6551eaabc33c502163ce0d401627bd22ba6be90089372bfa3f91ee745e45844ef8dc0fe3936bef07f9c1d3aadfa4c8e99be6b038bed6beb9597add881da2acc1a3a471f500d68f639cd2bf6f4afab919a2cf747bcbb42b95684e8741b485c3297cf07c7bd98d6653421b61f701a06b82be0fbeecd32eb00feca9c5732bb5e565bccf8c9feb27a50760a785bbb50402768cbd458811e284a604b3374faf3480e1736743665617de9c32fd10e37105ac6dd5303f1a6dc78950bce56215c2a2f9e0ccbc0bf9fe8ccf7647ed29e2aa4948689d681a7a9fe582631338f3eea3df846f28564038ab75aa2a8ee5416b66ceeda9d8f56ecefe07f6a21ace83a2e15ad408d0a480f56708e3d1c96020b124c58f6ff5247f73aff7f77d389167650b8a0b98c97f87a1e5d6c08fa99874ff144bfa905e9da3812f010eeee00f3c9b594450faab5342e1b6e98fed5714a802b67b3e5b1964a62606aacb8222efd4980823f076675ae859e64de7b08f7a0b3d8bc829e1a93eb3b4975b4761cd7fa743e393da537c91f658ea2b23c94244498cdc4bc32c8b9859b9d9792eeabdce635b2d61c311949204826054dba0880505e2b53cc3521fa8b68bbba2ec05050bd3244c02752af1555625ddf50a3656c0043005c43c26a2dc907d5dd67efa831ad974151067b436a75fe99b8c94c9ca9737279fa1aaa09b0108c48c79c7e4ec1eeccfd43aa8e7ab6cacf5a956fc47d4ce77fe719d6eec1730d3e3b3be71d313f644177b6d16df0180848c28b850fbf71168a1ee4e5639bc46f2555b3984dbb91520538dfa6a1905abfb7238ec32831a079882440718a57cfb56634e7de7584097f69f87630693bcf410796266cc3f50302feacfb556bad2506b7191023817527dfe5973101712bda922472076633133a11a76e8bc7d763a2cdaa53fa8d47d442fcc572f791d66d10d8d6a9058ecbbcd6d3dbe45d67b75e1091dd0368bea33ef0f56ba68885630429c24800922062e1066f2d4c4b795332ab03239548df4e6e01c432fe5eb29e8e63f6c7ba4f2edefa208c69e781786e4717c2f71dc2032a98cf1e6d66c10831e17ee776edc6b060ae20d025dc570a88e17da771acd32b7b93d46e43a917b8e2ba8232ad2707324b9b04dd8ee50c3c5a4372c0b1461ab2b7424faf00c7162bd8e8ffc7fadcb055403b0fa7087226ba4330e746af97a3f915f0b9e105759e81fe94a0df0cd6c324fb0b871491b5516c2fbc82c77b07159e3f4c0b7952b74cb4e203a69f241485191e1afc76d12a56db065b0513a41582f655340603c73cb39b728c97d1e919ecf963b91ec2282d25dc426db873394055beb0f9ba20545e2465ce2d0d962f42e1e4c79bdea4cd2829269ff7ef650bbeb5083d39dc7aad668af0b01c521192c548857473b29991f7bb917b5814fe945f4c3ed9bbe0563f4004b391b76860e9fd6b7c0baae82e4ac033f62a2c6ce6a2311b8700b06b5215e604a9b99d37e00450fc7790e893176e9fecda220f838a078a8ef7da7d499b1fe0eb8780c4b9705a6a10674e61b5c228fae1c13488f98c10c1792fa40229dba44b1cb534f9fab6a14407687761d738c91f4b8d4371a1de1a47bde0563a6fc88c4886be5d48c4cb89078c255eb1639598379daf50a672cbf4d8add2d4af6c02aeb1d0f86b611abd363409c7c7fc0b66f307ad3df24241fe06d0f7617d6c3987bb9e5d8f1712aebf095fad19b3b4fcb9cc4fb39012f333c4b040666259ee7bc43cff299a527a8914d71324e91c774b84e9392e615453e9fc648c539059b66f780c888892fe8b30eba799ed18fab08ebc3b9da8bc12a249456351bc0ebafc9f54d5d24697fb53eeb5e734527d690620989f605f57dc65a15a754d304be592acc616cd528b6986064b4457b96cf1fb0ab383a0585acf9887b18e1d6d3aff1e7f2328ea0313a2b36f6f79d671d9ddc4d34fb8fb55a596b2a16c63757083fb4bd01be2e1d82e47c5a44e052279097c5a18feae9884e102cf087611a3b94467ad61635dae6275974f6e6ca7a42ded0ee4577574d56b142853a8c955d92d1eb780de11dc9289acd193214ed4c9f5f26d0481cb3c0c0b8d4c9ad929c61ffeed66bf2e4f7018049593b99358d93559847d55654cee93da30f6578d2e295909791d227a12c09cd4a0edec25d3155086b64a787997a53265cbffb7fe6a2bfd589e12b4d0e21a600276e920397888443584aa99a06d7cfef8e68eeab8fa739c3d8fb74581ceff295110742e763320bed3a4be982b3ebed15ecde37e849aaa91959327d25149f38854ea1137f870aff99979e5e74cc9e45be12e3f0f9912a0955e718a4917e835bca50f43ce92a6bc60ed006b8f623fbacebbfb3dcb4fabd9941a5487c6f637de9a2005a6bc4062e1210a08a51d6f8a5e3f6f97fe90dc7e2e21d4d2f038c0fbc1918aa00e230a4a0e5c41a4808fb9a731271fcc1e73713c9592aa4b2ddccd0d13c3cb68d51166623153445c9ec955c6870dc8543c0684883186082e34ea5714febf8b46921015c3623220d17529896e1a6edac6e32fea2ba30db203238300353602c17dddad7608cad8170b520f6d9d32cdf0156a1de4e9b9eea78f73255ddc6da6994a6018ff900d9886590602ca6a072d8aa5645e2adac0744e2d5b2e1038c746635d5814692c3498aa9043b68f8ce79c44678c5a7d5bc26c085475853b229b2af3dc822ec58047f313c778aae2b64995148174e42908f3ecacd3921855790c0c5a25814416930293010b4f917979d837f4ef9d2d6dce804f5c0926244097746252124a6e0055559ffab197c38778f717362152af8f6dbf7ee03df050ab9b8909556691c2c2775f0f9c26a545db7ba698a4ce37de877705ea97ac0a002db274ea8360a4aa732c2d5e7417138c60cbea69d3b4993ada6a9d8f51d851543a6500a31bac5a057dbef498001f08a44e3c4141900e18b6d73c28c8c67dca805edeb5376384cefe75be1f127225e4d9724b7047d68fa2ed4629e91711a37c80158a07dbce78918931402b472a98a5d5c6b66a2d116314577e94298c37bc441499a9ecea132d87c5d305a0f8f0b3ed16f3b820941082c73b28391d8482ca0cfa78e1e09aa588b0eb1849c6c7916a6bbe56134a6bd93ea306dec125982628dea1db6d022d210627959e1dc819c841f173ed25f356909222e481a1ebb31185fbaeacbd359d2779efe4554ccdac7f4bcc528f656a45049331e16e9c0c796423ec9c7cba15c69d4a8a7741699910f33cc9798a8bf1e48182f08029a14d0131654fd388225d7509e1d7a484e9c7df34d1680bfc6b8d1f6f3920cc4113509fe42dfbd6b261000da9651f7e18088f6c2564472046e5eb7e8c9f8b5286a7452741a7103ced710bfb8e699fb8b1a85c0ae887cc06ef2ff9e2a2b1a77bb4d44ddd4a4e1ba60afcb92baaef108b60486d409889cbb2b1cc77ddff7e4b6caf8cf3488764d84bf3605eb9df709ac6cb36d1a3de89cdd6657f0e6b4009e6dac5d9be14f4ed997cf61e5aaec932520c321359cf286adf6e2dc3094794ae61a4f16089d06e3dc62c958950e73213c1e865c894fe7b8a30de65f5534a1e9c5d19ed49397980126322cb9c72c46a86d7487571300d85b3b5661555f20ab63a78f846c1b8f51a19610a11ffee44f7ccf0f1d67f4148b2c828d74c7f3993965c9067114467a71d242113a68574e28601fce343a023ecc68a72d75259f9a5dce144a7f61ef327192f6474d2bbd06fde3049fe7fb306ba3f54337008d7dbdeaf28a37a224e38ade23adb076cefd3148efcb62539a96d4dfc53f369e34c3d493ac3a5e8c8881133be630a2a906703da62ce7cc02ace9f666d6c3d4b9763a83548825ee1efb54ee3475b09e2616c5bdde3d193181bf020e8ac9ac25f32604b6c11de8ad1a15b9f908c6d7e79181aad1d741b7434aa92597a835c53b9e4b61d6069fa4ee921824d17c98784a8c04590f8d2cf877662b410cae4ebd1ba3616074c020d8cb6099a095735635490d318821310ddd016150edb80370b8d4e2f05557fd619b17192c13353cdae76d495821c610c8641e5b3dff1e7f2ea77b17810ca7975b8e36b7f501a8710b326ef92672096ef66598510902fe663e2a9ef00c3a052f1cfb1739fccb4371f8f28bb92654de5bf87cc2863e92e6d7e4b45d773f90f434eafc8f8398a48527af829a6cae359e7af5941bef158f53798058351107ce58f79ed21036770f6e10e7da92bbca25f369ee83a0f894bbf366a1361f8125b4ffd8e8b4d47ec68cd6b37c840cc5beb8cf65b2269ea1a0e9c371a571f30458ff8ad9bbf8723c19ddae1de5ca7461a436ffcd103c01a20f3252ba0965ee928cfb0d002b9aa4d4f20c805b77e67c8d991c4d07e5419bec9626a32c115d28253dd5f16c17182c1779edf49bdfe3823d87fec88929801163a27bfaeddfd8cdccae8cc3bfd6a9f2e2fec5971fa560c434debd434ff4d0058dcb05d9f3ac5193c458472d6d1685f9f46c8864900c5edbaeeee08971ee1c087f2e11467ff4766743bccf9e3414feedd6dcb904b92a05eec5de8db95444b920c995c770edcedcf7bffc48836c8f30037dde47f0e66fd79550de0ebc3c0c3eba0b66e2a353542eeb20397800e5f41635c5ec2f9a271461bcee8e570ddf945b186f15ab5cabe2a3123189935c6b9010b31732c425a9b2582b097486a5a7b1880b2f16104484e1ca83fa9c278b87e30e4b0cf6ed66c87a979c05683ac94a295d1c53e6f0975a079dd9a2825fdd6ae0926ba1a69f3f69f408eea9d00fbd43235a52c53d11963a611b81dd9f5e05582e1822398873e883662a64c225be19e0b85e102e23fb73d5dcb11435a5437d7418b0409f2e60793038f55ed54c79882b3a17e74ae2148bd558d131dbf446edeb0d05353492534e216761cfcf6582d066a8235a2bd5eb383350a52d7fc2761514e27b6125cb3e387c103dd62e31f5b789c217811c80ccbe3f10fec7a19ad32dc9271368b6d6ba549c45dfd8018507c40962b6ac6468c3078edb71d8ec7f728be8cc23dea1139ac30c2e8d0fc077280e420fbbffc896863db5f1e76922d7dd8e4479c1be822e74212c6f74765e108f916a1b83f6efc8ea54080e9a28b1ba5813a1fefddbe2d0cda413ee1463985b51b59f818f440c9b6a10e4ebf71d37995ae9694ba5867ca2eb2f7bf4e58d26149f2b25943fba216beb3de1f954bcf1bd32ce358b5d23023ab456ebbc493ead41e25b62b5b4ace6c5c18c9a8d512a9cbb4dd59f33663f6138d6b06bc8eb1ec9caccc0077b2e68e7a09d412dfa352e7e5c3942b710ab1648e16d0adda424d9fc2d15c619f4e8093c2b9521e4cdb3f22e655f52ce0fcc1bfd94e56cba8decadb68214451be53f9286c82d2a4912bd2394d1133be908409d791d6d8c2194ca37a76a38d6d0a1fced6478848891d9264cfc08fa849d720339ce00977cad8d9738372184098a7333dd1564d1d7754b4aa4afd6217585804159d31f53017869cb78b718c837b7fd176ce19e3d6996b6f055ed3ba7cd55b0349676c0c113c33d070081ce4ef29af156c4ac8ce760013688d0295d90271e23ef3ca10ec2b3b8898ff070000000000007a10a02d21e5e8995fbc10d2f4d4bf521565376053b80937bfafaac688108f9962b7c72cf0111874ac8ae27d024ee2f9d57f15b9910a7486ef7542c6629fb0520c93a445542d00", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcca)

8.354923204s ago: executing program 5 (id=750):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB, @ANYBLOB="00000000000000001000"/19, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x6}, 0x94)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r6 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='task_newtask\x00', r1, 0x0, 0x4}, 0x18)
r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r7, 0x0, 0x0)
write(r7, &(0x7f0000000080)="29000300010003", 0x7)
fanotify_init(0x20, 0x40000)
bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1f, 0x11, &(0x7f0000000240)=ANY=[@ANYRES32=r0, @ANYBLOB="00707b0000000000b7050000"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000a40)={'syz1\x00', {0xfffd, 0xd}, 0x4d, [0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x1, 0x3, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0xfffffffe, 0xffff, 0x0, 0x0, 0x120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0xffffffff, 0x2, 0x3, 0x0, 0x0, 0x6, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x400000, 0x1, 0x0, 0xfffffffc, 0xfffffffe, 0x0, 0x4, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd5], [0x0, 0x80000000, 0x0, 0x5, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0xfffffffc, 0x0, 0x200000, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6, 0x0, 0x0, 0x7ff, 0x3, 0x7fffffc, 0x0, 0x0, 0x7fff, 0x0, 0x3, 0x0, 0x80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x6, 0x2], [0x81, 0x401, 0x5d30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20100, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2431, 0x0, 0x0, 0x7cc, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfc2, 0x0, 0x5, 0x0, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0xe58b, 0xe, 0x0, 0x3, 0x0, 0x1, 0x1ff]}, 0x45c)
syz_open_dev$ptys(0xc, 0x3, 0x0)

7.408917039s ago: executing program 5 (id=751):
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_emit_ethernet(0x2a, &(0x7f0000000500)=ANY=[@ANYBLOB="bbbbbbbbbbbb8a0a63cdec5908060001080006040001aaaaaaaaaaaaaa00ac1414bbfd000000004b89921d67e784ccad38985830067409b13fc7682e8ea1b83c51e087801746242154167a4908d27a64053382a0b05e2a5089a715a9a2847c9e9a897c135dae8d7c81b1e7f82fb87e48b9130b6f39e33e18e022fce9430a47bcbcb40b6bbf6a6486f269e1de2def68c072"], 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0)
r3 = openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x2)
write$binfmt_aout(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0xc8)
dup3(0xffffffffffffffff, r3, 0x0)
r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r4, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6)
write(r4, &(0x7f0000000000)="05000000010000", 0x7)
syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r1)
sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x8800}, 0x4000000)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00'})
syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x448}, 0x1, 0x0, 0x0, 0x480d5}, 0x0)

7.396220711s ago: executing program 2 (id=752):
r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r3 = getpid()
sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r6 = socket(0x400000000010, 0x3, 0x0)
r7 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000)
sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x0, 0x2}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000850}, 0x20084084)

7.395681871s ago: executing program 1 (id=753):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
setpgid(r0, 0x0)
setpgid(0x0, r0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff})
r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0)
ioctl$AUTOFS_IOC_READY(r1, 0x9360, 0x800000000000001)

4.795680861s ago: executing program 0 (id=754):
r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb)
gettid()
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000580)={0x0, 0x0, 0x0, 'queue0\x00'})
timer_create(0x0, 0x0, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
close(r0)
r1 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1)
fcntl$setlease(r1, 0x400, 0x1)
creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb)
r2 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9\xd6\x1c\x1b*\x9a!?\x7f\xa5\xad\x9a,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{&\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+\x02\x00\x00\x00\x00\x00\x00\x00\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0<Q8\xbeX\xde\xd6 \xef\x0e\xc2.\x9c=1\x15d\xddIv\x0fh\xe6M(D\xad\xeb\xcfX8\xb9\x8d\xbe(\xd3\x16?x\xbd@\x0f\xf5\xdb\xeb\xd7i*\xea\x86JX\xff;\x96\xbb\xa7\xa8u5R\xa2,\xba\xbc\x01\x12\xb3q,\x9d\xf8\xbdb`\xb3\xc6\x0f\xb3\xac\xc7\xa4O@\x81\xfc\x1a4$\x885\x97\xa9|\x99\x86*.\xda\x96RQ\xe5\xb1\xef\xb7\x10\x99\xd4\xa7\b\xcd\xe9\xa5\xf6wR\xc1\xdfH).\a\x9a\xab\x9e&+\xc4#\x90\xc9%\xb9\xd7o\x86\x13\a\xc0\x01w9u6\xdd\x9fJ^o\x1d\xda\x11?\xc1\xf5\xf7\xff\xec\x916\xceQ\xcfU\x035\x96\x8f\xc7\x84\"2\xef\x02\xcf\a+\x8a\xd1\x11\xb5\xa8\x92\f\xb3R\",\xfc!_&pD\xeb5\xc6\xc8\xff2\xee\x14\x83\x14l\x04\x80\xaa7\x80\xf1\x18\xf5\xa5\xd23\xe5\b\x00\xe8\x9c\xd4\xd0\a\x93#\xb9Z\xc0y\x97<\xe5i\xe9\xe4\xb02Cu\xe1d\r\x0e\xc1\xf1\x81^\xa7\xffz)\x19U\xe5\xd4\xf5@O#W\x8a\xbb3c+\n\x97\xa6\xf7\x90$\xd6*\xd0\x1b\x10\xe4HM:XO\x1b\rx\xc7\x12|\x7fN\xc9\xf9i\xe4\xe5-\x9b\xe407\x9d\xe8\xc6\x90\x9f_Jf\x05\r\x1b\x9af\v\xbcv\x83\xf3j\xaf\xd0F91 ^x\x85\x80[\xa3B\n#!\xc2R\xdd\xf4)\xba\x1e\xfb6U\xabc\xda\x9a)\xc3\x9a\x06\xc5\xccP)\xdf.\xa7-\x84\xdf8\xbf\xfc1^}B\xee\xccR/z\x1e\xe8\x1e\x99\x99\n\xf4u\xd4\xbd^L\xb2j\xda\xff\x1d\x10\xc8\xad\xbd_OI\xb1\xe8y\x003\a\x06\x92\x8e\n\x8b\xf3\xd4G\x85\xbd\x1a\x81+3\x99jq\xd1\xacK^\xef\xb6!8\xcd?\x1e\\\x16W2\xbd4$zn\xa9\x7f\x9dE\xaf\x0f\xdb\xe0\xfa\x10\xc3\xb2\xf8\x80\x8c\xec$\xda\xc0\x94y1\t\xc5', 0x2)
execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)

4.740913496s ago: executing program 2 (id=755):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0)
r1 = openat$cgroup_devices(r0, &(0x7f0000000100)='devices.allow\x00', 0x2, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x1)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000180)=0x7)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0xffffffffffffffff, 0x1a, 0x0, 0x2}, 0x28)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000100)=@req={0xffff, 0x0, 0x483, 0x2}, 0x10)
r5 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x42, 0x0)
write$vga_arbiter(r5, &(0x7f00000000c0)=ANY=[], 0xf)
socket$inet6_udp(0xa, 0x2, 0x0)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x4}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x80, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x54, 0x3, 0x0, 0x1, [{0x50, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x44, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x10}]}}}, {0x14, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x4}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x104}}, 0x0)
r7 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000000000101c1b001d00000000000109022400010037f300090400000103000000092100000400010000"], 0x0)
syz_usb_control_io(r7, 0x0, 0x0)
syz_usb_control_io$hid(r7, &(0x7f0000000200)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0)
write$cgroup_devices(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="062064cdc1050001006e759d62b0c510b6280ab306fc4f3aa72c57b3b3809a054431d5385de20b1778d7bffab7ed9c882cb8c8764c7dac6ce85b3de105a90737787435fd6b98d6c06b35f87ed90fa8e7e9dbba4d66a9c2fd3d"], 0xa)
syz_open_dev$vim2m(&(0x7f0000000000), 0x82000000003, 0x2)

4.713217679s ago: executing program 1 (id=756):
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$inet6_tcp(0xa, 0x1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, 0x0, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
ptrace$setopts(0xc60a, r2, 0x99a, 0x40)
syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301)
r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
syz_emit_ethernet(0x66, &(0x7f0000000240)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaabaaaa0086dd60003a0400000000008000000000000000000000000000bbff02000000000080000000000000000102009078000000006050835900000000fc010000000000000000000000000000fe880000000000000000001000000001abd5e199efaa513b8c7083bc93bbdcc8d2705b132fd9c1e7f9767e561b707dcd75fdd171e950ed3d"], 0x0)
r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x3, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1})
ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000180)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'y)\x00'}, 0x0, 0x1, {0x0}, 0xea})
r5 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3)
fallocate(r5, 0x3, 0x2009140, 0x3)
r6 = epoll_create1(0x0)
r7 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, 0x0)
ioctl$TCSETSW2(r7, 0x402c542c, 0x0)
r8 = syz_io_uring_setup(0x186, &(0x7f00000004c0)={0x0, 0x3416, 0x13100, 0x0, 0x0, 0x0, r3}, 0x0, 0x0)
io_uring_enter(r8, 0x2def, 0x0, 0x0, 0x0, 0x0)
ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000080)=0x2)
close_range(r3, 0xffffffffffffffff, 0x0)
open_tree(0xffffffffffffff9c, 0x0, 0x89101)

4.588055492s ago: executing program 3 (id=757):
syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x804cd8, &(0x7f00000000c0)=ANY=[@ANYRES8=0x0, @ANYRESHEX], 0x3, 0x232, &(0x7f0000000500)="$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")
quotactl$Q_QUOTAOFF(0xffffffff80000300, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0x0, 0x0)

4.540003057s ago: executing program 5 (id=758):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)
syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000240), 0x1, 0x4bf, &(0x7f0000000540)="$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")
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
mlock(&(0x7f0000626000/0x5000)=nil, 0x5000)
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000002340), 0x40800)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r4, 0xc058534f, &(0x7f0000002380)={{0x0, 0x1}, 0x0, 0x0, 0x2, {0x4, 0x1}, 0x3, 0x800})
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x195)
lsetxattr$system_posix_acl(&(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='system.posix_acl_access\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="02000000020000000000f400040000000000000020"], 0x1c, 0x1)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001180)={0xffffffffffffffff, 0x58, &(0x7f0000001100)}, 0x10)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x2, 0x2, 0x0, 0x2, 0xd, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x8, 0x8, 0x0, "fd"}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0xa0000000}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @empty}}, @sadb_x_nat_t_type={0x1}]}, 0x68}, 0x1, 0x7}, 0x0)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8001}, 0x8)
getsockopt$bt_hci(r5, 0x84, 0x7f, &(0x7f0000000080)=""/4057, 0x0)
chown(0x0, 0xee00, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)

3.939983326s ago: executing program 0 (id=759):
r0 = socket$inet6(0xa, 0x3, 0x2f)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000140)={{{@in=@multicast2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x6}, {0x0, 0x7ff, 0x0, 0x0, 0x0, 0xf42, 0x8}, {0x1, 0x0, 0x0, 0xb843}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x32}, 0x0, @in=@local, 0x0, 0x3, 0x2, 0x4, 0x0, 0x0, 0x1}}, 0xe8)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)

3.938183907s ago: executing program 3 (id=760):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, 0x0)
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@mcast2, 0x300, 0x0, 0x2, 0x9, 0x0, 0x4}, 0x20)
r1 = socket(0xa, 0x5, 0x0)
sendmsg$inet(r1, &(0x7f0000000300)={&(0x7f0000000100)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000340)="f3cc46eb29985c6367f167f0a83e0a7ff1d5526be990c00f60253149886809a0cf5fd4fa83a0369c5d26a4840904489d5013e45c05661c90d8142e34ff23599b9580b83c59ee88f1af5934ce2f5406bf74468b85ea32b2f33db9850ba4d795652b17b1", 0x63}], 0x1}, 0x49ae57ea648c7402)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@mcast2, 0x300, 0x0, 0x2, 0x9, 0x0, 0x4}, 0x20)

3.858487465s ago: executing program 0 (id=761):
timer_create(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0)
read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)
dup2(r1, r1)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000180)={0x0, 0x0, {0x1, 0x0, 0x0, 0xa092a5fe06e0bc84}})
r2 = openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, 0x0)
dup(0xffffffffffffffff)
mount(&(0x7f0000000140)=@nullb, &(0x7f0000000080)='./cgroup\x00', &(0x7f0000000040)='udf\x00', 0x208000, 0x0)

3.548432386s ago: executing program 3 (id=762):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000001280)="b7f2288a911993f08d3aaea2bc0000de", 0x10)
r1 = accept$alg(r0, 0x0, 0x0)
sendmmsg$alg(r1, &(0x7f0000001900)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000000c0)="5bdbd57a0e656889964df9937f561de9b944d1e381fed329742e239cb13cf2af711d48", 0x23}], 0x1, &(0x7f00000006c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x2}], 0x1, 0x0)
recvmmsg(r1, &(0x7f0000003f40)=[{{0x0, 0x0, 0x0}, 0xeb8}, {{0x0, 0x0, &(0x7f0000003480)=[{&(0x7f0000000440)=""/28, 0x1c}, {&(0x7f00000022c0)=""/4096, 0x1000}], 0x2}, 0x2d}], 0x2, 0x2120, 0x0)

3.329884677s ago: executing program 1 (id=763):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='io_uring_register\x00', r1}, 0x10)
r2 = io_uring_setup(0x2eae, &(0x7f00000003c0)={0x0, 0xe278, 0x400, 0x6, 0x138})
io_uring_register$IORING_UNREGISTER_RING_FDS(r2, 0x15, 0x0, 0x0)

2.940215826s ago: executing program 5 (id=764):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0xfffffffd}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10)
ioctl$SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, &(0x7f0000000080)={0x359, "0600000000000000c64c3b6e6ff82a75e5318fca4288c2ffbdbec772020acd2c"})
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'})
socket(0x10, 0x80002, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r5=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'})
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}}, 0x24048180)

2.774662573s ago: executing program 33 (id=763):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000100)='io_uring_register\x00', r1}, 0x10)
r2 = io_uring_setup(0x2eae, &(0x7f00000003c0)={0x0, 0xe278, 0x400, 0x6, 0x138})
io_uring_register$IORING_UNREGISTER_RING_FDS(r2, 0x15, 0x0, 0x0)

2.70846204s ago: executing program 0 (id=766):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000000c0)={0x34, 0x0, 0x8, 0x201, 0x0, 0x0, {0x1, 0x0, 0x3}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xfbfb}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_DATA={0x4, 0x4, 0x0, 0x1, @tcp}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040800}, 0x40000)

2.70809299s ago: executing program 3 (id=767):
syz_mount_image$udf(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x2000003, &(0x7f0000000700)=ANY=[@ANYBLOB="6164696e6963622c756e686964652c616e63686f723d30303030303030303030303030303030333737372c6c617374626c6f636b3d30303030303030303030303030303030303030322c6769643d69676e6f72652c756e64656c6574652c766f6c756d653d30303030303030303030303030303030303030372c6769643d666f726765742c6c617374626c6f636b3d30303030303030303030303030303030303030322c008f8de171c45c3731da25711e70d9a39cf115e87406a5595e73b394be8fa66549efcbf7712e810da7d231b99e582684e1581cc79c57267310cc7c622578691b78343242db569d0845a0e756f83417725ccd5b1123804049af458093aa21229b6aa5c863b4a36c4de74cc5cc0cf9cb58bdca99d709218b65c62cb7bc6490a40511c6bfff79b45a0b42efb80e46ecf783b5236f4d855d71d86e06000000b41b9ba74c2a597dfd9d16c4d931b690884092ae02fb7195792bc5b59ebb5e4f260792c1cc5b77e928c95ccc467d01b9647487527fad08008321dccb6828702d4e14bfd5826afe91990ff0a53d78df88c49014840726855bd5d1698765f5797245ae0ddd826e47dfc33425b1ffd590b71ef2d747ee066337ac4adbe35548fcecc38b778426033d0c38153c5ff98e614dba3bd0dcb7cf82a5c7ab2ac37fd0d97d8b9f60dbf28e5ab41d453b18687e43a7c595dd01044617ac4ae9d503798daeb4a57663f57f4d08e845842a35323c85fd1ba4"], 0xde, 0xc2e, &(0x7f0000000f40)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
r1 = fanotify_init(0xf00, 0x0)
fanotify_mark(r1, 0x1, 0x5800003a, r0, 0x0)
close(0x4)

2.255013876s ago: executing program 0 (id=768):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00"/14], 0x48)
r3 = syz_open_dev$sndpcmc(&(0x7f0000000300), 0x0, 0x0)
mmap$snddsp_control(&(0x7f0000000000/0x3000)=nil, 0x1000, 0x1, 0x11, r3, 0x82000000)
ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r3, 0x40044103, &(0x7f0000000040)=0xad59)

1.860013745s ago: executing program 5 (id=769):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0\x00', 0x402, &(0x7f0000000100)={[{@iocharset={'iocharset', 0x3d, 'koi8-ru'}}, {@errors_continue}, {@allow_utime={'allow_utime', 0x3d, 0x8000}}, {@errors_remount}, {@zero_size_dir}, {@discard}, {@allow_utime={'allow_utime', 0x3d, 0x8}}, {@iocharset={'iocharset', 0x3d, 'macgaelic'}}, {@allow_utime={'allow_utime', 0x3d, 0x4}}, {}]}, 0x11, 0x151f, &(0x7f0000003080)="$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")
creat(&(0x7f0000000080)='./file0\x00', 0xc7)
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0)

1.316208709s ago: executing program 2 (id=770):
r0 = creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb)
r1 = gettid()
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000580)={0x0, 0x0, 0x0, 'queue0\x00'})
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
close(r0)
r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x1a1)
fcntl$setlease(r2, 0x400, 0x1)
creat(&(0x7f0000000000)='./file0\x00', 0xd931d3864d39dcdb)
r3 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9\xd6\x1c\x1b*\x9a!?\x7f\xa5\xad\x9a,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{&\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+\x02\x00\x00\x00\x00\x00\x00\x00\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0<Q8\xbeX\xde\xd6 \xef\x0e\xc2.\x9c=1\x15d\xddIv\x0fh\xe6M(D\xad\xeb\xcfX8\xb9\x8d\xbe(\xd3\x16?x\xbd@\x0f\xf5\xdb\xeb\xd7i*\xea\x86JX\xff;\x96\xbb\xa7\xa8u5R\xa2,\xba\xbc\x01\x12\xb3q,\x9d\xf8\xbdb`\xb3\xc6\x0f\xb3\xac\xc7\xa4O@\x81\xfc\x1a4$\x885\x97\xa9|\x99\x86*.\xda\x96RQ\xe5\xb1\xef\xb7\x10\x99\xd4\xa7\b\xcd\xe9\xa5\xf6wR\xc1\xdfH).\a\x9a\xab\x9e&+\xc4#\x90\xc9%\xb9\xd7o\x86\x13\a\xc0\x01w9u6\xdd\x9fJ^o\x1d\xda\x11?\xc1\xf5\xf7\xff\xec\x916\xceQ\xcfU\x035\x96\x8f\xc7\x84\"2\xef\x02\xcf\a+\x8a\xd1\x11\xb5\xa8\x92\f\xb3R\",\xfc!_&pD\xeb5\xc6\xc8\xff2\xee\x14\x83\x14l\x04\x80\xaa7\x80\xf1\x18\xf5\xa5\xd23\xe5\b\x00\xe8\x9c\xd4\xd0\a\x93#\xb9Z\xc0y\x97<\xe5i\xe9\xe4\xb02Cu\xe1d\r\x0e\xc1\xf1\x81^\xa7\xffz)\x19U\xe5\xd4\xf5@O#W\x8a\xbb3c+\n\x97\xa6\xf7\x90$\xd6*\xd0\x1b\x10\xe4HM:XO\x1b\rx\xc7\x12|\x7fN\xc9\xf9i\xe4\xe5-\x9b\xe407\x9d\xe8\xc6\x90\x9f_Jf\x05\r\x1b\x9af\v\xbcv\x83\xf3j\xaf\xd0F91 ^x\x85\x80[\xa3B\n#!\xc2R\xdd\xf4)\xba\x1e\xfb6U\xabc\xda\x9a)\xc3\x9a\x06\xc5\xccP)\xdf.\xa7-\x84\xdf8\xbf\xfc1^}B\xee\xccR/z\x1e\xe8\x1e\x99\x99\n\xf4u\xd4\xbd^L\xb2j\xda\xff\x1d\x10\xc8\xad\xbd_OI\xb1\xe8y\x003\a\x06\x92\x8e\n\x8b\xf3\xd4G\x85\xbd\x1a\x81+3\x99jq\xd1\xacK^\xef\xb6!8\xcd?\x1e\\\x16W2\xbd4$zn\xa9\x7f\x9dE\xaf\x0f\xdb\xe0\xfa\x10\xc3\xb2\xf8\x80\x8c\xec$\xda\xc0\x94y1\t\xc5', 0x2)
execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)
execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)

1.092372332s ago: executing program 3 (id=771):
syz_init_net_socket$llc(0x1a, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x40001e0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket(0x40000000015, 0x5, 0x0)
connect$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10)
bind$inet(r3, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57)
r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
r5 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r5, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10)
close_range(r4, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0x20081e, &(0x7f0000000140), 0x1, 0x4ef, &(0x7f00000003c0)="$eJzs3U1vW1kZAODXzpeTyUwywywAAVOGgYKqOonbRlUXUFYIoUqILkFqQ+JGUew4ip3ShC7S/4BEJVaw5Aew7oo9GwQ7NmWBxEcEaiqxMLrXN6mb2k1oEjuKn0e6uvfcY/s9J849x36d+AQwsC5FxE5EjEbE/YiYys7nsi1ut7bkdi92Hy/u7T5ezEWzefefubQ+ORdt90m8lz1mISJ+9L2In+bejFvf2l5dqFTKG63i+Eyjuj5T39q+ulJdWC4vl9dKpfm5+dmb126UTq2vn1RHs6MvP//Dzrd+njRrMjvT3o/T1Or6yEGcxHBE/OAsgvXBUNaf0X43hHeSj4iPIuLT9PqfiqH02QQALrJmcyqaU+1lAOCiy6c5sFy+mOUCJiOfLxZbObyPYyJfqdUbVx7UNteWWrmy6RjJP1iplGezXOF0jOSS8lx6/KpcOlS+FhEfRsQvxsbTcnGxVlnq5wsfABhg7x2a//8z1pr/AYALrtDvBgAAPWf+B4DBY/4HgMFj/geAwWP+B4DBY/4HgMFj/geAgfLDO3eSrbmXff/10sOtzdXaw6tL5fpqsbq5WFysbawXl2u15fQ7e6pHPV6lVlufux6bj6a/vV5vzNS3tu9Va5trjXvp93rfK4/0pFcAwNt8+MmzP+ciYufWeLpF21oO5mq42PL9bgDQN0P9bgDQN1b7gsF1gvf40gNwQXRYovc1hYgYP3yy2Ww2z65JwBm7/AX5fxhUbfl/fwUMA0b+HwaX/D8MrmYzd9w1/+O4NwQAzjc5fqDL5/8fZfvfZh8O/GTp8C2enmWrAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4HzbX/+3mK0FPhn5fLEY8X5ETMdI7sFKpTwbER9ExJ/GRsaS8lyf2wwAnFT+b7ls/a/LU59NHq4dzb0cS/cR8bNf3f3lo4VGY+OPyfl/HZxvPM3Ol/rRfgDgKPvzdLpveyP/Yvfx4v7Wy/b8/bsRUWjF39sdjb2D+MMxnO4LMRIRE//OZeWWXFvu4iR2nkTE5zv1PxeTaQ6ktfLp4fhJ7Pd7Gj//Wvx8WtfaJz+Lz51CW2DQPEvGn9udrr98XEr3na//QjpCnVw2/iUPtbiXjoGv4u+Pf0Ndxr9Lx41x/fffbx2Nv1n3JOKLwxH7sffaxp/9+Lku8T87Zvy/fOkrn3ara/464nJ0jt8ea6ZRXZ+pb21fXakuLJeXy2ul0vzc/OzNazdKM2mOeqb7bPCPW1c+6FaX9H+iS/zCEf3/+jH7/5v/3v/xV98S/5tf6xQ/Hx+/JX4yJ37jmPEXJn5X6FaXxF/q0v+jnv8rx4z//K/bbywbDgD0T31re3WhUilv9PJg/4VET4M6uAAHyW/NOWhGx4Pv9CrWaPxf92o23ylWtxHjNLJuwHlwcNFHxMt+NwYAAAAAAAAAAAAAAOioF/+x1O8+AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcHH9LwAA//89fM7W")
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0)
write$P9_RRENAMEAT(r6, &(0x7f00000002c0)={0x7, 0x4b, 0x2}, 0x7)
r7 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$cgroup_int(r7, &(0x7f0000000380), 0x101bf)
ioctl$EXT4_IOC_MOVE_EXT(r7, 0xc028660f, &(0x7f0000000080)={0x0, r6, 0x2, 0x0, 0x0, 0x2000000000000000})

1.073382065s ago: executing program 0 (id=772):
socket$packet(0x11, 0x3, 0x300)
r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r2)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r3)
sendmsg$TIPC_CMD_ENABLE_BEARER(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0)
close(r5)
r6 = socket$unix(0x1, 0x1, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x20, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x3c, 0x2, [@TCA_TBF_PBURST={0x8, 0x7, 0xb86}, @TCA_TBF_PARMS={0x28, 0x1, {{0xa, 0x2, 0xfffc, 0x7, 0xcc, 0x3}, {0x0, 0x1, 0x7, 0x8, 0x7f, 0x9}, 0xa6, 0x7, 0x1bb6}}, @TCA_TBF_BURST={0x8, 0x6, 0x4000007f}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000001}, 0x0)
sendmsg$nl_route_sched(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r8, {}, {0x2, 0xb}, {0x1, 0x5}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x22000004}, 0x4008000)
ioctl$SIOCSIFHWADDR(r2, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
statx(r0, &(0x7f0000000200)='./file0\x00', 0x100, 0x100, &(0x7f0000000480))
read$FUSE(r0, &(0x7f00000030c0)={0x2020}, 0x2020)
r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x42, 0x4)
pwrite64(r9, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)
fallocate(r9, 0x1, 0x13, 0xfffe)
statx(r9, &(0x7f0000000140)='./file0\x00', 0x2000, 0x4, &(0x7f00000002c0))
fstat(r0, &(0x7f00000003c0))
r10 = socket$nl_generic(0x10, 0x3, 0x10)
r11 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r12=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000000000000003900000008000300", @ANYRES32=r12, @ANYBLOB="10005a800c000180050009"], 0x2c}}, 0x0)
fstat(r0, &(0x7f0000000880))

913.240271ms ago: executing program 5 (id=773):
syz_mount_image$xfs(&(0x7f0000000000), &(0x7f00000002c0)='./file0\x00', 0x0, &(0x7f0000000300)={[{@filestreams}, {@uqnoenforce}]}, 0x1, 0xb917, &(0x7f000001f5c0)="$eJzs3Q1sXWX9wPHTru1W4P9nEY1GJJQNNhBGaTvX8aK0ZWyUQUEmUB1vA8qYDGboojCIFI0BJWQq8S2LkTcRA/EFZ3wBw9TAQAIbQRiICiYywIR3A6iBmtN7btfedQ19tuepo59Psp57zu3v7PZ++5xLydp2z1/UkWU1WUlfVmlN7zHPNF7f/v1vzLjnsKXXVL1WOto2pbi7odjuU2ynZQMna8tvV5cO1Xx77c+r853qoefdpb6+6v+z7L3FbluxbS1tLmsqv19/heLw1PL91YMPo+orpT+D6vM3X5o37dyh58nfMcuyQ7b6QCeo7vYF84vnJBvSbVJxd9WW+wa2NaU/R/4hy45cn23z82Nc5Y9z6umrP//4eD+QnUF3+4LOiv5tReeqYj02VK7Biajy8/ycM5pWFE9h1dDr0c6mu33+cdko6/gff/56X3/pulmbZVldlmWTsyybMt492DHaO1o68mt+eb/IXl7/U0f6vLj9P1f9NMuy/yteJw4tvxYAO5f2jpajRlj/daOt/zuO3XiD9Q87v872jpZ8rVes/ymjrf8Zdx69uPiiu7U09fb4fhAAAAAAwIh6L111wZLly3sudsMNN9wYvDHeVyYgti2LfrwfCZBaiv+cGO+PEQAAACa6zq72FyZVDTs0aejOXg/2DGxnv9F9/qo75x1f3hZ3LxzhlMO+z7+/v79/7WnLzy52J1d8v+yUyuH8/MvuWXJJsdtQ+f0HtQNHa7Ozzlu2vOeQ/K+aXptdku805eedUZt9Nd9pzndm1ma35jstAzv12bp85+BzViw/Nz+wf+Az9u7S2dWXTRpWLBv22TC0/7J7+n5Z3o5yyvLZBn6oRN7/9aab7qi4r2wb/QfPv8//4M8XeFcZW/+rry5vRznlVut/49I5TSPdt+3+g+efpn9cI1z/hzWqvO5XXP8bRjjl4PyvTv3aM3n/WT/ZcE1xqOadXP+HnH96Zf+Bkw9e//NT7Vu+/uevLftt15MxAXV2XfnCaOt/9P41HyzerXrI7ODZWvpv+XTe/65r2x4tDtWOsf++o63/qoatrieMUWfXDf0V638M/bOZI5xysMlu8zrX5v1feeuhh4fcN5b++1X2b1x54Wcaey9dNWvZhUuW9iztuaileU5rc2vT3LlzGgcuCaW32/ekTCDbt/6zXSpmqrJsv8H5uZcfvSnv/6cbT7m5ODRljP1njLr+zxr+WBliWnVWV5ddsmTlyoubSm/Lu82lt6V3G6H/GF7/p5e/iKovtlVZ9oHB+QOueO2gvP/tm169qThUN8b+M0frX7fl7yXQdq7/cytmhvV/4KGeG/P+vQd+6ILi0Fhf//cfdf33Wf/bq7Or4n/47GB5/5NeP3xz4PgBvv6LK0X/+s2tqwPHP6x/XCn6r3u+5dbA8QP1jytF/7vvbTw9cPwg/eNK0f+z9x+4KnB8lv5xpeg/64mZewSOH6x/XCn6//2x6bMDxxv1jytF/xOfvuCqwPFD9I8rRf/vvLTi+sDxJv3jStH/d/3n3B843qx/XCn67/ry0hcDx1v0jytF/5VPXbZn4Phs/eNK0f83G684InD8I/rHlaL/5nW9JweOz9E/rhT9Gzd87uLA8Vb940rR//nnfvDrwPG5+seVon/Dszd9N3D8UP3jStH/sjd+/M/A8cP0jytF/zvevO2RwPHD9Y8rRf8HN/1iRuD4EfrHlaJ/zeM/C/13mh/VP64U/c+87+7zA8c/tqb3mAW76R9Niv7fXH/nCYHjR257/dfsqIc4oaXo3//0CU8Hjre5/seVov+clxaG/n7Ydv3jStH/wv4FPwoc79A/rhT9b375qC8Hjh+lf1wp+j/51JmXB47P0z+uFP3fs3Hx4sDxo/WPK0X/znWnNgeOz9c/rhT9+zYsel/g+AL940rRf/5zX/xL4Pgx+seVov/qZ6/6d+B4p/5xpej/xzeuuS5w/Fj940rRf683V68NHF+of1wp+p+96br2wPHj9I8rRf/bHv/WeYHjx+sfV4r+L9+3ZvfA8S7940rR/9D13wv9Yesn6B9Xiv7XvrJpTeD4ifrHlaL/vLcfuStw/OP6x5Wi/94vPvVo4PhJ+seVov9jf3vy1cDxRfrHlaL/Dx9aPzlw/BP6x5Wi/1m//f1IvyfknThZ/7hS9D/84Q2dgeOn6B9Xiv6v/vWBiwLHT9U/rhT9Z/9rz1sCx7v1jytF/7de3/vKwPFP6h9Xiv63bN7jucDxT+kfV4r+K55//4bA8cX6x5Wi/9R7dz0scPw0/eNK0f+J+3ffK3D8dP3jStH/C09MWhk4fob+caXov/CxyYsCx8/UHwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOC/7MCBAAAAAACQ/2sjVFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWEHDgQAAAAAgPxfG6GqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoKO3AgAAAAAADk/9oIVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVdi7E3hNx8L/48+sjC2kkqKxU3ZlScXIWlpsIbJkHdlC9kKLLC0kRVrspE2hQpaKFJE1lUopLUqSUBH/15g5YvqORv/6jeb7fr9ec57tnsd1rs9z3eeZc59zAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgerTpWhuuPhiMnHTrkH96/MS91rlj6ZPGnX7cIle8dMejht078d7VZpz08NhHJjN49MlWm/DY8ImbjDz+vNOHT7gx/PHPO9OYMcNmGwybK4/qwC3/xbBnH7oy8UnHDgaDYUdO/POYMRM+rHr77Tf/i+eqtum4tdeaMHkT/zzWbcSkhyfd/9j1kRP/rLLVYLDKFoMpvj6mvQ3uvPW+aT2G/wWbjlt73cn6DyZ1frT75Ou71eSv8wtu2GWVaRruP2TTcWutN6H1lNbxmZusdvojj+7XR540GIw8eTAYecpgMPLUad2D/4xxqy+/+oR9/tDtidUPGXpDkPbvw+bfcLOZBoPBqIlfJ0aeNvS1APjfMm715V8Z1v/oocfT+l/19tnmsf7hf9+641ZffvC49/kT7z1k6N/3cf3fMWL9Y6bdiAEAAICn6uG7Lrxk0rG+4YPBfIPJjvc+atL3BYadc9l1102zgT49hONk//wzE/9jJnSe8eyxg8FuG0/roTANDJvWA2Ca0r+b/t3076Z/N/276d9N/276d9O/m/7d9O+mfzf9i03h+P/sQ5fjjt3oFZM2XXjFuTY5b/K/P+G+Gf/PRz3NTK/H/wfjh01sOaH5+MFg8NpxG2y02GAwOG+TuVZcYPDYYytNeGyVOUdMOkHAYo9+XHgKTzz28ZczPfYc5zz6/Os+cvKIYZMN4nFes8ZFB+y06QMvnvxy0Sl/Ho+dX+K8ddeYZeh3WYZPttGUXqtDzz/0uUzeedLYF5sw9qX33nWPpffa/4Alx++6zY7b77j9bssvt8KKy6247EorrbD0DuN32X6ZiR+nMGcTZ2XBqZmz0ZPP2V3jHj9nk39uU5qzsU8+Z48+4x3HbHLB0JyNfIpztuCTz9nY8UNjHTtqsPWjUzPhP7nQqMF+E24sO8Pj9i1zT9j2ZXMOHwyO/scnOuHaDI+9BocdMv4/cN6SSZfzT7pcIJ635PwpnbdkMHTekqETJqw88WLvi4e2m/z3rCfdPdXnLdl39YcWGPzT72X9V/xbX///qddKwx6bqKGThkzaZmKvf5xnYmjaVnvceSZWTOeS+U/6p/GOHf7Y6zqNd9LvxQ2bbP6f7PfiBjvucNDCk6KuOPFvPfxvR8n7jvUe/Til9Tx2sssn23eM+MfVf9y7/TXzTr7vePWUh/iEdTE0RzNMttGU9h37bXPF+Mfvm6aw71hv/KRfNP7HvmPCf3bBoX3HhLEvMmpw9IQby024seiowVkTbiz/6I0xg8sm3Fhq29132W7Yo1+v/ul1sNiwJ/zAY3jdrjXZ63Yqzo+z6lWDwapXps9rytOZpdft6CcZb/597sGT/j73pdvMf+5gMJh10ue18tDY/x1pvCOffLzh/BODJzv/xODk6/Y59T883sfW2aOvtUm76cWm8HeesM5m/6d1duiIx62MqX1fs13YfuL1uR97tlO2v/bqoTkaNdnz/quv0UOfS+o/9J7v8YYdMhj2ZHMzpfdhT5ib2Z58bqb2/ctik95gjHmSuVni3oMXH5qb0U9xbhadwtw8/v3w440eDMY8cW5GDtac8I5m0twsMjVzM8t/5nUzU9h+4vWFH7vrljUPWmlobsJcxK//Q8+/yFOcm2FbP/a6WejRxxYYPhg9erDfNnvvveeyEz8O3Vxu4scnX4MLTc1czvifmct5Ju11hv/z5Dx2185nPLL8v7sGF3qqczl2MHzo39zjJ18s/zm+/9NN/276d9O/m/7d9O+mfzf9i03h+P/Yoe8LHjHstA0nfTNm1OUPzLH3tB7vNDZdH/+f1PcJx//3nuOBy4cPHnvsSY/PTtzmaXl8dsWJFwcuO7Td5McHJ9091cdn7zvqys0G/zfHZ/8tQ2t1Kr5vaP/fTf9u+nfTv5v+3fTv9lT7r/pfGgfThvXfTf9u+nfTv5v+3fTvpn+xKRz/X2bo5wCu3+uh0yYdCB2110arPDitxzuNTdfH/yf1fcLx/wdX2Wiv4YPHHnvS4/8Tt+k4/r/KbSccNngaH/8fWquO//Mv6N9N/276d9O/m/7dnnL/yc/xw/8067+b/t3076Z/N/276d9N/2JTOP6/2tDPAYzabcEFh34e4Ma7Dx8xrcc7jU2vx//9//972f9307+b/t3076Z/t4n9/3vnl+fpzfrvpn83/bvp303/bvp307+b/sUmHf8fTPYdoNd7XUTh+P//tin0X1//qKX/BvpHLf031D9q6b+R/lFL/431j1r6v0H/qKX/JvpHLf031T9q6b+Z/lFL/zfqH7X031z/qKX/FvpHLf3fpH/U0n9L/aOW/lvpH7X031r/qKX/Nvr/w8z/uNrS/836Ry39t9U/aum/nf5RS//t9Y9a+u+gf9TSf0f9o5b+O+kftfQfr3/U0n9n/aOW/m/RP2rpv4v+UUv/XfWPWvrvpn/U0n93/aOW/nvoH7X0f6v+UUv/PfWPWvrvpX/U0n9v/aOW/m/TP2rpv4/+UUv/ffWPWvrvp3/U0n9//aOW/gfoH7X0P1D/qKX/QfpHLf3frn/U0v8d+kct/Q/WP2rpf4j+UUv/Q/WPWvq/U/+opf+79I9a+r9b/6il/3v0j1r6H6Z/1NL/vfpHLf0P1z9q6X+E/lFL/yP1j1r6H6V/1NL/ffpHLf3fr3/U0v8D+kct/T+of9TS/+iy/qOncruW/seU9Z9aLf0/pH/U0v9Y/aOW/h/WP2rpf5z+UUv/j+gftfT/qP5RS//j9Y9a+p+gf9TS/2P6Ry39T9Q/aun/cf2jlv6f0D9q6f9J/aOW/p/SP2rpf5L+UUv/k/WPWvqfon/U0v9U/aOW/qfpH7X0P13/qKX/GfpHLf3P1D9q6X+W/lFL/0/rH7X0P1v/qKX/Z/SPWvp/Vv+opf/n9I9a+n9e/6il/xf0j1r6n6N/1NL/i/pHLf2/pH/U0v9c/aOW/ufpH7X0P1//qKX/l/WPWvp/Rf+opf9X9Y9a+l+gf9TS/0L9o5b+F+kftfT/mv5RS/+L9Y9a+l+if9TS/1L9o5b+l+kftfT/uv5RS/9v6B+19P+m/lFL/8v1j1r6X6F/1NL/W/pHLf2v1D9q6f9t/aOW/t/RP2rpf5X+UUv/q/WPWvp/V/+opf81+kct/a/VP2rp/z39o5b+1+kftfS/Xv+opf8N+kct/W/UP2rpf5P+UUv/m/WPWvp/X/+opf8t+kct/X+gf9TS/4f6Ry39f6R/1NL/Vv2jlv4/1j9q6f8T/aOW/j/VP2rpf5v+UUv/n+kftfT/uf5RS//b9Y9a+v9C/6il/y/1j1r636F/1NL/V/pHLf1/rX/U0v83+kct/X+rf9TS/079o5b+v9M/aun/e/2jlv536R+19P+D/lFL/7v1j1r6/1H/qKX/PfpHLf3/pH/U0v9e/aOW/n/WP2rpf5/+UUv/+/WPWvo/oH/U0v8v+kct/f+qf9TS/2/6RyX9xwz0j0r6Dx7SP2rp/3f9o5b+D+sftfR/RP+opP+wgf5RS/9h+kct/YfrH7X0H6F/1NJ/pP5RS/9R+kct/UfrH7X0n0H/qKX/jPpHLf3H6B+19J9J/6il/8z6Ry39Z9E/auk/q/5RS//Z9I9a+j9D/6il/+z6Ry3959A/auk/p/5RS/9n6h+19J9L/6il/7P0j1r6P1v/qKX/c/SPWvrPrX/U0v+5+kct/efRP2rp/zz9o5b+z9c/auk/r/5RS//59I9a+r9A/6il/1j9o5b+8+sftfRfQP+opf+C+kct/RfSP2rpv7D+UUv/RfSPWvovqn/U0n8x/aOW/ovrH7X0f6H+UUv/F+kftfRfQv+opf+S+kct/Zdq7//gIxNNdndL/6Xb+09BS/9l9I9a+i+rf9TSfzn9o5b+y+sftfR/sf5RS/+X6B+19F9B/6il/4r6Ry39V9I/aum/sv5RS/+X6h+19F9F/6il/8v0j1r6v1z/qKX/K/SPWvqvqn/U0n81/aOW/uP0j1r6r65/1NL/lfpHLf3X0D9q6b+m/lFL/7X0j1r6r61/1NJ/Hf2jlv7r6h+19H+V/lFL/1frH7X0X0//qKX/a/SPWvq/Vv+opf/r9I9a+r9e/6il//r6Ry39N9A/aum/of5RS/+N9I9a+m+sf9TS/w36Ry39N9E/aum/qf5RS//N9I9a+r9R/6il/+b6Ry39t9A/aun/Jv2jlv5b6h+19N9K/6il/9b6Ry39t9E/aun/Zv2jlv7b6h+19N9O/6il//b6Ry39d9A/aum/o/5RS/+d9I9a+o/XP2rpv7P+UUv/t+gftfTfRf+opf+u+kct/XfTP2rpv7v+UUv/Pabcf8z/ybieplr6v9X6j1r676l/1NJ/L/2jlv576x+19H+b/lFL/330j1r676t/1NJ/P/2jlv776x+19D9A/6il/4H6Ry39D9I/aun/dv2jlv7v0D9q6X+w/lFL/0Pa+k/lTzW09D+0rf9Uaun/Tv2jlv7v0j9q6f9u/aOW/u/RP2rpf5j+UUv/9+oftfQ/XP+opf8R+kct/Y/UP2rpf5T+UUv/9+kftfR/v/5RS/8P6B+19P+g/lFL/6P1j1r6H6N/1NL/Q/pHLf2P1T9q6f9h/aOW/sfpH7X0/4j+UUv/j+oftfQ/Xv+opf8J+kct/T+mf9TS/0T9o5b+H9c/aun/Cf2jlv6f1D9q6f8p/aOW/ifpH7X0P1n/qKX/KfpHLf1P1T9q6X+a/lFL/9P1j1r6n6F/1NL/TP2jlv5n6R+19P+0/lFL/7P1j1r6f0b/qKX/Z/WPWvp/Tv+opf/n9Y9a+n9B/6il/zn6Ry39v6h/1NL/S/pHLf3P1T9q6X+e/lFL//P1j1r6f1n/qKX/V/SPWvp/Vf+opf8F+kct/S/UP2rpf5H+UUv/r+kftfS/WP+opf8l+kct/S/VP2rpf5n+UUv/r+sftfT/hv5RS/9v6h+19L9c/6il/xX6Ry39v6V/1NL/Sv2jlv7f1j9q6f8d/aOW/lfpH7X0v1r/qKX/d/WPWvpfo3/U0v9a/aOW/t/TP2rpf53+UUv/6/WPWvrfoH/U0v9G/aOW/jfpH7X0v1n/qKX/9/WPWvrfon/U0v8Hg8Fg9LQa09NYS/8fWv9RS/8f6R+19L9V/6il/4/1j1r6/0T/qKX/T/WPWvrfpn/U0v9n+kct/X+uf9TS/3b9o5b+v9A/aun/S/2jlv536B+19P+V/lFL/1/rH7X0/43+UUv/3+oftfS/U/+opf/v9I9a+v9e/6il/136Ry39/6B/1NL/bv2jlv5/1D9q6X+P/lFL/z/pH7X0v1f/qKX/n/WPWvrfp3/U0v9+/aOW/g/oH7X0/4v+UUv/v+oftfT/m/5RS/8H9Y9a+j+kf9TS/+/6Ry39H9Y/aun/iP5RSf9Hr+r/z1r6D9M/auk/XP+opf8I/aOW/iP1j1r6j9I/auk/Wv+opf8M+kct/WfUP2rpP0b/qKX/TPpHLf1n1j9q6T+L/lFL/1n1j1r6z6Z/1NL/GfpHLf1n1z9q6T+H/lFL/zn1j1r6P1P/qKX/XPpHLf2fpX/U0v/Z+kct/Z+jf9TSf279o5b+z9U/auk/j/5RS//n6R+19H++/lFL/3n1j1r6z6d/1NL/BfpHLf3H6h+19J9f/6il/wL6Ry39F9Q/aum/kP5RS/+F9Y9a+i+if9TSf1H9o5b+i+kftfRfXP+opf8L9Y9a+r9I/6il/xL6Ry39l9Q/aum/lP5RS/+l9Y9a+i+jf9TSf1n9o5b+y+kftfRfXv+opf+L9Y9a+r9E/6il/wr6Ry39V9Q/aum/kv5RS/+V9Y9a+r9U/6il/yr6Ry39X6Z/1NL/5fpHLf1foX/U0n9V/aOW/qtNof+cS/9fDezpqaX/OOs/aum/uv5RS/9X6h+19F9D/6il/5r6Ry3919I/aum/tv5RS/919I9a+q+rf9TS/1X6Ry39X61/1NJ/Pf2jlv6v0T9q6f9a/aOW/q/TP2rp/3r9o5b+6+sftfTfQP+opf+G+kct/TfSP2rpv7H+UUv/N+gftfTfRP+opf+m+kct/TfTP2rp/0b9o5b+m+sftfTfQv+opf+b9I9a+m+pf9TSfyv9o5b+W+sftfTfRv+opf+b9Y9a+m+rf9TSfzv9o5b+2+sftfTfQf+opf+O+kct/XfSP2rpP17/qKX/zvpHLf3fon/U0n8X/aOW/rvqH7X0303/qKX/7vpHLf330D9q6f9W/aOW/nvqH7X030v/qKX/3vpHLf3fpn/U0n8f/aOW/vvqH7X030//qKX//vpHLf0P0D9q6X+g/lFL/4P0j1r6v13/qKX/O/SPWvofrH/U0v8Q/aOW/ofqH7X0f6f+UUv/d+kftfR/t/5RS//36B+19D9M/6il/3v1j1r6H65/1NL/CP2jlv5H6h+19D9K/6il//v0j1r6v1//qKX/B/SPWvp/UP+opf/R+kct/Y/RP2rp/yH9o5b+x+oftfT/sP5RS//j9I9a+n9E/6il/0fL+h8yldu19D++rP/Uaul/gv5RS/+P6R+19D9R/6il/8f1j1r6f0L/qKX/J/WPWvp/Sv+opf9J+kct/U/WP2rpf4r+UUv/U/WPWvqfpn/U0v90/aOW/mfoH7X0P1P/qKX/WfpHLf0/rX/U0v9s/aOW/p/RP2rp/1n9o5b+n9M/aun/ef2jlv5f0D9q6X+O/lFL/y/qH7X0/5L+UUv/c/WPWvqfp3/U0v98/aOW/l/WP2rp/xX9o5b+X9U/aul/gf5RS/8L9Y9a+l+kf9TS/2v6Ry39L9Y/aul/if5RS/9L9Y9a+l+m/xPMN+mypf/X9Y9a+n9D/6il/zf1j1r6X65/1NL/Cv2jlv7f0j9q6X+l/lFL/2/rH7X0/47+UUv/q/SPWvpfrX/U0v+7+kct/a/RP2rpf63+UUv/7+kftfS/Tv+opf/1+kct/W/QP2rpf6P+UUv/m/SPWvrfrH/U0v/7+kct/W/RP2rp/wP9o5b+P9Q/aun/I/2jlv636h+19P+x/lFL/5/oH7X0/6n+UUv/2/SPWvr/TP+opf/P9Y9a+t+uf9TS/xf6Ry39f6l/1NL/Dv2jlv6/0j9q6f9r/aOW/r/RP2rp/1v9o5b+d+oftfT/nf5RS//f6x+19L9L/6il/x/0j1r6361/1NL/j/pHLf3v0T9q6f8n/aOW/vfqH7X0/7P+UUv/+/SPWvrfr3/U0v8B/aOW/n/RP2rp/1f9o5b+f9M/aun/oP5RS/+H9I9a+v9d/6il/8P6Ry39H9E/Kuk/YqB/1NJ/mP5RS//h+kct/UfoH7X0H6l/1NJ/lP5RS//R+kct/WfQP2rpP6P+UUv/MfpHLf1n0j9q6T+z/lFL/1n0j1r6z6p/1NJ/Nv2jlv7P0D9q6T+7/lFL/zn0j1r6z6l/1NL/mfpHLf3n0j9q6f8s/aOW/s/WP2rp/xz9o5b+c+sftfR/rv5RS/959I9a+j9P/6il//P1j1r6z6t/1NJ/Pv2jlv4v0D9q6T9W/6il//z6Ry39F9A/aum/oP5RS/+F9I9a+i+sf9TSfxH9o5b+i+oftfRfTP+opf/i+kct/V+of9TS/0X6Ry39l9A/aum/pP5RS/+l9I9a+i+tf9TSfxn9o5b+y+oftfRfTv+opf/y+kct/V+sf9TS/yX6Ry39V9A/aum/ov5RS/+VevvP8GQPtvRfubf/k2rp/1L9o5b+q+gftfR/mf5RS/+X6x+19H+F/lFL/1X1j1r6r6Z/1NJ/nP5RS//V9Y9a+r9S/6il/xr6Ry3919Q/aum/lv5RS/+19Y9a+q+jf9TSf139o5b+r9I/aun/av2jlv7r6R+19H+N/lFL/9fqH7X0f53+UUv/1+sftfRfX/+opf8G+kct/TfUP2rpv5H+UUv/jfWPWvq/Qf+opf8m+kct/TfVP5rYf8bB9N5/M/2jlvX/Rv2jlv6b6x+19N9C/6il/5v0j1r6b6l/1NJ/K/2jlv5b6x+19N9G/6il/5v1j1r6b6t/1NJ/O/2jlv7b6x+19N9B/6il/476Ry39d9I/auk/Xv+opf/O+kct/d+if9TSfxf9o5b+u+oftfTfTf+opf/u+kct/ffQP2rp/1b9o5b+e+oftfTfS/+opf/e+kct/d+mf9TSfx/9o5b+++oftfTfT/+opf/++kct/Q/QP2rpf6D+UUv/g/SPWvq/Xf+opf879I9a+h+sf9TS/xD9o5b+h+oftfR/p/5RS/936R+19H+3/lFL//foH7X0P0z/IY888rgbLf3fq3/U0v9w/aOW/kfoH7X0P1L/qKX/UfpHLf3fp3/U0v/9+kct/T+gf9TS/4P6Ry39j9Y/aul/jP5RS/8P6R+19D9W/6il/4f1j1r6H6d/1NL/I/pHLf0/qn/U0v94/aOW/ifoH7X0/5j+UUv/E/WPWvp/XP+opf8n9I9a+n9S/6il/6f0j1r6n6R/1NL/ZP2jlv6n6B+19D9V/6il/2n6Ry39T9c/aul/hv5RS/8z9Y9a+p+lf9TS/9P6Ry39z9Y/aun/Gf2jlv6f1T9q6f85/aOW/p/XP2rp/wX9o5b+5+gftfT/ov5RS/8v6R+19D9X/6il/3n6Ry39z9c/aun/Zf2jlv5f0T9q6f9V/aOW/hfoH7X0v1D/qKX/RfpH03P/1f5x74iv6R9Nz/0fv/4v1j9q6X+J/lFL/0v1j1r6X6Z/1NL/6/pHLf2/oX/U0v+b+kct/S/XP2rpf4X+UUv/b+kftfS/Uv+opf+39Y9a+n9H/6il/1X6Ry39r9Y/aun/Xf2jlv7X6B+19L9W/6il//f0j1r6X6d/1NL/ev2jlv436B+19L9R/6il/036Ry39b9Y/aun/ff2jlv636B+19P+B/lFL/x/qH7X0/5H+UUv/W/WPWvr/WP+opf9P9I9a+v9U/6il/236Ry39f6Z/1NL/5/pHLf1v1z9q6f8L/aOW/r/UP2rpf4f+UUv/X+kftfT/tf5RS//f6B+19P+t/lFL/zv1j1r6/07/qKX/7/WPWvrfpX/U0v8P+kct/e/WP2rp/0f9o5b+9+gftfT/k/5RS/979Y9a+v9Z/6il/336Ry3979c/aun/gP5RS/+/6B+19P+r/lFL/7/pH7X0f1D/qKX/Q/pHLf3/rn/U0v9h/aOW/o/oH5X0HznQP2rpP0z/qKX/8H/Zf8R/d1xPUy39R1j/UUv/kfpHLf1H6R+19B+tf9TSfwb9o5b+M+oftfQfo3/U0n8m/aOW/jPrH7X0n0X/qKX/rPpHLf1n0z9q6f8M/aOW/rPrH7X0n0P/qKX/nPpHLf2fqX/U0n8u/aOW/s/SP2rp/2z9o5b+z9E/auk/t/5RS//n6h9Nf/1HDVL/efSPpr/+ef0/T/+opf/z9Y9a+s+rf9TSfz79o5b+L9A/auk/Vv+opf/8+kct/RfQP2rpv6D+UUv/hfSPWvovrH/U0n8R/aOW/ovqH7X0X0z/qKX/4vpHLf1fqH/U0v9F+kct/ZfQP2rpv6T+UUv/pfSPWvovrX/U0n8Z/aOW/svqH7X0X07/qKX/8vpH03H/MY+7d+SL9Y+m4/5PWP8v0T9q6b+C/lFL/xX1j1r6r6R/1NJ/Zf2jlv4vrek/41PauqX/KjX9n5qW/i/TP2rp/3L9o5b+r9A/aum/qv5RS//V9I9a+o/TP2rpv7r+UUv/V+oftfRfQ/+opf+a+kct/dfSP2rpv7b+UUv/dfSPWvqvq3/U0v9V+kct/V+tf9TSfz39o5b+r9E/aun/Wv2jlv6v0z9q6f96/aOW/uvrH7X030D/qKX/hvpHLf030j9q6b+x/lFL/zfoH7X030T/qKX/pvpHLf030z9q6f9G/aOW/pvrH7X030L/qKX/m/SPWvpvqX/U0n8r/aOW/lvrH7X030b/qKX/m/WPWvpvq3/U0n87/aOW/tvrH7X030H/qKX/jvpHLf130j9q6T9e/6il/876Ry3936J/1NJ/F/2jlv676h+19N9N/6il/+76Ry3999A/aun/Vv2jlv576h+19N9L/6il/976Ry3936Z/1NJ/H/2jlv776h+19N9P/6il//76Ry39D9A/aul/oP5RS/+D9I9a+r9d/6il/zv0j1r6H6x/1NL/EP2jlv6H6h+19H+n/lFL/3fpH7X0f7f+UUv/9+gftfQ/TP+opf979Y9a+h+uf9TS/wj9o5b+R+oftfQ/Sv+opf/79I9a+r9f/6il/wf0j1r6f1D/qKX/0fpHLf2P0T9q6f8h/aOW/sfqH7X0/7D+UUv/4/SPWvp/RP+opf9H9Y9a+h+vf9TS/wT9o5b+H9M/aul/ov5RS/+P6x+19P+E/lFL/0/qH7X0/5T+UUv/k/SPWvqfrH/U0v8U/aOW/qfqH7X0P03/qKX/6fpHLf3P0D9q6X+m/lFL/7P0j1r6f1r/aHruP+M/7h15tv7R9Nz/8ev/M/pHLf0/q3/U0v9z+kct/T+vf9TS/wv6Ry39z9E/aun/Rf2jlv5f0j9q6X+u/lFL//P0j1r6n69/1NL/y/pHLf2/on/U0v+r+kct/S/QP2rpf6H+UUv/i/SPWvp/Tf+opf/F+kct/S/RP2rpf6n+UUv/y/SPWvp/Xf+opf839I9a+n9T/6il/+X6Ry39r9A/aun/Lf2jlv5X6h+19P+2/lFL/+/oH7X0v0r/qKX/1fpHLf2/q3/U0v8a/Z8wIUNa+l+rf9TS/3v6Ry39r9M/aul/vf5RS/8b9I9a+t9Y1//mR6Zmq5b+N9X1nzot/W/WP2rp/339o5b+t+gftfT/gf5RS/8f6h+19P+R/lFL/1v1j1r6/1j/qKX/T/SPWvr/VP+opf9t+kct/X+mf9TS/+f6Ry39b9c/aun/C/2jlv6/1D9q6X+H/lFL/1/pH7X0/7X+UUv/3+gftfT/rf5RS/879Y9a+v9O/6il/+/1j1r636V/1NL/D/pHLf3v1j9q6f9H/aOW/vfoH7X0/5P+UUv/e/WPWvr/Wf+opf99+kct/e/XP2rp/4D+UUv/v+gftfT/q/5RS/+/6R+19H9Q/6il/0P6Ry39/65/1NL/Yf2jlv6P6B+V9B810D9q6T9M/6il/3D9o5b+I/SPWvqP1D9q6T9K/6il/2j9o5b+M+gftfSfUf+opf8Y/aOW/jPpH7X0n1n/qKX/LPpHj/XffNhgMB33n1X/qGX9z6Z/1NL/GfpHLf1n1z9q6T+H/lFL/zn1j1r6P1P/qKX/XPpHLf2fpX/U0v/Z+kct/Z+jf9TSf279o5b+z9U/auk/j/5RS//n6R+19H++/lFL/3n1j1r6z6d/1NL/BfpHLf3H6h+19J9f/6il/wL6Ry39F9Q/aum/kP5RS/+F9Y9a+i+if9TSf1H9o5b+i+kftfRfXP+opf8L9Y9a+r9I/6il/xL6Ry39l9Q/aum/lP5RS/+l9Y9a+i+jf9TSf1n9o5b+y+kftfRfXv+opf+L9Y9a+r9E/6il/wr6Ry39V9Q/aum/kv5RS/+V9Y9a+r9U/6il/yr6Ry39X6Z/1NL/5fpHLf1foX/U0n9V/aOW/qvpH7X0H6d/1NJ/df2jlv6v1D9q6b+G/lFL/zX1j1r6r6V/1NJ/bf2jlv7r6B+19F9X/6il/6v0j1r6v1r/qKX/evpHLf1fo3/U0v+1+kct/V+nf9TS//X6Ry3919c/mtD/psFgML3330D/qGX9b6h/1NJ/I/2jlv4b6x+19H+D/lFL/030j1r6b6p/1NJ/M/2jlv5v1D9q6b+5/lFL/y30j1r6v0n/qKX/lvpHLf230j9q6b+1/lFL/230j1r6v1n/qKX/tvpHLf230z9q6b+9/lFL/x30j1r676h/1NJ/J/2jlv7j9Y9a+u+sf9TS/y36Ry39d9E/aum/q/5RS//d9I9a+u+uf9TSfw/9o5b+b9U/aum/p/5RS/+99I9a+u+tf9TS/236Ry3999E/aum/r/5RS//99I9a+u+vf9TS/wD9o5b+B+oftfQ/SP+opf/b9Y9a+r9D/6il/8H6Ry39D9E/aul/qP5RS/936h+19H+X/lFL/3frH7X0f4/+UUv/w/SPWvq/V/+opf/h+kct/Y/QP2rpf6T+UUv/o/SPWvq/T/+opf/79Y9a+n9A/6il/wf1j1r6H61/1NL/GP2jlv4f0j9q6X+s/lFL/w/rH7X0P07/qKX/R/SPWvp/VP+opf/x+kct/U/QP2rp/zH9o5b+J+oftfT/uP5RS/9P6B+19P+k/lFL/0/pH7X0P0n/qKX/yfpHLf1P0T9q6X+q/lFL/9P0j1r6n65/1NL/DP2jlv5n6h+19D9L/6il/6f1j1r6n61/1NL/M1X91zliards6f/Zqv5Tr6X/5/SPWvp/Xv+opf8X9I9a+p+jf9TS/4v6Ry39v6R/1NL/XP2jlv7n6R+19D9f/6il/5f1j1r6f0X/qKX/V/WPWvpfoH/U0v9C/aOW/hfpH7X0/5r+UUv/i/WPWvpfon/U0v9S/aOW/pfpH7X0/7r+UUv/b+gftfT/pv5RS//L9Y9a+l+hf9TS/1v6Ry39r9Q/aun/bf2jlv7f0T9q6X+V/lFL/6v1j1r6f1f/qKX/NfpHLf2v1T9q6f89/aOW/tfpH7X0v17/qKX/DfpHLf1v1D9q6X+T/lFL/5v1j1r6f1//qKX/LfpHLf1/oH/U0v+H+kct/X+kf9TS/1b9o5b+P9Y/aun/E/2jlv4/1T9q6X+b/lFL/5/pH7X0/7n+UUv/2/WPWvr/Qv+opf8v9Y9a+t+hf9TS/1f6Ry39f61/1NL/N/pHLf1/q3/U0v9O/aOW/r/TP2rp/3v9o5b+d+kftfT/g/5RS/+79Y9a+v9R/6il/z36Ry39/6R/1NL/Xv2jlv5/1j9q6X+f/lFL//v1j1r6P6B/1NL/L/pHLf3/qn/U0v9v+kct/R/UP2rp/5D+UUv/v+sftfR/WP+opf8j+kcl/UcP9I9a+g/TP2rpP1z/qKX/CP2jlv4j9Y9a+o/SP2rpP1r/qKX/DPpHLf1n1D9q6T9G/6il/0z6Ry39Z9Y/auk/i/5RS/9Z9Y9a+s+mf9TS/xn6Ry39Z9c/auk/h/5RS/859Y9a+j9T/6il/1z6Ry39n6V/1NL/2fpHLf2fo3/U0n9u/aOW/s/VP2rpP4/+UUv/5+kftfR/vv5RS/959Y9a+s+nf9TS/wX6Ry39x+oftfSfX/+opf8C+kct/RfUP2rpv5D+UUv/hfWPWvovon/U0n9R/aOW/ovpH7X0X1z/qKX/C/WPWvq/SP+opf8S+kct/ZfUP2rpv5T+UUv/pfWPWvovo3/U0n9Z/aOW/svpH7X0X17/qKX/i/WPWvq/RP+opf8K+kct/VfUP2rpv5L+UUv/lfWPWvq/VP+opf8q+kct/V+mf9TS/+X6Ry39X6F/1NJ/Vf2jlv6r6R+19B+nf9TSf3X9o5b+r9Q/aum/hv5RS/819Y9a+q+lf9TSf239o5b+6+gftfRfV/+opf+r9I9a+r9a/6il/3r6Ry39X6N/1NL/tfpHLf1fp3/U0v/1+kct/dfXP2rpv4H+UUv/DfWPWvpvpH/U0n9j/aOW/m/QP2rpv4n+UUv/TfWPWvpvpn/U0v+N+kct/TfXP2rpv4X+UUv/N+kftfTfUv+opf9W+kct/bfWP2rpv43+UUv/N+sftfTfVv+opf92+kct/bfXP2rpv4P+UUv/HfWPWvrvpH/U0n+8/lFL/531j1r6v0X/qKX/LvpHLf131T9q6b+b/lFL/931j1r676F/1NL/rfpHLf331D9q6b+X/lFL/731j1r6v03/qKX/Pv+q//2z/pcH9vTU0n9f6z9q6b+f/lFL//31j1r6H6B/1NL/QP2jlv4H6R+19H+7/lFL/3foH7X0P1j/qKX/IfpHLf0P1T9q6f9O/aOW/u/SP2rp/279o5b+79E/aul/mP5RS//36h+19D9c/6il/xH6Ry39j9Q/aul/lP5RS//36R+19H+//lFL/w/oH7X0/6D+UUv/o/WPWvofo3/U0v9D+kct/Y/VP2rp/2H9o5b+x+kftfT/iP5RS/+P6h+19D9e/6il/wn6Ry39P6Z/1NL/RP2jlv4f1z9q6f8J/aOW/p/UP2rp/yn9o5b+J+kftfQ/Wf+opf8p+kct/U/VP2rpf5r+UUv/0/WPWvqfoX/U0v9M/aOW/mfpH7X0/7T+UUv/s/WPWvp/Rv+opf9n9Y9a+n9O/6il/+f1j1r6f0H/qKX/OfpHLf2/qH/U0v9L+kct/c/VP2rpf57+UUv/8/WPWvp/Wf+opf9X9I9a+n9V/6il/wX6Ry39L9Q/aul/kf5RS/+v6R+19L9Y/6il/yX6Ry39L9U/aul/mf5RS/+v6x+19P+G/lFL/2/qH7X0v1z/qKX/FfpHLf2/pX/U0v9K/aOW/t/WP2rp/x39o5b+V+kftfS/Wv+opf939Y9a+l+jf9TS/1r9o5b+39M/aul/nf5RS//r9Y9a+t+gf9TS/0b9o5b+N+kftfS/Wf+opf/39Y9a+t+if9TS/wf6Ry39f6h/1NL/R/pHLf1v1T9q6f9j/aOW/j/RP2rp/1P9o5b+t+kftfT/mf5RS/+f6x+19L9d/6il/y/0j1r6/1L/qKX/HfpHLf1/pX/U0v/X+kct/X+jf9TS/7f6Ry3979Q/aun/O/2jlv6/1z9q6X+X/lFL/z/oH7X0v1v/qKX/H/WPWvrfo3/U0v9P+kct/e/VP2rp/2f9o5b+9+kftfS/X/+opf8D+kct/f+if9TS/6/6Ry39/6Z/1NL/Qf2jlv4P6R+19P+7/lFL/4f1j1r6P6J/VNJ/hoH+UUv/YfpHLf2H6x+19B+hf9TSf6T+UUv/UfpHLf1H6x+19J9B/6il/4z6Ry39x+gftfSfSf+opf/M+kct/WfRP2rpP6v+UUv/2fSPWvo/Q/+opf/s+kct/efQP2rpP6f+UUv/Z+oftfSfS/+opf+z9I9a+j9b/6il/3P0j1r6z61/1NL/ufpHLf3n0T9q6f88/aOW/s/XP2rpP6/+UUv/+fSPWvq/QP+opf9Y/aOW/vPrH7X0X0D/qKX/gvpHLf0X0j9q6b+w/lFL/0X0j1r6L6p/1NJ/Mf2jlv6L6x+19H+h/lFL/xfpH7X0X0L/qKX/kvpHLf2X0j9q6b+0/lFL/2X0j1r6L6t/1NJ/Of2jlv7L6x+19H+x/lFL/5foH7X0X0H/qKX/ilPR/57Z/psDe3pq6b+S9R+19F9Z/6il/0v1j1r6r6J/1NL/ZfpHLf1frn/U0v8V+kct/VfVP2rpv5r+UUv/cfpHLf1X1z9q6f9K/aOW/mvoH7X0X1P/qKX/WvpHLf3X1j9q6b+O/lFL/3X1j1r6v0r/qKX/q/WPWvqvp3/U0v81+kct/V+rf9TS/3X6Ry39X69/1NJ/ff2jlv4b6B+19N9Q/6il/0b6Ry39N9Y/aun/Bv2jlv6b6B+19N9U/6il/2b6Ry3936h/1NJ/c/2jlv5b6B+19H+T/lFL/y31j1r6b6V/1NJ/a/2jlv7b6B+19H+z/lFL/231j1r6b6d/1NJ/e/2jlv476B+19N9R/6il/076Ry39x+sftfTfWf+opf9b9I9a+u+if9TSf1f9o5b+u+kftfTfXf+opf8e+kct/d+qf9TSf0/9o5b+e+kftfTfW/+opf/b9I9a+u+jf9TSf1/9o5b+++kftfTfX/+opf8B+kct/Q/UP2rpf5D+UUv/t+sftfR/h/5RS/+D9Y9a+h+if9TS/1D9o5b+79Q/aun/Lv2jlv7v1j9q6f8e/aOW/ofpH7X0f6/+UUv/w/WPWvofoX/U0v9I/aOW/kfpH7X0f5/+UUv/9+sftfT/gP5RS/8P6h+19D9a/6il/zH6Ry39P6R/1NL/WP2jlv4f1j9q6X+c/lFL/4/oH7X0/6j+UUv/4/WPWvqfoH/U0v9j+kct/U/UP2rp/3H9o5b+n9A/aun/Sf2jlv6f0j9q6X+S/lFL/5P1j1r6n6J/1NL/VP2jlv6n6R+19D9d/6il/xn6Ry39z9Q/aul/lv5RS/9P6x+19D9b/6il/2f0j1r6f1b/qKX/5/SPWvp/Xv+opf8X9I9a+p+jf9TS/4v6Ry39v6R/1NL/XP2jlv7n6R+19D9f/6il/5f1j1r6f0X/qKX/V/WPWvpfoH/U0v9C/aOW/hfpH7X0/5r+UUv/i/WPWvpfon/U0v9S/aOW/pfpH7X0/7r+UUv/b+gftfT/pv5RS//L9Y9a+l+hf9TS/1v6Ry39r9Q/aun/bf2jlv7f0T9q6X+V/lFL/6v1j1r6f1f/qKX/NfpHLf2v1T9q6f89/aOW/tfpH7X0v17/qKX/DfpHLf1v1D9q6X+T/lFL/5v1j1r6f1//qKX/LfpHLf1/oH/U0v+H+kct/X+kf9TS/1b9o5b+P9Y/aun/E/2jlv4/1T9q6X+b/lFL/5/pH7X0/7n+UUv/2/WPWvr/Qv+opf8v9Y9a+t+hf9TS/1f6Ry39f61/1NL/N/pHLf1/q3/U0v9O/aOW/r/TP2rp/3v9o5b+d+kftfT/g/5RS/+79Y9a+v9R/6il/z36Ry39/6R/1NL/Xv2jlv5/1j9q6X+f/lFL//v1j1r6P6B/1NL/L/pHLf3/qn/U0v9v+kct/R/UP2rp/5D+UUv/v+sftfR/WP+opf8j+kfTY/8xk64+rv+MA/2j6bF/WP8zDtM/auk/XP+opf8I/aOW/iP1j1r6j9I/auk/Wv+opf8M+kct/WfUP2rpP0b/qKX/TPpHLf1n1j9q6T+L/lFL/1n1j1r6z6Z/1NL/GfpHLf1n1z9q6T+H/lFL/zn1j1r6P1P/qKX/XPpHLf2fpX/U0v/Z+kct/Z+jf9TSf279o5b+z9U/auk/j/5RS//n6R+19H++/lFL/3n1j1r6z6d/1NL/BfpHLf3H6h+19J9f/6il/wL6Ry39F9Q/aum/kP5RS/+F9Y9a+i+if9TSf1H9o5b+i+kftfRfXP+opf8L9Y9a+r9I/6il/xL6Ry39l9Q/aum/lP5RS/+l9Y9a+i+jf9TSf1n9o5b+y+kftfRfXv+opf+LY///+c/2/1tL/5dY/1FL/xX0j1r6r6h/1NJ/Jf2jlv4r6x+19H+p/lFL/1X0j1r6v0z/qKX/y/WPWvq/Qv+opf+q+kct/VfTP2rpP07/qKX/6vpHLf1fqX/U0n8N/aOW/mvqH7X0X0v/qKX/2vpHLf3X0T9q6b+u/lFL/1fpH7X0f7X+UUv/9fSPWvq/Rv+opf9r9Y9a+r9O/6il/+v1j1r6r69/1NJ/A/2jlv4b6h+19N9I/6il/8b6Ry3936B/1NJ/E/2jlv6b6h+19N9M/6il/xv1j1r6b65/1NJ/C/2jlv5v0j9q6b+l/lFL/630j1r6b61/1NJ/G/2jlv5v1j9q6b+t/lFL/+30j1r6b69/1NJ/B/2jlv476h+19N9J/6il/3j9o5b+O+sftfR/i/5RS/9d9I9a+u+qf9TSfzf9o5b+u+sftfTfQ/+opf9b9Y9a+u+pf9TSfy/9o5b+e+sftfR/m/5RS/999I9a+u+rf9TSfz/9o5b+++sftfQ/QP+opf+B+kct/Q/SP2rp/3b9o5b+79A/aul/sP5RS/9D9I9a+h+qf9TS/536Ry3936V/1NL/3fpHLf3fo3/U0v8w/aOW/u/VP2rpf7j+UUv/I/SPWvofqX/U0v8o/aOW/u/TP2rp/379o5b+H9A/aun/Qf2jlv5H6x+19D9G/6il/4f0j1r6H6t/1NL/w/pHLf2P0z9q6f8R/aOW/h/VP2rpf7z+UUv/E/SPWvp/TP+opf+J+kct/T+uf9TS/xP6Ry39P6l/1NL/U/pHLf1P0j9q6X+y/lFL/1P0j1r6n6p/1NL/NP2jlv6n6x+19D9D/6il/5n6Ry39z9I/aun/af2jlv5n6x+19P+M/lFL/8/qH7X0/5z+UUv/z+sftfT/gv5RS/9z9I9a+n9R/6il/5f0j1r6n6t/1NL/PP2jlv7n6x+19P+y/lFL/6/oH7X0/6r+UUv/C/SPWvpfqH/U0v8i/aOW/l/TP2rpf7H+UUv/S/SPWvpfqn/U0v8y/aOW/l/XP2rp/w39o5b+39Q/aul/uf5RS/8r9I9a+n9L/6il/5X6Ry39v61/1NL/O/pHLf2v0j9q6X+1/lFL/+/qH7X0v0b/qKX/tfpHLf2/p3/U0v86/aOW/tfrH7X0v0H/qKX/jfpHLf1v0j9q6X+z/lFL/+/rH7X0v0X/qKX/D/SPWvr/UP+opf+P9I9a+t+qf9TS/8f6Ry39f6J/1NL/p/pHLf1v0z9q6f8z/aOW/j/XP2rpf7v+UUv/X+gftfT/pf5RS/879I9a+v9K/6il/6/1j1r6/0b/qKX/b/WPWvrfqX/U0v93+kct/X+vf9TS/y79o5b+f9A/aul/t/5RS/8/6h+19L9H/6il/5/0j1r636t/1NL/z/pHLf3v0z9q6X+//lFL/wf0j1r6/0X/qKX/X/WPWvr/Tf+opf+D+kct/R/SP2rp/3f9o5b+D+sftfR/RP+opP+Ygf5RS/9h+kct/YfrH7X0H6F/1NJ/pP5RS/9R+kct/UfrH7X0n0H/qKX/jPpHLf3H6B+19J9J/6il/8z6Ry39Z9E/auk/q/5RS//Z9I9a+j9D/6il/+z6Ry3959A/auk/p/5RS/9n6h+19J9L/6il/7P0j1r6P1v/qKX/c/SPWvrPrX/U0v+5+kct/efRP2rp/zz9o5b+z9c/auk/r/5RS//59I9a+r9A/6il/1j9o5b+8+sftfRfQP+opf+C+kct/RfSP2rpv7D+UUv/RfSPWvovqn/U0n8x/aOW/ovrH7X0f6H+UUv/F+kftfRfQv+opf+S+kct/ZfSP2rpv7T+0XTXHwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgP/HDhwIAAAAAAD5vzZCVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVFXbgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhR04IAEAAAAQ9P91OwIFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbgoAAP//4j3+QA==")
r0 = open(&(0x7f00000000c0)='./bus\x00', 0x68042, 0x62)
r1 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0)
write$dsp(r0, &(0x7f0000000100)='n', 0x1)
ftruncate(r1, 0x2007ffb)
sendfile(r0, r1, 0x0, 0x1000000201005)

0s ago: executing program 2 (id=774):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000080)={[{@nobh}, {@auto_da_alloc}, {@data_err_ignore}]}, 0x3, 0x4cd, &(0x7f0000000c80)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x6)
r3 = shmget$private(0x0, 0x8000, 0x10, &(0x7f0000ff5000/0x8000)=nil)
shmat(r3, &(0x7f0000ffc000/0x2000)=nil, 0x4000)
shmat(r3, &(0x7f0000ffc000/0x2000)=nil, 0x5800)
getdents64(0xffffffffffffffff, 0x0, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000000002010400000000000000000b000108"], 0x14}}, 0x20040000)
bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="2100000000000000000000000000100000"], 0x48)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', <r8=>0x0})
sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2e}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000804}, 0x0)

kernel console output (not intermixed with test programs):

_add_watch(7, /dev/loop4p104, 10) failed: No such file or directory
[   81.098286][   T26] audit: type=1326 audit(1763012421.355:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4582 comm="syz.4.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb53af66c9 code=0x7ffc0000
[   81.128352][ T4352] udevd[4352]: inotify_add_watch(7, /dev/loop4p105, 10) failed: No such file or directory
[   81.141411][ T4318] udevd[4318]: inotify_add_watch(7, /dev/loop4p106, 10) failed: No such file or directory
[   81.167342][ T4508] udevd[4508]: inotify_add_watch(7, /dev/loop4p107, 10) failed: No such file or directory
[   81.181278][ T4505] udevd[4505]: inotify_add_watch(7, /dev/loop4p108, 10) failed: No such file or directory
[   81.194605][ T4506] udevd[4506]: inotify_add_watch(7, /dev/loop4p109, 10) failed: No such file or directory
[   81.213555][ T4316] udevd[4316]: inotify_add_watch(7, /dev/loop4p110, 10) failed: No such file or directory
[   81.235393][ T4317] udevd[4317]: inotify_add_watch(7, /dev/loop4p111, 10) failed: No such file or directory
[   81.331481][   T26] audit: type=1326 audit(1763012421.355:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4582 comm="syz.4.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb53af66c9 code=0x7ffc0000
[   81.374183][ T4592] loop0: detected capacity change from 0 to 512
[   81.396538][ T4572] loop2: detected capacity change from 0 to 32768
[   81.408525][   T26] audit: type=1326 audit(1763012421.355:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4582 comm="syz.4.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7feb53af66c9 code=0x7ffc0000
[   81.435265][   T26] audit: type=1326 audit(1763012421.365:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4582 comm="syz.4.75" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb53af66c9 code=0x7ffc0000
[   81.600151][ T4592] EXT4-fs (loop0): Ignoring removed orlov option
[   81.637134][ T4592] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[   81.663163][ T4592] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2229: inode #15: comm syz.0.76: corrupted in-inode xattr
[   81.689630][ T4592] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.76: couldn't read orphan inode 15 (err -117)
[   82.524371][ T4572] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.72 (4572)
[   82.535627][ T4592] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,orlov,user_xattr,noload,nombcache,noblock_validity,init_itable=0x0000000000000601,nodiscard,,errors=continue. Quota mode: none.
[   82.696529][ T4598] xt_hashlimit: max too large, truncated to 1048576
[   82.705204][ T4598] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[   82.967867][ T4607] loop4: detected capacity change from 0 to 512
[   82.980172][ T4572] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[   82.991388][ T4572] BTRFS info (device loop2): allowing degraded mounts
[   82.999296][ T4607] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   83.012416][ T4607] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[   83.026303][ T4572] BTRFS info (device loop2): setting nodatasum
[   83.033232][ T4572] BTRFS info (device loop2): disabling tree log
[   83.040908][ T4572] BTRFS info (device loop2): using free space tree
[   83.047541][ T4572] BTRFS info (device loop2): has skinny extents
[   83.156967][ T4607] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2826: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   83.176314][ T4607] EXT4-fs (loop4): 1 truncate cleaned up
[   83.182113][ T4607] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,barrier,grpjquota=,quota,. Quota mode: writeback.
[   83.229162][ T4572] BTRFS error (device loop2): open_ctree failed: -12
[   84.486263][ T4637] loop1: detected capacity change from 0 to 256
[   84.592232][ T4637] exfat: Deprecated parameter 'namecase'
[   84.609149][ T4637] exfat: Unknown parameter 'keep_last_dots'
[   88.159097][ T4294] udevd[4294]: inotify_add_watch(7, /dev/loop4p244, 10) failed: No such file or directory
[   88.172819][ T4507] udevd[4507]: inotify_add_watch(7, /dev/loop4p245, 10) failed: No such file or directory
[   88.252024][ T4654] mkiss: ax0: crc mode is auto.
[   88.321327][ T4504] udevd[4504]: inotify_add_watch(7, /dev/loop4p248, 10) failed: No such file or directory
[   88.321440][ T4352] udevd[4352]: inotify_add_watch(7, /dev/loop4p246, 10) failed: No such file or directory
[   88.334831][ T4508] udevd[4508]: inotify_add_watch(7, /dev/loop4p249, 10) failed: No such file or directory
[   88.343919][ T4318] udevd[4318]: inotify_add_watch(7, /dev/loop4p247, 10) failed: No such file or directory
[   88.354387][ T4505] udevd[4505]: inotify_add_watch(7, /dev/loop4p250, 10) failed: No such file or directory
[   88.382785][ T4506] udevd[4506]: inotify_add_watch(7, /dev/loop4p251, 10) failed: No such file or directory
[   88.382888][ T4510] udevd[4510]: inotify_add_watch(7, /dev/loop4p252, 10) failed: No such file or directory
[   89.730235][ T4666] xt_hashlimit: max too large, truncated to 1048576
[   89.741883][ T4666] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[   89.921478][ T4317] udevd[4317]: inotify_add_watch(7, /dev/loop4p254, 10) failed: No such file or directory
[   92.784112][ T4704] loop3: detected capacity change from 0 to 512
[   92.852319][ T4706] loop2: detected capacity change from 0 to 4096
[   92.913468][ T4704] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[   92.997027][ T4704] EXT4-fs (loop3): 1 truncate cleaned up
[   93.002894][ T4704] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,barrier,grpjquota=,quota,. Quota mode: writeback.
[   93.526620][ T4352] udevd[4352]: inotify_add_watch(7, /dev/loop3p27, 10) failed: No such file or directory
[   93.550460][ T4509] udevd[4509]: inotify_add_watch(7, /dev/loop3p28, 10) failed: No such file or directory
[   93.562504][ T4318] udevd[4318]: inotify_add_watch(7, /dev/loop3p29, 10) failed: No such file or directory
[   93.574502][ T4504] udevd[4504]: inotify_add_watch(7, /dev/loop3p30, 10) failed: No such file or directory
[   93.591044][ T4508] udevd[4508]: inotify_add_watch(7, /dev/loop3p31, 10) failed: No such file or directory
[   93.591519][ T4505] udevd[4505]: inotify_add_watch(7, /dev/loop3p32, 10) failed: No such file or directory
[   93.621264][ T4506] udevd[4506]: inotify_add_watch(7, /dev/loop3p33, 10) failed: No such file or directory
[   93.650966][ T4510] udevd[4510]: inotify_add_watch(7, /dev/loop3p34, 10) failed: No such file or directory
[   93.662890][ T4316] udevd[4316]: inotify_add_watch(7, /dev/loop3p35, 10) failed: No such file or directory
[   93.674580][ T4294] udevd[4294]: inotify_add_watch(7, /dev/loop3p37, 10) failed: No such file or directory
[  100.616306][ T4757] loop0: detected capacity change from 0 to 512
[  101.098854][ T4757] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  101.180995][ T4757] EXT4-fs (loop0): 1 truncate cleaned up
[  101.186656][ T4757] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,barrier,grpjquota=,quota,. Quota mode: writeback.
[  101.880034][ T4769] Cannot find add_set index 0 as target
[  101.902159][ T4768] loop3: detected capacity change from 0 to 4096
[  101.955027][ T4768] ntfs3: Unknown parameter 'nocase'
[  102.008403][ T4771] loop4: detected capacity change from 0 to 256
[  102.060321][ T4771] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  102.098781][ T4625] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  102.213737][ T4773] loop2: detected capacity change from 0 to 7
[  102.768915][ T4625] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  102.777013][ T4625] usb 3-1: config 0 has no interface number 0
[  102.826346][ T4773] Dev loop2: unable to read RDB block 7
[  102.908045][ T4773]  loop2: unable to read partition table
[  102.919193][ T4773] loop2: partition table beyond EOD, truncated
[  102.947845][ T4773] loop_reread_partitions: partition scan of loop2 (�被x������ ) failed (rc=-5)
[  102.958974][ T4625] usb 3-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  102.982922][ T4625] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  103.008010][ T4625] usb 3-1: Product: syz
[  103.020631][ T4625] usb 3-1: Manufacturer: syz
[  103.025443][ T4625] usb 3-1: SerialNumber: syz
[  103.036663][ T4625] usb 3-1: config 0 descriptor??
[  103.097191][ T3561] Dev loop2: unable to read RDB block 7
[  103.112502][ T3561]  loop2: unable to read partition table
[  103.227494][ T3561] loop2: partition table beyond EOD, truncated
[  103.250913][ T4781] loop4: detected capacity change from 0 to 64
[  103.328878][ T4625] usb 3-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[  104.072610][ T4625] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  104.083605][ T4625] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[  104.092382][ T4625] usb 3-1: media controller created
[  104.115977][ T4625] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  104.383839][ T4249] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  104.393372][   T26] kauditd_printk_skb: 10 callbacks suppressed
[  104.393386][   T26] audit: type=1800 audit(1763012445.135:22): pid=4781 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.124" name="file1" dev="loop4" ino=5 res=0 errno=0
[  104.538836][ T4625] i2c i2c-1: ec100: i2c rd failed=-71 reg=33
[  104.692446][ T4799] loop4: detected capacity change from 0 to 512
[  104.733301][ T4625] usb 3-1: USB disconnect, device number 2
[  104.758838][ T4249] usb 1-1: Using ep0 maxpacket: 16
[  104.820518][ T4633] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  104.849056][ T4633] Bluetooth: hci0: Injecting HCI hardware error event
[  104.878906][ T4249] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  104.889137][ T4200] Bluetooth: hci0: hardware error 0x00
[  104.925442][ T4799] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  105.093390][ T4249] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  105.099517][ T4799] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  105.113465][ T4249] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1d00, bcdDevice= 0.00
[  106.258836][ T4296] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  106.671527][ T4249] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  106.879507][ T4816] loop0: detected capacity change from 0 to 512
[  106.909795][ T4249] usb 1-1: config 0 descriptor??
[  106.928849][ T4249] usb 1-1: can't set config #0, error -71
[  106.940823][ T4822] loop1: detected capacity change from 0 to 256
[  106.967735][ T4249] usb 1-1: USB disconnect, device number 3
[  107.049334][ T4816] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  107.068592][ T4822] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  107.286872][ T4816] EXT4-fs (loop0): 1 truncate cleaned up
[  107.659089][ T4816] EXT4-fs (loop0): mounted filesystem without journal. Opts: barrier=0x0000000000000101,errors=remount-ro,. Quota mode: none.
[  107.838791][ T4296] usb 4-1: unable to read config index 0 descriptor/all
[  107.852179][ T4296] usb 4-1: can't read configurations, error -71
[  109.394390][ T4861] loop2: detected capacity change from 0 to 512
[  109.746140][ T4871] loop3: detected capacity change from 0 to 512
[  110.800099][ T4861] EXT4-fs (loop2): Test dummy encryption mode enabled
[  111.529751][ T4861] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  111.605341][ T4861] EXT4-fs: failed to create workqueue
[  111.678989][ T4871] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  111.696928][ T4871] ext4 filesystem being mounted at /32/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  111.728782][ T4861] EXT4-fs (loop2): mount failed
[  114.067049][ T4919] loop0: detected capacity change from 0 to 16
[  114.126134][ T4919] erofs: (device loop0): mounted with root inode @ nid 36.
[  114.738332][ T4919] erofs: (device loop0): z_erofs_extent_lookback: unknown type 3 @ lcn 42 of nid 36
[  114.839093][ T4919] attempt to access beyond end of device
[  114.839093][ T4919] loop0: rw=0, want=64, limit=16
[  114.983071][ T4919] erofs: (device loop0): z_erofs_readpage: failed to read, err [-95]
[  115.808412][ T4931] erofs: (device loop0): z_erofs_map_blocks_iter: unknown type 3 @ offset 360447 of nid 36
[  115.932901][ T4931] erofs: (device loop0): z_erofs_readpage: failed to read, err [-95]
[  115.944065][ T4931] erofs: (device loop0): erofs_readdir: fail to readdir of logical block 87 of nid 36
[  116.128066][ T4947] loop0: detected capacity change from 0 to 512
[  116.146019][ T4943] loop1: detected capacity change from 0 to 512
[  116.226041][ T4947] EXT4-fs (loop0): Ignoring removed nobh option
[  116.352141][ T4947] EXT4-fs error (device loop0): ext4_orphan_get:1401: inode #15: comm syz.0.162: iget: bad i_size value: 38620345925642
[  116.385430][ T4947] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.162: couldn't read orphan inode 15 (err -117)
[  116.416271][ T4947] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,,errors=continue. Quota mode: writeback.
[  117.023230][ T4943] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  117.097529][ T4943] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  117.272697][ T4961] tipc: Started in network mode
[  117.277855][ T4961] tipc: Node identity 1e6c68469521, cluster identity 4711
[  118.041570][ T4961] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  118.148592][ T4967] device syzkaller0 entered promiscuous mode
[  118.333598][ T4967] tipc: Resetting bearer <eth:syzkaller0>
[  118.662738][ T4979] loop1: detected capacity change from 0 to 22
[  118.710513][ T4979] MTD: Attempt to mount non-MTD device "/dev/loop1"
[  118.732043][ T4979] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  119.373057][ T4483] tipc: Node number set to 2337105990
[  120.565548][ T4967] tipc: Disabling bearer <eth:syzkaller0>
[  120.737685][ T4988] loop0: detected capacity change from 0 to 8
[  120.866617][ T4990] loop1: detected capacity change from 0 to 16
[  121.765811][ T4990] erofs: (device loop1): mounted with root inode @ nid 36.
[  122.041281][ T4990] erofs: (device loop1): z_erofs_extent_lookback: unknown type 3 @ lcn 42 of nid 36
[  123.052923][ T4990] attempt to access beyond end of device
[  123.052923][ T4990] loop1: rw=0, want=64, limit=16
[  123.065141][ T4990] erofs: (device loop1): z_erofs_readpage: failed to read, err [-95]
[  123.289765][ T5004] erofs: (device loop1): z_erofs_map_blocks_iter: unknown type 3 @ offset 360447 of nid 36
[  123.300067][ T5004] erofs: (device loop1): z_erofs_readpage: failed to read, err [-95]
[  123.308249][ T5004] erofs: (device loop1): erofs_readdir: fail to readdir of logical block 87 of nid 36
[  123.427191][ T4993] loop2: detected capacity change from 0 to 4096
[  123.456441][ T5006] loop3: detected capacity change from 0 to 512
[  123.457881][ T4998] SQUASHFS error: Failed to read block 0x1ec: -5
[  123.479124][ T5006] EXT4-fs (loop3): Ignoring removed nobh option
[  123.505042][ T4993] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512)
[  123.665649][ T5006] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.177: iget: bad i_size value: 38620345925642
[  123.690559][ T4998] SQUASHFS error: Unable to read metadata cache entry [1ea]
[  124.689110][ T5006] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.177: couldn't read orphan inode 15 (err -117)
[  125.014317][ T5006] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,,errors=continue. Quota mode: writeback.
[  125.137196][ T4993] ntfs3: loop2: ntfs_sync_inode r=1e failed, -22.
[  125.151595][ T4993] ntfs3: loop2: Mark volume as dirty due to NTFS errors
[  125.553584][ T4499] ntfs3: loop2: ntfs3_write_inode r=1e failed, -22.
[  125.577422][ T4186] ntfs3: loop2: ntfs_evict_inode r=1e failed, -22.
[  126.628151][ T5033] loop3: detected capacity change from 0 to 512
[  126.760131][ T5033] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  127.898799][ T4251] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  127.967653][ T5033] EXT4-fs (loop3): 1 truncate cleaned up
[  127.973338][ T5033] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,barrier,grpjquota=,quota,. Quota mode: writeback.
[  128.398666][ T5047] loop1: detected capacity change from 0 to 164
[  128.684549][ T4483] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  129.191326][ T4483] usb 1-1: Using ep0 maxpacket: 32
[  129.446284][ T5053] netlink: 48 bytes leftover after parsing attributes in process `syz.4.189'.
[  129.639299][ T4483] usb 1-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f
[  129.648501][ T4483] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  129.658899][ T4483] usb 1-1: Product: syz
[  129.664646][ T4483] usb 1-1: Manufacturer: syz
[  129.669961][ T4483] usb 1-1: SerialNumber: syz
[  129.693801][ T4483] usb 1-1: config 0 descriptor??
[  129.773728][ T4483] gspca_main: stk1135-2.14.0 probing 174f:6a31
[  129.773844][ T4251] usb 3-1: device descriptor read/all, error -71
[  130.092653][ T4483] gspca_stk1135: reg_w 0x2 err -71
[  130.100589][ T4483] gspca_stk1135: serial bus timeout: status=0x00
[  130.108739][ T4483] gspca_stk1135: Sensor write failed
[  130.114836][ T4483] gspca_stk1135: serial bus timeout: status=0x00
[  130.130482][ T4483] gspca_stk1135: Sensor write failed
[  130.135941][ T4483] gspca_stk1135: serial bus timeout: status=0x00
[  130.205232][ T5062] loop4: detected capacity change from 0 to 512
[  130.221318][ T4483] gspca_stk1135: Sensor read failed
[  130.236138][ T4483] gspca_stk1135: serial bus timeout: status=0x00
[  130.244431][ T4483] gspca_stk1135: Sensor read failed
[  130.251100][ T4483] gspca_stk1135: Detected sensor type unknown (0x0)
[  130.258310][ T4483] gspca_stk1135: serial bus timeout: status=0x00
[  130.266682][ T4483] gspca_stk1135: Sensor read failed
[  130.273654][ T4483] gspca_stk1135: serial bus timeout: status=0x00
[  130.281142][ T4483] gspca_stk1135: Sensor read failed
[  130.286965][ T4483] gspca_stk1135: serial bus timeout: status=0x00
[  130.294780][ T4483] gspca_stk1135: Sensor write failed
[  130.364134][ T4483] gspca_stk1135: serial bus timeout: status=0x00
[  130.397524][ T4483] gspca_stk1135: Sensor write failed
[  130.426150][ T4483] stk1135: probe of 1-1:0.0 failed with error -71
[  130.454641][ T4483] usb 1-1: USB disconnect, device number 4
[  130.521337][ T5062] EXT4-fs (loop4): Ignoring removed nobh option
[  130.715933][ T5062] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.194: iget: bad i_size value: 38620345925642
[  130.742504][ T5062] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.194: couldn't read orphan inode 15 (err -117)
[  130.768429][ T5062] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,,errors=continue. Quota mode: writeback.
[  130.782738][ T4251] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  131.001366][   T26] audit: type=1326 audit(1763012471.895:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5070 comm="syz.3.196" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcb4a6936c9 code=0x0
[  131.578830][ T4483] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  132.019690][ T4251] usb 3-1: Using ep0 maxpacket: 8
[  132.048996][ T4483] usb 1-1: config 171 has an invalid interface number: 109 but max is 0
[  132.072917][ T4483] usb 1-1: config 171 has an invalid descriptor of length 0, skipping remainder of the config
[  132.088995][ T4483] usb 1-1: config 171 has no interface number 0
[  132.096005][ T4483] usb 1-1: config 171 interface 109 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1023
[  132.107749][ T4483] usb 1-1: config 171 interface 109 altsetting 0 endpoint 0x1 has invalid maxpacket 2560, setting to 64
[  132.119519][ T4483] usb 1-1: config 171 interface 109 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 12
[  132.389487][ T4251] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  132.399544][ T4251] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  132.409675][ T4251] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  132.420020][ T4251] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  132.433275][ T4251] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  132.442634][ T4251] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  132.619513][ T4483] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=fd.2e
[  132.819619][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  132.826655][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  132.841381][ T4483] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  133.128898][ T4251] usb 3-1: can't set config #16, error -71
[  133.141298][ T4251] usb 3-1: USB disconnect, device number 4
[  134.452961][ T5094] loop4: detected capacity change from 0 to 131072
[  134.460520][ T4483] usb 1-1: Product: syz
[  134.464880][ T4483] usb 1-1: Manufacturer: syz
[  134.470633][ T4483] usb 1-1: SerialNumber: syz
[  134.492644][ T5095] loop2: detected capacity change from 0 to 512
[  134.516994][ T5094] F2FS-fs (loop4): invalid crc value
[  134.523901][ T5095] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  134.628265][ T4483] usb 1-1: can't set config #171, error -71
[  134.637594][ T4483] usb 1-1: USB disconnect, device number 5
[  135.451999][ T5095] EXT4-fs (loop2): 1 truncate cleaned up
[  135.457692][ T5095] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,barrier,grpjquota=,quota,. Quota mode: writeback.
[  136.080553][ T5094] F2FS-fs (loop4): Found nat_bits in checkpoint
[  136.125733][ T5114] loop0: detected capacity change from 0 to 512
[  136.133099][ T5094] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  136.357977][ T5114] EXT4-fs (loop0): Ignoring removed nobh option
[  136.379216][ T5114] EXT4-fs error (device loop0): ext4_orphan_get:1401: inode #15: comm syz.0.208: iget: bad i_size value: 38620345925642
[  136.495412][ T5114] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.208: couldn't read orphan inode 15 (err -117)
[  136.725322][ T5114] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,,errors=continue. Quota mode: writeback.
[  136.778858][ T4479] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[  136.992644][ T5138] netlink: 4 bytes leftover after parsing attributes in process `syz.2.216'.
[  137.059221][ T4479] usb 2-1: Using ep0 maxpacket: 8
[  137.189933][ T4479] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  137.308859][ T4479] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  137.388299][ T4479] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  137.436570][ T4479] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  137.516264][ T4479] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  137.561353][ T4479] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  137.600725][ T5143] loop3: detected capacity change from 0 to 512
[  137.656701][ T5143] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  137.691640][ T5143] EXT4-fs (loop3): 1 truncate cleaned up
[  137.697287][ T5143] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,barrier,grpjquota=,quota,. Quota mode: writeback.
[  137.969295][ T4479] usb 2-1: GET_CAPABILITIES returned 0
[  138.067532][ T4479] usbtmc 2-1:16.0: can't read capabilities
[  139.165137][ T4479] usb 2-1: USB disconnect, device number 2
[  139.561703][ T5165] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[  139.715555][ T5168] loop4: detected capacity change from 0 to 1024
[  139.757335][ T5168] EXT4-fs (loop4): Unrecognized mount option "smackfsdef=utf8=1" or missing value
[  140.274571][ T5179] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -4
[  140.284274][ T5179] platform regulatory.0: Direct firmware load for regulatory.db failed with error -4
[  140.288858][   T26] audit: type=1800 audit(1763012481.165:24): pid=5179 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.223" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0
[  140.293795][ T5179] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db
[  140.315202][ T5170] can: request_module (can-proto-3) failed.
[  140.603507][ T5193] loop3: detected capacity change from 0 to 512
[  140.658527][ T5192] loop2: detected capacity change from 0 to 256
[  140.780089][ T5196] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5
[  141.311071][ T5193] EXT4-fs (loop3): Ignoring removed nobh option
[  141.359831][ T5192] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  141.386983][ T5193] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.229: iget: bad i_size value: 38620345925642
[  141.427794][ T5193] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.229: couldn't read orphan inode 15 (err -117)
[  141.462933][   T26] audit: type=1800 audit(1763012482.355:25): pid=5192 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.230" name="file2" dev="loop2" ino=1048595 res=0 errno=0
[  141.464114][ T5193] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,,errors=continue. Quota mode: writeback.
[  141.813684][ T5011] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap
[  142.783582][ T5206] loop2: detected capacity change from 0 to 256
[  142.851617][ T5204] loop1: detected capacity change from 0 to 512
[  142.927614][ T5206] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  143.042783][ T5204] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  143.067515][ T5210] loop3: detected capacity change from 0 to 8
[  143.934253][ T5204] EXT4-fs (loop1): 1 truncate cleaned up
[  143.939988][ T5204] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,barrier,grpjquota=,quota,. Quota mode: writeback.
[  145.600755][ T5223] SQUASHFS error: Failed to read block 0x1ec: -5
[  145.641545][ T5223] SQUASHFS error: Unable to read metadata cache entry [1ea]
[  146.296740][   T26] audit: type=1800 audit(1763012487.175:26): pid=5223 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.233" name="file1" dev="loop3" ino=5 res=0 errno=0
[  146.552603][ T5235] Device name cannot be null; rc = [-22]
[  147.412508][ T5246] loop4: detected capacity change from 0 to 512
[  147.595468][ T5246] EXT4-fs (loop4): Ignoring removed nobh option
[  148.354511][ T5255] loop3: detected capacity change from 0 to 256
[  148.366993][ T5255] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  148.489833][ T5246] EXT4-fs error (device loop4): ext4_orphan_get:1401: inode #15: comm syz.4.244: iget: bad i_size value: 38620345925642
[  148.770261][ T5246] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.244: couldn't read orphan inode 15 (err -117)
[  148.871155][ T5246] EXT4-fs (loop4): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,,errors=continue. Quota mode: writeback.
[  149.293761][ T5251] loop2: detected capacity change from 0 to 4096
[  149.832478][ T5251] ntfs3: loop2: Different NTFS' sector size (1024) and media sector size (512)
[  149.847406][ T5266] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  149.857721][ T5266] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  149.865289][ T5266] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  150.169029][ T5268] mmap: syz.0.249 (5268) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst.
[  152.060249][ T5287] loop2: detected capacity change from 0 to 8
[  153.469649][ T5294] SQUASHFS error: Failed to read block 0x1ec: -5
[  153.496715][ T5294] SQUASHFS error: Unable to read metadata cache entry [1ea]
[  155.116300][ T5308] loop1: detected capacity change from 0 to 512
[  155.185875][ T5308] EXT4-fs (loop1): Ignoring removed nobh option
[  155.243788][ T5308] EXT4-fs error (device loop1): ext4_orphan_get:1401: inode #15: comm syz.1.258: iget: bad i_size value: 38620345925642
[  155.273591][ T5308] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.258: couldn't read orphan inode 15 (err -117)
[  155.323041][ T5308] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,,errors=continue. Quota mode: writeback.
[  156.212860][ T5324] loop3: detected capacity change from 0 to 512
[  157.804180][ T5324] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  157.883803][ T5324] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  159.449048][ T5355] loop2: detected capacity change from 0 to 512
[  159.497920][ T5355] EXT4-fs (loop2): Ignoring removed nobh option
[  159.691951][ T5355] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.273: iget: bad i_size value: 38620345925642
[  159.709266][ T5355] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.273: couldn't read orphan inode 15 (err -117)
[  159.765264][ T5355] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,,errors=continue. Quota mode: writeback.
[  159.807192][ T5361] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer.
[  160.725523][ T5374] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  160.741693][ T5374] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  160.751321][ T5374] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  160.998922][ T4483] usb 1-1: new full-speed USB device number 6 using dummy_hcd
[  161.342352][ T5372] netlink: 156 bytes leftover after parsing attributes in process `syz.1.277'.
[  161.499090][ T4483] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  161.532044][ T4483] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x94, skipping
[  161.537616][ T5376] loop2: detected capacity change from 0 to 1024
[  161.660506][ T4483] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  161.869840][ T5376] hfsplus: failed to load catalog file
[  162.488802][ T4483] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae
[  162.549373][ T4483] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  162.573576][ T4483] usb 1-1: Product: syz
[  162.602695][ T4483] usb 1-1: Manufacturer: syz
[  162.607342][ T4483] usb 1-1: SerialNumber: syz
[  162.708867][ T4624] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  163.300455][ T4483] usb 1-1: config 0 descriptor??
[  163.429075][ T4624] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  163.448231][ T5387] loop1: detected capacity change from 0 to 512
[  163.452915][ T4624] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 49657, setting to 1024
[  163.499398][ T4624] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024
[  163.603990][ T4483] usb 1-1: USB disconnect, device number 6
[  163.638936][ T4624] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  163.657633][ T5387] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  163.667375][ T4624] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3
[  163.684618][ T4624] usb 3-1: Product: syz
[  163.690183][ T4624] usb 3-1: SerialNumber: syz
[  163.705301][ T5387] ext4 filesystem being mounted at /71/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  163.930081][ T5376] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  164.561274][ T5389] loop3: detected capacity change from 0 to 32768
[  164.638491][ T5389] (syz.3.282,5389,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  164.661718][ T5405] loop1: detected capacity change from 0 to 512
[  164.679557][ T5389] (syz.3.282,5389,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  164.717910][ T5405] EXT4-fs (loop1): Ignoring removed nobh option
[  164.724914][ T5376] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  164.757363][ T5405] EXT4-fs error (device loop1): ext4_orphan_get:1401: inode #15: comm syz.1.286: iget: bad i_size value: 38620345925642
[  164.777503][ T5405] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.286: couldn't read orphan inode 15 (err -117)
[  164.787766][ T5389] JBD2: Ignoring recovery information on journal
[  164.824813][ T5405] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,,errors=continue. Quota mode: writeback.
[  164.877349][ T5389] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  165.058881][ T4624] cdc_ncm 3-1:1.0: MAC-Address: 42:42:42:42:42:42
[  165.079812][ T4624] cdc_ncm 3-1:1.0: setting rx_max = 16384
[  165.299256][ T4624] cdc_ncm 3-1:1.0: setting tx_max = 88
[  165.503943][ T5412] bridge: RTM_NEWNEIGH with invalid ether address
[  165.552600][ T4624] cdc_ncm 3-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.2-1, CDC NCM, 42:42:42:42:42:42
[  165.704423][ T4624] usb 3-1: USB disconnect, device number 5
[  165.764356][ T4624] cdc_ncm 3-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.2-1, CDC NCM
[  165.859467][ T5418] loop0: detected capacity change from 0 to 512
[  165.923981][ T4184] ocfs2: Unmounting device (7,3) on (node local)
[  166.391415][ T5418] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  166.483127][ T5418] EXT4-fs (loop0): 1 truncate cleaned up
[  166.489373][ T5418] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,barrier,grpjquota=,quota,. Quota mode: writeback.
[  166.616080][ T5433] loop1: detected capacity change from 0 to 512
[  166.703793][ T5433] EXT4-fs (loop1): DAX enabled. Warning: EXPERIMENTAL, use at your own risk
[  166.741927][ T5433] EXT4-fs (loop1): can't mount with both data=journal and dax
[  166.958039][ T5439] loop0: detected capacity change from 0 to 512
[  167.287606][ T5439] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  167.288291][ T5439] ext4 filesystem being mounted at /57/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  168.214697][ T5455] capability: warning: `syz.4.299' uses 32-bit capabilities (legacy support in use)
[  168.939738][ T5474] loop0: detected capacity change from 0 to 512
[  169.027599][ T5474] EXT4-fs (loop0): Ignoring removed nobh option
[  169.055189][ T5482] loop3: detected capacity change from 0 to 512
[  169.072998][ T5481] device syzkaller0 entered promiscuous mode
[  169.082017][ T5474] EXT4-fs error (device loop0): ext4_orphan_get:1401: inode #15: comm syz.0.300: iget: bad i_size value: 38620345925642
[  169.125805][ T5482] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  169.142629][ T5429] loop2: detected capacity change from 0 to 32768
[  169.146711][ T5474] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.300: couldn't read orphan inode 15 (err -117)
[  169.232795][ T5474] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,,errors=continue. Quota mode: writeback.
[  169.234310][ T5482] EXT4-fs (loop3): 1 truncate cleaned up
[  169.254034][ T5482] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,barrier,grpjquota=,quota,. Quota mode: writeback.
[  169.325142][ T5429] (syz.2.293,5429,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  169.395187][ T5429] (syz.2.293,5429,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  169.498873][ T5429] (syz.2.293,5429,1):ocfs2_initialize_super:2313 ERROR: status = -12
[  169.526033][ T5429] (syz.2.293,5429,1):ocfs2_fill_super:1177 ERROR: status = -12
[  170.092877][ T5495] loop3: detected capacity change from 0 to 256
[  170.598907][ T4634] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  170.985152][ T5495] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  171.003796][   T26] audit: type=1800 audit(1763012511.895:27): pid=5495 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.308" name="file2" dev="loop3" ino=1048604 res=0 errno=0
[  171.169929][ T5508] loop0: detected capacity change from 0 to 512
[  171.178833][ T4634] usb 3-1: Using ep0 maxpacket: 16
[  171.265542][ T5510] bridge0: port 3(gretap0) entered blocking state
[  171.272438][ T5510] bridge0: port 3(gretap0) entered disabled state
[  171.289929][ T5510] device gretap0 entered promiscuous mode
[  171.300055][ T5510] bridge0: port 3(gretap0) entered blocking state
[  171.306804][ T5510] bridge0: port 3(gretap0) entered forwarding state
[  171.969255][ T4634] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  171.994796][ T5508] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  172.050124][ T5508] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  172.102900][ T4634] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  172.634558][ T4634] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1d00, bcdDevice= 0.00
[  172.709097][ T4634] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  172.985031][ T4634] usb 3-1: config 0 descriptor??
[  173.159327][ T5539] netlink: 1260 bytes leftover after parsing attributes in process `syz.2.317'.
[  173.225518][ T4634] usb 3-1: string descriptor 0 read error: -71
[  173.266235][ T4634] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[  173.641372][ T4634] usb 3-1: USB disconnect, device number 6
[  173.674443][ T5547] loop3: detected capacity change from 0 to 512
[  175.369772][ T5547] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  175.400838][ T5547] EXT4-fs (loop3): 1 truncate cleaned up
[  175.406542][ T5547] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,barrier,grpjquota=,quota,. Quota mode: writeback.
[  175.502426][ T5553] loop0: detected capacity change from 0 to 512
[  175.575554][ T5557] loop2: detected capacity change from 0 to 256
[  175.637456][ T5557] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  175.655149][   T26] audit: type=1800 audit(1763012516.545:28): pid=5557 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.323" name="file2" dev="loop2" ino=1048605 res=0 errno=0
[  175.679171][ T5553] EXT4-fs (loop0): Ignoring removed nobh option
[  175.788767][ T1107] Bluetooth: hci4: command 0x0406 tx timeout
[  175.818716][ T1107] Bluetooth: hci2: command 0x0406 tx timeout
[  175.825890][ T1107] Bluetooth: hci1: command 0x0406 tx timeout
[  175.917664][ T5565] bridge0: port 3(gretap0) entered blocking state
[  175.924362][ T5565] bridge0: port 3(gretap0) entered disabled state
[  175.937363][ T5565] device gretap0 entered promiscuous mode
[  175.946315][ T5565] bridge0: port 3(gretap0) entered blocking state
[  175.952811][ T5565] bridge0: port 3(gretap0) entered forwarding state
[  176.449637][ T5563] loop3: detected capacity change from 0 to 512
[  176.472626][ T5553] EXT4-fs error (device loop0): ext4_orphan_get:1401: inode #15: comm syz.0.321: iget: bad i_size value: 38620345925642
[  176.564442][ T5559] syz.1.324 (5559): drop_caches: 2
[  176.576250][ T5553] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.321: couldn't read orphan inode 15 (err -117)
[  176.660480][ T5553] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,,errors=continue. Quota mode: writeback.
[  176.677054][ T5563] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  176.729023][ T5563] ext4 filesystem being mounted at /69/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  178.943625][ T5595] loop1: detected capacity change from 0 to 512
[  179.005316][ T5595] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  179.032149][ T5595] EXT4-fs (loop1): 1 truncate cleaned up
[  179.038131][ T5595] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,barrier,grpjquota=,quota,. Quota mode: writeback.
[  179.399494][ T4174] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  179.445585][ T5603] loop1: detected capacity change from 0 to 64
[  179.798815][ T4174] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  179.818101][ T4174] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  179.854991][ T5608] Zero length message leads to an empty skb
[  179.878926][ T5592] loop3: detected capacity change from 0 to 40427
[  179.895503][ T4174] usb 3-1: config 0 descriptor??
[  180.889166][ T4174] [drm] vendor descriptor length:6 data:06 5f 01 88 00 00 00 00 00 00 00
[  180.897780][ T4174] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor
[  181.044342][ T5592] F2FS-fs (loop3): build fault injection attr: rate: 771, type: 0x1ffff
[  181.090443][ T5592] F2FS-fs (loop3): invalid crc value
[  181.098907][ T4174] [drm:udl_init] *ERROR* Selecting channel failed
[  181.152634][ T5612] loop0: detected capacity change from 0 to 256
[  181.153228][ T4174] [drm] Initialized udl 0.0.1 20120220 for 3-1:0.0 on minor 2
[  181.180683][ T5592] F2FS-fs (loop3): Found nat_bits in checkpoint
[  181.226137][ T5616] loop1: detected capacity change from 0 to 512
[  181.248711][ T4174] [drm] Initialized udl on minor 2
[  181.257896][ T5612] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  181.276146][   T26] audit: type=1800 audit(1763012522.165:29): pid=5612 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.337" name="file2" dev="loop0" ino=1048606 res=0 errno=0
[  181.388177][ T5592] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  181.405066][ T4174] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9
[  181.422966][ T4174] udl 3-1:0.0: [drm] Cannot find any crtc or sizes
[  181.494170][ T5616] EXT4-fs (loop1): Ignoring removed nobh option
[  181.534343][ T5621] bridge0: port 3(gretap0) entered blocking state
[  181.540860][ T5621] bridge0: port 3(gretap0) entered disabled state
[  181.548283][ T5621] device gretap0 entered promiscuous mode
[  181.554529][ T5621] bridge0: port 3(gretap0) entered blocking state
[  181.561014][ T5621] bridge0: port 3(gretap0) entered forwarding state
[  181.630993][ T4174] usb 3-1: USB disconnect, device number 7
[  181.648669][ T1107] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed
[  181.674249][ T1107] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed
[  181.686237][ T1107] udl 3-1:0.0: [drm] Cannot find any crtc or sizes
[  182.286229][ T5616] EXT4-fs error (device loop1): ext4_orphan_get:1401: inode #15: comm syz.1.338: iget: bad i_size value: 38620345925642
[  182.326752][ T5616] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.338: couldn't read orphan inode 15 (err -117)
[  182.347553][ T4184] attempt to access beyond end of device
[  182.347553][ T4184] loop3: rw=2049, want=45104, limit=40427
[  182.453884][ T5616] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,,errors=continue. Quota mode: writeback.
[  184.667473][ T5636] loop1: detected capacity change from 0 to 512
[  184.848935][ T5636] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  184.988312][ T5636] EXT4-fs (loop1): 1 truncate cleaned up
[  184.994093][ T5636] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,barrier,grpjquota=,quota,. Quota mode: writeback.
[  185.573910][ T5651] 9pnet: Insufficient options for proto=fd
[  189.554728][ T5677] loop3: detected capacity change from 0 to 512
[  189.801140][ T4174] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  189.845047][ T5677] EXT4-fs (loop3): Ignoring removed nobh option
[  190.223420][ T5677] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.354: iget: bad i_size value: 38620345925642
[  190.328763][ T4174] usb 3-1: Using ep0 maxpacket: 32
[  190.342362][ T5677] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.354: couldn't read orphan inode 15 (err -117)
[  190.428386][ T5677] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,,errors=continue. Quota mode: writeback.
[  190.611614][ T4174] usb 3-1: config 0 has an invalid descriptor of length 102, skipping remainder of the config
[  191.076154][ T5700] loop0: detected capacity change from 0 to 512
[  191.098005][ T5678] chnl_net:caif_netlink_parms(): no params data found
[  191.106878][ T4174] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  191.153749][ T5700] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  191.171810][ T5700] EXT4-fs (loop0): 1 truncate cleaned up
[  191.177561][ T5700] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,barrier,grpjquota=,quota,. Quota mode: writeback.
[  191.299302][ T4174] usb 3-1: New USB device found, idVendor=413c, idProduct=819b, bcdDevice=a7.c0
[  191.328788][ T4174] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  191.338869][ T4174] usb 3-1: Product: syz
[  191.348948][ T4174] usb 3-1: Manufacturer: syz
[  191.358741][ T4174] usb 3-1: SerialNumber: syz
[  191.453563][ T4174] usb 3-1: config 0 descriptor??
[  191.698867][ T4468] Bluetooth: hci5: command 0x0409 tx timeout
[  191.779931][ T4174] qmi_wwan: probe of 3-1:0.0 failed with error -22
[  191.824761][ T4174] usb 3-1: USB disconnect, device number 8
[  192.067930][ T5708] loop1: detected capacity change from 0 to 4096
[  193.461985][ T5708] ntfs3: Unknown parameter 'd�sk'
[  193.671311][ T5711] syz.3.359 (5711): drop_caches: 2
[  193.750982][ T5678] bridge0: port 1(bridge_slave_0) entered blocking state
[  193.778905][ T4296] Bluetooth: hci5: command 0x041b tx timeout
[  193.820144][ T5678] bridge0: port 1(bridge_slave_0) entered disabled state
[  193.828256][ T5678] device bridge_slave_0 entered promiscuous mode
[  193.923730][ T5678] bridge0: port 2(bridge_slave_1) entered blocking state
[  193.975409][ T5678] bridge0: port 2(bridge_slave_1) entered disabled state
[  194.087821][ T4468] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  194.105235][ T5678] device bridge_slave_1 entered promiscuous mode
[  194.209614][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  194.218551][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  195.047928][ T4468] usb 3-1: Using ep0 maxpacket: 32
[  195.479132][ T4468] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  195.536798][ T4468] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  195.706477][ T4468] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  195.716584][ T4468] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  195.729044][ T4468] usb 3-1: config 0 descriptor??
[  195.744867][ T5678] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  195.877986][ T5678] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  195.894165][ T4296] Bluetooth: hci5: command 0x040f tx timeout
[  196.795610][ T5678] team0: Port device team_slave_0 added
[  196.999788][ T5678] team0: Port device team_slave_1 added
[  197.023108][ T4468] usbhid 3-1:0.0: can't add hid device: -71
[  197.033588][ T5740] loop2: detected capacity change from 0 to 512
[  197.041262][ T4468] usbhid: probe of 3-1:0.0 failed with error -71
[  197.072544][ T4468] usb 3-1: USB disconnect, device number 9
[  197.705258][ T5743] loop3: detected capacity change from 0 to 512
[  197.830628][ T5743] EXT4-fs (loop3): Ignoring removed nobh option
[  197.948882][ T2381] Bluetooth: hci5: command 0x0419 tx timeout
[  198.004656][ T5740] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  198.020225][ T5678] batman_adv: batadv0: Adding interface: batadv_slave_0
[  198.042249][ T5740] EXT4-fs (loop2): 1 truncate cleaned up
[  198.047919][ T5740] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,barrier,grpjquota=,quota,. Quota mode: writeback.
[  198.139692][ T5743] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.369: iget: bad i_size value: 38620345925642
[  198.574653][ T5743] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.369: couldn't read orphan inode 15 (err -117)
[  198.607799][ T5678] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  198.670691][ T5743] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,,errors=continue. Quota mode: writeback.
[  200.095088][ T5678] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  200.150129][ T5678] batman_adv: batadv0: Adding interface: batadv_slave_1
[  200.157097][ T5678] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  200.503483][ T5678] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  201.546186][ T5678] device hsr_slave_0 entered promiscuous mode
[  202.359409][ T5678] device hsr_slave_1 entered promiscuous mode
[  202.378918][ T5775] netlink: 4 bytes leftover after parsing attributes in process `syz.1.377'.
[  202.395153][ T5678] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  202.478785][ T5678] Cannot create hsr debugfs directory
[  206.160507][ T5803] loop1: detected capacity change from 0 to 512
[  206.175935][ T5808] loop2: detected capacity change from 0 to 512
[  206.222582][ T5808] EXT4-fs (loop2): Ignoring removed nobh option
[  206.393374][ T5808] EXT4-fs error (device loop2): ext4_orphan_get:1401: inode #15: comm syz.2.385: iget: bad i_size value: 38620345925642
[  206.606990][ T5808] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.385: couldn't read orphan inode 15 (err -117)
[  206.700352][ T5808] EXT4-fs (loop2): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,,errors=continue. Quota mode: writeback.
[  207.133946][ T5803] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  207.290881][ T5803] EXT4-fs (loop1): 1 truncate cleaned up
[  207.303454][ T5803] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,barrier,grpjquota=,quota,. Quota mode: writeback.
[  208.294347][ T5678] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  208.794560][ T5678] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  208.890848][ T5678] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  209.152364][ T5831] hpfs: Bad magic ... probably not HPFS
[  209.234905][ T5678] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  210.209967][ T5678] 8021q: adding VLAN 0 to HW filter on device bond0
[  210.246669][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[  210.279206][ T4251] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  210.286792][ T2381] usb 3-1: new full-speed USB device number 10 using dummy_hcd
[  210.300793][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  210.314012][ T5678] 8021q: adding VLAN 0 to HW filter on device team0
[  210.327699][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[  210.350406][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  210.360085][    T9] bridge0: port 1(bridge_slave_0) entered blocking state
[  210.367157][    T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[  210.394747][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[  210.408318][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[  210.418511][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  210.429640][    T9] bridge0: port 2(bridge_slave_1) entered blocking state
[  210.436730][    T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[  210.448958][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[  210.468961][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[  210.487520][ T5678] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  210.530211][ T4251] usb 1-1: Using ep0 maxpacket: 32
[  210.671185][ T5678] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  210.691444][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[  210.709095][ T4251] usb 1-1: config 0 has an invalid interface number: 188 but max is 0
[  210.717578][ T2381] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  210.718425][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  210.737810][ T4251] usb 1-1: config 0 has no interface number 0
[  210.747948][ T2381] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  210.761232][ T4251] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[  210.783655][ T5847] loop3: detected capacity change from 0 to 4096
[  210.785042][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[  210.790084][ T2381] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  210.790109][ T2381] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  211.060699][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  211.069908][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[  211.078454][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  211.087945][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[  211.096952][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  211.104932][ T2381] usb 3-1: usb_control_msg returned -32
[  211.110648][ T2381] usbtmc 3-1:16.0: can't read capabilities
[  211.121583][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  211.135424][    T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  211.169445][ T4251] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[  211.179818][ T4251] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  211.189182][ T4251] usb 1-1: Product: syz
[  211.193970][ T4251] usb 1-1: Manufacturer: syz
[  211.198724][ T4251] usb 1-1: SerialNumber: syz
[  211.203417][ T5847] ntfs3: loop3: ino=21, "blkio.bfq.avg_queue_size" mmap(write) compressed not supported
[  211.205100][ T4251] usb 1-1: config 0 descriptor??
[  211.239362][ T5844] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  211.311653][ T4184] ntfs3: loop3: ntfs_evict_inode r=5 failed, -22.
[  211.352689][ T4184] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  211.422218][  T243] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  211.449323][  T243] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  211.489200][ T5844] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  211.678432][ T5678] 8021q: adding VLAN 0 to HW filter on device batadv0
[  212.436684][ T5863] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability
[  212.488519][ T5868] loop3: detected capacity change from 0 to 512
[  212.496626][ T5863] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16
[  212.576759][ T5868] EXT4-fs (loop3): Ignoring removed nobh option
[  212.616395][ T5868] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.398: iget: bad i_size value: 38620345925642
[  212.635436][ T5868] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.398: couldn't read orphan inode 15 (err -117)
[  212.647767][ T5868] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,,errors=continue. Quota mode: writeback.
[  212.694132][ T4314] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  212.847110][ T4314] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  213.179012][ T5872] EXT4-fs error (device loop3): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap
[  213.216858][ T4314] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  213.334066][ T4633] usb 3-1: USB disconnect, device number 10
[  213.383297][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[  213.419776][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  213.566092][ T5678] device veth0_vlan entered promiscuous mode
[  213.622561][ T5678] device veth1_vlan entered promiscuous mode
[  213.633675][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[  213.648344][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  214.183936][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  214.230352][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  214.298712][ T4251] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  214.426356][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  214.451398][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  214.459238][ T4251] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9
[  214.471555][ T4251] asix: probe of 1-1:0.188 failed with error -71
[  214.483601][ T4251] usb 1-1: USB disconnect, device number 7
[  214.505761][ T4314] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  214.543910][ T5884] device vlan3 entered promiscuous mode
[  214.549583][ T5884] device bridge0 entered promiscuous mode
[  214.653132][ T5894] loop2: detected capacity change from 0 to 512
[  214.673766][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): vlan3: link becomes ready
[  214.689108][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[  214.705381][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  214.724083][ T5894] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  214.845395][ T5678] device veth0_macvtap entered promiscuous mode
[  214.856424][ T5894] EXT4-fs (loop2): 1 truncate cleaned up
[  214.862090][ T5894] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,barrier,grpjquota=,quota,. Quota mode: writeback.
[  215.176029][ T5678] device veth1_macvtap entered promiscuous mode
[  215.355347][ T5678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  215.366066][ T5678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  216.497840][ T5678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  216.548678][ T5678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  216.574970][ T5678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  216.593341][ T5678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  216.664084][ T5678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  216.695344][ T5678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  216.732921][ T5678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  216.750066][ T5678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  216.764210][ T5678] batman_adv: batadv0: Interface activated: batadv_slave_0
[  217.458150][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  217.470097][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[  217.479363][ T4499] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  217.507736][ T5678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  217.528563][ T5678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  217.548758][ T5678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  217.568664][ T5678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  217.579309][ T5923] loop1: detected capacity change from 0 to 4096
[  217.587038][ T5678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  217.606400][ T5678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  217.616985][ T5678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  217.628697][ T5678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  217.641784][ T5678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  217.652884][ T5678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  217.740446][ T5678] batman_adv: batadv0: Interface activated: batadv_slave_1
[  217.761078][ T5916] loop3: detected capacity change from 0 to 32768
[  217.789432][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  217.823634][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  217.905911][ T5916] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 scanned by syz.3.408 (5916)
[  217.992520][ T5678] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  218.007183][ T5678] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  218.016092][ T5678] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  218.024886][ T5678] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  218.122343][ T5916] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm
[  218.247012][ T5916] BTRFS info (device loop3): using free space tree
[  218.434604][ T5916] BTRFS info (device loop3): has skinny extents
[  219.240191][ T4313] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  219.281291][ T4313] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  219.305549][ T5916] BTRFS info (device loop3): enabling ssd optimizations
[  219.413048][ T4174] usb 2-1: new full-speed USB device number 3 using dummy_hcd
[  219.436130][  T151] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[  219.460267][  T151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  219.477925][  T151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  219.499501][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[  220.635444][ T4174] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  221.599335][ T4174] usb 2-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00
[  221.641827][ T4174] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  221.734034][ T4174] usb 2-1: config 0 descriptor??
[  221.780678][ T4174] usb 2-1: can't set config #0, error -71
[  221.859945][ T4174] usb 2-1: USB disconnect, device number 3
[  222.121552][ T6008] loop3: detected capacity change from 0 to 512
[  222.718206][ T6008] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  222.802655][ T6005] loop1: detected capacity change from 0 to 4096
[  222.806065][ T6008] EXT4-fs (loop3): 1 truncate cleaned up
[  222.814772][ T6008] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,barrier,grpjquota=,quota,. Quota mode: writeback.
[  223.436370][ T6005] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  223.559813][ T6005] ntfs3: loop1: Failed to load $Extend.
[  223.766428][   T26] audit: type=1326 audit(1763012564.655:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6036 comm="syz.3.429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb4a6936c9 code=0x7ffc0000
[  223.791255][   T26] audit: type=1326 audit(1763012564.655:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6036 comm="syz.3.429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb4a6936c9 code=0x7ffc0000
[  223.814124][   T26] audit: type=1326 audit(1763012564.655:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6036 comm="syz.3.429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=7 compat=0 ip=0x7fcb4a6936c9 code=0x7ffc0000
[  223.961123][   T26] audit: type=1326 audit(1763012564.655:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6036 comm="syz.3.429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb4a6936c9 code=0x7ffc0000
[  224.057293][   T26] audit: type=1326 audit(1763012564.655:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6036 comm="syz.3.429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb4a6936c9 code=0x7ffc0000
[  224.227129][   T26] audit: type=1326 audit(1763012564.685:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6036 comm="syz.3.429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcb4a6936c9 code=0x7ffc0000
[  224.375018][   T26] audit: type=1326 audit(1763012564.685:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6036 comm="syz.3.429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb4a6936c9 code=0x7ffc0000
[  224.419110][ T6004] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  224.492474][ T4314] device hsr_slave_0 left promiscuous mode
[  224.505847][   T26] audit: type=1326 audit(1763012564.685:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6036 comm="syz.3.429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb4a6936c9 code=0x7ffc0000
[  224.536792][ T4314] device hsr_slave_1 left promiscuous mode
[  224.544628][ T4314] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  224.556305][ T4314] batman_adv: batadv0: Removing interface: batadv_slave_0
[  224.563628][   T26] audit: type=1326 audit(1763012564.685:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6036 comm="syz.3.429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcb4a6936c9 code=0x7ffc0000
[  224.593218][ T4314] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  224.612287][ T4314] batman_adv: batadv0: Removing interface: batadv_slave_1
[  224.625828][ T4314] device bridge_slave_1 left promiscuous mode
[  224.635495][   T26] audit: type=1326 audit(1763012564.685:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6036 comm="syz.3.429" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcb4a6936c9 code=0x7ffc0000
[  224.658691][ T6004] usb 2-1: Using ep0 maxpacket: 32
[  224.669768][ T4314] bridge0: port 2(bridge_slave_1) entered disabled state
[  224.749231][ T4314] device bridge_slave_0 left promiscuous mode
[  224.755503][ T4314] bridge0: port 1(bridge_slave_0) entered disabled state
[  224.778922][ T6004] usb 2-1: config 0 has an invalid interface number: 16 but max is 0
[  224.811157][ T6004] usb 2-1: config 0 has no interface number 0
[  224.818095][ T6004] usb 2-1: config 0 interface 16 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  224.828325][ T6004] usb 2-1: config 0 interface 16 altsetting 0 endpoint 0x82 has invalid maxpacket 30768, setting to 1024
[  224.841351][ T6004] usb 2-1: config 0 interface 16 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024
[  224.906824][ T4314] device veth1_macvtap left promiscuous mode
[  224.941216][ T4314] device veth0_macvtap left promiscuous mode
[  225.088870][ T6004] usb 2-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d
[  225.092290][ T4314] device veth1_vlan left promiscuous mode
[  225.097949][ T6004] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  225.122214][ T4314] device veth0_vlan left promiscuous mode
[  225.541338][ T6004] usb 2-1: Product: syz
[  225.549130][ T6004] usb 2-1: Manufacturer: syz
[  225.564772][ T6004] usb 2-1: SerialNumber: syz
[  225.689736][ T6004] usb 2-1: config 0 descriptor??
[  225.719154][ T6048] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  226.564903][ T6048] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  227.100622][ T6080] udc-core: couldn't find an available UDC or it's busy
[  227.107713][ T6080] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  228.023368][ T6084] loop2: detected capacity change from 0 to 512
[  228.077729][ T6084] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  228.173008][ T6084] EXT4-fs (loop2): 1 truncate cleaned up
[  228.178771][ T6084] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,barrier,grpjquota=,quota,. Quota mode: writeback.
[  228.409068][ T6004] usb 2-1: USB disconnect, device number 4
[  228.946166][ T4314] team0 (unregistering): Port device team_slave_1 removed
[  228.976969][ T4314] team0 (unregistering): Port device team_slave_0 removed
[  229.002873][ T4314] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  229.033758][ T4314] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  229.170814][ T4505] udevd[4505]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.16/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  229.215373][ T4314] bond0 (unregistering): Released all slaves
[  229.286614][ T6089] loop0: detected capacity change from 0 to 40427
[  229.377938][ T6089] F2FS-fs (loop0): build fault injection attr: rate: 771, type: 0x1ffff
[  229.461137][ T6083] netlink: 'syz.5.438': attribute type 3 has an invalid length.
[  229.490938][ T6089] F2FS-fs (loop0): invalid crc value
[  229.502427][ T6083] netlink: 'syz.5.438': attribute type 3 has an invalid length.
[  229.541253][ T6083] netlink: 'syz.5.438': attribute type 3 has an invalid length.
[  229.552950][ T6089] F2FS-fs (loop0): Found nat_bits in checkpoint
[  229.581811][ T6083] netlink: 'syz.5.438': attribute type 3 has an invalid length.
[  229.629381][ T6083] netlink: 'syz.5.438': attribute type 3 has an invalid length.
[  229.868505][ T6083] netlink: 'syz.5.438': attribute type 3 has an invalid length.
[  229.964081][ T6083] netlink: 'syz.5.438': attribute type 3 has an invalid length.
[  230.197168][ T6089] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  230.218546][ T6083] netlink: 'syz.5.438': attribute type 3 has an invalid length.
[  230.238534][ T6083] netlink: 'syz.5.438': attribute type 3 has an invalid length.
[  230.257288][ T6083] netlink: 'syz.5.438': attribute type 3 has an invalid length.
[  230.326928][ T4185] attempt to access beyond end of device
[  230.326928][ T4185] loop0: rw=2049, want=45104, limit=40427
[  231.628896][ T4228] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  231.953507][ T4228] usb 4-1: Using ep0 maxpacket: 16
[  232.306788][ T4228] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  232.348683][ T4228] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  232.398719][ T4228] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1d00, bcdDevice= 0.00
[  232.448492][ T4228] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  232.659833][ T4228] usb 4-1: config 0 descriptor??
[  234.048828][ T4228] usb 4-1: string descriptor 0 read error: -71
[  234.057089][ T4228] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[  234.130361][ T4228] usb 4-1: USB disconnect, device number 4
[  234.139954][ T6155] loop0: detected capacity change from 0 to 512
[  234.899494][ T6155] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  235.001381][ T6155] EXT4-fs (loop0): 1 truncate cleaned up
[  235.007038][ T6155] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,barrier,grpjquota=,quota,. Quota mode: writeback.
[  236.557165][ T6178] validate_nla: 43 callbacks suppressed
[  236.557181][ T6178] netlink: 'syz.3.462': attribute type 39 has an invalid length.
[  236.843823][ T6182] syz.5.464 uses obsolete (PF_INET,SOCK_PACKET)
[  237.483306][ T6194] loop1: detected capacity change from 0 to 2048
[  237.695017][ T6194] EXT4-fs (loop1): Unrecognized mount option "hash" or missing value
[  238.799159][ T2381] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  238.842483][ T6210] loop1: detected capacity change from 0 to 1024
[  239.095668][ T6174] loop2: detected capacity change from 0 to 40427
[  239.140881][ T2381] usb 4-1: Using ep0 maxpacket: 16
[  239.153311][ T6220] loop5: detected capacity change from 0 to 512
[  239.163447][ T6174] F2FS-fs (loop2): Unrecognized mount option "age_extent_cache" or missing value
[  239.226967][ T6220] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  239.288899][ T2381] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  239.307743][ T2381] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  239.321195][ T2381] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1d00, bcdDevice= 0.00
[  239.331808][ T2381] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  239.342615][ T2381] usb 4-1: config 0 descriptor??
[  239.366812][ T6220] EXT4-fs (loop5): 1 truncate cleaned up
[  239.372589][ T6220] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,barrier,grpjquota=,quota,. Quota mode: writeback.
[  239.962831][ T6105] hfsplus: b-tree write err: -5, ino 4
[  240.778764][ T2381] usb 4-1: string descriptor 0 read error: -71
[  240.789182][ T2381] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[  241.446906][ T6234] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  241.483325][ T2381] usb 4-1: USB disconnect, device number 5
[  242.119850][ T6260] loop0: detected capacity change from 0 to 512
[  242.201996][ T6260] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  242.259529][ T6260] ext4 filesystem being mounted at /103/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  242.716789][ T6278] Bluetooth: received HCILL_WAKE_UP_IND in state 2
[  243.125047][ T4268] Bluetooth: hci4: Frame reassembly failed (-84)
[  243.655499][ T6282] loop2: detected capacity change from 0 to 512
[  243.685423][ T6283] loop5: detected capacity change from 0 to 512
[  243.716160][ T6282] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  243.772107][ T6282] EXT4-fs (loop2): 1 truncate cleaned up
[  243.777782][ T6282] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,barrier,grpjquota=,quota,. Quota mode: writeback.
[  244.493345][ T6283] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x05417272 (sector = 1)
[  244.881548][ T6283] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  245.149955][ T4228] Bluetooth: hci4: command 0x1003 tx timeout
[  245.156553][ T4199] Bluetooth: hci4: sending frame failed (-49)
[  245.798990][ T2381] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  246.078892][ T2381] usb 1-1: Using ep0 maxpacket: 16
[  246.198924][ T2381] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  246.237404][ T2381] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  246.288051][ T2381] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1d00, bcdDevice= 0.00
[  246.332910][ T2381] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  246.399430][ T2381] usb 1-1: config 0 descriptor??
[  247.229077][ T4228] Bluetooth: hci4: command 0x1001 tx timeout
[  247.244935][ T4199] Bluetooth: hci4: sending frame failed (-49)
[  247.376099][ T6331] loop5: detected capacity change from 0 to 512
[  247.432045][ T6331] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  247.444629][ T6331] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  248.387367][ T2381] usb 1-1: string descriptor 0 read error: -71
[  248.539113][ T2381] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[  248.677258][ T2381] usb 1-1: USB disconnect, device number 8
[  248.954778][ T6347] loop2: detected capacity change from 0 to 512
[  248.992927][ T6347] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  249.043813][ T6347] EXT4-fs (loop2): 1 truncate cleaned up
[  249.049572][ T6347] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,barrier,grpjquota=,quota,. Quota mode: writeback.
[  249.308730][ T4174] Bluetooth: hci4: command 0x1009 tx timeout
[  250.758521][ T6390] loop5: detected capacity change from 0 to 512
[  250.778885][ T4293] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  250.886429][ T6390] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  250.898992][ T6390] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  250.948722][ T4174] usb 4-1: new full-speed USB device number 6 using dummy_hcd
[  251.293402][ T4293] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  251.304603][ T4293] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  251.316440][ T4293] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  251.334280][ T4293] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  251.387934][ T4293] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  251.499716][ T4293] usb 1-1: config 0 descriptor??
[  252.388169][ T4293] plantronics 0003:047F:FFFF.0001: No inputs registered, leaving
[  252.891089][ T4293] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  252.978047][ T4293] usb 1-1: USB disconnect, device number 9
[  253.148876][ T4174] usb 4-1: unable to get BOS descriptor or descriptor too short
[  253.318991][ T4483] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  253.532220][ T4174] usb 4-1: unable to read config index 0 descriptor/start: -71
[  253.604849][ T4174] usb 4-1: can't read configurations, error -71
[  253.669000][ T4483] usb 6-1: Using ep0 maxpacket: 16
[  253.970440][ T6436] fido_id[6436]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory
[  254.081468][ T4483] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  254.184795][ T4483] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  254.200427][ T4483] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1d00, bcdDevice= 0.00
[  254.219464][ T4483] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  254.631136][ T4483] usb 6-1: config 0 descriptor??
[  254.928929][ T4483] usb 6-1: string descriptor 0 read error: -71
[  254.982464][ T4483] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[  254.991593][ T4483] usb 6-1: USB disconnect, device number 2
[  255.176876][ T6461] loop5: detected capacity change from 0 to 512
[  255.622112][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  255.630070][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  255.993161][ T6461] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  256.098474][ T6461] ext4 filesystem being mounted at /22/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  257.682032][ T6500] loop1: detected capacity change from 0 to 2048
[  258.382343][ T6500] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found
[  258.413928][ T6500] UDF-fs: Scanning with blocksize 512 failed
[  258.453832][ T6500] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  260.218217][ T6525] loop1: detected capacity change from 0 to 512
[  260.310623][ T2381] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  260.638467][ T2381] usb 1-1: Using ep0 maxpacket: 16
[  260.819206][ T6525] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  260.907750][ T6525] ext4 filesystem being mounted at /128/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  260.962260][ T6525] EXT4-fs error (device loop1): ext4_do_update_inode:5218: inode #2: comm syz.1.537: corrupted inode contents
[  261.018891][ T2381] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  261.031277][ T2381] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  261.044796][ T2381] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1d00, bcdDevice= 0.00
[  261.054177][ T2381] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  261.074987][ T2381] usb 1-1: config 0 descriptor??
[  261.179191][ T6525] EXT4-fs error (device loop1): ext4_dirty_inode:6054: inode #2: comm syz.1.537: mark_inode_dirty error
[  261.192783][ T6535] loop5: detected capacity change from 0 to 512
[  261.200605][ T6525] EXT4-fs error (device loop1): ext4_do_update_inode:5218: inode #2: comm syz.1.537: corrupted inode contents
[  261.290793][ T6535] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  261.317757][ T6535] ext4 filesystem being mounted at /24/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  262.448778][ T2381] usb 1-1: string descriptor 0 read error: -71
[  262.614644][ T2381] usbhid 1-1:0.0: couldn't find an input interrupt endpoint
[  262.616148][ T6560] bridge0: port 3(vlan2) entered blocking state
[  262.638890][ T6560] bridge0: port 3(vlan2) entered disabled state
[  262.677560][ T2381] usb 1-1: USB disconnect, device number 10
[  262.700886][ T6560] device vlan2 entered promiscuous mode
[  262.744338][ T6560] device bond0 entered promiscuous mode
[  262.791438][ T6560] device bond_slave_0 entered promiscuous mode
[  262.873455][ T6560] device bond_slave_1 entered promiscuous mode
[  262.893669][ T6560] bridge0: port 3(vlan2) entered blocking state
[  262.900576][ T6560] bridge0: port 3(vlan2) entered forwarding state
[  263.085325][ T6563] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  263.110878][ T4477] usb 2-1: new full-speed USB device number 5 using dummy_hcd
[  263.223788][ T6563] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  263.275946][ T6563] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  263.320775][ T6563] device bridge_slave_0 left promiscuous mode
[  263.342034][ T6563] bridge0: port 1(bridge_slave_0) entered disabled state
[  263.361242][ T6563] device bridge_slave_1 left promiscuous mode
[  263.367573][ T6563] bridge0: port 2(bridge_slave_1) entered disabled state
[  263.379841][ T6563] bond0: (slave bond_slave_0): Releasing backup interface
[  263.394594][ T6563] device bond_slave_0 left promiscuous mode
[  263.477146][ T6563] bond0: (slave bond_slave_1): Releasing backup interface
[  263.478990][ T4477] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  263.497949][ T6563] device bond_slave_1 left promiscuous mode
[  263.543412][ T6563] team0: Port device team_slave_0 removed
[  263.559071][ T4477] usb 2-1: config 0 interface 0 has no altsetting 0
[  263.565492][ T6563] team0: Port device team_slave_1 removed
[  263.573450][ T6563] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  263.582716][ T6563] batman_adv: batadv0: Removing interface: batadv_slave_0
[  263.597830][ T6563] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  263.606344][ T6563] batman_adv: batadv0: Removing interface: batadv_slave_1
[  263.633750][ T6563] device vlan2 left promiscuous mode
[  263.658015][ T6563] device bond0 left promiscuous mode
[  263.679490][ T6563] bridge0: port 3(vlan2) entered disabled state
[  263.770102][ T4477] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  263.822504][ T4477] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  263.881960][ T4477] usb 2-1: Product: syz
[  263.886232][ T4477] usb 2-1: Manufacturer: syz
[  263.898988][ T6563] syz.5.544 (6563) used greatest stack depth: 19904 bytes left
[  263.911832][ T4477] usb 2-1: SerialNumber: syz
[  263.999048][ T4477] usb 2-1: config 0 descriptor??
[  264.280668][ T4477] usb 2-1: selecting invalid altsetting 0
[  264.820852][ T6595] usb 2-1: selecting invalid altsetting 0
[  264.827069][ T6595] usb 2-1: 0:0: usb_set_interface failed (-22)
[  264.833509][ T6595] usb 2-1: selecting invalid altsetting 0
[  264.839384][ T6595] usb 2-1: 0:0: usb_set_interface failed (-22)
[  264.848029][ T6595] usb 2-1: selecting invalid altsetting 0
[  264.854339][ T6595] usb 2-1: 0:0: usb_set_interface failed (-22)
[  267.093133][ T4477] usb 2-1: USB disconnect, device number 5
[  267.214095][ T6615] loop1: detected capacity change from 0 to 512
[  267.355801][ T6615] EXT4-fs (loop1): Ignoring removed nobh option
[  267.458773][ T2381] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  267.544822][ T6615] EXT4-fs error (device loop1): ext4_orphan_get:1401: inode #15: comm syz.1.551: iget: bad i_size value: 38620345925642
[  267.578545][ T6615] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.551: couldn't read orphan inode 15 (err -117)
[  267.667864][ T6615] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,,errors=continue. Quota mode: writeback.
[  267.910624][ T2381] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  267.992067][ T2381] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBA, skipping
[  268.949198][ T2381] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  268.968658][ T2381] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  269.032112][ T6638] loop5: detected capacity change from 0 to 1024
[  269.044539][ T2381] usb 3-1: Product: syz
[  269.060492][ T2381] usb 3-1: Manufacturer: syz
[  269.065131][ T2381] usb 3-1: SerialNumber: syz
[  269.080484][ T6638] hfsplus: unable to parse mount options
[  269.173150][ T6638] netlink: 'syz.5.559': attribute type 10 has an invalid length.
[  269.200845][ T4228] Bluetooth: hci3: command 0x0406 tx timeout
[  269.209603][ T2381] usb 3-1: config 0 descriptor??
[  269.218926][ T6638] netlink: 40 bytes leftover after parsing attributes in process `syz.5.559'.
[  269.228547][ T6638] device team0 entered promiscuous mode
[  269.235094][ T6638] bridge0: port 1(team0) entered blocking state
[  269.241596][ T6638] bridge0: port 1(team0) entered disabled state
[  269.347385][ T6616] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  269.368985][ T6616] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  269.531259][ T2381] usb 3-1: ucan: probing device on interface #0
[  269.587110][ T6648] loop5: detected capacity change from 0 to 512
[  269.913460][ T2381] usb 3-1: ucan: invalid EP count (1)
[  269.986471][ T2381] usb 3-1: ucan: probe failed; try to update the device firmware
[  270.544713][ T6648] EXT4-fs (loop5): mounted filesystem without journal. Opts: grpquota,auto_da_alloc,minixdf,,errors=continue. Quota mode: writeback.
[  270.593400][ T6648] ext4 filesystem being mounted at /31/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  270.607005][ T6663] loop0: detected capacity change from 0 to 512
[  270.687623][ T6663] EXT4-fs error (device loop0): ext4_orphan_get:1401: inode #15: comm syz.0.562: iget: bad i_size value: 38620345925642
[  270.712882][ T6668] netlink: 'syz.1.563': attribute type 1 has an invalid length.
[  270.723148][ T6663] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.562: couldn't read orphan inode 15 (err -117)
[  270.749477][ T6668] netlink: 'syz.1.563': attribute type 2 has an invalid length.
[  270.761185][ T6663] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  270.863991][ T6670] loop1: detected capacity change from 0 to 512
[  270.889428][ T4477] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  270.979493][ T4228] usb 3-1: USB disconnect, device number 11
[  271.138797][ T4477] usb 4-1: Using ep0 maxpacket: 32
[  271.142053][ T6684] loop5: detected capacity change from 0 to 512
[  271.153668][ T6670] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  271.212145][ T6685] xt_socket: unknown flags 0x4c
[  271.270084][ T6670] ext4 filesystem being mounted at /134/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  271.896252][ T6684] EXT4-fs (loop5): Ignoring removed nobh option
[  271.919000][ T4477] usb 4-1: config index 0 descriptor too short (expected 29220, got 36)
[  272.462904][ T4477] usb 4-1: config 0 has too many interfaces: 81, using maximum allowed: 32
[  272.475507][ T4477] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 81
[  272.484844][ T4477] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  272.498245][ T6684] EXT4-fs error (device loop5): ext4_orphan_get:1401: inode #15: comm syz.5.570: iget: bad i_size value: 38620345925642
[  272.518707][ T4477] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[  272.538909][ T6684] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.570: couldn't read orphan inode 15 (err -117)
[  272.543059][ T4477] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  272.574001][ T4477] usb 4-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40
[  272.584568][ T4477] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  272.599805][ T6700] loop2: detected capacity change from 0 to 512
[  272.606822][ T6684] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,,errors=continue. Quota mode: writeback.
[  272.625866][ T4477] usb 4-1: config 0 descriptor??
[  272.636282][ T6702] loop0: detected capacity change from 0 to 16
[  272.740001][ T6700] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  272.784045][ T6700] EXT4-fs (loop2): 1 truncate cleaned up
[  273.134790][ T6700] EXT4-fs (loop2): mounted filesystem without journal. Opts: errors=remount-ro,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,barrier,grpjquota=,quota,. Quota mode: writeback.
[  273.214422][ T4477] usblp 4-1:0.0: usblp0: USB Bidirectional printer dev 8 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17
[  273.243327][ T6702] erofs: (device loop0): mounted with root inode @ nid 36.
[  273.807967][ T4293] usb 4-1: USB disconnect, device number 8
[  274.098120][ T4293] usblp0: removed
[  275.540205][ T6739] loop3: detected capacity change from 0 to 512
[  276.540927][ T6742] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  276.906216][ T6739] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  276.968723][ T6739] ext4 filesystem being mounted at /116/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  279.329539][ T6790] loop0: detected capacity change from 0 to 40427
[  279.396784][ T6790] F2FS-fs (loop0): Unrecognized mount option "age_extent_cache" or missing value
[  280.149780][ T6806] loop3: detected capacity change from 0 to 1024
[  280.372746][ T6814] loop1: detected capacity change from 0 to 512
[  280.380233][ T6806] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  280.390022][ T6806] EXT4-fs (loop3): orphan cleanup on readonly fs
[  280.401377][ T6806] EXT4-fs error (device loop3): ext4_free_blocks:6218: comm syz.3.599: Freeing blocks not in datazone - block = 0, count = 4096
[  280.511110][ T6806] EXT4-fs (loop3): 1 orphan inode deleted
[  280.530335][ T6820] netlink: 8 bytes leftover after parsing attributes in process `syz.0.602'.
[  280.559397][ T6806] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  280.789062][ T6814] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  281.281652][ T6814] ext4 filesystem being mounted at /141/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  284.380201][ T6852] loop5: detected capacity change from 0 to 512
[  284.422124][ T6853] loop1: detected capacity change from 0 to 512
[  284.473996][ T6852] EXT4-fs (loop5): Ignoring removed nobh option
[  284.502174][ T6853] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  284.544401][ T6853] EXT4-fs (loop1): 1 truncate cleaned up
[  284.550256][ T6853] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,barrier,grpjquota=,quota,. Quota mode: writeback.
[  285.094699][ T6852] EXT4-fs error (device loop5): ext4_orphan_get:1401: inode #15: comm syz.5.608: iget: bad i_size value: 38620345925642
[  285.129304][ T6852] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.608: couldn't read orphan inode 15 (err -117)
[  285.235716][ T6852] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,,errors=continue. Quota mode: writeback.
[  286.238740][ T4477] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  286.488779][ T4477] usb 6-1: Using ep0 maxpacket: 32
[  287.059847][ T4477] usb 6-1: unable to get BOS descriptor or descriptor too short
[  287.230187][ T4477] usb 6-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[  287.489207][ T4477] usb 6-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb
[  287.500372][ T4477] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  287.508809][ T4477] usb 6-1: Product: syz
[  287.525654][ T4477] usb 6-1: Manufacturer: syz
[  287.538893][ T4477] usb 6-1: SerialNumber: syz
[  287.711305][ T6884] loop1: detected capacity change from 0 to 128
[  287.745271][ T6886] loop0: detected capacity change from 0 to 512
[  287.866932][ T4477] usb 6-1: Limiting number of CPorts to U8_MAX
[  287.879027][ T6886] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  287.919415][ T6886] ext4 filesystem being mounted at /131/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  287.933934][ T4477] usb 6-1: Not enough endpoints found in device, aborting!
[  288.726424][ T6884] loop1: detected capacity change from 0 to 65536
[  288.792222][ T4477] usb 6-1: USB disconnect, device number 3
[  289.051088][ T6884] XFS (loop1): Mounting V5 Filesystem
[  289.221508][ T6884] XFS (loop1): Ending clean mount
[  289.255654][ T6884] XFS (loop1): Quotacheck needed: Please wait.
[  289.273409][ T6931] loop3: detected capacity change from 0 to 512
[  289.339606][ T4293] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  289.367711][ T6931] EXT4-fs (loop3): Ignoring removed nobh option
[  289.536407][ T6928] loop5: detected capacity change from 0 to 512
[  289.566257][ T6931] EXT4-fs error (device loop3): ext4_orphan_get:1401: inode #15: comm syz.3.623: iget: bad i_size value: 38620345925642
[  289.611620][ T6928] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  289.633422][ T6884] XFS (loop1): Quotacheck: Done.
[  289.761955][ T6931] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.623: couldn't read orphan inode 15 (err -117)
[  289.839677][ T6945] netlink: 8 bytes leftover after parsing attributes in process `syz.0.625'.
[  289.848561][ T6945] netlink: 12 bytes leftover after parsing attributes in process `syz.0.625'.
[  289.857687][ T6945] netlink: 'syz.0.625': attribute type 18 has an invalid length.
[  289.887487][ T6945] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  289.896696][ T6945] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  289.905446][ T6945] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  289.914220][ T6945] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  289.929360][ T6945] netlink: 8 bytes leftover after parsing attributes in process `syz.0.625'.
[  289.938769][ T6945] netlink: 12 bytes leftover after parsing attributes in process `syz.0.625'.
[  289.947920][ T6945] netlink: 'syz.0.625': attribute type 18 has an invalid length.
[  290.099596][ T4293] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  290.131362][ T4293] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  290.164917][ T6931] EXT4-fs (loop3): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,,errors=continue. Quota mode: writeback.
[  290.188923][ T4293] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  290.890239][ T6928] EXT4-fs (loop5): 1 truncate cleaned up
[  290.895893][ T6928] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,barrier,grpjquota=,quota,. Quota mode: writeback.
[  291.626322][ T4293] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  291.635891][ T4293] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  291.689300][ T4293] usb 3-1: config 0 descriptor??
[  291.769174][ T6953] loop0: detected capacity change from 0 to 4096
[  291.862966][ T6884] netlink: 56 bytes leftover after parsing attributes in process `syz.1.617'.
[  291.890460][ T6958] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability
[  291.992685][ T4183] XFS (loop1): Unmounting Filesystem
[  292.169307][ T4293] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving
[  292.224780][ T4293] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  293.038894][ T4228] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  293.080423][ T6995] loop1: detected capacity change from 0 to 512
[  293.087342][ T6998] loop7: detected capacity change from 0 to 7
[  293.142398][ T6998] Dev loop7: unable to read RDB block 7
[  293.148033][ T6998]  loop7: unable to read partition table
[  293.157823][ T6998] loop7: partition table beyond EOD, truncated
[  293.180598][ T6998] loop_reread_partitions: partition scan of loop7 (���������C�j̖�P=ý?�}X���	���%��`��ր���{��֐�ȵ4FLQk݊) failed (rc=-5)
[  293.215355][ T7002] loop5: detected capacity change from 0 to 512
[  293.245232][ T6995] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  293.269075][ T6995] ext4 filesystem being mounted at /147/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  293.316876][ T7002] EXT4-fs (loop5): Ignoring removed nobh option
[  293.332869][ T4228] usb 1-1: Using ep0 maxpacket: 32
[  293.343157][ T7002] EXT4-fs error (device loop5): ext4_orphan_get:1401: inode #15: comm syz.5.637: iget: bad i_size value: 38620345925642
[  293.466331][ T7002] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.637: couldn't read orphan inode 15 (err -117)
[  293.479283][ T4228] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  293.508070][ T4228] usb 1-1: config 0 has no interface number 0
[  293.515275][ T7002] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,,errors=continue. Quota mode: writeback.
[  293.719982][ T4228] usb 1-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8
[  293.769429][ T4228] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  294.017087][ T4228] usb 1-1: Product: syz
[  294.028348][ T4228] usb 1-1: Manufacturer: syz
[  294.037487][ T4228] usb 1-1: SerialNumber: syz
[  294.258847][   T13] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  294.366592][ T4228] usb 1-1: config 0 descriptor??
[  294.420761][ T4228] usb 1-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  294.440333][ T4228] usb 1-1: selecting invalid altsetting 1
[  294.447790][ T4228] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  294.589562][ T4228] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  294.600388][ T4228] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  294.615425][ T4228] usb 1-1: media controller created
[  294.710987][   T13] usb 4-1: New USB device found, idVendor=1645, idProduct=0008, bcdDevice=cf.36
[  294.726346][ T4228] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  294.899392][ T4228] usb 1-1: dvb_usb_ce6230: usb_control_msg() failed=-71
[  294.914191][ T4228] zl10353_read_register: readreg error (reg=127, ret==-71)
[  294.952083][ T4228] usb 1-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[  295.007444][   T13] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  295.102893][ T4228] usb 1-1: USB disconnect, device number 11
[  295.125200][ T7032] loop1: detected capacity change from 0 to 512
[  295.174606][   T13] usb 4-1: config 0 descriptor??
[  295.237333][ T4477] usb 3-1: USB disconnect, device number 12
[  295.276662][ T7032] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  295.290474][ T7032] EXT4-fs (loop1): 1 truncate cleaned up
[  295.296171][ T7032] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,barrier,grpjquota=,quota,. Quota mode: writeback.
[  295.711997][   T13] kaweth 4-1:0.0: Firmware present in device.
[  295.784990][ T7037] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  296.118842][   T13] kaweth 4-1:0.0: Statistics collection: 0
[  296.398802][   T13] kaweth 4-1:0.0: Multicast filter limit: 0
[  296.426079][   T13] kaweth 4-1:0.0: MTU: 0
[  296.448729][   T13] kaweth 4-1:0.0: Read MAC address 00:00:00:00:00:00
[  296.491203][   T13] kaweth: probe of 4-1:0.0 failed with error -5
[  296.523870][   T13] usb 4-1: USB disconnect, device number 9
[  296.565392][ T7033] infiniband syz0: set down
[  296.575658][ T7033] infiniband syz0: added bond_slave_0
[  296.741141][ T7033] infiniband syz0: Couldn't open port 1
[  296.865002][ T7033] RDS/IB: syz0: added
[  296.874335][ T7033] smc: adding ib device syz0 with port count 1
[  296.895582][ T7033] smc:    ib device syz0 port 1 has pnetid 
[  297.086512][ T7058] loop3: detected capacity change from 0 to 512
[  300.076945][ T7058] EXT4-fs: error -4 creating inode table initialization thread
[  300.214497][ T7058] EXT4-fs (loop3): mount failed
[  300.869195][ T7093] loop3: detected capacity change from 0 to 512
[  300.907073][ T7093] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  300.993546][ T7093] EXT4-fs (loop3): 1 truncate cleaned up
[  300.999828][ T7093] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,barrier,grpjquota=,quota,. Quota mode: writeback.
[  304.717453][ T7118] loop0: detected capacity change from 0 to 512
[  305.429757][ T7124] loop2: detected capacity change from 0 to 512
[  307.034736][ T7143] loop0: detected capacity change from 0 to 512
[  307.220575][ T7143] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  307.215723][ T7129] syz.3.671 (7129): drop_caches: 2
[  307.304595][ T7143] EXT4-fs (loop0): 1 truncate cleaned up
[  307.310552][ T7143] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,barrier,grpjquota=,quota,. Quota mode: writeback.
[  307.332626][ T7124] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  307.459740][ T7124] ext4 filesystem being mounted at /131/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  309.738879][ T2381] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  310.008903][ T2381] usb 3-1: Using ep0 maxpacket: 32
[  310.149485][ T2381] usb 3-1: config 0 has an invalid interface number: 16 but max is 0
[  310.173721][ T2381] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  310.366812][ T2381] usb 3-1: config 0 has no interface number 0
[  310.387017][ T2381] usb 3-1: config 0 interface 16 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  310.417797][ T2381] usb 3-1: config 0 interface 16 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  310.678857][ T2381] usb 3-1: New USB device found, idVendor=0499, idProduct=102a, bcdDevice=85.2d
[  310.733498][ T2381] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  310.776992][ T2381] usb 3-1: Product: syz
[  310.793847][ T2381] usb 3-1: Manufacturer: syz
[  310.798493][ T2381] usb 3-1: SerialNumber: syz
[  310.899598][ T2381] usb 3-1: config 0 descriptor??
[  310.979129][ T7173] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  311.004964][ T2381] usb 3-1: invalid MIDI in EP 0
[  311.165733][ T2381] snd-usb-audio: probe of 3-1:0.16 failed with error -22
[  311.176099][ T7191] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead.
[  311.230704][ T4508] udevd[4508]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.16/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  311.251635][ T2381] usb 3-1: USB disconnect, device number 13
[  311.388804][ T4228] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  311.415486][ T7195] loop1: detected capacity change from 0 to 512
[  311.474122][ T7195] EXT4-fs (loop1): Ignoring removed nobh option
[  311.510640][ T7195] EXT4-fs error (device loop1): ext4_orphan_get:1401: inode #15: comm syz.1.687: iget: bad i_size value: 38620345925642
[  311.530972][ T7195] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.687: couldn't read orphan inode 15 (err -117)
[  311.550352][ T7195] EXT4-fs (loop1): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,,errors=continue. Quota mode: writeback.
[  311.769453][ T7202] loop5: detected capacity change from 0 to 512
[  311.808036][ T7202] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  312.239190][ T4228] usb 4-1: Using ep0 maxpacket: 16
[  312.378406][ T7202] EXT4-fs (loop5): 1 truncate cleaned up
[  312.384634][ T7202] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,barrier,grpjquota=,quota,. Quota mode: writeback.
[  312.450163][ T4228] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  312.461701][ T4228] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  312.482406][ T4228] usb 4-1: New USB device found, idVendor=06a3, idProduct=0621, bcdDevice= 0.00
[  312.495362][ T4228] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  312.754792][ T7215] NILFS (nbd2): device size too small
[  313.492783][ T4228] usb 4-1: config 0 descriptor??
[  314.291676][ T7223] loop2: detected capacity change from 0 to 1024
[  314.436447][ T2381] Bluetooth: hci5: command 0x0406 tx timeout
[  315.037906][ T4228] saitek 0003:06A3:0621.0003: unknown main item tag 0x0
[  315.132588][ T7223] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.696: bg 0: block 10: padding at end of block bitmap is not set
[  315.154748][ T7223] __quota_error: 14 callbacks suppressed
[  315.154792][ T7223] Quota error (device loop2): write_blk: dquota write failed
[  315.168704][ T7223] Quota error (device loop2): find_free_dqentry: Can't write quota data block 2
[  315.178334][ T7223] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  315.188741][ T7223] EXT4-fs error (device loop2): ext4_acquire_dquot:6209: comm syz.2.696: Failed to acquire dquot type 0
[  315.203338][ T7223] Quota error (device loop2): write_blk: dquota write failed
[  315.210928][ T7223] Quota error (device loop2): find_free_dqentry: Can't write quota data block 2
[  315.223215][ T7223] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota
[  315.233950][ T7223] EXT4-fs error (device loop2): ext4_acquire_dquot:6209: comm syz.2.696: Failed to acquire dquot type 0
[  315.246699][ T7223] EXT4-fs error (device loop2): ext4_free_blocks:6218: comm syz.2.696: Freeing blocks not in datazone - block = 0, count = 4096
[  315.267734][ T7223] Quota error (device loop2): write_blk: dquota write failed
[  315.275719][ T7223] Quota error (device loop2): find_free_dqentry: Can't write quota data block 2
[  315.285570][ T7223] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota
[  315.297517][ T7223] EXT4-fs error (device loop2): ext4_acquire_dquot:6209: comm syz.2.696: Failed to acquire dquot type 0
[  315.315253][ T7223] EXT4-fs (loop2): 1 orphan inode deleted
[  315.321153][ T7223] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  315.749240][ T4228] saitek 0003:06A3:0621.0003: unknown main item tag 0x0
[  315.834568][ T4228] saitek 0003:06A3:0621.0003: unknown main item tag 0x0
[  315.920662][ T4228] saitek 0003:06A3:0621.0003: unknown main item tag 0x0
[  316.008842][ T4228] saitek 0003:06A3:0621.0003: unknown main item tag 0x0
[  316.024718][ T7223] syz.2.696 (7223) used greatest stack depth: 19784 bytes left
[  316.226362][ T4228] saitek 0003:06A3:0621.0003: hidraw0: USB HID v0.00 Device [HID 06a3:0621] on usb-dummy_hcd.3-1/input0
[  316.241076][ T4228] usb 4-1: USB disconnect, device number 10
[  316.408742][ T4249] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  316.453831][ T7239] loop0: detected capacity change from 0 to 512
[  316.468004][ T7237] fido_id[7237]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory
[  316.558768][ T7239] EXT4-fs (loop0): Ignoring removed nobh option
[  316.576620][ T7241] APIC base relocation is unsupported by KVM
[  316.594727][ T7239] EXT4-fs error (device loop0): ext4_orphan_get:1401: inode #15: comm syz.0.701: iget: bad i_size value: 38620345925642
[  316.625734][ T7239] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.701: couldn't read orphan inode 15 (err -117)
[  316.665672][ T7239] EXT4-fs (loop0): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,,errors=continue. Quota mode: writeback.
[  316.842700][ T7249] /dev/loop0: Can't open blockdev
[  316.873933][ T4249] usb 2-1: Using ep0 maxpacket: 16
[  317.065813][ T1421] ieee802154 phy0 wpan0: encryption failed: -22
[  317.072958][ T1421] ieee802154 phy1 wpan1: encryption failed: -22
[  317.489777][ T4249] usb 2-1: device descriptor read/all, error -71
[  319.058977][ T4228] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  319.498907][ T4228] usb 4-1: config index 0 descriptor too short (expected 23569, got 27)
[  319.517724][ T4228] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  319.532178][ T7269] loop1: detected capacity change from 0 to 4096
[  319.619358][ T4228] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  319.639487][ T4228] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  319.658903][ T7269] ntfs3: loop1: Mark volume as dirty due to NTFS errors
[  319.663665][ T4228] usb 4-1: Manufacturer: syz
[  319.715096][ T4228] usb 4-1: config 0 descriptor??
[  319.734836][ T7269] ntfs3: loop1: Failed to load $Extend.
[  320.108740][ T4228] rc_core: IR keymap rc-hauppauge not found
[  320.115612][ T4228] Registered IR keymap rc-empty
[  320.909684][ T4482] usb 1-1: new full-speed USB device number 12 using dummy_hcd
[  321.539096][ T4228] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  321.561939][ T4228] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input7
[  321.710408][ T4228] usb 4-1: USB disconnect, device number 11
[  321.789077][ T7290] loop5: detected capacity change from 0 to 512
[  321.839164][ T4482] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  321.847498][ T4482] usb 1-1: config 0 has no interface number 0
[  321.853746][ T7290] EXT4-fs (loop5): Ignoring removed nobh option
[  321.887640][ T4482] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e
[  321.904089][ T4482] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  321.919923][ T7290] EXT4-fs error (device loop5): ext4_orphan_get:1401: inode #15: comm syz.5.716: iget: bad i_size value: 38620345925642
[  321.921169][ T4482] usb 1-1: config 0 descriptor??
[  321.937508][ T7290] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.716: couldn't read orphan inode 15 (err -117)
[  321.952515][ T7296] loop3: detected capacity change from 0 to 512
[  322.026106][ T4482] usb 1-1: selecting invalid altsetting 1
[  322.091255][ T4482] dvb_ttusb_budget: ttusb_init_controller: error
[  322.122497][ T4482] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB)
[  322.132146][ T7290] EXT4-fs (loop5): mounted filesystem without journal. Opts: nobh,auto_da_alloc,data_err=ignore,,errors=continue. Quota mode: writeback.
[  322.237695][ T7296] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  322.388185][ T4482] DVB: Unable to find symbol cx22700_attach()
[  322.799028][ T7296] ext4 filesystem being mounted at /137/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  324.334092][ T4482] DVB: Unable to find symbol tda10046_attach()
[  324.344353][ T4482] dvb_ttusb_budget: no frontend driver found for device [0b48:1005]
[  324.392694][ T4482] usb 1-1: USB disconnect, device number 12
[  326.189999][ T7334] loop5: detected capacity change from 0 to 32768
[  326.244978][ T7334] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  326.254081][ T7334] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  326.972388][ T7344] hub 1-0:1.0: USB hub found
[  326.979012][ T7344] hub 1-0:1.0: 1 port detected
[  327.128016][ T7345] loop3: detected capacity change from 0 to 512
[  327.232305][ T7345] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem
[  327.266040][ T7334] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms
[  327.283976][ T7345] EXT4-fs (loop3): orphan cleanup on readonly fs
[  327.291742][ T7345] EXT4-fs error (device loop3): mb_free_blocks:1860: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt.
[  327.312742][ T7345] EXT4-fs error (device loop3): ext4_do_update_inode:5218: inode #11: comm syz.3.730: corrupted inode contents
[  327.334257][ T7345] EXT4-fs error (device loop3): ext4_dirty_inode:6054: inode #11: comm syz.3.730: mark_inode_dirty error
[  327.380232][ T7345] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #11: comm syz.3.730: invalid indirect mapped block 327680 (level 0)
[  327.399121][ T7345] EXT4-fs error (device loop3): ext4_do_update_inode:5218: inode #11: comm syz.3.730: corrupted inode contents
[  327.430972][ T7345] EXT4-fs error (device loop3) in ext4_orphan_del:301: Corrupt filesystem
[  327.446021][ T7345] EXT4-fs error (device loop3): ext4_do_update_inode:5218: inode #11: comm syz.3.730: corrupted inode contents
[  327.460362][ T7345] EXT4-fs error (device loop3): ext4_truncate:4279: inode #11: comm syz.3.730: mark_inode_dirty error
[  327.483052][ T7345] EXT4-fs error (device loop3) in ext4_process_orphan:343: Corrupt filesystem
[  327.533352][ T4482] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  327.542624][ T7345] EXT4-fs (loop3): 1 truncate cleaned up
[  327.546337][ T4482] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  327.548323][ T7345] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  327.602302][ T7338] netlink: 12 bytes leftover after parsing attributes in process `syz.2.729'.
[  327.886916][ T7338] loop2: detected capacity change from 0 to 16
[  327.913057][ T4482] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 366ms
[  327.930704][ T7338] erofs: Unknown parameter ''
[  327.948069][ T4482] gfs2: fsid=syz:syz.0: jid=0: Done
[  327.955879][ T7334] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  328.054993][ T7351] loop0: detected capacity change from 0 to 512
[  328.173937][ T7353] loop3: detected capacity change from 0 to 4096
[  328.206796][ T7351] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  328.349719][ T7351] ext4 filesystem being mounted at /165/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  328.627214][ T7353] ntfs3: loop3: Different NTFS' sector size (4096) and media sector size (512)
[  329.950875][ T7353] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  329.971071][ T4483] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  330.062284][ T7372] loop0: detected capacity change from 0 to 128
[  330.095066][ T7372] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  330.106276][ T7372] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  330.229045][ T4483] usb 2-1: Using ep0 maxpacket: 16
[  330.349291][ T4483] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  330.456101][ T4483] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  330.697718][ T4483] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1d00, bcdDevice= 0.00
[  330.869211][ T4483] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  330.956245][ T4483] usb 2-1: config 0 descriptor??
[  331.098336][ T7381] loop0: detected capacity change from 0 to 8
[  332.434553][ T7386] SQUASHFS error: zstd decompression error: 2
[  332.442581][ T7386] SQUASHFS error: zstd decompression failed, data probably corrupt
[  332.450897][ T7386] SQUASHFS error: Failed to read block 0x60: -5
[  332.460874][ T7386] SQUASHFS error: zstd decompression error: 2
[  332.468675][ T7386] SQUASHFS error: zstd decompression failed, data probably corrupt
[  332.476728][ T7386] SQUASHFS error: Failed to read block 0x60: -5
[  332.768772][ T4483] usb 2-1: string descriptor 0 read error: -71
[  332.777337][ T4483] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  332.787844][ T4483] usb 2-1: USB disconnect, device number 8
[  333.121199][ T7398] loop5: detected capacity change from 0 to 512
[  333.173016][ T7398] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  333.238888][ T7398] EXT4-fs (loop5): 1 truncate cleaned up
[  333.244613][ T7398] EXT4-fs (loop5): mounted filesystem without journal. Opts: errors=remount-ro,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,barrier,grpjquota=,quota,. Quota mode: writeback.
[  334.025416][ T7405] loop2: detected capacity change from 0 to 512
[  334.226487][ T7405] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  334.239649][ T7405] ext4 filesystem being mounted at /145/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  335.055008][ T7418] loop5: detected capacity change from 0 to 128
[  335.154723][ T7418] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  335.177935][ T7418] hpfs: filesystem error: improperly stopped
[  335.197318][ T7418] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  335.215610][ T7418] hpfs: You really don't want any checks? You are crazy...
[  335.239603][ T7418] hpfs: hpfs_map_sector(): read error
[  335.245096][ T7418] hpfs: code page support is disabled
[  335.303474][ T7418] hpfs: hpfs_map_4sectors(): unaligned read
[  335.333595][ T7418] hpfs: hpfs_map_4sectors(): unaligned read
[  335.363017][ T7418] hpfs: filesystem error: unable to find root dir
[  339.554138][ T7449] loop3: detected capacity change from 0 to 8
[  339.780784][ T4483] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  340.048800][ T7448] loop5: detected capacity change from 0 to 512
[  340.078129][ T4483] usb 3-1: Using ep0 maxpacket: 16
[  340.185997][ T7448] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  340.212956][ T4483] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  340.219135][ T7448] ext4 filesystem being mounted at /69/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  340.269742][ T4483] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  340.286670][ T4483] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1d00, bcdDevice= 0.00
[  340.296536][ T4483] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  340.324248][ T4483] usb 3-1: config 0 descriptor??
[  341.292582][ T7477] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  341.308890][ T7477] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  341.317240][ T7477] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  341.943552][ T7481] loop3: detected capacity change from 0 to 2048
[  342.127703][ T7481] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  342.838839][ T4483] usb 3-1: string descriptor 0 read error: -71
[  342.845742][ T7487] loop5: detected capacity change from 0 to 256
[  342.867585][ T4483] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[  342.909468][ T7487] exfat: Unknown parameter 'zero_size_dir'
[  342.933417][ T4483] usb 3-1: USB disconnect, device number 14
[  342.959108][ T4570] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  342.993548][ T7492] tipc: Started in network mode
[  343.034716][ T7492] tipc: Node identity ae9b658cbed1, cluster identity 4711
[  343.045570][ T7492] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  343.093813][ T4570] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  343.297980][ T7496] device syzkaller0 entered promiscuous mode
[  343.389545][ T7506] loop3: detected capacity change from 0 to 512
[  343.936656][ T7506] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[  343.948123][ T7506] ext4 filesystem being mounted at /148/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  343.980256][ T7500] 
[  343.982616][ T7500] ======================================================
[  343.989642][ T7500] WARNING: possible circular locking dependency detected
[  343.996667][ T7500] syzkaller #0 Not tainted
[  344.001077][ T7500] ------------------------------------------------------
[  344.008095][ T7500] syz.3.771/7500 is trying to acquire lock:
[  344.013980][ T7500] ffff88805c15a0a8 (&dquot->dq_lock){+.+.}-{3:3}, at: dquot_commit+0x5a/0x410
[  344.022871][ T7500] 
[  344.022871][ T7500] but task is already holding lock:
[  344.030228][ T7500] ffff888020fb0c70 (&ei->i_data_sem){++++}-{3:3}, at: ext4_map_blocks+0x8b2/0x1b30
[  344.039550][ T7500] 
[  344.039550][ T7500] which lock already depends on the new lock.
[  344.039550][ T7500] 
[  344.040289][ T4296] tipc: Node number set to 273311116
[  344.049943][ T7500] 
[  344.049943][ T7500] the existing dependency chain (in reverse order) is:
[  344.049950][ T7500] 
[  344.049950][ T7500] -> #5 (&ei->i_data_sem){++++}-{3:3}:
[  344.049977][ T7500]        down_write+0x38/0x60
[  344.056421][ T7511] loop2: detected capacity change from 0 to 512
[  344.064274][ T7500]        ext4_truncate+0x96d/0x10d0
[  344.064299][ T7500]        ext4_setattr+0xffe/0x19e0
[  344.064314][ T7500]        notify_change+0xbcd/0xee0
[  344.098247][ T7500]        do_truncate+0x197/0x220
[  344.103198][ T7500]        do_sys_ftruncate+0x31b/0x3d0
[  344.108566][ T7500]        do_syscall_64+0x4c/0xa0
[  344.113495][ T7500]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  344.119904][ T7500] 
[  344.119904][ T7500] -> #4 (jbd2_handle){++++}-{0:0}:
[  344.127191][ T7500]        start_this_handle+0x1338/0x15a0
[  344.132817][ T7500]        jbd2__journal_start+0x2b7/0x5a0
[  344.138430][ T7500]        jbd2_journal_start+0x26/0x30
[  344.143782][ T7500]        ocfs2_start_trans+0x374/0x6c0
[  344.149223][ T7500]        ocfs2_modify_bh+0xe5/0x470
[  344.154400][ T7500]        ocfs2_local_read_info+0x13b1/0x16e0
[  344.160366][ T7500]        dquot_load_quota_sb+0x756/0xac0
[  344.166140][ T7500]        dquot_load_quota_inode+0x2d8/0x5d0
[  344.172025][ T7500]        ocfs2_enable_quotas+0x1c3/0x440
[  344.177639][ T7500]        ocfs2_fill_super+0x3a1f/0x4d80
[  344.183170][ T7500]        mount_bdev+0x287/0x3c0
[  344.188002][ T7500]        legacy_get_tree+0xe6/0x180
[  344.193190][ T7500]        vfs_get_tree+0x88/0x270
[  344.198110][ T7500]        do_new_mount+0x24a/0xa40
[  344.203116][ T7500]        __se_sys_mount+0x2d6/0x3c0
[  344.208315][ T7500]        do_syscall_64+0x4c/0xa0
[  344.213237][ T7500]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  344.219636][ T7500] 
[  344.219636][ T7500] -> #3 (&journal->j_trans_barrier){.+.+}-{3:3}:
[  344.228127][ T7500]        down_read+0x44/0x2e0
[  344.232798][ T7500]        ocfs2_start_trans+0x368/0x6c0
[  344.238242][ T7500]        ocfs2_modify_bh+0xe5/0x470
[  344.243419][ T7500]        ocfs2_local_read_info+0x13b1/0x16e0
[  344.249383][ T7500]        dquot_load_quota_sb+0x756/0xac0
[  344.255001][ T7500]        dquot_load_quota_inode+0x2d8/0x5d0
[  344.260905][ T7500]        ocfs2_enable_quotas+0x1c3/0x440
[  344.266527][ T7500]        ocfs2_fill_super+0x3a1f/0x4d80
[  344.272058][ T7500]        mount_bdev+0x287/0x3c0
[  344.276902][ T7500]        legacy_get_tree+0xe6/0x180
[  344.282099][ T7500]        vfs_get_tree+0x88/0x270
[  344.287112][ T7500]        do_new_mount+0x24a/0xa40
[  344.292205][ T7500]        __se_sys_mount+0x2d6/0x3c0
[  344.297393][ T7500]        do_syscall_64+0x4c/0xa0
[  344.302324][ T7500]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  344.308734][ T7500] 
[  344.308734][ T7500] -> #2 (sb_internal#3){.+.+}-{0:0}:
[  344.316214][ T7500]        ocfs2_start_trans+0x269/0x6c0
[  344.321679][ T7500]        ocfs2_acquire_dquot+0x677/0xaf0
[  344.327414][ T7500]        dqget+0x778/0xeb0
[  344.331831][ T7500]        dquot_set_dqblk+0x27/0xf90
[  344.337035][ T7500]        quota_setquota+0x4ac/0x530
[  344.342241][ T7500]        __se_sys_quotactl+0x295/0x6c0
[  344.347701][ T7500]        do_syscall_64+0x4c/0xa0
[  344.352623][ T7500]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  344.359027][ T7500] 
[  344.359027][ T7500] -> #1 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}:
[  344.367879][ T7500]        down_write+0x38/0x60
[  344.372547][ T7500]        ocfs2_create_local_dquot+0x194/0x1750
[  344.378685][ T7500]        ocfs2_acquire_dquot+0x7cb/0xaf0
[  344.384302][ T7500]        dqget+0x778/0xeb0
[  344.388702][ T7500]        dquot_set_dqblk+0x27/0xf90
[  344.393884][ T7500]        quota_setquota+0x4ac/0x530
[  344.399100][ T7500]        __se_sys_quotactl+0x295/0x6c0
[  344.404543][ T7500]        do_syscall_64+0x4c/0xa0
[  344.409459][ T7500]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  344.415856][ T7500] 
[  344.415856][ T7500] -> #0 (&dquot->dq_lock){+.+.}-{3:3}:
[  344.423479][ T7500]        __lock_acquire+0x2c33/0x7c60
[  344.428836][ T7500]        lock_acquire+0x197/0x3f0
[  344.433846][ T7500]        __mutex_lock_common+0x1eb/0x2390
[  344.439552][ T7500]        mutex_lock_nested+0x17/0x20
[  344.444818][ T7500]        dquot_commit+0x5a/0x410
[  344.449737][ T7500]        ext4_write_dquot+0x1f0/0x360
[  344.455092][ T7500]        mark_all_dquot_dirty+0xf9/0x400
[  344.460715][ T7500]        __dquot_alloc_space+0x5d0/0xe20
[  344.466330][ T7500]        ext4_mb_new_blocks+0xf68/0x4940
[  344.471946][ T7500]        ext4_ext_map_blocks+0x191a/0x6650
[  344.477823][ T7500]        ext4_map_blocks+0x981/0x1b30
[  344.483179][ T7500]        _ext4_get_block+0x1d7/0x4e0
[  344.488447][ T7500]        ext4_block_write_begin+0x60f/0x1210
[  344.494417][ T7500]        ext4_write_begin+0x6c2/0x15c0
[  344.499859][ T7500]        ext4_da_write_begin+0x435/0xb30
[  344.505476][ T7500]        generic_perform_write+0x2aa/0x530
[  344.511266][ T7500]        ext4_buffered_write_iter+0x25f/0x3b0
[  344.517322][ T7500]        ext4_file_write_iter+0x773/0x17b0
[  344.523113][ T7500]        vfs_write+0x712/0xd00
[  344.527857][ T7500]        ksys_write+0x14d/0x250
[  344.532687][ T7500]        do_syscall_64+0x4c/0xa0
[  344.537606][ T7500]        entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  344.544152][ T7500] 
[  344.544152][ T7500] other info that might help us debug this:
[  344.544152][ T7500] 
[  344.554361][ T7500] Chain exists of:
[  344.554361][ T7500]   &dquot->dq_lock --> jbd2_handle --> &ei->i_data_sem
[  344.554361][ T7500] 
[  344.567030][ T7500]  Possible unsafe locking scenario:
[  344.567030][ T7500] 
[  344.574468][ T7500]        CPU0                    CPU1
[  344.579812][ T7500]        ----                    ----
[  344.585156][ T7500]   lock(&ei->i_data_sem);
[  344.589553][ T7500]                                lock(jbd2_handle);
[  344.596120][ T7500]                                lock(&ei->i_data_sem);
[  344.603036][ T7500]   lock(&dquot->dq_lock);
[  344.607438][ T7500] 
[  344.607438][ T7500]  *** DEADLOCK ***
[  344.607438][ T7500] 
[  344.615570][ T7500] 5 locks held by syz.3.771/7500:
[  344.620573][ T7500]  #0: ffff8880295754f0 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0x2bf/0x370
[  344.629782][ T7500]  #1: ffff888067312460 (sb_writers#5){.+.+}-{0:0}, at: vfs_write+0x28a/0xd00
[  344.638641][ T7500]  #2: ffff888020fb0de8 (&sb->s_type->i_mutex_key#9){++++}-{3:3}, at: ext4_buffered_write_iter+0xa6/0x3b0
[  344.649972][ T7500]  #3: ffff888020fb0c70 (&ei->i_data_sem){++++}-{3:3}, at: ext4_map_blocks+0x8b2/0x1b30
[  344.659875][ T7500]  #4: ffffffff8c23f118 (dquot_srcu){....}-{0:0}, at: rcu_lock_acquire+0x5/0x30
[  344.668911][ T7500] 
[  344.668911][ T7500] stack backtrace:
[  344.674783][ T7500] CPU: 1 PID: 7500 Comm: syz.3.771 Not tainted syzkaller #0
[  344.682150][ T7500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[  344.692212][ T7500] Call Trace:
[  344.695491][ T7500]  <TASK>
[  344.698418][ T7500]  dump_stack_lvl+0x168/0x230
[  344.703086][ T7500]  ? load_image+0x3b0/0x3b0
[  344.707661][ T7500]  ? show_regs_print_info+0x20/0x20
[  344.712844][ T7500]  ? print_circular_bug+0x12b/0x1a0
[  344.718032][ T7500]  check_noncircular+0x274/0x310
[  344.722950][ T7500]  ? add_chain_block+0x940/0x940
[  344.727874][ T7500]  ? lockdep_lock+0xdc/0x1e0
[  344.732549][ T7500]  ? __lock_acquire+0x13ad/0x7c60
[  344.737572][ T7500]  ? mark_lock+0x94/0x320
[  344.741894][ T7500]  __lock_acquire+0x2c33/0x7c60
[  344.746746][ T7500]  ? hlock_conflict+0x59/0x1f0
[  344.751511][ T7500]  ? check_noncircular+0x16f/0x310
[  344.756613][ T7500]  ? add_chain_block+0x940/0x940
[  344.761552][ T7500]  ? lockdep_lock+0xdc/0x1e0
[  344.766141][ T7500]  ? verify_lock_unused+0x140/0x140
[  344.771324][ T7500]  ? lockdep_unlock+0x134/0x2d0
[  344.776166][ T7500]  ? lockdep_lock+0x1e0/0x1e0
[  344.780830][ T7500]  ? check_noncircular+0x16f/0x310
[  344.785926][ T7500]  ? mark_lock+0x94/0x320
[  344.790246][ T7500]  ? __lock_acquire+0x13ad/0x7c60
[  344.795269][ T7500]  lock_acquire+0x197/0x3f0
[  344.799763][ T7500]  ? dquot_commit+0x5a/0x410
[  344.804340][ T7500]  ? __might_sleep+0xf0/0xf0
[  344.808913][ T7500]  ? read_lock_is_recursive+0x10/0x10
[  344.814272][ T7500]  ? rcu_lock_release+0x5/0x20
[  344.819016][ T7500]  ? dquot_commit+0x5a/0x410
[  344.823591][ T7500]  __mutex_lock_common+0x1eb/0x2390
[  344.828777][ T7500]  ? dquot_commit+0x5a/0x410
[  344.833358][ T7500]  ? __might_sleep+0xf0/0xf0
[  344.837933][ T7500]  ? mutex_lock_io_nested+0x60/0x60
[  344.843119][ T7500]  mutex_lock_nested+0x17/0x20
[  344.847875][ T7500]  dquot_commit+0x5a/0x410
[  344.852275][ T7500]  ? __ext4_journal_start_sb+0x1bd/0x360
[  344.857950][ T7500]  ext4_write_dquot+0x1f0/0x360
[  344.862789][ T7500]  mark_all_dquot_dirty+0xf9/0x400
[  344.867887][ T7500]  __dquot_alloc_space+0x5d0/0xe20
[  344.873000][ T7500]  ext4_mb_new_blocks+0xf68/0x4940
[  344.878132][ T7500]  ? ext4_mb_pa_callback+0xd0/0xd0
[  344.883249][ T7500]  ? ext4_ext_check_overlap+0x15f/0x560
[  344.888833][ T7500]  ? ext4_inode_to_goal_block+0x313/0x450
[  344.894541][ T7500]  ext4_ext_map_blocks+0x191a/0x6650
[  344.899817][ T7500]  ? rcu_lock_release+0x5/0x20
[  344.904578][ T7500]  ? ext4_ext_release+0x10/0x10
[  344.909412][ T7500]  ? rwsem_write_trylock+0x12f/0x1b0
[  344.914691][ T7500]  ext4_map_blocks+0x981/0x1b30
[  344.919529][ T7500]  ? ext4_issue_zeroout+0x250/0x250
[  344.924720][ T7500]  _ext4_get_block+0x1d7/0x4e0
[  344.929479][ T7500]  ? ext4_get_block+0x40/0x40
[  344.934142][ T7500]  ext4_block_write_begin+0x60f/0x1210
[  344.939688][ T7500]  ? ext4_es_is_delayed+0x40/0x40
[  344.944695][ T7500]  ? ext4_print_free_blocks+0x390/0x390
[  344.950226][ T7500]  ? __ext4_journal_start_sb+0x1bd/0x360
[  344.955856][ T7500]  ext4_write_begin+0x6c2/0x15c0
[  344.960789][ T7500]  ? ext4_readahead+0x110/0x110
[  344.965625][ T7500]  ? seqcount_lockdep_reader_access+0x120/0x1c0
[  344.971852][ T7500]  ? lockdep_hardirqs_on+0x94/0x140
[  344.977039][ T7500]  ext4_da_write_begin+0x435/0xb30
[  344.982135][ T7500]  ? ext4_initxattrs+0x110/0x110
[  344.987059][ T7500]  ? ktime_get_coarse_real_ts64+0x10c/0x120
[  344.992937][ T7500]  ? ext4_set_page_dirty+0x320/0x320
[  344.998213][ T7500]  generic_perform_write+0x2aa/0x530
[  345.003491][ T7500]  ? dentry_needs_remove_privs+0xf0/0xf0
[  345.009110][ T7500]  ? grab_cache_page_write_begin+0xa0/0xa0
[  345.014898][ T7500]  ? ext4_write_checks+0x24b/0x2c0
[  345.019996][ T7500]  ext4_buffered_write_iter+0x25f/0x3b0
[  345.025529][ T7500]  ext4_file_write_iter+0x773/0x17b0
[  345.030802][ T7500]  ? ext4_file_read_iter+0x700/0x700
[  345.036066][ T7500]  ? end_current_label_crit_section+0x14b/0x170
[  345.042292][ T7500]  ? memset+0x1e/0x40
[  345.046435][ T7500]  ? iov_iter_init+0xb4/0x170
[  345.051101][ T7500]  vfs_write+0x712/0xd00
[  345.055328][ T7500]  ? file_end_write+0x250/0x250
[  345.060162][ T7500]  ? __fget_files+0x40f/0x480
[  345.064828][ T7500]  ? mutex_lock_nested+0x17/0x20
[  345.069750][ T7500]  ? __fdget_pos+0x2bf/0x370
[  345.074329][ T7500]  ? ksys_write+0x71/0x250
[  345.078818][ T7500]  ksys_write+0x14d/0x250
[  345.083140][ T7500]  ? __ia32_sys_read+0x80/0x80
[  345.087888][ T7500]  ? lockdep_hardirqs_on+0x94/0x140
[  345.093070][ T7500]  do_syscall_64+0x4c/0xa0
[  345.097469][ T7500]  ? clear_bhb_loop+0x30/0x80
[  345.102135][ T7500]  ? clear_bhb_loop+0x30/0x80
[  345.106798][ T7500]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  345.112688][ T7500] RIP: 0033:0x7fcb4a6936c9
[  345.117088][ T7500] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  345.136695][ T7500] RSP: 002b:00007fcb488fa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  345.145092][ T7500] RAX: ffffffffffffffda RBX: 00007fcb4a8e9fa0 RCX: 00007fcb4a6936c9
[  345.153133][ T7500] RDX: 0000000000000007 RSI: 00002000000002c0 RDI: 0000000000000001
[  345.161090][ T7500] RBP: 00007fcb4a715f91 R08: 0000000000000000 R09: 0000000000000000
[  345.169051][ T7500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  345.177003][ T7500] R13: 00007fcb4a8ea038 R14: 00007fcb4a8e9fa0 R15: 00007ffc0206d2c8
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  345.184987][ T7500]  </TASK>
[  345.195818][ T4296] Bluetooth: hci1: command 0x0409 tx timeout
[  345.220608][ T4570] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  345.234219][ T7511] EXT4-fs (loop2): Ignoring removed nobh option
[  345.339311][ T7503] tipc: Resetting bearer <eth:syzkaller0>
[  345.464957][ T7511] EXT4-fs: error -4 creating inode table initialization thread
[  345.472923][ T7511] EXT4-fs (loop2): mount failed
[  345.501313][ T7503] tipc: Disabling bearer <eth:syzkaller0>
[  345.581436][ T4570] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  346.695929][ T4570] device hsr_slave_0 left promiscuous mode
[  346.702497][ T4570] device hsr_slave_1 left promiscuous mode
[  346.709216][ T4570] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  346.716624][ T4570] batman_adv: batadv0: Removing interface: batadv_slave_0
[  346.737806][ T4570] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  346.780277][ T4570] batman_adv: batadv0: Removing interface: batadv_slave_1
[  346.809673][ T4570] device bridge_slave_1 left promiscuous mode
[  346.815877][ T4570] bridge0: port 2(bridge_slave_1) entered disabled state
[  346.841238][ T4570] device bridge_slave_0 left promiscuous mode
[  346.847439][ T4570] bridge0: port 1(bridge_slave_0) entered disabled state
[  346.872910][ T4570] device veth1_macvtap left promiscuous mode
[  346.890415][ T4570] device veth0_macvtap left promiscuous mode
[  346.896444][ T4570] device veth1_vlan left promiscuous mode
[  346.909071][ T4570] device veth0_vlan left promiscuous mode
[  346.994094][ T4570] team0 (unregistering): Port device team_slave_1 removed
[  347.005302][ T4570] team0 (unregistering): Port device team_slave_0 removed
[  347.017888][ T4570] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  347.030231][ T4570] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  347.070539][ T4570] bond0 (unregistering): Released all slaves
[  347.816053][ T4570] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  347.826567][ T4570] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  347.891525][ T4570] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  347.902490][ T4570] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  347.951479][ T4570] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  347.961789][ T4570] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  347.992420][ T4570] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  348.002986][ T4570] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  348.072520][ T4570] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  348.132962][ T4570] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  348.192594][ T4570] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  348.242106][ T4570] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  348.330536][ T4570] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  348.389402][ T4570] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  348.432424][ T4570] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  348.483504][ T4570] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  348.571437][ T4570] tipc: Left network mode
[  348.576921][ T4570] tipc: Left network mode
[  349.041967][ T4570] bridge0: port 3(gretap0) entered disabled state
[  349.051688][ T4570] bridge0: port 3(gretap0) entered disabled state
[  349.060423][ T4570] device gretap0 left promiscuous mode
[  349.065940][ T4570] bridge0: port 3(gretap0) entered disabled state
[  349.078249][ T4570] device gretap0 left promiscuous mode
[  349.083814][ T4570] bridge0: port 3(gretap0) entered disabled state
[  349.762482][ T4570] device hsr_slave_0 left promiscuous mode
[  349.768929][ T4570] device hsr_slave_1 left promiscuous mode
[  349.775074][ T4570] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  349.783209][ T4570] batman_adv: batadv0: Removing interface: batadv_slave_0
[  349.790927][ T4570] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  349.798309][ T4570] batman_adv: batadv0: Removing interface: batadv_slave_1
[  349.805964][ T4570] device bridge_slave_1 left promiscuous mode
[  349.812356][ T4570] bridge0: port 2(bridge_slave_1) entered disabled state
[  349.821582][ T4570] device bridge_slave_0 left promiscuous mode
[  349.827705][ T4570] bridge0: port 1(bridge_slave_0) entered disabled state
[  349.837437][ T4570] device hsr_slave_0 left promiscuous mode
[  349.843709][ T4570] device hsr_slave_1 left promiscuous mode
[  349.850058][ T4570] bridge0: port 1(team0) entered disabled state
[  349.858544][ T4570] device hsr_slave_0 left promiscuous mode
[  349.864819][ T4570] device hsr_slave_1 left promiscuous mode
[  349.870995][ T4570] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  349.878369][ T4570] batman_adv: batadv0: Removing interface: batadv_slave_0
[  349.886028][ T4570] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  349.893526][ T4570] batman_adv: batadv0: Removing interface: batadv_slave_1
[  349.901354][ T4570] device bridge_slave_1 left promiscuous mode
[  349.907489][ T4570] bridge0: port 2(bridge_slave_1) entered disabled state
[  349.915387][ T4570] device bridge_slave_0 left promiscuous mode
[  349.922039][ T4570] bridge0: port 1(bridge_slave_0) entered disabled state
[  349.933746][ T4570] device veth1_macvtap left promiscuous mode
[  349.939896][ T4570] device veth0_macvtap left promiscuous mode
[  349.945994][ T4570] device veth1_vlan left promiscuous mode
[  349.951801][ T4570] device veth0_vlan left promiscuous mode
[  349.957958][ T4570] device veth1_macvtap left promiscuous mode
[  349.964008][ T4570] device veth0_macvtap left promiscuous mode
[  349.970099][ T4570] device veth1_vlan left promiscuous mode
[  349.975828][ T4570] device veth0_vlan left promiscuous mode
[  349.982296][ T4570] device veth1_macvtap left promiscuous mode
[  349.988281][ T4570] device veth0_macvtap left promiscuous mode
[  349.994623][ T4570] device veth1_vlan left promiscuous mode
[  350.000736][ T4570] device veth0_vlan left promiscuous mode
[  350.141088][ T4570] team0 (unregistering): Port device team_slave_1 removed
[  350.152837][ T4570] team0 (unregistering): Port device team_slave_0 removed
[  350.164729][ T4570] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  350.176376][ T4570] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  350.212910][ T4570] bond0 (unregistering): Released all slaves
[  350.306503][ T4313] smc: removing ib device syz0
[  350.387112][ T4570] bond0 (unregistering): Released all slaves
[  350.442001][ T4570] bond0 (unregistering): (slave bond1): Releasing backup interface
[  350.450764][ T4570] bond1 (unregistering): Released all slaves
[  350.488289][ T4570] team0 (unregistering): Port device team_slave_1 removed
[  350.499119][ T4570] team0 (unregistering): Port device team_slave_0 removed
[  350.510692][ T4570] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  350.523141][ T4570] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  350.560276][ T4570] bond0 (unregistering): Released all slaves